Access-Control-Bypass

Unauthenticated Arbitrary File Upload RCE in iCagenda for Joomla (CVE-2026-48939) new KEV EPSS 20%CVE-2026-48939webCRITICAL 9.8Patched2026-07-11Mitel MiCollab Path Normalization Bypass to Internal Endpoints (CVE-2025-52913) newCVE-2025-52913networkCRITICAL 9.8Unverified2026-07-06Vaultwarden Organization Collection Permissions Bypass & Cipher Enumeration (CVE-2026-26012) newCVE-2026-26012webMEDIUM 6.5Patched2026-07-05phpSysInfo IP Allowlist Bypass via X-Forwarded-For Spoofing — CVE-2026-55584 newCVE-2026-55584 / GHSA-786w-p5pm-cvghwebHIGH 7.5Patched2026-07-05