Security Box Score — July 10, 2026

350 CVEs published, led by Drupal (46).

350 CVEs published July 10, 2026: 36 critical, 122 high, 163 medium, 29 low; 2 in the KEV catalog at press time; 27 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 325 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	2319	14722	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

653 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	38	1518	121	866	530	1	11	2	0.1	7.5	.0014	-57 ▼
google	79	1344	149	608	549	38	77	6	0.4	7.8	.0024	-484 ▼
microsoft	52	809	61	553	189	6	286	20	2.5	7.8	.0046	-155 ▼
red hat	36	258	14	101	126	17	2	0	0.0	6.5	.0031	+2 ▲
apple	0	104	2	28	72	2	88	7	6.7	6.5	.0032	-2 ▼
canonical	1	21	2	6	8	5	0	0	0.0	5.5	.0011	+1 ▲
suse	6	19	4	11	4	0	0	0	0.0	8.6	.0042	+6 ▲
freebsd	0	16	0	12	4	0	0	0	0.0	7.8	.0016	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
ubiquiti	25	36	14	21	1	0	3	3	8.3	8.8	.0049	+25 ▲
cisco	8	30	6	14	10	0	56	11	36.7	7.5	.0057	+5 ▲
palo alto networks	14	25	1	3	14	7	13	2	8.0	4.7	.0028	+5 ▲
netgear	0	17	0	0	16	1	0	0	0.0	4.3	.0024	-17 ▼
checkpoint	0	9	1	5	3	0	3	1	11.1	7.5	.0410	-2 ▼
fortinet	0	9	4	3	2	0	28	3	33.3	8.3	.0076	-2 ▼
ivanti	0	9	4	5	0	0	25	5	55.6	8.8	.5187	-3 ▼
f5	0	8	4	3	1	0	4	1	12.5	8.9	.0225	0

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	61	216	41	84	79	11	33	1	0.5	7.3	.0057	+5 ▲
mozilla	3	59	12	18	29	0	9	0	0.0	7.3	.0025	-2 ▼
drupal	46	51	6	5	35	5	4	1	2.0	5.9	.0026	+46 ▲
gitlab	7	38	0	5	27	6	4	2	5.3	4.7	.0032	+7 ▲
github	1	7	1	1	5	0	0	0	0.0	6.0	.0039	+1 ▲
docker	0	7	0	5	2	0	0	0	0.0	8.2	.0016	-2 ▼
wordpress	0	0	0	0	0	0	2	0	—	—	—	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	0	270	132	116	18	4	27	2	0.7	8.8	.0040	-1 ▼
adobe	3	147	13	53	79	2	19	3	2.0	6.1	.0021	-120 ▼
ibm	2	126	38	42	46	0	6	0	0.0	7.5	.0034	-3 ▼
progress	10	19	3	14	2	0	6	0	0.0	7.5	.0037	+5 ▲
solarwinds	0	7	2	3	2	0	10	4	57.1	7.5	.4001	-3 ▼
veeam	0	4	2	2	0	0	1	0	0.0	9.0	.0052	-1 ▼
zohocorp	0	3	1	1	1	0	0	0	0.0	8.4	.0170	0
atlassian	0	0	0	0	0	0	13	0	—	—	—	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
synology	0	23	2	5	13	3	0	5.6	.0025	-5 ▼
siemens	4	13	0	7	6	0	0	7.1	.0023	-3 ▼
d-link	1	13	0	5	3	5	3	6.0	.0059	-7 ▼
rockwell automation	0	7	1	5	1	0	0	8.7	.0030	0
abb	0	6	0	4	2	0	0	7.2	.0018	-4 ▼
schneider electric	0	6	0	4	2	0	0	7.8	.0042	-1 ▼
moxa	0	5	0	3	2	0	0	7.0	.0029	0
dahua	0	3	0	1	1	1	0	6.9	.0036	-3 ▼

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
sourcecodester	28	99	0	0	53	46	0	0	0.0	5.5	.0029	-7 ▼
dell	33	89	5	41	40	3	2	1	1.1	7.0	.0021	+26 ▲
capgo	13	74	2	37	34	1	0	0	0.0	7.0	.0038	+13 ▲
spring	0	73	2	31	39	1	0	0	0.0	6.5	.0024	-53 ▼
openclaw	1	68	0	36	22	10	0	0	0.0	7.0	.0021	+1 ▲
edimax	0	65	0	39	0	26	1	0	0.0	7.4	.0080	0
itsourcecode	10	63	0	0	19	44	0	0	0.0	2.1	.0033	-12 ▼
themerex	2	60	5	54	1	0	0	0	0.0	8.1	.0043	+2 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-10520	.9991	100.0	10.0
CVE-2026-20253	.9694	99.9	9.8
CVE-2026-35273	.9547	99.9	9.8
CVE-2026-20230	.8820	99.8	8.6
CVE-2026-34910	.8747	99.7	10.0
CVE-2026-34908	.8519	99.7	10.0
CVE-2026-48907	.7810	99.5	10.0
CVE-2026-45659	.7608	99.5	8.8
CVE-2026-34909	.6390	99.2	10.0
CVE-2026-48282	.4239	98.6	10.0

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-10520	10.0	.9991	KEV
CVE-2026-34910	10.0	.8747	KEV
CVE-2026-34908	10.0	.8519	KEV
CVE-2026-48907	10.0	.7810	KEV
CVE-2026-34909	10.0	.6390	KEV
CVE-2026-48282	10.0	.4239	KEV
CVE-2026-56290	10.0	.3038	KEV
CVE-2026-48939	10.0	.1973	KEV
CVE-2026-48908	10.0	.1482	KEV
CVE-2026-56291	10.0	.1459	KEV

Most disclosures (vendor)
Vendor	CVEs
google	606
linux	456
oracle	241
red hat	130
apache	126
capgo	74
ibm	72
microsoft	66
dell	64
openclaw	62

Most KEV additions (YTD)
Vendor	KEV
microsoft	20
cisco	11
apple	7
google	6
ivanti	5
solarwinds	4
adobe	3
berriai	3
fortinet	3
smartertools	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	71
npm	6
PyPI	5
NuGet	3

Fastest to KEV
CVE	Vendor	Days
CVE-2026-10520	ivanti	0
CVE-2026-12569	PTC	0
CVE-2026-20230	Cisco	0
CVE-2026-20253	Splunk	0
CVE-2026-20262	Cisco	0
CVE-2026-34908	Ubiquiti Inc	0
CVE-2026-34909	Ubiquiti Inc	0
CVE-2026-34910	Ubiquiti Inc	0
CVE-2026-35273	Oracle Corporation	0
CVE-2026-45659	Microsoft	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1696
CVE-2021-27102	n/a	2021-11-17	1696
CVE-2021-27101	n/a	2021-11-17	1696
CVE-2021-27103	n/a	2021-11-17	1696
CVE-2021-21017	Adobe	2021-11-17	1696
CVE-2021-28550	Adobe	2021-11-17	1696
CVE-2021-42013	Apache Software Foundation	2021-11-17	1696
CVE-2021-41773	Apache Software Foundation	2021-11-17	1696
CVE-2021-30858	Apple	2021-11-17	1696
CVE-2021-30860	Apple	2021-11-17	1696

Transactions

EXPLOIT PUBLISHED — rabbitmq-server: 9 CVEs (CVE-2026-57211, CVE-2026-57212, CVE-2026-57213, CVE-2026-57215, CVE-2026-57216, CVE-2026-57217, CVE-2026-57218, CVE-2026-57220, CVE-2026-57221). Public exploit references added.

EXPLOIT PUBLISHED — FreeRDP: 4 CVEs (CVE-2026-55827, CVE-2026-57156, CVE-2026-57157, CVE-2026-57158). Public exploit references added.

EXPLOIT PUBLISHED — grokability snipe-it: 4 CVEs (CVE-2026-55460, CVE-2026-55462, CVE-2026-55466, CVE-2026-55515). Public exploit references added.

EXPLOIT PUBLISHED — qax-os excelize: 3 CVEs (CVE-2026-54063, CVE-2026-59161, CVE-2026-59162). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2026-52747 (owasp-modsecurity ModSecurity). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-53448 (coturn). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-53449 (coturn). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-56291 (balbooa.com Balbooa Forms extension for Joomla). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-59193 (getgrav grav). Public exploit reference added.

Yesterday's Results

How to read these box scores · glossary

350 CVEs published. 25 box scores, 325 table rows — nothing truncated.

CVE-2026-48939CRITICAL

icagenda.com iCagenda extension for Joomla — Joomla Extension - icagenda.com - Remote Code Execution in iCaganda extension for Joomla < 4.0.8/3.9.15

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H   10.0   .1973   97.2   YES

AFFECTED
  Product                        Versions       Fixed
  iCagenda extension for Joomla  3.2.1-4.0.7 –  —

TIMELINE
  May 26  Reserved by CNA
  Jul 10  Added to CISA KEV, due Jul 13
  Jul 10  Published (CNA: Joomla)

CWE-434 · CNA: Joomla · CVSS v4.0 · 6 references · NVD status: Analyzed · KEV due July 13, 2026

CVE-2026-56291CRITICAL

balbooa.com balbooa.com Balbooa Forms extension for Joomla — Joomla Extension - balbooa.com - Unauthenticated file upload in Balbooa Forms extension < 2.4.1

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H   10.0   .1459   96.4   YES

AFFECTED
  Product                                         Versions     Fixed
  balbooa.com Balbooa Forms extension for Joomla  1.0-2.4.0 –  —

TIMELINE
  Jun 20  Reserved by CNA
  Jul 10  Public exploit reference published
  Jul 10  Added to CISA KEV, due Jul 13
  Jul 10  Published (CNA: Joomla)

CWE-434 · CNA: Joomla · CVSS v4.0 · 3 references · NVD status: Analyzed · KEV due July 13, 2026

CVE-2026-14894CRITICAL

WebRehab Super Forms – Drag & Drop Form Builder — Super Forms <= 6.3.313 - Unauthenticated Arbitrary File Upload via 'data' Parameter (datauristring / value)

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0348   88.2     —

AFFECTED
  Product                                 Versions     Fixed
  Super Forms – Drag & Drop Form Builder  unspecified  —

TIMELINE
  Jul 6   Reserved by CNA
  Jul 10  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred

CVE-2025-30007HIGH

HestiaCP < 1.9.5 Authenticated OS Command Injection via DNS Record Management

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0324   87.3     —

AFFECTED
  Product   Versions     Fixed
  hestiacp  unspecified  —

TIMELINE
  Mar 13  Reserved by CNA
  Jul 10  Published (CNA: VulnCheck)

CWE-78 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2026-61459CRITICAL

Flux159 mcp-server-kubernetes — MCP Server Kubernetes < 3.9.0 Argument Injection via kubectl Structured Tools

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0210   80.3     —

AFFECTED
  Product                Versions     Fixed
  mcp-server-kubernetes  unspecified  —

TIMELINE
  Jul 9   Reserved by CNA
  Jul 10  Published (CNA: VulnCheck)

CWE-88 · CNA: VulnCheck · CVSS v4.0 · 5 references · NVD status: Analyzed

CVE-2026-56688CRITICAL

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  C  H  H  H    9.1   .0200   79.2     —

AFFECTED
  Product            Versions     Fixed
  PowerFlex Manager  unspecified  —

TIMELINE
  Jun 22  Reserved by CNA
  Jul 10  Published (CNA: dell)

CWE-78 · CNA: dell · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-57219HIGH

RabbitMQ: Unauthenticated disclosure of OAuth client credentials via an HTTP API endpoint with certain less common OAuth 2 configurations

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   A   H   H   N    8.7   .0199   79.1     —

AFFECTED
  Product          Versions             Fixed
  rabbitmq-server  >= 4.2.0, < 4.2.6 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 10  Published (CNA: GitHub_M)

CWE-522, CWE-200 · CNA: GitHub_M · CVSS v4.0 · 6 references · NVD status: Analyzed

CVE-2026-10768CRITICAL

Drupal LocalGov Workflows — LocalGov Workflows - Moderately critical - Information disclosure - SA-CONTRIB-2026-039

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0187   77.8     —

AFFECTED
  Product             Versions  Fixed
  LocalGov Workflows  0.0.0 –   —

TIMELINE
  Jun 3   Reserved by CNA
  Jul 10  Published (CNA: drupal)

CWE-862 · CNA: drupal · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-41880CRITICAL

R-SOFT SERWIS DMS — OS Command Injection in R-SOFT DMS

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   L   N   H   H   H    9.0   .0133   68.9     —

AFFECTED
  Product  Versions     Fixed
  DMS      unspecified  —

TIMELINE
  Apr 22  Reserved by CNA
  Jul 10  Published (CNA: CERT-PL)

CWE-78 · CNA: CERT-PL · CVSS v4.0 · 1 reference · NVD status: Deferred

CVE-2026-41876HIGH

R-SOFT SERWIS DMS — OS Command Injection in R-SOFT DMS

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0123   66.6     —

AFFECTED
  Product  Versions     Fixed
  DMS      unspecified  —

TIMELINE
  Apr 22  Reserved by CNA
  Jul 10  Published (CNA: CERT-PL)

CWE-78 · CNA: CERT-PL · CVSS v4.0 · 1 reference · NVD status: Deferred

CVE-2026-13430HIGH

wpazleen Post Export Import with Media — Post Export Import with Media <= 1.13.1 - Authenticated (Administrator+) Arbitrary File Upload via Trailing-Dot Filename Bypass in ZIP Media Import

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   H   N  U  H  H  H    7.2   .0115   64.4     —

AFFECTED
  Product                        Versions     Fixed
  Post Export Import with Media  unspecified  —

TIMELINE
  Jun 26  Reserved by CNA
  Jul 10  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · CVSS v3.1 · 7 references · NVD status: Deferred

CVE-2026-15282CRITICAL

tenteeglobal Instant Appointment — Instant Appointment <= 1.2 - Unauthenticated Arbitrary File Upload

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0108   62.5     —

AFFECTED
  Product              Versions     Fixed
  Instant Appointment  unspecified  —

TIMELINE
  Jul 9   Reserved by CNA
  Jul 10  Published (CNA: Wordfence)

CWE-434 · CNA: Wordfence · CVSS v3.1 · 4 references · NVD status: Deferred

CVE-2026-55175HIGH

Spinnaker: Improper yaml processing on kustomize bake operations

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   L   N  U  H  H  H    7.5   .0106   61.9     —

AFFECTED
  Product    Versions                   Fixed
  spinnaker  >= 2026.1.0, < 2026.1.1 –  —

TIMELINE
  Jun 16  Reserved by CNA
  Jul 10  Published (CNA: GitHub_M)

CWE-502 · CNA: GitHub_M · CVSS v3.1 · 11 references · NVD status: Analyzed

CVE-2026-56814MEDIUM

elixir-plug plug — Plug: multipart :length limit is not charged for part headers, enabling unbounded temp-file creation (denial of service)

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   L    6.9   .0105   61.7     —

AFFECTED
  Product  Versions                                    Fixed
  plug     1.4.0 –                                     —
  plug     c52b2f32c90bccd718202bafccb5f95594e30183 –  981597d3a4271ede64373c7a731702a42c500dd6

TIMELINE
  Jun 23  Reserved by CNA
  Jul 10  Published (CNA: EEF)

CWE-770 · CNA: EEF · CVSS v4.0 · 9 references · NVD status: Deferred

CVE-2026-44795HIGH

Spinnaker: Non-safe yaml deserialization allowing RCE when using specific types

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0101   60.5     —

AFFECTED
  Product    Versions                   Fixed
  spinnaker  >= 2025.4.0, < 2025.4.4 –  —

TIMELINE
  May 7   Reserved by CNA
  Jul 10  Published (CNA: GitHub_M)

CWE-470, CWE-502 · CNA: GitHub_M · CVSS v3.1 · 4 references · NVD status: Analyzed

CVE-2026-57220HIGH

RabbitMQ: Stream listener does not enforce configured frame-size limit during authentication, permitting unauth'd mem-exhaust DoS

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0097   59.2     —

AFFECTED
  Product          Versions             Fixed
  rabbitmq-server  >= 4.2.0, < 4.2.6 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 10  Public exploit reference published
  Jul 10  Published (CNA: GitHub_M)

CWE-770 · CNA: GitHub_M · CVSS v3.1 · 6 references · NVD status: Analyzed

CVE-2026-12761CRITICAL

cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) — miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) <= 7.7.0 - Unauthenticated Authentication Bypass to Administrator Account Takeover via Profile Completion OTP Flow

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0089   56.8     —

AFFECTED
  Product                                                                    Versions     Fixed
  miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)  unspecified  —

TIMELINE
  Jun 19  Reserved by CNA
  Jul 10  Published (CNA: Wordfence)

CWE-287 · CNA: Wordfence · CVSS v3.1 · 6 references · NVD status: Deferred

CVE-2026-57216CRITICAL

RabbitMQ: AMQP 1.0, AMQP 0-9-1, Stream Protocol loopback enforcement can lead to remote guest sessions due to listener-address loopback checks

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .0089   56.6     —

AFFECTED
  Product          Versions             Fixed
  rabbitmq-server  >= 4.2.0, < 4.2.6 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 10  Public exploit reference published
  Jul 10  Published (CNA: GitHub_M)

CWE-287 · CNA: GitHub_M · CVSS v3.1 · 6 references · NVD status: Analyzed

CVE-2026-61434HIGH

MervinPraison PraisonAI — PraisonAI before 4.6.78 Allowlist Bypass via find -exec

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0088   56.3     —

AFFECTED
  Product    Versions     Fixed
  PraisonAI  unspecified  4.6.78

TIMELINE
  Jul 9   Reserved by CNA
  Jul 10  Published (CNA: VulnCheck)

CWE-78 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred

CVE-2025-11977MEDIUM

HappyForms <= 1.26.12 - Authenticated (Admin+) Local File Inclusion

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   H   N  U  H  H  H    6.6   .0087   55.9     —

AFFECTED
  Product                                                                                                     Versions     Fixed
  Happyforms – Form Builder for WordPress: Drag & Drop Contact Forms, Surveys, Payments & Multipurpose Forms  unspecified  —

TIMELINE
  Oct 20  Reserved by CNA
  Jul 10  Published (CNA: Wordfence)

CWE-98 · CNA: Wordfence · CVSS v3.1 · 4 references · NVD status: Deferred

CVE-2026-54469HIGH

Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a Deserialization of Untrusted Data …

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0086   55.7     —

AFFECTED
  Product                 Versions     Fixed
  Unisphere for PowerMax  unspecified  —

TIMELINE
  Jun 15  Reserved by CNA
  Jul 10  Published (CNA: dell)

CWE-502 · CNA: dell · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-49844MEDIUM

Apache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   P   N   N   N   N   N    6.3   .0081   54.2     —

AFFECTED
  Product           Versions  Fixed
  Apache Log4j API  2.13.1 –  —

TIMELINE
  Jun 1   Reserved by CNA
  Jul 10  Published (CNA: apache)

CWE-116 · CNA: apache · CVSS v4.0 · 4 references · NVD status: Analyzed

CVE-2025-70796HIGH

n/a n/a — An unauthenticated path traversal vulnerability exists in the web management interface of WTI (Wireless Tec…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0076   52.6     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Jan 9   Reserved by CNA
  Jul 10  Published (CNA: mitre)

CWE-22 · CNA: mitre · CVSS v3.1 · 2 references · NVD status: Deferred

CVE-2026-20744CRITICAL

Hydro-Québec Le Circuit Electrique charging station backend Improper Access Control

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0076   52.4     —

AFFECTED
  Product                                         Versions     Fixed
  Le Circuit Electrique charging station backend  unspecified  —

TIMELINE
  Jan 27  Reserved by CNA
  Jul 10  Published (CNA: icscert)

CWE-284 · CNA: icscert · CVSS v4.0 · 3 references · NVD status: Deferred

CVE-2026-13347HIGH

templatic1 Hide My WP Lite — Hide My WP Lite <= 1.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'he_wrapper_js' Parameter

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0075   52.1     —

AFFECTED
  Product          Versions     Fixed
  Hide My WP Lite  unspecified  —

TIMELINE
  Jun 25  Reserved by CNA
  Jul 10  Published (CNA: Wordfence)

CWE-22 · CNA: Wordfence · CVSS v3.1 · 3 references · NVD status: Deferred

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-57212	7.1	51.7	rabbitmq	rabbitmq-server	CWE-770	RabbitMQ management HTTP API accepts request bodies larger than configured ma…
CVE-2026-57807	9.8	51.5	miniOrange Security Software Pvt Ltd.	OAuth Single Sign On - SSO (OAuth Client)	CWE-288	WordPress OAuth Single Sign On - SSO (OAuth Client) plugin <= 38.5.8 - Broken…
CVE-2026-15302	5.3	51.0	reputeinfosystems	ARMember – Membership Plugin, Content Restriction, Member Levels, User Profile & User signup	CWE-36	ARMember <= 4.0.27 - Directory Traversal via X-FILENAME
CVE-2026-53448	7.2	50.5	coturn	coturn	CWE-89	Coturn: SQL Injection in HTTPS Admin Panel Delete Operations
CVE-2026-55687	7.5	50.4	espressif	esp-idf	CWE-121	ESF-IDF: Stack-Based Out-of-Bounds Write in JPEG Decoder DQT Marker Parsing
CVE-2026-57156	8.6	50.3	FreeRDP	FreeRDP	CWE-122	FreeRDP: Integer overflow leading to heap buffer overflow in Orders Delta Poi…
CVE-2026-55500	9.9	49.8	decolua	9router	CWE-200	9router: Exposure of Sensitive Information and Unprotected Database Import/Ex…
CVE-2026-28564	9.8	49.7	Apache Software Foundation	Apache IoTDB	CWE-294	Apache IoTDB: REST Basic Authentication Accepts Stale Cached Credentials
CVE-2026-55852	8.6	49.6	frappe	frappe	CWE-22	Frappe: TarSlip RCE in Package Import
CVE-2026-42219	6.9	49.6	frappe	frappe	CWE-22	Frappe: Path Traversal via /backups Route
CVE-2026-61492	6.1	49.0	JetBrains	YouTrack	CWE-79	In JetBrains YouTrack before 2026.2.17394 stored XSS via article titles in di…
CVE-2026-15291	7.5	48.8	themeatelier	ChatHelp – Click to Chat Button, WooCommerce Chat to Order & Floating Chat Form	CWE-862	Chat Help – Click to Chat Button & Form <= 3.1.3 - Missing Authorization to U…
CVE-2026-59161	8.7	48.6	qax-os	excelize	CWE-400	Excelize: Streaming GetRows row-bound bypass causes attacker-controlled alloc…
CVE-2026-59162	6.9	48.6	qax-os	excelize	CWE-248	Excelize: Negative shared-string index causes panic in GetCellValue and GetRows
CVE-2026-57215	7.0	48.5	rabbitmq	rabbitmq-server	CWE-863	RabbitMQ: Direct-reply-to binding persistence can lead to unauthorized reply-…
CVE-2026-57211	10.0	47.5	rabbitmq	rabbitmq-server	CWE-36	RabbitMQ: UNC SSRF affecting the management UI on Windows
CVE-2026-15300	9.1	47.1	ninjew	GEO my WP	CWE-89	GEO my WP <= 4.5.4 - Unauthenticated SQL Injection via 'distance' / 'lat' / '…
CVE-2026-14480	8.7	46.8	OpenPLC	OpenPLC	CWE-73	OpenPLC v3 External Control of File Name or Path
CVE-2026-48127	5.3	46.7	frappe	frappe	CWE-862	Frappe: Arbitrary Attachment Injection via add_attachments and upload_file
CVE-2026-55638	8.6	46.6	decolua	9router	CWE-862	9router: Unauthenticated LLM proxy access via /codex rewrite authorization by…
CVE-2026-39244	7.5	46.5	n/a	n/a	CWE-400	adm-zip before 0.5.18 is vulnerable to denial of service via a crafted ZIP fi…
CVE-2026-54063	7.5	46.4	qax-os	excelize	CWE-770	Excelize: Unbounded Row Index Allocation in Worksheet Parser (checkSheet OOM/…
CVE-2026-22660	8.6	46.3	flaskbb	flaskbb	CWE-697	FlaskBB Logic Flaw Authorization Group Deletion via Bulk AJAX Endpoint
CVE-2026-59792	9.8	46.3	JetBrains	IntelliJ IDEA	CWE-23	In JetBrains IntelliJ IDEA before 2026.1.4, 2026.2 code execution via path tr…
CVE-2026-15330	5.5	46.2	zhayujie	CowAgent	CWE-918	zhayujie CowAgent Vision Tool vision.py _download_to_data_url server-side req…
CVE-2026-57575	6.9	46.2	misskey-dev	misskey	CWE-918	Misskey: SSRF bypass in URL Preview
CVE-2026-59193	6.9	46.1	getgrav	grav	CWE-409	Grav CMS — Improper Handling of Highly Compressed Data in Installer::unZip()
CVE-2026-57475	6.9	45.9	Deloitte	AI Assist for Customer	CWE-306	Deloitte AI Assist for Customer unauthenticated configuration write
CVE-2026-40008	9.8	45.9	Apache Software Foundation	Apache IoTDB	CWE-470	Apache IoTDB: Arbitrary Class Instantiation via Pipe Transfer RPC
CVE-2026-38059	8.7	45.7	ST Engineering iDirect	Evolution iQ‑Series terminals	CWE-306	ST Engineering iDirect iQ-Series Terminals Missing authentication for critica…
CVE-2026-58503	6.9	45.6	frappe	frappe	CWE-203	Frappe: Unauthenticated User Enumeration via reset_password
CVE-2026-55469	6.5	45.5	grokability	snipe-it	CWE-22	Snipe-IT: Path traversal vulnerability via CSV import `image` field
CVE-2026-40006	7.5	45.3	Apache Software Foundation	Apache IoTDB	CWE-306	Apache IoTDB: Unauthenticated heap-exhaustion DoS via unbounded allocation in…
CVE-2026-5801	9.8	44.9	Semtek Informatics Software Consulting Trade Ltd. Co.	SEM-PMP	CWE-89	SQLi in Semtek Informatics' SEM-PMP
CVE-2026-61444	9.4	44.7	MervinPraison	PraisonAI	CWE-94	PraisonAI before 4.6.78 Code Injection via f-string
CVE-2026-57217	7.0	44.4	rabbitmq	rabbitmq-server	CWE-863	RabbitMQ: Topic authorization can lead to cross-tenant routing-key bypass
CVE-2026-57218	4.9	44.4	rabbitmq	rabbitmq-server	CWE-863	RabbitMQ: AMQP 0-9-1 in combination with OAuth 2: consumer persistence can le…
CVE-2026-9726	9.8	44.3	Drupal	Drupal AlternativeCommerce (Basket)	CWE-915	Drupal AlternativeCommerce (Basket) - Highly critical - Arbitrary PHP code ex…
CVE-2026-11913	9.8	44.3	Drupal	Mother May I	CWE-79	Mother May I - Critical - Unsupported - SA-CONTRIB-2026-045
CVE-2026-12535	9.8	44.3	Drupal	Formatter Field	CWE-915	Formatter Field - Critical - PHP object injection - SA-CONTRIB-2026-048
CVE-2026-44383	8.7	44.3	Hydro-Québec	Le Circuit Electrique charging station backend	CWE-613	Hydro-Québec Le Circuit Electrique charging station backend Insufficient Sess…
CVE-2026-11990	5.3	44.1	iqonicdesign	KiviCare – Clinic & Patient Management System (EHR)	CWE-862	KiviCare <= 4.4.0 - Missing Authorization to Unauthenticated Payment Bypass a…
CVE-2026-15331	5.3	43.9	zhayujie	CowAgent	CWE-22	zhayujie CowAgent Skill Installation service.py _add_package path traversal
CVE-2026-57574	7.4	43.6	misskey-dev	misskey	CWE-294	Misskey: TOTP tokens can be reused
CVE-2026-54149	8.8	43.5	1Panel-dev	MaxKB	CWE-78	MaxKB MCP tool import validation bypass allows post-authentication remote cod…
CVE-2026-47199	2.3	43.4	frappe	frappe	CWE-89	Frappe: check_safe_sql_query Permits SELECT INTO OUTFILE
CVE-2026-15319	5.5	43.2	Sipeed	PicoClaw	CWE-266	Sipeed PicoClaw Launcher access_control.go IPAllowlist access control
CVE-2026-49394	7.1	43.0	frappe	frappe	CWE-862	Frappe: Auth. bypass via update_page
CVE-2026-55843	7.0	43.0	grokability	snipe-it	CWE-269	Snipe-IT: Improper Privilege Management
CVE-2026-51119	9.1	42.9	n/a	n/a	CWE-269	An issue in Invixium IXM WEB v.2.3.85.25 allows an attacker to escalate privi…
CVE-2026-40005	9.1	42.8	Apache Software Foundation	Apache IoTDB	CWE-22	Apache IoTDB: Path Traversal in Pipe File Transfer Receiver
CVE-2026-42952	8.7	42.8	Hydro-Québec	Le Circuit Electrique charging station backend	CWE-307	Hydro-Québec Le Circuit Electrique charging station backend Improper Restrict…
CVE-2026-58499	8.2	42.8	EverMind-AI	EverOS	CWE-22	Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id
CVE-2026-15326	2.0	42.8	halo-dev	halo	CWE-22	halo-dev halo Theme Installation ThemeUtils.java ThemeUtils.unzipThemeTo path…
CVE-2026-55665	8.5	42.4	gristlabs	grist-core	CWE-79	DOM-based XSS in Grist via unsanitized links, enabling privilege escalation
CVE-2026-59151	9.6	42.1	prowler-cloud	prowler	CWE-287	Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
CVE-2026-58492	9.2	42.1	getgrav	grav	CWE-89	grav-plugin-database: SQL Injection in PDO::tableExists() due to Unsanitized …
CVE-2026-22659	7.2	42.1	flaskbb	flaskbb	CWE-863	FlaskBB Authorization Bypass via Topic ID Manipulation
CVE-2026-53653	8.7	42.0	getgrav	grav	CWE-770	Grav: Unauthenticated denial of service via unbounded image derivative dimens…
CVE-2026-57584	8.7	42.0	phalcon	cphalcon	CWE-1333	Phalcon: Catastrophic backtracking (ReDoS) in the default Phalcon Router rout…
CVE-2026-55882	8.3	42.0	tilt-dev	tilt	CWE-200	Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server
CVE-2026-21045	8.3	41.9	Samsung Mobile	Samsung Mobile Devices	—	Out-of-bounds write in parsing TIFF format in libimagecodec.media.quram.so pr…
CVE-2026-21048	8.3	41.9	Samsung Mobile	Samsung Mobile Devices	—	Out-of-bounds write in parsing DNG format in libimagecodec.media.quram.so pri…
CVE-2026-56305	8.7	41.6	Capgo	Capgo	CWE-620	Capgo - Authentication Bypass in Password Change via Missing Current Password…
CVE-2026-55501	7.3	41.5	decolua	9router	CWE-307	9router: Login brute-force protection bypass via spoofed X-Forwarded-For header
CVE-2026-57474	6.9	41.4	Deloitte	AI Assist for Customer	CWE-200	Deloitte AI Assist for Customer information disclosure
CVE-2026-56261	9.2	41.3	Crawl4AI	Crawl4AI	CWE-918	Crawl4AI - Server-Side Request Forgery via Webhook URLs
CVE-2026-15293	8.0	41.3	joeyoungblood	WP Business Intelligence Lite	CWE-862	WP Business Intelligence Lite <= 3.2.0 - Authenticated (Subscriber+) Missing …
CVE-2026-56765	9.3	41.3	Vikunja	Vikunja	CWE-639	Vikunja - Unauthenticated Instance-Wide Data Breach via Link Share Hash Discl…
CVE-2026-12918	4.9	41.0	getwpfunnels	Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails	CWE-89	Mail Mint <= 1.24.1 - Authenticated (Administrator+) SQL Injection via 'recip…
CVE-2026-61460	8.7	40.9	krayin	laravel-crm	CWE-639	Krayin CRM Insecure Direct Object Reference via Controllers
CVE-2026-15290	7.5	40.8	ultimatemember	Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin	CWE-89	Ultimate Member – User Profile, Registration, Login, Member Directory, Conten…
CVE-2026-41482	7.1	40.6	frappe	frappe	CWE-22	Frappe: Possible Path Traversal and Local File Inclusion via Chrome PDF Gener…
CVE-2026-56675	8.3	40.6	decolua	9router	CWE-287	9router: Reverse proxy locality collapse allows unauthenticated access to 9ro…
CVE-2026-58493	5.1	40.6	getgrav	grav	CWE-74	grav-plugin-database: DSN Parameter Injection via Unsanitized Configuration V…
CVE-2026-55879	9.3	40.5	openreplay	openreplay	CWE-79	OpenReplay: Unauthenticated stored XSS leads to dashboard account takeover
CVE-2026-57850	8.7	40.4	RustDesk	RustDesk	CWE-862	RustDesk Missing Session Scope Enforcement Allows Out-of-Scope Control Messag…
CVE-2026-61461	8.7	40.4	langgenius	dify	CWE-89	Dify < 1.16.0-rc1 SQL Injection via MyScale Vector Store search_by_full_text
CVE-2026-55884	9.2	40.3	tilt-dev	tilt	CWE-306	Tilt: Missing authentication on the network-exposed Tilt HUD server
CVE-2026-9838	6.1	40.2	room34	ICS Calendar	CWE-79	ICS Calendar <= 12.0.9 - Reflected Cross-Site Scripting via 'htmltagtitle' Pa…
CVE-2026-14475	4.9	40.2	wplegalpages	Cookie Banner for GDPR / CCPA – WPLP Cookie Consent	CWE-89	Cookie Banner for GDPR / CCPA <= 4.3.6 - Authenticated (Administrator+) SQL I…
CVE-2026-59793	8.8	39.9	JetBrains	TeamCity	CWE-73	In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via …
CVE-2026-40007	7.5	39.8	Apache Software Foundation	Apache IoTDB	CWE-400	Apache IoTDB: Unauthenticated unbounded recursion in IoTDB AirGap receiver's …
CVE-2026-40454	7.5	39.8	Apache Software Foundation	Apache IoTDB C++ client	CWE-20	Apache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializ…
CVE-2026-55213	7.5	39.8	h2o	h2o	CWE-789	h2o: musl libc stack overflow (QPACK)
CVE-2026-55233	7.5	39.8	openresty	openresty	CWE-787	OpenResty: Buffer overflow when writing PROXY protocol v2 header to upstream
CVE-2026-55474	7.1	39.5	grokability	snipe-it	CWE-23	Snipe-IT: Directory traversal in displaySig
CVE-2026-59155	6.9	39.4	nezhahq	nezha	CWE-200	Nezha Monitoring: DDNS and Notification credential exposure via unredacted li…
CVE-2026-2397	9.8	39.0	Adam Retail Automation Ltd.	MobilMen 20T	CWE-89	SQLi in AdamPOS' MobilMen 20T
CVE-2026-52747	8.6	39.0	owasp-modsecurity	ModSecurity	CWE-180	ModSecurity: Multipart form-data parser silently strips embedded line breaks …
CVE-2026-55405	7.6	38.9	langchain4j	langchain4j	CWE-89	LangChain4j: SQL injection via metadata filters in langchain4j-mariadb and la…
CVE-2026-55229	7.5	38.9	gotenberg	gotenberg	CWE-918	Gotenberg: SSRF via LibreOffice document processing
CVE-2026-9857	4.3	38.7	saskaita123	Invoice123	CWE-862	Invoice123 <= 1.7.0 - Missing Authorization to Authenticated (Subscriber+) Se…
CVE-2026-57221	5.3	38.7	rabbitmq	rabbitmq-server	CWE-862	RabbitMQ: Passive queue/exchange declaration bypasses authorization checks, l…
CVE-2026-41878	7.1	38.5	R-SOFT SERWIS	DMS	CWE-639	Insecure Direct Object Reference in R-SOFT DMS
CVE-2026-15288	7.5	38.4	brainstormforce	SureForms – Drag & Drop Contact Form & Form Builder, Payment Form, Survey, Quiz & Calculator	CWE-20	SureForms – Drag and Drop Form Builder for WordPress <= 2.2.1 - Unauthenticat…
CVE-2026-39903	7.1	38.4	SimpleMachines	SMF	CWE-863	Simple Machines Forum Authorization Bypass via AttachmentApprove.php
CVE-2026-57167	5.1	38.4	Chocobozzz	PeerTube	CWE-80	PeerTube: Improper Neutralization of Script-Related HTML Tags in a Web Page (…
CVE-2026-55377	8.1	38.1	logto-io	logto	CWE-287	Logto: Account Center MFA management step-up bypass via WebAuthn registration…
CVE-2026-11992	4.3	37.9	easyappointments	Easy Appointments	CWE-862	Easy Appointments <= 3.12.27 - Missing Authorization to Authenticated (Author…
CVE-2026-57158	5.1	37.8	FreeRDP	FreeRDP	CWE-125	FreeRDP planar_decompress_plane_rle_only: heap OOB read — incomplete fix for …
CVE-2026-54468	6.5	37.4	Dell	Unisphere for PowerMax	CWE-22	Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path…
CVE-2026-2398	8.8	37.3	Adam Retail Automation Ltd.	MobilMen 20T	CWE-639	IDOR in AdamPOS' MobilMen 20T
CVE-2026-11392	6.1	37.1	thimpress	WP Hotel Booking	CWE-79	WP Hotel Booking <= 2.3.1 - Reflected Cross-Site Scripting via 'check_in_date…
CVE-2026-49213	8.1	37.1	baptisteArno	typebot.io	CWE-918	TypeBot: SSRF protection bypass via IPv6 unspecified address in Typebot HTTP …
CVE-2026-14461	5.1	36.8	BitWizard	mtr	CWE-125	Out-of-bound read in mtr
CVE-2026-6212	8.8	36.7	Teracity Software Technologies Inc.	TeraMIS	CWE-639	IDOR in Teracity's TeraMIS
CVE-2026-55460	7.1	36.4	grokability	snipe-it	CWE-863	Snipe-IT: Authorization bypass on bulk editing users
CVE-2026-55466	6.2	36.4	grokability	snipe-it	CWE-79	Snipe-IT: Stored XSS via inline-served attachment
CVE-2026-15289	5.9	36.3	wpdevart	Booking calendar, Appointment Booking System	CWE-89	Booking calendar, Appointment Booking System <= 3.2.17 - Unauthenticated Time…
CVE-2026-61455	7.1	36.1	getgrav	grav	CWE-409	Grav before 2.0.1 Decompression Bomb via ZipArchiver
CVE-2026-57476	6.3	36.1	Deloitte	AI Assist for Customer	CWE-306	Deloitte AI Assist for Customer unauthenticated RAG corpus read and write
CVE-2026-40452	7.5	36.0	Apache Software Foundation	Apache IoTDB	CWE-284	Apache IoTDB: Authorization bypass in /rest/v2/fastLastQuery exposes last-val…
CVE-2026-13244	8.1	35.9	Drupal	Tealium iQ Tag Management	CWE-915	Tealium iQ Tag Management - Critical - PHP object injection - SA-CONTRIB-2026…
CVE-2026-55809	8.1	35.9	Drupal	Flag attendance field	CWE-915	Flag attendance field - Critical - PHP object injection - SA-CONTRIB-2026-049
CVE-2026-55810	8.1	35.9	Drupal	Plotly.js Graphing	CWE-915	Plotly.js Graphing - Critical - PHP object injection - SA-CONTRIB-2026-050
CVE-2026-55672	7.4	35.9	zitadel	zitadel	CWE-287	ZITADEL: Missing client_id binding in OIDC authorization code exchange and re…
CVE-2026-15143	9.3	35.8	Red Hat	Red Hat OpenShift AI (RHOAI)	CWE-918	Guardrails-detectors: guardrails-detectors: ssrf and local file read via user…
CVE-2026-15317	2.1	35.7	Sipeed	PicoClaw	CWE-918	Sipeed PicoClaw Guarded Web Fetch Flow web.go WebFetchTool.Execute server-sid…
CVE-2026-56279	8.7	35.6	Capgo	Capgo	CWE-862	Capgo - Information Disclosure via get_orgs_v7 RPC Endpoint
CVE-2026-29519	6.2	35.6	lucee	Lucee	CWE-79	Lucee CFML Server Reflected XSS via URL Path Parsing
CVE-2026-15298	7.2	35.5	pechenki	TelSender – Сontact form 7, Events, Wpforms, ninja forms and woocommerce to telegram bot	CWE-79	TelSender <= 1.14.14 - Unauthenticated Stored Cross-Site Scripting via Telegr…
CVE-2026-56335	7.1	35.5	Capgo	Capgo	CWE-284	Capgo - Channel Configuration Mutation via Write-Scoped API Keys
CVE-2026-55881	7.1	35.4	openreplay	openreplay	CWE-639	OpenReplay: Cross-tenant session replay disclosure via missing session owners…
CVE-2026-55452	4.8	35.2	grokability	snipe-it	CWE-1236	Snipe-IT: CSV formula injection in Activity Report export
CVE-2026-15378	9.3	35.1	Red Hat	Red Hat OpenShift AI (RHOAI)	CWE-918	Guardrails-detectors: guardrails-detectors: ssrf and local file read via user…
CVE-2026-55780	2.4	35.1	M2Team	NanaZip	CWE-248	NanaZip: Uncaught exception / unbounded allocation in NanaZip .NET single-fil…
CVE-2026-11321	7.1	35.0	pluginsGLPI	datainjection	CWE-89	GLPI DataInjection Plugin Authenticated SQL Injection via CSV Import
CVE-2026-6802	5.3	35.0	fahadmahmood	Easy Upload Files During Checkout	CWE-639	Easy Upload Files During Checkout <= 3.0.1 - Missing Authorization to Unauthe…
CVE-2026-3907	6.4	35.0	prasunsen	Hostel	CWE-79	Hostel <= 1.1.7 - Authenticated (Contributor+) Stored Cross-Site Scripting vi…
CVE-2026-15284	6.4	34.6	kingaddons	King Addons for Elementor – 80+ Elementor Widgets, 4 000+ Elementor Templates, WooCommerce, Mega Menu, Popup Builder	CWE-79	King Addons for Elementor <= 51.1.62 - Authenticated (Subscriber+) Stored Cro…
CVE-2026-57213	5.7	34.7	rabbitmq	rabbitmq-server	CWE-79	RabbitMQ: Stored XSS federation management plugin via unsanitized consumer_ta…
CVE-2026-15329	2.1	34.7	zhayujie	CowAgent	CWE-200	zhayujie CowAgent Browser Tool browser_tool.py BrowserTool._do_navigate infor…
CVE-2026-12123	6.4	34.5	plugins360	All-in-One Video Gallery	CWE-918	All-in-One Video Gallery <= 4.8.5 - Authenticated (Subscriber+) Server-Side R…
CVE-2026-55671	2.3	34.1	zitadel	zitadel	CWE-918	ZITADEL: Server-Side Request Forgery (SSRF) and Denylist Bypass in Outgoing H…
CVE-2026-56668	8.1	34.0	zitadel	zitadel	CWE-862	ZITADEL: Unauthorized Token Privilege Escalation in OAuth2 Token Exchange
CVE-2026-61441	7.1	34.1	MervinPraison	PraisonAI	CWE-862	PraisonAI Platform before 0.1.9 Authorization Bypass via Dependencies
CVE-2026-13010	6.5	34.1	beardev	JoomSport – for Sports: Team & League, Football, Hockey & more	CWE-89	JoomSport <= 5.7.9 - Authenticated (Contributor+) SQL Injection via 'event' S…
CVE-2026-15104	6.5	34.1	wpdevteam	BetterDocs – AI Documentation, Knowledge Base, Docs, Wikis, FAQ with Chatbot	CWE-89	BetterDocs <= 4.6.0 - Authenticated (Custom+) SQL Injection via 'lang' Parameter
CVE-2026-11818	5.4	34.0	arraytics	WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System	CWE-862	WPCafe <= 3.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbit…
CVE-2026-53363	9.8	33.9	Linux	Linux	—	xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()
CVE-2026-52761	5.3	33.9	owasp-modsecurity	ModSecurity	CWE-467	ModSecurity: Transformation utf8toUnicode produces wrong output on i386 archi…
CVE-2026-61450	7.1	33.7	getgrav	grav	CWE-94	Grav before 2.0.2 Config Exfiltration via offsetGet Filter
CVE-2026-44918	5.5	33.7	OpenStack	Ironic	CWE-862	OpenStack Ironic through before 37.0.1 allows creation or modification of nod…
CVE-2026-61432	6.9	33.5	MervinPraison	PraisonAI	CWE-22	PraisonAI FastContext before 1.6.78 Path Traversal
CVE-2026-15089	9.1	33.3	Drupal	Commerce guest registration	CWE-287	Commerce guest registration - Critical - Unsupported - SA-CONTRIB-2026-079
CVE-2026-55789	8.5	33.1	logto-io	logto	CWE-91	Logto: SAML IdP injects user-controlled profile attributes raw into signed as…
CVE-2026-15320	2.1	33.0	Sipeed	PicoClaw	CWE-862	Sipeed PicoClaw pico.go rt.ReloadConfig authorization
CVE-2026-15070	8.8	32.9	wordpresschef	Salon Booking System – Free Version	CWE-352	Salon Booking System <= 10.30.32 - Cross-Site Request Forgery to Remote Code …
CVE-2026-57961	5.1	32.7	phpMyFAQ	phpMyFAQ	CWE-22	phpMyFAQ - Authenticated Path Traversal in PDF Export via concatenatePaths Fu…
CVE-2026-8609	7.5	32.6	Grafana	Grafana OSS	CWE-400	Pre-authentication denial of service via the OAuth login route
CVE-2026-41877	5.1	31.8	R-SOFT SERWIS	DMS	CWE-79	Stored XSS in R-SOFT DMS
CVE-2026-54329	7.7	31.7	grokability	snipe-it	CWE-862	Snipe-IT: Cross-Tenant Accessory Injection in Snipe-IT API
CVE-2026-33382	7.5	31.6	Grafana	Grafana OSS	CWE-400	Denial of service via unbounded request body size
CVE-2026-57214	7.1	31.5	rabbitmq	rabbitmq-server	CWE-79	RabbitMQ: Stored XSS in RabbitMQ management UI
CVE-2026-15026	4.3	31.5	carazo	Import and export users and customers	CWE-862	Import and export users and customers <= 2.4.0 - Missing Authorization to Aut…
CVE-2026-58661	5.3	31.4	n8n	n8n	CWE-770	n8n - Disk Space Exhaustion via Data-Table File Upload Endpoint
CVE-2026-1946	4.3	31.3	nandhiniwp	GW AI Website Builder	CWE-862	GW AI Website Builder <= 1.0.1 - Missing Authorization to Authenticated (Subs…
CVE-2026-15375	2.1	31.3	Eleveo	Call Recording Software	CWE-266	Eleveo Call Recording Software LDAP User users_ldap.jsp improper authorization
CVE-2026-15321	1.9	31.3	n/a	MyEMS	CWE-79	MyEMS Admin Backend svg.py on_post cross site scripting
CVE-2026-55187	5.8	31.2	axllent	mailpit	CWE-918	Mailpit: Incomplete SSRF protection in Link Check API via IPv6 transition mec…
CVE-2026-12685	7.5	30.9	Unknown	escortwp	—	EscortWP <= 3.6.2 - Content Deletion via Vendor-Authored Backdoor
CVE-2026-47422	5.3	30.9	frappe	frappe	CWE-862	Frappe: Unrestricted API access to save_report
CVE-2026-56667	7.3	30.7	zitadel	zitadel	CWE-79	ZITADEL: Stored XSS via Default URI Redirect in Login V2
CVE-2026-15287	6.5	30.7	rtcamp	rtMedia for WordPress, BuddyPress and bbPress	CWE-89	rtMedia for WordPress, BuddyPress and bbPress <= 4.6.18 - Authenticated (Subs…
CVE-2026-56312	6.9	30.5	Capgo	Capgo	CWE-287	Capgo - Account Creation Before CAPTCHA Validation in accept_invitation Endpoint
CVE-2026-55516	7.7	30.3	grokability	snipe-it	CWE-639	Snipe-IT: Cross-company asset maintenance re-parenting via API update
CVE-2026-56689	7.7	30.1	Dell	PowerFlex Manager	CWE-89	Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neut…
CVE-2026-12400	4.3	29.8	priyanshuchaudhary	FlowForms – Conversational Form Builder	CWE-639	FlowForms <= 1.1.1 - Authenticated (Contributor+) Insecure Direct Object Refe…
CVE-2026-57157	6.5	29.4	FreeRDP	FreeRDP	CWE-125	Out-of-bounds read in the camera device enumerator server (rdpecam) via unter…
CVE-2026-15286	4.3	29.3	stellarwp	Kadence Blocks — Page Builder Toolkit for Gutenberg Editor	CWE-863	Gutenberg Blocks with AI by Kadence WP – Page Builder Features <= 3.5.32 - In…
CVE-2026-15318	2.1	29.3	Sipeed	PicoClaw	CWE-285	Sipeed PicoClaw MQTT Channel mqtt.go authorization
CVE-2026-15332	2.1	29.3	zhayujie	CowAgent	CWE-862	zhayujie CowAgent Message Endpoint channel.py authorization
CVE-2026-59190	8.7	29.1	getgrav	grav	CWE-639	Grav Admin Plugin — IDOR Privilege Escalation via saveUser()
CVE-2026-55659	7.7	29.1	gristlabs	grist-core	CWE-79	Grist: XSS through unsafe value interpolation in server-rendered pages
CVE-2026-55670	2.3	28.9	zitadel	zitadel	CWE-284	ZITADEL: Cross-Tenant User Leakage via Recycled Identifiers
CVE-2026-60086	6.9	28.7	MervinPraison	PraisonAI	CWE-693	PraisonAI before 4.6.78 Prompt Injection Defense Bypass
CVE-2026-57994	6.9	28.5	phpMyFAQ	phpMyFAQ	CWE-200	phpMyFAQ - Information Disclosure of Inactive FAQ Content via Public API Endp…
CVE-2026-59154	4.3	28.4	wekan	wekan	CWE-863	Wekan: Checklist direct DDP updates can write checklist data into private boards
CVE-2026-12924	6.4	28.4	arraytics	Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)	CWE-79	Eventin <= 4.1.15 - Authenticated (Contributor+) Stored Cross-Site Scripting …
CVE-2026-13710	6.4	28.4	jegtheme	Jeg Kit for Elementor – Powerful Addons for Elementor, Widgets & Templates for WordPress	CWE-79	Jeg Kit for Elementor <= 3.2.6 - Authenticated (Contributor+) Stored Cross-Si…
CVE-2026-15285	6.4	28.2	posimyththemes	The Plus Addons for Elementor – Addons for Elementor, Page Templates, Widgets, Mega Menu, WooCommerce	CWE-79	The Plus Addons for Elementor <= 6.4.11 - Authenticated (Contributor+) Stored…
CVE-2026-15297	6.1	28.2	neeraj_slit	Brevo – Email, SMS, Web Push, Chat, and more.	CWE-79	Newsletter, SMTP, Email marketing and Subscribe forms by Brevo (formely Sendi…
CVE-2026-56309	5.3	28.2	Capgo	Capgo	CWE-770	Capgo - Plan Bypass via Unrestricted Attachment Upload Endpoint
CVE-2026-40009	6.5	28.0	Apache Software Foundation	Apache IoTDB	CWE-269	Apache IoTDB: Authenticated users can escalate to full tree-path access by re…
CVE-2026-55803	5.9	27.9	Drupal	Drupal core	CWE-915	Drupal core - Critical - PHP object injection - SA-CORE-2026-005
CVE-2026-55804	5.9	27.9	Drupal	Drupal core	CWE-915	Drupal core - Moderately critical - Gadget chain - SA-CORE-2026-006
CVE-2026-13039	5.3	27.9	arraytics	Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered)	CWE-862	Eventin 4.0.26 - 4.1.15 - Missing Authorization to Unauthenticated Payment By…
CVE-2026-61431	6.8	27.8	MervinPraison	PraisonAI	CWE-22	PraisonAI before 4.6.78 Path Traversal via ContextGatherer
CVE-2026-59796	8.1	27.6	JetBrains	TeamCity	CWE-862	In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due …
CVE-2026-15296	6.4	27.4	cservit	affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display	CWE-79	affiliate-toolkit – WP Affiliate Plugin with Amazon <= 3.7.0 - Authenticated …
CVE-2026-11914	5.9	27.4	Drupal	Composer	CWE-20	Composer - Critical - Unsupported - SA-CONTRIB-2026-046
CVE-2026-15377	2.1	27.4	Eleveo	Call Recording Software	CWE-266	Eleveo Call Recording Software sendlogfile improper authorization
CVE-2026-15373	2.1	27.3	Eleveo	Call Recording Software	CWE-266	Eleveo Call Recording Software userAddAction.do improper authorization
CVE-2026-15374	2.1	27.3	Eleveo	Call Recording Software	CWE-266	Eleveo Call Recording Software Group roleAddAction.do improper authorization
CVE-2026-15376	2.1	27.3	Eleveo	Call Recording Software	CWE-266	Eleveo Call Recording Software statisticReportAction.do improper authorization
CVE-2026-55475	5.7	26.9	grokability	snipe-it	CWE-863	Snipe-IT: Import created_by can be overwritten
CVE-2026-55462	4.3	26.7	grokability	snipe-it	CWE-863	Snipe-IT: Authorization bypass on print inventory page
CVE-2026-55827	8.8	26.4	FreeRDP	FreeRDP	CWE-131	FreeRDP: Heap out-of-bounds write in RemoteFX (RFX) Cache Bitmap V3 decode
CVE-2026-55806	5.9	26.4	Drupal	Drupal core	CWE-601	Drupal core - Less critical - Cache poisoning and open redirect - SA-CORE-202…
CVE-2026-57230	5.4	26.3	openreplay	openreplay	CWE-89	OpenReplay: Authenticated ClickHouse SQL injection via session search
CVE-2026-55880	7.1	26.3	openreplay	openreplay	CWE-639	OpenReplay: Cross-user IDOR in notes and dashboard widgets
CVE-2026-54714	6.1	26.2	logto-io	logto	CWE-79	Logto: XSS via unescaped RelayState in SAML auto-submit form
CVE-2026-59795	6.1	26.2	JetBrains	TeamCity	CWE-79	In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent re…
CVE-2026-15081	7.4	26.0	Drupal	Location Selector	CWE-89	Location Selector - Critical - SQL Injection - SA-CONTRIB-2026-072
CVE-2026-55370	6.4	26.0	logto-io	logto	CWE-294	Logto: TOTP code can be replayed within the RFC 6238 validity window (one-tim…
CVE-2026-55476	5.3	26.0	grokability	snipe-it	CWE-862	Snipe-IT: Unauthorized Asset Request Cancellation via Unguarded cancel_by_adm…
CVE-2026-55515	5.0	26.0	grokability	snipe-it	CWE-639	Snipe-IT: Cross-company deletion of pending checkout acceptances via unscoped…
CVE-2026-12955	4.3	26.0	wplegalpages	Cookie Banner for GDPR / CCPA – WPLP Cookie Consent	CWE-862	Cookie Banner for GDPR / CCPA <= 4.3.6 - Missing Authorization to Authenticat…
CVE-2026-12108	4.4	25.9	looswebstudio	Highlighting Code Block	CWE-79	Highlighting Code Block <= 2.2.0 - Authenticated (Administrator+) Stored Cros…
CVE-2026-13247	6.4	25.5	logichunt	Logo Slider WP – Responsive Logo Carousel, Logo Gallery & Logo Showcase	CWE-79	Logo Slider <= 5.5 - Authenticated (Contributor+) Stored Cross-Site Scripting…
CVE-2026-15292	6.4	25.5	tibouille	Sudoku Shortcode	CWE-79	Sudoku Shortcode <= 1.0.0 - Authenticated (Contributor+) Cross-Site Scripting…
CVE-2026-15299	6.4	25.5	wealcoder	Animation Addons for Elementor – GSAP Motion Elementor Addons & Website Templates	CWE-79	Animation Addons for Elementor <= 2.6.3 - Authenticated (Contributor+) Stored…
CVE-2026-55472	4.3	25.4	grokability	snipe-it	CWE-863	Snipe-IT: API Location Creation Bypasses FMCS Parent-Child Company Boundary V…
CVE-2026-55664	4.3	25.4	gristlabs	grist-core	CWE-200	Grist: Insufficient access control in the /forms endpoint exposes table metadata
CVE-2026-15086	5.9	24.9	Drupal	Raw Formatter [Meta Tag Formatter]	—	Raw Formatter [Meta Tag Formatter] - Critical - Unsupported - SA-CONTRIB-2026…
CVE-2026-55479	5.3	24.8	grokability	snipe-it	CWE-863	Snipe-IT: Incorrect permission for legacy license checkin API
CVE-2026-56329	5.3	24.8	Capgo	Capgo	CWE-436	Capgo - Cross-Tenant Preview Namespace Collision via Non-Bijective Underscore…
CVE-2026-56690	8.5	24.6	Dell	PowerFlex Manager	CWE-89	Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neut…
CVE-2026-55641	8.2	24.5	decolua	9router	CWE-290	9router: Unauthenticated `/v1` proxy access via `Host`-header spoofing → open…
CVE-2026-59794	5.4	24.6	JetBrains	TeamCity	CWE-79	In JetBrains TeamCity before 2026.1.2 stored XSS on the cloud profile page wa…
CVE-2026-56664	4.2	24.0	zitadel	zitadel	CWE-613	ZITADEL: Missing Token Lifecyle Validation (`exp` and `iat`) in JWT IdP Provider
CVE-2026-55481	6.2	23.6	grokability	snipe-it	CWE-79	Snipe-IT: CSS Injection via `header_color` Setting
CVE-2026-59180	3.1	23.7	caronc	apprise	CWE-200	Apprise forwards configured auth headers across cross-origin HTTP redirects
CVE-2026-38057	7.0	23.4	ST Engineering iDirect	Evolution iQ‑Series terminals	CWE-352	ST Engineering iDirect iQ-Series Terminals Cross-Site request forgery
CVE-2026-1667	7.2	23.2	cifi	GEO Plugin by Squirrly SEO	CWE-862	SEO Plugin by Squirrly SEO <= 14.0.0 - Unauthenticated Arbitrary Post Creatio…
CVE-2026-55461	6.1	23.1	grokability	snipe-it	CWE-601	Snipe-IT: Open Redirect After User Edit
CVE-2026-11915	5.9	23.0	Drupal	Brute force attack protection	CWE-307	Brute force attack protection - Critical - Unsupported - SA-CONTRIB-2026-047
CVE-2026-15087	5.9	23.0	Drupal	Clean RESTful	CWE-287	Clean RESTful - Critical - Unsupported - SA-CONTRIB-2026-078
CVE-2026-55890	4.8	23.0	getgrav	grav	CWE-79	Grav: Stored CSS injection via Markdown image ?style=… reaches MediaObjectTra…
CVE-2026-12276	5.3	22.4	Unknown	LA-Studio Element Kit for Elementor	—	LA-Studio Element Kit for Elementor < 1.6.1 - Unauthenticated Open Registration
CVE-2026-54470	5.3	22.5	Dell	Unisphere for PowerMax	CWE-611	Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior contain(s) an Impr…
CVE-2026-54423	8.2	22.3	OpenStack	Ironic	CWE-424	In OpenStack Ironic before 37.0.1, an Ironic user with the ability to deploy …
CVE-2026-60091	6.9	22.1	MervinPraison	PraisonAI	CWE-918	PraisonAI before 4.6.78 Unauthenticated SSRF via webhook_url
CVE-2026-5069	5.4	21.9	wpmanageninja	Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder	CWE-863	Fluent Forms <= 6.2.1 - Incorrect Authorization to Authenticated (Subscriber+…
CVE-2025-30008	5.1	21.7	hestiacp	hestiacp	CWE-79	HestiaCP < 1.9.5 Stored XSS via DNS Record Management Interface
CVE-2026-55464	4.8	21.5	grokability	snipe-it	CWE-79	Snipe-IT: Stored XSS via Markdown custom field
CVE-2026-55478	5.3	21.4	grokability	snipe-it	CWE-639	Snipe-IT: Missing object-level authorization in Kits API
CVE-2026-53450	7.4	21.0	coturn	coturn	CWE-918	Coturn: IPv4-mapped 127.0.0.1 bypasses default loopback peer protection
CVE-2026-15028	3.9	20.5	Red Hat	Red Hat Hardened Images	CWE-805	Libarchive: heap overflow oob read while parsing a tar archive contains a pax…
CVE-2026-56666	4.8	20.5	zitadel	zitadel	CWE-287	ZITADEL: Auto-linking by email: IdP-side email verification is not checked
CVE-2026-15079	5.4	20.3	Drupal	Login Disable	CWE-307	Login Disable - Moderately critical - Access bypass - SA-CONTRIB-2026-070
CVE-2026-13242	6.5	19.5	Drupal	Geolocation Field	CWE-89	Geolocation Field - Critical - SQL Injection - SA-CONTRIB-2026-062
CVE-2026-55808	5.4	19.2	Drupal	Drupal core	CWE-79	Drupal core - Moderately critical - Improper validation - SA-CORE-2026-009
CVE-2026-41879	8.2	18.6	R-SOFT SERWIS	DMS	CWE-328	Weak password hashing in R-SOFT DMS
CVE-2026-13240	6.5	18.6	Drupal	Paragraphs	CWE-862	Paragraphs - Less critical - Access bypass - SA-CONTRIB-2026-060
CVE-2026-13241	6.5	18.6	Drupal	Paragraphs	CWE-862	Paragraphs - Moderately critical - Access bypass - SA-CONTRIB-2026-061
CVE-2026-13239	6.5	18.1	Drupal	WissKI	CWE-862	WissKI - Critical - Access bypass - SA-CONTRIB-2026-059
CVE-2026-56665	4.2	18.0	zitadel	zitadel	CWE-613	ZITADEL: Missing Token Expiration (`exp`) Validation in JWT IdP Provider
CVE-2026-55885	6.8	17.9	getgrav	grav	CWE-312	Grav: Admin Backup Zip File Exposes Account Credentials and Configuration Sec…
CVE-2026-54919	7.4	17.8	yhirose	cpp-httplib	CWE-295	cpp-httplib: TLS certificate chain verification bypassed for IP-literal hosts…
CVE-2026-55883	8.3	17.6	tilt-dev	tilt	CWE-345	Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream
CVE-2026-15301	6.4	17.4	digiblogger	BuddyHolis TableSearch	CWE-79	BuddyHolis TableSearch <= 1.1.0 - Authenticated (Contributor+) Stored Cross-S…
CVE-2026-56676	7.4	17.3	decolua	9router	CWE-367	9router: Image prefetch DNS rebinding allows SSRF to internal services
CVE-2026-10770	6.1	16.8	Drupal	Anti-Spam by CleanTalk	CWE-79	Anti-Spam by CleanTalk - Moderately critical - Cross site scripting - SA-CONT…
CVE-2026-58587	6.1	16.8	Drupal	Drupal Canvas	CWE-79	Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-065
CVE-2026-58588	6.1	16.8	Drupal	Drupal Canvas	CWE-79	Drupal Canvas - Moderately critical - Improper validation - SA-CONTRIB-2026-066
CVE-2026-13231	6.1	16.4	Drupal	Advanced Content Feedback (aka admin_feedback)	CWE-79	Advanced Content Feedback (aka admin_feedback) - Moderately critical - Cross-…
CVE-2026-13234	6.1	16.4	Drupal	AI (Artificial Intelligence)	CWE-79	AI (Artificial Intelligence) - Moderately critical - Information Disclosure /…
CVE-2026-3251	6.4	15.7	Webremium Istanbul Web Design	Mezunum Satiyorum	CWE-79	XSS in Webremium's Mezunum Satiyorum
CVE-2026-15283	4.4	15.1	wpvividplugins	WPvivid Backup for MainWP	CWE-79	WPvivid Backup for MainWP <= 0.9.33 - Authenticated (Admin+) Stored Cross-Sit…
CVE-2026-15295	4.4	15.1	dcooney	Ajax Load More – Infinite Scroll, Load More, & Lazy Load	CWE-692	Ajax Load More <= 7.0.1 - Authenticated (Administrator+) Stored Cross-Site Sc…
CVE-2026-8595	5.4	14.8	Grafana	Grafana OSS	CWE-79	Stored XSS in the table panel (TableNG)
CVE-2026-56354	5.1	14.6	n8n	n8n	CWE-79	n8n - Cross-Site Scripting and Open Redirect in Form Node
CVE-2026-61456	5.1	14.2	getgrav	grav	CWE-79	Grav before 1.0.3 Stored XSS via SVG Upload API
CVE-2026-56373	6.3	13.7	ImageMagick	ImageMagick	CWE-416	ImageMagick - Use-After-Free Write in PDB Decoder
CVE-2026-10769	5.4	13.7	Drupal	Commerce Core	CWE-79	Commerce Core - Moderately critical - Cross site scripting - SA-CONTRIB-2026-041
CVE-2026-15082	5.4	13.7	Drupal	Siteimprove Analytics	CWE-79	Siteimprove Analytics - Moderately critical - Cross-site Scripting - SA-CONTR…
CVE-2026-15084	5.4	13.7	Drupal	UI Patterns (SDC in Drupal UI)	CWE-79	UI Patterns (SDC in Drupal UI) - Moderately critical - Cross site scripting -…
CVE-2026-15085	5.4	13.7	Drupal	AI SEO/GEO Analyzer	CWE-79	AI SEO/GEO Analyzer - Moderately critical - Cross-site Scripting - SA-CONTRIB…
CVE-2026-58589	5.4	13.6	Drupal	FlowDrop	CWE-862	FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-067
CVE-2026-58590	5.4	13.6	Drupal	FlowDrop	CWE-862	FlowDrop - Moderately critical - Access bypass - SA-CONTRIB-2026-068
CVE-2026-59791	3.5	13.4	JetBrains	YouTrack	CWE-1021	In JetBrains YouTrack before 2026.2.17012 cSS injection via Mermaid diagram r…
CVE-2026-11908	5.4	13.4	Drupal	Tagify	CWE-79	Tagify - Moderately critical - Cross-site scripting (XSS) - SA-CONTRIB-2026-043
CVE-2026-58591	5.4	13.4	Drupal	Colorbox	CWE-79	Colorbox - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-069
CVE-2026-15083	4.2	13.1	Drupal	ECA: Event - Condition - Action	CWE-915	ECA: Event - Condition - Action - Less critical - Information disclosure - SA…
CVE-2026-58225	2.1	12.8	elixir-ecto	postgrex	CWE-89	SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect …
CVE-2026-55807	3.1	12.4	Drupal	Drupal core	CWE-918	Drupal core - Moderately critical - Server-side request forgery - SA-CORE-202…
CVE-2026-13237	4.8	12.0	Drupal	AI Agents	CWE-863	AI Agents - Moderately critical - Information disclosure, Access bypass - SA-…
CVE-2026-13238	4.8	12.0	Drupal	Commerce Realex / Global Payments	CWE-863	Commerce Realex / Global Payments - Moderately critical - Access Bypass - SA-…
CVE-2026-13232	3.1	11.0	Drupal	Advanced Content Feedback (aka admin_feedback)	CWE-863	Advanced Content Feedback (aka admin_feedback) - Moderately critical - Access…
CVE-2026-11909	3.3	10.8	Drupal	Examples for Developers	CWE-862	Examples for Developers - Moderately critical - Access bypass - SA-CONTRIB-20…
CVE-2026-13233	3.3	10.8	Drupal	OpenAI Provider	CWE-918	OpenAI Provider - Moderately critical - Server-side Request Forgery - SA-CONT…
CVE-2026-13235	3.3	10.8	Drupal	AI (Artificial Intelligence)	CWE-862	AI (Artificial Intelligence) - Moderately critical - Access bypass - SA-CONTR…
CVE-2026-53449	6.0	10.7	coturn	coturn	CWE-73	Coturn: Arbitrary File Write via CLI psd Command
CVE-2026-6440	4.3	10.6	sovlix	GoodMeet – Google Meet Integration for Webinar, Meeting & Video Conference	CWE-352	GoodMeet <= 1.1.8 - Cross-Site Request Forgery to Google Meet Credential Rese…
CVE-2026-56813	2.1	10.2	elixir-plug	plug	CWE-141	Cookie attribute injection in Plug.Conn.Cookies.encode/2
CVE-2026-53657	8.2	9.4	lima-vm	lima	CWE-276	Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM …
CVE-2026-56254	8.3	9.3	capacitor-updater	capacitor-updater	CWE-320	capacitor-updater - End-to-End Encryption Bypass via Private Key Distribution
CVE-2026-13236	4.2	8.4	Drupal	AI Agents	CWE-862	AI Agents - Less critical - Access bypass - SA-CONTRIB-2026-056
CVE-2026-54736	8.2	7.6	phalcon	cphalcon	CWE-208	Phalcon: Non-constant-time HMAC verification in `Encryption\Crypt::decrypt` (…
CVE-2026-60089	6.9	7.5	MervinPraison	PraisonAI	CWE-22	PraisonAI before 1.6.78 Path Traversal via config.toml
CVE-2026-7639	7.8	7.5	Imagination Technologies	Graphics DDK	CWE-459	GPU DDK - Page UAF read in PMMETA_PROTECT heap memory
CVE-2026-41154	7.8	7.5	Imagination Technologies	Graphics DDK	CWE-787	GPU DDK - Incorrect Index Calculation in CMA Cleanup Path of AllocOSPages_Sparse
CVE-2026-61437	8.5	6.8	MervinPraison	PraisonAI	CWE-693	PraisonAI before 1.6.78 Remote Code Execution via tools.py
CVE-2026-21043	6.7	6.6	Samsung Mobile	Samsung Mobile Devices	—	Path traversal in Wallpaper service prior to SMR Jul-2026 Release 1 allows lo…
CVE-2026-56366	4.8	6.4	ImageMagick	ImageMagick	CWE-401	ImageMagick - Memory Leak in META Reader APP1JPEG Error Path
CVE-2026-21055	8.5	6.3	Samsung Mobile	Bixby	—	Improper export of android application components in Bixby prior to version 4…
CVE-2026-34196	7.8	6.1	Imagination Technologies	Graphics DDK	CWE-416	GPU DDK - UAF read and/or write of arbitrary physical memory due to integer t…
CVE-2026-15146	5.9	5.8	GNU wget	Wget	—	CVE-2026-15146
CVE-2026-21052	6.8	5.4	Samsung Mobile	Samsung Mobile Devices	—	Path traversal in SemClipboardService prior to SMR Jul-2026 Release 1 allows …
CVE-2026-55782	2.4	5.5	M2Team	NanaZip	CWE-400	NanaZip: Unbounded memory allocation (DoS) in NanaZip WebAssembly parser via …
CVE-2026-21053	5.1	5.2	Samsung Mobile	Samsung Email	—	Improper input validation in Samsung Email prior to version 6.2.13.1 allows l…
CVE-2026-55781	2.4	5.3	M2Team	NanaZip	CWE-400	NanaZip: Unbounded memory allocation (DoS) in NanaZip UFS parser via unvalida…
CVE-2026-55783	2.4	5.3	M2Team	NanaZip	CWE-476	NanaZip: NULL pointer dereference in Extract() of all seven NanaZip custom ar…
CVE-2026-21042	8.4	4.9	Samsung Mobile	Samsung Mobile Devices	—	Out-of-bounds write in libsavsac.so prior to SMR Jul-2026 Release 1 allows lo…
CVE-2026-21049	8.4	4.9	Samsung Mobile	Samsung Mobile Devices	—	Out-of-bounds write in libpadm.so library prior to SMR Jul-2026 Release 1 all…
CVE-2026-55669	4.2	4.9	zitadel	zitadel	CWE-346	ZITADEL: Missing Token Audience Validation (`aud`) in JWT IdP Provider
CVE-2026-54000	7.0	4.7	osquery	osquery	CWE-122	osquery: Heap buffer overflow in `getProcessCurrentDirectory()` via `processe…
CVE-2026-54001	7.0	4.7	osquery	osquery	CWE-122	osquery: Heap buffer overflow via `authenticode` table (Windows)
CVE-2026-21057	6.8	4.6	Samsung Mobile	Samsung Pass	—	Improper input validation in Samsung Pass prior to version 5.2.10.3 allows lo…
CVE-2026-21039	6.9	4.5	Samsung Mobile	Samsung Mobile Devices	—	Improper access control in Settings prior to SMR Jul-2026 Release 1 allows lo…
CVE-2026-21041	6.9	4.5	Samsung Mobile	Samsung Mobile Devices	—	Improper access control in SamsungSEAgentService prior to SMR Jul-2026 Releas…
CVE-2026-21054	6.9	4.5	Samsung Mobile	InputSharing	—	Improper export of android application components in InputSharing prior to ve…
CVE-2026-21050	5.1	4.5	Samsung Mobile	Samsung Mobile Devices	—	Improper access control in SmartThingsKit prior to SMR Jul-2026 Release 1 all…
CVE-2026-21051	5.1	4.5	Samsung Mobile	Samsung Mobile Devices	—	Incorrect default permissions in WLAN security prior to SMR Jul-2026 Release …
CVE-2026-45196	7.8	3.9	Imagination Technologies	Graphics DDK	CWE-280	GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized …
CVE-2026-15080	4.3	3.7	Drupal	Ray Enterprise Translation	CWE-352	Ray Enterprise Translation - Moderately critical - Cross site request forgery…
CVE-2026-21044	5.8	3.4	Samsung Mobile	Samsung Mobile Devices	—	Improper authorization in KnoxGuardManager prior to SMR Jul-2026 Release 1 al…
CVE-2026-21040	6.9	2.9	Samsung Mobile	Samsung Mobile Devices	—	Improper access control in IAFDService prior to SMR Jul-2026 Release 1 allows…
CVE-2026-21056	4.8	2.9	Samsung Mobile	Samsung Health	—	Improper authorization in Samsung Health prior to version 7.00.0.107 allows l…
CVE-2026-21046	8.4	2.7	Samsung Mobile	Samsung Mobile Devices	—	Time-of-check time-of-use race condition in fabricKeymaster trustlet prior to…
CVE-2026-46388	4.4	2.5	osquery	osquery	CWE-279	osquery: Unprivileged users can temporarily read file carve contents
CVE-2026-45203	7.8	2.4	Imagination Technologies	Graphics DDK	CWE-367	GPU DDK - rgxfw_hwperf_ufo() re-reads psCmdHeader->ui32CmdSize after initial …
CVE-2026-13243	4.8	2.2	Drupal	Salesforce Suite	CWE-352	Salesforce Suite - Moderately critical - Cross-site request forgery - SA-CONT…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-07-10 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.