Daily curated vulnerability bulletins from ARETIQ AI. Each bulletin highlights the day’s most critical vulnerabilities, ranked by real-world risk — not just CVSS scores.
Ranked by AAS (ARETIQ Adjusted Score) — a real-world risk score that considers exploit maturity, deployment scale, asset criticality, and remediation status.
Subscribe via JSON feed.
No EMERGENCY vulnerabilities this month.
4 vulnerabilities across 2 products scored HIGH or above on July 10, 2026. 🟠 HIGH: 4 🟠 [HIGH] langroid/langroid 3 CVEs | CVSS 3.1: 10.0 | AAS 11.2 cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:* Langroid, an open-source framework for building LLM-powered applications, is affected by 3 vulnerabilities including at least one rated CVSS 10.0 (Critical). The most severe issue is a sandbox escape leading to remote code execution in the TableChatAgent and VectorStore components, where LLM-generated tool messages evaluated with full_eval=True can bypass incomplete sandboxing in Python’s eval() function. Exploit techniques are publicly known. Teams using Langroid versions prior to 0.65.2 in any capacity should upgrade immediately and review the vendor advisory at the linked GitHub security page for full details on all three issues. ...
22 vulnerabilities across 15 products scored HIGH or above on July 09, 2026. 🟠 HIGH: 22 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-55952 (erlang/erlang_otp) — F1: theoretical → poc, AAS: 9.2 → 11.7 (HIGH → HIGH). Originally in 2026-07-02 bulletin. 🟠 [HIGH] ruvnet/ruflo 1 CVE | CVSS 3.1: 10.0 | AAS 11.8 cpe:2.3:a:ruvnet:ruflo:*:*:*:*:*:*:*:* (< 3.16.3) Ruflo, an agent meta-harness for Claude Code and Codex developed by ruvnet, is affected by one critical vulnerability (CVE-2026-59726, CVSS 10.0). The default docker-compose deployment exposes MCP bridge endpoints without authentication, allowing an unauthenticated attacker to execute arbitrary commands in the bridge container, steal provider API keys, and poison the AgentDB learning store. This vulnerability is considered exploitable. ...
17 vulnerabilities across 15 products scored HIGH or above on July 08, 2026. 🔴 CRITICAL: 2 🟠 HIGH: 15 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-55952 (erlang/erlang_otp) — F1: theoretical → poc, AAS: 9.2 → 11.7 (HIGH → HIGH). Originally in 2026-07-02 bulletin. [UPGRADED] CVE-2026-13603 (pretix/pretix-oppwa) — F1: exploitable → itw, AAS: 9.4 → 11.9 (HIGH → HIGH). Originally in 2026-07-01 bulletin. 🔴 [CRITICAL] corewcf/corewcf 1 CVE | CVSS 3.1: 10.0 | AAS 12.6 ...
30 vulnerabilities across 15 products scored HIGH or above on July 07, 2026. 🔴 CRITICAL: 3 🟠 HIGH: 27 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-55952 (erlang/erlang_otp) — F1: theoretical → poc, AAS: 9.2 → 11.7 (HIGH → HIGH). Originally in 2026-07-02 bulletin. [UPGRADED] CVE-2026-13603 (pretix/pretix-oppwa) — F1: exploitable → itw, AAS: 9.4 → 11.9 (HIGH → HIGH). Originally in 2026-07-01 bulletin. 🔴 [CRITICAL] better-auth/better-auth 2 CVEs | CVSS 3.1: 9.1 | AAS 12.7 ...
23 vulnerabilities across 14 products scored HIGH or above on July 06, 2026. 🔴 CRITICAL: 2 🟠 HIGH: 21 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-55952 (erlang/erlang_otp) — F1: theoretical → poc, AAS: 9.2 → 11.7 (HIGH → HIGH). Originally in 2026-07-02 bulletin. [UPGRADED] CVE-2026-13603 (pretix/pretix-oppwa) — F1: exploitable → itw, AAS: 9.4 → 11.9 (HIGH → HIGH). Originally in 2026-07-01 bulletin. 🔴 [CRITICAL] adobe/coldfusion 1 CVE | CVSS 3.1: 10.0 | AAS 13.3 ...
1 vulnerability across 1 product scored HIGH or above on July 04, 2026. 🟠 HIGH: 1 🟠 [HIGH] n8n/n8n 1 CVE | CVSS 4.0: 8.7 | AAS 10.1 cpe:2.3:a:n8n:n8n:*:*:*:*:*:*:*:* n8n, the workflow automation platform, is affected by one HIGH-severity vulnerability (CVE-2025-71380, CVSS 8.7) in its Execute Command node. An authenticated attacker or anyone with compromised credentials can leverage this node to run arbitrary commands on the underlying host, potentially leading to full system compromise, data exfiltration, or service disruption. Organizations running self-hosted n8n instances should review the vendor advisory at the linked GitHub Security Advisory, restrict access to the Execute Command node, audit workflow permissions, and apply patches or mitigations as soon as they become available. ...
2 vulnerabilities across 2 products scored HIGH or above on July 03, 2026. 🟠 HIGH: 2 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-52785 (opf/openproject) — F1: exploitable → functional, AAS: 11.1 → 13.1 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-45405 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 12.8 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54636 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 13.9 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-52884 (notepad-plus-plus/notepad) — F1: exploitable → functional, AAS: 9.1 → 11.1 (HIGH → HIGH). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54825 (wpdatatables/wpdatatables) — F1: exploitable → functional, AAS: 9.6 → 11.6 (HIGH → HIGH). Originally in 2026-06-26 bulletin. 🟠 [HIGH] red_hat/red_hat_enterprise_linux_10 1 CVE | CVSS 3.1: 9.8 | AAS 10.9 ...
19 vulnerabilities across 15 products scored HIGH or above on July 02, 2026. 🔴 CRITICAL: 1 🟠 HIGH: 18 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-52785 (opf/openproject) — F1: exploitable → functional, AAS: 11.1 → 13.1 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-45405 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 12.8 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54636 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 13.9 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-52884 (notepad-plus-plus/notepad) — F1: exploitable → functional, AAS: 9.1 → 11.1 (HIGH → HIGH). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54825 (wpdatatables/wpdatatables) — F1: exploitable → functional, AAS: 9.6 → 11.6 (HIGH → HIGH). Originally in 2026-06-26 bulletin. 🔴 [CRITICAL] craftcms/cms 2 CVEs | CVSS 4.0: 8.7 | AAS 12.8 ...
41 vulnerabilities across 14 products scored HIGH or above on July 01, 2026. 🟠 HIGH: 41 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-52785 (opf/openproject) — F1: exploitable → functional, AAS: 11.1 → 13.1 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-45405 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 12.8 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54636 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 13.9 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-52884 (notepad-plus-plus/notepad) — F1: exploitable → functional, AAS: 9.1 → 11.1 (HIGH → HIGH). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54825 (wpdatatables/wpdatatables) — F1: exploitable → functional, AAS: 9.6 → 11.6 (HIGH → HIGH). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-50189 (appsmith/appsmith) — F1: exploitable → functional, AAS: 9.7 → 10.8 (HIGH → HIGH). Originally in 2026-06-24 bulletin. [UPGRADED] CVE-2026-54067 (siyuan-note/siyuan) — F1: exploitable → functional, AAS: 9.2 → 11.2 (HIGH → HIGH). Originally in 2026-06-24 bulletin. [UPGRADED] CVE-2026-52794 (sentry/sentry) — F1: exploitable → itw, AAS: 9.3 → 10.9 (HIGH → HIGH). Originally in 2026-06-24 bulletin. 🟠 [HIGH] google/chrome 25 CVEs | CVSS 3.1: 9.6 | AAS 11.4 ...
31 vulnerabilities across 15 products scored HIGH or above on June 30, 2026. 🟣 EMERGENCY: 5 🔴 CRITICAL: 14 🟠 HIGH: 12 Exploit Status Upgrades The following CVEs from previous bulletins have been upgraded based on new exploit intelligence: [UPGRADED] CVE-2026-52785 (opf/openproject) — F1: exploitable → functional, AAS: 11.1 → 13.1 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-45405 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 12.8 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54636 (dokku/dokku) — F1: exploitable → itw, AAS: 10.3 → 13.9 (HIGH → CRITICAL). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-52884 (notepad-plus-plus/notepad) — F1: exploitable → functional, AAS: 9.1 → 11.1 (HIGH → HIGH). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-54825 (wpdatatables/wpdatatables) — F1: exploitable → functional, AAS: 9.6 → 11.6 (HIGH → HIGH). Originally in 2026-06-26 bulletin. [UPGRADED] CVE-2026-50189 (appsmith/appsmith) — F1: exploitable → functional, AAS: 9.7 → 10.8 (HIGH → HIGH). Originally in 2026-06-24 bulletin. [UPGRADED] CVE-2026-54067 (siyuan-note/siyuan) — F1: exploitable → functional, AAS: 9.2 → 11.2 (HIGH → HIGH). Originally in 2026-06-24 bulletin. [UPGRADED] CVE-2026-52794 (sentry/sentry) — F1: exploitable → itw, AAS: 9.3 → 10.9 (HIGH → HIGH). Originally in 2026-06-24 bulletin. 🟣 [EMERGENCY] adobe/coldfusion 9 CVEs | CVSS 3.1: 10.0 | AAS 16.3 ...