CVEs.

Latest CVEs

1. 6.5Med

   CVE-2026-56144 ↗ (opens in a new tab)

   Incorrect Authorization (CWE-863) in Elasticsearch can allow an authenticated user with limited index privileges to exploit insufficient authorization controls in the ingest simulation feature. By targeting indices they are not authorized to access directly, the user can cause those indices' configured ingest pipelines to execute and return their output, potentially disclosing data processed or enriched by those pipelines. Additionally, the same feature can be used to retrieve index mapping metadata for indices the user are not authorized to access directly.

   ECElastic Cloud· Jul 21, 2026

2. 4.3Med

   CVE-2026-49092 ↗ (opens in a new tab)

   Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana can lead to unauthorized information exposure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1). Under certain conditions, a lower-privileged user can cause data from sources they are not authorized to access to be processed using another user's privileges.

   ECElastic Cloud· Jul 21, 2026

3. 6.5Med

   CVE-2026-42397 ↗ (opens in a new tab)

   Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130). An authenticated user can submit a specially crafted request to affected Entity Analytics endpoints containing an oversized input value that causes excessive resource consumption, which may render Kibana unavailable.

   ECElastic Cloud· Jul 21, 2026

4. 9.4Crit

   CVE-2026-64877 ↗ (opens in a new tab)

   An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access sensitive data stored in the appliance database.

   TETenable· Jul 21, 2026

5. 8.2High

   CVE-2026-21579 ↗ (opens in a new tab)

   This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with a CVSS Score of 8.2, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: Confluence Data Center 9.2: Upgrade to a releas

   COConfluence· Jul 21, 2026

6. 7.1High

   CVE-2026-21577 ↗ (opens in a new tab)

   This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS Score of 7.1, allows an authenticated attacker to cause a resource to be unavailable for its intended users by temporarily or indefinitely disrupting services of a host connected to a network. Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fi

   COConfluence· Jul 21, 2026

7. 4.3Med

   CVE-2026-24232 ↗ (opens in a new tab)

   NVIDIA Tranformers4Rec contains a vulnerability where an attacker could cause improper deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

   NVNVIDIA· Jul 21, 2026

8. 8.6High

   CVE-2026-15829 ↗ (opens in a new tab)

   A SQL injection (CWE-89) and security boundary bypass (CWE-863) vulnerability exists in the prebuilt BigQuery forecasting tool (bigquery-forecast) of googleapis/mcp-toolbox. The tool accepts client-controlled parameters (data_col, timestamp_col, and id_cols) as plain strings and interpolates them unescaped via fmt.Sprintf directly into a generated AI.FORECAST table-valued SELECT statement. While MCP Toolbox utilizes an allowedDatasets mechanism to restrict queries, this defense only validates the history_data parameter; the final assembled query is executed without re-validation. An attacker c

   GCGoogle Cloud· Jul 21, 2026

9. 7.3High

   CVE-2026-15793 ↗ (opens in a new tab)

   BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources. If the Git source is malicious, this could lead to a crafted command invocation on the host.

   DODocker· Jul 21, 2026

10. 6.0Med

    CVE-2026-15792 ↗ (opens in a new tab)

    A malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic.

    DODocker· Jul 21, 2026

11. 1.8Low

    CVE-2026-15791 ↗ (opens in a new tab)

    A crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory. The action that can normally be used to delete files inside the build container rootfs can escape into the real host temp directory.

    DODocker· Jul 21, 2026

12. 6.9Med

    CVE-2026-15789 ↗ (opens in a new tab)

    A custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory. The client needs to have valid permissions to access the BuildKit control API to issue builds, e.g., bypass authentication, etc.

    DODocker· Jul 21, 2026

13. 8.7High

    CVE-2026-15724 ↗ (opens in a new tab)

    In Progress ShareFile Storage Zones Controller versions prior to 5.12.5 and 6.0.2, an authenticated administrative user can exploit a path traversal vulnerability to read arbitrary files from the server filesystem, write files to arbitrary directories, or determine whether specific files exist on the server.

    SHShareFile· Jul 21, 2026

14. 5.6Med

    CVE-2026-15788 ↗ (opens in a new tab)

    BuildKit's cache mount source= selector on Windows Container on Windows (WCOW) workers does not detect NTFS directory junctions placed inside the cache root. A build authored by an untrusted user on a WCOW-configured BuildKit daemon can read arbitrary host files reachable to the BuildKit daemon process.

    DODocker· Jul 20, 2026

15. 9.8Crit

    CVE-2026-12341 ↗ (opens in a new tab)

    This vulnerability impacts all versions of IdentityIQ and allows an unauthenticated attacker unauthorized access to protected APIs and data due to improper validation of OAuth bearer tokens.

    SASailPoint· Jul 20, 2026

16. 9.8Crit

    CVE-2026-63030 ↗ (opens in a new tab)Known exploited

    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

    WCWordPress.com (Automattic)· Jul 17, 2026

17. 5.9Med

    CVE-2026-60137 ↗ (opens in a new tab)Known exploited

    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

    WCWordPress.com (Automattic)· Jul 17, 2026

18. 7.5High

    CVE-2026-45799 ↗ (opens in a new tab)

    Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. Prior to 6.3.0 and 7.0.0-alpha03, ByteArrayProtoReader32.skipGroup() and ProtoReader.skipGroup() in wire-runtime do not validate that a LENGTH_DELIMITED field length is non-negative before skip(), allowing a crafted protobuf varint encoding -128 as a signed Int to make skip(-128) move the internal position negative and make the next readByte() throw ArrayIndexOutOfBoundsException instead of the documented IOException or ProtocolException, which can crash services using ProtoAdapter.decode(byte[]) on untrusted payload

    SQSquare· Jul 17, 2026

19. 5.3Med

    CVE-2026-15783 ↗ (opens in a new tab)

    A missing authorization vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user with write access to any repository to read metadata from private repositories they did not have access to, including private repository owners and names, branch names, commit SHAs, commit messages, and the pushing actor. The delegated bypass endpoint resolved a rule suite directly from an attacker-supplied, encoded identifier without verifying that the requesting user could read the rule suite's repository, and because these identifiers are sequential an attacker could enumerate

    GIGitHub· Jul 17, 2026

20. 8.6High

    CVE-2026-15343 ↗ (opens in a new tab)

    A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker with code execution inside a Dependabot updater container to write files to arbitrary repository paths, including GitHub Actions workflow files under .github/workflows/, because path validation did not check the actual write destination. The initial fix in versions 3.21.3, 3.20.5, 3.19.9, 3.18.12, and 3.17.18 was incomplete because validation checked the supplied symlink target, while the publisher wrote the file using its directory and name. Writing GitHub Actions workflow files required the Dep

    GIGitHub· Jul 17, 2026

21. 5.7Med

    CVE-2026-15007 ↗ (opens in a new tab)

    A denial of service vulnerability was identified in GitHub Enterprise Server that allowed an authenticated user to cause service disruption by supplying a repository release notes configuration file containing deeply nested YAML. When release notes were generated, the configuration file was parsed without a nesting depth limit, causing excessive resource consumption that could render the instance unresponsive. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.22 and was fixed in versions 3.17.18, 3.18.12, 3.19.9, 3.20.5, and 3.21.3. This vulnerability was reported

    GIGitHub· Jul 17, 2026

22. 8.7High

    CVE-2026-63093 ↗ (opens in a new tab)

    Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory. When a developer clones and opens a crafted repository, Cursor automatically resolves and executes the workspace-resident git.exe during IDE startup and on a recurring timed cadence without any user interaction, running the malicious binary under the privileges of the current user.

    CUCursor· Jul 17, 2026

23. 6.5Med

    CVE-2026-9602 ↗ (opens in a new tab)

    Mattermost Desktop App versions <=6.2 6.0.2 5.6.13.0 fail to validate payloads sent from the Mattermost Web App to the Desktop App which allows a malicious server owner to crash the Mattermost Desktop App via changing the payload of a method to a malformed one. Mattermost Advisory ID: MMSA-2026-00678

    MCMattermost Cloud· Jul 17, 2026

24. 6.5Med

    CVE-2026-8075 ↗ (opens in a new tab)

    Mattermost Desktop App versions <=6.2 5.5.13 6.0.2.0 fail to properly null check when checking for headers in the Mattermost Desktop App which allows any user to crash another channel members Desktop App via posting a malicious link with an embedded image that misses one of those headers. Mattermost Advisory ID: MMSA-2026-00668

    MCMattermost Cloud· Jul 17, 2026

25. 5.4Med

    CVE-2026-62826 ↗ (opens in a new tab)

    Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

    M3Microsoft 365· Jul 16, 2026

26. 9.8Crit

    CVE-2026-53412 ↗ (opens in a new tab)

    Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.

    ZOZoom· Jul 16, 2026

27. 7.0High

    CVE-2026-53411 ↗ (opens in a new tab)

    A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

    ZOZoom· Jul 16, 2026

28. 7.0High

    CVE-2026-53410 ↗ (opens in a new tab)

    A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

    ZOZoom· Jul 16, 2026

29. 7.8High

    CVE-2026-53409 ↗ (opens in a new tab)

    Improper Privilege Management in Zoom Rooms for Windows before version 7.1.0 may allow an authenticated user to conduct an escalation of privilege via local access.

    ZOZoom· Jul 16, 2026

30. 4.3Med

    CVE-2026-44970 ↗ (opens in a new tab)

    dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DefaultUsageTracker.emit_tool_called_event() in src/dbt_mcp/tracking/tracking.py serialized every MCP tool call's complete arguments dictionary and sent it through dbtlabs_vortex.producer.log_proto without redaction, including sql_query from show, vars from run, build, and test, and node_selection from compile, while usage_tracking_enabled in settings.py enabled telemetry by default unless DBT_SEND_ANONYMOUS_USAGE_STATS=false or DO_NOT_TRACK=1 was set. This issue is fixed in version 1.17.1.

    DCdbt Cloud· Jul 16, 2026

31. 3.3Low

    CVE-2026-44969 ↗ (opens in a new tab)

    dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, DbtMCP.call_tool() in src/dbt_mcp/mcp/server.py logged the raw arguments dictionary at INFO level before each tool call and at ERROR level on exceptions, and configure_file_logging() wrote those records to dbt-mcp.log when DBT_MCP_SERVER_FILE_LOGGING=true, preserving sensitive sql_query, vars, and node_selection values in plaintext without automatic rotation or deletion. This issue is fixed in version 1.17.1.

    DCdbt Cloud· Jul 16, 2026

32. 6.3Med

    CVE-2026-44968 ↗ (opens in a new tab)

    dbt-mcp is a Model Context Protocol server for interacting with dbt. Prior to 1.17.1, _run_dbt_command() in src/dbt_mcp/dbt_cli/tools.py appended unsanitized node_selection and resource_type values to the dbt subprocess argument list, allowing an MCP client to inject dbt global flags such as --profiles-dir, --project-dir, and --target into subprocess.Popen even though shell=False prevents shell metacharacter injection. This issue is fixed in version 1.17.1.

    DCdbt Cloud· Jul 16, 2026

33. 7.5High

    CVE-2026-21729 ↗ (opens in a new tab)

    Loki queries with large limits can cause large memory allocations which can impact the availability of the service, depending on its deployment strategy.

    GCGrafana Cloud· Jul 16, 2026

34. 7.5High

    CVE-2026-45804 ↗ (opens in a new tab)

    Diffusers is the a library for pretrained diffusion models. Prior to 0.38.0, Diffusers' DiffusionPipeline.from_pretrained flow can bypass the trust_remote_code guard because download() validates model_index.json and custom pipeline code before later loading from a cached folder that can change, allowing a Hub repository with custom .py pipeline code to execute through the custom pipeline flow without passing custom_pipeline or trust_remote_code=True. This issue is fixed in version 0.38.0.

    HFHugging Face· Jul 15, 2026

35. 9.1Crit

    CVE-2026-50148 ↗ (opens in a new tab)

    Metabase is an open-source business intelligence and embedded analytics tool. From 1.54.0 until 1.54.24, 1.55.24, 1.56.25, 1.57.19, 1.58.14, 1.59.10, and 1.60.4, a Metabase user with permission to add or edit a database connection can achieve remote code execution on the Metabase server by configuring a Snowflake connection to an attacker-controlled server, because a flaw in the Snowflake JDBC driver can write arbitrary files anywhere on the Metabase host, including replacing one of Metabase's own database driver files that later executes inside the Metabase process. This issue is fixed in ver

    MCMetabase Cloud· Jul 15, 2026

36. 7.6High

    CVE-2026-50147 ↗ (opens in a new tab)

    Metabase is an open-source business intelligence and embedded analytics tool. From 1.57.0 until 1.57.19.1, 1.58.14.1, 1.59.10, and 1.60.4, an attacker who can configure a Metabase database connection can read arbitrary files from the Metabase server's filesystem by adding unsafe JDBC parameters to a MySQL or MariaDB connection, causing the driver to read files from the Metabase host and expose the contents through queries against the connected database or through validation error messages. This issue is fixed in versions 1.57.19.1, 1.58.14.1, 1.59.10, and 1.60.4.

    MCMetabase Cloud· Jul 15, 2026

37. 8.6High

    CVE-2026-15583 ↗ (opens in a new tab)

    A confused-deputy flaw in Grafana MCP Server allows an unauthenticated remote attacker to exfiltrate the server's environment-configured Grafana service-account token by supplying a crafted X-Grafana-URL request header. This also enables SSRF against arbitrary internal services, including cloud metadata endpoints.

    GCGrafana Cloud· Jul 15, 2026

38. 6.2Med

    CVE-2026-47475 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API where an attacker could trigger a reachable assertion in the sampler thread. A successful exploit of this vulnerability might lead to denial of service.

    NVNVIDIA· Jul 14, 2026

39. 7.4High

    CVE-2026-47473 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM contains a vulnerability where an attacker could cause a write-what-where condition. A successful exploit of this vulnerability might lead to data tampering, denial of service, and information disclosure.

    NVNVIDIA· Jul 14, 2026

40. 7.8High

    CVE-2026-47472 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM contains a vulnerability in its inter-process communication layer where an attacker with local same-user access could cause deserialization. A successful exploit of this vulnerability might lead to code execution, information disclosure, data tampering, and denial of service.

    NVNVIDIA· Jul 14, 2026

41. 7.5High

    CVE-2026-47471 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM for any platform contains a vulnerability in tensor deserialization, where an attacker could cause a heap based buffer overflow. A successful exploit of this vulnerability might lead to information disclosure, data tampering, or denial of service.

    NVNVIDIA· Jul 14, 2026

42. 6.2Med

    CVE-2026-47470 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM for any platform contains a vulnerability in the gRPC server chat API endpoint, where an attacker could cause CWE-20 by local attack. A successful exploit of this vulnerability might lead to denial of service.

    NVNVIDIA· Jul 14, 2026

43. 7.8High

    CVE-2026-24272 ↗ (opens in a new tab)

    NVIDIA TensorRT contains a vulnerability where an attacker might cause an overflow to a heap-based buffer. A successful exploit of this vulnerability might lead to code execution.

    NVNVIDIA· Jul 14, 2026

44. 6.2Med

    CVE-2026-24271 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM contains a vulnerability in the OpenAI-compatible inference API, where an attacker could cause allocation of GPU resources without limits or throttling. A successful exploit of this vulnerability might lead to denial of service.

    NVNVIDIA· Jul 14, 2026

45. 7.8High

    CVE-2026-24268 ↗ (opens in a new tab)

    NVIDIA TensorRT contains a vulnerability where an attacker might cause a heap-based buffer overflow. A successful exploit of this vulnerability might lead to code execution.

    NVNVIDIA· Jul 14, 2026

46. 6.4Med

    CVE-2026-24259 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM for Linux contains a vulnerability where an attacker could cause missing authentication for a critical function. A successful exploit of this vulnerability might lead to code execution, data tampering, and information disclosure.

    NVNVIDIA· Jul 14, 2026

47. 7.8High

    CVE-2026-24238 ↗ (opens in a new tab)

    NVIDIA TensorRT for contains a vulnerability where an attacker might cause an improper validation of array index. A successful exploit of this vulnerability might lead to code execution.

    NVNVIDIA· Jul 14, 2026

48. 6.8Med

    CVE-2026-24234 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM for Linux contains a vulnerability in the multimodal media fetching functions, where a network-accessible attacker could cause server-side request forgery. A successful exploit of this vulnerability might lead to denial of service and information disclosure.

    NVNVIDIA· Jul 14, 2026

49. 8.4High

    CVE-2026-24233 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM for Linux contains a vulnerability in the restricted unpickler used for model weight deserialization, where a local, unauthenticated attacker could cause deserialization of untrusted data. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, data tampering, and information disclosure.

    NVNVIDIA· Jul 14, 2026

50. 7.3High

    CVE-2026-24229 ↗ (opens in a new tab)

    NVIDIA TensorRT-LLM for Linux contains a vulnerability in the disaggregated orchestrator component, where an attacker could read, write, or delete internal cluster state by sending requests to the FastAPI server. A successful exploit of this vulnerability might lead to information disclosure, data tampering, and denial of service.

    NVNVIDIA· Jul 14, 2026