CVEs published in July 2026

CVE-2026-57022Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS on MX with SPC3 and SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)

CVE-2026-57021Medium

Out-of-bounds Write vulnerability in the http-gatekeeper (http-gk) of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service (DoS)

CVE-2026-57020Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on QFX10000 Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS)

CVE-2026-57019Medium

Improper Validation of Specified Quantity in Input vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS)

CVE-2026-33803Medium

Improper Restriction of Communication Channel to Intended Endpoints vulnerability in Juniper Networks Junos OS Evolved allows an unauthenticated, network-based attacker to cause a limited information disclosure and availability impact to the device

CVE-2026-33802Medium

Missing Authorization vulnerability in the CLI of Juniper Networks Junos OS on EX Series allows a local, authenticated attacker to cause a Denial-of-Service (DoS)

CVE-2026-33801Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the routing protocol daemon (RPD) of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent, unauthenticated attacker sending a specific BGP update over an established BGP session to cause a Denial-of-Service (DoS)

CVE-2026-33800Medium

Unchecked Input for Loop Condition vulnerability in the Packet Forwarding Engine (pfe) of Juniper Networks Junos OS on MX Series allows an unauthenticated, adjacent attacker to cause a Denial-of-Service (DoS).Micro-BFD session flaps generate respective up/down events which are queued by PFEMAN for processing

CVE-2026-33799Medium

Out-of-bounds Write vulnerability in the SNMP daemon (snmpd) of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated network-based attacker sending specific valid SNMPv3 queries to trigger a memory leak

CVE-2026-33794Medium

Improper Check for Unusual or Exceptional Conditions vulnerability in the advanced forwarding toolkit (evo-aftmand) of Juniper Networks Junos OS Evolved on PTX Series allows an unauthenticated network-based attacker generating continuous routing updates, resulting in unilist ECMP routes, to crash the evo-aftmand process on the PFE, leading to a Denial-of-Service (DoS)

CVE-2026-21901Medium

NULL Pointer Dereference vulnerability in the management daemon (mgd) of Juniper Networks Junos OS and Junos OS Evolved allows a local, high-privileged attacker setting or deactivating a specific SSH configuration parameter to create a Denial of Service (DoS)

CVE-2026-15308High

CPython Vulnerability in NetApp Products

CVE-2026-59269Low

user authenticating to Kubernetes clusters via the Pinniped Supervisor

CVE-2026-57111High

Apache Helix: Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest…

CVE-2026-47840High

network attacker positioned between UAA and its LDAP directory

CVE-2026-47831High

BOSH: Use of a cryptographically weak random number generator in the GenerateRandomPassword function in bosh-windows-stemce…

CVE-2026-47830High

BOSH: Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privile…

CVE-2026-47829High

BOSH: Argument Injection in bosh-cli allows a compromised BOSH Director to inject arbitrary OpenSSH options into the locall…

CVE-2026-47828High

BOSH: During bosh create-env and bosh delete-env, the CLI uploads compiled CPI packages and rendered job templates to the n…

CVE-2026-47826Critical

BOSH: The blobs.yml path key traversal vulnerability in the BOSH CLI tool allows an attacker to write arbitrary files and e…

CVE-2026-41857High

BOSH: compromised or malicious BOSH Director can execute arbitrary shell commands on the operator's workstation when the…

CVE-2026-59901High

Infinite loop in netty-codec-compression (bzip2)

CVE-2026-15131Critical

Insufficient data validation in Navigation

CVE-2026-15130High

Insufficient policy enforcement in Navigation

CVE-2026-15128High

Inappropriate implementation in Forms

CVE-2026-15127High

Inappropriate implementation in WebGL

CVE-2026-15125High

Inappropriate implementation in Forms

CVE-2026-15124High

Insufficient policy enforcement in Passwords

CVE-2026-15123High

Insufficient data validation in DOM

CVE-2026-15122High

Insufficient validation of untrusted input in Codecs

CVE-2026-15121Critical

Use after free in WebRTC

CVE-2026-15120Critical

Use after free in Core

CVE-2026-15119High

Inappropriate implementation in GetUserMedia

CVE-2026-15118High

Use after free in Input

CVE-2026-15117High

Use after free in Payments

CVE-2026-15116High

Use after free in Actor

CVE-2026-15115High

Insufficient validation of untrusted input in WebAppInstalls

CVE-2026-15114High

Out of bounds read and write in Codecs

CVE-2026-15113Critical

Use after free in Autofill

CVE-2026-15111High

Use after free in Views

CVE-2026-15110High

Use after free in Extensions

CVE-2026-15109High

Uninitialized Use in ANGLE

CVE-2026-15108High

Integer overflow in Extensions API

CVE-2026-15133High

Use after free in InterestGroups

CVE-2026-15132Critical

Uninitialized Use in V8

CVE-2026-15129High

Use after free in Views

CVE-2026-15112Critical

Use after free in Ozone

CVE-2026-8472Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with minimal access permissions to read work item metadata from private projects due to missing authorization checks

CVE-2026-6896High

GitLab has remediated an issue in GitLab EE affecting all versions from 13.11 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to execute arbitrary scripts in another user's browser session due to improper sanitization of user-supplied input

CVE-2026-13151Low

GitLab has remediated an issue in GitLab EE affecting all versions from 16.10 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to modify group-level settings beyond their intended permissions due to improper authorization controls

CVE-2025-12506Low

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 16.5 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to create a repository where the content displayed in the web interface differed from the content available for download, due to improper handling of Git reference name resolution

CVE-2026-6352Low

GitLab has remediated an issue in GitLab EE affecting all versions from 18.2 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user with auditor-level access to modify compliance violation records due to improper authorization on certain GraphQL operations

CVE-2026-7492Medium

Information disclosure of private project existence via improper authorization

CVE-2026-11827Medium

Information disclosure via improper authorization controls

CVE-2026-13320High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.7 before 18.11.7, 19.0 before 19.0.4, and 19.1 before 19.1.2 that under certain conditions could have allowed an authenticated user to execute arbitrary scripts in another user's browser session due to improper sanitization of user-supplied input

CVE-2026-59936Critical

Denial of Service via crafted PDF inline image

CVE-2026-59935Critical

Denial of Service via crafted PDF with unterminated inline image

CVE-2026-59937Critical

Denial of Service via crafted PDF with malformed cross-reference streams

CVE-2026-59938Critical

Possible large memory usage for wrong image dimensions

CVE-2026-20187High

CVE-2026-20158High

CVE-2026-20157High

CVE-2026-20156High

CVE-2026-20153High

CVE-2026-20150High

CVE-2026-20146High

Cisco Identity Services Engine Path Traversal Vulnerability

CVE-2026-12033High

CVE-2026-12032High

CVE-2026-12026High

CVE-2026-12025High

CVE-2026-12024High

CVE-2026-12023High

CVE-2026-12015High

CVE-2026-12013High

CVE-2026-12010High

CVE-2026-11701High

CVE-2026-11700High

CVE-2026-11309High

CVE-2026-11308High

CVE-2026-11307High

CVE-2026-11306High

CVE-2026-11305High

CVE-2026-11304High

CVE-2026-11303High

CVE-2026-11302High

CVE-2026-11301High

CVE-2026-11300High

CVE-2026-11299High

CVE-2026-11298High

CVE-2026-11297High

CVE-2026-11296High

CVE-2026-11295High

CVE-2026-11294High

CVE-2026-11293High

CVE-2026-11292High

CVE-2026-11291High

CVE-2026-11290High

CVE-2026-11289High

CVE-2026-11288High

CVE-2026-11287High