Skip to content
OpenAdvisories

Archive

30 June 2026

Vulnerabilities first published on this day (UTC), newest first.

← May 2026 2026 / June /30 July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.6
    CVE-2026-13934 Public exploit

    Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote …

    Google Chrome chromium chromium Browsers Debian Wolfi
  • Critical 10.0
    CVE-2026-10134 Public exploit

    Unauthenticated Server-Side RCE via PythonCodeStructuredTool in Public Flows

    IBM Langflow OSS 1.0.0 through 1.9.3 allows an attacker to read every secret available to the Langflow process, read and modify every flow, conversation, message, file upload, and saved component in the Langflow database, can connect to internal services, abu…

    IBM Langflow OSS
  • Critical 9.9
    CVE-2026-7873 Public exploit Scanner template

    Code Injection Vulnerability in Code Validation Endpoint

    IBM Langflow OSS 1.0.0 through 1.10.0 allows authenticated attackers to execute arbitrary OS commands and read sensitive files including credentials, enabling complete system compromise and lateral movement.

    IBM Langflow OSS langflow PyPI
  • Critical 9.8
    CVE-2026-58138 Public exploit Scanner template

    Orkes Conductor 3.21.21 < 3.30.2 Unauthenticated RCE via GraalVM Script Evaluators

    Orkes Conductor 3.21.21 before 3.30.2 contains an unauthenticated remote code execution vulnerability that allows remote attackers to execute arbitrary OS commands by submitting inline workflow definitions containing malicious JavaScript or Python expressions…

    conductor-oss conductor
  • Critical 10.0
    CVE-2026-48282 Exploited Public exploit Scanner template EPSS 42%

    ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

    ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary code execution in the context of the current user. Exploitation of thi…

    Adobe ColdFusion 2023 ColdFusion 2025
    KEV Jul 7, 2026