CVEs published in July 2026
1,434 tracked CVEs from 24 vendors had their first vendor advisory published in July 2026: 137 critical, 986 high, 13 in CISA KEV. Newest first.
1,901 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-13050High
Out-of-bounds Write vulnerability in WatchGuard Fireware OS networkd process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI
WatchGuard · 1 advisory - Added
CVE-2026-55957High
Apache Tomcat Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-31718Critical
Linux Kernel Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-23943High
NetApp · 1 advisory - Added
CVE-2026-23942High
NetApp · 1 advisory - Added
CVE-2026-23941High
NetApp · 1 advisory - Added
CVE-2025-61725High
NetApp · 1 advisory - Added
CVE-2025-61724High
NetApp · 1 advisory - Added
CVE-2025-61723High
NetApp · 1 advisory - Added
CVE-2025-58189High
NetApp · 1 advisory - Added
CVE-2025-58188High
NetApp · 1 advisory - Added
CVE-2025-58186High
NetApp · 1 advisory - Added
CVE-2025-58185High
NetApp · 1 advisory - Added
CVE-2025-58183High
NetApp · 1 advisory - Added
CVE-2026-13371Medium
WatchGuard Firebox Management Web UI Denial of Service via Unsafe Deserialization
WatchGuard · 1 advisory - Added
CVE-2026-54998High
Microsoft Exchange Online Elevation of Privilege Vulnerability
MS Server · 1 advisory - Added
CVE-2026-54891Medium
Unauthenticated data injection during TLS handshake
NetApp, Red Hat · 2 advisories - Added
CVE-2026-54886Medium
Erlang OTP ssh: Denial of Service via infinite loop in SFTP channel
NetApp, Red Hat · 2 advisories - Added
CVE-2026-55952High
Denial of Service in TLS 1.3 session ticket handling
NetApp, Red Hat · 2 advisories - Added
CVE-2026-53422Medium
Erlang OTP ssh: Information disclosure via SFTP REALPATH handler
NetApp, Red Hat · 2 advisories - Added
CVE-2026-55153High
Remote code execution via JNDI injection
Atlassian, Red Hat · 2 advisories - Added
CVE-2026-47262Medium
Docker Engine: containerd is an open-source container runtime
Docker, Red Hat · 2 advisories - Added
CVE-2026-54428High
org.apache.httpcomponents.core5/httpcore5: org.apache.httpcomponents.core5/httpcore5-h2: Apache HttpComponents Core: Denial of Service via oversized HTTP/2 HPACK header blocks
Apache, Atlassian, Red Hat · 3 advisories - Added
CVE-2026-54399High
org.apache.httpcomponents.core5/httpcore5: Apache HttpComponents Core: Denial of Service via excessive HTTP headers
Apache, Atlassian, Red Hat · 3 advisories - Added
CVE-2026-20244High
Denial of Service via crafted DMG file
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20243High
Denial of Service via crafted ALZ file
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20217High
Denial of Service via crafted PESpin file
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20216High
Denial of Service via crafted InstallShield file
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20215High
Denial of Service via crafted 7z file
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20214High
Denial of Service via crafted FSG file parsing
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20213High
Denial of Service via crafted Portable Executable (PE) files
Cisco, Red Hat · 3 advisories - Added
CVE-2026-20191High
Cisco Catalyst Center Arbitrary File Read Vulnerability
Cisco · 2 advisories - Added
CVE-2026-20230HighCISA KEV
Cisco Unified Communications Manager Server-Side Request Forgery (SSRF) Vulnerability
Cisco · 1 advisory - Added
CVE-2026-53488Critical
containerd is an open-source container runtime
Docker, Red Hat · 2 advisories