| | CVE-2026-42822 |  Microsoft | critical | 10.0 | 0.1%
| | Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to el… | May 18, 2026 | May 21, 2026 |
| | CVE-2026-45492 | Microsoft | medium | 5.4 | 0.1%
| | Improper input validation in Microsoft Edge (Chromium-based) allows an unauthorized attacker to bypa… | May 18, 2026 | May 19, 2026 |
| | CVE-2026-45494 | Microsoft | medium | 5.4 | 0.0%
| | Microsoft Edge (Chromium-based) Spoofing Vulnerability | May 18, 2026 | May 19, 2026 |
| | CVE-2026-45495 | Microsoft | high | 8.8 | 0.2%
| | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability | May 18, 2026 | May 26, 2026 |
| | CVE-2026-25244 |  Red Hat | high | 8.0 | 0.1%
| | A flaw was found in WebdriverIO. A remote attacker can exploit a command injection vulnerability by … | May 18, 2026 | May 18, 2026 |
| | CVE-2025-51427 | Red Hat | high | 8.1 | 0.0%
| | A flaw was found in ModelScope. This vulnerability allows a remote attacker to execute arbitrary cod… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31072 | Red Hat | high | 8.8 | — | | A flaw was found in APScheduler, affecting its JSONSerializer and CBORSerializer components. This vu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-43492 | Red Hat | medium | 5.5 | 0.0%
| | A flaw was found in the Linux kernel. A local user could trigger an integer underflow in the mpi_rea… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-43491 | Red Hat | medium | 7.0 | 0.0%
| | A flaw was found in the Linux kernel. A malicious client can exploit this by sending a large number … | May 19, 2026 | May 19, 2026 |
| | CVE-2026-43493 | Red Hat | medium | 7.0 | 0.0%
| | A flaw was found in the Linux kernel's `pcrypt` component. This vulnerability involves how the syste… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-37982 | Red Hat | medium | 6.8 | 0.0%
| | A flaw was found in Keycloak. This authentication vulnerability allows a remote attacker to replay `… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-37979 | Red Hat | medium | 6.5 | 0.0%
| | A flaw was found in Keycloak. This access control vulnerability in Keycloak's OpenID Connect (OIDC) … | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8830 | Red Hat | medium | 4.3 | 0.0%
| | A flaw was found in Keycloak. An authenticated user can bypass configured WebAuthn policies during c… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8922 | Red Hat | medium | 5.4 | 0.0%
| | A flaw was found in Keycloak. When both realm-level and client-level `notBefore` revocation policies… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-2611 | Red Hat | critical | 9.6 | 0.0%
| | A flaw was found in MLflow. Improper origin validation in the MLflow Assistant's /ajax-api endpoints… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-35086 |  Apache | medium | — | 0.0%
| | Improper Control of Generation of Code ('Code Injection') vulnerability in email services of Apache … | May 19, 2026 | May 20, 2026 |
| | CVE-2026-29207 | Apache | medium | 6.5 | 0.0%
| | Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-29220 | Apache | medium | 6.5 | 0.0%
| | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-29226 | Apache | high | 7.3 | 0.0%
| | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz via Content component operations.
… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31378 | Apache | medium | 6.5 | 0.0%
| | Improper Input Validation vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31379 | Apache | medium | 6.1 | 0.0%
| | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limit… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31380 | Apache | medium | 6.5 | 0.0%
| | Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression La… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31387 | Apache | medium | 5.3 | 0.0%
| | Improper Authentication vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: before 24.0… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31388 | Apache | medium | 5.3 | 0.0%
| | Improper Access Control vulnerability in Apache OFBiz in multi-tenant deployments.
This issue affec… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31906 | Apache | medium | 6.1 | 0.0%
| | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31909 | Apache | high | 7.5 | 0.0%
| | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache OFBiz.
This issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31910 | Apache | high | 7.5 | 0.0%
| | Server-Side Request Forgery (SSRF) vulnerability in Apache OFBiz.
This issue affects Apache OFBiz: … | May 19, 2026 | May 19, 2026 |
| | CVE-2026-31986 | Apache | critical | 9.1 | 0.0%
| | Use of Hard-coded Cryptographic Key vulnerability in Apache OFBiz.
This issue affects Apache OFBiz:… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-41919 | Apache | critical | 9.1 | 0.0%
| | Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability i… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-45187 | Apache | medium | 6.5 | 0.0%
| | Improper Authorization vulnerability in Apache OFBiz Webtools.
This issue affects Apache OFBiz: bef… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-45434 | Apache | critical | 9.8 | 0.3%
| | Improper Authentication vulnerability in Apache OFBiz via Password-Change Logic Flaw Leading to Remo… | May 19, 2026 | May 20, 2026 |
| | CVE-2026-46586 | Apache | high | 8.8 | 0.1%
| | Improper Control of Generation of Code ('Code Injection'), Improper Neutralization of Directives in … | May 19, 2026 | May 20, 2026 |
| | CVE-2026-37981 | Red Hat | medium | 4.3 | 0.0%
| | A flaw was found in Keycloak. A broken access control vulnerability in the Account Resources user lo… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-7307 | Red Hat | high | 7.5 | 0.1%
| | A flaw was found in Keycloak. A remote, unauthenticated attacker can send a specially crafted XML in… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-37978 | Red Hat | medium | 4.9 | 0.0%
| | A flaw was found in Keycloak. A low-privilege administrator with the 'view-clients' role can exploit… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-7571 | Red Hat | medium | 7.1 | 0.0%
| | A flaw was found in Keycloak. A low-privilege user, with knowledge of user credentials and client ID… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-7507 | Red Hat | high | 7.5 | 0.0%
| | A session fixation vulnerability was found in Keycloak's login-actions endpoints. An unauthenticated… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-7504 | Red Hat | high | 8.1 | 0.0%
| | A flaw was found in Keycloak's URL validation logic during redirect operations. By crafting a malici… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8946 | Red Hat | high | 7.5 | 0.0%
| ✓ Fix | A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes th… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8947 | Red Hat | high | 7.5 | 0.1%
| ✓ Fix | A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes th… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8950 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8953 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8954 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8955 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes th… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8956 | Red Hat | medium | 6.1 | 0.1%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8957 | Red Hat | medium | 6.1 | 0.0%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8958 | Red Hat | medium | 6.1 | 0.1%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8959 | Red Hat | medium | 6.1 | 0.2%
| ✓ Fix | A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes th… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8961 | Red Hat | low | 3.4 | 0.0%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |
| | CVE-2026-8962 | Red Hat | low | 3.4 | 0.0%
| ✓ Fix | A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issu… | May 19, 2026 | May 19, 2026 |