Skip to content
OpenAdvisories

Archive

29 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /29 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

12 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-55276

    Apache Tomcat: Logged effective web.xml is incomplete

    Always-Incorrect Control Flow Implementation vulnerability in Apache Tomcat meant that special roles and empty authorisation constraints were not included when the effective web.xml was logged. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22,…

    Apache Software Foundation Apache Tomcat org.apache.tomcat:tomcat tomcat9 Debian Ubuntu Maven
  • Critical 9.1
    CVE-2026-53434

    Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector

    Detection of Error Condition Without Action vulnerability in Apache Tomcat when configuring CRLs for a FFM based connector. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.22, from 10.1.0-M7 through 10.1.55, from 9.0.83 through 9.0.118. Users ar…

    Apache Software Foundation Apache Tomcat tomcat9 tomcat9 Debian Ubuntu Maven
  • Critical 9.6
    CVE-2026-57498

    Coolify Cross-Team IDOR: Livewire Components Accept Unscoped server_id and destination_uuid — Deploy to Other Teams' Servers

    Coolify is an open-source and self-hostable tool for managing servers, applications, and databases. Prior to 4.0.0-beta.474, Coolify's API controllers consistently validate server ownership with Server::whereTeamId($teamId) before any operation. However, mult…

    coollabsio coolify
  • Critical 9.8
    CVE-2026-13763

    HTTP/2 Stream Parser Confusion Body-Inspection Bypass in AWS Application Load Balancer with AWS WAF

    Inconsistent interpretation of HTTP/2 requests in AWS Application Load Balancer with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only…

    AWS AWS Application Load Balancer
  • Critical 9.8
    CVE-2026-13762

    HTTP/2 Stream Parser Confusion Body-Inspection Bypass in Amazon CloudFront with AWS WAF

    Inconsistent interpretation of HTTP/2 requests in Amazon CloudFront with AWS WAF enabled might allow remote actors to bypass AWS WAF managed rule body inspection via crafted HTTP/2 requests that fragment the request body across frames so that only a partial b…

    AWS Amazon CloudFront
  • Critical 9.1
    CVE-2026-39868

    This issue was addressed with improved input validation. This issue is fixed in iOS 18.7.10 and iPadOS 18.7.10, iOS 26.…

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.3
    CVE-2026-11720

    Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder

    A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a …

    Google MCP Toolbox for Databases (googleapis/mcp-toolbox) github.com/googleapis/mcp-toolbox Go
  • Critical 9.8
    CVE-2026-56782 Public exploit Scanner template

    Gorse - Unauthenticated Database Dump and Restore via /api/dump and /api/restore Endpoints

    Gorse before 0.5.10 contains an authentication bypass vulnerability in the /api/dump and /api/restore endpoints that allows unauthenticated attackers to access protected functionality when admin_api_key is empty, which is the default configuration. Remote att…

    gorse-io gorse
  • Critical 9.4
    CVE-2026-41052

    Rancher Privilege Escalation from Project Owner to Host

    Improper privilege handling could be used by users with Project Owner role to escalate privileges, in Rancher versions 2.14 before 2.14.2, 2.13 before 2.13.6, and 2.12 before 2.12.10.

    SUSE Rancher github.com/rancher/rancher Go
  • Critical 10.0
    CVE-2026-56290 Exploited Public exploit Scanner template EPSS 31%

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0

    Joomla Extension - joomlack.fr - Unauthenticated file upload in Page Builder CK extension < 3.6.0 - The Joomla extension Page Builder CK is vulnerable to an unauthenticated arbitrary file upload that allows uploading executable files and leads to full RCE.

    joomlack.fr JoomlaCK.fr Page Builder CK extension for Joomla Web / CMS
    KEV Jul 7, 2026
  • Critical 9.9
    CVE-2026-57331

    WordPress Paid Videochat Turnkey Site plugin <= 7.4.8 - Arbitrary File Deletion vulnerability

    Performer Arbitrary File Deletion in Paid Videochat Turnkey Site <= 7.4.8 versions.

    videowhisper Paid Videochat Turnkey Site
  • Critical 9.1
    CVE-2026-37637 Public exploit

    An issue in Alexantr filemanager v.1.0 allows a remote attacker to execute arbitrary code via the filemanager.php compo…