CERT / PSIRT advisories
0
Daily security briefing — 2026-07-04
CVEs published
70
Added to KEV
0
Notable items
12
On July 4, 2026, the security advisory landscape was relatively quiet, with a total of 70 new advisories and 70 distinct CVEs reported. There were no additions to the Known Exploited Vulnerabilities (KEV) list, and no critical advisories were highlighted. This suggests a day with limited high-impact security concerns for SOC and CSIRT teams to address.
Notable CVEs
Highest-severity CVEs published this day from the NVD and GitHub Advisory firehose — the sharpest items behind the day’s numbers.
- highCVE-2026-14535CVE-2026-14535: In Trail of Bits fickling versions up to and including 0.1.11, the UnsafeImportsML analysis paCVSS 8.8
- highCVE-2026-14534CVE-2026-14534: Trail of Bits fickling versions up to and including 0.1.10 do not include the Python standard CVSS 8.8
- highCVE-2025-71380CVE-2025-71380: The Execute Command node in n8n allows authenticated users to execute arbitrary commands on thCVSS 8.8
- highCVE-2026-54424CVE-2026-54424: An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a CVSS 8.4
- highCVE-2026-14637CVE-2026-14637: A security vulnerability has been detected in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up tCVSS 8.2
- highCVE-2025-71367CVE-2025-71367: picklescan before 0.0.34 fails to detect _operator.attrgetter function calls in pickle payloadCVSS 8.1
- highCVE-2025-71369CVE-2025-71369: picklescan before 0.0.28 fails to detect malicious pickle files that use torch.utils.data.dataCVSS 8.1
- highCVE-2025-71366CVE-2025-71366: picklescan before 0.0.28 fails to detect malicious torch.utils.bottleneck.__main__.run_cprofilCVSS 8.1
- highCVE-2025-71375CVE-2025-71375: picklescan before 0.0.34 fails to detect the _operator.methodcaller built-in function when scaCVSS 8.1
- highCVE-2025-71373CVE-2025-71373: picklescan before 0.0.33 fails to detect operator.methodcaller function calls in pickle files,CVSS 8.1
- highCVE-2025-71372CVE-2025-71372: Picklescan before 0.0.33 fails to detect the numpy.f2py.crackfortran.getlincoef gadget in pickCVSS 8.1
- highCVE-2025-71364CVE-2025-71364: picklescan before 0.0.30 fails to detect the asyncio.unix_events._UnixSubprocessTransport._staCVSS 8.1
Volume by source
Get this briefing by email. One free message every morning after 06:00 UTC — same data, zero noise, one-click unsubscribe. Subscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.