Skip to content
OpenAdvisories

Archive

June 2026

Vulnerabilities first published in this month (UTC), newest first.

← May 2026 2026 / June July 2026 →
  1. 1379
  2. 2224
  3. 3153
  4. 4641
  5. 5169
  6. 639
  7. 724
  8. 8286
  9. 9721
  10. 10252
  11. 11194
  12. 12291
  13. 1322
  14. 1418
  15. 15401
  16. 16549
  17. 17397
  18. 18158
  19. 19206
  20. 2046
  21. 2172
  22. 22223
  23. 23258
  24. 24522
  25. 25472
  26. 26374
  27. 2733
  28. 2845
  29. 29246
  30. 30651
All Critical High Medium Low Exploited only Public exploit

10 results · Clear filters · Feed

  • High 8.8
    CVE-2026-8452 Exploited Public exploit

    Memory overflow vulnerability leading to unpredictable or erroneous behavior and Denial of Service

    Memory overflow vulnerability NetScaler ADC and NetScaler Gateway leading to unpredictable or erroneous behavior and Denial of Service if the appliance is configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server

    NetScaler ADC Gateway
    KEV Aug 26, 2026
  • High 7.5
    CVE-2026-49049 Exploited Public exploit Scanner template

    Joomla Extension - joomshaper.com - Unauthenticated access to Helix3 template ajax handler

    The Helix3 plugin for Joomla exposes an ajax handler task, that allows unauthenticated attackers to delete arbitrary files, write arbitrary JSON files and update template parameters.

    joomshaper.com Helix3 extension for Joomla Web / CMS
  • High 8.8
    CVE-2026-53266 Exploited Public exploit

    netfilter: bridge: make ebt_snat ARP rewrite writable

    In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The ebtables SNAT target keeps the Ethernet source address rewrite behind skb_ensure_writable(skb, 0). This is intentional: at the bridge…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
    KEV Sep 18, 2026
  • High 8.4
    CVE-2026-55255 Exploited Public exploit

    Langflow: IDOR Vulnerability in `/api/v1/responses` Endpoint Allows Authenticated Attackers to Access Another User's Flow

    Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.1, an Insecure Direct Object Reference (IDOR) vulnerability in /api/v1/responses endpoint allows an authenticated attacker to execute any flow belonging to another use…

    langflow-ai langflow langflow PyPI
    KEV Jul 7, 2026
  • High 8.5
    CVE-2026-54420 Exploited Public exploit

    LiteSpeed cPanel plugin before 2.4.8 (as distributed in LiteSpeed WHM PlugIn before 5.3.2.0) mishandles symlinks provid…

    LiteSpeed Technologies cPanel Plugin
    KEV Jun 15, 2026
  • High 8.8
    CVE-2026-11645 Exploited Public exploit

    Out of bounds read and write in V8 in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitr…

    Google Chrome chromium chromium Browsers Debian Alpine Wolfi
    KEV Jun 9, 2026
  • High 7.8
    CVE-2026-20245 Exploited Public exploit EPSS 25%

    Cisco Catalyst SD-WAN Controller Authenticated Privilege Escalation Vulnerability

    A vulnerability in the CLI of Cisco Catalyst SD-WAN Controller, formerly SD-WAN vSmart, Cisco Catalyst SD-WAN Manager, formerly SD-WAN vManage, and Cisco Catalyst SD-WAN Validator, formerly SD-WAN vBond, could allow an authenticated, local attacker to execute…

    Cisco Cisco Catalyst SD-WAN Manager Cisco Catalyst SD-WAN Controller Network devices
    KEV Jun 9, 2026
  • High 7.5
    CVE-2026-28318 Exploited Public exploit EPSS 48%

    SolarWinds Serv-U Unauthenticated Denial of Service Vulnerability

    SolarWinds Serv-U is susceptible to specially crafted POST requests that crash the Serv-U service without authentication using Content-Encoding: deflate. Mitigation steps are provided to secure customer environments in the SolarWinds Trust Center if you are u…

    SolarWinds Serv-U
    KEV Jun 5, 2026
  • High 8.6
    CVE-2026-20230 Exploited Public exploit EPSS 89%

    Cisco Unified Communications Manager Server-Side Request Forgery Vulnerability

    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified CM SME) could allow an unauthenticated, remote attacker to conduct server-side request forgery (SSRF) attacks thr…

    Cisco Cisco Unified Communications Manager Network devices
    KEV Jun 25, 2026
  • High 8.4
    CVE-2025-48595 Exploited Public exploit

    In multiple locations, there is a possible way to achieve code execution due to an integer overflow. This could lead to…

    Google Android Android
    KEV Jun 2, 2026