TeamCity is a Java-based build management and continuous integration tool from JetBrains.

JetBrains TeamCity

In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol

CVE-2026-63077

Linux

Linux Kernel

Windows

Windows Cumulative Update

Linux is a family of open-source Unix-like operating systems based on the Linux kernel.

Rocky Linux is a Linux distribution intended to be a downstream, complete binary-compatible release using the Red Hat Enterprise Linux operating system source code. The project's aim is to provide a community-supported, production-grade enterprise operating system.

Rocky Linux

Debian GNU/Linux is a Linux distribution composed of free and open-source software.

Linux Debian

Ubuntu is a Linux distribution based on Debian, mostly composed of free and open-source software. Ubuntu is officially released in three editions: Desktop, Server, and Core for internet of things devices and robots. All the editions can run on the computer alone or in a virtual machine.

Linux Ubuntu

Red Hat Enterprise Linux is a Linux distribution developed by Red Hat for the commercial market.

Linux Red Hat

The Amazon Linux is a supported and maintained Linux image provided by Amazon Web Services for use on Amazon Elastic Compute Cloud (Amazon EC2).

Amazon Linux

Oracle Linux is a Linux distribution packaged and freely distributed by Oracle, available partially under the GNU General Public License since late 2006. It is compiled from Red Hat Enterprise Linux source code, replacing Red Hat branding with Oracle's.

Linux Oracle

Echo is a secure, minimal Linux OS built vulnerability-free. It is fully compatible across environments and continuously patched - making it a clean, dependable base layer for modern applications. Echo is used by organizations focused on security and reliability, including those with compliance or FIPS requirements.

Echo

In the Linux kernel, the following vulnerability has been resolved:

xfs: resample the data fork mapping after cycling ILOCK

xfs_reflink_fill_{cow_hole,delalloc} are both presented with an inode,
a data fork mapping, and a cow fork mapping.  Unfortunately, these two
helpers cycle the ILOCK to grab a transaction, which means that the
mappings are stale as soon as we reacquire the ILOCK.  Currently we
refresh the cow fork mapping by re-calling xfs_find_trim_cow_extent, but
we don't refresh the data fork mapping beforehand, which means that the
xfs_bmap_trim_cow in that function queries the refcount btree about the
wrong physical blocks and returns an inaccurate value in *shared.

If *shared is now false, the directio write proceeds with a stale data
fork mapping.  Fix this by querying the data fork mapping if the
sequence counter changes across the ILOCK cycle.

CVE-2026-64600

Debian

Debian Security Tracker

Red Hat

Red Hat Errata

Rocky

Rocky Linux Product Errata

Ubuntu

Ubuntu Security Tracker

Class based , object oriented programming language. Designed to have less dependencies as possible. The syntex of Java is smilier to C and C++. Commonly used for client-server applications. Java files are compiled by JVM (Java Virtual Machine)

Java

A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson's stock default configuration — no AutoType enablement required, no classpath gadget required.

CVE-2026-16723

Maven

GitHub Advisory Database

WordPress is a content management system paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system, referred to within WordPress as Themes.

WordPress

MinimOS is a minimalist operating system designed for simplicity and efficiency. It aims to provide only essential functionalities, making it lightweight and suitable for resource-constrained environments. MinimOS is often used in embedded systems or as a base for custom operating system development.

MinimOS

WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion issue which, combined with the author__not_in WP_Query SQL Injection (CVE-2026-60137), could allow an attacker to perform SQL Injection and achieve Remote Code Execution.

CVE-2026-63030

Chainguard

Minimus

NixOS

Wolfi

WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter of WP_Query, which could allow SQL Injection when a plugin or theme passes untrusted input to the parameter.

CVE ID	Gravidade	Pontuação	Tecnologias	Nome do componente	Exploração do CISA KEV	Tem correção	Data de publicação
CVE-2026-63077	CRITICAL	9.8	JetBrains TeamCity	cpe:2.3:a:jetbrains:teamcity	Não	Sim	Jul 27, 2026
CVE-2026-64600	HIGH	7.8	Linux Kernel	perf6.12-debuginfo	Não	Sim	Jul 23, 2026
CVE-2026-16723	CRITICAL	9	Java	com.alibaba:fastjson	Não	Não	Jul 19, 2026
CVE-2026-63030	CRITICAL	9.8	WordPress	wordpress	Sim	Sim	Jul 17, 2026
CVE-2026-60137	MEDIUM	5.9	WordPress	wordpress-7	Sim	Sim	Jul 17, 2026

CVE ID	Gravidade	Pontuação	Tecnologias	Nome do componente	Exploração do CISA KEV	Tem correção	Data de publicação
CVE-2026-6251	NONE	N/A	WordPress	chaty-pro	Não	Sim	Jul 28, 2026
CVE-2026-16811	NONE	N/A	WordPress	woolentor-addons	Não	Sim	Jul 28, 2026
CVE-2026-16797	NONE	N/A	WordPress	woolentor-addons	Não	Sim	Jul 28, 2026
CVE-2026-16587	NONE	N/A	WordPress	advanced-form-integration	Não	Sim	Jul 28, 2026
CVE-2026-16585	NONE	N/A	WordPress	bp-better-messages	Não	Sim	Jul 28, 2026

Banco de dados de vulnerabilidades Wiz

Explore por tecnologia

Filtros populares

Alto perfil

Último

Vulnerabilidades em números

O bom, o mau e o vulnerável

Recursos adicionais da Wiz

PEACH

Pronto para ver a Wiz em ação?