Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: June 2026

365 records · 26 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 4 of 4

  • CVE-2026-53264
    31Monitor

    net/sched: act_api: use RCU with deferred freeing for action lifecycle

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linux kernelJun 25, 2026

  • CVE-2026-9086
    29Monitor

    Keycloak: keycloak: cross-site scripting (xss) via case-insensitive uri validation bypass

    HighCVSS 7.3Proof of conceptEPSS 0%

    redhat · build of keycloakJun 25, 2026

  • CVE-2026-41120
    39Monitor

    Dell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Acceptance of Extraneous Untrusted Data With Trusted Data vulnerabilit

    CriticalCVSS 9.8No exploitEPSS 0%

    dell · wyse management suiteJun 25, 2026

  • CVE-2026-54836
    37Monitor

    WordPress Filter & Grids plugin <= 3.11.5 - SQL Injection vulnerability

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    ymc · ymc filterJun 25, 2026

  • CVE-2026-54088
    37Monitor

    File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE)

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    filebrowser · filebrowserJun 25, 2026

  • CVE-2026-54917
    31Monitor

    SeaweedFS: Path traversal in the S3 and Iceberg REST gateways allows cross-bucket access

    HighCVSS 7.8Proof of conceptEPSS 1%

    seaweedfs · seaweedfsJun 25, 2026

  • CVE-2026-57588
    7Monitor

    SQL Injection in Nessus via Malicious Scan Result File Import

    LowCVSS 1.8Proof of conceptEPSS 0%

    tenable · nessusJun 25, 2026

  • CVE-2026-37149
    30Monitor

    GROCERY-STORE-MANAGEMENT-SYSTEM-USING-PHP-AND-MYSQL-PHPMYADMIN v1.0 was discovered to contain a SQL injection vulnerability in the scost par

    HighCVSS 7.7Proof of conceptEPSS 0%

    Jun 25, 2026

  • CVE-2026-6330
    25Monitor

    ML-KEM ARM64 NEON ciphertext comparison only compares half of the input

    MediumCVSS 6.3Proof of conceptEPSS 0%

    wolfssl · wolfsslJun 25, 2026

  • CVE-2026-56766
    35Monitor

    Hydra - Stack Buffer Overflow in NTLM Authentication Handler

    HighCVSS 8.6Proof of conceptEPSS 2%

    vanhauser-thc · thc-hydraJun 25, 2026

  • CVE-2026-40083
    28Monitor

    Cacti: SQL Injection in managers.php

    HighCVSS 7.2Proof of conceptEPSS 0%

    cacti · cactiJun 25, 2026

  • CVE-2025-71324
    34Monitor

    Flowise - Arbitrary File Read via chatId Parameter

    HighCVSS 8.7Proof of conceptEPSS 1%

    flowiseai · flowiseJun 25, 2026

  • CVE-2025-71334
    38Monitor

    Flowise - Arbitrary File Access via Missing Chat Flow ID Validation

    CriticalCVSS 9.3Proof of conceptEPSS 4%

    flowiseai · flowiseJun 25, 2026

  • CVE-2025-71336
    37Monitor

    Flowise - Unsandboxed Remote Code Execution via Custom MCP

    CriticalCVSS 9.3No exploitEPSS 1%

    flowiseai · flowiseJun 25, 2026

  • CVE-2025-71338
    40Plan

    Flowise through 2.2.7 - Arbitrary File Write to Remote Code Execution via document-store API

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    flowiseai · flowiseJun 25, 2026

  • CVE-2026-10823
    30Monitor

    YMC Smart Filter < 3.11.3 - Unauthenticated Private/Draft Post Disclosure

    HighCVSS 7.5Proof of conceptEPSS 1%

    unknown · ymc filterJun 26, 2026

  • CVE-2026-8380
    26Monitor

    Frontend File Manager Plugin <= 23.6 - Author+ Arbitrary Post Deletion

    MediumCVSS 6.5Proof of conceptEPSS 0%

    unknown · frontend file manager pluginJun 26, 2026

  • CVE-2026-56011
    28Monitor

    WordPress MapPress Maps for WordPress plugin <= 2.97.3 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1Proof of conceptEPSS 0%

    chrisvrichardson · mappress maps for wordpressJun 26, 2026

  • CVE-2026-56062
    37Monitor

    WordPress Quotes llama plugin <= 3.1.5 - SQL Injection vulnerability

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    oooorgle · quotes llamaJun 26, 2026

  • CVE-2026-56068
    37Monitor

    WordPress JetEngine plugin <= 3.8.10.2 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    crocoblock. jetimpex inc. · jetengineJun 26, 2026

  • CVE-2026-56070
    37Monitor

    WordPress Advance Product Search plugin <= 1.4.4 - SQL Injection vulnerability

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    themehunk · advance product searchJun 26, 2026

  • CVE-2026-57636
    34Monitor

    WordPress wpForo Forum plugin <= 3.0.9 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    tomdever · wpforo forumJun 26, 2026

  • CVE-2026-0828
    30Monitor

    Kernel driver vulnerability in Safetica Endpoint Client

    HighCVSS 7.5Proof of conceptEPSS 0%

    safetica · endpoint clientJun 26, 2026

  • CVE-2026-39031
    22Monitor

    Lansweeper lsrunase 2.0 and lsencrypt 2.0 use RC4 encryption with a hardcoded 142-byte static key array to encrypt credentials.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    Jun 26, 2026

  • CVE-2026-48770
    20Monitor

    Notepad++ WM_COPYDATA COPYDATA_FULL_CMDLINE local DoS crash

    MediumCVSS 5.0Proof of conceptEPSS 0%

    notepad-plus-plus · notepad\+\+Jun 26, 2026

  • CVE-2026-48778
    31Monitor

    Notepad++: Arbitrary Code Execution via config.xml commandLineInterpreter

    HighCVSS 7.8Proof of conceptEPSS 0%

    notepad-plus-plus · notepad\+\+Jun 26, 2026

  • CVE-2026-48800
    31Monitor

    Notepad++: Arbitrary Code Execution via shortcuts.xml UserCommand Injection

    HighCVSS 7.8Proof of conceptEPSS 0%

    notepad-plus-plus · notepad\+\+Jun 26, 2026

  • CVE-2026-52885
    30Monitor

    Notepad++ TOCTOU: HMAC Checks Disk, Executes from Memory

    HighCVSS 7.5Proof of conceptEPSS 0%

    notepad-plus-plus · notepad\+\+Jun 26, 2026

  • CVE-2026-54350
    39Monitor

    Budibase: Anonymous NoSQL operator injection via published-app query templates

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    budibase · budibaseJun 26, 2026

  • CVE-2026-56876
    34Monitor

    extract-zip unvalidated symlink path traversal

    HighCVSS 8.6Proof of conceptEPSS 0%

    max-mapper · extract-zipJun 26, 2026

  • CVE-2026-52782
    39Monitor

    OpenProject: IDOR through /projects/<A>/settings/project_storages/<A_ps_id> via PATCH parameter "storages_project_storage[project_folder_id]" leads to Access to

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    opf · openprojectJun 26, 2026

  • CVE-2026-49869
    71This week

    Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`

    CriticalCVSS 10.0KEVWeaponizedEPSS 2%

    kestra · kestraJun 26, 2026

  • CVE-2026-53576
    41Plan

    Kestra: Unauthenticated RCE via /configs path-suffix auth-filter bypass

    CriticalCVSS 10.0Proof of conceptEPSS 3%

    kestra · kestraJun 26, 2026

  • CVE-2026-12415
    39Monitor

    Invoice Generator <= 1.0.0 - Unauthenticated Privilege Escalation via Account Takeover via 'user_id' Parameter

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    pravel · invoice generatorJun 27, 2026

  • CVE-2026-12432
    21Monitor

    Stripe Payment Forms by WP Full Pay <= 8.4.3 - Missing Authorization to Unauthenticated Payment Record Manipulation via 'paymentIntentId' Parameter

    MediumCVSS 5.3Proof of conceptEPSS 0%

    themeisle · stripe payment forms by wp full pay – accept credit card payments, donations & subscriptionsJun 27, 2026

  • CVE-2026-3462
    26Monitor

    Frisbii Pay <= 1.8.9 - Missing Authorization to Authenticated (Subscriber+) Payment Token Modification

    MediumCVSS 6.5Proof of conceptEPSS 0%

    reepaydenmark · frisbii payJun 27, 2026

  • CVE-2026-45258
    31Monitor

    Multiple vulnerabilities in the sound(4) mmap path

    HighCVSS 7.8Proof of conceptEPSS 0%

    freebsd · freebsdJun 27, 2026

  • CVE-2026-49413
    28Monitor

    Flaw in Linuxulator execution of setugid binaries

    HighCVSS 7.1Proof of conceptEPSS 0%

    freebsd · freebsdJun 27, 2026

  • CVE-2026-49417
    28Monitor

    Multiple vulnerabilities in the sound(4) mmap path

    HighCVSS 7.0Proof of conceptEPSS 0%

    freebsd · freebsdJun 27, 2026

  • CVE-2026-58055
    25Monitor

    nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length

    MediumCVSS 6.3No exploitEPSS 0%

    nghttp2 · nghttp2Jun 28, 2026

  • CVE-2026-58057
    9Monitor

    Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity

    LowCVSS 2.3Proof of conceptEPSS 1%

    flowiseai · flowiseJun 28, 2026

  • CVE-2026-58058
    27Monitor

    Nmap - Integer Underflow in IPv6 Extension Header Parsing

    MediumCVSS 6.9Proof of conceptEPSS 1%

    nmap · nmapJun 28, 2026

  • CVE-2026-49048
    34Monitor

    Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1

    HighCVSS 8.7Proof of conceptEPSS 0%

    joomcoder · joomcckJun 28, 2026

  • CVE-2026-36848
    30Monitor

    Gigamon GVOS v5.16.1 and below is vulnerable to Directory Traversal in the GVOS H-VUE subsystem.

    HighCVSS 7.5Proof of conceptEPSS 0%

    gigamon · gigavue-osJun 29, 2026

  • CVE-2026-49049
    30Monitor

    Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

    HighCVSS 7.5Proof of conceptEPSS 0%

    ollyo · helix3Jun 29, 2026

  • CVE-2026-56290
    79This week

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

    CriticalCVSS 10.0KEVWeaponizedEPSS 30%

    joomlack · page builder ckJun 29, 2026

  • CVE-2026-43700
    26Monitor

    A cross-origin issue was addressed with improved tracking of security origins.

    MediumCVSS 6.5Proof of conceptEPSS 0%

    apple · safariJun 29, 2026

  • CVE-2026-43724
    31Monitor

    The issue was addressed with improved input sanitization.

    HighCVSS 7.8Proof of conceptEPSS 0%

    apple · ipadosJun 29, 2026

  • CVE-2026-43735
    32Monitor

    The issue was addressed with improved checks.

    HighCVSS 8.1Proof of conceptEPSS 0%

    apple · safariJun 29, 2026

  • CVE-2026-56782
    38Monitor

    Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints

    CriticalCVSS 9.3Proof of conceptEPSS 3%

    gorse-io · gorseJun 29, 2026

  • CVE-2026-37637
    36Monitor

    An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php component

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    Jun 29, 2026

  • CVE-2026-50229
    25Monitor

    Apache Tomcat: XSS in number guess example

    MediumCVSS 6.1Proof of conceptEPSS 4%

    apache · tomcatJun 29, 2026

  • CVE-2026-55957
    30Monitor

    Apache Tomcat: Authentication bypass with JNDIRealm and GSSAPI authenticated bind

    HighCVSS 7.3Proof of conceptEPSS 2%

    apache · tomcatJun 29, 2026

  • CVE-2026-34592
    30Monitor

    Coolify: Cross-Team IDOR via Unscoped Server and Project Lookups Exposes SSH Keys and Infrastructure

    HighCVSS 7.7No exploitEPSS 0%

    coollabsio · coolifyJun 29, 2026

  • CVE-2026-8023
    30Monitor

    Path traversal in Zephyr HTTP server static-filesystem resource handler allows unauthenticated remote arbitrary file read

    HighCVSS 7.5Proof of conceptEPSS 0%

    zephyrproject · zephyrJun 29, 2026

  • CVE-2026-10817
    27Monitor

    Insufficient input validation leading to memory overread

    MediumCVSS 6.9Proof of conceptEPSS 0%

    citrix · netscaler application delivery controllerJun 30, 2026

  • CVE-2026-8451
    35Monitor

    Insufficient input validation leading to memory overread

    HighCVSS 8.8Proof of conceptEPSS 0%

    citrix · netscaler application delivery controllerJun 30, 2026

  • CVE-2026-8452
    65This week

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

    HighCVSS 8.8KEVWeaponizedEPSS 1%

    citrix · netscaler application delivery controllerJun 30, 2026

  • CVE-2026-58116
    37Monitor

    LLaMA-Factory 0.9.5 Remote Code Execution via WebUI Model Path

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    hiyouga · llama-factoryJun 30, 2026

  • CVE-2026-48282
    83Now

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    CriticalCVSS 10.0KEVWeaponizedEPSS 42%

    adobe · coldfusionJun 30, 2026

  • CVE-2026-48313
    38Monitor

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    CriticalCVSS 9.3Proof of conceptEPSS 2%

    adobe · coldfusionJun 30, 2026

  • CVE-2026-58138
    40Plan

    Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

    CriticalCVSS 9.3Proof of conceptEPSS 9%

    conductor-oss · conductorJun 30, 2026

  • CVE-2026-10134
    60This week

    Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows

    CriticalCVSS 10.0WeaponizedEPSS 2%

    langflow · langflowJun 30, 2026

  • CVE-2026-7873
    40Plan

    Code Injection Vulnerability in Code Validation Endpoint

    CriticalCVSS 9.9WeaponizedEPSS 1%

    langflow · langflowJun 30, 2026

  • CVE-2026-13934
    38Monitor

    Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had comp

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    google · chromeJun 30, 2026