Embedded System Vulnerabilities
A focused list of vulnerabilities relevant to embedded and IoT devices.
| CVE ID | Description | Severity | Published | Type |
|---|---|---|---|---|
| CVE-2026-56381 | Craft CMS from version 5.0.0-RC1 contains a stored cross-site scripting vulnerability in the User Permissions page wher… | Medium (4.8) | 2026-06-21 | Environment Specific |
| CVE-2026-56378 | ImageMagick before 7.1.2-15 (and 6.x before 6.9.13-40) contains a heap out-of-bounds read in the PCD coder's DecodeImag… | Low (3.7) | 2026-06-21 | Environment Specific |
| CVE-2026-56367 | ImageMagick before 7.1.2-15 and 6.9.x before 6.9.13-40 contains an integer overflow in the PSB (PSD v2) RLE decoding pa… | Low (3.7) | 2026-06-21 | Environment Specific |
| CVE-2026-56316 | Cap-go before 12.128.2 contains an information disclosure vulnerability in the OPTIONS /build/upload/:jobId/* endpoint … | Medium (5.3) | 2026-06-21 | Environment Specific |
| CVE-2026-56299 | Capgo before 12.128.2 contains an authentication bypass vulnerability in the /build/upload/:jobId/* endpoint that allow… | Medium (5.3) | 2026-06-21 | Environment Specific |