| CVE-2026-44105: Phoenix Contact: The credentials for the local user "user-app" may be exposed in log files, potentially enabling a low-privileged local… |  6.6 Medium | 5.8 Medium | | | N/A | Jul 30, 2026 |
| CVE-2026-44094: Phoenix Contact: An unauthenticated remote attacker can enforce the system to fall back to a firmware partition with an insecure… |  8.6 High | 8.3 High | | | N/A | Jul 30, 2026 |
| CVE-2026-67192: Xlight Xlight FTP Server: Xlight FTP Server before 3.9.5 contains a pre-authentication stack buffer overflow vulnerability that allows… | 8.1 High |  9.2 Critical | | | N/A | Jul 29, 2026 |
| CVE-2026-67191: Xlight Xlight FTP Server: Xlight FTP Server before 3.9.5 contains a pre-authentication heap buffer overflow vulnerability that allows remote… | 9.8 Critical | 9.3 Critical | | | N/A | Jul 29, 2026 |
| CVE-2026-54635: nessshon tonapi: pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain | 7.5 High | N/A | | | N/A | Jul 28, 2026 |
| CVE-2026-14837: Improper Verification of Cryptographic Signature | 7.8 High | 8.5 High | | | 0% | Jul 27, 2026 |
| CVE-2026-66035: Heap-based Buffer Overflow | 7.5 High | 7.7 High | | | 0% | Jul 24, 2026 |
| CVE-2026-66034: Out-of-bounds Read | 7.5 High | 7.7 High | | | 0% | Jul 24, 2026 |
| CVE-2026-66033: Integer Underflow (Wrap or Wraparound) | 7.5 High | 8.7 High | | | 0% | Jul 24, 2026 |
| CVE-2026-66032: Double Free | 8.8 High | 8.7 High | | | 0% | Jul 24, 2026 |
| CVE-2026-65698: Improper Limitation of a Pathname to a Restricted Directory | 5.3 Medium | 6.0 Medium | | | 0% | Jul 23, 2026 |
| CVE-2026-65607: Improper Limitation of a Pathname to a Restricted Directory | 6.5 Medium | 7.1 High | | | 0% | Jul 23, 2026 |
| CVE-2026-63226: Improper Restriction of Communication Channel to Intended Endpoints | 5.8 Medium | 6.9 Medium | | | 0% | Jul 23, 2026 |
| CVE-2026-57599: Improper Privilege Management | 6.6 Medium | N/A | | | 0% | Jul 22, 2026 |
| CVE-2026-47394: Improper Limitation of a Pathname to a Restricted Directory | N/A | 8.7 High | | | 0% | Jul 21, 2026 |
| CVE-2026-59851: Incorrect Authorization | 8.8 High | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59850: Use After Free | 4.3 Medium | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59849: Loop with Unreachable Exit Condition |  3.1 Low | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59848: Allocation of Resources Without Limits or Throttling | 5.3 Medium | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59847: Missing Ability to Patch ROM Code | 5.9 Medium | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59846: Improper Neutralization of Special Elements used in a Command | 3.9 Low | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59845: Detection of Error Condition Without Action | 5.3 Medium | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59844: Memory Allocation with Excessive Size Value | 6.5 Medium | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59843: Uncontrolled Resource Consumption | 6.5 Medium | N/A | | | 0% | Jul 21, 2026 |
| CVE-2026-59842: Out-of-bounds Read | 3.7 Low | N/A | | | 0% | Jul 21, 2026 |
