June 2026
Published in June 2026
- unknownNCSC-2026-0216 [1.00] [M/H] Vulnerabilities fixed in Citrix Netscaler ADC and Netscaler Gatewayncsc-nl
- criticalCitrix security advisory (AV26-645) – Update 1cccs
- known exploitedpublic exploitCVE-2022-0492
- unknownMozilla security advisory (AV26-644)cccs
- unknownwolfSSL security advisory (AV26-643)cccs
- known exploitedpublic exploitCVE-2024-21182
- unknownexploitedSimpleHelp security advisory (AV26-642)cccs
- criticalDelta Electronics DVP12SE PLCcisa
- known exploitedpublic exploitCVE-2024-55591
- criticalStoneFly Storage Concentratorcisa
- criticalSchneider Electric EcoStruxure IT Data Center Expertcisa
- known exploitedpublic exploitCVE-2025-48595
- criticalOFFIS DCMTK Toolkitcisa
- criticalFrangoteam FUXA SCADA/HMIcisa
- known exploitedpublic exploitCVE-2025-55182
- criticalXZ Utils vulnerability impacting B&R Productscisa
- criticalMitsubishi Electric MELSOFT Update Manager SW1DND-UDM-Mcisa
- known exploitedpublic exploitCVE-2025-59718
- criticalSchneider Electric EasyLogic T150 and Saitel DP RTUcisa
- unknownNCSC-2026-0215 [1.00] [M/H] Vulnerabilities fixed in Apple iOS and iPadOSncsc-nl
- known exploitedpublic exploitCVE-2025-67038
- unknownNCSC-2026-0214 [1.00] [M/H] Vulnerabilities fixed in Apple MacOSncsc-nl
- highDSA-6374-1 nginx - security updatedebian
- known exploitedpublic exploitCVE-2026-0257
- unknownMultiple vulnerabilities in Apache Tomcat (June 30, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in Synology MailPlus Server (June 30, 2026)cert-fr-avis
- known exploitedpublic exploitCVE-2026-10520
- unknownCVE-2026-13762 and CVE-2026-13763 - Issue with HTTP/2 multi-frame request body inspection in AWS WAFaws
- unknownApple security advisory (AV26-641)cccs
- known exploitedpublic exploitCVE-2026-11645
- unknownMicrosoft Edge security advisory (AV26-640)cccs
- criticalIBM security advisory (AV26-639)cccs
- known exploitedCVE-2026-12569
- unknownDell security advisory (AV26-638)cccs
- unknown[Control systems] CISA ICS security advisories (AV26-637)cccs
- known exploitedpublic exploitCVE-2026-20127
- unknownRed Hat security advisory (AV26-636)cccs
- unknownUbuntu security advisory (AV26-635)cccs
- known exploitedpublic exploitCVE-2026-20182
- highexploitedCISA Adds One Known Exploited Vulnerability to Catalogcisa
- unknownNCSC-2026-0213 [1.00] [M/H] Vulnerabilities fixed in MISP platformncsc-nl
- known exploitedpublic exploitCVE-2026-20230
- unknownNCSC-2026-0212 [1.00] [M/H] Vulnerabilities fixed in n8n workflow automation platformncsc-nl
- unknownMultiple vulnerabilities in Fluentdjvn
- known exploitedpublic exploitCVE-2026-20245
- criticalexploitedCVE-2026-48558: SimpleHelp Authentication Bypass Vulnerabilitycisa-kev
- unknownMultiple vulnerabilities in Microsoft Edge (June 29, 2026)cert-fr-avis
- known exploitedpublic exploitCVE-2026-20253
- unknownMultiple vulnerabilities in Stormshield Management Center (June 29, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in KeyCloak (June 29, 2026)cert-fr-avis
- known exploitedpublic exploitCVE-2026-20262
- lowDSA-6372-1 tor - security updatedebian
- unknownDSA-6373-1 lxd - security updatedebian
- known exploitedpublic exploitCVE-2026-25089
- unknownGoogle Chrome security advisory (AV26-634)cccs
- unknownRussian Intelligence Services Continue to Target Commercial Messaging Applicationscisa
- known exploitedpublic exploitCVE-2026-28318
- unknownGoogle Chrome Multiple Vulnerabilitieshkcert
- unknownDSA-6370-1 incus - security updatedebian
- known exploitedpublic exploitCVE-2026-31431
- unknownMultiple vulnerabilities in Asterisk (June 26, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in Tenable Nessus (June 26, 2026)cert-fr-avis
- known exploitedpublic exploitCVE-2026-34908
- unknownMultiple vulnerabilities in Google Chrome (June 26, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in the SUSE Linux kernel (June 26, 2026)cert-fr-avis
- known exploitedCVE-2026-34909
- criticalexploitedCisco security advisory (AV26-547) – Update 1cccs
- criticalHPE security advisory (AV26-633)cccs
- known exploitedpublic exploitCVE-2026-34910
- mediumCisco Finesse Remote File Inclusion Vulnerabilitycisco-psirt
- criticalEVoke Systems Charging Station Management Systemcisa
- known exploitedpublic exploitCVE-2026-35273
- criticalSchneider Electric PowerLogic P7cisa
- criticalYokogawa FAST/TOOLS and CI Servercisa
- known exploitedpublic exploitCVE-2026-42271
- highexploitedCISA Adds Two Known Exploited Vulnerabilities to Catalogcisa
- criticalDaktronics Controller Firmwarecisa
- known exploitedpublic exploitCVE-2026-42897
- criticalH.VIEW HV-500S6 IP Cameracisa
- criticalHorner Automation Cscapecisa
- known exploitedpublic exploitCVE-2026-45247
- criticalpydicom pynetdicom Librarycisa
- criticalOHIF Viewers DICOMcisa
- known exploitedpublic exploitCVE-2026-48558
- criticalDelta Electronics DTM Softcisa
- unknownHPE security advisory (AV26-632)cccs
- known exploitedpublic exploitCVE-2026-48907
- criticalDrupal security advisory (AV26-631)cccs
- unknownNCSC-2026-0211 [1.00] [M/H] Vulnerabilities fixed in GitLab Community Edition and Enterprise Editionncsc-nl
- known exploitedpublic exploitCVE-2026-50751
- unknownGoogle Chrome Multiple Vulnerabilitieshkcert
- unknownGitLab Multiple Vulnerabilitieshkcert
- known exploitedpublic exploitCVE-2026-54420
- unknownDSA-6364-1 chromium - security updatedebian
- unknownDSA-6365-1 libssh2 - security updatedebian
- known exploitedpublic exploitCVE-2026-7473
- unknownDSA-6366-1 sogo - security updatedebian
- unknownDSA-6367-1 dnsdist - security updatedebian
- CVE-2025-10263
- unknownDSA-6369-1 pdns-recursor - security updatedebian
- unknownMultiple vulnerabilities in Microsoft Azure Linux (June 25, 2026)cert-fr-avis
- CVE-2025-12815
- unknownMultiple vulnerabilities in Google Chrome (June 25, 2026)cert-fr-avis
- criticalexploitedCVE-2026-20230: Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerabilitycisa-kev
- CVE-2025-66478
- unknownMultiple vulnerabilities in CPython (June 25, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in GitLab (June 25, 2026)cert-fr-avis
- CVE-2025-8069
- unknownGitLab security advisory (AV26-630)cccs
- unknownJenkins security advisory (AV26-629)cccs
- CVE-2026-0250
- unknownn8n security advisory (AV26-628)cccs
- criticalTenable security advisory (AV26-627)cccs
- CVE-2026-0272
- unknownGoogle Chrome security advisory (AV26-626)cccs
- unknownJenkins Security Advisory 2026-06-24jenkins
- CVE-2026-10109
- unknownUsing SASE in a Modern TIC 3.0 Solutioncisa
- unknownNCSC-2026-0210 [1.01] [M/H] Vulnerabilities fixed in libssh2 by libsshncsc-nl
- CVE-2026-10536
- unknownQNAP NAS Multiple Vulnerabilitieshkcert
- unknownIBM WebSphere Products Multiple Vulnerabilitieshkcert
- CVE-2026-10907
- criticalGitLab Patch Release: 19.1.1, 19.0.3, 18.11.6gitlab
- criticalGitLab Patch Release: 19.1.1, 19.0.3, 18.11.6gitlab
- CVE-2026-10917
- unknownMultiple vulnerabilities in Tenable Identity Exposure (June 24, 2026)cert-fr-avis
- unknownMultiple vulnerabilities in Microsoft Azure Linux (June 24, 2026)cert-fr-avis
- CVE-2026-11400
- unknownMultiple vulnerabilities in cURL and libcurl (June 24, 2026)cert-fr-avis
- unknownexploited[Control systems] CISA ICS security advisories (AV26–241) – Update 1cccs
- CVE-2026-11564
- criticalexploitedUbiquiti security advisory (AV26-498) – Update 1cccs
- unknownCVE-2026-12957 and CVE-2026-12958 - Issues in Language Servers for AWS and Amazon Q Developer Pluginsaws
- CVE-2026-11679
- criticalBroadcom VMware security advisory (AV26-625)cccs
- criticalABB Freelance Security Lockcisa
- CVE-2026-11707
- unknownSiemens Products using OpenSSLcisa
- unknownSiemens SIPROTEC 5 Using DIGSI5 Protocolcisa
- CVE-2026-11856
- criticalexploitedImpact of Linux Kernel vulnerabilities on B&R productscisa
- highexploitedCISA Adds Four Known Exploited Vulnerabilities to Catalogcisa
- CVE-2026-11979
- unknownNCSC-2026-0209 [1.00] [M/H] Vulnerabilities fixed in MongoDB Serverncsc-nl
- unknownDrupal Multiple Vulnerabilitieshkcert
- CVE-2026-12064
- unknownDSA-6362-1 gst-plugins-bad1.0 - security updatedebian
- unknownDSA-6363-1 python-urllib3 - security updatedebian
- CVE-2026-12087
- criticalexploitedCVE-2026-34909: Ubiquiti UniFi OS Path Traversal Vulnerabilitycisa-kev
- unknownMultiple Vulnerabilities in Moodle (June 23, 2026)cert-fr-avis
- CVE-2026-13025
- unknownMultiple vulnerabilities in Squid (June 23, 2026)cert-fr-avis
- unknownNodejs security advisory (AV26-624)cccs
- CVE-2026-13474
- criticalJetBrains security advisory (AV26-623)cccs
- unknownMicrosoft Edge security advisory (AV26-622)cccs
- CVE-2026-13762
- mediumCisco Packaged Contact Center Enterprise and Cisco Unified Contact Center Enterprise Cross-Site Scripting Vuln…cisco-psirt
- unknownRed Hat security advisory (AV26-621)cccs
- CVE-2026-13763
- unknown[Control systems] CISA ICS security advisories (AV26–620)cccs
- unknownDell security advisory (AV26-619)cccs
- CVE-2026-26142
- unknownUbuntu security advisory (AV26-618)cccs
- criticalIBM security advisory (AV26-617)cccs
- CVE-2026-28701
- unknownNode.js Multiple Vulnerabilitieshkcert
- unknownAndroid Multiple Vulnerabilitieshkcert
- CVE-2026-29167
- unknownDSA-6361-1 ffmpeg - security updatedebian
- unknownMultiple Vulnerabilities in Microsoft Products (June 22, 2026)cert-fr-avis
- CVE-2026-34182
- unknownDSA-6355-1 linux - security updatedebian
- unknownDSA-6356-1 imagemagick - security updatedebian
- CVE-2026-34183
- unknownDSA-6357-1 pillow - security updatedebian
- unknownDSA-6358-1 libhttp-daemon-perl - security updatedebian
- CVE-2026-39868
- unknownDSA-6359-1 gst-plugins-good1.0 - security updatedebian
- unknownDSA-6360-1 squid - security updatedebian
- CVE-2026-40702
- unknown[Control systems] Mitsubishi Electric security advisory (AV26-616)cccs
- unknownexploitedNCSC-2026-0198 [1.01] [M/H] Vulnerabilities fixed in Splunk Enterprise and Splunk Cloud Platformncsc-nl
- CVE-2026-42055
- unknownNCSC-2026-0208 [1.00] [M/H] Vulnerabilities fixed in Cisco Identity Services Enginencsc-nl
- unknownIssue with containerd CRI Plugin - CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, CVE-2026-47…aws
- CVE-2026-42904
- criticalDrupal security advisory (AV26-615)cccs
- unknownexploitedSplunk security advisory (AV26-586) – Update 1cccs
- CVE-2026-42985
- criticalexploitedAL26-014 – FortiBleed leak of thousands of compromised credentials impacting Fortinet devicescccs
- criticalexploitedCVE-2026-20253: Splunk Enterprise Missing Authentication for Critical Function Vulnerabilitycisa-kev
- public exploitCVE-2026-43700
- unknownCVE-2026-12530 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_pa…aws
- criticalSplunk security advisory (AV26-614)cccs
- CVE-2026-43716
- criticalDrupal core - Moderately critical - Improper validation - SA-CORE-2026-009drupal
- criticalDrupal core - Moderately critical - Server-side request forgery - SA-CORE-2026-008drupal