vFeed Threat Intelligence Newsletter — July 2026
Welcome to the vFeed July 2026 edition of our Cybersecurity and Vulnerability Newsletter.
Key Highlights During the Month
- CVE Volume Surges Past 9,600: July 2026 recorded 9,622 new CVEs — up ~9% from June 2026’s ~8,830, making it one of the highest-volume months on record for CVE disclosures. At ~310 CVEs per day, the attack surface continues to expand at a relentless pace. Year-to-date, vFeed has correlated 65,014 vulnerabilities, tracking ~24% ahead of the same period in 2025 (52,430).
- Critical Vulnerabilities at 1,205: Critical vulnerabilities (CVSS 9.0+) hit 1,205 in July — a double-digit month-over-month increase driven by Oracle’s July Critical Patch Update, Microsoft Patch Tuesday, and a wave of AI/MCP-server disclosures. The month recorded 62 perfect 10.0 CVSS scores, spanning Oracle Fusion Middleware, Adobe ColdFusion, Microsoft Exchange/Azure, Apache Traffic Server, and multiple LLM-agent frameworks (PraisonAI, Langroid, Ruflo, Crawl4AI).
- Oracle July CPU Delivers Ten 10.0s in a Single Day: On July 21, Oracle disclosed nine chained-scope CVSS 10.0 vulnerabilities across Fusion Middleware — including Data Integrator (CVE-2026-47056), Coherence (CVE-2026-60217), Access Manager (CVE-2026-60358), WebCenter Content (CVE-2026-60644), and WebLogic Proxy (CVE-2026-60365) — all unauthenticated, network-reachable, and yielding full product takeover.
- AI/LLM Agent Frameworks Emerge as a Critical Attack Surface: July saw unprecedented RCE disclosures in AI tooling: CVE-2026-54769 (Langroid sandbox escape), CVE-2026-61447 (PraisonAI CodeAgent), CVE-2026-59726 (Ruflo MCP bridge), CVE-2026-57572 (Crawl4AI Chromium arg injection), and CVE-2026-46339 (9Router MCP unauth exec) — all rated 10.0. MCP servers, prompt-injection-driven code eval, and default-unauthenticated agent orchestrators are now a distinct threat category.
- Actively Exploited & Zero-Click Threats: CVE-2026-16812 (VeloCloud VCO on-prem, 10.0) is confirmed actively exploited in the wild. CVE-2026-54433 (Roundcube stored XSS, 10.0) is zero-click on message preview. WordPress core SQLi (CVE-2026-60137 / CVE-2026-63030) sits at the top of EPSS with 0.984 percentile — expect mass scanning within days.
Vulnerability Trends in July
| Metric | April ’26 | May ’26 | June ’26 | July ’26 | MoM |
|---|---|---|---|---|---|
| New CVEs | 8,410 | 8,975 | 8,830 | 9,622 | ↑ 9.0% |
| Modified CVEs | 18,900 | 20,240 | 21,110 | 21,985 | ↑ 4.1% |
| Critical (CVSS 9.0+) | 950 | 1,020 | 1,090 | 1,205 | ↑ 10.6% |
| Perfect 10.0 scores | 38 | 44 | 49 | 62 | ↑ 26.5% |
| CVSS4 scores recorded | 1,120 | 1,280 | 1,410 | 1,585 | ↑ 12.4% |
| EPSS > 50th percentile | 2,640 | 2,810 | 2,905 | 3,180 | ↑ 9.5% |
The July signal is unambiguous: not only is volume climbing, but severity density is climbing faster than volume. Perfect 10.0 scores jumped 26.5% MoM — driven almost single-handedly by Oracle’s July CPU and the AI-agent-framework RCE cluster. Critical share (12.5% of all CVEs) is the highest in six months. EPSS coverage growth (+9.5%) suggests that exploitability signals are catching up faster with disclosures, giving defenders slightly better prioritization telemetry — but also compressing the patch window.
Vulnerability Landscape
vFeed’s threat intelligence dataset now tracks over 74,500 known exploits reported from sources including GitHub, Metasploit, ExploitDB, and PacketStorm. In July, 1,178 unique CVEs out of 9,622 (~12.2%) were published with one or more exploit proof-of-concepts available.
The top exploit sources for July:
| Exploit Source | Unique CVEs Covered |
|---|---|
| ExploitDB | 412 |
| GitHub PoC | 706 |
| Metasploit | 47 |
| Talos | 23 |
| Saint | 11 |
GitHub PoC leads by a wide margin — reflecting the continued shift of vulnerability research into open repositories, often published within 24–72 hours of NVD publication. Of particular concern this month: PoCs surfaced within days for CVE-2026-60137 (WordPress author__not_in SQLi, EPSS 99.55%), CVE-2026-16232 (Check Point SmartConsole auth bypass, actively exploited), and CVE-2026-59800 (9Router unauth RCE, confirmed exploited by Shadowserver on 2026-07-04).
Platform Impacts
Microsoft — 168 CVEs
| Severity | Count |
|---|---|
| Critical | 24 |
| High | 96 |
| Medium | 44 |
| Low | 4 |
Microsoft’s July 2026 Patch Tuesday (July 8) delivered fixes across Windows, Office, SharePoint, Azure, SQL Server, and .NET, with a particularly heavy skew toward cloud identity and Azure access control.
- CVE-2026-56191 (10.0) — Microsoft Exchange Online improper authentication, network tampering.
- CVE-2026-58275 (10.0) — Azure DNS missing authorization, privilege escalation.
- CVE-2026-62825 (10.0) — Azure Key Vault improper authentication, privilege escalation.
- CVE-2026-56163 (10.0) — Azure Kubernetes Service missing authentication, priv-esc.
- CVE-2026-58630 (10.0) — Azure App Service improper access control.
- CVE-2026-66803 (10.0) — Azure Cosmos DB improper access control, RCE.
- CVE-2026-50522 / 58644 (9.8) — SharePoint deserialization RCE, EPSS 0.99+.
- CVE-2026-50518 (9.8) — Windows DHCP Server heap-based buffer overflow, unauthenticated network RCE.
- CVE-2026-50330 (9.8) — RDP client heap overflow, network priv-esc.
- CVE-2026-57983 (10.0) — Edge (Chromium) improper authorization, security-feature bypass.
Linux Kernel
vFeed tracked 1,842 Linux kernel CVEs in July. Several stood out this month:
| Name | CVE | Subsystem | Type | Key Risk |
|---|---|---|---|---|
| 9p oldfid UAF | CVE-2026-63795 | 9p filesystem | Use-after-free | Refcount underflow, LPE on 9p mounts |
| KVM shadow-paging role UAF | CVE-2026-53359 | KVM x86 MMU | Use-after-free | Guest-triggered host memory corruption |
The 9p client walk fix reflects a recurring pattern in July’s kernel disclosures: error-path reference counting on aliased objects continues to dominate the kernel CVE queue. The KVM MMU role-mismatch UAF is particularly concerning for multi-tenant virtualization hosts, extending the earlier 0cb2af2ea66ad GFN-mismatch fix into the role-comparison path.
WordPress — Authentication Bypass Dominates
263 CVEs in July, with 89 carrying known exploits — an exploit-to-disclosure ratio of ~33.8%. Critical highlights:
- CVE-2026-60137 (9.1, EPSS 99.55%) — WordPress core
author__not_inSQL Injection inWP_Query. Affects 6.8.x <6.8.6, 6.9.x <6.9.5, 7.0.x <7.0.2. Any plugin or theme passing untrusted input to this parameter is exploitable. - CVE-2026-63030 (7.5, EPSS 99.91%) — WordPress REST API batch endpoint route confusion, chainable with CVE-2026-60137 to escalate SQLi to RCE. Top EPSS entry of the entire month.
- CVE-2026-57624 (10.0) — Blocksy Companion Pro <= 2.1.46 unauthenticated RCE.
- CVE-2026-57719 (10.0) — CodeRevolution Aimogen Pro <= 2.8.3 arbitrary file upload.
- CVE-2026-57811 (10.0) — Realtyna Organic IDX plugin <= 5.2.0 remote code inclusion.
- CVE-2026-59555 (10.0) — Participants Database <= 2.7.8.3 unauthenticated arbitrary file deletion.
- CVE-2026-9834 (7.2) — WP Database Backup <=7.11 authenticated OS command injection via
wp_db_exclude_table. - CVE-2026-9282 (7.5) — W3 Total Cache <=2.9.4 directory traversal.
Cloud Vulnerabilities and Attack Chains
vFeed tracked 214 cloud-specific CVEs in July across Azure, AWS, GCP, Kubernetes, and container technologies. Notable disclosures:
- CVE-2026-58275 (10.0) — Azure DNS missing authorization enabling network privilege escalation.
- CVE-2026-62825 (10.0) — Azure Key Vault improper authentication — direct route to secret exfiltration.
- CVE-2026-56163 (10.0) — AKS missing authentication on a critical function.
- CVE-2026-58630 (10.0) — Azure App Service improper access control.
- CVE-2026-66803 (10.0) — Azure Cosmos DB improper access control leading to network RCE.
- CVE-2026-57106 (10.0) — Data Quality SSRF, privilege escalation.
- CVE-2026-16812 (10.0, actively exploited) — VeloCloud Orchestrator on-prem exposes intended-internal functionality to remote attackers. Hosted/dedicated already patched.
- CVE-2026-16498 (10.0) — terraform-mcp-server cross-tenant credential reuse in streamable-HTTP stateless mode.
- CVE-2026-16326 (10.0) — consul-mcp-server session isolation bug: one client’s Consul token reusable by others.
Attack chain pattern: July’s cloud disclosures share a consistent DNA — missing or improper authorization on critical management-plane functions. When combined with the terraform-mcp-server and consul-mcp-server cross-tenant credential leaks, defenders should assume that any exposed cloud-management MCP bridge, orchestrator, or admin API is a first-class attack surface, on par with legacy on-prem admin panels.
Top Weaknesses
Overall — All July CVEs
| CWE | Weakness | Count | % of Total |
|---|---|---|---|
| CWE-79 | Cross-site Scripting (XSS) | 1,041 | 10.8% |
| CWE-89 | SQL Injection | 612 | 6.4% |
| CWE-22 | Path Traversal | 486 | 5.1% |
| CWE-352 | Cross-Site Request Forgery | 428 | 4.4% |
| CWE-77/78 | OS Command Injection | 407 | 4.2% |
| CWE-434 | Unrestricted File Upload | 318 | 3.3% |
| CWE-287 | Improper Authentication | 296 | 3.1% |
| CWE-502 | Deserialization of Untrusted Data | 251 | 2.6% |
| CWE-416 | Use After Free | 240 | 2.5% |
| CWE-284 | Improper Access Control | 231 | 2.4% |
Critical Only (CVSS 9.0+)
| CWE | Weakness | Critical Count |
|---|---|---|
| CWE-502 | Deserialization of Untrusted Data | 138 |
| CWE-78 | OS Command Injection | 122 |
| CWE-94 | Code Injection | 111 |
| CWE-287 | Improper Authentication | 96 |
| CWE-284 | Improper Access Control | 88 |
| CWE-434 | Unrestricted File Upload | 74 |
| CWE-306 | Missing Authentication for Critical Function | 63 |
| CWE-918 | Server-Side Request Forgery (SSRF) | 52 |
| CWE-89 | SQL Injection | 47 |
| CWE-863 | Incorrect Authorization | 41 |
The Critical-severity CWE distribution tells a sharper story than the overall count: deserialization, command injection, and code injection now account for over half of July’s Critical CVEs. This is directly attributable to the AI-agent RCE wave (code injection via eval(), prompt-injection-driven command execution) and Oracle Fusion Middleware’s Java deserialization exposure. Missing authentication (CWE-306) climbing into the top 7 is the hallmark of the MCP-server and cloud-management-plane disclosures.
Hardware / IoT / Firmware
vFeed tracked 287 hardware, IoT, and firmware CVEs in July. Standout entries:
- CVE-2026-50746 (10.0) — Ubiquiti UniFi Connect Application improper access control → command injection on host.
- CVE-2026-50748 (9.9) — UniFi Access Application improper input validation → command injection.
- CVE-2026-54402 (8.8) — UniFi OS improper input validation → command injection.
- CVE-2026-13768 (10.0) — Gardyn devices expose privileged
iothubownerkey, enabling cross-device pivot via Azure IoT Hub. - CVE-2026-42933 (10.0) — Pronetiqs IntraVUE <=3.2.1a14 unintended proxy/intermediary — bypasses OT segmentation.
- CVE-2026-8985 / 8986 / 8987 (Autel Maxi Charger Single, firmware <=V1.03.51) — unauthenticated OS command injection over TCP/9002 and via OCPP
GetDiagnostics. - CVE-2026-58452 / 58453 — JAIOTlink C492A-W6 IP cameras: hardcoded admin/empty-password + command injection via
SetMAC. - CVE-2026-58457 — Shenzhen Aitemi M300 Wi-Fi Repeater unauthenticated command injection via
smacfilter_conf. - CVE-2026-11405 (9.8) — Backdoor authentication in
/bin/httpd: plaintextstrcmpagainstsys.rzadmin.passwordgrants role=2. - CVE-2026-44098 (8.6) — OCPP-backend command injection on charging-station firmware.
The IoT picture in July is dominated by embedded HTTP servers with command-injection sinks, weak or hardcoded credentials, and OCPP-adjacent EV-charging attack surface. The Autel and OCPP disclosures in particular hint at a growing attacker interest in EV charging infrastructure as it becomes an internet-facing OT category.
Critical Exploitable Vulnerabilities — July 2026
Pay attention to these critical vulnerabilities with known exploits and high EPSS scores.
| CVE | Target | CVSS | EPSS %ile | Exploit | CWE |
|---|---|---|---|---|---|
| CVE-2026-63030 | WordPress core REST API batch route confusion | 7.5 | 99.91% | GitHub PoC | CWE-89 (chained) |
| CVE-2026-60137 | WordPress core author__not_in SQLi | 9.1 | 99.56% | GitHub PoC | CWE-89 |
| CVE-2026-15409 | SonicWall SMA1000 Work Place SSRF | 10.0 | 99.54% | GitHub PoC | CWE-918 |
| CVE-2026-15410 | SonicWall SMA1000 AMC code injection | 7.2 | 99.49% | GitHub PoC | CWE-94 |
| CVE-2026-56291 | Joomla Balbooa Forms <2.4.1 unauth file upload | 9.8 | 99.48% | ExploitDB | CWE-434 |
| CVE-2026-50522 | Microsoft SharePoint deserialization RCE | 9.8 | 99.47% | GitHub PoC | CWE-502 |
| CVE-2026-16232 | Check Point SmartConsole auth bypass (actively exploited) | 9.1 | 99.35% | In-the-wild | CWE-287 |
| CVE-2026-16812 | VeloCloud VCO on-prem (actively exploited) | 10.0 | — | In-the-wild | CWE-284 |
| CVE-2026-6516 | ManageEngine ADAudit Plus unauth agent RCE | 10.0 | 90.95% | GitHub PoC | CWE-306 |
| CVE-2026-59800 | 9Router unauth sudo/sh RCE (exploited 2026-07-04) | 9.8 | — | Shadowserver-observed | CWE-78 |
| CVE-2026-27771 | Gitea Composer package permission bypass | 8.2 | 98.59% | GitHub PoC | CWE-284 |
| CVE-2026-20896 | Gitea default trusted proxies=* impersonation | 9.8 | 98.12% | GitHub PoC | CWE-287 |
| CVE-2026-48316 | Adobe ColdFusion improper input validation → RCE | 10.0 | 73.40% | ExploitDB | CWE-20 |
| CVE-2026-50518 | Windows DHCP Server heap overflow | 9.8 | 95.47% | GitHub PoC | CWE-122 |
Actionable Recommendations
1. Patch WordPress core immediately — treat as emergency. CVE-2026-60137 and CVE-2026-63030 combine to yield unauthenticated SQLi-to-RCE and sit at the very top of the EPSS distribution (99.9%+). Upgrade to 6.8.6 / 6.9.5 / 7.0.2 on any managed multisite fleet within 72 hours. Audit plugins and themes for callers passing untrusted input to WP_Query‘s author__not_in.
2. Apply Oracle July CPU across Fusion Middleware within a 7-day window. Nine perfect-10.0 unauthenticated-network CVEs (Data Integrator, Coherence, Access Manager, Unified Directory, WebCenter Content, WebLogic Proxy Plug-in, Service Delivery Platform ×2, Platform Security for Java) all carry scope-change impact. Even internal-facing Oracle stacks should be considered exposed; enumerate WebLogic and Coherence listeners first.
3. Emergency response for actively exploited CVEs. CVE-2026-16812 (VeloCloud VCO on-prem) and CVE-2026-16232 (Check Point SmartConsole) both have confirmed in-the-wild activity. Restrict management-plane access to VPN or bastion, apply vendor patches, and hunt for lateral-movement artifacts on any orchestrator or Security Management Server that was internet-reachable during July.
4. Inventory and harden every MCP server, LLM-agent, and AI-orchestrator deployment. July’s AI-tooling RCE cluster — Langroid (CVE-2026-54769), PraisonAI (CVE-2026-61447), Ruflo (CVE-2026-59726), Crawl4AI (CVE-2026-57572), 9Router (CVE-2026-46339 / 59800 / 59801), LiteLLM (CVE-2026-30623), terraform-mcp-server (CVE-2026-16498), consul-mcp-server (CVE-2026-16326) — establishes MCP bridges and unauthenticated agent APIs as a first-class exposure. Require authentication on every MCP endpoint, network-segment agent containers, rotate provider API keys, and disable nodeIntegration-style desktop plugin loaders.
5. Prioritize zero-click and identity-forging vulnerabilities. CVE-2026-54433 (Roundcube zero-click stored XSS on message preview), CVE-2026-45336 (HireFlow hardcoded Flask secret_key), CVE-2026-56451 (Siemens Opcenter X JWT alg confusion), CVE-2026-62422 (JetBrains YouTrack auth bypass via direct DB access), and CVE-2026-54782 (CoreWCF SAML signature bypass) all provide identity-forgery paths that survive perimeter controls. Patch Roundcube to 1.6.17 / 1.7.2 first — it needs no user interaction beyond opening a mailbox.
vFeed threat intelligence data feeds continue to embrace NIST NVD 2.0 schema, CISA schemas, CVSS4, and EPSS4 scoring. Our correlated database tracks over 930K affected packages and 74,500 known exploits — providing the context defenders need to prioritize what matters.
Click here to schedule your demo with vFeed Threat Intel today!