2,060 New CVEs and 4 Actively Exploited Flaws (June 15-21, 2026)

This weekly CVE digest summarizes 2,060 vulnerabilities disclosed in one week (June 15–21, 2026), including 358 critical and 861 high-severity entries, with four flaws actively exploited and added to CISA’s Known Exploited Vulnerabilities catalog; it highlights major affected vendors (notably Oracle and open-source ecosystems), notes proof-of-concept availability for many advisories, and recommends prioritizing the exploited flaws and internet-facing assets while applying vendor patches and mitigations.