Security Digest archive
June 2026
10 editorial briefs, 23 known exploited (cisa kev) additions and 150 critical advisories across 25 digest days.
Tuesday, June 30, 2026
Monday, June 29, 2026
- KEV CVE-2026-48558 SimpleHelp SimpleHelp
- Critical 1 advisory: github.com/googleapis/mcp-toolbox
Saturday, June 27, 2026
- Check exposure Page Builder CK CVE-2026-56290: Exploited Joomla Upload RCE
Friday, June 26, 2026
- Critical 15 advisories: github.com/lxc/incus/v7/cmd/incusd, github.com/lxc/incus/v7/cmd/incusd, github.com/nezhahq/nezha, relyra, github.com/lxc/incus/v7/cmd/incusd, backpropagate, github.com/lxc/incus/v7/cmd/incusd, @deepstream/server, semantic-router, github.com/lxc/incus/v7/cmd/incusd, mcp-pinot-server, github.com/nezhahq/nezha …
Thursday, June 25, 2026
- KEV CVE-2026-20230 Cisco Unified Communications Manager
- KEV CVE-2026-12569 PTC Windchill and FlexPLM
- Critical 10 advisories: golang.org/x/crypto, golang.org/x/crypto, lemur, golang.org/x/crypto, golang.org/x/crypto, golang.org/x/crypto, i18next-http-middleware, golang.org/x/crypto, golang.org/x/crypto, i18next-fs-backend
Wednesday, June 24, 2026
- Critical 2 advisories: org.openidentityplatform.openam:openam…, org.openidentityplatform.openam:openam…
Tuesday, June 23, 2026
- KEV CVE-2026-34910 Ubiquiti UniFi OS
- KEV CVE-2026-34909 Ubiquiti UniFi OS
- KEV CVE-2026-34908 Ubiquiti UniFi OS
- KEV CVE-2025-67038 Lantronix EDS5000
- Critical 6 advisories: motioneye, gogs.io/gogs, motioneye, gogs.io/gogs, @budibase/server, gogs.io/gogs
Monday, June 22, 2026
Sunday, June 21, 2026
- Critical 1 advisory: crawl4ai
Friday, June 19, 2026
- Critical 9 advisories: CoreWCF.Primitives, github.com/crossplane/crossplane/v2, network-ai, network-ai, io.openremote:openremote-manager, langflow, DotVVM, github.com/tilt-dev/tilt, craftcms/cms
Thursday, June 18, 2026
- Check exposure TrueConf Server: Exploited Pre-Auth RCE Chain on Port 4307
- KEV CVE-2026-20253 Splunk Enterprise
- Critical 25 advisories: praisonaiagents, praisonaiagents, getkirby/cms, github.com/googleapis/mcp-toolbox, praisonai, python-statemachine, crawl4ai, praisonai, praisonai, praisonai, praisonai, netlicensing-mcp …
Wednesday, June 17, 2026
Tuesday, June 16, 2026
- Check exposure Zyxel GS1900 Switches: Exploited CGI Overflow (KEV)
- KEV CVE-2026-48907 Widget Factory Joomla Content Editor
- Critical 7 advisories: @lobehub/lobehub, langflow, crawl4ai, github.com/rclone/rclone, vllm, litellm, crawl4ai
Monday, June 15, 2026
- Act now SP Page Builder CVE-2026-48908: Exploited Joomla RCE
- Check exposure iCagenda CVE-2026-48939: Exploited Joomla Upload-to-RCE
- KEV CVE-2026-54420 LiteSpeed cPanel Plugin
- KEV CVE-2026-20262 Cisco Catalyst SD-WAN Manager
- Critical 8 advisories: electron, shlinkio/shlink, @vitest/browser, remotion, grumpydictator/firefly-iii, org.snmp4j:snmp4j-agent, youtransfer, remotion
Saturday, June 13, 2026
- Critical 1 advisory: github.com/googleapis/mcp-toolbox
Friday, June 12, 2026
- KEV CVE-2026-35273 Oracle PeopleSoft Enterprise PeopleTools
- Critical 7 advisories: org.apache.cxf:cxf-core, org.apache.cxf:cxf-integration-jca, org.apache.cxf:cxf-rt-rs-security-oauth2, org.apache.cxf:cxf-rt-rs-security-oauth2, org.apache.cxf:cxf-rt-transports-jms, @budibase/server, chromadb
Thursday, June 11, 2026
- KEV CVE-2026-10520 Ivanti Sentry
- Critical 2 advisories: meta-ads-mcp, codeigniter4/framework
Wednesday, June 10, 2026
- Act now Oracle PeopleSoft CVE-2026-35273: ShinyHunters Zero-Day
- Critical 8 advisories: github.com/kubev2v/migration-planner, github.com/kubev2v/migration-planner, baileys, github.com/dhax/go-base, github.com/kubev2v/assisted-migration-a…, github.com/kubev2v/assisted-migration-a…, github.com/kubev2v/migration-planner, github.com/kubev2v/migration-planner
Tuesday, June 9, 2026
- KEV CVE-2026-7473 Arista Extensible Operating System
- KEV CVE-2026-20245 Cisco Catalyst SD-WAN Manager
- KEV CVE-2026-11645 Google Chromium V8
- Critical 3 advisories: shell-quote, pheditor/pheditor, phoenix_storybook
Monday, June 8, 2026
- KEV CVE-2026-50751 Check Point Security Gateway
- KEV CVE-2026-42271 BerriAI LiteLLM
- Critical 4 advisories: cordova-plugin-inappbrowser, github.com/julien040/anyquery/plugins/c…, phpoffice/phpspreadsheet, github.com/juev/nebula-mesh
Friday, June 5, 2026
- KEV CVE-2026-28318 SolarWinds Serv-U
- Critical 5 advisories: dbgate-api, ait-core, dbgate, shopper/framework, dbgate-serve
Thursday, June 4, 2026
- Check exposure Progress LoadMaster CVE-2026-8037: Exploited Pre-Auth RCE
- Critical 4 advisories: @cap-js/openapi, WWBN/AVideo, org.apache.fory:fory-core, stata-mcp
Wednesday, June 3, 2026
- Act now Kestra CVE-2026-49869: Exploited Unauthenticated RCE
- KEV CVE-2026-45247 Mirasvit Mirasvit Full Page Cache Warmer
- Critical 6 advisories: org.apache.mina:mina-core, mlflow, jupyter_enterprise_gateway, jupyter_enterprise_gateway, jupyter_enterprise_gateway, mistral
Tuesday, June 2, 2026
- KEV CVE-2025-48595 Android Framework
- KEV CVE-2022-0492 Linux Kernel
- Critical 1 advisory: openmed
Monday, June 1, 2026
- KEV CVE-2024-21182 Oracle WebLogic Server
- Critical 4 advisories: apache-airflow, praisonai-platform, vitest, @vitest/browser