CVE-2026 list

CVE-2026 records published in August 2026

Page eight of 13: records 7,001 to 8,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.

CVE-2026 records published in August 2026, newest first: records 7,001 to 8,000 of 12,071
CVE Summary CVSS EPSS Published Signals
CVE-2026-72212Linux kernel memory hotplug altmap handling memory corruption–0.2%2026-08-15Fix
CVE-2026-72211Linux kernel NTFS index root reparenting vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72210Linux kernel NTFS mapping pairs decoding out-of-bounds read9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72209Linux kernel NTFS attribute lookup out-of-bounds read9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72208Linux kernel ntfs driver vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72207Linux kernel NTFS resident attribute resizing vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72206Linux kernel NTFS index block validation vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72205Linux kernel NTFS mount failure cleanup memory leak–0.2%2026-08-15Fix
CVE-2026-72204Linux kernel NTFS $INDEX_ROOT validation vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72203Linux kernel NTFS MFT writeback deadlock7.5CNA v3.10.6%2026-08-15Fix
CVE-2026-72202Linux kernel NTFS free-cluster readahead vulnerability7.5CNA v3.10.5%2026-08-15Fix
CVE-2026-72201Linux kernel NTFS index entry validation vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72200Linux kernel NTFS mapping-pairs parser integer overflow9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72199Linux kernel NTFS index root validation vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72198Linux kernel NTFS attribute validation vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72197Linux kernel ntfs3 file system vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72196Linux kernel NTFS3 journal replay vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72195Linux kernel ntfs3 file system integer underflow7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72194Linux kernel NTFS3 index tree traversal stack overflow9.8CNA v3.10.8%2026-08-15Fix
CVE-2026-72193Linux kernel NTFS3 restart table recovery denial of service–0.2%2026-08-15Fix
CVE-2026-72192Linux kernel NTFS3 index root promotion vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72191Linux kernel NTFS3 index buffer insertion vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72190Linux kernel NTFS rename deadlock–0.2%2026-08-15Fix
CVE-2026-72189Linux kernel NTFS attribute list updates deadlock–0.2%2026-08-15Fix
CVE-2026-72188Linux kernel NTFS directory index lookup vulnerability9.1CNA v3.10.5%2026-08-15Fix
CVE-2026-72187Linux kernel NTFS inode eviction deadlock–0.2%2026-08-15Fix
CVE-2026-72186Linux kernel NTFS system metadata files vulnerability9.1CNA v3.10.5%2026-08-15Fix
CVE-2026-72185Linux kernel NTFS runlist mapping vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72184Linux kernel NTFS attribute range insertion memory leak–0.2%2026-08-15Fix
CVE-2026-72183Linux kernel Landlock signal scoping vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72182Linux kernel charger-manager driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72181Linux kernel MIPS scheduler memory corruption7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72180Linux kernel huge_memory vulnerability–0.2%2026-08-15Fix
CVE-2026-72179Linux kernel RISC-V cacheinfo vulnerability–0.2%2026-08-15Fix
CVE-2026-72178Linux kernel DAMON core target pid reference counting vulnerability–0.2%2026-08-15Fix
CVE-2026-72177Linux kernel DAMON sysfs access pattern directories vulnerability–0.2%2026-08-15Fix
CVE-2026-72176Linux kernel DAMON sysfs scheme stats directory vulnerability–0.2%2026-08-15Fix
CVE-2026-72175Linux kernel task_mmu userfault write protection race condition7.1CNA v3.10.2%2026-08-15Fix
CVE-2026-72174Linux kernel task_mmu hugetlb pagemap scan deadlock–0.2%2026-08-15Fix
CVE-2026-72173Linux kernel task_mmu pagemap PMD scanning vulnerability–0.2%2026-08-15Fix
CVE-2026-72172Linux kernel ZONE_DEVICE memory initialization vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72171Linux kernel slram MTD driver device list vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72170Linux kernel 9p client cacheless mode race condition7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72169Linux kernel kho vulnerability–0.2%2026-08-15Fix
CVE-2026-72168Linux kernel VMU flash memory card driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72167Linux kernel pl353 rawnand MTD driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72166Linux kernel 9p client RPC denial of service–0.2%2026-08-15Fix
CVE-2026-72165Linux kernel raw NAND target selection vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72164Linux kernel OCFS2 extent move ioctl vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72163Linux kernel OCFS2 direct I/O journal handling null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72162Linux kernel OCFS2 extent list validation vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72161Linux kernel OCFS2 file system null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72160Linux kernel OCFS2 inode validation vulnerability8.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72159Linux kernel OCFS2 inode validation vulnerability–0.2%2026-08-15Fix
CVE-2026-72158Linux kernel FPGA DFL parameter header parser vulnerability–0.2%2026-08-15Fix
CVE-2026-72157In the Linux kernel, the following vulnerability has been resolved: net: thunderbolt: Fix frags[] overflow by bounding frame_count tbnet_poll() assembles a multi-frame ThunderboltIP packet into one skb. The first frame goes into the skb linear area and every further frame is added as a page fragme8.8CNA v3.10.3%2026-08-15Fix
CVE-2026-72156Linux kernel Microchip SPI FPGA manager bitstream header parser out-of-bounds read–0.2%2026-08-15Fix
CVE-2026-72155Linux kernel SPI NOR write protection locking vulnerability–0.2%2026-08-15Fix
CVE-2026-72154Linux kernel openrisc jump label synchronization vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72153Linux kernel Crossbar IRQ chip driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72152Linux kernel TPM TIS SPI driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72151Linux kernel TPM2 session key exchange vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72150Linux kernel SunRPC transport switch information disclosure–0.2%2026-08-15Fix
CVE-2026-72149Linux kernel Tegra GPC DMA driver denial of service7.5CNA v3.10.6%2026-08-15Fix
CVE-2026-72148Linux kernel dw-edma DMA engine driver race condition8.8CNA v3.10.4%2026-08-15Fix
CVE-2026-72147Linux kernel dw-edma-pcie null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72146Linux kernel rz-dmac DMA engine driver vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72145Linux kernel Intel TPMI driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72144Linux kernel dell-laptop driver init path vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72143Linux kernel ISST x86 platform driver vulnerability7.1CNA v3.10.2%2026-08-15Fix
CVE-2026-72142Linux kernel i.MX I2C driver atomic path vulnerability–0.2%2026-08-15Fix
CVE-2026-72141Linux kernel i.MX I2C driver interrupt path vulnerability7.5CNA v3.10.6%2026-08-15Fix
CVE-2026-72140Linux kernel mlxbf I2C driver use-after-free–0.2%2026-08-15Fix
CVE-2026-72139Linux kernel TCP MD5 AO signature handling vulnerability9.8CNA v3.10.6%2026-08-15Fix
CVE-2026-72138Linux kernel Xen grant device driver memory leak–0.2%2026-08-15Fix
CVE-2026-72137Linux kernel xfrm nat_keepalive double free9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72136Linux kernel XFRM virtual interface vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72135Linux kernel TPM character device vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72134Linux kernel SPI i.MX driver vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72133Linux kernel SPI UniPhier driver vulnerability8.4CNA v3.10.2%2026-08-15Fix
CVE-2026-72132Linux kernel NFS writeback accounting vulnerability–0.2%2026-08-15Fix
CVE-2026-72131Linux kernel Apple NVMe driver denial of service–0.2%2026-08-15Fix
CVE-2026-72130Linux kernel NVMe-oF authentication out-of-bounds write9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72129Linux kernel nvmet-rdma driver vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72128Linux kernel nvmet driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72127Linux kernel netdev-genl NAPI thread reporting information disclosure–0.2%2026-08-15Fix
CVE-2026-72126Linux kernel CAN ISO-TP socket release timer use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72125Linux kernel CAN ISO-TP socket release use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72124Linux kernel CAN ISO-TP transmit state machine vulnerability8.8CNA v3.10.4%2026-08-15Fix
CVE-2026-72123Linux kernel CAN broadcast manager rx op teardown use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72122Linux kernel CAN broadcast manager socket bind handling race condition7.3CNA v3.10.2%2026-08-15Fix
CVE-2026-72121Linux kernel CAN broadcast manager filter and timer updates vulnerability8.8CNA v3.10.4%2026-08-15Fix
CVE-2026-72120Linux kernel CAN broadcast manager rcu list handling vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72119Linux kernel CAN broadcast manager tx lock handling vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72118Linux kernel CAN broadcast manager rx and tx statistics race condition–0.2%2026-08-15Fix
CVE-2026-72117Linux kernel bcm CAN driver race condition–0.2%2026-08-15Fix
CVE-2026-72116Linux kernel CAN broadcast manager device removal handling vulnerability7.1CNA v3.10.2%2026-08-15Fix
CVE-2026-72115Linux kernel CAN broadcast manager ANYDEV timers race condition8.1CNA v3.10.3%2026-08-15Fix
CVE-2026-72114Linux kernel CAN broadcast manager RTR reply handling vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72113Linux kernel CAN broadcast manager filter removal vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72112Linux kernel io_uring BPF struct_ops registration vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72111Linux kernel BPF verifier register bounds vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72110Linux kernel BPF task storage in process fork use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72109Linux kernel sparx5 Ethernet switch driver vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72108Linux kernel dm thin provisioning metadata vulnerability7.8CNA v3.10.3%2026-08-15Fix
CVE-2026-72107Linux kernel dm-era target vulnerability8.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72106Linux kernel device-mapper ioctl interface out-of-bounds write–0.2%2026-08-15Fix
CVE-2026-72105Linux kernel dm-log mirror log integer overflow7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72104Linux kernel dm-pcache target null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72103Linux kernel device-mapper table device file vulnerability7.3CNA v3.10.2%2026-08-15Fix
CVE-2026-72102Linux kernel device-mapper early table creation vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72101Linux kernel dm-integrity vulnerability–0.2%2026-08-15Fix
CVE-2026-72100Linux kernel dm-integrity bio limit checking deadlock8.8CNA v3.10.5%2026-08-15Fix
CVE-2026-72099Linux kernel dm-integrity hash offset calculation vulnerability7.1CNA v3.10.5%2026-08-15Fix
CVE-2026-72098Linux kernel dm-verity buffer overflow9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72097Linux kernel dm-verity LoadPin integration null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72096Linux kernel dm-verity error counter race condition–0.2%2026-08-15Fix
CVE-2026-72095Linux kernel dma-fence array deduplication vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72094Linux kernel dma-fence signaling null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72093Linux kernel amdxdna GEM dma-buf mmap use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72092Linux kernel amdxdna AIE4 command submission vulnerability–0.2%2026-08-15Fix
CVE-2026-72091Linux kernel amdxdna accelerator command submission null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72090Linux kernel amdxdna accelerator debug buffer sync vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72089Linux kernel ivpu accelerator firmware log parser vulnerability7.1CNA v3.10.2%2026-08-15Fix
CVE-2026-72088Linux kernel hpsa driver IOACCEL2 reset path vulnerability–0.2%2026-08-15Fix
CVE-2026-72087Linux kernel lpfc SCSI driver memory leak–0.2%2026-08-15Fix
CVE-2026-72086Linux kernel Xen SCSI backend driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72085Linux kernel Xen SCSI backend driver vulnerability9.3CNA v3.10.2%2026-08-15Fix
CVE-2026-72084Linux kernel SCSI persistent reservation TransportID parsing vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72083Linux kernel SCSI persistent reservation register-and-move handling use-after-free9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72082Linux kernel elx efct SCSI driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72081Linux kernel elx efct SCSI driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72080Linux kernel resctrl filesystem use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72079Linux kernel IMS PCU input driver use-after-free–0.2%2026-08-15Fix
CVE-2026-72078Linux kernel ims-pcu USB control endpoint validation vulnerability–0.2%2026-08-15Fix
CVE-2026-72077Linux kernel ims-pcu firmware update path memory leak–0.2%2026-08-15Fix
CVE-2026-72076Linux kernel ims-pcu interrupt handler debug logging out-of-bounds read–0.2%2026-08-15Fix
CVE-2026-72075Linux kernel ims-pcu reset_device sysfs interface race condition–0.2%2026-08-15Fix
CVE-2026-72074Linux kernel ims-pcu USB CDC descriptor parser type confusion–0.2%2026-08-15Fix
CVE-2026-72073Linux kernel vub300 MMC driver use-after-free–0.2%2026-08-15Fix
CVE-2026-72072Linux kernel mlx5e MACsec offload driver use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72071Linux kernel user_events tracing subsystem use-after-free7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72070Linux kernel libertas_tf Wi-Fi driver use-after-free–0.2%2026-08-15Fix
CVE-2026-72069Linux kernel locking/rt use-after-free9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72068Linux kernel POSIX CPU timer rlimit conversion vulnerability–0.2%2026-08-15Fix
CVE-2026-72067Linux kernel CPU hotplug callback rollback vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72066Linux kernel CPU hotplug sysfs state list out-of-bounds write7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72065Linux kernel mana driver RX completion handling vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72064Linux kernel mana driver RX page pool vulnerability9.8CNA v3.10.5%2026-08-15Fix
CVE-2026-72063Linux kernel Tegra GPIO driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72062Linux kernel mt7621 GPIO driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72061Linux kernel sit tunnel driver vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72060Linux kernel icssg Ethernet driver statistics vulnerability–0.2%2026-08-15Fix
CVE-2026-72059Linux kernel t7xx CLDMA driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72058Linux kernel ixp4xx_hss HDLC driver memory leak–0.2%2026-08-15Fix
CVE-2026-72057Linux kernel act_ct traffic control action vulnerability8.2CNA v3.10.6%2026-08-15Fix
CVE-2026-72056Linux kernel ena Ethernet driver resource leak–0.2%2026-08-15Fix
CVE-2026-72055Linux kernel IPv6 VTI tunnel driver vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72054Linux kernel IPv4 VTI tunnel driver vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72053Linux kernel IPIP tunnel changelink capability check vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72052Linux kernel IPv6 GRE tunnel changelink capability check vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72051Linux kernel IPv6 tunnel changelink capability check vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72050Linux kernel octeontx2 BPID bitmap setup vulnerability–0.2%2026-08-15Fix
CVE-2026-72049Linux kernel legacy LLSEC netlink dump information disclosure7.1CNA v3.10.1%2026-08-15Fix
CVE-2026-72048Linux kernel ca8210 SPI transfer handling vulnerability–0.2%2026-08-15Fix
CVE-2026-72047Linux kernel ca8210 kfifo pointer exchange denial of service–0.2%2026-08-15Fix
CVE-2026-72046Linux kernel gve header-split RX buffer handling vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72045Linux kernel octeontx2 LMTST table setup vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72043Linux kernel LoongArch page table dirty tracking vulnerability7.1CNA v3.10.2%2026-08-15Fix
CVE-2026-72042Linux kernel IPMI event delivery reference counting vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72041Linux kernel espintcp partial send handling vulnerability9.8CNA v3.10.8%2026-08-15Fix
CVE-2026-72040Linux kernel IPMI request reference counting vulnerability–0.2%2026-08-15Fix
CVE-2026-72039Linux kernel bnx2x fastpath memory allocation memory leak–0.2%2026-08-15Fix
CVE-2026-72038Linux kernel liquidio BAR resource mapping vulnerability–0.2%2026-08-15Fix
CVE-2026-72037Linux kernel lan743x eth_syslock spinlock initialization vulnerability–0.2%2026-08-15Fix
CVE-2026-72036Linux kernel multiq queueing discipline dequeue vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72035Linux kernel taprio queueing discipline dequeue vulnerability8.2CNA v3.10.6%2026-08-15Fix
CVE-2026-72034Linux kernel fhandle mount capability check vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72033Linux kernel OrangeFS readdir entry parsing out-of-bounds read9.8CNA v3.10.8%2026-08-15Fix
CVE-2026-72032Linux kernel mlx5 HWS matcher resize vulnerability–0.2%2026-08-15Fix
CVE-2026-72031Linux kernel libata link power management vulnerability–0.2%2026-08-15Fix
CVE-2026-72030Linux kernel libata concurrent positioning ranges log buffer overflow–0.2%2026-08-15Fix
CVE-2026-72029Linux kernel iosm WWAN MUX downlink decoder vulnerability8.8CNA v3.10.4%2026-08-15Fix
CVE-2026-72028Linux kernel kretprobe rethook trampoline vulnerability–0.2%2026-08-15Fix
CVE-2026-72027Linux kernel memory compaction page freeing improper error handling7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72026Linux kernel RISC-V IMSIC early state setup vulnerability–0.2%2026-08-15Fix
CVE-2026-72025Linux kernel s390 monwriter buffer reuse vulnerability–0.2%2026-08-15Fix
CVE-2026-72024Linux kernel mac802154 interface removal vulnerability7.8CNA v3.10.1%2026-08-15Fix
CVE-2026-72023Linux kernel octeontx2 PF SQ buffer pointers vulnerability–0.2%2026-08-15Fix
CVE-2026-72022Linux kernel LLC SAP autobind resource leak–0.2%2026-08-15Fix
CVE-2026-72021Linux kernel IPVS SCTP state lookup for IPv6 vulnerability8.2CNA v3.10.6%2026-08-15Fix
CVE-2026-72020Linux kernel IPVS connection sequence handling vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72019Linux kernel MACsec encryption path out-of-bounds read7.3CNA v3.10.2%2026-08-15Fix
CVE-2026-72018Linux kernel dibs loopback data move out-of-bounds write7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72017Linux kernel macb Ethernet driver Tx queue vulnerability–0.2%2026-08-15Fix
CVE-2026-72016Linux kernel SMT hotplug enable path vulnerability–0.2%2026-08-15Fix
CVE-2026-72015Linux kernel resctrl pseudo-locked region cleanup double free–0.2%2026-08-15Fix
CVE-2026-72014Linux kernel DRBD data reply handling integer underflow9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-72013Linux kernel riscv kexec buffer copy null pointer dereference–0.2%2026-08-15Fix
CVE-2026-72012Linux kernel osnoise tracer vulnerability7.8CNA v3.10.1%2026-08-15Fix
CVE-2026-72011Linux kernel s390 diagnose page count lookup vulnerability–0.2%2026-08-15Fix
CVE-2026-72010Linux kernel cpuset mempolicy rebind vulnerability–0.2%2026-08-15Fix
CVE-2026-72009Linux kernel i.MX93 MIPI DSI/CSI power domain vulnerability7.8CNA v3.10.1%2026-08-15Fix
CVE-2026-72008Linux kernel MediaTek power domain driver vulnerability–0.2%2026-08-15Fix
CVE-2026-72007Linux kernel i.MX8MP VC8000E power domain vulnerability–0.2%2026-08-15Fix
CVE-2026-72006Linux kernel mlx5 steering-tag table memory leak–0.2%2026-08-15Fix
CVE-2026-72005Linux kernel rt2x00 Wi-Fi driver probe vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-72004Linux kernel mac80211 Wi-Fi subsystem memory leak–0.2%2026-08-15Fix
CVE-2026-72003Linux kernel brcmfmac Wi-Fi driver out-of-bounds write8.8CNA v3.10.3%2026-08-15Fix
CVE-2026-68479Linux kernel btrtl Bluetooth driver vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68478Linux kernel memstick ms_block zone initialization vulnerability–0.2%2026-08-15Fix
CVE-2026-68477Linux kernel IPVS IPv6 transport offset calculation vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-68476Linux kernel ipvs vulnerability9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-68475Linux kernel sunxi reset controller driver memory leak–0.2%2026-08-15Fix
CVE-2026-68474Linux kernel spufs local store memory mapping out-of-bounds access7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68473Linux kernel PowerPC E500 user address masking vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68472Linux kernel cfg80211 EHT multi-link element parsing vulnerability8.1CNA v3.10.3%2026-08-15Fix
CVE-2026-68471Linux kernel ieee80211 Wi-Fi driver vulnerability8.8CNA v3.10.3%2026-08-15Fix
CVE-2026-68470Linux kernel mac80211 extension frame receive path vulnerability8.8CNA v3.10.4%2026-08-15Fix
CVE-2026-68469Linux kernel mwifiex Wi-Fi driver power-save state vulnerability–0.3%2026-08-15Fix
CVE-2026-68468Linux kernel MTD virtual concat device registration vulnerability–0.2%2026-08-15Fix
CVE-2026-68467Linux kernel mchp23k256 SPI flash driver vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68466Linux kernel LPC32xx SLC NAND driver DMA transfer vulnerability8.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68465Linux kernel sdhci-esdhc-imx driver vulnerability–0.2%2026-08-15Fix
CVE-2026-68464Linux kernel sdhci-esdhc-imx MMC driver vulnerability–0.2%2026-08-15Fix
CVE-2026-68463Linux kernel sdhci-esdhc-imx MMC driver denial of service–0.2%2026-08-15Fix
CVE-2026-68462Linux kernel bpf verifier vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68461Linux kernel fwnode_handle initialization vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68460Linux kernel f2fs space balancing deadlock–0.2%2026-08-15Fix
CVE-2026-68459Linux kernel f2fs garbage collection merge path deadlock–0.2%2026-08-15Fix
CVE-2026-68458Linux kernel binder secctx buffer sizing vulnerability7.8CNA v3.10.2%2026-08-15Fix
CVE-2026-68457Linux kernel ksmbd FSCTL handling vulnerability9.1CNA v3.10.7%2026-08-15Fix
CVE-2026-68456Linux kernel ueagle-atm USB disconnect handling vulnerability–0.2%2026-08-15Fix
CVE-2026-68455Linux kernel liveupdate session ioctl handling vulnerability–0.2%2026-08-15Fix
CVE-2026-19920code-projects Online Shopping System action.php SQL injection5.3CNA v4.00.3%2026-08-15
CVE-2026-19919code-projects Online Shopping System Login login.php SQL injection6.9CNA v4.00.4%2026-08-15
CVE-2026-19918SpaceX Starlink Router Gen 3 gRPC Management get_status access control5.3CNA v4.00.3%2026-08-15
CVE-2026-19917code-projects Online Food Order System delete_food_items1.php SQL injection5.3CNA v4.00.3%2026-08-15
CVE-2026-19916code-projects Online Food Order System edit_food_items.php cross-site scripting5.1CNA v4.00.3%2026-08-15
CVE-2026-19906pkp pkp-lib API Key Generation APIProfileForm.php setData entropy6.3CNA v4.00.5%2026-08-15
CVE-2026-19905Jinher OA attendance_out_approve.aspx SQL injection6.9CNA v4.00.4%2026-08-15
CVE-2026-19904SourceCodester Online Book Store System System settings index.php site_settings cross-site scripting4.8CNA v4.00.4%2026-08-15
CVE-2026-19903SourceCodester Online Clothing Store SQL Database Backup shopping.sql file access6.9CNA v4.00.5%2026-08-15
CVE-2026-19901LB-LINK X-PRO easycwmp hard-coded credentials9.2CNA v4.00.8%2026-08-15
CVE-2026-19900LB-LINK X-PRO shadow hard-coded credentials9.2CNA v4.02.9%2026-08-15NucleiExploit code
CVE-2026-19899SourceCodester Class and Exam Timetabling System edit_teacher.php SQL injection6.9CNA v4.00.4%2026-08-15
CVE-2026-19898VictoriaMetrics VMAuth Authentication endpoint main.go requestHandler excessive authentication6.3CNA v4.00.8%2026-08-15Fix
CVE-2026-19897mangroup dtale Login endpoint auth.py login excessive authentication6.3CNA v4.00.6%2026-08-15
CVE-2026-19896mangroup dtale Flask Session Cookie app.py build_secret_key random values6.3CNA v4.00.5%2026-08-15
CVE-2026-19895opensourcepos Open Source Point of Sale Login Endpoint Filters.php index excessive authentication6.3CNA v4.00.6%2026-08-15
CVE-2026-19894itsourcecode Hospital Management System viewmedicine.php SQL injection5.3CNA v4.00.3%2026-08-15
CVE-2026-19893D-Link DIR-842 vsftpd vsftpd.conf default permission2.3CNA v4.00.5%2026-08-15
CVE-2026-19891TRENDnet TEW-WLC100 IKE Phase 1 Aggressive Mode racoon.conf missing encryption6.3CNA v4.00.2%2026-08-15
CVE-2026-19598Pods WordPress plugin unauthenticated privilege escalation9.8CNA v3.13.5%2026-08-15Reported exploitedNucleiExploit codeFix
CVE-2026-19474@fastify/multipart vulnerable to denial of service via temporary file leak on aborted upload7.5CNA v3.10.5%2026-08-15Fix
CVE-2026-18855Link Library WordPress plugin unauthenticated arbitrary file deletion via link_url parameter9.1CNA v3.11.4%2026-08-15Fix
CVE-2026-18807ECS WordPress plugin dynamic repeater handlers missing authorization4.3CISA ADP v3.10.3%2026-08-15Fix
CVE-2026-18549@fastify/multipart vulnerable to denial of service via aborted upload after fileSize limit7.5CNA v3.10.6%2026-08-15Fix
CVE-2026-18500@fastify/jwt vulnerable to authorization bypass via global secret overriding the per-request key8.1CNA v3.10.3%2026-08-15Fix
CVE-2026-18438Templately WordPress plugin arbitrary file upload to remote code execution8.8CNA v3.11.3%2026-08-15Fix
CVE-2026-18387Groundhogg WordPress plugin authenticated (Vendor+) SQL injection via tag_query parameter6.5CNA v3.10.7%2026-08-15Fix
CVE-2026-18216Backup Migration WordPress plugin Admin+ privilege escalation via Post-Restore Auto-Login6.5CISA ADP v3.10.5%2026-08-15Fix
CVE-2026-18165@fastify/oauth2 vulnerable to login CSRF via plantable OAuth state cookies4.2CNA v3.10.1%2026-08-15Fix
CVE-2026-17090Beaver Builder Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-08-15Fix
CVE-2026-16611Product Feed PRO for WooCommerce WordPress plugin unauthenticated Feed Configuration disclosure7.5CISA ADP v3.10.4%2026-08-15Fix
CVE-2026-16586Contest Gallery WordPress plugin Second-order SQL injection6.5CNA v3.10.6%2026-08-15Fix
CVE-2026-16541Simply Schedule Appointments WordPress plugin Team Member+ user email disclosure6.5CISA ADP v3.10.4%2026-08-15Fix
CVE-2026-16146Invisible Anti-Spam and CAPTCHA WordPress plugin SQL injection4.9CNA v3.10.5%2026-08-15Fix
CVE-2026-16145Invisible Anti-Spam and CAPTCHA WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-08-15Fix
CVE-2026-16142TrueBooker WordPress plugin unauthenticated account takeover9.8CNA v3.10.7%2026-08-15Fix
CVE-2026-16094Invisible Anti-Spam and CAPTCHA WordPress plugin SQL injection4.9CNA v3.10.6%2026-08-15Fix
CVE-2026-16080Image Uploader for Welcart WordPress plugin SQL injection6.5CNA v3.10.4%2026-08-15
CVE-2026-16007AppFlowy-IO AppFlowy-Cloud authenticated SQL injection in AppFlowy7.1CNA v4.00.3%2026-08-15
CVE-2026-15993Form Maker by 10Web WordPress plugin SQL injection5.3CNA v3.10.5%2026-08-15Fix
CVE-2026-15965MaxUpload WordPress plugin unauthenticated arbitrary file upload via resumableFilename parameter8.8CNA v3.11.0%2026-08-15
CVE-2026-15948Hydra Booking WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-08-15Fix
CVE-2026-15826User Profile Builder WordPress plugin unauthenticated authentication bypass9.8CNA v3.13.9%2026-08-15Reported exploitedNucleiFix
CVE-2026-15689Dancer2::Plugin::Auth::Extensible password reset email vulnerability9.8CISA ADP v3.10.8%2026-08-15Fix
CVE-2026-15453KiviCare WordPress plugin authenticated (Doctor+) SQL injection via searchTerm parameter6.5CNA v3.10.4%2026-08-15Fix
CVE-2026-15341User Session Synchronizer WordPress plugin unauthenticated authentication bypass to account takeover9.8CNA v3.10.6%2026-08-15
CVE-2026-15312Propovoice: All-in-One Client Management System WordPress plugin privilege escalation8.8CNA v3.10.5%2026-08-15
CVE-2026-153036Storage Rentals WordPress plugin unauthenticated account takeover via email parameter9.8CNA v3.10.8%2026-08-15Fix
CVE-2026-15162Object Sync for Salesforce WordPress plugin unauthenticated SQL injection7.5CNA v3.10.6%2026-08-15
CVE-2026-15142Real Estate Manager Pro WordPress plugin privilege escalation7.5CNA v3.10.4%2026-08-15Fix
CVE-2026-15001bLoyal: Loyalty and Promotions by bLoyal WordPress plugin privilege escalation8.8CNA v3.10.7%2026-08-15Fix
CVE-2026-14484RapiSafe WordPress plugin unauthenticated arbitrary file deletion9.1CNA v3.11.2%2026-08-15
CVE-2026-14433vcita Online Booking and Scheduling Calendar stored cross-site scripting7.2CNA v3.10.4%2026-08-15Fix
CVE-2026-14279Wholesale Market WordPress plugin privilege escalation8.8CNA v3.10.5%2026-08-15
CVE-2026-14230ECS WordPress plugin Contributor+ stored XSS via Dynamic Repeater Bindings5.4CISA ADP v3.10.2%2026-08-15Fix
CVE-2026-14229ECS WordPress plugin unauthenticated Private content disclosure via ecsload5.3CISA ADP v3.10.3%2026-08-15Fix
CVE-2026-13360Cookie Banner for GDPR / CCPA WordPress plugin stored cross-site scripting7.2CNA v3.10.4%2026-08-15Fix
CVE-2026-12248WPML Multilingual CMS WordPress plugin SQL injection6.5CNA v3.10.5%2026-08-15Fix
CVE-2026-12128DOTonPAPER Pinpoint Booking System cart data price parameter improper input validation5.3CNA v3.10.6%2026-08-15Fix
CVE-2026-8840Booking calendar, Appointment Booking System WordPress plugin authorization bypass5.3CNA v3.10.5%2026-08-15
CVE-2026-74250OpenStack Ironic sensitive information not cleared before reuse6.3CNA v3.10.3%2026-08-14Fix
CVE-2026-74248OpenStack Octavia incorrect authorization4.3CNA v3.10.3%2026-08-14Fix
CVE-2026-74247Quay: Ssrf via build archive_url in quay build API4.2CNA v3.10.2%2026-08-14
CVE-2026-74245Quay: Unauthenticated exported logs download in quay5.9CNA v3.10.4%2026-08-14
CVE-2026-74244Quay: Stripe webhook accepts forged events without signature verification in quay5.9CNA v3.10.2%2026-08-14
CVE-2026-74243Quay: Unauthenticated secscan notification endpoint in quay when psk is unset6.5CNA v3.10.5%2026-08-14
CVE-2026-74242Quay: Repository notification uuid IDOR in quay API5.3CNA v3.10.3%2026-08-14
CVE-2026-74241Quay: Ldap referral filter injection in quay external LDAP authentication4.8CNA v3.10.3%2026-08-14
CVE-2026-74240Quay: Jwt claim validation bypasses in quay federated robot and sso authentication5.4CNA v3.10.3%2026-08-14
CVE-2026-73850Emlog: Arbitrary SQL Execution vulnerability in ai.php within queryDatabase function8.6CNA v4.00.4%2026-08-14
CVE-2026-73849emlog allows unauthenticated reinstallation via `install.php?action=reinstall`9.8CNA v3.10.7%2026-08-14
CVE-2026-73847Emlog AI Assistant cross-site request forgery6.8CNA v3.10.2%2026-08-14Exploit code
CVE-2026-73846ondata CKAN MCP Server cache key canonicalization vulnerability6.5CNA v3.10.2%2026-08-14Fix
CVE-2026-73845ondata ckan-mcp-server CKAN MCP Server: MQA server allowlist bypass via unanchored regex5.3CNA v3.10.4%2026-08-14Fix
CVE-2026-73844ondata ckan-mcp-server CKAN MCP Server: Information disclosure via verbose error reflection3.7CNA v3.10.4%2026-08-14Fix
CVE-2026-73683Laravel Socialite Facebook Provider authentication bypass via Nonce Replay9.2CNA v4.00.8%2026-08-14Fix
CVE-2026-73680Cockpit CMS authenticated command injection via FFmpeg Filename8.7CNA v4.02.8%2026-08-14
CVE-2026-73679ImpressCMS authenticated RCE via PHP Custom Tag eval8.6CNA v4.01.1%2026-08-14
CVE-2026-73678MindsDB Minds Platform Unauthenticated RCE via scratchpad exec10.0CNA v4.01.6%2026-08-14Exploit codeFix
CVE-2026-73673Netis NC63 Unauthenticated Firmware Update with Missing Cryptographic Firmware Authentication8.7CNA v4.00.5%2026-08-14Exploit code
CVE-2026-73633Apache Struts: Unbounded read of a JSON request body7.5CISA ADP v3.10.7%2026-08-14Exploit codeFix
CVE-2026-73630SiYuan information disclosure via authFilePublishAccess6.9CNA v4.00.3%2026-08-14Fix
CVE-2026-73051actix-web actix-http HTTP request smuggling via CL.TE6.3CNA v4.00.6%2026-08-14Fix
CVE-2026-73049SiYuan information disclosure via getAttributeViewBacklinks6.9CNA v4.00.3%2026-08-14Fix
CVE-2026-73048SiYuan information disclosure via getRefIDsByFileAnnotationID6.9CNA v4.00.3%2026-08-14Fix
CVE-2026-72970Microsoft Edge (Chromium-based) remote code execution8.3CNA v3.10.7%2026-08-14Fix
CVE-2026-72859Budibase Authorization Regression via S3 Presigned URL8.3CNA v4.00.2%2026-08-14Fix
CVE-2026-72838FileBrowser Disk Exhaustion via TUS upload7.1CNA v4.00.5%2026-08-14Fix
CVE-2026-72837filebrowser File Browser privilege escalation via Proxy Authentication8.7CNA v4.00.6%2026-08-14Fix
CVE-2026-72836FileBrowser Case Sensitivity authentication bypass9.2CNA v4.00.6%2026-08-14Fix
CVE-2026-72835filebrowser Access Rule Bypass via Path Canonicalization7.6CNA v4.00.5%2026-08-14Fix
CVE-2026-72834filebrowser permission bypass via checksum5.3CNA v4.00.4%2026-08-14Fix
CVE-2026-72833getgrav grav-plugin-api Grav privilege escalation via Scoped API Keys8.7CNA v4.00.5%2026-08-14Fix
CVE-2026-72832Grav stored XSS via quoted-attribute bypass5.1CNA v4.00.3%2026-08-14Fix
CVE-2026-72831Grav authentication bypass via Flex Objects8.7CNA v4.00.6%2026-08-14Fix
CVE-2026-72830Grav API plugin RCE via ConfigController scope bypass8.7CNA v4.00.7%2026-08-14Fix
CVE-2026-72829Grav API Key Scope Bypass via UsersController8.7CNA v4.00.5%2026-08-14Fix
CVE-2026-72828Grav API Key Scope Bypass via InvitationsController8.6CNA v4.00.5%2026-08-14Fix
CVE-2026-72827Grav CMS remote code execution via Twig8.7CNA v4.00.9%2026-08-14Fix
CVE-2026-72826Grav Scope Bypass via createApiKey8.7CNA v4.00.5%2026-08-14Fix
CVE-2026-72825Grav API-key scope cap bypass via ReportsController7.2CNA v4.00.3%2026-08-14Fix
CVE-2026-72824Grav API Key Scope Bypass via PagesController8.7CNA v4.00.7%2026-08-14Fix
CVE-2026-72823Grav API-key scope cap bypass via DemoController5.3CNA v4.00.3%2026-08-14Fix
CVE-2026-72822Grav authentication bypass via disable2fa8.7CNA v4.00.6%2026-08-14Fix
CVE-2026-72821Grav form plugin stored XSS via Radio Toggle5.1CNA v4.00.2%2026-08-14Fix
CVE-2026-72820Grav path traversal via Backup Profile Configuration6.9CNA v4.00.5%2026-08-14Fix
CVE-2026-72819Grav CMS remote code execution via ZIP upload8.7CNA v4.00.9%2026-08-14Fix
CVE-2026-72817go-chi chi IP spoofing via X-Forwarded-For6.9CNA v4.00.2%2026-08-14Fix
CVE-2026-72816go-chi chi IP spoofing via RealIP Middleware6.9CNA v4.00.3%2026-08-14Fix
CVE-2026-72815go-chi chi IP spoofing via X-Forwarded-For header6.9CNA v4.00.5%2026-08-14Fix
CVE-2026-72814actix-web information disclosure via files6.3CNA v4.00.5%2026-08-14Fix
CVE-2026-72813actix-web actix-files denial of service via empty Range header6.9CNA v4.00.5%2026-08-14Fix
CVE-2026-72812SiYuan missing authorization via refreshBacklink6.9CNA v4.00.4%2026-08-14Fix
CVE-2026-72811SiYuan SQL injection via backlink search9.9CNA v4.00.4%2026-08-14Fix
CVE-2026-72810SiYuan Publish-Boundary Bypass via WebSocket9.2CNA v4.00.5%2026-08-14Fix
CVE-2026-71571Joomla extension icagenda.com authenticated SQL injection via unescaped numeric filter in iCagenda8.6CNA v4.00.4%2026-08-14
CVE-2026-71570Joomla extension icagenda.com ACL bypass allowing arbitrary user enumeration5.1CNA v4.00.4%2026-08-14
CVE-2026-69414Microsoft Defender elevation of privilege7.8CNA v3.11.3%2026-08-14Exploit codeFix
CVE-2026-69101Datavane TIS XXE injection via doEditWorkflow endpoint8.3CNA v4.00.4%2026-08-14
CVE-2026-67366Joomla extension icagenda.com CSRF on frontend registration actions in iCagenda5.3CNA v4.00.2%2026-08-14
CVE-2026-67365Joomla extension icagenda.com unauthenticated SQL injection in iCagenda9.2CNA v4.00.4%2026-08-14
CVE-2026-66272Dell Wyse Management Suite (WMS) missing authentication5.3CNA v3.10.4%2026-08-14Fix
CVE-2026-66271Dell Wyse Management Suite (WMS) unrestricted file upload7.2CNA v3.10.8%2026-08-14Fix
CVE-2026-66270Dell Wyse Management Suite (WMS) unrestricted file upload7.2CNA v3.10.8%2026-08-14Fix
CVE-2026-64887Airwall hard-coded secrets7.0CNA v4.00.2%2026-08-14Fix
CVE-2026-63702Dell Wyse Management Suite (WMS) hard-coded credentials6.3CNA v3.10.1%2026-08-14Fix
CVE-2026-63701Dell Wyse Management Suite (WMS) improper privilege management6.3CNA v3.10.1%2026-08-14Fix
CVE-2026-63700Dell Wyse Management Suite (WMS) improper privilege management7.8CNA v3.10.1%2026-08-14Fix
CVE-2026-63650OpenVPN improper certificate validation2.0CNA v4.00.4%2026-08-14Fix
CVE-2026-63649OpenVPN permissive allowlist4.1CNA v4.00.3%2026-08-14Fix
CVE-2026-63361LimeSurvey Community Edition reflected XSS in HTML editor popup8.5CNA v4.00.5%2026-08-14
CVE-2026-58224Samba: Ctdb fails to do integrity checking of received packets6.5CNA v3.10.3%2026-08-14Fix
CVE-2026-57472Improper limitation of a pathname to a restricted directory (path traversal) in KUNBUS RevPiPyLoad6.9CNA v4.00.2%2026-08-14Fix
CVE-2026-57471Improper limitation of a pathname to a restricted directory (path traversal) in KUNBUS RevPiPyLoad6.8CNA v4.00.2%2026-08-14Fix
CVE-2026-57469Cross-site request forgery (CSRF) in KUNBUS PiCtory5.1CNA v4.00.3%2026-08-14Fix
CVE-2026-53970ZeroBrew Missing Checksum Verification RCE via shim.rb7.5CNA v4.00.3%2026-08-14
CVE-2026-53472Migration-planner: Credentialurl validator accepts javascript: Urls6.3CNA v3.10.3%2026-08-14
CVE-2026-50523Microsoft PowerShell remote code execution7.8CNA v3.10.3%2026-08-14Fix
CVE-2026-50029js-toml has silent type confusion via falsy-primitive duplicate-key bypass5.3CNA v3.10.4%2026-08-14Fix
CVE-2026-50027mcp-memory-service document API endpoints missing authentication9.8CNA v3.11.0%2026-08-14Fix
CVE-2026-49989crate CrateDB's Blob HTTP handler bypasses authorization7.1CNA v4.00.5%2026-08-14Fix
CVE-2026-49986Cortex has Untrusted Project Bootstrap code execution via `CLAUDE_PROJECT_DIR`7.1CNA v4.00.2%2026-08-14Fix
CVE-2026-49826Concourse login flow has an open redirect issue0.0CNA v4.00.5%2026-08-14Fix
CVE-2026-49457benoitc erlang_quic QUIC has broken TLS verification9.1CNA v3.10.2%2026-08-14Fix
CVE-2026-49282capstone-engine Capstone M68K and RISCV instruction name lookup out-of-bounds read5.1CNA v3.10.2%2026-08-14Fix
CVE-2026-49263capstone-engine Capstone WebAssembly br_table decoder numeric truncation2.0CNA v4.00.2%2026-08-14Fix
CVE-2026-48528Metacat has an unauthenticated SQL injection9.8CNA v3.10.5%2026-08-14Fix
CVE-2026-47766crun follows rootfs /dev symlink while creating default devices5.1CNA v4.00.2%2026-08-14Fix
CVE-2026-47192Kas's late signature validation may allow unnoticed repository manipulations2.1CNA v4.00.3%2026-08-14Fix
CVE-2026-47191kas checks out SHA-like git branches as valid commits2.1CNA v4.00.2%2026-08-14Fix
CVE-2026-46603Excessive memory allocation during VP8L decoding in golang.org/x/image7.5CISA ADP v3.10.4%2026-08-14Fix
CVE-2026-46439compliance-trestle vulnerable to remote code execution7.8CNA v3.10.3%2026-08-14Fix
CVE-2026-46380compliance-trestle vulnerable to SSRF in Remote Fetching subsystem6.7CNA v3.10.1%2026-08-14Fix
CVE-2026-45699Netatalk has integer underflow → stack buffer overflow in copydir7.5CNA v3.10.5%2026-08-14Fix
CVE-2026-34492Airwall arbitrary file read7.0CNA v4.00.4%2026-08-14Fix
CVE-2026-27871Johnson Controls TL280 weak cryptographic algorithm2.9CNA v4.00.3%2026-08-14Fix
CVE-2026-19910PAX Technology Q80 Application Installer signature verification bypass remote code execution7.5CNA v3.00.3%2026-08-14
CVE-2026-19909PAX Technology Q80 AIP File Parsing link following remote code execution7.5CNA v3.00.5%2026-08-14
CVE-2026-19908PAX Technology Q80 XCB daemon missing authentication7.1CNA v3.00.4%2026-08-14
CVE-2026-19884Eclipse Theia external control of a configuration setting8.4CNA v4.00.2%2026-08-14Fix
CVE-2026-19880QOS.CH Sarl Logback-classic incomplete protection against6.3CNA v4.00.3%2026-08-14Fix
CVE-2026-19879Red Hat Undertow HTTP response header writing vulnerability5.3CNA v3.10.4%2026-08-14
CVE-2026-19871Roskus Prospero Flow CRM human resources component hard-coded credentials9.3CNA v4.00.5%2026-08-14Fix
CVE-2026-19870IDOR in Prospero Flow CRM allows cross-tenant payroll disclosure and creation8.6CNA v4.00.4%2026-08-14Fix
CVE-2026-19847TOTOLINK A800R wps.so cstecgi.cgi setWiFiWpsConfig stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19846TOTOLINK A800R firewall.so cstecgi.cgi setUrlFilterRules stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19845TOTOLINK A800R lan.so cstecgi.cgi setStaticDhcpConfig stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19844TOTOLINK A800R ipv6.so cstecgi.cgi setRadvdCfg stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19841TRENDnet TEW-813DRU vsftpd vsftpd.conf default permission2.3CNA v4.00.3%2026-08-14
CVE-2026-19839SourceCodester Simple Doctors Appointment System save_file.php save_doctor unrestricted upload5.1CNA v4.00.4%2026-08-14
CVE-2026-19838Webkul Bagisto Backend Reporting endpoint sales authorization5.3CNA v4.00.4%2026-08-14
CVE-2026-19837Webkul Bagisto customer search information disclosure5.1CNA v4.00.4%2026-08-14
CVE-2026-19836Webkul Bagisto backend customer detail view authorization bypass5.3CNA v4.00.4%2026-08-14
CVE-2026-19835Webkul Bagisto customer item deletion endpoint improper access control5.1CNA v4.00.5%2026-08-14
CVE-2026-19834Webkul Bagisto admin customer impersonation feature authorization bypass5.1CNA v4.00.4%2026-08-14
CVE-2026-19830TRENDnet TEW-816DRM bftpd bftpd.conf allocation of resources6.9CNA v4.00.6%2026-08-14
CVE-2026-19829648540858 wvp-GB28181-pro Log File Download Endpoint LogController.java path traversal5.3CNA v4.00.5%2026-08-14
CVE-2026-19828648540858 wvp-GB28181-pro Snapshot Endpoint PlayController.java path traversal5.3CNA v4.00.4%2026-08-14
CVE-2026-19827alldatacenter alldata logDetailCat Endpoint JobLogController.java FileInputStream path traversal6.9CNA v4.00.7%2026-08-14
CVE-2026-19826alldatacenter alldata xxl-rpc listener deserialization of untrusted data6.9CNA v4.00.6%2026-08-14
CVE-2026-19825SourceCodester Simple Client Management System Master.php save_service SQL injection6.9CNA v4.00.4%2026-08-14
CVE-2026-19824Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19823Tenda W20E QoS Rule Deletion delQos formQOSRuleDel stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19822Tenda W20E QoS Edit editQos lstAdd stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19821Tenda AC12 httpd web management interface SetSysAutoRebbotCfg formSetRebootTimer buffer overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19815TOTOLINK A800R firewall.so cstecgi.cgi setParentalRules stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19814TOTOLINK A800R firewall.so cstecgi.cgi setMacQos stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19813TOTOLINK A800R firewall.so cstecgi.cgi setMacFilterRules stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19812TOTOLINK A800R product.so cstecgi.cgi UploadCustomModule stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19811TOTOLINK A800R firewall.so cstecgi.cgi setIpQosRules stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19794WP-Stats WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-08-14Exploit codeFix
CVE-2026-19792Tenda G0 httpd web management interface module setPortMapping buffer overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19791Tenda G0 httpd web management interface module addStaticRoute stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19790Tenda G0 httpd Web Management module formSetPortMirror stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19789Tenda AC1206 httpd web management interface WifiGuestSet set_wl_guest_iplist stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19788Tenda AC1206 httpd web management interface SetOnlineDevName set_device_name stack-based overflow8.7CNA v4.00.9%2026-08-14
CVE-2026-19787SourceCodester Air Cargo Management System Master.php save_cargo_type SQL injection5.1CNA v4.00.3%2026-08-14
CVE-2026-19786francoisjacquet RosarioSIS Modules.php cross-site request forgery5.3CNA v4.00.2%2026-08-14Fix
CVE-2026-19785francoisjacquet RosarioSIS Student Medical Medical.inc.php SQL injection5.3CNA v4.00.3%2026-08-14Fix
CVE-2026-19784francoisjacquet RosarioSIS Referrals.php DBUpdate authorization5.3CNA v4.00.5%2026-08-14Fix
CVE-2026-19771Baicells EG3661M LuCI Web luci os command injection8.6CNA v4.03.7%2026-08-14
CVE-2026-19770feedmob fm-mcp-servers Download endpoint index.ts downloadReport server-side request forgery4.8CNA v4.00.1%2026-08-14
CVE-2026-19768Devolutions PowerShell Universal settings feature code injection8.1CISA ADP v3.10.4%2026-08-14Fix
CVE-2026-19767itsourcecode Hospital Management System viewdoctortimings.php SQL injection5.3CNA v4.00.3%2026-08-14
CVE-2026-19765eyaushev swagger-testcase-mcp fetch_swagger swagger-parser.ts loadSource server-side request forgery5.3CNA v4.00.4%2026-08-14
CVE-2026-19764Raisecom Communication Command and Dispatch Management Platform getpwd.php SQL injection6.9CNA v4.00.4%2026-08-14
CVE-2026-19763DTStack Taier Cluster Creation ClusterController.java FileUtils.deleteDirectory path traversal5.1CNA v4.00.6%2026-08-14Fix
CVE-2026-19762DTStack Taier Chunk-Check Endpoint FileChunkController.java Paths.ge path traversal6.9CNA v4.00.6%2026-08-14
CVE-2026-19682Tenable Security Center command injection9.4CNA v4.02.8%2026-08-14Fix
CVE-2026-19681Tenable Security Center command injection9.4CNA v4.09.9%2026-08-14MetasploitExploit codeFix
CVE-2026-19680Tenable Security Center SQL injection7.1CNA v4.00.3%2026-08-14Fix
CVE-2026-19679Tenable Security Center improper input validation8.7CNA v4.01.6%2026-08-14Fix
CVE-2026-19639Tenable Security Center improper access control5.3CNA v4.00.3%2026-08-14Fix
CVE-2026-19636Tenable Security Center insuffucient Protections lead to brute force6.0CNA v4.00.3%2026-08-14Fix
CVE-2026-19635Tenable Security Center local privilege escalation8.5CNA v4.00.2%2026-08-14Fix
CVE-2026-19631Tenable Security Center SQL injection6.9CNA v4.00.4%2026-08-14Fix
CVE-2026-19629Tenable Security Center privilege escalation8.6CNA v4.00.4%2026-08-14Fix
CVE-2026-19628Tenable Security Center remote code execution8.6CNA v4.02.1%2026-08-14Fix
CVE-2026-19626Tenable Security Center remote code execution9.4CNA v4.01.9%2026-08-14MetasploitExploit codeFix
CVE-2026-19617Red Hat Hardened Images libdm: Lvm2: Libdm: Denial of service5.5CNA v3.10.2%2026-08-14Fix
CVE-2026-19188Haiwell IoT Cloud HMI Gateway OS command injection10.0CNA v4.02.9%2026-08-14Fix
CVE-2026-18554IBM Db2 Mirror for i path traversal7.5CNA v3.10.9%2026-08-14Fix
CVE-2026-18403LimeSurvey Community Edition authenticated SQL injection in CPDB6.0CNA v4.00.4%2026-08-14
CVE-2026-18178IBM Db2 Mirror for i path traversal5.4CNA v3.10.5%2026-08-14Fix
CVE-2026-18109W3 Total Cache WordPress plugin unauthenticated stored cross-site scripting via comment Author Name7.2CNA v3.10.4%2026-08-14Reported exploitedFix
CVE-2026-18039Essential Addons for Elementor WordPress plugin unauthenticated privilege escalation8.1CISA ADP v3.10.4%2026-08-14Reported exploitedFix
CVE-2026-17227IBM Db2 Mirror for i SQL injection5.4CNA v3.10.3%2026-08-14Fix
CVE-2026-17209IBM Db2 Mirror for i cross-site scripting6.3CNA v3.10.4%2026-08-14Fix
CVE-2026-17186IBM Db2 Mirror for i command injection9.9CNA v3.10.5%2026-08-14Fix
CVE-2026-17184IBM Db2 Mirror for i external control of a file path9.8CNA v3.10.8%2026-08-14Fix
CVE-2026-17182IBM Db2 Mirror for i authentication bypass9.8CNA v3.10.7%2026-08-14Fix
CVE-2026-17181IBM Db2 Mirror for i path traversal9.3CNA v3.10.5%2026-08-14Fix
CVE-2026-17179IBM Db2 Mirror for i command injection8.5CNA v3.13.1%2026-08-14Fix
CVE-2026-17177IBM Db2 Mirror for i uncontrolled recursion7.5CNA v3.10.5%2026-08-14Fix
CVE-2026-17175IBM Db2 Mirror for i improper authentication7.5CNA v3.10.5%2026-08-14Fix
CVE-2026-17173IBM Db2 Mirror for i path traversal6.5CNA v3.10.7%2026-08-14Fix
CVE-2026-17081IBM Db2 Mirror for i path traversal8.2CNA v3.10.5%2026-08-14Fix
CVE-2026-17079IBM Db2 Mirror for i input validation protection mechanism failure6.3CNA v3.10.3%2026-08-14Fix
CVE-2026-16915IBM Db2 Mirror for i path traversal7.5CNA v3.10.9%2026-08-14Fix
CVE-2026-16905IBM Db2 Mirror for i improper authentication5.3CNA v3.10.5%2026-08-14Fix
CVE-2026-16879IBM Db2 Mirror for i improper authorization8.8CNA v3.10.5%2026-08-14Fix
CVE-2026-16810Bit Form WordPress plugin authenticated (Administrator+) SQL injection via filterText parameter6.5CNA v3.10.5%2026-08-14Fix
CVE-2026-16772Akaunting user role assignment privilege escalation8.1CISA ADP v3.10.2%2026-08-14
CVE-2026-16739Epeken All Kurir WordPress plugin unauthenticated order Payment Confirmation forgery5.9CISA ADP v3.10.3%2026-08-14
CVE-2026-16708IBM Db2 Mirror for i information disclosure8.3CNA v3.10.2%2026-08-14Fix
CVE-2026-15205Paymob for WooCommerce WordPress plugin unauthenticated SQL injection8.6CISA ADP v3.10.4%2026-08-14Reported exploitedFix
CVE-2026-14290Embed Google Photos Album Easily WordPress plugin stored XSS6.8CISA ADP v3.10.4%2026-08-14
CVE-2026-13198Concurrent execution using shared resource with improper synchronization in KUNBUS piControl5.9CNA v4.00.1%2026-08-14Fix
CVE-2026-13197Concurrent execution using shared resource with improper synchronization in KUNBUS piControl7.3CNA v4.00.1%2026-08-14Fix
CVE-2026-13196Out-of-bounds write in KUNBUS piControl7.3CNA v4.00.1%2026-08-14Fix
CVE-2026-13002Red Hat Enterprise Linux 10 dnsmasq: Infinite loop DoS in dnssec nsec/nsec3 type bitmap parsing4.4CNA v3.10.1%2026-08-14Fix
CVE-2026-12949Wishlist Member X WordPress plugin unauthenticated account takeover via mergewith parameter9.8CNA v3.10.5%2026-08-14Fix
CVE-2026-12743affiliate-toolkit WordPress plugin SQL injection4.9CNA v3.10.4%2026-08-14Fix
CVE-2026-12366Zephyr dynamic kernel object disposal use-after-free8.8CNA v3.10.2%2026-08-14Fix
CVE-2026-12365zephyrproject zephyr A use-after-free5.8CNA v3.10.1%2026-08-14Fix
CVE-2026-12364Zephyr logging syscall verifier untrusted pointer dereference8.4CNA v3.10.2%2026-08-14Fix
CVE-2026-12363zephyrproject zephyr out-of-bounds write in LoRaWAN fragmented transport from a fragment index of 04.2CNA v3.10.2%2026-08-14Fix
CVE-2026-1621Register Bypass in Universal Sotware's E-Municipality5.3CNA v3.10.4%2026-08-14Fix
CVE-2026-73843OpenChoreo: Unauthenticated access to data-plane operations9.6CNA v3.10.5%2026-08-13Fix
CVE-2026-73842OpenChoreo cluster-gateway internal proxy missing authentication9.0CNA v3.10.3%2026-08-13Fix
CVE-2026-73841OpenChoreo: Cross-project command execution and wirelog view access8.8CNA v3.10.8%2026-08-13Fix
CVE-2026-73840OpenChoreo: Unauthenticated build/workflow trigger via git-provider confusion5.3CNA v3.10.3%2026-08-13Fix
CVE-2026-73671Saurus CMS unauthenticated open redirect via logout URL parameter5.1CNA v4.00.3%2026-08-13
CVE-2026-73670CMS admin SQL injection via db_data.php table_name parameter8.6CNA v4.00.5%2026-08-13
CVE-2026-73669Signify Philips Hue Bridge Pro MQTT broker missing authentication6.9CNA v4.00.5%2026-08-13Fix
CVE-2026-73667OpenChoreo: Authenticated OS command injection8.8CNA v3.10.9%2026-08-13Fix
CVE-2026-73666OpenChoreo Backstage plugins developer portal API missing authentication8.2CNA v3.10.7%2026-08-13Fix
CVE-2026-73665FreePBX UCP: Unauthenticated remote code execution9.3CNA v4.00.3%2026-08-13Fix
CVE-2026-73664FreePBX: Authenticated arbitrary SSH Key injection via Backup module8.6CNA v4.00.5%2026-08-13Fix
CVE-2026-73663FreePBX: Unauthenticated SQL injection in FreePBX missedcall9.3CNA v4.00.4%2026-08-13Fix
CVE-2026-73662Authenticated FreePBX Music RCE via mpg123 and Asterisk Call files7.6CNA v4.00.9%2026-08-13Fix
CVE-2026-73661FreePBX: Authenticated Framework AUTHTYPE can be Restored from a Crafted Backup8.6CNA v4.00.3%2026-08-13Fix
CVE-2026-73660FreePBX: Authenticated TTS AGI command injection through TTS Name7.5CNA v4.00.8%2026-08-13Fix
CVE-2026-73659Trigger.dev: Cross-tenant object read/write via path traversal in packet presign API8.1CNA v3.10.5%2026-08-13Fix
CVE-2026-73658Trigger.dev: Cross-tenant object store read and write via URL path traversal8.2CNA v3.10.4%2026-08-13Fix
CVE-2026-73657Trigger.dev: Cross-tenant payload poisoning via packet write + replay4.2CNA v3.10.2%2026-08-13Fix
CVE-2026-73656Trigger.dev deployment background worker registration missing authorization9.9CNA v3.10.5%2026-08-13Fix
CVE-2026-73655Trigger.dev: Account takeover via Cross-Provider OAuth Email Matching in Google Login7.4CNA v3.10.5%2026-08-13Fix
CVE-2026-73654Trigger.dev: Prototype pollution via run metadata operations → process-wide cross-tenant DoS8.5CNA v3.10.6%2026-08-13Fix
CVE-2026-73653Vitest: Browser Mode provider commands bypass the file-access permission gate9.4CNA v3.10.8%2026-08-13Fix
CVE-2026-73652vantage6 algorithm store edit permission incorrect authorization7.1CNA v4.00.4%2026-08-13
CVE-2026-73651TypeORM: Migration:generate template-literal code injection5.7CNA v3.10.4%2026-08-13Fix
CVE-2026-73650SVGO: RemoveScripts plugin leaves some executable scripts intact8.2CNA v3.10.4%2026-08-13Fix
CVE-2026-73649Velocity.js: Remote code execution via property-read to function constructor (bypass of fix)9.8CNA v3.10.7%2026-08-13Fix
CVE-2026-73648Rails HTML Sanitizers: Possible XSS vulnerability with certain configurations5.1CNA v4.00.5%2026-08-13Fix
CVE-2026-73647Quasar Framework: Prototype pollution in Quasar extend utility5.6CNA v3.10.4%2026-08-13Fix
CVE-2026-73645OpenZeppelin Confidential Contracts ERC7984ERC20Wrapper integer overflow6.6CNA v4.00.5%2026-08-13Fix
CVE-2026-73644OpenDJ SASL PLAIN authzid bypassing the proxy ACI scope check9.6CNA v3.10.4%2026-08-13Fix
CVE-2026-73643js-yaml flow collection parser denial of service7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-73629Serendipity SSRF via hex IPv4 and IPv6 addresses8.4CNA v4.00.3%2026-08-13Fix
CVE-2026-73628Serendipity reflected XSS via search clean-URL route5.3CNA v4.00.3%2026-08-13
CVE-2026-73627JupyterLab Plugin Manager Lock-Rule Enforcement Bypass6.0CNA v4.00.4%2026-08-13Fix
CVE-2026-73626JupyterLab authentication bypass via PyPIExtensionManager7.7CNA v4.00.4%2026-08-13Fix
CVE-2026-73625GitPython remote code execution via kwarg value smuggling8.7CNA v4.00.9%2026-08-13Fix
CVE-2026-73624GitPython arbitrary file overwrite via diff7.2CNA v4.00.6%2026-08-13Fix
CVE-2026-73623GitPython remote code execution via --template8.8NVD v3.10.8%2026-08-13Fix
CVE-2026-73622GitPython Environment Variable Exfiltration via Remote.add8.7CNA v4.00.5%2026-08-13Fix
CVE-2026-73621GitPython arbitrary File Truncation via Commit.count5.3CNA v4.00.4%2026-08-13Fix
CVE-2026-73620GitPython arbitrary file overwrite and Read7.2CNA v4.00.6%2026-08-13Fix
CVE-2026-73619GitPython arbitrary file read via Repo.archive7.1CNA v4.00.4%2026-08-13Fix
CVE-2026-73618Budibase Server NoSQL injection via JSON parameter8.7CNA v4.00.4%2026-08-13Fix
CVE-2026-73617Budibase NoSQL injection via MongoDB datasource7.1CNA v4.00.3%2026-08-13Fix
CVE-2026-73616OpenRemote Notification Delete Cross-Realm insecure direct object reference7.1CNA v4.00.2%2026-08-13
CVE-2026-73615Network-AI SandboxPolicy Blocklist Bypass via Quote Mismatch8.7CNA v4.00.7%2026-08-13Fix
CVE-2026-73614Network-AI ClaudeHookBridge Deny Pattern Bypass via Truncation8.7CNA v4.00.7%2026-08-13Fix
CVE-2026-73613filebrowser Out-of-Scope file deletion via Symlink7.2CNA v4.00.6%2026-08-13Fix
CVE-2026-73612filebrowser File Browser authorization bypass via Recursive Operations8.6CNA v4.00.5%2026-08-13Fix
CVE-2026-73611filebrowser File Browser JWT Expiration Bypass7.6CNA v4.00.4%2026-08-13
CVE-2026-73610SiYuan information disclosure via Local Storage6.9CNA v4.00.3%2026-08-13Fix
CVE-2026-73609SiYuan information disclosure via getBookmarkLabels6.9CNA v4.00.3%2026-08-13Fix
CVE-2026-73608SiYuan authorization bypass via getAttributeViewSearchTarget9.2CNA v4.00.4%2026-08-13Fix
CVE-2026-73607SiYuan information disclosure via getOutlineStorage6.9CNA v4.00.3%2026-08-13Fix
CVE-2026-73606SiYuan information disclosure via getRefIDs6.9CNA v4.00.3%2026-08-13Fix
CVE-2026-73605SiYuan path traversal via getUniqueFilename6.9CNA v4.00.3%2026-08-13Fix
CVE-2026-73604Flowise credential exposure via API7.1CNA v4.00.4%2026-08-13Fix
CVE-2026-73603Flowise Credential Abuse via Text-to-Speech5.3v3.10.3%2026-08-13Fix
CVE-2026-73602Flowise sandbox escape to RCE9.9v3.10.8%2026-08-13Fix
CVE-2026-73601Flowise remote code execution via Custom MCP8.8NVD v3.11.1%2026-08-13Fix
CVE-2026-73585sblim-cmpi-base provider registration scripts vulnerability6.3CNA v3.10.1%2026-08-13
CVE-2026-73584Red Hat Enterprise Linux 10 sblim-sfcb: Sblim-sfcb: Privileged file corruption and denial of service6.3CNA v3.10.1%2026-08-13
CVE-2026-73583sblim-sfcb provider-manager IPC message parser out-of-bounds read6.6CNA v3.10.1%2026-08-13
CVE-2026-73576Zimbra Collaboration weak cryptography6.5v3.10.2%2026-08-13Fix
CVE-2026-73575Zimbra Collaboration cross-site request forgery3.5v3.10.1%2026-08-13Fix
CVE-2026-73574Zimbra Collaboration incorrect resource transfer6.5v3.10.2%2026-08-13Fix
CVE-2026-73573Zimbra Collaboration path traversal6.5v3.10.3%2026-08-13Fix
CVE-2026-73572Zimbra Collaboration cross-site scripting6.1CNA v3.10.3%2026-08-13Fix
CVE-2026-73571Zimbra Collaboration authorization bypass4.3v3.10.2%2026-08-13Fix
CVE-2026-73570Zimbra Collaboration Suite (ZCS) OS command injection8.9CNA v3.171.7%2026-08-13KEVNucleiExploit codeFix
CVE-2026-73569fast-xml-parser DOCTYPE entity expansion limit denial of service8.7CNA v4.00.5%2026-08-13Fix
CVE-2026-73568py-libp2p yamux stream multiplexer denial of service7.5CNA v3.10.5%2026-08-13
CVE-2026-73567sm-crypto SM2 key generation vulnerability9.1CNA v3.10.4%2026-08-13Fix
CVE-2026-73566node-tar tar member path filter denial of service7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-73565@hono/node-server: Unauthenticated memory-leak DoS via aborted WebSocket handshake5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-73564frp SSH tunnel gateway integer overflow8.7CNA v4.00.5%2026-08-13Fix
CVE-2026-73563Backstage: Unauthenticated OAuth account takeover4.7CNA v3.10.2%2026-08-13Fix
CVE-2026-73562Mongoose: Prototype pollution in the update casting6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-73561Hub: Unauthenticated WebSocket RPC Waiter resource exhaustion7.5CNA v3.10.6%2026-08-13Fix
CVE-2026-73559vLLM: Completion prompt lists fan out into unbounded engine requests6.5CNA v3.10.6%2026-08-13Fix
CVE-2026-73558vLLM: Cross-user data leak5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-73557vLLM: Incomplete remediation can be bypassed by concurrent prompt parts6.3CNA v4.00.2%2026-08-13Fix
CVE-2026-73556vLLM lm-format-enforcer structured output backend denial of service5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-73555vLLM: Unauthenticated Internal Path and Username Disclosure via Validation Error messages5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-73533Ninja Tables Pro embedded malicious code via Tampered Plugin Build9.3CNA v4.00.6%2026-08-13Reported exploited
CVE-2026-73532Fluent Forms Pro embedded malicious code via Tampered Plugin Build9.3CNA v4.00.7%2026-08-13Reported exploitedFix
CVE-2026-73531django-helpdesk stored XSS via HTML Attachments5.3CNA v4.00.3%2026-08-13Fix
CVE-2026-73530flytohub flyto-core Flyto2 Core SSRF Guard Bypass via is_private_ip6.3CNA v4.00.4%2026-08-13Fix
CVE-2026-73515PostGIS out-of-bounds read via FlatGeobuf Buffer7.2CNA v4.00.6%2026-08-13Fix
CVE-2026-73514PostGIS address_standardizer out-of-bounds write via standardize_address8.7CNA v4.00.8%2026-08-13
CVE-2026-73509OpenListTeam OpenList batch rename handler path traversal7.6CNA v3.10.5%2026-08-13Fix
CVE-2026-73508Netty: Memory leak in DNS Record Decoder via Malformed Domain Names5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-73507Netty: Denial of service in XmlFrameDecoder via CPU exhaustion7.5CNA v3.10.8%2026-08-13Fix
CVE-2026-73506JanDeDobbeleer oh-my-posh oh My Posh: Terminal escape sequence injection6.1CNA v3.10.2%2026-08-13Fix
CVE-2026-73505JanDeDobbeleer oh-my-posh oh My Posh: Arbitrary command execution7.8CNA v3.10.2%2026-08-13Fix
CVE-2026-73489Russh: Post-auth remote panic via pty-req with more than 130 terminal-mode records4.3CNA v3.10.5%2026-08-13Fix
CVE-2026-73488FlowiseAI Flowise customer-default-source endpoint insecure direct object reference6.5v3.10.4%2026-08-13Fix
CVE-2026-73487Flowise prompt injection RCE via CSV agent9.8v3.10.8%2026-08-13Fix
CVE-2026-73486Flowise code injection via CSV agent customReadCSV8.8NVD v3.10.7%2026-08-13Fix
CVE-2026-73485Flowise remote code execution via Airtable agent8.8NVD v3.10.6%2026-08-13Fix
CVE-2026-73484Flowise sandbox escape via Pandas Methods8.1v3.10.4%2026-08-13Fix
CVE-2026-73483Flowise sandbox escape via Puppeteer8.8NVD v3.10.7%2026-08-13Fix
CVE-2026-73482phpList cross-site request forgery via admins.php7.2CNA v4.00.3%2026-08-13Fix
CVE-2026-73481phpList cross-site request forgery via Bounce Rules5.3CNA v4.00.2%2026-08-13Fix
CVE-2026-73480gdu Terminal injection via Unstripped Escape Sequences4.8CNA v4.00.2%2026-08-13Fix
CVE-2026-73479dua-cli Terminal escape sequence injection via Marked Paths4.8CNA v4.00.2%2026-08-13
CVE-2026-73428Trix: Stored XSS via HTMLParser attribute injection on paste4.6CNA v3.10.4%2026-08-13Fix
CVE-2026-73421NextAuth.js auth session check improper authorization9.1CNA v4.00.6%2026-08-13Fix
CVE-2026-73420NextAuth.js email normalizer vulnerability9.1CNA v4.00.7%2026-08-13Fix
CVE-2026-73417JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)8.6CNA v4.00.7%2026-08-13Fix
CVE-2026-73416JupyterLab: PyPI extension blocklist package-name canonicalization bypass6.1CNA v4.00.7%2026-08-13Fix
CVE-2026-73408Budibase: MySQL DESCRIBE Backtick injection via multipleStatements in Database Connector7.6CNA v3.10.5%2026-08-13Fix
CVE-2026-73403User Registration WordPress plugin broken access control5.3CNA v3.10.3%2026-08-13Fix
CVE-2026-73401InstaWP Connect WordPress plugin broken access control5.3CNA v3.10.3%2026-08-13Fix
CVE-2026-73357GiveWP WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-73353Revolut Gateway for WooCommerce WordPress plugin broken access control5.3CNA v3.10.3%2026-08-13Fix
CVE-2026-73349GiveWP WordPress plugin broken access control5.3CNA v3.10.3%2026-08-13Fix
CVE-2026-73346MailChimp For WooCommerce WordPress plugin SQL injection7.6CNA v3.10.4%2026-08-13Fix
CVE-2026-73344WP Data Access WordPress plugin cross-site scripting (XSS)5.9CNA v3.10.2%2026-08-13Fix
CVE-2026-73340Featured Image from URL WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-73305Budibase: Privilege escalation via public role assignment API missing app-level authorization8.8CNA v3.10.5%2026-08-13Fix
CVE-2026-73304Budibase: SSO OAuth2 token leakage via User Metadata endpoints to Power-Role Users4.9CNA v3.10.5%2026-08-13Fix
CVE-2026-73302budibase OIDC SSO flow improper authentication9.0CNA v4.00.4%2026-08-13Fix
CVE-2026-73266Red Hat multicluster engine for Kubernetes clusterclaims-controller confused deputy7.1CNA v3.10.4%2026-08-13Fix
CVE-2026-73039streama insecure direct object reference via ViewingStatusController5.3CNA v4.00.3%2026-08-13
CVE-2026-73038NodeBB stored XSS via ActivityPub emoji tag.icon.url and tag.name5.3CNA v4.00.2%2026-08-13Fix
CVE-2026-73037DayuanJiang next-ai-draw-io next AI Draw.io reflected XSS via unsanitized mcp query parameter5.1CNA v4.00.3%2026-08-13
CVE-2026-72857Budibase credential exposure via STRING fields8.3CNA v4.00.4%2026-08-13Fix
CVE-2026-72856Budibase authentication bypass via Tenant Owner Email8.6CNA v4.00.5%2026-08-13Fix
CVE-2026-72855Budibase DNS Rebinding SSRF via OpenAPI and REST8.4CNA v4.00.4%2026-08-13Fix
CVE-2026-72853Budibase SQL injection via Oracle connector8.8CNA v4.00.3%2026-08-13Fix
CVE-2026-72851Budibase SQL injection via Unauthenticated Webhook9.0CNA v4.00.4%2026-08-13Fix
CVE-2026-72850Budibase arbitrary file write via path traversal9.4CNA v4.00.5%2026-08-13Fix
CVE-2026-72849Budibase Identity Confusion via Chat-Link Handoff CSRF8.7CNA v4.00.2%2026-08-13Fix
CVE-2026-72842OpenWrt luci-app-lxc ACL Inconsistency authentication bypass9.4CNA v4.00.6%2026-08-13Fix
CVE-2026-72841openwrt luci luci-app-openvpn path traversal RCE via instance_name29.4CNA v4.00.6%2026-08-13Fix
CVE-2026-72840OpenWrt LuCI luci-mod-system-mounts ACL Root RCE via Crontab Write8.7CNA v4.00.4%2026-08-13
CVE-2026-72839filebrowser privilege escalation via Signup9.3CNA v4.00.6%2026-08-13
CVE-2026-72777DayuanJiang next-ai-draw-io Next AI Draw.io SSRF via DNS Rebinding in parse-url7.7CNA v4.00.4%2026-08-13
CVE-2026-72776AgenticSeek unauthenticated RCE via /query API endpoint9.3CNA v4.01.1%2026-08-13
CVE-2026-72741Rainbond Region API Cross-Enterprise IDOR via Tenant Access8.6CNA v4.00.3%2026-08-13
CVE-2026-72687Memory allocation with excessive size value in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72686Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.6%2026-08-13Fix
CVE-2026-72685Inefficient algorithmic complexity in Elasticsearch leading to denial of service4.3CNA v3.10.4%2026-08-13Fix
CVE-2026-72684Allocation of resources without limits or throttling in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72683Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.6%2026-08-13Fix
CVE-2026-72681Missing authorization in Kibana leading to privilege escalation and information disclosure6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72680Elastic Kibana Agent Builder conversation API insecure direct object reference6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-72679Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-72678Memory allocation with excessive size value in Elasticsearch leading to denial of service6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-72677Elastic Kibana relative path traversal7.3CNA v3.10.4%2026-08-13Fix
CVE-2026-72676Improper control of generation of code in Fleet Server leading to code injection6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-72675Elastic Kibana missing authorization7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-72674Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72673Incorrect authorization in Kibana leading to Unauthorized Deletion of Synthetics Private Locations5.4CNA v3.10.3%2026-08-13Fix
CVE-2026-72672Incorrect authorization in Kibana leading to Disclosure of Elastic Defend Endpoint Event Data7.7CNA v3.10.4%2026-08-13Fix
CVE-2026-72671Elastic Kibana machine learning trained model space removal missing authorization4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-72670Elastic Kibana Fleet proxy configuration information disclosure7.7CNA v3.10.5%2026-08-13Fix
CVE-2026-72669Missing authorization in Kibana leading to Cross-user information disclosure and data tampering7.6CNA v3.10.3%2026-08-13Fix
CVE-2026-72667Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72666Elastic Kibana insecure direct object reference6.8CNA v3.10.4%2026-08-13Fix
CVE-2026-72665Missing authorization in Kibana leading to Unauthorized Execution of Host Response Actions8.1CNA v3.10.5%2026-08-13Fix
CVE-2026-72664Missing authorization in Kibana leading to Unauthorized Execution of Endpoint Response Actions6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72663Inefficient algorithmic complexity in Kibana leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72661Missing authorization in Kibana leading to information disclosure6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72660Uncaught exception in Kibana leading to denial of service6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-72659Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72658Cross-site request forgery in Kibana leading to privilege escalation7.3CNA v3.10.2%2026-08-13Fix
CVE-2026-72657Authorization bypass through user-controlled key in Fleet Server leading to information disclosure6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72656Memory allocation with excessive size value in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72655Elastic Kibana case management API mass assignment4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-72653Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72651Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72650Authorization bypass through user-controlled key in Kibana leading to information disclosure4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-72648Elastic Eck Operator Environment variable cleartext storage of sensitive information6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72647Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72645Memory allocation with excessive size value in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72643Elastic Kibana Agent Builder incorrect authorization7.1CNA v3.10.4%2026-08-13Fix
CVE-2026-72642Elasticsearch machine learning native inference process vulnerability8.8CNA v3.10.6%2026-08-13Fix
CVE-2026-72640Elastic Cloud on Kubernetes operator secret reconciliation confused deputy6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72639Elasticsearch search highlighting denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72638Uncontrolled recursion in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72636Uncontrolled recursion in Elasticsearch Wildcard Matching leading to denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-72632Observable discrepancy in Kibana Fleet leading to Disclosure of Elastic Agent Elasticsearch API Keys7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-72631Improper privilege management in Kibana Fleet leading to Over-Scoped Elastic Agent API Keys6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-72630Incorrect authorization in Kibana Fleet leading to privilege escalation7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-72629Elastic Kibana insecure direct object reference7.1CNA v3.10.4%2026-08-13Fix
CVE-2026-72506VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability. Users may be directed to a server (or service) controlled by an attacker, potentially resulting in the theft of input da5.1CNA v4.00.3%2026-08-13
CVE-2026-70464rsync Connection Slot Exhaustion DoS via Handshake Stall8.7CNA v4.00.6%2026-08-13Fix
CVE-2026-70463rsync authorization bypass via auth users Directive Parsing8.6CNA v4.00.4%2026-08-13Exploit codeFix
CVE-2026-70462rsync Signed integer overflow via MSG_IO_TIMEOUT7.1CNA v4.00.5%2026-08-13Fix
CVE-2026-70461rsync heap out-of-bounds write via files-from Entry8.8CNA v4.00.6%2026-08-13Fix
CVE-2026-70460rsync path traversal via --partial-dir/--backup-dir Symlink9.2CNA v4.00.4%2026-08-13Fix
CVE-2026-70459rsync daemon crash via Malformed File List Entry6.9CNA v4.00.7%2026-08-13Fix
CVE-2026-70458rsync out-of-bounds write via FLAG_HLINKED Handling8.8CNA v4.00.4%2026-08-13Fix
CVE-2026-70457rsync out-of-bounds write via parse_size_arg8.2v3.10.4%2026-08-13Fix
CVE-2026-70456rsync heap out-of-bounds write via read_args8.8CNA v4.00.4%2026-08-13Fix
CVE-2026-70455rsync DoS via --zt Zstandard Compression Thread Exhaustion8.7CNA v4.00.6%2026-08-13Fix
CVE-2026-70454rsync TLS certificate validation bypass via SSL/OpenSSL Mode7.6CNA v4.00.2%2026-08-13Fix
CVE-2026-70453rsync algorithmic complexity DoS via hash_search8.7CNA v4.00.5%2026-08-13Fix
CVE-2026-70452rsync Access Control Bypass via DNS Resolution failure9.1CNA v4.00.5%2026-08-13Fix
CVE-2026-68454Linux kernel KVM s390 PCI AIF interrupt handling vulnerability8.8CNA v3.10.1%2026-08-13Fix
CVE-2026-68453Linux kernel zcrypt CCA cipher key handling out-of-bounds read7.1CNA v3.10.1%2026-08-13Fix
CVE-2026-68452Linux kernel zcrypt CCA AES cipher key handling vulnerability7.8CNA v3.10.1%2026-08-13Fix
CVE-2026-68451Linux kernel zcrypt CCA ECC key handling vulnerability7.8CNA v3.10.1%2026-08-13Fix
CVE-2026-67991RubyLLM Utils.underscore method regular expression denial of service7.5CISA ADP v3.10.5%2026-08-13
CVE-2026-67990Basecamp Upright Alertmanager and Prometheus proxies cross-site request forgery5.4CISA ADP v3.10.2%2026-08-13
CVE-2026-67986amazing_print AwesomeMethodArray#grep method code injection8.4CISA ADP v3.10.3%2026-08-13
CVE-2026-67614CyberPanel Hard-coded JWT Secret authentication bypass via WebTerminal9.3CNA v4.01.0%2026-08-13Fix
CVE-2026-67613CyberPanel path traversal File Read via cloudAPI ReadReport6.9CNA v4.00.5%2026-08-13Fix
CVE-2026-66704Gutenverse Companion WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-08-13Fix
CVE-2026-66700Smart Online Order for Clover WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66698SureDash WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66697Colissimo Officiel: Méthodes de livraison pour WooCommerce WordPress plugin cross-site scripting7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66693Motors WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-66691Nokri WordPress theme broken access control9.8CNA v3.10.5%2026-08-13Fix
CVE-2026-66689Anti Spam and list cleaner AcyChecker WordPress plugin broken access control6.3CNA v3.10.3%2026-08-13Fix
CVE-2026-66687WpBookingly WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-66661Directories Pro WordPress plugin privilege escalation7.7CNA v3.10.3%2026-08-13
CVE-2026-66660Contact Form 7 PayPal and Stripe Add-on WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-66658Reviewer WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-13
CVE-2026-66657Biagiotti Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-13
CVE-2026-66656Foton Core WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-13
CVE-2026-66655MultiParcels Shipping For WooCommerce WordPress plugin reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66654Vehica Core WordPress plugin server side request forgery (SSRF)6.0CNA v3.10.2%2026-08-13
CVE-2026-66653Barista WordPress theme local file inclusion8.1CNA v3.10.5%2026-08-13
CVE-2026-66478Church Admin WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-66472Everest Backup WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-66471Accordion WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-66469Arvow AI SEO Writer WordPress plugin broken access control7.5CNA v3.10.3%2026-08-13Fix
CVE-2026-66468Local Delivery Drivers for WooCommerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13
CVE-2026-66467FluentCommunity WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-66466StoreGrowth: Smart Sales Booster for WooCommerce WordPress plugin missing authorization7.5CNA v3.10.3%2026-08-13Fix
CVE-2026-66465Cartify WordPress theme account takeover9.8CNA v3.10.6%2026-08-13
CVE-2026-66464Internal Link Optimiser WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Reported exploited
CVE-2026-66463iCARRY WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-13
CVE-2026-66462WooCommerce Appointments WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-13
CVE-2026-66461SMEPay: UPI Gateway for WooCommerce WordPress plugin Payment bypass vulnerability7.5CNA v3.10.3%2026-08-13
CVE-2026-66460AfterShip Tracking WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-66459AI for SEO WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-66458RealPress WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13
CVE-2026-66456Profile Extra Fields by BestWebSoft WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13
CVE-2026-66455ReactPress WordPress plugin broken access control6.0CNA v3.10.2%2026-08-13
CVE-2026-66454WP Social Avatar WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13
CVE-2026-66453Salon booking system WordPress plugin broken authentication9.8CNA v3.10.6%2026-08-13Fix
CVE-2026-66450Geo Mashup WordPress plugin local file inclusion8.1CNA v3.10.5%2026-08-13Fix
CVE-2026-66449Geo Mashup WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66446If-So Dynamic Content Personalization WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-66444Payment Forms for Paystack WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-08-13
CVE-2026-66443REST API Log WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-13Reported exploitedFix
CVE-2026-66441MultiVendorX WordPress plugin broken access control7.5CNA v3.10.4%2026-08-13Reported exploitedFix
CVE-2026-66436Active Products Tables for WooCommerce WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-66432WPJAM Basic WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-08-13Fix
CVE-2026-66431Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) WordPress plugin broken access control7.5CNA v3.10.3%2026-08-13Fix
CVE-2026-66430Visitor Traffic Real Time Statistics Pro WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-13Fix
CVE-2026-66429Visitor Traffic Real Time Statistics Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66426WP-Stats WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-66424SMS Alert Order Notifications WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-13Fix
CVE-2026-66256Apache Shindig Common, Apache Shindig Social-Api: Remote code execution7.2CISA ADP v3.10.9%2026-08-13Fix
CVE-2026-65936WiseConnect Bluetooth connection request handling information disclosure5.3CNA v4.00.3%2026-08-13Fix
CVE-2026-65935silabs.com WiseConnect bypassing passkey entry in legacy pairing7.6CNA v4.00.3%2026-08-13Fix
CVE-2026-65934BT122 plaintext pause encryption request causes DOS7.1CNA v4.00.1%2026-08-13Fix
CVE-2026-65933BT122 malformed packet with increased length field causes memory leak5.3CNA v4.00.3%2026-08-13Fix
CVE-2026-65932BT122 Bluetooth advertising denial of service5.3CNA v4.00.3%2026-08-13Fix
CVE-2026-65582AI Hub WordPress theme arbitrary file download7.7CNA v3.10.4%2026-08-13
CVE-2026-65580Agrion WordPress theme reflected cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13
CVE-2026-63426Lenovo Dock Manager link following6.9CNA v4.00.2%2026-08-13Fix
CVE-2026-63425Lenovo Dock Manager incorrect default permissions8.5CNA v4.00.2%2026-08-13Fix
CVE-2026-63424Lenovo Dock Manager weak password encoding7.0CNA v4.00.1%2026-08-13Fix
CVE-2026-63423Lenovo Accessories and Display Manager hard-coded cryptographic key8.5CNA v4.00.2%2026-08-13Fix
CVE-2026-61984WPMobile.App WordPress plugin broken access control7.5CNA v3.10.4%2026-08-13Fix
CVE-2026-61980OMGF Pro WordPress plugin arbitrary file download7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-61979SAML SP Single Sign On WordPress plugin privilege escalation8.1CNA v3.10.4%2026-08-13Reported exploitedFix
CVE-2026-61978Secure Card Gateway for ePay Paycenter (Piraeus Bank) WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-61974Mang Board WP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-61969Listdom WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-61967miniorange otp verification WordPress plugin privilege escalation9.8CNA v3.10.5%2026-08-13Fix
CVE-2026-61966WPJAM Basic WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-61965GeekyBot WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-61962WP BASE Booking WordPress plugin arbitrary code execution10.0CNA v3.10.7%2026-08-13Fix
CVE-2026-61960WP Full Stripe Free WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-59765Gitea Open Source Git Server SSRF7.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-59763Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads4.3CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-59714open-webui open WebUI: Cross-channel message overwrite via chat completion API7.1CNA v3.10.5%2026-08-13Fix
CVE-2026-59507Soft Solutions Portal Generator addon for Priority ERP hard-coded credentials9.3CNA v3.10.3%2026-08-13
CVE-2026-59506Priority missing authentication for critical function9.3CNA v3.10.4%2026-08-13
CVE-2026-59505Priority improper access control8.6CNA v3.10.4%2026-08-13
CVE-2026-59504Priority client-side enforcement of server-side security9.1CNA v3.10.4%2026-08-13
CVE-2026-59503Soft Solutions Portal Generator addon for Priority ERP information disclosure9.1CNA v3.10.4%2026-08-13
CVE-2026-59502Priority observable discrepancy5.3CNA v3.10.3%2026-08-13
CVE-2026-59501Priority improper access control8.2CNA v3.10.3%2026-08-13
CVE-2026-59500Priority improper authentication10.0CNA v3.10.5%2026-08-13
CVE-2026-59499Priority exposure of sensitive information to an unauthorized actor8.6CNA v3.10.4%2026-08-13
CVE-2026-59109Zalktis: SQL injection via partner-controlled fields in imported e-invoices8.7CNA v4.00.5%2026-08-13Fix
CVE-2026-58511Gitea Open Source Git Server Webhook Authorization Header Returned in Plaintext via API2.7CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-58510Gitea API EditRepo endpoint information disclosure4.3CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-58508Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)9.1CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58507Gitea Open Source Git Server Private Repository Existence Disclosure via go-get Meta endpoint5.3CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-58445Gitea: Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API2.7CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-58444Gitea repository home page incorrect authorization4.3CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-58443Gitea Open Source Git Server public-only repository tokens can update private PR head branches9.1CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-58442Gitea Open Source Git Server repository migration SSRF via multi-answer DNS allow-list bypass6.5CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-58441Gitea Open Source Git Server SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL6.3CISA ADP v3.10.2%2026-08-13Fix
CVE-2026-58440Gitea webhook access revocation improper access control6.8CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58439Gitea: Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag8.1CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58438Gitea Open Source Git Server Cross-repository insecure direct object reference7.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58437Repository Visibility Manipulation via Git Push options7.1CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-58436Gitea Open Source Git Server ParseAcceptLanguage quadratic-time DoS7.5CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-58435Gitea LFS Deploy-Key privilege escalation5.4CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-58434Gitea Open Source Git Server Private Repository Metadata Remains Accessible after Access Revocation7.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58433Gitea team-repository linking endpoint missing authorization9.1CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58432Gitea: Draft release attachment disclosure via missing web authorization5.9CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-58431Gitea Open Source Git Server public-only API token restriction is not enforced on team API routes4.3CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-58429Gitea: Public-Only Personal access tokens scope bypass in Organization and Permission endpoints4.9CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58428Gitea Open Source Git Server release attachment extension allowlist bypass via web release edit form6.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58427Gitea: Private org member list leaked via /members API endpoint incomplete fix for PR #381457.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58425Gitea: OAuth token introspection returns metadata of tokens issued to other clients4.3CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-58420Gitea Open Source Git Server local file inclusion via file:// URI in Migration Restore4.4CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58417Gitea: REST API exposes organization membership of private organizations to public7.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-58416Gitea: Fork-PR Actions task can read a third private repository via the collaborative-owner branch7.1CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-58314Two SSRF findings in Gitea7.7CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-57897Gitea Open Source Git Server Cross-Repo information disclosure via Org-Level Actions Run/Job APIs6.5CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-57894Gitea repository migration server-side request forgery8.5CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-57886Gitea: Cross-repository issue/comment attachment re-linking can expose private attachment content5.9CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-56865golang.org/x/mod/sumdb/tlog transparency log tile improper signature verification8.4CISA ADP v3.10.1%2026-08-13Fix
CVE-2026-56864Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb7.5CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-56862Go standard library crypto/tls package resource exhaustion7.5CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-56860Go standard library net/url package algorithmic complexity5.9CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-56859Go standard library encoding/xml package denial of service7.5CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-56858Go standard library html/template package cross-site scripting6.1CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-56853Apply ReadHeaderTimeout when doing unencrypted HTTP/2 check in net/http7.5CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-56755Gitea Open Source Git Server denial of service6.2CISA ADP v3.10.2%2026-08-13Fix
CVE-2026-56750Gitea Remember-Me Token Theft not Invalidating Attacker Session9.1CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-56657Gitea SSH Key parser denial of service6.2CISA ADP v3.10.2%2026-08-13Fix
CVE-2026-56654Gitea Open Source Git Server privilege escalation via Access Token Scope Escalation in API9.8CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-56443Gitea: Token public-only scope bypassed on Limited-visibility owners residual after / PR #371189.6CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-55987Gitea OAuth2 sign-in incorrect authorization8.1CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-55986Gitea Open Source Git Server Email Management API Bypasses ManageCredentials Feature Restrictions5.4CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-55984Gitea: Null pointer dereference in AddTime API causes Authenticated denial of service2.7CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-55982Gitea: OIDC userinfo Endpoint Returns Identity Claims without Enforcing API Token Scopes9.1CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-55402Absolute Security Secure Access out-of-bounds read8.7CNA v4.00.4%2026-08-13Fix
CVE-2026-55401Absolute Security Secure Access null pointer dereference6.9CNA v4.00.4%2026-08-13Fix
CVE-2026-55400Absolute Security Secure Access integer overflow6.0CNA v4.00.4%2026-08-13Fix
CVE-2026-54481Gitea: Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override7.5CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-53803rsync symlink following arbitrary file overwrite8.5CNA v4.00.2%2026-08-13Fix
CVE-2026-53802rsync arbitrary file read via symlink following8.4CNA v4.00.2%2026-08-13Fix
CVE-2026-53801rsync Symlink race condition directory traversal8.2CNA v4.00.3%2026-08-13Fix
CVE-2026-53800rsync Symlink race condition via --remove-source-files5.7CNA v4.00.1%2026-08-13Fix
CVE-2026-53799rsync Symlink race condition via ACL/xattr application7.2CNA v4.00.1%2026-08-13Fix
CVE-2026-53798rsync Privilege Confusion via name-converter uid/gid mapping6.9CNA v4.00.4%2026-08-13Fix
CVE-2026-53797rsync Symlink race condition information disclosure5.7CNA v4.00.1%2026-08-13Fix
CVE-2026-53796rsync TOCTOU race condition via Destination Directory Handling5.8CNA v4.00.1%2026-08-13Fix
CVE-2026-53795rsync arbitrary file write via --temp-dir/--link-dest7.2CNA v4.00.4%2026-08-13Fix
CVE-2026-53794rsync denial of service via --max-alloc=0 logic error6.9CNA v4.00.5%2026-08-13Fix
CVE-2026-53793rsync Path Confinement Bypass via /./ Boundary Marker in Chroot Mode9.1CNA v4.00.4%2026-08-13Fix
CVE-2026-53792rsync out-of-bounds read via Zero-Length Checksum block7.1CNA v4.00.3%2026-08-13Fix
CVE-2026-53791rsync Daemon IP spoofing via PROXY protocol header9.1CNA v4.00.5%2026-08-13Fix
CVE-2026-53790rsync command injection via multiple Code Paths9.2CNA v4.00.6%2026-08-13Fix
CVE-2026-53789rsync arbitrary file deletion via Malicious File List8.1v3.10.4%2026-08-13Fix
CVE-2026-53788rsync Newline injection via name-converter uid/gid mapping6.9CNA v4.00.3%2026-08-13Fix
CVE-2026-53786rsync Filter Rule Bypass via --filter Merge Directive6.9CNA v4.00.4%2026-08-13Fix
CVE-2026-53785rsync path traversal Write Escape via --relative Mode6.9CNA v4.00.2%2026-08-13Fix
CVE-2026-53784rsync path traversal via Symlink Module Root8.4CNA v4.00.2%2026-08-13Fix
CVE-2026-53783rsync TOCTOU race condition Directory Escape via rrsync8.6CNA v4.00.4%2026-08-13Fix
CVE-2026-50105Gitea: RSS/Atom feed handlers bypass API-token scope and public-only confinement4.3CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-49864wetty vulnerable to DOM XSS via file-download filename8.6CNA v4.00.4%2026-08-13Fix
CVE-2026-49857auth-fetch-mcp has SSRF Protection Bypass via IPv4-mapped IPv6 Loopback7.4CNA v3.10.5%2026-08-13Fix
CVE-2026-49856@jshookmcp/jshook: ICMP probe and traceroute skip local-network SSRF authorization4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-49827WebErpMesv2 has unauthenticated RCE via unrestricted file upload in HR Expense scan_file9.8CNA v3.10.9%2026-08-13
CVE-2026-49820Probo has an open redirect bypass via path normalization4.7CNA v3.10.4%2026-08-13Fix
CVE-2026-49478Sigstore Fulcio OIDC discovery server-side request forgery8.7CNA v3.10.3%2026-08-13Fix
CVE-2026-49096Uncaught exception in Kibana Cases leading to denial of service4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-49089Allocation of resources without limits or throttling in Kibana leading to denial of service6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-48702Rekor has an OOM Condition due to Unbounded gzip Decompression in Alpine APK Parsing Logic7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-48099WsgiDAV encoded dot segments can escape filesystem share roots7.1CNA v3.10.4%2026-08-13Fix
CVE-2026-45819baseline-browser-mapping process termination on invalid input causes denial of service6.6CNA v4.00.5%2026-08-13Fix
CVE-2026-45774compliance-trestle Profile Import has an arbitrary file read6.9CNA v4.00.5%2026-08-13Fix
CVE-2026-45725compliance-trestle Remote Fetching Mechanism has an arbitrary file write via Cache path traversal7.1CNA v4.00.5%2026-08-13Fix
CVE-2026-42931Gitea Open Source Git Server denial of service via Unbounded io.ReadAll in NPM Package Tag endpoint6.5CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-33818Enforce maximum recursion depth in encoding/asn17.5CISA ADP v3.10.6%2026-08-13Fix
CVE-2026-28189Participants Database WordPress plugin arbitrary file deletion7.4CNA v3.10.4%2026-08-13Fix
CVE-2026-28188Hydra Booking WordPress plugin broken access control7.3CNA v3.10.3%2026-08-13Fix
CVE-2026-28187Knowledge Base for Documentation, FAQs with AI Assistance WordPress plugin cross-site scripting7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-28186Travelfic Toolkit WordPress plugin broken access control8.1CNA v3.10.4%2026-08-13Fix
CVE-2026-28185Log in with Google WordPress plugin broken authentication9.8CNA v3.10.3%2026-08-13Reported exploitedFix
CVE-2026-28182AcyMailing SMTP Newsletter WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-28181AcyMailing SMTP Newsletter WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-28176Booking Activities WordPress plugin PHP object injection8.8CNA v3.10.5%2026-08-13Fix
CVE-2026-28175Visitors Traffic Real Time Statistics WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-28174WP Event SOlution WordPress plugin sensitive data exposure6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-28173WP Event SOlution WordPress plugin arbitrary content deletion vulnerability7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-28170Blog Floating Button WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-28168CubeWP WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-13Fix
CVE-2026-28161Service Finder Booking WordPress plugin privilege escalation8.8CNA v3.10.4%2026-08-13
CVE-2026-28159Service Finder Booking WordPress plugin broken access control6.5CNA v3.10.4%2026-08-13
CVE-2026-28158Do Lasso WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13
CVE-2026-28157Do Lasso WordPress plugin path traversal7.5CNA v3.10.4%2026-08-13
CVE-2026-28156Do Lasso WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-13
CVE-2026-28155Do Lasso WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-08-13
CVE-2026-28154WordPress Samex and M.Anh WordPress themes affected by cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13
CVE-2026-28149Headless Single Sign On WordPress plugin PHP object injection9.8CNA v3.10.6%2026-08-13Fix
CVE-2026-28148Headless Single Sign On WordPress plugin bypass vulnerability vulnerability9.8CNA v3.10.3%2026-08-13Fix
CVE-2026-28142Web Directory Free WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-28008OAuth Single Sign On SSO (OAuth Client) WordPress plugin broken authentication9.8CNA v3.10.6%2026-08-13Fix
CVE-2026-28004Business Directory WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-28003Maspik Spam blacklist WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-28002Booktics WordPress plugin SQL injection8.5CNA v3.10.4%2026-08-13Fix
CVE-2026-28001WP Directory Kit WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-13Fix
CVE-2026-27999Tourfic WordPress plugin broken access control6.5CNA v3.10.3%2026-08-13Fix
CVE-2026-27544QA Analytics WordPress plugin remote code execution (RCE)10.0CNA v3.10.9%2026-08-13Fix
CVE-2026-27543MStore API WordPress plugin privilege escalation8.1CNA v3.10.4%2026-08-13Fix
CVE-2026-27539Welcart e-Commerce WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-27538WP Directory Kit WordPress plugin SQL injection7.5CNA v3.10.3%2026-08-13Fix
CVE-2026-27537Popup by Supsystic WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-27536MailChimp Subscribe Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-27535Solace Extra WordPress plugin broken access control7.1CNA v3.10.3%2026-08-13Fix
CVE-2026-27380Car Rental Manager WordPress plugin PHP object injection7.2CNA v3.10.5%2026-08-13Fix
CVE-2026-27345Taxi Booking Manager for WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-08-13Fix
CVE-2026-24791Gitea: Public-only tokens bypass private-resource restrictions on `/API/v1/user` self routes8.1CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-24059Gitea runner registration-token GET endpoint performs a write under a read-only token scope6.5CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-23603Gitea Open Source Git Server blind SSRF in OAuth2 avatar synchronization3.1CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-21832HCL AION HTML injection4.3CNA v3.10.3%2026-08-13
CVE-2026-19761DTStack Taier upload controller path traversal5.1CNA v4.00.5%2026-08-13Fix
CVE-2026-19758dromara lamp-cloud chunk-check endpoint FileChunkController.java path traversal6.9CNA v4.00.6%2026-08-13
CVE-2026-19757Dromara lamp-cloud file-upload Controller FileAnyoneController.java path traversal6.9CNA v4.00.6%2026-08-13
CVE-2026-19756Dromara lamp-cloud Code Generator DefGenProjectController.java path traversal5.3CNA v4.00.4%2026-08-13
CVE-2026-19753Model Context protocol mcp-rdf-explorer MCP Server server.py explore_url server-side request forgery6.9CNA v4.00.5%2026-08-13
CVE-2026-19752EnzoVezzaro mcp-dominican-layer PDF Parsing index.ts parse-pdf server-side request forgery5.3CNA v4.00.4%2026-08-13
CVE-2026-19751EnzoVezzaro mcp-dominican-layer parse-csv tool index.ts axios.get server-side request forgery5.3CNA v4.00.4%2026-08-13
CVE-2026-19750Tenda CH/CP/TX3 SSH hard-coded password9.2CNA v4.00.8%2026-08-13
CVE-2026-19749Tenda CH7 RTSP/ONVIF missing authentication6.3CNA v4.00.6%2026-08-13
CVE-2026-19748Tenda CH7 Kylin Web Service CWebSessionManager_ParseSession entropy6.3CNA v4.00.5%2026-08-13
CVE-2026-19747Tenda CH7 ATE Module Kylin HandleCmd command injection9.3CNA v4.03.1%2026-08-13
CVE-2026-19746Calix GigaSpire traceroute.cmd denial of service5.3CNA v4.00.5%2026-08-13
CVE-2026-19745Calix GigaSpire Web Management utilities_configurationsave.cgi denial of service5.3CNA v4.00.5%2026-08-13
CVE-2026-19744Stored cross-site scripting in Pentestify Markdown renderer via unescaped quotes5.1CNA v4.00.5%2026-08-13Fix
CVE-2026-19734IDOR in Prospero Flow CRM allows cross-tenant product disclosure and hijacking8.6CNA v4.00.6%2026-08-13Fix
CVE-2026-19730Red Hat Enterprise Linux 10 podman quadlet install --replace does not fully replace the old file4.2CNA v3.10.2%2026-08-13Fix
CVE-2026-19716Stored cross-site scripting in Pentestify user account deletion via unescaped username5.1CNA v4.00.5%2026-08-13Fix
CVE-2026-19710SourceCodester Simple Student Information System view_department.php SQL injection6.9CNA v4.00.4%2026-08-13
CVE-2026-19696Out-of-bounds write in Wireshark6.6CNA v3.10.1%2026-08-13Fix
CVE-2026-19695Stack-based buffer overflow in Wireshark4.7CNA v3.10.1%2026-08-13Fix
CVE-2026-19694Heap-based buffer overflow in Wireshark4.7CNA v3.10.1%2026-08-13Fix
CVE-2026-19487Perl regular expression engine incorrect control flow5.3CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-19484@fastify/busboy vulnerable to denial of service via oversized multipart boundary7.5CNA v3.10.6%2026-08-13Fix
CVE-2026-19483IBM Storage Scale Management GUI logs information disclosure7.1CNA v3.10.2%2026-08-13Fix
CVE-2026-19481@fastify/busboy vulnerable to denial of service via prototype-named multipart part header7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-19385PostgreSQL pg_dump heap buffer overflow executes arbitrary code8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-19297IBM Langflow OSS insufficient authentication brute force Protection on Login endpoint9.1CNA v3.10.6%2026-08-13Fix
CVE-2026-19293silabs.com WiseConnect SMP security request8.8CNA v3.10.2%2026-08-13Fix
CVE-2026-19292silabs.com WiseConnect bluetooth re-pairing with legitimate device can use lower security level8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-19291silabs.com WiseConnect bluetooth re-pairing can use a lower security level than previous8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-19182The OpenNMS Group Meridian v2 Alarm REST API in OpenNMS incorrect authorization4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-19135OpenNMS JEXL sandbox bypass in Measurements REST API allows ROLE_USER to load arbitrary classes5.4CNA v3.10.3%2026-08-13Fix
CVE-2026-19088ShopEngine Elementor WooCommerce Builder Addon authentication endpoint cross-site request forgery5.4CISA ADP v3.10.1%2026-08-13Fix
CVE-2026-18945WP Helper Premium WordPress plugin unauthenticated order data disclosure and order manipulation8.2CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-18846IBM i host servers out-of-bounds write7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-18741Worksuite SaaS version stored XSS via Asset Management Location and Description fields4.6CNA v4.00.3%2026-08-13Exploit codeFix
CVE-2026-18728Red Hat Enterprise Linux 10 open-iscsi: Open-iscsi: Integer underflow in iscsiuio ipv4 dhcp parsing6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-18715IBM i is affected by multiple vulnerabilities in WebSphere Application Server Liberty6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-18671IBM i NetServer integer overflow6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-18622Foxit PDF Editor/Reader's signature-validation pop-up reports modified certified documents as valid4.7CNA v3.10.1%2026-08-13Fix
CVE-2026-18511IBM i is affected by multiple vulnerabilities in Java Secure Sockets extension7.3CNA v3.10.3%2026-08-13Fix
CVE-2026-18509IBM i Navigator for i debugger privilege escalation8.2CNA v3.10.2%2026-08-13Fix
CVE-2026-18428SQL Query Validation Bypass in OpenSearch Direct Query8.7CNA v4.01.0%2026-08-13Fix
CVE-2026-18408PostgreSQL psql client arbitrary code execution8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-18368Teltonika Networks RUTOS heap buffer overflow in Modbusgwd6.0CNA v4.00.3%2026-08-13
CVE-2026-18249IBM i is affected by multiple vulnerabilities in IBM Java SDK and IBM Java Runtime8.4CNA v3.10.4%2026-08-13Fix
CVE-2026-18193IBM i is affected by multiple vulnerabilities in IBM Java SDK and IBM Java Runtime8.9CNA v3.10.5%2026-08-13Fix
CVE-2026-18164Flow Neuroscience FL-100 use of hard-coded credentials7.2CNA v4.00.4%2026-08-13Fix
CVE-2026-18146Fluent Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-08-13Fix
CVE-2026-18101IBM i is affected by multiple vulnerabilities in WebSphere Application Server Liberty8.8CNA v3.10.1%2026-08-13Fix
CVE-2026-18086IBM i is affected by multiple vulnerabilities in Java Secure Sockets extension4.5CNA v3.10.1%2026-08-13Fix
CVE-2026-18077IBM i is affected by multiple vulnerabilities in Simple Mail Transfer protocol7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-18071IBM i is affected by an Improper Management vulnerability in HTTP Server []7.8CNA v3.10.1%2026-08-13Fix
CVE-2026-18068IBM i is affected by multiple vulnerabilities in Java Secure Sockets extension4.3CNA v3.10.4%2026-08-13Fix
CVE-2026-18024PostgreSQL ascii function reads past end of buffer4.3CNA v3.10.2%2026-08-13Fix
CVE-2026-18020IBM i NetServer off-by-one error5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17649IBM i NetServer out-of-bounds read5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-17502IBM i NetServer out-of-bounds write8.6CNA v3.10.4%2026-08-13Fix
CVE-2026-17482IBM Documentation Offline remote code execution9.8CNA v3.10.8%2026-08-13Fix
CVE-2026-17481IBM Documentation Offline log injection8.8CNA v3.10.9%2026-08-13Fix
CVE-2026-17476IBM i is affected by multiple vulnerabilities in IBM Java SDK and IBM Java Runtime4.8CNA v3.10.4%2026-08-13Fix
CVE-2026-17473IBM Documentation Offline path traversal7.5CNA v3.10.6%2026-08-13Fix
CVE-2026-17468IBM Documentation Offline hard-coded cryptographic key5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-17438IBM i is affected by an improper privilege management vulnerability in LDAP []4.4CNA v3.10.1%2026-08-13Fix
CVE-2026-17272IBM i is affected by a denial of service in HTTP Server []8.2CNA v3.10.5%2026-08-13Fix
CVE-2026-17229IBM i Host Servers infinite loop7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-17226IBM i NetServer out-of-bounds read5.4CNA v3.10.4%2026-08-13Fix
CVE-2026-17223IBM i Host Servers out-of-bounds write8.8CNA v3.10.8%2026-08-13Fix
CVE-2026-17220IBM i Host Servers buffer overflow8.2CNA v3.10.6%2026-08-13Fix
CVE-2026-17216IBM i DRDA large object headers integer overflow5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17212IBM i NetServer out-of-bounds read5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17206IBM i Host Servers out-of-bounds write8.1CNA v3.10.7%2026-08-13Fix
CVE-2026-17199IBM i host servers resource exhaustion7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-17197IBM i host servers authentication bypass8.1CNA v3.10.5%2026-08-13Fix
CVE-2026-17101IBM i Navigator for i improper authentication8.3CNA v3.10.6%2026-08-13Fix
CVE-2026-17099IBM i Navigator for i improper authentication7.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17088IBM i is affected by multiple vulnerabilities in Digital Certificate Manager4.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17078IBM i is affected by A denial of service vulnerability in DRDA / DDM []5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17077IBM i DRDA and DDM uninitialized variable use5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17076IBM i DRDA and DDM resource exhaustion5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-17075IBM i is affected by multiple vulnerabilities in Digital Certificate Manager6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-17074IBM i DRDA and DDM improper privilege management3.1CNA v3.10.3%2026-08-13Fix
CVE-2026-17071IBM i is affected by multiple vulnerabilities in Digital Certificate Manager2.7CNA v3.10.4%2026-08-13Fix
CVE-2026-17069IBM i is affected by multiple vulnerabilities in Digital Certificate Manager8.1CNA v3.10.2%2026-08-13Fix
CVE-2026-17045IBM i is affected by multiple vulnerabilities in Digital Certificate Manager8.1CNA v3.10.4%2026-08-13Fix
CVE-2026-17043IBM i is affected by multiple vulnerabilities in Digital Certificate Manager3.8CNA v3.10.5%2026-08-13Fix