CVE-2026 list

CVE-2026 records published in August 2026

Page four of 13: records 3,001 to 4,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.

CVE-2026 records published in August 2026, newest first: records 3,001 to 4,000 of 12,071
CVE Summary CVSS EPSS Published Signals
CVE-2026-74686Linux kernel rqspinlock deadlock recovery vulnerability–0.2%2026-08-22Fix
CVE-2026-74685Linux kernel LTC4282 hwmon driver vulnerability–0.2%2026-08-22Fix
CVE-2026-74684Linux kernel tap device XDP path null pointer dereference7.1CNA v3.10.1%2026-08-22Fix
CVE-2026-74683Linux kernel evdev event mask ioctl vulnerability–0.2%2026-08-22Fix
CVE-2026-74682Linux kernel USB audio Type II URB handling out-of-bounds write–0.2%2026-08-22Fix
CVE-2026-74681Linux kernel usbio bulk message handling vulnerability–0.2%2026-08-22Fix
CVE-2026-74680Linux kernel cxacru USB ADSL driver improper error handling–0.2%2026-08-22Fix
CVE-2026-74679Linux kernel USB gadget NCM driver out-of-bounds read–0.2%2026-08-22Fix
CVE-2026-74678Linux kernel ax88179_178a USB Ethernet driver memory leak7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74677Linux kernel ipheth USB tethering driver use-after-free–0.2%2026-08-22Fix
CVE-2026-74676Linux kernel KDSKBMETA ioctl incorrect authorization–0.2%2026-08-22Fix
CVE-2026-74675Linux kernel vt terminal driver race condition7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74674Linux kernel page table reclaim vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74673Linux kernel evdev input events information disclosure–0.2%2026-08-22Fix
CVE-2026-74672Linux kernel vmalloc huge page mapping use-after-free–0.2%2026-08-22Fix
CVE-2026-74671Linux kernel IMA xattr verification out-of-bounds read–0.2%2026-08-22Fix
CVE-2026-74670Linux kernel IPVS estimator vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74669Linux kernel IPVS ICMP handling out-of-bounds write9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74668Linux kernel packet subsystem vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74667Linux kernel packet socket transmit path vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74666Linux kernel packet subsystem vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74665Linux kernel generic XDP vulnerability9.1CNA v3.10.4%2026-08-22Fix
CVE-2026-74664Linux kernel openvswitch vulnerability–0.2%2026-08-22Fix
CVE-2026-74663Linux kernel qdisc hierarchy vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74662Linux kernel inet fragment queues vulnerability9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74661Linux kernel mac802154 beacon worker use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74660Linux kernel ebtables NFLOG target vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74659Linux kernel bridge MRP test frame vulnerability–0.2%2026-08-22Fix
CVE-2026-74658Linux kernel robust futex exit handling race condition–0.2%2026-08-22Fix
CVE-2026-74657Linux kernel IPv4 FIB netlink route dump denial of service–0.2%2026-08-22Fix
CVE-2026-74656Linux kernel IPv4 FIB nexthop cache use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74655Linux kernel qcom-geni serial driver vulnerability8.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74654Linux kernel 8250_dma serial driver vulnerability–0.2%2026-08-22Fix
CVE-2026-74653Linux kernel 8250 LPC32xx UART driver vulnerability–0.2%2026-08-22Fix
CVE-2026-74652Linux kernel amba-pl011 serial driver vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74651Linux kernel rtl8723bs WPA IE parser out-of-bounds read8.1CNA v3.10.3%2026-08-22Fix
CVE-2026-74650Linux kernel rtl8723bs WMM parameter handler out-of-bounds read–0.2%2026-08-22Fix
CVE-2026-74649Linux kernel rtl8723bs shared-key authentication vulnerability8.8CNA v3.10.3%2026-08-22Fix
CVE-2026-74648Linux kernel rtl8723bs monitor mode transmit out-of-bounds read7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74647Linux kernel fastrpc driver unmap handling race condition7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74646Linux kernel fastrpc driver mmap list vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74645Linux kernel DAMON LRU sort division by zero–0.2%2026-08-22Fix
CVE-2026-74644Linux kernel DAMON folio migration vulnerability–0.2%2026-08-22Fix
CVE-2026-74643Linux kernel DAMON mtier sample module denial of service–0.2%2026-08-22Fix
CVE-2026-74642Linux kernel ALSA USB driver use-after-free–0.2%2026-08-22Fix
CVE-2026-74641Linux kernel usx2y hwdep mmap handler vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74640Linux kernel FCP Level Meter control out-of-bounds write7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74639Linux kernel us144mkii USB audio driver vulnerability–0.2%2026-08-22Fix
CVE-2026-74638Linux kernel V3D GPU driver scheduler vulnerability–0.2%2026-08-22Fix
CVE-2026-74637Linux kernel perf event group management use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74636Linux kernel tracing race condition–0.2%2026-08-22Fix
CVE-2026-74635Linux kernel fbdev console cursor rendering vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74634Linux kernel trace ring buffer resizing use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74633Linux kernel ftrace module event filter null pointer dereference–0.2%2026-08-22Fix
CVE-2026-74632Linux kernel huge zero page reference counting race condition7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74631Linux kernel SMC receive splice vulnerability8.4CNA v3.10.1%2026-08-22Fix
CVE-2026-74630Linux kernel IPv6 device reference counting vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74629Linux kernel net/dibs use-after-free8.8CNA v3.10.4%2026-08-22Fix
CVE-2026-74628Linux kernel x25 socket timers use-after-free9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74627Linux kernel devmem zerocopy vulnerability7.8CNA v3.10.2%2026-08-22Fix
CVE-2026-74626Linux kernel NTB network driver RX queue denial of service7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74625Linux kernel netfilter bridge connection tracking memory leak7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74624Linux kernel netfilter connection tracking logging deadlock7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74623Linux kernel Atlantic Ethernet driver TX ring memory leak–0.2%2026-08-22Fix
CVE-2026-74622Linux kernel Atlantic Ethernet driver RX ring vulnerability–0.2%2026-08-22Fix
CVE-2026-74621Linux kernel act_ct fragment handling vulnerability7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-74620Linux kernel gact and police traffic control actions vulnerability–0.2%2026-08-22Fix
CVE-2026-74619Linux kernel overlayfs mount handling denial of service–0.2%2026-08-22Fix
CVE-2026-74618Linux kernel binfmt_misc mount handling denial of service–0.2%2026-08-22Fix
CVE-2026-74617Linux kernel dibs device interrupt handling vulnerability9.8CNA v3.10.6%2026-08-22Fix
CVE-2026-74616Linux kernel XDP frame cloning vulnerability9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74615Linux kernel vxlan ageing timer vulnerability8.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74614Linux kernel virtio vsock worker queues vulnerability8.4CNA v3.10.1%2026-08-22Fix
CVE-2026-74613Linux kernel virtio vsock RX queue use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74612Linux kernel veth XDP fragment handling vulnerability10.0CNA v3.10.5%2026-08-22Fix
CVE-2026-74611Linux kernel TLS receive zero-copy path vulnerability9.8CNA v3.10.7%2026-08-22Fix
CVE-2026-74610Linux kernel TLS sk_msg ring buffer null pointer dereference7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74609Linux kernel TIPC link handling vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74608Linux kernel SMB client channel interface list use-after-free9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74607Linux kernel KVM SEV mirror VM list race condition8.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74606Linux kernel eventfs use-after-free7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74605Linux kernel eventfs inode list vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74604Linux kernel hwmon thermal sysfs use-after-free8.4CNA v3.10.1%2026-08-22Fix
CVE-2026-74603Linux kernel PTP OCP driver board ID vulnerability7.1CNA v3.10.1%2026-08-22Fix
CVE-2026-74602Linux kernel ftrace ring buffer reader page vulnerability–0.2%2026-08-22Fix
CVE-2026-74601Linux kernel ftrace ring buffer CPU swap race condition7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74600Linux kernel page table zero-page accounting denial of service–0.2%2026-08-22Fix
CVE-2026-74599Linux kernel page table dump race condition–0.2%2026-08-22Fix
CVE-2026-74598Linux kernel IPv6 Route Information option parsing vulnerability7.5CNA v3.10.4%2026-08-22Fix
CVE-2026-74597Linux kernel IPv6 tunnel ICMP error handling vulnerability9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74596Linux kernel fs-verity truncate check vulnerability–0.2%2026-08-22Fix
CVE-2026-74595Linux kernel fscrypt policy ioctl vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74594Linux kernel PSI cgroup rtpoll timer vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74593Linux kernel sched_ext cgroup locking deadlock–0.2%2026-08-22Fix
CVE-2026-74592Linux kernel IMA truncate hooks vulnerability8.1CNA v3.10.3%2026-08-22Fix
CVE-2026-74591Linux kernel filemap vulnerability9.8CNA v3.10.6%2026-08-22Fix
CVE-2026-74590Linux kernel fs-verity BPF digest kfunc vulnerability7.8CNA v3.10.1%2026-08-22Fix
CVE-2026-74589Linux kernel BPF sockmap redirect use-after-free8.4CNA v3.10.1%2026-08-22Fix
CVE-2026-74588Linux kernel SCTP retransmission queue vulnerability9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74587Linux kernel SCTP ASCONF chunk cache use-after-free9.8CNA v3.10.5%2026-08-22Fix
CVE-2026-74586Linux kernel SCTP ASCONF transport handling vulnerability9.8CNA v3.10.5%2026-08-22Exploit codeFix
CVE-2026-74585Linux kernel Thunderbolt DROM parsing vulnerability–0.2%2026-08-22Fix
CVE-2026-74584Linux kernel bnxt_re shared page allocation information disclosure7.1CNA v3.10.2%2026-08-22Fix
CVE-2026-71514NLTK path traversal via CrubadanCorpusReader pathsec Bypass3.3NVD v3.10.2%2026-08-22Fix
CVE-2026-71513NLTK remote code execution via AllowlistUnpickler Dotted-Name Bypass8.7CNA v4.01.1%2026-08-22Fix
CVE-2026-70626NLTK Symlink Escape via CorpusReader8.6CNA v4.00.2%2026-08-22Fix
CVE-2026-68768hashcat heap buffer overflow in outfile_write via Oversized Username6.9CNA v4.00.2%2026-08-22Fix
CVE-2026-68767hashcat off-by-one Out-of-Bounds Heap Write in fgetl6.9CNA v4.00.2%2026-08-22Fix
CVE-2026-68766hashcat arbitrary file write via Restore file option injection8.5CNA v4.00.2%2026-08-22Fix
CVE-2026-66917Joomla extension joomgalleryfriends.net stored XSS in JoomGallery8.6CNA v4.00.5%2026-08-22Exploit code
CVE-2026-66916joomgalleryfriends.net JoomGallery category JSON view improper access control6.9CNA v4.00.4%2026-08-22Exploit code
CVE-2026-66393NLTK denial of service via JSONTaggedDecoder8.7CNA v4.00.5%2026-08-22Fix
CVE-2026-65915NLTK arbitrary file read via FileSystemPathPointer7.1CNA v4.00.4%2026-08-22Fix
CVE-2026-63312NLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE arbitrary file read8.7CNA v4.00.7%2026-08-22Fix
CVE-2026-63311NLTK SSRF via DNS Resolution failure6.9CNA v4.00.3%2026-08-22Fix
CVE-2026-62388NLTK insecure default Configuration in pathsec.py8.7CNA v4.00.5%2026-08-22Fix
CVE-2026-62385NLTK path traversal via FrameNet and NKJP Readers7.5NVD v3.10.4%2026-08-22Fix
CVE-2026-62384NLTK FramenetCorpusReader Symlink sandbox bypass8.7CNA v4.00.7%2026-08-22Fix
CVE-2026-62383nltk IPIPANCorpusReader Symlink arbitrary file read6.8CNA v4.00.2%2026-08-22Fix
CVE-2026-62382PasswordPusher authentication bypass via Null Comparison6.9CNA v4.01.1%2026-08-22NucleiFix
CVE-2026-62381openwrt luci luci-lib-px5g 2040-bit Certificate Signing heap buffer overflow6.9CNA v4.00.1%2026-08-22
CVE-2026-62380Netty SOCKS Proxy Null Byte injection7.5NVD v3.10.3%2026-08-22Fix
CVE-2026-62243Netty TLS Hostname Verification Bypass8.7CNA v4.00.2%2026-08-22Fix
CVE-2026-62204SiYuan Plugin Overwrite via Bazaar Install5.9CNA v4.00.1%2026-08-22Fix
CVE-2026-60084SiYuan arbitrary file deletion via removeTemplate8.4CNA v4.00.4%2026-08-22Fix
CVE-2026-60083SiYuan Incomplete Path Blocklist via MCP file tool6.9CNA v4.00.4%2026-08-22Fix
CVE-2026-59809SiYuan Secret Exfiltration via http_request URL6.9CNA v4.00.4%2026-08-22Fix
CVE-2026-59808AVideo authentication bypass via Unkeyed Video hash disclosure8.7CNA v4.00.4%2026-08-22
CVE-2026-59256WWBN AVideo Unbound Token authorization bypass via Gallery8.7CNA v4.00.3%2026-08-22
CVE-2026-58003WWBN AVideo cross-site request forgery via releaseVideoNow.json.php7.1CNA v4.00.1%2026-08-22
CVE-2026-58002WWBN AVideo authorization bypass via Users_affiliations add.json.php7.1CNA v4.00.2%2026-08-22
CVE-2026-58001WWBN AVideo cross-site request forgery via videoEditLight.php6.9CNA v4.00.2%2026-08-22Fix
CVE-2026-57998better-npm-audit OS command injection via registry flag8.5CNA v4.00.2%2026-08-22
CVE-2026-57944AVideo channelToGallery.json.php cross-site request forgery5.3CNA v4.00.1%2026-08-22
CVE-2026-56380AVideo feed/index.php Exposure of Channel Owner Email Address6.9CNA v4.00.3%2026-08-22
CVE-2026-47895strongSwan double free7.5CNA v3.10.4%2026-08-22Fix
CVE-2026-19883WPeMatico RSS Feed Fetcher WordPress plugin privilege escalation8.8CNA v3.10.7%2026-08-22Fix
CVE-2026-19222Forminator Forms WordPress plugin privilege escalation6.6CISA ADP v3.10.4%2026-08-22Fix
CVE-2026-19221Forminator Forms WordPress plugin Admin+ Network-Wide RCE via Hub Connector API Key on Multisite7.2CISA ADP v3.10.7%2026-08-22Fix
CVE-2026-19093Tutor LMS WordPress plugin Instructor+ arbitrary file read via Video path6.8CISA ADP v3.10.5%2026-08-22Fix
CVE-2026-18052ManageWP Worker WordPress plugin unauthenticated authentication bypass8.1CISA ADP v3.10.4%2026-08-22Fix
CVE-2026-18027WebToffee WooCommerce PDF Invoices WordPress plugin path traversal6.5CNA v3.10.9%2026-08-22Fix
CVE-2026-16738Conekta Payment Gateway payment webhook improper access control5.3CISA ADP v3.10.3%2026-08-22Fix
CVE-2026-16612FiboSearch WordPress plugin unauthenticated Password-Protected Product information disclosure5.3CISA ADP v3.10.3%2026-08-22Fix
CVE-2026-16260Post Grid, Slider and Carousel Ultimate WordPress plugin stored XSS6.8CISA ADP v3.10.4%2026-08-22Fix
CVE-2026-16149Security Hardener WordPress plugin privilege escalation8.8CNA v3.10.6%2026-08-22Fix
CVE-2026-14187Tutor LMS WordPress plugin Instructor+ Cross-Instructor Private Course disclosure via IDOR2.7CISA ADP v3.10.3%2026-08-22Fix
CVE-2026-12999Zephyr Infineon Airoc Wi-Fi driver memory leak5.3CNA v3.10.2%2026-08-22Fix
CVE-2026-12710Missing authorization in Application Integration QueryEngineTask9.3CNA v4.00.4%2026-08-22Fix
CVE-2026-5093Greenshift WordPress plugin theme settings modification via gspb_update_global_wp_settings4.3CNA v3.10.4%2026-08-22Fix
CVE-2026-4703WS Form LITE WordPress plugin unauthenticated PHP object injection via form Submission9.8CNA v3.10.9%2026-08-22Fix
CVE-2026-4561MC4WP: Mailchimp for WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-22Fix
CVE-2026-4559Image Photo Gallery Final Tiles Grid WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-22Fix
CVE-2026-4245Post Duplicator WordPress plugin authorization bypass to authenticated post Duplication4.3CNA v3.10.4%2026-08-22Fix
CVE-2026-4244Post Duplicator WordPress plugin unauthorized access4.3CNA v3.10.3%2026-08-22Fix
CVE-2026-3424kk Star Ratings WordPress plugin unauthenticated arbitrary shortcode execution via payload parameter5.3CNA v3.10.5%2026-08-22Fix
CVE-2026-2996Advanced Product Fields (Product Addons) for WooCommerce WordPress plugin improper input validation7.5CNA v3.10.5%2026-08-22Fix
CVE-2026-0551PPWP Password Protect Pages WordPress plugin PHP object injection8.8CNA v3.10.7%2026-08-22Fix
CVE-2026-77815zanllp Infinite Image Browsing scanned directory path check link following8.7CNA v4.00.5%2026-08-21
CVE-2026-77814Infinite Image Browsing path trust check path traversal8.7CNA v4.00.5%2026-08-21
CVE-2026-77812Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE9.4CNA v4.00.1%2026-08-21Exploit code
CVE-2026-77811Stored cross-site scripting via Integration Template Asset in OpenSearch Dashboards6.2CNA v4.00.5%2026-08-21Fix
CVE-2026-77810Code injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector9.4CNA v4.00.6%2026-08-21Fix
CVE-2026-77806SPIP analyse_resultat_skel function code injection9.8CNA v3.14.5%2026-08-21Reported exploitedNucleiFix
CVE-2026-77795Dromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization5.3CNA v4.00.3%2026-08-21
CVE-2026-77781Tie::Hash::Regex versions for Perl will throw an exception on unparseable lookup keys7.5CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-77780Roskus Prospero Flow CRM transaction save endpoint insecure direct object reference5.3CNA v4.00.4%2026-08-21Fix
CVE-2026-77776Headroom Proxy Treats the Client-Supplied x-headroom-user-id header as an Authenticated Identity9.3CNA v4.00.6%2026-08-21Fix
CVE-2026-77775Headroom Proxy Sends Upstream requests to a Client-Supplied Base URL without Address Validation7.7CNA v4.00.6%2026-08-21Fix
CVE-2026-77769OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries7.1CNA v4.00.3%2026-08-21
CVE-2026-77768OpenPanel report.get Returns any Report by Identifier without Checking Project Access7.1CNA v4.00.3%2026-08-21
CVE-2026-77767Reconmap report preview endpoint missing authorization8.7CNA v4.00.5%2026-08-21
CVE-2026-77763Juicedata JuiceFS local filestore backend path traversal7.1CNA v4.00.5%2026-08-21
CVE-2026-77761Cross-Document Parser State Contamination in misp-stix6.3CNA v4.00.6%2026-08-21
CVE-2026-77759Roskus Prospero Flow CRM transaction API insecure direct object reference8.7CNA v4.00.5%2026-08-21Fix
CVE-2026-77755Denial of service in MISP-STIX Import via Malformed or Oversized STIX Documents in misp-stix library8.7CNA v4.00.5%2026-08-21
CVE-2026-77751Path traversal in MISP object Template Resolution during STIX Import and Export in misp-stix library8.8CNA v4.00.7%2026-08-21
CVE-2026-77710MISP Project misp-stix STIX import parser selection improper input validation6.9CNA v4.00.5%2026-08-21
CVE-2026-77686Dolibarr Account card.php improper authorization5.3CNA v4.00.5%2026-08-21Fix
CVE-2026-77683Comfast CF-N1-S mbox-config system command injection9.4CNA v4.02.9%2026-08-21Emerging Threats
CVE-2026-77681CodeAstro Online Job Portal update-profile.php unrestricted upload5.3CNA v4.00.4%2026-08-21
CVE-2026-77651droundy arrayref embedded malicious code9.8CNA v3.10.8%2026-08-21
CVE-2026-77650droundy append-only-vec embedded malicious code9.8CNA v3.10.8%2026-08-21
CVE-2026-77649droundy internment embedded malicious code9.8CNA v3.10.8%2026-08-21
CVE-2026-77415JSONata: Arbitrary code execution via crafted JSONata expressions9.3CNA v4.00.9%2026-08-21Fix
CVE-2026-77414JSONata: Arbitrary code execution via crafted JSONata expressions9.3CNA v4.00.6%2026-08-21Fix
CVE-2026-77413JSONata: Arbitrary code execution via crafted JSONata expressions9.3CNA v4.00.7%2026-08-21Fix
CVE-2026-77392SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP submit.php SQL injection5.3CNA v4.00.3%2026-08-21
CVE-2026-77391SourceCodester Dynamic Input Field Generator Using HTML, CSS, and PHP cross-site request forgery5.3CNA v4.00.2%2026-08-21
CVE-2026-77354kin-openapi deepObject query parameter decoding resource exhaustion8.7CNA v4.00.5%2026-08-21Fix
CVE-2026-77264Automation Web Platform WordPress plugin unauthenticated authentication bypass9.8CNA v3.10.7%2026-08-21Fix
CVE-2026-77237Missing type validation in xQueueAddToSet in FreeRTOS-Kernel8.2CNA v4.00.2%2026-08-21Fix
CVE-2026-77236Missing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel8.3CNA v4.00.2%2026-08-21Fix
CVE-2026-77235Missing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel8.3CNA v4.00.2%2026-08-21Fix
CVE-2026-77234Improper input validation in FreeRTOS-Kernel timer command handling9.3CNA v4.00.2%2026-08-21Fix
CVE-2026-77220PDFio Dangling Pointer via Dictionary String-Formatting7.1CNA v4.00.4%2026-08-21Fix
CVE-2026-77219GNU Emacs Heap Over-Read via PBM/PPM/PGM Image Loader6.9CNA v4.00.1%2026-08-21Fix
CVE-2026-77087Paperclip remote code execution via DNS Rebinding9.4CNA v4.00.5%2026-08-21Fix
CVE-2026-77086SiYuan path traversal via packageName9.4CNA v4.01.0%2026-08-21Fix
CVE-2026-77029Joomla extension yootheme.com missing CSRF tokens on front-end state changes in Zoo4.6CNA v4.00.2%2026-08-21
CVE-2026-77028Joomla extension yootheme.com reflected XSS and open redirect5.3CNA v4.00.4%2026-08-21
CVE-2026-76905getkin kin-openapi openapi3filter validation error encoder null pointer dereference7.5CNA v3.10.6%2026-08-21Fix
CVE-2026-76904GeoTools jsonArrayContains filter function SQL injection9.8CNA v3.14.0%2026-08-21Reported exploitedNucleiExploit codeFix
CVE-2026-76876Craftplan broken access control information disclosure via Settings API8.2CNA v4.00.4%2026-08-21Fix
CVE-2026-76613Joomla extension yootheme.com Authenticated, privileged SQL injection in YOOtheme Pro8.6CNA v4.00.4%2026-08-21
CVE-2026-76612Joomla extension yootheme.com unauthenticated stored XSS via user-controlled fields in Zoo8.6CNA v4.00.4%2026-08-21
CVE-2026-76611Joomla extension yootheme.com Unauthenticated arbitrary directory listing6.9CNA v4.00.5%2026-08-21
CVE-2026-76158Datiphy Data Management Center external control of file name or path9.3CNA v4.00.5%2026-08-21
CVE-2026-76157Datiphy Data Management Center missing authentication for critical function8.8CNA v4.00.7%2026-08-21
CVE-2026-76156Datiphy Data Management Center improper neutralization of special elements used in an OS command9.4CNA v4.01.1%2026-08-21
CVE-2026-76155Datiphy Data Management Center use of default credentials9.3CNA v4.00.5%2026-08-21
CVE-2026-76137Yamaha VOCALOID6 missing authentication4.8CNA v4.00.2%2026-08-21
CVE-2026-76131Yamaha VOCALOID6 hard-coded credentials6.9CNA v4.00.3%2026-08-21
CVE-2026-75946OMEN Gaming Hub potential escalation of privilege and information disclosure8.2CNA v4.00.1%2026-08-21Fix
CVE-2026-75933Jet Admin stored XSS8.5CNA v4.00.4%2026-08-21Fix
CVE-2026-75932Jet Admin custom domain OAuth integration missing authorization9.2CNA v4.00.6%2026-08-21Fix
CVE-2026-75928Brushfire unauthenticated information disclosure6.9CNA v4.00.5%2026-08-21Fix
CVE-2026-75796AI Engine - Admin+ Multisite Network Administrator account takeover via MCP User tools7.2CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-75115Joomla extension yootheme.com Authenticated, privileged arbitrary file read in YOOtheme Pro7.0CNA v4.00.5%2026-08-21
CVE-2026-74866@fastify/busboy vulnerable to CRLF injection via multipart Content-Disposition filename and name5.8CNA v3.10.3%2026-08-21Fix
CVE-2026-74583Linux kernel route4 classifier fastmap cache use-after-free7.8CNA v3.10.1%2026-08-21Fix
CVE-2026-74582Linux kernel packet subsystem out-of-bounds write7.8CNA v3.10.1%2026-08-21Fix
CVE-2026-74581Linux kernel IPv6 fib rule suppression vulnerability9.8CNA v3.10.4%2026-08-21Fix
CVE-2026-74580Linux kernel vhost vring metadata cache vulnerability8.8CNA v3.10.1%2026-08-21Exploit codeFix
CVE-2026-74252Joomla extension j2commerce.com stored XSS in Guest checkout in J2Store8.6CNA v4.00.5%2026-08-21Exploit code
CVE-2026-73537Japan Science and Technology Agency (JST) Miraikan Assist App Android cross-site scripting5.1CNA v4.00.3%2026-08-21Fix
CVE-2026-73267Red Hat multicluster engine for Kubernetes clusterclaims-controller denial of service7.7CNA v3.10.6%2026-08-21Fix
CVE-2026-71862Checkmate: Sensitive Bearer token exposure via Public Status pages when showURL setting is Enabled7.5CNA v3.10.5%2026-08-21Fix
CVE-2026-71494Infracost: Terraform Cloud and registry token disclosure via unvalidated hostname5.9CNA v4.00.5%2026-08-21Fix
CVE-2026-71493Infracost: Arbitrary file read via config-template readFile symlink traversal5.9CNA v4.00.5%2026-08-21Fix
CVE-2026-70656Checkmate: Regular expression denial of service4.9CNA v3.10.6%2026-08-21Fix
CVE-2026-69502Microsoft Azure SQL Database elevation of privilege10.0CNA v3.10.8%2026-08-21Fix
CVE-2026-69238HTML injection vulnerability in Esri Portal for ArcGIS3.5CNA v3.10.2%2026-08-21Fix
CVE-2026-69237HTML injection vulnerability in Esri Portal for ArcGIS3.8CNA v3.10.3%2026-08-21Fix
CVE-2026-69236Stored cross-site scripting issue in Esri Portal for ArcGIS6.1CNA v3.10.3%2026-08-21Fix
CVE-2026-69235Stored cross-site scripting issue in Esri Portal for ArcGIS6.1CNA v3.10.3%2026-08-21Fix
CVE-2026-69234Reflected cross-site scripting vulnerability in Esri Portal for ArcGIS6.1CNA v3.10.3%2026-08-21Fix
CVE-2026-69233Stored cross-site scripting issue in Esri Portal for ArcGIS5.5CNA v3.10.3%2026-08-21Fix
CVE-2026-69232Stored cross-site scripting issue in Esri Portal for ArcGIS5.5CNA v3.10.3%2026-08-21Fix
CVE-2026-69231Stored cross-site scripting issue in Esri Portal for ArcGIS5.5CNA v3.10.3%2026-08-21Fix
CVE-2026-69230Stored cross-site scripting issue in Esri Portal for ArcGIS5.5CNA v3.10.2%2026-08-21Fix
CVE-2026-69229HTML injection vulnerability in Esri Portal for ArcGIS5.4CNA v3.10.3%2026-08-21Fix
CVE-2026-69228Missing authentication vulnerability in Esri Portal for ArcGIS5.3CNA v3.10.5%2026-08-21Fix
CVE-2026-69225Information disclosure vulnerability in Esri Portal for ArcGIS5.9CNA v3.10.5%2026-08-21Fix
CVE-2026-69224Information disclosure vulnerability in Esri Portal for ArcGIS5.9CNA v3.10.5%2026-08-21Fix
CVE-2026-68745Apache CloudStack: SAML2 signature validation Silently Skipped for Cert-less IdP8.1CISA ADP v3.10.2%2026-08-21Fix
CVE-2026-68508Hydra: Hydra.utils.instantiate with untrusted config can lead to code execution7.8CNA v3.10.5%2026-08-21Fix
CVE-2026-67362Joomla extension j2commerce.com open redirect in cart controller in J2Store5.1CNA v4.00.5%2026-08-21
CVE-2026-67361J2Commerce J2Store file upload endpoint unrestricted file upload6.9CNA v4.00.2%2026-08-21
CVE-2026-67360J2Commerce J2Store order_id parameter insecure direct object reference6.3CNA v4.00.4%2026-08-21
CVE-2026-67359Joomla extension j2commerce.com Order content disclosure J2Store8.7CNA v4.00.4%2026-08-21
CVE-2026-67358Joomla extension j2commerce.com Download quota manipulation in J2Store5.3CNA v4.00.2%2026-08-21Exploit code
CVE-2026-66797Apache CloudStack: Unauthorised comment creation and disclosure5.4CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-66722Apache CloudStack: ProjectRole and ProjectRolePermission authorization issue7.2CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-66721Apache CloudStack: Authorization issue with listHostTags for domain admins2.7CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-65645Rocket.Chat improper input validation4.3CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-65644Rocket.Chat cross-site scripting7.5CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-65613Apache CloudStack: Webhook Deliveries Incorrect Access4.3CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-64679Atlantis Workspace Handling has path traversal that allows Out-of-Bounds Directory Deletion/Creation8.1CNA v3.10.8%2026-08-21Fix
CVE-2026-63466Unleash feature event formatter improper output encoding4.1CNA v3.10.3%2026-08-21Fix
CVE-2026-63462Unleash: Unauthenticated single-request DoS via OpenAPI validation error formatter7.5CNA v3.10.7%2026-08-21Fix
CVE-2026-63421Keystone: `graphql.maxTake` bypass with negative `take`7.5CNA v3.10.7%2026-08-21Fix
CVE-2026-63343Incus instance metadata API vulnerability9.9CNA v3.10.5%2026-08-21Fix
CVE-2026-63135YOURLS: Stored XSS in referrer statistics chart via crafted Referer header8.2CNA v3.10.4%2026-08-21Fix
CVE-2026-63125Incus vulnerable to root RCE via image backup.yaml symlink9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-63046Apache InLong: Agent Installer command injection to RCE via default credentials8.8CISA ADP v3.10.7%2026-08-21Fix
CVE-2026-63004Unleash addon webhook server-side request forgery5.5CNA v3.10.4%2026-08-21Fix
CVE-2026-62960Git for Windows bundle URI fetch information disclosure7.4CNA v3.10.5%2026-08-21Fix
CVE-2026-62941Incus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge9.9CNA v3.10.4%2026-08-21Fix
CVE-2026-62940Incus has a project restriction bypass via instance migration config override9.9CNA v3.10.4%2026-08-21Fix
CVE-2026-62867Incus storage volume creation options argument injection9.9CNA v3.10.5%2026-08-21Fix
CVE-2026-62677Omnigent agent bundle workspace path path traversal8.8CNA v3.10.6%2026-08-21Fix
CVE-2026-62676Omnigent Guardrail policy bypass: Shell-command parser fails open in policies/builtins/_shell.py7.1CNA v3.10.4%2026-08-21Fix
CVE-2026-62675Omnigent: Uploaded Agent Bundle allows Authenticated Runner RCE via Python Callable tools8.8CNA v3.10.7%2026-08-21Fix
CVE-2026-62674Omnigent: Shared Agent Bundle Overwrite leads to Authenticated Runner RCE9.0CNA v3.10.5%2026-08-21Fix
CVE-2026-62440Apache CloudStack: Improper access control in Kubernetes Service (CKS) cluster manipulation9.1CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-62316Microsoft UFO: DNS Rebinding → Unauthenticated File Read / command execution8.8CNA v3.10.5%2026-08-21Fix
CVE-2026-62313Incus container privilege isolation restriction incorrect authorization4.3CNA v3.10.4%2026-08-21Fix
CVE-2026-62283Nezha Monitoring terminal and file manager WebSocket streams insecure direct object reference9.9CNA v3.10.6%2026-08-21Fix
CVE-2026-61824Defuddle: XSS via unescaped attribute interpolation in site extractors8.2CNA v3.10.4%2026-08-21Fix
CVE-2026-61539xorbitsai inference xinference: Remote code execution via unsafe `eval` in Llama3 tool-call parsing10.0CNA v3.11.2%2026-08-21Fix
CVE-2026-61422Apache CloudStack: Authenticated pre-validation SSRF in registerTemplate4.3CISA ADP v3.10.4%2026-08-21Fix
CVE-2026-61400Apache CloudStack: Get and Run Diagnostics command injection8.8CISA ADP v3.12.9%2026-08-21Fix
CVE-2026-61399Apache CloudStack: Cross-site scripting (XSS) vulnerability in Lock User function in UI4.8CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-61398Apache CloudStack: Cross-site scripting vulnerability in Instance Reset Password function in UI9.1CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-61397Apache CloudStack: OAuth2 Token Cross-Request leak7.5CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-59989Phalcon Volt compiler `join` filter compile-time PHP code injection (SSTI lead to RCE)9.2CNA v4.00.5%2026-08-21Fix
CVE-2026-59799Apache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable Flow8.8CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-59780Apache CloudStack: LDAP provider configuration disclosure7.5CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-59657Apache CloudStack: Sensitive information disclosure via cleartext storage in AsyncJob7.5CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-59655Apache CloudStack: Unauthenticated OAuth provider client-secret disclosure7.5CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-59654Apache CloudStack: DoS caused by database connections leak6.8CNA v4.00.6%2026-08-21Fix
CVE-2026-59323Micrometer Tracing Brave Bridge W3C Baggage propagation DoS5.3CNA v3.10.4%2026-08-21
CVE-2026-59318VMware Spring AI tool calling manager privilege escalation6.5CNA v3.10.3%2026-08-21Fix
CVE-2026-59308Spring AI Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation4.2CNA v3.10.2%2026-08-21Fix
CVE-2026-59296Micrometer StatsD and Logging meter registries line-protocol and log injection5.9CNA v3.10.3%2026-08-21Fix
CVE-2026-59279Spring AI unbounded persistent session allocation via repeated initialize requests7.5CNA v3.10.5%2026-08-21Fix
CVE-2026-59085Apache CloudStack: Server-side request forgery (SSRF) vulnerability in webhook module9.1CISA ADP v3.10.6%2026-08-21Fix
CVE-2026-55850Element Web homepage renderer vulnerability5.3CNA v4.00.5%2026-08-21Fix
CVE-2026-55622Incus has a project restriction bypass in instance copy across projects7.7CNA v3.10.3%2026-08-21Fix
CVE-2026-55621Incus has a project restriction bypass for custom volume copy across projects7.7CNA v3.10.3%2026-08-21Fix
CVE-2026-55241Checkmate: Pre-auth denial of service via file upload on Registration7.5CNA v3.10.6%2026-08-21Fix
CVE-2026-55185Miniflux 2: Open redirect Bypass5.1CNA v4.00.6%2026-08-21Fix
CVE-2026-55168Runtipi: Authenticated arbitrary file write via backup restore symlink planting6.5CNA v3.10.6%2026-08-21Fix
CVE-2026-54789mod_auth_openidc has out-of-bounds read and write in state cookie parsing7.5CNA v3.10.5%2026-08-21Fix
CVE-2026-54682DiscordChatExporter: Stored XSS in HTML export when markdown formatting is disabled8.2CNA v3.10.2%2026-08-21Fix
CVE-2026-54681DiscordChatExporter: HTML attribute injection via unescaped emoji name in HTML export4.1CNA v3.10.2%2026-08-21Fix
CVE-2026-54457TensorZero: Arbitrary file read and SSRF in TensorZero Gateway's internal object storage endpoint7.7CNA v3.10.4%2026-08-21Fix
CVE-2026-54134OctoPrint: File exfiltration possible via query parameters on upload endpoints7.0CNA v4.00.3%2026-08-21Fix
CVE-2026-54073VeraCrypt: Hidden volume quick format weakens plausible deniability4.6CNA v4.00.1%2026-08-21Fix
CVE-2026-54071BabelDOC: Arbitrary code execution via CMap Pickle deserialization in BabelDOC/pdfminer/cmapdb.py7.8CNA v3.10.4%2026-08-21Fix
CVE-2026-53762VeraCryp: WolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count6.2CNA v3.10.1%2026-08-21Fix
CVE-2026-53656FiftyOne App server uses wildcard CORS, enabling cross-origin reads of local server data6.3CNA v3.10.1%2026-08-21Fix
CVE-2026-53572KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping5.9CNA v3.10.4%2026-08-21Fix
CVE-2026-53541OliveTin has Unvalidated `ot_`-prefixed arguments that Bypass Input Filtering4.3CNA v3.10.4%2026-08-21Fix
CVE-2026-53531erweixin RaTeX ratex-parser has unbounded parser recursion that leads to stack overflow6.9CNA v4.00.4%2026-08-21Fix
CVE-2026-53530erweixin RaTeX ratex-parser panics on `\verb` with a multibyte delimiter (UTF-8 byte-boundary slice)8.7CNA v4.00.4%2026-08-21Fix
CVE-2026-53529LeafWiki vulnerable to stored XSS4.8CNA v4.00.4%2026-08-21Fix
CVE-2026-53528perber leafwiki FileWiki has path traversal in RenameAsset via unsanitized oldFilename parameter8.8CNA v3.10.5%2026-08-21Fix
CVE-2026-53527LeafWiki vulnerable to privilege escalation via User Self-Service Update8.8CNA v3.10.4%2026-08-21Fix
CVE-2026-53525WeeChat has Non-Constant-Time Password Hash Comparison in Relay Authentication7.4CNA v3.10.4%2026-08-21Fix
CVE-2026-53524WeeChat has a decompression bomb in Relay WebSocket (DoS)6.5CNA v3.10.5%2026-08-21Fix
CVE-2026-53509@aborruso/ckan-mcp-server: SSRF5.7CNA v3.10.4%2026-08-21Fix
CVE-2026-53499FORT-validator vulnerable to RRDP Shared Snapshot cache poisoning7.2CNA v4.00.2%2026-08-21Fix
CVE-2026-53497CrossWatch: Unauthenticated /API/app-auth/status endpoint leaks active session metadata5.3CNA v3.10.4%2026-08-21Fix
CVE-2026-53487Kite has an authenticated cluster RBAC bypass in /API/v1/overview4.3CNA v3.10.3%2026-08-21Fix
CVE-2026-53468Typemill has Stored HTML attribute injection in Metadata fields4.6CNA v3.10.2%2026-08-21Fix
CVE-2026-50538LibVNCServer libvncclient Tight decoder has an attacker-controlled heap out-of-bounds write8.8CNA v3.10.4%2026-08-21Fix
CVE-2026-50290@asymmetric-effort/specifyjs: CSS expression sanitization is bypassable in renderToString5.3CNA v4.00.5%2026-08-21Fix
CVE-2026-50288@asymmetric-effort/specifyjs: URL parse failure silently allows request8.7CNA v4.00.5%2026-08-21Fix
CVE-2026-50278iccDEV: CIccEmbedIO::Read8 size_t underflow6.5CNA v3.10.5%2026-08-21Fix
CVE-2026-50222Apache CloudStack: Improper access control in Userdata reference APIs7.5CISA ADP v3.10.5%2026-08-21Fix
CVE-2026-50112Apache CloudStack: RCE and SSRF in direct download, metalink and NFS templates8.8CISA ADP v3.10.7%2026-08-21Fix
CVE-2026-49849xShop file attachment module unrestricted file upload9.1CNA v3.11.0%2026-08-21
CVE-2026-49360Recce server has unauthenticated SQL execution that allows local file read/write through DuckDB7.8CNA v4.01.1%2026-08-21Fix
CVE-2026-49114ONNX symlink-following and path-traversal arbitrary file write6.8CNA v4.00.2%2026-08-21Fix
CVE-2026-48769Incus has an arbitrary file write on its client due to trusted image hash9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-48756Incus: CreateCustomVolumeFromBackup nil-pointer dereference on volume_snapshots[*].expires_at2.1CNA v4.00.4%2026-08-21Fix
CVE-2026-48755Incus has an argument injection in backup compression algorithm leading to AFW and ACE9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-48754Incus backup volume import null pointer dereference2.1CNA v4.00.4%2026-08-21Fix
CVE-2026-48753Incus has an arbitrary file write via path traversal in S3 multipart upload9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-48752Incus has arbitrary file read+write on host via templates/ symlink in malicious image9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-48751Incus has a restricted project bypass leading to arbitrary command execution9.9CNA v3.10.6%2026-08-21Fix
CVE-2026-48750Incus has an arbitrary file write on host via `exec-output` symlink in crafted image9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-48749Incus has an arbitrary file read+write on host via rootfs/ symlink in malicious image9.9CNA v3.10.7%2026-08-21Fix
CVE-2026-48590Element and Attribute Names Injected Verbatim into XML Output in xml_builder2.1CNA v4.00.2%2026-08-21Fix
CVE-2026-48106Basekick Labs Arc cluster replication receiver missing authentication8.3CNA v4.00.2%2026-08-21Fix
CVE-2026-48105Basekick Labs Arc cluster manifest registration path traversal8.3CNA v4.00.2%2026-08-21Fix
CVE-2026-48050Arc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS8.8CNA v4.00.6%2026-08-21Fix
CVE-2026-47827BOSH CLI Powershell injection7.5CNA v3.11.6%2026-08-21
CVE-2026-47753Incus has a Nil-pointer dereference panic via Instance Backup Import (volume omitted)4.4CNA v4.00.2%2026-08-21Fix
CVE-2026-47735Basekick Labs Arc DuckDB query validator path traversal7.1CNA v4.00.4%2026-08-21Fix
CVE-2026-47359Apache CloudStack: OS command injection due to unsanitized mount command8.8CISA ADP v3.12.0%2026-08-21Fix
CVE-2026-47080joshnuss xml_builder XML injection2.1CNA v4.00.2%2026-08-21Fix
CVE-2026-47079Round-trip Corruption via Improper Entity Escaping in xml_builder2.1CNA v4.00.2%2026-08-21Fix
CVE-2026-45271picotls has infinite recursion in the minicrypto ASN.1 decoder5.5CNA v3.10.2%2026-08-21
CVE-2026-45202GPU DDK Silent High-Order CMA memory leak and double free in `_FreeOSPages_Fast`5.5CISA ADP v3.10.1%2026-08-21Fix
CVE-2026-45201Imagination Technologies Graphics DDK page size validation vulnerability7.8CISA ADP v3.10.2%2026-08-21
CVE-2026-45199GPU DDK rgxfw_to_ptr does not reject FW private data pointers7.8CISA ADP v3.10.2%2026-08-21
CVE-2026-45099Terragrunt: Arbitrary file deletion via Malicious Module Manifest6.9CNA v4.00.5%2026-08-21Fix
CVE-2026-44517containers buildah path traversal6.3CNA v3.10.2%2026-08-21Fix
CVE-2026-43980Malla: Stored XSS via Meshtastic node names in multiple frontend pages6.3CNA v3.10.3%2026-08-21
CVE-2026-43679Apple watchOS improper access control2.4CISA ADP v3.10.2%2026-08-21Fix
CVE-2026-41451UAC command injection via User Substitution in parse_artifact.sh8.5CNA v4.01.2%2026-08-21Fix
CVE-2026-41450UAC command injection via command_collector.sh8.5CNA v4.01.1%2026-08-21Fix
CVE-2026-41449UAC command injection via run_command.sh8.5CNA v4.01.0%2026-08-21Fix
CVE-2026-35163OctoPrint: XSS in Suppressed Command Notifications4.6CNA v4.00.2%2026-08-21Fix
CVE-2026-34949Combodo iTop: Unauthenticated user can delete .readonly file6.5CNA v3.10.4%2026-08-21Fix
CVE-2026-34948Combodo iTop: Access control bypass via OQL joins7.7CNA v3.10.4%2026-08-21Fix
CVE-2026-34836Combodo iTop: Improper access control in ajax.render.php and ajax.document.php6.5CNA v3.10.4%2026-08-21Fix
CVE-2026-34741Combodo iTop: Authentication bypass in exec.php allows PHP file execution8.6CNA v3.10.6%2026-08-21Fix
CVE-2026-33333Combodo iTop: Information disclosure in ajax.render.php3.5CNA v3.10.3%2026-08-21Fix
CVE-2026-33240Combodo iTop: Reflected XSS in foreign key search criteria8.8CNA v3.10.5%2026-08-21Fix
CVE-2026-33047Combodo iTop: Object can be locked by a user without write permissions4.3CNA v3.10.4%2026-08-21Fix
CVE-2026-31936Combodo iTop: Unauthorized access to object information via search operation8.8CNA v3.10.5%2026-08-21Fix
CVE-2026-31880Combodo iTop: Reflected XSS in universal search8.0CNA v3.10.4%2026-08-21Fix
CVE-2026-31803Combodo iTop: Reflected XSS in tag admin8.0CNA v3.10.4%2026-08-21Fix
CVE-2026-30890Combodo iTop: Reflected XSS in synchro/synchro_import.php8.0CNA v3.10.4%2026-08-21Fix
CVE-2026-30866Combodo iTop: Insecured access to uploaded images via sniffed URL7.5CNA v3.10.5%2026-08-21Fix
CVE-2026-30865Combodo iTop: Reflected XSS in dashboard save7.1CNA v3.10.3%2026-08-21Fix
CVE-2026-30826Combodo iTop: Reflected XSS in run_query.php8.0CNA v3.10.4%2026-08-21Fix
CVE-2026-30819Combodo iTop: Reflected XSS in /pages/ajax.render.php dashboard_id parameter7.3CNA v3.10.4%2026-08-21Fix
CVE-2026-27875Simplex Incident Manager Clear Test6.9CNA v4.00.1%2026-08-21Fix
CVE-2026-27490Combodo iTop: Weak secret generation for inline image7.5CNA v3.10.4%2026-08-21Fix
CVE-2026-27463Combodo iTop: Version disclosure via login page logo5.3CNA v3.10.3%2026-08-21Fix
CVE-2026-27462Combodo iTop: User enumeration via password reset7.5CNA v3.10.4%2026-08-21Fix
CVE-2026-22681OpenViking SSRF via /API/v1/resources8.3CNA v4.00.3%2026-08-21Fix
CVE-2026-20679Apple macOS out-of-bounds read4.3CISA ADP v3.10.4%2026-08-21Fix
CVE-2026-19848ProfilePress WordPress plugin unauthenticated arbitrary shortcode execution via Display Name6.5CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-19441Unauthenticated API allows Analytics Data Manipulation in IKAS Technology's Rush5.3CNA v3.10.4%2026-08-21
CVE-2026-19435Copy and Delete Posts WordPress plugin authenticated arbitrary post content and password disclosure2.7CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-19085Copy and Delete Posts WordPress plugin Author+ Password-Protected post content disclosure2.7CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-18781Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin unauthenticated RCE8.1CISA ADP v3.10.5%2026-08-21Reported exploitedFix
CVE-2026-18409WPForms Pro WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-08-21Fix
CVE-2026-18356The Limit Login Attempts Reloaded WordPress plugin before 3.3.5 does not compare logins against its username denylist case-insensitively and does not account for the account's email address, allowing an account an administrator intended to block from logging in to authenticate anyway.3.7CNA v3.10.3%2026-08-21Fix
CVE-2026-17559Passster REST API endpoint allowlist incorrect authorization5.3CNA v3.10.4%2026-08-21Fix
CVE-2026-17252TP-Link Systems TL-MR6400 out-of-bounds write7.1CNA v4.00.3%2026-08-21Fix
CVE-2026-17251TP-Link Systems TL-MR6400 unauthenticated denial of service7.1CNA v4.00.5%2026-08-21Fix
CVE-2026-17250TP-Link Systems TL-MR6400 authenticated remote code execution8.5CNA v4.00.3%2026-08-21Fix
CVE-2026-16962Tamara Checkout WordPress plugin unauthenticated order Status manipulation5.3CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-16959Media Library Assistant WordPress plugin Author+ SQL injection via mla_search_connector6.8CISA ADP v3.10.4%2026-08-21Fix
CVE-2026-16650Charitable Square payment webhook insufficient verification of data authenticity5.3CNA v3.10.2%2026-08-21Fix
CVE-2026-16577Dokan WordPress plugin Vendor+ Reverse Withdrawal Ledger manipulation via Client-Supplied Amount2.7CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-16576Dokan WordPress plugin Shop Manager+ arbitrary plugin Installation/Activation via REST API7.2CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-16575Dokan store categories REST endpoint information disclosure5.3CISA ADP v3.10.3%2026-08-21Fix
CVE-2026-16323FuyaWeb ArchitectPanel redirect handling authentication bypass7.5CNA v3.10.6%2026-08-21
CVE-2026-15580PassPortal browser extension: Vault token disclosure via unvalidated postMessage6.9CNA v4.00.2%2026-08-21Fix
CVE-2026-15576Checkmk agent receiver accepts mTLS requests without a client certificate6.9CNA v4.00.5%2026-08-21Fix
CVE-2026-15150myCred PayPal IPN receiver insufficient verification of data authenticity5.3CNA v3.10.2%2026-08-21Fix
CVE-2026-15046LitExtension: Store to WooCommerce Migration WordPress plugin Connector Token takeover via CSRF4.2CNA v3.10.1%2026-08-21Fix
CVE-2026-14601Link Whisper WordPress plugin Editor+ SQL injection via domain parameter6.8CISA ADP v3.10.4%2026-08-21Fix
CVE-2026-14325Drag and Drop Multiple File Upload for Contact Form 7 WordPress plugin stored XSS3.5CISA ADP v3.10.2%2026-08-21Fix
CVE-2026-14208Local privilege escalation via Insecure DLL Permissions in Remote Utilities Host7.3CNA v4.00.1%2026-08-21Fix
CVE-2026-13736NewPath WildApricotPress Add-on member directory REST endpoint vulnerability5.3CISA ADP v3.10.2%2026-08-21
CVE-2026-13176Eventin WordPress plugin Contributor+ server-side request forgery2.7CNA v3.10.3%2026-08-21Fix
CVE-2026-77648OpenStack Glance server-side request forgery2.2CNA v3.10.3%2026-08-20Fix
CVE-2026-77647SPIP var_export function code injection9.8CNA v3.12.3%2026-08-20Reported exploitedMetasploitExploit codeFix
CVE-2026-77646Server side request forgery (SSRF) vulnerability reported in Windchill7.7CNA v4.00.4%2026-08-20Fix
CVE-2026-77645Critical remote code execution (RCE) vulnerability reported in Windchill9.2CNA v4.00.6%2026-08-20Fix
CVE-2026-77644PTC Windchill Risk and Reliability missing authentication9.3CNA v4.00.4%2026-08-20Fix
CVE-2026-77643xapian-core queryparser/termgenerator_internal.cc cross-site scripting4.4CNA v3.10.3%2026-08-20Fix
CVE-2026-77642torproject Tor out-of-bounds write9.3v3.10.2%2026-08-20Fix
CVE-2026-77641torproject Tor unchecked return value8.2v3.10.2%2026-08-20Fix
CVE-2026-77640torproject Tor improper quantity validation5.3v3.10.2%2026-08-20Fix
CVE-2026-77639torproject Tor unprotected alternate channel5.3CNA v3.10.4%2026-08-20Fix
CVE-2026-77638torproject Tor race condition9.0v3.10.2%2026-08-20Fix
CVE-2026-77587torproject Tor improper reference count update7.5v3.10.2%2026-08-20Fix
CVE-2026-77584torproject Tor incorrect synchronization8.2v3.10.2%2026-08-20Fix
CVE-2026-77506Znuny cross-site scripting4.8CNA v3.10.2%2026-08-20Fix
CVE-2026-77176Kata Containers genpolicy CreateContainer validation vulnerability8.1CNA v3.10.5%2026-08-20Fix
CVE-2026-77151lin-snow Ech0 crypto.go MD5Encrypt risky encryption6.3CNA v4.00.4%2026-08-20Fix
CVE-2026-77148Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow9.4CNA v4.00.8%2026-08-20
CVE-2026-77118Out-of-bounds write in GraphicsMagick PCD decoder8.4CNA v4.00.2%2026-08-20Fix
CVE-2026-77113Canonical apport path traversal vulnerability in apport-unpack6.7CNA v4.00.2%2026-08-20Fix
CVE-2026-77085n8n SSRF Protection Bypass via SearXNG tool6.5v3.10.4%2026-08-20Fix
CVE-2026-77084n8n remote code execution via Git Node Configuration Values8.8v3.10.7%2026-08-20Fix
CVE-2026-77083n8n Code Node sandbox escape via Function.prototype pollution5.9v3.10.4%2026-08-20Fix
CVE-2026-77082n8n ReDoS via Filter and Switch Node4.3v3.10.5%2026-08-20Fix
CVE-2026-77081n8n Allowed-Domains Bypass via GraphQL Node7.1v3.10.4%2026-08-20Fix
CVE-2026-77080n8n arbitrary file read and Write via Snowflake8.8v3.10.6%2026-08-20Fix
CVE-2026-77079n8n authorization bypass via Custom Role Deletion8.8v3.10.5%2026-08-20Fix
CVE-2026-77077n8n remote code execution via EventEmitter prototype pollution7.6v3.10.6%2026-08-20Fix
CVE-2026-77076n8n credential leak via GraphQL Node Error6.5NVD v3.10.5%2026-08-20Fix
CVE-2026-77075n8n Expression injection via Resource Locator7.3v3.10.5%2026-08-20Fix
CVE-2026-77074n8n SSRF via Edit Image Node6.5v3.10.4%2026-08-20Fix
CVE-2026-77073n8n Cross-Project Credential Access via MCP4.3v3.10.3%2026-08-20Fix
CVE-2026-77072n8n stored XSS via Form Completion page7.6v3.10.3%2026-08-20Fix
CVE-2026-77071n8n PostgREST Filter injection via Supabase9.8v3.10.6%2026-08-20Fix
CVE-2026-77070n8n NoSQL injection via MongoDB Node9.8v3.10.5%2026-08-20Fix
CVE-2026-77069n8n SSRF Protection Bypass via OAuth24.3v3.10.3%2026-08-20Fix
CVE-2026-77068n8n remote code execution via path traversal8.8v3.10.9%2026-08-20Fix
CVE-2026-77067Omnivore Stored server-side request forgery via the setWebhook Mutation5.3CNA v4.00.3%2026-08-20
CVE-2026-77066Omnivore server-side request forgery via the scanFeeds GraphQL Query5.3CNA v4.00.3%2026-08-20
CVE-2026-77036elunez eladmin GenConfigController improper authorization5.3CNA v4.00.4%2026-08-20
CVE-2026-77031Tenda CH22 formcreateFileName command injection5.3CNA v4.02.7%2026-08-20
CVE-2026-77026Joomla extension tassos.gr Client-controlled validation bypass in Convert Forms extension6.9CNA v4.00.5%2026-08-20
CVE-2026-77025itsourcecode Hospital Management System viewappointmentpending.php SQL injection5.3CNA v4.00.3%2026-08-20
CVE-2026-77022Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow9.4CNA v4.00.8%2026-08-20
CVE-2026-77020CodeAstro Apartment Visitor Management System password-recovery.php SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-77019CodeAstro Apartment Visitor Management System forgotpw.php SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-77014libsoup HTTP range header parser vulnerability5.3CNA v3.10.2%2026-08-20Fix
CVE-2026-77004Comfast CF-N1-S mbox-config sprintf command injection5.3CNA v4.01.8%2026-08-20
CVE-2026-76999SourceCodester CET Automated Grading System with AI Predictive Analytics improper authorization5.3CNA v4.00.3%2026-08-20
CVE-2026-76998SourceCodester Simple Online Food Ordering System ajax.php delete_category SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-76997SourceCodester Simple Online Food Ordering System ajax.php save_category SQL injection5.3CNA v4.00.3%2026-08-20
CVE-2026-76996SourceCodester Simple Online Food Ordering System view_order.php SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-76995SourceCodester Simple Online Food Ordering System ajax.php save_menu unrestricted upload5.1CNA v4.00.4%2026-08-20
CVE-2026-76993GreyDGL PentestGPT Web-Page Crawling injection2.3CNA v4.00.4%2026-08-20
CVE-2026-76991itsourcecode Hospital Management System viewappointmentapproved.php SQL injection5.3CNA v4.00.3%2026-08-20
CVE-2026-76990code-projects Simple Inventory System delete.php SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-76989liftoff-sr CIPster TCP Encapsulation Receive Path encap.cc out-of-bounds6.9CNA v4.00.7%2026-08-20
CVE-2026-76988liftoff-sr CIPster ForwardOpen cipconnectionmanager.cc forward_open out-of-bounds6.9CNA v4.00.7%2026-08-20
CVE-2026-76987liftoff-sr CIPster Generic Attribute Logic ciptypes.h SetAttrData memory corruption6.9CNA v4.00.5%2026-08-20
CVE-2026-76957libexpat use-after-free7.8v3.10.1%2026-08-20Fix
CVE-2026-76956libexpat insufficient entropy7.5v3.10.3%2026-08-20Fix
CVE-2026-76833@cgauge/yaml npm Package arbitrary code execution via eval YAML Tag8.4CNA v4.00.2%2026-08-20
CVE-2026-76800DeDeCMS select_media_post.php unrestricted upload5.3CNA v4.00.3%2026-08-20
CVE-2026-76799code-projects Login Registration System SQL database backup handler vulnerability6.9CNA v4.00.5%2026-08-20
CVE-2026-76795AeternaLabsHQ PullMD REST API endpoint API server-side request forgery6.9CNA v4.00.6%2026-08-20Fix
CVE-2026-76785amirsanni Mini-Inventory-and-Sales-Management-System Transaction.php getAll SQL injection5.3CNA v4.00.3%2026-08-20
CVE-2026-76783DeDeCMS advancedsearch.php SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-76764code-projects Employee Management System Admin Login endpoint aprocess.php SQL injection6.9CNA v4.00.4%2026-08-20
CVE-2026-76641libexpat expat out-of-bounds read via dtdCopy8.7CNA v4.00.4%2026-08-20Fix
CVE-2026-76635baserCMS SQL injection and code injection via BcDatabaseService.php8.6CNA v4.00.5%2026-08-20Fix
CVE-2026-76634WeGIA insecure direct object reference via profile_funcionario.php7.1CNA v4.00.4%2026-08-20Fix
CVE-2026-76633WeGIA authorization bypass Password Change via alterarSenha8.6CNA v4.00.4%2026-08-20Fix
CVE-2026-76610Joomla extension yootheme.com Unauthenticated tag modifications in Zoo6.9CNA v4.00.2%2026-08-20
CVE-2026-76569Joomla extension phoca.cz reflected XSS via the search GET parameter in Phoca Download5.3CNA v4.00.4%2026-08-20Exploit code
CVE-2026-76565Joomla extension phoca.cz reflected XSS via price_from and price_to filter parameters in Phoca Cart5.3CNA v4.00.4%2026-08-20Exploit code
CVE-2026-76564Joomla extension phoca.cz stored XSS via User-Agent header in Admin Order view in Phoca Cart8.6CNA v4.00.4%2026-08-20Exploit code
CVE-2026-76023Google Chrome Linux Toolkit Theming improper resource control8.8CISA ADP v3.10.5%2026-08-20Fix
CVE-2026-76022Google Chrome Network buffer overflow8.8CISA ADP v3.10.5%2026-08-20Fix
CVE-2026-76021Google Chrome DOM use-after-free8.8CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-76020Google Chrome V8 race condition7.5CISA ADP v3.10.3%2026-08-20Fix
CVE-2026-76019Google Chrome Workers incorrect authorization8.1CISA ADP v3.10.3%2026-08-20Fix
CVE-2026-76018Google Chrome execution with unnecessary privileges8.8CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-76017Google Chrome Chromoting use-after-free8.8CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-75963Events Made Easy WordPress plugin local file inclusion7.5CNA v3.10.9%2026-08-20Fix
CVE-2026-75948Joomla extension icagenda.com authenticated stored XSS in iCagenda to8.6CNA v4.00.4%2026-08-20
CVE-2026-75910AWS Athena Federated Query Clickhouse Connector deployment template incorrect privilege assignment7.1CNA v4.00.5%2026-08-20Fix
CVE-2026-75860JSON Options WordPress plugin unauthenticated arbitrary options update9.8CISA ADP v3.10.5%2026-08-20
CVE-2026-75628Punk::OAuth2 post-login redirect check open redirect5.7CISA ADP v3.10.5%2026-08-20Fix
CVE-2026-75526django-cms django CMS: Stored XSS in edit-mode plugin exception rendering4.4CNA v3.10.3%2026-08-20Fix
CVE-2026-75514BunkerWeb: RDNS bypass via missing forward-confirmation (FCrDNS) in blacklist, greylist, and antibot5.9CNA v3.10.6%2026-08-20Fix
CVE-2026-75484mtrudel bandit CRLF injection6.9CNA v4.00.7%2026-08-20Fix
CVE-2026-75140jhy soup jsoup uncontrolled resource consumption in XmlTreeBuilder8.7CNA v4.00.5%2026-08-20Fix
CVE-2026-74992Kirki WordPress plugin Editor+ stored XSS via Font Zip upload6.8CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-74836HTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit8.7CNA v4.00.7%2026-08-20Fix
CVE-2026-74021Chaplin WordPress theme broken access control7.5CNA v3.10.4%2026-08-20Fix
CVE-2026-74020Koji WordPress theme broken access control7.5CNA v3.10.4%2026-08-20Fix
CVE-2026-74019EPROLO Dropshipping WordPress plugin broken access control7.1CNA v3.10.3%2026-08-20
CVE-2026-74018Warehouse Cargo WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-08-20
CVE-2026-74016Smart Cleaning WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-08-20
CVE-2026-74014IT Residence WordPress theme arbitrary file upload9.9CNA v3.10.5%2026-08-20
CVE-2026-74013eShipper Commerce WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-20
CVE-2026-74011InfiniteWP Client WordPress plugin SQL injection7.6CNA v3.10.4%2026-08-20Fix
CVE-2026-74001User Registration and Membership Pro WordPress plugin account takeover9.8CNA v3.10.6%2026-08-20Fix
CVE-2026-73998WP w3all phpBB WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-20Fix
CVE-2026-73993FundEngine WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-20Fix
CVE-2026-73992Query Wrangler WordPress plugin remote code execution (RCE)9.9CNA v3.10.8%2026-08-20Fix
CVE-2026-73542SEIKO EPSON Multiple SEIKO EPSON printers and scanners man-in-the-middle6.3CNA v4.00.2%2026-08-20
CVE-2026-73402WP BASE Booking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-20Fix
CVE-2026-73259Mongoose: Reflected XSS via decoded URI in directory listing render5.4CNA v3.10.4%2026-08-20Fix
CVE-2026-73258Mongoose: Multipart boundary/header scan logic error in mg_http_next_multipart6.5CNA v3.10.5%2026-08-20Fix
CVE-2026-73257Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling9.1CNA v3.10.7%2026-08-20Fix
CVE-2026-73256Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE9.1CNA v3.10.4%2026-08-20Fix
CVE-2026-73255Mongoose: Path traversal in SSI #include directives enables arbitrary file read6.5CNA v3.10.7%2026-08-20Fix
CVE-2026-73254Mongoose: Stored XSS via unescaped filenames in directory listing5.4CNA v3.10.3%2026-08-20Fix
CVE-2026-73253Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching9.1CNA v4.00.3%2026-08-20Fix
CVE-2026-73251Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification9.3CNA v4.00.2%2026-08-20Fix
CVE-2026-73220CVAT: Stored XSS via annotation guides in audio tasks8.5CNA v4.00.5%2026-08-20Fix
CVE-2026-73199Red Hat Enterprise Linux FreeIPA enrollment plugin null pointer dereference6.5CNA v3.10.5%2026-08-20
CVE-2026-73198Ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` via unbounded request body read7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-73197Ipa: FreeIPA: Unauthenticated DoS in `/ipa/migration/migration.py` via unbounded request body read7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-73196Ipa: FreeIPA: Authenticated DoS in `otptoken-add` via unbounded otp key decoding/re-encoding4.3CNA v3.10.4%2026-08-20
CVE-2026-73137Red Hat Advanced Cluster Management for Kubernetes information disclosure7.7CNA v3.10.5%2026-08-20Fix
CVE-2026-73040Dockge path traversal8.7CNA v4.00.9%2026-08-20
CVE-2026-72861Appwrite Templates GitHub issue bot webhook handler improper signature verification6.9CNA v4.00.3%2026-08-20
CVE-2026-728609router server-side request forgery6.3CNA v4.00.4%2026-08-20
CVE-2026-72854msgpack-c unpacker buffer expansion integer overflow5.8CNA v4.00.2%2026-08-20Fix
CVE-2026-72852darknet integer overflow in Convolutional Layer Buffer Sizing leads to heap buffer overflow8.5CNA v4.00.2%2026-08-20
CVE-2026-72848langchain-community SitemapLoader server-side request forgery7.7CNA v4.00.6%2026-08-20Fix
CVE-2026-72847broot Terminal escape sequence injection via Unsanitized file and Directory Names in the Tree view2.4CNA v4.00.1%2026-08-20Fix
CVE-2026-72846Lightdash Scheduled Delivery Webhook URLs are not Validated, allowing server-side request forgery5.3CNA v4.00.3%2026-08-20Fix
CVE-2026-72844leanprover lean4 Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections6.8CNA v4.00.2%2026-08-20Exploit codeFix
CVE-2026-72843EverShop missing authorization on PATCH /API/customers/:id allows Unauthenticated account takeover9.3CNA v4.00.8%2026-08-20Fix
CVE-2026-72818NLTK TweetTokenizer URL Pattern Backtracks Catastrophically on Naked-Domain-Like Input8.7CNA v4.00.7%2026-08-20Fix
CVE-2026-71492Banks prompt registry path traversal6.0CNA v4.00.5%2026-08-20Fix
CVE-2026-71485Centrifugal Labs Centrifugo header forwarding vulnerability9.1CNA v3.10.6%2026-08-20Fix
CVE-2026-71428unstructured URL-based partitioning server-side request forgery9.3CNA v3.10.4%2026-08-20Fix
CVE-2026-71368Thinkingreed F-RevoCRM cross-site scripting5.1CNA v4.00.3%2026-08-20
CVE-2026-70654libvips PPM image loader out-of-bounds write5.8CNA v4.00.1%2026-08-20Fix
CVE-2026-70653libvips Radiance RLE decoder vulnerability4.8CNA v4.00.2%2026-08-20Fix
CVE-2026-70652libvips uhdrsave.c vulnerability2.0CNA v4.00.1%2026-08-20Fix
CVE-2026-70651libvips ImageMagick TIFF loader integer overflow6.9CNA v4.00.2%2026-08-20Fix
CVE-2026-70383Arbitrary file overwrite vulnerability in DigiDoc4 client8.4CNA v4.00.2%2026-08-20Fix
CVE-2026-70105Microsoft Word information disclosure6.5CNA v3.11.0%2026-08-20Fix
CVE-2026-69855Microsoft Copilot in Azure information disclosure7.7CNA v3.10.8%2026-08-20Fix
CVE-2026-69851Microsoft Entra ID elevation of privilege9.9CNA v3.10.8%2026-08-20Fix
CVE-2026-69836Microsoft Entra ID remote code execution10.0CNA v3.11.5%2026-08-20Exploit codeFix
CVE-2026-69558Microsoft Partner Center information disclosure8.6CNA v3.11.0%2026-08-20Fix
CVE-2026-69555Microsoft Azure ARC elevation of privilege10.0CNA v3.10.8%2026-08-20Fix
CVE-2026-69543Microsoft Azure Virtual Machines elevation of privilege8.5CNA v3.10.6%2026-08-20Fix
CVE-2026-69519Microsoft Azure Stack HCI information disclosure8.6CNA v3.11.0%2026-08-20Fix
CVE-2026-69419Microsoft Azure Data Manager for Energy remote code execution8.5CNA v3.10.7%2026-08-20Fix
CVE-2026-69400Microsoft Azure Logic Apps elevation of privilege9.6CNA v3.10.9%2026-08-20Fix
CVE-2026-69242libvips TIFF loader heap-based buffer overflow8.4CNA v4.00.3%2026-08-20Fix
CVE-2026-69183Monkeytype: Rate-limit and anti-brute-force controls bypassable7.5CNA v3.10.5%2026-08-20
CVE-2026-68921DiceBear: SVG injection4.7CNA v3.10.3%2026-08-20Fix
CVE-2026-68789Microsoft Azure SQL Database elevation of privilege9.9CNA v3.11.0%2026-08-20Fix
CVE-2026-68782Microsoft Azure SQL Database elevation of privilege9.9CNA v3.11.0%2026-08-20Fix
CVE-2026-68566BookingPress Appointment Booking Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-20Fix
CVE-2026-68564NotificationX Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20
CVE-2026-67567Red Hat Advanced Cluster Management for Kubernetes HelmRelease controller privilege escalation9.9CNA v3.10.6%2026-08-20Fix
CVE-2026-67448Mailpit: WebSocket origin check bypass via percent-encoded path (regression of)6.5CNA v3.10.2%2026-08-20Fix
CVE-2026-67447Mailpit: SMTP DATA line reader buffers over-limit input before size enforcement5.3CNA v3.10.5%2026-08-20Fix
CVE-2026-67446Mailpit: Thumbnail generation decodes unbounded image dimensions before scaling5.3CNA v3.10.5%2026-08-20Fix
CVE-2026-67445Mailpit: SMTP command parser buffers unbounded command lines before syntax rejection5.3CNA v3.10.5%2026-08-20Fix
CVE-2026-66800Microsoft Azure Data Factory information disclosure8.6CNA v3.11.0%2026-08-20Fix
CVE-2026-66788Red Hat Advanced Cluster Management for Kubernetes Lighthouse vulnerability9.9CNA v3.10.7%2026-08-20Fix
CVE-2026-66787Red Hat Advanced Cluster Management for Kubernetes lighthouse DNS spoofing8.7CNA v3.10.3%2026-08-20Fix
CVE-2026-66785Red Hat Advanced Cluster Management for Kubernetes insufficient verification of data authenticity8.7CNA v3.10.2%2026-08-20Fix
CVE-2026-66682Abandoned Cart Pro for WooCommerce WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-20
CVE-2026-66680Locatoraid Store Locator WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-20Fix
CVE-2026-66677Leyka WordPress plugin broken authentication7.6CNA v3.10.4%2026-08-20
CVE-2026-66673Flatastic WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20
CVE-2026-66672Flatastic WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-20
CVE-2026-66649Directory Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-20
CVE-2026-66647Homlisti WordPress theme broken access control6.5CNA v3.10.3%2026-08-20
CVE-2026-66616Form Maker by 10Web WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20
CVE-2026-66615Podlove Podcast Publisher WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66614SEO Plugin by Squirrly SEO WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66612Aora WordPress theme cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66611Paymob for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66609TheGem (Elementor) WordPress theme SQL injection9.3CNA v3.10.4%2026-08-20Fix
CVE-2026-66607Advance Product Search WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66606SmartSMTP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66605Swatchly WooCommerce Variation Swatches for Products WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66604GeoDirectory WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66601Media LIbrary Assistant WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-20Fix
CVE-2026-66600Media LIbrary Assistant WordPress plugin arbitrary file upload9.1CNA v3.10.5%2026-08-20Fix
CVE-2026-66598B2BKing Premium WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66597wpDataTables WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66595WP Data Access WordPress plugin broken access control5.9CNA v3.10.3%2026-08-20Fix
CVE-2026-66594WordPress Persistent Login plugin SQL injection8.5CNA v3.10.4%2026-08-20Fix
CVE-2026-66593Security and Malware scan by CleanTalk WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-20Fix
CVE-2026-66592rtMedia for WordPress, BuddyPress and bbPress plugin SQL injection9.3CNA v3.10.4%2026-08-20Fix
CVE-2026-66590Tagembed WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66586WP Cafe Pro WordPress plugin local file inclusion6.6CNA v3.10.4%2026-08-20Fix
CVE-2026-66583Forminator WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-20Fix
CVE-2026-66582TranslatePress WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Reported exploitedFix
CVE-2026-66581JetEngine WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-20Fix
CVE-2026-66309Microsoft Azure SQL Database elevation of privilege9.1CNA v3.10.9%2026-08-20Fix
CVE-2026-66002Frappe: User Enumeration via PDDR6.9CNA v4.00.8%2026-08-20Fix
CVE-2026-66001Frappe: Improper authorization in OAuth2 Consent endpoint8.5CNA v4.00.3%2026-08-20Fix
CVE-2026-65842Plate: SSRF with response disclosure in DOCX image embedding8.2CNA v3.10.5%2026-08-20Fix
CVE-2026-65816Microsoft Azure Arc elevation of privilege10.0CNA v3.11.0%2026-08-20Fix
CVE-2026-65801Microsoft Exchange Online elevation of privilege10.0CNA v3.10.9%2026-08-20Fix
CVE-2026-65770Microsoft Azure Managed Instance for Apache Cassandra remote code execution10.0CNA v3.11.1%2026-08-20Fix
CVE-2026-64972Reflected XSS in ATutor4.8CNA v4.00.4%2026-08-20
CVE-2026-64971Reflected XSS in ATutor4.8CNA v4.00.5%2026-08-20
CVE-2026-64970Stored XSS in ATutor5.1CNA v4.00.5%2026-08-20
CVE-2026-64969Insecure direct object reference in ATutor5.3CNA v4.00.4%2026-08-20
CVE-2026-64968Server-side request forgery in ATutor5.1CNA v4.00.4%2026-08-20
CVE-2026-64967Path traversal in ATutor6.9CNA v4.00.5%2026-08-20
CVE-2026-64966Path traversal leading to remote code execution in ATutor8.7CNA v4.00.7%2026-08-20
CVE-2026-64965Missing authorization Check in ATutor5.3CNA v4.00.4%2026-08-20
CVE-2026-64964Generation of Predictable Email Confirmation Token in ATutor6.3CNA v4.00.4%2026-08-20
CVE-2026-64963Path traversal in ATutor2.3CNA v4.00.5%2026-08-20
CVE-2026-64962Cross-site request forgery (CSRF) in ATutor5.1CNA v4.00.2%2026-08-20
CVE-2026-64961Authentication bypass in ATutor6.3CNA v4.00.5%2026-08-20
CVE-2026-64960Remote code execution via unrestricted file upload in ATutor8.7CNA v4.00.6%2026-08-20
CVE-2026-64846Nix: Arbitrary file truncation outside the sandbox with recursive-nix experimental feature2.8CNA v3.10.1%2026-08-20Fix
CVE-2026-64777Apple Container path traversal4.3CISA ADP v3.10.3%2026-08-20Fix
CVE-2026-64773Apple Container resource exhaustion7.5CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-63654Frappe: Unauthenticated Workflow approval via confirm_action6.9CNA v4.00.3%2026-08-20
CVE-2026-63509Microsoft Fabric elevation of privilege9.9CNA v3.11.0%2026-08-20Fix
CVE-2026-63495Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames7.5CNA v3.10.6%2026-08-20Fix
CVE-2026-63490Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass7.5CNA v3.10.7%2026-08-20Fix
CVE-2026-63481Hurl: Cookies in Cookies section leak when redirecting to a different host6.9CNA v4.00.7%2026-08-20
CVE-2026-63388Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable8.4CNA v3.10.1%2026-08-20Fix
CVE-2026-63387Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response7.0CNA v3.10.4%2026-08-20Fix
CVE-2026-63385Libevent: HTTP header handling bugs create risk of access control bypass9.2CNA v4.00.6%2026-08-20Fix
CVE-2026-63384Libevent: `evtag_unmarshal_header` decodes a wire `uint32` length into a signed `int` return value8.7CNA v4.00.5%2026-08-20Fix
CVE-2026-63383Libevent: Decode_tag_internal can lead to out-of-bounds read8.7CNA v4.00.5%2026-08-20Fix
CVE-2026-63382libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling9.2CNA v4.00.8%2026-08-20Fix
CVE-2026-63381Libevent: Dangling Pointer in `evbuffer_add_buffer_reference`5.8CNA v4.00.2%2026-08-20Fix
CVE-2026-63380Libevent: Null pointer dereference in `evws_new_session`5.7CNA v4.00.1%2026-08-20Fix
CVE-2026-63379Libevent: HTTP header smuggling6.3CNA v4.00.7%2026-08-20Fix
CVE-2026-63044Apache InLong: Authenticated SSRF via POST /API/node/testConnection5.4CISA ADP v3.10.5%2026-08-20Fix
CVE-2026-63043Apache InLong: Agent path traversal via unvalidated file source path7.5CISA ADP v3.10.8%2026-08-20Fix
CVE-2026-63042Apache InLong: Missing authorization on DataNode management endpoints8.1CISA ADP v3.10.6%2026-08-20Fix
CVE-2026-63040Apache InLong: Missing authorization in StreamSource forceDelete8.1CISA ADP v3.10.6%2026-08-20Fix
CVE-2026-63039Apache InLong: SQL injection9.8CISA ADP v3.10.7%2026-08-20Exploit codeFix
CVE-2026-63038Apache InLong: SQL injection via String Concatenation vulnerability Report9.8CISA ADP v3.10.7%2026-08-20Fix
CVE-2026-63037Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint9.8CISA ADP v3.10.7%2026-08-20Fix
CVE-2026-63016Apache InLong: Ordinary users can create new packages5.3CISA ADP v3.10.6%2026-08-20Fix
CVE-2026-63015Apache InLong: Non-template responsible persons can view template information4.3CISA ADP v3.10.6%2026-08-20Fix
CVE-2026-63003django CMS page duplication missing authorization6.5CNA v3.10.4%2026-08-20Fix
CVE-2026-62945TREK: Cross-trip reservation title disclosure via file links4.3CNA v3.10.3%2026-08-20Fix
CVE-2026-62834Microsoft Azure Data Factory elevation of privilege9.3CNA v3.10.5%2026-08-20Fix
CVE-2026-62315Frappe: Mass assignment via set_value7.1CNA v4.00.5%2026-08-20
CVE-2026-61898Canonical AccountsService language helper scripts command injection7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-61897Canonical AccountsService language helper scripts vulnerability7.8CNA v3.10.1%2026-08-20Fix
CVE-2026-61704link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for7.5CNA v3.10.6%2026-08-20Fix
CVE-2026-61663django CMS render_object_structure vulnerability4.3CNA v3.10.3%2026-08-20Fix
CVE-2026-61625VictoriaMetrics vmrestore: Path traversal via crafted backup part names escapes restore root6.8CNA v3.10.4%2026-08-20Fix
CVE-2026-55894Capstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode6.8CNA v4.00.2%2026-08-20Fix
CVE-2026-55893Capstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode7.3CNA v4.00.2%2026-08-20Fix
CVE-2026-55769CloudNativePG search_path handling privilege escalation9.4CNA v4.00.8%2026-08-20Fix
CVE-2026-55765CloudNativePG role password generation plaintext password storage8.5CNA v3.10.5%2026-08-20Fix
CVE-2026-55642dbx dbx-web authentication middleware missing authentication9.8CNA v3.10.7%2026-08-20Fix
CVE-2026-55586SumatraPDF CHMLib LZX Huffman table decoder out-of-bounds write6.6CNA v3.10.2%2026-08-20
CVE-2026-55558aiosmtplib STARTTLS handshake injection5.9CNA v3.10.4%2026-08-20Fix
CVE-2026-55491BigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name5.4CNA v3.10.3%2026-08-20Fix
CVE-2026-55489BigBlueButton: IDOR on BBB4.9CNA v3.10.3%2026-08-20Fix
CVE-2026-55095OpenProject: Inplace-edit dialog exposes comments from hidden admin-only project custom fields5.3CNA v4.00.4%2026-08-20Fix
CVE-2026-55015Microsoft Remote Help denial of service5.5CNA v3.11.0%2026-08-20Fix
CVE-2026-55013Microsoft Windows Remote Help Defense spoofing7.1CNA v3.10.5%2026-08-20Fix
CVE-2026-54770WebOb: Open redirect in Location header normalization via leading C0 control / space characters6.1CNA v3.10.4%2026-08-20Fix
CVE-2026-54625django-cms django CMS: Page cache ignores plugin-declared Vary headers (disclosure and poisoning)4.8CNA v3.10.2%2026-08-20Fix
CVE-2026-54624django-cms django CMS: Structure endpoint bypasses page-view permission6.5CNA v3.10.4%2026-08-20Fix
CVE-2026-54623django-cms django CMS: Plugin move endpoint allows cyclic reparenting (DoS)7.1CNA v3.10.5%2026-08-20Fix
CVE-2026-54622django-cms django CMS: Clipboard copy IDOR discloses unauthorized plugin content6.5CNA v3.10.4%2026-08-20Fix
CVE-2026-54616NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor7.1CNA v3.10.4%2026-08-20Fix
CVE-2026-54509TREK IDOR: Any authenticated user can read another user's journey share token (full journey leak)6.5CNA v3.10.4%2026-08-20Fix
CVE-2026-54508TREK list import and Maps URL resolution server-side request forgery5.3CNA v4.00.4%2026-08-20Fix
CVE-2026-54505TREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner2.0CNA v4.00.6%2026-08-20Fix
CVE-2026-54449LangBot: Authenticated RCE via MCP Configuration8.8CNA v3.10.7%2026-08-20
CVE-2026-54389Ghidra PDB Parser Uncontrolled Heap Growth DoS via AbstractPdb6.7CNA v4.00.2%2026-08-20Fix
CVE-2026-54136Windmill scripts list_search endpoint incorrect authorization5.1CNA v4.00.5%2026-08-20Fix
CVE-2026-53804OTRS Community Edition OS command injection via PGP Configuration8.6CNA v4.01.5%2026-08-20
CVE-2026-53587libgit2 Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-53586libgit2 HTTP redirect credential handling information disclosure6.5CNA v3.10.5%2026-08-20Fix
CVE-2026-53585libgit2 delta object decompression resource exhaustion5.3CNA v3.10.5%2026-08-20Fix
CVE-2026-53584libgit2 submodule path handling path traversal4.3CNA v3.10.4%2026-08-20Fix
CVE-2026-53583libgit2 OpenSSL certificate SubjectAltName check improper certificate validation6.5CNA v3.10.2%2026-08-20Fix
CVE-2026-53569Frappe: Missing authorization in toggle_like and mark_as_seen5.3CNA v4.00.5%2026-08-20
CVE-2026-53425Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses7.6CNA v4.00.2%2026-08-20
CVE-2026-53424Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions9.1CNA v4.00.6%2026-08-20
CVE-2026-52021code100xDevs 100xdevs CMS mobile search API information disclosure7.5CISA ADP v3.10.5%2026-08-20
CVE-2026-50192Kerberos.io Kerberos Agent Hub upload HTTP client information disclosure6.9CNA v4.00.4%2026-08-20Fix
CVE-2026-50190Shaarli vulnerable to stored XSS8.6CNA v4.00.4%2026-08-20Fix
CVE-2026-49996freedomofpress securedrop-client securedrop-proxy origin limitation can be bypassed with redirects3.7CNA v3.10.3%2026-08-20Fix
CVE-2026-49825lxml `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes8.2CNA v3.10.3%2026-08-20Fix
CVE-2026-49436LinkAce vulnerable to stored XSS via javascript: URI in Bulk Link API7.3CNA v3.10.4%2026-08-20Fix
CVE-2026-49245SFTPGo: Stored XSS via inline parameter on public shares and user file download3.7CNA v3.10.3%2026-08-20Fix
CVE-2026-49244SFTPGo: Path confinement bypass in public browsable share partial ZIP download5.9CNA v3.10.4%2026-08-20Fix
CVE-2026-49217Mailu admin REST API token endpoint missing authentication7.5CNA v3.10.4%2026-08-20Fix
CVE-2026-46682BigBlueButton: Blind SQL injection AUTH (Moderator)8.5CNA v3.10.6%2026-08-20Fix
CVE-2026-46355BigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/API/handleJoinExistingUser7.1CNA v3.10.4%2026-08-20Fix
CVE-2026-44725EMQX: Stale plugins allow grants amplify a compromised admin/API key to remote code execution6.6CNA v3.10.4%2026-08-20Fix
CVE-2026-43798Apple swift-nio-ssh stack-based buffer overflow9.8CISA ADP v3.10.5%2026-08-20Fix
CVE-2026-43678Apple swift-nio resource exhaustion5.3CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-40345RebeccaStevens deepmerge-ts DeepmergeTS has stack exhaustion when merging recursive object graphs8.2CNA v4.00.5%2026-08-20Exploit codeFix
CVE-2026-28164Easy Elementor Addons WordPress plugin cross-site request forgery (CSRF)9.6CNA v3.10.2%2026-08-20Fix
CVE-2026-28163New User Approve WordPress plugin broken access control5.3CNA v3.10.3%2026-08-20Fix
CVE-2026-28150Golo Framework WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-20Fix
CVE-2026-21784HCL IntelliOps Event Management is affected by multiple security vulnerabilities4.8CNA v3.10.2%2026-08-20
CVE-2026-19783IBM AIX and PowerVM VIOS directory read handling out-of-bounds write6.7CNA v3.10.1%2026-08-20Fix
CVE-2026-19755NoSleep Unauthorized disclosure of root-owned files through privileged XPC helper6.9CNA v4.00.1%2026-08-20
CVE-2026-19699GutenKit - Contributor+ Mailchimp Audience data disclosure2.7CISA ADP v3.10.3%2026-08-20Fix
CVE-2026-19697GutenKit WordPress plugin Author+ stored XSS via SVG upload6.8CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-19683TP-Link Systems ER7212PC v2 cleartext transmission of sensitive information6.3CNA v4.00.3%2026-08-20Fix
CVE-2026-19615Admin and Site Enhancements WordPress plugin Author+ stored XSS via SVG upload over XML-RPC6.8CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-19611Red Hat WildFly Elytron password-impl vulnerability7.4CNA v3.10.9%2026-08-20Fix
CVE-2026-19586TP-Link Systems ER7212PC v2 OS command injection9.3CNA v4.05.7%2026-08-20Exploit codeFix
CVE-2026-19449IBM AIX and PowerVM VIOS cmdnim command privilege escalation8.8CNA v3.10.1%2026-08-20Fix
CVE-2026-19448IBM AIX and PowerVM VIOS IPsec ESP decapsulation handler memory corruption6.5CNA v3.10.2%2026-08-20Fix
CVE-2026-19446IBM AIX and PowerVM VIOS RPC service denial of service7.5CNA v3.11.0%2026-08-20Fix
CVE-2026-19442IBM AIX and PowerVM VIOS virtual SCSI initiator driver untrusted pointer dereference8.2CNA v3.10.1%2026-08-20Fix
CVE-2026-19437IBM AIX and PowerVM VIOS buffer overflow8.1CNA v3.10.5%2026-08-20Fix
CVE-2026-18917libvirt NodeGetFreePages RPC handler integer overflow7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-18842IBM AIX and PowerVM VIOS out-of-bounds write8.4CNA v3.10.1%2026-08-20Fix
CVE-2026-18840IBM AIX and PowerVM VIOS untrusted pointer dereference8.2CNA v3.10.1%2026-08-20Fix
CVE-2026-18835IBM AIX and PowerVM VIOS OS command injection9.9CNA v3.10.8%2026-08-20Fix
CVE-2026-18832IBM AIX and PowerVM VIOS out-of-bounds write8.8CNA v3.10.6%2026-08-20Fix
CVE-2026-18828IBM AIX and PowerVM VIOS out-of-bounds write5.4CNA v3.10.4%2026-08-20Fix
CVE-2026-18824IBM AIX and PowerVM VIOS OS command injection8.4CNA v3.10.4%2026-08-20Fix
CVE-2026-18822IBM AIX and PowerVM VIOS resource exhaustion4.4CNA v3.10.1%2026-08-20Fix
CVE-2026-18716IBM AIX and PowerVM VIOS out-of-bounds read7.9CNA v3.10.3%2026-08-20Fix
CVE-2026-18670IBM AIX and PowerVM VIOS integer underflow8.2CNA v3.10.4%2026-08-20Fix
CVE-2026-18482Klarso neo.mjs file-system MCP server command injection9.8CISA ADP v3.11.7%2026-08-20Fix
CVE-2026-18420RCE via prototype pollution in OpenSearch Dashboards8.7CNA v4.00.7%2026-08-20Fix
CVE-2026-18309GIMP APNG File Parsing integer overflow remote code execution7.8CNA v3.00.5%2026-08-20Fix
CVE-2026-18308GIMP TIF File Parsing integer overflow remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18307GIMP TIF File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18306GIMP SGI File Parsing integer overflow remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18305GIMP TIF File Parsing integer overflow remote code execution7.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18304GIMP TIF File Parsing integer overflow remote code execution7.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18303GIMP TIF File Parsing stack-based buffer overflow remote code execution7.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18302GIMP TIF File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18301GIMP PSD File Parsing integer overflow remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18300GIMP HDR File Parsing integer overflow remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18299GStreamer rtpsbcdepay use-after-free remote code execution7.8CNA v3.00.2%2026-08-20Fix
CVE-2026-18298GStreamer PNG File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.2%2026-08-20Fix
CVE-2026-18297GStreamer OGG File Parsing stack-based buffer overflow remote code execution7.8CNA v3.00.2%2026-08-20Fix
CVE-2026-18296GStreamer MRF File Parsing heap-based buffer overflow remote code execution7.8CNA v3.00.2%2026-08-20Fix
CVE-2026-18295GStreamer MRF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2026-08-20Fix
CVE-2026-18294OriginLab Origin Viewer OGW File Parsing memory corruption remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18293OriginLab Origin Viewer OPJ File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18292OriginLab OriginPro OGG File Parsing memory corruption remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18291OriginLab OriginPro OGW File Parsing memory corruption remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18290OriginLab OriginPro OGG File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18289OriginLab OriginPro OPJ File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18288OriginLab OriginPro OPJU File Parsing out-of-bounds write remote code execution7.8CNA v3.00.3%2026-08-20Fix
CVE-2026-18287Aeon load_time_series_segmentation_benchmark code injection remote code execution7.8CNA v3.00.3%2026-08-20
CVE-2026-18286Aeon load_human_activity_segmentation_datasets code injection remote code execution7.8CNA v3.00.3%2026-08-20
CVE-2026-18285Aeon load_rehab_pile_dataset deserialization of untrusted data remote code execution7.8CNA v3.00.5%2026-08-20
CVE-2026-18284Sony XAV-9500ES crash Dump handler command injection local privilege escalation7.8CNA v3.01.0%2026-08-20Fix
CVE-2026-18283Sony XAV-9500ES udev USB Rules authorization bypass2.4CNA v3.00.3%2026-08-20Fix
CVE-2026-18282Sony XAV-9500ES AVRCP_Br_Response_Parser heap-based buffer overflow remote code execution8.0CNA v3.00.5%2026-08-20Fix
CVE-2026-18281Sony XAV-9500ES l2_reassemble_sdu heap-based buffer overflow remote code execution8.0CNA v3.00.5%2026-08-20Fix
CVE-2026-18280Sony XAV-9500ES gpsd buffer overflow arbitrary code execution3.9CNA v3.00.3%2026-08-20Fix
CVE-2026-18279Sony XAV-9500ES RTSP SETUP buffer overflow remote code execution8.8CNA v3.00.7%2026-08-20Fix
CVE-2026-18278Sony XAV-9500ES prh_l2_decode_packet out-of-bounds read information disclosure3.5CNA v3.00.2%2026-08-20Fix
CVE-2026-18274Heimdall Data Database Proxy uploadJar directory traversal remote code execution7.2CNA v3.01.3%2026-08-20
CVE-2026-18273Kenwood DNR1007XR USB incorrect default permissions local privilege escalation6.6CNA v3.00.2%2026-08-20Fix
CVE-2026-18272Kenwood DNR1007XR startUpdateProcess command injection6.8CNA v3.00.9%2026-08-20Fix
CVE-2026-18271Kenwood DNR1007XR vCardParser heap-based buffer overflow code execution6.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18270Kenwood DNR1007XR udhcpd incorrect permission assignment local privilege escalation7.8CNA v3.00.2%2026-08-20Fix
CVE-2026-18269Kenwood DNR1007XR tchdr_bytestream_read out-of-bounds write code execution6.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18268Kenwood DNR1007XR JKGenService command injection local privilege escalation7.0CNA v3.00.8%2026-08-20Fix
CVE-2026-18267Kenwood DNR1007XR firmware update link following code execution6.8CNA v3.00.4%2026-08-20Fix
CVE-2026-18265OSNEXUS QuantaStor missing authentication remote code execution9.8CNA v3.00.7%2026-08-20
CVE-2026-18264NoMachine getstat command injection remote code execution8.8CNA v3.01.2%2026-08-20Fix
CVE-2026-18263Parallels RAS Client RDP Backend Service Exposed Dangerous function local privilege escalation7.8CNA v3.00.2%2026-08-20
CVE-2026-18262Parallels RAS Client RDP Backend Service Exposed Dangerous function local privilege escalation7.8CNA v3.00.2%2026-08-20
CVE-2026-17436IBM AIX and PowerVM VIOS heap-based buffer overflow8.8CNA v3.10.6%2026-08-20Fix
CVE-2026-17425IBM AIX and PowerVM VIOS stack buffer overflow7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17424IBM AIX and PowerVM VIOS path traversal4.8CNA v3.10.3%2026-08-20Fix
CVE-2026-17423IBM AIX and PowerVM VIOS out-of-bounds read7.7CNA v3.10.3%2026-08-20Fix
CVE-2026-17422IBM AIX and PowerVM VIOS out-of-bounds write9.3CNA v3.10.1%2026-08-20Fix
CVE-2026-17195IBM AIX and PowerVM VIOS out-of-bounds write6.5CNA v3.10.1%2026-08-20Fix
CVE-2026-17171IBM AIX and PowerVM VIOS link following7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-17170IBM AIX and PowerVM VIOS resource exhaustion7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17168IBM AIX and PowerVM VIOS stack buffer overflow8.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17165IBM AIX and PowerVM VIOS null pointer dereference7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17163IBM AIX and PowerVM VIOS resource exhaustion7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17160IBM AIX and PowerVM VIOS integer overflow9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17159IBM AIX and PowerVM VIOS integer overflow7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17157IBM AIX and PowerVM VIOS stack buffer overflow9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17153AI Agent by SiteGround WordPress plugin missing authorization authenticated arbitrary Media upload5.3CNA v3.10.5%2026-08-20Fix
CVE-2026-17152IBM AIX and PowerVM VIOS buffer overflow9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17145IBM AIX and PowerVM VIOS privilege escalation9.8CNA v3.10.7%2026-08-20Fix
CVE-2026-17142IBM AIX and PowerVM VIOS improper authentication9.8CNA v3.10.9%2026-08-20Fix
CVE-2026-17141IBM AIX and PowerVM VIOS buffer overflow9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17138IBM AIX and PowerVM VIOS out-of-bounds write8.1CNA v3.10.5%2026-08-20Fix
CVE-2026-17136IBM AIX and PowerVM VIOS format string9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17124IBM AIX and PowerVM VIOS out-of-bounds read7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-17122IBM AIX and PowerVM VIOS out-of-bounds write9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17121IBM AIX and PowerVM VIOS resource exhaustion7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-17120IBM AIX and PowerVM VIOS out-of-bounds write5.3CNA v3.10.4%2026-08-20Fix
CVE-2026-17118IBM AIX and PowerVM VIOS use-after-free9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17060IBM AIX and PowerVM VIOS kernel information disclosure8.1CNA v3.10.4%2026-08-20Fix
CVE-2026-17040IBM AIX and PowerVM VIOS buffer overflow9.8CNA v3.10.8%2026-08-20Fix
CVE-2026-17024IBM AIX and PowerVM VIOS improper certificate validation7.7CNA v3.10.3%2026-08-20Fix
CVE-2026-17009IBM AIX and PowerVM VIOS null pointer dereference4.7CNA v3.10.1%2026-08-20Fix
CVE-2026-17007IBM AIX and PowerVM VIOS out-of-bounds read6.7CNA v3.10.1%2026-08-20Fix
CVE-2026-17006IBM AIX and PowerVM VIOS heap buffer overflow8.3CNA v3.10.4%2026-08-20Fix
CVE-2026-17003IBM AIX and PowerVM VIOS out-of-bounds write7.7CNA v3.10.3%2026-08-20Fix
CVE-2026-17000IBM AIX and PowerVM VIOS improper authentication8.1CNA v3.10.4%2026-08-20Fix
CVE-2026-16997IBM AIX and PowerVM VIOS privilege escalation7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16996IBM AIX and PowerVM VIOS out-of-bounds write8.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16991IBM AIX and PowerVM VIOS privilege escalation7.8CNA v3.10.1%2026-08-20Fix
CVE-2026-16989IBM AIX and PowerVM VIOS link following7.1CNA v3.10.1%2026-08-20Fix
CVE-2026-16980IBM AIX and PowerVM VIOS denial of service6.3CNA v3.10.1%2026-08-20Fix
CVE-2026-16973IBM AIX and PowerVM VIOS out-of-bounds read5.5CNA v3.10.1%2026-08-20Fix
CVE-2026-16972IBM AIX and PowerVM VIOS authentication bypass6.5CNA v3.10.4%2026-08-20Fix
CVE-2026-16964IBM AIX and PowerVM VIOS information disclosure6.5CNA v3.10.3%2026-08-20Fix
CVE-2026-16958IBM AIX and PowerVM VIOS out-of-bounds write6.5CNA v3.10.4%2026-08-20Fix
CVE-2026-16952IBM AIX and PowerVM VIOS resource exhaustion5.5CNA v3.10.1%2026-08-20Fix
CVE-2026-16951IBM AIX and PowerVM VIOS heap-based buffer overflow6.7CNA v3.10.2%2026-08-20Fix
CVE-2026-16946IBM AIX and PowerVM VIOS heap-based buffer overflow7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16945IBM AIX and PowerVM VIOS stack-based buffer overflow7.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16944IBM AIX and PowerVM VIOS stack-based buffer overflow6.7CNA v3.10.1%2026-08-20Fix
CVE-2026-16943IBM AIX and PowerVM VIOS heap-based buffer overflow8.2CNA v3.10.1%2026-08-20Fix
CVE-2026-16937IBM AIX and PowerVM VIOS privilege escalation7.8CNA v3.10.1%2026-08-20Fix
CVE-2026-16936IBM AIX and PowerVM VIOS buffer overflow8.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16935IBM AIX and PowerVM VIOS race condition7.8CNA v3.10.1%2026-08-20Fix
CVE-2026-16934IBM AIX and PowerVM VIOS heap-based buffer overflow8.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16932IBM AIX and PowerVM VIOS ODMDIR environment variable command injection8.8CNA v3.10.2%2026-08-20Fix
CVE-2026-16928IBM AIX and PowerVM VIOS heap-based buffer overflow7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-16927IBM AIX and PowerVM VIOS race condition7.3CNA v3.10.1%2026-08-20Fix
CVE-2026-16926IBM AIX and PowerVM VIOS arbitrary file overwrite9.1CNA v3.10.6%2026-08-20Fix
CVE-2026-16925IBM AIX and PowerVM VIOS improper authorization7.1CNA v3.10.1%2026-08-20Fix
CVE-2026-16924IBM AIX and PowerVM VIOS IPsec decapsulation integer underflow7.5CNA v3.10.5%2026-08-20Fix
CVE-2026-16923IBM AIX and PowerVM VIOS privilege escalation7.0CNA v3.10.1%2026-08-20Fix
CVE-2026-16922IBM AIX and PowerVM VIOS race condition7.0CNA v3.10.1%2026-08-20Fix
CVE-2026-16520Genians Genian NAC information disclosure through data queries8.7CNA v4.00.5%2026-08-20Fix
CVE-2026-15743Catalyst::Plugin::Static::Simple versions for Perl mark responses as publicly cacheable5.7CISA ADP v3.10.3%2026-08-20Fix
CVE-2026-15706Missing authentication for critical function in Management API in Baylan Water Meters's BMS9.8CNA v3.10.6%2026-08-20Fix
CVE-2026-15686Adminer multi_query Incorrect Check of Function Return Value remote code execution7.2CNA v3.00.7%2026-08-20Fix
CVE-2026-15679Hugging Face PyTorch Image Models checkpoint deserialization of untrusted data remote code execution7.8CNA v3.00.5%2026-08-20Fix
CVE-2026-15049Depicter WordPress plugin Editor+ arbitrary file upload via ZIP import7.2CISA ADP v3.10.6%2026-08-20Fix
CVE-2026-14953Frauscher Sensortechnik FDS 102 user enumeration endpoint missing authorization5.3CNA v4.00.3%2026-08-20
CVE-2026-14952Frauscher Sensortechnik FDS 102 file download endpoints missing authentication8.7CNA v4.00.5%2026-08-20
CVE-2026-14951Frauscher Sensortechnik FDS 102 cross-site request forgery8.6CNA v4.00.2%2026-08-20
CVE-2026-14950Frauscher Sensortechnik FDS 102 insufficient session expiration9.2CNA v4.00.6%2026-08-20
CVE-2026-14949Frauscher Sensortechnik FDS 102 user account creation endpoint vulnerability8.5CNA v4.00.4%2026-08-20
CVE-2026-14948Frauscher Sensortechnik FDS 102 error log archive information disclosure8.7CNA v4.00.6%2026-08-20
CVE-2026-14947Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to remote code execution8.6CNA v4.01.5%2026-08-20
CVE-2026-14946Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to remote code execution8.6CNA v4.00.8%2026-08-20
CVE-2026-14163Octopus Deploy Octopus Server sensitive information in log files7.1CNA v4.00.2%2026-08-20Fix
CVE-2026-13405Royal Elementor Addons WordPress plugin Admin+ remote code execution via widget Builder6.6CISA ADP v3.10.4%2026-08-20Fix
CVE-2026-13121Parallels RAS Client RDP Backend Service Exposed Dangerous function local privilege escalation7.8CNA v3.00.2%2026-08-20
CVE-2026-13097Freeipa privilege escalation8.7CNA v3.10.6%2026-08-20KCVFix
CVE-2026-11861FreeIPA: Idm: Ipa: FreeIPA: Obtaining tgs with impersonating cname through trust relationships9.6CNA v3.10.4%2026-08-20KCVFix
CVE-2026-9033TP-Link Systems ER7212PC v2 missing authentication6.0CNA v4.00.3%2026-08-20Fix
CVE-2026-7485Checkmk frozen BI aggregations leak host and service names to unauthorized users2.3CNA v4.00.4%2026-08-20Fix
CVE-2026-2334) Missing Server-Side file Extension Validation in vsDesk9.4CNA v4.00.7%2026-08-20
CVE-2026-76929Out-of-bounds read in Wireshark4.7CNA v3.10.1%2026-08-19Fix
CVE-2026-76928Null pointer dereference in Wireshark7.5CNA v3.10.3%2026-08-19Fix
CVE-2026-76927Null pointer dereference in Wireshark4.7CNA v3.10.2%2026-08-19Fix
CVE-2026-76926Reachable assertion in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76924Out-of-bounds read in Wireshark5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-76923Out-of-bounds read in Wireshark5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-76922Null pointer dereference in Wireshark5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-76921Wireshark CMS protocol dissector crash5.5CNA v3.10.2%2026-08-19Fix
CVE-2026-76920Out-of-bounds write in Wireshark4.7CNA v3.10.1%2026-08-19Fix
CVE-2026-76919Wireshark ESS protocol dissector crash5.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76918Heap-based buffer overflow in Wireshark5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-76917Heap-based buffer overflow in Wireshark5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-76891Expired pointer dereference in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76890Expired pointer dereference in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76889Heap-based buffer overflow in Wireshark4.7CNA v3.10.1%2026-08-19Fix
CVE-2026-76888Heap-based buffer overflow in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76887Heap-based buffer overflow in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76886Heap-based buffer overflow in Wireshark8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76885Buffer over-read in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76884Buffer over-read in Wireshark3.1CNA v3.10.2%2026-08-19Fix
CVE-2026-76883Heap-based buffer overflow in Wireshark4.7CNA v3.10.1%2026-08-19Fix
CVE-2026-76882Out-of-bounds read in Wireshark4.7CNA v3.10.1%2026-08-19Fix
CVE-2026-76881Null pointer dereference in Wireshark4.7CNA v3.10.1%2026-08-19Fix
CVE-2026-76880Out-of-bounds write in Wireshark7.5CNA v3.10.2%2026-08-19Fix
CVE-2026-76879Stack-based buffer overflow in Wireshark7.5CNA v3.10.3%2026-08-19Fix
CVE-2026-76878OpenStack Aodh alarm list API vulnerability8.4CNA v4.00.5%2026-08-19Fix
CVE-2026-76850LMDeploy remote code execution9.3CNA v4.01.3%2026-08-19Fix
CVE-2026-76832Agno PythonTools path traversal via joinpath file_name argument8.5CNA v4.01.3%2026-08-19
CVE-2026-76827Red Hat Advanced Cluster Management for Kubernetes search-indexer vulnerability6.8CNA v3.10.5%2026-08-19Fix
CVE-2026-76762code-projects Assessment Management welcome.php SQL injection6.9CNA v4.00.4%2026-08-19
CVE-2026-76761chenhg5 cc-connect Management API engine.go shellExecCommand os command injection6.9CNA v4.02.1%2026-08-19
CVE-2026-76760chenhg5 cc-connect webhook.go authenticate code injection6.9CNA v4.00.5%2026-08-19
CVE-2026-76647Leantime JSON-RPC API contains a missing authorization8.8CISA ADP v3.10.5%2026-08-19
CVE-2026-76614OpenEMR path traversal information disclosure via EDI Archive Restore5.3CNA v4.00.4%2026-08-19Fix
CVE-2026-76591TRENDnet TEW-755AP ssi email.cgi log_email_server command injection5.3CNA v4.01.8%2026-08-19
CVE-2026-76590TRENDnet TEW-755AP ssi wan.cgi stack-based overflow9.4CNA v4.00.9%2026-08-19
CVE-2026-76589TRENDnet TEW-755AP mycli FUN_401000 stack-based overflow9.4CNA v4.00.9%2026-08-19
CVE-2026-76584TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow9.4CNA v4.00.9%2026-08-19
CVE-2026-76583TRENDnet TV-IP751WIC alphapd set_time.cgi command injection5.3CNA v4.01.8%2026-08-19
CVE-2026-76582TRENDnet TEW-821DAP ssi ping.cgi system command injection5.3CNA v4.01.8%2026-08-19
CVE-2026-76576yangzongzhuan RuoYi-Vue common download endpoint path traversal5.3CNA v4.00.5%2026-08-19
CVE-2026-76574code-projects Hospital Information System User Login UsersController.php login SQL injection6.9CNA v4.00.4%2026-08-19
CVE-2026-76572pkp pkp-lib XSLTransformer.php _transformPHP XML external entity reference5.1CNA v4.00.5%2026-08-19Fix
CVE-2026-76405Splunk On-Call (VictorOps) app App Key Value Store information disclosure4.3CNA v3.10.2%2026-08-19Fix
CVE-2026-76404Remote code execution (RCE) through deserialization of untrusted data in Splunk MCP Server app9.1CNA v3.10.7%2026-08-19Fix
CVE-2026-76403Splunk Connect for Kafka improper certificate validation7.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76402Server-side request forgery (SSRF) through the REST API in Splunk Connect For Kafka8.2CNA v3.10.4%2026-08-19Fix
CVE-2026-76401Regular expression denial of service (DoS) through the REST API in Splunk Connect For Kafka5.9CNA v3.10.4%2026-08-19Fix
CVE-2026-76400Denial of service (DoS) through the REST API in Splunk Connect For Kafka5.9CNA v3.10.4%2026-08-19Fix
CVE-2026-76399Incorrect permission assignment for Scheduled Searches in Splunk AI Toolkit8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76398Improper access control during Experiment History Deletion through the REST API in Splunk AI Toolkit4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76397Improper access control in Experiment History through the REST API in Splunk AI Toolkit8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76396Improper access control through Scheduled Searches in Splunk AI Toolkit7.5CNA v3.10.3%2026-08-19Fix
CVE-2026-76395Splunk AI Toolkit model loading REST API deserialization of untrusted data8.8CNA v3.10.7%2026-08-19Fix
CVE-2026-76394Splunk AI Toolkit container and connection management REST API missing authorization8.3CNA v3.10.4%2026-08-19Fix
CVE-2026-76393Race condition during Model upload through the REST API in Splunk AI Toolkit5.9CNA v3.10.2%2026-08-19Fix
CVE-2026-76392Splunk AI Toolkit container connection credentials hard-coded credentials5.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76391Improper privilege management through Agent Run History in Splunk AI Toolkit8.3CNA v3.10.5%2026-08-19Fix
CVE-2026-76390Information disclosure through Splunk Web in Cisco Talos Intelligence For Enterprise Security Cloud5.3CNA v3.10.4%2026-08-19Fix
CVE-2026-76389Splunk Cisco Talos Intelligence for Enterprise Security Cloud server-side request forgery8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-76388Privilege escalation through Search Macro Permissions in Splunk Enterprise Security8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76387SPL injection through the REST API in Splunk Enterprise Security8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76386Information disclosure through action parameters in Zoom app for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76385Information disclosure through action parameters in Venafi app for Splunk SOAR4.3CNA v3.10.1%2026-08-19
CVE-2026-76384Information disclosure through action parameters in Splunk Attack Analyzer Connector for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76383Splunk RSA SecurID Authentication Manager app for SOAR information disclosure4.3CNA v3.10.2%2026-08-19
CVE-2026-76382Information disclosure through action parameters in Phantom app for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76381Splunk MS Graph for Active Directory app for SOAR reset password action information disclosure4.3CNA v3.10.2%2026-08-19
CVE-2026-76380Information disclosure through action parameters in CrowdStrike OAuth API app for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76379Information disclosure through action parameters in Cisco Webex app for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76378Cisco Secure Malware Analytics app for Splunk SOAR cleartext storage of sensitive information4.3CNA v3.10.2%2026-08-19
CVE-2026-76377Information disclosure through action parameters in Azure AD Graph app for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76376Information disclosure through action parameters in AWS IAM app for Splunk SOAR4.3CNA v3.10.2%2026-08-19
CVE-2026-76375Information disclosure through Environment Data Logging in AD LDAP app for Splunk SOAR5.0CNA v3.10.3%2026-08-19
CVE-2026-76374Information disclosure through Sensitive Data Logging in AD LDAP app for Splunk SOAR4.3CNA v3.10.3%2026-08-19
CVE-2026-76373Filter injection through action parameters in AD LDAP app for Splunk SOAR5.4CNA v3.10.3%2026-08-19
CVE-2026-76372Incorrect permission assignment through Safe Mode in Nmap Scanner for Splunk SOAR6.6CNA v3.10.4%2026-08-19
CVE-2026-76371Incorrect permission assignment through Safe Mode in FireAMP for Splunk SOAR2.7CNA v3.10.3%2026-08-19
CVE-2026-76370Information disclosure through the REST API in Splunk Soar4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76369Path traversal through Automation Broker in Splunk Soar2.7CNA v3.10.4%2026-08-19Fix
CVE-2026-76368Missing authorization through Playbooks in Splunk Soar2.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76367Stored cross-site scripting (XSS) through Notes in Splunk Soar4.0CNA v3.10.2%2026-08-19Fix
CVE-2026-76366Information disclosure through the REST API in Splunk Soar6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-76365Structured Query Language (SQL) injection through Custom Lists in Splunk Soar6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-76364Structured Query Language (SQL) injection through Custom function results in Splunk Soar6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-76363Structured Query Language injection through the REST API in Splunk Soar6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-76362Improper certificate validation through CyberArk Vault Privileged Access Manager in Splunk Soar7.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76361Server-side request forgery (SSRF) through the Connectivity Check REST API in Splunk Soar2.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76360Information disclosure through missing authorization in the Health REST API in Splunk Soar4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76359Path traversal through Universal Forwarder Installer Archive Extraction in Splunk Soar6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-76358Path traversal through App Installation Tar Extraction in Splunk Soar6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-76357Remote code execution (RCE) through path traversal in the REST API in Splunk Soar7.6CNA v3.10.4%2026-08-19Fix
CVE-2026-76356Authentication bypass through IP Address spoofing in the Automation Broker in Splunk Soar8.1CNA v3.10.6%2026-08-19Fix
CVE-2026-76355Splunk Enterprise Edge Processor service endpoint information disclosure7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-76354Path traversal through Search Head Clustering in Splunk Enterprise8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76353Path traversal through Knowledge Bundle Replication in Splunk Enterprise5.4CNA v3.10.4%2026-08-19Fix
CVE-2026-76352Improper authorization through the REST API in Splunk Enterprise8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-76351Server-side request forgery (SSRF) through the Report Notification REST API in Splunk Secure Gateway8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-76350Improper privilege management through PDF Attachments for Email Alert Actions in Splunk Enterprise8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-76349SPL injection through Splunk Web Form Tokens in Splunk Enterprise6.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76348Missing authorization in Search Head Cluster Member Controls in Splunk Enterprise3.8CNA v3.10.3%2026-08-19Fix
CVE-2026-76347Splunk Secure Gateway Report Notifications REST API server-side request forgery5.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76346Splunk Enterprise dashboard sparkline format options stored cross-site scripting5.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76345Remote code execution (RCE) through the REST API in Splunk Enterprise6.0CNA v3.10.5%2026-08-19Fix
CVE-2026-76344Path traversal through the Search Dispatch REST API in Splunk Enterprise7.7CNA v3.10.4%2026-08-19Fix
CVE-2026-76343Structured Query Language (SQL) injection through the REST API in Splunk Enterprise6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-76342Risky Commands Safeguards Bypass through Splunk Web in Splunk Enterprise5.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76341Risky Commands Safeguards Bypass through Table Editor Dataset Initial Data in Splunk Enterprise5.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76340Missing authorization for Reloading Token-Signing Keys through the REST API in Splunk Enterprise5.3CNA v3.10.4%2026-08-19Fix
CVE-2026-76339SPL injection through the geostats command in Splunk Enterprise5.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76338Improper authentication through REST API Distributed Search Token requests in Splunk Enterprise8.1CNA v3.10.5%2026-08-19Fix
CVE-2026-76337Path traversal through Splunk Web Static File Serving in Splunk Enterprise5.3CNA v3.10.4%2026-08-19Fix
CVE-2026-76336Improper access control through the REST API in Splunk Enterprise7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-76335Remote code execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-76334SPL injection through Dashboard Studio Workflow Actions in Splunk Enterprise6.4CNA v3.10.2%2026-08-19Fix
CVE-2026-76333Stored cross-site scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-76332SPL injection through Splunk Web in Splunk Enterprise7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-76331SPL injection through the REST API in Splunk Enterprise8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-76330SPL injection through Monitoring Console Forwarder Filters in Splunk Enterprise7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-76329SPL injection through Monitoring Console Dashboard Inputs in Splunk Enterprise6.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76328SPL injection through Splunk Web in Splunk Enterprise6.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76327SPL injection through Splunk Web in Splunk Secure Gateway6.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76326Stored cross-site scripting through Dashboard Sparkline Tooltip options in Splunk Enterprise5.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76325Stored cross-site scripting (XSS) through Splunk Web in Splunk Enterprise7.3CNA v3.10.4%2026-08-19Fix
CVE-2026-76324Stored cross-site scripting (XSS) in Splunk Web Tours in Splunk Enterprise5.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76323SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise6.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76322SPL injection through Dashboard Studio Search Query options in Splunk Enterprise6.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76321SPL injection through Nearby Event Searches in Splunk Enterprise7.3CNA v3.10.4%2026-08-19Fix
CVE-2026-76320Splunk Enterprise Event Type Builder vulnerability5.9CNA v3.10.3%2026-08-19Fix