| | CVE-2026-47865 |  VMware | critical | 9.8 | 0.7%
| | VMware Avi Load Balancer contains an authentication bypass vulnerability. A malicious user with netw… | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-47866 | VMware | high | 8.3 | 0.4%
| | VMware Avi Load Balancer contains an authorization bypass vulnerability. A malicious actor on the ne… | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-47867 | VMware | high | 8.7 | 0.7%
| | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious user with netwo… | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-47868 | VMware | high | 7.8 | 0.1%
| | VMware Avi Load Balancer contains a local privilege escalation vulnerability. A malicious user with … | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-47869 | VMware | high | 8.7 | 0.7%
| | VMware Avi Load Balancer contains a remote code execution vulnerability. A malicious authenticated u… | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-47870 | VMware | high | 7.1 | 0.4%
| | VMware Avi Load Balancer contains a privilege escalation vulnerability. A malicious authenticated us… | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-47871 | VMware | high | 8.8 | 0.9%
| | VMware Avi Load Balancer contains a directory traversal vulnerability. Flaws in file path validation… | Jul 18, 2026 | Jul 23, 2026 |
| | CVE-2026-59173 |  Apache | high | 7.5 | 0.5%
| | Uncontrolled Resource Consumption vulnerability in Apache Traffic Server.
This issue affects Apache… | Jul 18, 2026 | Aug 6, 2026 |
| | CVE-2026-16254 |  Red Hat | medium | 4.3 | — | | A flaw was found in claircore's apk package scanner. Malformed package-database data in a container … | Jul 20, 2026 | Jul 20, 2026 |
| | CVE-2026-64621 | Red Hat | high | 7.3 | — | | A flaw was found in FreeRDP, a free implementation of the Remote Desktop Protocol. A double-free vul… | Jul 20, 2026 | Jul 20, 2026 |
| | CVE-2026-12701 | Red Hat | high | 9.0 | — | ✓ Fix | A path traversal vulnerability was found in pulpcore. The relative_path_validator function only veri… | Jul 20, 2026 | Jul 20, 2026 |
| | CVE-2026-16277 | Red Hat | medium | 6.5 | — | | A stack-based buffer overflow was found in rpcbind's rpcinfo utility. When querying a remote rpcbind… | Jul 20, 2026 | Jul 20, 2026 |
| | CVE-2026-53405 | Apache | critical | 9.8 | 0.3%
| | Improper Isolation or Compartmentalization vulnerability in Apache Syncope.
An administrator with a… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-53421 | Apache | critical | 9.8 | 0.5%
| | Improper Isolation or Compartmentalization vulnerability in Apache Syncope.
An administrator with… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-57308 | Apache | critical | 9.8 | 0.4%
| | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-62183 | Apache | critical | 9.8 | 0.3%
| | Improper Privilege Management vulnerability in Apache Syncope.
When:
* the all-Java user workflow … | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-62418 | Apache | high | 8.1 | 0.2%
| | Low-privileged authenticated Server-Side Request Forgery (SSRF)
vulnerability in Apache Syncope via… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-63071 | Apache | critical | 9.8 | 0.4%
| | Improper Isolation or Compartmentalization vulnerability in Apache Syncope.
An administrator with a… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-56452 | Apache | high | 7.5 | 0.4%
| | Path traversal in the sshd-scp component of Apache MINA SSHD. Apache MINA SSHD is a Java library for… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-56623 | Apache | high | 7.1 | 0.3%
| | Path traversal on Windows in Apache MINA SSHD component sshd-git. Apache MINA SSHD is a Java library… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-56624 | Apache | high | 7.3 | 0.2%
| | Improper certificate validation in Apache MINA SSHD (server-side). Apache MINA SSHD is a Java librar… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-58624 | Apache | medium | 5.4 | 0.2%
| | Improper input validation in sshd-git in Apache MINA SSHD. Apache MINA SSHD is a Java library for cl… | Jul 20, 2026 | Jul 27, 2026 |
| | CVE-2026-16445 | Red Hat | high | 7.5 | — | ✓ Fix | A flaw was found in dracut. A remote attacker on the adjacent network can exploit this vulnerability… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-15370 | Red Hat | medium | 6.7 | — | | A flaw was found in libssh. During SFTP server directory listing, the longname field is constructed … | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-64608 | Apache | critical | 9.8 | 0.4%
| | Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation. When deseria… | Jul 21, 2026 | Aug 11, 2026 |
| | CVE-2026-64609 | Apache | critical | 9.1 | 0.3%
| | Out-of-bounds read via sun.misc.Unsafe in Apache Fory. When out-of-band zero-copy deserialization is… | Jul 21, 2026 | Jul 27, 2026 |
| | CVE-2026-59842 | Red Hat | low | 3.7 | — | | A flaw was found in libssh. During server-side GSSAPI key exchange, a client-supplied Curve25519 pub… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59843 | Red Hat | medium | 6.5 | — | | A flaw was found in libssh. A remote authenticated peer can advertise a zero maximum packet size in … | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-64606 | Apache | critical | 9.8 | 0.5%
| | Deserialization of untrusted data vulnerability that may allow class-registration checks to be bypas… | Jul 21, 2026 | Jul 27, 2026 |
| | CVE-2026-59844 | Red Hat | medium | 6.5 | — | | A flaw was found in libssh. A remote authenticated client can issue SSH_FXP_READ requests with an ar… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59845 | Red Hat | medium | 5.3 | — | | A flaw was found in libssh. When ProxyCommand is used, an unchecked fork() failure can be stored as … | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-60080 | Apache | high | 7.3 | 0.2%
| | Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Ap… | Jul 21, 2026 | Jul 27, 2026 |
| | CVE-2026-59846 | Red Hat | low | 3.9 | — | | A flaw was found in libssh. A malicious username expanded through %r in ProxyCommand handling can in… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59847 | Red Hat | medium | 5.9 | — | | A flaw was found in libssh. Incorrect AES-GCM finalization checks in builds using the OpenSSL backen… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59848 | Red Hat | medium | 5.3 | — | | A flaw was found in libssh. A malicious SFTP server can send responses for unknown request IDs that … | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59849 | Red Hat | low | 3.1 | — | | A flaw was found in libssh. Logic errors in automatic certificate-based public key authentication ca… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59850 | Red Hat | medium | 4.3 | — | | A flaw was found in libssh. If data packets are processed after a channel is closed, channel data ca… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-59851 | Red Hat | high | 8.8 | — | | A flaw was found in libssh. On servers with GSSAPIKeyExchange enabled, the gssapi-keyex path does no… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-16493 | Red Hat | high | 7.8 | — | | A flaw was found in ansible-core. The _extract_collection_from_git() function in ansible-core's conc… | Jul 21, 2026 | Jul 21, 2026 |
| | CVE-2026-44880 |  HPE | high | 8.8 | 0.5%
| | A buffer overflow vulnerability was found in the command line interface of AOS-CX. Successful exploi… | Jul 21, 2026 | Jul 24, 2026 |
| | CVE-2026-63453 | HPE | high | 7.2 | 0.4%
| | Buffer overflow vulnerabilities exist in the command line interface of AOS-CX. Successful exploitati… | Jul 21, 2026 | Jul 24, 2026 |
| | CVE-2026-63454 | HPE | high | 7.2 | 0.5%
| | An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vuln… | Jul 21, 2026 | Jul 24, 2026 |
| | CVE-2026-64877 |  Tenable | high | 8.4 | 0.2%
| | An authenticated non-admin user can exploit a SQL injection flaw in the ticketing REST API to access… | Jul 21, 2026 | Aug 18, 2026 |
| | CVE-2026-64878 | Tenable | critical | 9.9 | 0.5%
| | Unvalidated input in asset filter parameters allows shell metacharacters to escape command argument … | Jul 21, 2026 | Aug 18, 2026 |
| | CVE-2026-64879 | Tenable | critical | 9.9 | 2.6%
| | A filename supplied during file upload is not properly sanitized before being used in system command… | Jul 21, 2026 | Aug 18, 2026 |
| | CVE-2026-64880 | Tenable | high | 7.1 | 0.2%
| | Unsanitized user-supplied input in report filtering parameters is concatenated directly into SQL que… | Jul 21, 2026 | Aug 18, 2026 |
| | CVE-2026-64881 | Tenable | high | 8.8 | 1.4%
| | The audit file upload handler does not sanitize filenames, allowing shell metacharacters to flow int… | Jul 21, 2026 | Aug 18, 2026 |
| | CVE-2026-16544 | Red Hat | medium | 6.5 | — | | A flaw was found in AWX. The websocket event consumer performs RBAC authorization checks only for ev… | Jul 22, 2026 | Jul 22, 2026 |
| | CVE-2026-56844 |  Veeam | high | 8.4 | 0.1%
| | A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a lo… | Jul 22, 2026 | Jul 22, 2026 |
| | CVE-2026-62144 |  Check Point | medium | — | 1.0%
| | An authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security … | Jul 22, 2026 | Jul 24, 2026 |