CVEs.

Latest CVEs

1. 6.1Med

   CVE-2026-10712 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.10 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in a user's browser session due to improper path validation under certain conditions.

   GIGitLab· Jun 25, 2026

2. 5.4Med

   CVE-2026-10086 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab EE affecting all versions from 16.4 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary client-side code in the context of another user's session, due to improper sanitization of user-supplied input.

   GIGitLab· Jun 25, 2026

3. 3.8Low

   CVE-2026-0934 ↗ (opens in a new tab)

   GitLab has remediated an issue in GitLab EE affecting all versions from 17.9 before 18.11.6, 19.0 before 19.0.3, and 19.1 before 19.1.1 that under certain conditions could have allowed an authenticated user with custom role permissions to view, create, or delete protected environment configurations despite CI/CD visibility being disabled for the project.

   GIGitLab· Jun 25, 2026

4. 7.5High

   CVE-2026-52794 ↗ (opens in a new tab)

   Sentry is an error tracking and performance monitoring tool. From 24.4.0 until 26.5.2, a Regular Expression Denial of Service (ReDoS) vulnerability exists in Sentry's event ingestion pipeline, where a regex applied to attacker-controlled fields on incoming events can be made to consume disproportionate CPU time. This vulnerability is fixed in 26.5.2.

   SESentry· Jun 24, 2026

5. 6.0Med

   CVE-2026-54316 ↗ (opens in a new tab)

   Claude Code is an agentic coding tool. From 0.2.54 until 2.1.163, because the hostname huggingface.co was pre-approved as a bare hostname for the WebFetch tool, any path on that domain—including attacker-controlled model repositories—was auto-approved without a permission prompt or being subject to --allowedTools restrictions. An attacker able to inject untrusted content into a Claude Code context could direct it to issue WebFetch requests against attacker-controlled repository files (e.g. /resolve/main/config.json), which HuggingFace counts as downloads server-side, creating a covert out-of-b

   ANAnthropic (Claude)· Jun 23, 2026

6. 8.7High

   CVE-2026-13007 ↗ (opens in a new tab)

   Tenable Identity Exposure contains multiple unauthenticated API endpoints under /w/api/* that expose sensitive application configuration data including cleartext LDAP credentials, SAML configuration, user accounts, and directory settings to unauthenticated remote attackers. Affected responses are served with Cache-Control: public headers and without Vary: Cookie, allowing reverse proxies and CDNs to cache and serve sensitive data to unauthenticated users even after authentication is applied.

   TETenable· Jun 23, 2026

7. 5.5Med

   CVE-2026-55443 ↗ (opens in a new tab)

   LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine the resolved path to the intended root directory. Affected behaviors include: a file-search agent middleware that validates a starting directory but not the search pattern or the resolved target of matched files, so glob patterns and symlinks can reach files outside the configured root; prompt- and chain/agent-configuration loaders that accept path fields and resolve them without confining the

   L/LangChain / LangSmith· Jun 22, 2026

8. 7.5High

   CVE-2026-42127 ↗ (opens in a new tab)

   The public dashboard query endpoint does not limit request body size before processing, allowing unauthenticated attackers to trigger excessive memory allocation by sending arbitrarily large JSON payloads. This can lead to denial of service through memory exhaustion. No valid dashboard access token or authentication is required to exploit this vulnerability.

   GCGrafana Cloud· Jun 22, 2026

9. 9.6Crit

   CVE-2026-10789 ↗ (opens in a new tab)

   A maliciously crafted webpage, when visited by a user with Autodesk Fusion Desktop running and the MCP extension enabled, can trigger a vulnerability in the MCP extension that could allow arbitrary code execution. A successful exploit may allow code to execute with the privileges of the current user.

   AUAutodesk· Jun 22, 2026

10. 3.8Low

    CVE-2026-8823 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to validate bot targets when demoting users to guests which allows a lower-privileged administrator to degrade arbitrary bot accounts via the standard demote-user API.. Mattermost Advisory ID: MMSA-2026-00669

    MCMattermost Cloud· Jun 22, 2026

11. 4.3Med

    CVE-2026-9162 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to invalidate cached authentication state for active WebSocket connections during global session revocation, which allows a user with an existing WebSocket connection to remain authenticated and continue receiving real-time events until the cached session expires or the client reconnects.. Mattermost Advisory ID: MMSA-2026-00664

    MCMattermost Cloud· Jun 22, 2026

12. 5.4Med

    CVE-2026-9029 ↗ (opens in a new tab)

    A user with Editor permissions can place a malicious script in the attribution field of a Geomap panel's XYZ tile layer via a template variable. The script then executes in the browser of any user who views the affected dashboard (stored cross-site scripting).

    GCGrafana Cloud· Jun 22, 2026

13. 3.8Low

    CVE-2026-8074 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.0, 10.11.x <= 10.11.17 fail to enforce bot-specific permission checks on the user active status endpoint, which allows a User Manager with user management write access but no Integrations access to deactivate bot accounts via the PUT /api/v4/users/{id}/active API endpoint.. Mattermost Advisory ID: MMSA-2026-00667

    MCMattermost Cloud· Jun 22, 2026

14. 6.4Med

    CVE-2026-6673 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to authenticate Atlassian Connect installed callbacks, allowing a remote unauthenticated attacker to inject a rogue sharedSecret and disrupt the Jira integration via POST to /ac/installed during the pending-install window.. Mattermost Advisory ID: MMSA-2026-00654

    MCMattermost Cloud· Jun 22, 2026

15. 6.4Med

    CVE-2026-6062 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 Fail to validate channel ownership of an existing subscription before applying edits which allows an authenticated attacker to hijack subscriptions from channels they have no access to via a crafted PUT request to the subscription edit endpoint.. Mattermost Advisory ID: MMSA-2026-00650

    MCMattermost Cloud· Jun 22, 2026

16. 5.4Med

    CVE-2026-5139 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.0, 11.6.x <= 11.6.2, 11.5.x <= 11.5.5, 10.11.x <= 10.11.17 fail to enforce administrator authorization on the {{setDefaultInstance}} call within the {{/gitlab connect}} command handler, which allows any authenticated user to overwrite the global default GitLab instance configuration via the {{/gitlab connect <instance-name>}} slash command.. Mattermost Advisory ID: MMSA-2026-00644

    MCMattermost Cloud· Jun 22, 2026

17. 7.7High

    CVE-2026-42129 ↗ (opens in a new tab)

    A user with Viewer permissions can use a path traversal in the Loki data source plugin to reach administrative Loki endpoints and read sensitive backend configuration and internal service information.

    GCGrafana Cloud· Jun 22, 2026

18. 8.1High

    CVE-2026-28381 ↗ (opens in a new tab)

    The Snowflake datasource allows for GET/PUT commands, which can allow any user with access to run queries against the data source to read/write files between the local grafana server and the connected Snowflake host.

    GCGrafana Cloud· Jun 22, 2026

19. 4.3Med

    CVE-2026-10601 ↗ (opens in a new tab)

    A user with Viewer permissions can use specially crafted requests to the Tempo and Loki data source plugins to reach unintended backend endpoints. Depending on the backend configuration this can expose data source credentials, leak internal responses, or trigger administrative actions on the configured backend.

    GCGrafana Cloud· Jun 22, 2026

20. 9.9Crit

    CVE-2026-5366 ↗ (opens in a new tab)

    Prefect version 3.6.23 is vulnerable to remote code execution due to improper handling of user-controlled input in the `GitRepository` storage class. The `commit_sha` parameter, which is passed to git commands, lacks validation and does not include a `--` separator to distinguish user input from git flags. This allows attackers to inject arbitrary git flags, such as `--upload-pack`, enabling execution of external programs. Additionally, the `directories` parameter can be exploited to inject git flags during sparse-checkout operations. These vulnerabilities allow any user with deployment creati

    PCPrefect Cloud· Jun 20, 2026

21. 8.8High

    CVE-2026-48584 ↗ (opens in a new tab)

    Execution with unnecessary privileges in Azure Synapse allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 19, 2026

22. 10.0Crit

    CVE-2026-45480 ↗ (opens in a new tab)

    Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 19, 2026

23. 6.5Med

    CVE-2026-27878 ↗ (opens in a new tab)

    A TraceQL query in Grafana Tempo with a large exemplars hint value can cause the Tempo instance to allocate an excessive amount of memory, resulting in an out-of-memory crash. This could allow an authenticated user to trigger a denial of service against the Tempo service.

    GCGrafana Cloud· Jun 19, 2026

24. 5.6Med

    CVE-2026-11941 ↗ (opens in a new tab)

    Cloudflare Quiche was affected by 2 use-after-free vulnerabilities in the connection ID iterator FFI functions. The “quiche_connection_id_iter_next” and “quiche_conn_retired_scid_next” functions would return a pointer to a “ConnectionId” to the applications via function arguments, but the owned “ConnectionId” would be dropped at the end of those functions' scope. Only applications using those FFI functions are affected. The FFI API is disabled by default by a build-time feature flag. Impact If unpatched, an application calling the affected FFI functions will dereference freed memory. The most

    CLCloudflare· Jun 19, 2026

25. 9.9Crit

    CVE-2026-47647 ↗ (opens in a new tab)

    Improper access control in Microsoft Dynamics 365 allows an authorized attacker to elevate privileges over a network.

    M3Microsoft 365· Jun 18, 2026

26. 8.8High

    CVE-2026-32174 ↗ (opens in a new tab)

    Improper authentication in Azure Bot Service allows an authorized attacker to elevate privileges over a network.

    MAMicrosoft Azure· Jun 18, 2026

27. 8.8High

    CVE-2026-8461 ↗ (opens in a new tab)

    An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be exploited for remote code execution. This vulnerability is associated with the file libavcodec/magicyuv.C. This issue affects FFmpeg before version 8.1.2.

    JFJFrog· Jun 18, 2026

28. 5.7Med

    CVE-2026-12539 ↗ (opens in a new tab)

    Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon restarts, so a restart-surviving sandbox forwards ICMP to arbitrary hosts. A workload inside a sandbox, which the threat model treats as untrusted, can therefore defeat the documented ICMP egress block to perform network reconnaissance and exfiltrate data over an ICMP covert channel, regardless of the configured allowlist.

    DODocker· Jun 18, 2026

29. 5.7Med

    CVE-2026-12039 ↗ (opens in a new tab)

    Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet-connected, without consulting the policy. A workload inside a sandbox, which the threat model treats as untrusted, can therefore encode data into DNS labels for an attacker-controlled domain and exfiltrate it through a DNS covert channel, bypassing the configured allowlist.

    DODocker· Jun 18, 2026

30. 8.6High

    CVE-2026-11719 ↗ (opens in a new tab)

    An authenticated authorization bypass vulnerability exists in MCP Toolbox for Databases due to missing scope enforcement across older protocol handlers. While the 2025-11-25 protocol version handler correctly enforces per-tool restrictions defined by scopesRequired, older supported protocol versions (2025-06-18, 2025-03-26, and 2024-11-05) omit this check. An authenticated client with low-privilege tokens (e.g., read) can bypass the intended per-tool scope restrictions and execute high-privilege tools (e.g., admin) simply by specifying an older protocol version in the MCP-Protocol-Version head

    GCGoogle Cloud· Jun 18, 2026

31. 9.3Crit

    CVE-2026-11718 ↗ (opens in a new tab)

    An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When the toolbox validates an opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), it decodes the response into an introspectResp struct. However, the subsequent claim-checking logic (validateClaims) evaluates the issuer condition as if a.issuer != "" && iss != "". If the external OAuth provider's introspection response omits the optional iss (issuer) field completely, the variable iss defaults to an empty string. This causes the conditional blo

    GCGoogle Cloud· Jun 18, 2026

32. 9.3Crit

    CVE-2026-11717 ↗ (opens in a new tab)

    An authentication bypass vulnerability exists in the generic opaque token validation path (validateOpaqueToken) of googleapis/mcp-toolbox. When verifying an unparsed opaque token via an OAuth 2.0 introspection endpoint (RFC 7662), the toolbox decodes the response into an introspectResp struct where the Active field is declared as a pointer to a boolean (*bool). The code only explicitly rejects a token if the response contains a populated active field set to false (if introspectResp.Active != nil && !*introspectResp.Active). If an introspection endpoint responds with a payload that completely o

    GCGoogle Cloud· Jun 18, 2026

33. 4.3Med

    CVE-2026-20178 ↗ (opens in a new tab)

    A vulnerability in the browser-based version of Cisco Webex App could have allowed an unauthenticated, remote attacker to redirect users to a malicious webpage. Cisco has addressed this vulnerability in the Cisco Webex App, and no customer action is needed. This vulnerability existed due to improper input validation of URL parameters in an HTTP request. Prior to this vulnerability being addressed, an attacker could have exploited this vulnerability by persuading a user to click a crafted URL. A successful exploit could have allowed the attacker to redirect a user to a malicious website.

    WEWebex· Jun 17, 2026

34. 6.0Med

    CVE-2026-20246 ↗ (opens in a new tab)

    A vulnerability in the vmadmin CLI of Cisco Umbrella Virtual Appliance could allow an authenticated, local attacker to elevate privileges on an affected device. This vulnerability is due to insufficient validation of user-supplied commands. An attacker with vmadmin privileges could exploit this vulnerability by using certain commands at the CLI. A successful exploit could allow the attacker to elevate privileges to root.

    CUCisco Umbrella (OpenDNS)· Jun 17, 2026

35. 5.5Med

    CVE-2026-1288 ↗ (opens in a new tab)

    A maliciously crafted RFA file, when converted to FormIt via “Convert RFA to FormIt” in Autodesk Revit, can force a NULL Pointer Dereference vulnerability. Successful exploitation may cause the application to crash, leading to a denial-of-service condition.

    AUAutodesk· Jun 17, 2026

36. 9.1Crit

    CVE-2026-48776 ↗ (opens in a new tab)

    LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe URL path construction through unsanitized caller-supplied identifier values used in HTTP request paths for resource operations. Without sanitization of those values, identifiers that contain characters with special meaning in URL paths could cause the resulting request to address a different resource (and potentially a different resource type) than the SDK method's call site indicates. In deployments where the SDK r

    L/LangChain / LangSmith· Jun 17, 2026

37. 5.7Med

    CVE-2026-12425 ↗ (opens in a new tab)

    Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PowerSchool Employee Access Center allows Cross-Site Scripting (XSS). This issue affects Employee Access Center: 23.10. It is possible to add in javascript code after the login URL and have it be eval()'d in the page and execute in the context of the user.

    PAPalo Alto Networks· Jun 16, 2026

38. 6.8Med

    CVE-2026-48775 ↗ (opens in a new tab)

    LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the JsonPlusSerializer can reconstruct Python objects from JSON checkpoint payloads. Under conditions where someone could modify checkpoint bytes at rest in the backing store, the deserialization path could reconstruct objects beyond what the application expects, which could in turn result in code execution at checkpoint load time. This is a defense-in-depth issue. The affected behavior is reachable only when checkpoint bytes at re

    L/LangChain / LangSmith· Jun 16, 2026

39. 7.8High

    CVE-2026-24228 ↗ (opens in a new tab)

    NVIDIA NeMo Framework for Linux contains a vulnerability where an attacker may cause deserialization of untrusted data. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, data tampering, and information disclosure.

    NVNVIDIA· Jun 16, 2026

40. 7.8High

    CVE-2026-24155 ↗ (opens in a new tab)

    NVIDIA NeMo Framework for all platforms contains a code injection vulnerability. A successful exploit of this vulnerability might lead to code execution, escalation of privileges, information disclosure, and data tampering.

    NVNVIDIA· Jun 16, 2026

41. 6.5Med

    CVE-2026-8683 ↗ (opens in a new tab)

    Mattermost Desktop App versions <=6.1 5.5.13.0 fail to account for attempting to open extremely long URLs in the Mattermost Desktop App which allows a malicious server owner to crash the application via including a script to call window.open on a very large URL. Mattermost Advisory ID: MMSA-2026-00652

    MCMattermost Cloud· Jun 15, 2026

42. 7.7High

    CVE-2026-6517 ↗ (opens in a new tab)

    Mattermost Desktop App versions <=6.1 5.5.13.0 fail to restrict the allow list of domains to which NTLM credentials were forwarded to in the Mattermost Desktop App which allows any user on a server without the image proxy enabled to intercept other users credentials via embedding an image that routes to an external web server. Mattermost Advisory ID: MMSA-2026-00651

    MCMattermost Cloud· Jun 15, 2026

43. 6.4Med

    CVE-2026-11769 ↗ (opens in a new tab)

    We have released version 5.24.0 of the Grafana Operator. This patch includes a MEDIUM severity security fix for a path traversal/privilege escalation vulnerability in the Grafana Operator. ### Summary The Grafana Operator supports loading dashboards & library panels using the jsonnet data templating language. The jsonnet expression is evaluated in the context of the operator manager pod. ### Impact It is possible for a malicious user who can create Dashboard or LibraryPanel resources for a Grafana instance to obtain the Kubernetes service account token of the Grafana Operator manager. ### Affe

    GCGrafana Cloud· Jun 13, 2026

44. 8.1High

    CVE-2026-53408 ↗ (opens in a new tab)

    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

    ZOZoom· Jun 12, 2026

45. 9.8Crit

    CVE-2026-53407 ↗ (opens in a new tab)

    Improper Authorization in Handler for Custom URL Scheme in Zoom Workplace before version 7.0.4 for Android and before 7.0.3 for iOS may allow an unauthenticated user to conduct an escalation of privilege via network access.

    ZOZoom· Jun 12, 2026

46. 7.2High

    CVE-2026-42306 ↗ (opens in a new tab)

    Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to redirect a bind mount target to an arbitrary host path, potentially overwriting host files or causing denial of service. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

    DODocker· Jun 12, 2026

47. 6.1Med

    CVE-2026-41568 ↗ (opens in a new tab)

    Moby is an open source container framework. In Docker Engine prior to version 29.5.1, Docker Daemon versions 28.5.2 and prior, and Moby Daemon prior to version 2.0.0-beta.14, a race condition during docker cp mount setup allows a malicious container to create empty files or directories at arbitrary absolute paths on the host filesystem. This issue has been patched in Docker Engine version 29.5.1 and Moby Daemon version 2.0.0-beta.14.

    DODocker· Jun 12, 2026

48. 7.8High

    CVE-2026-53406 ↗ (opens in a new tab)

    Insufficient Verification of Data Authenticity in Remote Control for Zoom Contact Center for Windows before version 7.0.0 may allow an authenticated user to enable an escalation of privilege via local access.

    ZOZoom· Jun 12, 2026

49. 8.8High

    CVE-2026-7387 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15, 10.11.x <= 10.11.16 Mattermost fails to require role-management authorization when setting the scheme_admin flag on group syncable link and patch endpoints, which allows a user with group-link permissions to escalate themselves and group members to team or channel admin via crafted API requests.. Mattermost Advisory ID: MMSA-2026-00665

    MCMattermost Cloud· Jun 12, 2026

50. 6.5Med

    CVE-2026-7184 ↗ (opens in a new tab)

    Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, 10.11.x <= 10.11.15 fail to sanitize the Remote Cluster API response on PATCH operations, which allows authenticated users with the {{manage_secure_connections}} permission to obtain remote cluster authentication tokens via a PATCH request to the remote cluster endpoint.. Mattermost Advisory ID: MMSA-2026-00662

    MCMattermost Cloud· Jun 12, 2026