CVE-2026 records published in August 2026
Page 10 of 13: records 9,001 to 10,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.
| CVE | Summary | CVSS | EPSS | Published | Signals |
|---|---|---|---|---|---|
| CVE-2026-62743 | Microsoft Windows win32k information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62742 | Microsoft Windows DHCP server information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-62741 | Microsoft Windows HTTP.sys elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62740 | Microsoft Windows Imaging component information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62739 | Microsoft Windows HTTP.sys elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62738 | Microsoft Windows Management Instrumentation information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62737 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Exploit codeFix |
| CVE-2026-62736 | Microsoft Windows DHCP client elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62735 | Microsoft Windows HTTP.sys elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Exploit codeFix |
| CVE-2026-62734 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-62733 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62732 | Microsoft Windows Telephony service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62730 | Microsoft Windows Wired AutoConfig service information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62729 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-62728 | Microsoft Windows Common Log File System driver elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-62726 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62725 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62724 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62723 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62722 | Microsoft Brokering File System elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62721 | Microsoft Windows User-Mode Power Service (UMPS) elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62720 | Microsoft Windows DHCP server information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-62719 | Microsoft Windows Message Queuing elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62718 | Microsoft Windows DHCP server information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-62717 | Microsoft Windows Message Queuing elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62716 | Microsoft Windows DHCP server information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-62715 | Microsoft Windows DHCP server information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-62714 | Microsoft Windows DHCP server information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-62713 | Microsoft Windows Cloud Files Mini Filter driver elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62712 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62711 | Microsoft Windows Win32k elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62710 | Microsoft Windows Device Association service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62709 | Microsoft Windows GDI+ information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62708 | Microsoft Windows Kernel elevation of privilege | 6.4CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62707 | Microsoft Windows Modern Device Management (MDM) elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62705 | Microsoft Brokering File System elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-62703 | Microsoft Windows DWM Core library information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62702 | Microsoft Windows Graphics Kernel denial of service | 6.8CNA v3.1 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-62701 | Microsoft Windows Telephony service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62700 | Microsoft Windows NTFS elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62699 | Microsoft Windows Universal Disk Format File System Driver (UDFS) remote code execution | 6.8CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-62698 | Microsoft Digest Authentication elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62696 | Microsoft Windows Program Compatibility Assistant service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62695 | Microsoft Windows Storage elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62693 | Microsoft Windows MIDI service module elevation of privileges | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-62692 | Microsoft Windows Remote Desktop services elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-62690 | Microsoft Windows Push Notifications elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-62688 | Microsoft Windows MIDI service module elevation of privileges | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61939 | Microsoft Windows winlogon elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61938 | Microsoft Windows Installer elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61937 | Microsoft Windows HTTP.sys elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61936 | Microsoft Windows Defender Firewall service security feature bypass | 5.5CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61934 | Microsoft Windows Bind Filter driver elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61933 | Microsoft Windows DWM Core library information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-61932 | Microsoft Windows DWM Core library elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61930 | Microsoft Windows Kernel elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61929 | Microsoft Windows Kernel elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61928 | Microsoft Windows Hello tampering | 5.5CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-61927 | Microsoft Windows Bind Filter driver elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-61926 | Microsoft Windows USB driver elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61925 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61924 | Microsoft Windows Remote Desktop client information disclosure | 6.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-61923 | Microsoft Windows Display Enhancement service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61921 | Microsoft Windows Remote Desktop client information disclosure | 6.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-61920 | Microsoft Windows DNS server remote code execution | 6.6CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-61918 | Microsoft Windows Remote Desktop client information disclosure | 6.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-61368 | Microsoft Windows Hyper-V information disclosure | 5.0CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-61367 | Microsoft Windows Remote Desktop services elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61366 | Microsoft Windows Network Connection Broker elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61365 | Microsoft Windows Remote Desktop services elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61364 | Microsoft Windows Remote Desktop services elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61363 | Microsoft Windows remote Desktop client remote code execution | 7.5CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-61361 | Microsoft Windows DHCP client remote code execution | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61360 | Microsoft Windows GDI information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-61359 | Microsoft Windows Storage elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61358 | Microsoft Windows Accessibility Infrastructure (ATBroker.exe) elevation of privilege | 7.8CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-61357 | Microsoft Windows application Information services elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61356 | Microsoft Windows Remote Desktop services elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61355 | Microsoft Windows Sensor Data service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61353 | Microsoft Windows Telephony service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61352 | Microsoft Windows remote Desktop client remote code execution | 7.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-61350 | Microsoft Windows NTFS information disclosure | 4.6CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-61349 | Microsoft Windows Work Folder service elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61348 | Microsoft Windows Ancillary function driver for WinSock elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61347 | Microsoft Windows Event Logging service information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-61346 | Microsoft Windows Graphics Kernel elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-61345 | Microsoft Remote Registry service denial of service | 6.5CNA v3.1 | 1.1% | 2026-08-11 | Fix |
| CVE-2026-59701 | Siemens Simcenter Femap out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-59700 | Siemens Simcenter Femap out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-59693 | Siemens Desigo DXR2 improper check for exceptional conditions | 5.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-59138 | Microsoft Remote Registry service denial of service | 6.5CNA v3.1 | 1.1% | 2026-08-11 | Fix |
| CVE-2026-59137 | Microsoft Windows Event Logging service information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-59136 | Microsoft COM for Windows information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-59135 | Microsoft Windows Search component information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-59134 | Microsoft Windows remote Desktop client remote code execution | 7.5CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-59133 | Microsoft High Performance Computing (HPC) Pack elevation of privilege | 8.8CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-59132 | Microsoft Windows TCP/IP denial of service | 7.5CNA v3.1 | 1.2% | 2026-08-11 | Fix |
| CVE-2026-59131 | Microsoft Windows AMD Zen information disclosure | 5.6CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-59130 | Microsoft Windows AMD Zen information disclosure | 5.6CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-59128 | Microsoft Windows Encrypting File System (EFS) information disclosure | 5.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-59127 | Microsoft Windows Installer elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-59126 | Microsoft Windows Event Logging service elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-59125 | Microsoft Windows Virtual Hard Disk (VHD) Miniport driver elevation of privilege Vulernability | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-59124 | Microsoft High Performance Computing (HPC) Pack remote code execution | 9.8CNA v3.1 | 1.5% | 2026-08-11 | Fix |
| CVE-2026-59122 | Microsoft Windows Telephony service elevation of privilege | 7.0CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-59119 | Microsoft PowerShell elevation of privilege | 7.3CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-59113 | Microsoft Visual Studio Code remote code execution | 8.8CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-59086 | Siemens Simcenter Femap stack-based buffer overflow | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-58651 | Microsoft Word remote code execution | 7.8CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-58650 | Microsoft Visual Studio Code security feature bypass | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58641 | NET elevation of privilege | 7.8CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-58639 | Microsoft SharePoint server spoofing | 6.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-58612 | Microsoft PowerShell information disclosure | 7.4CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-58248 | XML external entity injection in SAP BusinessObjects Business Intelligence | 6.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-58247 | Memory corruption vulnerability in SAP ABAP Platform | 5.3CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-58245 | Hard-coded credentials in SAP Advanced Planning and Optimization (Model Mix Planning) | 3.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58244 | Missing authorization Check in SAP Manufacturing Integration and Intelligence (MII) | 4.3CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58243 | Privilege escalation vulnerability in SAP ABAP Developer Tools | 8.8CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-58241 | Missing authorization Check in SAP NetWeaver and ABAP Platform | 4.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58239 | SAP Approuter tenant context validation vulnerability | 3.7CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58238 | SAP Approuter denial of service | 5.9CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-58237 | SAP Approuter WebSocket missing authorization | 5.9CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58236 | OS command injection vulnerability in Application Server ABAP of SAP NetWeaver and ABAP Platform | 5.5CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-58235 | SAP NetWeaver AS Java Adobe Document Services vulnerable third-party component | 6.3CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58231 | Improper authorization in SAP Commerce Cloud (Data Hub Adapter) | 10.0CNA v3.1 | 0.9% | 2026-08-11 | Reported exploitedFix |
| CVE-2026-58230 | SAP Approuter has an information disclosure | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-58115 | Siemens SIMATIC IoT2050 Advanced missing authentication | 10.0CNA v4.0 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-57263 | Siemens LOGO! Soft Comfort unsalted password hash | 7.0CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-57262 | Siemens LOGO! Soft Comfort hard-coded cryptographic key | 7.0CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-57105 | Microsoft Office SharePoint spoofing | 8.0CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-57104 | Microsoft Azure Storage Explorer elevation of privilege | 8.8CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-56721 | CamaleonCMS privilege escalation via Parameter Confusion in UsersController | 8.7CNA v4.0 | 0.5% | 2026-08-11 | |
| CVE-2026-56720 | CamaleonCMS missing authorization via profile action | 5.3CNA v4.0 | 0.3% | 2026-08-11 | |
| CVE-2026-56179 | Microsoft Windows Network Address Translation (NAT) spoofing | 8.3CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-56174 | Microsoft Windows Narrator Braille elevation of privilege | 7.8CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-55676 | Malcolm vulnerable to RCE via unrestricted .php upload to the file-upload component | 8.7CNA v4.0 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-54984 | Microsoft Windows Imaging component remote code execution | 7.8CNA v3.1 | 0.5% | 2026-08-11 | Exploit codeFix |
| CVE-2026-54981 | Microsoft Visual Studio Code Python extension security feature bypass | 7.8CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-54123 | Microsoft Defender For Endpoint for Mac information disclosure | 5.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-54113 | Microsoft Windows Remote Procedure Call denial of service | 7.5CNA v3.1 | 1.2% | 2026-08-11 | Fix |
| CVE-2026-53416 | Zoom VDI path traversal | 7.1CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-53415 | Zoom Clients use-after-free | 8.3CNA v3.1 | 0.5% | 2026-08-11 | KCV |
| CVE-2026-53414 | Zoom Clients buffer over-read | 6.5CNA v3.1 | 0.4% | 2026-08-11 | KCV |
| CVE-2026-53413 | Zoom Communications Zoom Clients annotator out-of-bounds write | 8.3CNA v3.1 | 0.5% | 2026-08-11 | KCV |
| CVE-2026-51584 | usememos SSO sign-in handler improper authentication | 9.8CISA ADP v3.1 | 0.6% | 2026-08-11 | |
| CVE-2026-51583 | usememos webhook validation server-side request forgery | 8.5CISA ADP v3.1 | 0.4% | 2026-08-11 | |
| CVE-2026-50516 | Microsoft Azure Kubernetes Service elevation of privilege | 9.4CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-50472 | Microsoft Windows LUA File Virtualization Filter driver elevation of privilege | 7.0CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-50237 | Red Hat OpenShift Container Platform console Helm catalog proxy server-side request forgery | 7.4CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-50236 | Openshift/console: Authenticated SSRF with full response reflection and path neutralization | 7.4CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-50064 | Siemens Solid Edge SE2025 out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-50063 | Siemens Solid Edge SE2025 out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-50062 | Siemens Solid Edge SE2025 out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-50061 | Siemens Solid Edge SE2025 use-after-free | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-50060 | Siemens Solid Edge SE2025 use-after-free | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-50059 | Siemens Solid Edge SE2025 out-of-bounds write | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-50058 | Siemens Solid Edge SE2025 out-of-bounds read | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-49179 | Microsoft Windows Active Directory Domain services remote code execution | 8.8CNA v3.1 | 0.9% | 2026-08-11 | Exploit codeFix |
| CVE-2026-48813 | Flawfinder output manipulation via untrusted filenames and source text | 8.7CNA v4.0 | 0.4% | 2026-08-11 | Exploit codeFix |
| CVE-2026-48809 | miguelgrinberg python-engineio denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-48804 | python-socketio binary attachment handling resource exhaustion | 7.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-48802 | python-engineio has unbound thread allocation that can cause denial of service | 7.5CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-48790 | turso-cli persists Turso platform JWT with world-readable (0o644) file permissions | 5.5CNA v3.1 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-48771 | ishankportfolio contact form database configuration information disclosure | 8.2CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-48767 | baptisteArno typebot.io google Sheets OAuth access token disclosure to guest members | 7.6CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-48766 | Typebot OpenAI model listing endpoint information disclosure | 7.6CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-48765 | Typebot OAuth credential update insecure direct object reference | 9.9CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-48763 | Typebot public upload endpoint missing authorization | 8.2CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-48762 | Typebot OpenAI transcription handler server-side request forgery | 5.4CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48495 | Typebot Google Sheets OAuth callback missing authorization | 7.1CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-48494 | Typebot WhatsApp preview webhook insecure direct object reference | 7.1CNA v4.0 | 0.5% | 2026-08-11 | |
| CVE-2026-48483 | Typebot WhatsApp status forwarding server-side request forgery | 5.4CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48447 | Adobe Lightroom Classic incorrect authorization | 7.7CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-48446 | Adobe CAI Content Credentials improper limitation of a pathname to a restricted directory | 5.5CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48445 | Adobe CAI Content Credentials integer overflow or wraparound | 6.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48444 | Adobe CAI Content Credentials integer overflow or wraparound | 6.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48443 | Adobe CAI Content Credentials uncontrolled resource consumption | 6.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48442 | Adobe CAI Content Credentials improper limitation of a pathname to a restricted directory | 7.1CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48441 | Adobe Lightroom Classic improper limitation of a pathname to a restricted directory (path traversal) | 8.6CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48440 | Adobe ColdFusion heap-based buffer overflow | 8.1CNA v3.1 | 1.3% | 2026-08-11 | Fix |
| CVE-2026-48439 | Adobe CAI Content Credentials uncontrolled resource consumption | 7.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-48438 | Adobe CAI Content Credentials null pointer dereference | 7.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-48437 | Adobe CAI Content Credentials improper certificate validation | 5.5CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-48436 | Adobe CAI Content Credentials improper input validation | 6.5CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-48435 | Adobe CAI Content Credentials integer underflow (wrap or wraparound) | 6.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48434 | Adobe CAI Content Credentials uncontrolled resource consumption | 6.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48416 | Adobe Commerce incorrect authorization | 7.5CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-48415 | Adobe Commerce incorrect authorization | 7.6CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-48414 | Adobe Commerce cross-site scripting (stored XSS) | 7.7CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48413 | Adobe Commerce cross-site scripting (stored XSS) | 8.7CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-48412 | Adobe Commerce incorrect authorization | 2.7CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-48411 | Adobe Commerce incorrect authorization | 6.5CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-48410 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48409 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48408 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48407 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48406 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48405 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48404 | Adobe Lightroom Classic out-of-bounds write | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48397 | Adobe Lightroom Classic deserialization of untrusted data | 8.6CNA v3.1 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-48387 | Adobe CAI Content Credentials integer overflow or wraparound | 6.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-48386 | Adobe ColdFusion use of a broken or risky cryptographic algorithm | 7.5CNA v3.1 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-48385 | Adobe ColdFusion improper neutralization of special elements used in an OS command | 7.7CNA v3.1 | 1.6% | 2026-08-11 | Fix |
| CVE-2026-48384 | Adobe ColdFusion improper input validation | 4.9CNA v3.1 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-48381 | Adobe Campaign Classic improper neutralization of special elements used in an SQL command | 9.0CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-48376 | Adobe ColdFusion improper encoding or escaping of output | 5.4CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-48375 | Adobe ColdFusion incorrect authorization | 6.5CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-48362 | Adobe ColdFusion improper neutralization of special elements used in an OS command | 10.0CNA v3.1 | 3.5% | 2026-08-11 | Fix |
| CVE-2026-48056 | Streambert vulnerable to arbitrary Binary Execution via Downloader IPC handler | 10.0CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-48046 | Streambert vulnerable to remote code execution (RCE) via Unvalidated Auto-Updater IPC handler | 9.3CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-47940 | Adobe Lightroom Classic integer overflow or wraparound | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-47922 | Adobe CAI Content Credentials server-side request forgery (SSRF) | 4.7CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-47705 | baptisteArno typebot.io TypeBot vulnerable to CSV injection in result export | 9.6CNA v3.1 | 0.6% | 2026-08-11 | |
| CVE-2026-47704 | baptisteArno Typebot webhook resume handler insecure direct object reference | 7.1CNA v4.0 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-47702 | baptisteArno typebot.io TypeBot API tokens stored in plaintext | 9.1CNA v4.0 | 0.3% | 2026-08-11 | |
| CVE-2026-47299 | Microsoft Azure Monitor Agent elevation of privilege | 7.2CNA v3.1 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-47285 | Microsoft Visual Studio Code information disclosure | 6.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-46670 | YesWiki: Unauthenticated SQL injection | 9.8CNA v3.1 | 2.0% | 2026-08-11 | NucleiFix |
| CVE-2026-45618 | LiquidJS is vulnerable to remote code execution | 10.0CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-44765 | Missing authorization Check in SAP Manufacturing Integration and Intelligence | 7.3CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-44764 | Missing authorization Check in SAP Manufacturing Integration and Intelligence | 7.3CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-44763 | Directory traversal vulnerability in SAP Manufacturing Integration and Intelligence | 7.6CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-44762 | Security Misconfiguration in SAP Data Services Management Console | 3.7CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-44758 | Code injection vulnerability in Manufacturing Integration and Intelligence | 9.1CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-43606 | AMD Vitis™ Libraries timing side channel | 7.7CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-42976 | Microsoft Windows remote Access Management service/API (RPC server) elevation of privilege | 7.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-42142 | Typebot Google Sheets getSheets endpoint missing authorization | 7.1CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-40375 | Microsoft Dynamics Business Central information disclosure | 6.5CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-40130 | Memory corruption vulnerability in SAPSPrint Service | 5.3CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-39452 | Intel(R) Transfer Learning Tool protection mechanism failure | 6.3CNA v4.0 | 0.3% | 2026-08-11 | |
| CVE-2026-35502 | Intel(R) Extension for PyTorch deserialization of untrusted data | 4.6CNA v4.0 | 0.3% | 2026-08-11 | |
| CVE-2026-34635 | Adobe ColdFusion use of hard-coded cryptographic key | 8.4CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-34265 | Memory corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform | 9.8CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-34175 | Hardware-Aware-Automated-MachineLearning NA uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-33922 | Path traversal in the Offline archives functionality of the local web interface in Arc | 6.8CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-33921 | Npcap driver installed without administrator-only access restriction on Windows in Arc | 4.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-32791 | Intel(R) Performance Counter Monitor (Intel(R) PCM) untrusted search path | 5.4CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-32788 | Approximate Bayesian Inference Framework uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-32677 | gaudi-container-runtime path traversal | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-29036 | cJSON Wrong-Key Modification via JSON Pointer Escape Decoding | 8.7CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-29035 | CivetWeb Heap/stack buffer overflow via WebSocket permessage-deflate Decompression | 8.3CNA v4.0 | 0.6% | 2026-08-11 | |
| CVE-2026-28757 | Intel(R) Workload Services Framework software protection mechanism failure | 5.4CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-28729 | Intel Slim Bootloader integer overflow | 2.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-28707 | LLM-on-Ray protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-28700 | EquiTriton uncontrolled search path | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-27765 | vLLM Hardware Plugin for Intel(R) Gaudi(R) software improper input validation | 6.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-27302 | Adobe Campaign Classic (ACC) incorrect authorization | 10.0CNA v3.1 | 1.2% | 2026-08-11 | Fix |
| CVE-2026-25652 | Adobe ColdFusion incorrect authorization | 7.8CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-25194 | Intel Slim Bootloader out-of-bounds write | 1.8CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-24911 | Intel(R) PROSet/Wireless WiFi Software stack-based buffer overflow | 8.3CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-24693 | Intel(R) oneCCL Bindings for PyTorch protection mechanism failure | 5.4CNA v4.0 | 0.1% | 2026-08-11 | |
| CVE-2026-24330 | Red Hat Fuse 7 wildfly-core: Wildfly: Arbitrary file read via malicious archive deployment | 6.5CNA v3.1 | 0.5% | 2026-08-11 | |
| CVE-2026-24329 | Red Hat Fuse 7 wildfly-core: Wildfly core: Denial of service | 4.9CNA v3.1 | 0.6% | 2026-08-11 | |
| CVE-2026-24099 | Intel(R) PROSet/Wireless WiFi Software use-after-free | 5.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-22887 | Intel(R) PROSet/Wireless WiFi Software denial of service | 8.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-21400 | Intel(R) AI Reference Models protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-21399 | Intel Open Volume Kernel Library heap-based buffer overflow | 6.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-21387 | Intel(R) LLM Library for PyTorch protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-21279 | Adobe ColdFusion improper input validation | 8.2CNA v3.1 | 0.8% | 2026-08-11 | Fix |
| CVE-2026-21273 | Adobe ColdFusion improper input validation | 8.7CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-21269 | Adobe ColdFusion cross-site scripting (stored XSS) | 4.6CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-20917 | Intel(R) Processors information disclosure | 4.0CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20913 | Intel(R) Neural Compressor software improper input validation | 4.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20908 | Intel(R) NPU Driver time-of-check time-of-use race condition | 5.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20906 | Intel(R) Neural Compressor software protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20903 | Intel(R) AI Containers protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-20901 | Intel(R) Xeon(R) Processors improper input validation | 4.0CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20898 | Intel Xeon processors Alias Checking Trusted Module improper access control | 8.5CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20891 | Intel(R) PROSet/Wireless WiFi Software improper authentication | 6.3CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20890 | Intel(R) PROSet/Wireless WiFi Software improper privilege management | 7.1CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20886 | Intel(R) PROSet/Wireless WiFi Software out-of-bounds write | 6.9CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20885 | Intel(R) Platforms Intel(R) TDX module for some improper authentication | 7.0CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20878 | Intel(R) PROSet/Wireless WiFi Software null pointer dereference | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20799 | Battery Life Diagnostic Tool software untrusted search path | 5.4CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20795 | Intel(R) PROSet/Wireless WiFi Software denial of service | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20789 | Intel(R) PROSet/Wireless WiFi Software improper access control | 8.4CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20787 | Intel(R) PROSet/Wireless WiFi Software null pointer dereference | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20786 | Intel(R) NPU Driver out-of-bounds read | 6.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20783 | Intel(R) NPU Driver improper check for exceptional conditions | 6.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20780 | Intel(R) PROSet/Wireless WiFi Software resource exhaustion | 6.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20778 | Intel(R) PROSet/Wireless WiFi Software out-of-bounds read | 7.0CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-20776 | Intel(R) PROSet/Wireless WiFi Software improper check for exceptional conditions | 8.3CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-20775 | Intel(R) TDX modules uncaught exception | 6.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20770 | Cluster Management Toolkit for Kubernetes software protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-20769 | Intel(R) NPU Driver improper check for exceptional conditions | 6.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20765 | Intel(R) TDX Guest software incorrect comparison | 4.6CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-20763 | Intel(R) TDX Guest software incorrect calculation | 4.6CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20760 | Intel(R) Processors privilege escalation | 6.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20755 | LLM Scaler software protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20752 | Intel(R) PROSet/Wireless WiFi Software improper authentication | 6.7CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20749 | Intel(R) PROSet/Wireless WiFi Software out-of-bounds read | 7.2CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20747 | Intel(R) PROSet/Wireless WiFi Software improper check for exceptional conditions | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20745 | Intel(R) PROSet/Wireless WiFi Software out-of-bounds write | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20741 | Intel(R) PROSet/Wireless WiFi Software improper access control | 8.3CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20739 | Intel(R) PROSet/Wireless WiFi Software improper check for exceptional conditions | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20737 | Intel(R) PROSet/Wireless WiFi Software information disclosure | 6.3CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20734 | Intel AMT and Standard Manageability firmware improper initialization | 5.6CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20731 | Intel(R) NPU Driver denial of service | 6.9CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20728 | Intel Extension for TensorFlow software protection mechanism failure | 5.4CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20727 | Intel(R) PROSet/Wireless WiFi Software null pointer dereference | 8.3CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-20716 | Intel(R) Processors improper access control | 7.2CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20715 | Intel AMT and Standard Manageability firmware improper input validation | 8.2CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-20713 | Intel Xeon processors firmware incorrect control flow | 4.5CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20712 | Intel(R) Reference Platforms some UEFI firmware for some incomplete cleanup | 4.0CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20708 | Intel AMT and Standard Manageability information disclosure | 5.9CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-20707 | 3rd Gen Intel(R) Xeon(R) Scalable Processors denial of service | 6.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20705 | Intel(R) Platform Intel(R) TDX module for some insecure storage of sensitive information | 6.8CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-20702 | Intel Data Center Attestation Primitives protection mechanism failure | 8.9CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-20349 | Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) heap inspection | 8.6CNA v3.1 | 1.0% | 2026-08-11 | KEVFix |
| CVE-2026-19579 | Snipe-IT Checkout Request Cancellation IDOR | 5.3CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-19560 | Google Chrome Blink use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-19559 | Google Chrome HTML use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-19558 | Google Chrome extensions use-after-free | 7.5CISA ADP v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-19557 | Google Chrome TabStrip use-after-free | 8.3CISA ADP v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-19556 | Google Chrome V8 use-after-free | 8.8CISA ADP v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-19550 | FreeIPA trust-fetch-domains command incorrect authorization | 8.2CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-19546 | DBI connect profile attribute code injection | 8.8CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-19539 | Roskus Prospero Flow CRM ticket management component insecure direct object reference | 8.6CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-19519 | Red Hat Advanced Cluster Security 4 claircore: Claircore: Denial of service | 4.3CNA v3.1 | 0.4% | 2026-08-11 | |
| CVE-2026-19518 | Samsung Open Source rlottie Input vulnerability improper input validation | 6.5CNA v3.1 | 0.4% | 2026-08-11 | |
| CVE-2026-19517 | Samsung Open Source rlottie improper input validation | 6.5CNA v3.1 | 0.4% | 2026-08-11 | |
| CVE-2026-19516 | Grafana MCP Server grafana_api_request tool server-side request forgery | 9.1CNA v3.1 | 0.3% | 2026-08-11 | Exploit codeFix |
| CVE-2026-19434 | maalfer Pentestify finding renderer cross-site scripting | 5.1CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-19425 | Win Men Intermational|Travel Agency Management System SQL injection | 9.3CNA v4.0 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-19424 | Inventec Appliances|Chiline Cloud insecure direct object reference | 8.7CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-19418 | TYPO3 CMS broken access control in Backend and Install tool | 7.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-19391 | Red Hat Insights Core credential redaction layer information disclosure | 6.5CNA v3.1 | 0.2% | 2026-08-11 | |
| CVE-2026-19091 | GeoDirectory WordPress plugin arbitrary file deletion | 8.1CNA v3.1 | 1.1% | 2026-08-11 | Fix |
| CVE-2026-19078 | Red Hat OpenShift Container Platform oauth-server grant approval handler open redirect | 4.3CNA v3.1 | 0.4% | 2026-08-11 | |
| CVE-2026-18972 | Velociraptor authenticated identity-spoofing | 9.6CNA v3.1 | 0.4% | 2026-08-11 | Emerging ThreatsFix |
| CVE-2026-18860 | Velociraptor incorrect Org deletion permissions check | 8.7CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18844 | Pulsetto Vagus Nerve Stimulator hidden functionality | 7.2CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-18712 | MongoDB Server Queryable Encryption maintenance operations incorrect authorization | 7.2CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-18711 | MongoDB Server query execution engine use-after-free | 7.1CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-18710 | Cleartext storage of sensitive information in MongoDB Driver Logging during Client Initialization | 8.2CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-18709 | MongoDB Server sharded transaction commit and abort handling missing authorization | 5.9CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-18708 | MongoDB Server JavaScript scripting engine code injection | 5.3CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18707 | Improper input validation in MongoDB Aggregation Command Handling leads to denial of service | 5.3CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-18706 | MongoDB Server graphLookup aggregation stage use-after-free | 7.5CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-18705 | MongoDB Server Atlas Vector Search incorrect authorization | 7.1CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18704 | MongoDB Server aggregation framework vulnerability | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-18703 | MongoDB Server authentication mechanism restrictions vulnerability | 2.3CNA v4.0 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-18702 | MongoDB Server profile command improper privilege management | 5.3CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-18701 | Type confusion in MongoDB Query subsystem leads to denial of service | 7.1CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18700 | MongoDB Server geospatial validation use-after-free | 6.0CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18699 | Improper input validation in MongoDB Query Planner leads to denial of service | 6.0CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18698 | Improper authorization in MongoDB Server allows unauthorized actions on System Collections | 5.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-18697 | MongoDB Server aggregation framework denial of service | 8.7CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18696 | MongoDB Server applyOps command incorrect authorization | 7.0CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18695 | Improper input validation in MongoDB Timeseries Query Processing leads to denial of service | 7.1CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18694 | MongoDB Server geospatial query processing out-of-bounds read | 7.1CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18693 | MongoDB Server timeseries bucket handling out-of-bounds write | 7.2CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-18692 | MongoDB Server timeseries bucket handling use-after-free | 7.7CNA v4.0 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-18691 | Improper authentication in MongoDB Intra-Cluster Connections allows credential exposure | 9.0CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18690 | Improper authorization in MongoDB Server allows unauthorized actions on System Collections | 7.2CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18688 | MongoDB Server aggregation framework out-of-bounds read | 7.1CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18687 | MongoDB Server Queryable Encryption maintenance operation integer underflow | 7.1CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-18640 | Velociraptor directory traversal via the NewNotebook API | 7.1CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18639 | Velociraptor OIDC Authenticator susceptible to email spoofing | 7.3CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18638 | Velociraptor server crash via the SetPassword API | 6.5CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18636 | Velociraptor VFSGetBuffer API path deny list bypass | 6.8CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18635 | Velociraptor query plugin allows impersonation in other orgs | 7.2CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-18634 | SonicWall GMS deserialization of untrusted data | 8.4CISA ADP v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-18348 | Velociraptor NETWORK ACL bypass via upload_azure / upload_sftp / upload_smb VQL plugins | 4.1CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-18247 | DOM-based cross-site scripting in BlackBerry AtHoc Web Portals | 5.3CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-18129 | Ivanti Endpoint Manager Core cleartext transmission of sensitive information | 8.1CNA v3.1 | 1.5% | 2026-08-11 | Fix |
| CVE-2026-18127 | Ivanti Endpoint Manager external control of a file path | 7.7CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-18125 | Ivanti Endpoint Manager agent out-of-bounds read | 7.5CNA v3.1 | 1.6% | 2026-08-11 | Fix |
| CVE-2026-17535 | Velociraptor multiple crashes in NTFS parser when applied to invalid NTFS Volumes | 6.2CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-17061 | Deserialization of untrusted data vulnerability in SIMULIA Execution Engine from Release 2023 | 10.0CNA v3.1 | 0.8% | 2026-08-11 | |
| CVE-2026-16974 | Kirki WordPress plugin stored cross-site scripting | 6.4CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-16230 | Formidable Digital Signatures WordPress plugin unauthenticated arbitrary file deletion | 9.8CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-16053 | Zoho ManageEngine M365 Manager Plus path traversal | 8.5CNA v3.1 | 1.8% | 2026-08-11 | Fix |
| CVE-2026-15606 | Frontend Admin by DynamiApps WordPress plugin arbitrary password reset via Encrypted object Token | 8.8CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-15567 | Red Hat Wildfly iiop listener denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-15565 | Red Hat Undertow undertow-websockets denial of service | 7.5CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-15563 | Red Hat JBoss Enterprise Application Platform IIOP NameService missing authentication | 7.4CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-15562 | Red Hat JBoss Enterprise Application Platform jboss-remoting MessageReader integer overflow | 7.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-15561 | Red Hat JBoss Enterprise Application Platform denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-15560 | Red Hat JBoss Enterprise Application Platform openjdk-orb: Unauthed class loading via iiop in eap | 8.1CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-15556 | Red Hat JBoss Enterprise Application Platform improper signature verification | 8.1CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-15555 | Jboss-marshalling-river: Wildfly-clustering-infinispan-marshalling: Jboss deserialization RCE | 8.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-15554 | Red Hat JBoss Enterprise Application Platform undertow-core: Undertow: Authentication bypass | 7.4CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-15426 | AcyMailing WordPress plugin missing authorization account takeover | 8.8CNA v3.1 | 0.7% | 2026-08-11 | Fix |
| CVE-2026-14863 | FileRun RCE via Thumbnail Generation command injection | 8.7CNA v4.0 | 2.5% | 2026-08-11 | Fix |
| CVE-2026-14549 | Ray Enterprise Translation WordPress plugin Subscriber+ Language Addition and deletion | 4.3CISA ADP v3.1 | 0.3% | 2026-08-11 | |
| CVE-2026-14548 | Ray Enterprise Translation WordPress plugin Subscriber+ arbitrary API Token update | 6.5CISA ADP v3.1 | 0.3% | 2026-08-11 | |
| CVE-2026-14180 | Red Hat JBoss Enterprise Application Platform undertow-core: Undertow:HTTP request smuggling | 5.3CNA v3.1 | 1.0% | 2026-08-11 | Fix |
| CVE-2026-13739 | Commvault Cloud server-side request forgery (SSRF) | 8.8CNA v4.0 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-13738 | Commvault Cloud improper authorization Validation | 9.2CNA v4.0 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-13737 | Commvault Cloud Command Restriction Bypass | 9.2CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-13716 | Path traversal: .../...// in Crafty Controller | 9.1CNA v3.1 | 0.8% | 2026-08-11 | |
| CVE-2026-13457 | InstaWP Connect WordPress plugin unauthenticated Cryptographic key disclosure | 7.5CNA v3.1 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-12571 | Zoho manageengine_ddi_central authentication bypass leading to account takeover | 9.8CNA v3.1 | 3.3% | 2026-08-11 | Fix |
| CVE-2026-12052 | Zephyr USB CDC NCM control handler out-of-bounds write | 5.2CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-12051 | zephyrproject zephyr null pointer dereference in USB DFU device_next download handler | 4.6CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-11985 | zephyrproject zephyr cross-thread FPU register leak on ARM when FPU enabled without register sharing | 3.6CNA v3.1 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-11894 | Zephyr Realtek BEE Bluetooth HCI driver double free | 5.9CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-11893 | zephyrproject zephyr double free / use-after-free in Bouffalo Lab HCI driver send error paths | 5.9CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-11814 | Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers | 4.9CNA v4.0 | 0.9% | 2026-08-11 | Fix |
| CVE-2026-11739 | Command injection vulnerability in some NETGEAR Nighthawk devices | 4.9CNA v4.0 | 1.1% | 2026-08-11 | Fix |
| CVE-2026-11738 | NETGEAR R7000 listed improper input validation | 4.3CNA v4.0 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-11737 | Some NETGEAR Nighthawk devices allow administrators to tamper with the device | 4.3CNA v4.0 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-11736 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk routers | 1.9CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-11735 | Stack-based buffer overflow vulnerability in some NETGEAR Nighthawk models | 1.9CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-11734 | Device administrator can interrupt the normal operation of some NETGEAR Nighthawk devices | 1.1CNA v4.0 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-11733 | Buffer overflow vulnerability in some NETGEAR Nighthawk routers | 1.1CNA v4.0 | 0.5% | 2026-08-11 | Fix |
| CVE-2026-10579 | Red Hat JBoss Enterprise Application Platform improper signature verification | 9.8CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-9214 | NETGEAR R7000 improper input validation | 4.3CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-8917 | ASUS GPU Tweak III untrusted pointer dereference | 8.4CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-8158 | Axis Communications Signed Video Framework buffer overflow | 5.3CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-6727 | Trusted Computing Group TPM2.0 RSA OAEP decryption implementation timing side channel | 5.9CISA ADP v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-6726 | Trusted Computing Group TPM2.0 an information leakage vulnerability in the TCG TPM reference code | 7.9CISA ADP v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-6505 | Axis Communications AXIS OS time-of-check time-of-use race condition | 5.1CNA v3.1 | 0.1% | 2026-08-11 | Fix |
| CVE-2026-6181 | Axis Communications AXIS OS authentication bypass by spoofing | 5.9CNA v3.1 | 0.4% | 2026-08-11 | Fix |
| CVE-2026-5917 | libgit2 Shell command injection via ssh_libssh2 Backend | 8.6CNA v4.0 | 1.4% | 2026-08-11 | Fix |
| CVE-2026-5304 | Axis Communications AXIS OS improper type validation | 5.7CNA v3.1 | 0.3% | 2026-08-11 | Fix |
| CVE-2026-5303 | Axis Communications AXIS OS time-of-check time-of-use race condition | 5.7CNA v3.1 | 0.2% | 2026-08-11 | Fix |
| CVE-2026-4757 | Axis Communications AXIS OS incorrect permission assignment | 7.2CNA v3.1 | 0.6% | 2026-08-11 | Fix |
| CVE-2026-0465 | AMD Ryzen™ Master use-after-free | 5.6CNA v4.0 | 0.2% | 2026-08-11 | |
| CVE-2026-73035 | npm-check-updates Terminal injection via Unsanitized Escape Sequences | 5.3CNA v4.0 | 0.4% | 2026-08-10 | |
| CVE-2026-73033 | Sucuri WordPress plugin path traversal via integrity.lib.php | 7.0CNA v4.0 | 0.9% | 2026-08-10 | |
| CVE-2026-73030 | unearth path traversal via Unnormalized Paths and Symlink Escape | 7.2CNA v4.0 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72919 | Rocket.Chat channel conversion endpoint missing authorization | 4.3CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-72918 | Rocket.Chat: Insecure implementation of websocket notifications | 5.4CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-72917 | Mintplex Labs AnythingLLM password recovery improper authentication | 5.9CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-72916 | Mastodon: SSRF Protection Bypass via IPv4-compatible IPv6 Addresses | 6.3CNA v4.0 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72915 | Mastodon: Personally-identifying information disclosure due to incorrect access control validation | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72914 | Mastodon: Exhausting data by an unauthenticated request to the admin retention API | 7.5CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72913 | Kitty: Command injection into the child shell | 7.3CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-72912 | GCHQ CyberChef recipe URL parser denial of service | 4.3CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-72911 | ERPNext: Possibility of server-side template injection due to missing validation | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72910 | ERPNext: Unauthorised modification of master data due to missing validation | 7.1CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72909 | ERPNext: Broken access control on certain endpoints | 7.1CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72908 | ERPNext: Possibility of SQL injection due to missing validation | 6.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72907 | ERPNext: Broken access control on certain endpoint | 6.5CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72906 | ERPNext: Unauthorised triggering of automated emails due to missing validation | 4.3CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72904 | Firecrawl: Arbitrary file read via JSON Schema $ref expansion | 9.3CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72903 | Eugeny Tabby SFTP file download path traversal | 8.1CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72902 | Dokploy: Authenticated RCE | 9.9CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72901 | Dokploy: Remote code execution via volume-backup | 9.9CNA v3.1 | 1.0% | 2026-08-10 | Fix |
| CVE-2026-72900 | Metabase information exposure | 7.1CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72899 | Metabase SQL injection via public card or dashboard | 10.0CNA v4.0 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72898 | Metabase SQL injection | 10.0CNA v4.0 | 97.4% | 2026-08-10 | KEVNucleiEmerging ThreatsExploit codeFix |
| CVE-2026-72886 | Dokploy server-level schedules privilege escalation | 9.9CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72885 | Dokploy: Authenticated command injection in Dokploy Dockerfile Builder | 0.0CNA v4.0 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72884 | Dokploy: Command injection via Compose Custom command | 8.7CNA v4.0 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72883 | Dokploy: WebSocket Terminal Missing Service-Level Access Control | 8.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72882 | Dokploy: Authenticated blind command injection | 9.9CNA v3.1 | 0.5% | 2026-08-10 | |
| CVE-2026-72881 | Dokploy: Command injection via database credentials in backup/restore commands | 6.4CNA v4.0 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72880 | Dokploy: Arbitrary file write + remote OS command injection via `certificatePath` | 9.9CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72879 | Dokploy: Command injection via Registry Credentials in Swarm upload | 9.4CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72878 | Dokploy: OS command injection in backup/restore pipeline | 9.6CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72877 | Dokploy: Command injection via dockerImage in buildRemoteDocker | 9.6CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72876 | Dokploy: Cross-organization IDOR leads to root RCE on another tenant's server via swarm.* | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72875 | Dokploy: Remote code execution (RCE) via command injection in settings.readTraefikFile | 8.8CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72874 | Dokploy: Command injection via Unescaped Git URL in Clone commands | 8.7CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72873 | Dokploy application Git provider secrets information disclosure | 6.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72872 | Dokploy: OS command injection via Bitbucket `owner`/`repository` in `git clone` | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72871 | Dokploy: Unauthenticated Git Provider injection via GitHub OAuth Callback | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72870 | Dokploy: Command injection via Docker Credentials in buildRemoteDocker | 8.7CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72869 | Dokploy: Authenticated OS command injection in backup.restoreBackupWithLogs leading to host RCE | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72868 | Dokploy: Member-role RCE as host root via destination.testConnection rclone shell injection | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72867 | Dokploy: Incomplete fix of command injection | 9.9CNA v3.1 | 3.4% | 2026-08-10 | NucleiExploit codeFix |
| CVE-2026-72866 | dokploy WebSocket Terminal Auth Bypass | 8.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72865 | Dokploy: OS command injection via compose `composePath` | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72864 | Dokploy broken access control on docker-container-terminal WebSocket | 9.9CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72863 | Dokploy WebSocket terminal and log handlers missing authorization | 9.9CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72862 | Dokploy: OS command injection | 9.9CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72761 | Webhook SSRF guard bypassed by IPv6 transition addresses in vulnerability-lookup | 6.9CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-72760 | cti-transmute Following List exposes User Email Addresses to Authenticated Users | 5.3CNA v4.0 | 0.4% | 2026-08-10 | |
| CVE-2026-72759 | MISP Project cti-transmute conversion history endpoint missing authorization | 6.9CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-72751 | Stored cross-site scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content | 5.1CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-72743 | SQLBot SQText Dashboard component stored XSS via v-html | 5.1CNA v4.0 | 0.3% | 2026-08-10 | |
| CVE-2026-72740 | Dokploy: OS command injection via SSH-form `customGitUrl` domain in `ssh-keyscan` | 9.9CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72739 | Dokploy: Command injection via Compose Shell Execution | 6.5CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72738 | Dokploy: Authenticated RCE via command injection in backup.listBackupFiles search parameter | 9.9CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-72737 | Dokploy backup destination API insecure direct object reference | 9.6CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72736 | Dokploy: OS command injection in registry credential testing and Swarm cluster management → host RCE | 9.9CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72735 | Dokploy: Command injection in writeTraefikConfigRemote | 9.9CNA v3.1 | 0.9% | 2026-08-10 | Fix |
| CVE-2026-72734 | Dokploy server removal API insecure direct object reference | 8.4CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72733 | Dokploy: OS command injection via `databaseName` / `backupFile` in database restore | 9.9CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-72732 | Discourse: Templates endpoint exposes hidden tag names | 4.3CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-72731 | Discourse: Strip SQL comments and use non-recursive parameter interpolation in Data Explorer | 7.1CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72730 | Discourse: Stored XSS chat-transcript username unescaped in Rich Text Editor | 8.7CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72729 | Discourse: Stored XSS in discourse-local-dates plugin | 2.0CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72728 | Discourse: Onebox iframe origin allowlist enforces URL authority boundary | 6.3CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-72727 | Discourse: Stored XSS in the moderation review queue | 4.8CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72726 | Discourse: Unauthorized eavesdropping on private AI bot conversations | 6.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72725 | Discourse: Stored XSS in staff action logs injects staff UI | 5.4CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-72724 | Discourse: Private Chat Threat Message Disclosure via Chat Onebox Channel/Threat ID Mismatch | 4.3CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72723 | Discourse: Anonymous sidebar serialization exposes descriptions of category-restricted tags | 5.3CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-72722 | Discourse: Duplicate lookup reveals restricted topic titles through canonicalized URLs | 4.3CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72721 | Discourse: Onebox Domain Blocklist Bypass via Case-Sensitive Comparison | 5.3CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72720 | Discourse: HTML injection in PrettyText.format_for_email from cooked-attribute reparsing | 6.4CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-72719 | Chatwoot: Cross-Account Resource Transfer via `account_id` parameter | 6.7CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-72718 | Goose review command git diff vulnerability | 7.0CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-72692 | OpenSignLabs opensignserver missing authorization | 7.5CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72691 | OpenSignLabs opensignserver authentication bypass | 7.5CNA v3.1 | 0.6% | 2026-08-10 | |
| CVE-2026-72690 | Attendize Attendize Cross-Tenant authorization bypass | 5.4CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72689 | OpenSignLabs opensignserver Broken Object Level Authorization | 7.5CNA v3.1 | 0.5% | 2026-08-10 | |
| CVE-2026-72688 | OpenSignLabs opensignserver missing authentication for critical function | 7.5CNA v3.1 | 0.6% | 2026-08-10 | |
| CVE-2026-72594 | lobehub lobe-chat stored cross-site scripting via Unrestricted SVG Avatar upload | 7.6CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-72593 | Dulldusk phpfm missing authentication by Default allows Full Filesystem Access | 9.8CNA v3.1 | 0.8% | 2026-08-10 | |
| CVE-2026-72592 | Dulldusk phpfm unauthenticated remote code execution via Unrestricted PHP file upload | 9.8CNA v3.1 | 0.8% | 2026-08-10 | |
| CVE-2026-72591 | Koito authenticated server-side request forgery via Album Image URL parameter | 7.7CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72590 | alseambusher crontab-ui unauthenticated RCE via Newline injection in env_vars parameter | 9.8CNA v3.1 | 2.0% | 2026-08-10 | |
| CVE-2026-72589 | alseambusher crontab-ui unauthenticated RCE via Shell injection in Imported Database hook field | 9.8CNA v3.1 | 1.9% | 2026-08-10 | |
| CVE-2026-72588 | bluewave-labs Checkmate User Enumeration via Differential HTTP Response in Password Recovery | 5.3CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72587 | Instatic cache poisoning via Unauthenticated Server Island endpoint | 6.1CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-72586 | frangoteam FUXA missing authentication on DAQ_QUERY Socket.IO Event handler | 7.5CNA v3.1 | 0.6% | 2026-08-10 | |
| CVE-2026-72584 | fastschema TOCTOU race condition Bypasses OTP Attempt Limit in Account Recovery | 7.4CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72583 | fastschema stored cross-site scripting via MIME Type Bypass in file upload | 5.4CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-72582 | fastschema unauthenticated null pointer dereference DoS in Account Recovery endpoint | 7.5CNA v3.1 | 0.6% | 2026-08-10 | |
| CVE-2026-72581 | duhow xiaoai-patch server-side request forgery in /auth endpoint | 8.6CNA v3.1 | 0.5% | 2026-08-10 | |
| CVE-2026-72580 | duhow xiaoai-patch OS command injection in /mute and /unmute endpoints | 9.8CNA v3.1 | 1.7% | 2026-08-10 | |
| CVE-2026-72579 | NASA HyperCP OS command injection via Malicious HTTP Response from Data Server | 7.5CNA v3.1 | 1.1% | 2026-08-10 | |
| CVE-2026-72578 | FreePBX Framework missing CSRF Protection in Admin Panel Ajax Dispatcher | 8.8CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-72577 | NASA fprime-gds Flask web application missing authentication | 9.8CNA v3.1 | 1.3% | 2026-08-10 | |
| CVE-2026-72576 | Bludit stored cross-site scripting via Malicious SVG Logo upload | 5.4CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-72575 | daptin authentication bypass via Null Owner Permission Check on usergroup Objects | 9.1CNA v3.1 | 0.5% | 2026-08-10 | |
| CVE-2026-72574 | picocms Pico host header injection enables Script Source Hijacking | 6.1CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72573 | 4xmen pm2panel authenticated OS command injection via id Query parameter | 8.8CNA v3.1 | 1.6% | 2026-08-10 | |
| CVE-2026-72572 | o1lab xmysql unauthenticated path traversal via name Query parameter | 7.5CNA v3.1 | 1.1% | 2026-08-10 | |
| CVE-2026-72571 | mustafaakin cast-localvideo unauthenticated path traversal via dir parameter | 7.5CNA v3.1 | 1.1% | 2026-08-10 | |
| CVE-2026-72570 | cube-root directory-serve stored cross-site scripting via Malicious Filename | 5.4CNA v3.1 | 0.2% | 2026-08-10 | |
| CVE-2026-72569 | cube-root directory-serve unauthenticated path traversal arbitrary file deletion | 9.1CNA v3.1 | 0.7% | 2026-08-10 | |
| CVE-2026-72567 | deepwiki-open unauthenticated path traversal leading to arbitrary file write and Delete | 9.8CNA v3.1 | 0.8% | 2026-08-10 | |
| CVE-2026-72566 | automatisch server-side request forgery via HTTP Request Custom action | 7.7CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72565 | Tencent APIJSON unauthenticated SQL injection via @having Operator Map-Form Bypass | 9.8CNA v3.1 | 0.7% | 2026-08-10 | |
| CVE-2026-72564 | fosrl Pangolin Access Token Scope Bypass allows Cross-Resource Authentication | 9.6CNA v3.1 | 0.4% | 2026-08-10 | |
| CVE-2026-72522 | libexpat out-of-bounds read | 6.2CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-71969 | OP-TEE OS buffer underwrite via RSA NOPAD Encrypt/Decrypt Operations | 8.4CNA v4.0 | 0.2% | 2026-08-10 | |
| CVE-2026-71968 | OP-TEE OS use-after-free via Trusted Application Loader TA_FLAG_CONCURRENT | 8.4CNA v4.0 | 0.1% | 2026-08-10 | |
| CVE-2026-71967 | OP-TEE OS null pointer dereference DoS via Widevine PTA open_session | 5.7CNA v4.0 | 0.2% | 2026-08-10 | |
| CVE-2026-71966 | CyberPanel authenticated command injection via starRemoteTransfer | 8.7CNA v4.0 | 3.3% | 2026-08-10 | |
| CVE-2026-71965 | CyberPanel authenticated RCE via Remote Backup feature | 8.7CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-71964 | CyberPanel arbitrary file read via File Manager ZIP upload | 7.1CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-71962 | Flowise missing authorization via openai-assistants-file/download | 8.7CNA v4.0 | 0.7% | 2026-08-10 | |
| CVE-2026-71959 | Bitwarden Server Audit log injection via POST /collect | 6.9CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-71577 | Red Hat Multicluster Global Hub information disclosure | 6.3CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-71576 | Red Hat Multicluster Global Hub manager insufficient verification of data authenticity | 8.5CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-71394 | Heap Use of uninitialized memory in GNU Emacs for Android | 5.3CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-71393 | Heap buffer overflow in GNU Emacs for Android | 5.3CNA v4.0 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-71392 | Integer overflow in GNU Emacs for Android | 5.3CNA v4.0 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-71391 | Off-by-one error in GNU Emacs for Android | 5.3CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-70622 | tar-rs Symlink Escape via append_dir_all | 7.1CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-69118 | Cachet Authenticated server-side template injection RCE | 8.7CNA v4.0 | 0.8% | 2026-08-10 | |
| CVE-2026-69116 | FlyEnv cross-site scripting via v-html | 5.3CNA v4.0 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-69114 | Spacebar Server Cross-Channel Message Deletion via Permission Check Bypass | 7.1CNA v4.0 | 0.4% | 2026-08-10 | |
| CVE-2026-69112 | Hugging Face Accelerate path traversal and DoS via weight_map | 6.9CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68872 | Apache Airflow Amazon provider insecure direct object reference | 6.5CISA ADP v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68871 | Apache Airflow Yandex Lockbox backend allows cross-team secret disclosure | 6.5CISA ADP v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68870 | Apache Airflow Microsoft Azure provider Key Vault backend insecure direct object reference | 5.3CISA ADP v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68428 | Linux kernel KVM x86 MMU use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68427 | Linux kernel host1x buffer mapping use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68426 | Linux kernel xfrm GSO segmentation use-after-free | 9.8CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68425 | Linux kernel IB mad RMPP receive processing vulnerability | 7.1CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68424 | Linux kernel MTD virtual concat driver use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68423 | Linux kernel MTD virtual concat driver use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68422 | Linux kernel Btrfs relocation root handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68421 | Linux kernel sched_ext core scheduling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68420 | Linux kernel xfrm outbound policy templates out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68419 | Linux kernel RDMA irdma memory registration vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68418 | Linux kernel RDMA irdma QP creation null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68417 | Linux kernel RDMA siw QP creation vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68416 | Linux kernel MTD partition registration double free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68415 | Linux kernel xfrm IPTFS mode setup vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68414 | Linux kernel cfg80211 scheduled scan vulnerability | 7.5CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68413 | Linux kernel ipw2100 Wi-Fi driver memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68412 | Linux kernel cfg80211 Wi-Fi subsystem vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68411 | Linux kernel mac80211_hwsim virtio receive path vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68410 | Linux kernel libertas Wi-Fi driver memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68409 | Linux kernel mac80211 link RX statistics vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68408 | Linux kernel cfg80211 PMSR session teardown deadlock | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68407 | Linux kernel nl80211 beacon RNR parsing vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68406 | Linux kernel cfg80211 PMSR FTM request parsing vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68405 | Linux kernel mac80211 AP_VLAN broadcast buffer vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68404 | Linux kernel cfg80211 socket owner autodisconnect vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68403 | Linux kernel brcmfmac SDIO driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68402 | Linux kernel cfg80211 element parsing vulnerability | 7.1CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68401 | Linux kernel ARM FF-A firmware driver vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68400 | Linux kernel ARM FF-A firmware driver vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68399 | Linux kernel BPF socket cloning use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68398 | Linux kernel PPPoL2TP receive path use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Exploit codeFix |
| CVE-2026-68397 | Linux kernel AF_IUCV socket receive path vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68396 | Linux kernel SCSI error handler race condition | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68395 | Linux kernel sata_dwc_460ex driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68394 | Linux kernel Bluetooth mgmt connection parameter loading vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68393 | Linux kernel Bluetooth hci_sync connection hash lookup use-after-free | 8.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68392 | Linux kernel Bluetooth mgmt unpair device use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68391 | Linux kernel Bluetooth mgmt pending commands use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68390 | Linux kernel Bluetooth hci_sync connection parameters vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68389 | Linux kernel hci_qca Bluetooth driver vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68388 | Linux kernel SMB client fallocate vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68387 | Linux kernel CAN raw socket flags handling vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68386 | Linux kernel BPF sockmap UDP socket handling memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68385 | Linux kernel s390 checksum calculation vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68384 | Linux kernel Xe GPU driver VF CCS metadata handling race condition | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68383 | Linux kernel Xe GPU driver GuC scheduler vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68382 | Linux kernel Xe GPU driver GuC exec queue teardown deadlock | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68381 | Linux kernel ksmbd oplock and lease break notification vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68380 | Linux kernel amdxdna accelerator job scheduler use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68379 | Linux kernel TCP TIME_WAIT socket handling memory leak | 7.5CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68378 | Linux kernel DPLL pin reference sync null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68377 | Linux kernel tc tunnel_key action use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68376 | Linux kernel SCTP authentication HMAC parameter handling vulnerability | 8.1CNA v3.1 | 0.5% | 2026-08-10 | Exploit codeFix |
| CVE-2026-68375 | Linux kernel bnxt_en auxiliary device initialization vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68374 | Linux kernel USB core sysfs BOS descriptor handling vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68373 | Linux kernel at76c50x-usb Wi-Fi driver out-of-bounds read | 8.1CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68372 | Linux kernel USB port Type-C connector handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68371 | Linux kernel MUSB omap2430 driver vulnerability | 8.4CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68370 | Linux kernel USB dummy_hcd gadget driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68369 | Linux kernel USB gadget printer function driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68368 | Linux kernel USB gadget NCM function driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68367 | Linux kernel USB gadget f_tcm mass storage function vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68366 | Linux kernel USB gadget UVC driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68365 | Linux kernel io_edgeport USB serial driver out-of-bounds write | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68364 | Linux kernel amdgpu display ISM deadlock | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68363 | Linux kernel ath9k USB Wi-Fi driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68362 | Linux kernel ath11k SSR restart path null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68361 | Linux kernel corsair-psu HID driver probe use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68360 | Linux kernel corsair-cpro HID driver probe use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68359 | Linux kernel nzxt-smart2 HID driver probe use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68358 | Linux kernel nzxt-kraken3 HID driver probe use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68357 | Linux kernel watchdog pretimeout governor use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68356 | Linux kernel airoha watchdog clock rate division by zero | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68355 | Linux kernel ath11k RX MSDU list parser vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68354 | Linux kernel firewire net datagram reassembly vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68353 | Linux kernel ath6kl TX complete event handler out-of-bounds read | 8.1CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68352 | Linux kernel ath6kl connect event IE parser out-of-bounds read | 8.3CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68351 | Linux kernel carl9170 command callback out-of-bounds read | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68350 | Linux kernel carl9170 TX status handler out-of-bounds read | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68349 | Linux kernel carl9170 RX stream failover path buffer overflow | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68348 | Linux kernel TAS2781 firmware description parser vulnerability | 7.1CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68347 | Linux kernel AMD IOMMU domain allocation locking vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68346 | Linux kernel cs35l41 ACPI mute query vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68345 | Linux kernel MPAM MBWU monitor state null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68344 | Linux kernel ueagle-atm USB probe and disconnect vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68343 | Linux kernel SMB client DFS referral parser vulnerability | 9.1CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68342 | Linux kernel OVPN P2P peer release vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68341 | Linux kernel OVPN peer release list use-after-free | 8.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68340 | Linux kernel OCC poll response parser vulnerability | 7.7CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68339 | Linux kernel Realtek Bluetooth vendor event parser vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68338 | Linux kernel net/packet race condition | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68337 | Linux kernel BPF traffic control redirect helpers vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68336 | Linux kernel bonding ARP monitor IPv6 routing null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68335 | Linux kernel RDS network namespace socket lookup vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68334 | Linux kernel rxrpc I/O thread wakeup race condition | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68333 | Linux kernel dpaa2-switch MAC endpoint disconnect vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68332 | Linux kernel airoha PPE NPU pointer teardown use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68331 | Linux kernel dpaa2-eth MAC endpoint disconnect vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68330 | Linux kernel airoha NPU mailbox buffer DMA vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68329 | Linux kernel AMD IOMMU command completion wait vulnerability | 8.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68328 | Linux kernel NFP CPP resource mutex allocation vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68327 | Linux kernel wanxl PCI probe error handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68326 | Linux kernel mwifiex uAP association event handling vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68325 | Linux kernel AMD IOMMU ACPI HID map parsing vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68324 | Linux kernel Intel IOMMU latency statistics vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68323 | Linux kernel TIPC UDP bearer replicast list race condition | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68322 | Linux kernel RDS TCP IPv6 address binding null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68321 | Linux kernel txgbe FDIR filter list vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68320 | Linux kernel SCTP authentication chunk list vulnerability | 7.3CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68319 | Linux kernel pds_core PCI reset handling deadlock | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68318 | Linux kernel pds_core workqueue teardown use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68317 | Linux kernel pds_core auxiliary device management race condition | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68316 | Linux kernel ethosu accelerator driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68315 | Linux kernel SCTP stream reset handling vulnerability | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68314 | Linux kernel MCTP I3C driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68313 | Linux kernel TIPC netlink compatibility interface infinite loop | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68312 | Linux kernel CIFS deferred close handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68311 | Linux kernel mt76 mt7925 Wi-Fi driver decap offload null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68310 | Linux kernel mt76 mt7915 Wi-Fi driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68309 | Linux kernel mt76 connac Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68308 | Linux kernel mt76 mt7996 Wi-Fi driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68307 | Linux kernel mt76 mt7925 Wi-Fi driver reset recovery vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68306 | Linux kernel mt76 mt7996 Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68305 | Linux kernel xe VF CCS buffer detach null pointer dereference | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68304 | Linux kernel brcmfmac Wi-Fi driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68303 | Linux kernel vc4 HVS and V3D driver unbind null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68302 | Linux kernel AMT use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68301 | Linux kernel HSR slave VLAN unregistration memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68300 | Linux kernel SCTP authentication vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68299 | Linux kernel vmxnet3 Geneve packet header parsing denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68298 | Linux kernel xe VM creation error handling vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68297 | Linux kernel TIPC media and bearer MTU validation vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68296 | Linux kernel GRE tunnel transmit locking deadlock | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68295 | Linux kernel LoongArch BPF JIT vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68294 | Linux kernel qrtr socket namespace handling vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68293 | Linux kernel mlx5 MCIA register query vulnerability | 7.1CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68292 | Linux kernel ice driver tstamp ring allocation vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68291 | Linux kernel idpf driver vport initialization null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68290 | Linux kernel RDS TCP listen socket teardown use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68289 | Linux kernel TIPC integer overflow | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68288 | Linux kernel drop_monitor netlink reporting information disclosure | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68287 | Linux kernel drop_monitor vulnerability | 7.5CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68286 | Linux kernel drop_monitor vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68285 | Linux kernel LoongArch BPF JIT memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68284 | Linux kernel BPF sockmap cork handling use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68283 | Linux kernel ftrace event trigger use-after-free | 8.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68282 | Linux kernel analogix DP bridge driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68281 | Linux kernel drm imagination driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68280 | Linux kernel cdns-dsi bridge driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68279 | Linux kernel drm DP MST sideband reply parsers vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68278 | Linux kernel drm dp mst driver buffer overflow | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68277 | Linux kernel drm DP MST sideband reply parsers vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68276 | Linux kernel amdgpu GFX cleaner shader out-of-bounds write | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68275 | Linux kernel amdgpu GEM ioctl null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68274 | Linux kernel Xe GuC steered register list out-of-bounds write | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68273 | Linux kernel amdgpu power state handling vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68272 | Linux kernel amdgpu command submission null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68271 | Linux kernel nouveau driver ucopy functions vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68270 | Linux kernel sysfb driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68269 | Linux kernel i915 GEM parallel submission vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68268 | Linux kernel Xe GPU fault handler vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68267 | Linux kernel Xe GPU OA register whitelist vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68266 | Linux kernel Xe GPU driver use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68265 | Linux kernel Xe GPU VM driver vulnerability | 7.3CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68264 | Linux kernel drm Xe driver out-of-bounds write | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68263 | Linux kernel Imagination DRM driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68262 | Linux kernel Imagination GPU user array copy vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68261 | Linux kernel Imagination GPU VM context lookup null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68260 | Linux kernel Imagination GPU VM mapping vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68259 | Linux kernel amdkfd event notification slots vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68258 | Linux kernel amdkfd CRIU queue restore vulnerability | 7.1CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68257 | Linux kernel amdkfd CWSR buffer size calculation vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68256 | Linux kernel amdgpu display link detection memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68255 | Linux kernel virtio-gpu EDID parsing out-of-bounds read | 7.7CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68254 | Linux kernel i915 DRM driver division by zero | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68253 | Linux kernel i915 HDCP stream handling buffer overflow | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68252 | Linux kernel amdgpu sdma7.0 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68251 | Linux kernel amdgpu sdma6.0 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68250 | Linux kernel amdgpu sdma5.2 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68249 | Linux kernel amdgpu sdma5.0 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68248 | Linux kernel i915 GPU error capture vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68247 | Linux kernel i915 DRM driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68246 | Linux kernel amdgpu GFX11 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68245 | Linux kernel amdgpu VM task info lookup vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68244 | Linux kernel i915 GEM proto context creation vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68243 | Linux kernel i915 GEM context SSEU parameter handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68242 | Linux kernel i915 GPU scheduler engine vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68241 | Linux kernel i915 DRM driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68240 | Linux kernel GPU SVM page mapping vulnerability | 8.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68239 | Linux kernel TTM memory pool null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68238 | Linux kernel amdgpu VFCT ACPI table handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68237 | Linux kernel AMDGPU user queue driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68236 | Linux kernel AMD display driver use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68235 | Linux kernel AMD GPU dce100 driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68234 | Linux kernel AMDGPU driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68233 | Linux kernel VC4 GPU driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68232 | Linux kernel drm gpusvm memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68231 | Linux kernel airspy driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68230 | Linux kernel Amlogic C3 ISP driver out-of-bounds write | 7.3CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68229 | Linux kernel Cedrus video decoder driver out-of-bounds read | 7.1CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68228 | Linux kernel Wave5 video encoder driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68227 | Linux kernel cx231xx driver memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68226 | Linux kernel cx23885 driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68225 | Linux kernel Alvium camera driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68224 | Linux kernel Mali-C55 ISP driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68223 | Linux kernel Meson video decoder memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68222 | Linux kernel msi2500 driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68221 | Linux kernel NPCM video driver memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68220 | Linux kernel i.MX8 ISI crossbar and pipe memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68219 | Linux kernel i.MX8 ISI driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68218 | Linux kernel dm1105 PCI driver memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68217 | Linux kernel pwc webcam driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68216 | Linux kernel pwc webcam driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68215 | Linux kernel si476x radio driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68214 | Linux kernel RTL2832 demodulator driver use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68213 | Linux kernel RTL2832 SDR driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68212 | Linux kernel saa7134 driver memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68211 | Linux kernel STM32 DCMIPP driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68210 | Linux kernel STM32 DCMI driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68209 | Linux kernel sun4i CSI driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68208 | Linux kernel TI VPE driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68207 | Linux kernel TI VPE driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68206 | Linux kernel V4L2 HEVC slice controls vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68205 | Linux kernel v4l2-fwnode subdev registration vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68204 | Linux kernel vivid driver vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68203 | Linux kernel vivid driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68202 | Linux kernel ALSA sequencer queue timer vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68201 | Linux kernel ALSA timer use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68200 | Linux kernel ALSA timer vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68199 | Linux kernel ath6kl Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68198 | Linux kernel ath6kl Wi-Fi driver use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68197 | Linux kernel mwifiex Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68196 | Linux kernel wilc1000 Wi-Fi driver vulnerability | 8.3CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68195 | Linux kernel mt7615 Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68194 | Linux kernel mt7921 Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68193 | Linux kernel mt7925 Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68192 | Linux kernel brcmfmac Wi-Fi driver vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68191 | Linux kernel ath12k Wi-Fi driver null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68190 | Linux kernel rtl8723bs Wi-Fi driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68189 | Linux kernel Bluetooth HCI UUID list use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68188 | Linux kernel Bluetooth RFCOMM driver use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68187 | Linux kernel exec argument stack transfer vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68186 | Linux kernel binfmt_misc interpreter handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68185 | Linux kernel LoongArch early boot initialization vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68184 | Linux kernel CDROMVOLCTRL ioctl handling out-of-bounds read | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68183 | Linux kernel Stratix10 service layer memory management memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68182 | Linux kernel comedi_parport interrupt handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68181 | Linux kernel MEI client bus device release use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68180 | Linux kernel intel_th driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68179 | Linux kernel NSM device ioctl error handling improper locking | 8.4CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68178 | Linux kernel NSM device file operations vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68177 | Linux kernel enable_event trace trigger use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68176 | Linux kernel mmiotrace read handler vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68175 | Linux kernel mmiotrace trace_pipe close resource leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68174 | Linux kernel trace_event_call module and refcnt union vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68173 | Linux kernel ublk device recovery vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68172 | Linux kernel arm64 hugetlb page table walk vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68170 | Linux kernel MPTCP subflow backlog handling vulnerability | 9.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68169 | Linux kernel MPTCP userspace path manager use-after-free | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68168 | Linux kernel AFS directory entry editing vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68167 | Linux kernel btrfs data relocation inode handling vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68166 | Linux kernel userfaultfd VMA registration vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68165 | Linux kernel DAMON monitoring region validation divide-by-zero | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68164 | Linux kernel DAMON region range validation vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68163 | Linux kernel page table walk for device-private memory memory corruption | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68162 | Linux kernel SCTP auth_enable sysctl handler use-after-free | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68161 | Linux kernel SCTP UDP tunnel sockets vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68160 | Linux kernel MDS caps snaptrace parsing out-of-bounds read | 9.8CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-68159 | Linux kernel OSD map PG mapping decode out-of-bounds write | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68158 | Linux kernel OSD map decoding vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68157 | Linux kernel CRUSH map locality lookup null pointer dereference | 7.5CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68156 | Linux kernel Ceph messenger authorizer vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68155 | Linux kernel Ceph monitor map denial of service | 7.5CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68154 | Linux kernel CRUSH map decoding vulnerability | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68153 | Linux kernel Ceph client debugfs use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68152 | Linux kernel AMT delayed work queue use-after-free | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68151 | Linux kernel ELF FDPIC interpreter parsing memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68150 | Linux kernel emergency thaw superblock locking vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68149 | Linux kernel cached ACL state vulnerability | 8.4CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68148 | Linux kernel fscrypt direct key table vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68147 | Linux kernel fscrypt inline encryption key improper error handling | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68146 | Linux kernel ftrace trace parser race condition | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68145 | Linux kernel iomap folio state bitmap vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68144 | Linux kernel Phonet PEP protocol use-after-free | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68143 | Linux kernel SLIP receive buffer out-of-bounds write | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68142 | Linux kernel geneve tunnel changelink vulnerability | 8.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68141 | Linux kernel af_iucv null pointer dereference | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68140 | Linux kernel AF_IUCV path notifications use-after-free | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68139 | Linux kernel mlx5e multiport affiliation null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68138 | Linux kernel qdisc rate table list vulnerability | 7.8CNA v3.1 | 0.2% | 2026-08-10 | Exploit codeFix |
| CVE-2026-68137 | Linux kernel X.25 socket teardown use-after-free | 9.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-68136 | Linux kernel GRO packet aggregation kernel panic | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Exploit codeFix |
| CVE-2026-68135 | Linux kernel hip04 driver Rx path vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68134 | Linux kernel ptp_s390 driver vulnerability | 7.3CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68133 | Linux kernel ice driver PTP release vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68132 | Linux kernel superblock freeze and thaw deadlock | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68131 | Linux kernel RBD object map update vulnerability | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68130 | Linux kernel ksmbd NTLM improper authentication | – | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68129 | Linux kernel gve driver Rx queue denial of service | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68128 | Linux kernel ice driver packet parser out-of-bounds write | 8.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68127 | Linux kernel ILA checksum adjustment use-after-free | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68126 | Linux kernel mac802154 scan worker vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68125 | Linux kernel mac802154 llsec vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68124 | Linux kernel MCTP serial driver buffer overflow | 9.6CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68123 | In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVS_ACTION_ATTR_TRUNC currently stores a delta from the original skb length in OVS_CB(skb)->cutlen. When a later userspace action segments a GSO skb, queue_gso_packets() reuses t | 9.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68122 | Linux kernel ovpn TCP error handling memory leak | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68121 | Linux kernel PPPoE send path vulnerability | 7.8CNA v3.1 | 0.3% | 2026-08-10 | Exploit codeFix |
| CVE-2026-68120 | Linux kernel rtase driver denial of service | 7.5CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68119 | Linux kernel TCP-AO response padding vulnerability | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68118 | Linux kernel TCP SYN-RECEIVED handling vulnerability | 8.2CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68117 | Linux kernel TIPC socket creation vulnerability | 9.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68116 | Linux kernel VXLAN MDB vulnerability | 7.9CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68115 | Linux kernel amdgpu gfx10 driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68114 | Linux kernel amdgpu gfx12.1 driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68113 | Linux kernel amdgpu gfx12 driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68112 | Linux kernel amdgpu driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68111 | Linux kernel amdgpu GFX9 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68110 | Linux kernel drm/amdgpu/sdma4.4.2 crash | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68109 | Linux kernel amdgpu sdma7.1 driver denial of service | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68108 | Linux kernel amdgpu VCE image size validation integer overflow | 8.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68107 | Linux kernel amdgpu VCN4 IB parsing race condition | 8.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68106 | Linux kernel amdgpu UVD dimension validation division by zero | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68105 | Linux kernel amdgpu MES initialization null pointer dereference | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68104 | Linux kernel amdgpu DRM driver vulnerability | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-68103 | Linux kernel amdgpu doorbell mapping vulnerability | 7.1CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68102 | Linux kernel amdgpu aperture mapping vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68100 | Linux kernel ksmbd ACE copying vulnerability | 8.1CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68099 | Linux kernel ksmbd ACL size calculation vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68098 | Linux kernel ksmbd ACL deduplication vulnerability | 8.8CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-68097 | Linux kernel ksmbd SID validation vulnerability | 8.8CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-68096 | Linux kernel audit executable rule duplication deadlock | 7.5CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-68095 | Linux kernel FUSE io_uring registration vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68094 | Linux kernel sched_ext local dispatch queue vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68093 | Linux kernel KVM SVM ASID allocation vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68092 | Linux kernel jiffies clocksource improper initialization | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68091 | Linux kernel Wacom driver probe error handling vulnerability | 8.8CNA v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-68090 | Linux kernel debugobjects OOM handling race condition | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68089 | Linux kernel IIO core debugfs vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68088 | Linux kernel RNDIS gadget query response vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68087 | Linux kernel Wacom driver queue flush vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68086 | Linux kernel khugepaged file folio collapse vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68085 | Linux kernel hci_uart Bluetooth driver vulnerability | 8.0CNA v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68084 | Linux kernel vme_user tsi148 bridge driver vulnerability | – | 0.2% | 2026-08-10 | Fix |
| CVE-2026-68083 | Linux kernel ksmbd file creation path resolution vulnerability | 9.1CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-66915 | Joomla extension fabrikar.com unauthenticated remote code execution in Fabrik | 10.0CNA v4.0 | 0.8% | 2026-08-10 | |
| CVE-2026-66738 | SPIP code injection via Navigation endpoint on SQLite | 7.7CNA v4.0 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-66642 | WP Umbrella WordPress plugin cross-site request forgery | 5.4CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-66486 | Improper output encoding in GNU cpio | 4.6CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66485 | Uncontrolled Memory Allocation in GNU cpio | 4.6CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66484 | Path traversal in GNU cpio | 4.6CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66411 | ECOVACS ROBOTICS DEEBOT PRO M1 flawed authentication | 6.9CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-66410 | ECOVACS ROBOTICS Android App "ECOVACS PRO" improper certificate validation | 2.3CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66409 | ECOVACS ROBOTICS DEEBOT PRO M1 weak credentials | 6.9CNA v4.0 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-66408 | ECOVACS ROBOTICS DEEBOT PRO M1 weak credentials | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66407 | ECOVACS ROBOTICS DEEBOT PRO M1 weak cryptographic algorithm | 7.7CNA v4.0 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-66406 | ECOVACS ROBOTICS DEEBOT PRO M1 improper certificate validation | 2.3CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66405 | ECOVACS ROBOTICS DEEBOT PRO M1 active debug code | 8.7CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-66404 | ECOVACS ROBOTICS DEEBOT PRO M1 improper certificate validation | 6.0CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-66403 | ECOVACS ROBOTICS DEEBOT PRO M1 active debug code | 8.7CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-65948 | Apache Ranger: UnixAuth lacks brute-force protection | 7.3CISA ADP v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-65945 | Apache Ranger: Logs contain replayable JWT bearer tokens | 6.5CISA ADP v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-65942 | Apache Ranger: Clients accept TLS certificates issued for other hostnames | 7.5CISA ADP v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-64941 | phoenixframework phoenix_live_view open redirect in Phoenix.LiveView.validate_local_url!/2 | 2.1CNA v4.0 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-64940 | Nishishi Factory Tegalog -Fumy Otegaru Memo Logger- management console vulnerability | 8.8CNA v4.0 | 0.4% | 2026-08-10 | |
| CVE-2026-63623 | Red Hat Enterprise Linux 10 libvirt: Information disclosure | 5.5CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-63622 | Red Hat Enterprise Linux 10 libvirt: Swtpm privilege escalation via symlink following | 7.8CNA v3.1 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-63106 | Razinsoft Ready eCommerce ReadyEcommerce unauthenticated SQL injection via ProductController.php | 9.3CNA v4.0 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-63105 | Razinsoft Ready eCommerce chat and support ticket messaging stored cross-site scripting | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-61899 | Apache Tapestry: Possible classpath file download through URL manipulation | 7.5CISA ADP v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-59233 | Missing authorization in Prospero Flow CRM permission save endpoint allows privilege escalation | 8.7CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-59112 | Signature validation vulnerability affecting DigiDoc applications | 4.4CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-59091 | Gimp: Gimp: Multiple vulnerabilities in file format plugins via crafted image file | 7.8NVD v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-59090 | Gimp: Gimp: Arbitrary code execution in psd plugin due to unsigned underflow | 9.9NVD v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-59088 | Gimp: Gimp: Denial of service via signed integer overflow in fli file processing | 5.5NVD v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-59087 | GIMP Seattle Filmworks file loader out-of-bounds write | 7.8NVD v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-57279 | Cybozu Garoon cross-site scripting | 6.0CNA v4.0 | 0.3% | 2026-08-10 | |
| CVE-2026-56620 | HCL BigFix Mobile is vulnerable to information disclosure | 4.3CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-56619 | HCL BigFix Mobile is vulnerable to reflected cross-site scripting (reflected XSS) | 5.4CNA v3.1 | 0.2% | 2026-08-10 | |
| CVE-2026-55814 | Apache Ranger: Download APIs expose plugin data without authentication | 7.5CISA ADP v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-55799 | Apache Ranger: Remote code execution vulnerability in GraalScriptEngineCreator | 9.8CISA ADP v3.1 | 1.2% | 2026-08-10 | Fix |
| CVE-2026-48161 | react18-use was vulnerable to malicious code execution via compromised commits | 9.3CNA v4.0 | 0.7% | 2026-08-10 | |
| CVE-2026-48160 | react-tracked was vulnerable to malicious code execution via compromised commits | 9.3CNA v4.0 | 0.7% | 2026-08-10 | |
| CVE-2026-48159 | dai-shi use-reducer-async postinstall script embedded malicious code | 9.3CNA v4.0 | 0.7% | 2026-08-10 | |
| CVE-2026-48158 | dai-shi use-context-selector postinstall script embedded malicious code | 9.3CNA v4.0 | 0.7% | 2026-08-10 | |
| CVE-2026-48048 | XWiki Platform's Livetable results still allow reconstructing password hashes using 768 requests | 7.5CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-47754 | Unauthenticated path traversal in Metacat | 9.3CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-44630 | Apache IoTDB: RPC service denial of service via unchecked Thrift string length | 7.5CISA ADP v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-44416 | Apache Ranger: Remote code execution via arbitrary Class Instantiation | 9.8CISA ADP v3.1 | 1.2% | 2026-08-10 | Fix |
| CVE-2026-44401 | Typemill CMS persistent XSS via Markdown javascript URI | 4.6CNA v4.0 | 0.3% | 2026-08-10 | Exploit codeFix |
| CVE-2026-42537 | Apache Ranger: Remote code execution via JDBC URL injection | 9.8CISA ADP v3.1 | 1.3% | 2026-08-10 | Fix |
| CVE-2026-40920 | Apache Ranger: Privilege escalation via URL parameter | 9.8CISA ADP v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-32227 | Apache Ranger: SQL injection vulnerability in lookup functionality | 9.8CISA ADP v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-28672 | Apache Ranger: OS command injection via Username in UnixUserGroupBuilder | 9.8CISA ADP v3.1 | 2.6% | 2026-08-10 | Exploit codeFix |
| CVE-2026-21084 | Samsung Mobile SmartThings improper access control | 6.9CNA v4.0 | 0.1% | 2026-08-10 | |
| CVE-2026-21083 | Samsung Mobile Smart Switch improper input validation | 6.8CNA v4.0 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-21082 | Samsung Mobile Samsung Health relative path traversal | 6.9CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21081 | Samsung Mobile SamsungPassAutofill improper export of Android application components | 5.1CNA v4.0 | 0.1% | 2026-08-10 | |
| CVE-2026-21080 | Samsung Mobile Smart Switch cleartext storage of sensitive information | 6.9CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21079 | Samsung Mobile Smart Switch missing encryption | 7.0CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-21078 | Samsung Mobile Smart Switch insufficient verification of data authenticity | 4.7CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21077 | Samsung Mobile Samsung Health incorrect authorization | 6.9CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-21076 | Samsung Mobile Samsung Health incorrect authorization | 6.9CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-21075 | Samsung Mobile My Galaxy handler for custom URL scheme improper authorization | 5.3CNA v4.0 | 0.5% | 2026-08-10 | |
| CVE-2026-21074 | Samsung Mobile Bixby incorrect default permissions | 7.2CNA v4.0 | 0.1% | 2026-08-10 | |
| CVE-2026-21073 | Samsung Mobile Devices Galaxy Themes improper input validation | 5.2CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21072 | Samsung Mobile Devices VC1 codec in libsavsvc.so improper input validation | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21071 | Samsung Mobile Devices MPEG4 codec in libsavsvc.so improper input validation | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21070 | Samsung Mobile Devices improper input validation | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21069 | Samsung Mobile Devices VC1 codec in libsavsvc.so incorrect numeric conversion | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21068 | Samsung Mobile Devices libril_sem.so stack-based buffer overflow | 8.4CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21067 | Samsung Mobile Devices libsmsd.so improper input validation | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21066 | Samsung Mobile Devices libcodec2_sec_flacdec.so improper input validation | 5.1CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21065 | Samsung Mobile Devices libcodec2secqcelpdec.so out-of-bounds write | 4.4CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21064 | Samsung Mobile Devices Weaver improper access control | 7.0CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-21063 | Samsung Mobile Devices AppLock improper export of Android application components | 6.8CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21062 | Samsung Mobile Devices SemClipboardService authorization bypass | 4.8CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-21061 | Samsung Mobile Devices improper input validation | 6.0CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-21060 | Samsung Mobile Devices improper input validation | 6.7CNA v4.0 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-21059 | Samsung Mobile Devices improper export of Android application components | 6.9CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-21058 | Samsung Mobile Devices improper input validation | 6.9CNA v4.0 | 0.1% | 2026-08-10 | Fix |
| CVE-2026-19433 | Authorization bypass through user-controlled key in Prospero Flow CRM contact save and vCard export | 8.6CNA v4.0 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-19411 | Shim device path parser null pointer dereference | 3.9CNA v3.1 | 0.1% | 2026-08-10 | |
| CVE-2026-19404 | Red Hat Directory Server CleanAllRUV replication maintenance missing authorization | 6.5CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-19389 | Red Hat GStreamer gst-plugins-ugly ASF demuxer integer overflow | 7.1CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-19387 | Red Hat GStreamer gst-plugins-bad ADPCM decoder out-of-bounds write | 7.6CNA v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-19384 | SourceCodester Simple Doctors Appointment System ajax.php set_appointment SQL injection | 6.9CNA v4.0 | 0.4% | 2026-08-10 | |
| CVE-2026-19383 | Saithink/saigroup SaiAdmin plugin upload endpoint upload shell_exec unrestricted upload | 5.1CNA v4.0 | 0.4% | 2026-08-10 | |
| CVE-2026-19382 | Almico Speedfan MSR Index Speedfan.sys KiSystemCall64 memory leak | 4.6CNA v4.0 | 0.2% | 2026-08-10 | |
| CVE-2026-19381 | Kingston FURY CTRL RGB Control Software Driver NTIOLib_KSFX.sys privileges management | 8.5CNA v4.0 | 0.2% | 2026-08-10 | |
| CVE-2026-19380 | Mullvad wireguard.sys IOCTL AdapterState reference count | 4.6CNA v4.0 | 0.2% | 2026-08-10 | |
| CVE-2026-19379 | EFM ipTIME AX8004M CGI endpoint d.cgi popen os command injection | 6.9CNA v4.0 | 2.7% | 2026-08-10 | |
| CVE-2026-19278 | Red Hat Advanced Cluster Security 4 stackrox: Stackrox: Privilege escalation | 6.8CNA v3.1 | 0.3% | 2026-08-10 | |
| CVE-2026-19089 | Product Input Fields for WooCommerce WordPress plugin unauthenticated arbitrary file upload | 9.8CISA ADP v3.1 | 0.8% | 2026-08-10 | NucleiExploit codeFix |
| CVE-2026-19077 | Duplicate Post bulk copy and delete handler insecure direct object reference | 6.5CISA ADP v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-19075 | All-in-One Video Gallery WordPress plugin Subscriber+ server-side request forgery via vdl parameter | 5.0CISA ADP v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-19074 | Advanced Classifieds and Directory Pro custom fields AJAX handler information disclosure | 5.3CISA ADP v3.1 | 0.2% | 2026-08-10 | Fix |
| CVE-2026-19053 | ProSolution WP Client WordPress plugin unauthenticated blind SQLi via jobID parameter | 9.1CISA ADP v3.1 | 0.4% | 2026-08-10 | Fix |
| CVE-2026-19049 | ProSolution WP Client WordPress plugin unauthenticated SQLi and plugin data deletion | 8.6CISA ADP v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-18982 | Red Hat OpenShift AI training operator privilege escalation | 8.8CNA v3.1 | 0.8% | 2026-08-10 | Fix |
| CVE-2026-18960 | Block User Account WordPress plugin Subscriber+ account block bypass via Application Passwords | 5.4CISA ADP v3.1 | 0.3% | 2026-08-10 | Fix |
| CVE-2026-18951 | Red Hat OpenShift AI training operator overlay privilege escalation | 8.8CNA v3.1 | 0.9% | 2026-08-10 | Fix |
| CVE-2026-18950 | Red Hat OpenShift AI odh-dashboard: Odh-dashboard: Confused-deputy privilege escalation | 8.8CNA v3.1 | 0.5% | 2026-08-10 | Fix |
| CVE-2026-18949 | Red Hat OpenShift AI odh-dashboard privilege escalation | 8.8CNA v3.1 | 0.7% | 2026-08-10 | Fix |
| CVE-2026-18948 | Feast registry stored UDFs deserialization of untrusted data | 9.9CNA v3.1 | 1.1% | 2026-08-10 | Fix |
| CVE-2026-18947 | Red Hat OpenShift AI feast: Feast: Authorization bypass in /materialize endpoints enables DoS | 8.5CNA v3.1 | 0.6% | 2026-08-10 | Fix |
| CVE-2026-18946 | Contact Form to Any API information disclosure | 7.5CISA ADP v3.1 | 0.4% | 2026-08-10 | Fix |