CVE-2026-57995 - phpMyFAQ - Privilege Escalation via Missing Self-Rights Constraint in GroupController::updatePermissions

2026-06-30 Mittel

CVE-2026-58449 - txtai - Unauthenticated Remote Code Execution via Unsafe Reflection in API /reindex function Parameter

2026-06-30 Mittel

​​What’s new in Microsoft Security: June 2026

2026-06-30

CVE-2026-58377 - JeecgBoot 3.9.2 - Missing Authorization on OpenAPI Credential Management Endpoints Exposes Access/Secret Keys

2026-06-30 Mittel

CVE-2026-58172 - Ocelot - IP Allow/Block List Bypass for WebSocket Upgrade Requests

2026-06-30 Mittel

CVE-2026-58166 - OpenBMB ChatDev - Unauthenticated Path Traversal in Upload Handler Allows Arbitrary File Write and Delete

2026-06-30 Mittel