Archive

30 July 2026

Vulnerabilities first published on this day (UTC), newest first.

← June 2026 2026 / July /30 August 2026 →

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

Medium 6.1

CVE-2026-44613 Public exploit

Apache Zeppelin: Cross-site request forgery in REST and WebSocket request handling

Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodies, allowing an attacker who lures an authenticated user to a …

Apache Software Foundation Apache Zeppelin

Jul 30, 2026
Medium 4.1

CVE-2026-56850 Public exploit

A flaw in Node.js HTTPS Agent connection reuse can cause PFX object-array key collisions, allowing mutual TLS (mTLS) cl…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jul 30, 2026
Medium 6.3

CVE-2026-58040 Public exploit

An incomplete fix has been identified in Node.js: HTTPS Agent TLS session reuse skips hostname verification across iden…

Node.js node nodejs nodejs Debian Ubuntu Azure Linux Alpine Wolfi

Jul 30, 2026