Archive

22 May 2026

Vulnerabilities first published on this day (UTC), newest first.

← April 2026 2026 / May /22 June 2026 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Critical 10.0

CVE-2026-46595 Public exploit

Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh

Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of callback is passed other than public key, then the source-address validation would be skipped.

golang.org/x/crypto golang.org/x/crypto/ssh zot kubescape Debian Ubuntu Azure Linux Wolfi Go

May 22, 2026
Critical 10.0

CVE-2026-34910 Exploited Public exploit Scanner template EPSS 90%

A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi OS…

Ubiquiti Express 7 UniFi OS Server UDM-Pro Network devices

May 22, 2026
KEV Jun 23, 2026
Critical 10.0

CVE-2026-34908 Exploited Public exploit Scanner template EPSS 89%

A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi OS d…

Ubiquiti Express 7 UniFi OS Server UDM-SE Network devices

May 22, 2026
KEV Jun 23, 2026