Cwe-20

Laravel `files.*` Wildcard Validation Bypass via Polyglot JPEG+PHP Upload (CVE-2025-27515) newCVE-2025-27515webCRITICAL 9.8Patched2026-07-06Apache Parquet-Avro Schema Deserialization RCE/SSRF — Incomplete-Fix Bypass (CVE-2025-30065) new EPSS 43%CVE-2025-30065miscCRITICAL 9.8Patched2026-07-06UnPoller Path Traversal / Arbitrary File Read via file:// Password Prefix (CVE-2026-36851) newCVE-2026-36851miscHIGH 7.5Unverified2026-07-05DbGate Unauthenticated RCE via JSON Script Runner (CVE-2026-47668) newCVE-2026-47668webCRITICAL 3.1Patched2026-07-05Apache Solr UNC Path Validation Bypass to RCE (CVE-2026-22444) newCVE-2026-22444webCRITICALPatched2026-07-05