July 2026
Published in July 2026
- unknownCVE-2026-18394 - Incorrect authorization in Strands Agents Tools http_request toolaws
- known exploitedpublic exploitCVE-2008-4128
- unknownUSN-8620-4: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
- known exploitedpublic exploitCVE-2018-0171
- unknownGoogle security advisory (AV26-768)cccs
- known exploitedpublic exploitCVE-2019-6340
- unknownRails security advisory (AV26-767)cccs
- known exploitedpublic exploitCVE-2020-11023
- unknownSolarWinds security advisory (AV26-766)cccs
- known exploitedpublic exploitCVE-2020-25223
- unknownNCSC-2026-0274 [1.00] [M/H] Vulnerability patched in SolarWinds Web Help Deskncsc-nl
- known exploitedpublic exploitCVE-2020-26919
- medium[NEW] [medium] IBM WebSphere Application Server: Multiple vulnerabilities enable Denial of Servicecert-bund
- known exploitedpublic exploitCVE-2020-7796
- high[NEW] [high] Gladinet CentreStack: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2021-1497
- medium[NEW] [medium] Apache Tika: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2021-1498
- low[NEW] [low] Apache Superset: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2021-22555
- high[NEW] [high] IBM DB2: Multiple vulnerabilitiescert-bund
- known exploitedCVE-2021-27137
- medium[UPDATE] [medium] GIMP: Multiple vulnerabilities enable code executioncert-bund
- known exploitedpublic exploitCVE-2021-31755
- medium[UPDATE] [medium] GIMP: Multiple vulnerabilities enable code executioncert-bund
- known exploitedpublic exploitCVE-2021-36380
- high[UPDATE] [high] GIMP: Multiple vulnerabilities allow code executioncert-bund
- known exploitedpublic exploitCVE-2022-26143
- medium[UPDATE] [medium] GIMP: Multiple vulnerabilities enable code executioncert-bund
- known exploitedpublic exploitCVE-2023-22518
- unknownUSN-8620-3: Linux kernel (Intel IoTG) vulnerabilitiesubuntu
- known exploitedpublic exploitCVE-2023-22527
- high[NEW] [high] IBM App Connect Enterprise: Multiple vulnerabilitiescert-bund
- known exploitedCVE-2023-4346
- high[NEW] [high] Erlang/OTP: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2023-44487
- medium[NEW] [medium] IBM WebSphere Application Server Liberty: Multiple vulnerabilities allow denial of servicecert-bund
- known exploitedpublic exploitCVE-2023-46604
- high[NEW] [high] IBM Langflow Desktop: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2024-38475
- high[NEW] [high] IBM Security Verify Access: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2024-42009
- high[NEW] [high] IBM DataPower Gateway: Multiple vulnerabilitiescert-bund
- known exploitedCVE-2024-50302
- medium[UPDATE] [medium] ImageMagick: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2025-10585
- high[UPDATE] [high] IBM WebSphere Application Server and Application Server Liberty: Multiple vulnerabilitiescert-bund
- known exploitedCVE-2025-13223
- high[UPDATE] [high] Red Hat Enterprise Linux (openCryptoki, hplip, 389-ds-base): Multiple Vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2025-31277
- medium[UPDATE] [medium] Xen: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2025-32463
- medium[UPDATE] [medium] vim: Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2025-41244
- medium[UPDATE] [medium] vim: Multiple vulnerabilities allow code executioncert-bund
- known exploitedpublic exploitCVE-2025-49113
- high[UPDATE] [high] Red Hat Enterprise Linux (JWCrypto and python-markdown): Multiple vulnerabilities allow denial…cert-bund
- known exploitedCVE-2025-66376
- medium[UPDATE] [medium] vim: Multiple vulnerabilities allow code executioncert-bund
- known exploitedCVE-2025-68686
- medium[UPDATE] [medium] RabbitMQ: Multiple Vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2026-0770
- high[UPDATE] [high] Red Hat Hardened Images RPMs (jq and pyOpenSSL): Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2026-15409
- high[UPDATE] [high] Red Hat Enterprise Linux (SSSD, libsoup): Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2026-15410
- high[UPDATE] [high] Red Hat Enterprise Linux (Advanced Cluster Management): Multiple vulnerabilitiescert-bund
- known exploitedpublic exploitCVE-2026-16232
- unknownNCSC-2026-0273 [1.00] [M/H] Vulnerabilities patched in Adobe Campaign Classicncsc-nl
- known exploitedCVE-2026-16812
- unknownexploitedSecurity Alert: [Updated] Microsoft Releases July 2026 Security Updatesjpcert
- known exploitedpublic exploitCVE-2026-20127
- unknownNCSC-2026-0272 [1.00] [M/H] Vulnerabilities patched in JFrog Artifactoryncsc-nl
- known exploitedpublic exploitCVE-2026-20182
- unknownMultiple vulnerabilities in Sharp and Toshiba Tec MFPsjvn
- known exploitedpublic exploitCVE-2026-20230
- unknownDSA-6406-1 php8.4 - security updatedebian
- known exploitedpublic exploitCVE-2026-20245
- unknownDSA-6407-1 incus - security updatedebian
- known exploitedCVE-2026-20316
- unknownDSA-6405-1 linux - security updatedebian
- known exploitedpublic exploitCVE-2026-25089
- unknownMultiple vulnerabilities in PHP (July 31, 2026)cert-fr-avis
- known exploitedpublic exploitCVE-2026-31431
- unknownMultiple vulnerabilities in Progress MOVEit Transfer (July 31, 2026)cert-fr-avis
- known exploitedCVE-2026-32201
- unknownGladinet security advisory (AV26-765)cccs
- known exploitedpublic exploitCVE-2026-34197
- unknownPHP Group security advisory (AV26-764)cccs
- known exploitedpublic exploitCVE-2026-39808
- unknownVMware security advisory (AV26-763)cccs
- known exploitedpublic exploitCVE-2026-42897
- unknown[Control Systems] Phoenix Contact security advisory (AV26-762)cccs
- known exploitedpublic exploitCVE-2026-45659
- unknownWebPros security advisory (AV26-761)cccs
- known exploitedpublic exploitCVE-2026-46817
- unknownAdobe security advisory (AV26-760)cccs
- known exploitedpublic exploitCVE-2026-48282
- unknownSpring security advisory (AV26-759)cccs
- known exploitedpublic exploitCVE-2026-48908
- unknownUSN-8625-1: OpenSSL vulnerabilityubuntu
- known exploitedpublic exploitCVE-2026-48939
- unknownGitLab security advisory (AV26-758)cccs
- known exploitedpublic exploitCVE-2026-50522
- unknownexploitedCisco security advisory (AV26-757)cccs
- known exploitedpublic exploitCVE-2026-55255
- criticalCISA Urges Water and Wastewater Systems Sector to Protect OT Against Activity Targeting PLCscisa
- known exploitedCVE-2026-56155
- criticalo6 Automation open62541cisa
- known exploitedpublic exploitCVE-2026-56164
- criticalRockwell Automation CompactLogix 5380 ControlLogix 5580 / 1756-EN4TR Communications Modulecisa
- known exploitedpublic exploitCVE-2026-56290
- criticalMZ Automation lib60870cisa
- known exploitedpublic exploitCVE-2026-56291
- criticalMZ Automation GmbH libiec61850cisa
- known exploitedCVE-2026-58644
- criticalJohnson Controls OpenBlue Employeecisa
- known exploitedpublic exploitCVE-2026-60137
- criticalWatchfire Controller Softwarecisa
- known exploitedpublic exploitCVE-2026-63030
- criticalToptech Systems RCU II+ and Multiload II+cisa
- known exploitedpublic exploitCVE-2026-9198
- criticalMikroTik RouterOScisa
- CVE-2025-71336
- criticalSchneider Electric IGSScisa
- CVE-2026-0272
- unknownMitsubishi Electric CC-Link IE TSN Communication Protocolcisa
- CVE-2026-0276
- criticalNASA Core Flight System (cFS) Health & Safety (HS) Applicationcisa
- CVE-2026-0277
- criticalOpen Source Software: Security Principles and Practicescisa
- CVE-2026-0279
- high[UPDATE] [high] Linux Kernel: Multiple vulnerabilitiescert-bund
- CVE-2026-0280
- medium[UPDATE] [medium] Internet Systems Consortium BIND: Multiple vulnerabilitiescert-bund
- CVE-2026-0281
- high[NEW] [high] GitLab: Multiple vulnerabilitiescert-bund
- CVE-2026-0282
- high[NEW] [high] Check Point SmartConsole: Multiple vulnerabilitiescert-bund
- CVE-2026-0284
- high[NEW] [high] FreeBSD Project FreeBSD OS: Multiple vulnerabilitiescert-bund
- CVE-2026-0285
- medium[NEW] [medium] Drupal (Token Content Access, Disable Login Page and Powerful Surveys): Multiple vulnerabilitie…cert-bund
- CVE-2026-0286
- medium[NEW] [medium] Autodesk AutoCAD: Multiple vulnerabilitiescert-bund
- CVE-2026-0287
- high[UPDATE] [high] PHP: Multiple vulnerabilitiescert-bund
- CVE-2026-0288
- medium[UPDATE] [medium] Red Hat Hardened Images RPMs (libxslt): Multiple vulnerabilities allow Denial of Servicecert-bund
- CVE-2026-10037
- medium[NEW] [medium] Apache log4j and Log4cxx: Multiple vulnerabilities allow file manipulationcert-bund
- CVE-2026-10536
- high[NEW] [high] Apache Camel: Multiple vulnerabilitiescert-bund
- CVE-2026-10698
- high[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilitiescert-bund
- CVE-2026-10768
- medium[UPDATE] [medium] CUPS: Multiple Vulnerabilitiescert-bund
- CVE-2026-10907
- high[UPDATE] [high] Red Hat Ansible Automation Platform: Multiple vulnerabilitiescert-bund
- CVE-2026-10917
- high[UPDATE] [high] DriveLock: Multiple vulnerabilitiescert-bund
- CVE-2026-11386
- medium[UPDATE] [medium] Apache CXF: Multiple vulnerabilitiescert-bund
- CVE-2026-11564
- medium[UPDATE] [medium] Red Hat Quay: Multiple vulnerabilitiescert-bund
- CVE-2026-11707
- high[NEW] [high] Apache Traffic Server: Multiple vulnerabilitiescert-bund
- CVE-2026-11708
- unknownexploitedNCSC-2026-0271 [1.00] [M/H] Vulnerability fixed in Cisco Secure Firewall Management Centerncsc-nl
- CVE-2026-11712
- unknownNCSC-2026-0270 [1.00] [M/M] Vulnerabilities fixed in GitLab by GitLab Inc.ncsc-nl
- CVE-2026-11771
- unknownIBM WebSphere Products Multiple Vulnerabilitieshkcert
- CVE-2026-11806
- unknownNode.js Multiple Vulnerabilitieshkcert
- CVE-2026-11856
- unknownXen Multiple Vulnerabilitieshkcert
- CVE-2026-11913
- unknownGitLab Multiple Vulnerabilitieshkcert
- CVE-2026-12064
- unknownCitrix XenServer Multiple Vulnerabilitieshkcert
- CVE-2026-12352
- unknownSecurity Update for Trend Micro Trend Vision One (July 2026)jvn
- CVE-2026-12413
- unknownDSA-6404-1 expat - security updatedebian
- CVE-2026-12535
- unknownexploitedVulnerability in Cisco Firewall Management Center (July 30, 2026)cert-fr-avis
- public exploitCVE-2026-12940
- unknownMultiple Vulnerabilities in VMware Products (July 30, 2026)cert-fr-avis
- CVE-2026-12943
- unknownMultiple Vulnerabilities in Node.js (July 30, 2026)cert-fr-avis
- CVE-2026-12946
- unknownMultiple Vulnerabilities in GitLab (July 30, 2026)cert-fr-avis
- CVE-2026-13019
- unknownUSN-8624-1: Sinatra vulnerabilityubuntu
- CVE-2026-13053
- unknownAdobe security advisory (AV26-756)cccs
- CVE-2026-13221
- unknownUSN-8623-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu
- public exploitCVE-2026-13233