July 2026
Published in July 2026
- unknownUSN-8615-1: Linux kernel vulnerabilitiesubuntu
- CVE-2026-15132
- unknownUSN-8547-2: Linux kernel (Azure FIPS) vulnerabilitiesubuntu
- CVE-2026-15265
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)jvn
- CVE-2026-15308
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access pointsjvn
- CVE-2026-15435
- high[UPDATE] [high] Fortinet FortiOS: Multiple Vulnerabilitiescert-bund
- public exploitCVE-2026-15583
- unknownMultiple vulnerabilities in ELECOM wireless LAN routers and access points (July 2026)jvn
- CVE-2026-15773
- unknownDSA-6402-1 hplip - security updatedebian
- CVE-2026-15899
- unknownDSA-6401-1 samba - security updatedebian
- CVE-2026-15900
- unknownMultiple vulnerabilities in Samba (July 28, 2026)cert-fr-avis
- CVE-2026-15901
- unknownErlang security advisory (AV26-750)cccs
- CVE-2026-16349
- unknownexploitedFortinet security advisory (AV26-109) – Update 1cccs
- CVE-2026-16350
- unknownRedis security advisory (AV26-748)cccs
- CVE-2026-16351
- unknownMicrosoft security advisory (AV26-747)cccs
- CVE-2026-16352
- unknownUSN-8613-1: FreeIPMI vulnerabilitiesubuntu
- CVE-2026-16353
- unknownUSN-8612-1: Roc Toolkit vulnerabilityubuntu
- CVE-2026-16355
- unknownUSN-8611-1: GNU C Library vulnerabilitiesubuntu
- CVE-2026-16356
- highexploitedCISA Adds Two Known Exploited Vulnerabilities to Catalogcisa
- CVE-2026-16357
- medium[NEW] [medium] Microsoft Edge: Multiple vulnerabilities allow information disclosure and spoofing attackscert-bund
- CVE-2026-16358
- medium[UPDATE] [medium] LibreOffice: Multiple vulnerabilities allow unspecified attackcert-bund
- CVE-2026-16359
- high[UPDATE] [high] GnuTLS: Multiple vulnerabilitiescert-bund
- CVE-2026-16360
- medium[UPDATE] [medium] X.Org X11 and Xwayland: Multiple vulnerabilitiescert-bund
- CVE-2026-16361
- unknownNCSC-2026-0265 [1.00] [M/H] Vulnerabilities fixed in SolarWinds Serv-Uncsc-nl
- CVE-2026-16363
- high[UPDATE] [high] Apache Tomcat and Tomcat Native: Multiple vulnerabilitiescert-bund
- CVE-2026-16364
- medium[UPDATE] [medium] Cpython: Multiple vulnerabilitiescert-bund
- CVE-2026-16367
- medium[UPDATE] [medium] Redis: Multiple vulnerabilities allow execution of arbitrary program codecert-bund
- CVE-2026-16368
- medium[UPDATE] [medium] Golang Go: Multiple vulnerabilities allow denial of servicecert-bund
- CVE-2026-16369
- medium[NEW] [UNPATCHED] [medium] Keycloak: Multiple vulnerabilities allow information disclosurecert-bund
- CVE-2026-16370
- high[NEW] [high] Google Chrome: Multiple vulnerabilitiescert-bund
- CVE-2026-16375
- high[NEW] [high] Microsoft Azure, Copilot, Exchange, Surface: Multiple vulnerabilitiescert-bund
- CVE-2026-16377
- unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
- CVE-2026-16380
- criticalexploitedCVE-2026-16812: Arista VeloCloud Orchestrator On-Prem OS Command Injection Vulnerabilitycisa-kev
- CVE-2026-16381
- criticalexploitedCVE-2025-68686: Fortinet FortiOS Exposure of Sensitive Information to an Unauthorized Actor Vulnerabilitycisa-kev
- CVE-2026-16382
- unknownMultiple vulnerabilities in Microsoft Edge (July 27, 2026)cert-fr-avis
- CVE-2026-16383
- unknownMultiple vulnerabilities in GLPI (July 27, 2026)cert-fr-avis
- CVE-2026-16387
- unknownProgress security advisory (AV26-746)cccs
- CVE-2026-16388
- unknownHPE security advisory (AV26-745)cccs
- CVE-2026-16389
- unknownMongoDB security advisory (AV26-744)cccs
- CVE-2026-16390
- unknownEricsson security advisory (AV26-743)cccs
- CVE-2026-16393
- unknown[Control Systems] Moxa security advisory (AV26-742)cccs
- CVE-2026-16394
- unknownGoogle Chrome security advisory (AV26-741)cccs
- CVE-2026-16395
- unknownMicrosoft Edge security advisory (AV26-740)cccs
- CVE-2026-16402
- unknownexploitedNCSC-2026-0264 [1.00] [M/H] Vulnerabilities fixed in Check Point Security Management productsncsc-nl
- CVE-2026-16406
- unknownNCSC-2026-0263 [1.00] [M/H] Vulnerability fixed in ManageEngine ADAudit Plus from ZohoCorpncsc-nl
- CVE-2026-16407
- medium[NEW] [medium] Progress Software MOVEit Transfer: Multiple vulnerabilitiescert-bund
- CVE-2026-16408
- medium[NEW] [medium] ffmpeg: Multiple vulnerabilities allow code execution and DoScert-bund
- CVE-2026-16410
- high[NEW] [high] CyberPanel: Multiple vulnerabilitiescert-bund
- CVE-2026-16412
- highUSN-8610-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu
- CVE-2026-16419
- highUSN-8575-3: Linux kernel vulnerabilitiesubuntu
- CVE-2026-16424
- high[NEW] [high] JetBrains WebStorm: Multiple vulnerabilities allow code executioncert-bund
- CVE-2026-16498
- highUSN-8609-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu
- public exploitCVE-2026-17543
- highUSN-8608-1: Linux kernel (Azure FIPS) vulnerabilitiesubuntu
- CVE-2026-17544
- high[NEW] [high] JetBrains IntelliJ IDEA: Multiple vulnerabilitiescert-bund
- CVE-2026-17651
- high[NEW] [high] JetBrains TeamCity: Multiple vulnerabilities allow code executioncert-bund
- CVE-2026-17652
- highUSN-8607-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu
- CVE-2026-17655
- highUSN-8606-1: Linux kernel (Azure) vulnerabilitiesubuntu
- CVE-2026-17656
- highUSN-8595-2: Linux kernel (AWS) vulnerabilitiesubuntu
- CVE-2026-17666
- unknownUSN-8605-1: Linux kernel (Azure CVM) vulnerabilitiesubuntu
- CVE-2026-17669
- unknownUSN-8604-1: Linux kernel (Azure) vulnerabilitiesubuntu
- CVE-2026-17670
- highUSN-8603-1: Linux kernel (Azure) vulnerabilitiesubuntu
- CVE-2026-17671
- medium[NEW] [medium] Znuny: Multiple vulnerabilities allow information disclosurecert-bund
- CVE-2026-17672
- low[UPDATE] [low] BusyBox: Multiple vulnerabilitiescert-bund
- CVE-2026-17673
- medium[UPDATE] [medium] Apache HTTP Server: Multiple vulnerabilities allow denial of servicecert-bund
- CVE-2026-17675
- high[UPDATE] [high] Apache HTTP Server: Multiple vulnerabilities allow HTTP response splittingcert-bund
- CVE-2026-17676
- critical[NEW] [critical] WordPress: Multiple vulnerabilities allow code executioncert-bund
- CVE-2026-17680
- medium[UPDATE] [medium] Apache ActiveMQ: Multiple vulnerabilitiescert-bund
- CVE-2026-17681
- unknownMultiple Vulnerabilities in Internet-Facing Systems Targeting Hong Kong’s Education Sectorhkcert
- CVE-2026-17682
- high[UPDATE] [high] Apache ActiveMQ, Client, Broker and Web: Multiple vulnerabilitiescert-bund
- CVE-2026-17684
- high[UPDATE] [high] Squid: Multiple vulnerabilities allow denial of servicecert-bund
- CVE-2026-17687
- high[UPDATE] [high] NGINX and NGINX Plus: Multiple vulnerabilitiescert-bund
- CVE-2026-17688
- low[UPDATE] [low] libexpat: Multiple vulnerabilities allow denial of servicecert-bund
- CVE-2026-17691
- medium[UPDATE] [medium] Squid: Multiple vulnerabilitiescert-bund
- CVE-2026-17692
- high[UPDATE] [high] Red Hat Build of Debezium for Red Hat Application Foundations: Multiple vulnerabilities allow …cert-bund
- CVE-2026-17695
- high[UPDATE] [high] Apache ActiveMQ/Artemis: Multiple vulnerabilitiescert-bund
- CVE-2026-17697
- high[UPDATE] [high] PostgreSQL: Multiple vulnerabilitiescert-bund
- CVE-2026-17701
- high[UPDATE] [high] WebKitGTK: Multiple vulnerabilitiescert-bund
- CVE-2026-17704
- high[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilitiescert-bund
- CVE-2026-17708
- medium[UPDATE] [medium] Red Hat Enterprise Linux (Quarkus): Multiple vulnerabilitiescert-bund
- CVE-2026-17709
- high[UPDATE] [high] Apache HTTP Server: Multiple Vulnerabilitiescert-bund
- CVE-2026-17710
- high[UPDATE] [high] VMware Cloud Foundation, vSphere, Aria Operations and Tools: Multiple vulnerabilitiescert-bund
- CVE-2026-17711
- unknownGoogle Chrome Multiple Vulnerabilitieshkcert
- CVE-2026-17713
- unknownMicrosoft Edge Multiple Vulnerabilitieshkcert
- CVE-2026-17717
- unknownDSA-6400-1 exim4 - security updatedebian
- CVE-2026-17718
- unknownMultiple vulnerabilities in ESET products (July 24, 2026)cert-fr-avis
- CVE-2026-17721
- unknownMultiple vulnerabilities in Debian Linux kernel (July 24, 2026)cert-fr-avis
- CVE-2026-17726
- unknownMultiple vulnerabilities in Debian LTS Linux kernel (July 24, 2026)cert-fr-avis
- CVE-2026-17727
- unknownMultiple vulnerabilities in SUSE Linux kernel (July 24, 2026)cert-fr-avis
- CVE-2026-17738
- unknownMultiple vulnerabilities in Ubuntu Linux kernel (July 24, 2026)cert-fr-avis
- CVE-2026-17749
- unknownMultiple vulnerabilities in Google Chrome (July 24, 2026)cert-fr-avis
- CVE-2026-17758
- unknownMultiple vulnerabilities in Microsoft Edge (July 24, 2026)cert-fr-avis
- CVE-2026-17768
- unknownCVE-2026-16796 - Improper neutralization of argument delimiters in AWS Bedrock AgentCore Python SDK install_pa…aws
- CVE-2026-17801
- unknownCVE-2026-16756 - Allocation of resources without limits in the default aws-smithy-http-server serve() path all…aws
- CVE-2026-17803
- unknownCVE-2026-16584 - AWS API MCP Server Security Policy Bypass via Startup Failureaws
- CVE-2026-17804
- unknownUSN-8601-1: PAM vulnerabilityubuntu
- CVE-2026-17832
- unknownUSN-8600-1: libXpm vulnerabilityubuntu
- CVE-2026-17834
- unknownJetBrains security advisory (AV26-739)cccs
- CVE-2026-17837
- unknownUSN-8599-1: HTTP-Date vulnerabilityubuntu
- CVE-2026-17847
- unknownUSN-8598-1: rsyslog vulnerabilitiesubuntu
- CVE-2026-17848
- criticalexploitedMicrosoft security advisory – July 2026 monthly rollup (AV26-698) – Update 3cccs
- CVE-2026-17855
- criticalexploitedCheck Point security advisory (AV26-735) – Update 1cccs
- CVE-2026-17856
- criticalRockwell Automation ThinManagercisa
- CVE-2026-17865