New that day
- highpatchedexploited JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability JoomShaper SP Page Builder contains an unrestricted upload of file with dangerous type vulnerability that allows unauthenticated users to upload arbitrary files, ultimately resulting in the upload and execution of PHP code. Added to CISA KEV on 2026-07-07 (federal deadline 2026-07-10).
- highpatchedexploited Langflow Authorization Bypass Through User-Controlled Key Vulnerability Langflow Langflow Langflow contains an authorization bypass through user-controlled key vulnerability which allows an authenticated attacker to execute any flow belonging to another user by specifying the victim's flow ID in the request. Added to CISA KEV on 2026-07-07 (federal deadline 2026-07-10).
- highpatchedexploited Joomlack Page Builder Improper Access Control Vulnerability Joomlack Page Builder contains an improper access control vulnerability that could allow for remote code execution via unauthenticated arbitrary file upload. Added to CISA KEV on 2026-07-07 (federal deadline 2026-07-10).
- highpatchedexploited Adobe ColdFusion Path Traversal Vulnerability Adobe ColdFusion contains a path traversal vulnerability that could lead to arbitrary code execution in the context of the current user. Added to CISA KEV on 2026-07-07 (federal deadline 2026-07-10).