Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: July 2026

1,869 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 19

  • CVE-2026-14191
    31Monitor

    WinRAR / UnRAR RAR5 recovery-volume (.rev) out-of-bounds heap write in RecVolumes5::ReadHeader

    HighCVSS 7.8Proof of conceptEPSS 0%

    rarlab · winrarJul 1, 2026

  • CVE-2026-13731
    28Monitor

    WPBot <= 8.4.9 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

    HighCVSS 7.2Proof of conceptEPSS 0%

    quantumcloud · wpbot – ai chatbot for live support, lead generation, ai servicesJul 1, 2026

  • CVE-2026-7829
    28Monitor

    UltraVNC repeater authenticated out-of-bounds write in rule parser via oversized token

    HighCVSS 7.2No exploitEPSS 0%

    uvnc · ultravncJul 1, 2026

  • CVE-2026-7838
    35Monitor

    UltraVNC viewer heap buffer overflow via integer overflow in RFB connection-failure reason length

    HighCVSS 8.7No exploitEPSS 1%

    uvnc · ultravncJul 1, 2026

  • CVE-2026-11794
    32Monitor

    Advanced Form Integration < 2.1.1 - Unauthenticated Privilege Escalation via Breakdance Form Role Mapping

    HighCVSS 8.1No exploitEPSS 0%

    unknown · advanced form integration — connect forms to 200+ appsJul 1, 2026

  • CVE-2026-11387
    40Plan

    SMS Alert <= 3.9.5 - Unauthenticated Privilege Escalation via Arbitrary Password Reset

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    cozyvision1 · sms alert – sms & otp for woocommerce, order notifications & abandoned cart recoveryJul 1, 2026

  • CVE-2026-57517
    37Monitor

    Control Web Panel < 0.9.8.1225 Blind SQL Injection via userRes Parameter

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    control web panel · control web panelJul 1, 2026

  • CVE-2026-58025
    23Monitor

    Remote Code Execution via Unsafe Deserialization in LogItem Import

    MediumCVSS 5.9Proof of conceptEPSS 0%

    mediawiki · mediawikiJul 1, 2026

  • CVE-2026-8857
    1Monitor

    Full RCE using EasyTimeline Extension

    CVSS 0.0Proof of conceptEPSS 2%

    mediawiki · mediawikiJul 1, 2026

  • CVE-2026-20217
    30Monitor

    ClamAV PESpin File Format Processing Out-of-Bounds Memory Corruption Vulnerability

    HighCVSS 7.5Proof of conceptEPSS 0%

    clamav · clamavJul 1, 2026

  • CVE-2026-46680
    29Monitor

    containerd user ID handling bypass allows runAsNonRoot evasion

    HighCVSS 7.3Proof of conceptEPSS 0%

    linuxfoundation · containerdJul 1, 2026

  • CVE-2026-57736
    29Monitor

    WordPress HubSpot plugin <= 11.3.51 - Sensitive Data Exposure vulnerability

    HighCVSS 7.4No exploitEPSS 0%

    hubspot · hubspotJul 1, 2026

  • CVE-2026-49119
    34Monitor

    Gradio < 6.16.0 Path Traversal via FileExplorer.preprocess()

    HighCVSS 8.7No exploitEPSS 0%

    gradio project · gradioJul 1, 2026

  • CVE-2026-50160
    41Plan

    Mass Assignment via Onboarding Endpoint Allows Unauthenticated JWT_SECRET Overwrite

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    hoppscotch · hoppscotchJul 1, 2026

  • CVE-2026-51947
    39Monitor

    An issue in Pivotal CRM 6.6.4.08 and systems using patch-ghi-15381-cwe-502-20251225.zip (fixed in Pivotal CRM 6.6.5.10 and Patch_CWE502_2026

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    Jul 1, 2026

  • CVE-2026-58457
    38Monitor

    Shenzhen Aitemi M300 MT02 Unauthenticated OS Command Injection via protocol.csp

    CriticalCVSS 9.3Proof of conceptEPSS 2%

    shenzhen aitemi e commerce co. ltd. · m300 wi-fi repeaterJul 1, 2026

  • CVE-2026-14382
    38Monitor

    Insufficient validation of untrusted input in ANGLE in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to potentially perform

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    google · chromeJul 1, 2026

  • CVE-2026-14431
    35Monitor

    Type Confusion in V8 in Google Chrome prior to 150.0.7871.46 allowed a remote attacker to execute arbitrary code inside a sandbox via a craf

    HighCVSS 8.8Proof of conceptEPSS 0%

    google · chromeJul 1, 2026

  • CVE-2026-55794
    34Monitor

    Craft CMS: Potential authenticated Remote Code Execution via referrer redirect

    HighCVSS 8.7Proof of conceptEPSS 0%

    craftcms · cmsJul 1, 2026

  • CVE-2026-10104
    17Monitor

    Product Video Gallery for Woocommerce <= 1.5.1.8 - Authenticated (Shop Manager+) Stored Cross-Site Scripting via custom_thumbnail Parameter

    MediumCVSS 4.4Proof of conceptEPSS 0%

    nikhilgadhiya · product video gallery for woocommerceJul 2, 2026

  • CVE-2026-13459
    21Monitor

    JetFormBuilder <= 3.6.3 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via 'context' Parameter

    MediumCVSS 5.3No exploitEPSS 0%

    jetmonsters · jetformbuilder — dynamic blocks form builderJul 2, 2026

  • CVE-2026-5524
    40Plan

    Divi Form Builder <= 5.1.8 - Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via 'acceptFileTypes' Parameter

    CriticalCVSS 9.8Proof of conceptEPSS 3%

    divi engine · divi form builderJul 2, 2026

  • CVE-2026-12166
    22Monitor

    A NULL pointer dereference vulnerability for driver `GFAC_Sys_x64.sys` in Little Orbit GFAC allows a local attacker to cause a denial of ser

    MediumCVSS 5.5Proof of conceptEPSS 0%

    little orbit · gamefirst anti-cheatJul 2, 2026

  • CVE-2026-50746
    41Plan

    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to ex

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    ui · unifi connect applicationJul 2, 2026

  • CVE-2026-58455
    38Monitor

    Dockwatch 0.6.567 Unauthenticated OS Command Injection via ajax/compose.php

    CriticalCVSS 9.2Proof of conceptEPSS 8%

    notifiarr · dockwatchJul 2, 2026

  • CVE-2026-58467
    33Monitor

    Cockpit CMS 2.14.0 - Path Traversal Local File Inclusion via index.php

    HighCVSS 8.2Proof of conceptEPSS 1%

    cockpit-hq · cockpitJul 2, 2026

  • CVE-2026-59099
    37Monitor

    Apereo CAS 7.3.0 < 8.0.0-RC6 - AES-GCM Nonce Reuse Information Disclosure

    CriticalCVSS 9.3No exploitEPSS 0%

    apereo · casJul 2, 2026

  • CVE-2026-54998
    35Monitor

    Microsoft Exchange Online Elevation of Privilege Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 0%

    microsoft · exchange onlineJul 2, 2026

  • CVE-2026-13768
    38Monitor

    Gardyn IoT Hub Use of Hard-coded Credentials

    CriticalCVSS 9.5Proof of conceptEPSS 0%

    gardyn · gardyn home firmwareJul 2, 2026

  • CVE-2026-54477
    20Monitor

    Gardyn IoT Hub Improper Neutralization of HTTP Headers for Scripting Syntax

    MediumCVSS 5.1Proof of conceptEPSS 0%

    gardyn · gardyn home firmwareJul 2, 2026

  • CVE-2026-55726
    27Monitor

    Gardyn IoT Hub Exposure of Sensitive System Information to an Unauthorized Control Sphere

    MediumCVSS 6.9Proof of conceptEPSS 0%

    gardyn · gardyn home firmwareJul 2, 2026

  • CVE-2026-12960
    24Monitor

    An Improper Export of Android Application Components vulnerability in ASUS Router App allows a third-party application on the same device to

    MediumCVSS 6.0Proof of conceptEPSS 0%

    asus · router appJul 2, 2026

  • CVE-2026-8932
    30Monitor

    incomplete mTLS config matching in conn reuse

    HighCVSS 7.5Proof of conceptEPSS 0%

    haxx · curlJul 3, 2026

  • CVE-2026-14459
    35Monitor

    Argument Injection in TUBITAK BILGEM's pardus-software

    HighCVSS 8.8Proof of conceptEPSS 0%

    tubitak bilgem software technologies research institute · pardus-softwareJul 3, 2026

  • CVE-2026-14620
    18Monitor

    webpack-dev-server vulnerable to cross-site request forgery via internal developer endpoints

    MediumCVSS 4.7Proof of conceptEPSS 0%

    webpack.js · webpack-dev-serverJul 3, 2026

  • CVE-2026-20896
    40Plan

    Gitea Docker image trusts spoofable reverse-proxy headers by default

    CriticalCVSS 9.8Proof of conceptEPSS 2%

    gitea · gitea open source git serverJul 3, 2026

  • CVE-2026-22874
    38Monitor

    Gitea webhook and migration allow-list filtering permits SSRF

    CriticalCVSS 9.6Proof of conceptEPSS 0%

    gitea · gitea open source git serverJul 3, 2026

  • CVE-2026-27771
    32Monitor

    Gitea Composer package source links use insufficient permission checks

    HighCVSS 8.2Proof of conceptEPSS 1%

    gitea · gitea open source git serverJul 3, 2026

  • CVE-2026-28699
    32Monitor

    Gitea Basic Auth bypasses OAuth2 access token scopes

    HighCVSS 8.1Proof of conceptEPSS 0%

    gitea · gitea open source git serverJul 3, 2026

  • CVE-2026-58289
    34Monitor

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    HighCVSS 8.3Proof of conceptEPSS 1%

    microsoft · edge chromiumJul 3, 2026

  • CVE-2026-58424
    35Monitor

    Permanent Fork PR Workflow Approval Gate Bypass

    HighCVSS 8.9Proof of conceptEPSS 0%

    gitea · gitea open source git serverJul 3, 2026

  • CVE-2026-54424
    33Monitor

    An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege.

    HighCVSS 8.4Proof of conceptEPSS 0%

    unity · parsecJul 3, 2026

  • CVE-2026-14628
    22Monitor

    NousResearch hermes-agent Live Webhook Endpoint base.py extract_media path traversal

    MediumCVSS 5.5Proof of conceptEPSS 0%

    nousresearch · hermes-agentJul 4, 2026

  • CVE-2026-53359
    35Monitor

    KVM: x86: Fix shadow paging use-after-free due to unexpected role

    HighCVSS 8.8Proof of conceptEPSS 0%

    linux · linux kernelJul 4, 2026

  • CVE-2026-53360
    35Monitor

    KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use

    HighCVSS 8.8Proof of conceptEPSS 0%

    linux · linux kernelJul 4, 2026

  • CVE-2026-53361
    28Monitor

    af_unix: Set gc_in_progress to true in unix_gc().

    HighCVSS 7.1Proof of conceptEPSS 0%

    linux · linux kernelJul 4, 2026

  • CVE-2026-53362
    61This week

    ipv6: account for fraggap on the paged allocation path

    HighCVSS 7.8KEVWeaponizedEPSS 0%

    linux · linux kernelJul 4, 2026

  • CVE-2026-59509
    36Monitor

    Unauthenticated arbitrary MongoDB collection read in cve-search

    CriticalCVSS 9.2Proof of conceptEPSS 1%

    cve-search · cve-searchJul 5, 2026

  • CVE-2026-14762
    22Monitor

    code-projects Hotel and Tourism Reservation Room Management rooms.php sql injection

    MediumCVSS 5.5Proof of conceptEPSS 0%

    code-projects · hotel and tourism reservationJul 5, 2026

  • CVE-2026-14802
    23Monitor

    react create-react-app react-dev-utils openBrowser.js startBrowserProcess os command injection

    MediumCVSS 5.5Proof of conceptEPSS 2%

    react · create-react-appJul 6, 2026

  • CVE-2026-40047
    37Monitor

    Apache Camel: Camel-Docling: Insufficient validation of custom CLI arguments enables argument injection and path traversal in DoclingProducer

    CriticalCVSS 9.1Proof of conceptEPSS 2%

    apache · camelJul 6, 2026

  • CVE-2026-40859
    32Monitor

    Apache Camel: Camel-Vertx-Http: Unsafe Java deserialization of HTTP response bodies via a raw ObjectInputStream when transferException is enabled

    HighCVSS 8.1Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-42527
    32Monitor

    Apache Camel: Permissive default ObjectInputFilter pattern admits java.net.** and enables DNS-based information disclosure

    HighCVSS 8.1Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-43865
    32Monitor

    Apache Camel: Camel-Hazelcast: Unsafe Java deserialization in default-configured managed Hazelcast instances enables remote code execution

    HighCVSS 8.1Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-43866
    29Monitor

    Apache Camel, Apache Camel: Camel JMS - CVE-2026-40860 fix bypass via DefaultExchangeHolder

    HighCVSS 7.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-43867
    39Monitor

    Apache Camel: Camel-PQC: The AWS Secrets Manager key-lifecycle manager deserializes persisted key metadata with java.io.ObjectInputStream and no ObjectInputFilt

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46453
    21Monitor

    Apache Camel: Camel-Elasticsearch-Rest-Client: Exchange header constants without the Camel prefix bypass inbound HTTP header filtering, allowing untrusted clien

    MediumCVSS 5.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46454
    39Monitor

    Apache Camel: Camel-Cometd: Inbound Bayeux message headers are mapped into the Exchange without a HeaderFilterStrategy, allowing unauthenticated clients to inje

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46455
    39Monitor

    Apache Camel: Camel-Keycloak: The access-token validity window is not verified because the IS_ACTIVE check is missing from the TokenVerifier, allowing expired t

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46456
    39Monitor

    Apache Camel: Camel-AWS2-SQS: Inbound message attributes are mapped into the Exchange without an inbound HeaderFilterStrategy, allowing a message sender to inje

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46457
    30Monitor

    Apache Camel: Camel-NATS: Inbound NATS message headers are mapped into the Exchange without a configured HeaderFilterStrategy, allowing a client that can publis

    HighCVSS 7.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46584
    14Monitor

    Apache Camel Mail: The mail producer applied attacker-supplied message headers as JavaMail session properties, allowing an attacker to influence SMTP parameters

    LowCVSS 3.7Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46585
    30Monitor

    Apache Camel Lucene: The query control headers used non-Camel-prefixed names (QUERY, RETURN_LUCENE_DOCS) that bypass the HTTP header filter, allowing an HTTP cl

    HighCVSS 7.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46590
    35Monitor

    Apache Camel: Camel-PQC: The HashiCorp Vault and AWS Secrets Manager key-lifecycle managers deserialize persisted key metadata with java.io.ObjectInputStream an

    HighCVSS 8.8Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46591
    32Monitor

    Apache Camel: Camel-Neo4j: JSON property names from the CamelNeo4jMatchProperties header are interpolated into the Cypher WHERE clause without validation, allow

    HighCVSS 8.2Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46592
    30Monitor

    Apache Camel: Camel-CXF: The SOAP operation-selection headers used non-Camel-prefixed names (operationName, operationNamespace) that bypass the HTTP header filt

    HighCVSS 7.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46726
    30Monitor

    Apache Camel Vertx Websocket: The inbound consumer maps externally-supplied WebSocket query and path parameters into the Exchange without a HeaderFilterStrategy

    HighCVSS 7.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-48203
    36Monitor

    Apache Camel: Camel-Solr: The SolrParam. and SolrField. Exchange header prefixes used non-Camel-prefixed names that bypass the HTTP header filter, allowing an H

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-48204
    39Monitor

    Apache Camel: Camel-MongoDB-GridFS: The gridfs.* control headers used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to sw

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-48205
    36Monitor

    Apache Camel DNS: The dns.* and term Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to infl

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-48206
    21Monitor

    Apache Camel JIRA: A set of non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to drive arbitrary JIRA issue op

    MediumCVSS 5.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-49086
    26Monitor

    Apache Camel Dapr: Pub/Sub consumer copied the inbound CloudEvent's pub/sub-name and topic into producer-direction routing headers, allowing an actor who can pu

    MediumCVSS 6.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-49097
    26Monitor

    Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing a

    MediumCVSS 6.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-49098
    21Monitor

    Apache Camel: Camel-Kafka: The kafka.OVERRIDE_TOPIC (and other kafka.*) Exchange header constants used non-Camel-prefixed names that bypass the upstream HTTP he

    MediumCVSS 5.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-49099
    21Monitor

    Apache Camel Salesforce: Non-Camel-prefixed Exchange header constants bypass the HTTP header filter, allowing an HTTP client to influence internal behaviour

    MediumCVSS 5.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-49365
    21Monitor

    Apache Camel: Camel-Netty-HTTP: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP respo

    MediumCVSS 5.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-53913
    39Monitor

    Apache Camel Keycloak: KeycloakSecurityPolicy verifies the bearer access token only inside its role and permission checks, so in the default configuration the t

    CriticalCVSS 9.8Proof of conceptEPSS 1%

    apache · camelJul 6, 2026

  • CVE-2026-55993
    30Monitor

    Apache Camel Atmosphere Websocket: The inbound consumer maps externally-supplied WebSocket query parameters into the Exchange without a HeaderFilterStrategy, al

    HighCVSS 7.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-55994
    30Monitor

    Apache Camel Iggy: The inbound consumer maps externally-supplied Iggy message user-headers into the Exchange without a HeaderFilterStrategy, allowing injection

    HighCVSS 7.5Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-56139
    21Monitor

    Apache Camel Undertow: The muteException consumer option defaulted to false, so a processing error returned the full Java stack trace in the HTTP response body,

    MediumCVSS 5.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46587
    29Monitor

    Apache Camel: Couchbase: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

    HighCVSS 7.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-46588
    29Monitor

    Apache Camel: CouchDB: Non-Camel-prefixed Exchange headers bypass HeaderFilterStrategy allowing operation override from untrusted input

    HighCVSS 7.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-49042
    29Monitor

    Apache Camel: langchain4j-tools: filter tool argument headers against declared parameters

    HighCVSS 7.3Proof of conceptEPSS 0%

    apache · camelJul 6, 2026

  • CVE-2026-43825
    33Monitor

    Apache OpenNLP :: Core :: ML :: LibSVM: Unsafe Java Deserialization in SvmDoccatModel

    HighCVSS 7.3No exploitEPSS 13%

    apache · opennlpJul 6, 2026

  • CVE-2026-13753
    30Monitor

    Certain HP DeskJet All in One – Potential Information Disclosure

    HighCVSS 7.5Proof of conceptEPSS 0%

    hp inc · hp deskjet 2820 aio printerJul 6, 2026

  • CVE-2026-11405
    39Monitor

    Hidden backdoor authentication mechanism in multiple versions of Tenda firmware allows admin access to web management interface

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    tenda · firmwareJul 6, 2026

  • CVE-2026-34038
    40Plan

    Coolify authenticated remote command injection leading to RCE and secret exfiltration

    CriticalCVSS 9.9Proof of conceptEPSS 2%

    coollabsio · coolifyJul 6, 2026

  • CVE-2026-53647
    27Monitor

    FOSSBilling vulnerable to unauthenticated API key configuration disclosure via guest Serviceapikey get_info endpoint

    MediumCVSS 6.9Proof of conceptEPSS 0%

    fossbilling · fossbillingJul 6, 2026

  • CVE-2026-34048
    39Monitor

    Coolify: Missing authorization on terminal websocket bootstrap routes allows low-privileged members to execute commands on team servers

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    coollabsio · coolifyJul 7, 2026

  • CVE-2026-12277
    34Monitor

    Frontend File Manager Plugin <= 23.6 - Unauthenticated Arbitrary File Deletion via Saved File Metadata Path Traversal

    HighCVSS 8.7Proof of conceptEPSS 0%

    unknown · frontend file manager pluginJul 7, 2026

  • CVE-2026-33264
    39Monitor

    Apache Airflow: DAG author RCE on webserver via unrestricted import_string() in BaseSerialization.deserialize()

    CriticalCVSS 9.8No exploitEPSS 1%

    apache · airflowJul 7, 2026

  • CVE-2026-12352
    23Monitor

    Incorrect Authorization

    MediumCVSS 5.9Proof of conceptEPSS 0%

    digi international · portserver ts 1/2/4Jul 7, 2026

  • CVE-2026-12948
    19Monitor

    Stored Cross-Site Scripting (XSS)

    MediumCVSS 4.8Proof of conceptEPSS 0%

    digi international · digi portserver tsJul 7, 2026

  • CVE-2026-23697
    34Monitor

    Vtiger CRM < 8.4.0 Authenticated File Upload RCE via Documents Module

    HighCVSS 8.7Proof of conceptEPSS 0%

    vtiger · vtiger crmJul 7, 2026

  • CVE-2026-23698
    34Monitor

    Vtiger CRM 8.4.0 Authenticated RCE via Module Import File Upload

    HighCVSS 8.6Proof of conceptEPSS 1%

    vtiger · vtiger crmJul 7, 2026

  • CVE-2026-57851
    34Monitor

    MSI KernCoreLib64.sys Privilege Escalation via IOCTL Handlers

    HighCVSS 8.5Proof of conceptEPSS 0%

    micro-star international (msi) · kerncorelib64.sysJul 7, 2026

  • CVE-2026-55592
    15Monitor

    Dashy: XSS in workspace url parameter

    LowCVSS 3.9Proof of conceptEPSS 0%

    lissy93 · dashyJul 7, 2026

  • CVE-2026-57239
    31Monitor

    Foxit PDF Editor/Reader Local Privilege Escalation

    HighCVSS 7.8Proof of conceptEPSS 0%

    foxit · pdf editorJul 8, 2026

  • CVE-2026-41042
    36Monitor

    Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server vi

    CriticalCVSS 9.1Proof of conceptEPSS 1%

    apache software foundation · apache gravitinoJul 8, 2026

  • CVE-2026-6854
    30Monitor

    My Calendar <= 3.7.8 - Unauthenticated SQL Injection via 'mc_auth' and 'mc_host' Parameters

    HighCVSS 7.5Proof of conceptEPSS 1%

    joedolson · my calendar – accessible event managerJul 8, 2026