CVEs published in July 2026
1,434 tracked CVEs from 24 vendors had their first vendor advisory published in July 2026: 137 critical, 986 high, 13 in CISA KEV. Newest first.
1,901 more from this month are covered only by Red Hat's per-package records, listed on the Red Hat vendor page.
- Added
CVE-2026-15995Medium
IBM Cognos Analytics Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-14266High
7-Zip Vulnerability in NetApp Products
NetApp · 1 advisory - Added
CVE-2026-16805High
Use after free in Blink
Palo Alto, Red Hat · 3 advisories - Added
CVE-2026-16804High
Sandbox escape via crafted HTML page
Palo Alto, Red Hat · 3 advisories - Added
CVE-2026-16807High
Sandbox escape via crafted HTML page
Palo Alto, Red Hat · 3 advisories - Added
CVE-2026-16806High
Arbitrary code execution via use after free vulnerability in WebMCP
Palo Alto, Red Hat · 3 advisories - Added
CVE-2026-14257Critical
DoS (Denial of Service) brace-expansion Dependency in Jira Software Data Center
Atlassian, Red Hat, Splunk · 4 advisories - Added
CVE-2026-62145High
vulnerability in Check Point Gaia Portal allows an authenticated attacker with read-only Gaia Portal privileges to execute commands with root privileges
Check Point · 1 advisory - Added
CVE-2026-62144Critical
authentication bypass vulnerability in Check Point Security Management and Multi-Domain Security Management allows an unauthenticated remote attacker to execute administrative commands on the Management Server
Check Point · 1 advisory - Added
CVE-2026-16232CriticalCISA KEV
Check Point SmartConsole Improper Authentication Vulnerability
Check Point · 1 advisory - Added
CVE-2026-56844High
Backup and Replication: vulnerability in the Veeam Updater component of the Veeam Software Appliance that could
Veeam · 1 advisory - Added
CVE-2026-22049High
WebAuthn MFA Bypass Vulnerability in ONTAP 9
NetApp · 1 advisory - Added
CVE-2026-13321High
DNSSEC Validation Bypass via Out-of-Zone NSEC Next Field
NetApp, Red Hat · 2 advisories - Added
CVE-2026-13204High
Unexpected exit with NSEC and NSEC3 both present
NetApp, Red Hat · 2 advisories - Added
CVE-2026-12617High
Record ordering based unexpected exit with CNAME or DNAME
NetApp, Red Hat · 2 advisories - Added
CVE-2026-11721High
Cache poisoning via label count discrepancy, RRSIG, wildcards
NetApp, Red Hat · 2 advisories - Added
CVE-2026-11622High
Potential memory usage beyond configured limits
NetApp, Red Hat · 2 advisories - Added
CVE-2026-11605High
Unnecessary validation of DNSSEC signed records
NetApp, Red Hat · 2 advisories - Added
CVE-2026-11331High
Potential wildcard CNAME RPZ policy bypass
NetApp, Red Hat · 2 advisories - Added
CVE-2026-10822Medium
Key Record using PRIVATEDNS algorithm may lead to exit
NetApp, Red Hat · 2 advisories - Added
CVE-2026-10723Medium
Incorrect acceptance of NSEC3 records
NetApp, Red Hat · 2 advisories - Added
CVE-2026-56819High
DoS (Denial of Service) io.netty:netty-codec-http2 Dependency in Confluence Data Center
Atlassian, NetApp, Red Hat · 3 advisories - Added
CVE-2026-56746High
Security control bypass allows unauthorized requests via null origin header
NetApp, Red Hat · 2 advisories - Added
CVE-2026-56745High
DoS (Denial of Service) io.netty:netty-codec-http Dependency in Bitbucket Data Center
Atlassian, NetApp, Red Hat · 3 advisories - Added
CVE-2026-44879High
Authenticated Command Injection allows arbitrary command execution in CLI Interface
Aruba · 1 advisory - Added
CVE-2026-44878High
Authenticated Path Traversal allows Unauthorized Access in Web Interface
Aruba · 1 advisory - Added
CVE-2026-60147High
Improve certification checking (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47063High
Enhance Jar handling (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47059High
Enhance AWT ImagingLib (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47058High
Enhance Dataview Implementation (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47057High
Improve Nashorn index handling (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47027High
Enhance Jar file processing (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47021High
Enhance XBM image support (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47010High
Enhance JPEG handling (Oracle CPU 2026-07)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-46917Medium
Improve DTLS handshaking (Oracle CPU 2026-07)
NetApp, Red Hat · 3 advisories - Added
CVE-2026-63454High
AOS-CX: authenticated path traversal vulnerability exists in AOS-CX
Aruba · 1 advisory - Added
CVE-2026-63453High
AOS-CX: Buffer overflow vulnerabilities exist in the command line interface of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-44880High
AOS-CX: buffer overflow vulnerability was found in the command line interface of AOS-CX
Aruba · 1 advisory - Added
CVE-2026-21575High
Atlassian: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows
Atlassian · 1 advisory - Added
CVE-2026-21577High
This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center
Atlassian · 1 advisory - Added
CVE-2026-21579High
This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center
Atlassian · 1 advisory - Added
CVE-2026-15793High
BuildKit custom frontends or clients using the raw low-level API can set git.checkoutbundle=true when checking out Git sources
Docker · 1 advisory - Added
CVE-2026-15792Medium
malicious BuildKit client or frontend could craft a request that could lead to BuildKit daemon crashing with a panic
Docker · 1 advisory - Added
crafted message in the BuildKit low-level build API can be used to remove the contents of the /tmp directory
Docker · 1 advisory - Added
CVE-2026-15789Medium
custom client can produce such an upload request to the BuildKit daemon that files can escape from the BuildKit-controlled state directory
Docker · 1 advisory - Added
CVE-2026-59850Medium
use-after-free via data callbacks on closed channels
NetApp, Red Hat · 2 advisories - Added
denial of service via automatic certificate authentication loop
NetApp, Red Hat · 2 advisories - Added
CVE-2026-59848Medium
denial of service via SFTP responses with unknown request IDs
NetApp, Red Hat · 2 advisories - Added
CVE-2026-59847Medium
integrity downgrade via OpenSSL AES-GCM tag verification
NetApp, Red Hat · 2 advisories - Added
information disclosure via ProxyCommand %r username expansion
NetApp, Red Hat · 2 advisories - Added
CVE-2026-46968High
Enhance TLS certificate handling (Oracle CPU 2026-07)
NetApp, Red Hat · 3 advisories - Added
CVE-2026-59844Medium
denial of service via oversized SFTP read length
NetApp, Red Hat · 2 advisories - Added
CVE-2026-59845Medium
denial of service via unchecked ProxyCommand fork failure
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60080High
Use After Free vulnerability in the Rust deserialization logic of Apache Fory
Apache · 1 advisory - Added
CVE-2026-64606Critical
Apache Fory: Deserialization of untrusted data vulnerability that may
Apache · 1 advisory - Added
CVE-2026-64609Critical
Out-of-bounds read via sun.misc.Unsafe in Apache Fory
Apache · 1 advisory - Added
CVE-2026-64608Critical
Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation
Apache · 1 advisory - Added
CVE-2026-15370Medium
stack buffer overflow in SFTP server longname construction
NetApp, Red Hat · 2 advisories - Added
CVE-2026-6952High
post-authentication command injection vulnerability in the "LogServer" field of the syslog component in Zyxel AX7501-B1 firmware versions through 5.17(ABPC.7.2)C0 could allow an authenticated attacker with administrator privileges to execute OS commands on an affected device
Zyxel · 1 advisory - Added
CVE-2026-61144Medium
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61128Medium
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61109High
JSON unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61108Medium
GIS unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61096High
Pluggable Auth unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61094High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61093Medium
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-61081High
Performance Schema unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60747High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60718Medium
JSON unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60585High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60332High
Group Replication GCS unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60331High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60324Medium
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60316High
X Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60315High
X Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60311Medium
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60195Medium
JSON Duality unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60194Medium
JSON Duality unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60191High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60190High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60189High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60188High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60187High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60186High
Group Replication Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60185High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60184High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60183High
Clone Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60182High
Clone Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60181Medium
Configurator unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60178High
Clone Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60177High
Clone Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60174Medium
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60163High
Group Replication Plugin unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-60145High
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47064High
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47052High
InnoDB unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47023High
Replication unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47012High
Optimizer unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-47008Medium
InnoDB unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories - Added
CVE-2026-46936High
DDL unspecified vulnerability (CPU Jul 2026)
NetApp, Red Hat · 2 advisories