CVE-2026 list

CVE-2026 records published in August 2026

Page five of 13: records 4,001 to 5,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.

CVE-2026 records published in August 2026, newest first: records 4,001 to 5,000 of 12,071
CVE Summary CVSS EPSS Published Signals
CVE-2026-76319Remote code execution (RCE) through Federated Search in Splunk Enterprise8.8CNA v3.10.6%2026-08-19Fix
CVE-2026-76318Stored cross-site scripting (XSS) through Splunk Web in Splunk Enterprise5.7CNA v3.10.3%2026-08-19Fix
CVE-2026-76317Path traversal through the Lookup Configuration REST API in Splunk Enterprise8.8CNA v3.10.6%2026-08-19Fix
CVE-2026-76316Stored SPL injection through Deployment Server Broker Registration in Splunk Enterprise8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-76315Code injection through Splunk Web Manager Configuration in Splunk Enterprise8.8CNA v3.10.7%2026-08-19Fix
CVE-2026-76314Remote code execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise8.8CNA v3.10.8%2026-08-19Fix
CVE-2026-76313Remote code execution (RCE) through the REST API in Splunk Enterprise8.8CNA v3.10.6%2026-08-19Fix
CVE-2026-76312Improper access control through Embedded Reports in Splunk Enterprise9.4CNA v3.10.4%2026-08-19Fix
CVE-2026-76311Improper access control in Embedded Report Dispatch Archives in Splunk Enterprise9.4CNA v3.10.4%2026-08-19Fix
CVE-2026-76310Improper access control through Embedded Report REST API requests in Splunk Enterprise9.4CNA v3.10.4%2026-08-19Fix
CVE-2026-76309Structured Query Language (SQL) injection through the REST API in Splunk Enterprise4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76263Improper access control through the REST API in Splunk Enterprise5.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76262Exposure of sensitive information to an unauthorized actor through the REST API in Splunk Enterprise7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-76261Insecure default Access Control List through the REST API in Splunk Secure Gateway5.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76260Incorrect permission assignment for critical resource through the REST API in Splunk Enterprise6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-76259Improper privilege management on the Management Port in Splunk Enterprise for Windows8.8CNA v3.10.2%2026-08-19Fix
CVE-2026-76258Splunk Secure Gateway companion app registration hard-coded cryptographic key6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-76257Missing authorization through REST API endpoints in Splunk Secure Gateway6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-76256Information exposure through REST API endpoints in Splunk Secure Gateway4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-76255Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise6.4CNA v3.10.3%2026-08-19Fix
CVE-2026-76254SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise7.5CNA v3.10.4%2026-08-19Fix
CVE-2026-76253Privilege escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-76252Cross-site scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise6.8CNA v3.10.3%2026-08-19Fix
CVE-2026-76251Missing authorization through REST API endpoints in the Splunk App for Splunk Observability Cloud7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-76245stigmem Federation Peer Token Timestamp Validation Bypass7.1CNA v4.00.2%2026-08-19Fix
CVE-2026-76244eidetic-labs stigmem stigmem-node Insecure Federation Transport Configuration9.1CNA v4.00.3%2026-08-19Fix
CVE-2026-76243stigmem authentication bypass via Disabled Auth9.2CNA v4.00.6%2026-08-19Fix
CVE-2026-76242stigmem Federation Peer Registration authentication bypass9.1CNA v4.00.3%2026-08-19Fix
CVE-2026-76241stigmem Plugin Signature Enforcement Bypass via Configuration7.3CNA v4.00.1%2026-08-19Fix
CVE-2026-76240stigmem Postgres SQL injection via Schema Identifier7.5CNA v4.00.4%2026-08-19Fix
CVE-2026-76239eidetic-labs stigmem-node stigmem SSRF via unvalidated webhook delivery_address5.3CNA v4.00.3%2026-08-19Fix
CVE-2026-76238eidetic-labs stigmem-node stigmem Cross-Tenant BOLA via decay sweep7.2CNA v4.00.4%2026-08-19Fix
CVE-2026-76237eidetic-labs stigmem-node stigmem Cross-Tenant BOLA via quarantine8.6CNA v4.00.4%2026-08-19Fix
CVE-2026-76236eidetic-labs stigmem-node stigmem Cross-Tenant BOLA via Tombstones7.2CNA v4.00.4%2026-08-19Fix
CVE-2026-76235Red Hat Enterprise Linux 10 cockpit-ws: Cockpit: Cockpit-ws: Unauthenticated remote memory leak7.5CNA v3.10.6%2026-08-19Fix
CVE-2026-76234celabshq libcrux-ecdh libcrux Cryptographic Implementation Bug Fixes8.7CNA v4.00.3%2026-08-19Fix
CVE-2026-76233Renovate command injection via gleam manager8.4CNA v4.01.0%2026-08-19Fix
CVE-2026-76232Renovate command injection via helmv38.4CNA v4.01.0%2026-08-19Fix
CVE-2026-76231Renovate command injection via hermit8.4CNA v4.01.0%2026-08-19Fix
CVE-2026-76230Renovate command injection via npm8.4CNA v4.01.0%2026-08-19Fix
CVE-2026-76229Renovate arbitrary command injection via kustomize8.4CNA v4.01.0%2026-08-19Fix
CVE-2026-76228Renovate remote code execution via Gradle Wrapper8.4CNA v4.01.0%2026-08-19Fix
CVE-2026-76227Renovate and Environment Variable Exposure6.8CNA v4.00.2%2026-08-19Fix
CVE-2026-76226Renovate remote code execution via lockFileMaintenance6.8CNA v4.00.3%2026-08-19Fix
CVE-2026-76225ArcadeDB server-side request forgery via LOAD CSV8.3CNA v4.00.4%2026-08-19Fix
CVE-2026-76224ArcadeDB remote code execution via Groovy Fallback8.7CNA v4.00.9%2026-08-19Fix
CVE-2026-76223ArcadeDB permission bypass via DEFINE FUNCTION7.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76222GitPython path traversal via .gitmodules Submodule Name8.4CNA v4.00.4%2026-08-19Fix
CVE-2026-76221GitPython Config injection via option-name8.7CNA v4.00.8%2026-08-19Fix
CVE-2026-76220GitPython command execution via split_single_char_options8.7CNA v4.00.9%2026-08-19Fix
CVE-2026-76219GitPython arbitrary file overwrite via read-tree7.2CNA v4.00.5%2026-08-19Fix
CVE-2026-76218GitPython remote code execution via Repo.init8.8NVD v3.10.8%2026-08-19Fix
CVE-2026-76217GitPython arbitrary file read via pathspec-from-file7.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76216Vikunja Principal-type confusion via LinkSharing7.7CNA v4.00.4%2026-08-19Fix
CVE-2026-76215phpMyFAQ missing authorization via child resources6.9CNA v4.00.4%2026-08-19Fix
CVE-2026-76214phpMyFAQ WebAuthn Replay Attack via Challenge9.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76213phpMyFAQ 2FA brute-force via Session-Scoped Throttle9.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76212phpMyFAQ LIKE Wildcard injection via PostgreSQL6.9CNA v4.00.4%2026-08-19Fix
CVE-2026-76211phpMyFAQ information disclosure via Admin API5.3CNA v4.00.3%2026-08-19Fix
CVE-2026-76210phpMyFAQ Local File Disclosure via PDF Export7.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76209phpMyFAQ Registration Bypass via API5.3CNA v4.00.3%2026-08-19Fix
CVE-2026-76208phpMyFAQ authentication bypass via LDAP8.8CNA v4.00.4%2026-08-19
CVE-2026-76207phpMyFAQ 2FA Bypass via Remember-Me Cookie8.6CNA v4.00.5%2026-08-19Fix
CVE-2026-76206phpMyFAQ information disclosure via PDF Export6.9CNA v4.00.4%2026-08-19Fix
CVE-2026-76205phpMyFAQ SQL injection via Glossary8.6CNA v4.00.4%2026-08-19Fix
CVE-2026-76203CSS sanitizer bypass in Pentestify report themes allows forced outbound requests5.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76166Red Hat JBoss Enterprise Application Platform null pointer dereference4.3CNA v3.11.0%2026-08-19
CVE-2026-76164ail framework its crawler submission functionality server-side request forgery7.1CNA v4.00.4%2026-08-19Fix
CVE-2026-76139Red Hat Advanced Cluster Management for Kubernetes operator bundle build process code injection8.0CNA v3.10.7%2026-08-19Fix
CVE-2026-76050SourceCodester Simple Online Food Ordering System ajax.php delete_menu SQL injection6.9CNA v4.00.4%2026-08-19
CVE-2026-76049SourceCodester Simple Online Food Ordering System ajax.php save_menu SQL injection6.9CNA v4.00.4%2026-08-19
CVE-2026-76048SourceCodester Simple Online Food Ordering System ajax.php login SQL injection6.9CNA v4.00.4%2026-08-19
CVE-2026-76014BusyBox FEATURE_WGET_TIMEOUT wget.c null pointer dereference4.8CNA v4.00.2%2026-08-19
CVE-2026-76008Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow10.0CNA v4.01.0%2026-08-19
CVE-2026-76004UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow9.4CNA v4.00.8%2026-08-19
CVE-2026-76003UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow9.4CNA v4.00.8%2026-08-19
CVE-2026-75987SPLWare esProc SocketData.java ObjectInputStream.readUnshared deserialization6.9CNA v4.00.6%2026-08-19
CVE-2026-75986code-projects Online Job Portal System Password Recovery ForPass.php SQL injection6.9CNA v4.00.4%2026-08-19
CVE-2026-75985TRENDnet Router ping.cgi command injection5.3CNA v4.01.8%2026-08-19
CVE-2026-75984TRENDnet TEW-823DRU admin.cgi command injection5.3CNA v4.01.8%2026-08-19
CVE-2026-75981TranslatePress WordPress plugin stored cross-site scripting7.2CNA v3.10.4%2026-08-19Reported exploitedFix
CVE-2026-75979xianrendzw EasyReport SQL preview endpoint server-side template injection5.3CNA v4.00.4%2026-08-19
CVE-2026-75978xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission5.3CNA v4.00.4%2026-08-19
CVE-2026-75956Joomla extension cmsjunkie.com DOS vector in pagination parameter handling in J-BusinessDirectory8.7CNA v4.00.4%2026-08-19
CVE-2026-75955Joomla extension cmsjunkie.com reflected XSS / XML injection in J-BusinessDirectory5.1CNA v4.00.4%2026-08-19
CVE-2026-75954Joomla extension cmsjunkie.com SQL injection in trips search in J-BusinessDirectory9.3CNA v4.00.4%2026-08-19
CVE-2026-75953Joomla extension cmsjunkie.com Open mail relay in J-BusinessDirectory7.5CISA ADP v3.10.4%2026-08-19
CVE-2026-75952Joomla extension cmsjunkie.com cross-site request forgery in J-BusinessDirectory4.6CNA v4.00.2%2026-08-19
CVE-2026-75951Joomla extension cmsjunkie.com insecure direct object reference in J-BusinessDirectory6.9CNA v4.00.4%2026-08-19
CVE-2026-75950Joomla extension cmsjunkie.com Unauthenticated listing ownership takeover in J-BusinessDirectory6.9CNA v4.00.4%2026-08-19
CVE-2026-75949Joomla extension cmsjunkie.com arbitrary file upload / deletion in J-BusinessDirectory10.0CNA v4.00.4%2026-08-19Reported exploited
CVE-2026-75920phpMyFAQ information disclosure via Backup ZIP6.0CNA v4.00.4%2026-08-19Fix
CVE-2026-75919phpMyFAQ authentication bypass via Setup API6.9CNA v4.00.5%2026-08-19Fix
CVE-2026-75918phpMyFAQ authentication bypass via Tracking file8.7CNA v4.00.5%2026-08-19Fix
CVE-2026-75917SiYuan XSS-to-RCE via pathName.ts9.3CNA v4.00.2%2026-08-19Fix
CVE-2026-75916SiYuan XSS-to-RCE via unescaped block metadata in hint popup9.3CNA v4.00.2%2026-08-19
CVE-2026-75900swtpm NVRAM header parsing out-of-bounds read6.1CNA v3.10.1%2026-08-19Fix
CVE-2026-75619RTSP heap buffer overflow denial of service vulnerability on TP-Link Tapo C100 and C1016.9CNA v4.00.4%2026-08-19Fix
CVE-2026-75618RTSP null pointer dereference denial of service vulnerability on TP-Link Tapo C100 and C1017.1CNA v4.00.4%2026-08-19Fix
CVE-2026-75616TP-Link Systems Archer C20 v6 command injection in Router Web Management interface8.5CNA v4.02.8%2026-08-19Exploit codeFix
CVE-2026-75596Netty SNI ClientHello parsing algorithmic complexity8.7CNA v4.00.4%2026-08-19Fix
CVE-2026-75595Netty: SNI Routing Bypass via Fragmented TLS ClientHello causing Fallback to Default SslContext9.1CNA v4.00.3%2026-08-19Fix
CVE-2026-75593BuildKit: Malicious client can bypass destination directory validation on local sources upload7.2CNA v4.00.5%2026-08-19Fix
CVE-2026-75589Net::OAuth signature verification timing side channel7.5CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-75583keeper.sh Calendar version SSRF Guard Bypass via DNS Rebinding2.3CNA v4.00.3%2026-08-19Fix
CVE-2026-75569Red Hat multicluster engine for Kubernetes mce-operator-bundle vulnerability7.7CNA v3.10.6%2026-08-19Fix
CVE-2026-75476Tanium addressed a compression bomb vulnerability in Threat Response3.1CNA v3.10.3%2026-08-19Fix
CVE-2026-75149marimo code injection via MCP Server Configuration8.7CNA v4.01.0%2026-08-19Fix
CVE-2026-75148cgltf integer overflow via cgltf_validate Accessor Bounds Check6.9CNA v4.00.2%2026-08-19
CVE-2026-75147FFmpeg out-of-bounds read in AV1 RTP Packetizer via rtpenc_av1.c6.9CNA v4.00.1%2026-08-19Fix
CVE-2026-75146FFmpeg out-of-bounds read in DASH Demuxer via dashdec.c7.2CNA v4.00.3%2026-08-19Fix
CVE-2026-75145FFmpeg Integer Narrowing Conversion OOB Memory Access in AV1 RTP Packetizer5.8CNA v4.00.2%2026-08-19Fix
CVE-2026-75144FFmpeg heap buffer overflow in VC-2/Dirac RTP Packetizer8.5CNA v4.00.2%2026-08-19Fix
CVE-2026-75143FFmpeg heap buffer overflow via RIST Protocol Reader9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-75142FFmpeg stack buffer overflow in MPEG-PS Muxer via mpegenc.c8.5CNA v4.00.2%2026-08-19Fix
CVE-2026-75141FFmpeg heap buffer overflow in hvcC Box Writer via HEVC Muxing8.5CNA v4.00.2%2026-08-19Fix
CVE-2026-75114Joomla extension yootheme.com open redirect in CommentController::twitterAuthenticate in Zoo5.1CNA v4.00.4%2026-08-19
CVE-2026-75112OTTO® Fleet Manager weak password Hashing Configuration6.9CNA v4.00.2%2026-08-19Fix
CVE-2026-74804Joomla extension yootheme.com unauthenticated SQL injection in Zoo9.3CNA v4.00.4%2026-08-19
CVE-2026-74803Joomla extension yootheme.com unauthenticated arbitrary file upload in Zoo10.0CNA v4.00.4%2026-08-19
CVE-2026-73829ZenHive mpp time-of-check time-of-use race condition6.3CNA v4.00.3%2026-08-19Fix
CVE-2026-73541ZenHive mpp resource exhaustion8.3CNA v4.00.6%2026-08-19Fix
CVE-2026-73394Stitch Express WordPress plugin broken access control7.5CNA v3.10.3%2026-08-19
CVE-2026-73391Total Donations WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-19
CVE-2026-73390Total Donations WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-19
CVE-2026-73389Kalles Addons WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-19
CVE-2026-73388Nikstore Core WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-19
CVE-2026-73387Resido WordPress theme local file inclusion8.1CNA v3.10.5%2026-08-19
CVE-2026-73386Track Geolocation Of Users Using Contact Form 7 WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-19Fix
CVE-2026-73385Outranking plugin Options WordPress plugin broken access control7.5CNA v3.10.3%2026-08-19
CVE-2026-73384Pay with Contact Form 7 WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-19
CVE-2026-73364Flexible Subscriptions WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-19Fix
CVE-2026-73363Taxi Booking Manager for WooCommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-73354SimplyRETS Real Estate IDX WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-73347TrueBooker WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-19Fix
CVE-2026-73185NGG Smart Image Search WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-19Fix
CVE-2026-73184Global Gallery WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-19
CVE-2026-73183Maps Marker Pro WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-19Fix
CVE-2026-73182BBQ Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-73136ZenHive mpp authentication bypass by replay8.2CNA v4.00.6%2026-08-19Fix
CVE-2026-72889Net::OAuth versions for Perl allow the sender to choose the signature algorithm in verify9.8CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-72717Orval zod client generation, schema defaults template injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-72716Orval zod client generation, query parameter defaults template injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-72530TrueConf Server code injection9.5CNA v4.01.7%2026-08-19KEVExploit codeKCVFix
CVE-2026-72529TrueConf Server missing authentication for critical function9.3CNA v4.01.5%2026-08-19KEVKCVFix
CVE-2026-71961Cudy WR3000 OS command injection via Mesh MQTT command handler8.7CNA v4.02.7%2026-08-19KCVFix
CVE-2026-71960Cudy WR3000 Hard-coded JWT Secret authentication bypass via MQTT9.3CNA v4.00.5%2026-08-19Exploit codeKCVFix
CVE-2026-71871Orval zod schema header parameter default formatter code injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71869Orval zod schema array default value formatter code injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71868Orval zod schema default value formatter code injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71867Orval MSW mock factory generator vulnerability9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71866Orval zod schema property key generator vulnerability9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71865Orval zod query parameter schema generator code injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71864Orval: Import-time RCE9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-71694BOOM (Berkeley Out-of-Order Machine) CSR trap-return state restoration logic vulnerability8.8CISA ADP v3.10.4%2026-08-19
CVE-2026-71470Red Hat Advanced Cluster Management for Kubernetes search custom resource privilege escalation9.1CNA v3.10.7%2026-08-19Fix
CVE-2026-71176Dell OpenManage Enterprise SQL injection8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-70496Red Hat Advanced Cluster Management for Kubernetes search-v2-operator privilege escalation9.9CNA v3.10.6%2026-08-19Fix
CVE-2026-70424Dell OpenManage Enterprise path traversal6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-70423Dell OpenManage Enterprise XML external entity injection6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-70422Dell OpenManage Enterprise SQL injection8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-70421Dell OpenManage Enterprise improper privilege management7.2CNA v3.10.5%2026-08-19Fix
CVE-2026-70408Extra Innovation acmailer CGI incorrect authorization8.7CNA v4.00.4%2026-08-19Fix
CVE-2026-69550Microsoft Windows App for Mac information disclosure6.5CNA v3.10.9%2026-08-19Fix
CVE-2026-69222LiquidJS join filter denial of service7.5CNA v3.10.6%2026-08-19Fix
CVE-2026-68901Wekan board export REST endpoints null pointer dereference6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-68900Wekan: Stored XSS in HTML board exports through a card-title second parse7.6CNA v3.10.4%2026-08-19Fix
CVE-2026-68899Wekan: File upload MIME type validation bypass stored XSS via Missing System Binary Fallback8.7CNA v3.10.5%2026-08-19Fix
CVE-2026-68561Wekan board sort permission rule privilege escalation8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-68560Wekan:hell injection in External Antivirus Scanner Path via asyncExec7.7CNA v4.00.6%2026-08-19Fix
CVE-2026-68559Wekan: Broken access control in the Excel-export route (`/API/boards/:boardId/exportExcel`)6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-68558Wekan: SSRF filter bypass via DNS-resolving hostname in outgoing webhooks (incomplete fix of)8.5CNA v3.10.4%2026-08-19Fix
CVE-2026-68555coturn mobility session resumption resource exhaustion6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-68554coturn STUN message integrity check vulnerability2.3CNA v4.00.2%2026-08-19Fix
CVE-2026-68553Coturn: Format string injection via TURN USERNAME/REALM into hiredis Redis command7.1CNA v3.10.5%2026-08-19Fix
CVE-2026-68552Coturn: Uint16_t truncation overflow in STUN message length causes TCP stream framing bypass5.3CNA v3.10.5%2026-08-19Fix
CVE-2026-67581On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay8.7CNA v4.00.6%2026-08-19Fix
CVE-2026-67364Joomla extension balbooa.com Pre-auth PHP code injection in Balbooa Forms10.0CNA v4.00.5%2026-08-19
CVE-2026-67363Joomla extension balbooa.com Pre-auth Payment Amount tampering in Balbooa Forms7.7CNA v4.00.6%2026-08-19Exploit code
CVE-2026-67268Dell Command Update (DCU) XML external entity injection6.5CNA v3.10.1%2026-08-19Fix
CVE-2026-67267Dell Command Update (DCU) system information disclosure5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-67266Dell Command Update (DCU) incorrect authorization5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-67189pfSense Plus/CE stored XSS via Traffic Graphs PTR Record5.3CNA v4.01.2%2026-08-19Fix
CVE-2026-66794Red Hat multicluster engine for Kubernetes cluster-proxy-addon server-side request forgery9.3CNA v3.10.6%2026-08-19Fix
CVE-2026-66668Community by PeepSo WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-19Fix
CVE-2026-66613JetEngine WordPress plugin remote code execution (RCE)9.8CNA v3.10.9%2026-08-19Reported exploitedFix
CVE-2026-66596Newsletter WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-66358Extra Innovation acmailer CGI cross-site scripting5.1CNA v4.00.3%2026-08-19Fix
CVE-2026-65612Shell command injection in nnn5.1CNA v4.00.4%2026-08-19
CVE-2026-65611Shell command injection in nnn5.1CNA v4.00.4%2026-08-19
CVE-2026-65610Numeric truncation error in nnn2.4CNA v4.00.2%2026-08-19
CVE-2026-65609Out-of-bounds write in nnn2.4CNA v4.00.2%2026-08-19
CVE-2026-64852Grav API plugin API key management missing authorization8.7CNA v4.00.4%2026-08-19Fix
CVE-2026-64851Grav Shortcode Core plugin attribute handler stored cross-site scripting8.5CNA v4.00.5%2026-08-19Fix
CVE-2026-64850Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData8.7CNA v4.00.5%2026-08-19Fix
CVE-2026-63722ICEcoder unauthenticated RCE via terminal-xhr.php8.7CNA v4.01.3%2026-08-19
CVE-2026-63652FreeRDP rdpsnd server channel double free7.1CNA v4.00.6%2026-08-19Fix
CVE-2026-63633FreeRDP: Heap buffer overflow in Opus audio decode server→client7.7CNA v4.00.6%2026-08-19Fix
CVE-2026-63408getgrav grav-plugin-api Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query parameter7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-63407Grav API plugin CORS middleware vulnerability8.2CNA v3.10.4%2026-08-19Fix
CVE-2026-63188logto logto-tunnel serves files outside --experience-path via path traversal8.7CNA v4.00.5%2026-08-19Fix
CVE-2026-63187Logto: OS command injection vulnerability exists in the Commitlint workflow6.3CNA v3.10.4%2026-08-19Fix
CVE-2026-63123TinaCMS media upload endpoint cross-site request forgery6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-63117FreeRDP: Denial of service through ADPCM frame size calculation6.5CNA v3.10.6%2026-08-19Fix
CVE-2026-62727Microsoft Windows Telephony service elevation of privilege7.0CNA v3.10.2%2026-08-19Fix
CVE-2026-62682orval getFullRoute function code injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-62681Orval request URL template generation code injection9.3CNA v4.00.7%2026-08-19Fix
CVE-2026-62680Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref7.1CNA v3.10.4%2026-08-19Fix
CVE-2026-62673Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems8.2CNA v4.00.5%2026-08-19Fix
CVE-2026-62672Grav: Authenticated ReDoS via regex_replace in Twig Sandbox6.0CNA v4.00.4%2026-08-19Fix
CVE-2026-62671CSRF in grav-plugin-login: Anonymous attacker rotates a logged-in user's 2FA secret5.4CNA v3.10.2%2026-08-19Fix
CVE-2026-62670Grav Flex Objects plugin admin API permission check missing authorization6.3CNA v3.10.3%2026-08-19Fix
CVE-2026-62669Grav Login plugin: 2FA Bypass via login.regenerate2FASecret Secret Rotation during Pending Challenge7.4CNA v3.10.5%2026-08-19Fix
CVE-2026-62668Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols9.4CNA v4.00.5%2026-08-19Fix
CVE-2026-62667Grav API plugin API key scope enforcement missing authorization8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-62666Grav API plugin API key creation privilege escalation8.8CNA v3.10.6%2026-08-19Fix
CVE-2026-62317Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)7.5CNA v3.10.7%2026-08-19Fix
CVE-2026-61986Contest Gallery WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-61842Grav: Twig sandbox config exfiltration via grav.offsetGet + dump filter ( bypass)6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-61807Snipe-IT: Stored DOM XSS via table selected-count IDs6.3CNA v4.00.2%2026-08-19Fix
CVE-2026-61712BuildKit: Possible runtime DoS via unbounded group parsing2.3CNA v4.00.4%2026-08-19Fix
CVE-2026-61711BuildKit: Custom frontend could bypass Seccomp/AppArmor5.3CNA v4.00.4%2026-08-19Fix
CVE-2026-61690Grav: Decompression bomb via ZipArchiver Missing Extraction Limits6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-61607getgrav grav-plugin-api Grav API Plugin: Stored XSS4.6CNA v3.10.3%2026-08-19Fix
CVE-2026-61556LiquidJS: An infinite loop vulnerability in `strip_html` filter8.7CNA v4.00.5%2026-08-19Fix
CVE-2026-61518ISPConfig authenticated SQL injection via Remote API primary_id parameter8.7CNA v4.00.5%2026-08-19
CVE-2026-59992Tina: Broken access control: Arbitrary bucket-key write/delete in `next-tinacms-s3`5.4CNA v3.10.4%2026-08-19Fix
CVE-2026-58565Dell Command Update (DCU) missing authorization8.8CNA v3.10.1%2026-08-19Fix
CVE-2026-58564Dell Command Update (DCU) incorrect default permissions7.8CNA v3.10.1%2026-08-19Fix
CVE-2026-58562Dell Command Update (DCU) missing authorization7.3CNA v3.10.1%2026-08-19Fix
CVE-2026-58088FreeBSD race condition in ELF core dump segment counting7.4CISA ADP v3.10.1%2026-08-19Fix
CVE-2026-58087FreeBSD heap out-of-bounds access in semctl(2)7.8CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-58086FreeBSD ktrace(2) privilege incorrectly validated in jails8.1CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-58085FreeBSD missing MAC validation in wg(4) packet decryption7.5CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-58084FreeBSD kernel stack disclosure via timer_settime(2)5.5CISA ADP v3.10.1%2026-08-19Fix
CVE-2026-58083FreeBSD use-after-free in kqueue copy-on-fork8.4CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-58082FreeBSD stack based buffer overflow in iconv(3)9.8CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-58081FreeBSD heap based buffer overflow in iconv(3)9.8CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-56797Dell Command Update (DCU) time-of-check time-of-use race condition7.3CNA v3.10.1%2026-08-19Fix
CVE-2026-56796Dell Command Update (DCU) link following6.6CNA v3.10.2%2026-08-19Fix
CVE-2026-56088Dell OpenManage Enterprise SQL injection7.1CNA v3.10.4%2026-08-19Fix
CVE-2026-55703Snipe-IT: Maintenance Record Disclosure via missing authorization on GET4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-55694Snipe-IT: Chained information disclosure and IDOR leads to Full EULA file takeover7.1CNA v4.00.3%2026-08-19Fix
CVE-2026-55648FreeRDP: Integer overflow in `freerdp_image_copy_from_icon_data` Bypasses Bounds Check6.1CNA v4.00.4%2026-08-19Fix
CVE-2026-55643Snipe-IT: Tenant Isolation Bypass in FMCS Floater Mode7.6CNA v4.00.3%2026-08-19Fix
CVE-2026-55564FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments5.4CNA v3.10.4%2026-08-19Fix
CVE-2026-55519Snipe-IT: Improper authorization in file deletion (IDOR)5.4CNA v3.10.4%2026-08-19Fix
CVE-2026-55483Snipe-IT: Privilege escalation via Missing admin Permission Check in User Creation4.9CNA v4.00.4%2026-08-19Fix
CVE-2026-55482Snipe-IT: Multi-Tenancy Bypass via Bulk Asset Update6.3CNA v3.10.3%2026-08-19Fix
CVE-2026-55194FreeRDP TS Gateway RPC client heap-based buffer overflow8.7CNA v4.00.6%2026-08-19Fix
CVE-2026-55193FreeRDP TS Gateway RPC fragment handling heap-based buffer overflow8.7CNA v4.00.4%2026-08-19Fix
CVE-2026-55192FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch7.2CNA v4.00.5%2026-08-19Fix
CVE-2026-55191FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation8.7CNA v4.00.8%2026-08-19Fix
CVE-2026-55090Etherpad: Stored XSS in HTML export via unescaped attribute-pool values5.3CNA v4.00.5%2026-08-19Fix
CVE-2026-55089Etherpad HTTP API incorrect authorization9.9CNA v3.10.5%2026-08-19Fix
CVE-2026-55088Etherpad author token transfer endpoint vulnerability6.8CNA v3.10.4%2026-08-19Fix
CVE-2026-55087etherpad ep_etherpad-lite: Cache-poisoning cross-site scripting and open redirect6.1CNA v3.10.6%2026-08-19NucleiFix
CVE-2026-55086Etherpad import and export temporary files link following4.2CNA v3.10.1%2026-08-19Fix
CVE-2026-55085Etherpad: Improper neutralization of input during web page generation in etherpad-lite9.6CNA v3.10.5%2026-08-19Fix
CVE-2026-54796Dell OpenManage Enterprise OS command injection7.2CNA v3.12.0%2026-08-19Fix
CVE-2026-54795Dell OpenManage Enterprise OS command injection8.8CNA v3.12.3%2026-08-19Fix
CVE-2026-54794Dell OpenManage Enterprise server-side request forgery7.2CNA v3.10.3%2026-08-19Fix
CVE-2026-54793Dell OpenManage Enterprise cross-site scripting4.6CNA v3.10.2%2026-08-19Fix
CVE-2026-54743Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed6.4CNA v4.00.5%2026-08-19Fix
CVE-2026-54742Lemmy: `CollectionAdd::Featured` does not check the post is in the community5.1CNA v4.00.5%2026-08-19Fix
CVE-2026-54741Lemmy: Blocked users can edit private messages sent before the block5.3CNA v4.00.5%2026-08-19Fix
CVE-2026-54740Lemmy: Lower-ranked federated moderator can remove higher-ranked moderators6.5CNA v3.10.4%2026-08-19Fix
CVE-2026-54739Lemmy: Login Endpoint User Enumeration via HTTP Response Code Differential6.9CNA v4.00.6%2026-08-19Fix
CVE-2026-54738Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo6.5CNA v3.10.6%2026-08-19Fix
CVE-2026-54494Koel: Full-read SSRF5.3CNA v4.00.4%2026-08-19Fix
CVE-2026-54493Koel: Authenticated Full-read SSRF via Subsonic Internet Radio Stations7.7CNA v3.10.4%2026-08-19Fix
CVE-2026-54492Koel: Authenticated blind SSRF via Subsonic Podcast Channel Creation4.3CNA v3.10.4%2026-08-19Fix
CVE-2026-54491Koel: Incomplete fix for systemic SSRF in podcast and radio fetch paths7.1CNA v3.10.4%2026-08-19Fix
CVE-2026-53654Grav: Unauthenticated open redirect via login twofa_cancel _redirect5.3CNA v4.00.5%2026-08-19Fix
CVE-2026-53549Termix: Server-side request forgery via Proxy Connectivity Test7.7CNA v3.10.5%2026-08-19Fix
CVE-2026-53548Termix: IDOR Authenticated user can fetch SSH passwords for hosts owned by other users9.6CNA v3.10.5%2026-08-19Fix
CVE-2026-53547Termix: Account takeover via Global Settings Disclosure8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-53546Termix: Missing authorization in SSH host credential resolution exposes stored credentials9.6CNA v3.10.5%2026-08-19Fix
CVE-2026-53545Termix: Remote code execution via Tunnel Disconnect pkill command injection9.8CNA v3.10.7%2026-08-19Fix
CVE-2026-53542Termix file manager archive creation OS command injection8.8CNA v3.10.7%2026-08-19Fix
CVE-2026-53477Dell Command Update (DCU) time-of-check time-of-use race condition7.8CNA v3.10.1%2026-08-19Fix
CVE-2026-53452Ground Station sigmf-playback recording path handler path traversal5.3CNA v3.10.5%2026-08-19Fix
CVE-2026-53451Ground Station save-waterfall-snapshot handler path traversal9.8CNA v3.11.1%2026-08-19Fix
CVE-2026-52889Formie: Server-side template injection in Formie Hidden field defaults9.8CNA v3.11.3%2026-08-19Fix
CVE-2026-52834jxl-grid on 32-bit platforms has an out-of-bounds writes due to integer overflow7.3CNA v3.10.2%2026-08-19Fix
CVE-2026-52792Algernon: Server-side script source disclosure on Windows via NTFS filename8.7CNA v4.00.6%2026-08-19Fix
CVE-2026-51367Bottinelli Informatica Vedo Suite api_vedo/chat endpoint information disclosure7.5CISA ADP v3.10.6%2026-08-19
CVE-2026-51366Bottinelli Informatica Vedo Suite v.1.2.5 SQL injection9.9CISA ADP v3.10.8%2026-08-19
CVE-2026-50720Ingenic T31 SoC boot ROM vulnerability6.4CISA ADP v3.10.1%2026-08-19
CVE-2026-50719Ingenic T41 SoC boot ROM vulnerability6.8CISA ADP v3.10.1%2026-08-19
CVE-2026-50550Snipe-IT: 2FA reset privilege bypass5.8CNA v3.10.3%2026-08-19Fix
CVE-2026-50173Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users7.2CNA v4.00.7%2026-08-19Fix
CVE-2026-50149Project Contour Contour fallback certificate JWT verification vulnerability6.5CNA v3.10.2%2026-08-19Fix
CVE-2026-49976Snipe-IT: User Account Escalation via CSV Import6.5CNA v3.10.5%2026-08-19Fix
CVE-2026-49870Snipe-IT: TOTP Brute-Forceable due to Missing Rate Limiting on `POST /two-factor`5.9CNA v3.10.4%2026-08-19Fix
CVE-2026-49817Dell Command Update (DCU) deserialization of untrusted data7.8CNA v3.10.3%2026-08-19Fix
CVE-2026-49816Dell Command Update (DCU) deserialization of untrusted data7.8CNA v3.10.3%2026-08-19Fix
CVE-2026-49441Wazuh cluster file synchronization arbitrary file write9.1CNA v3.10.8%2026-08-19Fix
CVE-2026-49431FreeBSD incorrect user validation in ZFS_IOC_SET_PROP ioctl3.3CISA ADP v3.10.1%2026-08-19Fix
CVE-2026-49430FreeBSD kernel heap overflow in ZFS_IOC_RECV_NEW ioctl7.8CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-49429FreeBSD kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl7.8CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-49428FreeBSD posixshm: System calls can incorrectly free memory of largepage objects8.4CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-49427FreeBSD posixshm: Largepage shared memory objects not explicitly wired8.8CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-49426FreeBSD incorrect audit records for ptrace(2) syscall requests3.3CISA ADP v3.10.1%2026-08-19Fix
CVE-2026-49425FreeBSD kernel stack disclosure in 32-bit compatibility support5.5CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-49424FreeBSD kernel stack disclosure in Linux compatibility layer5.5CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-49423FreeBSD remote DOS via uninitialized memory access in KTLS receive3.3CISA ADP v3.10.1%2026-08-19Fix
CVE-2026-49422FreeBSD use-after-free in TCP RACK stack option handler8.4CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-49421FreeBSD unlinkat(2) ignores AT_RESOLVE_BENEATH flag7.1CISA ADP v3.10.1%2026-08-19Fix
CVE-2026-49420FreeBSD buffer overflow in libalias RTSP handler8.8CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-49419FreeBSD jail reference count underflow8.8CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-49418FreeBSD use-after-free in device pager page list8.8CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-49415FreeBSD local privilege escalation via execve(2) TOCTOU race8.8CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-49392Wazuh: Local SQL injection in FIM db due to path lookup interpolation in wazuh-syscheckd5.3CNA v3.10.3%2026-08-19Fix
CVE-2026-49289SimpleSAMLphp SAML2: Possible DoS via XPath Transform7.5CNA v3.10.8%2026-08-19Fix
CVE-2026-49283SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass8.7CNA v3.10.5%2026-08-19Fix
CVE-2026-49255electerm has command injection in File System Operations (rmrf, mv, cp)8.8CNA v3.10.8%2026-08-19Fix
CVE-2026-49253electerm has path traversal in Zmodem and Trzsz Download Filename Handling7.1CNA v3.10.4%2026-08-19Fix
CVE-2026-48711SSHFS: Improper neutralization of argument delimiters in a command (argument injection)7.0CNA v3.10.2%2026-08-19Fix
CVE-2026-48162wazuh Wazuh manager DistributedAPI path injection9.1CNA v3.10.7%2026-08-19Fix
CVE-2026-48024Wazuh cluster synchronization path traversal9.1CNA v3.10.8%2026-08-19Fix
CVE-2026-47187SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write9.3CNA v3.10.5%2026-08-19Fix
CVE-2026-46343Wazuh: Arbitrary file deletion via Cluster Protocol Incomplete Path Validation in end_receiving_file7.5CNA v4.00.4%2026-08-19Fix
CVE-2026-45798Wazuh wazuh-authd enrollment version parser denial of service7.5CNA v3.10.9%2026-08-19Fix
CVE-2026-45742Gotenberg: Concurrent execution using shared resource with improper synchronization (race condition)7.5CNA v3.10.7%2026-08-19Fix
CVE-2026-45741Gotenberg: SSRF deny-list bypass in IsPublicIP via IPv6 6to4 / NAT64 / site-local prefixes7.5CNA v3.10.4%2026-08-19Fix
CVE-2026-45274PoxenStudio Talebook sign-up endpoint vulnerability6.9CNA v4.00.7%2026-08-19Fix
CVE-2026-45273PoxenStudio talebook MyBooks: Privilege escalation8.7CNA v4.00.5%2026-08-19Fix
CVE-2026-45272PoxenStudio talebook MyBooks: Remote code execution9.4CNA v4.00.5%2026-08-19Fix
CVE-2026-44901Wazuh Cluster DAPI protocol deserialization of untrusted data remote code execution8.4CNA v3.10.7%2026-08-19Fix
CVE-2026-44829Gotenberg: Path traversal in zip entry name via Windows-style separators in upload filename8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-44256Wazuh: CRLF log injection via Unsanitized Basic-Auth Username5.3CNA v3.10.5%2026-08-19Fix
CVE-2026-44255Wazuh: Username Enumeration via timing side-channel5.3CNA v3.10.6%2026-08-19Fix
CVE-2026-44254Wazuh: Stack out-of-bounds write in remoted Decompression Path5.3CNA v3.10.5%2026-08-19Fix
CVE-2026-44253Wazuh: Cluster protocol memory exhaustion4.9CNA v3.10.6%2026-08-19Fix
CVE-2026-44252Wazuh Manager dapi RBAC Bypass allows privilege escalation7.7CNA v4.00.5%2026-08-19Fix
CVE-2026-43961Vim: Vimscript injection7.8CNA v3.10.2%2026-08-19Fix
CVE-2026-41424Wazuh: Privilege escalation via Admin-Protection Bypass in update-user API endpoint8.2CNA v3.10.5%2026-08-19Fix
CVE-2026-40509OpenEMR CSRF via DICOM Viewer web_path parameter5.3CNA v4.00.2%2026-08-19Fix
CVE-2026-40508OpenEMR stored XSS via Patient portal Template Import handler5.1CNA v4.00.3%2026-08-19Fix
CVE-2026-40507OpenEMR reflected XSS via templateHtml parameter in Patient portal5.1CNA v4.00.3%2026-08-19Fix
CVE-2026-32802Dell PowerPath improper privilege management5.3CNA v3.10.1%2026-08-19Fix
CVE-2026-32552YITH WooCommerce Membership Premium WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-19Fix
CVE-2026-32475Elementor Pro WordPress plugin arbitrary file upload9.0CNA v3.11.7%2026-08-19Reported exploitedNucleiExploit codeFix
CVE-2026-23501Dell RecoverPoint for Virtual Machines OS command injection7.2CNA v3.12.0%2026-08-19Fix
CVE-2026-22306Critical flaw impacting OZOLS ERP's automatic update channel10.0CNA v4.00.2%2026-08-19Fix
CVE-2026-20359Cisco Crosswork Security Hardening Release: August 20269.9CNA v3.10.4%2026-08-19Fix
CVE-2026-20358Cisco Crosswork Security Hardening Release: August 202610.0CNA v3.10.5%2026-08-19Fix
CVE-2026-20357Cisco Crosswork Security Hardening Release: August 202610.0CNA v3.10.6%2026-08-19Fix
CVE-2026-20327Cisco Unified Intelligence Center SQL injection6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-20320Cisco BroadWorks XML external entity injection7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-20319Cisco Secure Workload memory corruption7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-20318Cisco Secure Workload Software Security Hardening Release August 2026 improper input validation9.6CNA v3.10.4%2026-08-19Fix
CVE-2026-20317Cisco Secure Workload Software Security Hardening Release August 2026 improper authentication10.0CNA v3.10.6%2026-08-19Fix
CVE-2026-20315Cisco Secure Workload Software Security Hardening Release August 2026 improper access control10.0CNA v3.10.5%2026-08-19Fix
CVE-2026-20314Cisco Packaged and Unified Contact Center Enterprise server-side request forgery5.0CNA v3.10.4%2026-08-19Fix
CVE-2026-20302Cisco RoomOS stack overflow6.1CNA v3.10.2%2026-08-19Fix
CVE-2026-20232Cisco Industrial Ethernet 1000 Series Switches stored cross-site scripting5.4CNA v3.10.3%2026-08-19Fix
CVE-2026-20231Cisco Secure Workload injection9.9CNA v3.10.5%2026-08-19Fix
CVE-2026-20177Cisco Industrial Ethernet 1000 Series Switches denial of service5.3CNA v3.10.5%2026-08-19Fix
CVE-2026-20030Cisco Crosswork Security Hardening Release: August 202610.0CNA v3.10.5%2026-08-19Fix
CVE-2026-19942Atarim WordPress plugin authenticated (Author+) arbitrary file deletion via _wp_attached_file Meta8.1CNA v3.11.1%2026-08-19Fix
CVE-2026-19875IBM Langflow registration endpoint missing authentication7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-19842SAML Single Sign On - Unauthenticated Administrator account takeover via SAML Trust Anchor Overwrite8.8CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19782WPS Bidouille WordPress plugin Subscriber+ user email disclosure via wps_get_users5.4CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19709Membership For WooCommerce WordPress plugin unauthenticated Member data disclosure5.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19672Python CPython tarfile extraction filter path traversal6.3CNA v4.00.5%2026-08-19Fix
CVE-2026-19653IBM AIX and PowerVM VIOS memory page table handling denial of service6.5CNA v3.10.1%2026-08-19Fix
CVE-2026-19509RDK-B WebUI `ajaxSet_wireless_network_configuration.jst` improper input validation6.5CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19508RDK WebUI heap-based buffer overflow9.8CISA ADP v3.10.8%2026-08-19Fix
CVE-2026-19507RDK WebUI uncontrolled resource consumption7.5CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-19506RDK-B WebUI race condition8.1CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-19505RDK-B WebUI improper cryptographic signature verification9.8CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-19490Citrix NetScaler authentication bypass using an alternate path or channel9.3CNA v4.023.2%2026-08-19KEVExploit codeFix
CVE-2026-19489NetScaler ADC buffer overflow8.8CNA v4.03.2%2026-08-19
CVE-2026-19417KiviCare WordPress plugin Patient+ arbitrary Media Attachment read via IDOR6.5CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19416KiviCare WordPress plugin Patient+ Cross-Patient Appointment modification via IDOR4.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19406Easy Appointments WordPress plugin sensitive information disclosure2.7CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19321IBM Power System integer overflow6.7CNA v3.10.2%2026-08-19Fix
CVE-2026-19234IBM Power System buffer overflow8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-19198Akaunting improper authorization in BulkActions handle dispatch8.7CNA v4.00.3%2026-08-19
CVE-2026-19056ProSolution WP Client WordPress plugin reflected XSS via page parameter7.1CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-19055ProSolution WP Client WordPress plugin reflected XSS via Multiple parameters7.1CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-18937Broken Link Checker WordPress plugin unauthenticated RCE via Query Variable injection9.0CISA ADP v3.10.5%2026-08-19NucleiFix
CVE-2026-18874Red Hat Advanced Cluster Management for Kubernetes volsync-addon-controller vulnerability6.2CNA v3.10.5%2026-08-19Fix
CVE-2026-18871Power System buffer overflow7.3CNA v3.10.1%2026-08-19Fix
CVE-2026-18849IBM OpenBMC code execution6.8CNA v3.10.4%2026-08-19Fix
CVE-2026-18848IBM Power System cross-site request forgery (CSRF)8.3CNA v3.10.2%2026-08-19Fix
CVE-2026-18821Power System out-of-bounds write7.5CNA v3.10.2%2026-08-19Fix
CVE-2026-18779TrueBooker Appointment Booking missing authorization5.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-18778TrueBooker Appointment Booking information disclosure5.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-18777TrueBooker Appointment Booking missing authorization5.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-18776TrueBooker Appointment Booking WordPress plugin unauthenticated account takeover9.8CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-18756HumHub Community Edition reflected XSS in Space membership request button rendering7.2CNA v4.00.5%2026-08-19
CVE-2026-18681This Power System buffer overflow6.8CNA v3.10.3%2026-08-19Fix
CVE-2026-18544IBM Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference8.1CNA v3.10.4%2026-08-19Fix
CVE-2026-18526HumHub / stored cross-site scripting in oEmbed confirmation7.4CNA v4.00.5%2026-08-19
CVE-2026-18466WP Maps WordPress plugin Subscriber+ Unlimited Autoloaded option creation5.4CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-18430HumHub stored XSS in comment-deletion notifications through unescaped administrator reason7.2CNA v4.00.5%2026-08-19
CVE-2026-18372CSS injection in M-Files Web4.8CNA v4.00.4%2026-08-19Fix
CVE-2026-18371HTML injection in M-Files Web5.1CNA v4.00.4%2026-08-19Fix
CVE-2026-18315TrueBooker WordPress plugin unauthenticated authorization bypass9.8CNA v3.10.6%2026-08-19Reported exploitedNucleiExploit codeFix
CVE-2026-18231WP Directory Kit WordPress plugin unauthenticated user email disclosure via select_2_ajax_user5.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-18202JetEngine WordPress plugin Author+ stored XSS via SVG upload6.8CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-18102IBM i buffer overflow3.5CNA v3.10.2%2026-08-19Fix
CVE-2026-18051W3 Total Cache page cache key path traversal10.0CISA ADP v3.10.6%2026-08-19Fix
CVE-2026-18031TabaPay Gateway WordPress plugin unauthenticated account takeover via Payment Callback9.8CISA ADP v3.10.5%2026-08-19
CVE-2026-17565Animation Addons for Elementor WordPress plugin unauthenticated server-side request forgery7.2CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-17494IBM Power System buffer overflow8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-17429IBM Power System incorrect authorization8.1CNA v3.10.2%2026-08-19Fix
CVE-2026-17414Power System improper input validation8.1CNA v3.10.2%2026-08-19Fix
CVE-2026-17183Grafana alert rule incorrect authorization7.1CNA v3.10.3%2026-08-19Fix
CVE-2026-17100IBM Power System out-of-bounds write8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-17097Power System improper validation7.3CNA v3.10.1%2026-08-19Fix
CVE-2026-17093IBM Power System buffer overflow8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-17091Power System integer overflow8.4CNA v3.10.1%2026-08-19Fix
CVE-2026-17063IBM Power System incorrect authorization7.9CNA v3.10.2%2026-08-19Fix
CVE-2026-17042IBM Power System out-of-bounds read7.3CNA v3.10.1%2026-08-19Fix
CVE-2026-17028Power System out-of-bounds read6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-17015IBM i denial of service5.4CNA v3.10.3%2026-08-19Fix
CVE-2026-16979SmartCrawl WordPress plugin Private/Draft post Title disclosure and post Meta Key enumeration4.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-16950Product Shortlist WordPress plugin unauthenticated SQL injection via get_shortlisted_products8.6CISA ADP v3.10.4%2026-08-19
CVE-2026-16938IBM Power System missing authorization6.9CNA v3.10.2%2026-08-19Fix
CVE-2026-16933IBM Power System integer overflow8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-16930IBM Power System missing authorization8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-16919IBM AIX and PowerVM VIOS type confusion9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16917IBM AIX and PowerVM VIOS integer overflow9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16914IBM AIX and PowerVM VIOS out-of-bounds write6.7CNA v3.10.2%2026-08-19Fix
CVE-2026-16913IBM AIX and PowerVM VIOS stack-based buffer overflow9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16911IBM AIX and PowerVM VIOS stack-based buffer overflow8.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16909IBM AIX and PowerVM VIOS off-by-one error8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-16903IBM AIX and PowerVM VIOS out-of-bounds write9.6CNA v3.10.4%2026-08-19Fix
CVE-2026-16901IBM AIX and PowerVM VIOS out-of-bounds write8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-16897IBM AIX and PowerVM VIOS out-of-bounds write4.4CNA v3.10.1%2026-08-19Fix
CVE-2026-16894IBM AIX and PowerVM VIOS stack-based buffer overflow9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16891IBM AIX and PowerVM VIOS out-of-bounds read3.3CNA v3.10.1%2026-08-19Fix
CVE-2026-16890IBM AIX and PowerVM VIOS integer overflow3.6CNA v3.10.1%2026-08-19Fix
CVE-2026-16888IBM AIX and PowerVM VIOS path traversal3.7CNA v3.10.5%2026-08-19Fix
CVE-2026-16886IBM AIX and PowerVM VIOS out-of-bounds write4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-16885IBM AIX and PowerVM VIOS stack-based buffer overflow9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16883IBM AIX and PowerVM VIOS out-of-bounds read5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-16882IBM AIX and PowerVM VIOS OS command injection9.8CNA v3.10.9%2026-08-19Fix
CVE-2026-16877IBM AIX and PowerVM VIOS stack-based buffer overflow8.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16875IBM AIX and PowerVM VIOS OS command injection7.8CNA v3.10.2%2026-08-19Fix
CVE-2026-16874IBM AIX and PowerVM VIOS RBAC role enforcement privilege escalation7.8CNA v3.10.2%2026-08-19Fix
CVE-2026-16873IBM AIX and PowerVM VIOS out-of-bounds write7.8CNA v3.10.2%2026-08-19Fix
CVE-2026-16872IBM AIX and PowerVM VIOS stack-based buffer overflow9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16869IBM AIX and PowerVM VIOS environment variable handling untrusted search path7.8CNA v3.10.2%2026-08-19Fix
CVE-2026-16866IBM AIX and PowerVM VIOS out-of-bounds read4.8CNA v3.10.3%2026-08-19Fix
CVE-2026-16865IBM AIX and PowerVM VIOS OS command injection8.8CNA v3.10.7%2026-08-19Fix
CVE-2026-16864IBM AIX and PowerVM VIOS out-of-bounds write9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16862IBM AIX and PowerVM VIOS out-of-bounds write9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16857IBM AIX and PowerVM VIOS improper authentication8.2CNA v3.10.6%2026-08-19Fix
CVE-2026-16855IBM AIX and PowerVM VIOS out-of-bounds write5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-16852IBM AIX and PowerVM VIOS integer overflow7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16851IBM AIX and PowerVM VIOS use-after-free7.4CNA v3.10.3%2026-08-19Fix
CVE-2026-16850IBM AIX and PowerVM VIOS command injection8.8CNA v3.11.5%2026-08-19Fix
CVE-2026-16849IBM AIX and PowerVM VIOS denial of service4.3CNA v3.10.3%2026-08-19Fix
CVE-2026-16848IBM AIX and PowerVM VIOS DHCP options handling OS command injection8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-16847IBM AIX and PowerVM VIOS heap buffer overflow8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-16846IBM AIX and PowerVM VIOS null pointer dereference6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-16845IBM AIX and PowerVM VIOS heap buffer overflow9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16844IBM AIX and PowerVM VIOS OS command injection8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-16842IBM AIX and PowerVM VIOS OS command injection8.8CNA v3.10.5%2026-08-19Fix
CVE-2026-16841IBM AIX and PowerVM VIOS stack buffer overflow8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-16840IBM AIX and PowerVM VIOS out-of-bounds write9.8CNA v3.10.8%2026-08-19Fix
CVE-2026-16839IBM AIX and PowerVM VIOS IPv4 IP-options parser integer underflow9.4CNA v3.10.5%2026-08-19Fix
CVE-2026-16838IBM AIX and PowerVM VIOS race condition7.0CNA v3.10.1%2026-08-19Fix
CVE-2026-16837IBM AIX and PowerVM VIOS denial of service7.5CNA v3.10.3%2026-08-19Fix
CVE-2026-16836IBM AIX and PowerVM VIOS resource exhaustion7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16835IBM Power System improper certificate validation9.6CNA v3.10.4%2026-08-19Fix
CVE-2026-16834IBM AIX and PowerVM VIOS integer underflow9.8CNA v3.10.6%2026-08-19Fix
CVE-2026-16833IBM AIX and PowerVM VIOS out-of-bounds read5.3CNA v3.10.4%2026-08-19Fix
CVE-2026-16832IBM Power System buffer overflow8.4CNA v3.10.3%2026-08-19Fix
CVE-2026-16831IBM AIX and PowerVM VIOS resource exhaustion7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16829IBM AIX and PowerVM VIOS null pointer dereference5.3CNA v3.10.3%2026-08-19Fix
CVE-2026-16828IBM Power System out-of-bounds read7.6CNA v3.10.3%2026-08-19Fix
CVE-2026-16827IBM AIX and PowerVM VIOS denial of service5.9CNA v3.10.4%2026-08-19Fix
CVE-2026-16825IBM AIX and PowerVM VIOS out-of-bounds write4.2CNA v3.10.3%2026-08-19Fix
CVE-2026-16824IBM AIX and PowerVM VIOS denial of service7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16822IBM AIX and PowerVM VIOS TNC policy server connection improper certificate validation9.3CNA v3.10.3%2026-08-19Fix
CVE-2026-16819IBM AIX and PowerVM VIOS race condition7.7CNA v3.10.1%2026-08-19Fix
CVE-2026-16818IBM AIX and PowerVM VIOS resource exhaustion7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16817IBM AIX and PowerVM VIOS null pointer dereference7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16816IBM AIX and PowerVM VIOS OS command injection9.9CNA v3.10.8%2026-08-19Fix
CVE-2026-16814IBM AIX and PowerVM VIOS out-of-bounds write8.8CNA v3.10.4%2026-08-19Fix
CVE-2026-16724Power System integer overflow4.5CNA v3.10.3%2026-08-19Fix
CVE-2026-16707Power System out-of-bounds read8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-16706IBM AIX and PowerVM VIOS out-of-bounds write7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16703IBM AIX and PowerVM VIOS privilege escalation7.8CNA v3.10.1%2026-08-19Fix
CVE-2026-16690IBM AIX and PowerVM VIOS denial of service7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-16687IBM Power System buffer overflow9.6CNA v3.10.3%2026-08-19Fix
CVE-2026-16686IBM AIX and PowerVM VIOS NFS-exported filesystems improper authentication8.2CNA v3.10.5%2026-08-19Fix
CVE-2026-16661Power System integer overflow8.2CNA v3.10.2%2026-08-19Fix
CVE-2026-16656IBM AIX and PowerVM VIOS improper authentication9.8CNA v3.10.7%2026-08-19Fix
CVE-2026-16617Simple File List WordPress plugin unauthenticated stored XSS via file Description8.8CISA ADP v3.10.5%2026-08-19
CVE-2026-16616Simple File List WordPress plugin unauthenticated arbitrary file read and Move via path traversal8.6CISA ADP v3.10.7%2026-08-19
CVE-2026-16570NextScripts: Social Networks Auto-Poster WordPress plugin reflected XSS via Facebook OAuth Callback7.1CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-16440Eclipse OpenJ9 uncontrolled recursion5.7CNA v4.00.2%2026-08-19Fix
CVE-2026-16058YayCurrency WordPress plugin unauthenticated order and Vendor Financial data disclosure5.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-16019SQL injection in Faydam Innovation's FAYDAM Datalogger9.8CNA v3.10.5%2026-08-19Fix
CVE-2026-15961Power system information disclosure5.2CNA v3.10.1%2026-08-19Fix
CVE-2026-15780WP Statistics WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.6%2026-08-19Reported exploitedFix
CVE-2026-15446EWWW Image Optimizer WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-08-19Fix
CVE-2026-15421Speed Optimizer WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-08-19Fix
CVE-2026-15253Easy Media Replace WordPress plugin Author+ stored XSS via Attachment Title6.8CISA ADP v3.10.4%2026-08-19Exploit code
CVE-2026-15078IBM AIX and PowerVM VIOS NIM improper certificate validation8.1CNA v3.10.3%2026-08-19Fix
CVE-2026-15068IBM AIX and PowerVM VIOS NIM OS command injection9.9CNA v3.11.1%2026-08-19Fix
CVE-2026-15065IBM AIX and PowerVM VIOS NIM cleartext storage of sensitive information9.1CNA v3.10.6%2026-08-19Fix
CVE-2026-15061IBM AIX and PowerVM VIOS nimesis registration service path traversal8.2CNA v3.10.6%2026-08-19Fix
CVE-2026-14978HashiCorp go-slug .terraformignore pattern matching vulnerability5.5CNA v3.10.1%2026-08-19Fix
CVE-2026-14970IBM AIX and PowerVM VIOS NIM server client registration buffer overflow7.5CNA v3.10.5%2026-08-19Fix
CVE-2026-14861User Verification WordPress plugin unauthenticated arbitrary account Lockout via IDOR7.5CISA ADP v3.10.4%2026-08-19
CVE-2026-14826Quiz and Survey Master quiz configuration API insecure direct object reference2.7CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-14825Quiz And Survey Master WordPress plugin Contributor+ arbitrary Quiz Text settings update via IDOR2.7CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-14514IBM Reliable Scalable Cluster Technology denial of service6.5CNA v3.10.3%2026-08-19Fix
CVE-2026-14334Booking calendar, Appointment Booking System WordPress plugin unauthenticated stored XSS8.8CISA ADP v3.10.5%2026-08-19
CVE-2026-1428710Web Booster critical CSS token handler stored cross-site scripting4.7CISA ADP v3.10.2%2026-08-19Fix
CVE-2026-14196WCFM Marketplace vendor review management insecure direct object reference4.3CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-13175Eventin WordPress plugin Contributor+ Schedule deletion and modification via IDOR6.5CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-13174Eventin WordPress plugin Contributor+ Speaker account deletion via IDOR7.2CISA ADP v3.10.5%2026-08-19Fix
CVE-2026-13173Eventin WordPress plugin Contributor+ user role and Meta modification via Speaker creation2.7CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-13169Eventin WordPress plugin arbitrary Event modification, deletion and Ownership takeover8.1CISA ADP v3.10.4%2026-08-19Fix
CVE-2026-12983Dinatur WordPress plugin unauthenticated SQL injection via Column Name injection8.6CISA ADP v3.10.4%2026-08-19
CVE-2026-12634Zephyr settings NVS backend out-of-bounds write5.3CNA v3.10.1%2026-08-19Fix
CVE-2026-12633zephyrproject zephyr out-of-bounds write in IPv6 6LoWPAN Context option handling8.1CNA v3.10.3%2026-08-19Fix
CVE-2026-12522Zephyr HL7800 modem driver stack buffer overflow8.8CNA v3.10.3%2026-08-19Fix
CVE-2026-11751LY Armeria man-in-the-middle9.1CNA v4.00.3%2026-08-19
CVE-2026-11617Tanium addressed a compression bomb vulnerability in Findings3.1CNA v3.10.3%2026-08-19Fix
CVE-2026-11565Advanced File Manager WordPress plugin arbitrary file read and write8.5CISA ADP v3.10.3%2026-08-19Fix
CVE-2026-8810Insyde Software InsydeH2O, InsydeH2O ARM HDD password leakage6.9CNA v3.10.1%2026-08-19Fix
CVE-2026-8619TP-Link TL-MR100, TL-MR150, TL-MR6400 and Archer MR600 HTTP service null pointer dereference7.1CNA v4.00.9%2026-08-19Fix
CVE-2026-4937Power System insufficient entropy5.3CNA v3.10.1%2026-08-19Fix
CVE-2026-4936Power System insufficient entropy5.1CNA v3.10.1%2026-08-19Fix
CVE-2026-76047Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-76046Google Android ANGLE in Google Chrome on buffer overflow8.3CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-76045Google Chrome WebGL use-after-free8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-76044Google Chrome USB race condition8.3CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-76043Google Chrome V8 incorrect calculation8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-76042Google Chrome GPU uninitialized resource use3.1CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-76041Google Chrome Skia information disclosure4.3CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-76040Google Chrome Browser use-after-free8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-76039Google Chrome incorrectly resolved name or reference6.5CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-76038Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-76037Google Chrome CredentialProvider link following8.4CISA ADP v3.10.1%2026-08-18Fix
CVE-2026-76036Google Android Dawn in Google Chrome on buffer overflow9.6CISA ADP v3.10.5%2026-08-18Exploit codeFix
CVE-2026-76035Google Chrome Media inappropriate implementation9.6CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-76034Google Chrome WebGL buffer overflow8.8CISA ADP v3.10.6%2026-08-18Fix
CVE-2026-76033Google Chrome CORS inappropriate implementation4.2CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-76032Pydio Cells to missing authorization on the Share Link REST handler5.3CNA v4.00.4%2026-08-18
CVE-2026-75976TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow9.4CNA v4.00.9%2026-08-18
CVE-2026-75936Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java8.7CNA v4.00.6%2026-08-18Fix
CVE-2026-75935Memory-amplification denial of service via declared-length preallocation in Amazon ion-java8.7CNA v4.00.6%2026-08-18Fix
CVE-2026-75926Hugo to.x Node Permission Model Bypass via Default TailwindCSS Child-Process Grant9.3CNA v4.00.3%2026-08-18Fix
CVE-2026-75924Red Hat Advanced Cluster Management for Kubernetes privilege escalation8.7CNA v3.10.3%2026-08-18
CVE-2026-75915CodeWhale Environment variable leak via js_execution8.7CNA v4.00.7%2026-08-18Fix
CVE-2026-75914CodeWhale path traversal via image_analyze symlink8.7CNA v4.00.5%2026-08-18Fix
CVE-2026-75913CodeWhale argument injection via git_show8.5CNA v4.00.5%2026-08-18Fix
CVE-2026-75912CodeWhale argument injection via git_blame8.3CNA v4.00.4%2026-08-18Fix
CVE-2026-75911CodeWhale remote code execution via allow_shell8.5CNA v4.00.2%2026-08-18Fix
CVE-2026-75904libmodplug out-of-bounds read in pat_smplooped via Crafted MIDI file4.8CNA v4.00.2%2026-08-18Fix
CVE-2026-75898RAGFlow server-side request forgery via Agent Invoke component8.4CNA v4.00.4%2026-08-18Fix
CVE-2026-75897Uncontrolled resource consumption in Capabilities route in OpenSearch Dashboards8.7CNA v4.00.7%2026-08-18Fix
CVE-2026-75877TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow9.4CNA v4.00.9%2026-08-18
CVE-2026-75876xianrendzw EasyReport Move Operations ModuleController.java SQL injection5.3CNA v4.00.3%2026-08-18
CVE-2026-75874Mozilla Firefox sandbox escape in the Remote settings client component10.0CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-75872HTML injection in MailerUp double opt-in verification email6.9CNA v4.00.7%2026-08-18Fix
CVE-2026-75859CodeWhale arbitrary file read via instructions8.7CNA v4.00.5%2026-08-18Fix
CVE-2026-75858CodeWhale rlm_eval remote code execution8.5CNA v4.00.4%2026-08-18Fix
CVE-2026-75857CodeWhale privilege escalation via exec_shell_interact7.3CNA v4.00.2%2026-08-18Fix
CVE-2026-75856CodeWhale SSRF Bypass via DNS Pinning TOCTOU9.2CNA v4.00.5%2026-08-18Fix
CVE-2026-75855ArcadeDB path traversal via create/drop database8.4CNA v4.00.5%2026-08-18Exploit codeFix
CVE-2026-75854ArcadeDB Redis Wire-Protocol plugin missing authentication9.3CNA v4.00.9%2026-08-18Fix
CVE-2026-75853ArcadeDB Gremlin Wire protocol authorization bypass Cross-Database8.7CNA v4.00.6%2026-08-18Fix
CVE-2026-75852ArcadeDB MongoDB wire protocol authentication bypass cross-database9.3CNA v4.00.7%2026-08-18Fix
CVE-2026-75851ArcadeDB authentication bypass via Async command9.4CNA v4.00.4%2026-08-18Fix
CVE-2026-75850ArcadeDB Per-Type ACL Bypass via Batch Handlers2.3CNA v4.00.2%2026-08-18Fix
CVE-2026-75846ArcadeDB Unauthorized Function Deletion via delete FUNCTION7.1CNA v4.00.4%2026-08-18Fix
CVE-2026-75845ArcadeDB authorization bypass via set_server_setting5.3CNA v4.00.3%2026-08-18Fix
CVE-2026-75844ArcadeDB SSRF via IMPORT DATABASE validator bypass7.1CNA v4.00.3%2026-08-18Fix
CVE-2026-75843ArcadeDB privilege escalation via gRPC Transaction9.4CNA v4.00.4%2026-08-18Fix
CVE-2026-75842ArcadeDB arbitrary file read via LOAD CSV8.3CNA v4.00.5%2026-08-18Fix
CVE-2026-75841ArcadeDB denial of service via range5.3CNA v4.00.4%2026-08-18Fix
CVE-2026-75840ArcadeDB arbitrary file read via Unescaped Regex8.7CNA v4.00.4%2026-08-18Fix
CVE-2026-75839ArcadeDB information disclosure via Cluster endpoints5.3CNA v4.00.3%2026-08-18Fix
CVE-2026-75838DOMPurify cross-site scripting via IN_PLACE hook5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-75837Grav privilege escalation via Group Access field9.3CNA v4.00.5%2026-08-18Fix
CVE-2026-75836Grav API plugin missing authorization8.7CNA v4.00.5%2026-08-18Fix
CVE-2026-75835Grav API plugin missing authorization9.3CNA v4.00.3%2026-08-18Fix
CVE-2026-75834Grav stored XSS via Invalid UTF-8 Byte5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-75833Grav API plugin open redirect via Backslash Bypass8.6CNA v4.00.2%2026-08-18Fix
CVE-2026-75832Grav API plugin authorization bypass9.3CNA v4.00.3%2026-08-18Fix
CVE-2026-75831Grav stored XSS via audio/video source URL5.1CNA v4.00.4%2026-08-18Fix
CVE-2026-75830getgrav grav grav-plugin-api path traversal via batchCopy7.1CNA v4.00.4%2026-08-18Fix
CVE-2026-75829getgrav grav grav-plugin-api Twig SSTI via translate endpoint8.6CNA v4.00.4%2026-08-18Fix
CVE-2026-75828Grav stored XSS via detectXss Quote Bypass9.3CNA v4.00.4%2026-08-18Fix
CVE-2026-75827Grav arbitrary file write via error_log9.3CNA v4.00.9%2026-08-18Exploit codeFix
CVE-2026-75784TRENDnet TEW-WLC100 HTTP header nginx FUN_0040da4c stack-based overflow10.0CNA v4.01.1%2026-08-18
CVE-2026-75783TRENDnet TEW-WLC100P DHCP blobmsg netifd stack-based overflow9.4CNA v4.00.6%2026-08-18
CVE-2026-75778code-projects Task Management System login form SQL injection6.9CNA v4.00.4%2026-08-18
CVE-2026-75774karakeep-app karakeep OAuth Sign-In auth.ts improper authentication6.3CNA v4.00.6%2026-08-18
CVE-2026-75773karakeep-app karakeep Login endpoint auth.ts authorize excessive authentication6.3CNA v4.00.7%2026-08-18Fix
CVE-2026-75627Bastillion authentication bypass via Path-Prefix Routing Mismatch9.3CNA v4.00.8%2026-08-18
CVE-2026-75626SpiderFoot stored cross-site scripting via Correlation Titles9.3CNA v4.00.3%2026-08-18
CVE-2026-75625Kraken Agents Peer-to-Peer Download cache poisoning via Digest Verification Bypass9.1CNA v4.00.2%2026-08-18
CVE-2026-75485Red Hat Advanced Cluster Management for Kubernetes must-gather: /tmp/kubeconfig retention5.5CNA v3.10.2%2026-08-18Fix
CVE-2026-75151SourceCodester Onlne Examination and Learning Management System cross-site request forgery5.3CNA v4.00.2%2026-08-18
CVE-2026-75130Context7 prompt injection via Custom AI Instructions6.4CNA v4.00.5%2026-08-18Fix
CVE-2026-75107Grav form plugin stored XSS via Field Properties5.1CNA v4.00.2%2026-08-18Fix
CVE-2026-75094Comfast CF-N1-S CGI mbox-config sub_44B438 os command injection9.4CNA v4.03.2%2026-08-18
CVE-2026-75093Sonos tract ONNX Initializer Loader tensor.rs from_raw_dt_align buffer size5.3CNA v4.00.6%2026-08-18
CVE-2026-75091Quill Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-75090EricLBuehler Mistral.rs GGUF Tokenizer gguf_tokenizer.rs convert_gguf_to_hf_tokenizer out-of-bounds5.3CNA v4.00.7%2026-08-18Fix
CVE-2026-75089PHPGurukul Complaint Management System check_availability.php SQL injection6.9CNA v4.00.4%2026-08-18
CVE-2026-75088itsourcecode Hospital Management System viewbilling.php SQL injection5.3CNA v4.00.3%2026-08-18
CVE-2026-75087itsourcecode Hospital Management System viewdepartment.php SQL injection5.3CNA v4.00.3%2026-08-18
CVE-2026-75086itsourcecode Hospital Management System viewroom.php SQL injection5.3CNA v4.00.3%2026-08-18
CVE-2026-75082Webkul Bagisto customer registration notification email cross-site scripting5.3CNA v4.00.4%2026-08-18
CVE-2026-75032BlueZ AVRCP media element and folder parsing out-of-bounds read6.3CNA v3.10.2%2026-08-18Fix
CVE-2026-74990Internally found bugs fixed in Thunderbird ESR, Thunderbird ESR and Thunderbird 1549.8CISA ADP v3.10.7%2026-08-18Fix
CVE-2026-74989Internally found bugs fixed in Thunderbird 1549.8CISA ADP v3.10.6%2026-08-18Fix
CVE-2026-74988Internally found bugs fixed in Thunderbird ESR and Thunderbird 1549.8CISA ADP v3.10.6%2026-08-18Fix
CVE-2026-74987Internally found bugs fixed in Thunderbird ESR, Thunderbird ESR and Thunderbird 1549.8CISA ADP v3.10.7%2026-08-18Fix
CVE-2026-74986Mozilla Firefox Site isolation issue in the CSS Parsing and Computation component9.1CISA ADP v3.10.6%2026-08-18Fix
CVE-2026-74985Mozilla Firefox privilege escalation in the Enterprise Policies component9.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74984Mozilla Firefox race condition in the JavaScript Engine component6.8CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-74983Mozilla Firefox Mitigation bypass in the Data Loss Prevention component8.1CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74982Mozilla Firefox denial of service in the widget component7.5CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74981Mozilla Firefox Site isolation issue in the Audio/Video: Web Codecs component8.1CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74980Mozilla clickjacking issue in the Downloads component in Firefox for Android6.5CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-74979Mozilla Firefox Mitigation bypass in the Add-ons Manager component9.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74978Mozilla Firefox clickjacking issue in the widget component8.1CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74977Mozilla Firefox integer overflow in the Graphics component7.5CISA ADP v3.10.6%2026-08-18Fix
CVE-2026-74976Mozilla Firefox JIT miscompilation in the JavaScript Engine: JIT component6.5CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74975Mozilla spoofing issue in the Downloads component in Firefox for Android5.4CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74974Mozilla Firefox same-origin policy bypass in the Graphics: ImageLib component5.4CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74973Mozilla Firefox race condition, use-after-free in the Graphics component4.2CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74972Mozilla Firefox information disclosure in the DOM: Push Subscriptions component4.3CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-74971Mozilla Firefox information disclosure in the DOM: UI Events and Focus Handling component4.3CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-74970Mozilla Firefox site isolation issue in the Graphics component5.4CISA ADP v3.10.2%2026-08-18Exploit codeFix
CVE-2026-74969Mozilla Firefox use-after-free in the Layout: Text and Fonts component8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74968Mozilla Firefox site isolation issue in the Graphics: WebRender component5.4CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74967Mozilla Firefox same-origin policy bypass in the Audio/Video: Playback component5.4CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74966Mozilla Firefox information disclosure in the Form Autofill component7.5CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74965Mozilla Firefox privilege escalation in the Shell Integration component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74964Mozilla Firefox integer overflow in the Graphics component9.8CISA ADP v3.10.7%2026-08-18Fix
CVE-2026-74963Mozilla Firefox same-origin policy bypass in the Networking: Cookies component5.4CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74962Mozilla Firefox Site isolation issue in the Networking: Cookies component8.1CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74961Mozilla Firefox side-channel in the Web Audio component9.1CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74960Mozilla Firefox site isolation issue in the WebExtensions component8.1CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74959Mozilla Firefox Mitigation bypass in the Storage: Cache API component9.1CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74958Mozilla Firefox information disclosure in the WebRTC component7.5CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74957Mozilla Firefox Mitigation bypass in the Safe Browsing component8.1CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74956Mozilla Firefox same-origin policy bypass in the DOM: Service Workers component9.1CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74955Mozilla Firefox privilege escalation in the Request Handling component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74954Mozilla Firefox information disclosure due to side-channel in the Storage: Cache API component7.5CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74953Mozilla Firefox privilege escalation in the Networking: Cookies component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74952Mozilla Firefox privilege escalation in the Application Update component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74951Mozilla clickjacking issue in Firefox for Android6.5CISA ADP v3.10.3%2026-08-18Fix
CVE-2026-74950Mozilla Firefox privilege escalation in the Downloads API component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74949Mozilla Firefox privilege escalation due to use-after-free in the Graphics: Canvas2D component8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74948Mozilla Firefox information disclosure in the Graphics component6.5CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74947Mozilla Firefox privilege escalation due to invalid pointer in the Graphics component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74946Mozilla Firefox and Thunderbird CanvasWebGL vulnerability8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74945Mozilla Firefox information disclosure in the Graphics: Text component6.5CISA ADP v3.10.4%2026-08-18Exploit codeFix
CVE-2026-74944Mozilla Firefox use-after-free in the DOM: Core and HTML component9.8v3.10.4%2026-08-18Fix
CVE-2026-74943Mozilla Firefox use-after-free in the Graphics: ImageLib component9.8v3.10.6%2026-08-18Fix
CVE-2026-74942Mozilla Firefox privilege escalation in the Remote settings client component8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74941Mozilla Firefox privilege escalation in the Graphics: CanvasWebGL component8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74940Mozilla Firefox use-after-free in the Graphics: Text component9.8v3.10.4%2026-08-18Fix
CVE-2026-74939Mozilla Firefox privilege escalation in the DOM: Navigation component8.8CISA ADP v3.10.5%2026-08-18Exploit codeFix
CVE-2026-74938Mozilla Firefox mitigation bypass in the JavaScript: GC component9.1CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74937Mozilla Firefox use-after-free in the JavaScript: GC component8.8CISA ADP v3.10.4%2026-08-18Fix
CVE-2026-74936Mozilla Firefox use-after-free in the JavaScript: WebAssembly component9.8v3.10.4%2026-08-18Fix
CVE-2026-74935Mozilla Firefox privilege escalation in the DOM: Networking component8.8CISA ADP v3.10.5%2026-08-18Fix
CVE-2026-74934Mozilla Firefox site isolation issue in the Graphics: CanvasWebGL component7.5CISA ADP v3.10.2%2026-08-18Fix
CVE-2026-74908Grav plugin-api script injection via SVG5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-74907Grav path traversal via plugin-asset-map.php8.2CNA v4.00.4%2026-08-18Fix
CVE-2026-74906SiYuan incorrect authorization via Publish Access8.7CNA v4.00.4%2026-08-18Fix
CVE-2026-74905SiYuan SSRF via IPv6 Transition Address Bypass6.9CNA v4.00.4%2026-08-18Fix
CVE-2026-74904SiYuan missing authorization via block API8.7CNA v4.00.5%2026-08-18Fix
CVE-2026-74903SiYuan insufficient access control via spinBlockDOM5.3CNA v4.00.3%2026-08-18Fix
CVE-2026-74902SiYuan XSS-to-RCE via malicious filename upload9.3CNA v4.00.2%2026-08-18Fix
CVE-2026-74046Wazuh DoS via fdecompress_files zip bomb6.9CNA v4.00.6%2026-08-18Fix
CVE-2026-74044Wazuh path traversal arbitrary Directory Deletion via Cluster Hello7.0CNA v4.00.6%2026-08-18Fix
CVE-2026-74039Wazuh API DoS via Deeply Nested JSON auth_context7.1CNA v4.00.6%2026-08-18Fix
CVE-2026-74038Wazuh path traversal DoS via Agent Enrollment7.0CNA v4.00.5%2026-08-18Fix
CVE-2026-74015Readabler WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-74012TaxoPress WordPress plugin PHP object injection8.8CNA v3.10.5%2026-08-18Fix
CVE-2026-74009Razorpay for WooCommerce WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-74008Shortcodes and extra features for Phlox WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-08-18
CVE-2026-740073D FlipBook PDF Flipbook Viewer, Flipbook Image Gallery WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-74006WP Table Builder WordPress plugin broken access control4.3CNA v3.10.3%2026-08-18Fix
CVE-2026-74004Gravity Booster Styles and Layouts for Gravity Forms WordPress plugin broken access control5.4CNA v3.10.2%2026-08-18
CVE-2026-74003RomethemeForm For Elementor WordPress plugin broken access control4.3CNA v3.10.3%2026-08-18
CVE-2026-73997Starter Templates by Kadence WP WordPress plugin denial of service Attack7.5CNA v3.10.5%2026-08-18Fix
CVE-2026-73996Masteriyo - LMS WordPress plugin arbitrary file upload9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-73995User Registration WordPress plugin broken authentication5.4CNA v3.10.4%2026-08-18Fix
CVE-2026-73994Charitable WordPress plugin broken access control7.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73974Linuxfabrik Monitoring Plugins test argument handler path traversal5.5CNA v3.10.2%2026-08-18Fix
CVE-2026-73973Linuxfabrik Monitoring Plugins logfile plugin path traversal5.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73939Oracle Helidon Imperative Web Server component unauthorized data modification8.6CNA v3.10.4%2026-08-18Fix
CVE-2026-73938Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73937Oracle Helidon Imperative Web Server component denial of service8.2CNA v3.10.4%2026-08-18Fix
CVE-2026-73936Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73935Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73934Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73933Oracle Helidon Imperative Web Server component unauthorized data modification7.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73932Oracle Helidon Imperative Web Server component denial of service5.3CNA v3.10.4%2026-08-18Fix
CVE-2026-73931Oracle Helidon Imperative Web Server component unauthorized data modification8.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73930Oracle Helidon Imperative Web Server component unauthorized data modification9.9CNA v3.10.4%2026-08-18Fix
CVE-2026-73929Oracle Helidon Imperative Web Server component unauthorized data modification8.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73928Oracle Helidon Imperative Web Server component unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73927Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73925Oracle Helidon Imperative Web Server component unauthorized data modification8.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73924Oracle Helidon Imperative Web Server component unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73923Oracle Helidon Imperative Web Server component unauthorized data modification3.7CNA v3.10.2%2026-08-18Fix
CVE-2026-73922Oracle Helidon Imperative Web Server component unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73921Oracle Helidon Imperative Web Server component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-73920Oracle Helidon Imperative Web Server component unauthorized data access9.4CNA v3.10.5%2026-08-18Fix
CVE-2026-73919Oracle Helidon Imperative Web Server component unauthorized data modification5.4CNA v3.10.2%2026-08-18Fix
CVE-2026-73918Oracle Helidon Imperative Web Server component unauthorized data modification7.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73917Oracle Helidon Imperative Web Server component unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73916Oracle Helidon Imperative Web Server component unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73915Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73914Oracle Helidon Imperative Web Server component denial of service6.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73913Oracle Helidon Imperative Web Server component unauthorized data modification5.4CNA v3.10.2%2026-08-18Fix
CVE-2026-73912Oracle Helidon Imperative Web Server component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-73911Oracle Helidon Imperative Web Server component unauthorized data modification5.4CNA v3.10.2%2026-08-18Fix
CVE-2026-73910Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73909Oracle Helidon Imperative Web Server component unauthorized data access5.9CNA v3.10.3%2026-08-18Fix
CVE-2026-73908Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73907Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73906Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73905Oracle Helidon Imperative Web Server component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-73904Oracle Helidon Imperative Web Server component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73903Oracle Helidon Imperative Web Server component unauthorized data modification7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73902Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73901Oracle Helidon Imperative Web Server component unauthorized data modification4.8CNA v3.10.2%2026-08-18Fix
CVE-2026-73900Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73899Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73898Oracle Helidon Imperative Web Server component unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-73897Oracle Helidon Imperative Web Server component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73896Oracle Helidon Imperative Web Server component denial of service6.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73895Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73894Oracle Helidon Imperative Web Server component unauthorized data modification7.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73893Oracle Helidon Imperative Web Server component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73892Oracle Helidon Imperative Web Server component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73891Oracle Helidon Imperative Web Server component unauthorized data modification7.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73890Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73889Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73888Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73887Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73886Oracle Helidon Imperative Web Server component unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73885Oracle Helidon Imperative Web Server component unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73884Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73883Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73882Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.5%2026-08-18Fix
CVE-2026-73881Oracle Helidon Imperative Web Server component unauthorized data modification5.4CNA v3.10.2%2026-08-18Fix
CVE-2026-73880Oracle Helidon Imperative Web Server component unauthorized data access4.4CNA v3.10.2%2026-08-18Fix
CVE-2026-73879Oracle Helidon Imperative Web Server component unauthorized data modification7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73878Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73877Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73876Oracle Helidon Imperative Web Server component unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73875Oracle Helidon Imperative Web Server component unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73874Oracle Helidon Imperative Web Server component unauthorized data modification5.4CNA v3.10.2%2026-08-18Fix
CVE-2026-73873Oracle Helidon Imperative Web Server component unauthorized data modification4.2CNA v3.10.2%2026-08-18Fix
CVE-2026-73872Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73871Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-73870Oracle Helidon Imperative Web Server component unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-73869Oracle Helidon Imperative Web Server component unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-73868Oracle Helidon Imperative Web Server component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73867Oracle Helidon Imperative Web Server component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73866Oracle Helidon Imperative Web Server component unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73865Oracle Helidon Imperative Web Server component unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73834Red Hat Advanced Cluster Management for Kubernetes must-gather information disclosure5.5CNA v3.10.1%2026-08-18Fix
CVE-2026-73529Plainpad Missing Rate Limiting via POST /v1/sessions6.9CNA v4.00.4%2026-08-18
CVE-2026-73502kin-openapi request parameter validation null pointer dereference5.3CNA v3.10.5%2026-08-18Fix
CVE-2026-73426Trix: Stored XSS vulnerability through serialized attributes4.6CNA v3.10.3%2026-08-18Fix
CVE-2026-73404MasterStudy LMS WordPress plugin broken access control6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73400Restaurant Menu by MotoPress WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-18Reported exploitedFix
CVE-2026-73399Flutterwave WooCommerce WordPress plugin broken authentication6.5CNA v3.10.4%2026-08-18Fix
CVE-2026-73398Piraeus Bank WooCommerce Payment Gateway WordPress plugin broken authentication6.5CNA v3.10.4%2026-08-18
CVE-2026-73397Youzify WordPress plugin deserialization of untrusted data9.8CNA v3.10.6%2026-08-18
CVE-2026-73396MWB HubSpot for WooCommerce WordPress plugin broken authentication7.1CNA v3.10.4%2026-08-18Fix
CVE-2026-73395Booking calendar, Appointment Booking System WordPress plugin insecure direct object references6.5CNA v3.10.3%2026-08-18
CVE-2026-73393Subscribe2 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73383CTX Feed WordPress plugin arbitrary file download4.9CNA v3.10.5%2026-08-18Fix
CVE-2026-73382Site Reviews WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Reported exploitedFix
CVE-2026-73381Popup by Supsystic WordPress plugin broken authentication9.1CNA v3.10.5%2026-08-18Fix
CVE-2026-73380Popup by Supsystic WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-18Fix
CVE-2026-73379Contact Form by Supsystic WordPress plugin bypass vulnerability vulnerability6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73378Contact Form by Supsystic WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73377Ultimate Maps by Supsystic WordPress plugin broken access control7.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73376Ultimate Maps by Supsystic WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-18Fix
CVE-2026-73375Ultimate Maps by Supsystic WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73373Joomla! Core [20260810] Unrestricted uploads of SHTML files in Joomla8.9CNA v4.00.6%2026-08-18Fix
CVE-2026-73372Joomla! Core [20260809] Improper ACL checks when injection schema.org contact data in Joomla and5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-73371Joomla! Core [20260808] Improper ACL checks for batch copy actions in Joomla5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-73367Easy Google Maps WordPress plugin remote file inclusion7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-73366Easy Google Maps WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-18Fix
CVE-2026-73365JetAppointment WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-73362URL Shortify WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73361Recipe Card Blocks for Gutenberg and Elementor WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73360Chaty Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73359WP Cookie Notice for GDPR, CCPA and ePrivacy Consent WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-18Fix
CVE-2026-73358Affiliates Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73356Breeze WordPress plugin arbitrary content deletion vulnerability8.2CNA v3.10.4%2026-08-18Fix
CVE-2026-73355Affiliates Manager WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-73352GiveWP WordPress plugin broken access control6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73351WordPress Social Login and Register plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73350SupportCandy WordPress plugin broken authentication8.2CNA v3.10.4%2026-08-18Fix
CVE-2026-73348GiveWP WordPress plugin broken access control6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-73345License Manager for WooCommerce WordPress plugin SQL injection7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73343WP Compress WordPress plugin remote code execution (RCE)10.0CNA v3.10.9%2026-08-18Reported exploitedFix
CVE-2026-73342WP Multilang WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73341RegistrationMagic WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-18Fix
CVE-2026-73339Modern Events Calendar WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-73338Autopay WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73337Joomla! Core [20260807] MFA authentication bypass in Joomla and8.2CNA v4.00.5%2026-08-18Fix
CVE-2026-73336Joomla! Core [20260806] XSS through schema.org outputs in Joomla5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-73190WPDM Premium Packages WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-18Fix
CVE-2026-73187Sticky Chat Widget WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-73181Extra Product Options and Add-Ons for WooCommerce WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-08-18Fix
CVE-2026-73073Vim: Arbitrary Ex command execution in C Omni-Completion7.1CNA v4.00.2%2026-08-18Fix
CVE-2026-72532Joomla! Core [20260805] Improper ACL checks for category webservice endpoints in Joomla5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-72531Joomla! Core [20260804] Improper ACL checks for custom fields webservice endpoints in Joomla5.1CNA v4.00.3%2026-08-18Fix
CVE-2026-71880Server-side template injection in Integrated Publishing Toolkit7.6CNA v4.00.5%2026-08-18Fix
CVE-2026-71879Authentication bypass in Integrated Publishing Toolkit9.1CNA v4.00.9%2026-08-18Fix
CVE-2026-71878Authentication bypass in Integrated Publishing Toolkit9.2CNA v4.00.9%2026-08-18Fix
CVE-2026-71676Open5GS v.2.7.0 buffer overflow7.5CISA ADP v3.10.5%2026-08-18
CVE-2026-71675Open5GS AMF NGAP path memory leak7.5CISA ADP v3.10.5%2026-08-18
CVE-2026-71574Joomla! Core [20260803] Inconsistent ACL checks for mutating webservice endpoints in Joomla8.5CNA v4.00.3%2026-08-18Fix
CVE-2026-71573Joomla! Core [20260802] Improper CORS origin validation in Joomla6.9CNA v4.00.3%2026-08-18Fix
CVE-2026-71572Joomla! Core [20260801] Response header injection in download views in Joomla4.8CNA v4.00.2%2026-08-18Fix
CVE-2026-71551super-productivity super Productivity: Arbitrary OS command execution7.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71539n8n Git clone node race condition8.9CNA v4.00.3%2026-08-18Fix
CVE-2026-71477mise install script vulnerability6.7CNA v3.10.1%2026-08-18Fix
CVE-2026-71417Netflix Lemur certificate revocation insecure direct object reference7.3CNA v3.10.1%2026-08-18Fix
CVE-2026-71365Red Hat Ansible Automation Platform awx: Webhook status callback SSRF leaks the git pat7.7CNA v3.10.5%2026-08-18Fix
CVE-2026-71322Netflix Lemur certificate export missing authorization4.3CNA v3.10.2%2026-08-18Fix
CVE-2026-71317Lemur: Sub-CA creation never checks `AuthorityPermission` on the parent authority6.5CNA v3.10.1%2026-08-18Fix
CVE-2026-71308Netflix Lemur certificate replaces field insecure direct object reference8.1CNA v3.10.3%2026-08-18Fix
CVE-2026-71307Netflix Lemur destinations API missing authorization7.7CNA v3.10.3%2026-08-18Fix
CVE-2026-71303Netflix Lemur ACME authority update endpoint server-side request forgery7.7CNA v3.10.3%2026-08-18Fix
CVE-2026-71167Oracle Helidon Imperative Web Server component unauthorized data access9.4CNA v3.10.5%2026-08-18Fix
CVE-2026-71166Oracle Helidon Imperative Web Server component unauthorized data access9.4CNA v3.10.5%2026-08-18Fix
CVE-2026-71165Oracle Helidon Imperative Web Server component unauthorized data modification5.4CNA v3.10.2%2026-08-18Fix
CVE-2026-71164Oracle Helidon Imperative Web Server component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-71162Oracle Helidon Imperative Web Server component unauthorized data access6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71161Oracle Helidon Imperative Web Server component denial of service5.3CNA v3.10.4%2026-08-18Fix
CVE-2026-71160Oracle Helidon Imperative Web Server component takeover7.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71159Oracle Helidon Imperative Web Server component unauthorized data access8.2CNA v3.10.4%2026-08-18Fix
CVE-2026-71158Oracle Helidon Imperative Web Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71157Oracle Helidon Imperative Web Server component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71156Oracle Helidon Imperative Web Server component unauthorized data modification5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71155Oracle Helidon Imperative Web Server component unauthorized data access8.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71154Oracle Helidon Imperative Web Server component unauthorized data access6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-71153Oracle Helidon Imperative Web Server component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71152Oracle Helidon Imperative Web Server component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-71151Oracle VM VirtualBox Core component unauthorized data access5.6CNA v3.10.1%2026-08-18Fix
CVE-2026-71150Oracle Hyperion Financial Management Security component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71149Oracle Hyperion Financial Management Security component unauthorized data modification4.2CNA v3.10.1%2026-08-18Fix
CVE-2026-71148Oracle Hyperion Financial Management Security component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71147Oracle Hyperion Financial Management Security component unauthorized data modification4.2CNA v3.10.2%2026-08-18Fix
CVE-2026-71146Oracle Hyperion Financial Management Security component denial of service1.9CNA v3.10.1%2026-08-18Fix
CVE-2026-71145Oracle Hyperion Financial Management Security component unauthorized data modification4.4CNA v3.10.2%2026-08-18Fix
CVE-2026-71144Oracle Hyperion Financial Management Security component unauthorized data modification3.0CNA v3.10.1%2026-08-18Fix
CVE-2026-71143Oracle Communications Unified Inventory Management Third Party component unauthorized data access7.4CNA v3.10.3%2026-08-18Fix
CVE-2026-71142Oracle Communications Unified Inventory Management unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71141Oracle VM VirtualBox Core component unauthorized data modification7.7CNA v3.10.2%2026-08-18Fix
CVE-2026-71140Oracle VM VirtualBox Core component unauthorized data modification3.4CNA v3.10.2%2026-08-18Fix
CVE-2026-71139Oracle VM VirtualBox Core component denial of service4.4CNA v3.10.2%2026-08-18Fix
CVE-2026-71138Oracle VM VirtualBox Core component unauthorized data modification7.3CNA v3.10.2%2026-08-18Fix
CVE-2026-71137Oracle VM VirtualBox Core component denial of service6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71136Oracle VM VirtualBox Core component unauthorized data modification7.3CNA v3.10.2%2026-08-18Fix
CVE-2026-71135Oracle VM VirtualBox Core component denial of service6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71134Oracle VM VirtualBox Core component unauthorized data modification5.7CNA v3.10.2%2026-08-18Fix
CVE-2026-71132Oracle VM VirtualBox Core component unauthorized data access5.3CNA v3.10.1%2026-08-18Fix
CVE-2026-71131Oracle VM VirtualBox Core component takeover8.6CNA v3.10.2%2026-08-18Fix
CVE-2026-71130Oracle VM VirtualBox Core component unauthorized data access8.2CNA v3.10.4%2026-08-18Fix
CVE-2026-71129Oracle VM VirtualBox Core component takeover8.2CNA v3.10.2%2026-08-18Fix
CVE-2026-71128Oracle VM VirtualBox Core component denial of service6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71127Oracle VM VirtualBox Core component denial of service6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71126Oracle VM VirtualBox Core component takeover7.8CNA v3.10.1%2026-08-18Fix
CVE-2026-71125Oracle VM VirtualBox Core component unauthorized data modification6.1CNA v3.10.1%2026-08-18Fix
CVE-2026-71124Oracle Access Manager Authorization Engine component denial of service4.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71123Oracle Hyperion Financial Management Security component unauthorized data modification5.4CNA v3.10.1%2026-08-18Fix
CVE-2026-71122Oracle Business Intelligence Enterprise Edition Platform Security component takeover8.0CNA v3.10.4%2026-08-18Fix
CVE-2026-71121Oracle Hyperion Financial Management Security component unauthorized data modification6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71120Oracle Hyperion Financial Management Security component denial of service5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71119Oracle Hyperion Financial Management Security component takeover6.4CNA v3.10.1%2026-08-18Fix
CVE-2026-71118Oracle Hyperion Financial Management Security component unauthorized data modification4.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71117Oracle Hyperion Financial Management Security component takeover7.5CNA v3.10.1%2026-08-18Fix
CVE-2026-71116Oracle VM VirtualBox Core component takeover7.5CNA v3.10.1%2026-08-18Fix
CVE-2026-71115Oracle VM VirtualBox Core component unauthorized data access6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71114Oracle VM VirtualBox Core component unauthorized data access6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71113Oracle VM VirtualBox Core component denial of service7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71112Oracle PeopleSoft Enterprise FIN Common Objects Security component takeover8.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71111Oracle Identity Manager Installer component takeover7.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71110Oracle Helidon Imperative Web Server component unauthorized data access8.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71109Oracle Hyperion Financial Management Security component takeover6.7CNA v3.10.2%2026-08-18Fix
CVE-2026-71108Oracle Hyperion Financial Management Security component unauthorized data access5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71107Oracle Business Intelligence Enterprise Edition Analytics Server component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71106Oracle Hospitality OPERA 5 Property Services Opera Servlet component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71105Oracle Hyperion Financial Management Security component denial of service4.7CNA v3.10.1%2026-08-18Fix
CVE-2026-71104Oracle E-Business Suite HRMS (Netherlands) Netherlands Payroll component takeover7.2CNA v3.10.5%2026-08-18Fix
CVE-2026-71103Oracle Hyperion Financial Management Security component unauthorized data modification6.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71102Oracle Database Server improper access control9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71101Oracle E-Business Suite HRMS (US) US Payroll Tax Issues component takeover7.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71100Oracle Database Server improper access control5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71099Oracle Business Intelligence Enterprise Edition Analytics Web Answers component takeover7.2CNA v3.10.5%2026-08-18Fix
CVE-2026-71098Oracle Business Intelligence Enterprise Edition Platform Security component takeover7.0CNA v3.10.1%2026-08-18Fix
CVE-2026-71097Oracle Business Intelligence Enterprise Edition Platform Security component takeover7.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71096Oracle Business Intelligence Enterprise Edition unauthorized data access8.2CNA v3.10.3%2026-08-18Fix
CVE-2026-71095Oracle Business Intelligence Enterprise Edition unauthorized data access8.3CNA v3.10.4%2026-08-18Fix
CVE-2026-71094Oracle Business Intelligence Enterprise Edition Presentation services component takeover7.3CNA v3.10.2%2026-08-18Fix
CVE-2026-71092Oracle PeopleSoft Enterprise FIN Lease Administration unauthorized data access7.5CNA v3.10.1%2026-08-18Fix
CVE-2026-71091Oracle Hyperion Financial Management Security component unauthorized data access6.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71090Oracle Hyperion Financial Management Security component unauthorized data modification6.4CNA v3.10.2%2026-08-18Fix
CVE-2026-71089Oracle Agile PLM MCAD Connector CAX client component information disclosure3.3CNA v3.10.2%2026-08-18Fix
CVE-2026-71088Oracle Agile PLM MCAD Connector CAX client component unauthorized data access4.8CNA v3.10.3%2026-08-18Fix
CVE-2026-71087Oracle Agile PLM MCAD Connector CAX client component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71085Oracle Hyperion Financial Management Security component unauthorized data access4.9CNA v3.10.4%2026-08-18Fix
CVE-2026-71084Oracle MySQL Connectors Connector/ODBC component denial of service6.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71083Oracle Agile PLM MCAD Connector CAX client component information disclosure1.8CNA v3.10.1%2026-08-18Fix
CVE-2026-71082Oracle Agile PLM MCAD Connector CAX client component information disclosure2.5CNA v3.10.1%2026-08-18Fix
CVE-2026-71081Oracle Agile PLM MCAD Connector CAX client component unauthorized data modification1.9CNA v3.10.1%2026-08-18Fix
CVE-2026-71080Oracle Agile PLM MCAD Connector CAX client component unauthorized data modification3.7CNA v3.10.2%2026-08-18Fix
CVE-2026-71079Oracle MySQL Connectors Connector/ODBC component denial of service6.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71078Oracle Agile PLM MCAD Connector CAX client component unauthorized data modification4.2CNA v3.10.1%2026-08-18Fix
CVE-2026-71077Oracle Agile PLM MCAD Connector CAX client component unauthorized data access5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71076Oracle Agile PLM MCAD Connector CAX client component information disclosure5.3CNA v3.10.3%2026-08-18Fix
CVE-2026-71075Oracle Agile PLM MCAD Connector CAX client component unauthorized data access5.9CNA v3.10.3%2026-08-18Fix
CVE-2026-71074Oracle Helidon Imperative Web Server component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-71073Oracle MySQL Connectors Connector/ODBC component denial of service5.5CNA v3.10.2%2026-08-18Fix
CVE-2026-71072Oracle Agile PLM MCAD Connector CAX client component denial of service3.3CNA v3.10.1%2026-08-18Fix
CVE-2026-71071Oracle Agile PLM MCAD Connector CAX client component unauthorized data modification4.6CNA v3.10.3%2026-08-18Fix
CVE-2026-71070Oracle Agile PLM MCAD Connector CAX client component unauthorized data access6.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71069Oracle Agile PLM MCAD Connector CAX client component takeover7.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71068Oracle Agile PLM MCAD Connector CAX client component takeover8.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71067Oracle Agile PLM MCAD Connector CAX client component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71066Oracle Agile PLM MCAD Connector CAX client component unauthorized data modification4.5CNA v3.10.1%2026-08-18Fix
CVE-2026-71065Oracle Helidon Imperative Web Server component unauthorized data access9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-71064Oracle Database Server improper access control9.6CNA v3.10.4%2026-08-18Fix
CVE-2026-71063Oracle Database Server improper access control9.6CNA v3.10.4%2026-08-18Fix
CVE-2026-71062Oracle Database Server takeover8.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71061Oracle Business Intelligence Enterprise Edition unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71060Oracle Hyperion Financial Management Security component unauthorized data access4.4CNA v3.10.3%2026-08-18Fix
CVE-2026-71059Oracle BI Publisher Web Service API component takeover9.9CNA v3.10.4%2026-08-18Fix
CVE-2026-71058Oracle BI Publisher Web Service API component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71057Oracle BI Publisher BI Platform Security component unauthorized data access8.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71056Oracle Business Intelligence Enterprise Edition BI Search component unauthorized data access7.7CNA v3.10.4%2026-08-18Fix
CVE-2026-71055Oracle Business Intelligence Enterprise Edition Platform Security component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71053Oracle Agile Engineering Data Management Web Services Security component takeover8.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71052Oracle Agile Engineering Data Management Web Services Security component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71051Oracle Supply Chain Product Lifecycle Analytics Installation Issues component takeover8.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71050Oracle Supply Chain Product Lifecycle Analytics unauthorized data access8.7CNA v3.10.4%2026-08-18Fix
CVE-2026-71049Oracle Supply Chain Product Lifecycle Analytics unauthorized data access8.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71048Oracle Supply Chain Product Lifecycle Analytics unauthorized data access7.6CNA v3.10.3%2026-08-18Fix
CVE-2026-71046Oracle Supply Chain Agile PLM Security component takeover8.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71045Oracle Supply Chain Agile PLM Security component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71044Oracle Supply Chain Agile PLM Export component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71043Oracle Supply Chain Agile PLM Security component unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71042Oracle Supply Chain Agile PLM PGC / Excel plugin component unauthorized data modification8.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71041Oracle Supply Chain Agile PLM Gantt Chart component takeover7.0CNA v3.10.1%2026-08-18Fix
CVE-2026-71040Oracle Supply Chain Agile PLM Security component takeover9.8CNA v3.10.5%2026-08-18Fix
CVE-2026-71039Oracle Supply Chain Agile PLM Application Server component takeover8.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71038Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71037Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access9.3CNA v3.10.4%2026-08-18Fix
CVE-2026-71036Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71035Oracle Commerce Guided Search / Oracle Commerce Experience Manager Forge component takeover8.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71034Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71033Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access5.5CNA v3.10.2%2026-08-18Fix
CVE-2026-71032Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-71031Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-71030Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification7.2CNA v3.10.3%2026-08-18Fix
CVE-2026-71029Oracle Helidon Imperative Web Server component unauthorized data access6.8CNA v3.10.3%2026-08-18Fix
CVE-2026-71028Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover7.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71027Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.6CNA v3.10.3%2026-08-18Fix
CVE-2026-71026Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71025Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-71024Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access8.2CNA v3.10.4%2026-08-18Fix
CVE-2026-71023Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification7.5CNA v3.10.4%2026-08-18Fix
CVE-2026-71022Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.6CNA v3.10.3%2026-08-18Fix
CVE-2026-71021Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.6CNA v3.10.3%2026-08-18Fix
CVE-2026-71020Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.6CNA v3.10.3%2026-08-18Fix
CVE-2026-71019Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-71018Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access8.2CNA v3.10.3%2026-08-18Fix
CVE-2026-71017Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access6.5CNA v3.10.3%2026-08-18Fix
CVE-2026-71016Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access8.2CNA v3.10.3%2026-08-18Fix
CVE-2026-71015Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71014Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access9.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71013Oracle Hyperion Financial Management Security component unauthorized data access6.0CNA v3.10.2%2026-08-18Fix
CVE-2026-71012Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.1CNA v3.10.4%2026-08-18Fix
CVE-2026-71011Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data modification6.1CNA v3.10.2%2026-08-18Fix
CVE-2026-71010Oracle Commerce Guided Search / Oracle Commerce Experience Manager takeover7.8CNA v3.10.2%2026-08-18Fix
CVE-2026-71009Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access7.4CNA v3.10.3%2026-08-18Fix
CVE-2026-71008Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access6.8CNA v3.10.4%2026-08-18Fix
CVE-2026-71007Oracle Commerce Guided Search / Oracle Commerce Experience Manager unauthorized data access6.8CNA v3.10.4%2026-08-18Fix