tag

Unauth-Rce

Netflix Conductor Unauthenticated RCE via INLINE GraalVM Evaluator — CVE-2026-58138

CVE-2026-58138 ([VulnCheck advisory](https://www.vulncheck.com/advisories/orkes-conductor-unauthenticated-rce-via-graalvm-script-evaluators)) misc Patched

CVE-2026-58138miscCRITICAL 9.8Patched2026-07-05Joomla Page Builder CK Unauthenticated Arbitrary File Upload RCE — CVE-2026-56290 KEV EPSS 30%

CVE-2026-56290 web Patched

CVE-2026-56290webCRITICAL 9.8Patched2026-07-05Feast Registry gRPC Unauthenticated RCE via dill.loads — CVE-2026-56121

CVE-2026-56121 misc Patched

CVE-2026-56121miscCRITICAL 9.8Patched2026-07-05Control Web Panel Pre-Auth Blind SQL Injection to RCE — CVE-2026-57517

CVE-2026-57517 web Patched

CVE-2026-57517webCRITICAL 9.8Patched2026-07-05Ubiquiti UniFi OS Unauthenticated RCE Chain (CVE-2026-34908 / CVE-2026-34909 / CVE-2026-34910) KEV EPSS 85%

CVE-2026-34908, CVE-2026-34909, CVE-2026-34910 network Patched

CVE-2026-34908, CVE-2026-34909, CVE-2026-34910networkCRITICAL 10Patched2026-06-28