CVE-2026 list

CVE-2026 records published in August 2026

Page two of 13: records 1,001 to 2,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.

CVE-2026 records published in August 2026, newest first: records 1,001 to 2,000 of 12,071
CVE Summary CVSS EPSS Published Signals
CVE-2026-3686Vulnerabilities exists in IBM Cloud Pak for Data System6.2CNA v3.10.2%2026-08-28Fix
CVE-2026-3627IBM Concert SQL injection9.1CNA v3.10.5%2026-08-28Fix
CVE-2026-3423Envira Gallery WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-28Fix
CVE-2026-3129LiteSpeed Cache WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-28Fix
CVE-2026-82072Google Chrome V8 out-of-bounds read8.8CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-81934Redis TLS pending-data list use-after-free7.5CNA v4.00.5%2026-08-27Fix
CVE-2026-81931Roskus Prospero Flow CRM product photo unrestricted file upload4.8CNA v4.00.5%2026-08-27Fix
CVE-2026-81893gdk-pixbuf jpeg icc profile parser out-of-bounds write4.7CNA v3.10.2%2026-08-27Fix
CVE-2026-81851Fireware OS heap-based buffer overflow in iked allows denial of service6.9CNA v4.00.4%2026-08-27Fix
CVE-2026-81848cyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pattern server-side request forgery5.1CNA v4.00.3%2026-08-27
CVE-2026-81847MAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal5.1CNA v4.00.4%2026-08-27
CVE-2026-81845arben-adm mcp-sequential-thinking import/export session handler path traversal5.3CNA v4.00.5%2026-08-27Fix
CVE-2026-81838Zip Slip arbitrary file write in AWS diagram-as-code (awsdac)6.8CNA v4.00.2%2026-08-27Fix
CVE-2026-81837RooCodeInc Roo-Code ApplyPatchTool ApplyPatchTool.ts path.resolve path traversal5.3CNA v4.00.5%2026-08-27
CVE-2026-81836RooCodeInc Roo-Code OAuth Callback oauth.ts cleartext transmission6.3CNA v4.00.3%2026-08-27
CVE-2026-81835RooCodeInc Roo-Code MCP Integration Trust Model code injection5.1CNA v4.00.3%2026-08-27
CVE-2026-81834RooCodeInc Roo-Code README File ExecaTerminalProcess code injection5.3CNA v4.00.4%2026-08-27
CVE-2026-81833RooCodeInc Roo-Code CodeIndexManager helpers.ts optimizeQuery code injection5.1CNA v4.00.3%2026-08-27
CVE-2026-81827Flowintel Login Email Validation Bypass allows log injection via Crafted Email Input6.9CNA v4.00.4%2026-08-27
CVE-2026-81826Flowintel fails to Invalidate Active Sessions after Password Change9.1CNA v4.00.4%2026-08-27
CVE-2026-81820Flowintel HTML injection in MISP Case History Timeline via Crafted object attributes5.1CNA v4.00.4%2026-08-27
CVE-2026-81819Flowintel missing authorization allows Regular API Users to view other Users’ Task Assignments5.3CNA v4.00.5%2026-08-27
CVE-2026-81818Flowintel Organization Administrator can Reset Full Administrator Password and Escalate Privileges8.6CNA v4.00.4%2026-08-27
CVE-2026-81817Flowintel Missing Task-to-Case Authorization allows Cross-Case Task Modification7.2CNA v4.00.4%2026-08-27
CVE-2026-81814Flowintel stored XSS in Calendar via Malicious Case Title5.1CNA v4.00.4%2026-08-27
CVE-2026-81753Flowintel stored XSS in Case Notes via Malicious Mermaid Diagram Content5.1CNA v4.00.5%2026-08-27
CVE-2026-81743Flowintel arbitrary Log File Path allows remote code execution via template injection7.5CNA v4.00.4%2026-08-27
CVE-2026-81735ByteDance UI-TARS-desktop mcp-http-server run_command tool missing authentication10.0CNA v4.00.8%2026-08-27
CVE-2026-81731Frappe stored XSS via Workspace Link Description5.1CNA v4.00.3%2026-08-27Fix
CVE-2026-81730Dolibarr path traversal via EmailCollector Attachment Filename8.8CNA v4.00.6%2026-08-27Fix
CVE-2026-81729Dolibarr incorrect authorization on REST API Document Deletion7.1CNA v4.00.4%2026-08-27Fix
CVE-2026-81728Dolibarr SQL injection via the CSV and XLSX Import Update Keys8.6CNA v4.00.4%2026-08-27Fix
CVE-2026-81727NLTK Hardlink File Overwrite via downloader6.9CNA v4.00.2%2026-08-27Fix
CVE-2026-81726NLTK path traversal via Model-Artifact APIs8.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81725NLTK regular expression denial of service via Pl196xCorpusReader6.3CNA v4.00.4%2026-08-27Fix
CVE-2026-81724NLTK denial of service via uncontrolled recursion6.9CNA v4.00.5%2026-08-27Fix
CVE-2026-81723NLTK Quadratic CPU exhaustion via XMLCorpusView6.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81722nltk PorterStemmer Quadratic-time DoS8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-81721openssl_encrypt denial of service via KDF8.7CNA v4.00.6%2026-08-27Fix
CVE-2026-81720openssl_encrypt denial of service via Unbounded Argon26.9CNA v4.00.2%2026-08-27Fix
CVE-2026-81719openssl_encrypt remote code execution via plugin9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-81718openssl_encrypt weak cryptographic parameters8.7CNA v4.00.2%2026-08-27Fix
CVE-2026-81717openssl_encrypt Integrity Bypass via Added files9.3CNA v4.00.1%2026-08-27Fix
CVE-2026-81716openssl_encrypt Plugin Sandbox path traversal8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81715openssl_encrypt credential exposure via Debug Output8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81714openssl_encrypt Plugin Signing Trust Anchor Enrollment Bypass9.3CNA v4.00.2%2026-08-27Fix
CVE-2026-81707openssl_encrypt ANSI Escape injection via Identity Email9.3CNA v4.00.6%2026-08-27Fix
CVE-2026-81706openssl_encrypt Key Substitution via Identity Shadowing6.8NVD v3.10.2%2026-08-27Fix
CVE-2026-81705jahlives openssl_encrypt openssl-encrypt Password Cleartext leak via Debug8.7CNA v4.00.4%2026-08-27Fix
CVE-2026-81704openssl_encrypt Weak Key Derivation via D-Bus8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81703openssl_encrypt authentication bypass via Unencrypted PQC Key8.7CNA v4.00.2%2026-08-27Fix
CVE-2026-81702openssl_encrypt Key Substitution via Identity Load9.3CNA v4.00.2%2026-08-27Fix
CVE-2026-81701openssl_encrypt arbitrary code execution via unsigned plugin9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-81700openssl_encrypt GPG signature verification Bypass9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-81699openssl_encrypt denial of service via unbounded KDF cost8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-81698openssl_encrypt Shell injection via info command8.8NVD v3.10.4%2026-08-27Fix
CVE-2026-81697openssl_encrypt KDF Downgrade via CWD-relative Configuration8.7CNA v4.00.2%2026-08-27Fix
CVE-2026-81696openssl_encrypt Terminal injection via info command9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81695openssl_encrypt Terminal injection via key_id9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81694jahlives openssl_encrypt verify-usb output injection via Unsanitized Filenames9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81693openssl_encrypt denial of service via QR total field8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-81692openssl_encrypt denial of service via STREAMINFO8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-81691openssl_encrypt credential leakage via Unvalidated Server URLs8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81690jahlives openssl_encrypt verify-usb Symlink directory traversal code execution8.7CNA v4.00.7%2026-08-27Fix
CVE-2026-81689openssl_encrypt Weak Pepper Key Derivation8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81688openssl_encrypt Plaintext Confirmation Oracle via SHA-2568.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81687openssl_encrypt denial of service via KDF8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-81686openssl_encrypt D-Bus Properties authorization bypass5.5NVD v3.10.1%2026-08-27Fix
CVE-2026-81685openssl_encrypt Text injection via Recovery Slot Metadata9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81684openssl_encrypt information disclosure via Command Line6.9CNA v4.00.2%2026-08-27Fix
CVE-2026-81683openssl_encrypt Plaintext Private Key Storage5.5NVD v3.10.1%2026-08-27Fix
CVE-2026-81682openssl_encrypt insecure file permissions8.6CNA v4.00.2%2026-08-27Fix
CVE-2026-81681openssl_encrypt False Encryption via cleartext storage9.3CNA v4.00.2%2026-08-27Fix
CVE-2026-81680openssl_encrypt authentication bypass via Recovery Slot Removal5.3NVD v3.10.2%2026-08-27Fix
CVE-2026-81679OpenRemote Cross-Realm information disclosure via Notification API8.3CNA v4.00.4%2026-08-27Fix
CVE-2026-81678AVideo SSRF Guard Bypass via IPv6 Transition Addresses6.9CNA v4.00.4%2026-08-27Fix
CVE-2026-81677TOOOLS iSquad /ws/apiprensa/getVideo endpoint SQL injection8.8CNA v4.00.4%2026-08-27Fix
CVE-2026-81676TOOOLS iSquad /ws/apitribuna/ultimosVideos endpoint SQL injection8.8CNA v4.00.5%2026-08-27Fix
CVE-2026-81675TOOOLS iSquad /ws/apiprensa/getVideoUltimasSeccion endpoint SQL injection9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-81674TOOOLS iSquad getVideoNextPrev endpoint SQL injection9.3CNA v4.00.5%2026-08-27Fix
CVE-2026-81673TOOOLS iSquad /ws/apitribuna/setVisita endpoint SQL injection9.3CNA v4.00.6%2026-08-27Fix
CVE-2026-81672TOOOLS iSquad SQL injection9.3CNA v4.00.5%2026-08-27Fix
CVE-2026-81668Red Hat Satellite Content View Filter Rules API insecure direct object reference5.4CNA v3.10.2%2026-08-27
CVE-2026-81664OpenFaaS Gateway missing authentication on the /system/telemetry route6.9CNA v4.00.4%2026-08-27Fix
CVE-2026-81662Flowintel Alert Settings Configuration allows remote code execution via arbitrary Configuration Keys8.6CNA v4.00.5%2026-08-27
CVE-2026-81659Flowintel Note PDF Export allows arbitrary Local File Read via Pandoc/XeLaTeX Processing7.1CNA v4.00.5%2026-08-27
CVE-2026-81658Foreman: Cross-tenant disclosure of template revisions via unauthorized audit lookup6.5CNA v3.10.3%2026-08-27
CVE-2026-81625Stack buffer overflow in Greenbone OS and openvas-scanner8.7CNA v4.00.6%2026-08-27
CVE-2026-81581wibu-systems-ag wibukey improper input validation8.8CNA v3.10.2%2026-08-27Fix
CVE-2026-81579Wibu-Systems WibuKey WibuKey2_64.sys kernel driver privilege escalation8.8CNA v3.10.2%2026-08-27Fix
CVE-2026-81576wibu-systems-ag codemeter-runtime improper authentication of Session Handles7.7CNA v3.10.3%2026-08-27Fix
CVE-2026-81575wibu-systems-ag codemeter-runtime Missing Sanity Checks for Buffer Lengths7.5CNA v3.10.5%2026-08-27Fix
CVE-2026-81574wibu-systems-ag codemeter-runtime format string vulnerability in Logger8.2CNA v3.10.4%2026-08-27Fix
CVE-2026-81573wibu-systems-ag codemeter-runtime improper access control in Local-Only Configuration commands8.6CNA v3.10.4%2026-08-27Fix
CVE-2026-81572wibu-systems-ag codemeter-runtime local privilege escalation in CodeMeter Runtime on Windows7.8CNA v3.10.2%2026-08-27Fix
CVE-2026-81562AlexGladkov claude-in-mobile client.ts execSync os command injection4.8CNA v4.01.1%2026-08-27Fix
CVE-2026-81560blackms aistack Static file server.ts path traversal6.9CNA v4.00.7%2026-08-27
CVE-2026-81530KMS master key exposure via unredacted credential serialization in driver settings string6.8CNA v4.00.1%2026-08-27Fix
CVE-2026-81529Connection-option injection via unescaped settings in the canonical MongoDB URL builder7.1CNA v4.00.3%2026-08-27Fix
CVE-2026-81528NoSQL injection via array replacement bypassing update shape validation in driver write path5.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81527MongoDB C Driver NoSQL injection via unquoted constant GroupBy keys in LINQ pipeline translation6.9CNA v4.00.3%2026-08-27Fix
CVE-2026-81526MongoDB Rust Driver bulk write namespace construction injection7.1CNA v4.00.4%2026-08-27Fix
CVE-2026-81525Cross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver8.6CNA v4.00.5%2026-08-27Fix
CVE-2026-81524Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver5.3CNA v4.00.3%2026-08-27Fix
CVE-2026-81523Cross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt2.0CNA v4.00.1%2026-08-27Fix
CVE-2026-81522Cross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver8.6CNA v4.00.5%2026-08-27Fix
CVE-2026-81521MongoDB Go Driver Client.BulkWrite resource injection7.1CNA v4.00.2%2026-08-27Fix
CVE-2026-81491boxpositron with-context-mcp index.ts project_folder path traversal6.9CNA v4.00.6%2026-08-27
CVE-2026-81486bsmi021 mcp-file-context-server Path Resolution index.ts read_context path traversal6.9CNA v4.00.7%2026-08-27
CVE-2026-81485danielpopamd linkedin-ads-mcp Media upload campaign-management.ts fs.readFileSync path traversal6.9CNA v4.00.7%2026-08-27
CVE-2026-81335Baserow Unauthenticated data disclosure via Discarded Permission Check on Builder Data Sources8.7CNA v4.00.6%2026-08-27Fix
CVE-2026-81334darknet out-of-bounds read and Write via Unchecked Layer Index in .cfg parser6.9CNA v4.00.2%2026-08-27
CVE-2026-81279Push Notification for Post and BuddyPress WordPress plugin broken access control5.4CNA v3.10.2%2026-08-27Fix
CVE-2026-81277Suggestion Engine for WooCommerce WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-27Fix
CVE-2026-81276Kali Forms WordPress plugin broken access control5.3CNA v3.10.3%2026-08-27Fix
CVE-2026-81274Ditty WordPress plugin broken access control5.3CNA v3.10.3%2026-08-27Fix
CVE-2026-81273FluentBooking Pro WordPress plugin cross-site request forgery (CSRF)8.1CNA v3.10.2%2026-08-27Fix
CVE-2026-81272FluentPlayer Pro WordPress plugin broken access control4.9CNA v3.10.3%2026-08-27Fix
CVE-2026-81271GeoDirectory WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-08-27Fix
CVE-2026-81102Dropbox Dash MCP Server DNS Rebinding via Missing host Header Validation2.3CNA v4.00.2%2026-08-27
CVE-2026-81101Airtable MCP CLI credential disclosure via Unvalidated Configured endpoint6.9CNA v4.00.4%2026-08-27Fix
CVE-2026-81100Timescale tiger-gh-mcp-server DNS Rebinding via Disabled host Header Allow-List7.6CNA v4.00.2%2026-08-27
CVE-2026-81099Timescale tiger-slack DNS Rebinding via Disabled host Header Allow-List7.6CNA v4.00.2%2026-08-27
CVE-2026-81098team-telnyx telnyx-mcp telnyx MCP server missing authentication on Streamable HTTP Transport9.3CNA v4.00.7%2026-08-27Fix
CVE-2026-81097rails-mcp-server OS command execution via execute_ruby PTY Escape8.6CNA v4.00.2%2026-08-27Fix
CVE-2026-81096ToolUniverse unauthenticated remote code execution via python_code_executor sandbox escape9.3CNA v4.00.9%2026-08-27Fix
CVE-2026-81095Timescale pg-aiguide DNS Rebinding via Disabled host Header Allow-List7.6CNA v4.00.2%2026-08-27
CVE-2026-81094mcp-router CLI Binds the MCP Aggregator to All Interfaces without Requiring Authentication9.3CNA v4.00.6%2026-08-27Fix
CVE-2026-81093Apify Actors MCP server server-side request forgery via get-html-skeleton8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-81092mcp-go Missing host Header Validation enables DNS Rebinding7.6CNA v4.00.2%2026-08-27Fix
CVE-2026-81091mcp-use Inspector Proxy server-side request forgery via Caller-Supplied Target URL8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-80433SureFeedback Client Site WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-27Fix
CVE-2026-80213ruby resolv numeric truncation4.0CNA v3.10.4%2026-08-27Fix
CVE-2026-80212ruby resolv resource exhaustion7.5CNA v3.10.4%2026-08-27Fix
CVE-2026-80211FrontAccounting Use of Unsalted MD5 for Password Storage8.2CNA v4.00.3%2026-08-27
CVE-2026-80210FrontAccounting cross-site request forgery on Financial Transaction forms7.1CNA v4.00.2%2026-08-27
CVE-2026-80209Fonoster incorrect authorization in the Identity UpdateWorkspace handler5.3CNA v4.00.4%2026-08-27
CVE-2026-80208APITable missing authentication on the Internal Account Closure endpoints8.8CNA v4.00.4%2026-08-27
CVE-2026-80207APITable missing authentication on the Internal Notification Create endpoint6.9CNA v4.00.3%2026-08-27
CVE-2026-80179Red Hat Ansible Automation Platform 2 jwcrypto: Jwcrypto: Denial of service via malformed jwe tokens5.9CNA v3.10.4%2026-08-27Fix
CVE-2026-79988craftcms cms authenticated RCE through Twig sandbox escape8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-79720Netron reflected cross-site scripting5.0NVD v3.10.3%2026-08-27Fix
CVE-2026-79719Netron reflected cross-site scripting5.0NVD v3.10.3%2026-08-27Fix
CVE-2026-79718Netron reflected cross-site scripting5.0NVD v3.10.3%2026-08-27Fix
CVE-2026-79653Eclipse SW360 path traversal6.0CNA v4.00.5%2026-08-27Fix
CVE-2026-78618Dimension business logic flaw allows Chained Backend Object Operations6.9CNA v4.00.4%2026-08-27Fix
CVE-2026-78617WatchGuard Dimension Web UI authentication brute-force due to Missing Rate Limiting6.3CNA v4.00.4%2026-08-27Fix
CVE-2026-78616Dimension stored XSS via Trusted CA Certificate Configuration4.8CNA v4.00.3%2026-08-27Fix
CVE-2026-78615WatchGuard Dimension Reflected DOM-based XSS in Report Detail page4.6CNA v4.00.5%2026-08-27Fix
CVE-2026-78614Dimension SQL injection in Audit Report8.6CNA v4.00.7%2026-08-27Fix
CVE-2026-78613Dimension SQL injection in Log Viewer8.6CNA v4.00.6%2026-08-27Fix
CVE-2026-78612Dimension SQL injection in Scheduled Report8.6CNA v4.00.7%2026-08-27Fix
CVE-2026-78610Dimension CSRF vulnerability in Administrator Passphrase Change endpoint8.4CNA v4.00.2%2026-08-27Fix
CVE-2026-78500Dimension Blind SSRF via Database Test Connection feature5.1CNA v4.00.4%2026-08-27Fix
CVE-2026-78499Dimension SSRF via FTP Server Test Connection5.1CNA v4.00.4%2026-08-27Fix
CVE-2026-78498Dimension server-side request forgery via Email Server Test settings5.1CNA v4.00.4%2026-08-27Fix
CVE-2026-78495Dimension server-side request forgery via Remote Backup Connection Test5.3CNA v4.00.4%2026-08-27Fix
CVE-2026-7833312 Step Meeting List - unauthenticated stored XSS via Geocode Event Log8.8CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-78293WP w3all phpBB WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-27Fix
CVE-2026-78292Hash Form WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-27Fix
CVE-2026-78289CozyStay WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-27Fix
CVE-2026-78288Beautiful Taxonomy Filters WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-27Fix
CVE-2026-78286Geo Controller WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-27Fix
CVE-2026-78285Like Button Rating WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-27Fix
CVE-2026-78283Music Player for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-27Fix
CVE-2026-78281CP Media Player WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-27Fix
CVE-2026-78276Fluent Boards Pro WordPress plugin PHP object injection7.2CNA v3.10.5%2026-08-27Fix
CVE-2026-78275Fluent Boards Pro WordPress plugin arbitrary file deletion6.8CNA v3.10.5%2026-08-27Fix
CVE-2026-78274Fluent Boards Pro WordPress plugin arbitrary file upload9.1CNA v3.10.5%2026-08-27Fix
CVE-2026-78273Fluent Boards Pro WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-27Fix
CVE-2026-78271FluentCRM Pro WordPress plugin privilege escalation7.2CNA v3.10.5%2026-08-27Fix
CVE-2026-78261Realtyna Organic IDX WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-27Fix
CVE-2026-78260Epayco WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-27Fix
CVE-2026-78257Booking and Rental Manager WordPress plugin PHP object injection8.8CNA v3.10.5%2026-08-27Fix
CVE-2026-78239Xiiaozet LK100W missing authentication for critical function9.3CNA v4.00.8%2026-08-27Fix
CVE-2026-78174WatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-78139Notifima WordPress plugin Subscriber+ Stock Alert Unsubscription via IDOR4.3CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-78138Finale Lite WordPress plugin Subscriber+ Campaign Configuration disclosure via wcct_quick_view_html4.3CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-78137StoreGrowth BOGO add-to-cart pricing missing authorization7.5CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-78125LearnPress Sepay Payment WordPress plugin unauthenticated order Status disclosure5.3CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-78103Dimension Log Server Configuration Lock Bypass vulnerability5.1CNA v4.00.5%2026-08-27Fix
CVE-2026-78047Dimension stored XSS in Scheduled Report Task5.1CNA v4.00.4%2026-08-27Fix
CVE-2026-78037Xiiaozet LK100W OS command injection8.7CNA v4.01.9%2026-08-27Fix
CVE-2026-78011Fireware OS integer underflow in Iked allows Unauthenticated denial of service (DoS)8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-78010Fireware OS stack-based buffer overflow in iked allows Unauthenticated denial of service8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-78009Fireware OS out-of-bounds read in iked allows Unauthenticated denial of service (DoS)8.7CNA v4.00.5%2026-08-27Fix
CVE-2026-78008Fireware OS authenticated buffer overflow in wgagent8.6CNA v4.00.6%2026-08-27Fix
CVE-2026-78002Red Hat Enterprise Linux 10 rsyslog: Rsyslog: Denial of service7.5CNA v3.10.8%2026-08-27Fix
CVE-2026-77991Joomla extension joomlaeventmanager.net Privileged remote code execution in Joomla Event Manager9.4CNA v4.00.6%2026-08-27Exploit code
CVE-2026-77990joomlaeventmanager.net JEM Attendee lists insecure direct object reference5.3CNA v4.00.4%2026-08-27
CVE-2026-77989Joomla extension joomlaeventmanager.net reflected XSS5.3CNA v4.00.4%2026-08-27
CVE-2026-77977Ebyte NA111-M missing authentication for critical function7.2CNA v4.00.4%2026-08-27
CVE-2026-77438Trilium unauthenticated share-search discloses password-protected and hidden shared notes7.5CNA v3.10.4%2026-08-27Fix
CVE-2026-77358cpp-httplib WebSocket client TLS session shutdown use-after-free8.2CNA v4.00.4%2026-08-27Fix
CVE-2026-77341cpp-httplib chunked response trailer headers CRLF injection5.3CNA v4.00.5%2026-08-27Fix
CVE-2026-77035Joomla extension joomlaeventmanager.net Cross-user event and venue takeover5.1CNA v4.00.4%2026-08-27
CVE-2026-77034joomlaeventmanager.net JEM improper access control6.9CNA v4.00.4%2026-08-27
CVE-2026-77018Workeera Remote Tech Job Board WordPress plugin arbitrary file upload8.8CISA ADP v3.10.7%2026-08-27Fix
CVE-2026-77017Workeera Remote Tech Job Board WordPress plugin arbitrary file read7.7CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-77016Workeera Remote Tech Job Board WordPress plugin arbitrary file deletion9.6CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-76945Ebyte NE2-D11 use of client-side authentication8.7CNA v4.00.5%2026-08-27
CVE-2026-76943Xiiaozet LK100W authentication bypass using an alternate path or channel9.3CNA v4.01.0%2026-08-27Fix
CVE-2026-76940Ebyte NA111-M improper restriction of excessive authentication attempts8.7CNA v4.00.5%2026-08-27
CVE-2026-76640Unitree G1 EDU BLE GATT RCE via WiFi Provisioning Stack7.7CNA v4.00.3%2026-08-27KCV
CVE-2026-76639Unitree G1 EDU unauthenticated RCE via DDS Bridge and path traversal8.7CNA v4.00.7%2026-08-27Exploit codeKCV
CVE-2026-76549UpdraftPlus WordPress plugin Backup Restoration via CSRF5.9CISA ADP v3.10.1%2026-08-27Fix
CVE-2026-76179Ebyte NA111-M Use of GET request method with sensitive query strings9.3CNA v4.00.7%2026-08-27
CVE-2026-76060zoneminder OS command injection in PayRange API8.7CNA v4.02.4%2026-08-27Exploit codeFix
CVE-2026-75889Grafana Alloy ServiceMonitor bearerTokenFile handling information disclosure7.7CNA v3.10.4%2026-08-27Fix
CVE-2026-75871Server-side request forgery (SSRF) in GitLab AI Gateway8.2CNA v3.10.3%2026-08-27Fix
CVE-2026-75814Ebyte NA111-M cross-site request forgery8.6CNA v4.00.2%2026-08-27
CVE-2026-75813Ebyte NE2-D11 missing authorization8.7CNA v4.00.4%2026-08-27
CVE-2026-75573MongoDB Connector for BI mongodrdl Logs TLS Private-Key Password when Duplicate options are Supplied4.1CNA v4.00.1%2026-08-27Fix
CVE-2026-75548Ebyte NA111-M improper restriction of rendered UI layers or frames5.3CNA v4.00.3%2026-08-27
CVE-2026-75419GoWind authorization middleware missing authorization8.8CNA v3.10.5%2026-08-27
CVE-2026-75418Lektor development web server path traversal7.5CNA v3.10.6%2026-08-27
CVE-2026-75417YzmCMS get_arrchildid function SQL injection7.2CISA ADP v3.10.5%2026-08-27
CVE-2026-75357Bilibili Desktop bili-inject.js and bili-bridge.js code injection9.8CISA ADP v3.10.9%2026-08-27
CVE-2026-75339cjbi admin3 storage upload endpoint missing authorization8.8CISA ADP v3.10.4%2026-08-27
CVE-2026-75337Yu AI Code Mother static resource interface path traversal9.8CISA ADP v3.10.6%2026-08-27
CVE-2026-75159MongoDB BI Connector Kerberos authentication handling denial of service8.2CNA v4.00.3%2026-08-27Fix
CVE-2026-75020Apache APISIX: Ldap-auth plugin cross-subtree identity impersonation7.0CNA v4.00.5%2026-08-27Fix
CVE-2026-75005Apache APISIX: Unauthenticated CPU-exhaustion DoS8.7CNA v4.00.7%2026-08-27Fix
CVE-2026-74848Apache APISIX: Cross-user response poisoning in serverless plugins7.0CNA v4.00.6%2026-08-27Fix
CVE-2026-74820ServiceNow AI Platform unauthenticated SQL injection via Dynamic Schema ORDER BY Clause10.0CNA v4.05.1%2026-08-27Fix
CVE-2026-74233Zbtlink MQWrt infosrvd command injection9.3CNA v4.03.4%2026-08-27Reported exploited
CVE-2026-74232Zbtlink MQWrt yunmgrd Cloud C2 Implant9.3CNA v4.00.8%2026-08-27Reported exploited
CVE-2026-73839Ebyte NE2-D11 insufficiently protected credentials5.1CNA v4.00.2%2026-08-27
CVE-2026-73809Ebyte NA111-M cleartext transmission of sensitive information8.7CNA v4.00.2%2026-08-27
CVE-2026-73125Ebyte NA111-M missing authentication for critical function9.3CNA v4.00.8%2026-08-27
CVE-2026-71402SUSE wicked DHCPv4 packet capture code out-of-bounds read5.3CNA v4.00.2%2026-08-27Fix
CVE-2026-71401SUSE wicked DHCPv4 packet capture code integer underflow5.3CNA v4.00.3%2026-08-27Fix
CVE-2026-71396Bendix EC80ESP+ J1708 hard-coded credentials5.3CNA v4.00.2%2026-08-27Fix
CVE-2026-71187Ebyte NA111-M use of client-side authentication9.3CNA v4.00.8%2026-08-27
CVE-2026-69658Ebyte NA111-M cleartext transmission of sensitive information9.3CNA v4.00.3%2026-08-27
CVE-2026-68967Out-of-bounds write in Bendix EC80 Brake ECU7.1CNA v4.00.3%2026-08-27Fix
CVE-2026-68929FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-67560Stack-based buffer overflow in Bendix EC80 Brake ECU7.7CNA v4.00.3%2026-08-27Fix
CVE-2026-66353Doggo vulnerable to cross-site scripting via unescaped date field values5.3CNA v4.00.5%2026-08-27Fix
CVE-2026-66155Siemens Element maps-ng V47 cross-site scripting7.0CNA v4.00.3%2026-08-27Fix
CVE-2026-65931LimeSurvey Community Edition improper authorization in survey menu entry creation endpoint5.1CNA v4.00.4%2026-08-27
CVE-2026-64896T2000 open debug port5.2CNA v4.00.2%2026-08-27Fix
CVE-2026-61802Wazuh discloses cleartext cluster key to low-privilege API users via GET /cluster/local/config6.5CNA v3.10.7%2026-08-27Fix
CVE-2026-61800Wazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for)9.1CNA v3.11.0%2026-08-27Fix
CVE-2026-61783Wazuh sensitive configuration masking information disclosure7.0CNA v4.00.4%2026-08-27Fix
CVE-2026-59355Spring Authorization Server: Open redirect via request_uri parameter6.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59354VMware Spring Security OAuth2 dynamic client registration improper input validation9.6CNA v3.10.5%2026-08-27Fix
CVE-2026-59324VMware Spring Integration flux transform message channel race condition8.2CNA v3.10.3%2026-08-27Fix
CVE-2026-59322VMware Spring Integration embedded headers message mapper improper input validation6.3CNA v3.10.3%2026-08-27Fix
CVE-2026-59321Spring Integration shared JSR-223 ScriptEngine evaluated concurrently without THREADING check4.2CNA v3.10.2%2026-08-27Fix
CVE-2026-59320In Spring AMQP the link credit never replenished on listener exception path6.5CNA v3.10.4%2026-08-27Fix
CVE-2026-59319VMware Spring AI RedisChatMemoryRepository NoSQL injection4.3CNA v3.10.3%2026-08-27Fix
CVE-2026-59317VMware Spring for Apache Kafka dead letter publishing recoverer denial of service6.5CNA v3.10.4%2026-08-27Fix
CVE-2026-59316Spring Authorization Server Default Consent page is vulnerable to cross-site scripting (XSS)8.2CNA v3.10.3%2026-08-27Fix
CVE-2026-59315Spring Cloud Config Monitor denial of service5.3CNA v3.10.4%2026-08-27Fix
CVE-2026-59314Spring Framework response splitting in ContentDisposition3.7v3.10.2%2026-08-27Fix
CVE-2026-59313Server Sent Event stream corruption in Spring MVC functional web framework9.8CISA ADP v3.10.6%2026-08-27Fix
CVE-2026-59311Spring Integration fixed predictable /tmp/ziptransformer work directory enables symlink pre-creation6.8CNA v3.10.4%2026-08-27Fix
CVE-2026-59307VMware Spring Integration deserialization of untrusted data8.0CNA v3.10.4%2026-08-27Fix
CVE-2026-59306Potential for deserialization of untrusted types in Spring Cloud Stream3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59305Spring Cloud Stream partition interceptor may be improperly added while sending message3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59304Improper caching of the original content type in Spring Cloud Stream Avro3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59303Dynamic destination cache size is not properly bound in Spring Cloud Stream3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59302Potential for logging sensitive data in Spring Cloud Stream3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59301Potential for logging sensitive data in Spring Cloud Function Azure3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59300Potential for logging sensitive data in Spring Cloud Function AWS3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59299Composition lookup can potentially poison base function in Spring Cloud Function3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59298Potential for improper filtering of HTTP headers in Spring Cloud Function3.1CNA v3.10.2%2026-08-27Fix
CVE-2026-59297Spring Cloud Function can incorrectly determine if URI is secure3.1CNA v3.10.1%2026-08-27Fix
CVE-2026-59294Spring AI arbitrary file write via path traversal in ResourceCacheService5.9CNA v3.10.4%2026-08-27Fix
CVE-2026-59293Spring Integration SMB minimum protocol dialect defaults to SMB16.6CNA v3.10.2%2026-08-27Fix
CVE-2026-59292Spring Integration world-readable metadata file in PropertiesPersistingMetadataStore3.2CNA v3.10.1%2026-08-27Fix
CVE-2026-59291Potential arbitrary file read and SSRF vulnerability in Spring Cloud Function2.0CNA v3.10.2%2026-08-27Fix
CVE-2026-59289Spring for GraphQL denial of service via pagination support7.5v3.10.3%2026-08-27Fix
CVE-2026-59288Spring for GraphQL information exposure in GraphiQL support7.4v3.10.3%2026-08-27Fix
CVE-2026-59287Spring for GraphQL WebSocket client denial of service5.9v3.10.3%2026-08-27Fix
CVE-2026-59286Spring for GraphQL loads Untrusted Resources in GraphiQL support8.1v3.10.2%2026-08-27Fix
CVE-2026-59285Spring for GraphQL unsafe deserialization in pagination support8.1v3.10.5%2026-08-27Fix
CVE-2026-59284Spring Cloud Commons no allow list for writable env actuator endpoint6.6CNA v3.10.4%2026-08-27Fix
CVE-2026-59283Spring Framework Safety Guard Bypass via SpEL Expression Compilation9.1CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-59282Spring Framework denial of service via Unbounded List Growth in Data Binding7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-59281Spring Framework cross-site scripting via EscapedErrors6.1CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-59280Spring Framework path traversal via Backslash in SpringTemplateLoader4.3CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-59278In Spring for Apache Kafka, SSRF6.5CNA v3.10.3%2026-08-27Fix
CVE-2026-59277Spring Security InetAddressMatchers Incomplete Internal Network Classification3.7CNA v3.10.3%2026-08-27Fix
CVE-2026-59276Spring Security Timing Attack via Non-Constant-Time Comparison of Sensitive Values5.9CNA v3.10.3%2026-08-27Fix
CVE-2026-59275Spring AMQP Java deserialization allowlist deserialization of untrusted data6.6CNA v3.10.4%2026-08-27Fix
CVE-2026-59274Spring Integration unbounded decompression in UnZipTransformer enables zip-bomb DoS6.5CNA v3.10.4%2026-08-27Fix
CVE-2026-59272Spring AMQP log4j2 AmqpAppender disables TLS hostname verification by default6.8CNA v3.10.3%2026-08-27Fix
CVE-2026-59271Admin password disclosed in BrokerNotAliveException message5.3CNA v3.10.3%2026-08-27Fix
CVE-2026-59270VMware Spring Security embedded LDAP server vulnerability9.4CNA v3.10.4%2026-08-27Fix
CVE-2026-57499Liman log rotation controller OS command injection9.1CNA v3.11.4%2026-08-27Fix
CVE-2026-56652Formula injection in dool project4.6CNA v4.00.2%2026-08-27Fix
CVE-2026-56651Arbitrary file overwrite via symlink following in dool project2.0CNA v4.00.2%2026-08-27Fix
CVE-2026-55758CC: Tweaked HTTP request SSRF filter server-side request forgery6.9CNA v4.00.5%2026-08-27Fix
CVE-2026-54732libreoffice-convert vulnerable to path traversal / arbitrary file write6.5CNA v3.10.4%2026-08-27Fix
CVE-2026-54721Silverstripe UserForms: Remote code execution via userforms email subject8.8CNA v3.10.7%2026-08-27Fix
CVE-2026-54718Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template7.2CNA v3.11.0%2026-08-27Fix
CVE-2026-54713CakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions3.7CNA v3.10.5%2026-08-27Fix
CVE-2026-54687DangerBlack n8n-node-sqlite3 n8n-nodes-sqlite3: Path traversal6.1CNA v4.00.6%2026-08-27Fix
CVE-2026-54330Ceph RGW SigV4 handler improper signature verification8.1CNA v3.10.4%2026-08-27Fix
CVE-2026-54085Wazuh: Missing input validation in multiple active response scripts allows argument injection7.1CNA v3.10.4%2026-08-27Fix
CVE-2026-54084Wazuh agent enrollment null pointer dereference via malformed manager response5.3CNA v3.10.2%2026-08-27Fix
CVE-2026-54083Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion8.1CNA v3.10.6%2026-08-27Fix
CVE-2026-53580Trilium arbitrary file read and denial of service8.1CNA v3.10.5%2026-08-27Fix
CVE-2026-53579Trilium: Note Import to RCE via Book Note9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-53578Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-50152Ceph monitor subscription handler improper authorization9.1CNA v3.10.2%2026-08-27Fix
CVE-2026-48996Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client9.3CNA v4.00.3%2026-08-27Fix
CVE-2026-47894Spring Cloud Config Server Native Environment Repository Exposure4.9CNA v3.10.5%2026-08-27Fix
CVE-2026-47893Spring Framework request Headers Included in Exception Reasons in HandshakeWebsocketService7.5CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-47892Spring Framework Header Predicate Bypass in WebFlux Functional endpoints9.8CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-47891Spring Framework maxInMemorySize Bypassed in Jaxb2Decoder9.8CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-47890Spring Framework Server Sent Event stream corruption while rendering fragments9.8CISA ADP v3.10.6%2026-08-27Fix
CVE-2026-47889Spring Framework sameSite Attribute Dropped in JettyCoreServerHttpResponse7.5CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-47888Spring Framework memory leak via SETUP Frame in RSocketMessageHandler7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-47887Spring Framework open redirect in UrlFileNameViewController6.1CISA ADP v3.10.2%2026-08-27Fix
CVE-2026-47886Spring Framework denial of service via Unbounded Exponentiation in SpEL Expressions7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-47885Spring Framework maxPartSize Ignored in PartEventHttpMessageReader7.5CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-47884Spring Framework Improper Path Limitation in XsltView9.8CISA ADP v3.10.6%2026-08-27Fix
CVE-2026-47883Spring Framework open redirect in UrlHandlerFilter6.1CISA ADP v3.10.3%2026-08-27Exploit codeFix
CVE-2026-47881Denial of service in Spring Batch FlatFileItemReader via Malformed Input file5.9CNA v3.10.4%2026-08-27Fix
CVE-2026-47880Spring Integration JMS header mapper improper input validation5.4CNA v3.10.3%2026-08-27Fix
CVE-2026-47879Spring Cloud Gateway SSRF and native file access with gRPC7.7CNA v3.10.3%2026-08-27Fix
CVE-2026-47878Broadcom Spring Batch DefaultExecutionContextSerializer deserialization of untrusted data5.6CNA v3.10.4%2026-08-27Fix
CVE-2026-47877Spring Security Authorization Server Default Consent page is vulnerable to cross-site scripting8.2CNA v3.10.3%2026-08-27Fix
CVE-2026-47875Spring Batch JobParameterDeserializer bypasses the trusted-type allowlist5.6CNA v3.10.4%2026-08-27Fix
CVE-2026-47864Spring Integration SerializingHttpMessageConverter deserialization of untrusted data6.4CNA v3.15.9%2026-08-27Fix
CVE-2026-47849Spring Data REST allows mutation of identifier and version properties via JSON Patch7.1CNA v3.10.4%2026-08-27Fix
CVE-2026-47727TriliumNext Trilium share template relation server-side template injection8.6CNA v4.00.5%2026-08-27
CVE-2026-44629Genetec Synergis Softwire insecure storage of sensitive information7.9CNA v3.10.2%2026-08-27
CVE-2026-40526Volmarg Personal Management System path traversal via get-file endpoint7.1CNA v4.00.8%2026-08-27
CVE-2026-39944Ceph: CephX AES Authentication error8.8CNA v3.10.3%2026-08-27Fix
CVE-2026-38350target_sws_fuzzer function An integer overflow7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-38349hScale16To19_c function An integer overflow7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-38348libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 An integer overflow7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-38347ff_sws_alphablendaway function heap-based buffer overflow7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-38346yuv2planeX_8_c function integer overflow7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-38345FFmpeg libswscale division by zero6.5CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-38344get_min_buffer_size function A null pointer dereference7.5CISA ADP v3.10.5%2026-08-27Fix
CVE-2026-38343libavfilter/vf_scale.c component of FFmpeg N-122528-gdd2976b9e1 An integer overflow6.5CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-37198SMF component of Open5GS v2.7.6 An integer overflow7.5CISA ADP v3.10.6%2026-08-27
CVE-2026-37073Veno File Manager sendfiles.php improper access control5.3CISA ADP v3.10.3%2026-08-27Exploit code
CVE-2026-37072Veno File Manager admin-head-updates.php improper access control9.8CISA ADP v3.10.5%2026-08-27Exploit code
CVE-2026-37071Veno File Manager Actions::renameFile function privilege escalation9.8CISA ADP v3.10.5%2026-08-27Exploit code
CVE-2026-37070Veno File Manager streamvid.php improper access control6.5CISA ADP v3.10.4%2026-08-27Exploit code
CVE-2026-37069Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to know in which system directory the application code is running by sending a GET request to the endpoint.5.3CISA ADP v3.10.4%2026-08-27Exploit code
CVE-2026-37068Veno File Manager translations update endpoint arbitrary file write8.1CISA ADP v3.10.5%2026-08-27Exploit code
CVE-2026-37067Veno File Manager save-cvs.php improper access control5.3CISA ADP v3.10.3%2026-08-27Exploit code
CVE-2026-37066Veno File Manager streamvid.php path traversal6.5CISA ADP v3.10.5%2026-08-27Exploit code
CVE-2026-37065Veno File Manager translations update endpoint arbitrary file deletion9.1CISA ADP v3.10.5%2026-08-27Exploit code
CVE-2026-37064Veno File Manager usr-check.php vulnerability5.3CISA ADP v3.10.4%2026-08-27
CVE-2026-37012PentestGPT langfuse.py hard-coded credentials7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-37009NL2SQLTool in crewai-tools v1.10.2rc1 SQL injection6.5CISA ADP v3.10.4%2026-08-27
CVE-2026-37007crewai-tools FileWriterTool path traversal9.8CISA ADP v3.11.0%2026-08-27
CVE-2026-37006gpt-researcher WebSocket endpoint improper authentication9.8CISA ADP v3.10.9%2026-08-27
CVE-2026-37004LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint9.8CISA ADP v3.10.8%2026-08-27Fix
CVE-2026-37003Agno PythonTools and ShellTools code injection9.8CISA ADP v3.11.3%2026-08-27
CVE-2026-36102Bluewave Labs Checkmate invite API endpoint privilege escalation7.2CISA ADP v3.10.6%2026-08-27
CVE-2026-35869LB-link Router AC450M libshare.so bs_SetLimitCli_info function command injection9.8CISA ADP v3.12.3%2026-08-27
CVE-2026-35868LB-link Router AC2100_AZ3 libshare.so bs_SetLimitCli_info function command injection9.8CISA ADP v3.12.3%2026-08-27
CVE-2026-34674Substance3D Sampler heap-based buffer overflow7.8CNA v3.10.3%2026-08-27Fix
CVE-2026-34620DNG SDK out-of-bounds write5.5CNA v3.10.2%2026-08-27Fix
CVE-2026-34616DNG SDK out-of-bounds read5.5CNA v3.10.3%2026-08-27Fix
CVE-2026-32566ACPT (Pro) - Custom Post Types Plugin for WordPress privilege escalation9.8CNA v3.10.5%2026-08-27Reported exploitedFix
CVE-2026-32564ACPT (Pro) - Custom Post Types Plugin for WordPress SQL injection8.5CNA v3.10.4%2026-08-27
CVE-2026-32550Kadence Shop Kit WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-27Fix
CVE-2026-32479Visitor Traffic Real Time Statistics Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-27Fix
CVE-2026-30612Time4Popcorn updater download without integrity check9.8CISA ADP v3.10.4%2026-08-27
CVE-2026-30073free5gc NssaiAvailabilitySubscriptionCreate denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30072free5gc CDR processing null pointer dereference7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30071free5gc recharge handler resource exhaustion7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30070free5gc shared data handler resource exhaustion7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30069free5gc UDMC registration handler null pointer dereference7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30068HandleUpdate function improper input validation7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30067free5gc NRF discovery service denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30064buildFilter function improper input validation7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30063free5gc NF discovery service denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30062free5gc NGAP handler denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30060free5gc SUCI parsing during UE registration denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30059free5gc NAS decoder denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30058HTTPModifySubscription handler of free5gc v4.0.1 improper input validation7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30057free5gc CreateUEContext handler denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30056free5gc AMF NGAP dispatcher null pointer dereference7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30051free5gc UE context creation denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30050free5gc ModifyAMFEventSubscriptionProcedure function denial of service7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30047/nsmf-pdusession/v1/sm-contexts component of Open5GS v2.7.6 A reachable assertion7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30046NUDM-UECM interface of Open5GS v2.7.6 reachable assertion7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-30045/nnrf-disc/v1/nf-instances component of open5gs v2.7.6 integer overflow7.5CISA ADP v3.10.6%2026-08-27
CVE-2026-27330Mobile App for WooCommerce WordPress plugin broken access control8.6CNA v3.10.4%2026-08-27Fix
CVE-2026-26899OpenWrt luci-app-https-dns-proxy setInitAction RPC function OS command injection8.8CISA ADP v3.10.8%2026-08-27
CVE-2026-26897EcoOnline EHS AndroidManifest.xml information disclosure9.8CISA ADP v3.11.1%2026-08-27Exploit code
CVE-2026-26459ccoap option parser out-of-bounds write7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-26457ccoap message dump function null pointer dereference7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-26456ccoap session list management race condition7.5CISA ADP v3.10.4%2026-08-27
CVE-2026-26453ccoap URI_PATH option handling in session handler null pointer dereference7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-26452ccoap option parsing improper input validation7.5CISA ADP v3.10.5%2026-08-27
CVE-2026-25250eazsolution EazyFix missing cryptographic step6.0CNA v3.10.2%2026-08-27Exploit codeFix
CVE-2026-19889Server-side request forgery (SSRF) in GitLab AI Gateway8.2CNA v3.10.2%2026-08-27Fix
CVE-2026-19854Grafana ClickHouse Datasource native protocol connection vulnerability6.1CNA v3.10.1%2026-08-27Fix
CVE-2026-19715WP OAuth Server WordPress plugin unauthenticated OAuth Token and user data disclosure7.5CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-19454JetBackup - Admin+ Multisite Network Backup Download4.4CISA ADP v3.10.2%2026-08-27Fix
CVE-2026-19398ASUS FA507NV out-of-bounds write6.8CNA v4.00.1%2026-08-27
CVE-2026-19318Fireware OS Pre-authentication stack buffer overflow in iked allows remote code execution9.3CNA v4.00.5%2026-08-27Fix
CVE-2026-19317Fireware OS Pre-authentication out-of-bounds read in iked allows denial of service (DoS)8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-19316Fireware OS Pre-authentication double free in iked allows denial of service (DoS)8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-19315Fireware OS Pre-authentication type confusion in iked allows remote code execution9.3CNA v4.00.5%2026-08-27Fix
CVE-2026-19314Fireware OS integer underflow in iked allows Unauthenticated denial of service (DoS)8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-19313Fireware OS Pre-authentication heap buffer overflow in iked allows remote code execution9.3CNA v4.00.5%2026-08-27Fix
CVE-2026-19225Defender Security WordPress plugin Admin+ Network-Wide RCE via Hub Connector on Multisite6.6CISA ADP v3.10.3%2026-08-27Fix
CVE-2026-19223Smush WordPress plugin Admin+ Network-Wide RCE via Hub Connector on Multisite7.2CISA ADP v3.10.4%2026-08-27Fix
CVE-2026-19092Tutor LMS template rendering vulnerability9.8CISA ADP v3.12.0%2026-08-27NucleiFix
CVE-2026-18965Missing authorization in PayRange API8.7CNA v4.00.3%2026-08-27
CVE-2026-18886ServiceNow AI Platform unauthenticated privilege escalation10.0CNA v4.05.0%2026-08-27Fix
CVE-2026-18885ServiceNow AI Platform unauthenticated remote code execution in GraphQL Composite Data API10.0CNA v4.07.2%2026-08-27Fix
CVE-2026-18717Applied Systems Engineering ASE2000 V2 improper certificate validation in ASE 20009.1CNA v4.00.2%2026-08-27Fix
CVE-2026-18374The GNU C Library glibc out-of-bounds write4.9CNA v3.10.1%2026-08-27Fix
CVE-2026-17610Silicon Labs SiSDK RAIL 802.15.4 Mux missing ACK can lead to DoS6.0CNA v4.00.2%2026-08-27Fix
CVE-2026-17562IDOR in Zirve Security's AdisyonPro6.5CNA v3.10.2%2026-08-27Fix
CVE-2026-16895Authentication bypass in Metasploit JSON-RPC service when DB Health Check fails5.1CNA v4.00.2%2026-08-27Fix
CVE-2026-16569ShopApper WordPress plugin Subscriber+ arbitrary Product Stock update4.3CISA ADP v3.10.1%2026-08-27
CVE-2026-16568ShopApper customer profile REST endpoint insecure direct object reference4.3CISA ADP v3.10.2%2026-08-27Fix
CVE-2026-16567Document Embedder WordPress plugin unauthenticated Private Document download via Token Oracle5.3CISA ADP v3.10.2%2026-08-27Fix
CVE-2026-16279Dassault Systèmes 3DSwymer 3DPassport improper authorization9.3CNA v3.10.3%2026-08-27
CVE-2026-13416CMP - Coming Soon and Maintenance WordPress plugin Editor+ stored XSS via niteoCS_socialmedia3.5CISA ADP v3.10.1%2026-08-27Fix
CVE-2026-13415CMP - Coming Soon and Maintenance WordPress plugin privilege escalation7.2CISA ADP v3.10.2%2026-08-27Fix
CVE-2026-13414CMP maintenance mode toggle missing authorization4.8CISA ADP v3.10.1%2026-08-27Fix
CVE-2026-13108Dimension denial of service8.7CNA v4.00.3%2026-08-27Fix
CVE-2026-13086Fireware OS stack-based buffer overflow in Mobile Security epm endpoint9.3CNA v4.00.4%2026-08-27Fix
CVE-2026-11754User Enumeration in Seres Software's syWEB5.3CNA v3.10.2%2026-08-27
CVE-2026-11747Reflected XSS in Seres Software's syWEB6.1CNA v3.10.2%2026-08-27
CVE-2026-10036SpeechBrain arbitrary code execution via CKPT.yaml Parsing8.7CNA v4.00.5%2026-08-27Exploit codeFix
CVE-2026-6876Sandbox escape in ServiceNow AI Platform10.0CNA v4.00.6%2026-08-27Fix
CVE-2026-5738Reflected XSS in BilPark's DoXBASE6.1CNA v3.10.3%2026-08-27
CVE-2026-5706Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements8.9CNA v4.00.4%2026-08-27Fix
CVE-2026-5680Red Hat JBoss Enterprise Application Platform undertow-core: Undertow: Denial of service7.5CNA v3.11.1%2026-08-27Fix
CVE-2026-5218HTML injection in Softtr's E-Commerce Pack4.3CNA v3.10.3%2026-08-27Fix
CVE-2026-4398GitLab has remediated an issue in GitLab EE affecting all versions from 18.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have assigned compliance frameworks from namespaces they were not authorized to access to their own proje5.4CNA v3.10.3%2026-08-27Fix
CVE-2026-81421ddfourtwo sentry-selfhosted-mcp raw_sentry_api server-side request forgery6.9CNA v4.00.5%2026-08-26
CVE-2026-81203SourceCodester Simple Online Food Ordering System ajax.php login2 SQL injection6.9CNA v4.00.4%2026-08-26
CVE-2026-81202itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication6.9CNA v4.00.7%2026-08-26
CVE-2026-81036Stalwart Mail Server Authorization Code Disclosure via Unvalidated OAuth redirect_uri8.5CNA v4.00.4%2026-08-26
CVE-2026-81035Midday Missing Owner Check on Team Deletion7.2CNA v4.00.3%2026-08-26
CVE-2026-81034Netmaker improper certificate validation in SMTP client8.3CNA v4.00.3%2026-08-26
CVE-2026-81033Automatisch User Enumeration via Forgot-password response discrepancy6.9CNA v4.00.5%2026-08-26
CVE-2026-81032vesoft-inc nebula NebulaGraph Unauthenticated Read and Modification of Runtime Configuration9.3CNA v4.00.4%2026-08-26
CVE-2026-81031IDURAR ERP CRM account takeover via Unverified Identifier on Password Update8.6CNA v4.00.4%2026-08-26
CVE-2026-81030mage-ai mage AI arbitrary file read via Unvalidated Path in browser_items endpoint7.1CNA v4.00.5%2026-08-26
CVE-2026-81029OpenMetadata JWT Disclosure via Unvalidated SAML and OIDC Redirect URI8.5CNA v4.00.6%2026-08-26Fix
CVE-2026-81028ZLMediaKit downloadFile Root-Directory Confinement Bypass via Prefix Collision6.9CNA v4.00.5%2026-08-26
CVE-2026-81027one-api missing authorization on URL-Parameter Channel Pinning8.4CNA v4.00.3%2026-08-26
CVE-2026-80589Linux kernel block layer disk teardown timeout timer vulnerability9.8CNA v3.10.4%2026-08-26Fix
CVE-2026-80588Linux kernel MPTCP receive path memory accounting vulnerability7.5CNA v3.10.6%2026-08-26Fix
CVE-2026-80587Linux kernel MPTCP suboption parsing vulnerability9.8CNA v3.10.4%2026-08-26Fix
CVE-2026-80586Linux kernel MPTCP DSS option parsing vulnerability9.8CNA v3.10.4%2026-08-26Fix
CVE-2026-80585Linux kernel MPTCP fast open subflow handling vulnerability9.4CNA v3.10.3%2026-08-26Fix
CVE-2026-80584Linux kernel qeth SNMP and ARP query ioctls vulnerability8.4CNA v3.10.2%2026-08-26Fix
CVE-2026-80583Linux kernel lpass-tx-macro codec driver vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80582Linux kernel DRM SHMEM helper huge page fault handler vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80581Linux kernel SOF ipc4 PCM pipeline trigger denial of service–0.2%2026-08-26Fix
CVE-2026-80580Linux kernel fbdev mode sysfs output vulnerability7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-80579Linux kernel fbdev videomode handling vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80578Linux kernel fbdev core framebuffer read vulnerability7.3CNA v3.10.1%2026-08-26Fix
CVE-2026-80577Linux kernel Panthor GPU firmware loader null pointer dereference–0.2%2026-08-26Fix
CVE-2026-80576Linux kernel amdgpu command submission vulnerability8.8CNA v3.10.1%2026-08-26Fix
CVE-2026-80575Linux kernel cs40l50 vibra driver vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80574Linux kernel focaltech touch driver vulnerability8.4CNA v3.10.1%2026-08-26Fix
CVE-2026-80573Linux kernel iforce input driver vulnerability–0.2%2026-08-26Fix
CVE-2026-80572Linux kernel byd input driver vulnerability7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-80571Linux kernel pseries papr-phy-attest driver vulnerability–0.2%2026-08-26Fix
CVE-2026-80570Linux kernel synaptics-rmi4 F54 driver heap buffer overflow7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80569Linux kernel synaptics-rmi4 F54 driver vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80568Linux kernel synaptics-rmi4 F54 driver heap buffer overflow7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80567Linux kernel synaptics-rmi4 F54 driver improper error handling–0.2%2026-08-26Fix
CVE-2026-80566Linux kernel hynitron_cstxxx touch driver vulnerability–0.2%2026-08-26Fix
CVE-2026-80565Linux kernel qce crypto driver vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80564Linux kernel gve driver null pointer dereference–0.2%2026-08-26Fix
CVE-2026-80563Linux kernel sloppy-logic-analyzer GPIO driver use-after-free–0.2%2026-08-26Fix
CVE-2026-80562Linux kernel ml-ioh GPIO driver improper locking–0.2%2026-08-26Fix
CVE-2026-80561Linux kernel Ceph client out-of-bounds read9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-80560Linux kernel OpenRISC signal handling privilege escalation7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80559Linux kernel sur40 input driver race condition7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80558Linux kernel Ceph client vulnerability9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-80557Linux kernel Ceph client out-of-bounds read9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-80556Linux kernel atmel-mci MMC driver use-after-free7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80555Linux kernel s390 vfio_ccw driver vulnerability7.1CNA v3.10.2%2026-08-26Fix
CVE-2026-80554Linux kernel s390 vfio_ccw driver vulnerability9.3CNA v3.10.2%2026-08-26Fix
CVE-2026-80553Linux kernel s390 vfio_ccw driver vulnerability8.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80552Linux kernel s390 vfio_ccw driver vulnerability8.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80551Linux kernel s390 vfio_ccw driver vulnerability9.3CNA v3.10.2%2026-08-26Fix
CVE-2026-80550Linux kernel s390 vfio_ccw driver vulnerability7.9CNA v3.10.2%2026-08-26Fix
CVE-2026-80549Linux kernel vfio_ccw channel program cleanup vulnerability8.2CNA v3.10.2%2026-08-26Fix
CVE-2026-80548Linux kernel vfio_ccw I/O mutex handling race condition8.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80547Linux kernel vfio_ccw CRW handling vulnerability8.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80546Linux kernel zcrypt CCA CPRB length handling integer overflow7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80545Linux kernel zcrypt EP11 CPRB length handling buffer overflow7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80544Linux kernel zcrypt EP11 CPRB domain parsing vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80543Linux kernel zcrypt CCA and EP11 message handling information disclosure–0.2%2026-08-26Fix
CVE-2026-80542Linux kernel amdgpu display vblank handling null pointer dereference–0.2%2026-08-26Fix
CVE-2026-80541Linux kernel amdgpu GEM buffer creation denial of service7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-80540Linux kernel amdgpu UVD video decode vulnerability7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-80539Linux kernel amdgpu command submission fence handling memory leak–0.2%2026-08-26Fix
CVE-2026-80538Linux kernel XFS realtime group inode loading improper error handling7.1CNA v3.10.2%2026-08-26Fix
CVE-2026-80537Linux kernel XFS realtime refcount btree off-by-one error7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80536Linux kernel XFS buffer log item recovery vulnerability8.4CNA v3.10.1%2026-08-26Fix
CVE-2026-80535Linux kernel XFS directory tree repair vulnerability–0.2%2026-08-26Fix
CVE-2026-80534Linux kernel XFS quota next-id lookup vulnerability–0.2%2026-08-26Fix
CVE-2026-80533Linux kernel XFS AGI repair vulnerability–0.2%2026-08-26Fix
CVE-2026-80532Linux kernel XFS online fsck iunlink list repair infinite loop–0.2%2026-08-26Fix
CVE-2026-80531Linux kernel XFS online repair tempfile creation use-after-free7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80530Linux kernel XFS exchange-range reflink handling vulnerability7.1CNA v3.10.1%2026-08-26Fix
CVE-2026-80529Linux kernel XFS quota log recovery improper error handling–0.2%2026-08-26Fix
CVE-2026-80528Linux kernel Ceph client denial of service9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-80527Linux kernel Ceph client denial of service7.5CNA v3.10.5%2026-08-26Fix
CVE-2026-80526Linux kernel tas2562 volume control driver vulnerability7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-80525Linux kernel SOF audio topology driver vulnerability–0.2%2026-08-26Fix
CVE-2026-80524Linux kernel OP-TEE FF-A driver null pointer dereference–0.2%2026-08-26Fix
CVE-2026-80523Linux kernel SpacemiT K3 HDMA clock driver denial of service7.1CNA v3.10.2%2026-08-26Fix
CVE-2026-80522Linux kernel Tegra GCM crypto driver vulnerability7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-80521Linux kernel AF_UNIX socket garbage collector vulnerability7.8CNA v3.10.2%2026-08-26Exploit codeFix
CVE-2026-80520Linux kernel ovpn null pointer dereference7.5CNA v3.10.6%2026-08-26Fix
CVE-2026-80519Linux kernel ovpn vulnerability9.8CNA v3.10.6%2026-08-26Fix
CVE-2026-80428ILIAS PHP object injection via Shibboleth Logout9.3CNA v4.04.7%2026-08-26Exploit codeFix
CVE-2026-80427bestzip and.x argument injection via Missing Option Delimiter8.6CNA v4.00.2%2026-08-26Fix
CVE-2026-80426FiftyOne stored cross-site scripting via Unescaped Field Description7.0CNA v4.00.4%2026-08-26Fix
CVE-2026-80350OneUptime server-side request forgery via IPv4-Mapped IPv6 Webhook URL7.1CNA v4.00.4%2026-08-26Fix
CVE-2026-80349TarsWeb authentication bypass via Spoofed X-Forwarded-For and uid parameter9.3CNA v4.00.6%2026-08-26
CVE-2026-80348TarsWeb missing authorization on Patch Deploy, Download and Delete endpoints8.7CNA v4.00.6%2026-08-26
CVE-2026-80347mcp-fetch server-side request forgery via Unstripped IPv6 Literal Brackets8.7CNA v4.00.4%2026-08-26
CVE-2026-80346StarRocks missing authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views7.1CNA v4.00.5%2026-08-26
CVE-2026-80237Thinking Software Technology｜Efence arbitrary file upload8.7CNA v4.00.8%2026-08-26Fix
CVE-2026-80236Thinking Software Technology｜Efence SQL injection8.8CNA v4.00.5%2026-08-26Fix
CVE-2026-80235Thinking Software Technology｜EFence arbitrary file upload9.3CNA v4.00.9%2026-08-26Fix
CVE-2026-80234CAYIN Technology｜CAYIN CMS-WS/CMS-SE missing authentication6.9CNA v4.00.5%2026-08-26Fix
CVE-2026-80233CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP arbitrary file upload8.6CNA v4.00.8%2026-08-26Fix
CVE-2026-80214LibreNMS Virtualisation Discovery Module RCE8.6CNA v4.00.5%2026-08-26Fix
CVE-2026-80206NLTK regular expression denial of service via tgrep8.2CNA v4.00.4%2026-08-26Fix
CVE-2026-80205NLTK ReDoS via Text.findall unvalidated regex8.7CNA v4.00.7%2026-08-26Fix
CVE-2026-80204Grav authentication bypass via Scoped API Key9.3CNA v4.00.2%2026-08-26Fix
CVE-2026-80203Grav authentication bypass via Scoped API Key9.3CNA v4.00.5%2026-08-26Fix
CVE-2026-80183OpenStack Keystone type confusion7.1CNA v4.00.4%2026-08-26Fix
CVE-2026-80158A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, used to supply the LDAP simple-bind password when retrieving a Kerberos keytab, is not declared with no_log, unlike the sibling password parameter in the same module. As a conseq5.5CNA v3.10.1%2026-08-26
CVE-2026-79940Dell iDRAC9 improper access control5.9CNA v3.10.3%2026-08-26Fix
CVE-2026-79939Dell Power Protect Cyber Recovery symlink following5.8CNA v3.10.2%2026-08-26Fix
CVE-2026-79938Dell Power Protect Cyber Recovery improper authentication7.6CNA v3.10.5%2026-08-26Fix
CVE-2026-79921amqp091-go has a potential memory exhaustion/Protocol Violation8.9CNA v4.00.6%2026-08-26Fix
CVE-2026-79902Gimp: Stack vla size underflow denial of service in seattle5.5CNA v3.10.3%2026-08-26Fix
CVE-2026-79654Red Hat Satellite ketello: Katello content view history API cross-organization authorization bypass4.3CNA v3.10.4%2026-08-26Fix
CVE-2026-79619OpenZFS: User-namespace capability check allows unprivileged local authorization bypass7.3CNA v4.00.2%2026-08-26Fix
CVE-2026-78237Insufficient input validation in Admin By Request (ABR)7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-78236Insecure PIN derivation mechanism in Admin By Request (ABR)8.8CNA v3.10.1%2026-08-26Fix
CVE-2026-78146Simple Newsletter Plugin Actions page information disclosure6.5CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77801Allocation of resources without limits or throttling in GitLab6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-77790RegistrationMagic WordPress plugin Admin+ SQLi via rm_sortby parameter5.5CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77789WP Full Pay Stripe Payment Forms insecure direct object reference4.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77758WP Full Pay Stripe Payment Forms customer portal session confirmation information disclosure5.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77757Directorist - Subscriber+ arbitrary Image Move via REST v2 Listing Submission5.4CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77754Kirki WordPress plugin unauthenticated user and comment Author email disclosure via kirki_get_apis5.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77695The Return Refund and Exchange For WooCommerce WordPress plugin before 4.6.4 does not correctly verify the ownership of guest orders in some of the AJAX actions it exposes to unauthenticated users, allowing them to read private order messages, post messages and attachments in the customer's name, an6.5CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77694Eventin WordPress plugin unauthenticated order Completion Without Payment via order_token5.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-77693Order Tip for WooCommerce WordPress plugin arbitrary file deletion8.7CISA ADP v3.10.5%2026-08-26Fix
CVE-2026-77658Dia: Dia: Stack buffer overflow in bus object via unvalidated handle count in project files7.8CNA v3.10.2%2026-08-26
CVE-2026-77652Dia: Dia: Heap buffer overflow in wpg colormap parser via out-of-bounds palette index7.8CNA v3.10.2%2026-08-26
CVE-2026-77611SeaweedFS S3 PutObjectAcl handler incorrect authorization7.1CNA v3.10.4%2026-08-26Fix
CVE-2026-77573Weblate: DNS rebinding in VCS operations allows server-side request forgery3.5CNA v3.10.2%2026-08-26Fix
CVE-2026-77557Ubiquiti UniFi Protect AI Key improper access control9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-77554Ubiquiti UniFi Talk Application improper input validation10.0CNA v3.11.6%2026-08-26Fix
CVE-2026-77553Ubiquiti UniFi Access Application improper access control9.9CNA v3.10.5%2026-08-26Fix
CVE-2026-77552Ubiquiti UniFi Enterprise Audio/Video Bridge improper input validation9.8CNA v3.11.6%2026-08-26Fix
CVE-2026-77551Ubiquiti UniFi Connect Display Cast Pro improper access control9.0CNA v3.10.4%2026-08-26Fix
CVE-2026-77550Ubiquiti UniFi OS Server CRLF injection10.0CNA v3.10.8%2026-08-26Fix
CVE-2026-77549Ubiquiti UniFi OS Server CRLF injection9.0CNA v3.10.5%2026-08-26Fix
CVE-2026-77548Ubiquiti UniFi Protect Application improper input validation9.9CNA v3.11.4%2026-08-26Fix
CVE-2026-77547Ubiquiti UniFi Access Application improper input validation9.9CNA v3.11.4%2026-08-26Fix
CVE-2026-77546Ubiquiti UniFi Access Application improper input validation9.9CNA v3.11.4%2026-08-26Fix
CVE-2026-77545Ubiquiti UniFi OS Server active debug code9.0CNA v3.10.4%2026-08-26Fix
CVE-2026-77543Ubiquiti UniFi Access Application improper input validation9.9CNA v3.11.4%2026-08-26Fix
CVE-2026-77542Ubiquiti UID Enterprise Agent improper input validation9.1CNA v3.11.3%2026-08-26Fix
CVE-2026-77541Ubiquiti UniFi Network Application improper access control9.1CNA v3.10.5%2026-08-26Fix
CVE-2026-77540Ubiquiti UniFi OS Server improper input validation9.1CNA v3.11.3%2026-08-26Fix
CVE-2026-77539Ubiquiti UniFi OS Server improper input validation9.1CNA v3.11.3%2026-08-26Fix
CVE-2026-77538Ubiquiti UniFi Connect Application improper access control8.2CNA v3.10.4%2026-08-26Fix
CVE-2026-77537Ubiquiti UniFi Protect Application improper input validation10.0CNA v3.11.6%2026-08-26Fix
CVE-2026-77536Ubiquiti UniFi OS Server improper access control9.9CNA v3.10.4%2026-08-26Fix
CVE-2026-77535Ubiquiti UniFi Network Application improper input validation9.1CNA v3.11.3%2026-08-26Fix
CVE-2026-77534Ubiquiti UniFi OS Server improper access control9.9CNA v3.10.4%2026-08-26Fix
CVE-2026-77533Ubiquiti UniFi Protect Application improper input validation9.9CNA v3.11.4%2026-08-26Fix
CVE-2026-77532Ubiquiti EdgeMAX EdgeSwitch heap-based buffer overflow8.8CNA v3.10.3%2026-08-26Fix
CVE-2026-77508Weblate: Unverified REST API email changes3.5CNA v3.10.3%2026-08-26Fix
CVE-2026-77507Weblate: Object-scoped RSS feeds disclose private change history to unauthorized users5.3CNA v3.10.4%2026-08-26Fix
CVE-2026-77368SeaweedFS filer TUS upload handler insecure direct object reference7.6CNA v3.10.4%2026-08-26Fix
CVE-2026-77317SeaweedFS: SFTP path ACL literal prefix match permits cross-tenant file read and overwrite8.1CNA v3.10.4%2026-08-26Fix
CVE-2026-77298SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy8.7CNA v4.00.4%2026-08-26Fix
CVE-2026-76784TP-Link Systems HS103P3 / HS103P4 v5 missing cryptographic step8.7CNA v4.00.2%2026-08-26Fix
CVE-2026-76149SASAKI Nobuyuki CorvusSKK integer overflow4.6CNA v4.00.2%2026-08-26Fix
CVE-2026-76148SASAKI Nobuyuki CorvusSKK code injection8.4CNA v4.00.2%2026-08-26Fix
CVE-2026-75977Mang Board WP WordPress plugin privilege escalation to Forged authentication Cookie8.8CNA v3.10.9%2026-08-26Fix
CVE-2026-75960Insufficiently protected credentials in Rently Smart Home8.7CNA v4.00.4%2026-08-26Fix
CVE-2026-75896TÜBİTAK BİLGEM Software Technologies Research Institute Liderahenk hard-coded credentials9.1CNA v3.10.4%2026-08-26Fix
CVE-2026-75798AI Engine - Unauthenticated arbitrary AI Query Execution via Editor Assistant5.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-75797AI Engine - Subscriber+ arbitrary file read via URL parameter7.7CISA ADP v3.10.4%2026-08-26Fix
CVE-2026-75601Static Web Server metrics endpoint missing authentication4.3CNA v3.10.4%2026-08-26Fix
CVE-2026-75466libjpeg-turbo PNG loader divide by zero6.5CISA ADP v3.10.4%2026-08-26
CVE-2026-75415AntFlow request logging filter vulnerability7.5CISA ADP v3.10.4%2026-08-26
CVE-2026-75414AntFlow JUEL expression evaluator code injection9.8CISA ADP v3.10.9%2026-08-26
CVE-2026-75413DocSys downloadDocEx.do endpoint vulnerability7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-75411JeecgBoot AI Flow CodeNode component code injection9.8CISA ADP v3.11.1%2026-08-26
CVE-2026-75364Comfast CF-N1-S and CF-WR630AX firmware update_interface_png handler OS command injection6.8CISA ADP v3.10.4%2026-08-26
CVE-2026-75363Comfast CF-WR630AX webmgnt OS command injection6.8CISA ADP v3.10.5%2026-08-26
CVE-2026-75340JetLinks Community device metadata import interface server-side request forgery9.1CISA ADP v3.10.4%2026-08-26
CVE-2026-75338disconf config-fetching API improper access control9.8CISA ADP v3.10.6%2026-08-26
CVE-2026-75336Funiture backend tool interface SQL injection9.8CISA ADP v3.10.5%2026-08-26
CVE-2026-75334smart-web2 report module SQL injection9.8CISA ADP v3.10.7%2026-08-26
CVE-2026-75333yx-image-recognition path traversal7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-75332Zyplayer-Doc WikiPageWebService server-side request forgery9.1CISA ADP v3.10.4%2026-08-26
CVE-2026-75331tamguo file upload endpoints unrestricted file upload4.6CISA ADP v3.10.2%2026-08-26
CVE-2026-75330super-diamond-server preview interface SQL injection9.8CISA ADP v3.10.5%2026-08-26
CVE-2026-75329super-diamond-server Netty configuration distribution service missing authentication9.8CISA ADP v3.10.6%2026-08-26
CVE-2026-75328DocSys downloadDocEx interface path traversal7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-75327DocSys uploadMarkdownPic interface unrestricted file upload9.8CISA ADP v3.10.5%2026-08-26
CVE-2026-75325DWSurvey dwsurvey API endpoints authentication bypass9.8CISA ADP v3.10.6%2026-08-26
CVE-2026-75062Eval injection in Google/langfun via default lf.query protocol9.2CNA v4.00.4%2026-08-26Fix
CVE-2026-74930Project Manager user activity feed route insecure direct object reference4.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-74929Project Manager REST API routes insecure direct object reference5.4CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-74928Project Manager Trello import routes missing authorization7.5CISA ADP v3.10.4%2026-08-26Fix
CVE-2026-74851Pods WordPress plugin Author+ RCE via shortcode Display Callback7.2CISA ADP v3.10.7%2026-08-26Fix
CVE-2026-74774Dell PowerProtect One improper certificate validation5.9CNA v3.10.2%2026-08-26Fix
CVE-2026-74771Dell PowerProtect One insecure direct object reference6.5CNA v3.10.3%2026-08-26Fix
CVE-2026-74770Dell PowerProtect One OS command injection8.8CNA v3.12.0%2026-08-26Fix
CVE-2026-74754Linux kernel SCSI error handler runtime power management race condition–0.2%2026-08-26Fix
CVE-2026-74753Linux kernel perf event group leader handling vulnerability7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-74752Linux kernel SCTP cookie authentication privilege escalation9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-74751Linux kernel RISC-V ZBB strnlen vulnerability9.4CNA v3.10.5%2026-08-26Fix
CVE-2026-74750Linux kernel ovpn key slot crypto teardown vulnerability7.5CNA v3.10.6%2026-08-26Fix
CVE-2026-74749Linux kernel rseq time slice extension denial of service–0.2%2026-08-26Fix
CVE-2026-74748Linux kernel netfilter ipset race condition7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-74747Linux kernel IPVS out-of-bounds access7.8CNA v3.10.2%2026-08-26Fix
CVE-2026-74746Linux kernel netfilter flowtable use-after-free9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-74745Linux kernel bnxt Ethernet driver deadlock7.5CNA v3.10.5%2026-08-26Fix
CVE-2026-74744Linux kernel ipvlan driver use-after-free9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-74743Linux kernel macvlan driver use-after-free9.8CNA v3.10.5%2026-08-26Fix
CVE-2026-74742Linux kernel veth driver vulnerability7.5CNA v3.10.6%2026-08-26Fix
CVE-2026-74741Linux kernel ngbe Ethernet driver null pointer dereference7.5CNA v3.10.6%2026-08-26Fix
CVE-2026-74740Linux kernel traffic control action API goto chain race condition–0.2%2026-08-26Fix
CVE-2026-74739Linux kernel u32 traffic classifier out-of-bounds read7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-74738Linux kernel regmap sdw-mbq vulnerability–0.2%2026-08-26Fix
CVE-2026-74737Linux kernel TI AM65 CPSW Ethernet driver vulnerability9.8CNA v3.10.8%2026-08-26Fix
CVE-2026-74736Linux kernel cls_bpf traffic classifier vulnerability7.8CNA v3.10.1%2026-08-26Fix
CVE-2026-74735Linux kernel L2TP proc interface vulnerability–0.2%2026-08-26Fix
CVE-2026-74734Linux kernel FireWire OHCI driver null pointer dereference–0.2%2026-08-26Fix
CVE-2026-73335Digital Agency Android App "Myna Point" improper authorization4.6CNA v4.00.1%2026-08-26
CVE-2026-73108RustDesk Uncontrolled Memory Allocation DoS via BytesCodec8.7CNA v4.00.8%2026-08-26Fix
CVE-2026-73102RustDesk path traversal via macOS Clipboard File-Paste6.9CNA v4.00.4%2026-08-26
CVE-2026-71172Dell Cloud Disaster Recovery server-side request forgery4.3CNA v3.10.3%2026-08-26Fix
CVE-2026-71171Dell Cloud Disaster Recovery OS command injection7.2CNA v3.11.6%2026-08-26Fix
CVE-2026-71054Oracle Java SE resource exhaustion6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-70419Dell Cloud Disaster Recovery OS command injection9.1CNA v3.12.0%2026-08-26Fix
CVE-2026-69129KubePi: Insufficient per-cluster authorization checks in cluster management APIs5.8CNA v4.00.4%2026-08-26Fix
CVE-2026-68863Dell PowerProtect One stack-based buffer overflow7.5CNA v3.10.5%2026-08-26Fix
CVE-2026-68861Dell PowerProtect One OS command injection8.8CNA v3.11.7%2026-08-26Fix
CVE-2026-68000MCMS category list size parameter SQL injection9.8CISA ADP v3.10.5%2026-08-26
CVE-2026-67275Dell PowerProtect One cache poisoning5.3CNA v3.10.3%2026-08-26Fix
CVE-2026-66003Frappe: Access control bypass via REST API dot-notation fields on linked doctypes7.1CNA v4.00.4%2026-08-26Fix
CVE-2026-65956KubePi: Unauthenticated SSO/OIDC configuration allows admin account takeover and SSRF10.0CNA v4.00.6%2026-08-26Fix
CVE-2026-65930LimeSurvey Community Edition stored XSS in replacement-fields4.8CNA v4.00.4%2026-08-26
CVE-2026-65647WebPros Plesk Migrator link following8.7CNA v4.00.7%2026-08-26Fix
CVE-2026-65646WebPros Plesk in improper neutralization9.9CNA v3.00.7%2026-08-26Fix
CVE-2026-65642WebPros Plesk insecure direct object reference8.6CNA v4.00.5%2026-08-26Fix
CVE-2026-65641Veeam One authentication bypass9.3CNA v4.00.5%2026-08-26Fix
CVE-2026-64632Veeam One insufficiently protected credentials8.5CNA v4.00.4%2026-08-26
CVE-2026-63360LimeSurvey Community Edition reflected XSS in user activation confirmation endpoint7.4CNA v4.00.5%2026-08-26
CVE-2026-63179Winter: Local file inclusion4.9CNA v3.10.5%2026-08-26Fix
CVE-2026-63041Apache APISIX: Attach-consumer-label does not strip client-supplied consumer-label headers5.3CNA v4.00.7%2026-08-26Fix
CVE-2026-62326Weblate has uncontrolled resource consumption via6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-62249Weblate project changes API information disclosure4.3CNA v3.10.3%2026-08-26Fix
CVE-2026-61792Weblate path traversal allows a project administrator to read arbitrary files7.7CNA v3.10.6%2026-08-26Fix
CVE-2026-61790Weblate: Team-enforced 2FA is bypassed for global permissions4.4CNA v3.10.4%2026-08-26Fix
CVE-2026-61617Pterodactyl Wings SFTP write path does not enforce disk quota, allowing node-wide disk exhaustion7.7CNA v3.10.4%2026-08-26Fix
CVE-2026-60004Gitea code injection9.8CNA v3.124.0%2026-08-26KEVNucleiEmerging ThreatsExploit codeFix
CVE-2026-59683OpenRGB network protocol arbitrary file write9.3CNA v4.00.6%2026-08-26Fix
CVE-2026-59682Arbitrary file overwrite and deletion local and remote in OpenRGB8.8CNA v4.00.5%2026-08-26Fix
CVE-2026-58474whichllm code injection via run and snippet commands8.6CNA v4.00.9%2026-08-26Fix
CVE-2026-58108Ericsson CodeChecker personal access token deletion improper access control1.2CNA v4.00.3%2026-08-26Fix
CVE-2026-58097FreeBSD ppp(8): Missing length validation in mp_SetEnddisc7.8CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-58096FreeBSD ppp(8): Missing length validation in LcpDecodeConfig8.8CISA ADP v3.10.6%2026-08-26Fix
CVE-2026-58095FreeBSD ppp(8): Incorrect length calculation in mp_Enddisc8.8CISA ADP v3.10.6%2026-08-26Fix
CVE-2026-58094FreeBSD TOCTOU race in POSIX shared memory large page configuration7.8CISA ADP v3.10.1%2026-08-26Fix
CVE-2026-58093FreeBSD kernel use-after-free via tty ioctls7.0CISA ADP v3.10.1%2026-08-26Fix
CVE-2026-58092FreeBSD unauthorized credential switching8.1CISA ADP v3.10.4%2026-08-26Fix
CVE-2026-58091FreeBSD kernel use-after-free via the SNDCTL_DSP_SYNCSTART ioctl7.8CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-58090FreeBSD use-after-free in unix SOCK_STREAM message handling7.8CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-58089FreeBSD hwpmc fails to detach PMCs during exec credential transitions7.8CISA ADP v3.10.1%2026-08-26Fix
CVE-2026-58070Veeam Backup and Replication sensitive information in log files6.8CNA v4.00.1%2026-08-26Fix
CVE-2026-56547HCL Traveler Apple profile generation improper input validation3.5CNA v3.10.3%2026-08-26Fix
CVE-2026-55228Weblate GroupViewSet API insecure direct object reference8.1CNA v3.10.4%2026-08-26Fix
CVE-2026-55227Weblate private project lookups vulnerability4.3CNA v3.10.3%2026-08-26Fix
CVE-2026-55182LibreNMS: Remote code execution by Signal Alert Transportation module8.6CNA v4.01.6%2026-08-26Fix
CVE-2026-54614cakephp debug_kit DebugKit: MailPreview contains unsafe reflection4.3CNA v3.10.5%2026-08-26Fix
CVE-2026-54606SunEditor: DOM XSS in SunEditor Embed plugin via External Script Element after Iframe Embed8.5CNA v4.00.6%2026-08-26Fix
CVE-2026-54569senaite.core vulnerable to eval injection and missing authorization9.8CNA v3.11.2%2026-08-26Reported exploited
CVE-2026-54556Http4s: HTTP/2 denial of service with Ember Backend8.2CNA v4.00.5%2026-08-26Fix
CVE-2026-54553Starlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns and HTTP 500 DoS5.4CNA v3.10.4%2026-08-26Fix
CVE-2026-54550IzPack: Path traversal in UnpackerBase allows writing files outside the installation directory7.4CNA v3.10.5%2026-08-26
CVE-2026-54548kas Persistently Disables SSH Host Key Checking3.3CNA v3.10.1%2026-08-26Fix
CVE-2026-54523Kyverno namespaced mutating policy generator missing authorization9.6CNA v3.10.5%2026-08-26Fix
CVE-2026-54511@logtape/syslog: Syslog log injection via unescaped control characters and unvalidated SD-NAME keys8.6CNA v3.10.5%2026-08-26Fix
CVE-2026-54467Trusted Firmware-M mailbox initialization vulnerability7.0CNA v3.10.2%2026-08-26
CVE-2026-54256Winter CMS FileUpload widget insecure direct object reference5.4CNA v3.10.2%2026-08-26Fix
CVE-2026-54245Fleet Okta conditional access integration SQL injection7.6CNA v4.00.6%2026-08-26Fix
CVE-2026-52473Wgcloud command injection4.3CISA ADP v3.10.3%2026-08-26
CVE-2026-52103/Terminal/Notification.hs component of SimpleX Chat zero-click remote code execution9.8CISA ADP v3.11.1%2026-08-26
CVE-2026-51106TokTok qTox profile persistence denial of service9.3CISA ADP v3.10.4%2026-08-26
CVE-2026-49809Dell Power Protect Cyber Recovery SQL injection6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-48786Fleet target search endpoint information disclosure6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-48549Nagios Core / XI CSRF via cmd.cgi Double-Submit Cookie6.9CNA v4.00.3%2026-08-26Fix
CVE-2026-48548Nagios Core CSRF via cmd.cgi6.9CNA v4.00.2%2026-08-26Fix
CVE-2026-47874Reactor Netty HTTP server denial of service with Pipelined requests5.3CNA v3.10.4%2026-08-26Fix
CVE-2026-47863Broadcom Reactor Core Flux bufferTimeout operator infinite loop5.9CNA v3.10.4%2026-08-26Fix
CVE-2026-47862Spring Integration ZipTransformer path traversal5.4CNA v3.10.3%2026-08-26Fix
CVE-2026-47861Spring Integration UDP inbound adapter server-side request forgery6.3CNA v3.10.3%2026-08-26Fix
CVE-2026-47860Unbounded decompression of attacker-supplied compressed message bodies6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-47859Spring Integration unbounded memory allocation in RFC6587SyslogDeserializer remote DoS5.4CNA v3.10.3%2026-08-26Fix
CVE-2026-47857Reactor Core windowTimeout fair-backpressure stream hang due to 20-bit index wrap-around5.9CNA v3.10.4%2026-08-26Fix
CVE-2026-47856Spring Integration JsonToObjectTransformer deserialization of untrusted data6.3CNA v3.10.3%2026-08-26Fix
CVE-2026-47852Predictable cache directory location allows local ONNX model substitution in Spring AI7.5CNA v3.10.3%2026-08-26Fix
CVE-2026-47851Unbounded recursion over attacker-controlled PDF outline tree in Spring AI PDF Document Reader7.5CNA v3.10.5%2026-08-26Fix
CVE-2026-47850Spring Data REST allows mutation of the version property of immutable aggregates via PUT4.3CNA v3.10.3%2026-08-26Fix
CVE-2026-47848Reactor Netty WebSocket client leaks credentials on Redirect6.1CNA v3.10.3%2026-08-26Fix
CVE-2026-47845Reactor Netty HTTP Server may incorrectly evaluate proxy addresses5.3CNA v3.10.3%2026-08-26Fix
CVE-2026-47844Reactor Netty HTTP Server leaks Exception Details5.3CNA v3.10.2%2026-08-26Fix
CVE-2026-47843Reactor Netty may incorrectly route traffic due to DNS resolver reuse3.7CNA v3.10.3%2026-08-26Fix
CVE-2026-47842Deterministic AES/CBC Encryption in Spring Security AesBytesEncryptor allows Ciphertext Correlation6.5CNA v3.10.2%2026-08-26Fix
CVE-2026-47841Spring Security WebAuthn User Verification Bypass via Session Serialization7.4CNA v3.10.4%2026-08-26Fix
CVE-2026-47837Spring Cloud Config Server Monitor Endpoint Does not Validate Webhook requests6.8CNA v3.10.6%2026-08-26Fix
CVE-2026-47836Spring Cloud Config Server Susceptible to TOCTOU Attack when using SVN7.2CNA v3.10.2%2026-08-26Fix
CVE-2026-47834Spring Data JPA Sort expression validation bypass4.8CNA v3.10.3%2026-08-26Fix
CVE-2026-47666Penpot: Stored XSS via custom font family name injected into a @font-face style rule7.6CNA v3.10.3%2026-08-26Fix
CVE-2026-47665Penpot: Stored XSS via comment content, innerHTML renders unsanitized HTML8.7CNA v3.10.4%2026-08-26Fix
CVE-2026-46371Fleet Apple MDM commands endpoint SQL injection6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-46370Fleet labels host-listing endpoint SQL injection6.5CNA v3.10.4%2026-08-26Fix
CVE-2026-46369Nimiq: Validity store off by one error7.5CNA v3.10.5%2026-08-26Fix
CVE-2026-45694LibreNMS: Reflected XSS in the Proxmox app view via unsanitized instance/vmid parameters5.4CNA v3.10.2%2026-08-26Fix
CVE-2026-43621SimpleMachines SMF Simple Machines Forum Authorization Confusion via Profile::load8.6CNA v4.00.4%2026-08-26
CVE-2026-41262Fleet: Cross-Team Policy data exposure via Global Policy Read endpoint4.3CNA v3.10.3%2026-08-26Fix
CVE-2026-39275Cockpit CMS v.2.13.5 and cross-site scripting6.1CISA ADP v3.10.4%2026-08-26Exploit code
CVE-2026-36851UnPoller path traversal7.5CISA ADP v3.10.5%2026-08-26Exploit code
CVE-2026-35445Winter: Authenticated backend users can bypass Users controller permission checks7.1CNA v4.00.4%2026-08-26Fix
CVE-2026-32639Winter CMS Theme Editor AJAX handlers broken access control6.8CNA v3.10.5%2026-08-26Fix
CVE-2026-32593Winter: SQL injection in Backend Filter widget numberrange Scope via numbersFromAjax5.9CNA v3.10.3%2026-08-26Fix
CVE-2026-32258Winter: Stored XSS through Editor settings custom styles8.1CNA v3.10.4%2026-08-26Fix
CVE-2026-32257Winter: Stored XSS through Brand settings custom styles8.1CNA v3.10.4%2026-08-26Fix
CVE-2026-29988Milesight AM102/102L V2 NFC interface of multiple cleartext transmission of sensitive information8.3CNA v4.00.2%2026-08-26Fix
CVE-2026-26449stomper SEND frame handling null pointer dereference7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-26448stomper stream socket handling use-after-free9.8CISA ADP v3.10.6%2026-08-26
CVE-2026-26447stomper subscription cleanup use-after-free7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-26446Stomper denial of service7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-26445stomper STOMP frame handling denial of service7.5CISA ADP v3.10.5%2026-08-26
CVE-2026-21810HCL BigFix Quantum Risk Analyzer download without integrity check4.4CNA v3.10.1%2026-08-26
CVE-2026-21809HCL BigFix Quantum Risk Analyzer is affected by generating error messages with sensitive information3.9CNA v3.10.1%2026-08-26
CVE-2026-21808HCL BigFix Quantum Risk Analyzer is affected by logging sensitive information4.1CNA v3.10.1%2026-08-26
CVE-2026-21807HCL BigFix Quantum Risk Analyzer is affected by a stack-based buffer overflow3.9CNA v3.10.1%2026-08-26
CVE-2026-19760WP Fastest Cache WordPress plugin unauthenticated stored cross-site scripting via HTTP host Header7.2CNA v3.10.4%2026-08-26Fix
CVE-2026-19718BlogVault, MalCare and WP Remote - unauthenticated site takeover via Connection Key Recovery8.1CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-19632TranslatePress Multilingual WordPress plugin unauthenticated account takeover9.8CNA v3.19.0%2026-08-26Reported exploitedNucleiExploit codeFix
CVE-2026-19538NLnet Labs NSD bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS8.2CNA v4.00.2%2026-08-26Fix
CVE-2026-19485Google Vertex AI Search for Commerce BigQuery import staging insufficient randomness9.3CNA v4.00.2%2026-08-26Fix
CVE-2026-19401NLnet Labs NSD remote UDP DoS by sending multiple DNS Cookie options8.2CNA v4.00.3%2026-08-26Fix
CVE-2026-19271Blind LDAP injection in Sign-In endpoint in TÜBİTAK BİLGEM's Liderahenk7.5CNA v3.10.3%2026-08-26Fix
CVE-2026-19226Royal Elementor Addons WordPress plugin stored XSS6.8CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-19220Forminator Forms WordPress plugin unauthenticated Multisite site creation and privilege escalation3.7CISA ADP v3.10.1%2026-08-26Fix
CVE-2026-19197Grafana OSS broken access control in dashboard snapshots6.3CNA v3.10.2%2026-08-26Fix
CVE-2026-19094Tutor LMS WordPress plugin unauthenticated SQLi via offset and item_per_page parameters5.3CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-19042Command injection in TeamViewer Desktop Client for Linux through Chat Link Handling8.8CNA v3.12.0%2026-08-26Fix
CVE-2026-18916NLnet Labs NSD remote TCP DoS by throttling the TCP receive window6.9CNA v4.00.3%2026-08-26Fix
CVE-2026-18884WooCommerce Lottery WordPress plugin unauthenticated time-based SQL injection7.5CNA v3.10.3%2026-08-26Reported exploitedFix
CVE-2026-18794OpenRGB: Insufficient input data checks lead to denial of service, memory overread and overwrite8.8CNA v4.00.3%2026-08-26Fix
CVE-2026-18664NLnet Labs NSD wrong interpretation of ACL ranges8.2CNA v4.00.3%2026-08-26Fix
CVE-2026-18431Avada WordPress theme arbitrary file write9.8CNA v3.11.0%2026-08-26Fix
CVE-2026-18331Formidable Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-08-26Fix
CVE-2026-18252Inclusion of functionality from untrusted control sphere in GitLab7.3CNA v3.10.4%2026-08-26Fix
CVE-2026-18080wedevs ERP CRM Email Connect IMAP attachment unrestricted file upload9.8CNA v3.10.7%2026-08-26Exploit codeFix
CVE-2026-16986Booking Package service and option cost validation improper access control5.3CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-16984Privacy Policy Generator improper access control6.5CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-16809LimeSurvey Community Edition stored XSS in quota message rendering7.2CNA v4.00.2%2026-08-26
CVE-2026-16444Improper validation of File Paths in TeamViewer Desktop Clients7.5CNA v3.10.3%2026-08-26Fix
CVE-2026-15990Formidable Charts WordPress plugin unauthenticated arbitrary file read via frm_graph parameter7.5CNA v3.10.7%2026-08-26Fix
CVE-2026-15985Classified Listing WordPress plugin authentication bypass8.1CNA v3.10.3%2026-08-26Fix
CVE-2026-15973LimeSurvey stored XSS in Survey Menu Entries8.4CNA v4.00.3%2026-08-26
CVE-2026-15387Acceptance of extraneous untrusted data with trusted data in GitLab4.3CNA v3.10.2%2026-08-26Fix
CVE-2026-15366vivo Kids Mode improper isolation2.4CNA v4.00.2%2026-08-26
CVE-2026-15365vivo Kids Mode certain feature logic flaw2.4CNA v4.00.2%2026-08-26
CVE-2026-15203Danfoss iC7-Automation SP debug and engineering interfaces improper access control9.3CNA v4.00.3%2026-08-26Fix
CVE-2026-14550WPCafe WordPress plugin unauthenticated Reservation Approval bypass via missing authorization5.3CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-14216Booking for Appointments and Events Calendar notification queue missing authentication6.5CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-14212Booking for Appointments and Events Calendar insecure direct object reference4.7CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-13481Out-of-bounds read in PTP management TLV TIME parsing in Zephyr net PTP5.4CNA v3.10.3%2026-08-26Fix
CVE-2026-13480zephyrproject zephyr out-of-bounds read in LoRaWAN fragmented data block transport downlink handler3.1CNA v3.10.3%2026-08-26Fix
CVE-2026-13479zephyrproject zephyr out-of-bounds read in LoRaWAN clock-sync AppTimeAns downlink handler3.1CNA v3.10.2%2026-08-26Fix
CVE-2026-13406Royal Elementor Addons WordPress plugin unauthenticated Taxonomy Term disclosure5.3CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-13404Royal Addons for Elementor like count tracking insecure direct object reference5.3CISA ADP v3.10.2%2026-08-26Fix
CVE-2026-13172Eventin WordPress plugin unauthenticated Unpublished content disclosure5.3CISA ADP v3.10.3%2026-08-26Fix
CVE-2026-12717Remote code execution in BigQuery Data Transfer Service via JDBC Connection String injection9.4CNA v4.00.5%2026-08-26Fix
CVE-2026-12587Resamania Virtuagym QR code generation hard-coded credentials8.6CNA v4.00.2%2026-08-26
CVE-2026-9805Insyde Software InsydeH2O FMTSWriteUseIntelLib: FMTS SMM IHISI buffer overflow2.7CNA v3.10.1%2026-08-26
CVE-2026-9668SQL injection vulnerability in ZTE SCP product6.3CNA v3.10.8%2026-08-26
CVE-2026-7487Access Control Check Implemented after Asset is Accessed in GitLab3.5CNA v3.10.3%2026-08-26Fix
CVE-2026-6178Betheme WordPress theme stored cross-site scripting6.4CNA v3.10.4%2026-08-26Fix
CVE-2026-5092Greenshift WordPress plugin authenticated (Contributor+) stored cross-site scripting via data URI6.4CNA v3.10.4%2026-08-26Fix
CVE-2026-3235WP Data Access WordPress plugin insecure direct object reference5.3CNA v3.10.4%2026-08-26Fix
CVE-2026-3035Authentication bypass using an alternate path or channel in GitLab5.5CNA v3.10.3%2026-08-26Fix
CVE-2026-3002Gutenverse WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-26Fix
CVE-2026-2388Reviews and Rating Google Reviews WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-08-26Fix
CVE-2026-80202Kimai authorization bypass via TimesheetVoter9.3CNA v4.00.4%2026-08-25Fix
CVE-2026-80201Kimai API token leakage via Invoice template2.0CNA v4.00.2%2026-08-25Fix
CVE-2026-80200Kimai open redirect via RelayState5.3CNA v4.00.4%2026-08-25Fix
CVE-2026-80199Kimai Username Enumeration via Timing Oracle6.3CNA v4.00.3%2026-08-25Fix
CVE-2026-80198Kimai information disclosure via config Twig function8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-80197Kimai improper authorization via Favorite endpoints8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-80196Kimai authentication bypass via Password Reset Link8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-80195Kimai Team Membership Removal via API8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-80194Kimai missing authorization via ProjectViewController export8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-80193Kimai authorization bypass via QuickEntry8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-80192better-auth SSO Domain Ownership authentication bypass8.6CNA v4.00.4%2026-08-25Fix
CVE-2026-80191GROWI missing authorization on Attachment Retrieval for Unauthenticated requests8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-80189LeafWiki uncontrolled resource consumption via Unbounded ZIP Extraction7.1CNA v4.00.5%2026-08-25Fix
CVE-2026-80186Red Hat Enterprise Linux 10 BlueZ stack-based buffer overflow7.6CNA v3.10.5%2026-08-25Fix
CVE-2026-80185BlueZ SDP XML parser type confusion5.7CNA v3.10.3%2026-08-25Fix
CVE-2026-80184OpenStack Keystone incorrect authorization7.6CNA v4.00.6%2026-08-25Fix
CVE-2026-80182OpenStack Keystone incorrect authorization7.6CNA v4.00.6%2026-08-25Fix
CVE-2026-80138MacWarrior clipbucket-v5 ClipBucket V5#153 OS command injection9.2CNA v4.01.2%2026-08-25
CVE-2026-80104DB-GPT path traversal arbitrary file write via Skill Upload Filename9.3CNA v4.01.1%2026-08-25Fix
CVE-2026-80101GNOME GIMP XWD image loader out-of-bounds read4.4CNA v3.10.2%2026-08-25Fix
CVE-2026-80051graphql-go improper type validation5.9CNA v4.00.2%2026-08-25
CVE-2026-80050ContiNew Admin multipart upload endpoints vulnerability7.1CNA v4.00.3%2026-08-25
CVE-2026-80049airbytehq airbyte-platform airbyte Platform Cross-Workspace authorization bypass8.7CNA v4.00.4%2026-08-25
CVE-2026-79992Red Hat Enterprise Linux 10 emacs: Emacs: Command injection via crafted filenames in tramp7.8CNA v3.10.1%2026-08-25Fix
CVE-2026-79912TOTOLINK N600R cstecgi.cgi getCurrentTime command injection6.9CNA v4.02.1%2026-08-25
CVE-2026-79911TOTOLINK N600R CGI cstecgi.cgi setSystemConfig stack-based overflow10.0CNA v4.01.1%2026-08-25
CVE-2026-79845code-projects Simple Inventory System edit.php SQL injection6.9CNA v4.00.4%2026-08-25
CVE-2026-79804SililaWijesinghe Food Ordering System search.php SQL injection6.9CNA v4.00.4%2026-08-25
CVE-2026-79793code-projects Online Shopping System sumit_form.php cross-site scripting5.3CNA v4.00.5%2026-08-25
CVE-2026-79792zackees transcribe-anything Yt-dlp Download ytldp_download.py ytdlp_download os command injection6.3CNA v4.01.6%2026-08-25
CVE-2026-79788Dradis Community Edition server-side request forgery via Unrestricted AI Provider Address7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-79787Alluxio S3 REST Proxy authentication bypass via Unverified Request Signature9.3CNA v4.00.5%2026-08-25
CVE-2026-79786Coroot unvalidated redirect URI in MCP OAuth Client Registration7.0CNA v4.00.3%2026-08-25
CVE-2026-79785X-AnyLabeling improper certificate validation in Model Downloads8.2CNA v4.00.3%2026-08-25Fix
CVE-2026-79784Vocos arbitrary code execution via Unrestricted class_path in Model Configuration8.6CNA v4.00.6%2026-08-25
CVE-2026-79783rclone privilege escalation via setuid Metadata2.0CNA v4.00.2%2026-08-25Fix
CVE-2026-79782rclone security token disclosure via HTTPS to HTTP Redirect9.3CNA v4.00.1%2026-08-25Fix
CVE-2026-79781rclone serve s3 path traversal via dot-dot object keys6.9CNA v4.00.3%2026-08-25Fix
CVE-2026-79780rclone credential exposure via S3 Redirect6.0CNA v4.00.1%2026-08-25Fix
CVE-2026-79779rclone WebDAV credential exposure via HTTPS-to-HTTP Redirect6.0CNA v4.00.1%2026-08-25Fix
CVE-2026-79778rclone denial of service via TUS nil-response panic6.0CNA v4.00.3%2026-08-25Fix
CVE-2026-79777rclone information disclosure via RC API5.1CNA v4.00.3%2026-08-25Fix
CVE-2026-79776rclone authentication bypass via pprof6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-79775rclone Archive Backend SquashFS parser denial of service7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-79774Winter CMS Twig sandbox escape via SecurityPolicy9.3CNA v4.00.8%2026-08-25Fix
CVE-2026-79773Winter CMS local file inclusion via JavaScript6.9CNA v4.00.5%2026-08-25Fix
CVE-2026-79772Nokogiri unchecked return value canonicalize6.9CNA v4.00.3%2026-08-25Fix
CVE-2026-79771Nokogiri memory leak via XSLT Transform6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-79770Nokogiri ReDoS via CSS selector tokenizer8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-79769Nokogiri Invalid Memory Read via initialize_copy_with_args8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-79717Red Hat Ansible Automation Platform 2 galaxy_ng: Galaxy_ng: Blind SSRF6.4CNA v3.10.4%2026-08-25
CVE-2026-79676NLTK path traversal via Symlink Bypass8.2CNA v4.00.4%2026-08-25Fix
CVE-2026-79675NLTK JVM argument injection via Per-Call options9.3CNA v4.00.8%2026-08-25Fix
CVE-2026-79674NLTK path traversal via corpus-reader constructors8.8CNA v4.00.4%2026-08-25Fix
CVE-2026-79673Ech0 Scope Bypass via profile:read Token8.5CNA v4.00.4%2026-08-25Fix
CVE-2026-79672Ech0 authentication bypass via Comment Panel7.0CNA v4.00.3%2026-08-25Fix
CVE-2026-79671Ech0 SSRF via DNS Resolution Bypass5.1CNA v4.00.3%2026-08-25Fix
CVE-2026-79670Ech0 stored XSS via SVG upload4.8CNA v4.00.3%2026-08-25Fix
CVE-2026-79669Ech0 missing authorization on System Logs5.3CNA v4.00.2%2026-08-25Fix
CVE-2026-79668Ech0 Unauthenticated Like Endpoint Metric Inflation6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-79667Ech0 authentication bypass via Scope Enforcement7.2CNA v4.00.3%2026-08-25Fix
CVE-2026-79666Ech0 missing authorization via dashboard log endpoints7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-79665Ech0 authorization bypass via Session Tokens8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-79664Ech0 Access Token Revocation Bypass9.1CNA v4.00.3%2026-08-25Fix
CVE-2026-79663Ech0 stored XSS via RSS feed tag names4.8CNA v4.00.3%2026-08-25Fix
CVE-2026-79662Ech0 OAuth Redirect URI Validation Bypass8.8CNA v4.00.3%2026-08-25Fix
CVE-2026-79661Ech0 Unauthenticated fav_count Modification6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-79660Ech0 email disclosure via Public API6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-79659Ech0 server-side request forgery via fetchPeerConnectInfo8.3CNA v4.00.3%2026-08-25Fix
CVE-2026-79658Ech0 denial of service via Accept-Language8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-79657NLTK remote code execution via Unsafe Pickle deserialization9.3CNA v4.01.3%2026-08-25Fix
CVE-2026-79655Red Hat Enterprise Linux 10 sos: Sos: Path traversal in sos clean tar extraction7.8CNA v3.10.2%2026-08-25Fix
CVE-2026-79652Red Hat Keycloak JWT Bearer grant handler missing authorization5.9CNA v3.10.3%2026-08-25Fix
CVE-2026-79623FishCodeTech Muteki Default Local Worker Backend settings.json os command injection5.3CNA v4.01.8%2026-08-25
CVE-2026-79622dekdee adobe-xd-mcp file-access-from-request endpoint xd-parser.ts path traversal6.9CNA v4.00.6%2026-08-25
CVE-2026-79406macrozheng mall quantity OmsCartItemServiceImpl.updateQuantity logic error5.3CNA v4.00.4%2026-08-25
CVE-2026-79293Google Chrome Animation information disclosure6.5v3.10.3%2026-08-25Fix
CVE-2026-79292Google Chrome Chromecast integer overflow8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79291Google Chrome CSS information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79290Google Chrome Aura use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79289Google Chrome Workers improper resource control3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79288Google Android Autofill in Google Chrome on improper input validation6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79287Google Chrome forms observable discrepancy5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79286Google Android CustomTabs in Google Chrome on missing authorization7.4CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79285Google Chrome ANGLE uninitialized resource use6.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79284Google Chrome Core UI misrepresentation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79283Google Chrome Geometry UI misrepresentation5.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79282Google Android ANGLE in Google Chrome on use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79276Google Chrome FileSystem improper privilege management4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79275Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79274Google Chrome GPU information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79273Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79272Google Chrome FindInPage improper input validation3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79271Google Chrome DOM information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79270Google Chrome ANGLE uninitialized resource use6.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79269Google Chrome ANGLE uninitialized resource use4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79267Google Chrome Workers race condition4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79266Google Chrome DevTools use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79265Google Chrome GetUserMedia incomplete cleanup5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79264Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79263Google Chrome extensions race condition8.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79262Google Chrome Network incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79261Google Chrome Controls incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79260Google Chrome Cookies improper input validation6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79259Google Chrome Safebrowsing improper input validation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79258Google Chrome WebXR incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79257Google Chrome Views use-after-free9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79256Google Chrome externally controlled resource reference8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79255Google Chrome WebRTC improper input validation3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79254Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79253Google Chrome Network improper input validation6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79252Google Chrome ServiceWorker information disclosure4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79251Google Chrome Network improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79250Google Chrome Navigation UI misrepresentation5.4CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79249Google Chrome Bisection code injection6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79248Google Chrome Input incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79247Google Chrome Chromoting use-after-free8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79246Google Chrome DataTransfer information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79245Google Chrome UI use-after-free7.7CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79244Google Chrome Animation use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79243Google Chrome ReadingList improper input validation6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79242Google Chrome HTML observable discrepancy5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79241Google Android GPU in Google Chrome on out-of-bounds read6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79240Google Chrome ANGLE out-of-bounds write8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79239Google Android Tint in Google Chrome on out-of-bounds read6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79238Google Chrome ServiceWorker incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79237Google Chrome Navigation incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79236Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79235Google Chrome WebGL use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79234Google Chrome CSS injection6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79233Google Android CustomTabs in Google Chrome on UI misrepresentation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79232Google Chrome Aura use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79231Google Chrome Media buffer overflow8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79230Google Chrome ANGLE improper input validation8.8CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79229Google Chrome ANGLE uninitialized resource use6.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79228Google Chrome SiteIsolation incorrect authorization3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79227Google Chrome DevTools type confusion8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79226Google Chrome Regional Capabilities improper privilege management8.8CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79225Google Android Browser in Google Chrome on incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79224Google Chrome Chromecast use-after-free8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79223Google Chrome Chromium integer overflow8.8CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79222Google Android CustomTabs in Google Chrome on incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79221Google Chrome Dawn uninitialized resource use6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79220Google Chrome Network information disclosure5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79219Google Chrome Bluetooth use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79218Google Chrome Sandbox incorrect authorization8.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79217Google Chrome Mobile incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79216Google Chrome Blink buffer overflow7.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79215Google Chrome WebGL integer overflow8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79214Google Chrome Preload improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79213Google Android WebAppInstalls in Google Chrome on incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79212Google Chrome Passwords missing authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79211Google Chrome USB incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79210Google Android Audio in Google Chrome on use-after-free8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79209Google Chrome Animation type confusion8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79208Google Chrome HTTP2 missing authorization5.9CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79207Google Chrome Passwords information disclosure6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79206Google Chrome FileSystem out-of-bounds read6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79205Google Chrome Network incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79204Google Chrome Input UI misrepresentation5.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79203Google Chrome DevTools improper input validation3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79202Google Chrome Chromecast use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79201Google Chrome Workers improper access control4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79200Google Chrome Aura use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79199Google Chrome Network incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79198Google Chrome Platform use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79197Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79196Google Chrome Editing race condition5.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79195Google Chrome script use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79194Google Chrome Chromoting use-after-free8.1CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-79193Google Chrome Canvas information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79192Google Chrome Variations improper input validation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79191Google Chrome SiteIsolation incorrect authorization3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79190Google Chrome extensions incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79189Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79188Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79187Google Chrome WebRTC use-after-free8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79186Google Chrome Network incorrect authorization3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79185Google Chrome DOM information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79184Google Chrome Preload missing authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79183Google Chrome Accessibility use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79182Google Chrome Media improper input validation8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79181Google Chrome Glic observable discrepancy5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79180Google Android CustomTabs in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79179Google Chrome DOM incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79178Google Chrome Web Authentication incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79177Google Chrome Media incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79176Google Chrome extensions UI misrepresentation6.5CISA ADP v3.10.3%2026-08-25Fix