17 vulnerabilities across 15 products scored HIGH or above on July 08, 2026.

  • 🔴 CRITICAL: 2
  • 🟠 HIGH: 15

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-55952 (erlang/erlang_otp) — F1: theoretical → poc, AAS: 9.2 → 11.7 (HIGH → HIGH). Originally in 2026-07-02 bulletin.
  • [UPGRADED] CVE-2026-13603 (pretix/pretix-oppwa) — F1: exploitable → itw, AAS: 9.4 → 11.9 (HIGH → HIGH). Originally in 2026-07-01 bulletin.

🔴 [CRITICAL] corewcf/corewcf

1 CVE | CVSS 3.1: 10.0 | AAS 12.6

  • cpe:2.3:a:corewcf:corewcf:*:*:*:*:*:*:*:*

CoreWCF, the .NET Core port of Windows Communication Foundation, contains a critical authentication bypass vulnerability (CVE-2026-54782, CVSS 10.0) in its SAML 1.1 and SAML 2.0 token validation logic. When IdentityConfiguration is used with federated bindings, the library fails to correctly resolve issuer signing keys or enforce token signing requirements, allowing an unauthenticated remote attacker to forge tokens and impersonate any principal that a trusted Security Token Service could issue.

Organizations running CoreWCF with SAML-based federated authentication should treat this as an urgent priority. Update immediately to CoreWCF 1.8.1 or 1.9.1, which resolve the issue. Given the unauthenticated remote exploitation path and complete identity impersonation impact, any delay in patching leaves services fully exposed to unauthorized access.

Vendor Advisory

🔴 [CRITICAL] fluent/fluentd

1 CVE | CVSS 3.1: 9.8 | AAS 12.6

  • cpe:2.3:a:fluent:fluentd:*:*:*:*:*:*:*:*

Fluentd, the widely deployed open-source log collector used across cloud and enterprise environments, contains a critical path traversal vulnerability (CVE-2026-44024, CVSS 9.8) in its file output plugin. Insufficient validation of the ${tag} placeholder allows attackers who can send crafted log events to traverse directories and write or overwrite arbitrary files, potentially achieving remote code execution on the Fluentd host.

Any organization running Fluentd with tag-based dynamic file paths in output configurations should act immediately. Proof-of-concept exploit code is available, increasing the likelihood of active exploitation. Upgrade to Fluentd 1.19.3 or later to remediate this issue.

Vendor Advisory

🟠 [HIGH] nats-io/nats-server

3 CVEs | CVSS 3.1: 8.8 | AAS 11.9

  • cpe:2.3:a:nats-io:nats-server:*:*:*:*:*:*:*:*

NATS Server, the high-performance messaging system used in cloud and edge deployments, is affected by 3 vulnerabilities including multiple high-severity issues (max CVSS 8.8). The most critical flaw allows an unauthenticated peer to bypass inter-server authentication on route and leafnode listeners when no_auth_user is configured, gaining full privileges associated with that connection type and potentially compromising the entire messaging cluster.

Organizations running NATS Server in clustered or leafnode configurations should prioritize patching, especially where no_auth_user is enabled. Upgrade to NATS Server 2.14.0, 2.12.7, or 2.11.16 depending on your release branch to address all three issues.

Vendor Advisory

🟠 [HIGH] nuclio/nuclio/nuclio

1 CVE | CVSS 3.1: 10.0 | AAS 11.2

  • cpe:2.3:a:nuclio:nuclio_nuclio:*:*:*:*:*:*:*:*

Nuclio, the serverless computing platform for Kubernetes, contains a critical command injection vulnerability (CVE-2026-52831, CVSS 10.0) in its cron trigger handling. The Nuclio controller constructs shell commands for Kubernetes CronJob containers without properly sanitizing event header keys and body content, allowing an attacker who can define or influence cron trigger specifications to inject arbitrary commands that execute within the cluster.

Organizations running Nuclio with cron triggers in Kubernetes environments should treat this as an immediate priority, as exploitation could lead to full container compromise and lateral movement within the cluster. Review the vendor advisory at the Nuclio GitHub repository for patched versions and apply the fix without delay.

Vendor Advisory

🟠 [HIGH] seaweedfs/seaweedfs

1 CVE | CVSS 3.1: 7.7 | AAS 10.5

  • cpe:2.3:a:seaweedfs:seaweedfs:*:*:*:*:*:*:*:* (< 4.34)

SeaweedFS, the open-source distributed storage system, contains a high-severity path traversal vulnerability (CVE-2026-55874, CVSS 7.7) in its S3 API gateway. The CopyObject and UploadPartCopy operations fail to reject dot-dot path segments in the X-Amz-Copy-Source header, allowing an authenticated user scoped to one bucket to read objects from any other bucket via server-side copy, breaking tenant isolation boundaries.

Organizations using SeaweedFS with its S3-compatible API should upgrade to version 4.34 or later immediately. Proof-of-concept exploit code is publicly available, and any multi-tenant deployment is at risk of cross-bucket data exposure until patched.

Vendor Advisory

🟠 [HIGH] dgraph-io/dgraph

1 CVE | CVSS 3.1: 9.1 | AAS 10.4

  • cpe:2.3:a:dgraph-io:dgraph:*:*:*:*:*:*:*:* (< 25.3.5)

Dgraph, the open-source distributed GraphQL database, contains a critical unauthenticated data destruction vulnerability (CVE-2026-54061, CVSS 9.1) in its Alpha component. The external snapshot import RPCs are exposed on the public gRPC port 9080 without any authentication, allowing a remote unauthenticated attacker to invoke StreamExtSnapshot to delete and replace the entire database contents with attacker-controlled data.

Organizations running Dgraph Alpha with port 9080 reachable from untrusted networks face immediate risk of complete data loss or corruption. Upgrade to Dgraph 25.3.5 without delay, and as an interim measure ensure that gRPC port 9080 is not exposed to untrusted networks.

Vendor Advisory

🟠 [HIGH] appium/appium

1 CVE | CVSS 3.1: 8.6 | AAS 10.4

  • cpe:2.3:a:appium:appium:*:*:*:*:*:*:*:*

Appium, the widely used cross-platform mobile app automation framework, contains a high-severity path traversal vulnerability (CVE-2026-58192, CVSS 8.6) in its storage plugin. The POST /storage/delete endpoint passes user-supplied input directly into a recursive file deletion operation without any path sanitization, allowing an unauthenticated remote attacker to use directory traversal sequences to delete arbitrary files and directories writable by the Appium process.

Any team running Appium with the storage plugin enabled, particularly in CI/CD pipelines or shared test infrastructure, should upgrade to version 1.1.6 or later immediately. Until patched, consider restricting network access to the Appium server to prevent unauthorized deletion of critical system or application files.

Vendor Advisory

🟠 [HIGH] gitlab/gitlab

1 CVE | CVSS 3.1: 5.4 | AAS 10.0

  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (>= 13.11.0, < 18.11.7)
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (>= 19.0.0, < 19.0.4)
  • cpe:2.3:a:gitlab:gitlab:*:*:*:*:enterprise:*:*:* (>= 19.1.0, < 19.1.2)

GitLab EE contains a stored cross-site scripting vulnerability (CVE-2026-6896, CVSS 5.4) affecting all versions from 13.11 onward. An authenticated user with developer-role permissions can exploit improper input sanitization to execute arbitrary scripts in another user’s browser session, potentially enabling session hijacking, data theft, or privilege escalation within the GitLab instance.

Organizations running GitLab EE should upgrade to versions 18.11.7, 19.0.4, or 19.1.2 depending on their release branch. Given GitLab’s central role in source code management and CI/CD pipelines, even a medium-severity XSS in this context warrants prompt patching to prevent lateral compromise.

Vendor Advisory

🟠 [HIGH] creative_themes/blocksy_companion

1 CVE | CVSS 4.0: 9.2 | AAS 10.0

  • cpe:2.3:a:creative_themes:blocksy_companion:*:*:*:*:*:*:*:* (< 2.1.47)

Blocksy Companion Pro, a popular WordPress plugin by Creative Themes, contains a critical unauthenticated arbitrary file upload vulnerability (CVE-2026-58480, CVSS 9.2). Attackers can bypass extension validation in the save_attachments function by uploading double-extension filenames such as shell.woff2.php, which pass the flawed substring check while being executed as PHP by the web server, leading to full site compromise and remote code execution.

Any WordPress site running Blocksy Companion Pro with the Advanced Reviews or Custom Fonts features should upgrade to version 2.1.47 or later immediately. No authentication is required to exploit this flaw, making every affected site directly exposed to automated attack.

Vendor Advisory

🟠 [HIGH] zalando/zalando/skipper

1 CVE | CVSS 3.1: 8.7 | AAS 10.0

  • cpe:2.3:a:github.com:zalando_skipper:*:*:*:*:*:*:*:* (< 0.21.149)

Zalando Skipper, the open-source HTTP router and reverse proxy, contains a high-severity policy bypass vulnerability (CVE-2026-50197, CVSS 8.7) in its Open Policy Agent integration. When the opaAuthorizeRequestWithBody filter is configured, chunked HTTP/1.1 requests and HTTP/2 requests without a Content-Length header cause the body extraction helper to send an empty raw_body to OPA for evaluation, while the actual request body is still forwarded to the upstream service, completely bypassing body-based authorization policies.

Organizations relying on Skipper’s OPA integration for request body inspection should treat this as urgent, since any body-based policy can be trivially circumvented by an attacker using chunked transfer encoding. Review the vendor advisory for patched versions and upgrade immediately, and consider implementing upstream-side body validation as an additional safeguard.

Vendor Advisory

🟠 [HIGH] bitwarden/server

1 CVE | CVSS 4.0: 9.3 | AAS 9.9

  • cpe:2.3:a:bitwarden:server:*:*:*:*:*:*:*:*

Bitwarden Server contains a critical broken access control vulnerability (CVE-2026-60104, CVSS 9.3) in its Trusted Device Encryption authentication request flow. The server fails to verify that the email address in admin authentication requests belongs to the authenticated caller, allowing any low-privileged organization member to forge a request bound to an attacker-controlled key, ultimately obtaining the victim’s vault key and a scoped access token for complete account takeover.

Organizations running self-hosted Bitwarden Server should upgrade to version 2026.6.0 or later immediately, as exploitation requires only basic organization membership and results in full disclosure of another user’s encrypted vault. Cloud-hosted Bitwarden users should confirm with the vendor that the fix has been applied to their environment.

Vendor Advisory

🟠 [HIGH] parse-community/parse-server

1 CVE | CVSS 4.0: 8.7 | AAS 9.8

  • cpe:2.3:a:parse-community:parse-server:*:*:*:*:*:*:*:*

Parse Server, the open-source Node.js backend framework, contains a high-severity denial-of-service vulnerability (CVE-2026-57480, CVSS 8.7) in its REST API and LiveQuery query handling. Deeply nested $or, $and, and $nor query condition operators can trigger exponential-time processing in the internal query-traversal helper, blocking the Node.js event loop and rendering the entire server unresponsive to all users.

Organizations running Parse Server in production should upgrade to version 9.9.1-alpha.12 or 8.6.82 depending on their release branch. Since the attack requires only the ability to submit crafted queries to a publicly exposed API, any internet-facing Parse Server instance is at risk of complete service disruption until patched.

Vendor Advisory

🟠 [HIGH] cline/cline

1 CVE | CVSS 3.1: 8.8 | AAS 9.6

  • cpe:2.3:a:cline:cline:*:*:*:*:*:*:*:*

Cline, the autonomous AI coding agent available as an SDK, IDE extension, and CLI assistant, contains a high-severity cross-site WebSocket hijacking vulnerability (CVE-2026-59723, CVSS 8.8) in its Hub dashboard server. The /browser WebSocket endpoint does not validate Origin headers, and when ROOM_SECRET is unset for local binds, any malicious website visited by a developer can send desktopCommand frames to read workspace state, modify MCP and provider settings, and execute arbitrary commands on the developer’s machine.

Developers and teams using Cline’s dashboard functionality should upgrade to version 3.0.30 or later immediately. Since exploitation only requires a developer to visit a malicious webpage while the dashboard is running, this is particularly dangerous in environments where Cline has access to sensitive codebases or cloud credentials.

Vendor Advisory

🟠 [HIGH] copier-org/copier

1 CVE | CVSS 4.0: 8.8 | AAS 9.6

  • cpe:2.3:a:copier-org:copier:*:*:*:*:*:*:*:*

Copier, the project template rendering library and CLI tool, contains a high-severity trust bypass vulnerability (CVE-2026-53951, CVSS 8.8) affecting versions 9.5.0 through 9.15.1. The trust setting performs a raw string prefix match against template URLs without path normalization, while the actual template fetch resolves dot-segments, allowing an attacker to craft a template reference that passes the trust check but resolves to an untrusted location and executes arbitrary code during template rendering.

Development teams using Copier with trusted template prefixes should upgrade to version 9.15.2 immediately. This is especially critical in CI/CD environments where Copier processes external template references, as exploitation can lead to arbitrary code execution in the build pipeline.

Vendor Advisory

🟠 [HIGH] udecode/plate

1 CVE | CVSS 3.1: 8.7 | AAS 9.5

  • cpe:2.3:a:udecode:plate:*:*:*:*:*:*:*:*

Plate, the rich-text editor framework built with AI and shadcn/ui, contains a high-severity stored cross-site scripting vulnerability (CVE-2026-55596, CVSS 8.7) affecting versions 53.0.0 through 53.1.3. The media embed renderer trusts serialized provider metadata and skips protocol validation, allowing an attacker to craft a Plate document that sets a known video provider while injecting a javascript: URI as the iframe source, achieving arbitrary script execution in any victim’s browser that opens the document.

Teams using Plate in collaborative editing or content management applications should upgrade to version 53.1.4 immediately. Since exploitation only requires a victim to open a malicious document, any application that processes or displays user-supplied Plate content is directly exposed to session hijacking and data theft until patched.

Vendor Advisory