CVE Vulnerabilities - 23 June 2026

A critical vulnerability in Traefik's HTTP/3 configuration can allow unauthenticated clients to access services protected by client certificate authentication. This is possible when HTTP/3 is enabled ...

An attacker can steal the admin password from a motionEye installation by exploiting a path traversal vulnerability when the normal user password is left empty. This allows full admin access without a...

An attacker can access and read all data in a Budibase app's database without needing a password. This is because of a mistake in how Budibase handles user input in its database queries. To fix this, ...

Gogs has a security weakness that allows an attacker to store and execute malicious code on the server. This can happen when an attacker creates a fake organization name that contains special characte...

UniFi OS devices have a security weakness that allows an attacker with network access to access sensitive files on the system. This could potentially be used to gain further access to the system. To p...

This vulnerability affects UniFi OS devices. If left unpatched, a malicious actor with access to the network could make unauthorized changes to the system, potentially disrupting network operations. T...

Unifi OS devices can be compromised if an attacker is on the same network. This could allow the attacker to execute unauthorized system commands. To protect your network, ensure you keep UniFi OS soft...

An attacker can steal the admin password from motionEye installations that leave the user password empty. This can happen when an unauthenticated user exploits a path traversal vulnerability to read t...

A security issue in Gogs allows an authenticated user to take control of the server by creating a special pull request. This means they could access, modify, or steal data from other users' repositori...

motionEye has a multi-stage vulnerability that allows attackers to execute code on the server without a password. This happens when a normal user's password is unset, or when an attacker gains access ...

A patch has been released for the Apache Tomcat library that prevents attackers from potentially running unauthorized code on your server. This affects systems running outdated versions of the library...

The rootio-aom package on Root:Debian:11 allows unauthorized access to sensitive data. This could lead to data breaches and unauthorized use of the data. Root has released patches for this issue, so i...

All versions of the expr-eval package are affected. This means an attacker could potentially run malicious code within your application if they can influence the input that expr-eval processes. Update...

Lantronix's EDS5000 2.1.0.0R3 has a security flaw that allows hackers to execute commands on the device by manipulating the username field when authentication fails. This means an attacker could poten...

The Poweradmin DNS tool has a security flaw that allows an attacker to take control of an account without knowing the password. This is because the tool doesn't properly check the source of some authe...

An unauthorized user can access sensitive credentials of other users by sending a malicious message. This is a serious security risk because it can lead to unauthorized access to important systems and...

An attacker with admin privileges in one organization can access and modify apps from other organizations using Capgo before version 12.128.2. This is a serious issue because it allows unauthorized ac...

An update is available for etcd in Red Hat OpenStack Platform 17.1. This update addresses a security issue that could allow an attacker to manipulate etcd data, potentially leading to data corruption ...

An update is available for Red Hat's osbuild-composer, a tool for creating operating system images. This update addresses a security issue that could allow unauthorized access to the system. Businesse...

Gogs, a self-hosted Git platform, has a security issue that allows attackers with write access to a repository to upload files that can be written outside the repository's working directory. This coul...

Samba, a software that allows Linux systems to share files and printers with Windows systems, has a security update available. This update fixes a vulnerability that could allow an attacker to access ...

Red Hat Samba, a software that allows Windows and Linux computers to share files and printers, has a security update. This update fixes a critical flaw that could allow an attacker to take control of ...

A security update is available for Samba, a software that allows Linux computers to communicate with Windows computers. This update fixes a vulnerability that could allow an attacker to execute malici...

A vulnerability in Samba, a popular file and print sharing software, allows an attacker to execute malicious code on a Linux system remotely. This could potentially lead to unauthorized access to sens...

A security update is available for Red Hat Samba, a software that helps Windows computers connect to Linux servers. If not updated, an attacker could potentially intercept and read sensitive informati...