CVEs.

Matching CVEs

1. 7.8High

   CVE-2026-24240 ↗ (opens in a new tab)

   NVIDIA Megatron Bridge for Linux contains a vulnerability where an attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

   NVNVIDIA· Jul 1, 2026

2. 8.0High

   CVE-2026-13752 ↗ (opens in a new tab)

   Improper neutralization of parameters in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. An attacker could exploit this by supplying crafted values to vulnerable command paths, causing Snowflake CLI to execute unintended SQL in the context of the user’s Snowflake session. Successful exploitation required crafted values to reach vulnerable parameters, including through socially engineered input, malicious repository configuration, or compromised automation feeding external values into the CLI, and impact is limited by the privileges assigned to the active session. The fix

   SNSnowflake· Jun 29, 2026

3. 8.8High

   CVE-2026-13749 ↗ (opens in a new tab)

   Improper neutralization in the Snowpark annotation processor callback template in Snowflake CLI versions prior to 3.19 allowed arbitrary code execution during application bundling or deployment. An attacker could exploit this by supplying crafted project content that is interpolated into generated Python code, causing Snowflake CLI to execute attacker-controlled code in the local context of the user running the CLI. Successful exploitation requires the victim to run the relevant bundling or deployment workflow against attacker-controlled project content, and any resulting code runs with the pr

   SNSnowflake· Jun 29, 2026

4. 8.8High

   CVE-2026-13744 ↗ (opens in a new tab)

   Improper neutralization of attacker-controlled content in Snowflake CLI versions prior to 3.19 allowed unintended SQL execution. By supplying crafted repository content, project configuration, manifest data, or specification input, an attacker could cause Snowflake CLI to execute unintended SQL in the context of the victim user's Snowflake session. Successful exploitation requires the victim to process attacker-controlled content through a vulnerable command path and is limited by the privileges assigned to that session. The fix is available in Snowflake CLI version 3.19. Users must manually u

   SNSnowflake· Jun 29, 2026

5. 7.7High

   CVE-2026-55607 ↗ (opens in a new tab)

   Claude Code is an agentic coding tool. From 2.1.38 until 2.1.163, Claude Code's worktree handling allowed creation of worktrees named ".git" and navigation to worktrees outside the sandbox context, enabling git directory confusion attacks. By exploiting symlink manipulation and git fsmonitor execution during worktree operations, an attacker could overwrite files in the user's home directory (such as .zshenv), leading to code execution outside of seatbelt sandbox restrictions. Reliably exploiting this required the user to clone a malicious repository containing prompt injection content and run

   ANAnthropic (Claude)· Jun 29, 2026

6. 7.5High

   CVE-2026-12053 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.1 that under certain conditions could have allowed a user to access sensitive information that had already been committed to a project, due to insufficient output filtering in Duo Workflows.

   GIGitLab· Jun 25, 2026

7. 7.5High

   CVE-2026-52794 ↗ (opens in a new tab)

   Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Sentry's event ingestion pipeline, where a regex applied to attacker-controlled fields on incoming events can be made to consume disproportionate CPU time. This vulnerability is fixed in 26.5.2.

   SESentry· Jun 24, 2026

8. 8.7High

   CVE-2026-13007 ↗ (opens in a new tab)

   Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.

   TETenable· Jun 23, 2026

9. 7.5High

   CVE-2026-42127 ↗ (opens in a new tab)

   The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.

   GCGrafana Cloud· Jun 22, 2026

10. 7.7High

    CVE-2026-42129 ↗ (opens in a new tab)

    A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information.

    GCGrafana Cloud· Jun 22, 2026

11. 8.1High

    CVE-2026-28381 ↗ (opens in a new tab)

    The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.

    GCGrafana Cloud· Jun 22, 2026

12. 8.8High

    CVE-2026-48584 ↗ (opens in a new tab)

    Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 19, 2026

13. 8.8High

    CVE-2026-32174 ↗ (opens in a new tab)

    Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 18, 2026

14. 8.8High

    CVE-2026-8461 ↗ (opens in a new tab)

    An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.

    JFJFrog· Jun 18, 2026

15. 8.6High

    CVE-2026-11719 ↗ (opens in a new tab)

    An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesRequired, older supported protocol versions (2025-06-18, 2025-03-26, and 2024-11-05) omit this check. An authenticated client with low-privilege tokens (e.g., read) can bypass the intended per-tool scope restrictions and execute high-privilege tools (e.g., admin) simply by specifying an older protocol version in the MCP-Protocol-Version head

    GCGoogle Cloud· Jun 18, 2026

16. 7.8High

    CVE-2026-24228 ↗ (opens in a new tab)

    NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure.

    NVNVIDIA· Jun 16, 2026

17. 7.8High

    CVE-2026-24155 ↗ (opens in a new tab)

    NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Jun 16, 2026

18. 7.7High

    CVE-2026-6517 ↗ (opens in a new tab)

    Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that routes to an external web server. Mattermost Advisory ID: MMSA-2026-00651

    MCMattermost Cloud· Jun 15, 2026

19. 8.1High

    CVE-2026-53408 ↗ (opens in a new tab)

    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

    ZOZoom· Jun 12, 2026

20. 7.2High

    CVE-2026-42306 ↗ (opens in a new tab)

    Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary host path, potentially overwriting host files or causing denial of service. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

    DODocker· Jun 12, 2026

21. 7.8High

    CVE-2026-53406 ↗ (opens in a new tab)

    Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

    ZOZoom· Jun 12, 2026

22. 8.8High

    CVE-2026-7387 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints, which allows a user with group-link permissions to escalate themselves and group members to team or channel admin via crafted API requests.. Mattermost Advisory ID: MMSA-2026-00665

    MCMattermost Cloud· Jun 12, 2026

23. 7.6High

    CVE-2026-6961 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who controls a federated server to write files to arbitrary locations within the target server's filestore via path traversal sequences in the filename field.. Mattermost Advisory ID: MMSA-2026-00661

    MCMattermost Cloud· Jun 12, 2026

24. 7.2High

    CVE-2026-6739 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 fail to require system-level permission when patching protected default system roles, which allows authenticated users with delegated user-management permissions to escalate privileges by altering built-in role permissions via the role patch API.. Mattermost Advisory ID: MMSA-2026-00656

    MCMattermost Cloud· Jun 12, 2026

25. 8.7High

    CVE-2026-45169 ↗ (opens in a new tab)

    Idira Privileged Access Manager (PAM) Self-Hosted Vault versions prior to 15.0.3, 14.6.5, 14.2.7, and 14.0.8 exhibit a validation vulnerability. Under specific circumstances and configuration scenarios, processing unexpected input could potentially lead to an unexpected service termination, resulting in a localized denial of service (DoS). CyberArk Security Bulletin: CA26-17

    PAPalo Alto Networks· Jun 12, 2026

26. 7.5High

    CVE-2026-45170 ↗ (opens in a new tab)

    Idira Vendor PAM - Self-Hosted Connector versions prior 1.1.100504 under specific conditions and configuration scenarios, TLS certificate validation may not be fully enforced. CyberArk Security Bulletin: CA26-17

    PAPalo Alto Networks· Jun 12, 2026

27. 8.7High

    CVE-2026-11933 ↗ (opens in a new tab)

    A use-after-free vulnerability exists in MongoDB Server's server-side JavaScript engine when converting BSON documents to JavaScript arrays. An authenticated user with read privileges who is able to run server-side JavaScript (for example, via $where or $function) can cause the server to access memory that has already been freed. This may result in disclosure of information from the mongod process memory or a denial of service through a server crash.

    MAMongoDB Atlas· Jun 12, 2026

28. 8.5High

    CVE-2026-45174 ↗ (opens in a new tab)

    Idira Endpoint Privilege Manager Linux Agent versions prior to 26.5 allow a local attacker to potentially compromise the agent daemon initialization. CyberArk Security Bulletin: CA26-19

    PAPalo Alto Networks· Jun 11, 2026

29. 8.4High

    CVE-2026-45173 ↗ (opens in a new tab)

    Idira Identity Browser Extension (Chrome, Firefox, and Edge builds) versions prior to 26.8.1 exhibit an origin validation flaw within its internal web-page verification routines. If an authenticated user navigates to a specially crafted webpage, this interaction could potentially allow a remote attacker to trigger unauthorized application interaction or execution parameters within the context of that authenticated browser session. CyberArk Security Bulletin: CA26-21

    PAPalo Alto Networks· Jun 11, 2026

30. 8.7High

    CVE-2026-45172 ↗ (opens in a new tab)

    Due to incomplete input validation in Idira Privileged Session Manager for SSH (PSMP) versions prior to 15.0.2, 14.6.3, 14.2.5, and 14.0.6, an authenticated, low-privileged user could potentially execute arbitrary commands on the PSMP host. CyberArk Security Bulletins: CA26-17 and CA26-18

    PAPalo Alto Networks· Jun 11, 2026

31. 8.7High

    CVE-2026-45171 ↗ (opens in a new tab)

    Incomplete input validation and improperly configured folder permissions within Idira Privileged Session Manager (PSM) versions prior to 15.0.3, 14.6.3, 14.2.5, and 14.0.5, an authenticated, low-privileged user could potentially execute arbitrary code. CyberArk Security Bulletin: CA26-17 and CA26-18

    PAPalo Alto Networks· Jun 11, 2026

32. 8.5High

    CVE-2026-45175 ↗ (opens in a new tab)

    Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within internal agent validation processes. A local attacker could potentially bypass built-in security controls or cryptographic validations. Under specific circumstances, this could allow the attacker to circumvent agent self-defense mechanisms and execute unauthorized operations. CyberArk Security Bulletin: CA26-19

    PAPalo Alto Networks· Jun 11, 2026

33. 8.4High

    CVE-2026-45178 ↗ (opens in a new tab)

    Idira Secrets Manager Self-Hosted versions 13.8.0 and lower exhibit improper access control within internal cluster endpoints. A remote, authenticated attacker possessing standard node-level credentials could leverage these endpoints to potentially retrieve unauthorized secrets or cause a denial of service (DoS). CyberArk Security Bulletin: CA26-20

    PAPalo Alto Networks· Jun 11, 2026

34. 8.9High

    CVE-2026-45176 ↗ (opens in a new tab)

    Idira Endpoint Privilege Manager Agent versions prior to 26.5 exhibit improper access control within high-privileged agent components. A local, low-privileged attacker could exploit this by manipulating an internal communication mechanism or file operation. Under specific circumstances, this could potentially allow the attacker to bypass permission restrictions and execute unauthorized local actions with elevated privileges. CyberArk Security Bulletin: CA26-19

    PAPalo Alto Networks· Jun 11, 2026

35. 8.7High

    CVE-2026-8589 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 13.1.4 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user to add unauthorized email addresses to a targeted user's account due to improper sanitization of user-supplied input in certain group setting fields.

    GIGitLab· Jun 11, 2026

36. 7.5High

    CVE-2026-7250 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.10 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper input validation in the API request parsing middleware.

    GIGitLab· Jun 11, 2026

37. 8.7High

    CVE-2026-10087 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 18.10.8, 18.11 before 18.11.5, and 19.0 before 19.0.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code on behalf of a targeted user due to improper input sanitization in the Analytics Dashboard.

    GIGitLab· Jun 11, 2026

38. 8.1High

    CVE-2026-0274 ↗ (opens in a new tab)

    An improper validation of credentials vulnerability in the CommvaultSecurityIQ integration for Cortex XSOAR and Cortex XSIAM allows an unauthenticated attacker to access and modify protected resources.

    PAPalo Alto Networks· Jun 10, 2026

39. 7.1High

    CVE-2026-9754 ↗ (opens in a new tab)

    An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command

    MAMongoDB Atlas· Jun 9, 2026

40. 7.2High

    CVE-2026-9753 ↗ (opens in a new tab)

    The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.

    MAMongoDB Atlas· Jun 9, 2026

41. 7.1High

    CVE-2026-9752 ↗ (opens in a new tab)

    An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.

    MAMongoDB Atlas· Jun 9, 2026

42. 7.1High

    CVE-2026-9750 ↗ (opens in a new tab)

    An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.

    MAMongoDB Atlas· Jun 9, 2026

43. 7.1High

    CVE-2026-9749 ↗ (opens in a new tab)

    This issue can occur when running an aggregation pipeline that uses the internal $exchange stage configured with key-range partitioning and order-preserving delivery. If a single key range produces enough documents to fill its exchange buffer (that is, many results are routed to the same consumer), the server reaches the code path where a full per-consumer buffer is detected but the internal "high watermark" for that key range is not updated as intended.

    MAMongoDB Atlas· Jun 9, 2026

44. 7.1High

    CVE-2026-9748 ↗ (opens in a new tab)

    The $_internalConvertBucketIndexStats stage used PauseExecution as a way to signal "skip this document" when an index stats conversion failed. But PauseExecution is not a general purpose skip mechanism, but rather a TeeBuffer-internal signal used solely by $facet to coordinate its sub-pipelines. When this stage is placed before $facet in a pipeline, TeeBuffer receives the unexpected PauseExecution from upstream and hits a hard invariant assertion, crashing mongod.

    MAMongoDB Atlas· Jun 9, 2026

45. 7.1High

    CVE-2026-9747 ↗ (opens in a new tab)

    Adding fromRouter:true and runtimeConstants.userRoles could cause aggregations to crash mongodb server.

    MAMongoDB Atlas· Jun 9, 2026

46. 7.1High

    CVE-2026-9746 ↗ (opens in a new tab)

    When using $changestreams and $_requestReshardingResumeToken with the exchange option the server hits an invariant which causes the server to crash. There are no special privileges needed. The user must be logged in to issue the statement.

    MAMongoDB Atlas· Jun 9, 2026

47. 7.1High

    CVE-2026-9743 ↗ (opens in a new tab)

    In MongoDB Server 8.0, an aggregation stage can leave its _subPipeline field null during processing of certain pipelines. If a getMore is subsequently issued on the same cursor, the server may dereference this null sub-pipeline when reattaching to the operation context, accessing an invalid address and crashing the process. This issue allows an authenticated user who can run aggregation pipelines to cause a denial of service by issuing a specially crafted aggregation followed by getMore on affected versions.

    MAMongoDB Atlas· Jun 9, 2026

48. 8.2High

    CVE-2026-9742 ↗ (opens in a new tab)

    When OIDC authentication is enabled in configuration, clients may set specific values in the "mechanism" parameter of the "authenticate" command that lead to server crash. The authenticate command is accessible to unauthenticated clients, leading to pre-auth denial-of-service in affected product configurations.

    MAMongoDB Atlas· Jun 9, 2026

49. 7.1High

    CVE-2026-9741 ↗ (opens in a new tab)

    A bug in query analysis processing of the $vectorSearch aggregation stage for Queryable Encryption (QE) or Client-Side Field Level Encryption (CSFLE) results in literal values for encrypted fields within the $vectorSearch stage filter expressions to be sent to the server as plaintext instead of ciphertext.

    MAMongoDB Atlas· Jun 9, 2026

50. 8.7High

    CVE-2026-9740 ↗ (opens in a new tab)

    A vulnerability in MongoDB Server's BSON validation logic allows an unauthenticated user to crash the mongod process by sending a specially crafted message. The BSON validator's handling of certain nested binary data structures permits uncontrolled mutual recursion between validation functions, where each re-entry resets internal depth tracking.

    MAMongoDB Atlas· Jun 9, 2026