Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 78 available sources using the dropdown above.
| ID | CVSS | Description | Vendor | Product | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2026-58281 |
8.3 (3.1)
|
Microsoft Edge (Chromium-based) Remote Code Execution … |
Microsoft |
Microsoft Edge (Chromium-based) |
2026-07-11T20:55:40.750Z | 2026-07-11T20:55:40.750Z |
| CVE-2026-13757 |
6.2 (3.1)
|
P11-kit: stack exhaustion via unbounded recursion in r… |
Red Hat |
Red Hat Hardened Images |
2026-06-29T18:44:24.583Z | 2026-07-11T17:03:41.780Z |
| CVE-2026-10660 |
6.4 (3.1)
|
Shared reassembly buffer in Bluetooth BAP Broadcast As… |
zephyrproject |
zephyr |
2026-07-11T17:00:13.644Z | 2026-07-11T17:00:13.644Z |
| CVE-2026-61870 |
2.1 (4.0)
2.9 (3.1)
|
ImageMagick before 7.1.2-26 Memory Leak via VIFF Encoder |
ImageMagick |
ImageMagick |
2026-07-11T13:01:09.995Z | 2026-07-11T13:01:09.995Z |
| CVE-2026-61861 |
6.3 (4.0)
3.7 (3.1)
|
ImageMagick before 7.1.2-26 Use-After-Free in FormatMa… |
ImageMagick |
ImageMagick |
2026-07-11T13:01:09.306Z | 2026-07-11T13:01:09.306Z |
| CVE-2026-61858 |
4.8 (4.0)
3.3 (3.1)
|
ImageMagick before 7.1.2-26 Policy Bypass via APNG encoder |
ImageMagick |
ImageMagick |
2026-07-11T13:01:08.621Z | 2026-07-11T13:01:08.621Z |
| CVE-2026-61857 |
6.3 (4.0)
3.7 (3.1)
|
ImageMagick before 7.1.2-26 Heap Use-After-Free via XMP |
ImageMagick |
ImageMagick |
2026-07-11T13:01:07.926Z | 2026-07-11T13:01:07.926Z |
| CVE-2026-61465 |
4.8 (4.0)
3.3 (3.1)
|
ImageMagick before 7.1.2-26 Memory Allocation Policy Bypass |
ImageMagick |
ImageMagick |
2026-07-11T13:01:07.209Z | 2026-07-11T13:01:07.209Z |
| CVE-2026-61454 |
8.7 (4.0)
5.3 (3.1)
|
Grav before 2.0.4 Information Disclosure via __GRAV_CONFIG__ |
getgrav |
grav |
2026-07-11T13:01:06.507Z | 2026-07-11T13:01:06.507Z |
| CVE-2026-61448 |
2.1 (4.0)
|
Parse Server 9.0.0 Stored XSS via malformed Content-Type |
parse-community |
parse-server |
2026-07-11T13:01:05.852Z | 2026-07-11T13:01:05.852Z |
| CVE-2026-61447 |
10 (4.0)
10 (3.1)
|
PraisonAI before 1.6.78 Remote Code Execution via CodeAgent |
MervinPraison |
PraisonAI |
2026-07-11T13:01:05.162Z | 2026-07-11T13:01:05.162Z |
| CVE-2026-61445 |
9.4 (4.0)
9.9 (3.1)
|
PraisonAI before 4.6.78 Arbitrary File Write and Comma… |
MervinPraison |
PraisonAI |
2026-07-11T13:01:04.470Z | 2026-07-11T13:01:04.470Z |
| CVE-2026-61442 |
7.1 (4.0)
7.1 (3.1)
|
PraisonAI Platform before 0.1.9 Authorization Bypass v… |
MervinPraison |
PraisonAI |
2026-07-11T13:01:03.789Z | 2026-07-11T13:01:03.789Z |
| CVE-2026-61439 |
8.7 (4.0)
7.5 (3.1)
|
PraisonAI before 4.6.78 Prompt Injection Defense Bypass |
MervinPraison |
PraisonAI |
2026-07-11T13:01:03.106Z | 2026-07-11T13:01:03.106Z |
| CVE-2026-61429 |
8.4 (4.0)
8.5 (3.1)
|
PraisonAI before 1.6.78 SSRF via Crawl4AI Chromium backend |
MervinPraison |
PraisonAI |
2026-07-11T13:01:02.429Z | 2026-07-11T13:01:02.429Z |
| CVE-2026-61428 |
6.9 (4.0)
7.3 (3.1)
|
PraisonAI AgentMail before 4.6.78 Message Injection vi… |
MervinPraison |
PraisonAI |
2026-07-11T13:01:01.759Z | 2026-07-11T13:01:01.759Z |
| CVE-2026-61426 |
8.8 (4.0)
8.6 (3.1)
|
PraisonAI before 1.7.3 Unauthenticated Agent Access vi… |
MervinPraison |
PraisonAI |
2026-07-11T13:01:01.057Z | 2026-07-11T13:01:01.057Z |
| CVE-2026-60090 |
9.3 (4.0)
9.8 (3.1)
|
PraisonAI before 4.6.78 SQL/CQL Injection via vector d… |
MervinPraison |
PraisonAI |
2026-07-11T13:01:00.392Z | 2026-07-11T13:01:00.392Z |
| CVE-2026-60088 |
6.8 (4.0)
5.5 (3.1)
|
PraisonAI before 4.6.78 Path Traversal via Custom Commands |
MervinPraison |
PraisonAI |
2026-07-11T13:00:59.744Z | 2026-07-11T13:00:59.744Z |
| CVE-2026-56763 |
6.3 (4.0)
4.8 (3.1)
|
Hono - Prototype Pollution via __proto__ Key in parseB… |
Hono |
Hono |
2026-07-11T13:00:59.084Z | 2026-07-11T13:00:59.084Z |
| CVE-2026-56372 |
4.8 (4.0)
3.3 (3.1)
|
ImageMagick - Heap Buffer Overflow Read via Unrecogniz… |
ImageMagick |
ImageMagick |
2026-07-11T13:00:58.423Z | 2026-07-11T13:00:58.423Z |
| CVE-2026-56303 |
8.7 (4.0)
7.5 (3.1)
|
Capgo - Unauthenticated API Key Metadata Disclosure vi… |
Capgo |
Capgo |
2026-07-11T13:00:57.777Z | 2026-07-11T13:00:57.777Z |
| CVE-2026-56296 |
6.9 (4.0)
5.3 (3.1)
|
Cap-go - App Existence Oracle via Unauthenticated tran… |
Cap-go |
capgo |
2026-07-11T13:00:57.100Z | 2026-07-11T13:00:57.100Z |
| CVE-2026-56240 |
5.3 (4.0)
4.3 (3.1)
|
Capgo - Billing Authorization Bypass via Exhausted Usa… |
Capgo |
Capgo |
2026-07-11T13:00:56.415Z | 2026-07-11T13:00:56.415Z |
| CVE-2026-57828 |
9 (4.0)
|
Joomla Extension - phoca.cz - Authenticated file uploa… |
phoca.cz |
phoca.cz Phoca Download extension for Joomla |
2026-07-11T09:27:16.840Z | 2026-07-11T09:27:16.840Z |
| CVE-2026-57827 |
10 (4.0)
|
Joomla Extension - rsjoomla.com - Unauthenticated file… |
rsjoomla.com |
rsjoomla.com RSFiles extension for Joomla |
2026-07-11T09:29:03.863Z | 2026-07-11T09:29:03.863Z |
| CVE-2026-1359 |
8.8 (3.1)
|
Genolve – AI image AI video generation <= 5.0.5 - Auth… |
genolve |
Genolve – Genolve AI Business Graphics, AI Images |
2026-07-11T07:47:54.892Z | 2026-07-11T07:47:54.892Z |
| CVE-2026-9282 |
7.5 (3.1)
|
W3 Total Cache <= 2.9.4 - Unauthenticated Arbitrary Fi… |
boldgrid |
W3 Total Cache |
2026-07-11T06:50:33.051Z | 2026-07-11T06:50:33.051Z |
| CVE-2026-9017 |
5.3 (3.1)
|
NEX-Forms <= 9.2.2 - Missing Authorization to Unauthen… |
webaways |
NEX-Forms – Ultimate Forms Plugin for WordPress |
2026-07-11T06:50:32.516Z | 2026-07-11T06:50:32.516Z |
| CVE-2026-6939 |
7.2 (3.1)
|
CorvusPay WooCommerce Payment Gateway <= 2.7.4 - Unaut… |
corvusinfo |
CorvusPay WooCommerce Payment Gateway |
2026-07-11T05:35:50.032Z | 2026-07-11T05:35:50.032Z |