[vulnfeed] 6 critical CVEs — 2026-07-06 16:00 UTC
vulnfeed
Critical alert — 2026-07-06 18:23 UTC
6 new critical CVEs
in the last 5 hours — 6 CVSS ≥ 9.0
New vulnerabilities
CVE-2026-48316CRITICAL
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability tha
ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitatio
CVSS 10.0
CVE-2026-40138CRITICAL
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Suppo
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Access. Improper validation of authentication data may allow a ne
CVSS 9.2
CVE-2026-40139CRITICAL
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Suppo
A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of authentication requests may allow an unauthenticated remote att
CVSS 9.2
CVE-2026-49445CRITICAL
Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket acce
### Impact
When Cilium L7 functionality is enabled on a cluster, the Envoy instance supporting this functionality creates a world-accessible socket on cluster nodes. A local attacker would be able to
CVSS 9.2
CVE-2025-53827CRITICAL
ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCl
ownCloud Core is the server-side component of the file storage, synchronization, and sharing application ownCloud Classic. In versions prior to 10.15.3, the Updater on ownCloud 10 before 10.15.3 has a
CVSS 9.1
CVE-2025-53830CRITICAL
Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing applicatio
Anti-Virus for ownCloud is an anti-virus application for file storage, synchronization, and sharing application ownCloud. Versions of Anti-Virus for ownCloud before 1.2.3 are vulnerable to Server-Side
CVSS 9.1
vulnfeed critical alerts — vulnfeed.it.
Unsubscribe
Don't miss what's next. Subscribe to Vulnfeed: