June 2026
Published in June 2026
- public exploitCVE-2026-43724
- criticalDrupal core - Less critical - Cache poisoning and open redirect - SA-CORE-2026-007drupal
- criticalDrupal core - Moderately critical - Gadget chain - SA-CORE-2026-006drupal
- public exploitCVE-2026-43735
- criticalDrupal core - Critical - PHP object injection - SA-CORE-2026-005drupal
- criticalCisco security advisory (AV26-613)cccs
- public exploitCVE-2026-44024
- unknownF5 security advisory (AV26-612)cccs
- criticalMitel security advisory (AV26-611)cccs
- CVE-2026-44631
- mediumCisco Umbrella Virtual Appliance Privilege Escalation Vulnerabilitycisco-psirt
- mediumCisco Webex App Open Redirect Vulnerabilitycisco-psirt
- CVE-2026-44815
- mediumCisco Crosswork Network Controller Server-Side Template Injection Vulnerabilitycisco-psirt
- criticalNCSC-2026-0207 [1.00] [M/H] Vulnerabilities fixed in Oracle Fusion Middleware productsncsc-nl
- CVE-2026-45480
- unknownNCSC-2026-0206 [1.00] [M/H] Vulnerabilities fixed in Oracle JD Edwards EnterpriseOnencsc-nl
- unknownNCSC-2026-0205 [1.00] [M/H] Vulnerabilities fixed in Oracle MySQL productsncsc-nl
- CVE-2026-45602
- unknownNCSC-2026-0204 [1.00] [M/H] Vulnerabilities fixed in Oracle PeopleSoft Enterprisencsc-nl
- mediumNCSC-2026-0203 [1.00] [M/H] Vulnerabilities fixed in Oracle VM VirtualBoxncsc-nl
- CVE-2026-45639
- unknownNCSC-2026-0202 [1.00] [M/H] Vulnerabilities fixed in Oracle Enterprise Managerncsc-nl
- unknownNCSC-2026-0201 [1.00] [M/H] Vulnerabilities fixed in Oracle E-Business Suite productsncsc-nl
- CVE-2026-45657
- unknownNCSC-2026-0200 [1.00] [M/H] Vulnerabilities fixed in Oracle Communicationsncsc-nl
- criticalexploitedCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerabilitycisco-psirt
- CVE-2026-47281
- highexploitedCisco Catalyst SD-WAN Controller Authentication Bypass Vulnerabilitycisco-psirt
- unknownNCSC-2026-0199 [1.00] [M/H] Vulnerability fixed in Cisco Catalyst SD-WAN Managerncsc-nl
- CVE-2026-47291
- unknownexploitedNCSC-2026-0179 [1.01] [H/H] Vulnerabilities fixed in Check Point Remote and Mobile Access VPN productsncsc-nl
- unknownMultiple vulnerabilities in Canon EOS Network Setting Tooljvn
- CVE-2026-47643
- criticalexploitedCVE-2026-48907: Widget Factory Joomla Content Editor Improper Access Control Vulnerabilitycisa-kev
- mediumexploitedCisco Catalyst SD-WAN Manager Arbitrary File Write Vulnerabilitycisco-psirt
- CVE-2026-47646
- unknownCVE-2026-11931 - Insecure Permissions on Authentication Token Cache File in Kiro IDEaws
- criticalexploitedCVE-2026-20262: Cisco Catalyst SD-WAN Manager Directory or Path Traversal Vulnerabilitycisa-kev
- CVE-2026-47647
- unknownCVE-2026-12043 - Heap double-free in AWS Common Runtime aws-c-httpaws
- unknownNCSC-2026-0197 [1.00] [M/H] Vulnerability fixed in Fortinet FortiPortalncsc-nl
- public exploitCVE-2026-47729
- unknownNCSC-2026-0196 [1.00] [M/H] Vulnerabilities fixed in GitLab Enterprise Editionncsc-nl
- unknownexploitedNCSC-2026-0195 [1.00] [M/H] Vulnerability fixed in Oracle PeopleSoft Enterprise PeopleToolsncsc-nl
- CVE-2026-48567
- criticalexploitedCVE-2026-35273: Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerab…cisa-kev
- criticalexploitedCVE-2026-10520: Ivanti Sentry OS Command Injection Vulnerabilitycisa-kev
- CVE-2026-48569
- highCVE-2026-10740 - Excessive memory allocation in s2n-quicaws
- unknownCVE-2026-10740 - Excessive memory allocation in s2n-quicaws
- CVE-2026-48579
- unknownPAN-SA-2026-0009 Informational Bulletin: Impact assessment of OSS CVEs in Prisma SD-WAN ION (Severity: INFORMA…paloalto
- unknownJenkins Security Advisory 2026-06-10jenkins
- CVE-2026-48582
- criticalexploited2026-008: Critical vulnerabilities in Ivanti Sentrycert-eu
- critical2026-007: Critical Vulnerability in Windows Netlogoncert-eu
- CVE-2026-48584
- unknownexploitedSecurity Alert: Microsoft Releases June 2026 Security Updatesjpcert
- unknownSecurity Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-63)jpcert
- CVE-2026-48930
- criticalGitLab Patch Release: 19.0.2, 18.11.5, 18.10.8gitlab
- criticalGitLab Patch Release: 19.0.2, 18.11.5, 18.10.8gitlab
- CVE-2026-50003
- unknownexploitedSecond-Order OS Command Injection via JSON Input on start vnc featurefortinet
- unknownRestricted CLI escape using Luafortinet
- CVE-2026-50110
- unknownImproper access control in API endpointsfortinet
- highCVE-2026-45603: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymsrc
- CVE-2026-50195
- highCVE-2026-45598: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymsrc
- highCVE-2026-45601: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerabilitymsrc
- public exploitCVE-2026-50229
- mediumCVE-2026-47644: Copilot Chat (Microsoft Edge) Information Disclosure Vulnerabilitymsrc
- criticalexploitedCVE-2026-7473: Arista Extensible Operating System Incomplete Comparison with Missing Factors Vulnerabilitycisa-kev
- CVE-2026-52913
- criticalexploitedCVE-2026-11645: Google Chromium V8 Out-of-Bounds Read and Write Vulnerabilitycisa-kev
- criticalexploitedCVE-2026-20245: Cisco Catalyst SD-WAN Manager Improper Encoding or Escaping of Output Vulnerabilitycisa-kev
- CVE-2026-52919
- unknownCVE-2026-11393 - Code Injection via Improper Triple-Quote Escaping in AgentCore CLI Bedrock Agent Importaws
- criticalexploitedCVE-2026-50751: Check Point Security Gateway Improper Authentication Vulnerabilitycisa-kev
- CVE-2026-52922
- unknownCVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflowaws
- unknownCVE-2026-7461 - OS Command Injection in Amazon ECS Agent via FSx Windows File Server Volume Credentialsaws
- CVE-2026-52931
- unknownCVE-2026-10591 - Kiro IDE Insufficient File Write Restrictions to Execution-Sensitive Pathsaws
- unknownMariaDB Server Audit Plugin Comment Handling Bypassaws
- CVE-2026-52934
- unknownIssues in tough library and tuftool CLI utilityaws
- unknownCVE-2026-9291 - Insecure Deserialization in Amazon Braket SDK Job Results Processingaws
- CVE-2026-52944
- unknownIssue with FreeRTOS-Plus-TCP - IPv6 Router Advertisement Memory Safety Issuesaws
- criticalCVE-2026-7791 - Local Privilege Escalation via TOCTOU Race Condition in Amazon WorkSpaces Skylight Agentaws
- CVE-2026-52947
- unknownCVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Themeaws
- unknownCVE-2026-4428: Issues with AWS-LC - CRL Distribution Point Scope Check Logic Erroraws
- CVE-2026-52953
- unknownCVE-2026-4269 - Improper S3 ownership verification in Bedrock AgentCore Starter Toolkitaws
- unknownCVE-2026-10584 - HTTPS Fallback to HTTP in Graph Exploreraws
- CVE-2026-52956
- unknownOverly Permissive Trust Policy in Harmonix on AWS EKSaws
- unknownCVE-2026-4270 - AWS API MCP File Access Restriction Bypassaws
- CVE-2026-52962
- unknownKey Commitment Issues in S3 Encryption Clientsaws
- unknownexploitedCVE-2025-66478: RCE in React Server Componentsaws
- CVE-2026-52989
- lowPrivilege Escalation in Aurora PostgreSQL using AWS JDBC Wrapper, AWS Go Wrapper, AWS NodeJS Wrapper, AWS Pyth…aws
- unknownCVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc container issuesaws
- CVE-2026-52991
- unknownImproper authentication token handling in the Amazon WorkSpaces client for Linuxaws
- unknownCVE-2025-12815 - RES web portal may display preview of Virtual Desktops that the user shouldn't have access toaws
- CVE-2026-52993
- unknownCVE-2025-12829 - Integer Overflow issue in Amazon Ion-Caws
- unknownCVE-2026-9133 - Arbitrary file read in rabbitmq-aws pluginaws
- CVE-2026-53000
- unknownArbitrary code execution via crafted project files in Kiro IDEaws
- unknownCVE-2026-6550 - Key commitment policy bypass via shared key cache in AWS Encryption SDK for Pythonaws
- CVE-2026-53002
- unknownexploitedDirty Frag and other issues in Amazon Linux kernelsaws
- unknownCVE-2026-0830 - Command Injection in Kiro GitLab Merge Request Helperaws
- CVE-2026-53006
- unknownCVE-2025-11462 AWS ClientVPN macOS Client Local Privilege Escalationaws
- unknownIMDS impersonationaws
- CVE-2026-53009
- unknownIssue with AWS Ops Wheel (CVE-2026-6911 and CVE-2026-6912aws
- unknownCVE-2025-11573 - Denial of Service issue in Amazon.IonDotnetaws
- CVE-2026-53010
- unknownBuffer Over-read when receiving improperly sized ICMPv6 packetsaws
- unknownCVE-2026-9255 - Tool Execution Without Authorization via Piped Stdin in Kiro CLIaws
- CVE-2026-53017
- unknownCVE-2025-8904 - Issue with Amazon EMR Secret Agent componentaws
- unknownCVE-2025-9039 - Issue with Amazon ECS agent introspection serveraws
- CVE-2026-53018
- unknownAmazon Q Developer and Kiro – Prompt Injection Issues in Kiro and Q IDE pluginsaws
- unknownCVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transportaws
- CVE-2026-53025
- unknownCVE-2025-6031 - Insecure device pairing in end-of-life Amazon Cloud Camaws
- unknownCVE-2026-7191- Arbitrary Code Execution via Sandbox Bypass in QnABot on AWSaws
- CVE-2026-53027
- unknownCVE-2025-8069 - AWS Client VPN Windows Client Local Privilege Escalationaws
- unknownCVE-2026-8838 - Remote Code Execution in amazon-redshift-python-driveraws
- CVE-2026-53036
- unknown[Redirected] Security Update for Amazon Q Developer Extension for Visual Studio Code (Version #1.84)aws
- unknownUnanchored ACCOUNT_ID webhook filters for CodeBuildaws
- CVE-2026-53043
- unknown[Redirected] Memory Dump Issue in AWS CodeBuildaws
- unknownCVE-2026-8178 - Remote Code Execution via Unsafe Class Loading in Amazon Redshift JDBC Driveraws
- CVE-2026-53045
- unknownCVE-2026-8686 - Heap out-of-bounds read in coreMQTT MQTT5 property parsingaws
- unknownCVE-2026-1386 - Arbitrary Host File Overwrite via Symlink in Firecracker Jaileraws
- CVE-2026-53049
- unknownCVE-2026-6437 - Mount Option Injection in Amazon EFS CSI Driveraws
- unknownFragnesia Local Privilege Escalation report via ESP-in-TCP in the Linux Kernelaws
- CVE-2026-53052
- lowCVE-2026-11400 and CVE-2026-11401aws
- unknownIssues with Amazon Athena ODBC Driveraws
- CVE-2026-53053
- unknownCVE-2026-7424 - Integer Underflow in DHCPv6 Sub-Option Parser in FreeRTOS-Plus-TCPaws
- unknownIssue with Amazon SageMaker Python SDK - Model artifact integrity verification issues (CVE-2026-8596 & CVE-202…aws
- CVE-2026-53062
- unknownSecurity Findings in SageMaker Python SDKaws
- unknownIssue with FreeRTOS-Plus-TCP - MAC Address Validation Bypass and ICMP Echo Reply Integer Underflowaws
- CVE-2026-53075
- unknownIssues with AWS Research and Engineering Studio (RES)aws
- unknownIssue with AWS-LC: an open-source, general-purpose cryptographic library (CVE-2026-3336, CVE-2026-3337, CVE-20…aws
- CVE-2026-53077
- unknownexploitedOngoing updates on Copy.fail and variantsaws
- criticalexploitedCVE-2026-28318: SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerabilitycisa-kev
- CVE-2026-53086
- mediumCisco Webex Meetings Cross-Site Scripting Vulnerabilitycisco-psirt
- unknownLinux Kernel vulnerability Dirty Fragfortinet
- CVE-2026-53089
- criticalexploitedCVE-2026-45247: Mirasvit Full Page Cache Warmer Deserialization of Untrusted Data Vulnerabilitycisa-kev
- unknownMultiple vulnerabilities in ServerView Agents for Windowsjvn
- CVE-2026-53107
- criticalexploitedCVE-2024-21182: Oracle WebLogic Server Unspecified Vulnerabilitycisa-kev
- CVE-2026-53108
- CVE-2026-53130
- CVE-2026-53135
- CVE-2026-53176
- CVE-2026-53309
- CVE-2026-53434
- CVE-2026-53492
- CVE-2026-54130
- CVE-2026-54906
- CVE-2026-55204
- CVE-2026-55276
- CVE-2026-55655
- CVE-2026-55721
- CVE-2026-55955
- CVE-2026-56405
- CVE-2026-56413
- CVE-2026-56415
- CVE-2026-56445
- CVE-2026-57062
- CVE-2026-58051
- CVE-2026-58058
- CVE-2026-6094
- public exploitCVE-2026-6330
- CVE-2026-6911