CVE-2026 list

CVE-2026 records published in August 2026

Page nine of 13: records 8,001 to 9,000 of the 12,071 published in August 2026, newest first. The first page carries the figures for August 2026.

CVE-2026 records published in August 2026, newest first: records 8,001 to 9,000 of 12,071
CVE Summary CVSS EPSS Published Signals
CVE-2026-17029IBM i is affected by multiple vulnerabilities in Java Secure Sockets extension8.8CNA v3.10.2%2026-08-13Fix
CVE-2026-17004IBM i host servers infinite loop7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-16987IBM i is affected by an improper validation vulnerability in PASE []8.8CNA v3.10.2%2026-08-13Fix
CVE-2026-16982IBM i host servers heap-based buffer overflow7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-16975IBM i is affected by A remote code execution vulnerability []8.8CNA v3.10.8%2026-08-13Fix
CVE-2026-16967IBM i symbolic links race condition8.5CNA v3.10.3%2026-08-13Fix
CVE-2026-16961IBM i is affected by SQL injection vulnerability in Db2 Mirror []7.6CNA v3.10.5%2026-08-13Fix
CVE-2026-16929IBM i host servers buffer overflow5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-16908IBM i path traversal8.5CNA v3.10.6%2026-08-13Fix
CVE-2026-16898IBM i is affected by multiple vulnerabilities in Network Authentication service7.8CNA v3.10.2%2026-08-13Fix
CVE-2026-16896IBM i is affected by multiple vulnerabilities in Network Authentication service7.1CNA v3.10.1%2026-08-13Fix
CVE-2026-16887IBM i is affected by A denial of service vulnerability DST/SST []7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-16878IBM i NetServer out-of-bounds read5.4CNA v3.10.4%2026-08-13Fix
CVE-2026-16871IBM i NetServer out-of-bounds write4.3CNA v3.10.4%2026-08-13Fix
CVE-2026-16868IBM i ASN.1 length processing vulnerability8.1CNA v3.10.5%2026-08-13Fix
CVE-2026-16867IBM i NTLM session negotiation improper authentication8.1CNA v3.10.6%2026-08-13Fix
CVE-2026-16861IBM i NetServer out-of-bounds read5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-16859IBM i NetServer out-of-bounds read5.3CNA v3.10.4%2026-08-13Fix
CVE-2026-16853IBM i NetServer out-of-bounds read6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-16815IBM i is affected by multiple vulnerabilities in Simple Mail Transfer protocol8.6CNA v3.10.5%2026-08-13Fix
CVE-2026-16722IBM i is affected by an Unauthorized Privileges vulnerability in SQL []8.8CNA v3.10.5%2026-08-13Fix
CVE-2026-16713IBM Documentation Offline documentation server binding information disclosure4.3CNA v3.10.5%2026-08-13Fix
CVE-2026-16692IBM i is affected by multiple vulnerabilities in Simple Mail Transfer protocol6.5CNA v3.10.5%2026-08-13Fix
CVE-2026-16674IBM i is affected by multiple vulnerabilities in WebSphere Application Server Liberty8.8CNA v3.10.7%2026-08-13Fix
CVE-2026-16459Timing side-channel in RSA PKCS#1 decryption in Oberon PSA Crypto5.9CNA v4.00.1%2026-08-13Fix
CVE-2026-16458Timing side-channel in RSA PKCS#1 decryption in ocrypto5.9CNA v4.00.1%2026-08-13Fix
CVE-2026-16455Teltonika Networks RUTOS local privilege escalation via improper input sanitization in execl call6.9CNA v4.00.3%2026-08-13
CVE-2026-16241PostgreSQL ECPG integer underflow can crash the client3.8CNA v3.10.2%2026-08-13Fix
CVE-2026-16239PostgreSQL type confusion in cursor CLOSE + DECLARE executes arbitrary code8.8CNA v3.10.7%2026-08-13Fix
CVE-2026-16238PostgreSQL type confusion in pg_restore_attribute_stats executes arbitrary code8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-16101silabs.com WiseConnect forced re-pairing with already bonded device8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-15994Lenovo Commercial Vantage link following7.3CNA v4.00.2%2026-08-13Fix
CVE-2026-15742PostgreSQL fuzzystrmatch writes effectively-arbitrary addresses, via integer wraparound8.8CNA v3.10.6%2026-08-13Fix
CVE-2026-15741PostgreSQL expression deparse allows SQL injection via EXTRACT argument8.8CNA v3.10.5%2026-08-13Fix
CVE-2026-15413Link Factory backdoor10.0CNA v3.10.5%2026-08-13
CVE-2026-14875IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities7.3CNA v3.10.2%2026-08-13Fix
CVE-2026-14681PostgreSQL improper enforcement of GSSAPI encryption when coupled with SSL4.2CNA v3.10.1%2026-08-13Fix
CVE-2026-14680PostgreSQL type confusion via internal arguments8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-14679PostgreSQL stack buffer overflow in argument match writes 0x0 and 0x1 to server memory8.2CNA v3.10.3%2026-08-13Fix
CVE-2026-14678PostgreSQL pg_trgm picksplit reads past end of buffer4.3CNA v3.10.2%2026-08-13Fix
CVE-2026-14677PostgreSQL 32-bit pltcl and plperl undersize allocations, via integer wraparound8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-14676PostgreSQL pg_stat_statements heap buffer overflow executes arbitrary code8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-14673PostgreSQL amcheck does not clear untrusted search path3.8CNA v3.10.2%2026-08-13Fix
CVE-2026-14672PostgreSQL response discrepancy5.3CNA v3.10.3%2026-08-13Fix
CVE-2026-14671PostgreSQL refint plan cache type confusion executes arbitrary code8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-14670PostgreSQL plperl tied object heap buffer overflow executes arbitrary code8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-14669PostgreSQL to_char heap buffer overflow executes arbitrary code8.8CNA v3.10.7%2026-08-13Exploit codeFix
CVE-2026-14668PostgreSQL ctid type confusion in selectivity estimator discloses derivative of arbitrary read8.1CNA v3.10.3%2026-08-13Fix
CVE-2026-14666PostgreSQL row security caching disregards role modifications4.2CNA v3.10.2%2026-08-13Fix
CVE-2026-14664PostgreSQL regexp heap buffer overflow executes arbitrary code8.8CNA v3.10.4%2026-08-13Fix
CVE-2026-14663PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext6.5CNA v3.10.1%2026-08-13Fix
CVE-2026-14662PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound8.8CNA v3.10.5%2026-08-13Fix
CVE-2026-14525IBM WebSphere Application Server Liberty is affected by an authenication bypass9.4CNA v3.10.6%2026-08-13Fix
CVE-2026-14456OpenSSL Unbounded Memory Growth in QUIC Server Incoming Channel Queue7.5CISA ADP v3.10.7%2026-08-13Fix
CVE-2026-14332Lightspeed Ecwid Ecommerce Shopping Cart store disconnection action missing authorization5.4CNA v3.10.3%2026-08-13Fix
CVE-2026-14298Mattermost Server Boards archive import denial of service6.5CNA v3.10.4%2026-08-13Fix
CVE-2026-14256Lenovo ThinkPad laptops ELAN TrackPoint driver out-of-bounds write5.7CNA v4.00.1%2026-08-13Fix
CVE-2026-14213Booking for Appointments and Events Calendar appointment records insecure direct object reference3.7CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-14182Customer Email Verification for WooCommerce WordPress plugin unauthenticated account takeover9.8CISA ADP v3.10.5%2026-08-13Fix
CVE-2026-13610KiviCare WordPress plugin unauthenticated privilege escalation via Registration7.5CISA ADP v3.10.4%2026-08-13Fix
CVE-2026-13460IBM Storage Scale management GUI hard-coded credentials7.5CNA v3.10.5%2026-08-13Fix
CVE-2026-13365IBM Planning Analytics cross-site request forgery7.1CNA v3.10.2%2026-08-13Fix
CVE-2026-13328TLP Food Menu WordPress plugin unauthenticated Reservation Status modification5.3CISA ADP v3.10.3%2026-08-13Fix
CVE-2026-13051Form::Processor::Field::HtmlArea error message templates server-side template injection9.1CISA ADP v3.10.6%2026-08-13
CVE-2026-13048Data::MuForm::Localizer message catalog loader eval injection8.2CISA ADP v3.10.6%2026-08-13
CVE-2026-12263Zoho ManageEngine Password Manager Pro authentication bypass8.8CNA v3.11.4%2026-08-13Fix
CVE-2026-12236Zephyr Bluetooth GATT client infinite loop6.5CNA v3.10.2%2026-08-13Fix
CVE-2026-12036Lenovo Vantage link following6.9CNA v4.00.2%2026-08-13Fix
CVE-2026-11970Forcepoint F1E mac improper check for exceptional conditions4.8CNA v4.00.2%2026-08-13Fix
CVE-2026-11840Zoho ManageEngine Password Manager Pro SQL injection8.8CNA v3.13.1%2026-08-13Fix
CVE-2026-10571IBM WebSphere Application Server Liberty is affected by a denial of service5.7CNA v3.10.6%2026-08-13Fix
CVE-2026-8715HashiCorp Vault Secrets Operator AppRole authentication configuration arbitrary file read9.6CNA v3.10.5%2026-08-13Fix
CVE-2026-6471PostgreSQL logical decoding can dlopen arbitrary file7.2CNA v3.10.5%2026-08-13Exploit codeFix
CVE-2026-6470PostgreSQL fails to check type USAGE privilege4.3CNA v3.10.3%2026-08-13Fix
CVE-2026-6469PostgreSQL ALTER TABLE ALTER type resets extended statistics ownership3.8CNA v3.10.3%2026-08-13Fix
CVE-2026-6464PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands8.1CNA v3.10.4%2026-08-13Fix
CVE-2026-6387Lenovo System Update authentication bypass by spoofing7.3CNA v4.00.2%2026-08-13Fix
CVE-2026-3835BuildWPS Prevent Direct Access plugin protected file token lookup improper authorization5.3CNA v3.10.5%2026-08-13Fix
CVE-2026-3639PPWP Password Protect Pages WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-08-13Fix
CVE-2026-0301PAN-OS: Information disclosure vulnerability in URL Filtering1.7CNA v4.00.3%2026-08-13Fix
CVE-2026-0299GlobalProtect App: Local privilege escalation5.9CNA v4.00.2%2026-08-13Fix
CVE-2026-0298GlobalProtect App: Code execution vulnerability in Windows Pre-Logon Access Provider (PLAP)5.2CNA v4.00.3%2026-08-13Fix
CVE-2026-0297GlobalProtect App: Buffer overflow vulnerability during UDP Tunnel Handshake5.2CNA v4.00.3%2026-08-13Fix
CVE-2026-0296GlobalProtect App: Improper certificate validation Bypass4.5CNA v4.00.1%2026-08-13Fix
CVE-2026-0295GlobalProtect App: Local privilege escalation via race condition on macOS4.1CNA v4.00.1%2026-08-13Fix
CVE-2026-0294Prisma Access Agent: Local privilege escalation6.0CNA v4.00.1%2026-08-13Fix
CVE-2026-0293Prisma Access Agent: Anti-Tamper Protection Bypass on Windows5.6CNA v4.00.1%2026-08-13Fix
CVE-2026-0292Prisma Access Agent: Local Security Inspection Bypass vulnerability on Windows2.1CNA v4.00.1%2026-08-13Fix
CVE-2026-0291Prisma Access Agent: Authenticated limited file deletion on Linux1.1CNA v4.00.1%2026-08-13Fix
CVE-2026-0290Prisma Browser: Sensitive information disclosure0.5CNA v4.00.1%2026-08-13Fix
CVE-2026-0289Prisma Browser: Inappropriate implementation in Account Protection0.5CNA v4.00.2%2026-08-13Fix
CVE-2026-73519WolfStack hard-coded secret authentication bypass via X-WolfStack-Secret9.3CNA v4.01.2%2026-08-12Exploit codeFix
CVE-2026-73501kin-openapi ValidationHandler middleware authentication bypass9.1CNA v3.10.6%2026-08-12Fix
CVE-2026-73500etcd TLS listener resource exhaustion8.7CNA v4.00.7%2026-08-12Fix
CVE-2026-73499etcd Watch API incorrect authorization7.1CNA v4.00.7%2026-08-12Fix
CVE-2026-73498sooperset mcp-atlassian MCP Atlassian is a Model Context Protocol: Arbitrary file read7.7CNA v3.10.5%2026-08-12Fix
CVE-2026-73495http4s blaze chunked-body trailer field handling vulnerability7.4CNA v3.10.5%2026-08-12Fix
CVE-2026-73493http4s blaze http4s-blaze-server: Unbounded WebSocket message aggregation7.5CNA v3.10.6%2026-08-12Fix
CVE-2026-73492Loofah URI sanitization cross-site scripting2.3CNA v4.00.4%2026-08-12Fix
CVE-2026-73491Loofah URI sanitization vulnerability2.3CNA v4.00.4%2026-08-12Fix
CVE-2026-73490Loofah: SVG `href` attribute bypasses local-reference restriction4.7CNA v3.10.3%2026-08-12Fix
CVE-2026-73434GStreamer gst-plugins-good avidemux video field descriptor parsing out-of-bounds read6.1CNA v3.10.1%2026-08-12Fix
CVE-2026-73433GStreamer gst-plugins-good avidemux FUJIFILM metadata parsing integer underflow6.6CNA v3.10.1%2026-08-12Fix
CVE-2026-73432Vulnerability-Lookup remote-instance synchronization server-side request forgery5.1CNA v4.00.4%2026-08-12
CVE-2026-73431Vulnerability-Lookup account activation and password recovery authentication bypass by replay8.8CNA v4.00.4%2026-08-12
CVE-2026-73430Russh: Pre-auth remote panic via all-zero Curve25519 peer public value (encode_mpint OOB)5.3CNA v3.10.6%2026-08-12Fix
CVE-2026-73429Russh: Client wrong-length X25519 `clone_from_slice` panic (pre-auth DoS)5.3CNA v3.10.5%2026-08-12Fix
CVE-2026-73427Trix: XSS via JSON deserialization bypass in drag-and-drop (Level0InputController)2.1CNA v4.00.6%2026-08-12Fix
CVE-2026-73425Astro Netlify adapter vulnerability3.7CNA v3.10.3%2026-08-12Fix
CVE-2026-73423Astro Hono adapter pipeline cross-site request forgery5.1CNA v4.00.3%2026-08-12Fix
CVE-2026-73422Astro: Reflected XSS via unescaped View Transition animation properties5.3CNA v4.00.5%2026-08-12Fix
CVE-2026-73419NextAuth.js OAuth callback verification improper authentication6.8CNA v3.10.2%2026-08-12Fix
CVE-2026-73418NextAuth.js getToken JWT helper denial of service7.5CNA v3.10.9%2026-08-12Fix
CVE-2026-73415JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab7.5CNA v4.00.7%2026-08-12Fix
CVE-2026-73414Shescape: Shell injection via unescaped parentheses on Windows with CMD9.2CNA v4.00.9%2026-08-12Fix
CVE-2026-73413Shescape: Quadratic-time denial of service in flag-protection8.7CNA v4.00.6%2026-08-12Fix
CVE-2026-73412Shescape: Path disclosure on Unix with Zsh6.3CNA v4.00.6%2026-08-12Fix
CVE-2026-73411Shescape: Home-directory disclosure in assignment context on Unix with Dash6.3CNA v4.00.6%2026-08-12Fix
CVE-2026-73409Budibase MongoDB datasource integration vulnerability5.1CNA v4.00.3%2026-08-12Fix
CVE-2026-73407Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth leak (bypass of))9.0CNA v4.00.5%2026-08-12Fix
CVE-2026-73406Budibase: Unauthenticated user information disclosure via public tenant user lookup endpoint7.5CNA v3.10.5%2026-08-12Fix
CVE-2026-73405vulnerability-lookup An authorization bypass5.3CNA v4.00.5%2026-08-12
CVE-2026-73374Stored cross-site scripting (XSS) via Unescaped CNA Reference Tags in vulnerability-lookup6.1CNA v4.00.6%2026-08-12
CVE-2026-73332CamaleonCMS cama_contact_form plugin stored XSS via before_html field9.2CNA v4.00.4%2026-08-12
CVE-2026-73331CamaleonCMS authenticated SQL injection via Post Slug field7.1CNA v4.00.4%2026-08-12
CVE-2026-73330CamaleonCMS server-side template injection via test_email action7.5CNA v4.00.8%2026-08-12
CVE-2026-73329CamaleonCMS stored XSS via Draft Post Title Creation endpoint9.2CNA v4.00.4%2026-08-12
CVE-2026-73326CamaleonCMS missing authorization via Plugin Administration endpoints7.2CNA v4.00.4%2026-08-12
CVE-2026-73325Fujitsu OneCompression arbitrary code execution via torch.load deserialization8.4CNA v4.00.4%2026-08-12Fix
CVE-2026-73308Budibase: OAuth2 token disclosure via Automation Test results Broadcast to other Builders5.7CNA v3.10.4%2026-08-12Fix
CVE-2026-73307Budibase: SSRF via bare fetch in uploadUrl during AI table generation4.9CNA v4.00.4%2026-08-12Fix
CVE-2026-73306Budibase: Account Enumeration via Login Lockout Response Differential5.3CNA v3.10.4%2026-08-12Fix
CVE-2026-73303Budibase: Email Change IDOR8.2CNA v3.10.3%2026-08-12Fix
CVE-2026-73301Budibase global groups API missing authorization4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-73300Budibase: SQL injection via `multipleStatements: True`9.6CNA v3.10.6%2026-08-12Fix
CVE-2026-73299Microsoft Prompty Nunjucks template renderer server-side template injection10.0CNA v3.11.8%2026-08-12Fix
CVE-2026-73298Microsoft Container Migration Solution Accelerator insecure direct object reference8.7CNA v4.01.0%2026-08-12
CVE-2026-73297Microsoft UFO: IPv6 transition address bypass of SSRF guard in URL validation6.9CNA v4.02.9%2026-08-12Fix
CVE-2026-73296Microsoft UFO Mobile MCP server missing authentication9.4CNA v3.13.7%2026-08-12Exploit codeFix
CVE-2026-73295squidfunk mkdocs-material material for MkDocs: DOM XSS in search suggestions via query parameter5.4CNA v3.10.3%2026-08-12Fix
CVE-2026-73294Semaphore U: OS command injection9.9CNA v3.10.7%2026-08-12Fix
CVE-2026-73293Semaphore UI: Manager-to-owner privilege escalation via custom-role slug collision8.8CNA v3.10.6%2026-08-12Fix
CVE-2026-73292Semaphore UI: CSRF vulnerability on password change endpoint No CSRF token or password confirmation8.3CNA v3.10.2%2026-08-12Fix
CVE-2026-73291Seerr: Path traversal to RCE via /avatarproxy image cache filename from upstream ETag7.1CNA v3.10.4%2026-08-12Fix
CVE-2026-73290RustFS: Anonymous ListObjectVersions bypasses RestrictPublicBuckets through the ListBucket fallback5.3CNA v3.10.4%2026-08-12Fix
CVE-2026-73289RustFS policy condition evaluation incorrect authorization8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-73288RustFS Object Lock enforcement vulnerability6.1CNA v4.00.4%2026-08-12Fix
CVE-2026-73287RustFS: FTPS MKD bypasses IAM CreateBucket authorization5.4CNA v3.10.4%2026-08-12Fix
CVE-2026-73286RustFS IAM condition evaluation incorrect authorization8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-73285RustFS OPA authorization plugin incorrect authorization7.5CNA v3.10.5%2026-08-12Fix
CVE-2026-73284RustFS: AddServiceAccount handler allows Creation of Root-Parent Service Accounts8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-73269Red Hat multicluster engine for Kubernetes cluster-curator-controller privilege escalation9.9CNA v3.10.6%2026-08-12Fix
CVE-2026-73268Red Hat multicluster engine for Kubernetes cluster-curator-controller code injection9.9CNA v3.10.9%2026-08-12Fix
CVE-2026-73265RustFS: Version-specific object reads authorize the non-version action6.5CNA v3.10.4%2026-08-12Fix
CVE-2026-73264Prowler: Server-side request forgery (SSRF) in Lighthouse Provider7.6CNA v3.10.4%2026-08-12Fix
CVE-2026-73263Prowler: RCE on Prowler App workers via kubeconfig auth-provider cmd-path9.9CNA v3.10.7%2026-08-12Fix
CVE-2026-73262Prowler: Stored XSS in HTML reports through unescaped cloud resource tags5.4CNA v3.10.3%2026-08-12Fix
CVE-2026-73240Apache Allura: Git command injection9.8CISA ADP v3.11.0%2026-08-12Fix
CVE-2026-73239Apache Allura: Missing permission checks IDOR6.5CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-73238Apache Allura: XSS in code display6.1CISA ADP v3.10.8%2026-08-12Fix
CVE-2026-73237Apache Allura: XSS in markdown pipeline6.1CISA ADP v3.10.8%2026-08-12Fix
CVE-2026-73122Red Hat Advanced Cluster Management for Kubernetes information disclosure7.7CNA v3.10.5%2026-08-12Fix
CVE-2026-72809SiYuan authentication bypass via Localhost Trust7.1CNA v4.00.3%2026-08-12Fix
CVE-2026-72808SiYuan information disclosure via getFileAnnotation6.9CNA v4.00.4%2026-08-12Fix
CVE-2026-72807SiYuan SQL injection via queryBlocks template8.8CNA v4.00.3%2026-08-12Fix
CVE-2026-72806SiYuan authentication bypass via attribute view6.9CNA v4.00.4%2026-08-12Fix
CVE-2026-72805SiYuan information disclosure via block endpoints6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72804SiYuan authentication bypass via Graph endpoints9.2CNA v4.00.4%2026-08-12Fix
CVE-2026-72803SiYuan information disclosure via getBlockAttrs6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72802SiYuan information disclosure via resolveAssetPath6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72801SiYuan information disclosure via Encryption Key Material8.7CNA v4.00.4%2026-08-12Fix
CVE-2026-72800SiYuan information disclosure via Unfiltered API6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72799SiYuan information disclosure via Path Resolution6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72798SiYuan information disclosure via renderAttributeView9.2CNA v4.00.4%2026-08-12Fix
CVE-2026-72797SiYuan information disclosure via getEncryptedNotebookStatus6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72796SiYuan Access Control Bypass via Static Routes6.9CNA v4.00.4%2026-08-12Fix
CVE-2026-72795SiYuan information disclosure via Embed block9.2CNA v4.00.4%2026-08-12Fix
CVE-2026-72794siyuan Session Cookie key disclosure via getConf9.2CNA v4.00.4%2026-08-12Fix
CVE-2026-72793SiYuan information disclosure via /API/system/getConf9.2CNA v4.00.4%2026-08-12Fix
CVE-2026-72792SiYuan information disclosure via Tag API6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72791SiYuan information disclosure via getAttributeViewFieldViews6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72790SiYuan information disclosure via getNotebookInfo6.9CNA v4.00.3%2026-08-12Fix
CVE-2026-72789SiYuan authentication bypass via Encrypted Notebooks9.2CNA v4.00.5%2026-08-12Fix
CVE-2026-72788SiYuan information disclosure via UILayout Filter6.9CNA v4.00.4%2026-08-12Fix
CVE-2026-72787Craft CMS stored XSS via Draft Name5.1CNA v4.00.3%2026-08-12Fix
CVE-2026-72786Craft CMS authentication bypass via Password Reset7.1CNA v4.00.5%2026-08-12Fix
CVE-2026-72526Red Hat Advanced Cluster Management for Kubernetes confused deputy9.9CNA v3.10.7%2026-08-12Fix
CVE-2026-72508Red Hat Advanced Cluster Management for Kubernetes privilege escalation9.9CNA v3.10.8%2026-08-12Fix
CVE-2026-71846Red Hat Insights-client service account cluster role vulnerability6.5CNA v3.10.2%2026-08-12Fix
CVE-2026-71473Red Hat Advanced Cluster Management for Kubernetes search-v2 operator mass assignment8.5CNA v3.10.5%2026-08-12Fix
CVE-2026-71471Red Hat Advanced Cluster Management for Kubernetes remote code execution9.0CNA v3.11.2%2026-08-12Fix
CVE-2026-71469Red Hat Advanced Cluster Management for Kubernetes tokenreviews cache denial of service7.5CNA v3.10.7%2026-08-12Fix
CVE-2026-71408Fortinet FortiOS A resource exhaustion5.0CNA v3.10.4%2026-08-12Fix
CVE-2026-71407Fortinet FortiOS stack-based buffer overflow5.1CNA v3.10.5%2026-08-12Fix
CVE-2026-71194OpenStack Designate incorrect resource transfer6.8CNA v3.10.5%2026-08-12Fix
CVE-2026-71193OpenStack Designate incorrect authorization9.6CNA v3.10.5%2026-08-12Fix
CVE-2026-70560Ultimate POS stored XSS via First Name field in Leave Notifications4.8CNA v4.00.2%2026-08-12
CVE-2026-70547Potential unauthorized metadata exposure in JFrog Artifactory4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-70468Fortinet FortiManager authentication bypass7.3CNA v3.10.5%2026-08-12Fix
CVE-2026-70467Fortinet FortiSIEM server-side request forgery3.4CNA v3.10.3%2026-08-12Fix
CVE-2026-70466Fortinet FortiWeb incomplete denylist4.8CNA v3.10.3%2026-08-12Fix
CVE-2026-70465Fortinet FortiClientWindows buffer overflow7.3CNA v3.10.5%2026-08-12Fix
CVE-2026-70398Red Hat Advanced Cluster Management GitOpsCluster information disclosure9.6CNA v3.10.5%2026-08-12Fix
CVE-2026-69107Potential unauthorized artifact access in JFrog Artifactory5.9CNA v3.10.4%2026-08-12Fix
CVE-2026-69106Potential cache poisoning in JFrog Artifactory8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-69105Potential package cache integrity issue in JFrog Artifactory8.1CNA v3.10.2%2026-08-12Fix
CVE-2026-68971Apache Airflow missing team context permits cross-team Dag actions and XCom reads6.5CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-68970Apache Airflow Task SDK fails to mask list-shaped JSON variables6.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-68969Apache Airflow bulk endpoints log variable and Connection secrets in cleartext6.5CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-68968Apache Airflow: Authorization bypass in the Backfill API7.5CISA ADP v3.10.7%2026-08-12Fix
CVE-2026-68868Apache Airflow Google provider Secret Manager backend information disclosure6.5CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-68760Potential remember-me authentication bypass in JFrog Artifactory5.3CNA v3.10.5%2026-08-12Fix
CVE-2026-68759Integration credential holders may impersonate users in JFrog Access7.2CNA v3.10.3%2026-08-12Fix
CVE-2026-68758Authenticated users may access restricted Artifactory support information6.5CNA v3.10.4%2026-08-12Fix
CVE-2026-68757Potential improper SAML signature verification in JFrog Artifactory7.5CNA v3.10.3%2026-08-12Fix
CVE-2026-68756Potential insecure deserialization in JFrog Artifactory6.6CNA v3.10.5%2026-08-12Fix
CVE-2026-68755Bundle writers may alter trusted release information in JFrog Artifactory4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-68754jfrog artifactory publishers without delete permission can overwrite docker layer information6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-68753Anonymous users may access restricted Artifactory content under specific configurations5.3CNA v3.10.3%2026-08-12Fix
CVE-2026-68752Project Resource Managers may escalate privileges in JFrog Artifactory7.2CNA v3.10.5%2026-08-12Fix
CVE-2026-68450Linux kernel btrfs reloc root tree vulnerability–0.2%2026-08-12Fix
CVE-2026-68449Linux kernel sata_dwc_460ex NCQ tag completion denial of service–0.2%2026-08-12Fix
CVE-2026-68448Linux kernel overlayfs copy_file_range vulnerability–0.2%2026-08-12Fix
CVE-2026-68447Linux kernel amdkfd CRIU checkpoint copy information disclosure7.1CNA v3.10.1%2026-08-12Fix
CVE-2026-68446Linux kernel vmwgfx surface metadata validation vulnerability7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-68445Linux kernel vc4 GPU shader BO mapping vulnerability7.8CNA v3.10.2%2026-08-12Fix
CVE-2026-68444Linux kernel arm_ffa partition info null pointer dereference–0.2%2026-08-12Fix
CVE-2026-68443Linux kernel Gigabyte Waterforce HID driver use-after-free–0.2%2026-08-12Fix
CVE-2026-68442Linux kernel btrfs extent map splitting vulnerability7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-68441Linux kernel tc qdisc filter chain redirect handling vulnerability–0.2%2026-08-12Fix
CVE-2026-68440Linux kernel txgbe heap-based buffer overflow7.8CNA v3.10.2%2026-08-12Fix
CVE-2026-68439Linux kernel mt7925 Wi-Fi driver null pointer dereference–0.2%2026-08-12Fix
CVE-2026-68438Linux kernel CSD lock acquisition vulnerability–0.2%2026-08-12Fix
CVE-2026-68437Linux kernel Imagination GPU job scheduling vulnerability–0.2%2026-08-12Fix
CVE-2026-68436Linux kernel AMD display core allocation vulnerability–0.2%2026-08-12Fix
CVE-2026-68435Linux kernel LoongArch kexec command line lookup vulnerability–0.2%2026-08-12Fix
CVE-2026-68434Linux kernel 8250_mid serial driver null pointer dereference–0.2%2026-08-12Fix
CVE-2026-68433Linux kernel libceph monitor version decoding vulnerability8.6CNA v3.10.3%2026-08-12Fix
CVE-2026-68432Linux kernel VXLAN changelink handling vulnerability8.8CNA v3.10.1%2026-08-12Fix
CVE-2026-68431Linux kernel ksmbd SMB2 transform requests vulnerability9.1CNA v3.10.5%2026-08-12Fix
CVE-2026-68430Linux kernel AMDGPU GFX8 driver denial of service–0.2%2026-08-12Fix
CVE-2026-68429Linux kernel DRM DP MST topology handling denial of service–0.2%2026-08-12Fix
CVE-2026-68076Apache Airflow environment-variable secrets backend permits cross-team credential use5.4CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-67587Apache Airflow: DAG-author remote code execution on the Scheduler8.8CISA ADP v3.11.2%2026-08-12Fix
CVE-2026-67579Filter expression injection via forged keyset pagination cursor in Ash7.5CNA v4.00.6%2026-08-12Fix
CVE-2026-67287Joomla extension joomshaper.com Unauthenticated comment creation in SP Page Builder6.3CNA v4.00.4%2026-08-12
CVE-2026-67286JoomShaper SP Page Builder path traversal6.3CNA v4.00.5%2026-08-12
CVE-2026-67285joomshaper.com SP Page Builder extension for Joomla path traversal9.2CNA v4.00.5%2026-08-12
CVE-2026-67284Joomla extension tabaoca.org Improper ACL checks allow file operations in Cotton Cloud5.3CNA v4.00.4%2026-08-12
CVE-2026-67283tabaoca.org Cotton Cloud improper access control6.9CNA v4.00.4%2026-08-12
CVE-2026-67282Joomla extension fabrikar.com unauthenticated remote code execution in Fabrik10.0CNA v4.00.8%2026-08-12
CVE-2026-67260Apache Airflow: DAG-author remote code execution on the Scheduler7.3CISA ADP v3.11.4%2026-08-12Fix
CVE-2026-66898Canonical LXD path traversal9.9CNA v3.10.6%2026-08-12Fix
CVE-2026-66878Red Hat Advanced Cluster Management for Kubernetes insecure direct object reference7.7CNA v3.10.5%2026-08-12Fix
CVE-2026-66659Tablesome Table WordPress plugin SQL injection9.3CNA v3.10.4%2026-08-12
CVE-2026-66384JFrog Artifactory improper limitation of a pathname to a restricted directory5.3CNA v3.10.7%2026-08-12KEVFix
CVE-2026-66382Authenticated users may write files outside the intended Artifactory work directory4.3CNA v3.10.4%2026-08-12Fix
CVE-2026-66381jfrog artifactory repository readers may access content outside configured upstream paths5.3CNA v3.10.4%2026-08-12Fix
CVE-2026-66380jfrog artifactory authenticated users may access private OCI referrer metadata4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-66379jfrog artifactory authenticated users may view private Puppet module metadata4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-66378jfrog artifactory authenticated users may access private NuGet metadata4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-66377Anonymous users may access restricted Artifactory repository information5.3CNA v3.10.4%2026-08-12Fix
CVE-2026-66376Deleted users may temporarily retain access to JFrog Artifactory4.2CNA v3.10.2%2026-08-12Fix
CVE-2026-66375Low-privilege users may remove protected Artifactory metadata8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-66016Rendered Artifactory Helm manifests may contain generated TLS private keys6.7CNA v3.10.1%2026-08-12Fix
CVE-2026-65941Progress Software WhatsUp Gold report scheduling service remote code execution8.8CNA v3.10.7%2026-08-12Fix
CVE-2026-65940Progress WhatsUp Gold incorrect permission assignment6.8CNA v3.10.4%2026-08-12Fix
CVE-2026-65939WhatsUp Gold versions contain an arbitrary file write vulnerability in the LogToFile action handler6.8CNA v3.10.4%2026-08-12Fix
CVE-2026-65938WhatsUp Gold versions contain an improper authorization vulnerability in the Scheduled Reports API4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-65937WhatsUp Gold versions contain multiple stored cross-site scripting vulnerabilities across the web UI8.0CNA v3.10.4%2026-08-12Fix
CVE-2026-65926jfrog artifactory private Release Bundle versions may be disclosed under specific configurations3.1CNA v3.10.2%2026-08-12Fix
CVE-2026-65370Apple servicetalk HTTP request smuggling7.5CISA ADP v3.10.3%2026-08-12
CVE-2026-65017Apache Airflow: Config API: Team-scoped Celery broker secret disclosed to a Viewer6.5CISA ADP v3.10.7%2026-08-12Fix
CVE-2026-64955Velociraptor CSV formula injection in Export Pipeline6.1CNA v3.10.4%2026-08-12Fix
CVE-2026-64954Velociraptor collect_client permissions bypass8.2CNA v3.10.3%2026-08-12Fix
CVE-2026-64952Velociraptor Hunt Deletion with insufficient permission Check6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-64951Velociraptor DoS triggered by divide by zero panic3.5CNA v3.10.3%2026-08-12Fix
CVE-2026-64927Red Hat Advanced Cluster Management for Kubernetes insecure direct object reference6.4CNA v3.10.3%2026-08-12Fix
CVE-2026-64826rConfig path traversal File Read via FileDownloadController7.1CNA v4.00.5%2026-08-12Fix
CVE-2026-64639WebPros Plesk incorrect privilege assignment9.3CNA v4.00.6%2026-08-12Fix
CVE-2026-63300Canonical LXD instancePostMigration function improper input validation9.9CNA v3.10.5%2026-08-12Fix
CVE-2026-63299Canonical LXD storage volume cross-project move and snapshot restore bypass project disk limits8.5CNA v3.10.6%2026-08-12Fix
CVE-2026-63298LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration8.7CNA v3.10.7%2026-08-12Fix
CVE-2026-63297Canonical LXD authorization bypass9.9CNA v3.10.3%2026-08-12Fix
CVE-2026-63296Canonical LXD project restriction bypass via instance migration config override9.9CNA v3.10.4%2026-08-12Fix
CVE-2026-63295Canonical LXD authorization bypass4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-63294Canonical LXD root RCE via image backup.yaml symlink9.9CNA v3.10.9%2026-08-12Fix
CVE-2026-63293Canonical LXD link following9.9CNA v3.10.6%2026-08-12Fix
CVE-2026-62420Canonical LXD authorization bypass9.9CNA v3.10.5%2026-08-12Fix
CVE-2026-59917Dell Display and Peripheral Manager (DDPM Windows) improper access control7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-59916Dell Display and Peripheral Manager (DDPM Windows) authentication bypass by spoofing7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-59914Dell Display and Peripheral Manager (DDPM Windows) authentication bypass by spoofing7.8CNA v3.10.2%2026-08-12Fix
CVE-2026-59244Apache Airflow: Secrets masker: `var.json` variable values not masked in the Rendered Templates UI6.5v3.10.2%2026-08-12Fix
CVE-2026-59242Apache Airflow XCom API permits unsafe deserialization through JSON string literals5.4CISA ADP v3.10.8%2026-08-12Fix
CVE-2026-58076Apache Airflow exception-node deserialization permits arbitrary callable execution8.8v3.10.5%2026-08-12Fix
CVE-2026-57858Cal.com Cal.diy stored XSS via BookingPageTagManager Analytics Tracking ID9.3CNA v4.00.4%2026-08-12Exploit code
CVE-2026-54183Apache Airflow: Airflow variables were not masked in the UI for authenticated users4.3CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-53996NetBSD hdaudio(4) Driver Privilege Bypass use-after-free via HDAUDIO_FGRP_SETCONFIG ioctl7.3CNA v4.00.1%2026-08-12Fix
CVE-2026-50561Yuxi has a JWT authentication bypass leading to Cross-Instance Administrator Token Reuse9.4CNA v3.10.7%2026-08-12Fix
CVE-2026-50544NortheBridge LuminalShine config file permissions incorrect permission assignment6.3CNA v3.10.1%2026-08-12Fix
CVE-2026-49819UpSnap Unauthenticated Initial-Superuser takeover Chains to Root RCE via wake_cmd9.8CNA v3.11.1%2026-08-12Fix
CVE-2026-49481UpSnap vulnerable to remote code execution via IP field template injection in wake_cmd/shutdown_cmd9.6CNA v3.11.5%2026-08-12Fix
CVE-2026-49473@cedar-policy/authorization-for-expressjs has an authorization bypass via query string manipulation8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-49467smp46 pingvin-share-x TOTP enrollment hijack: Password gate skipped due to unawaited promise8.8CNA v3.10.6%2026-08-12Fix
CVE-2026-49466Draft List Contributor stored cross-site scripting6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-49349regclient may leak authentication credentials to external blob stores6.8CNA v3.10.3%2026-08-12Fix
CVE-2026-49262Aimeos Pagible CMS vulnerable to server side request forgery (SSRF) via DNS rebinding in admin proxy3.0CNA v3.10.2%2026-08-12Fix
CVE-2026-48791Sigstore Java has a vulnerability with bundle verification of integratedTime2.0CNA v3.10.1%2026-08-12Fix
CVE-2026-48554Nagios Core / XI authenticated RCE via Unfiltered NOTIFICATION-Family Macro Substitution7.7CNA v4.01.0%2026-08-12Fix
CVE-2026-48553Nagios Core / XI authenticated RCE via Custom-Variable Macro injection7.7CNA v4.01.0%2026-08-12Fix
CVE-2026-48552Nagios Core / XI DOM-based XSS via jsonquery.js5.1CNA v4.00.3%2026-08-12Fix
CVE-2026-48551Nagios Core / XI CSRF Protection Bypass via Double-Submit Cookie6.1CNA v4.00.3%2026-08-12Fix
CVE-2026-48550Nagios Core / XI cmd.cgi reflected XSS via NagFormId parameter5.1CNA v4.00.4%2026-08-12Fix
CVE-2026-47718FUXA provides guest and invalid-token access to protected read APIs in secure mode5.5CNA v4.00.5%2026-08-12Fix
CVE-2026-47717FUXA's Unauthenticated Project data disclosure exposes Server-Side scripts and Device Configurations7.5CNA v3.11.4%2026-08-12NucleiFix
CVE-2026-47234Admidio writes session IDs and auto-login cookie values to application logs4.4CNA v3.10.2%2026-08-12Fix
CVE-2026-47233Admidio inventory field deletion missing authorization6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-47232Admidio PKCS#12 private key export action lacks CSRF protection4.3CNA v3.10.1%2026-08-12Fix
CVE-2026-47231Admidio file move insecure direct object reference8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-47230Admidio file rename insecure direct object reference6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-47229Admidio: CSRF in SSO client `enable` action toggles SAML/OIDC clients without token validation5.4CNA v3.10.1%2026-08-12Fix
CVE-2026-47228Admidio's CSRF in registration `send_login` mode resets arbitrary user passwords5.2CNA v3.10.2%2026-08-12Fix
CVE-2026-47227Admidio category management incorrect authorization6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-47226admidio modules/documents-files.php authorization bypass6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-46731Dell Display and Peripheral Manager (DDPM Windows) authentication bypass by spoofing7.8CNA v3.10.2%2026-08-12Fix
CVE-2026-46688Meeting Room Booking System open redirect6.9CNA v4.00.4%2026-08-12Fix
CVE-2026-46382Meeting Room Booking System import functionality server-side request forgery8.7CNA v4.00.4%2026-08-12Fix
CVE-2026-44741Pimcore Admin Classic Bundle vulnerable to SQL injection in Translation Grid Date Filter8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-42018JFrog Artifactory improper authentication7.5CNA v3.19.8%2026-08-12KEVNucleiKCVFix
CVE-2026-26035Fortinet FortiWeb improper authentication8.8CNA v3.10.8%2026-08-12Fix
CVE-2026-19657Scada-LTS ScadaLTS unauthenticated reflected XSS6.1CNA v3.10.3%2026-08-12
CVE-2026-19656Scada-LTS ScadaLTS authenticated remote code execution9.9CNA v3.10.5%2026-08-12
CVE-2026-19654rsyslog imptcp input module out-of-bounds read7.5CNA v3.10.6%2026-08-12Fix
CVE-2026-19643Out-of-bounds read in the Base64 decoder in Amazon aws-sdk-cpp on signed-char platforms6.0CNA v4.00.6%2026-08-12Fix
CVE-2026-19642Out-of-bounds write in the Base64 decoder in Amazon aws-sdk-cpp6.0CNA v4.00.5%2026-08-12Fix
CVE-2026-19594Snowflake Python APIs REST identifier path handling path traversal8.1CNA v3.10.5%2026-08-12Fix
CVE-2026-19588Samsung Open Source rlottie integer overflow to buffer overflow6.5CNA v3.10.4%2026-08-12
CVE-2026-19587Samsung Open Source rlottie resource exhaustion6.5CNA v3.10.4%2026-08-12Fix
CVE-2026-19566Net::CIDR::Set versions for Perl allow memory exhaustion and malformed set ranges7.5CISA ADP v3.10.6%2026-08-12Fix
CVE-2026-19548Red Hat Hardened Images binutils: Binutils: Multiple use-after-free in add_archive_element5.5CNA v3.10.2%2026-08-12Fix
CVE-2026-19503MongoDB Atlas SQL ODBC Driver and Schema Builder CLI improper input validation6.3CNA v4.00.2%2026-08-12Fix
CVE-2026-19502MongoDB Schema Builder CLI diagnostic logging information disclosure6.8CNA v4.00.1%2026-08-12Fix
CVE-2026-19426FitSoft｜POS Sytstem missing authentication8.8CNA v4.00.5%2026-08-12Fix
CVE-2026-19311Missing authorization in Execute Monitor API in OpenSearch Alerting plugin8.6CNA v4.00.6%2026-08-12Fix
CVE-2026-19228Authorization bypass through user-controlled key in GitLab8.5CNA v3.10.4%2026-08-12Fix
CVE-2026-19217Royal Elementor Addons WordPress plugin Contributor+ stored XSS via Icon Box widget5.4CISA ADP v3.10.2%2026-08-12Fix
CVE-2026-19130Red Hat multicluster engine for Kubernetes provider-credential-controller information disclosure5.8CNA v3.10.4%2026-08-12Fix
CVE-2026-19073Order Sync with Zendesk for WooCommerce REST API order endpoint information disclosure5.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-19052ProSolution WP Client WordPress plugin proSol_ajaxTablesync and proSol_ajaxClearlog Calls4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-19050ProSolution WP Client WordPress plugin Subscriber+ SSRF via proSol_url_validate6.4CISA ADP v3.10.2%2026-08-12Fix
CVE-2026-19004MongoDB BI Connector ODBC Driver stored procedure output handling heap-based buffer overflow8.8CNA v4.00.5%2026-08-12Fix
CVE-2026-19003MongoDB BI Connector ODBC Driver setup dialog file selector stack-based buffer overflow8.4CNA v4.00.2%2026-08-12Fix
CVE-2026-19002Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver8.8CNA v4.00.4%2026-08-12Fix
CVE-2026-19001MongoDB BI Connector ODBC Driver metadata retrieval function out-of-bounds write9.5CNA v4.00.5%2026-08-12Fix
CVE-2026-18962WP Photo Album Plus WordPress plugin Subscriber+ Cross-Album file upload via missing authorization4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-18961Social Login WordPress plugin authentication bypass8.1CNA v3.10.7%2026-08-12Fix
CVE-2026-18952Missing Input Validation in Threat Intel Feed parser in OpenSearch Security Analytics plugin8.6CNA v4.00.5%2026-08-12Fix
CVE-2026-18943WPC Admin Columns WordPress plugin Subscriber+ arbitrary User/Post/Term Meta disclosure6.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18888MongoDB BI Connector ODBC Driver out-of-bounds write7.1CNA v4.00.3%2026-08-12Fix
CVE-2026-18847IBM i Navigator for i spoofing8.8CNA v3.10.2%2026-08-12Fix
CVE-2026-18789Ezoic WordPress plugin unauthenticated Database export via content export REST Routes7.5CISA ADP v3.10.4%2026-08-12Reported exploitedFix
CVE-2026-18750VINCE email notification settings insecure direct object reference5.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-18749VINCE case artifact attachments insecure direct object reference9.8CISA ADP v3.10.5%2026-08-12Fix
CVE-2026-18744VINCE case member status lookup insecure direct object reference6.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18727Red Hat Enterprise Linux 10 open-iscsi: Open-iscsi: Integer underflow in iscsiuio dhcpv6 parsing6.5CNA v3.10.2%2026-08-12Fix
CVE-2026-18726open-iscsi iscsiuio router advertisement parsing infinite loop6.5CNA v3.10.2%2026-08-12Fix
CVE-2026-18713IBM i Navigator for i privilege escalation8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-18683IBM i is Affected By privilege escalation in Navigator for i8.8CNA v3.10.7%2026-08-12Fix
CVE-2026-18679Kong Mesh kuma-dp improper certificate validation5.8CNA v4.00.2%2026-08-12Fix
CVE-2026-18678Kong Mesh kumactl improper certificate validation5.5CNA v4.00.1%2026-08-12Fix
CVE-2026-18677Kong Mesh: A dataplane token without a workload binding can claim any workload's SPIFFE identity6.0CNA v4.00.4%2026-08-12Fix
CVE-2026-18676Kong Mesh: Default control plane config leaks the admin token cross-origin5.1CNA v4.00.3%2026-08-12Fix
CVE-2026-18675Kong Mesh: Control plane denial of service via a malformed dataplane token with a non-string JWT kid5.3CNA v4.00.6%2026-08-12Fix
CVE-2026-18673Kong Mesh: The kuma-dp readiness service exposes the Envoy admin API without authentication5.3CNA v4.00.5%2026-08-12Fix
CVE-2026-18669IBM i is affected by A privilege escalation vulnerability []8.8CNA v3.10.7%2026-08-12Fix
CVE-2026-18663Red Hat 389-ds-base get_ldapmessage_controls_ext function double free5.9CNA v3.10.5%2026-08-12Fix
CVE-2026-18652Velociraptor stack Type Download Path Bypasses Denied Prefix Check6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-18499IBM WebSphere Application Server Liberty is affected by a privilege escalation8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-18474WP Directory Kit WordPress plugin unauthenticated SQL injection8.6CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18433Incorrect authorization in GitLab4.3CNA v3.10.4%2026-08-12Fix
CVE-2026-18391WooCommerce Subscriptions WordPress plugin unauthenticated RCE via PHP object injection9.8CISA ADP v3.11.0%2026-08-12Reported exploitedFix
CVE-2026-18366Events Manager WordPress plugin unauthenticated privilege escalation to Administrator9.8CISA ADP v3.10.5%2026-08-12Reported exploitedExploit codeFix
CVE-2026-18250IBM i Navigator for i race condition6.3CNA v3.10.3%2026-08-12Fix
CVE-2026-18246IBM i is Affected By security restrictions bypass in Navigator for i3.0CNA v3.10.3%2026-08-12Fix
CVE-2026-18244Missing authorization in GitLab4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-18235IBM i Navigator for i command injection8.3CNA v3.10.5%2026-08-12Fix
CVE-2026-18230WP Directory Kit WordPress plugin Subscriber+ SQL injection via section parameter8.1CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18171Docker Sandboxes read-only runtime mount writable through its shared-export alias5.7CNA v4.00.1%2026-08-12
CVE-2026-18150IBM i Navigator for i race condition4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-18148IBM i Navigator for i log files log injection4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-18144IBM i Navigator for i improper authorization4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-18106IBM i Navigator for i path traversal4.3CNA v3.10.5%2026-08-12Fix
CVE-2026-18099IBM i Navigator for i cross-site scripting8.9CNA v3.10.3%2026-08-12Fix
CVE-2026-18098IBM i is Affected By XML injection flaw in Navigator for i8.1CNA v3.10.3%2026-08-12Fix
CVE-2026-18097IBM Db2 trace files information disclosure5.5CNA v3.10.1%2026-08-12Fix
CVE-2026-18096IBM® Db2® could allow a local attacker to cause a denial of service due to a memory leak3.3CNA v3.10.1%2026-08-12Fix
CVE-2026-18057Events Manager WordPress plugin Subscriber+ Booking Consent Record tampering via SQL injection8.1CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18049WP Photo Album Plus WordPress plugin unauthenticated option disclosure via gettogo7.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18048WP Photo Album Plus WordPress plugin unauthenticated arbitrary ZIP file deletion7.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-18046Cookie Consent WordPress plugin Subscriber+ MaxMind License Key update4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-18044Estatik Real Estate Plugin property request form insufficient verification of data authenticity3.7CNA v3.10.1%2026-08-12Fix
CVE-2026-18035User Access Manager WordPress plugin unauthenticated Restricted content disclosure via REST API5.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-17642IBM i is affected by remote code execution vulnerabilities [, ]8.8CNA v3.10.8%2026-08-12Fix
CVE-2026-17616IBM Verify Identity Access reverse proxy vulnerability6.8CNA v3.10.4%2026-08-12Fix
CVE-2026-17485IBM i is affected by denial of service vulnerability []8.2CNA v3.10.5%2026-08-12Fix
CVE-2026-17445IBM i is affected by improper validation vulnerability in Line Printer daemon []8.2CNA v3.10.4%2026-08-12Fix
CVE-2026-17431PDF::WebKit versions for Perl allow OS command injection6.1CISA ADP v3.10.9%2026-08-12
CVE-2026-17420IBM i SQL parameters OS command injection6.3CNA v3.10.4%2026-08-12Fix
CVE-2026-17419IBM i SQL tables SQL injection6.5CNA v3.10.4%2026-08-12Fix
CVE-2026-17418IBM i SQL denial of service8.5CNA v3.10.3%2026-08-12Fix
CVE-2026-17417IBM i is affected by remote code execution vulnerabilities [, ]8.8CNA v3.10.8%2026-08-12Fix
CVE-2026-17276IBM i Navigator for i privilege escalation9.6CNA v3.10.5%2026-08-12Fix
CVE-2026-17271IBM i Debug Server resource exhaustion7.5CNA v3.10.5%2026-08-12Fix
CVE-2026-17268IBM i Navigator for i vulnerability6.8CNA v3.10.3%2026-08-12Fix
CVE-2026-17266IBM i Navigator for i path traversal6.5CNA v3.10.7%2026-08-12Fix
CVE-2026-17248IBM i Debug Server OS command injection7.1CNA v3.10.5%2026-08-12Fix
CVE-2026-17222IBM i SQL tables SQL injection4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-17218IBM i is affected by remote code execution vulnerability in Line Printer daemon []9.8CNA v3.10.8%2026-08-12Fix
CVE-2026-17111IBM i SQL SQL injection7.6CNA v3.10.5%2026-08-12Fix
CVE-2026-17110IBM i SQL privilege escalation8.8CNA v3.10.7%2026-08-12Fix
CVE-2026-17109IBM i SQL vulnerability4.3CNA v3.10.4%2026-08-12Fix
CVE-2026-17095IBM i Navigator for i mass assignment8.3CNA v3.10.5%2026-08-12Fix
CVE-2026-17094IBM i is affected by path traversal vulnerability in Navigator for i4.3CNA v3.10.5%2026-08-12Fix
CVE-2026-17083IBM i Debug Server out-of-bounds write9.8CNA v3.10.8%2026-08-12Fix
CVE-2026-17082IBM i Debug Server privilege escalation8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-17013WP Photo Album Plus WordPress plugin reflected XSS via lbstart6.1CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-17008Quick PayPal Payments WordPress plugin unauthenticated Payment bypass via PayPal IPN5.3CNA v3.10.2%2026-08-12Fix
CVE-2026-16999XXE in Ministry of Justice's UYAP Document Editor6.3CNA v3.10.2%2026-08-12Fix
CVE-2026-16990Payment Button for PayPal WordPress plugin unauthenticated Payment Price manipulation5.3CNA v3.10.3%2026-08-12Fix
CVE-2026-16977Form Maker by 10Web WordPress plugin Subscriber+ SQL injection via display_name8.1CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-16956IBM Db2 Mirror for i is vulnerable to OS command injection []9.8CNA v3.10.9%2026-08-12Fix
CVE-2026-16931IBM i is affected by A denial of service vulnerability []7.5CNA v3.10.5%2026-08-12Fix
CVE-2026-16907IBM i debug server out-of-bounds write7.6CNA v3.10.6%2026-08-12Fix
CVE-2026-16906IBM i is affected by multiple vulnerabilities in Domain Name System8.8CNA v3.10.8%2026-08-12Fix
CVE-2026-16904IBM i is Affected By improper privilege management in Navigator for i8.1CNA v3.10.5%2026-08-12Fix
CVE-2026-16863IBM i is affected by out-of-bounds read vulnerability []7.7CNA v3.10.5%2026-08-12Fix
CVE-2026-16860IBM i is affected by remote code execution vulnerability []9.9CNA v3.10.7%2026-08-12Fix
CVE-2026-16856IBM i is affected by multiple vulnerabilities in Domain Name System8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-16770PDF::WebKit versions for Perl allow argument injection into wkhtmltopdf9.8CISA ADP v3.10.7%2026-08-12
CVE-2026-16747Kirki WordPress plugin unauthenticated arbitrary shortcode execution via form email actions6.5CNA v3.10.4%2026-08-12Reported exploitedFix
CVE-2026-16737WP Travel Engine cart booking lookup insecure direct object reference5.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-16695IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities7.8CNA v3.10.2%2026-08-12Fix
CVE-2026-16694IBM i is affected by stored cross-site scripting for i6.4CNA v3.10.2%2026-08-12Fix
CVE-2026-16627Improper neutralization of input during web page generation (cross-site scripting) in GitLab7.7CNA v3.10.5%2026-08-12Fix
CVE-2026-16621Payment Gateway for PayPal on WooCommerce PayPal advanced return handler vulnerability5.3CNA v3.10.2%2026-08-12Fix
CVE-2026-16538TeraWallet - Wallet for WooCommerce WordPress plugin Wallet Balance Inflation via Discounted Top-Up9.1CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-16494Missing authorization in GitLab7.1CNA v3.10.4%2026-08-12Fix
CVE-2026-16480IBM Db2 improper authorization4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-16294Blubrry PowerPress WordPress plugin server-side request forgery7.1CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-16253Total Upkeep WordPress plugin unauthenticated sensitive data disclosure and Forced site Restore7.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-16066Welcart e-Commerce WordPress plugin Author+ stored XSS via Product Name5.4CISA ADP v3.10.2%2026-08-12Fix
CVE-2026-16051WPMU DEV Dashboard Hub install action code injection9.8CISA ADP v3.10.9%2026-08-12Fix
CVE-2026-16033Canonical LXD arbitrary file read+write on host via templates/ symlink in malicious image8.5CNA v3.10.4%2026-08-12Fix
CVE-2026-15803Eclipse RDF4J XML external entity injection8.7CNA v4.00.5%2026-08-12Fix
CVE-2026-15423Incorrect authorization in GitLab8.5CNA v3.10.4%2026-08-12Fix
CVE-2026-15388Cookie Consent WordPress plugin Subscriber+ Consent settings update and Consent Log disclosure4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-15249Patterns Kit WordPress plugin Contributor+ stored XSS via YouTube Popup Link5.4CISA ADP v3.10.2%2026-08-12
CVE-2026-15217Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.5%2026-08-12Fix
CVE-2026-15216Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.5%2026-08-12Fix
CVE-2026-15213Welcart e-Commerce WordPress plugin unauthenticated Payment bypass via Forged Settlement Callback5.3CNA v3.10.2%2026-08-12Fix
CVE-2026-15141Referer Validation Bypass in Tl-wr820n Web Management interface5.3CNA v4.00.1%2026-08-12Fix
CVE-2026-15045Wallet System for WooCommerce plugin checkout wallet amount vulnerability6.5CNA v3.10.3%2026-08-12Fix
CVE-2026-15039Gift Cards for WooCommerce Pro unrestricted file upload9.8CISA ADP v3.10.8%2026-08-12Reported exploitedFix
CVE-2026-14925Import WP WordPress plugin unauthenticated sensitive information exposure via export file download7.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-14866IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities7.7CNA v3.10.1%2026-08-12Fix
CVE-2026-14859WP Crowdfunding WordPress plugin Subscriber+ Campaign creation via missing authorization4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-14858WP Crowdfunding WordPress plugin Subscriber+ order data disclosure via IDOR4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-14857WP Crowdfunding WordPress plugin Subscriber+ Campaign update modification via IDOR4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-14479Denial of service in Autodesk Installer IPC Channel5.5CNA v3.10.2%2026-08-12Fix
CVE-2026-14478Incorrect permission assignment in Autodesk Installer Named Pipes7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-13622Red Hat Container Native Virtualization virt-handler migration proxy symlink following8.8CNA v3.10.2%2026-08-12Fix
CVE-2026-13613KiviCare WordPress plugin Doctor/Receptionist+ SQL injection via settings/listing REST endpoint8.8CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-13612KiviCare WordPress plugin Patient+ Cross-Patient Bill, Invoice and Appointment disclosure via IDOR4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-13476IBM Informix Wire Listener vulnerable to unauthenticated remote code execution7.3CNA v3.10.4%2026-08-12Fix
CVE-2026-13433IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities8.3CNA v3.10.2%2026-08-12Fix
CVE-2026-13367IBM Informix Dynamic Server privilege escalation vulnerability in oninit utility7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-13361IBM Informix Server vulnerability in SQL interface handler could allow remote code execution8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-13267IBM Verify Identity Access privilege escalation8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-13177Eventin WordPress plugin Contributor+ order information disclosure via IDOR4.3CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-13171Eventin WordPress plugin unauthenticated account creation via Waiting List endpoint8.2CISA ADP v3.10.3%2026-08-12Fix
CVE-2026-13168Eventin REST API customer records information disclosure6.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-13105IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities8.8CNA v3.10.5%2026-08-12Fix
CVE-2026-13094IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities7.8CNA v3.10.2%2026-08-12Fix
CVE-2026-12976LearnPress WordPress plugin Subscriber+ sensitive information exposure via AI Assistant6.5CISA ADP v3.10.4%2026-08-12Fix
CVE-2026-12618IBM Security Verify Access and Verify Identity Access injection7.2CNA v3.10.5%2026-08-12Fix
CVE-2026-12359IBM Verify Identity Access reverse proxy request handling improper authentication8.1CNA v3.10.4%2026-08-12Fix
CVE-2026-12235zephyrproject zephyr out-of-bounds write in Xtensa llext PLT relocation from malformed ELF6.3CNA v3.10.1%2026-08-12Fix
CVE-2026-12234Zephyr socket sendmsg and recvmsg syscall verifiers race condition7.8CNA v3.10.1%2026-08-12Fix
CVE-2026-12233Zephyr TLS trusted credential backend mutex vulnerability5.9CNA v3.10.5%2026-08-12Fix
CVE-2026-12232zephyrproject zephyr out-of-bounds read via unvalidated stream_id in Intel ALH DAI get_properties6.1CNA v3.10.1%2026-08-12Fix
CVE-2026-12005IBM Verify Identity Access management interface OS command injection7.2CNA v3.10.5%2026-08-12Fix
CVE-2026-12004IBM Verify Identity Access management interface format string injection8.7CNA v3.10.5%2026-08-12Fix
CVE-2026-11937IBM Verify Identity Access reverse proxy use-after-free3.1CNA v3.10.3%2026-08-12Fix
CVE-2026-11932IBM Verify Identity Access infinite loop5.3CNA v3.10.5%2026-08-12Fix
CVE-2026-11923IBM Verify Identity Access reverse proxy improper authentication7.4CNA v3.10.3%2026-08-12Fix
CVE-2026-11325Cloudflare/pages-action is deprecated migration required by September 18th, 20268.8CNA v3.10.7%2026-08-12
CVE-2026-10543IBM® Db2® is vulnerable to privilege escalation with a specially crafted query8.2CNA v3.10.4%2026-08-12Fix
CVE-2026-10534IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser8.4CNA v3.10.4%2026-08-12Fix
CVE-2026-9318tablib versions stored XSS via HTML Export Dataset Title4.8CNA v4.00.3%2026-08-12Fix
CVE-2026-8667Incorrect authorization in GitLab4.3CNA v3.10.4%2026-08-12Fix
CVE-2026-7427Allocation of resources without limits or throttling in GitLab5.3CNA v3.10.6%2026-08-12Fix
CVE-2026-7366IBM DataPower Gateway affected by HTTP request header leakage in XML-Firewall4.2CNA v3.10.2%2026-08-12Fix
CVE-2026-6821Missing authorization in GitLab4.3CNA v3.10.4%2026-08-12Fix
CVE-2026-6484Insyde Software InsydeH2O lack of verified boot to certain FV may cause arbitrary code execution8.2CNA v3.10.4%2026-08-12
CVE-2026-4879Missing authorization in GitLab4.3CNA v3.10.3%2026-08-12Fix
CVE-2026-73283OpenBSD OpenSSH incorrect control flow2.5CNA v3.10.1%2026-08-11Fix
CVE-2026-73282OpenBSD OpenSSH use-after-free4.8CNA v3.10.2%2026-08-11Fix
CVE-2026-73281OpenBSD OpenSSH incorrect resource transfer3.5CNA v3.10.2%2026-08-11Fix
CVE-2026-73250notepad-plus-plus notepad++: Install-time PowerShell command injection through installation path5.4CNA v4.00.2%2026-08-11Fix
CVE-2026-73249calibre Content Server annotation endpoint missing authorization7.5CNA v3.10.4%2026-08-11Fix
CVE-2026-73248kovidgoyal calibre Python template code injection8.5CNA v4.00.2%2026-08-11Fix
CVE-2026-73247Kestra Pebble template http function server-side request forgery8.6CNA v3.10.4%2026-08-11Fix
CVE-2026-73246Kestra worker endpoint information disclosure7.5CNA v3.10.6%2026-08-11Fix
CVE-2026-73245Kestra: Unauthenticated management/actuator endpoints exposed on port 8081 bypass API basic-auth6.5CNA v3.10.3%2026-08-11Fix
CVE-2026-73244kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrary directory listing5.3CNA v3.10.4%2026-08-11Fix
CVE-2026-73243kkFileView: Unauthenticated SSRF via /addTask with fullfilename type-confusion bypass5.8CNA v3.10.4%2026-08-11Fix
CVE-2026-73242FreeRDP Kerberos decryption out-of-bounds write8.3CNA v4.00.4%2026-08-11Fix
CVE-2026-73241FreeRDP RDSTLS server authentication authentication bypass8.3CNA v4.00.5%2026-08-11Fix
CVE-2026-73235FreeCAD: XXE file read and SSRF via external entity injection in Document.xml SAX parser6.1CNA v3.10.1%2026-08-11Fix
CVE-2026-73234FreeCAD: FCStd path traversal allows arbitrary file write7.8CNA v3.10.2%2026-08-11Fix
CVE-2026-73233FreeCAD: FEM formula incomplete escape8.5CNA v4.00.2%2026-08-11Fix
CVE-2026-73232ffuf denial of service (OOM) via HTTP response decompression bomb7.5CNA v3.10.6%2026-08-11Fix
CVE-2026-73231Faker: Helpers.fake exploitable into arbritary code execution7.8CNA v3.10.2%2026-08-11Fix
CVE-2026-73230Ente: 2of3 cards v1 contain a checksum that enables offline guessing of low-entropy secrets5.9CNA v4.00.2%2026-08-11Fix
CVE-2026-73229Encode Django REST Framework admin renderer information disclosure4.3CNA v3.10.4%2026-08-11Fix
CVE-2026-73228encode django-rest-framework request.data parsing resource exhaustion5.3CNA v3.10.6%2026-08-11Fix
CVE-2026-73227Electerm's RDP clipboard file download may parse unsafe file name8.1CNA v3.10.5%2026-08-11Fix
CVE-2026-73226electerm WebSocket handler vulnerability8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-73225electerm FTP and SFTP folder download path traversal8.1CNA v3.10.5%2026-08-11Fix
CVE-2026-73224Electerm check folder size function may get attacked by unsafe folder name8.8CNA v3.10.7%2026-08-11Fix
CVE-2026-73223electerm SFTP file editor path traversal8.1CNA v3.10.5%2026-08-11Fix
CVE-2026-73222Claude Code Templates Studio server vulnerability8.8CNA v3.10.3%2026-08-11Fix
CVE-2026-73221CVAT: Flawed authorization logic in endpoints related to lambda requests5.3CNA v4.00.4%2026-08-11Fix
CVE-2026-73219CVAT: Denial of service with regards to automatic annotation5.3CNA v4.00.5%2026-08-11Fix
CVE-2026-73218Cursor: Sandbox escape via launching privileged containers7.7CNA v4.00.6%2026-08-11Fix
CVE-2026-73217Cursor: Sandbox escape via tampered Python virtual environments7.7CNA v4.00.4%2026-08-11Fix
CVE-2026-73216coturn mobility allocation quota denial of service6.5CNA v3.10.6%2026-08-11Fix
CVE-2026-73215The coturn server can end in a state where it does not accept more requests with even-port enabled7.1CNA v4.00.5%2026-08-11Fix
CVE-2026-73214coturn DTLS listener denial of service8.2CNA v4.00.6%2026-08-11Fix
CVE-2026-73213coturn TURN peer IP access control incorrect authorization5.8CNA v4.00.4%2026-08-11Fix
CVE-2026-73212coturn TURN peer IP access control server-side request forgery5.8CNA v4.00.5%2026-08-11Fix
CVE-2026-73211PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore9.8CNA v3.10.7%2026-08-11Fix
CVE-2026-73210Server-side request forgery via Favicon Retrieval in Lookyloo PlaywrightCapture5.1CNA v4.00.5%2026-08-11Fix
CVE-2026-73162cti-transmute CSRF allows Unauthorized Follow and Notification State Changes5.3CNA v4.00.2%2026-08-11
CVE-2026-73161cti-transmute Conversion Table allows XSS via Unescaped Cell Content during Search Highlighting5.1CNA v4.00.4%2026-08-11
CVE-2026-73160cti-transmute unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses8.7CNA v4.00.4%2026-08-11
CVE-2026-73159cti-transmute stored XSS via Crafted Tag Icon on Admin Triage interface5.1CNA v4.00.4%2026-08-11
CVE-2026-73158cti-transmute Saved Graph Configuration allows stored cross-site scripting via svgIcon5.1CNA v4.00.4%2026-08-11
CVE-2026-73157cti-transmute Remote MISP Event Browser allows cross-site scripting via Malicious Event Metadata2.3CNA v4.00.4%2026-08-11
CVE-2026-73156cti-transmute Sunburst and Treemap Tooltips allow cross-site scripting via Crafted Conversion Data5.3CNA v4.00.4%2026-08-11
CVE-2026-73155cti-transmute missing authorization allows Reactions to Private Comments5.3CNA v4.00.4%2026-08-11
CVE-2026-73140cti-transmute Evaluation Report Exports Expose Private Comments and Author Information5.3CNA v4.00.4%2026-08-11
CVE-2026-73090PeerTube: Cross-origin remote video takeover via Update activity9.3CNA v3.10.4%2026-08-11Fix
CVE-2026-73089Browserslist: Unbounded memory growth via distinct query results, leading to eventual OOM7.5CNA v3.10.7%2026-08-11Fix
CVE-2026-73088Browserslist: Uncaught crash / prototype write7.5CNA v3.10.7%2026-08-11Fix
CVE-2026-73087Dozzle: SSRF guard bypass2.3CNA v4.00.5%2026-08-11Fix
CVE-2026-73086nanoid random ID generator integer overflow7.4CNA v3.10.3%2026-08-11Fix
CVE-2026-73085Audiobookshelf: Refresh Token Accepted on Resource endpoints5.3CNA v4.00.5%2026-08-11Fix
CVE-2026-73084Activepieces: Reflected cross-site scripting in OAuth Redirect endpoint6.1CNA v3.10.4%2026-08-11Fix
CVE-2026-73083Activepieces: V8 Isolate sandbox bypass via importFresh Module Loading7.6CNA v4.00.3%2026-08-11Fix
CVE-2026-73082Activepieces: Server-side request forgery in MCP tool validation endpoint5.3CNA v4.00.4%2026-08-11Fix
CVE-2026-73081Activepieces: Remote code execution via command injection in Code Step Name8.7CNA v4.00.5%2026-08-11Fix
CVE-2026-73080SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle9.3CNA v3.10.5%2026-08-11Fix
CVE-2026-73079Wei-Shaw Sub2API Responses subpath routes path traversal8.5CNA v3.10.4%2026-08-11Fix
CVE-2026-73078Vim: Arbitrary code execution via Netrw Menu Construction8.6CNA v4.00.3%2026-08-11Fix
CVE-2026-73077Vim: Arbitrary code execution via Shell Keyword Lookup8.4CNA v4.00.1%2026-08-11Fix
CVE-2026-73076Vim: Arbitrary command execution via Malicious `.VimballRecord` Entry Replay in `vimball.Vim`8.4CNA v4.00.1%2026-08-11Fix
CVE-2026-73075Vim: Out-of-bounds access in Popup Opacity Handling4.6CNA v4.00.1%2026-08-11Fix
CVE-2026-73074Vim: Heap buffer overflow in Text Property Handling7.1CNA v4.00.1%2026-08-11Fix
CVE-2026-73072Vim: Heap buffer overflow when Loading a Spell file8.5CNA v4.00.1%2026-08-11Fix
CVE-2026-73071Vim JSON decoder use-after-free3.3CNA v3.10.2%2026-08-11Fix
CVE-2026-73070Vim: Stack buffer overflow in the Vim Socket Server6.8CNA v4.00.2%2026-08-11Fix
CVE-2026-73069Twenty: SQL injection in the `searchVector` field settings allows arbitrary PostgreSQL Execution9.1CNA v3.10.7%2026-08-11Fix
CVE-2026-73068ToolJet database API insecure direct object reference5.9CNA v3.10.3%2026-08-11
CVE-2026-73067Tesseract: Heap OOB read in the DAWG loader6.7CNA v4.00.1%2026-08-11Fix
CVE-2026-73066Tesseract: Heap out-of-bounds write in LSTM Convolve layer via crafted .traineddata6.8CNA v4.00.1%2026-08-11Fix
CVE-2026-73036Bash-it barbuk Theme Terminal escape sequence injection via pyproject.toml4.6CNA v4.00.2%2026-08-11
CVE-2026-73034DB-GPT path traversal arbitrary file write via user_id header9.3CNA v4.05.7%2026-08-11NucleiExploit code
CVE-2026-73032PapersGPT for Zotero RCE via Unsanitized LLM Response eval9.4CNA v4.00.6%2026-08-11
CVE-2026-73031telegram-search stored XSS via v-html in MessageList.vue8.2CNA v4.00.7%2026-08-11
CVE-2026-72971Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) tampering5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-72925SWC HTML minifier may allow script element breakout when minifying embedded JSON6.1CNA v3.10.3%2026-08-11Fix
CVE-2026-72922AutoGPT: Webhook provider path confusion bypasses generic webhook secret verification8.2CNA v3.10.5%2026-08-11Fix
CVE-2026-72921SeaweedFS filer JWT incorrect authorization8.1CNA v3.10.4%2026-08-11Fix
CVE-2026-72920SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control9.8CNA v3.10.8%2026-08-11Fix
CVE-2026-72785Craft CMS authorization bypass via structures/move-element9.3CNA v4.00.3%2026-08-11Fix
CVE-2026-72784Craft CMS SSRF via GraphQL asset mutation6.9CNA v4.00.2%2026-08-11Fix
CVE-2026-72783Craft CMS path traversal via ensurePathIsContained6.9CNA v4.00.2%2026-08-11Fix
CVE-2026-72782Craft CMS Environment variable leak7.1CNA v4.00.4%2026-08-11Fix
CVE-2026-72781Craft CMS remote code execution via Twig sandbox escape8.7CNA v4.00.8%2026-08-11Exploit codeFix
CVE-2026-72780Craft CMS WebAuthn Assertion Replay via login-with-passkey7.1CNA v4.00.4%2026-08-11Fix
CVE-2026-72779Craft CMS arbitrary file read via SplFileObject8.7CNA v4.00.4%2026-08-11Fix
CVE-2026-72778Craft CMS authenticated RCE via condition.config8.7CNA v4.00.8%2026-08-11Exploit codeFix
CVE-2026-72775n8n SQL injection via PostgresTrigger Node8.8v3.10.5%2026-08-11Fix
CVE-2026-72774n8n authentication bypass via HTTP Request Node6.5NVD v3.10.4%2026-08-11Fix
CVE-2026-72773n8n path traversal via computer-use search_files7.7v3.10.6%2026-08-11Fix
CVE-2026-72772n8n authentication bypass via Token Exchange8.8v3.10.4%2026-08-11Fix
CVE-2026-72771n8n Credential Restriction Bypass via AI/LLM Nodes6.5NVD v3.10.4%2026-08-11Fix
CVE-2026-72770n8n path traversal via Git Node Operations6.5NVD v3.10.7%2026-08-11Fix
CVE-2026-72769n8n prototype pollution via VM Expression Engine8.1v3.10.5%2026-08-11Fix
CVE-2026-72768n8n SSRF Protection Bypass via MCP client8.3v3.10.4%2026-08-11Fix
CVE-2026-72767n8n remote code execution via Git node8.8v3.10.9%2026-08-11Fix
CVE-2026-72766n8n arbitrary file read via Send Email Node7.5v3.10.4%2026-08-11Fix
CVE-2026-72765n8n remote code execution via Expression sandbox escape9.9v3.10.9%2026-08-11Fix
CVE-2026-72764n8n module cache poisoning via Code Node8.8v3.10.8%2026-08-11Fix
CVE-2026-72763n8n Credential Exfiltration via Sub-Workflow6.5NVD v3.10.4%2026-08-11Fix
CVE-2026-72762n8n arbitrary file write via Edit Image Node8.8v3.10.5%2026-08-11Fix
CVE-2026-72750n8n SQL injection via executeQuery Operation8.8v3.10.5%2026-08-11Fix
CVE-2026-72749n8n prototype pollution via Edit fields6.5NVD v3.10.6%2026-08-11Fix
CVE-2026-72748AVideo unauthenticated arbitrary file write via aVideoEncoderChunk.json.php6.9CNA v4.01.2%2026-08-11
CVE-2026-72747AVideo stored cross-site scripting via Unauthenticated Registration5.1CNA v4.00.4%2026-08-11
CVE-2026-72744Nuxt information disclosure via Chrome DevTools6.9CNA v4.00.2%2026-08-11Exploit codeFix
CVE-2026-72742DSPy Local File Read via Image/Audio Output Field Parsing9.2CNA v4.00.5%2026-08-11
CVE-2026-72713XAgent path traversal arbitrary file read via /workspace/file8.7CNA v4.00.8%2026-08-11Fix
CVE-2026-72712Nmap denial of service via Zero-Length TCP Option Packet6.9CNA v4.00.5%2026-08-11Fix
CVE-2026-72694Red Hat MRTG mrtg daemon privilege escalation7.1CNA v3.10.1%2026-08-11Fix
CVE-2026-72693Red Hat Enterprise Linux 10 kbd: Local privilege escalation in openvt7.8CNA v3.10.1%2026-08-11Fix
CVE-2026-72610Koha Community Koha stored SQL injection via Patron lang field in issue Slip Generation4.3CNA v3.10.3%2026-08-11Fix
CVE-2026-72609Koha Community Koha SQL injection via ORDER BY Direction in acqui/parcels.pl7.1CNA v3.10.4%2026-08-11Fix
CVE-2026-72608Koha Community Koha stored SQL injection via Patron Card Layout image_name6.5CNA v3.10.4%2026-08-11Fix
CVE-2026-72607Koha Community Koha stored SQL injection via agefield in Automatic Item Modifications by Age7.1CNA v3.10.5%2026-08-11Fix
CVE-2026-72606Pinry Pinry server-side request forgery7.5CNA v3.10.5%2026-08-11
CVE-2026-72605Swing Music Swing Music missing authentication7.5CNA v3.10.5%2026-08-11
CVE-2026-72604Intelliants Subrion CMS path traversal6.5CNA v3.10.5%2026-08-11
CVE-2026-72603wg-easy wg-easy OS command injection9.9CNA v3.12.2%2026-08-11
CVE-2026-72602AsyncFuncAI deepwiki-open path traversal7.5CNA v3.10.7%2026-08-11
CVE-2026-72601CSZ CMS CSZ CMS broken access control7.5CNA v3.10.6%2026-08-11
CVE-2026-72600Idurar IDURAR ERP CRM broken access control7.5CNA v3.10.6%2026-08-11
CVE-2026-72599e107 e107 SQL injection9.8CNA v3.10.6%2026-08-11
CVE-2026-72598Apioo Fusio server-side request forgery6.5CNA v3.10.4%2026-08-11
CVE-2026-72597Friendica Friendica server-side request forgery6.5CNA v3.10.3%2026-08-11
CVE-2026-72596Ghost Foundation Ghost broken access control8.1CNA v3.10.4%2026-08-11
CVE-2026-72595BadChoice Handesk broken access control8.1CNA v3.10.4%2026-08-11
CVE-2026-72563BadChoice Handesk broken access control8.1CNA v3.10.4%2026-08-11
CVE-2026-72562Pimcore pimcore admin-ui-classic-bundle SQL injection8.8CNA v3.10.4%2026-08-11
CVE-2026-72561Peppermint Lab Peppermint broken access control8.8CNA v3.10.4%2026-08-11
CVE-2026-72560HumanSignal Label Studio server-side request forgery6.5CNA v3.10.3%2026-08-11
CVE-2026-72559Daniel Brendel HortusFox cross-site scripting5.4CNA v3.10.2%2026-08-11
CVE-2026-72558CiviCRM CiviCRM SQL injection8.8CNA v3.10.4%2026-08-11
CVE-2026-72557Cockpit CMS Cockpit CMS unrestricted file upload8.8CNA v3.10.5%2026-08-11
CVE-2026-72556ZoneMinder ZoneMinder remote code execution8.8CNA v3.11.0%2026-08-11
CVE-2026-72555Peppermint Lab Peppermint broken access control8.1CNA v3.10.4%2026-08-11
CVE-2026-72554Ladybird Web Solution Faveo Helpdesk broken access control6.5CNA v3.10.4%2026-08-11
CVE-2026-72553ElkArte Forum ElkArte cross-site scripting5.4CNA v3.10.2%2026-08-11
CVE-2026-72552Dub Dub server-side request forgery7.5CNA v3.10.6%2026-08-11
CVE-2026-72551Apioo Fusio remote code execution8.8CNA v3.11.0%2026-08-11
CVE-2026-72550Friendica Friendica SQL injection9.8CNA v3.10.6%2026-08-11Exploit code
CVE-2026-72549OpenSignLabs OpenSign information disclosure5.3CNA v3.10.5%2026-08-11
CVE-2026-72548OpenSignLabs OpenSign information disclosure7.5CNA v3.10.6%2026-08-11
CVE-2026-72547Attendize Attendize insecure direct object reference7.1CNA v3.10.3%2026-08-11
CVE-2026-72546Attendize Attendize insecure direct object reference7.1CNA v3.10.3%2026-08-11
CVE-2026-72545OpenSignLabs OpenSign insecure direct object reference7.5CNA v3.10.5%2026-08-11
CVE-2026-72544OpenSignLabs OpenSign insufficient verification of data authenticity7.5CNA v3.10.3%2026-08-11
CVE-2026-72543OpenSignLabs OpenSign insecure direct object reference7.5CNA v3.10.6%2026-08-11
CVE-2026-72542Windmill Labs Windmill missing authorization5.4CNA v3.10.3%2026-08-11
CVE-2026-72541Windmill Labs Windmill missing authorization6.5CNA v3.10.3%2026-08-11
CVE-2026-72539Windmill Labs Windmill information disclosure6.5CNA v3.10.4%2026-08-11
CVE-2026-72538PrefectHQ Prefect argument injection8.8CNA v3.11.0%2026-08-11
CVE-2026-72537Authentik Security authentik privilege escalation8.8CNA v3.10.4%2026-08-11
CVE-2026-72536Chaskiq Chaskiq missing authentication8.2CNA v3.10.6%2026-08-11
CVE-2026-72535Chaskiq Chaskiq missing authentication8.2CNA v3.10.6%2026-08-11
CVE-2026-72534Authentik Security authentik privilege escalation8.8CNA v3.10.4%2026-08-11
CVE-2026-72533Portainer Portainer CE authentication bypass8.8CNA v3.10.6%2026-08-11
CVE-2026-71845Red Hat Insights-client startup environment variable logging information disclosure6.3CNA v3.10.5%2026-08-11Fix
CVE-2026-71475Red Hat Insights-client Insights API request path path traversal6.8CNA v3.10.7%2026-08-11Fix
CVE-2026-71474Red Hat Insights-client information disclosure7.1CNA v3.10.2%2026-08-11Fix
CVE-2026-71468Red Hat Advanced Cluster Management for Kubernetes federation config cache information disclosure5.3CNA v3.10.4%2026-08-11Fix
CVE-2026-71467Red Hat Advanced Cluster Management for Kubernetes search API authentication authentication bypass7.5CNA v3.10.8%2026-08-11Fix
CVE-2026-71398Adobe Campaign Classic (ACC) incorrect authorization10.0CNA v3.11.2%2026-08-11Fix
CVE-2026-71390Adobe CAI Content Credentials improper input validation4.0CNA v3.10.3%2026-08-11Fix
CVE-2026-71389Adobe CAI Content Credentials integer underflow (wrap or wraparound)6.2CNA v3.10.3%2026-08-11Fix
CVE-2026-71387Adobe ColdFusion incorrect authorization8.8CNA v3.10.5%2026-08-11Fix
CVE-2026-71386Adobe ColdFusion cross-site scripting (XSS)8.8CNA v3.10.6%2026-08-11Fix
CVE-2026-71384Adobe ColdFusion incorrect authorization9.6CNA v3.10.5%2026-08-11Fix
CVE-2026-71383Adobe ColdFusion incorrect authorization7.3CNA v3.10.6%2026-08-11Fix
CVE-2026-71362Adobe Commerce and Magento incorrect authorization9.1CNA v3.187.5%2026-08-11KEVNucleiExploit codeFix
CVE-2026-71331Microsoft Windows Device Health Attestation (DHA) remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-71290Apache HttpComponents Client: TLS hostname verification silently disabled on the async transport9.1CISA ADP v3.10.3%2026-08-11Fix
CVE-2026-71218iperf3 JSON_read function denial of service5.3CNA v3.10.7%2026-08-11Fix
CVE-2026-71217iperf3 JSON control channel denial of service7.5CNA v3.10.8%2026-08-11Exploit codeFix
CVE-2026-70355Microsoft SharePoint server elevation of privilege7.3CNA v3.10.8%2026-08-11Fix
CVE-2026-70354Microsoft .NET Core remote code execution7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-70348Microsoft Windows Management services denial of service5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70347Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-70346Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-70345Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-70344Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-70340Microsoft Azure CycleCloud elevation of privilege8.1CNA v3.10.8%2026-08-11Fix
CVE-2026-70339Microsoft Edge (Chromium-based) remote code execution5.4CNA v3.10.4%2026-08-11Fix
CVE-2026-70338Microsoft PowerShell security feature bypass7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-70337Microsoft PowerShell remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-70336Microsoft Visual Studio Code remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-70335Microsoft GitHub Copilot and Visual Studio Code elevation of privilege7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-70330Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-70329Microsoft Outlook remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-70328Microsoft Excel information disclosure6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-70327Microsoft Excel information disclosure6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-70326Microsoft SharePoint server elevation of privilege8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-70325Microsoft 365 Apps for Enterprise powerpoint information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70324Microsoft SharePoint elevation of privilege8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-70323Microsoft Office information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70322Microsoft 365 Apps for Enterprise powerpoint information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70321Microsoft SharePoint remote code execution8.8CNA v3.11.7%2026-08-11Fix
CVE-2026-70320Microsoft 365 Apps for Enterprise powerpoint information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70319Microsoft Office Word information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70318Microsoft Excel information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-70317Microsoft Office information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70316Microsoft 365 Apps for Enterprise powerpoint information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70315Microsoft Office information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70314Microsoft Office information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-70313Microsoft PowerPoint remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-70312Microsoft 365 Apps for Enterprise powerpoint information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70311Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-70310Microsoft Word information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-70307Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-70306Microsoft Office SharePoint spoofing9.3CNA v3.11.0%2026-08-11Fix
CVE-2026-70304Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-70130Microsoft Office remote code execution8.4CNA v3.10.3%2026-08-11Fix
CVE-2026-69320Microsoft Visual Studio Code remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-69306Microsoft Visual Studio Code security feature bypass8.2CNA v3.10.5%2026-08-11Fix
CVE-2026-69278Microsoft Visual Studio Code security feature bypass7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-69223Apache Allura: Server-side request forgery9.1CISA ADP v3.10.8%2026-08-11Fix
CVE-2026-69119Taubyte Tau projects HTTP service missing authorization7.2CNA v4.00.5%2026-08-11
CVE-2026-69117NetBox ORM injection via WritableNestedSerializer7.1CNA v4.00.3%2026-08-11
CVE-2026-69115OpenIM server missing authorization on User and Group Enumeration endpoints7.1CNA v4.00.3%2026-08-11
CVE-2026-69113Cap broken access control via video comment endpoint5.3CNA v4.00.3%2026-08-11
CVE-2026-69109Siemens License Server (SLS) path traversal8.7CNA v4.00.6%2026-08-11Fix
CVE-2026-69108Siemens License Server (SLS) incorrect permission assignment8.3CNA v4.00.2%2026-08-11Fix
CVE-2026-69102MaxKey Hard-coded JWT Secret unauthorized access via /login/JWT/trust9.3CNA v4.00.6%2026-08-11
CVE-2026-68821Microsoft App Installer Windows Package Manager elevation of privilege7.3CNA v3.10.3%2026-08-11Fix
CVE-2026-68820Microsoft Windows Ancillary Function Driver for WinSock use-after-free7.0CNA v3.10.3%2026-08-11KEVExploit codeKCVFix
CVE-2026-68819Microsoft Windows Network File System denial of service5.9CNA v3.11.0%2026-08-11Fix
CVE-2026-68817Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68816Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68815Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68814Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68813Microsoft Excel information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-68812Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68811Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68810Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68809PowerPoint information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-68808Microsoft Excel information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-68807Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68806Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68805Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68804Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68803Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68802Microsoft Excel information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-68801Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68800Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68799Microsoft Excel information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-68798Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68797Microsoft Excel information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-68796Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68795Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68794Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68793Microsoft Excel remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-68792Microsoft Office elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-68067Mira Hormone Monitor, Mira Android App weak authentication9.3CNA v4.00.5%2026-08-11Fix
CVE-2026-67568Mira Hormone Monitor, Mira Android App use of hard-coded credentials9.3CNA v4.00.4%2026-08-11Fix
CVE-2026-67558Mira Hormone Monitor, Mira Android App authentication bypass by spoofing8.2CNA v4.00.3%2026-08-11Fix
CVE-2026-67180Google Turbinia arbitrary command execution7.5CNA v4.00.2%2026-08-11Fix
CVE-2026-67179Genkit improper host header validation7.8CNA v3.10.2%2026-08-11Fix
CVE-2026-66875Mira Hormone Monitor, Mira Android App missing authentication for critical function8.7CNA v4.00.4%2026-08-11Fix
CVE-2026-66832Mira Hormone Monitor, Mira Android App Use of GET request method with sensitive query strings6.9CNA v4.00.4%2026-08-11Fix
CVE-2026-66810Microsoft Office Word information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-66809Microsoft Office Graphics component information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-66808Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2026-08-11Fix
CVE-2026-66807Microsoft Office Graphics component remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-66806Microsoft Office Word information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-66805Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2026-08-11Fix
CVE-2026-66804Microsoft Windows Cross Device service elevation of privilege7.8CNA v3.10.3%2026-08-11Exploit codeFix
CVE-2026-66802Microsoft Windows Device Health Attestation (DHA) remote code execution8.1CNA v3.10.5%2026-08-11Fix
CVE-2026-66799Microsoft Windows Key Guard elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-66779Cross-site scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP6.3CNA v3.10.3%2026-08-11Fix
CVE-2026-66778SAP Approuter request header forwarding HTTP header injection5.3CNA v3.10.4%2026-08-11Fix
CVE-2026-66777SAP Approuter backend request forwarding path traversal5.9CNA v3.10.4%2026-08-11Fix
CVE-2026-66776SAP Approuter session header improper signature verification5.9CNA v3.10.2%2026-08-11Fix
CVE-2026-66775SAP Approuter authentication flow cross-site request forgery4.3CNA v3.10.2%2026-08-11Fix
CVE-2026-66774SAP Approuter improper check for exceptional conditions3.7CNA v3.10.4%2026-08-11Fix
CVE-2026-66773SAP Odata server-controlled `__next` URL is not checking cross-origin5.9CNA v3.10.3%2026-08-11
CVE-2026-66772Missing authorization Check in SAP BusinessObjects Business Intelligence Platform (Admin tools)4.3CNA v3.10.3%2026-08-11Fix
CVE-2026-66771Cross-site scripting (XSS) vulnerability in SAPUI56.1CNA v3.10.4%2026-08-11Fix
CVE-2026-66770SQL injection vulnerability in SAP Social Intelligence6.3CNA v3.10.3%2026-08-11Fix
CVE-2026-66764Missing authorization check in SAP S/4 HANA (Reprocess Bank Statement Items)4.3CNA v3.10.3%2026-08-11Fix
CVE-2026-66763Credentials disclosure in SAP BusinessObjects Business Intelligence Platform7.9CNA v3.10.2%2026-08-11Fix
CVE-2026-66761SAP Approuter request flow control resource exhaustion4.3CNA v3.10.4%2026-08-11Fix
CVE-2026-66760SAP Approuter callback improper certificate validation6.4CNA v3.10.2%2026-08-11Fix
CVE-2026-66340Mira Hormone Monitor, Mira Android App improper restriction of excessive authentication attempts6.9CNA v4.00.4%2026-08-11Fix
CVE-2026-66301Microsoft Dynamics 365 (on-premises) information disclosure6.5CNA v3.11.0%2026-08-11Fix
CVE-2026-66154SonicWall GMS privileged communication workflow improper certificate validation8.3CISA ADP v3.10.2%2026-08-11Fix
CVE-2026-66150SonicWall Email Security code injection7.8CISA ADP v3.10.3%2026-08-11Fix
CVE-2026-66149SonicWall Email Security code injection7.8CISA ADP v3.10.3%2026-08-11Fix
CVE-2026-66148SonicWall GMS code injection6.3CISA ADP v3.11.1%2026-08-11Fix
CVE-2026-66147SonicWall GMS code injection9.4CISA ADP v3.11.8%2026-08-11Fix
CVE-2026-66146SonicWall GMS cross-site scripting6.1CISA ADP v3.10.3%2026-08-11Fix
CVE-2026-66145SonicWall GMS code injection9.1CISA ADP v3.10.7%2026-08-11Fix
CVE-2026-66098Mira Hormone Monitor, Mira Android App missing authentication for critical function7.1CNA v4.00.3%2026-08-11Fix
CVE-2026-65815Microsoft Dynamics 365 On-Premises remote code execution8.8CNA v3.11.7%2026-08-11Fix
CVE-2026-65814Microsoft Windows Storage Port driver elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65813Microsoft Exchange Server elevation of privilege6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-65811Microsoft Power BI remote code execution8.8CNA v3.11.0%2026-08-11Fix
CVE-2026-65810NET Framework elevation of privilege7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-65807Microsoft Excel remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-65806Microsoft Azure CycleCloud information disclosure6.5CNA v3.10.8%2026-08-11Fix
CVE-2026-65799Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-65798Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-65797Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-65796Microsoft Windows iSCSI Target service remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-65795Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-65794Microsoft Windows SMB client information disclosure6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-65791Microsoft Windows iSCSI Target service remote code execution9.8CNA v3.11.0%2026-08-11Fix
CVE-2026-65790Microsoft Windows Message Queuing elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65789Microsoft Windows DNS server remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-65788Microsoft Windows Desktop Window Manager elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65787Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65786Microsoft Windows Desktop Window Manager elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65785Microsoft Windows DHCP client denial of service6.5CNA v3.10.6%2026-08-11Fix
CVE-2026-65784Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-65783Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65782Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65781Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65780Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65779Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65778Microsoft Windows Autopilot elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65777Microsoft Windows active Directory security feature bypass5.3CNA v3.10.4%2026-08-11Fix
CVE-2026-65776Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65775Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65774Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65773Microsoft Windows Kernel elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65769Microsoft Teams iOS information disclosure6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-65768Microsoft Teams remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-65767Microsoft Teams for Android spoofing8.8CNA v3.10.6%2026-08-11Fix
CVE-2026-65681Microsoft Windows iSCSI Target service denial of service7.5CNA v3.11.2%2026-08-11Fix
CVE-2026-65680Microsoft OneDrive for MacOS elevation of privilege6.7CNA v3.10.4%2026-08-11Fix
CVE-2026-65679Microsoft Windows iSCSI Target service remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-65678Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-65675CoPilot Chat security feature bypass7.1CNA v3.10.6%2026-08-11Fix
CVE-2026-65673Microsoft Entra Connect elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65672Microsoft Windows remote Access API elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65671Microsoft Windows remote Access API elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-65665Microsoft SharePoint server remote code execution8.8CNA v3.11.7%2026-08-11Fix
CVE-2026-65664Microsoft Office Graphics component remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-65663Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2026-08-11Fix
CVE-2026-65662Microsoft Windows GDI information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-65661Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-65660Microsoft SharePoint code injection8.8CNA v3.12.1%2026-08-11KEVExploit codeFix
CVE-2026-65658Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2026-08-11Fix
CVE-2026-65657Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-65656Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-65655Temporal UI Server OAuth authentication cookies vulnerability2.3CNA v4.00.4%2026-08-11Fix
CVE-2026-64934Mira Hormone Monitor, Mira Android App reliance on untrusted inputs in a security decision5.3CNA v4.00.3%2026-08-11Fix
CVE-2026-64922Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-08-11Fix
CVE-2026-64921Microsoft SharePoint server elevation of privilege8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-64920Microsoft Access remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64919Microsoft Access remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64917Microsoft Office Word information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-64916Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-08-11Fix
CVE-2026-64915Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64914Microsoft Access remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64912Microsoft Access remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64911Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64910Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64909Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64908Microsoft Access remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64907Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64906Microsoft Access remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64905Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64904Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64903Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64902Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-08-11Fix
CVE-2026-64901Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2026-08-11Fix
CVE-2026-64900Microsoft SharePoint server spoofing7.3CNA v3.10.6%2026-08-11Fix
CVE-2026-64899Microsoft Office information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-64898Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-64897Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-08-11Fix
CVE-2026-64629Siemens Parasolid out-of-bounds read7.3CNA v4.00.2%2026-08-11Fix
CVE-2026-63533Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63532Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63531Microsoft Office Word information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-63530Microsoft Office Word information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-63529Microsoft Office information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-63528Microsoft Office Word information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-63527Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63526Microsoft Office Graphics component remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63525Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63524Microsoft Office information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-63522Microsoft Azure SQL Database elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-63521Microsoft Office Word information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-63520Microsoft SharePoint server remote code execution8.1CNA v3.11.0%2026-08-11Reported exploitedExploit codeKCVFix
CVE-2026-63519Microsoft Office Graphics component remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63518Microsoft Office Word remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63517Microsoft Office Graphics component information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-63516Microsoft SharePoint server spoofing6.5CNA v3.11.9%2026-08-11Fix
CVE-2026-63515Microsoft Office remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63514Microsoft SharePoint server remote code execution8.8CNA v3.12.0%2026-08-11Fix
CVE-2026-63513Microsoft Office Graphics component remote code execution7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-63512Microsoft SharePoint server tampering6.5CNA v3.10.7%2026-08-11Fix
CVE-2026-63177Malcolm vulnerable to authorization bypass via URI Normalization Differential in Nginx Lua RBAC7.1CNA v4.00.4%2026-08-11Fix
CVE-2026-63134Malcolm's path traversal in Archive Extraction allows arbitrary Directory Creation5.3CNA v4.00.4%2026-08-11Fix
CVE-2026-63133Malcolm has uncontrolled resource consumption in Archive Extraction (Inode-Exhaustion DoS)7.1CNA v4.00.5%2026-08-11Fix
CVE-2026-62917Microsoft SharePoint server spoofing4.6CNA v3.10.6%2026-08-11Fix
CVE-2026-62915Microsoft Exchange Server security feature bypass6.5CNA v3.10.6%2026-08-11Fix
CVE-2026-62914Microsoft Exchange Server spoofing7.3CNA v3.10.4%2026-08-11Fix
CVE-2026-62913Microsoft Exchange Server remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-62912Microsoft Exchange Server denial of service6.5CNA v3.12.0%2026-08-11Fix
CVE-2026-62911Microsoft Exchange Server elevation of privilege8.0CNA v3.10.7%2026-08-11Emerging ThreatsExploit codeFix
CVE-2026-62910Microsoft Exchange Server elevation of privilege7.2CNA v3.11.0%2026-08-11Fix
CVE-2026-62909Microsoft .NET elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62908Microsoft Windows Backup Engine elevation of privilege7.0CNA v3.10.2%2026-08-11Fix
CVE-2026-62902Microsoft .NET information disclosure6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-62901Microsoft .NET denial of service7.5CNA v3.11.2%2026-08-11Fix
CVE-2026-62900Microsoft .NET information disclosure5.9CNA v3.10.7%2026-08-11Fix
CVE-2026-62899Microsoft .NET security feature bypass5.9CNA v3.10.7%2026-08-11Fix
CVE-2026-62898Microsoft QUIC information disclosure7.5CNA v3.11.0%2026-08-11Fix
CVE-2026-62897Microsoft .NET Framework remote code execution7.0CNA v3.10.4%2026-08-11Fix
CVE-2026-62894Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62893Microsoft Windows Deployment Services TFTP server remote code execution9.8CNA v3.11.0%2026-08-11Fix
CVE-2026-62892Microsoft Windows capability Access Management service (camsvc) elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62890Microsoft Windows GDI+ elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62889Microsoft Windows Secure Socket Tunneling Protocol (SSTP) remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-62888Microsoft Windows DWM Core library elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62887Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62886NET elevation of privilege7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-62885Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62883Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-62882Microsoft Outlook spoofing4.3CNA v3.10.7%2026-08-11Fix
CVE-2026-62881Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-62880Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62878Microsoft Windows DNS server remote code execution9.8CNA v3.11.0%2026-08-11Exploit codeFix
CVE-2026-62877Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62876Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62872NET Framework elevation of privilege8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-62871Microsoft .NET elevation of privilege7.8CNA v3.10.5%2026-08-11Fix
CVE-2026-62869Azure Entra ID spoofing8.8CNA v3.10.4%2026-08-11Fix
CVE-2026-62842Microsoft Office Graphics component information disclosure5.5CNA v3.10.5%2026-08-11Fix
CVE-2026-62839Microsoft SharePoint server spoofing6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-62837Microsoft SharePoint server information disclosure6.5CNA v3.11.2%2026-08-11Fix
CVE-2026-62832Microsoft Windows User Profile service elevation of privilege7.8CNA v3.10.4%2026-08-11KCVFix
CVE-2026-62829Microsoft SharePoint server spoofing4.6CNA v3.10.5%2026-08-11Fix
CVE-2026-62827Microsoft SharePoint server elevation of privilege8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-62824Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-62823Microsoft Windows DHCP server remote code execution8.8CNA v3.10.5%2026-08-11Fix
CVE-2026-62822Microsoft Windows GDI+ remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-62820Microsoft Windows DNS server remote code execution8.1CNA v3.10.5%2026-08-11Fix
CVE-2026-62819Microsoft Windows Routing and Remote Access Service (RRAS) remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-62818Microsoft Windows Active Directory Certificate Services (AD CS) remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-62817Microsoft Windows DNS server remote code execution8.8CNA v3.10.5%2026-08-11Fix
CVE-2026-62816Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution8.8CNA v3.10.5%2026-08-11Fix
CVE-2026-62815Microsoft QUIC remote code execution9.8CNA v3.11.0%2026-08-11Fix
CVE-2026-62814Microsoft Windows DHCP server information disclosure6.5CNA v3.10.5%2026-08-11Fix
CVE-2026-62812Microsoft Windows DHCP server elevation of privilege7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-62811Microsoft Windows HTTP.sys elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62807Microsoft Windows DHCP server elevation of privilege7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-62803Microsoft Windows DHCP server elevation of privilege7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-62800Microsoft Windows SMBv3 server remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-62799Microsoft Windows SMB client elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62798Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62797Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62796Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62795Microsoft Windows LDAP Lightweight Directory Access protocol remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-62793Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62792Microsoft Windows TCP/IP remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-62790Microsoft Windows SMBv3 server remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-62788Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62787Microsoft Windows DNS server remote code execution7.5CNA v3.10.7%2026-08-11Fix
CVE-2026-62786Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62785Microsoft Windows LDAP Lightweight Directory Access protocol remote code execution8.8CNA v3.10.8%2026-08-11Fix
CVE-2026-62784Microsoft Local Security Authority Server (lsasrv) remote code execution8.8CNA v3.10.9%2026-08-11Fix
CVE-2026-62783Microsoft Windows Remote Access Connection Manager elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62782Microsoft Windows SMB client information disclosure6.5CNA v3.10.9%2026-08-11Fix
CVE-2026-62781Microsoft Windows RPC Runtime library remote code execution8.1CNA v3.10.7%2026-08-11Fix
CVE-2026-62780Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.2%2026-08-11Fix
CVE-2026-62779Microsoft Windows Schannel elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62778Microsoft Windows DNS elevation of privilege8.1CNA v3.10.5%2026-08-11Fix
CVE-2026-62777Microsoft Windows License Manager elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62776Microsoft Windows DHCP server elevation of privilege7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-62775Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62774Microsoft Windows Graphics Kernel elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62773Microsoft Windows Kerberos elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62772Microsoft Windows Container Isolation FS Filter driver (unionfs.sys) elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62771Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62770Microsoft Windows Shell elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62769Microsoft Windows DNS elevation of privilege6.7CNA v3.10.3%2026-08-11Fix
CVE-2026-62768Microsoft Windows Installer elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62766Microsoft Windows Kerberos elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62761Microsoft Windows DHCP server elevation of privilege7.8CNA v3.10.4%2026-08-11Fix
CVE-2026-62758Microsoft Windows Remote Access Connection Manager elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62757Microsoft Windows Schannel security feature bypass5.3CNA v3.10.3%2026-08-11Fix
CVE-2026-62755Microsoft Windows DHCP client elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62754Microsoft Windows Kerberos elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62753Microsoft Windows HTTP.sys elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62752Microsoft Windows Kerberos elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62751Microsoft Windows Projected File System elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62750Microsoft Windows HTTP Protocol Stack tampering6.5CNA v3.10.7%2026-08-11Fix
CVE-2026-62749Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-08-11Fix
CVE-2026-62748Microsoft Windows Telephony service elevation of privilege7.0CNA v3.10.2%2026-08-11Fix
CVE-2026-62747Microsoft Windows Device Association service elevation of privilege7.8CNA v3.10.3%2026-08-11Fix
CVE-2026-62746Microsoft Windows win32k information disclosure5.5CNA v3.10.4%2026-08-11Fix
CVE-2026-62745Microsoft Windows DHCP server information disclosure6.5CNA v3.10.5%2026-08-11Fix