23 vulnerabilities across 14 products scored HIGH or above on July 06, 2026.

  • 🔴 CRITICAL: 2
  • 🟠 HIGH: 21

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-55952 (erlang/erlang_otp) — F1: theoretical → poc, AAS: 9.2 → 11.7 (HIGH → HIGH). Originally in 2026-07-02 bulletin.
  • [UPGRADED] CVE-2026-13603 (pretix/pretix-oppwa) — F1: exploitable → itw, AAS: 9.4 → 11.9 (HIGH → HIGH). Originally in 2026-07-01 bulletin.

🔴 [CRITICAL] adobe/coldfusion

1 CVE | CVSS 3.1: 10.0 | AAS 13.3

  • cpe:2.3:a:adobe:coldfusion:*:*:*:*:*:*:*:*

Adobe ColdFusion versions 2025.9, 2023.20 and earlier are affected by a critical improper input validation vulnerability (CVE-2026-48316, CVSS 10.0) that allows unauthenticated remote code execution in the context of the current user without any user interaction. Organizations running ColdFusion application servers should treat this as an emergency-priority patch, as the changed scope indicates potential impact beyond the vulnerable component itself. Administrators should apply the update referenced in Adobe advisory APSB26-68 immediately and review ColdFusion instances for signs of compromise.

Vendor Advisory

🔴 [CRITICAL] coollabsio/coolify

5 CVEs | CVSS 3.1: 9.9 | AAS 12.6

  • cpe:2.3:a:coollabsio:coolify:*:*:*:*:*:*:*:*

Coolify, the open-source self-hosted server and application management platform, is affected by five vulnerabilities including multiple critical-severity issues (max CVSS 9.9) with proof-of-concept exploit code available. The lead vulnerability enables authenticated users with application write permissions to achieve remote command injection during deployment, allowing full remote code execution and exfiltration of sensitive environment variables such as secrets and API keys. Organizations running Coolify should upgrade to version 4.0.0-beta.469 or later immediately and audit deployment logs for any signs of unauthorized command execution or credential leakage.

Vendor Advisory

🟠 [HIGH] unclecode/crawl4ai

3 CVEs | CVSS 3.1: 10.0 | AAS 11.8

  • cpe:2.3:a:kidocode:crawl4ai:*:*:*:*:*:*:*:* (< 0.9.0)
  • cpe:2.3:a:unclecode:crawl4ai:*:*:*:*:*:*:*:*

Crawl4AI, the open-source LLM-friendly web crawler and scraper, is affected by three vulnerabilities including multiple critical-severity issues (max CVSS 10.0) that are considered actively exploitable. The lead vulnerability allows unauthenticated attackers to inject malicious Chromium launch arguments via the Docker API server, achieving arbitrary command execution as the container’s runtime user with a single crafted request. Organizations running Crawl4AI in Docker should upgrade to version 0.9.0 or later immediately, and in the interim ensure the API is not exposed to untrusted networks.

Vendor Advisory

🟠 [HIGH] langroid/langroid

3 CVEs | CVSS 3.1: 10.0 | AAS 11.2

  • cpe:2.3:a:langroid:langroid:*:*:*:*:*:*:*:*

Langroid, the Python framework for building LLM-powered agents, is affected by three vulnerabilities including multiple critical-severity issues (max CVSS 10.0) that are considered actively exploitable. The lead vulnerability allows sandbox escape to remote code execution through an incomplete eval() mitigation in TableChatAgent and VectorStore, where LLM-generated tool messages evaluated with full_eval=True can bypass the intended sandboxing and execute arbitrary code. Teams using Langroid should check the vendor advisory for available patches immediately, disable full_eval=True where not strictly necessary, and treat any Langroid agents processing untrusted LLM output as high-risk until remediated.

Vendor Advisory

🟠 [HIGH] verbb/formie

1 CVE | CVSS 3.1: 9.8 | AAS 10.9

  • cpe:2.3:a:verbb:formie:*:*:*:*:*:*:*:* (< 2.1.6)

Formie, a popular form plugin for Craft CMS, is affected by a critical server-side template injection vulnerability (CVE-2026-52889, CVSS 9.8) that is considered actively exploitable. When a Hidden field uses a dynamic default value derived from request input such as User Agent, Referer, URL, query parameters, or cookies, an unauthenticated attacker can inject Twig template syntax that is evaluated server-side during form rendering, potentially leading to full remote code execution. Site administrators using Formie should update to the patched version referenced in the vendor advisory immediately and audit any forms using Hidden fields with dynamic default values.

Vendor Advisory

🟠 [HIGH] esri/arcgis_server

1 CVE | CVSS 3.1: 9.8 | AAS 10.9

  • cpe:2.3:a:esri:arcgis_server:*:*:*:*:*:*:*:*

Esri ArcGIS Server versions 12.0 and earlier are affected by a critical directory traversal vulnerability (CVE-2026-9181, CVSS 9.8) that is considered actively exploitable. An unauthenticated attacker can send crafted path parameters to access sensitive files on the underlying system, potentially exposing configuration data, credentials, or other protected information. Organizations running ArcGIS Server should apply the patches referenced in Esri’s May 2026 security bulletin immediately and restrict network access to ArcGIS Server instances where possible.

Vendor Advisory

🟠 [HIGH] pnpm/pnpm

1 CVE | CVSS 3.1: 8.2 | AAS 10.7

  • cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:* (< 10.34.4)
  • cpe:2.3:a:pnpm:pnpm:*:*:*:*:*:node.js:*:* (>= 11.0.0, < 11.8.0)

pnpm, the popular JavaScript package manager, versions prior to 10.34.4 and 11.8.0 are affected by a high-severity path traversal vulnerability (CVE-2026-59195, CVSS 8.2) that is considered actively exploitable. A malicious repository can include a crafted pnpm-lock.yaml with a traversal-shaped config dependency name, causing pnpm install to create symlinks outside the intended node_modules directory, potentially overwriting arbitrary files or enabling code execution. Development teams using pnpm should upgrade to version 10.34.4 or 11.8.0 immediately and exercise caution when running pnpm install on untrusted or newly cloned repositories.

Vendor Advisory

🟠 [HIGH] cilium/cilium/cilium

1 CVE | CVSS 3.1: 9.2 | AAS 10.7

  • cpe:2.3:a:github.com:cilium_cilium:*:*:*:*:*:*:*:* (< 1.14.14)
  • cpe:2.3:a:github.com:cilium_cilium:*:*:*:*:*:*:*:* (>= 1.15.0, < 1.15.8)
  • cpe:2.3:a:github.com:cilium_cilium:*:*:*:*:*:*:*:* (>= 1.16.0, < 1.16.1)

Cilium, the widely used Kubernetes networking and security platform, is affected by a critical vulnerability (CVE-2026-49445, CVSS 9.2) that is considered actively exploitable when L7 functionality is enabled. The Envoy instance supporting L7 policy creates a world-accessible socket on cluster nodes, allowing a local attacker to reach Envoy admin endpoints and potentially expose TLS secrets, disrupt cluster traffic, or terminate the Envoy process. Teams running Cilium with L7 policies should apply the patch referenced in the vendor advisory immediately and audit node-level access controls to limit exposure until remediation is complete.

Vendor Advisory

🟠 [HIGH] beyondtrust/privileged_remote_access

1 CVE | CVSS 4.0: 9.2 | AAS 10.7

  • cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:* (< 25.3.3)
  • cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:* (< 25.3.3)

BeyondTrust Privileged Remote Access is affected by a critical pre-authentication bypass vulnerability (CVE-2026-40139, CVSS 9.2) that is considered actively exploitable. An unauthenticated remote attacker can exploit improper processing in the authentication subsystem to bypass access controls and gain unauthorized access to the appliance, including privileged accounts, when a specific authentication configuration is enabled. Organizations using BeyondTrust Privileged Remote Access should apply the fix referenced in advisory BT26-03 immediately, review authentication configurations for exposure, and audit access logs for any signs of unauthorized access.

Vendor Advisory

🟠 [HIGH] webpros/plesk

1 CVE | CVSS 3.1: 9.9 | AAS 10.1

  • cpe:2.3:a:webpros:plesk:*:*:*:*:*:*:*:*

WebPros Plesk is affected by a critical improper authorization vulnerability in its XML API (CVE-2026-48614, CVSS 9.9) that is considered actively exploitable. An authenticated user can inject arbitrary configuration directives through the API, enabling arbitrary file writes as root and full privilege escalation to complete server compromise. Organizations running Plesk should apply the patch referenced in the vendor advisory immediately, audit XML API access logs for suspicious activity, and restrict API access to trusted sources until remediation is confirmed.

Vendor Advisory

🟠 [HIGH] fossbilling/fossbilling

1 CVE | CVSS 4.0: 9.2 | AAS 9.8

  • cpe:2.3:a:fossbilling:fossbilling:*:*:*:*:*:*:*:*

FOSSBilling, the open-source billing and client management system, versions 0.6.0 through 0.7.2 are affected by a critical unauthenticated payment bypass vulnerability (CVE-2026-42341, CVSS 9.2) that is considered actively exploitable. When the Custom payment adapter is enabled, an attacker can send a single crafted HTTP request to the IPN callback endpoint to mark any unpaid invoice as paid and credit client accounts without making an actual payment. Organizations running FOSSBilling should upgrade to version 0.8.0 immediately, or as a temporary workaround disable the Custom payment gateway, and audit billing records for any fraudulent payment activity.

Vendor Advisory

🟠 [HIGH] leantime/leantime

2 CVEs | CVSS 4.0: 8.6 | AAS 9.5

  • cpe:2.3:a:leantime:leantime:*:*:*:*:*:*:*:*

Leantime, the open-source project management platform, is affected by two high-severity vulnerabilities (max CVSS 8.6) that are considered actively exploitable. The lead vulnerability is an OIDC login CSRF flaw where the verifyState() method unconditionally returns true without validating state parameters, allowing attackers to craft malicious callback URLs that perform session fixation and log victims into attacker-controlled accounts. Organizations using Leantime with OIDC authentication should check the vendor’s GitHub repository for patched releases immediately and monitor for any suspicious login activity or unauthorized session creation.

Vendor Advisory

🟠 [HIGH] vllm/vllm

1 CVE | CVSS 4.0: 8.7 | AAS 9.1

  • cpe:2.3:a:vllm:vllm:*:*:*:*:*:*:*:* (< 0.24.0)

vLLM, the widely used high-throughput LLM inference and serving engine, versions prior to 0.24.0 are affected by a high-severity denial-of-service vulnerability (CVE-2026-55574, CVSS 8.7) that is considered actively exploitable. The structured_outputs.regex API parameter passes user-supplied regular expressions directly to grammar compiler backends without compilation timeouts or complexity analysis, allowing an attacker to submit crafted regex patterns that block engine resources indefinitely. Organizations exposing vLLM API endpoints should upgrade to version 0.24.0 immediately and consider implementing input validation or request timeouts on any endpoints accepting user-supplied regex patterns.

Vendor Advisory

🟠 [HIGH] decolua/9router

1 CVE | CVSS 3.1: 9.9 | AAS 9.1

  • cpe:2.3:a:decolua:9router:*:*:*:*:*:*:*:*

9Router by DecoLua is affected by a critical vulnerability (CVE-2026-55500, CVSS 9.9) in the /api/settings/database endpoint that allows full database export and import with insufficient authentication controls. An attacker who bypasses the minimal JWT or CLI token check, particularly when combined with default credentials or tunnel exposure, can exfiltrate all stored credentials, API keys, and OAuth tokens, or completely overwrite the database to achieve full system takeover. Organizations running 9Router should check the vendor advisory for patched versions immediately, ensure default passwords have been changed, and restrict network access to administrative API endpoints.

Vendor Advisory