July 2026
Published in July 2026
- criticalPanduit IntraVUEcisa
- CVE-2026-17924
- criticalJohnson Controls C-CURE 9000 and Victor application servercisa
- CVE-2026-17940
- criticalMZ Automation lib60870cisa
- CVE-2026-17947
- criticalMZ Automation libIEC61850cisa
- CVE-2026-17987
- criticalJohnson Controls XAAP Androidcisa
- CVE-2026-17990
- criticalWeintek cMT3092Xcisa
- CVE-2026-17991
- highexploitedRussian State-Supported Cyber Actors Conduct Phishing Campaign Targeting Users of Zimbra Collaboration Suitecisa
- CVE-2026-18002
- high[NEW] [high] pg_partman: Multiple vulnerabilitiescert-bund
- CVE-2026-18015
- medium[NEW] [medium] PowerDNS: Multiple Vulnerabilities Allow Bypassing of Security Measurescert-bund
- CVE-2026-20706
- high[NEW] [high] n8n: Multiple vulnerabilitiescert-bund
- CVE-2026-20744
- medium[UPDATE] [medium] Linux Kernel: Multiple vulnerabilitiescert-bund
- public exploitCVE-2026-20896
- unknownUSN-8322-2: Apache Commons BeanUtils regressionubuntu
- public exploitCVE-2026-21045
- medium[NEW] [medium] RabbitMQ: Multiple vulnerabilitiescert-bund
- public exploitCVE-2026-21048
- high[NEW] [high] MongoDB: Multiple vulnerabilitiescert-bund
- CVE-2026-21049
- high[NEW] [high] Budibase: Multiple vulnerabilitiescert-bund
- CVE-2026-21901
- high[UPDATE] [high] Red Hat Advanced Cluster Management and Multicluster engine for Kubernetes: Vulnerability allo…cert-bund
- CVE-2026-22547
- medium[UPDATE] [medium] IBM WebSphere Application Server Liberty: Multiple vulnerabilitiescert-bund
- CVE-2026-22752
- high[UPDATE] [high] IBM QRadar SIEM: Multiple vulnerabilitiescert-bund
- public exploitCVE-2026-22874
- high[UPDATE] [high] GStreamer: Multiple vulnerabilitiescert-bund
- CVE-2026-24304
- low[UPDATE] [low] Intel Ethernet Products: Multiple Vulnerabilitiescert-bund
- CVE-2026-25718
- medium[UPDATE] [medium] MIT Kerberos: Multiple vulnerabilities allow denial of servicecert-bund
- CVE-2026-26232
- medium[UPDATE] [medium] Red Hat Enterprise Linux (giflib): Vulnerability allows code execution or DoScert-bund
- CVE-2026-26247
- high[NEW] [high] Microsoft DeveloperTools: Multiple vulnerabilitiescert-bund
- CVE-2026-26292
- high[UPDATE] [high] Microsoft Windows: Multiple vulnerabilitiescert-bund
- CVE-2026-27690
- high[UPDATE] [high] IBM HTTP Server: Multiple Vulnerabilitiescert-bund
- public exploitCVE-2026-27771
- high[UPDATE] [high] Splunk Splunk Enterprise: Multiple vulnerabilitiescert-bund
- CVE-2026-27780
- medium[NEW] [medium] Drupal Modules: Multiple Vulnerabilitiescert-bund
- CVE-2026-27980
- highUSN-8597-1: Linux kernel (IBM) vulnerabilitiesubuntu
- CVE-2026-28302
- highUSN-8576-2: Linux kernel (NVIDIA Tegra) vulnerabilitiesubuntu
- CVE-2026-28304
- highUSN-8575-2: Linux kernel vulnerabilitiesubuntu
- CVE-2026-28305
- highUSN-8596-1: Linux kernel (NVIDIA) vulnerabilitiesubuntu
- CVE-2026-28306
- highUSN-8595-1: Linux kernel (Oracle) vulnerabilitiesubuntu
- CVE-2026-28307
- highUSN-8574-2: Linux kernel vulnerabilitiesubuntu
- CVE-2026-28308
- unknownUSN-8594-1: Linux kernel (OEM) vulnerabilitiesubuntu
- CVE-2026-28309
- highUSN-8593-1: Linux kernel vulnerabilitiesubuntu
- CVE-2026-28310
- critical[NEW] [critical] Microsoft Office products: Multiple vulnerabilitiescert-bund
- CVE-2026-28312
- criticalexploited2026-009: Critical Vulnerabilities in Microsoft SharePointcert-eu
- CVE-2026-28313
- high[NEW] [high] Drupal Modules: Multiple vulnerabilitiescert-bund
- CVE-2026-28314
- unknownIBM WebSphere Products Multiple Vulnerabilitieshkcert
- CVE-2026-28316
- unknownDSA-6398-1 webkit2gtk - security updatedebian
- CVE-2026-28317
- unknownMultiple vulnerabilities in Oracle Virtualization (July 23, 2026)cert-fr-avis
- CVE-2026-28321
- unknownMultiple vulnerabilities in Oracle Systems (July 23, 2026)cert-fr-avis
- CVE-2026-28323
- unknownMultiple vulnerabilities in Oracle Java SE (July 23, 2026)cert-fr-avis
- public exploitCVE-2026-28699
- unknownexploitedMultiple vulnerabilities in Check Point products (July 23, 2026)cert-fr-avis
- CVE-2026-28911
- unknownDSA-6397-1 pdns-recursor - security updatedebian
- CVE-2026-28928
- unknownUSN-8591-1: AIOHTTP vulnerabilitiesubuntu
- CVE-2026-28982
- criticalDrupal security advisory (AV26-738)cccs
- CVE-2026-29007
- unknownExim security advisory (AV26-737)cccs
- CVE-2026-29009
- unknownProgress security advisory (AV26-736)cccs
- CVE-2026-29167
- criticalMitel security advisory (AV26-734)cccs
- CVE-2026-2950
- unknownn8n security advisory (AV26-733)cccs
- public exploitCVE-2026-30623
- unknownISC BIND security advisory (AV26-732)cccs
- CVE-2026-31555
- unknownUSN-8590-1: Exim vulnerabilitiesubuntu
- CVE-2026-33264
- unknownUSN-8589-1: Apache HTTP Server vulnerabilitiesubuntu
- CVE-2026-33267
- unknownUSN-8588-1: Gawk vulnerabilitiesubuntu
- CVE-2026-33799
- criticalAtlassian security advisory (AV26-731)cccs
- CVE-2026-33801
- unknownNCSC-2026-0262 [1.00] [M/H] Vulnerabilities fixed in Oracle MySQL Server and MySQL Clusterncsc-nl
- CVE-2026-34037
- unknownNCSC-2026-0261 [1.00] [M/H] Vulnerabilities fixed in Oracle Java SEncsc-nl
- public exploitCVE-2026-34038
- unknownNCSC-2026-0260 [1.00] [M/H] Vulnerabilities fixed in Oracle PeopleSoft Enterprisencsc-nl
- CVE-2026-34047
- unknownNCSC-2026-0259 [1.00] [M/H] Vulnerabilities fixed in Oracle Analyticsncsc-nl
- public exploitCVE-2026-34048
- unknownNCSC-2026-0258 [1.00] [M/H] Vulnerabilities fixed in Oracle Financial Servicesncsc-nl
- CVE-2026-34183
- unknownNCSC-2026-0257 [1.00] [M/H] Vulnerabilities fixed in Oracle Enterprise Managerncsc-nl
- CVE-2026-34599
- unknownGoogle Chrome security advisory (AV26-730)cccs
- CVE-2026-38968
- unknownUSN-8477-3: tar regressionubuntu
- CVE-2026-39829
- criticalOracle security advisory – July 2026 quarterly rollup (AV26-729)cccs
- CVE-2026-39868
- unknownNCSC-2026-0256 [1.00] [M/H] Vulnerabilities fixed in Oracle Communicationsncsc-nl
- CVE-2026-39873
- unknownNCSC-2026-0255 [1.00] [M/H] Vulnerabilities fixed in Oracle Commerce Platformncsc-nl
- public exploitCVE-2026-39875
- unknownNCSC-2026-0254 [1.00] [M/H] Vulnerabilities fixed in Oracle database productsncsc-nl
- public exploitCVE-2026-40047
- unknownUSN-8587-1: HTML-Parser vulnerabilityubuntu
- CVE-2026-40139
- unknownNCSC-2026-0253 [1.00] [M/H] Vulnerabilities fixed in Oracle E-Business Suite componentsncsc-nl
- CVE-2026-40141
- unknownUSN-8586-1: libgphoto2 vulnerabilitiesubuntu
- CVE-2026-40468
- unknownUSN-8585-1: Kerberos vulnerabilitiesubuntu
- CVE-2026-40469
- unknownUSN-8584-1: GStreamer Good Plugins vulnerabilitiesubuntu
- public exploitCVE-2026-40859
- unknownUSN-8583-1: GIFLIB vulnerabilitiesubuntu
- CVE-2026-41106
- unknownNCSC-2026-0252 [1.00] [H/H] Vulnerabilities fixed in Oracle Fusion middlewarencsc-nl
- CVE-2026-41920
- criticalSolarWinds security advisory (AV26-728)cccs
- CVE-2026-42055
- highexploitedCISA Adds Two Known Exploited Vulnerabilities to Catalogcisa
- CVE-2026-42200
- high[NEW] [high] Aruba AOS-CX: Multiple Vulnerabilitiescert-bund
- public exploitCVE-2026-42533
- high[NEW] [high] snapd: Multiple Vulnerabilitiescert-bund
- CVE-2026-42933
- low[NEW] [low] Tanium Server and Connect: Multiple Vulnerabilitiescert-bund
- CVE-2026-42985
- high[UPDATE] [high] Mozilla Thunderbird, Firefox ESR and Firefox: Multiple vulnerabilitiescert-bund
- CVE-2026-42990
- high[UPDATE] [high] Apache Tomcat: Multiple vulnerabilitiescert-bund
- CVE-2026-43682
- high[NEW] [high] SolarWinds Serv-U: Multiple vulnerabilitiescert-bund
- CVE-2026-43694
- medium[NEW] [medium] Kibana: Multiple vulnerabilitiescert-bund
- public exploitCVE-2026-43700
- medium[NEW] [medium] Aruba EdgeConnect: Multiple vulnerabilitiescert-bund
- CVE-2026-43710
- high[UPDATE] [high] Mozilla Firefox, Firefox ESR and Thunderbird: Multiple vulnerabilitiescert-bund
- CVE-2026-43716
- medium[NEW] [medium] Elasticsearch: Multiple vulnerabilities allow DoS and information disclosurecert-bund
- public exploitCVE-2026-43724
- medium[NEW] [medium] Oracle Virtualization: Multiple vulnerabilitiescert-bund
- CVE-2026-43730
- high[NEW] [high] Oracle Utilities Applications: Multiple vulnerabilitiescert-bund
- public exploitCVE-2026-43735
- medium[NEW] [medium] Oracle Solaris: Multiple vulnerabilitiescert-bund
- CVE-2026-43748
- high[NEW] [high] Oracle Financial Services Applications: Multiple vulnerabilitiescert-bund
- CVE-2026-43750
- high[NEW] [high] Oracle JD Edwards: Multiple vulnerabilitiescert-bund
- CVE-2026-43769
- medium[UPDATE] [medium] Proxmox Virtual Environment: Multiple vulnerabilitiescert-bund
- CVE-2026-43778
- high[NEW] [high] Oracle Retail Applications: Multiple vulnerabilitiescert-bund
- CVE-2026-43779
- high[NEW] [high] Oracle Construction and Engineering: Multiple vulnerabilitiescert-bund
- CVE-2026-43799
- high[NEW] [high] Oracle TimesTen In-Memory Database: Multiple vulnerabilitiescert-bund
- CVE-2026-43803
- high[NEW] [high] Oracle SQL Developer: Multiple vulnerabilitiescert-bund
- CVE-2026-43805
- low[UPDATE] [low] OpenSC: Multiple vulnerabilities allow unspecified attackcert-bund
- CVE-2026-43810
- high[UPDATE] [high] IBM WebSphere Application Server: Multiple vulnerabilitiescert-bund
- CVE-2026-43812
- high[UPDATE] [high] Roundcube Webmail: Multiple vulnerabilitiescert-bund
- public exploitCVE-2026-43813