Vulnfeed

Archives
Log in
Subscribe
July 27, 2026

[vulnfeed] 3 critical CVEs — 2026-07-27 20:00 UTC

vulnfeed Critical alert — 2026-07-27 21:34 UTC
3 new critical CVEs in the last 5 hours — 3 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-48030CRITICAL
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4,
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.4, an OS Command Injection vulnerability in the terminal action handler allows any authentica
CVSS 9.9
CVE-2026-63077CRITICAL
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the ag
In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol
CVSS 9.8
CVE-2026-55579CRITICAL
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6,
Pheditor is a single-file editor and file manager written in PHP. From version 2.0.1 to before version 2.0.6, Pheditor ships with a hardcoded default password admin (SHA-512 hash stored at pheditor.ph
CVSS 9.8

Live feed →  ·  Notification settings

vulnfeed critical alerts — vulnfeed.it. Unsubscribe

Don't miss what's next. Subscribe to Vulnfeed:
← Newer [vulnfeed] 4 critical CVEs — 2026-07-28 08:00 UTC Older → [vulnfeed] 15 critical CVEs — 2026-07-27 16:00 UTC
Powered by Buttondown, the easiest way to start and grow your newsletter.