Security Box Score — July 22, 2026

198 CVEs published, led by MongoDB (26).

198 CVEs published July 22, 2026: 17 critical, 103 high, 65 medium, 13 low; 1 in the KEV catalog at press time; 3 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 173 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	7092	19495	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

835 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	479	1959	178	1079	596	1	11	2	0.1	7.8	.0016	+379 ▲
microsoft	646	1403	96	975	318	14	286	24	1.7	7.8	.0047	+426 ▲
google	115	1380	156	629	556	39	77	6	0.4	7.8	.0024	-569 ▼
red hat	102	324	16	127	159	22	2	0	0.0	6.5	.0032	+23 ▲
apple	0	104	2	28	72	2	88	7	6.7	6.5	.0032	-14 ▼
canonical	7	27	3	8	11	5	0	0	0.0	5.6	.0014	+5 ▲
suse	8	21	4	12	4	1	0	0	0.0	8.5	.0039	+4 ▲
freebsd	0	16	0	12	4	0	0	0	0.0	7.8	.0016	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	15	37	8	18	11	0	56	11	29.7	7.5	.0057	+6 ▲
ubiquiti	25	36	14	21	1	0	3	3	8.3	8.8	.0049	+20 ▲
palo alto networks	14	25	1	3	14	7	13	2	8.0	4.7	.0028	+5 ▲
netgear	6	23	0	0	22	1	0	0	0.0	4.6	.0024	-11 ▼
fortinet	13	22	6	6	10	0	28	5	22.7	7.3	.0039	+11 ▲
f5	8	16	5	8	3	0	4	1	6.3	8.6	.0057	+2 ▲
vmware	8	12	1	8	2	1	7	1	8.3	8.2	.0039	+5 ▲
checkpoint	3	12	3	6	3	0	3	2	16.7	7.7	.0455	0

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	92	247	55	95	85	11	33	1	0.4	7.5	.0059	0
mozilla	71	127	51	42	34	0	9	0	0.0	8.1	.0031	+22 ▲
drupal	46	51	6	5	35	5	4	1	2.0	5.9	.0026	+46 ▲
gitlab	7	38	0	5	27	6	4	2	5.3	4.7	.0032	-4 ▼
github	5	11	1	2	8	0	0	0	0.0	6.0	.0042	+5 ▲
docker	0	7	0	5	2	0	0	0	0.0	8.2	.0016	-4 ▼
wordpress	2	2	1	0	1	0	2	2	100.0	7.9	.8879	+2 ▲

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	1109	1379	343	653	322	61	27	3	0.2	8.1	.0036	+867 ▲
adobe	95	239	26	104	105	4	19	3	1.3	7.7	.0026	-34 ▼
ibm	37	161	52	54	55	0	6	0	0.0	7.5	.0036	+5 ▲
progress	24	33	3	24	6	0	6	0	0.0	7.5	.0041	+19 ▲
solarwinds	15	22	16	3	3	0	10	4	18.2	9.1	.0058	+12 ▲
zohocorp	2	5	1	2	2	0	0	0	0.0	7.1	.0121	+2 ▲
veeam	1	5	2	3	0	0	1	0	0.0	8.6	.0051	0
atlassian	3	3	0	3	0	0	13	0	0.0	8.0	.0026	+3 ▲

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
rockwell automation	17	24	4	18	2	0	0	8.7	.0029	+10 ▲
synology	0	23	2	5	13	3	0	5.6	.0025	-5 ▼
d-link	8	20	0	5	9	6	3	5.5	.0105	-1 ▼
siemens	7	16	1	8	7	0	0	7.6	.0024	0
abb	1	7	0	4	3	0	0	7.2	.0018	-4 ▼
schneider electric	0	6	0	4	2	0	0	7.8	.0042	-1 ▼
hikvision	5	5	0	3	2	0	0	7.2	.0038	+5 ▲
moxa	0	5	0	3	2	0	0	7.0	.0029	-5 ▼

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
sourcecodester	49	120	0	0	62	58	0	0	0.0	5.5	.0034	+12 ▲
openclaw	44	111	0	58	39	14	0	0	0.0	7.0	.0026	-17 ▼
dell	43	99	5	47	44	3	2	1	1.0	7.1	.0021	+12 ▲
capgo	22	83	2	42	38	1	0	0	0.0	7.1	.0037	-9 ▼
nvidia	41	80	12	52	16	0	0	0	0.0	7.8	.0037	+35 ▲
imagemagick	32	73	1	5	55	12	0	0	0.0	5.3	.0019	+2 ▲
spring	0	73	2	31	39	1	0	0	0.0	6.5	.0024	-71 ▼
itsourcecode	18	71	0	0	19	52	0	0	0.0	2.1	.0033	-4 ▼

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-63030	.9779	99.9	9.8
CVE-2026-16232	.8912	99.8	9.3
CVE-2026-20230	.8820	99.8	8.6
CVE-2026-34910	.8747	99.7	10.0
CVE-2026-34908	.8519	99.7	10.0
CVE-2026-50522	.8461	99.7	9.8
CVE-2026-15409	.8366	99.7	10.0
CVE-2026-60137	.7979	99.6	5.9
CVE-2026-6875	.7758	99.5	9.5
CVE-2026-25089	.7611	99.5	9.8

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-34910	10.0	.8747	KEV
CVE-2026-34908	10.0	.8519	KEV
CVE-2026-15409	10.0	.8366	KEV
CVE-2026-34909	10.0	.6390	KEV
CVE-2026-48282	10.0	.4239	KEV
CVE-2026-56290	10.0	.3038	KEV
CVE-2026-48939	10.0	.1973	KEV
CVE-2026-48908	10.0	.1482	KEV
CVE-2026-56291	10.0	.1459	KEV
CVE-2026-59726	10.0	.0688

Most disclosures (vendor)
Vendor	CVEs
oracle	1109
linux	892
microsoft	647
google	521
red hat	151
apache	121
adobe	108
ibm	80
mozilla	72
sourcecodester	61

Most KEV additions (YTD)
Vendor	KEV
microsoft	24
cisco	11
apple	7
google	6
fortinet	5
ivanti	5
solarwinds	4
adobe	3
berriai	3
oracle	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	62
PyPI	5
npm	5
NuGet	3
Packagist	1
crates.io	1

Fastest to KEV
CVE	Vendor	Days
CVE-2021-27137	DD-WRT	0
CVE-2026-0770	Langflow	0
CVE-2026-12569	PTC	0
CVE-2026-15409	SonicWall	0
CVE-2026-15410	SonicWall	0
CVE-2026-16232	checkpoint	0
CVE-2026-20230	Cisco	0
CVE-2026-25089	Fortinet	0
CVE-2026-34908	Ubiquiti Inc	0
CVE-2026-34909	Ubiquiti Inc	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1708
CVE-2021-27102	n/a	2021-11-17	1708
CVE-2021-27101	n/a	2021-11-17	1708
CVE-2021-27103	n/a	2021-11-17	1708
CVE-2021-21017	Adobe	2021-11-17	1708
CVE-2021-28550	Adobe	2021-11-17	1708
CVE-2021-42013	Apache Software Foundation	2021-11-17	1708
CVE-2021-41773	Apache Software Foundation	2021-11-17	1708
CVE-2021-30858	Apple	2021-11-17	1708
CVE-2021-30860	Apple	2021-11-17	1708

Transactions

EXPLOIT PUBLISHED — D-Link DNS-320: 4 CVEs (CVE-2026-16329, CVE-2026-16331, CVE-2026-16332, CVE-2026-16447). Public exploit references added.

EXPLOIT PUBLISHED — SourceCodester Class and Exam Timetabling System: 3 CVEs (CVE-2026-16484, CVE-2026-16485, CVE-2026-16486). Public exploit references added.

EXPLOIT PUBLISHED — zsadmin2025 ZS-Admin: 3 CVEs (CVE-2026-16449, CVE-2026-16450, CVE-2026-16451). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2016-20096 (Kunshi Network Technology Co., Ltd. Linknat VOS3000). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-27137 (DD-WRT). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-60689. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16334 (itsourcecode Hospital Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-20230 (Cisco Unified Communications Manager). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-3833 (gnutls). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48029 (strukturag libheif). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-50475 (Microsoft Windows 10 Version 1607). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-5497 (vllm-project/vllm). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-58613 (Microsoft Windows 10 Version 1809). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-63080 (aptabase). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-63107 (LimeSurvey). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-64821 (thiagopena djangoSIGE). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-64822 (thiagopena djangoSIGE). Public exploit reference added.

RESCORED — Microsoft Windows 10 Version 1607: 45 CVEs (CVE-2026-44806, CVE-2026-49164, CVE-2026-49171, CVE-2026-49184, CVE-2026-49789, CVE-2026-49791, CVE-2026-50312, CVE-2026-50321, CVE-2026-50330, CVE-2026-50358, CVE-2026-50359, CVE-2026-50390, CVE-2026-50432, CVE-2026-50439, CVE-2026-50445, CVE-2026-50451, CVE-2026-50453, CVE-2026-50477, CVE-2026-50482, CVE-2026-50490, CVE-2026-50497, CVE-2026-50502, CVE-2026-50504, CVE-2026-50505, CVE-2026-50661, CVE-2026-50667, CVE-2026-50694, CVE-2026-56186, CVE-2026-56188, CVE-2026-56189, CVE-2026-56649, CVE-2026-57085, CVE-2026-57087, CVE-2026-57090, CVE-2026-57093, CVE-2026-57095, CVE-2026-57097, CVE-2026-57979, CVE-2026-58533, CVE-2026-58534, CVE-2026-58535, CVE-2026-58539, CVE-2026-58594, CVE-2026-58608, CVE-2026-58640). CVSS rescored — before/after on each CVE page.

RESCORED — Microsoft Windows 10 Version 1809: 16 CVEs (CVE-2026-49167, CVE-2026-50307, CVE-2026-50348, CVE-2026-50375, CVE-2026-50378, CVE-2026-50383, CVE-2026-50415, CVE-2026-50450, CVE-2026-50452, CVE-2026-50495, CVE-2026-50680, CVE-2026-54129, CVE-2026-58526, CVE-2026-58528, CVE-2026-58547, CVE-2026-58638). CVSS rescored — before/after on each CVE page.

RESCORED — Microsoft Windows 11 Version 24H2: 15 CVEs (CVE-2026-50340, CVE-2026-50393, CVE-2026-50396, CVE-2026-50398, CVE-2026-50413, CVE-2026-50414, CVE-2026-50418, CVE-2026-50420, CVE-2026-50487, CVE-2026-50674, CVE-2026-50676, CVE-2026-50687, CVE-2026-54127, CVE-2026-54990, CVE-2026-58527). CVSS rescored — before/after on each CVE page.

RESCORED — SourceCodester Class and Exam Timetabling System: 3 CVEs (CVE-2026-16152, CVE-2026-16202, CVE-2026-16227). CVSS rescored — before/after on each CVE page.

RESCORED — CVE-2022-2712 (The Eclipse Foundation Eclipse GlassFish). CVSS 6.5 → 7.5 (NVD).

RESCORED — CVE-2026-16073 (AstrBotDevs AstrBot). CVSS 5.1 → 2 (NVD).

RESCORED — CVE-2026-16082 (Sipeed PicoClaw). CVSS 4.8 → 1.9 (NVD).

RESCORED — CVE-2026-16123 (nextlevelbuilder GoClaw). CVSS 5.3 → 2.1 (NVD).

RESCORED — CVE-2026-16129 (princezuda SafestClaw). CVSS 4.8 → 1.9 (NVD).

RESCORED — CVE-2026-16196 (Sipeed PicoClaw). CVSS 5.3 → 2.1 (NVD).

RESCORED — CVE-2026-16214 (geex-arts django-jet). CVSS 5.3 → 2.1 (NVD).

RESCORED — CVE-2026-16220 (code-projects Online Examination System). CVSS 5.3 → 2.1 (NVD).

RESCORED — CVE-2026-16488 (QUSETIONS MiniCode-Python). CVSS 2.3 → 1.3 (NVD).

RESCORED — CVE-2026-16489 (jsforce). CVSS 4.8 → 1.9 (NVD).

RESCORED — CVE-2026-28369 (Red Hat JBoss Enterprise Application Platform 8.1). CVSS 8.7 → 9.1 (NVD).

RESCORED — CVE-2026-3833 (gnutls). CVSS 6.5 → 7.4 (NVD).

RESCORED — CVE-2026-50302 (Microsoft Windows 10 Version 21H2). CVSS 4.2 → 6.5 (NVD).

RESCORED — CVE-2026-50428 (Microsoft Windows 11 version 26H1). CVSS 7.1 → 5.5 (NVD).

RESCORED — CVE-2026-50459 (Microsoft Windows 10 Version 21H2). CVSS 7 → 7.8 (NVD).

RESCORED — CVE-2026-50526 (Microsoft .NET 10.0). CVSS 7 → 5.5 (NVD).

RESCORED — CVE-2026-50657 (Microsoft Defender for Endpoint for Mac). CVSS 4.7 → 5.5 (NVD).

RESCORED — CVE-2026-55145 (Microsoft Copilot). CVSS 6.3 → 7.1 (NVD).

RESCORED — CVE-2026-56171 (Microsoft Remote Desktop Web Client). CVSS 7.1 → 7.5 (NVD).

RESCORED — CVE-2026-56178 (Microsoft Defender for Endpoint for Mac). CVSS 5.5 → 7 (NVD).

RESCORED — CVE-2026-62826 (Microsoft SharePoint Enterprise Server 2016). CVSS 4.6 → 5.4 (NVD).

ENRICHED — CVE-2025-48595 (Android Framework). Received CVSS 8.4 and CPE data from NVD.

ENRICHED — CVE-2026-20230 (Cisco Unified Communications Manager). Received CVSS 8.6 and CPE data from NVD.

ENRICHED — CVE-2026-28318 (SolarWinds Serv-U). Received CVSS 7.5 and CPE data from NVD.

Yesterday's Results

How to read these box scores · glossary

198 CVEs published. 25 box scores, 173 table rows — nothing truncated.

CVE-2026-16232CRITICAL

checkpoint Quantum Security Management — Authentication Bypass in the SmartConsole Login Process Using an Application Token

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .8912   99.8   YES

AFFECTED
  Product                           Versions                                     Fixed
  Quantum Security Management       R82.10 with Jumbo Hotfix Take 36 or below –  —
  Multi-Domain Security Management  R82.10 with Jumbo Hotfix Take 36 or below –  —

TIMELINE
  Jul 19  Reserved by CNA
  Jul 22  Added to CISA KEV, due Jul 25
  Jul 22  Published (CNA: checkpoint)

CWE-287 · CNA: checkpoint · CVSS v4.0 · 2 references · NVD status: Analyzed · KEV due July 25, 2026

CVE-2026-62144CRITICAL

checkpoint Quantum Security Management — Management Authentication Bypass and Privilege Escalation

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  N    9.1   .2082   97.4     —

AFFECTED
  Product                           Versions                                     Fixed
  Quantum Security Management       R82.10 with Jumbo Hotfix Take 36 or below –  —
  Multi-Domain Security Management  R82.10 with Jumbo Hotfix Take 36 or below –  —

TIMELINE
  Jul 13  Reserved by CNA
  Jul 22  Published (CNA: checkpoint)

CWE-287 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-62145HIGH

checkpoint Quantum Security Gateway — Local Privilege Escalation in Gaia Portal

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   L   N  U  H  H  H    7.5   .0761   94.1     —

AFFECTED
  Product                      Versions                                     Fixed
  Quantum Security Gateway     R82.10 with Jumbo Hotfix Take 36 or below –  —
  Quantum Security Management  R82.10 with Jumbo Hotfix Take 36 or below –  —

TIMELINE
  Jul 13  Reserved by CNA
  Jul 22  Published (CNA: checkpoint)

CWE-269 · CNA: checkpoint · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-16492LOW

umijs umi GIT File Helper getFileGitIno.ts git.getFileCreateInfo os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   A   L   N   L   N   L   L   L    2.0   .0391   89.5     —

AFFECTED
  Product  Versions  Fixed
  umi      4.6.0 –   4.6.64

TIMELINE
  Jul 21  Reserved by CNA
  Jul 22  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 9 references · NVD status: Deferred

CVE-2026-64831HIGH

FFmpeg 8.0 - 8.1.2 Stack Buffer Overflow in Vulkan HEVC Decoder

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   H   H   H    8.7   .0085   55.4     —

AFFECTED
  Product  Versions  Fixed
  FFmpeg   8.0 –     —

TIMELINE
  Jul 20  Reserved by CNA
  Jul 22  Published (CNA: VulnCheck)

CWE-121 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed

CVE-2026-15802HIGH

Chimpstudio WP Foodbakery — WP Foodbakery <= 4.9 - Authenticated (Subscriber+) Arbitrary File Deletion via via delete_locations_backup_file AJAX Action

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  N  H  H    8.1   .0082   54.5     —

AFFECTED
  Product        Versions     Fixed
  WP Foodbakery  unspecified  —

TIMELINE
  Jul 15  Reserved by CNA
  Jul 22  Published (CNA: Wordfence)

CWE-23 · CNA: Wordfence · CVSS v3.1 · 2 references · NVD status: Deferred

CVE-2026-44191HIGH

Red Hat Red Hat Ansible Automation Platform 2 — Ansible-lightspeed: visual studio code ansible lightspeed extension: remote code execution via command injection in configuration settings

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   R  U  H  H  H    7.8   .0082   54.4     —

AFFECTED
  Product                                Versions     Fixed
  Red Hat Ansible Automation Platform 2  unspecified  —
  Red Hat Ansible Automation Platform 2  unspecified  —
  Red Hat Ansible Automation Platform 2  unspecified  —

TIMELINE
  May 5   Reserved by CNA
  Jul 22  Published (CNA: redhat)

CWE-78 · CNA: redhat · CVSS v3.1 · 2 references · NVD status: Awaiting Analysis

CVE-2026-44190HIGH

Red Hat Red Hat Ansible Automation Platform 2 — Ansible-lightspeed: ansible lightspeed visual studio code extension: arbitrary code execution via command injection in activation script setting

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   N   R  U  H  H  H    7.8   .0075   52.3     —

AFFECTED
  Product                                Versions     Fixed
  Red Hat Ansible Automation Platform 2  unspecified  —
  Red Hat Ansible Automation Platform 2  unspecified  —
  Red Hat Ansible Automation Platform 2  unspecified  —

TIMELINE
  May 5   Reserved by CNA
  Jul 22  Published (CNA: redhat)

CWE-78 · CNA: redhat · CVSS v3.1 · 2 references · NVD status: Awaiting Analysis

CVE-2026-13181HIGH

Progress Software Telerik UI for ASP.NET AJAX — RadAsyncUpload AsyncUploadTypeName Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0067   49.1     —

AFFECTED
  Product                      Versions      Fixed
  Telerik UI for ASP.NET AJAX  2010.1.309 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 22  Published (CNA: ProgressSoftware)

CWE-470 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-13190HIGH

Progress Software Telerik UI for ASP.NET AJAX — PersistenceFramework Unsafe Type Resolution Vulnerability in Telerik UI for ASP.NET AJAX

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0067   49.1     —

AFFECTED
  Product                      Versions      Fixed
  Telerik UI for ASP.NET AJAX  2011.2.712 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 22  Published (CNA: ProgressSoftware)

CWE-502 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-16606CRITICAL

Fujitsu Linux openFT — Unauthenticated remote code execution (pre-auth RCE) vulnerability in openFT for Linux and Oracle Solaris

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0065   48.4     —

AFFECTED
  Product                Versions     Fixed
  Linux openFT           unspecified  12.1D00
  Oracle Solaris openFT  unspecified  12.1D00

TIMELINE
  Jul 22  Reserved by CNA
  Jul 22  Published (CNA: FTI)

CWE-94 · CNA: FTI · CVSS v4.0 · 3 references · NVD status: Deferred

CVE-2026-3821HIGH

SMCI X14DBG-DAP,X14DBI — Supermicro SMASH service contain an Arbitrary code execution issue

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0064   47.8     —

AFFECTED
  Product            Versions       Fixed
  X14DBG-DAP,X14DBI  01.00.16.00 –  —

TIMELINE
  Mar 9   Reserved by CNA
  Jul 22  Published (CNA: Supermicro)

CWE-78 · CNA: Supermicro · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-16630LOW

syncfusion ej2-javascript-ui-controls package.json child_process.exec os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   L   N   L   L   L    1.9   .0063   47.7     —

AFFECTED
  Product                     Versions  Fixed
  ej2-javascript-ui-controls  33.2.0 –  —

TIMELINE
  Jul 22  Reserved by CNA
  Jul 22  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

CVE-2026-16631LOW

n/a publint — publint package-manager pack.js child_process.exec os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   L   N   L   L   L    1.9   .0063   47.7     —

AFFECTED
  Product  Versions  Fixed
  publint  0.1.0 –   —

TIMELINE
  Jul 22  Reserved by CNA
  Jul 22  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2026-16629MEDIUM

danger danger-js CLI localGetFileAtSHA.ts danger.git.diffForFile os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   L   N   L   L   L    4.8   .0062   47.1     —

AFFECTED
  Product    Versions  Fixed
  danger-js  13.0.0 –  13.0.8

TIMELINE
  Jul 22  Reserved by CNA
  Jul 22  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2026-16628LOW

n/a oclif — oclif JIT Plugin Entry child_process.exec os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   L   N   L   L   L    1.9   .0062   47.1     —

AFFECTED
  Product  Versions  Fixed
  oclif    4.23.0 –  —

TIMELINE
  Jul 22  Reserved by CNA
  Jul 22  Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred

CVE-2025-50329CRITICAL

n/a n/a — An issue in ConeXware, Inc Power Archiver v.22.00.11 and before allows a remote attacker to escalate privil…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0057   44.6     —

AFFECTED
  Product  Versions  Fixed
  n/a      n/a –     —

TIMELINE
  Jun 16  Reserved by CNA
  Jul 22  Published (CNA: mitre)

CWE-693 · CNA: mitre · CVSS v3.1 · 3 references · NVD status: Deferred

CVE-2026-60366CRITICAL

Oracle Corporation Oracle Platform Security for Java — Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Cent…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .0055   43.4     —

AFFECTED
  Product                            Versions      Fixed
  Oracle Platform Security for Java  12.2.1.4.0 –  —

TIMELINE
  Jul 8   Reserved by CNA
  Jul 22  Published (CNA: oracle)

CWE-269, CWE-284, CWE-306, CWE-502 · CNA: oracle · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-60367CRITICAL

Oracle Corporation Oracle Platform Security for Java — Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Cent…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0055   43.4     —

AFFECTED
  Product                            Versions      Fixed
  Oracle Platform Security for Java  12.2.1.4.0 –  —

TIMELINE
  Jul 8   Reserved by CNA
  Jul 22  Published (CNA: oracle)

CWE-269, CWE-287, CWE-306, CWE-502 · CNA: oracle · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-60372CRITICAL

Oracle Corporation Oracle Platform Security for Java — Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Cent…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0055   43.4     —

AFFECTED
  Product                            Versions      Fixed
  Oracle Platform Security for Java  12.2.1.4.0 –  —

TIMELINE
  Jul 8   Reserved by CNA
  Jul 22  Published (CNA: oracle)

CWE-269, CWE-284, CWE-306, CWE-502 · CNA: oracle · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-60368HIGH

Oracle Corporation Oracle Platform Security for Java — Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: Cent…

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0055   43.4     —

AFFECTED
  Product                            Versions      Fixed
  Oracle Platform Security for Java  12.2.1.4.0 –  —

TIMELINE
  Jul 8   Reserved by CNA
  Jul 22  Published (CNA: oracle)

CWE-1104 · CNA: oracle · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-13182HIGH

Progress Software Telerik UI for ASP.NET AJAX — RadAsyncUpload Client-State Decrypt-vs-Parse Oracle Vulnerability in Telerik UI for ASP.NET AJAX

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0054   43.2     —

AFFECTED
  Product                      Versions      Fixed
  Telerik UI for ASP.NET AJAX  2010.1.309 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 22  Published (CNA: ProgressSoftware)

CWE-209 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-13183HIGH

Progress Software Telerik UI for ASP.NET AJAX — RadAsyncUpload Upload Metadata Timing Oracle Vulnerability in Telerik UI for ASP.NET AJAX

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0054   43.2     —

AFFECTED
  Product                      Versions      Fixed
  Telerik UI for ASP.NET AJAX  2010.1.309 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 22  Published (CNA: ProgressSoftware)

CWE-208 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-13189HIGH

Progress Software Telerik UI for ASP.NET AJAX — SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  N  N    7.5   .0054   43.0     —

AFFECTED
  Product                      Versions      Fixed
  Telerik UI for ASP.NET AJAX  2011.2.712 –  —

TIMELINE
  Jun 24  Reserved by CNA
  Jul 22  Published (CNA: ProgressSoftware)

CWE-36 · CNA: ProgressSoftware · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-11605HIGH

ISC BIND 9 — Unnecessary validation of DNSSEC signed records

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0054   42.9     —

AFFECTED
  Product  Versions  Fixed
  BIND 9   9.20.0 –  —

TIMELINE
  Jun 8   Reserved by CNA
  Jul 22  Published (CNA: isc)

CWE-408 · CNA: isc · CVSS v3.1 · 3 references · NVD status: Undergoing Analysis

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-44189	7.8	42.8	Red Hat	Red Hat Ansible Automation Platform 2	CWE-88	Ansible-lightspeed: visual studio code ansible lightspeed extension: arbitrar…
CVE-2026-61391	7.2	42.8	Hikvision	DS-2CD Series	CWE-121	There is a stack-based buffer overflow vulnerability in some Hikvision camera…
CVE-2026-13186	8.1	42.6	Progress Software	Telerik UI for ASP.NET AJAX	CWE-22	AppDataStorageProvider Path Traversal Deserialization Vulnerability in Teleri…
CVE-2026-65013	8.7	42.0	onlook	repo	CWE-639	Onlook tRPC Insecure Direct Object Reference via multiple procedures
CVE-2026-11622	7.5	42.0	ISC	BIND 9	CWE-770	Potential memory usage beyond configured limits
CVE-2026-13204	7.5	42.0	ISC	BIND 9	CWE-617	Unexpected exit in certain situations with NSEC and NSEC3 both present
CVE-2026-16632	5.5	41.9	boazsegev	facil.io	CWE-20	boazsegev facil.io WebSocket Frame websocket_parser.h websocket_on_protocol_e…
CVE-2026-12968	8.8	40.8	Unknown	Product Addons and Product Options With Custom Fields	CWE-79	Product Addons – WowAddons < 1.6.15 - Unauthenticated Stored XSS via Arbitrar…
CVE-2026-64834	8.7	40.7	FFmpeg	FFmpeg	CWE-835	FFmpeg 0.6.3 - 8.1.2 Infinite Loop DoS via RTP/ASF Demuxer
CVE-2026-12617	7.5	40.6	ISC	BIND 9	CWE-617	Record ordering based unexpected exit with CNAME or DNAME
CVE-2026-40714	7.2	40.5	Dell	PowerProtect Data Manager	CWE-20	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Imp…
CVE-2026-13065	7.1	40.4	MongoDB	MongoDB Server	CWE-476	MongoDB $linearFill Window Function Improper Input Validation Leading to Proc…
CVE-2026-13185	8.1	39.6	Progress Software	Telerik UI for ASP.NET AJAX	CWE-502	PersistenceFramework Cookie Deserialization Vulnerability in Telerik UI for A…
CVE-2026-16270	6.9	39.4	Open Mercato	Open Mercato	CWE-1333	ReDoS in Open Mercato
CVE-2026-65591	8.9	39.3	n8n-io	n8n	CWE-917	n8n before 1.123.64 Sanitizer Bypass Remote Code Execution
CVE-2026-65595	8.9	39.2	n8n-io	n8n	CWE-269	n8n before 2.29.8 and 2.30.1 Privilege Escalation via Token Exchange
CVE-2026-4773	8.1	38.6	Magarsus Consulting Ltd. Co.	IDM-MFA	CWE-1287	OTP Bypass in Magarsus' IDM-MFA
CVE-2025-13146	6.5	38.6	sevenspark	Contact Form 7 – Dynamic Text Extension	CWE-94	Contact Form 7 – Dynamic Text Extension <= 5.0.6 - Unauthenticated Arbitrary …
CVE-2026-2395	9.8	38.4	Xpoda Türkiye Informatics Technology Inc.	No Code Platform	CWE-89	SQLi in Xpoda Türkiye Informatics Technology's No Code Platform
CVE-2026-13187	8.1	38.4	Progress Software	Telerik UI for ASP.NET AJAX	CWE-470	DialogHandler Provider Type Tampering Vulnerability in Telerik UI for ASP.NET…
CVE-2026-60369	9.9	38.3	Oracle Corporation	Oracle Platform Security for Java	CWE-269	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-60373	8.8	38.3	Oracle Corporation	Oracle Platform Security for Java	CWE-269	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-60439	8.8	38.3	Oracle Corporation	Oracle Platform Security for Java	CWE-269	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-61246	8.8	38.3	Oracle Corporation	Oracle Platform Security for Java	CWE-269	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-3482	5.3	37.8	IBM	Sterling B2B Integrator	CWE-639	IBM Sterling B2B Integrator and IBM Sterling File Gateway Authorization Bypass
CVE-2026-12987	7.5	37.4	Unknown	Events Manager	CWE-89	Events Manager < 7.3.7 - Unauthenticated SQL Injection via PHP Object Injecti…
CVE-2026-65603	8.7	36.6	getgrav	grav	CWE-269	Grav Login Plugin 3.8.11 Privilege Escalation via Profile Update
CVE-2026-65012	6.3	36.5	invoke-ai	InvokeAI	CWE-306	InvokeAI < 6.13.7 Unauthenticated Directory Enumeration via scan_folder
CVE-2026-63264	5.3	36.2	joomshopping.com	JoomShopping extension for Joomla	CWE-79	Joomla Extension - joomshopping.com - Reflective XSS in JoomShopping < 5.9.3
CVE-2026-60455	8.8	35.8	Oracle Corporation	Oracle Platform Security for Java	CWE-269	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-14865	5.3	35.8	Progress Software	Telerik UI for ASP.NET AJAX	CWE-776	XXE Denial of Service via RadLayoutBuilder Client State in Telerik UI for ASP…
CVE-2026-11331	7.5	35.4	ISC	BIND 9	CWE-790	Potential wildcard CNAME RPZ policy bypass
CVE-2026-16551	6.9	35.4	Thinkst Applied Research	OpenCanary	CWE-20	Denial-of-Service in OpenCanary's MongoDB module
CVE-2026-57600	7.5	34.9	Hikvision	DS-2CD Series	CWE-20	Insufficient validation of input parameters in the firmware of some Hikvision…
CVE-2026-13076	7.1	34.8	MongoDB	MongoDB Server	CWE-770	Aggregation Framework Memory Exhaustion Leading to Process Termination
CVE-2026-64829	9.1	34.6	q2a	question2answer	CWE-613	Question2Answer 1.8.8 Session Fixation via Forgot-Password Flow
CVE-2026-15787	6.4	34.6	brainstormforce	Ultimate Addons for Elementor	CWE-79	Ultimate Addons for Elementor <= 2.9.1 - Authenticated (Contributor+) Stored …
CVE-2026-49499	8.8	34.5	Dell	PowerProtect Data Manager	CWE-1270	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Gene…
CVE-2026-8152	9.3	34.1	Unblu inc.	Unblu Spark	CWE-79	Unblu Spark Open Redirect leading to DOM-Based XSS
CVE-2026-65600	7.8	34.0	traefik	traefik	CWE-22	Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex
CVE-2026-9737	7.1	33.9	MongoDB	MongoDB Server	CWE-617	Find command with $meta sort can lead to crash
CVE-2026-13072	9.2	33.2	MongoDB	MongoDB Server	CWE-122	MongoDB Improper Input Validation in Compute Mode External Data Processing Le…
CVE-2026-13056	7.1	33.1	MongoDB	MongoDB Server	CWE-1325	A user with read access can cause a DoS by executing a specifically crafted q…
CVE-2026-13064	7.1	33.1	MongoDB	MongoDB Server	CWE-407	MongoDB $jsonSchema Query Operator Excessive CPU Consumption Leading to Denia…
CVE-2026-13060	7.1	32.8	MongoDB	MongoDB Server	CWE-863	$graphLookup Aggregation Stage Authorization Check Inconsistency Allowing Una…
CVE-2026-64833	7.1	32.4	FFmpeg	FFmpeg	CWE-125	FFmpeg 0.7.1 - 8.1.2 Out-of-Bounds Read via S/PDIF Muxer spdifenc.c
CVE-2026-16560	5.3	32.4	Red Hat	Red Hat Directory Server 11	CWE-1220	389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multi…
CVE-2026-11721	7.5	32.4	ISC	BIND 9	CWE-1284	Cache poisoning possible with label count discrepancy, RRSIG, and wildcards
CVE-2026-63047	7.5	32.2	joomdonation.com	Events Booking extension for Joomla	CWE-284	Joomla Extension - joomdonation.com - Invoice data exfiltration via incorrect…
CVE-2026-65650	4.3	31.8	Elgg	Elgg	CWE-770	Elgg before 7.0.0 does not check image dimensions to prevent denial of servic…
CVE-2025-50327	8.8	31.4	n/a	n/a	CWE-693	An issue in Franco Corbelli ZPAQFRANZ v.61.3 and before allows a remote attac…
CVE-2026-16544	6.5	31.2	Red Hat	Red Hat Ansible Automation Platform 2	CWE-862	Awx: websocket eventconsumer missing authorization for inventory_update_event…
CVE-2026-13059	8.6	31.1	MongoDB	MongoDB Server	CWE-807	Improper Validation of Client-Supplied Command Parameters Allowing Role-Based…
CVE-2026-63048	9.4	30.9	joomlack.fr	Page Builder CK extension for Joomla	CWE-434	Joomla Extension - joomlack.fr - Improper access control in Page Builder CK <…
CVE-2026-10822	6.5	30.9	ISC	BIND 9	CWE-617	Key Record using PRIVATEDNS algorithm may lead to unexpected exit
CVE-2026-61390	7.7	30.5	Hikvision	DS-2CD Series	CWE-122	There is a heap buffer overflow vulnerability in some Hikvision cameras, whic…
CVE-2026-65011	5.3	30.5	Graylog2	graylog2-server	CWE-862	Graylog2 Server Missing Permission Check on Event Definition Duplicate
CVE-2026-65589	5.1	29.9	n8n-io	n8n	CWE-532	n8n before 1.123.64 Credential Exposure via LLM Node Execution Data
CVE-2026-13066	7.1	29.6	MongoDB	MongoDB Server	CWE-843	Server-Side JavaScript DBPointer BSON Serialization Memory Disclosure
CVE-2026-64828	5.3	29.5	Froiden	TableTrack	CWE-79	Froiden TableTrack 1.3.10 Stored XSS via Order Notes Field
CVE-2025-50324	8.8	29.0	n/a	n/a	CWE-693	An issue in Milos Paripovic OneCommander v.3.96.0.0 allows a remote attacker …
CVE-2025-50330	8.8	29.0	n/a	n/a	CWE-693	An issue in ZipGenius Team ZipGenius v.6.3.2.3116 and before allows a remote …
CVE-2026-2406	6.5	28.8	Universe Software Computer Marketing Trade and Industry Inc.	Online Registration and Workflow Management System	CWE-639	IDOR in Universe Software's Online Registration and Workflow Management System
CVE-2026-57599	6.6	28.4	Hikvision	DS-2CD Series	CWE-269	There is a privilege escalation vulnerability in some Hikvision cameras. Due …
CVE-2026-14932	6.5	28.0	Progress Software	Telerik UI for ASP.NET AJAX	CWE-321	Unauthenticated File Read and Deletion via Hardcoded Encryption Key in RadChart
CVE-2026-40712	7.2	27.5	Dell	PowerProtect Data Manager	CWE-20	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Imp…
CVE-2026-46737	7.2	27.4	Dell	PowerProtect Data Manager	CWE-20	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Imp…
CVE-2026-13184	7.5	27.2	Progress Software	Telerik UI for ASP.NET AJAX	CWE-321	RadAsyncUpload Default HMAC Key Fallback Vulnerability in Telerik UI for ASP.…
CVE-2026-61392	5.3	27.0	Hikvision	DS-2CD Series	CWE-200	There is a information disclosure vulnerability in some Hikvision cameras, al…
CVE-2026-64830	8.7	26.8	FFmpeg	FFmpeg	CWE-122	FFmpeg 2.1 - 8.1.2 Heap Buffer Overflow via VobSub Subtitle Demuxer
CVE-2026-46738	7.2	26.8	Dell	PowerProtect Data Manager	CWE-20	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Imp…
CVE-2026-13078	6.3	26.5	MongoDB	MongoDB Server	CWE-862	Local File Disclosure in MongoDB Server via MozJS Scripting Engine Module Loader
CVE-2026-64832	8.7	25.9	FFmpeg	FFmpeg	CWE-415	FFmpeg 4.4 - 8.1.2 Double-Free in NVDEC Hardware Decoder via nvdec.c
CVE-2026-60370	7.5	25.8	Oracle Corporation	Oracle Platform Security for Java	CWE-1021	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-65014	6.3	25.8	n8n-io	n8n	CWE-306	n8n before 2.28.0 Authentication Bypass via test-webhook
CVE-2026-16490	2.1	25.7	itsourcecode	Hospital Management System	CWE-74	itsourcecode Hospital Management System prescription.php sql injection
CVE-2026-64835	8.7	25.1	FFmpeg	FFmpeg	CWE-787	FFmpeg 4.4 - 8.1.2 Out-of-Bounds Memory Access in ADX Audio Decoder
CVE-2026-65015	7.2	24.7	n8n-io	n8n	CWE-863	n8n before 2.30.1 Privilege Escalation via run_node_tool
CVE-2026-65590	5.5	24.4	n8n-io	n8n	CWE-78	n8n before 2.30.1 Shell Sandbox Bypass on Linux Windows
CVE-2026-65016	7.7	22.9	n8n-io	n8n	CWE-639	n8n before 1.123.64, 2.29.8, and 2.30.1 Privilege Escalation via SSO Instance…
CVE-2026-48029	7.1	22.5	strukturag	libheif	CWE-125	libheif: heap OOB read in ImageItem_Grid::decode_grid_tile via irot-induced t…
CVE-2026-14322	5.3	22.4	Unknown	Timetics	CWE-284	Timetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payme…
CVE-2025-44090	8.8	21.3	n/a	n/a	CWE-693	An issue in OhSoft CoffeeZip v4.8.0.0 allows attackers to execute arbitrary c…
CVE-2026-40691	7.5	21.3	NLnet Labs	Unbound	CWE-122	Packet of death for DNSCrypt over TCP
CVE-2026-13074	6.9	21.0	MongoDB	MongoDB Server	CWE-770	Awaitable Hello Command in Exhaust Mode Unthrottled Response Loop Leading to …
CVE-2026-65601	5.3	20.9	traefik	traefik	CWE-863	Traefik before 3.7.7 Namespace Confusion via HTTPRoute ExtensionRef
CVE-2025-44089	8.8	20.7	n/a	n/a	CWE-693	An issue in NCH Software ExpressZip v11.29 allows attackers to execute arbitr…
CVE-2026-22049	8.7	20.5	NETAPP	ONTAP 9	CWE-288	ONTAP versions 9.16.1 and higher with WebAuthn multi-factor authentication (M…
CVE-2025-50325	5.4	20.5	n/a	n/a	CWE-693	BandiZip v.7.37 is affected by a Authentication Bypass Vulnerability. This vu…
CVE-2026-64796	9.8	20.4	regularlabs.com	Sourcerer extension for Joomla	CWE-284	Joomla Extension - regularlabs.com - various code injection vectors in Source…
CVE-2026-32665	7.5	20.4	NLnet Labs	Unbound	CWE-1284	Remote DNS-over-QUIC denial of service due to `quic-size` budget bypass
CVE-2026-13055	7.1	20.3	MongoDB	MongoDB Server	CWE-617	Server crash via aggregation pipeline expression with compound wildcard index…
CVE-2026-16624	9.6	20.0	Cal.com	Cal.diy	CWE-639	CVE-2026-16624
CVE-2026-55973	7.5	20.0	NLnet Labs	Unbound	CWE-20	'dns-error-reporting: yes' leads to stack buffer overflow
CVE-2026-45820	6.6	19.7	101arrowz	fflate	CWE-400	fflate through 0.8.2 is vulnerable to denial of service via an infinite loop …
CVE-2026-50045	5.3	19.7	NLnet Labs	Unbound	CWE-406	'max-global-quota' reset by DNSSEC validation restarts
CVE-2026-13077	7.1	19.6	MongoDB	MongoDB Server	CWE-125	Out-of-Bounds Heap Read in BSON CodeWScope Element Parsing via Malformed BSON…
CVE-2026-13061	5.3	19.6	MongoDB	MongoDB Server	CWE-863	Improper Access Control Allowing Cross-User Session Metadata Disclosure in $l…
CVE-2026-14899	7.5	19.2	Mozilla	Thunderbird	CWE-193	Off-by-one out of bounds read in MIME header parser for forwarding
CVE-2026-10723	6.8	19.1	ISC	BIND 9	CWE-347	Incorrect acceptance of NSEC3 records
CVE-2026-13057	6.0	18.6	MongoDB	MongoDB Server	CWE-20	Authorization Bypass via Client-Supplied $search.mergingPipeline Leaks Unauth…
CVE-2026-14586	5.9	18.5	NLnet Labs	Unbound	CWE-617	Assertion in libngtcp2 when under pressure in high concurrency DNS-over-QUIC …
CVE-2026-65594	5.1	18.5	n8n-io	n8n	CWE-863	n8n before 2.30.1 Missing OAuth Authorization Check
CVE-2026-60371	8.0	18.0	Oracle Corporation	Oracle Platform Security for Java	CWE-200	Vulnerability in the Oracle Platform Security for Java product of Oracle Fusi…
CVE-2026-41637	3.7	18.0	NLnet Labs	Unbound	CWE-772	Degradation of resolution service from improperly accounted client-terminated…
CVE-2026-52863	5.9	17.0	NLnet Labs	Unbound	CWE-416	Memory corruption could lead to crash and denial of service
CVE-2026-55990	5.9	17.0	NLnet Labs	Unbound	CWE-457	Packet of death for a DNSCrypt misconfigured Unbound
CVE-2026-56444	5.9	17.0	NLnet Labs	Unbound	CWE-772	Degradation of resolution service when 'discard-timeout' and 'serve-expired-c…
CVE-2026-16615	6.8	16.6	GNOME	librest	CWE-338	Librest: weak random number generation in pkce implementation
CVE-2026-50251	5.3	16.5	NLnet Labs	Unbound	CWE-184	Attacker supplied '0.0.0.0'/'::' glue triggers defensive full-cache flush
CVE-2026-13071	7.1	16.2	MongoDB	MongoDB Server	CWE-416	Server-Side JavaScript Aggregation Expression Memory Safety Issue Leading to …
CVE-2026-64792	7.5	16.0	regularlabs.com	Articles Anywhere extension for Joomla	CWE-524	Joomla Extension - regularlabs.com - disclosure of restricted content via sea…
CVE-2026-44621	5.9	15.8	NLnet Labs	Unbound	CWE-754	Libunbound applications configured with 'unwanted-reply-threshold' could even…
CVE-2026-64793	9.1	15.7	regularlabs.com	Articles Anywhere extension for Joomla	CWE-284	Joomla Extension - regularlabs.com - Content access and publication bypass in…
CVE-2026-65598	8.9	15.7	n8n-io	n8n	CWE-367	n8n before 1.123.64 Remote Code Execution via Git Clone
CVE-2026-64798	9.1	15.5	regularlabs.com	IP Login extension for Joomla	CWE-338	Joomla Extension - regularlabs.com - Insecure login URL keys in IP login exte…
CVE-2026-16473	4.3	15.4	Red Hat	Red Hat Enterprise Linux 10	CWE-125	Sbc: sbc: heap out-of-bounds read via crafted sbc audio frame
CVE-2026-13192	6.5	15.3	Progress Software	Telerik UI for ASP.NET AJAX	CWE-918	RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-64794	6.5	15.3	regularlabs.com	Articles Anywhere extension for Joomla	CWE-284	Joomla Extension - regularlabs.com - restricted user-data exposure in Users A…
CVE-2026-13089	7.5	14.9	RITOU	OIDC::Lite	CWE-347	OIDC::Lite versions through 0.12.1 for Perl allow ID Token signature verifica…
CVE-2026-13075	7.1	14.9	MongoDB	MongoDB Server	CWE-770	$rankFusion and $scoreFusion Unbounded Memory Allocation During Error Suggest…
CVE-2026-50046	5.9	14.5	NLnet Labs	Unbound	CWE-416	Possible heap use-after-free in an error path when a DoT forwarded query is j…
CVE-2026-55717	5.9	14.5	NLnet Labs	Unbound	CWE-476	'serve-expired-client-timeout' and 'response-ip' CNAME redirect could lead to…
CVE-2026-55991	5.9	14.5	NLnet Labs	Unbound	CWE-195	Remote DNS-over-QUIC (DoQ) flow-control assertion failure in libngtcp2
CVE-2026-13058	7.1	13.6	MongoDB	MongoDB Server	CWE-617	Transaction Command Insufficient Input Validation Leading to Process Termination
CVE-2026-13063	5.3	13.6	MongoDB	MongoDB Server	CWE-190	libmongocrypt Improper Input Validation Leading to Process Termination
CVE-2026-63685	8.8	13.5	regularlabs.com	DB Replacer extension for Joomla	CWE-284	Joomla Extension - regularlabs.com - Authorization bypass in DB Replacer exte…
CVE-2026-63683	7.5	13.0	regularlabs.com	Advanced Module Manager extension for Joomla	CWE-290	Joomla Extension - regularlabs.com - Client IP spoofing vulnerability in Regu…
CVE-2026-13321	8.6	12.7	ISC	BIND 9	CWE-346	DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
CVE-2026-44687	3.7	12.0	NLnet Labs	Unbound	CWE-193	Off-by-one error in 'harden-below-nxdomain' logic can shadow a stub/forward z…
CVE-2026-13073	5.3	12.0	MongoDB	MongoDB Server	CWE-617	MongoDB Aggregation Command Invariant Assertion Failure Leading to Process Te…
CVE-2026-65597	8.2	11.5	n8n-io	n8n	CWE-79	n8n before 1.123.64 DOM-Based XSS via Unsandboxed iframe
CVE-2026-65596	5.1	10.9	n8n-io	n8n	CWE-863	n8n before 1.123.64 Credential Exfiltration via GraphQL Node
CVE-2026-64797	7.5	10.0	regularlabs.com	IP Login extension for Joomla	CWE-290	Joomla Extension - regularlabs.com - IP spoofing vulnerability in IP login ex…
CVE-2026-44192	6.6	9.6	Red Hat	Red Hat Ansible Automation Platform 2	CWE-22	Ansible-lightspeed: ansible lightspeed mcp server: remote code execution and …
CVE-2026-42955	3.7	9.3	NLnet Labs	Unbound	CWE-672	Extra fix for CVE-2026-40622 to also clamp the TTL of A/AAAA records disallow…
CVE-2026-14881	8.4	9.1	MongoDB	MongoDB Compass	CWE-78	Compass connection import allows to override OIDC browser open command (usual…
CVE-2026-46582	3.7	8.5	NLnet Labs	Unbound	CWE-358	A wildcard replay, as another piece of data, triggers poisoning in the serve …
CVE-2026-13062	7.1	8.4	MongoDB	MongoDB Server	CWE-441	MongoDB mongos Improper Validation of Internal Flags in Queryable Encryption …
CVE-2026-65602	5.3	8.1	traefik	traefik	CWE-863	Traefik before 3.6.23 IngressRouteTCP ServersTransport Namespace Bypass
CVE-2026-54478	3.7	7.3	NLnet Labs	Unbound	CWE-290	DNS Cookie bypass when combined with proxy-protocol use
CVE-2026-38763	5.5	7.1	n/a	n/a	CWE-400	An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local at…
CVE-2026-14985	7.8	6.9	Analog Way	Picturall Quad Compact Mark II	CWE-22	CVE-2026-14985
CVE-2026-13069	7.1	6.7	MongoDB	MongoDB Server	CWE-770	Queryable Encryption FLE2 Find Payload Missing Input Validation Leading to Re…
CVE-2026-56844	8.4	6.6	Veeam	Backup and Replication	CWE-22	A vulnerability in the Veeam Updater component of the Veeam Software Applianc…
CVE-2026-65592	8.4	6.6	n8n-io	n8n	CWE-79	n8n before 1.123.64 Stored DOM XSS via cachedResultUrl
CVE-2026-38765	7.8	6.6	n/a	n/a	CWE-269	An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local at…
CVE-2026-38766	7.8	6.6	n/a	n/a	CWE-269	An issue in Unistal Systems Pvt. Ltd.Protegent 360 v2.0.0.4 allows a local at…
CVE-2026-50252	5.7	5.7	NLnet Labs	Unbound	CWE-349	Possible cache poisoning attack by mapping source port population per thread
CVE-2026-13188	5.9	4.9	Progress Software	Telerik UI for ASP.NET AJAX	CWE-345	DialogHandler Parameters Tampering Vulnerability in Telerik UI for ASP.NET AJAX
CVE-2026-65599	5.1	4.7	n8n-io	n8n	CWE-312	n8n before 1.123.64, 2.29.8, and 2.30.1 Credential Exposure via JWT Header
CVE-2026-55708	3.1	4.4	NLnet Labs	Unbound	CWE-1188	Privacy/configuration issue when adding local data in views through 'unbound-…
CVE-2025-60835	7.8	4.2	n/a	n/a	CWE-35	An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute…
CVE-2026-13068	2.3	4.3	MongoDB	MongoDB Server	CWE-863	MongoDB mongos Improper Authorization Check in Cursor Termination Allowing Cr…
CVE-2026-16607	8.5	4.2	Fujitsu	Linux openFT	CWE-269	Authenticated local root privilege escalation vulnerability in openFT for Lin…
CVE-2026-44690	7.5	4.1	NLnet Labs	Unbound	CWE-345	Cross-zone wildcard cache poisoning via RRSIG.labels manipulation
CVE-2026-65593	6.3	3.9	n8n-io	n8n	CWE-918	n8n before 1.123.64, 2.29.8, and 2.30.1 SSRF via Dynamic Node Parameters
CVE-2026-63281	4.8	3.8	regularlabs.com	Advanced Module Manager extension for Joomla	CWE-79	Joomla Extension - regularlabs.com - XSS vulnerability in Regular Labs condit…
CVE-2026-14551	8.8	3.3	servereye GmbH	servereye Windows Agent (Sensorhub)	CWE-73	Local Privilege Escalation in servereye client (sensorhub)
CVE-2026-13070	6.0	3.0	MongoDB	MongoDB Server	CWE-476	Improper Validation of OCSP Response During Outbound TLS Handshake Leading to…
CVE-2026-64795	5.4	3.0	regularlabs.com	Modals extension for Joomla	CWE-79	Joomla Extension - regularlabs.com - XSS vectors in tag-provided inputs in va…
CVE-2026-7328	6.8	2.9	Caliptra	Core Runtime Firmware	CWE-862	Unverified AXI Address in Subsystem Mode Commands Enables Denial of Service
CVE-2026-50248	6.5	2.7	NLnet Labs	Unbound	CWE-345	BOGUS configured primary hostname accepted for XFR in auth/rpz zones
CVE-2026-63280	8.8	2.6	regularlabs.com	Advanced Module Manager extension for Joomla	CWE-352	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privile…
CVE-2026-63684	8.8	2.6	regularlabs.com	Content Templater extension for Joomla	CWE-352	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privile…
CVE-2026-64791	8.8	2.6	regularlabs.com	Regular Labs Extension Manager extension for Joomla	CWE-352	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privile…
CVE-2026-44187	3.3	2.6	Red Hat	Red Hat Ansible Automation Platform 2	CWE-256	Ansible-lightspeed: ansible lightspeed extension for visual studio code: info…
CVE-2026-56416	4.8	2.3	NLnet Labs	Unbound	CWE-354	Possible heap buffer overflow when validator canonicalizes RDATA that contain…
CVE-2026-16157	7.8	1.9	Duplicati	Duplicati	CWE-732	Duplicati backup software v2.3.0.1 is vulnerable to an incorrect permission a…
CVE-2026-63265	8.0	1.7	regularlabs.com	Advanced Module Manager extension for Joomla	CWE-352	Joomla Extension - regularlabs.com - Inconsistent CSRF token checks / privile…
CVE-2026-44276	4.4	1.3	Dell	PowerProtect Data Manager	CWE-200	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) an Exp…
CVE-2026-50243	6.3	1.1	NLnet Labs	Unbound	CWE-348	'response-ip'/'rpz' can rewrite BOGUS answers instead of returning SERVFAIL
CVE-2026-13067	7.2	0.8	MongoDB	MongoDB Server	CWE-863	tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domai…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-07-22 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.