Security Box Score — June 11, 2026

194 CVEs published, led by Google (27).

194 CVEs published June 11, 2026: 20 critical, 96 high, 71 medium, 7 low; 1 in the KEV catalog at press time; 7 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 169 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	3053	7514	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

343 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	95	1062	84	663	314	1	11	2	0.2	7.8	.0013	-116 ▼
google	590	765	66	406	272	21	77	6	0.8	8.1	.0023	+590 ▲
microsoft	207	743	55	512	170	6	286	19	2.6	7.8	.0044	+195 ▲
red hat	39	133	8	54	60	11	2	0	0.0	6.5	.0031	+34 ▲
apple	14	66	1	21	42	2	88	7	10.6	5.7	.0019	-1 ▼
canonical	0	14	0	4	5	5	0	0	0.0	5.5	.0009	0
freebsd	0	7	0	5	2	0	0	0	0.0	7.8	.0020	0
debian	2	2	0	0	2	0	1	0	0.0	6.5	.0023	+2 ▲

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
netgear	17	17	0	0	16	1	0	0	0.0	4.3	.0024	+17 ▲
cisco	3	15	5	4	6	0	56	9	60.0	7.5	.0694	+3 ▲
palo alto networks	9	11	1	2	7	1	13	2	18.2	5.9	.0022	+8 ▲
ivanti	4	9	4	5	0	0	25	5	55.6	8.8	.5187	+3 ▲
checkpoint	3	9	1	5	3	0	3	1	11.1	7.5	.0410	+3 ▲
fortinet	2	9	4	3	2	0	28	3	33.3	8.3	.0076	+2 ▲
vmware	3	4	0	2	2	0	7	1	25.0	6.7	.0036	+3 ▲
zyxel	2	3	0	0	3	0	9	0	0.0	6.5	.0017	+2 ▲

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	56	90	12	36	39	2	33	1	1.1	7.2	.0053	+52 ▲
gitlab	11	18	0	4	12	2	4	2	11.1	4.8	.0024	+11 ▲
mozilla	5	11	3	4	4	0	9	0	0.0	7.5	.0032	+1 ▲
docker	2	5	0	5	0	0	0	0	0.0	8.8	.0021	+2 ▲
drupal	0	5	1	1	3	0	4	1	20.0	5.1	.0026	0
github	0	2	1	1	0	0	0	0	0.0	8.1	.0347	0
wordpress	0	0	0	0	0	0	2	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
adobe	123	125	4	47	72	2	19	2	1.6	5.5	.0021	+123 ▲
ibm	10	59	13	28	18	0	6	0	0.0	7.5	.0028	+10 ▲
oracle	1	29	9	16	4	0	27	1	3.4	8.1	.0027	+1 ▲
progress	5	9	1	7	1	0	6	0	0.0	7.5	.0036	+5 ▲
solarwinds	3	6	2	3	1	0	10	4	66.7	7.8	.6082	+3 ▲
veeam	1	4	2	2	0	0	1	0	0.0	9.0	.0052	+1 ▲
zohocorp	0	2	0	1	1	0	0	0	0.0	7.1	.0104	0
atlassian	0	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	KEV/100	Med CVSS	Med EPSS	Δ
synology	5	23	2	5	13	3	0	0.0	5.6	.0025	+5 ▲
d-link	8	10	0	3	2	5	3	0.0	4.2	.0055	+8 ▲
siemens	7	8	0	4	4	0	0	0.0	7.5	.0020	+7 ▲
abb	5	5	0	4	1	0	0	0.0	7.2	.0018	+5 ▲
dahua	3	3	0	1	1	1	0	0.0	6.9	.0036	+3 ▲
hitachi energy	0	2	0	0	2	0	0	0.0	5.7	.0014	0
schneider electric	1	1	0	1	0	0	0	0.0	7.1	.0023	+1 ▲
tp-link	0	0	0	0	0	0	1	—	—	—	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
spring	68	69	2	27	39	1	0	6.5	.0023	+68 ▲
sourcecodester	35	57	0	0	24	33	0	2.1	.0026	+35 ▲
edimax	0	51	0	32	0	19	1	7.4	.0059	0
concrete cms	2	46	1	11	13	21	0	6.2	.0015	+2 ▲
open ises	0	44	2	21	21	0	0	7.1	.0021	0
helmholz	0	42	0	39	3	0	0	7.1	.0026	0
mb connect line	0	42	0	39	3	0	0	7.1	.0026	0
totolink	3	38	0	26	1	11	0	8.9	.0191	+3 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-10520	.9991	100.0	10.0
CVE-2026-0257	.9391	99.8	7.8
CVE-2026-20182	.9152	99.8	10.0
CVE-2026-9082	.8832	99.8	9.8
CVE-2026-50751	.8377	99.7	9.3
CVE-2026-42897	.7120	99.4	8.1
CVE-2026-42945	.6805	99.3	9.2
CVE-2026-45498	.6308	99.1	7.5
CVE-2026-49160	.5383	98.9	7.5
CVE-2026-10523	.5187	98.9	9.8

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-10520	10.0	.9991	KEV
CVE-2026-20182	10.0	.9152	KEV
CVE-2026-48172	10.0	.1891	KEV
CVE-2026-45087	10.0	.1296
CVE-2026-49777	10.0	.0166
CVE-2026-8054	10.0	.0158
CVE-2026-49199	10.0	.0134
CVE-2026-11429	10.0	.0115
CVE-2026-43997	10.0	.0098
CVE-2026-20223	10.0	.0083

Most disclosures (vendor)
Vendor	CVEs
google	758
linux	525
microsoft	236
adobe	123
red hat	76
apache	73
spring	69
ibm	59
sourcecodester	57
edimax	51

Most KEV additions (YTD)
Vendor	KEV
microsoft	19
cisco	9
apple	7
google	6
ivanti	5
solarwinds	4
berriai	3
fortinet	3
smartertools	3
adobe	2

Most-affected ecosystems
Ecosystem	Advisories
Maven	24
Packagist	22
PyPI	11
npm	3
crates.io	2

Fastest to KEV
CVE	Vendor	Days
CVE-2025-48595	Google	0
CVE-2026-10520	ivanti	0
CVE-2026-11645	Google	0
CVE-2026-20245	Cisco	0
CVE-2026-28318	SolarWinds	0
CVE-2026-34926	Trend Micro, Inc.	0
CVE-2026-41091	Microsoft	0
CVE-2026-42897	Microsoft	0
CVE-2026-45247	Mirasvit	0
CVE-2026-45321	@tanstack	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1667
CVE-2021-27102	n/a	2021-11-17	1667
CVE-2021-27101	n/a	2021-11-17	1667
CVE-2021-27103	n/a	2021-11-17	1667
CVE-2021-21017	Adobe	2021-11-17	1667
CVE-2021-28550	Adobe	2021-11-17	1667
CVE-2021-42013	Apache Software Foundation	2021-11-17	1667
CVE-2021-41773	Apache Software Foundation	2021-11-17	1667
CVE-2021-30858	Apple	2021-11-17	1667
CVE-2021-30860	Apple	2021-11-17	1667

Transactions

EXPLOIT PUBLISHED — axios: 9 CVEs (CVE-2026-44486, CVE-2026-44487, CVE-2026-44488, CVE-2026-44489, CVE-2026-44490, CVE-2026-44492, CVE-2026-44494, CVE-2026-44495, CVE-2026-44496). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2026-11816 (keras-team/keras). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-11945 (DALIBO PostgreSQL Anonymizer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-44705 (raszi node-tmp). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-49982 (raszi node-tmp). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-5497 (vllm-project/vllm). Public exploit reference added.

DUE DATE PASSED — CVE-2026-45321 (@tanstack arktype-adapter). CISA remediation deadline was June 10, 2026; still in catalog.

DUE DATE PASSED — CVE-2026-48027 (nrwl nx-console). CISA remediation deadline was June 10, 2026; still in catalog.

Yesterday's Results

How to read these box scores · glossary

194 CVEs published. 25 box scores, 169 table rows — nothing truncated.

CVE-2026-10520CRITICAL

Ivanti Sentry

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS    %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .9991   100.0   YES

AFFECTED
  Product  Versions     Fixed
  Sentry   unspecified  R10.5.2

TIMELINE
  Jun 1   Reserved by CNA
  Jun 9   Patch available
  Jun 9   Public exploit reference published
  Jun 11  Added to CISA KEV, due Jun 14
  Jun 11  Published (CNA: ivanti)

CWE-78 · CNA: ivanti · CVSS v3.1 · 3 references · NVD status: Analyzed · KEV due June 14, 2026

CVE-2026-10795HIGH

davidanderson UpdraftPlus: WP Backup & Migration Plugin — UpdraftPlus: WP Backup & Migration Plugin <= 1.26.4 - Unauthenticated Authentication Bypass via UpdraftCentral udrpc

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0358   88.5     —

AFFECTED
  Product                                    Versions     Fixed
  UpdraftPlus: WP Backup & Migration Plugin  unspecified  —

TIMELINE
  Jun 3   Reserved by CNA
  Jun 11  Published (CNA: Wordfence)

CWE-347 · CNA: Wordfence · CVSS v3.1 · 4 references · NVD status: Deferred

CVE-2026-49261CRITICAL

MariaDB server has unsafe parameter handling in `wsrep_notify_cmd`

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0158   73.6     —

AFFECTED
  Product  Versions                Fixed
  server   >= 10.6.1, < 10.6.27 –  —

TIMELINE
  May 28  Reserved by CNA
  Jun 11  Published (CNA: GitHub_M)

CWE-78 · CNA: GitHub_M · CVSS v3.1 · 15 references · NVD status: Modified

CVE-2026-42647CRITICAL

Beardev JoomSport — WordPress JoomSport plugin <= 5.7.7 - SQL Injection vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  N  L    9.3   .0132   68.7     —

AFFECTED
  Product    Versions  Fixed
  JoomSport  n/a –     5.7.8

TIMELINE
  Apr 29  Reserved by CNA
  Jun 11  Published (CNA: Patchstack)

CWE-89 · CNA: Patchstack · CVSS v3.1 · 1 reference · NVD status: Deferred

CVE-2026-44249HIGH

Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0103   60.9     —

AFFECTED
  Product  Versions                          Fixed
  netty    >= 4.2.0.Final, < 4.2.15.Final –  —

TIMELINE
  May 5   Reserved by CNA
  Jun 11  Published (CNA: GitHub_M)

CWE-284, CWE-697 · CNA: GitHub_M · CVSS v3.1 · 22 references · NVD status: Modified

CVE-2026-44494HIGH

Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  C  H  H  N    8.7   .0102   60.7     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.0.0, < 1.16.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-441, CWE-1321 · CNA: GitHub_M · CVSS v3.1 · 51 references · NVD status: Modified

CVE-2026-48547HIGH

lingdojo kana-dojo — KanaDojo < 0.1.18 Command Injection via patchNotesData.json in release.yml

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   P   H   H   N    8.5   .0091   57.3     —

AFFECTED
  Product    Versions     Fixed
  kana-dojo  unspecified  —

TIMELINE
  May 21  Reserved by CNA
  Jun 11  Published (CNA: VulnCheck)

CWE-78 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2026-44492HIGH

Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  N  N    8.6   .0087   56.1     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.0.0, < 1.16.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-918 · CNA: GitHub_M · CVSS v3.1 · 45 references · NVD status: Modified

CVE-2026-44495HIGH

Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  L  H    7.7   .0084   55.0     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.0.0, < 1.15.2 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-94, CWE-1321 · CNA: GitHub_M · CVSS v3.1 · 50 references · NVD status: Analyzed

CVE-2026-11774HIGH

Red Hat Red Hat Directory Server 11.5 E4S for RHEL 8 — 389-ds-base: 389-ds-base: integer overflow in sasl packet length bypasses size limit leading to heap buffer overflow

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  L  L  H    7.6   .0080   53.7     —

AFFECTED
  Product                                                                Versions     Fixed
  Red Hat Directory Server 11.5 E4S for RHEL 8                           unspecified  8060020260702180044.0ca98e7e
  Red Hat Directory Server 11.7 E4S for RHEL 8                           unspecified  8080020260702180836.f969626e
  Red Hat Directory Server 11.9 for RHEL 8                               unspecified  8100020260702145313.37ed7c03
  Red Hat Directory Server 12.2 E4S for RHEL 9                           unspecified  9020020260703060155.1674d574
  Red Hat Directory Server 12.4 E4S for RHEL 9                           unspecified  9040020260703055735.1674d574
  Red Hat Enterprise Linux 10                                            unspecified  0:3.2.0-8.el10_2
  Red Hat Enterprise Linux 10.0 Extended Update Support                  unspecified  0:3.0.6-19.el10_0
  Red Hat Enterprise Linux 7 Extended Lifecycle Support                  unspecified  0:1.3.11.1-13.el7_9
  Red Hat Enterprise Linux 8                                             unspecified  8100020260626120929.25e700aa
  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support  unspecified  8040020260629123121.96015a92
  + 13 more

TIMELINE
  Jun 9   Reserved by CNA
  Jun 11  Published (CNA: redhat)

CWE-190 · CNA: redhat · CVSS v3.1 · 20 references · NVD status: Awaiting Analysis

CVE-2026-44488HIGH

Axios: Allocation of Resources Without Limits or Throttling in axios

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0067   49.2     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.7.0, < 1.16.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-770 · CNA: GitHub_M · CVSS v3.1 · 51 references · NVD status: Modified

CVE-2026-44496HIGH

Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0067   49.2     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.0.0, < 1.16.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-400, CWE-1333 · CNA: GitHub_M · CVSS v3.1 · 41 references · NVD status: Modified

CVE-2026-44487HIGH

Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   N   N    8.2   .0066   49.0     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.0.0, < 1.16.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-201 · CNA: GitHub_M · CVSS v4.0 · 51 references · NVD status: Modified

CVE-2026-44486HIGH

Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0066   48.8     —

AFFECTED
  Product  Versions              Fixed
  axios    >= 1.0.0, < 1.16.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-200 · CNA: GitHub_M · CVSS v3.1 · 45 references · NVD status: Modified

CVE-2026-42846CRITICAL

MacWarrior clipbucket-v5 — ClipBucket: Remote Play URL Command Injection

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0060   46.2     —

AFFECTED
  Product        Versions          Fixed
  clipbucket-v5  < 5.5.3 - #140 –  —

TIMELINE
  Apr 30  Reserved by CNA
  Jun 11  Published (CNA: GitHub_M)

CWE-78 · CNA: GitHub_M · CVSS v3.1 · 1 reference · NVD status: Deferred

CVE-2026-11816HIGH

keras-team keras-team/keras — Path Traversal in keras-team/keras

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  H  N    8.1   .0056   44.3     —

AFFECTED
  Product           Versions       Fixed
  keras-team/keras  unspecified –  —

TIMELINE
  Jun 9   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: @huntr_ai)

CWE-22 · CNA: @huntr_ai · CVSS v3.1 · 6 references · NVD status: Modified

CVE-2026-45172HIGH

CyberArk Software, a Palo Alto Networks Company PAM Self-Hosted, Privilege Cloud — Idira Privileged Session Manager for SSH (PSMP): Arbitrary Command Execution via Improper Neutralization of Special Elements used in an OS Command

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   L    8.7   .0055   43.6     —

AFFECTED
  Product                           Versions  Fixed
  PAM Self-Hosted, Privilege Cloud  14.0 –    14.0.6

TIMELINE
  May 8   Reserved by CNA
  Jun 11  Published (CNA: palo_alto)

CWE-78 · CNA: palo_alto · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2026-45171HIGH

CyberArk Software, a Palo Alto Networks Company Privileged Session Manager, Vault — Idira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input Validation

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0054   43.2     —

AFFECTED
  Product                            Versions  Fixed
  Privileged Session Manager, Vault  14.0 –    14.0.5

TIMELINE
  May 8   Reserved by CNA
  Jun 11  Published (CNA: palo_alto)

CWE-22 · CNA: palo_alto · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2026-49973CRITICAL

nesquena hermes-webui — Hermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   H   L    9.2   .0054   43.2     —

AFFECTED
  Product       Versions     Fixed
  hermes-webui  unspecified  —

TIMELINE
  Jun 2   Reserved by CNA
  Jun 11  Published (CNA: VulnCheck)

CWE-306 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Deferred

CVE-2026-5497HIGH

vllm-project vllm-project/vllm — Unbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllm

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0054   42.8     —

AFFECTED
  Product            Versions       Fixed
  vllm-project/vllm  unspecified –  —

TIMELINE
  Apr 3   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: @huntr_ai)

CWE-400, CWE-770 · CNA: @huntr_ai · CVSS v3.1 · 5 references · NVD status: Modified

CVE-2026-49060CRITICAL

Hippoo Hippoo Mobile App for WooCommerce — WordPress Hippoo Mobile App for WooCommerce plugin <= 1.9.4 - Privilege Escalation vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0051   41.4     —

AFFECTED
  Product                            Versions  Fixed
  Hippoo Mobile App for WooCommerce  n/a –     1.9.5

TIMELINE
  May 27  Reserved by CNA
  Jun 11  Published (CNA: Patchstack)

CWE-266 · CNA: Patchstack · CVSS v3.1 · 1 reference · NVD status: Deferred

CVE-2026-45177CRITICAL

CyberArk Software, a Palo Alto Networks Company Conjur Cloud (Edge Finding only) — Idira Secrets Manager SaaS Edge: Authentication Bypass of an internal validation mechanism

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   H   H   N    9.1   .0050   40.7     —

AFFECTED
  Product                           Versions  Fixed
  Conjur Cloud (Edge Finding only)  1.0 –     1.8

TIMELINE
  May 8   Reserved by CNA
  Jun 11  Published (CNA: palo_alto)

CWE-284 · CNA: palo_alto · CVSS v4.0 · 1 reference · NVD status: Analyzed

CVE-2026-49982HIGH

raszi node-tmp — tmp: Type-confusion bypass of _assertPath in tmp@0.2.6 allows path traversal via non-string prefix/postfix/template

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  H  L    8.2   .0050   40.3     —

AFFECTED
  Product   Versions  Fixed
  node-tmp  0.2.6 –   —

TIMELINE
  Jun 2   Reserved by CNA
  Jun 11  Public exploit reference published
  Jun 11  Published (CNA: GitHub_M)

CWE-20, CWE-22 · CNA: GitHub_M · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-48546HIGH

lingdojo kana-dojo — KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   P   H   H   N    8.5   .0049   39.7     —

AFFECTED
  Product    Versions     Fixed
  kana-dojo  unspecified  —

TIMELINE
  May 21  Reserved by CNA
  Jun 11  Published (CNA: VulnCheck)

CWE-693 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Deferred

CVE-2026-6250HIGH

TP-Link Systems Inc. Tapo C110 v2 — Authenticated Format String Injection on TP-Link Tapo C110

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   A   L   N   L   N   N   H   H    7.0   .0046   38.1     —

AFFECTED
  Product       Versions     Fixed
  Tapo C110 v2  unspecified  —

TIMELINE
  Apr 13  Reserved by CNA
  Jun 11  Published (CNA: TPLink)

CWE-134 · CNA: TPLink · CVSS v4.0 · 4 references · NVD status: Analyzed

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-44250	7.5	37.9	netty	netty	CWE-400	Netty: Memory Exhaustion in RedisArrayAggregator due to Deeply Nested Arrays
CVE-2026-44890	7.5	37.9	netty	netty	CWE-400	Netty has Unbounded Direct Memory Consumption in its RedisDecoder
CVE-2026-11561	9.8	37.2	Soagen Informatics Technologies Software and Consulting Inc.	Apinizer	CWE-917	SSTI in Soagen Informatics' Apinizer
CVE-2026-3329	8.7	37.1	Sonatype	Nexus Repository Manager	CWE-307	Nexus Repository Manager - Improper Restriction of Excessive Authentication A…
CVE-2026-44705	7.7	36.0	raszi	node-tmp	CWE-22	tmp: Path Traversal via unsanitized prefix/postfix enables directory escape
CVE-2026-41699	9.8	35.7	Spring	Spring for GraphQL	CWE-502	Unsafe Deserialization in Spring GraphQL
CVE-2026-53806	7.7	34.6	OpenClaw	OpenClaw	CWE-367	OpenClaw < 2026.5.12 - Shell Option Parsing Bypass in Exec Revalidation
CVE-2026-53810	7.7	34.7	OpenClaw	OpenClaw	CWE-829	OpenClaw < 2026.5.18 - Arbitrary Code Execution via Unscanned Marketplace Run…
CVE-2026-39494	9.3	31.8	WBW Plugins	Product Filter by WBW	CWE-89	WordPress Product Filter by WBW plugin <= 3.1.2 - SQL Injection vulnerability
CVE-2026-40999	8.6	31.1	Spring	Spring Web Services	CWE-918	Spring WS SSRF via unvalidated WS-Addressing reply destinations
CVE-2026-53777	8.6	30.6	PerryTS	perry	CWE-22	Perry < 0.5.1159 Path Traversal via ArtifactReady WebSocket
CVE-2026-46519	8.8	30.3	Flux159	mcp-server-kubernetes	CWE-863	mcp-server-kubernetes Affected By Tool Access Control Bypass: Presentation-La…
CVE-2026-7250	7.5	29.7	GitLab	GitLab	CWE-770	Allocation of Resources Without Limits or Throttling in GitLab
CVE-2026-40997	5.3	29.2	Spring	Spring Web Services	CWE-209	SOAP security faults leak Spring Security account state
CVE-2026-45060	9.8	29.1	MacWarrior	clipbucket-v5	CWE-89	ClipBucket: Blind SQL Injection in progress_video.php
CVE-2026-45178	8.4	28.8	CyberArk Software, a Palo Alto Networks Company	Conjur Enterprise	CWE-284	Idira Secrets Manager Self-Hosted: Improper Access Control in Internal Cluste…
CVE-2026-7852	9.8	28.4	Limatek System Inc.	LimRAD NAC	CWE-434	Unrestricted File Upload in Limatek's LimRAD NAC
CVE-2026-40998	8.2	27.8	Spring	Spring Web Services	CWE-611	Jaxp13 XPath XXE via StreamSource and SAXSource
CVE-2026-41856	7.5	27.8	Spring	Spring for GraphQL	CWE-284	Spring GraphQL Annotation Detection Vulnerability
CVE-2026-7870	8.8	26.8	IBM	i	CWE-427	IBM i is Affected by Privilege Escalation []
CVE-2026-53816	8.6	26.8	OpenClaw	OpenClaw	CWE-862	OpenClaw < 2026.5.18 - Exec Lifecycle Event Forgery via Paired Node
CVE-2026-11839	9.9	25.9	Başarsoft Information Technologies Inc.	Rotaban	CWE-434	Arbitrary File Upload in Basarsoft's Rotaban
CVE-2026-38581	9.8	25.2	n/a	n/a	CWE-89	SQL Injection vulnerability in damasac thaipalliative_lte through version 3.0…
CVE-2026-47172	9.5	24.6	duck-organization	quest-bot	CWE-829	Quest Bot: Untrusted pull request code can be built and deployed by privilege…
CVE-2026-47171	8.8	24.6	duck-organization	quest-bot	CWE-116	Quest Bot: Reminder messages allow stored mass mentions through `@everyone` a…
CVE-2026-53781	5.3	24.7	steipete	summarize	CWE-770	Summarize < 0.17.0 Disk Exhaustion via Uncapped Media Download
CVE-2026-1500	6.5	24.4	GitLab	GitLab	CWE-770	Allocation of Resources Without Limits or Throttling in GitLab
CVE-2026-47174	9.5	23.3	duck-organization	duck-site	CWE-829	Duck Site: Untrusted pull request code can trigger privileged production depl…
CVE-2026-53901	8.7	23.3	cerebrate	cerebrate	CWE-20	Cerebrate before v1.37 allows mass assignment of record identifiers during ob…
CVE-2026-53807	7.7	23.3	OpenClaw	OpenClaw	CWE-863	OpenClaw < 2026.5.6 - Authorization Bypass in Telegram Interactive Callbacks …
CVE-2026-46489	8.1	23.2	SolidInvoice	SolidInvoice	CWE-79	SolidInvoice: Unrestricted file upload with no MIME validation allows stored …
CVE-2026-53817	8.7	23.0	OpenClaw	OpenClaw	CWE-290	OpenClaw < 2026.5.22 - Control UI Locality Spoofing in Device Pairing
CVE-2026-44490	8.2	23.0	axios	axios	CWE-1321	Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in ax…
CVE-2026-53811	7.7	23.0	OpenClaw	OpenClaw	CWE-290	OpenClaw < 2026.5.7 - Privilege Escalation via Mutable Display Names in Matri…
CVE-2026-45418	8.8	22.8	MacWarrior	clipbucket-v5	CWE-89	ClipBucket: Blind SQL Injection in subtitle_edit.php
CVE-2026-47189	8.3	22.7	duck-organization	quest-bot	CWE-639	Quest Bot: AutoMod removal can delete rules from another guild by global rule ID
CVE-2026-52859	6.9	22.3	vim	vim	CWE-125	Vim: Out-of-bounds Read in Terminal Screen Snapshot
CVE-2026-11986	4.9	22.1	Red Hat	Red Hat build of Keycloak 26.6	CWE-425	Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-u…
CVE-2026-53819	8.7	21.8	OpenClaw	OpenClaw	CWE-426	OpenClaw < 2026.5.27 - Arbitrary Homebrew Executable Execution via Workspace …
CVE-2026-12007	8.8	20.6	Google	Chrome	CWE-416	Use after free in Core in Google Chrome on Windows prior to 149.0.7827.115 al…
CVE-2026-53814	8.7	20.0	OpenClaw	OpenClaw	CWE-266	OpenClaw < 2026.5.20 - Privilege Escalation via Hook-Triggered CLI MCP Tool A…
CVE-2026-12010	8.3	19.0	Google	Chrome	CWE-122	Heap buffer overflow in GPU in Google Chrome on Android prior to 149.0.7827.1…
CVE-2023-33999	7.1	19.0	WPVibes	WP Mail Log	CWE-79	WordPress WP Mail Log plugin <= 1.0.2 - Reflected Cross Site Scripting (XSS) …
CVE-2025-46315	7.5	18.7	Apple	macOS	CWE-284	A permissions issue was addressed with additional restrictions. This issue is…
CVE-2026-47250	6.1	18.3	Flux159	mcp-server-kubernetes	CWE-88	mcp-server-kubernetes: kubectl-generic flag injection enables Kubernetes bear…
CVE-2026-47173	6.3	17.6	duck-organization	quest-bot	CWE-116	Quest Bot: Ticket reason allows mass-mention injection
CVE-2026-53782	6.3	17.4	steipete	summarize	CWE-918	Summarize < 0.17.0 SSRF via podcast:transcript URL fetch
CVE-2026-11850	5.0	17.5	Red Hat	Red Hat Hardened Images	CWE-191	Krb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds…
CVE-2026-53661	8.8	17.2	malach-it	boruta-server	CWE-614	boruta-server sent sensitive session cookies without the Secure attribute
CVE-2026-45802	6.0	17.3	Setasign	FPDI	CWE-400	FPDI: Memory Exhaustion and Endless Loop in FPDI leads to Denial of Service
CVE-2026-8589	8.7	16.8	GitLab	GitLab	CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scri…
CVE-2026-12019	8.3	16.5	Google	Chrome	CWE-787	Heap buffer overflow in Codecs in Google Chrome on Linux and ChromeOS prior t…
CVE-2026-49949	6.0	16.5	steipete	CodexBar	CWE-522	CodexBar < 0.33.0 Credential Leakage via HTTP Redirect
CVE-2026-6338	4.9	16.4	Kong	Kong Enterprise Gateway	CWE-444	HTTP request smuggling in Kong Enteprise Gateway
CVE-2026-47181	8.7	16.2	PenguinMod	PenguinMod-BackendApi	CWE-20	PenguinMod-BackendApi: NoSQL Injection in Password Reset Endpoint Allows Acco…
CVE-2026-47176	5.7	16.2	duck-organization	quest-bot	CWE-200	Quest Bot: Logging module can disclose private-channel message contents to a …
CVE-2026-47177	5.7	16.2	duck-organization	quest-bot	CWE-200	Quest Bot: Ticket transcripts can disclose private ticket contents to a lower…
CVE-2026-47162	7.3	16.1	vim	vim	CWE-74	Vim: Vimscript Code Injection in netrw NetrwBookHistSave() via crafted direct…
CVE-2026-10087	8.7	16.0	GitLab	GitLab	CWE-79	Improper Neutralization of Input During Web Page Generation ('Cross-site Scri…
CVE-2026-7787	8.1	15.9	IBM	Langflow OSS	CWE-639	Unauthenticated Session History Access via Public Flow Execution
CVE-2026-11945	7.5	15.7	DALIBO	PostgreSQL Anonymizer	CWE-89	PostgreSQL Anonymizer: SQL injection in the rules import functions
CVE-2026-9204	6.5	15.7	GitLab	GitLab	CWE-918	Server-Side Request Forgery (SSRF) in GitLab
CVE-2026-53812	4.9	15.7	OpenClaw	OpenClaw	CWE-918	OpenClaw < 2026.5.18 - Private-Network Navigation Bypass via Browser Act Inte…
CVE-2026-12008	8.3	15.6	Google	Chrome	CWE-416	Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115…
CVE-2026-12009	8.3	15.6	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Accessibility in Google Chrome …
CVE-2026-12011	8.3	15.6	Google	Chrome	CWE-416	Use after free in WebMIDI in Google Chrome on Windows prior to 149.0.7827.115…
CVE-2026-53912	5.1	15.1	cerebrate	cerebrate	CWE-200	Cerebrate self-registration password hash exposure via inbox and audit log views
CVE-2026-47169	7.5	14.6	duck-organization	quest-bot	CWE-266	Quest Bot: Manage Server users can configure AutoRole to grant Administrator …
CVE-2026-8406	7.1	14.6	OS4ED	openSIS-Classic	CWE-639	openSIS Classic 9.3 - Insecure Direct Object Reference in Sent Mail
CVE-2026-12026	6.5	14.4	Google	Chrome	CWE-125	Out of bounds read in Video in Google Chrome on ChromeOS prior to 149.0.7827.…
CVE-2023-40200	5.3	14.3	Essential Plugin	WP Logo Showcase Responsive Slider and Carousel	CWE-639	WordPress WP Logo Showcase Responsive Slider and Carousel plugin <= 3.6 - Bro…
CVE-2026-44489	5.3	14.3	axios	axios	CWE-113	Axios: Proxy-Authorization Header Injection via Prototype Pollution — Incompl…
CVE-2026-3553	3.1	14.3	GitLab	GitLab	CWE-863	Incorrect Authorization in GitLab
CVE-2026-47175	2.3	14.1	duck-organization	quest-bot	CWE-116	Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` p…
CVE-2026-47188	2.3	14.1	duck-organization	quest-bot	CWE-116	Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions.
CVE-2026-46697	7.5	14.1	stefanbohacek	fediverse-embeds-wordpress-plugin	CWE-918	Fediverse Embeds: Unauthenticated SSRF / open proxy via REST media-proxy endp…
CVE-2022-45813	5.4	13.5	BeRocket	Advanced AJAX Product Filters	CWE-862	WordPress Advanced AJAX Product Filters plugin <= 1.6.3.3 - Broken Access Con…
CVE-2025-46308	5.3	13.6	Apple	iOS and iPadOS	CWE-284	An authorization issue was addressed with improved state management. This iss…
CVE-2026-12016	8.3	13.5	Google	Chrome	CWE-20	Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827…
CVE-2026-12023	8.3	13.5	Google	Chrome	CWE-416	Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed…
CVE-2026-12028	8.3	13.5	Google	Chrome	CWE-416	Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 all…
CVE-2026-40994	8.2	13.5	Spring	Spring Web Services	CWE-1188	Wss4jSecurityInterceptor disables WS-I BSP validation by default
CVE-2026-46698	5.3	13.5	stefanbohacek	fediverse-embeds-wordpress-plugin	CWE-918	Fediverse Embeds: Public-nonce SSRF via ftf_get_site_info AJAX action
CVE-2026-53702	6.5	13.3	Red Hat	Red Hat Enterprise Linux 10	CWE-787	Gstreamer1-plugins-bad-free: gstreamer: stack buffer overflow in h.265 buffer…
CVE-2026-12015	5.3	13.2	Google	Chrome	CWE-416	Use after free in Autofill in Google Chrome prior to 149.0.7827.115 allowed a…
CVE-2026-12025	5.3	13.2	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Network in Google Chrome prior …
CVE-2026-12012	8.1	12.9	Google	Chrome	CWE-416	Use after free in Network in Google Chrome prior to 149.0.7827.115 allowed an…
CVE-2026-40985	6.4	13.0	Spring	Spring Web Flow	CWE-917	Data Binding Vulnerability in Spring Web Flow with Unified EL Parser
CVE-2026-12027	9.6	12.8	Google	Chrome	CWE-250	Inappropriate implementation in Headless in Google Chrome prior to 149.0.7827…
CVE-2026-12020	8.8	12.8	Google	Chrome	CWE-416	Use after free in Autofill in Google Chrome on Mac prior to 149.0.7827.115 al…
CVE-2026-52860	7.5	12.8	vim	vim	CWE-94	Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-9648	9.1	12.7	Haskell Programming Language	crypton-certificate	—	CVE-2026-9648
CVE-2026-41000	3.7	12.7	Spring	Spring Web Services	CWE-294	WSS4J validation does not use configured replay cache
CVE-2026-10733	4.3	12.3	GitLab	GitLab	CWE-1021	Improper Restriction of Rendered UI Layers or Frames in GitLab
CVE-2026-53723	5.8	12.2	guzzle	guzzle-services	CWE-20	guzzlehttp/guzzle-services' XML Request Serialization Vulnerable to XML Injec…
CVE-2026-47163	7.2	11.7	duck-organization	quest-bot	CWE-862	Quest Bot: Unprivileged users can create and remove AutoMod rules.
CVE-2026-53815	7.1	11.7	OpenClaw	OpenClaw	CWE-862	OpenClaw < 2026.5.19 - Channel Allowlist Bypass in Message Read Actions
CVE-2026-9694	4.3	11.2	GitLab	GitLab	CWE-153	Improper Neutralization of Substitution Characters in GitLab
CVE-2026-40987	7.1	11.1	Spring	Spring Integration	CWE-22	Remote-file synchronizer in Spring Integration writes server-supplied filenam…
CVE-2026-47170	7.7	10.9	garlic-signage	garlic-hub	CWE-918	Garlic-Hub: SSRF vulnerability in uploadFromUrl endpoint
CVE-2026-12017	3.1	10.9	Google	Chrome	CWE-20	Inappropriate implementation in Extensions in Google Chrome prior to 149.0.78…
CVE-2026-4764	9.4	10.7	Google Cloud	Dialogflow CX	CWE-862	Privilege Escalation in Dialogflow CX via Playbook Import
CVE-2026-53911	6.3	10.7	cerebrate	cerebrate	CWE-639	Cerebrate primary key mass assignment in CRUD edit operations allows authenti…
CVE-2026-53701	6.5	10.6	Red Hat	Red Hat Enterprise Linux 10	CWE-787	Gstreamer1-plugins-bad-free: gstreamer: out-of-bounds write in h.266/vvc pps …
CVE-2026-8464	8.3	10.3	Neuron Soft	Golem OEE MES	CWE-22	Path traversal in Neuron Soft Golem OEE MES
CVE-2026-40986	4.8	10.0	Spring	Spring Web Flow	CWE-79	Spring Web Flow JS RemotingHandler renders non-HTML Response as HTML
CVE-2026-52858	7.3	9.9	vim	vim	CWE-94	Vim: Arbitrary Code Execution via Python Omni-Completion
CVE-2026-47238	6.5	9.8	MacWarrior	clipbucket-v5	CWE-639	ClipBucket: IDOR in videos subtitle editor
CVE-2026-48998	5.3	9.6	guzzle	psr7	CWE-918	guzzlehttp/psr7 has Host Confusion via Authority Reinterpretation
CVE-2026-50005	8.3	9.4	Brickcom	Cube	CWE-1392	Brickcom Cameras Use of Default Credentials
CVE-2026-46622	8.1	9.4	SolidInvoice	SolidInvoice	CWE-312	SolidInvoice: API tokens stored as plaintext in the database allowing full cr…
CVE-2026-47157	6.5	9.1	subzeroid	aiograpi	CWE-918	aiograpi: Unsafe signup challenge path handling
CVE-2026-53808	6.0	9.1	OpenClaw	OpenClaw	CWE-863	OpenClaw < 2026.5.6 - Approval Policy Bypass in Skill Workshop Apply Flow
CVE-2026-12029	8.3	8.8	Google	Chrome	CWE-416	Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 a…
CVE-2026-12030	8.3	8.8	Google	Chrome	CWE-122	Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.11…
CVE-2026-12031	8.3	8.8	Google	Chrome	CWE-693	Inappropriate implementation in Views in Google Chrome on Windows prior to 14…
CVE-2026-11956	6.3	8.8	TwiN	gatus	CWE-614	TwiN gatus OIDC Session Cookie oidc.go setSessionCookie missing secure attribute
CVE-2026-49214	5.3	8.6	guzzle	psr7	CWE-20	guzzlehttp/psr7 has CRLF Injection via URI Host Component
CVE-2026-41700	8.1	8.5	Spring	Spring for GraphQL	CWE-346	Cross-Site WebSocket Hijacking in Spring for GraphQL
CVE-2026-12033	5.3	8.5	Google	Chrome	CWE-125	Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 a…
CVE-2026-2827	4.7	8.4	100plugins	Open User Map PRO	CWE-79	Open User Map PRO <= 1.4.31 - Unauthenticated Stored Cross-Site Scripting via…
CVE-2026-12035	8.8	8.3	Google	Chrome	CWE-416	Use after free in Views in Google Chrome on Windows prior to 149.0.7827.115 a…
CVE-2026-6269	5.4	8.3	GitLab	GitLab	CWE-863	Incorrect Authorization in GitLab
CVE-2023-32959	4.3	8.0	Sparkle WP	MetroStore	CWE-862	WordPress MetroStore theme <= 1.3.2 - Broken Access Control
CVE-2026-6277	4.3	7.7	GitLab	GitLab	CWE-863	Incorrect Authorization in GitLab
CVE-2026-12034	8.3	7.6	Google	Chrome	CWE-20	Insufficient validation of untrusted input in Linux Toolkit Theming in Google…
CVE-2022-42479	5.4	7.2	TemplateHouse	Soledad	CWE-862	WordPress Soledad premium theme <= 8.2.5 - Broken Access Control vulnerability
CVE-2023-25969	5.4	7.1	ThemeHunk	Contact Form & Lead Form Elementor Builder	CWE-862	WordPress Contact Form & Lead Form Elementor Builder plugin <= 1.8.4 - Broken…
CVE-2026-12014	8.3	6.9	Google	Chrome	CWE-416	Use after free in Cast in Google Chrome prior to 149.0.7827.115 allowed an at…
CVE-2026-49482	4.3	6.4	MacWarrior	clipbucket-v5	CWE-155	ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subt…
CVE-2026-12022	8.3	6.0	Google	Chrome	CWE-362	Race in Safe Browsing in Google Chrome on Mac prior to 149.0.7827.115 allowed…
CVE-2026-45173	8.4	5.5	CyberArk Software, a Palo Alto Networks Company	Identity Browser Extensions	CWE-346	Idira Identity Browser Extension: Unauthorized Application Interaction via Or…
CVE-2026-12018	8.8	5.3	Google	Chrome	CWE-269	Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149…
CVE-2026-12024	6.5	5.1	Google	Chrome	CWE-346	Insufficient policy enforcement in DevTools in Google Chrome prior to 149.0.7…
CVE-2026-6976	3.7	5.1	GitLab	GitLab	CWE-639	Authorization Bypass Through User-Controlled Key in GitLab
CVE-2026-50245	8.3	5.0	Brickcom	Cube	CWE-306	Brickcom Cameras Missing Authentication for Critical Function
CVE-2026-12032	3.1	4.9	Google	Chrome	CWE-346	Inappropriate implementation in Passwords in Google Chrome on Android prior t…
CVE-2025-43278	5.5	4.5	Apple	macOS	CWE-61	This issue was addressed with improved handling of symlinks. This issue is fi…
CVE-2026-4096	6.1	4.3	IBM	DevOps Plan	CWE-644	A vulnerability has been identified in IBM DevOps Plan that allows a Host Hea…
CVE-2026-40995	5.4	4.3	Spring	Spring Web Services	CWE-287	X.509 authentication bypasses Spring Security account checks
CVE-2022-44630	4.6	3.9	YITH	YITH WooCommerce Product Slider Carousel	CWE-352	WordPress YITH WooCommerce Product Slider Carousel plugin <= 1.16.0 - Cross-S…
CVE-2026-42653	7.1	3.7	iova.mihai	SliceWP	CWE-79	WordPress SliceWP plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability
CVE-2025-24268	5.5	3.6	Apple	macOS	CWE-22	A parsing issue in the handling of directory paths was addressed with improve…
CVE-2025-46293	5.5	3.6	Apple	macOS	CWE-59	This issue was addressed with improved handling of symlinks. This issue is fi…
CVE-2026-3341	5.4	3.4	IBM	Langflow Desktop	CWE-918	IBM Langflow Desktop 1.0.0 - 1.9.2 DNS Rebinding Bypasses SSRF Protection All…
CVE-2026-47167	5.1	3.2	vim	vim	CWE-94	Vim: Vimscript Code Injection in cucumber filetype plugin via crafted step-de…
CVE-2026-41005	9.0	2.9	Cloud Foundry	UAA	CWE-347	UAA accepts SAML Encrypted Assertions authentication bypass
CVE-2025-46313	5.5	2.8	Apple	macOS	CWE-532	A logging issue was addressed with improved data redaction. This issue is fix…
CVE-2026-40996	4.8	2.8	Spring	Spring Web Services	CWE-327	Inbound WS-Security allows RSA PKCS#1 v1.5 key transport by default
CVE-2026-45175	8.5	2.7	CyberArk Software, a Palo Alto Networks Company	Idira Endpoint Privilege Manager	CWE-295	Idira Endpoint Privilege Manager Agent: Security Control and Cryptographic Va…
CVE-2025-24284	8.8	2.6	Apple	macOS	CWE-693	This issue was addressed with improved checks to prevent unauthorized actions…
CVE-2026-53423	5.9	2.6	membraneframework	membrane_mp4_plugin	CWE-770	Unauthenticated denial-of-service via BEAM atom table exhaustion in membrane_…
CVE-2025-30431	5.5	2.6	Apple	macOS	CWE-693	The issue was addressed with improved checks. This issue is fixed in macOS Se…
CVE-2026-45174	8.5	2.5	CyberArk Software, a Palo Alto Networks Company	Idira Endpoint Privilege Manager	CWE-404	Idira Endpoint Privilege Manager Linux Agent: Potential bypass of Agent Daemo…
CVE-2026-45176	8.9	2.4	CyberArk Software, a Palo Alto Networks Company	Idira Endpoint Privilege Manager	CWE-269	Idira Endpoint Privilege Manager Agent: Local Privilege Escalation via Intern…
CVE-2026-10847	7.8	2.3	checkpoint	Identity Agent	CWE-427	Local Privilege Escalation vulnerability in Check Point Identity Agent Full f…
CVE-2026-40992	5.0	2.3	Spring	Spring Boot	CWE-295	Mail Auto-Configuration Does Not Enable SSL Hostname Verification
CVE-2025-30459	5.5	2.2	Apple	macOS	CWE-359	A privacy issue was addressed by removing the vulnerable code. This issue is …
CVE-2025-24165	5.5	2.1	Apple	macOS	CWE-284	A permissions issue was addressed with additional restrictions. This issue is…
CVE-2025-7064	5.6	1.8	ABB	Freelance	CWE-305	Freelance Security Lock – Access to Windows OS
CVE-2025-31272	7.8	1.7	Apple	macOS	CWE-269	The issue was addressed with improved checks. This issue is fixed in macOS Se…
CVE-2026-53813	7.3	1.7	OpenClaw	OpenClaw	CWE-427	OpenClaw < 2026.4.25 - Arbitrary Artifact Loading via Fake Package Root Resol…
CVE-2022-47150	4.3	1.6	weDevs	WooCommerce Conversion Tracking	CWE-352	WordPress WooCommerce Conversion Tracking plugin <= 2.0.10 - Cross-Site Reque…
CVE-2025-43339	5.5	1.5	Apple	macOS	CWE-284	An access issue was addressed with additional sandbox restrictions. This issu…
CVE-2024-32110	4.3	0.9	Magepeople inc.	WpEvently	CWE-352	WordPress Event Manager and Tickets Selling Plugin for WooCommerce plugin <= …
CVE-2026-53818	6.9	0.8	OpenClaw	OpenClaw	CWE-862	OpenClaw < 2026.4.24 - Owner-Only Tool Policy Bypass via MCP Loopback
CVE-2026-41001	5.3	0.7	Spring	Spring Boot	CWE-377	Predictable Temp Directory in Artemis Auto-configuration
CVE-2024-45636	4.4	0.7	IBM	Security QRadar EDR	CWE-522	IBM Security QRadar EDR Software has a vulnerability where user credentials m…
CVE-2026-53809	4.8	0.6	OpenClaw	OpenClaw	CWE-863	OpenClaw < 2026.4.25 - Provider Alias Confusion in Embedded Runner Policy

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-06-11 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.