Skip to content

CyberSecBulletin

CVEs published on June 14, 2026

9 vulnerabilities, ordered with the most urgent first.

8.5 High severity
LiteSpeed cPanel Plugin UNIX Symbolic Link (Symlink) Following Exploited
CVE-2026-54420Jun 14, 2026LiteSpeed TechnologiesEPSS 1.44%
9.8 Critical severity
GD: External Control of File Name or Path
CVE-2026-11526Jun 14, 2026RurbanEPSS 1.35%
8.6 High severity
Config::IniFiles: External Control of File Name or Path
CVE-2026-11527Jun 14, 2026SHLOMIFEPSS 1.07%
8.2 High severity
MQTT-C: Out-of-bounds Read
CVE-2026-54412Jun 14, 2026LiamBindle
8.8 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2026-12186Jun 14, 2026GL.iNetEPSS 1.97%
8.8 High severity
GL-MT3000: Improper Neutralization of Special Elements in Output Used by a Downstream Component
CVE-2026-12187Jun 14, 2026GL.iNetEPSS 1.94%
8.6 High severity
nanoMODBUS: Off-by-one Error
CVE-2026-54410Jun 14, 2026Debevv
8.2 High severity
iso14229: Out-of-bounds Read
CVE-2026-54413Jun 14, 2026Driftregion
7.8 High severity
A vulnerability was found in Comma AI Openpilot 0.11.
CVE-2026-12191Jun 14, 2026Comma AI