CVE-2026 list

CVE-2026 records published in August 2026

Page three of 13: records 2,001 to 3,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.

CVE-2026 records published in August 2026, newest first: records 2,001 to 3,000 of 12,071
CVE Summary CVSS EPSS Published Signals
CVE-2026-79175Google Chrome Accessibility type confusion8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79174Google Chrome extensions incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79173Google Chrome WebAppInstalls UI misrepresentation5.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79155Google Chrome FileSystem race condition8.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79154Google Chrome DevTools missing authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79152Google Android CustomTabs in Google Chrome on incorrect authorization9.8CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79151Google Chrome Safebrowsing improper input validation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79150Google Chrome Views use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79149Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79148Google Chrome DevTools off-by-one error9.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79147Google Chrome Skia information disclosure5.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79146Google Android CustomTabs in Google Chrome on information disclosure5.5CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79144Google Chrome Skia information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79143Google Chrome FileSystem incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79142Google Android ANGLE in Google Chrome on buffer overflow8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79141Google Chrome Browser incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79140Google Chrome Views use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79139Google Chrome Media improper input validation7.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79138Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79137Google Chrome extensions incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79136Google Chrome ServiceWorker incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79134Google Chrome GetUserMedia incorrect authorization6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79133Google Chrome forms incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79132Google Android Input in Google Chrome on improper input validation8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79131Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79130Google Chrome ANGLE buffer overflow9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79129Google Android Sessions in Google Chrome on use-after-free9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79128Google Chrome Views use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79127Google Chrome ANGLE out-of-bounds write8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79126Google Chrome Proxy incorrect behavior5.9CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79125Google Chrome XR information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79124Google Android Intents in Google Chrome on information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79123Google Chrome NTP Footer improper input validation6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79122Google Chrome SignIn information disclosure5.9CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79121Google Chrome Chromecast improper input validation8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79120Google Chrome ANGLE uninitialized resource use6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79119Google Chrome PDF use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79118Google Chrome ANGLE uninitialized resource use4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79117Google Android WebAppInstalls in Google Chrome on race condition4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79116Google Chrome Viz missing authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79112Google Chrome Skia out-of-bounds read6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79111Google Chrome Dawn improper input validation9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79110Google Chrome Preload missing authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79109Google Chrome Printing improper input validation8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79108Google Chrome Web Authentication UI misrepresentation6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79107Google Chrome TabGroups incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79106Google Chrome Input improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79105Google Chrome Mobile improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79104Google Chrome Sensor missing authorization5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79103Google Chrome incorrectly resolved name or reference3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79099Google Chrome Network missing authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79098Google Chrome PermissionElement UI misrepresentation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79097Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79095Google Chrome Payments information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79094Google Chrome Workers race condition6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79093Google Chrome Paint incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79091Google Chrome Bluetooth use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79090Google Chrome Actor improper privilege management9.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79089Google Android Transactions Platform in Google Chrome on race condition5.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79088Google Chrome FileSystem incorrect authorization6.5v3.10.3%2026-08-25Fix
CVE-2026-79087Google Chrome Chrome Tabs injection4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79086Google Android CustomTabs in Google Chrome on missing authorization5.1CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79085Google Chrome Network missing authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79084Google Chrome Notifications inadequate encryption strength4.3CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79083Google Chrome Media improper workflow enforcement7.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79082Google Chrome Transactions Platform incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79078Google Chrome FedCM use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79077Google Chrome WebProtect incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79076Google Chrome Sync improper input validation6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79075Google Chrome Geolocation information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79074Google Chrome Network information disclosure5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79073Google Chrome improper check for exceptional conditions8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79072Google Chrome improper check for exceptional conditions8.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79071Google Chrome GPU race condition8.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79070Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79069Google Chrome Tint memory corruption8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79068Google Chrome StreamsAPI resource exposure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79067Google Chrome Network missing authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79066Google Chrome Navigation improper input validation3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79065Google Chrome Network improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79064Google Chrome Network use-after-free9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79060Google Chrome StorageAccessAPI incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79059Google Chrome BFCache information disclosure3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79058Google Chrome Passwords missing authorization9.1CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79057Google Android Start in Google Chrome on race condition8.1CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79056Google Chrome ServiceWorker use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79055Google Android Sharing in Google Chrome on information disclosure5.1CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-79054Google Chrome Chromecast use-after-free8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79053Google Chrome Lighthouse missing authorization3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79052Google Chrome Aura use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79051Google Chrome Loader incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79050Google Chrome Network incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79049Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79048Google Chrome ANGLE out-of-bounds write8.8CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-79047Google Chrome Views use-after-free9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79046Google Android Permissions in Google Chrome on race condition4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79045Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79044Google Android WebAppInstalls in Google Chrome on missing authorization5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79043Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79042Google Android Payments in Google Chrome on missing authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79041Google Chrome Browser missing authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79040Google Android GPU in Google Chrome on uninitialized resource use4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79039Google Chrome Mobile use-after-free8.1CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79038Google Chrome WebProtect incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79034Google Chrome CORS information disclosure3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79033Google Chrome DevTools insufficient control flow management8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79032Google Chrome Network improper input validation6.8CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79031Google Chrome Preload resource exposure3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79030Google Chrome Autofill observable discrepancy5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79028Google Chrome Network observable discrepancy5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79027Google Chrome WebRTC use-after-free8.1CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79026Google Chrome extensions use-after-free9.6CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79025Google Chrome Workers improper input validation4.2CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79024Google Chrome ServiceWorker information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79023Google Chrome Editing incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79022Google Chrome Transactions Platform UI misrepresentation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79021Google Chrome InterestGroups missing authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79020Google Chrome Skia out-of-bounds read8.1CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79019Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79018Google Chrome FoldableAPIs information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79017Google Chrome extensions race condition6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79016Google Chrome SVG observable discrepancy4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79015Google Chrome ServiceWorker improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79014Google Chrome Autofill race condition4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79013Google Chrome Sync improper input validation5.9CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79012Google Chrome Safebrowsing use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-79011Google Chrome Browser UI misrepresentation8.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79010Google Chrome Network operation on a released resource4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79009Google Chrome UI UI misrepresentation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79008Google Android GPU in Google Chrome on improper input validation8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-79007Google Chrome GPU uninitialized resource use3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79006Google Chrome HttpsUpgrades protection mechanism failure4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79005Google Chrome StorageAccessAPI incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79004Google Chrome Media out-of-bounds read3.4CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79003Google Chrome Device incorrect authorization4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79002Google Chrome SiteIsolation incorrect authorization3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-79001Google Chrome Bluetooth information disclosure5.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-79000Google Chrome DeviceBoundSessionCredentials improper input validation4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78999Google Chrome Navigation improper privilege management8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78991Google Chrome WebProtect race condition5.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78990Google Chrome Compositing use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78989Google Chrome ANGLE out-of-bounds read9.6CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-78987Google Chrome Canvas information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78986Google Chrome GPU uninitialized resource use3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78985Google Chrome incorrectly resolved name or reference9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78984Google Chrome GPU uninitialized resource use3.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78983Google Chrome Views use-after-free8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78981Google Chrome Mobile information disclosure6.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78980Google Chrome ReaderMode improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78979Google Chrome Core race condition4.3CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78978Google Chrome ANGLE out-of-bounds read8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78977Google Android GPU in Google Chrome on uninitialized resource use6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78976Google Chrome StorageAccessAPI improper input validation4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78975Google Chrome DOM incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78974Google Chrome Linux Toolkit Theming UI misrepresentation5.4CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78969Google Chrome Video uninitialized resource use6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78968Google Chrome Core missing authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78967Google Chrome BFCache missing authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78966Google Chrome externally controlled resource reference4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78965Google Chrome ANGLE uninitialized resource use4.3CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78964Google Chrome Sync use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78963Google Chrome Media improper input validation8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78962Google Chrome WebXR uninitialized resource use4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78961Google Chrome Core incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78960Google Chrome extensions information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78959Google Chrome FileSystem case sensitivity bypass6.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78958Google Chrome Skia uninitialized resource use3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78957Google Chrome Mobile information disclosure5.5CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-78956Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78955Google Chrome PerformanceAPIs observable discrepancy6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78954Google Chrome extensions incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78953Google Chrome SiteIsolation missing authorization3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78952Google Chrome Crashpad out-of-bounds write8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78951Google Chrome ServiceWorker use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78950Google Chrome WebRTC integer overflow8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78949Google Android CustomTabs in Google Chrome on observable discrepancy2.9CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-78948Google Chrome WebGL buffer overflow9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78947Google Chrome Chromium incomplete cleanup6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78946Google Chrome Select incorrect authorization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78945Google Chrome Views use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78944Google Chrome DevTools use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78943Google Chrome Editing improper input validation3.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78942Google Chrome incorrectly resolved name or reference4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78941Google Chrome Core information disclosure3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78940Google Chrome Network improper initialization4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78939Google Chrome Chromecast use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78938Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-08-25Exploit codeFix
CVE-2026-78937Google Android Search in Google Chrome on use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78936Google Android CustomTabs in Google Chrome on observable discrepancy2.9CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-78935Google Chrome Mobile uninitialized variable use9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78934Google Chrome ReadAloud race condition8.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78915Google Chrome Enterprise race condition7.5CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-78914Google Chrome Skia uninitialized resource use6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78913Google Chrome Chromoting use-after-free8.1CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78912Google Chrome Browser UI misrepresentation5.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78911Google Chrome USB incorrect authorization8.3CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78910Google Chrome V8 buffer overflow8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78909Google Chrome Views use-after-free9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78908Google Chrome Canvas information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78907Google Chrome WebProtect incorrect authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78906Google Chrome ANGLE race condition7.5CISA ADP v3.10.4%2026-08-25Exploit codeFix
CVE-2026-78905Google Chrome ANGLE type confusion8.8CISA ADP v3.10.6%2026-08-25Exploit codeFix
CVE-2026-78904Google Chrome ANGLE type confusion9.6CISA ADP v3.10.6%2026-08-25Exploit codeFix
CVE-2026-78903Google Chrome SiteIsolation incomplete cleanup3.1CISA ADP v3.10.3%2026-08-25Exploit codeFix
CVE-2026-78901Google Chrome V8 race condition7.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78900Google Chrome Media improper input validation9.6CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78899Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-78898Google Chrome Downloads incorrect authorization5.4CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78897Google Chrome BrowserTag missing authorization6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78896Google Chrome StorageAccessAPI information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78895Google Chrome Paint information disclosure4.3CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78894Google Chrome Payments race condition3.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-78893Google Chrome QUIC information disclosure6.5CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-78892Google Chrome Chromoting incorrect authorization7.1CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-78891Google Chrome WebRTC buffer overflow8.8CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-78887liketrek TREK Journey Photo Proxy validateShareTokenForAsset authorization6.3CNA v4.00.5%2026-08-25Fix
CVE-2026-78886liketrek TREK Public Journey Photo Proxy journey-public.controller.ts path traversal6.3CNA v4.00.6%2026-08-25Fix
CVE-2026-78885liketrek TREK OIDC service oidcService.ts findOrCreateUser improper authentication6.3CNA v4.00.6%2026-08-25Fix
CVE-2026-78864liketrek TREK Journey Entry Update journey.controller.t journeyService.updateEntry SQL injection5.3CNA v4.00.3%2026-08-25Fix
CVE-2026-78863liketrek TREK Pre-2FA mfa_token authService.ts loginUser improper authentication5.3CNA v4.00.5%2026-08-25Fix
CVE-2026-78701Red Hat 389-ds-base SASL UNBIND process denial of service6.5CNA v3.10.8%2026-08-25Fix
CVE-2026-78685Le-yan｜Medical Practice Management System remote code execution8.6CNA v4.00.6%2026-08-25Fix
CVE-2026-78684vLLM denial of service via DeepStream Backend6.9CNA v4.00.6%2026-08-25Fix
CVE-2026-78683NLTK remote code execution via Unsafe Pickle deserialization9.4CNA v4.00.5%2026-08-25Fix
CVE-2026-78682NLTK SSRF Protection Bypass via Proxy8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-78681NLTK Entity Expansion DoS via ElementTree8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-78680NLTK arbitrary code execution via Graphviz dot Binary8.5CNA v4.00.2%2026-08-25Fix
CVE-2026-78679GitPython arbitrary file read via TagReference.create7.1CNA v4.00.3%2026-08-25Fix
CVE-2026-78678GitPython arbitrary file read via Repo.blame7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-78677GitPython path traversal via separate-git-dir8.7CNA v4.00.7%2026-08-25Fix
CVE-2026-78676GitPython remote code execution via Config injection9.3CNA v4.00.8%2026-08-25Fix
CVE-2026-78675GitPython Local File Content Disclosure via .gitmodules7.8NVD v3.10.2%2026-08-25Fix
CVE-2026-78656itsourcecode Sales and Inventory System cust_del.php SQL injection5.3CNA v4.00.3%2026-08-25
CVE-2026-78655Punk::Plugin::TOTP two-factor challenge vulnerability9.1CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-78654cleverbrush framework/deep deepExtend.ts deepExtend prototype pollution6.9CNA v4.00.7%2026-08-25Fix
CVE-2026-78638peerigon unzip-crx/unzip-crx-3 Archive Extraction index.js unzip path traversal4.8CNA v4.00.2%2026-08-25
CVE-2026-78637Fdawgs node-poppler argument injection index.js pdfUnite argument injection6.9CNA v4.00.4%2026-08-25
CVE-2026-78619Punk::Plugin::TOTP recovery code verification authentication bypass9.8CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-78581Elastic Kibana insecure direct object reference4.2CNA v3.10.2%2026-08-25Fix
CVE-2026-78478Mane WordPress theme local file inclusion8.1CNA v3.10.8%2026-08-25
CVE-2026-78470WP Project Manager Pro WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.4%2026-08-25
CVE-2026-78379Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents tools9.2CNA v4.00.6%2026-08-25Fix
CVE-2026-78322File Roller progress-line parser stack buffer overflow6.5CNA v3.10.5%2026-08-25Fix
CVE-2026-77998Joomla extension miniorange.com unauthenticated authentication bypass10.0CNA v4.00.6%2026-08-25
CVE-2026-77997YOOtheme Pro module access check information disclosure5.1CNA v4.00.4%2026-08-25
CVE-2026-77996Joomla extension yootheme.com Authenticated, privileged stored XSS in YOOtheme Pro7.5CNA v4.00.4%2026-08-25
CVE-2026-77824Media Sweep WordPress plugin authenticated (Administrator+) SQL injection via fields parameter4.9CNA v3.10.5%2026-08-25Fix
CVE-2026-77680Red Hat Enterprise Linux 10 libsoup's HTTP Range header processing algorithmic complexity5.3CNA v3.10.3%2026-08-25Fix
CVE-2026-77585Improper validation of SSH Target in Okta Privileged Access Client5.3CNA v3.10.1%2026-08-25Fix
CVE-2026-77357Mesop hot-reload endpoint denial of service8.7CNA v4.00.5%2026-08-25Fix
CVE-2026-77146Broken access control in extension femanager (femanager)8.3CNA v4.00.4%2026-08-25Fix
CVE-2026-77145Broken access control in extension Events 2 (events2)7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-77144Broken access control in extension Events 2 (events2)7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-77143Broken access control in extension Forum (pforum)8.8CNA v4.00.4%2026-08-25Fix
CVE-2026-77142Broken access control in extension Industry Directory (yellowpages2)8.8CNA v4.00.4%2026-08-25Fix
CVE-2026-77141Broken access control in extension Club Directory (clubdirectory)8.8CNA v4.00.4%2026-08-25Fix
CVE-2026-77140Broken access control in extension Telephone Directory (telephonedirectory)8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-77139Path traversal in extension Mask (mask)6.0CNA v4.00.4%2026-08-25Fix
CVE-2026-77138Remote code execution in extension HTML5 Video Player vs. Powermail (html5videoplayer_powermail)9.3CNA v4.00.7%2026-08-25Fix
CVE-2026-77137SQL injection in extension Forms Export (frp_form_answers)7.7CNA v4.00.4%2026-08-25Fix
CVE-2026-77136Server-side template injection in extension powermail (powermail)9.5CNA v4.01.0%2026-08-25Reported exploitedFix
CVE-2026-77135Information disclosure in extension femanager (femanager)8.2CNA v4.00.4%2026-08-25Fix
CVE-2026-77134Broken access control in extension femanager (femanager)8.3CNA v4.00.4%2026-08-25Fix
CVE-2026-77133Broken access control in extension femanager (femanager)6.0CNA v4.00.4%2026-08-25Fix
CVE-2026-77131TYPO3 SYSSY extension cleartext transmission of sensitive information5.3CNA v4.00.2%2026-08-25Fix
CVE-2026-77130Insufficient session expiration in extension SYSSY TYPO3 Monitoring and Security Checks (syssy)5.3CNA v4.00.4%2026-08-25Fix
CVE-2026-77129Server-side template injection in extension Event management and registration (sf_event_mgt)7.7CNA v4.00.4%2026-08-25Fix
CVE-2026-77128Broken access control in extension Event management and registration (sf_event_mgt)6.3CNA v4.00.5%2026-08-25Fix
CVE-2026-77127Information disclosure in extension modules (modules)6.0CNA v4.00.4%2026-08-25Fix
CVE-2026-76846Grav information disclosure via Twig Sandbox8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-76839Grav information disclosure via offsetGet8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-76198CAI Content Credentials improper input validation5.5CNA v3.10.3%2026-08-25Fix
CVE-2026-76197Adobe Campaign Classic improper neutralization of special elements used in an OS command10.0CNA v3.13.5%2026-08-25Fix
CVE-2026-76195Adobe Campaign Classic improper neutralization of special elements used in an OS command10.0CNA v3.13.5%2026-08-25Fix
CVE-2026-76193Adobe Campaign Classic (ACC) server-side request forgery (SSRF)10.0CNA v3.11.3%2026-08-25Fix
CVE-2026-76189CAI Content Credentials integer underflow (wrap or wraparound)6.2CNA v3.10.3%2026-08-25Fix
CVE-2026-76128eCommerce Product Catalog WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-08-25Fix
CVE-2026-76063FundEngine WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-25Fix
CVE-2026-75982LearnPress WordPress plugin missing authorization authenticated limited option update4.4CNA v3.10.4%2026-08-25Fix
CVE-2026-75971ShopEngine Elementor WooCommerce Builder Addon WordPress plugin privilege escalation7.2CNA v3.10.6%2026-08-25Fix
CVE-2026-75930FundEngine WordPress plugin missing authorization authenticated arbitrary post modification4.3CNA v3.10.4%2026-08-25Fix
CVE-2026-75908Newsletters WordPress plugin missing authorization authenticated arbitrary modification4.3CNA v3.10.4%2026-08-25Fix
CVE-2026-75803OpenSSL AEAD Forgeries with Empty Ciphertext when using EVP_Cipher9.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-75770Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75769Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75768Adobe Substance3D Painter untrusted search path7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75767Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75766Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75752Adobe Substance3D Painter out-of-bounds read5.5CNA v3.10.3%2026-08-25Fix
CVE-2026-75750Adobe Substance3D Painter heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75749Adobe Substance3D Painter out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-75575Rocket.Chat Missing DDP Rate Limit on the sendForgotPasswordEmail Meteor method6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-75574Grav remote code execution via Email Twig8.7CNA v4.00.7%2026-08-25Fix
CVE-2026-75498Webkul QloApps SQL injection8.6CNA v4.00.8%2026-08-25Fix
CVE-2026-75497Webkul QloApps SQL injection8.6CNA v4.00.8%2026-08-25Fix
CVE-2026-75496Webkul QloApps improper file upload validation8.6CNA v4.01.0%2026-08-25Fix
CVE-2026-75465Maccms user list endpoint information disclosure7.5CISA ADP v3.10.7%2026-08-25
CVE-2026-75421aria2 IOFile::getLine function stack-based buffer underflow4.0CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-75038Predictable temporary file in /tmp allows symlink attack in LACT6.9CNA v4.00.2%2026-08-25Fix
CVE-2026-75037Polkit authentication bypass in LACT7.3CNA v4.00.2%2026-08-25Fix
CVE-2026-75019Cozy Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-25Fix
CVE-2026-74932WP Fastest Cache - unauthenticated stored XSS via host header cache poisoning7.5CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-73180Apache Tomcat: Authenticated WebSocket session survives end of HTTP session6.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-72924cli resource exposure2.1CNA v4.00.3%2026-08-25Fix
CVE-2026-72702Grav CMS Origin Validation Bypass via Referer9.3CNA v4.00.1%2026-08-25Fix
CVE-2026-72701Grav CMS Timing Attack via verifyNonce6.3CNA v4.00.2%2026-08-25Fix
CVE-2026-72700Grav Timing Attack via Non-Constant-Time Token Comparison8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-72699getgrav grav-plugin-login Grav Login Plugin Email Enumeration via Registration9.3CNA v4.00.3%2026-08-25Fix
CVE-2026-72698Grav CMS information disclosure via Twig sandbox bypass7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-72697Grav CMS path traversal via media_directory7.1CNA v4.00.4%2026-08-25Fix
CVE-2026-72696Grav CMS symlink following via createLockFile8.6CNA v4.00.2%2026-08-25Fix
CVE-2026-72695Grav path traversal via MediaUploadTrait deleteFile7.1CNA v4.00.6%2026-08-25Fix
CVE-2026-71564Substance3D Designer out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-71444CAI Content Credentials integer underflow (wrap or wraparound)6.2CNA v3.10.3%2026-08-25Fix
CVE-2026-71443CAI Content Credentials improper input validation7.5CNA v3.10.9%2026-08-25Fix
CVE-2026-71442CAI Content Credentials integer underflow (wrap or wraparound)7.5CNA v3.10.9%2026-08-25Fix
CVE-2026-71441Adobe Illustrator out-of-bounds read5.5CNA v3.10.3%2026-08-25Fix
CVE-2026-71399Adobe XD buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-71382Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-71360CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.9%2026-08-25Fix
CVE-2026-70665Doorkeeper OpenID Connect dynamic client registration endpoint privilege escalation4.2CNA v3.10.3%2026-08-25Fix
CVE-2026-70551Server-side request forgery via VCS remote download in JFrog Artifactory8.5CNA v3.10.3%2026-08-25Fix
CVE-2026-70550Potential unauthorized access to private Composer repository metadata in JFrog Artifactory6.5CNA v3.10.4%2026-08-25Fix
CVE-2026-70548SSRF in CocoaPods via JFrog Artifactory External Dependency3.5CNA v3.10.3%2026-08-25Fix
CVE-2026-69665SKYSEA Client View incorrect default permissions8.5CNA v4.00.2%2026-08-25
CVE-2026-69104Potential unauthorized repository migration in JFrog Artifactory7.6CNA v3.10.3%2026-08-25Fix
CVE-2026-68960SKYSEA Client View stack-based buffer overflow5.8CNA v4.00.6%2026-08-25
CVE-2026-68959SKYSEA Client View path traversal5.8CNA v4.00.7%2026-08-25
CVE-2026-68763Apache Tomcat: DoS via allocation leak in HTTP/2 backlog tracking when a stream is reset7.5CISA ADP v3.10.7%2026-08-25Fix
CVE-2026-68569Apache Tomcat: Principal lookup can fail open in some cases8.1CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-68525Apache Tomcat: Redirect after FORM auth may bypass method specific constraints9.1CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-68515OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union7.1CNA v3.10.2%2026-08-25Fix
CVE-2026-68514Academy Software Foundation OpenEXR PyOpenEXR deep scanline channel reader out-of-bounds write5.5CNA v3.10.2%2026-08-25Fix
CVE-2026-68513OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision7.1CNA v3.10.2%2026-08-25Fix
CVE-2026-68062SKYSEA Client View path traversal5.8CNA v4.00.7%2026-08-25
CVE-2026-67578FURUNO ELECTRIC FA-50 missing authentication8.7CNA v4.00.5%2026-08-25
CVE-2026-66882team-alembic ash_authentication cross-site scripting2.1CNA v4.00.8%2026-08-25Fix
CVE-2026-66766Denial of service (DoS) in SAP S/4HANA (Manage Supply Protection)7.5CNA v3.10.5%2026-08-25Fix
CVE-2026-66422Apache Tomcat: Servlet role references can bypass declarative role constraints8.1CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-66153SonicWall NetExtender link following7.0CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-66152SonicWall NetExtender path traversal8.8CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-66109SKYSEA Client View missing authorization8.5CNA v4.00.2%2026-08-25
CVE-2026-65979OpenEXR: Out-of-bounds read in HTJ2K decoder from unvalidated chunk header length (PLEN)6.7CNA v4.00.2%2026-08-25Fix
CVE-2026-65927Apache Tomcat: RewriteValve [N] restarts at the second rule and may bypass access control7.5CISA ADP v3.10.7%2026-08-25Fix
CVE-2026-65905Apache Tomcat: Limited replay attack possible with DIGEST authentication9.8CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-65637Apache Tomcat: HTTP/2 no-authority bypass of strict SNI validation fix incomplete9.8CISA ADP v3.10.7%2026-08-25Fix
CVE-2026-65633team-alembic ash_authentication improper authentication7.6CNA v4.00.6%2026-08-25Fix
CVE-2026-65367Apple iOS and iPadOS null pointer dereference5.5CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-65183Apache Tomcat: TOCTOU when setting specific permissions for Unix Domain Sockets8.1CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-65182Apache Tomcat: Bypass longest prefix security constraint9.1CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-65105NVIDIA NemoClaw missing authentication8.1CNA v3.10.5%2026-08-25Fix
CVE-2026-65099NVIDIA NemoClaw OS command injection7.8CNA v3.11.3%2026-08-25Fix
CVE-2026-65098NVIDIA NemoClaw weak authentication8.1CNA v3.11.0%2026-08-25Fix
CVE-2026-65097NVIDIA NemoClaw download without integrity check7.5CNA v3.10.3%2026-08-25Fix
CVE-2026-65096NVIDIA NemoClaw OS command injection7.8CNA v3.11.3%2026-08-25Fix
CVE-2026-65093NVIDIA OpenShell uncontrolled search path9.9CNA v3.10.8%2026-08-25Fix
CVE-2026-65092NVIDIA OpenShell path traversal8.5CNA v3.10.6%2026-08-25Fix
CVE-2026-65091NVIDIA OpenShell OS command injection8.8CNA v3.12.6%2026-08-25Fix
CVE-2026-65090NVIDIA NemoClaw OS command injection7.8CNA v3.11.3%2026-08-25Fix
CVE-2026-65089NVIDIA NemoClaw OS command injection7.8CNA v3.11.3%2026-08-25Fix
CVE-2026-65088NVIDIA NemoClaw information disclosure5.5CNA v3.10.2%2026-08-25Fix
CVE-2026-65087NVIDIA NemoClaw insufficiently protected credentials5.6CNA v3.10.2%2026-08-25Fix
CVE-2026-65086NVIDIA OpenShell OS command injection6.8CNA v3.12.4%2026-08-25Fix
CVE-2026-65085NVIDIA OpenShell improper output encoding5.2CNA v3.10.2%2026-08-25Fix
CVE-2026-65084NVIDIA NemoClaw improper certificate validation8.1CNA v3.10.5%2026-08-25Fix
CVE-2026-65083NVIDIA OpenShell incomplete denylist9.9CNA v3.10.9%2026-08-25Fix
CVE-2026-65082NVIDIA NemoClaw code injection7.0CNA v3.10.2%2026-08-25Fix
CVE-2026-65081NVIDIA NemoClaw download without integrity check8.1CNA v3.10.4%2026-08-25Fix
CVE-2026-64705Apple macOS buffer overflow5.5CISA ADP v3.10.2%2026-08-25Exploit codeFix
CVE-2026-64204Out-of-bounds write vulnerability in NI LabVIEW when loading VI8.5CNA v4.00.2%2026-08-25Fix
CVE-2026-64203Out-of-bounds read vulnerability in NI LabVIEW when loading VI8.5CNA v4.00.2%2026-08-25Fix
CVE-2026-64202Out-of-bounds read vulnerability in NI LabVIEW when loading VI8.5CNA v4.00.2%2026-08-25Fix
CVE-2026-64201Out-of-bounds read vulnerability in NI LabVIEW when loading VI8.5CNA v4.00.2%2026-08-25Fix
CVE-2026-63587Weidmueller Interface IE-SR-2TX-WL-4G-EU SMS password authorization bypass8.8CNA v4.00.4%2026-08-25Fix
CVE-2026-63586Unauthenticated remote code execution via Shell injection in Web Management Interface9.3CNA v4.00.9%2026-08-25Fix
CVE-2026-63404Contribsys Faktory embedded Redis bootstrapper insecure temporary file7.3CNA v4.00.2%2026-08-25Fix
CVE-2026-63403Faktory: Unrecovered panic in command handlers allows full-server denial of service8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-63076OpenSSL Invalid Pointer Dereference in CMP Server via Crafted protectionAlg7.5CISA ADP v3.11.6%2026-08-25Fix
CVE-2026-63075OpenSSL QUIC ACK-only Packet Retention can cause memory exhaustion7.5CISA ADP v3.10.8%2026-08-25Fix
CVE-2026-63074OpenSSL CMP Indefinite Cache Growth of ExtraCerts5.9CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-63073OpenSSL Untrusted Sender DN Used as format string in CMP Response Validation9.8CISA ADP v3.11.2%2026-08-25Fix
CVE-2026-63072OpenSSL heap buffer overflow in CMS Key Unwrapping7.5CISA ADP v3.10.9%2026-08-25Fix
CVE-2026-62986OpenEXR: PyOpenEXR deep prefixed RGB stale lane disclosure4.3CNA v3.10.4%2026-08-25Fix
CVE-2026-62865baptisteArno typebot.io TypeBot: Arbitrary server file read via Send Email block attachment path8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-62862baptisteArno typebot.io TypeBot: Account takeover via brute-forceable 6-digit magic-link code9.1CNA v4.00.5%2026-08-25Fix
CVE-2026-62861Typebot custom domain deletion missing authorization6.4CNA v4.00.4%2026-08-25Fix
CVE-2026-61555OpenEXR: Empty multiView viewFromChannelName file crash5.5CNA v3.10.2%2026-08-25Fix
CVE-2026-59985OpenEXR: Heap out-of-bounds read in OpenEXRCore RLE decoding on ILP325.5CNA v3.10.2%2026-08-25Fix
CVE-2026-59984OpenEXR: Scratch buffer overflow decoding B44-compressed InputFile on ILP325.5CNA v3.10.2%2026-08-25Fix
CVE-2026-59983OpenEXR: Out-of-bounds read in DeepTiledInputFile sample-count table decode on ILP325.5CNA v3.10.2%2026-08-25Fix
CVE-2026-59982OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-59981OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-59769FURUNO ELECTRIC FA-50 hard-coded credentials8.8CNA v4.00.6%2026-08-25
CVE-2026-59335Cloud Foundry UAA case sensitivity bypass8.7CNA v3.10.5%2026-08-25Fix
CVE-2026-59189OpenEXR: Out-of-bounds read in DeepImageChannel::row for non-zero dataWindow origin7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-59187OpenEXR: Exrmetrics deep pixelmode heap buffer overflow7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-59186OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-59184OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-59183OpenEXR: Signed integer overflow leading to out-of-bounds memory access in Deep Tile Decoding5.5CNA v3.10.2%2026-08-25Fix
CVE-2026-57910WatchGuard Agent improper authentication allows unauthenticated remote code execution9.3CNA v4.00.2%2026-08-25Fix
CVE-2026-57909WatchGuard Agent path traversal allows unauthenticated remote code execution9.4CNA v4.00.4%2026-08-25Fix
CVE-2026-57863Crater Invoice path traversal RCE via update/unzip endpoint8.7CNA v4.00.9%2026-08-25
CVE-2026-57171oscal-compass compliance-trestle trestle is vulnerable to arbitrary file write7.7CNA v3.10.2%2026-08-25Fix
CVE-2026-57170oscal-compass compliance-trestle trestle SSTI in Jinja2 include tags allows arbitrary code execution7.8CNA v3.10.2%2026-08-25Fix
CVE-2026-56710Grav Login plugin privilege escalation via Unlock9.3CNA v4.00.5%2026-08-25Fix
CVE-2026-56709Grav host header injection via sendInvitationEmail8.7CNA v4.00.4%2026-08-25Fix
CVE-2026-56708Grav API plugin SSRF via DNS Rebinding6.9CNA v4.00.3%2026-08-25Fix
CVE-2026-56707Grav Flex Objects authorization bypass via shortcode8.3CNA v4.00.4%2026-08-25Fix
CVE-2026-56706Adminer CSRF Token Secret Recovery via XOR Masking6.1CNA v4.00.4%2026-08-25Fix
CVE-2026-56705Adminer remote code execution via MSSQL PDO DSN injection9.3CNA v4.00.9%2026-08-25Exploit codeFix
CVE-2026-56704Adminer cross-site scripting via MySQL Version String5.3CNA v4.00.3%2026-08-25Fix
CVE-2026-56703Adminer remote code execution via SQLite VACUUM INTO8.6CNA v4.01.2%2026-08-25Fix
CVE-2026-56702Adminer unrestricted file upload via AdminerFileUpload7.1CNA v4.00.6%2026-08-25Fix
CVE-2026-56096Information disclosure in extension Apache Solr for TYPO3 Enterprise Search (solr)6.3CNA v4.00.4%2026-08-25Exploit codeFix
CVE-2026-56095Insecure deserialization in extension Apache Solr for TYPO3 Enterprise Search (solr)7.7CNA v4.00.3%2026-08-25Fix
CVE-2026-56094Information disclosure in extension Apache Solr for TYPO3 Enterprise Search (solr)6.3CNA v4.00.3%2026-08-25Fix
CVE-2026-56093Broken access control in extension Apache Solr for TYPO3 Enterprise Search (solr)6.3CNA v4.00.3%2026-08-25Fix
CVE-2026-56092Broken access control in extension Apache Solr for TYPO3 Enterprise Search (solr)7.6CNA v4.00.3%2026-08-25Fix
CVE-2026-55976Apache Hive Avro SerDe schema resolution server-side request forgery9.1CISA ADP v3.11.0%2026-08-25Fix
CVE-2026-55805Drupal core Moderately critical cross-site scripting SA-CORE-2026-0125.4CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-55663mediasoup SCTP state cookie validation vulnerability5.6CNA v3.10.2%2026-08-25Fix
CVE-2026-55640Nextcloud MCP Server webhook receiver missing authentication9.1CNA v3.10.7%2026-08-25Fix
CVE-2026-55637genieacs-mcp Streamable HTTP transport origin validation error8.8CNA v4.00.3%2026-08-25Fix
CVE-2026-55624MintyItanium Lost-Auction takes items like barrier blocks out from search GUI5.3CNA v4.00.4%2026-08-25
CVE-2026-55620eml_parser vulnerable to DoS via deeply nested parens in Received headers7.5CNA v3.10.6%2026-08-25Fix
CVE-2026-55619eml_parser has parser DoS via deeply nested parentheses in e-mail headers5.3CNA v3.10.5%2026-08-25Fix
CVE-2026-55618eml_parser has a URL extraction bypass via HTML entities in URLs6.5CNA v3.10.5%2026-08-25Fix
CVE-2026-55609Consciousness-explorer / sublinear-time-solver MCP export_state has an arbitrary file write7.1CNA v3.10.2%2026-08-25Fix
CVE-2026-55588ORAS CLI: Cyclic Referrer Graph can cause Unbounded Recursion and resource consumption6.5CNA v3.10.5%2026-08-25Fix
CVE-2026-55585QWED-AI qwed-verification QWED: Authenticated remote code execution via Unsafe SymPy `parse_expr`8.8CNA v3.10.8%2026-08-25Fix
CVE-2026-55582mcp-shell has a Secure Mode Allowlist Bypass via Git Shell Alias8.4CNA v3.10.3%2026-08-25Fix
CVE-2026-55581mcp-shell has a Secure Mode Allowlist Bypass via Default `/bin/bash` Executable8.4CNA v3.10.5%2026-08-25Fix
CVE-2026-55580mcp-shell shell_exec tool command injection8.6CNA v4.00.2%2026-08-25Fix
CVE-2026-55571djust LiveView WebSocket mount authentication bypass8.2CNA v3.10.5%2026-08-25Fix
CVE-2026-55557browse-mcp has an arbitrary file write via unconfined download and state paths8.6CNA v4.00.2%2026-08-25Fix
CVE-2026-55553urllib cross-origin redirect handling information disclosure7.5CNA v3.10.7%2026-08-25Fix
CVE-2026-55546QWED-MCP: Unsafe SymPy `parse_expr` remote code execution via Unsanitized Math Expression Input9.8CNA v3.10.7%2026-08-25Fix
CVE-2026-55541PraisonAI: `--api-key` flag on `PraisonAI serve` is not properly enforced8.8CNA v4.00.5%2026-08-25Fix
CVE-2026-55540PraisonAI: [path traversal] agent tools escape the configured workspace via symlinks7.1CNA v3.10.4%2026-08-25Fix
CVE-2026-55539PraisonAI Jobs API missing authentication8.6CNA v3.10.6%2026-08-25Fix
CVE-2026-55538PraisonAI agent invocation endpoints missing authentication7.3CNA v3.10.4%2026-08-25Fix
CVE-2026-55537PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url` bypass of7.1CNA v3.10.3%2026-08-25Fix
CVE-2026-55536MervinPraison PraisonAI browser Server WebSocket origin validation bypass via unanchored regex9.1CNA v3.10.5%2026-08-25Fix
CVE-2026-55535PraisonAI: Server-side request forgery via DNS rebinding bypass in webhook_url validation6.8CNA v3.10.3%2026-08-25Fix
CVE-2026-55534PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution8.6CNA v3.10.5%2026-08-25Fix
CVE-2026-55533PraisonAI Recipe server improper authentication8.2CNA v3.10.5%2026-08-25Fix
CVE-2026-55532PraisonAI MCP HTTP Stream transport cross-site request forgery7.6CNA v3.10.2%2026-08-25Fix
CVE-2026-55531PraisonAI MCP HTTP server resource exhaustion6.5CNA v3.10.5%2026-08-25Fix
CVE-2026-55530PraisonAI code rewrite tool missing authorization6.1CNA v3.10.2%2026-08-25Fix
CVE-2026-55529PraisonAI MCP HTTP Stream transport missing authentication6.9CNA v3.10.2%2026-08-25Fix
CVE-2026-55528PraisonAI AgentServer missing authentication8.2CNA v3.10.5%2026-08-25Fix
CVE-2026-55527PraisonAI: Arbitrary file write7.1CNA v3.10.5%2026-08-25Fix
CVE-2026-55526PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked`8.5CNA v3.10.4%2026-08-25Fix
CVE-2026-55525PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl7.5CNA v3.10.5%2026-08-25Fix
CVE-2026-55419Reachy Mini: Unrestricted upload of file with dangerous type5.3CNA v3.10.5%2026-08-25Fix
CVE-2026-55373OpenEXR: OpenEXRUtil SampleCountChannel endEdit can loop forever on UINT_MAX sample counts6.2CNA v3.10.2%2026-08-25Fix
CVE-2026-55371OpenEXR: OpenEXRCore exr_attr_set_bytes accepts null type_hint with positive hint_length6.9CNA v4.00.2%2026-08-25Fix
CVE-2026-55099icalendar has algorithmic complexity in Equality7.5CNA v3.10.6%2026-08-25Fix
CVE-2026-55059OpenEXR: OpenEXRUtil SampleCountChannel row setter heap has an out-of-bounds write6.1CNA v3.10.1%2026-08-25Fix
CVE-2026-54920OpenEXR: Integer overflow and uninitialized pointer cause invalid delete in OpenEXRUtil image resize0.0CNA v3.10.4%2026-08-25Fix
CVE-2026-54874OpenSSL Excessive Memory Use Buffering DTLS Records for a Future Epoch7.5CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-54757oscal-compass compliance-trestle Trestle has server-side template injection7.8CNA v3.10.4%2026-08-25Fix
CVE-2026-53965Model Context Protocol PHP SDK HTTP transport SSE buffer denial of service6.9CNA v4.00.6%2026-08-25Fix
CVE-2026-53561Apache Hive HiveServer2 SAML bearer-token validation improper authentication7.4CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-52776oscal-compass compliance-trestle trestle URLSecurityValidator SSRF allowlist bypass8.6CNA v4.00.4%2026-08-25Fix
CVE-2026-52491libtiff thumbnail tool integer overflow8.4CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-52489gpac buffer overflow7.8CISA ADP v3.10.2%2026-08-25
CVE-2026-51368Beijing Tongtech Co., Ltd tongweb deserialization of untrusted data9.8CISA ADP v3.10.9%2026-08-25
CVE-2026-49845Apache Hive: SQL injection vulnerability in HiveMetaStore partition-name direct-SQL paths9.8CISA ADP v3.10.9%2026-08-25Fix
CVE-2026-49050Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens8.8CISA ADP v3.10.6%2026-08-25Fix
CVE-2026-48433Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48432Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48431Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48430Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48429Substance3D Designer null pointer dereference5.5CNA v3.10.2%2026-08-25Fix
CVE-2026-48428Substance3D Designer heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48427Substance3D Designer out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48426Substance3D Designer out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48425Substance3D Sampler heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48424Substance3D Sampler heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48423Substance3D Sampler heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48422Substance3D Sampler heap-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48421Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48420Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48419Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48418Substance3D Sampler out-of-bounds write7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-48417Substance3D Sampler stack-based buffer overflow7.8CNA v3.10.3%2026-08-25Fix
CVE-2026-47626NVIDIA DGX Spark out-of-bounds write8.2CNA v3.10.2%2026-08-25Fix
CVE-2026-47624NVIDIA DGX Spark protection mechanism failure6.0CNA v3.10.2%2026-08-25Fix
CVE-2026-45019chainlit chainlist has SSRF7.2CNA v3.10.4%2026-08-25Fix
CVE-2026-45018Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution9.8CNA v3.11.1%2026-08-25Fix
CVE-2026-44476Doorkeeper OpenID Connect dynamic client registration improper authentication6.3CNA v4.00.6%2026-08-25Fix
CVE-2026-43670Apple Safari content security policy bypass8.8CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-43657Apple iOS and iPadOS improper privilege management3.3CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-41707Spring Security DPoPProofJwtDecoderFactory vulnerable to DPoP Proof Replay7.4CNA v3.10.4%2026-08-25Fix
CVE-2026-39113SQLite sqlar extension heap-based buffer overflow4.0CISA ADP v3.10.2%2026-08-25Exploit codeFix
CVE-2026-38474GazellePosterWall IP lock manager improper access control5.4CISA ADP v3.10.4%2026-08-25
CVE-2026-38473subtitle deletion flow in GazellePW stored cross-site scripting5.4CISA ADP v3.10.4%2026-08-25
CVE-2026-38472forum reward comments in GazellePW stored cross-site scripting6.1CISA ADP v3.10.4%2026-08-25
CVE-2026-38470API user endpoint in GazellePW missing authorization4.3CISA ADP v3.10.3%2026-08-25
CVE-2026-38469GazellePosterWall bonus title field stored cross-site scripting5.4CISA ADP v3.10.4%2026-08-25
CVE-2026-38468country-code lookup endpoint in GazellePW SQL injection4.3CISA ADP v3.10.4%2026-08-25
CVE-2026-38467tags manager in GazellePW SQL injection5.4CISA ADP v3.10.3%2026-08-25
CVE-2026-38466GazellePosterWall torrent remaster title field stored cross-site scripting5.4CISA ADP v3.10.4%2026-08-25
CVE-2026-38465GazellePosterWall donor avatar tooltip stored cross-site scripting5.4CISA ADP v3.10.4%2026-08-25
CVE-2026-34968Adminer arbitrary file deletion via SQLite Drop7.2CNA v4.00.5%2026-08-25Fix
CVE-2026-34967Adminer sql-log plugin arbitrary file write5.3CNA v4.00.3%2026-08-25Fix
CVE-2026-34964Adminer SSRF via PDO DSN injection6.9CNA v4.00.4%2026-08-25Fix
CVE-2026-34959Adminer open redirect via X-Forwarded-Prefix5.3CNA v4.00.3%2026-08-25Fix
CVE-2026-32637Velero vulnerable to file path traversal when extracting from backup's tarball5.9CNA v4.00.5%2026-08-25Fix
CVE-2026-26211Ekushey Project Manager CRM stored XSS via System Name field4.8CNA v4.00.4%2026-08-25Exploit code
CVE-2026-24263NVIDIA DGX Spark null pointer dereference8.2CNA v3.10.2%2026-08-25Fix
CVE-2026-24262NVIDIA DGX Spark out-of-bounds write8.2CNA v3.10.2%2026-08-25Fix
CVE-2026-24225NVIDIA DGX Spark out-of-bounds read6.0CNA v3.10.1%2026-08-25Fix
CVE-2026-24170NVIDIA Unified Fabric Manager Enterprise improper authentication8.8CNA v3.10.3%2026-08-25Fix
CVE-2026-24169NVIDIA Unified Fabric Manager Enterprise command injection8.0CNA v3.10.4%2026-08-25Fix
CVE-2026-24168NVIDIA Unified Fabric Manager Enterprise command injection6.8CNA v3.11.0%2026-08-25Fix
CVE-2026-24167NVIDIA Unified Fabric Manager Enterprise command injection6.8CNA v3.10.3%2026-08-25Fix
CVE-2026-24166NVIDIA Unified Fabric Manager Enterprise hard-coded cryptographic key5.1CNA v3.10.1%2026-08-25Fix
CVE-2026-21758HCL Hive information disclosure3.7CNA v3.10.2%2026-08-25
CVE-2026-21754HCL Software Hive sensitive data exposure5.4CNA v3.10.1%2026-08-25
CVE-2026-21753HCL Hive is affected by weak software supply chain governance, which could lead to the inclusion of vulnerable, unmaintained, or malicious third-party dependencies within the application environment.4.2CNA v3.10.1%2026-08-25
CVE-2026-19949All-in-One WP Migration and Backup WordPress plugin unauthenticated Second-order SQL injection8.8CNA v3.11.4%2026-08-25Reported exploitedExploit codeFix
CVE-2026-19943Gutenverse WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-08-25Fix
CVE-2026-19913Kaltura HTML5 Video Player ServiceUrl parameter handling vulnerability7.5CISA ADP v3.10.5%2026-08-25Fix
CVE-2026-19912Kaltura HTML5 Video Player mwEmbedLoader.php deserialization of untrusted data9.8CISA ADP v3.11.0%2026-08-25Exploit codeFix
CVE-2026-19892InfusedWoo Pro WordPress plugin privilege escalation8.8CNA v3.10.2%2026-08-25Fix
CVE-2026-19851Dassault Systèmes Tuleap Enterprise Edition use of default password7.7CNA v3.10.2%2026-08-25
CVE-2026-19801BetterLinks WordPress plugin missing authorization authenticated arbitrary Short URL creation4.3CNA v3.10.3%2026-08-25Fix
CVE-2026-18985Edit in-place field Moderately critical Access bypass SA-CONTRIB-2026-0938.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-18798OpenSSL QUIC Server may Trigger double free when Processing INITIAL Packet7.5CISA ADP v3.11.5%2026-08-25Fix
CVE-2026-18547Ultimate Member WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-25Fix
CVE-2026-18512TranslatePress WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-25Fix
CVE-2026-18445Integer overflow vulnerability resulting in an out-of-bounds write in NI LabVIEW6.9CNA v4.00.1%2026-08-25Fix
CVE-2026-18444Integer Conversion vulnerability resulting in an out-of-bounds read in NI LabVIEW6.9CNA v4.00.1%2026-08-25Fix
CVE-2026-18328Forminator Forms WordPress plugin unauthenticated DOM-based cross-site scripting7.2CNA v3.10.3%2026-08-25Fix
CVE-2026-18323Forminator Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-08-25Fix
CVE-2026-18261Powerful Surveys Critical Unsupported SA-CONTRIB-2026-0925.7CISA ADP v3.10.2%2026-08-25
CVE-2026-18260Drupal Disable Login Page missing brute-force protection5.7CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-18259Token Content Access Moderately critical Access bypass SA-CONTRIB-2026-0907.5CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-18100MetForm WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-25Fix
CVE-2026-17587My Agile Privacy® WordPress plugin authorization bypass5.3CNA v3.10.3%2026-08-25Fix
CVE-2026-17548Checkmk missing authorization for viewing background jobs5.3CNA v4.00.2%2026-08-25Fix
CVE-2026-17089Events Manager WordPress plugin reflected cross-site scripting via header_format parameter6.1CNA v3.10.4%2026-08-25Fix
CVE-2026-16646PanKM Critical Unsupported SA-CONTRIB-2026-0835.7CISA ADP v3.10.2%2026-08-25
CVE-2026-16645Drupal PhotoSwipe missing authorization9.1CISA ADP v3.10.2%2026-08-25Fix
CVE-2026-16644Webform REST Moderately critical Access bypass SA-CONTRIB-2026-0879.1CISA ADP v3.10.3%2026-08-25Fix
CVE-2026-16643Lunr exposed filters Critical Unsupported SA-CONTRIB-2026-0865.7CISA ADP v3.10.2%2026-08-25
CVE-2026-16642Email Login OTP Critical Unsupported SA-CONTRIB-2026-0855.7CISA ADP v3.10.2%2026-08-25
CVE-2026-16641Commerce Elavon Critical Unsupported SA-CONTRIB-2026-0849.8CISA ADP v3.10.3%2026-08-25
CVE-2026-16640Search API Autocomplete Moderately critical cross-site scripting SA-CONTRIB-2026-0826.1CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-16639Internationalization Single Sign-On Critical Access bypass SA-CONTRIB-2026-0819.8CISA ADP v3.10.4%2026-08-25Fix
CVE-2026-16638Media Folders Moderately critical cross-site scripting SA-CONTRIB-2026-0806.1CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-16601CM Map Locations WordPress plugin arbitrary file upload8.8CNA v3.10.6%2026-08-25Fix
CVE-2026-16599Denial of service in GNU Wget5.1CNA v4.00.4%2026-08-25Fix
CVE-2026-16434Adminer X-Forwarded-Prefix Backslash Bypass2.3CNA v4.00.4%2026-08-25Fix
CVE-2026-16286File upload in TRTEK Software's Software Repository Management9.8CNA v3.10.3%2026-08-25Fix
CVE-2026-16234Out-of-bounds read vulnerability in NI LabVIEW when loading VI8.5CNA v4.00.1%2026-08-25Fix
CVE-2026-16233Out-of-bounds write vulnerability in NI LabVIEW when loading VI8.5CNA v4.00.1%2026-08-25Fix
CVE-2026-16231hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass8.1CNA v3.10.2%2026-08-25Fix
CVE-2026-15917Drupal core Moderately critical cross-site scripting SA-CORE-2026-0114.7CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-15916Drupal core Moderately critical information disclosure SA-CORE-2026-0104.2CISA ADP v3.10.1%2026-08-25Fix
CVE-2026-15310Python CPython zipfile module resource exhaustion2.1CNA v4.00.5%2026-08-25Fix
CVE-2026-15088Development Environment Critical Unsupported SA-CONTRIB-2026-0895.7CISA ADP v3.10.2%2026-08-25
CVE-2026-15023Events Manager WordPress plugin SQL injection6.5CNA v3.10.5%2026-08-25Fix
CVE-2026-14457OpenSSL RPK Server Signature Algorithm Selection can Dereference a Missing Certificate7.5CISA ADP v3.11.0%2026-08-25Fix
CVE-2026-14280Events Manager WordPress plugin local file inclusion6.6CNA v3.11.0%2026-08-25Fix
CVE-2026-13478Out-of-bounds read in Zephyr ext2 block-bitmap validation from a crafted s_blocks_count5.5CNA v3.10.1%2026-08-25Fix
CVE-2026-13217Null-pointer dereference in Zephyr OCPP CALLRESULT parsing via unchecked strtok_r/atoi5.9CNA v3.10.5%2026-08-25Fix
CVE-2026-13216Zephyr virtio PCI driver capability parsing out-of-bounds write6.1CNA v3.10.2%2026-08-25Fix
CVE-2026-13215Zephyr ext2 filesystem mount out-of-bounds write6.8CNA v3.10.2%2026-08-25Fix
CVE-2026-13214zephyrproject zephyr stack buffer overflow in OCPP GetConfiguration key parsing9.8CNA v3.10.5%2026-08-25Fix
CVE-2026-12878Octopus Deploy Codefresh improper privilege management8.6CNA v4.00.3%2026-08-25Fix
CVE-2026-12600Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder8.7CNA v4.00.3%2026-08-25Fix
CVE-2026-12561tagDiv Composer WordPress plugin authenticated (Contributor+) stored cross-site scripting6.4CNA v3.10.2%2026-08-25Fix
CVE-2026-10630WP Courses LMS WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-08-25Fix
CVE-2026-10627Events Manager WordPress plugin authorization bypass5.3CNA v3.10.5%2026-08-25Fix
CVE-2026-78555RansomLook API key disclosure through /admin/apikeys HTML Source9.4CNA v4.00.4%2026-08-24
CVE-2026-78553Insecure Flask Secret-Key File Permissions allow Local Administrator Session Forgery in RansomLook7.0CNA v4.00.2%2026-08-24
CVE-2026-78551RansomLook login endpoint information disclosure8.8CNA v4.00.6%2026-08-24
CVE-2026-78541Command injection in Parent Control of TP-Link Archer BE3600 v18.5CNA v4.02.3%2026-08-24Fix
CVE-2026-78475Gimp: Unbounded stack vla and 21-byte stack over-read in pix (esm) loader6.1CNA v3.10.3%2026-08-24Fix
CVE-2026-78465Gimp: Integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit7.0CNA v3.10.3%2026-08-24Fix
CVE-2026-78435Faveo Helpdesk Logo SettingsController.php unlink path traversal5.1CNA v4.00.5%2026-08-24
CVE-2026-78434Faveo Helpdesk ticket reply endpoint missing authentication6.9CNA v4.00.7%2026-08-24
CVE-2026-78430sworddut mcp-ffmpeg-helper tool handlers.ts handleToolCall os command injection4.8CNA v4.01.1%2026-08-24
CVE-2026-78417Devolutions Remote Desktop Manager IronVNC client insufficient verification of data authenticity4.3CISA ADP v3.10.2%2026-08-24Fix
CVE-2026-78416craftcms cms authenticated RCE via `condition.config` JSON cleanse bypass8.7CNA v4.01.0%2026-08-24Fix
CVE-2026-78414Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration8.0CNA v3.10.3%2026-08-24Fix
CVE-2026-78391Stored cross-site scripting via Untrusted Cryptocurrency Address Rendering in RansomLook8.8CNA v4.00.4%2026-08-24
CVE-2026-78387RansomLook configuration editor missing authorization9.4CNA v4.00.6%2026-08-24
CVE-2026-78386Unauthenticated Disclosure of Scraping Credentials and Bypass Configuration via RansomLook API8.7CNA v4.00.8%2026-08-24
CVE-2026-78385RansomLook analysis PDF generation server-side request forgery8.2CNA v4.00.4%2026-08-24
CVE-2026-78381RansomLook arbitrary file read via path traversal in Post screen field8.2CNA v4.00.6%2026-08-24
CVE-2026-78380Private Group and Market Posts Disclosed through Public Notification Channels in RansomLook8.7CNA v4.00.5%2026-08-24
CVE-2026-78378Redis Glob Pattern injection allows Unauthorized Enumeration of Private Ransomlook Data6.9CNA v4.00.4%2026-08-24
CVE-2026-78376WebKitGTK JSCValue function parameters use-after-free8.8CNA v3.10.3%2026-08-24Fix
CVE-2026-78372RansomLook missing authorization allows Disclosure of Private Group and Ransom Note Data9.2CNA v4.00.7%2026-08-24
CVE-2026-78370RansomLook Unauthenticated Database Export exposes Private Data9.2CNA v4.00.7%2026-08-24
CVE-2026-78369Missing authentication allows Unauthorized Creation of Crypto Groups in RansomLook8.8CNA v4.00.7%2026-08-24
CVE-2026-78367Red Hat Hardened Images rpm: Rpmbuild gettarspec crafted tar member name → macro injection7.0CNA v3.10.2%2026-08-24Fix
CVE-2026-78365Roskus Prospero Flow CRM supplier API insecure direct object reference9.3CNA v4.00.5%2026-08-24Fix
CVE-2026-78337Roskus Prospero Flow CRM company logo unrestricted file upload4.8CNA v4.00.4%2026-08-24Fix
CVE-2026-78329Apache Camel improper input validation9.8CISA ADP v3.10.7%2026-08-24Exploit codeFix
CVE-2026-78323Red Hat Certificate System 10 improper certificate validation6.5CNA v3.10.2%2026-08-24
CVE-2026-78321DJI Drone HTTP Media Server denial of service via Connection Pool Exhaustion6.0CNA v4.00.2%2026-08-24
CVE-2026-78317DIAEnergie SQL injection8.8CNA v3.10.7%2026-08-24
CVE-2026-78316DIAEnergie SQL injection8.8CNA v3.10.7%2026-08-24
CVE-2026-78315DIAEnergie SQL injection8.8CNA v3.10.7%2026-08-24
CVE-2026-78314DIAEnergie SQL injection8.8CNA v3.10.7%2026-08-24
CVE-2026-78306DJI Drone Bluetooth Interface Unauthenticated DUML command execution8.5CNA v4.00.2%2026-08-24Exploit code
CVE-2026-78291RepairBuddy WordPress plugin broken access control5.3CNA v3.10.3%2026-08-24Fix
CVE-2026-78290Magazine Blocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-24Fix
CVE-2026-78284MasterStudy LMS WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-08-24Fix
CVE-2026-78282Stripe Payments WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-78280Hash Form WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-08-24Fix
CVE-2026-78279Fluent Support Pro WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-08-24Fix
CVE-2026-78278Fluent Boards Pro WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-08-24Fix
CVE-2026-78277FluentCRM Pro WordPress plugin server side request forgery (SSRF)4.9CNA v3.10.2%2026-08-24Fix
CVE-2026-78272Fluent Support Pro WordPress plugin broken access control5.4CNA v3.10.2%2026-08-24Fix
CVE-2026-78270FluentCRM Pro WordPress plugin SQL injection7.6CNA v3.10.4%2026-08-24Fix
CVE-2026-78269Shared Files WordPress plugin server side request forgery (SSRF)6.4CNA v3.10.2%2026-08-24Fix
CVE-2026-78268Lead Generation Contact Widget and AI Chatbot: Chat Button WordPress plugin information disclosure7.5CNA v3.10.4%2026-08-24Fix
CVE-2026-78267TranslatePress WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-24Fix
CVE-2026-78266AutomatorWP WordPress plugin broken access control6.5CNA v3.10.3%2026-08-24Fix
CVE-2026-78265The Events Calendar WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-24Fix
CVE-2026-78264Toolset Blocks WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-78263Event Tickets WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-78262WP Project Manager WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-24Fix
CVE-2026-78259WPLegalPages WordPress plugin broken authentication7.3CNA v3.10.4%2026-08-24Fix
CVE-2026-78258Booking and Rental Manager WordPress plugin broken access control5.3CNA v3.10.3%2026-08-24Fix
CVE-2026-78255DJI Drone HTTP Media Server allows unauthenticated access to Stored Media8.7CNA v4.00.4%2026-08-24
CVE-2026-78251DJI Drone FTP service allows Unrestricted Storage Consumption of the /blackbox Directory9.3CNA v4.00.4%2026-08-24
CVE-2026-78250bytebot-ai bytebot Agent Execution Workflow infinite loop5.3CNA v4.00.6%2026-08-24
CVE-2026-78248SourceCodester Simple Online Food Ordering System ajax.php save_settings SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78247SourceCodester Simple Online Food Ordering System ajax.php confirm_order SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78246itsourcecode Online Clinic Management System Admin Login login.php SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78245itsourcecode Online Pharmacy System user registration unrestricted file upload6.9CNA v4.00.5%2026-08-24
CVE-2026-78244itsourcecode Real Estate Management System search.php SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78213Hepta Platforms｜Heptabase stored cross-site scripting6.2CNA v4.00.4%2026-08-24Fix
CVE-2026-782124MOSAn Security Technology｜4MOSAn Management Center arbitrary file read8.7CNA v4.00.7%2026-08-24Fix
CVE-2026-782114MOSAn Security Technology｜4MOSAn GCB Doctor OS command injection9.3CNA v4.02.0%2026-08-24Fix
CVE-2026-78209exceljs CSV formula injection via Unescaped Cell Values8.4CNA v4.00.4%2026-08-24
CVE-2026-78208exceljs path traversal via Unvalidated addImage filename8.7CNA v4.00.5%2026-08-24
CVE-2026-78207exceljs prototype pollution via deepMerge Reached from Note Serialization9.3CNA v4.00.6%2026-08-24
CVE-2026-78206exceljs uncontrolled resource consumption via Unbounded xlsx Decompression8.7CNA v4.00.6%2026-08-24
CVE-2026-78205BentoML server-side request forgery via Unfiltered RFC 6598 Shared Address Space6.9CNA v4.00.4%2026-08-24
CVE-2026-78204Ghostwriter missing authorization on Report Template Lint endpoints5.3CNA v4.00.3%2026-08-24
CVE-2026-78203Ghostwriter Cross-Client Report Template Disclosure via Unauthorized Template Swap7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-78202itsourcecode Payroll System admin_class.php save_settings unrestricted upload6.9CNA v4.00.5%2026-08-24
CVE-2026-78201itsourcecode Payroll System admin_class.php login SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78200itsourcecode Library Management System editbooks.php SQL injection5.3CNA v4.00.3%2026-08-24
CVE-2026-78199SourceCodester Simple Online Food Ordering System view_prod.php SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78198SourceCodester Simple Online Food Ordering System ajax.php add_to_cart SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78197SourceCodester Simple Online Food Ordering System ajax.php save_user SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78196achorein expo-share-intent Android file copy routine path traversal4.8CNA v4.00.2%2026-08-24Fix
CVE-2026-78187Piwigo Public Authentication cross-site scripting2.3CNA v4.00.7%2026-08-24Fix
CVE-2026-78186Open5GS HSS hss-cx-path.c assertion5.3CNA v4.00.5%2026-08-24
CVE-2026-78185itsourcecode Sales and Inventory System cust_edit.php SQL injection5.3CNA v4.00.3%2026-08-24
CVE-2026-78182Shenzhen Gongji Technology XBROTHER Dynamic Environment Monitoring System SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78181ractivejs ractive Keypath Ractive#set prototype pollution6.9CNA v4.00.6%2026-08-24
CVE-2026-78180alibaba-fusion next deepMerge index.tsx ConfigProvider.getContextProps prototype pollution6.9CNA v4.00.5%2026-08-24
CVE-2026-78179rexrainbow phaser3-rex-notes BehaviorTree Blackboard Data SetValue.js SetValue prototype pollution5.3CNA v4.00.4%2026-08-24
CVE-2026-78178jQWidgets jqx-all.js jqxBaseFramework.extend prototype pollution6.9CNA v4.00.6%2026-08-24
CVE-2026-78177TanStack devtools-vite package installer OS command injection2.0CNA v4.00.9%2026-08-24
CVE-2026-78171itsourcecode Sales and Inventory System processlogin.php SQL injection6.9CNA v4.00.4%2026-08-24
CVE-2026-78170UTT HiPER 1200GW formConfigFastDirectionW strcpy buffer overflow8.7CNA v4.00.8%2026-08-24
CVE-2026-78169UTT HiPER 1250GW HTTP request aspRemoteApConfTempSend strcpy stack-based overflow9.4CNA v4.00.8%2026-08-24
CVE-2026-78168EFM ipTIME T24000M Session Validation httpcon_check_session_url improper authentication9.3CNA v4.01.3%2026-08-24
CVE-2026-78167EFM ipTIME T16000M Session Validation httpcon_check_session_url improper authentication10.0CNA v4.01.5%2026-08-24
CVE-2026-78166provectus kafka-ui Groovy Code MessagesController.java executeSmartFilterTest code injection5.3CNA v4.00.4%2026-08-24
CVE-2026-78161warmcat libwebsockets LECP CBOR Recording lecp.c report_raw_cbor out-of-bounds write6.9CNA v4.00.4%2026-08-24Fix
CVE-2026-78160Dolibarr ERP User Notes note.php authorization5.3CNA v4.00.4%2026-08-24Fix
CVE-2026-78158Open5GS AMF UEContextReleaseRequest path improper authorization5.3CNA v4.00.4%2026-08-24
CVE-2026-78157Open5GS Rx AA-Request pcrf-rx-path.c pcrf_rx_aar_cb out-of-bounds5.3CNA v4.00.3%2026-08-24
CVE-2026-77995miniOrange Single Sign-On extensions login cookie handling vulnerability10.0CNA v4.00.4%2026-08-24
CVE-2026-77994Joomla extension joomlack.fr Second order SQL injection in Page Builder CK9.3CNA v4.00.4%2026-08-24
CVE-2026-77993Joomla extension joomlack.fr reflected XSS in Page Builder CK5.3CNA v4.00.4%2026-08-24
CVE-2026-77923Dolibarr authorization bypass via clonetasks Mass action5.3CNA v4.00.4%2026-08-24Fix
CVE-2026-77915rConfig Core Unauthorized Admin Registration via web.php9.3CNA v4.00.8%2026-08-24Fix
CVE-2026-77914rConfig Core Core path traversal via Export Download endpoint7.1CNA v4.00.7%2026-08-24Fix
CVE-2026-77635CakePHP: FunctionsBuilder::jsonValue vulerable to SQL injection with PostgresDriver9.2CNA v4.00.5%2026-08-24Exploit codeFix
CVE-2026-77634CakePHP: SmtpTransport vulnerable to CRLF header injection8.2CNA v4.00.5%2026-08-24Fix
CVE-2026-77567Filament: App-based MFA can be bypassed when recovery codes are enabled8.1CNA v3.10.6%2026-08-24Fix
CVE-2026-77384libp2p circuit relay reservation refresh resource exhaustion7.5CNA v3.10.6%2026-08-24Fix
CVE-2026-77337CakePHP: Potential authentication bypass with CookieAuthenticator9.1CNA v4.00.7%2026-08-24Fix
CVE-2026-77310Jackson-databind: Eager DNS resolution still present in InetAddress deserialization5.3CNA v3.10.3%2026-08-24Fix
CVE-2026-76847act missing authorization in the Artifacts V4 Backend8.7CNA v4.00.4%2026-08-24
CVE-2026-76845adm-zip arbitrary file overwrite via symlink following on Extraction6.8CNA v4.00.2%2026-08-24
CVE-2026-76844zlib heap buffer overflow via Stale gzwrite Pointer after Failed Write8.3CNA v4.00.6%2026-08-24Fix
CVE-2026-76843Flair and deserialization of untrusted data via ClusteringModel.load8.4CNA v4.00.4%2026-08-24
CVE-2026-76842Mercado Pago Node.js SDK path injection via Unencoded Identifiers in Payment Clients8.8CNA v4.00.5%2026-08-24
CVE-2026-76841xorbitsai inference xinference remote code execution8.7CNA v4.01.0%2026-08-24Fix
CVE-2026-76840RustDesk heap buffer overflow via Unvalidated CLIPRDR FileContentsResponse Length8.5CNA v4.00.4%2026-08-24
CVE-2026-76838Hi.Events server-side request forgery via Unvalidated Webhook Redirects8.4CNA v4.00.4%2026-08-24Fix
CVE-2026-76837Baserow stored cross-site scripting via Rich Text Mention Display Name5.3CNA v4.00.3%2026-08-24Fix
CVE-2026-76836AzuraCast Liquidsoap Configuration Write via Profile Edit Serialization Group Bypass8.7CNA v4.00.4%2026-08-24
CVE-2026-76835oauth2-proxy OAuth2 Proxy authentication bypass9.3CNA v4.00.5%2026-08-24Fix
CVE-2026-76816Netty: MQTT Topic Name and Client ID Validation Bypass3.5CNA v3.10.2%2026-08-24Fix
CVE-2026-76172fast-uri vulnerable to host confusion via percent-encoded scheme normalization7.5CNA v3.10.2%2026-08-24Fix
CVE-2026-76098Mistune has denial of service RecursionError via Excessive Emphasis Markers in Markdown7.5CNA v3.10.5%2026-08-24Fix
CVE-2026-76073HumanSignal Label Studio annotation API insecure direct object reference8.7CNA v4.00.5%2026-08-24
CVE-2026-76072Continue CLI Incomplete Destructive Command Denylist in Headless and Auto Mode8.3CNA v4.00.4%2026-08-24
CVE-2026-76071Netis NC63 stack buffer overflow via destHost parameter9.3CNA v4.01.4%2026-08-24Exploit code
CVE-2026-76070Netis NC63 stack buffer overflow via Login Password parameter9.3CNA v4.01.3%2026-08-24Exploit code
CVE-2026-76055blackduck-c-cpp improper neutralization7.5CNA v4.00.2%2026-08-24Fix
CVE-2026-76054blackduck-c-cpp API token environment variable information disclosure7.1CNA v4.00.2%2026-08-24Fix
CVE-2026-75975fast-uri vulnerable to server-side request forgery via malformed IPv6 normalization7.5CNA v3.10.2%2026-08-24Fix
CVE-2026-75931fast-uri vulnerable to host confusion via skipped IDN canonicalization on scheme-relative references7.5CNA v3.10.4%2026-08-24Fix
CVE-2026-75899fast-uri vulnerable to server-side request forgery via repeated hostname percent-decoding7.5CNA v3.10.2%2026-08-24Fix
CVE-2026-75554hexpm explicit organization scopes survive token refresh after membership ends2.3CNA v4.00.4%2026-08-24Fix
CVE-2026-75542hexpm OAuth token exchange grants repository scopes for organizations the principal cannot access8.3CNA v4.00.5%2026-08-24Fix
CVE-2026-75509joserfc claim-validation bypass via array-typed single-string claims (iss/sub/jti)6.5CNA v3.10.1%2026-08-24Fix
CVE-2026-75464OneNav import_link function arbitrary file deletion8.1CISA ADP v3.10.5%2026-08-24
CVE-2026-75371SpaceDot AcubeSAT OBC software cobs_decode function denial of service7.5CISA ADP v3.10.5%2026-08-24
CVE-2026-75370SpaceDot AcubeSAT OBC software MessageParser::parseECSSTCHeader out-of-bounds read6.5CISA ADP v3.10.4%2026-08-24
CVE-2026-75369SpaceDot AcubeSAT OBC software CAN application message parser out-of-bounds read7.1CISA ADP v3.10.3%2026-08-24
CVE-2026-75368SpaceDot AcubeSAT OBC software loadRawData function stack-based buffer overflow7.5CISA ADP v3.10.5%2026-08-24
CVE-2026-75099Apache Allura: Unauthenticated REST disclosure5.3CISA ADP v3.10.6%2026-08-24Fix
CVE-2026-72714Rocq Prover Universe Checking State Desynchronised after Module Close6.8CNA v4.00.2%2026-08-24
CVE-2026-72711leanprover lean4 Lean 4 Kernel Accepts Opaque Declaration with an Unbound Free variable6.8CNA v4.00.2%2026-08-24Fix
CVE-2026-72705Rocq Prover Guard Checker Accepts Fixpoint Passed as a Higher-Order argument6.8CNA v4.00.2%2026-08-24Fix
CVE-2026-72704Rocq Prover Guard Checker Trusts Corrupted Recursive Tree after Transport6.8CNA v4.00.2%2026-08-24
CVE-2026-72703Rocq Prover Guard Checker Accepts Non-Terminating Fixpoint via Unchecked Cross-Calls6.8CNA v4.00.2%2026-08-24Fix
CVE-2026-71943DrayTek VigorSwitch multiple Models OS command injection via setDevNet8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71942DrayTek VigorSwitch multiple Models buffer overflow via mail_mailalert8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71941DrayTek VigorSwitch multiple Models buffer overflow via diag_logmail8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71940DrayTek VigorSwitch multiple Models buffer overflow via acl_general_setup Edit ACE8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71939DrayTek VigorSwitch multiple Models buffer overflow via acl_general_setup Add ACE8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71938DrayTek VigorSwitch multiple Models buffer overflow via switch_lan_gvrp8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71937DrayTek VigorSwitch multiple Models buffer overflow via poe_schedule_profile8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71936DrayTek VigorSwitch multiple Models buffer overflow via sysreboot8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71935DrayTek VigorSwitch multiple Models buffer overflow via webBackupAction8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71934DrayTek VigorSwitch multiple Models buffer overflow via pingtrace8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71933DrayTek VigorSwitch multiple Models missing authorization in Syslog functions8.8CNA v4.00.6%2026-08-24Fix
CVE-2026-71932DrayTek VigorSwitch multiple Models path traversal via getSyslogFile6.9CNA v4.01.0%2026-08-24Fix
CVE-2026-71931DrayTek VigorSwitch multiple Models OS command injection via tftp_upgrade8.6CNA v4.01.8%2026-08-24Fix
CVE-2026-71930DrayTek VigorSwitch multiple Models OS command injection via setTime8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71929DrayTek VigorSwitch multiple Models OS command injection via setDevProto8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71928DrayTek VigorSwitch multiple Models OS command injection via fdftDevice8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71927DrayTek VigorSwitch multiple Models OS command injection via rebDevice8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71926DrayTek VigorSwitch multiple Models OS command injection via setDevice8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71925DrayTek VigorSwitch multiple Models OS command injection via getDetail8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71924DrayTek VigorSwitch multiple Models OS command injection via getVid8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71923DrayTek VigorSwitch multiple Models OS command injection via auth_set8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71922DrayTek VigorSwitch multiple Models Pre-authentication null pointer dereference via setget.cgi8.7CNA v4.00.7%2026-08-24Fix
CVE-2026-71921DrayTek VigorSwitch multiple Models Pre-authentication OS command injection via setget.cgi9.3CNA v4.02.8%2026-08-24Fix
CVE-2026-71920DrayTek VigorSwitch Multiple Models null pointer dereference via formlogout6.9CNA v4.00.6%2026-08-24Fix
CVE-2026-71919DrayTek VigorSwitch multiple Models OS command injection via sysreboot8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71918DrayTek VigorSwitch multiple Models OS command injection via webBackupAction8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71917DrayTek VigorSwitch multiple Models OS command injection via pingtrace8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71916DrayTek VigorSwitch multiple Models OS command injection via commandTable8.6CNA v4.01.8%2026-08-24Fix
CVE-2026-71915DrayTek VigorSwitch multiple Models OS command injection via jsonstatus8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71914DrayTek VigorAP multiple Models Pre-authentication OS command injection via dray_apm9.3CNA v4.02.6%2026-08-24Fix
CVE-2026-71913DrayTek VigorAP multiple Models OS command injection via upload_settings.cgi8.6CNA v4.01.8%2026-08-24Fix
CVE-2026-71912DrayTek VigorAP multiple Models buffer overflow via apautotest8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71911DrayTek VigorAP multiple Models buffer overflow via setLan8.6CNA v4.00.7%2026-08-24Fix
CVE-2026-71910DrayTek VigorAP multiple Models OS command injection via apautotest8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71909DrayTek VigorAP multiple Models OS command injection via InquierTime8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71908DrayTek VigorAP multiple Models OS command injection via mesh_start_speed_test8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71907DrayTek VigorAP multiple Models OS command injection via setcamset8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71906DrayTek VigorAP multiple Models OS command injection via setLan8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71905DrayTek VigorAP multiple Models OS command injection via ExportSettings8.6CNA v4.02.3%2026-08-24Fix
CVE-2026-71904DrayTek VigorAP multiple Models OS command injection via tr069TestInform8.6CNA v4.01.8%2026-08-24Fix
CVE-2026-71832Aria2 BitTorrent helper divide by zero6.2CISA ADP v3.10.2%2026-08-24
CVE-2026-71511Dolibarr Members REST API sensitive data exposure via Member endpoints7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71510Dolibarr Users REST API SQL injection via filter parameter7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71509Dolibarr Expense Report REST API improper authorization via Update endpoint7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71508Dolibarr REST API improper authorization via User Update endpoint7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71507Dolibarr REST API Broken Object-Level Authorization via Bank Account Routes7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71506Dolibarr Payments REST API improper authorization via Delete endpoint7.2CNA v4.00.5%2026-08-24Fix
CVE-2026-71505Dolibarr REST API Broken Object-Level Authorization via Third-Party Write route7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71504Dolibarr Members REST API improper authorization via Password Reset8.6CNA v4.00.5%2026-08-24Fix
CVE-2026-71503Dolibarr reflected XSS via Extra Fields Administration template5.1CNA v4.00.4%2026-08-24Fix
CVE-2026-71366Red Hat Ansible Automation Platform awx: Notification backends allow SSRF and credential leakage7.7CNA v3.10.6%2026-08-24Fix
CVE-2026-71364Red Hat Ansible Automation Platform AWX project archive extraction path traversal7.2CNA v3.11.7%2026-08-24Fix
CVE-2026-71300Apache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection9.8CISA ADP v3.10.7%2026-08-24Exploit codeFix
CVE-2026-68516OpenEXR: HTJ2K SIZ image-offset gap stack buffer overflow6.5CNA v3.10.5%2026-08-24Fix
CVE-2026-67602phpIPAM authentication bypass via REST API Object Cache9.3CNA v4.00.6%2026-08-24Fix
CVE-2026-67204BookStack broken access control via Image Gallery API5.3CNA v4.00.4%2026-08-24Fix
CVE-2026-66908Apache Camel improper authentication7.5CISA ADP v3.10.6%2026-08-24Exploit codeFix
CVE-2026-66907Apache Camel relative path traversal7.5CISA ADP v3.10.8%2026-08-24Exploit codeFix
CVE-2026-66906Apache Camel relative path traversal9.1CISA ADP v3.10.8%2026-08-24Exploit codeFix
CVE-2026-66897Canonical LXD instance template path traversal allows arbitrary host file write as root9.9CNA v3.10.7%2026-08-24Fix
CVE-2026-66671Verdure Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-24
CVE-2026-66670Måne WordPress theme local file inclusion8.1CNA v3.10.5%2026-08-24
CVE-2026-66650FreightCo WordPress theme PHP object injection9.8CNA v3.10.6%2026-08-24
CVE-2026-66648Jawn WordPress theme privilege escalation9.8CNA v3.10.5%2026-08-24
CVE-2026-66623Social Media and Share Icons WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-66610Urna WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-66599WPComplete WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-66587WP Cafe Pro WordPress plugin local file inclusion9.8CNA v3.10.5%2026-08-24Fix
CVE-2026-66585WP Cafe Pro WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-24Fix
CVE-2026-6658412 Step Meeting List WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-65053Horde IMP stored cross-site scripting via AppleDouble Viewer Part Name5.1CNA v4.00.4%2026-08-24Fix
CVE-2026-63693Dell Alienware Area 51m R2 insecure temporary file6.6CNA v3.10.1%2026-08-24Fix
CVE-2026-63621Apache Camel Knative header filtering vulnerability5.3CISA ADP v3.10.6%2026-08-24Exploit codeFix
CVE-2026-61419Dell ThinOS 10 improper access control7.8CNA v3.10.1%2026-08-24Fix
CVE-2026-60093Apache Camel relative path traversal5.5CISA ADP v3.10.2%2026-08-24Exploit codeFix
CVE-2026-59568Zscaler Client Connector remote code execution9.1CNA v3.10.7%2026-08-24Fix
CVE-2026-59567Zscaler Client Connector local privilege escalation8.8CNA v3.10.1%2026-08-24Fix
CVE-2026-59566Zscaler Client Connector local denial of service8.4CNA v3.10.2%2026-08-24Fix
CVE-2026-59565Zscaler Client Connector local and kernel denial of service8.8CNA v3.10.5%2026-08-24Fix
CVE-2026-59564Authentication bypass between ZCC and Client Connector portal9.1CNA v3.10.5%2026-08-24Fix
CVE-2026-59561Sakura Editor Development Community Sakura Editor OS command injection8.4CNA v4.01.1%2026-08-24Fix
CVE-2026-59295Micrometer instrumentation of Apache HttpAsyncClient DoS5.9CNA v3.10.4%2026-08-24Fix
CVE-2026-59230Apache Camel improper input validation6.5CISA ADP v3.10.7%2026-08-24Exploit codeFix
CVE-2026-56136Tuxera NTFS-3G out-of-bounds read4.7CISA ADP v3.10.1%2026-08-24Fix
CVE-2026-56135Tuxera NTFS-3G heap-based buffer overflow7.4CISA ADP v3.10.1%2026-08-24Fix
CVE-2026-55468Wagtail: Improper restriction handling on pages admin API4.3CNA v3.10.3%2026-08-24Fix
CVE-2026-53532OpenEXR: Unhandled assert abort in HTJ2K decoder via crafted QCD marker (DoS)7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-52492libtiff rgb2ycbcr utility's cvtRaster function An integer overflow7.8CISA ADP v3.10.2%2026-08-24Fix
CVE-2026-52490libtiff tiffcrop command-option parser code injection9.8CISA ADP v3.10.5%2026-08-24Fix
CVE-2026-45404OpenTelemetry-Go: Unsynchronized baggage map can panic under concurrent access5.9CNA v4.00.1%2026-08-24Fix
CVE-2026-40877Combodo iTop: PHP object injection leading to remote code execution on user preferences8.7CNA v3.10.5%2026-08-24Fix
CVE-2026-39975Combodo iTop: Remote code execution using external auth variable value9.4CNA v4.00.6%2026-08-24Fix
CVE-2026-39915TIM Flow CRLF injection via rt parameter8.5CNA v4.00.5%2026-08-24Fix
CVE-2026-39914TIM Flow Unauthorized SQL Query Execution via Dashboard Export endpoint7.1CNA v4.00.4%2026-08-24Fix
CVE-2026-34491Johnson Controls Metasys 14 cross-site scripting6.1CNA v4.00.4%2026-08-24Fix
CVE-2026-32563ACPT (Pro) - Custom Post Types Plugin for WordPress PHP object injection9.8CNA v3.10.6%2026-08-24
CVE-2026-32561Booking Hub WordPress plugin privilege escalation8.8CNA v3.10.4%2026-08-24
CVE-2026-32560MagicAI for WordPress - AI Text, Image, Chat, Code, and Voice Generator plugin local file inclusion8.8CNA v3.10.5%2026-08-24
CVE-2026-32559Ultimate AI WordPress plugin arbitrary file upload9.9CNA v3.10.5%2026-08-24
CVE-2026-32558Affiliate Pro - Affiliate Program for WooCommerce and WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-24Reported exploited
CVE-2026-32556Boost WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24
CVE-2026-32555Boost WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-24
CVE-2026-32554WooBeWoo Product Filter Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-24
CVE-2026-32551Woo Essential WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-24Fix
CVE-2026-32478WP Project Manager Pro WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-24
CVE-2026-32477ShopBuilder Pro Elementor WooCommerce Builder Addons WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-08-24
CVE-2026-32476Brave Conversion Engine (PRO) WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-32471ProLancer Element WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-24
CVE-2026-30864Combodo iTop: Reflected XSS in dashboard revert8.9CNA v3.10.4%2026-08-24Fix
CVE-2026-30512Restricted Access local privilege escalation7.8CISA ADP v3.10.2%2026-08-24
CVE-2026-28190ProLancer Element WordPress plugin broken access control7.1CNA v3.10.3%2026-08-24
CVE-2026-28171WooCommerce File Approval WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-08-24
CVE-2026-28167Super Forms WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-08-24Fix
CVE-2026-28166Tourmaster WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24
CVE-2026-28165Digits WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-24Reported exploited
CVE-2026-28162Events Made Easy WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-24Fix
CVE-2026-28153Notification Master WordPress plugin Unauthenticated missing authorization7.5CNA v3.10.4%2026-08-24
CVE-2026-28152Tonda Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-24Fix
CVE-2026-28151Tonda WordPress theme local file inclusion8.1CNA v3.10.5%2026-08-24Fix
CVE-2026-27364Style Kits WordPress plugin broken access control6.5CNA v3.10.3%2026-08-24Fix
CVE-2026-21759HCL Hive is affected by an information exposure4.3CNA v3.10.2%2026-08-24
CVE-2026-21756HCL Hive is affected by a broken access control7.2CNA v3.10.3%2026-08-24
CVE-2026-21755HCL Hive is affected by a missing rate limit5.3CNA v3.10.2%2026-08-24
CVE-2026-21752HCL Hive is affected by a use of vulnerable third-party components7.5CNA v3.10.3%2026-08-24
CVE-2026-21751HCL Hive is affected by use of a cryptographic primitive with a risky implementation7.4CNA v3.10.2%2026-08-24
CVE-2026-19874Konami's Metal Gear Online 3 contains a heap-based buffer overflow9.1CISA ADP v3.10.9%2026-08-24Exploit codeFix
CVE-2026-19853CyberTutor｜NewSiteServer (NSS) missing authentication6.9CNA v4.00.3%2026-08-24Fix
CVE-2026-19852CyberTutor｜NewSiteServer (NSS) arbitrary file upload5.1CNA v4.00.2%2026-08-24Fix
CVE-2026-19685NetworkManager 802.1x CA path validation incorrect authorization7.1CNA v3.10.1%2026-08-24Fix
CVE-2026-19568SVG File Parsing memory corruption vulnerability in Autodesk 3ds Max7.8CNA v3.10.1%2026-08-24Fix
CVE-2026-19200Velociraptor Analyst overwrites live built-in artifacts through verify8.9CNA v3.10.2%2026-08-24Fix
CVE-2026-18349Microchip SAMA5D4 SAMA5D44 Fault injection7.3CNA v4.00.1%2026-08-24
CVE-2026-17113Red Hat OpenShift Container Platform 4 cri-o: Cri-o: Unvalidated image env var causes daemon crash6.0CNA v3.10.1%2026-08-24
CVE-2026-17033Grafana OSS Alertmanager alert source link cross-site scripting6.8CNA v3.10.2%2026-08-24Fix
CVE-2026-16783ABC File Parsing out-of-bounds write vulnerability in Autodesk 3ds Max7.8CNA v3.10.1%2026-08-24Fix
CVE-2026-16782SVG File Parsing out-of-bounds read vulnerability in Autodesk 3ds Max5.3CNA v3.10.2%2026-08-24Fix
CVE-2026-16781SVG File Parsing stack exhaustion vulnerability in Autodesk 3ds Max5.5CNA v3.10.1%2026-08-24Fix
CVE-2026-16348Command injection vulnerability in VPN connection of Archer BE8008.5CNA v4.02.0%2026-08-24Exploit codeFix
CVE-2026-15469Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE108007.7CNA v4.00.4%2026-08-24Fix
CVE-2026-13343zephyrproject zephyr uninitialised stack memory disclosure in the MIDI UMP Stream responder5.3CNA v3.10.2%2026-08-24Fix
CVE-2026-13213Zephyr Bluetooth Hearing Access Service null pointer dereference5.3CNA v3.10.2%2026-08-24Fix
CVE-2026-13212Zephyr virtio driver used ring descriptor handling out-of-bounds read8.8CNA v3.10.2%2026-08-24Fix
CVE-2026-12556HP Easy Start for macOS cleartext transmission of sensitive information7.7CNA v4.00.2%2026-08-24Fix
CVE-2026-12555HP Easy Start for macOS insecure temporary file7.7CNA v4.00.4%2026-08-24Fix
CVE-2026-12554HP Easy Start for macOS privilege escalation8.5CNA v4.00.3%2026-08-24Fix
CVE-2026-10618Hugo stored cross-site scripting via Unescaped Code-Fence Attribute Values4.8CNA v4.00.2%2026-08-24Fix
CVE-2026-10582Hugo server-side request forgery via security.http.urls Lacking Destination Address Validation8.3CNA v4.00.3%2026-08-24Fix
CVE-2026-9728Zephyr mbox_send syscall verifier race condition6.4CNA v3.10.1%2026-08-24Fix
CVE-2026-9254Command injection vulnerability in Parent Control of multiple TP-Link Archer Devices8.7CNA v4.03.1%2026-08-24Exploit codeFix
CVE-2026-8173Murrelektronik Xelity 4TX M GE information disclosure via Copy learned MAC Addresses function5.3CNA v4.00.3%2026-08-24Fix
CVE-2026-7455FLT File Parsing out-of-bounds write vulnerability in Autodesk 3ds Max7.8CNA v3.10.2%2026-08-24Fix
CVE-2026-6017Missing authentication for critical function in KAON PG52987.1CNA v4.00.2%2026-08-24Fix
CVE-2026-5006Vault vulnerable to privilege escalation via Slash injection in Templated Policy Paths6.8CNA v3.10.3%2026-08-24Fix
CVE-2026-78183DBD::Pg for Perl has a heap out-of-bounds write in quote_float9.8CISA ADP v3.10.7%2026-08-23Fix
CVE-2026-78156Open5GS S6a Authentication-Information-Request handler heap-based buffer overflow5.3CNA v4.00.6%2026-08-23
CVE-2026-78155Untrusted search path in StackGres9.9CNA v3.10.5%2026-08-23
CVE-2026-78148ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph_compute null pointer dereference6.9CNA v4.00.7%2026-08-23
CVE-2026-78147ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize_tensor deserialization6.9CNA v4.00.6%2026-08-23
CVE-2026-78145CTFd __init__.py _is_safe_url redirect5.3CNA v4.00.6%2026-08-23Fix
CVE-2026-78144code-projects Barangay Resident Profiling Management System authorization bypass5.3CNA v4.00.4%2026-08-23
CVE-2026-78143code-projects Barangay Resident Profiling Management System resident search SQL injection6.9CNA v4.00.4%2026-08-23
CVE-2026-78142code-projects Barangay Resident Profiling Management System improper authorization5.3CNA v4.00.4%2026-08-23
CVE-2026-78141Tenda CH22 exeCommand formexeCommand command injection5.3CNA v4.02.7%2026-08-23Reported exploited
CVE-2026-78140Dromara UJCMS web file template endpoint server-side template injection5.1CNA v4.00.4%2026-08-23
CVE-2026-78136chirpmyradio CHIRP eval injection7.8CNA v3.10.2%2026-08-23Fix
CVE-2026-78115SourceCodester Class and Exam Timetabling System user account update improper authorization5.3CNA v4.00.4%2026-08-23
CVE-2026-78112itsourcecode Hospital Management System Project in PHP viewservicetype.php SQL injection5.3CNA v4.00.3%2026-08-23
CVE-2026-78063Tenda CH22 editFileName formeditFileName command injection5.3CNA v4.02.7%2026-08-23
CVE-2026-78062vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials6.9CNA v4.00.5%2026-08-23
CVE-2026-78061vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery5.3CNA v4.00.3%2026-08-23
CVE-2026-78060SourceCodester Stock Management System getOrderReport.php cross-site scripting5.3CNA v4.00.5%2026-08-23
CVE-2026-78059SourceCodester Stock Management System printOrder.php cross-site scripting5.3CNA v4.00.5%2026-08-23
CVE-2026-78057sambitraj Student-Management-System Management Mutation SQL injection5.3CNA v4.00.3%2026-08-23
CVE-2026-78056sambitraj Student-Management-System Dashboard SQL injection5.3CNA v4.00.3%2026-08-23
CVE-2026-78055SourceCodester Class and Exam Timetabling System BSIT2.php cross-site scripting5.3CNA v4.00.5%2026-08-23
CVE-2026-78054SourceCodester Class and Exam Timetabling System BSIS1.php cross-site scripting5.3CNA v4.00.3%2026-08-23
CVE-2026-77116Brave Popup Builder WordPress plugin Subscriber+ Unpublished Popup disclosure via Preview4.3CISA ADP v3.10.3%2026-08-23Fix
CVE-2026-77115Brave Popup Builder WordPress plugin unauthenticated reflected XSS via UTM parameters7.1CISA ADP v3.10.3%2026-08-23Fix
CVE-2026-77088justhtml cross-site scripting via code-span5.3CNA v4.00.3%2026-08-23Fix
CVE-2026-77003Content Mask - Contributor Publish Capability Bypass via create_new_content_mask2.7CISA ADP v3.10.3%2026-08-23Fix
CVE-2026-75922Reverse::Proxy versions for Perl allow HTTP request smuggling5.3CISA ADP v3.10.4%2026-08-23Fix
CVE-2026-74793justhtml XSS via selectedcontent projection5.1CNA v4.00.3%2026-08-23Fix
CVE-2026-19565Apache::AppSamurai::Util session key generation vulnerability3.7CISA ADP v3.10.4%2026-08-23
CVE-2026-14853WooCommerce Bookings WordPress plugin Draft Bookable Product creation via missing authorization4.3CISA ADP v3.10.3%2026-08-23Fix
CVE-2026-13598RestrictMate WordPress plugin unauthenticated privilege escalation to Administrator9.8CISA ADP v3.10.3%2026-08-23Fix
CVE-2026-10053Improper limitation of a pathname to a restricted directory (path traversal) in GitLab8.5CNA v3.10.8%2026-08-23Exploit codeFix
CVE-2026-9769justhtml denial of service via deeply nested HTML8.7CNA v4.00.3%2026-08-23Fix
CVE-2026-8630justhtml Mutation XSS via Raw Text Elements5.1CNA v4.00.3%2026-08-23Fix
CVE-2026-8445justhtml Sanitizer Bypass via Markdown9.3CNA v4.00.6%2026-08-23Fix
CVE-2026-7808EmilStenstrom justhtml HTML sanitizer vulnerability9.3CNA v4.00.6%2026-08-23Fix
CVE-2026-6827justhtml multiple cross-site scripting5.1CNA v4.00.3%2026-08-23Fix
CVE-2026-5751justhtml Mutation XSS via custom sanitization policies5.1CNA v4.00.3%2026-08-23Fix
CVE-2026-5389justhtml XSS via code fence breakout5.1CNA v4.00.2%2026-08-23Fix
CVE-2026-5388justhtml includes multiple security fixes9.3CNA v4.00.6%2026-08-23Fix
CVE-2026-4671justhtml denial of service via CSS Selector8.7CNA v4.00.7%2026-08-23Fix
CVE-2026-78122docker-socket-proxy insufficient access control granularity exposes Container Filesystems8.3CNA v4.00.3%2026-08-22
CVE-2026-78051alexta69 MeTube Cookie file cookies.txt file access6.9CNA v4.00.5%2026-08-22
CVE-2026-78050Comfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow9.4CNA v4.00.8%2026-08-22Emerging Threats
CVE-2026-78049Systerel S2OPC AddNodes service sopc_node_mgt_helper_internal.c out-of-bounds6.3CNA v4.00.6%2026-08-22
CVE-2026-78003Mailgun for WordPress plugin unauthenticated server-side request forgery (SSRF)9.8CNA v3.10.8%2026-08-22Reported exploitedFix
CVE-2026-77992Joomla extension fabrikar.com heredoc terminator breakout in the calc element in Fabrik9.5CNA v4.00.4%2026-08-22
CVE-2026-77988TRENDnet TEW-823DRU CLI Configuration tool nvram_get command injection5.1CNA v4.02.4%2026-08-22
CVE-2026-77946TRENDnet TEW-821DAP NTP Timezone Configuration apply_time.cgi uci_safe_get stack-based overflow10.0CNA v4.01.0%2026-08-22
CVE-2026-77945TRENDnet TEW-821DAP ssi upload.cgi command injection5.3CNA v4.01.8%2026-08-22
CVE-2026-77027Joomla extension fabrikar.com unauthenticated stored XSS in Fabrik8.6CNA v4.00.4%2026-08-22
CVE-2026-77002SmilePass Selfie Login WordPress plugin unauthenticated authentication bypass9.8CISA ADP v3.10.5%2026-08-22
CVE-2026-77001SoClever Social Login and Sharing buttons with Analytics plugin improper authentication9.8CISA ADP v3.10.6%2026-08-22
CVE-2026-77000WP Social Media Login WordPress plugin unauthenticated account takeover via Twitter login Flow9.8CISA ADP v3.10.5%2026-08-22
CVE-2026-76793Firebase Authentication WordPress plugin unauthenticated account takeover via Firebase email Claim8.1CISA ADP v3.10.5%2026-08-22Fix
CVE-2026-76789Slider Hero WordPress plugin unauthenticated stored XSS8.8CISA ADP v3.10.5%2026-08-22Fix
CVE-2026-76609Joomla extension fabrikar.com Unauthenticated modification of any comment in Fabrik6.9CNA v4.00.4%2026-08-22
CVE-2026-76608Joomla extension fabrikar.com Unauthenticated disclosure of any commenter's email address in Fabrik6.9CNA v4.00.4%2026-08-22
CVE-2026-76607Joomla extension fabrikar.com Missing ACL check in download element in Fabrik10.0CNA v4.00.4%2026-08-22
CVE-2026-76606Joomla extension fabrikar.com path traversal via image element in Fabrik10.0CNA v4.00.5%2026-08-22
CVE-2026-76605Joomla extension fabrikar.com remote code execution via image element in Fabrik10.0CNA v4.00.7%2026-08-22
CVE-2026-76604Joomla extension fabrikar.com unauthenticated remote code execution via PHP form element in Fabrik10.0CNA v4.00.7%2026-08-22
CVE-2026-76603Joomla extension fabrikar.com Unauthenticated row disclosure via form.inlineedit in Fabrik6.9CNA v4.00.4%2026-08-22
CVE-2026-76602Joomla extension fabrikar.com unauthenticated SQL injection in ORDER BY in Fabrik9.3CNA v4.00.4%2026-08-22
CVE-2026-76601Joomla extension fabrikar.com Unauthenticated row reordering in Fabrik6.9CNA v4.00.4%2026-08-22
CVE-2026-76600Joomla extension fabrikar.com Unauthenticated deletion of any comment in Fabrik6.9CNA v4.00.4%2026-08-22
CVE-2026-76599Fabrik extension for Joomla ajax_tables method vulnerability8.7CNA v4.00.4%2026-08-22
CVE-2026-76598Joomla extension fabrikar.com Unauthenticated arbitrary directory listing8.7CNA v4.00.5%2026-08-22
CVE-2026-76597Joomla extension fabrikar.com unauthenticated arbitrary file upload to web root8.7CNA v4.00.4%2026-08-22
CVE-2026-76596Joomla extension fabrikar.com Unauthenticated table truncation via list.doempty in Fabrik8.7CNA v4.00.4%2026-08-22
CVE-2026-76571Fabrik extension for Joomla list filter condition parameter SQL injection9.3CNA v4.00.4%2026-08-22
CVE-2026-76074AutomatorWP WordPress plugin missing authorization authenticated sensitive information disclosure4.3CNA v3.10.4%2026-08-22Fix
CVE-2026-76057AutomatorWP WordPress plugin missing authorization authenticated sensitive information disclosure4.3CNA v3.10.4%2026-08-22Fix
CVE-2026-75870Punk session cookie HMAC signing vulnerability9.1CISA ADP v3.10.5%2026-08-22Fix
CVE-2026-75866Punk::OAuth2::Server token issuance missing authorization9.1CISA ADP v3.10.5%2026-08-22Fix
CVE-2026-75027Themify Builder WordPress plugin authorization bypass5.3CNA v3.10.6%2026-08-22Fix
CVE-2026-74733Linux kernel pca953x GPIO expander driver vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74731Linux kernel sched_ext sub-scheduler teardown use-after-free7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74730Linux kernel NFS client FREE_STATEID handling use-after-free9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74729Linux kernel Aspeed LPC snoop driver vulnerability–0.2%2026-08-22Fix
CVE-2026-74728Linux kernel XFS buffer allocation vulnerability–0.2%2026-08-22Fix
CVE-2026-74727Linux kernel ovpn peer management race condition9.8CNA v3.10.6%2026-08-22Fix
CVE-2026-74726Linux kernel bonding ALB driver vulnerability7.3CNA v3.10.1%2026-08-22Fix
CVE-2026-74725Linux kernel enic Ethernet driver use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74724Linux kernel IPVS ICMP NAT out-of-bounds write7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74723Linux kernel btrfs LZO decompression vulnerability9.8CNA v3.10.7%2026-08-22Fix
CVE-2026-74722Linux kernel btrfs encoded write memory leak–0.2%2026-08-22Fix
CVE-2026-74721Linux kernel amdxdna accelerator driver vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74720Linux kernel BPF verifier vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74719Linux kernel SMC LLC link handling vulnerability–0.2%2026-08-22Fix
CVE-2026-74718Linux kernel devlink reload vulnerability–0.2%2026-08-22Fix
CVE-2026-74717Linux kernel mlx5 firmware tracer vulnerability7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74716Linux kernel amdxdna accelerator driver denial of service–0.2%2026-08-22Fix
CVE-2026-74715Linux kernel BPF conntrack kfuncs vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74714Linux kernel BPF TCP iterator use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74713Linux kernel vhost IOTLB vulnerability7.1CNA v3.10.1%2026-08-22Fix
CVE-2026-74712Linux kernel mlx5 vDPA driver vulnerability9.3CNA v3.10.1%2026-08-22Fix
CVE-2026-74711Linux kernel PMBus hwmon notification handler type confusion8.4CNA v3.10.2%2026-08-22Fix
CVE-2026-74710Linux kernel AF_XDP TX metadata length validation vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74709Linux kernel xsk vulnerability–0.2%2026-08-22Fix
CVE-2026-74708Linux kernel xsk vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74707Linux kernel xsk vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74706Linux kernel bnge auxiliary device release null pointer dereference–0.2%2026-08-22Fix
CVE-2026-74705Linux kernel UDP tunnel segmentation use-after-free10.0CNA v3.10.5%2026-08-22Fix
CVE-2026-74704Linux kernel cake queue discipline ACK filter denial of service8.2CNA v3.10.4%2026-08-22Fix
CVE-2026-74703Linux kernel vhost-scsi T10 PI scatterlist handling denial of service7.1CNA v3.10.2%2026-08-22Fix
CVE-2026-74702Linux kernel vhost-scsi T10 PI feature negotiation vulnerability8.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74701In the Linux kernel, the following vulnerability has been resolved: net/openvswitch: check Ethernet header length in key_extract() When a packet arrives on an ARPHRD_NONE device (e.g. TUN), ovs_flow_key_extract() trusts the user-provided skb->protocol field: if it is ETH_P_TEB, the packet is class7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74700Linux kernel tc classifier teardown race condition7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74699Linux kernel Xe GPU driver hang replay state memory leak–0.2%2026-08-22Fix
CVE-2026-74698Linux kernel mlx5e BQL queue accounting denial of service–0.2%2026-08-22Fix
CVE-2026-74697Linux kernel bnxt_en TPA aggregation ring vulnerability8.2CNA v3.10.5%2026-08-22Fix
CVE-2026-74696Linux kernel TCP Fast Open listener migration vulnerability7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74695Linux kernel netfilter flow table offload vulnerability7.5CNA v3.10.4%2026-08-22Fix
CVE-2026-74694Linux kernel NCSI command handler out-of-bounds read–0.2%2026-08-22Fix
CVE-2026-74693Linux kernel Prestera firmware header parser vulnerability–0.2%2026-08-22Fix
CVE-2026-74692Linux kernel SMC listener state check race condition7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74691Linux kernel Thunderbolt networking DMA teardown vulnerability8.8CNA v3.10.3%2026-08-22Fix
CVE-2026-74690Linux kernel s390 ISM device driver use-after-free8.4CNA v3.10.2%2026-08-22Fix
CVE-2026-74689Linux kernel ATM socket options out-of-bounds read7.1CNA v3.10.1%2026-08-22Fix
CVE-2026-74688Linux kernel SCTP control chunk transport vulnerability9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74687Linux kernel AT91SAM9 watchdog driver vulnerability7.8CNA v3.10.2%2026-08-22Fix