Docker-Lab

Spring AI SimpleVectorStore SpEL Injection RCE (CVE-2026-22738) newCVE-2026-22738webCRITICAL 9.8Patched2026-07-05Spinnaker Clouddriver — Git Clone Shell Injection RCE (CVE-2026-32604) newCVE-2026-32604cloudCRITICAL 10Patched2026-07-05rclone RC API Unauthenticated Remote Code Execution (CVE-2026-41179) newCVE-2026-41179webCRITICAL 9.8Patched2026-07-05OWASP CoreRuleSet Multipart Charset WAF Bypass (CVE-2026-21876) new EPSS 14%CVE-2026-21876webCRITICALPatched2026-07-05nginx Resolver Use-After-Free in OCSP Stapling (CVE-2026-40701) newCVE-2026-40701webMEDIUM 6.3Patched2026-07-05NGINX HTTP/2 Frame Injection via Vulnerable Upstream Proxying (CVE-2026-42926) newCVE-2026-42926webHIGHPatched2026-07-05MariaDB JSON_SCHEMA_VALID() Heap Overflow — Privilege Escalation to UDF RCE (CVE-2026-32710) newCVE-2026-32710binaryCRITICALPatched2026-07-05Langflow Knowledge Base Path Traversal / Arbitrary Directory Deletion (CVE-2026-42048) newCVE-2026-42048webHIGHPatched2026-07-05Jenkins ClassFilter Deserialization Bypass → Arbitrary File Read — CVE-2026-53435 new EPSS 53%CVE-2026-53435webHIGH 9.1Patched2026-07-05Ivanti EPMM Pre-Auth RCE via Bash Arithmetic Expansion (CVE-2026-1281 / CVE-2026-1340) new KEV EPSS 82%CVE-2026-1281, CVE-2026-1340networkCRITICALPatched2026-07-05Gotenberg 8.29.1 Unauthenticated ExifTool Metadata Key Injection RCE (CVE-2026-42589) newCVE-2026-42589webCRITICAL 9.8Patched2026-07-05Claude Code WebFetch Hardcoded HuggingFace Bare-Hostname Allow-List Bypass — CVE-2026-54316 newCVE-2026-54316miscMEDIUMPatched2026-07-05Business Directory Plugin for WordPress — Unauthenticated Time-Based Blind SQL Injection (CVE-2026-2576) newCVE-2026-2576webHIGH 7.5Patched2026-07-05Apache Tomcat Mutual TLS OCSP Soft-Fail Authentication Bypass — CVE-2026-29145 newCVE-2026-29145webCRITICAL 9.1Patched2026-07-05