Patch Tuesday — August 2026

2026-08-11 · 3769 CVEs

CVEs published or modified the week of 2026-08-11, partitioned by vendor.

Microsoft (436 CVEs)

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73299Critical10.0—2026-08-12Prompty is a markdown file format (.prompty) for LLM prompts.
CVE-2026-65667Critical10.0—2026-08-07Missing authorization in Microsoft Teams allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-65791Critical9.8—2026-08-11Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-62893Critical9.8—2026-08-11Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
CVE-2026-62878Critical9.8—2026-08-11Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-62815Critical9.8—2026-08-11Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
CVE-2026-59124Critical9.8—2026-08-11Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
CVE-2026-14525Critical9.4—2026-08-13IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 IBM WebSphere Application Server Liberty is vulnerable to an authentication bypass when the rtcomm-1.0 or rtcommGateway-1.0 feature is enabled.
CVE-2026-73296Critical9.4—2026-08-12Microsoft UFO open-source framework for intelligent automation across devices and platforms.
CVE-2026-50516Critical9.4—2026-08-11Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-70306Critical9.3—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-59118Critical9.3—2026-08-07Improper authorization in Copilot Cowork allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-14973Critical9.3—2026-07-28IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written outside of the user's selected download destination.
CVE-2026-70337High8.8—2026-08-11Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
CVE-2026-70336High8.8—2026-08-11Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-70329High8.8—2026-08-11Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
CVE-2026-70326High8.8—2026-08-11Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70324High8.8—2026-08-11Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-70321High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-69320High8.8—2026-08-11Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-66808High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-66805High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65815High8.8—2026-08-11Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
CVE-2026-65811High8.8—2026-08-11Improper input validation in Power BI allows an authorized attacker to execute code over a network.
CVE-2026-65807High8.8—2026-08-11Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code over a network.
CVE-2026-65768High8.8—2026-08-11Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attacker to execute code over a network.
CVE-2026-65767High8.8—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized attacker to perform spoofing over a network.
CVE-2026-65665High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65663High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65660High8.8—2026-08-11Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-65658High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-64921High8.8—2026-08-11Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-64901High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-63514High8.8—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
CVE-2026-62913High8.8—2026-08-11Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
CVE-2026-62872High8.8—2026-08-11Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
CVE-2026-62869High8.8—2026-08-11Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
CVE-2026-62827High8.8—2026-08-11Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-62824High8.8—2026-08-11Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-62823High8.8—2026-08-11Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-62822High8.8—2026-08-11Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
CVE-2026-62818High8.8—2026-08-11Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
CVE-2026-62817High8.8—2026-08-11Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-62816High8.8—2026-08-11Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent network.
CVE-2026-62800High8.8—2026-08-11Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
CVE-2026-62795High8.8—2026-08-11Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-62790High8.8—2026-08-11Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
CVE-2026-62785High8.8—2026-08-11Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
CVE-2026-62784High8.8—2026-08-11Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a network.
CVE-2026-59133High8.8—2026-08-11Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privileges over a network.
CVE-2026-59113High8.8—2026-08-11Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
CVE-2026-57104High8.8—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-49179High8.8—2026-08-11Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized attacker to execute code over a network.
CVE-2026-63093High8.8—2026-07-17Cursor for Windows version 3.2.16 contains a binary planting vulnerability that allows remote attackers to achieve arbitrary code execution by placing a malicious git.exe file in the repository root directory.
CVE-2026-62836High8.7—2026-08-07Improper restriction of communication channel to intended endpoints in Azure SQL Managed Instance allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-48441High8.6—2026-08-11Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.
CVE-2026-48397High8.6—2026-08-11Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-70130High8.4—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-72970High8.3—2026-08-14Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-56179High8.3—2026-08-11Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent network.
CVE-2026-17723High8.3—2026-07-30Use after free in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-69306High8.2—2026-08-11Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-71331High8.1—2026-08-11Integer overflow or wraparound in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
CVE-2026-70340High8.1—2026-08-11Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
CVE-2026-66802High8.1—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Device Health Attestation (DHA) allows an unauthorized attacker to execute code over a network.
CVE-2026-65796High8.1—2026-08-11Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-65789High8.1—2026-08-11Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-65679High8.1—2026-08-11Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
CVE-2026-63520High8.1—2026-08-11Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
CVE-2026-62889High8.1—2026-08-11Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
CVE-2026-62820High8.1—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker to execute code over a network.
CVE-2026-62819High8.1—2026-08-11Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
CVE-2026-62792High8.1—2026-08-11Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
CVE-2026-62781High8.1—2026-08-11Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
CVE-2026-62778High8.1—2026-08-11Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-13473High8.1—2026-07-17IBM Storage Protect Client 8.1.0.0 through 8.1.27.0, 8.1.27.1, and 8.2.0.0 through 8.2.1.0 IBM Storage Protect is vulnerable to a heap-based buffer overflow, caused by improper bounds checking.
CVE-2026-62911High8.0—2026-08-11Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-57105High8.0—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-69414High7.8—2026-08-14Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "ShieldBreak ".
CVE-2026-50523High7.8—2026-08-14Improper neutralization of special elements used in a command ('command injection') in Microsoft PowerShell allows an authorized attacker to execute code locally.
CVE-2026-48410High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48409High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48408High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48407High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48406High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48405High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48404High7.8—2026-08-11Lightroom Classic is affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-47940High7.8—2026-08-11Lightroom Classic is affected by an Integer Overflow or Wraparound vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-70354High7.8—2026-08-11Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-70347High7.8—2026-08-11Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70346High7.8—2026-08-11Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70345High7.8—2026-08-11Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70344High7.8—2026-08-11Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-70338High7.8—2026-08-11Improper control of generation of code ('code injection') in Microsoft PowerShell allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-70335High7.8—2026-08-11Improper neutralization of special elements used in an os command ('os command injection') in GitHub Copilot and Visual Studio Code allows an unauthorized attacker to elevate privileges locally.
CVE-2026-70313High7.8—2026-08-11Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70311High7.8—2026-08-11Use after free in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-69278High7.8—2026-08-11Incorrect authorization in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-68817High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68816High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68815High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68814High7.8—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68812High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68811High7.8—2026-08-11Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68810High7.8—2026-08-11Untrusted pointer dereference in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68807High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68806High7.8—2026-08-11Out-of-bounds write in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68805High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68804High7.8—2026-08-11Numeric truncation error in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68803High7.8—2026-08-11Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68801High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68800High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68798High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68796High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68795High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68794High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68793High7.8—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to execute code locally.
CVE-2026-68792High7.8—2026-08-11Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an authorized attacker to elevate privileges locally.
CVE-2026-66807High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-66804High7.8—2026-08-11Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
CVE-2026-66799High7.8—2026-08-11Heap-based buffer overflow in Windows Key Guard allows an authorized attacker to elevate privileges locally.
CVE-2026-65814High7.8—2026-08-11Heap-based buffer overflow in Windows Storage Port Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-65810High7.8—2026-08-11Relative path traversal in .NET Framework allows an unauthorized attacker to elevate privileges locally.
CVE-2026-65790High7.8—2026-08-11Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-65787High7.8—2026-08-11Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65786High7.8—2026-08-11Heap-based buffer overflow in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65775High7.8—2026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65774High7.8—2026-08-11Heap-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-65773High7.8—2026-08-11Improper access control in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-65673High7.8—2026-08-11Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Entra Connect Sync allows an authorized attacker to elevate privileges locally.
CVE-2026-65672High7.8—2026-08-11Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65671High7.8—2026-08-11Heap-based buffer overflow in Windows Remote Access API allows an authorized attacker to elevate privileges locally.
CVE-2026-65664High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65661High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65657High7.8—2026-08-11Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-65656High7.8—2026-08-11Improper neutralization of special elements used in a command ('command injection') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64920High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64919High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64915High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64914High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64912High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64911High7.8—2026-08-11Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64910High7.8—2026-08-11Untrusted pointer dereference in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64909High7.8—2026-08-11Integer underflow (wrap or wraparound) in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64908High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64907High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64906High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Access allows an unauthorized attacker to execute code locally.
CVE-2026-64905High7.8—2026-08-11Buffer over-read in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-64904High7.8—2026-08-11Access of resource using incompatible type ('type confusion') in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64903High7.8—2026-08-11Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-64898High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63533High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63532High7.8—2026-08-11Integer overflow or wraparound in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63527High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63526High7.8—2026-08-11Stack-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63525High7.8—2026-08-11Numeric truncation error in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63522High7.8—2026-08-11Incorrect permission assignment for critical resource in Azure SQL Database allows an authorized attacker to elevate privileges locally.
CVE-2026-63519High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63518High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-63515High7.8—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-63513High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
CVE-2026-62909High7.8—2026-08-11Uncaught exception in .NET allows an authorized attacker to elevate privileges locally.
CVE-2026-62894High7.8—2026-08-11Heap-based buffer overflow in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62890High7.8—2026-08-11Heap-based buffer overflow in Windows GDI+ allows an authorized attacker to execute code locally.
CVE-2026-62888High7.8—2026-08-11Use after free in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-62886High7.8—2026-08-11Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-62885High7.8—2026-08-11Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62880High7.8—2026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62877High7.8—2026-08-11Stack-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62876High7.8—2026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62871High7.8—2026-08-11Out-of-bounds write in .NET allows an unauthorized attacker to execute code locally.
CVE-2026-62832High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows User Profile Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62812High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62811High7.8—2026-08-11Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62807High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62803High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62799High7.8—2026-08-11Heap-based buffer overflow in Windows SMB Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62797High7.8—2026-08-11Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62783High7.8—2026-08-11Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62779High7.8—2026-08-11Use after free in Windows Schannel allows an authorized attacker to elevate privileges locally.
CVE-2026-62777High7.8—2026-08-11Missing authentication for critical function in Windows License Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62776High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62772High7.8—2026-08-11Heap-based buffer overflow in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to elevate privileges locally.
CVE-2026-62771High7.8—2026-08-11Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62770High7.8—2026-08-11Heap-based buffer overflow in Windows Shell allows an authorized attacker to elevate privileges locally.
CVE-2026-62768High7.8—2026-08-11Stack-based buffer overflow in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-62761High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows DHCP Server allows an authorized attacker to elevate privileges locally.
CVE-2026-62758High7.8—2026-08-11Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-62755High7.8—2026-08-11Stack-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62754High7.8—2026-08-11Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62752High7.8—2026-08-11Heap-based buffer overflow in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62751High7.8—2026-08-11Integer overflow or wraparound in Windows Projected File System allows an authorized attacker to elevate privileges locally.
CVE-2026-62747High7.8—2026-08-11Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62741High7.8—2026-08-11Integer underflow (wrap or wraparound) in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62739High7.8—2026-08-11Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62737High7.8—2026-08-11Untrusted pointer dereference in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62736High7.8—2026-08-11Heap-based buffer overflow in Windows DHCP Client allows an authorized attacker to elevate privileges locally.
CVE-2026-62735High7.8—2026-08-11Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62733High7.8—2026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62732High7.8—2026-08-11Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62722High7.8—2026-08-11Heap-based buffer overflow in Windows Brokering File System allows an authorized attacker to elevate privileges locally.
CVE-2026-62721High7.8—2026-08-11Insufficient granularity of access control in User-Mode Power Service (UMPS) allows an authorized attacker to elevate privileges locally.
CVE-2026-62719High7.8—2026-08-11Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-62717High7.8—2026-08-11Heap-based buffer overflow in Windows Message Queuing allows an authorized attacker to elevate privileges locally.
CVE-2026-62713High7.8—2026-08-11Heap-based buffer overflow in Windows Cloud Files Mini Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62712High7.8—2026-08-11Heap-based buffer overflow in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62711High7.8—2026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62710High7.8—2026-08-11Heap-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62707High7.8—2026-08-11Use after free in Windows Modern Device Management (MDM) allows an authorized attacker to elevate privileges locally.
CVE-2026-62701High7.8—2026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62700High7.8—2026-08-11Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elevate privileges locally.
CVE-2026-62698High7.8—2026-08-11Numeric truncation error in Microsoft Digest Authentication allows an authorized attacker to elevate privileges locally.
CVE-2026-62696High7.8—2026-08-11Integer underflow (wrap or wraparound) in Windows Program Compatibility Assistant Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62695High7.8—2026-08-11Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-62692High7.8—2026-08-11Heap-based buffer overflow in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-62688High7.8—2026-08-11Heap-based buffer overflow in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-61937High7.8—2026-08-11Integer overflow or wraparound in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-61934High7.8—2026-08-11Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61932High7.8—2026-08-11Access of resource using incompatible type ('type confusion') in Windows DWM Core Library allows an authorized attacker to elevate privileges locally.
CVE-2026-61930High7.8—2026-08-11Heap-based buffer overflow in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61926High7.8—2026-08-11Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61925High7.8—2026-08-11Incorrect authorization in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61923High7.8—2026-08-11Heap-based buffer overflow in Windows Display Enhancement Service allows an authorized attacker to elevate privileges locally.
CVE-2026-61367High7.8—2026-08-11Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61365High7.8—2026-08-11Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61364High7.8—2026-08-11Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61359High7.8—2026-08-11Heap-based buffer overflow in Windows Storage allows an authorized attacker to elevate privileges locally.
CVE-2026-61358High7.8—2026-08-11Improper link resolution before file access ('link following') in Windows Accessibility Infrastructure (ATBroker.exe) allows an authorized attacker to elevate privileges locally.
CVE-2026-61357High7.8—2026-08-11Use after free in Application Information Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61356High7.8—2026-08-11Missing authentication for critical function in Windows Remote Desktop Services allows an authorized attacker to elevate privileges locally.
CVE-2026-61355High7.8—2026-08-11Heap-based buffer overflow in Windows Sensor Data Service allows an authorized attacker to elevate privileges locally.
CVE-2026-61353High7.8—2026-08-11Heap-based buffer overflow in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-61349High7.8—2026-08-11Use after free in Windows Work Folder Service allows an authorized attacker to elevate privileges locally.
CVE-2026-59127High7.8—2026-08-11Integer overflow or wraparound in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-58651High7.8—2026-08-11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
CVE-2026-58650High7.8—2026-08-11Authorization bypass through user-controlled key in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-58641High7.8—2026-08-11Integer overflow or wraparound in .NET allows an unauthorized attacker to elevate privileges locally.
CVE-2026-56174High7.8—2026-08-11Untrusted search path in Windows Narrator Braille allows an authorized attacker to elevate privileges locally.
CVE-2026-54984High7.8—2026-08-11Heap-based buffer overflow in Windows Imaging Component allows an unauthorized attacker to execute code locally.
CVE-2026-54981High7.8—2026-08-11Inclusion of functionality from untrusted control sphere in Visual Studio Code - Python extension allows an unauthorized attacker to bypass a security feature locally.
CVE-2026-42976High7.8—2026-08-11Missing authentication for critical function in Windows RPC API allows an authorized attacker to elevate privileges locally.
CVE-2026-50656High7.8—2026-06-16Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Microsoft Defender publicly referred to as "RoguePlanet ".
CVE-2026-48447High7.7—2026-08-11Lightroom Classic is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-65681High7.5—2026-08-11Null pointer dereference in Windows iSCSI Target Service allows an unauthorized attacker to deny service over a network.
CVE-2026-62901High7.5—2026-08-11Unchecked input for loop condition in .NET allows an unauthorized attacker to deny service over a network.
CVE-2026-62898High7.5—2026-08-11Use after free in Microsoft QUIC allows an unauthorized attacker to disclose information over a network.
CVE-2026-62787High7.5—2026-08-11Use after free in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-61363High7.5—2026-08-11Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-61352High7.5—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-59134High7.5—2026-08-11Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
CVE-2026-59132High7.5—2026-08-11Null pointer dereference in Windows TCP/IP allows an unauthorized attacker to deny service over a network.
CVE-2026-54113High7.5—2026-08-11Allocation of resources without limits or throttling in Windows Kernel allows an unauthorized attacker to deny service over a network.
CVE-2026-58612High7.4—2026-08-11Server-side request forgery (ssrf) in Microsoft PowerShell Core allows an unauthorized attacker to disclose information over a network.
CVE-2026-70355High7.3—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
CVE-2026-68821High7.3—2026-08-11Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-64900High7.3—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62914High7.3—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Exchange Server allows an authorized attacker to perform spoofing over a network.
CVE-2026-59119High7.3—2026-08-11Incorrect default permissions in Microsoft PowerShell allows an authorized attacker to elevate privileges locally.
CVE-2026-11980High7.3—2026-07-30IBM Aspera Desktop App 1.0.5 through 1.0.19 can allow arbitrary code execution by loading DLL files at start-up.
CVE-2026-62910High7.2—2026-08-11Improper control of resource identifiers ('resource injection') in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-47299High7.2—2026-08-11Improper neutralization of special elements used in a command ('command injection') in Azure Monitor Agent allows an authorized attacker to elevate privileges over a network.
CVE-2026-65675High7.1—2026-08-11No cwe for this issue in Visual Studio Code CoPilot Chat Extension allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-70307High7.0—2026-08-11Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-68820High7.0KEV2026-08-11Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-65788High7.0—2026-08-11Use after free in Desktop Window Manager allows an authorized attacker to elevate privileges locally.
CVE-2026-65783High7.0—2026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65782High7.0—2026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65781High7.0—2026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65780High7.0—2026-08-11Double free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65779High7.0—2026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65778High7.0—2026-08-11Use after free in Windows Autopilot allows an authorized attacker to elevate privileges locally.
CVE-2026-65776High7.0—2026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-65678High7.0—2026-08-11Use after free in Windows Win32K allows an authorized attacker to elevate privileges locally.
CVE-2026-62908High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Backup Engine allows an authorized attacker to elevate privileges locally.
CVE-2026-62897High7.0—2026-08-11Integer overflow or wraparound in .NET Framework allows an unauthorized attacker to execute code locally.
CVE-2026-62892High7.0—2026-08-11Use after free in Capability Access Management Service (camsvc) allows an authorized attacker to elevate privileges locally.
CVE-2026-62788High7.0—2026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62780High7.0—2026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62774High7.0—2026-08-11Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62773High7.0—2026-08-11Use after free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62766High7.0—2026-08-11Double free in Windows Kerberos allows an authorized attacker to elevate privileges locally.
CVE-2026-62753High7.0—2026-08-11Heap-based buffer overflow in Windows HTTP.sys allows an authorized attacker to elevate privileges locally.
CVE-2026-62749High7.0—2026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-62748High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62734High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62729High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62728High7.0—2026-08-11Time-of-check time-of-use (toctou) race condition in Windows Common Log File System Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62726High7.0—2026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62725High7.0—2026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62724High7.0—2026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62723High7.0—2026-08-11Use after free in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-62705High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-62693High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows MIDI Service Module allows an authorized attacker to elevate privileges locally.
CVE-2026-62690High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Push Notifications allows an authorized attacker to elevate privileges locally.
CVE-2026-61939High7.0—2026-08-11Use after free in Winlogon allows an authorized attacker to elevate privileges locally.
CVE-2026-61938High7.0—2026-08-11Use after free in Windows Installer allows an authorized attacker to elevate privileges locally.
CVE-2026-61929High7.0—2026-08-11Use after free in Windows Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-61927High7.0—2026-08-11Use after free in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-61366High7.0—2026-08-11Double free in Windows Network Connection Broker allows an authorized attacker to elevate privileges locally.
CVE-2026-61361High7.0—2026-08-11Use after free in Windows DHCP Client allows an authorized attacker to execute code locally.
CVE-2026-61348High7.0—2026-08-11Use after free in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
CVE-2026-61346High7.0—2026-08-11Use after free in Windows Graphics Kernel allows an authorized attacker to elevate privileges locally.
CVE-2026-59126High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Event Logging Service allows an authorized attacker to elevate privileges locally.
CVE-2026-59125High7.0—2026-08-11Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges locally.
CVE-2026-59122High7.0—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Telephony Service allows an authorized attacker to elevate privileges locally.
CVE-2026-50472High7.0—2026-08-11Heap-based buffer overflow in Windows LUAFV allows an authorized attacker to elevate privileges locally.
CVE-2026-6851High7.0—2026-07-14An Improper link resolution before file access ('link following') vulnerability in the File Shredder module as used in Bitdefender Total Security and Internet Security on Windows allows a less-privileged local user to elevate rights by lev…
CVE-2026-62702Medium6.8—2026-08-11Null pointer dereference in Windows Graphics Kernel allows an unauthorized attacker to deny service over a network.
CVE-2026-62699Medium6.8—2026-08-11Heap-based buffer overflow in Windows Universal Disk Format File System Driver (UDFS) allows an unauthorized attacker to execute code with a physical attack.
CVE-2026-65680Medium6.7—2026-08-11Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.
CVE-2026-70330Medium6.7—2026-08-11Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-70304Medium6.7—2026-08-11Heap-based buffer overflow in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65799Medium6.7—2026-08-11Integer overflow or wraparound in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65798Medium6.7—2026-08-11Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65797Medium6.7—2026-08-11Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-65795Medium6.7—2026-08-11Relative path traversal in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-62883Medium6.7—2026-08-11Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-62881Medium6.7—2026-08-11Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-62769Medium6.7—2026-08-11Numeric truncation error in Windows DNS allows an authorized attacker to elevate privileges locally.
CVE-2026-61920Medium6.6—2026-08-11Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an authorized attacker to execute code over a network.
CVE-2026-70328Medium6.5—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-70327Medium6.5—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information over a network.
CVE-2026-66301Medium6.5—2026-08-11Exposure of sensitive information to an unauthorized actor in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to disclose information over a network.
CVE-2026-65813Medium6.5—2026-08-11Server-side request forgery (ssrf) in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2026-65806Medium6.5—2026-08-11Missing authorization in Azure CycleCloud allows an authorized attacker to disclose information over a network.
CVE-2026-65794Medium6.5—2026-08-11Buffer over-read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-65785Medium6.5—2026-08-11Uncontrolled resource consumption in Windows DHCP Client allows an unauthorized attacker to deny service over an adjacent network.
CVE-2026-65769Medium6.5—2026-08-11Exposure of sensitive information to an unauthorized actor in Microsoft Teams Mobile allows an unauthorized attacker to disclose information over a network.
CVE-2026-63516Medium6.5—2026-08-11Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-63512Medium6.5—2026-08-11Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to perform tampering over a network.
CVE-2026-62915Medium6.5—2026-08-11Missing authorization in Microsoft Exchange Server allows an authorized attacker to bypass a security feature over a network.
CVE-2026-62912Medium6.5—2026-08-11Deserialization of untrusted data in Microsoft Exchange Server allows an authorized attacker to deny service over a network.
CVE-2026-62902Medium6.5—2026-08-11Inclusion of functionality from untrusted control sphere in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-62839Medium6.5—2026-08-11Insufficiently protected credentials in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62837Medium6.5—2026-08-11Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.
CVE-2026-62814Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62782Medium6.5—2026-08-11Out-of-bounds read in Windows SMB Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-62750Medium6.5—2026-08-11Partial string comparison in Windows HTTP Protocol Stack allows an unauthorized attacker to perform tampering over an adjacent network.
CVE-2026-62745Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62742Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62720Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62718Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62716Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62715Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-62714Medium6.5—2026-08-11Integer underflow (wrap or wraparound) in Windows DHCP Server allows an unauthorized attacker to disclose information over an adjacent network.
CVE-2026-61924Medium6.5—2026-08-11Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61921Medium6.5—2026-08-11Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61918Medium6.5—2026-08-11Out-of-bounds read in Remote Desktop Client allows an unauthorized attacker to disclose information over a network.
CVE-2026-61345Medium6.5—2026-08-11Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
CVE-2026-59138Medium6.5—2026-08-11Null pointer dereference in Microsoft Remote Registry Service allows an authorized attacker to deny service over a network.
CVE-2026-58639Medium6.5—2026-08-11Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-47285Medium6.5—2026-08-11Improper neutralization of special elements used in a command ('command injection') in Visual Studio Code allows an unauthorized attacker to disclose information over a network.
CVE-2026-40375Medium6.5—2026-08-11Missing authorization in Dynamics Business Central allows an authorized attacker to disclose information over a network.
CVE-2026-62708Medium6.4—2026-08-11Use after free in Windows Kernel allows an unauthorized attacker to elevate privileges with a physical attack.
CVE-2026-58643Medium6.1—2026-07-16Improper neutralization of input during web page generation ('cross-site scripting') in Windows Admin Center allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-68819Medium5.9—2026-08-11Buffer over-read in Windows Network File System allows an unauthorized attacker to deny service over a network.
CVE-2026-62900Medium5.9—2026-08-11Improper removal of sensitive information before storage or transfer in .NET allows an unauthorized attacker to disclose information over a network.
CVE-2026-62899Medium5.9—2026-08-11Inconsistent interpretation of http requests ('http request/response smuggling') in .NET allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-10571Medium5.7—2026-08-13IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is affected by a denial of service caused by insecure deserialization.
CVE-2026-59131Medium5.6—2026-08-11No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-59130Medium5.6—2026-08-11No cwe for this issue in AMD Zen allows an authorized attacker to disclose information locally.
CVE-2026-72971Medium5.5—2026-08-11Improper link resolution before file access ('link following') in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to perform tampering locally.
CVE-2026-70348Medium5.5—2026-08-11Improper link resolution before file access ('link following') in Windows Management Services allows an authorized attacker to deny service locally.
CVE-2026-70325Medium5.5—2026-08-11Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70323Medium5.5—2026-08-11Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70322Medium5.5—2026-08-11Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70320Medium5.5—2026-08-11Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70319Medium5.5—2026-08-11Improper input validation in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-70318Medium5.5—2026-08-11Improper input validation in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-70317Medium5.5—2026-08-11Use of uninitialized resource in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70316Medium5.5—2026-08-11Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70315Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70314Medium5.5—2026-08-11Improper input validation in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-70312Medium5.5—2026-08-11Improper input validation in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-70310Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-68813Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68809Medium5.5—2026-08-11Incomplete cleanup in Microsoft Office PowerPoint allows an unauthorized attacker to disclose information locally.
CVE-2026-68808Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68802Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68799Medium5.5—2026-08-11Use of uninitialized resource in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-68797Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
CVE-2026-66810Medium5.5—2026-08-11Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-66809Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-66806Medium5.5—2026-08-11Off-by-one error in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-65784Medium5.5—2026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-65662Medium5.5—2026-08-11Out-of-bounds read in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-64917Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-64899Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63531Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63530Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63529Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63528Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63524Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-63521Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to disclose information locally.
CVE-2026-63517Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62887Medium5.5—2026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62842Medium5.5—2026-08-11Out-of-bounds read in Microsoft Office allows an unauthorized attacker to disclose information locally.
CVE-2026-62798Medium5.5—2026-08-11Untrusted pointer dereference in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62796Medium5.5—2026-08-11Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62793Medium5.5—2026-08-11Buffer over-read in Windows NTFS allows an authorized attacker to disclose information locally.
CVE-2026-62786Medium5.5—2026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62775Medium5.5—2026-08-11Incorrect authorization in Windows Container Isolation FS Filter Driver (unionfs.sys) allows an authorized attacker to disclose information locally.
CVE-2026-62746Medium5.5—2026-08-11Buffer over-read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62743Medium5.5—2026-08-11Out-of-bounds read in Windows Win32K allows an authorized attacker to disclose information locally.
CVE-2026-62740Medium5.5—2026-08-11Use of uninitialized resource in Windows Imaging Component allows an authorized attacker to disclose information locally.
CVE-2026-62738Medium5.5—2026-08-11Out-of-bounds read in Windows Management Instrumentation allows an authorized attacker to disclose information locally.
CVE-2026-62730Medium5.5—2026-08-11Buffer over-read in Windows Wired AutoConfig Service allows an authorized attacker to disclose information locally.
CVE-2026-62709Medium5.5—2026-08-11Use of uninitialized resource in Windows GDI+ allows an authorized attacker to disclose information locally.
CVE-2026-62703Medium5.5—2026-08-11Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-61936Medium5.5—2026-08-11Missing authorization in Windows Defender Firewall Service allows an authorized attacker to bypass a security feature locally.
CVE-2026-61933Medium5.5—2026-08-11Out-of-bounds read in Windows DWM Core Library allows an authorized attacker to disclose information locally.
CVE-2026-61928Medium5.5—2026-08-11Cleartext storage of sensitive information in Windows Hello allows an authorized attacker to perform tampering locally.
CVE-2026-61360Medium5.5—2026-08-11Untrusted pointer dereference in Windows GDI allows an authorized attacker to disclose information locally.
CVE-2026-61347Medium5.5—2026-08-11Buffer over-read in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-59137Medium5.5—2026-08-11Use of uninitialized resource in Windows Event Logging Service allows an authorized attacker to disclose information locally.
CVE-2026-59136Medium5.5—2026-08-11Use of uninitialized resource in Microsoft COM for Windows allows an authorized attacker to disclose information locally.
CVE-2026-59135Medium5.5—2026-08-11Weak authentication in Microsoft Windows Search Component allows an authorized attacker to disclose information locally.
CVE-2026-59128Medium5.5—2026-08-11Out-of-bounds read in Windows Encrypting File System (EFS) allows an authorized attacker to disclose information locally.
CVE-2026-54123Medium5.5—2026-08-11Exposure of sensitive information to an unauthorized actor in Microsoft Defender for Endpoint allows an authorized attacker to disclose information locally.
CVE-2026-49177Medium5.5—2026-07-14Out-of-bounds read in Windows TCP/IP allows an authorized attacker to disclose information locally.
CVE-2026-70339Medium5.4—2026-08-11Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.
CVE-2026-65777Medium5.3—2026-08-11Inadequate encryption strength in Windows Active Directory allows an authorized attacker to bypass a security feature over a network.
CVE-2026-62757Medium5.3—2026-08-11Improper verification of cryptographic signature in Windows Schannel allows an unauthorized attacker to bypass a security feature over a network.
CVE-2026-3482Medium5.3—2026-07-22IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.5_2,  6.2.1.0 through 6.2.1.1_2, and  6.2.2.0 through 6.2.2.0_1 could allow an unauthenticated user to read sensitive information by bypassing authentication t…
CVE-2026-61368Medium5.0—2026-08-11Heap-based buffer overflow in Windows Hyper-V allows an authorized attacker to disclose information locally.
CVE-2026-64922Medium4.6—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64916Medium4.6—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64902Medium4.6—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-64897Medium4.6—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62917Medium4.6—2026-08-11Improper input validation in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-62829Medium4.6—2026-08-11Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.
CVE-2026-61350Medium4.6—2026-08-11Buffer over-read in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack.
CVE-2026-62882Medium4.3—2026-08-11Insufficiently protected credentials in Microsoft Office Outlook allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-17706Medium4.3—2026-07-30Insufficient validation of untrusted input in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2026-73298———2026-08-12The Microsoft Container Migration Solution Accelerator is a multi-service application that provides a multi-agent, AI-driven migration solution for moving container service configurations to Azure Kubernetes Service.
CVE-2026-73297———2026-08-12Microsoft UFO open-source framework for intelligent automation across devices and platforms.

Other vendors (3333 CVEs across 855 vendors)

Linux · 484 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68426Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: xfrm: fix stale skb->prev after async crypto steals a GSO segment skb_gso_segment() leaves the segment list head with ->prev pointing at the last segment, an invariant v…
CVE-2026-68388Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: smb/client: handle overlapping allocated ranges in fallocate smb3_simple_fallocate_range() can skip holes when an allocated range returned by the server starts before th…
CVE-2026-68385Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: s390/checksum: Fix csum_partial() without vector facility Currently csum_partial() calls csum_copy() with copy=false and dst=NULL.
CVE-2026-68381Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: pin conn during async oplock break notification smb2_oplock_break_noti() and smb2_lease_break_noti() store a ksmbd_conn pointer in an async ksmbd_work and then qu…
CVE-2026-68302Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: amt: re-read skb header pointers after every pull Several AMT receive and transmit paths cache a pointer into the skb head (ip_hdr(), ipv6_hdr(), eth_hdr() or the AMT me…
CVE-2026-68300Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: sctp: auth: verify auth requirement when auth_chunk is NULL sctp_auth_chunk_verify() returns true unconditionally when chunk->auth_chunk is NULL, silently skipping authe…
CVE-2026-68170Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: mptcp: fix stale skb->sk reference on subflow close The backlog list is updated by mptcp_data_ready() under mptcp_data_lock().
CVE-2026-68161Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: sctp: close UDP tunnel sockets during netns teardown proc_sctp_do_udp_port() starts per-net SCTP UDP tunneling sockets when net.sctp.udp_port is set, and stops/restarts…
CVE-2026-68160Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ceph: fix pre-auth out-of-bounds read on snaptrace in ceph_handle_caps() ceph_handle_caps() reads snap_trace_len from the wire-format ceph_mds_caps header and uses it un…
CVE-2026-68159Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: bound pg_{temp,upmap,upmap_items} length to CEPH_PG_MAX_SIZE __decode_pg_temp() decodes an user-controlled length but only rejects values large enough to overfl…
CVE-2026-68158Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: Fix multiplication overflow in decode_new_up_state_weight() If a message of type CEPH_MSG_OSD_MAP contains a (maliciously) corrupted osdmap, out-of-bounds memor…
CVE-2026-68156Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: refresh auth->authorizer_buf{,_len} after authorizer update ceph_x_create_authorizer() caches au->buf->vec.iov_base and au->buf->vec.iov_len in struct ceph_auth…
CVE-2026-68154Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: reject zero bucket types in crush_decode CRUSH bucket type 0 is reserved for devices.
CVE-2026-68144Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: phonet: pep: fix use-after-free in pep_get_sb() pep_get_sb() doesn't consider that pskb_may_pull() might have relocated the skb data, and continue to access the older po…
CVE-2026-68137Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/x25: fix use-after-free in x25_kill_by_neigh() x25_kill_by_neigh() walks the global X.25 socket list looking for sockets attached to a terminating neighbour.
CVE-2026-68136Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: gro: fix double aggregation of flush-marked skbs Commit 0ab03f353d36 ("net-gro: Fix GRO flush when receiving a GSO packet.") added a flush check to skb_gro_receive(…
CVE-2026-68127Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ila: reload IPv6 header after pskb_may_pull in checksum adjust ila_csum_adjust_transport() caches ip6h = ipv6_hdr(skb) before calling pskb_may_pull().
CVE-2026-68123Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: openvswitch: fix GSO userspace truncation underflow OVS_ACTION_ATTR_TRUNC currently stores a delta from the original skb length in OVS_CB(skb)->cutlen.
CVE-2026-68117Critical9.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tipc: clear sock->sk on the failed-insert path in tipc_sk_create() When tipc_sk_create() fails to insert the new socket (tipc_sk_insert() returns non-zero), its error pa…
CVE-2026-64232Critical9.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request blk_insert_cloned_request() already recomputes nr_phys_segments against the bottom queue, because "th…
CVE-2026-64162Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: idpf: fix read_dev_clk_lock spinlock init in idpf_ptp_init() In idpf_ptp_init(), read_dev_clk_lock is initialized after ptp_schedule_worker() had already been called (an…
CVE-2026-64136Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: smb: client: protect tc_count increment in smb2_find_smb_sess_tcon_unlocked() Commit 96c4af418586 ("cifs: Fix locking usage for tcon fields") refactored cifs code to cha…
CVE-2026-64132Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: refresh hdr pointer before ioam6_event() Reported by Sashiko: In ipv6_hop_ioam(), the hdr pointer is initialized to point into the skb's linear data buffer.
CVE-2026-64125Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: bcmgenet: keep RBUF EEE/PM disabled Setting RBUF_EEE_EN | RBUF_PM_EN in RBUF_ENERGY_CTRL breaks the RX path on GENET hardware once MAC EEE becomes active.
CVE-2026-64122Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Fix use-after-free in mlx5e_tx_reporter_timeout_recover mlx5e_tx_reporter_timeout_recover() accesses sq->netdev after mlx5e_safe_reopen_channels() has torn do…
CVE-2026-64113Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ixgbevf: fix use-after-free in VEPA multicast source pruning ixgbevf_clean_rx_irq() prunes frames whose source MAC matches the VF's own address (VEPA multicast workaroun…
CVE-2026-64102Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: Reject MPA FPDU length underflow before signed receive math A malicious connected siw peer can send an iWARP FPDU whose MPA length field (c_hdr->mpa_len, 16 bi…
CVE-2026-64091Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix TOCTOU race for reported vlans The local TT based TVLV is generated by first checking the number of VLANs which have at least one TT entry.
CVE-2026-64089Critical9.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative last_changeset_len batadv_piv_tt::last_changeset_len len was declared as s16, but the field is never intended to hold a negative value.
CVE-2026-53175Critical9.8—2026-06-25In the Linux kernel, the following vulnerability has been resolved: inet: frags: fix use-after-free caused by the fqdir_pre_exit() flush On netns teardown, fqdir_pre_exit() walks the fqdir rhashtable and flushes every fragment queue that…
CVE-2026-68124Critical9.6—2026-08-10In the Linux kernel, the following vulnerability has been resolved: mctp: serial: handle zero-length frames to prevent rx buffer overflow The MCTP serial receive state machine reads a frame length byte in mctp_serial_push_header() case 2…
CVE-2026-68431Critical9.1—2026-08-12In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate minimum PDU size for transform requests The receive path applies the minimum SMB2 PDU size check only when ProtocolId is SMB2_PROTO_NUMBER.
CVE-2026-68343Critical9.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: smb: client: validate DFS referral PathConsumed parse_dfs_referrals() validates that the response contains the fixed referral entry array and, on for-next, the per-refer…
CVE-2026-68083Critical9.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix path resolution in ksmbd_vfs_kern_path_create The SMB2 open lookup is rooted at the share with LOOKUP_BENEATH, but the create/mkdir/hardlink sink is not: ksmb…
CVE-2026-64106Critical9.0—2026-07-19In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic-its: Reject restored DTE with out-of-range num_eventid_bits Userspace can restore an ITS Device Table Entry whose Size field encodes more EventID bits t…
CVE-2026-68454High8.8—2026-08-13In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pci: Fix handling of AIF enable without AISB When a guest seeks to register IRQs without a summary bit specified, ensure that the associated GAITE then stores…
CVE-2026-68432High8.8—2026-08-12In the Linux kernel, the following vulnerability has been resolved: vxlan: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the sticky underlay netns vxlan->ne…
CVE-2026-68409High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: defer link RX stats percpu free to RCU sta_remove_link() frees a removed MLO link's RX stats percpu buffer right away, but defers only the link container…
CVE-2026-68397High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/iucv: take a reference on the socket found in afiucv_hs_rcv() afiucv_hs_rcv() looks up the destination socket under iucv_sk_list.lock, drops the lock, and then passe…
CVE-2026-68393High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: extend conn_hash lookup critical sections Using RCU-protected pointers outside the critical sections without refcount is incorrect and may result to…
CVE-2026-68390High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: hold hdev->lock for hci_conn_params lookups hci_conn_params_lookup requires hdev->lock be held, otherwise the list iteration or param access is not…
CVE-2026-68389High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_qca: Clear memdump state on invalid dump size qca_controller_memdump() allocates qca->qca_memdump before processing the first dump packet.
CVE-2026-68354High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: firewire: net: Fix fragmented datagram reassembly fwnet_frag_new() keeps a sorted list of received fragments for a partial datagram.
CVE-2026-68341High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ovpn: fix use after free in unlock_ovpn() unlock_ovpn() iterates over the release_list using llist_for_each_entry() and drops the peer reference inside the loop body via…
CVE-2026-68329High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Wait for completion instead of returning early in iommu_completion_wait() need_sync is a per-IOMMU flag shared by all domains and devices behind that IOMMU.
CVE-2026-68326High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: bound uAP association event IEs to the event buffer mwifiex_process_uap_event() handles EVENT_UAP_STA_ASSOC by exposing the (re)association request IEs th…
CVE-2026-68294High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: qrtr: restrict socket creation to the initial network namespace QRTR keeps its entire port and node state in module-global variables that are not partitioned per ne…
CVE-2026-68283High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free freeing trigger private data Commit 61d445af0a7c ("tracing: Add bulk garbage collection of freeing event_trigger_data") moved the kfree() of…
CVE-2026-68240High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: publish dpagemap early to avoid device mapping leak on error drm_gpusvm_get_pages() only stored the local dpagemap into svm_pages->dpagemap on the success pa…
CVE-2026-68199High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB access from firmware ADDBA window size aggr_recv_addba_req_evt() logs a debug message when the firmware-supplied win_sz is outside [AGGR_WIN_SZ_MIN…
CVE-2026-68198High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix use-after-free in aggr_reset_state() The aggr_reset_state() function uses timer_delete() (non-synchronous) for the aggregation timer before proceeding…
CVE-2026-68192High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: make release_scratchbuffers idempotent brcmf_pcie_release_scratchbuffers() frees the shared.scratch and shared.ringupd DMA buffers with dma_free_coherent…
CVE-2026-68142High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: geneve: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the sticky underlay netns geneve->…
CVE-2026-68140High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/iucv: fix use-after-free of a severed iucv_path af_iucv queues not-yet-received message notifications on iucv->message_q, each holding a raw pointer to the connectio…
CVE-2026-68128High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in ice_parser_profile_init set_bit(rslt->ptype, prof->ptypes) operates on a DECLARE_BITMAP of ICE_FLOW_PTYPE_MAX (1024) bits.
CVE-2026-68125High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: mac802154: llsec: reject frames shorter than the authentication tag llsec_do_decrypt_auth() computes the associated-data length for the AEAD request as assoclen += dat…
CVE-2026-68108High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: fix integer overflow in image size Fix a security vulnerability where malicious VCE command streams with oversized dimensions (e.g.
CVE-2026-68107High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vcn4: avoid rereading IB param length Reuse the parameter length returned by vcn_v4_0_enc_find_ib_param() instead of rereading it from the IB.
CVE-2026-68098High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: bound DACL dedup walk to copied ACEs set_ntacl_dacl() can stop copying ACEs before consuming the full input DACL when size accounting overflows.
CVE-2026-68097High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate ACE size against SID sub-authorities set_ntacl_dacl() validates sid.num_subauth before copying an ACE, but does not verify that the declared ACE size con…
CVE-2026-68091High8.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: HID: wacom: stop hardware after post-start probe failures wacom_parse_and_register() starts HID hardware before registering inputs and initializing pad LEDs/remotes.
CVE-2026-64178High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: Bluetooth: bnep: Fix UAF read of dev->name bnep_add_connection() needs to keep holding the bnep_session_sem while reading dev->name (just like bnep_get_connlist() does)…
CVE-2026-64124High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: devmem: reject dma-buf bind with non-page-aligned size or SG length net_devmem_bind_dmabuf() trusts dmabuf->size and sg_dma_len() to be PAGE_SIZE multiples without…
CVE-2026-64115High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: vsock/vmci: fix UAF when peer resets connection during handshake vmci_transport_recv_connecting_server() returned err = 0 for a peer RST in its default switch arm: err…
CVE-2026-64109High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: af_unix: Fix UAF read of tail->len in unix_stream_data_wait() unix_stream_data_wait() does skb_peek_tail(&sk->sk_receive_queue) without holding any lock that prevents SK…
CVE-2026-64096High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: mcast: fix use-after-free in orig_node RCU release batadv_mcast_purge_orig() removes entries from RCU-protected hlists but does not wait for an RCU grace per…
CVE-2026-64093High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: directly shut down timer on cleanup batadv_tp_sender_cleanup() was calling timer_delete_sync() followed by timer_delete() to guard against the time…
CVE-2026-64088High8.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: fix negative tt_buff_len batadv_orig_node::tt_buff_len was declared as s16, but the field is never intended to hold a negative value.
CVE-2026-64104High8.7—2026-07-19In the Linux kernel, the following vulnerability has been resolved: virt: sev-guest: Explicitly leak pages in unknown state When set_memory_{encrypted,decrypted}() fail, the user cannot know at which point the function failed, meaning th…
CVE-2026-68433High8.6—2026-08-12In the Linux kernel, the following vulnerability has been resolved: libceph: bound get_version reply decode to front len handle_get_version_reply() uses msg->front_alloc_len as the decode boundary for MON_GET_VERSION_REPLY.
CVE-2026-68371High8.4—2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: musb: omap2430: Do not put borrowed of_node in probe omap2430_probe() stores pdev->dev.of_node in a local np variable.
CVE-2026-68179High8.4—2026-08-10In the Linux kernel, the following vulnerability has been resolved: misc: nsm: only unlock nsm_dev on post-lock error paths nsm_dev_ioctl() jumps to the common out label even when the initial copy_from_user() fails before nsm->lock has b…
CVE-2026-68149High8.4—2026-08-10In the Linux kernel, the following vulnerability has been resolved: fs: preserve ACL_DONT_CACHE state in forget_cached_acl() The ACL_DONT_CACHE state is meant to be a constant state for the inode for filesystems that want to opt out of p…
CVE-2026-64118High8.4—2026-07-19In the Linux kernel, the following vulnerability has been resolved: qed: fix double free in qed_cxt_tables_alloc() If one of the later PF or VF CID bitmap allocations fails, qed_cid_map_alloc() jumps to cid_map_fail and frees the previou…
CVE-2026-68352High8.3—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware IE lengths in connect event The firmware-controlled beacon_ie_len, assoc_req_len, and assoc_resp_len fields in ath6kl_wmi_connec…
CVE-2026-68196High8.3—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: wilc1000: validate assoc response length before subtracting header wilc_parse_assoc_resp_info() computes the trailing IE length as ies_len = buffer_len - sizeof(…
CVE-2026-68118High8.2—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tcp: challenge ACK for non-exact RST in SYN-RECEIVED The SYN-RECEIVED request-socket path in tcp_check_req() accepts an in-window RST without requiring SEG.SEQ to exactl…
CVE-2026-68376High8.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_hmacs array size in struct sctp_cookie The auth_hmacs array in struct sctp_cookie is supposed to store a complete SCTP_AUTH_HMAC_ALGO parameter, which con…
CVE-2026-68373High8.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: at76c50x-usb: avoid length underflow in at76_guess_freq() at76_guess_freq() checks only that the received frame is at least a bare 802.11 header (24 bytes) before…
CVE-2026-68353High8.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath6kl: fix OOB read from firmware num_msg in TX complete handler The firmware-controlled num_msg field (u8, 0-255) drives the loop in ath6kl_wmi_tx_complete_event…
CVE-2026-68100High8.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: validate num_subauth when copying ACE in set_ntacl_dacl set_ntacl_dacl() copies each ACE from the attacker-controlled stored security descriptor verbatim into the…
CVE-2026-64235High8.1—2026-07-24In the Linux kernel, the following vulnerability has been resolved: x86/ftrace: Relocate %rip-relative percpu refs in dynamic trampolines With CONFIG_CALL_DEPTH_TRACKING enabled on an x86 retbleed-affected platform (eg: Skylake), with re…
CVE-2026-64223High8.1—2026-07-24In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: consume only present negotiated TTLM maps ieee80211_tid_to_link_map_size_ok() validates negotiated TTLM elements against the number of link-map entries i…
CVE-2026-64176High8.1—2026-07-19In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: fix driver-set TX rates on old devices On old devices such as 7265D, rates are still encoded in version 1 format, which doesn't use the CCK/OFDM rate…
CVE-2026-68085High8.0—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_uart: clear HCI_UART_SENDING when write_work is canceled HCI_UART_SENDING bit in tx_state means write_work is pending and blocks queueing it again.
CVE-2026-68116High7.9—2026-08-10In the Linux kernel, the following vulnerability has been resolved: vxlan: mdb: Fix source list corruption on a failed replace When replacing the source list of an MDB remote entry, all existing sources are first marked for deletion and…
CVE-2026-68452High7.8—2026-08-13In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA AES cipher key requests cca_cipher2protkey() derives the copy length for the CPRB parameter block directly from the length field in…
CVE-2026-68451High7.8—2026-08-13In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Validate length for CCA ECC private key requests cca_ecc2protkey() derives the copy length for the CPRB parameter block directly from the length field in th…
CVE-2026-68446High7.8—2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx: Validate vmw_surface_metadata::array_size This field comes from userspace and should be validated against specific limits depending on which Shader Model (SM…
CVE-2026-68445High7.8—2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Prevent shader BO mappings from becoming writable vc4_gem_object_mmap() rejects a writable mapping of a validated shader BO, but leaves VM_MAYWRITE set.
CVE-2026-68442High7.8—2026-08-12In the Linux kernel, the following vulnerability has been resolved: btrfs: don't propagate EXTENT_FLAG_LOGGING to split extent maps When btrfs_drop_extent_map_range() splits an extent map, the new split maps inherit the original map's fl…
CVE-2026-68440High7.8—2026-08-12In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes into the caller buffer, which ethtool allocat…
CVE-2026-68427High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: gpu: host1x: Fix use-after-free in host1x_bo_clear_cached_mappings __host1x_bo_unpin() drops the last reference to the mapping and frees it, so we can't dereference mapp…
CVE-2026-68419High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent rereg_mr for non-mem regions When a QP/CQ/SRQ is created, a two step process is used where the buffer is allocated in userspace and explicitly regist…
CVE-2026-68417High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: RDMA/siw: publish QP after initialization siw_create_qp() currently calls siw_qp_add() before the queues, CQ pointers, state, completion, and device list entry are ready.
CVE-2026-68415High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: xfrm: clear mode callbacks after failed mode setup xfrm_state_gc_task can run long after a failed IPTFS state setup.
CVE-2026-68404High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: use wiphy work for socket owner autodisconnect nl80211_netlink_notify() walks the cfg80211 wireless device list when a NETLINK_GENERIC socket is released.
CVE-2026-68401High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix out-of-bound writes in ffa_setup_and_transmit() Sashiko (locally) reports multiple out-of-bound issues in ffa_setup_and_transmit: 1) Writing ep_me…
CVE-2026-68400High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix Endpoint Memory Access Descriptor offset calculation Use the descriptor's `ep_mem_offset` to calculate the start of the endpoint memory access arr…
CVE-2026-68399High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UAF in sock clone early bailouts Similar to recent commit 9b51a6155d14 ("bpf,fork: wipe ->bpf_storage before bailouts that access it"), sk_clone() performs an i…
CVE-2026-68398High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ppp: defer channel free to an RCU grace period to fix pppol2tp RX UAF pppol2tp_recv() runs in the L2TP UDP-encap softirq RX path: l2tp_udp_encap_recv() -> l2tp_recv_co…
CVE-2026-68394High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: revalidate LOAD_CONN_PARAM queued update MGMT_OP_LOAD_CONN_PARAM queues conn_update_sync() when a single parameter update changes an existing LE central…
CVE-2026-68392High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: fix locking in unpair_device/disconnect_sync Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF.
CVE-2026-68391High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: mgmt: hold reference for hci_conn in mgmt_pending_cmds Dereferencing RCU-protected pointers outside critical sections is invalid and may lead to UAF.
CVE-2026-68387High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: can: raw: add locking for raw flags bitfield With commit 890e5198a6e5 ("can: raw: use bitfields to store flags in struct raw_sock") the formerly separate integer values…
CVE-2026-68384High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Fix VF CCS attach/detach race with in-flight BO moves xe_bo_move() attaches VF CCS read/write batch buffers (BBs) to a BO after it transitions NULL/SYSTEM ->…
CVE-2026-68383High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Keep scheduler timeline name alive The scheduler keeps a pointer to the timeline name, but q->name is freed with the exec queue while scheduler fences can st…
CVE-2026-68382High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Hold device ref until queue teardown completes GuC exec queue destruction can run asynchronously.
CVE-2026-68380High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: accel/amdxdna: Fix use-after-free of mm_struct in job scheduler amdxdna_cmd_submit() stores current->mm in job->mm without holding any reference.
CVE-2026-68377High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/sched: act_tunnel_key: Defer dst_release to RCU callback Fix a race-condition use-after-free in tunnel_key_release_params().
CVE-2026-68374High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: core: sysfs: add lock to bos_descriptors_read() Add a lock to the function bos_descriptors_read().
CVE-2026-68370High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: gadget: dummy_hcd: prevent fifo_req reuse during giveback dummy_hcd embeds a single shared usb_request (dum->fifo_req) that the "emulated single-request FIFO" fast-…
CVE-2026-68338High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/packet: avoid fanout hook re-registration after unregister packet_set_ring() temporarily detaches a socket from packet delivery while reconfiguring its ring.
CVE-2026-68335High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: rds: drop incoming messages that cross network namespace boundaries rds_find_bound() looks up the destination socket using a global rhashtable keyed solely on (addr, por…
CVE-2026-68330High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix DMA direction for NPU mailbox buffer airoha_npu_send_msg() always maps the mailbox buffer with DMA_TO_DEVICE, but some callers expect the NPU to write r…
CVE-2026-68323High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tipc: serialize udp bearer replicast list updates tipc_udp_rcast_add() and cleanup_bearer() both update ub->rcast.list with list_add_rcu() / list_del_rcu(), but nothing…
CVE-2026-68316High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: accel: ethosu: Fix element size accounting for cmd stream validation There are 2 issues with the element size handling in the command stream validation which result in t…
CVE-2026-68314High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: mctp i3c: clean up notifier and buses if driver register fails mctp_i3c_mod_init() registers the I3C bus notifier and then walks the existing buses with i3c_for_eac…
CVE-2026-68305High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/vf: Add drm_dev guards when detaching CCS read/write buffers CCS read/write buffers are freed during BO destruction.
CVE-2026-68298High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix SVM leak on resv obj alloc failure in xe_vm_create() Commit 9e9787414882 ("drm/xe/userptr: replace xe_hmm with gpusvm") made xe_svm_init() unconditional i…
CVE-2026-68297High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tipc: fix u16 MTU truncation in media and bearer MTU validation Both TIPC_NL_MEDIA_SET and TIPC_NL_BEARER_SET accept user-supplied MTU values but only enforce a minimum…
CVE-2026-68295High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Zero-extend signed ALU32 div/mod results ALU32 operations write a 32-bit result and leave the upper 32 bits of the BPF register zero.
CVE-2026-68290High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: rds: tcp: unregister sysctl before tearing down listen socket rds_tcp_exit_net() frees the per-netns RDS TCP listen socket via rds_tcp_kill_sock() before unregistering t…
CVE-2026-68284High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Fix cork use-after-free in tcp_bpf_sendmsg() tcp_bpf_sendmsg() keeps msg_tx across sk_stream_wait_memory(), which drops and reacquires the socket lock.
CVE-2026-68274High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/guc: Fix buffer overflow in steered register list allocation The size calculation for the steered register extarray uses only the geometry DSS mask (g_dss_mask) t…
CVE-2026-68273High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix context pstate override handling There are several problems in the context pstate handling code.
CVE-2026-68266High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe: Hold a dma-buf reference for imported BOs An imported dma-buf BO is created as a ttm_bo_type_sg BO whose reservation object is the exporter's dma_buf->resv.
CVE-2026-68264High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/pt: Reset current_op in xe_pt_update_ops_init() xe_pt_update_ops_init() fails to reset current_op to 0.
CVE-2026-68263High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix double call to drm_sched_entity_fini() Call sequence of double call: pvr_context_destroy   pvr_context_kill_queues     pvr_queue_kill       drm_sche…
CVE-2026-68260High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/imagination: acquire vm_ctx->lock before mapping memory to GPU VM The drm gpuvm code doesn't protect find operation against map operation, and the driver needs to en…
CVE-2026-68257High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: fix 32-bit overflow in CWSR total size calculation total_cwsr_size was computed in 32-bit before being used as a BO/SVM allocation size.
CVE-2026-68253High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/hdcp: check streams[] bounds before overflow The data->streams[] overflow check is done after the buffer overflow has already happened.
CVE-2026-68245High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix lifetime issue of amdgpu_vm_get_task_info_pasid() The vm pointer returned from amdgpu_vm_get_vm_from_pasid() is only valid while the lock is still being…
CVE-2026-68236High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: set new_stream to NULL after release In dm_update_crtc_state(), the skip_modeset path releases new_stream via dc_stream_release() but does not set the p…
CVE-2026-68228High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: chips-media: wave5: Move src_buf Removal to finish_encode During encoder processing, there is a case where the IRQ response could return the buffer back to usersp…
CVE-2026-68222High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: msi2500: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming().
CVE-2026-68219High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Fix potential out-of-bounds issues The maximum downscaling factor supported by ISI can be up to 16.
CVE-2026-68216High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: pwc: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming().
CVE-2026-68213High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: rtl2832_sdr: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming().
CVE-2026-68210High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: stm32: dcmi: unregister notifier on probe failure dcmi_graph_init() registers the async notifier before dcmi_probe() toggles the reset line.
CVE-2026-68209High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: sun4i-csi: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming().
CVE-2026-68206High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: v4l2-ctrls: validate HEVC active reference counts HEVC slice parameters are shared stateless V4L2 controls, but the common validation path does not verify the act…
CVE-2026-68204High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: vivid: check for vb2_is_busy() when toggling caps The vivid_update_format_cap/out() functions must only be called if the capture/output queue are not busy.
CVE-2026-68202High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: close a re-opened queue timer in the destructor queue_delete() closes the queue timer, then frees it.
CVE-2026-68201High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: drain a slave's callback before its master detaches it snd_timer_close_locked() drains the closing instance's own in-flight callback (IFLG_CALLBACK) before…
CVE-2026-68200High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ALSA: timer: don't re-enter an instance callback that is still running The userspace-driven timer (utimer) TRIGGER ioctl calls snd_timer_interrupt() directly with no ser…
CVE-2026-68189High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hci_sync: Protect UUID list traversal The hci_sync conversion moved class-of-device and EIR generation from an HCI request built under hdev->lock to asynchron…
CVE-2026-68178High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: misc: nsm: pin the module while the device is open misc_open() installs a misc driver's file operations with fops_get(), which pins file_operations::owner before replaci…
CVE-2026-68177High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tracing: Delay module ref count for "enable_event" trigger Triggers are now delayed from freeing, but can still be triggered until after the RCU grace period has ended.
CVE-2026-68163High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: mm/page_vma_mapped: fix device-private PMD handling Commit 65edfda6f3f2 ("mm/rmap: extend rmap and migration support device-private entries") introduced the concept of d…
CVE-2026-68162High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: sctp: avoid auth_enable sysctl UAF during netns teardown proc_sctp_do_auth() updates the SCTP control socket after changing net.sctp.auth_enable.
CVE-2026-68153High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: remove debugfs files before client teardown ceph_destroy_client() tears down the monitor client before removing the per-client debugfs files.
CVE-2026-68152High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: amt: fix use-after-free in AMT delayed works When an AMT device is removed, pending delayed works can still access the freed amt_dev structure, which may result in kerne…
CVE-2026-68148High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: fscrypt: Add missing superblock check in find_or_insert_direct_key() The legacy 'fscrypt_direct_keys' table caches master keys that are used by v1 encryption policies th…
CVE-2026-68147High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: fscrypt: Avoid dynamic allocation in fscrypt_get_devices() When a blk_crypto_key starts being used or is evicted, fs/crypto/ calls fscrypt_get_devices() to get the files…
CVE-2026-68145High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: iomap: fix out-of-bounds bitmap_set() with zero-length range ifs_set_range_dirty() and ifs_set_range_uptodate() compute last_blk as (off + len - 1) >> i_blkbits.
CVE-2026-68143High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: slip: serialize receive against buffer reallocation sl_realloc_bufs() replaces rbuff and updates buffsize while holding sl->lock.
CVE-2026-68138High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/sched: serialize qdisc_rtab_list against concurrent get/put qdisc_get_rtab() and qdisc_put_rtab() mutate the process-global singly linked list qdisc_rtab_list and a…
CVE-2026-68121High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: pppoe: reload header pointer after dev_hard_header() pppoe_sendmsg() saves a pointer to the PPPoE header before calling dev_hard_header().
CVE-2026-68106High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix division by zero with invalid uvd dimensions When width or height is less than 16, width_in_mb or height_in_mb becomes 0, leading to fs_in_mb being 0.
CVE-2026-68104High7.8—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: invoke pm_genpd_remove() before freeing genpd Call pm_genpd_remove() to unregister from global list prior to releasing acp_genpd memory, and clear the pointe…
CVE-2026-64242High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: usb: gadget: net2280: Fix double free in probe error path usb_initialize_gadget() installs gadget_release() as the release callback for the embedded gadget device.
CVE-2026-64239High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: delete tried region in regions_rmdirs() DAMON sysfs maintains the DAMOS tried region directory objects via a linked list.
CVE-2026-64226High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: sched_ext: Avoid UAF in scx_root_enable_workfn() init failure path In scx_root_enable_workfn(), put_task_struct(p) is called before scx_error() dereferences p->comm and…
CVE-2026-64225High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: octeontx2-af: CGX: add bounds check to cgx_speed_mbps index cgx_speed_mbps has 13 elements but RESP_LINKSTAT_SPEED can yield values 0-15.
CVE-2026-64224High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: fix double free in rvu_rep_rsrc_init() rvu_rep_rsrc_init() allocates queue memory before calling otx2_init_hw_resources().
CVE-2026-64221High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: spi: ti-qspi: fix use-after-free after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe.
CVE-2026-64218High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: fix report_work leak on backbone_gw purge batadv_bla_purge_backbone_gw() removes stale backbone gateway entries, but fails to properly handle their asso…
CVE-2026-64217High7.8—2026-07-24In the Linux kernel, the following vulnerability has been resolved: netfs: Fix overrun check in netfs_extract_user_iter() Fix netfs_extract_user_iter() so that if iov_iter_extract_pages() overfills pages[], then those pages don't get inc…
CVE-2026-64191High7.8—2026-07-20In the Linux kernel, the following vulnerability has been resolved: i2c: stub: Reject I2C block transfers with invalid length The I2C_SMBUS_I2C_BLOCK_DATA case in stub_xfer() uses data->block[0] as the transfer length.
CVE-2026-64188High7.8—2026-07-20In the Linux kernel, the following vulnerability has been resolved: net: qualcomm: rmnet: fix endpoint use-after-free in rmnet_dellink() rmnet_dellink() removes the endpoint from the hash table with hlist_del_init_rcu() and then immediat…
CVE-2026-64181High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: mm: fix __vm_normal_page() to handle missing support for pmd_special()/pud_special() On x86 32-bit with THP enabled, zap_huge_pmd() is seen to generate a "WARNING: mm/me…
CVE-2026-64137High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: smb: client: require net admin for CIFS SWN netlink CIFS_GENL_CMD_SWN_NOTIFY is the userspace witness-notify command.
CVE-2026-64134High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: Don't setup bogus iov_iter for silencing At transition to the iov_iter for PCM data transfer, we blindly applied the iov_iter setup also for silencing (i.e.
CVE-2026-64133High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ALSA: asihpi: Fix potential OOB array access at reading cache find_control() to retrieve a cached info accesses the array with the given index blindly, which may lead to…
CVE-2026-64123High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: hsr: defer node table free until after RCU readers HSR node-list and node-status generic-netlink operations run under rcu_read_lock().
CVE-2026-64114High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ipv4: raw: reject IP_HDRINCL packets with ihl < 5 raw_send_hdrinc() validates that the caller-supplied IPv4 header fits within the message length: iphlen = iph->ihl…
CVE-2026-64112High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: rbd: eliminate a race in lock_dwork draining on unmap Given how rbd_lock_add_request() and rbd_img_exclusive_lock() are written, lock_dwork may be (re)queued more than i…
CVE-2026-64108High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: cifs: Fix busy dentry used after unmounting Since commit 340cea84f691c ("cifs: open files should not hold ref on superblock"), cifs file only holds the dentry ref_cnt, t…
CVE-2026-64103High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: scsi: isci: Fix use-after-free in device removal path The ISCI completion tasklet is initialized in isci_host_alloc() (drivers/scsi/isci/init.c:496) and scheduled from b…
CVE-2026-64099High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: drm/v3d: Fix use-after-free of CPU job query arrays on error path The CPU job ioctl's fail label calls kvfree() on cpu_job's timestamp and performance query arrays after…
CVE-2026-64098High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: drm/virtio: use uninterruptible resv lock for plane updates virtio_gpu_cursor_plane_update() and virtio_gpu_resource_flush() lock the framebuffer BO's dma_resv via virti…
CVE-2026-64097High7.8—2026-07-19In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate GPIO pin LUT table size before iterating [Why&How] The GPIO pin table parsers in get_gpio_i2c_info() and bios_parser_get_gpio_pin_info() derive…
CVE-2026-52976High7.8—2026-06-24In the Linux kernel, the following vulnerability has been resolved: drm/xe: Fix error cleanup in xe_exec_queue_create_ioctl() Two error handling issues exist in xe_exec_queue_create_ioctl(): 1.
CVE-2026-68340High7.7—2026-08-10In the Linux kernel, the following vulnerability has been resolved: hwmon: occ: validate poll response sensor blocks The OCC poll response parser walks a counted list of sensor data blocks.
CVE-2026-68255High7.7—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/virtio: bound EDID block reads to the response buffer virtio_get_edid_block() validates the read offset only against the device-supplied resp->size field, never agai…
CVE-2026-68414High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: cancel sched scan results work on unregister cfg80211_sched_scan_results() can queue rdev->sched_scan_res_wk from a driver result notification while a sc…
CVE-2026-68379High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tcp: fix TIME_WAIT socket reference leak on PSP policy failure Release the TIME_WAIT socket reference and jump to discard_it upon PSP policy failure in both IPv4 and IPv…
CVE-2026-68315High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: sctp: validate stream count in sctp_process_strreset_inreq() When processing a RESET_IN_REQUEST from a peer, sctp_process_strreset_inreq() derives the stream count from…
CVE-2026-68299High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: vmxnet3: fix BUG_ON in vmxnet3_get_hdr_len() for Geneve packets vmxnet3_get_hdr_len() assumes gdesc->rcd.v4/v6/tcp always describe the outer header, but for a Geneve-enc…
CVE-2026-68287High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drop_monitor: fix size calculations for 64-bit attributes net_dm_packet_report_fill() and net_dm_hw_packet_report_fill() use nla_put_u64_64bit() to append 64-bit attribu…
CVE-2026-68157High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: guard missing CRUSH type name lookup Localized read selection can walk a parent bucket whose name exists in the CRUSH map while its type has no matching entry i…
CVE-2026-68155High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: libceph: Reject monmaps advertising zero monitors A message of type CEPH_MSG_MON_MAP contains a monmap that is sent from a monitor to the client.
CVE-2026-68141High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/af_iucv: fix NULL deref in afiucv_hs_callback_syn() afiucv_hs_callback_syn() allocates the child socket with GFP_ATOMIC.
CVE-2026-68131High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: rbd: Reset positive result codes to zero in object map update path In a reply message to an RBD request, a positive result code indicates a data payload, which is not al…
CVE-2026-68129High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: gve: fix Rx queue stall on alloc failure When the system is under extreme memory pressure, page allocations can fail during the Rx buffer refill loop.
CVE-2026-68120High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: rtase: Workaround for TX hang caused by hardware packet parsing The hardware performs packet parsing before packet transmission.
CVE-2026-68119High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: tcp: initialize standalone TCP-AO response padding tcp_v4_send_ack() and tcp_v6_send_response() construct standalone TCP responses with TCP-AO options.
CVE-2026-68096High7.5—2026-08-10In the Linux kernel, the following vulnerability has been resolved: audit: fix recursive locking deadlock in audit_dupe_exe() A deadlock occurs in the audit subsystem when duplicating executable-related rules.
CVE-2026-64208High7.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: crypto/krb5, rxrpc: Fix lack of pre-decrypt/pre-verify length checks Change the krb5 crypto library to provide facilities to precheck the length of the message about to…
CVE-2026-64175High7.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: stop TX during firmware restart When iwlwifi firmware crashes (e.g., NMI_INTERRUPT_UNKNOWN on Intel BE201/Wi-Fi 7), iwl_mld_nic_error() sets mld->fw_…
CVE-2026-64116High7.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: add NULL check for idev in ipv6_hop_ioam() Reported by Sashiko: The function ipv6_hop_ioam() accesses __in6_dev_get(skb->dev)->cnf.ioam6_enabled without val…
CVE-2026-68320High7.3—2026-08-10In the Linux kernel, the following vulnerability has been resolved: sctp: fix auth_chunk_list capacity check in sctp_auth_ep_add_chunkid sctp_auth_ep_add_chunkid() uses SCTP_NUM_CHUNK_TYPES (20) as the capacity limit for ep->auth_chunk_l…
CVE-2026-68265High7.3—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/vm: Fix BO prefetch with CONSULT_MEM_ADVISE_PREF_LOC When prefetch region is DRM_XE_CONSULT_MEM_ADVISE_PREF_LOC for a BO VMA, the code used it as an index into re…
CVE-2026-68230High7.3—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: amlogic-c3: Add validations for ae and awb config Avoid invalid memory access if the zones_num is bigger than zone_weight.
CVE-2026-68134High7.3—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ptp: ptp_s390: Add missing facility check Only register the physical clock when facility 28 is installed and PTFF QAF returns that PTFF QPT is available.
CVE-2026-64126High7.3—2026-07-19In the Linux kernel, the following vulnerability has been resolved: Bluetooth: MGMT: validate Add Extended Advertising Data length MGMT_OP_ADD_EXT_ADV_DATA is registered as a variable-length command, with MGMT_ADD_EXT_ADV_DATA_SIZE as th…
CVE-2026-68453High7.1—2026-08-13In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix buffer over-read in cca_cipher2protkey Add validation of both the actual key buffer size and token length fields in all the cca_check_sec*token() functi…
CVE-2026-68447High7.1—2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: clamp v9 CRIU control stack checkpoint copy to BO size CRIU checkpoint copies the MQD control stack using cp_hqd_cntl_stack_size from hardware without boundi…
CVE-2026-68425High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: IB/mad: Drop unmatched RMPP responses before reassembly Kernel-handled RMPP receive processing starts reassembly for active DATA responses before the response is matched…
CVE-2026-68420High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: xfrm: reject optional IPTFS templates in outbound policies syzbot reported a stack-out-of-bounds read in xfrm_state_find() which flows from xfrm_tmpl_resolve_one().
CVE-2026-68402High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: bound element ID read when checking non-inheritance cfg80211_is_element_inherited() reads the first data octet of the candidate element (id = elem->data[…
CVE-2026-68348High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ASoC: tas2781: bound firmware description string parsing The TAS2781 firmware parser reads several variable-length description strings with strlen() before checking that…
CVE-2026-68293High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/mlx5: Fix MCIA register buffer overflow on 32 dword reads The MCIA register can return up to 32 dwords (128 bytes) when the device advertises the mcia_32dwords capab…
CVE-2026-68262High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fix user array stride in pvr_set_uobj_array() pvr_set_uobj_array() copies an array of kernel objects to a userspace array whose element size is describe…
CVE-2026-68258High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds on CRIU restore queue type and mqd size We weren't checking whether the values provided in the private data in kfd CRIU restore were within boun…
CVE-2026-68229High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: cedrus: skip invalid H.264 reference list entries Cedrus consumes H.264 ref_pic_list0/ref_pic_list1 entries from the stateless slice control and later uses their…
CVE-2026-68173High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: ublk: wait on ublk_dev_ready() instead of ub->completion ub->completion is only re-armed by a successful START_USER_RECOVERY.
CVE-2026-68172High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: arm64: make huge_ptep_get handled unaligned addresses huge_ptep_get() can be handed a virtual address pointing to the middle of a contpmd/contpte mapped hugetlb folio (e…
CVE-2026-68103High7.1—2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: reject mapping a reserved doorbell to a new queue When creating an user-queue, the user space provides a doorbell BO handle and an offset within the bo to ob…
CVE-2026-64237High7.1—2026-07-24In the Linux kernel, the following vulnerability has been resolved: Input: elan_i2c - validate firmware size before use Ensure that the firmware file is large enough to contain the expected number of pages and the signature (which reside…
CVE-2026-64209High7.1—2026-07-24In the Linux kernel, the following vulnerability has been resolved: phy: qcom: qmp-usbc: Fix out-of-bounds array access in dp swing config swing_tbl and pre_emphasis_tbl are 4x4 arrays (valid indices 0-3), but the boundary check uses ">…
CVE-2026-64186High7.1—2026-07-19In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Remove latent out-of-bounds access in IOMMU debugfs In iommu_mmio_write() and iommu_capability_write(), the variables dbg_mmio_offset and dbg_cap_offset are d…
CVE-2026-64172High7.1—2026-07-19In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Disable AVIC IPI virtualization on Hygon Family 18h (erratum #1235) Hygon Family 18h CPUs are derived from AMD Family 17h (Zen1) silicon and share the same err…
CVE-2026-64121High7.1—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num_tx_queues ifb_dev_init() allocates dp->tx_private to dev->num_tx_queues entries via kzalloc_objs(*txp, dev->num_tx_queues).
CVE-2026-64111High7.1—2026-07-19In the Linux kernel, the following vulnerability has been resolved: lsm: hold cred_guard_mutex for lsm_set_self_attr() Just as proc_pid_attr_write() already does before calling the LSM hook.
CVE-2026-64095High7.1—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid double decrement of bla.num_requests The bla.num_requests is increased when no request_sent was in progress.
CVE-2026-64222High7.0—2026-07-24In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: avoid double free of pool->stack on AQ init failure otx2_pool_aq_init() frees pool->stack when mailbox sync or retry allocation fails, but leaves the point…
CVE-2026-64219High7.0—2026-07-24In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Validate payload length and link_index in dc_process_dmub_aux_transfer_async [Why&How] dc_process_dmub_aux_transfer_async() copies payload->length bytes…
CVE-2026-64241Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: gpio: rockchip: teardown bugs and resource leaks Address several teardown issues and resource leaks in the driver's remove path and error handling: 1.
CVE-2026-64240Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: media: rc: igorplugusb: fix control request setup packet Commit eac69475b01f ("media: rc: igorplugusb: heed coherency rules") changed the control request storage from an…
CVE-2026-64238Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix deadlock on shared proxy's parent removal Commit 710abda58055 ("gpio: shared: call gpio_chip::of_xlate() if set") used the mutex embedded in struct gpi…
CVE-2026-64236Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: i2c: davinci: fix division by zero on missing clock-frequency When the 'clock-frequency' property is missing from the device tree, the driver falls back to DAVINCI_I2C_D…
CVE-2026-64234Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: tty: serial: pch_uart: add check for dma_alloc_coherent() Add a check for dma_alloc_coherent() failure to prevent a potential NULL pointer dereference in dma_handle_rx().
CVE-2026-64233Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: hold opts->lock across XU walks in uvc_function_bind uvc_function_bind() walks &opts->extension_units twice without holding opts->lock: - directly…
CVE-2026-64231Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: drm/msm/dsi: don't dump registers past the mapped region On DSI 6G platforms the IO address space is internally adjusted by io_offset.
CVE-2026-64230Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: regulator: tps65219: fix irq_data.rdev not being assigned Commit 64a6b577490c ("regulator: tps65219: Remove debugging helper function") removed the tps65219_get_rdev_by_…
CVE-2026-64229Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: x86/mm: Disable broadcast TLB flush when PCID is disabled Booting with "nopcid" clears X86_FEATURE_PCID and keeps CR4.PCIDE from being set to one.
CVE-2026-64228Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: net: ethtool: phy: avoid NULL deref when PHY driver is unbound phydev->drv can become NULL while the phy_device is still attached to its net_device, namely after the PHY…
CVE-2026-64227Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: ACPI: driver: Check ACPI_COMPANION() against NULL during probe Since every platform driver can be forced to match a device that doesn't match its list of device IDs beca…
CVE-2026-64220Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: device property: set fwnode->secondary to NULL in fwnode_init() If a firmware node is allocated on the stack (for instance: temporary software node whose life-time we co…
CVE-2026-64215Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: drm/msm/a6xx: Check kzalloc return in a8xx_hfi_send_perf_table Check the return value of kzalloc() to prevent a NULL pointer dereference on allocation failure.
CVE-2026-64214Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: powerpc/time: Remove redundant preempt_disable|enable() calls from arch_irq_work_raise() A kernel panic is observed when handling machine check exceptions from real mode.
CVE-2026-64213Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: hwmon: (lm90) Add lock protection to lm90_alert Sashiko reports: lm90_alert() executes in the smbus alert context and calls lm90_update_confreg() to disable the hardwar…
CVE-2026-64212Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mld: don't dereference a pointer before NULL checking it In iwl_mld_remove_link, the link->fw_id is saved at the beginning of the function so we have it a…
CVE-2026-64211Medium5.5—2026-07-24In the Linux kernel, the following vulnerability has been resolved: srcu: Don't queue workqueue handlers to never-online CPUs While an srcu_struct structure is in the midst of switching from CPU-0 to all-CPUs state, it can attempt to inv…
CVE-2026-64190Medium5.5—2026-07-20In the Linux kernel, the following vulnerability has been resolved: net: team: fix NULL pointer dereference in team_xmit during mode change __team_change_mode() clears team->ops with memset() before restoring safe dummy handlers via team…
CVE-2026-64185Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: sysfs: don't remove existing directory on update failure When sysfs_update_group() is called for a named group and create_files() fails (e.g.
CVE-2026-64184Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs-schemes: call missing mem_cgroup_iter_break() damon_sysfs_memcg_path_to_id() breaks mem_cgroup_iter() loop without calling mem_cgroup_iter_break().
CVE-2026-64183Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: efi: Allocate runtime workqueue before ACPI init Since commit 5894cf571e14 ("acpi/prmt: Use EFI runtime sandbox to invoke PRM handlers") ACPI PRM calls are delegated…
CVE-2026-64182Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: drivers/base/memory: fix memory block reference leak in poison accounting memblk_nr_poison_inc() and memblk_nr_poison_sub() look up a memory block via find_memory_block_…
CVE-2026-64180Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: mm/memory_hotplug: fix memory block reference leak on remove Patch series "mm: Fix memory block leaks and locking", v2.
CVE-2026-64179Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: wwan: iosm: fix potential memory leaks in ipc_imem_init() The memory allocated in ipc_protocol_init() is not freed on the error paths that follow in ipc_imem_init().
CVE-2026-64177Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: phonet/pep: disable BH around forwarded sk_receive_skb() The networking receive path is usually run from softirq context, but protocols that take the socket lock may hav…
CVE-2026-64174Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: advance loop vars in cfg80211_merge_profile() cfg80211_merge_profile() reassembles a Multi-BSSID non-transmitted BSS profile that has been split across m…
CVE-2026-64173Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: tracing: Do not call map->ops->elt_free() if elt_alloc() fails In paths where tracing_map_elt_alloc() failed to allocate objects, the map->ops->elt_alloc() call was neve…
CVE-2026-64171Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: i2c: tegra: fix pm_runtime leak on mutex_lock failure If tegra_i2c_mutex_lock() fails, the function returns without calling pm_runtime_put(), leaking the runtime PM refe…
CVE-2026-64170Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: spi: qup: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe.
CVE-2026-64169Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: spi: ep93xx: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe.
CVE-2026-64168Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: spi: sprd: fix error pointer deref after DMA setup failure The driver falls back to PIO mode if DMA setup fails during probe.
CVE-2026-64167Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: kho: skip KHO for crash kernel kho_fill_kimage() unconditionally populates the kimage with KHO metadata for every kexec image type.
CVE-2026-64166Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Check for NULL FF-A ID table while driver registration The bus match callback assumes that every FF-A driver provides an id_table and dereferences it…
CVE-2026-64165Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ARM: integrator: Fix early initialization Starting with commit bdb249fce9ad4 ("ARM: integrator: read counter using syscon/regmap"), intcp_init_early calls syscon_regmap_…
CVE-2026-64164Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: btrfs: tracepoints: fix sleep while in atomic context in btrfs_sync_file() The trace event btrfs_sync_file() is called in an atomic context (all trace events are) and it…
CVE-2026-64163Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel.
CVE-2026-64161Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: ti: icssm-prueth: fix eth_ports_node leak in probe The error path on of_property_read_u32() failure inside icssm_prueth_probe() returns without putting eth_ports_no…
CVE-2026-64156Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: netfs, afs: Fix write skipping in dir/link writepages Fix netfs_write_single() and afs_single_writepages() to better handle a write that would be skipped due to lock con…
CVE-2026-64135Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: hwmon: (pmbus/adm1266) widen blackbox-info buffer to I2C_SMBUS_BLOCK_MAX adm1266_nvmem_read_blackbox() declares a 5-byte stack buffer and passes it to i2c_smbus_read_blo…
CVE-2026-64131Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: mm/memory: fix spurious warning when unmapping device-private/exclusive pages Device private and exclusive entries are only supported for anonymous folios.
CVE-2026-64130Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: mm/page_alloc: fix initialization of tags of the huge zero folio with init_on_free __GFP_ZEROTAGS semantics are currently a bit weird, but effectively this flag is only…
CVE-2026-64129Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: mm/migrate_device: fix spinlock leak in migrate_vma_insert_huge_pmd_page When check_stable_address_space() fails after the PMD spinlock has been acquired via pmd_lock()…
CVE-2026-64128Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: drop ISO_END frames received without prior ISO_START ISO data PDUs carry a packet-boundary flag indicating START, CONT, END or SINGLE.
CVE-2026-64127Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: Bluetooth: L2CAP: ecred_reconfigure: send packed pdu, not stack pointer Commit 1c08108f3014 ("Bluetooth: L2CAP: Avoid -Wflex-array-member-not-at-end warnings") converted…
CVE-2026-64120Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phy_reply_size In phy_prepare_data(), several strings such as 'name', 'drvname', 'upstream_sfp_name', and 'downstream_sfp_n…
CVE-2026-64119Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: l2tp: use list_del_rcu in l2tp_session_unhash An unprivileged local user can pin a host CPU indefinitely in l2tp_session_get_by_ifname() by issuing L2TP_CMD_SESSION_GET…
CVE-2026-64110Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: igc: fix potential skb leak in igc_fpe_xmit_smd_frame() When igc_fpe_init_tx_descriptor() fails, no one takes care of an allocated skb, leaking it.
CVE-2026-64107Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: ASoC: codecs: pcm512x: fix null-ptr dereference in pcm512x_overclock_xxx_put() In the pcm512x chipset driver, pcm512x_overclock_xxx_put() is defined as a general mixer k…
CVE-2026-64105Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: vgic: Free private_irqs when init fails after allocation Companion to commit 250f25367b58 ("KVM: arm64: Tear down vGIC on failed vCPU creation"), which added…
CVE-2026-64101Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: fwctl: pds: Validate RPC input size before parsing The fwctl core allocates the device-specific RPC input buffer with fwctl_rpc.in_len and passes that buffer to the driv…
CVE-2026-64100Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: drm/msm: Fix shrinker deadlock With PROVE_LOCKING on an Snapdragon X1 and VM reclaim pressure, we see: ====================================================== WARN…
CVE-2026-64094Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: bla: avoid NULL-ptr deref for claim via dropped interface Without rtnl_lock held, a hardif might be retrieved as primary interface of a meshif, but then (whi…
CVE-2026-64092Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: tp_meter: fix tp_vars reference leak in receiver shutdown The receiver shutdown timer handler, batadv_tp_receiver_shutdown(), is responsible for releasing th…
CVE-2026-64090Medium5.5—2026-07-19In the Linux kernel, the following vulnerability has been resolved: batman-adv: tt: avoid empty VLAN responses The commit 16116dac2339 ("batman-adv: prevent TT request storms by not sending inconsistent TT TLVLs") added checks to the loc…
CVE-2026-68450———2026-08-12In the Linux kernel, the following vulnerability has been resolved: btrfs: free mapping node on duplicate reloc root insert __add_reloc_root() allocates a mapping_node before inserting it into rc->reloc_root_tree.
CVE-2026-68449———2026-08-12In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: fix infinite loop in NCQ tag completion bit-scanning The hand-rolled bit-scanning loop in the NCQ completion path has an infinite loop bug.
CVE-2026-68448———2026-08-12In the Linux kernel, the following vulnerability has been resolved: ovl: check access to copy_file_range source with src mounter creds Commit 5dae222a5ff0c ("vfs: allow copy_file_range to copy across devices") allowed filesystems that im…
CVE-2026-68444———2026-08-12In the Linux kernel, the following vulnerability has been resolved: firmware: arm_ffa: Fix NULL dereference in ffa_partition_info_get() ffa_partition_info_get() passes uuid_str directly to uuid_parse() without a NULL check.
CVE-2026-68443———2026-08-12In the Linux kernel, the following vulnerability has been resolved: hwmon: (gigabyte_waterforce) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO.
CVE-2026-68441———2026-08-12In the Linux kernel, the following vulnerability has been resolved: net/sched: Handle TC_ACT_REDIRECT from qdisc filter chains When a TC filter attached to a qdisc filter chain returns TC_ACT_REDIRECT (ex: via an eBPF program calling bpf…
CVE-2026-68439———2026-08-12In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix possible NULL-pointer deref in mt7925_mcu_bss_he_tlv() mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer befo…
CVE-2026-68438———2026-08-12In the Linux kernel, the following vulnerability has been resolved: smp: Make CSD lock acquisition atomic for debug mode Commit b0473dcd4b1d ("smp: Improve smp_call_function_single() CSD-lock diagnostics") changed smp_call_function_singl…
CVE-2026-68437———2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Fit paired fragment job in the correct CCCB For geometry jobs with a paired fragment job, at the moment, the DRM scheduler's prepare_job() callback: -…
CVE-2026-68436———2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: use kvzalloc to allocate struct dc struct dc has grown large over time (most of it the two inlined dc_scratch_space copies) and now sits close to the pa…
CVE-2026-68435———2026-08-12In the Linux kernel, the following vulnerability has been resolved: LoongArch: Fix address space mismatch in kexec command line lookup When searching the loaded segments for the "kexec" command line marker, the kexec_load(2) path (file_m…
CVE-2026-68434———2026-08-12In the Linux kernel, the following vulnerability has been resolved: serial: 8250_mid: Fix NULL function pointer dereference on DNV/ICX-D/SNR platforms Commit b1b4efea05a5 ("serial: 8250_mid: Disable DMA for selected platforms") replaced…
CVE-2026-68430———2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx8: drop unecessary BUG_ON() There's no need to crash the kernel for this case.
CVE-2026-68429———2026-08-12In the Linux kernel, the following vulnerability has been resolved: drm/dp_mst: Handle torn-down topology gracefully in drm_dp_mst_topology_queue_probe() A hotplug or link-loss event can tear down the MST topology (setting mgr->mst_state…
CVE-2026-68428———2026-08-10In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: Fix use-after-free on vendor module reload mmu_destroy_caches() destroys pte_list_desc_cache and mmu_page_header_cache, but leaves both pointers unchanged.
CVE-2026-68424———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy_joins() mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat)…
CVE-2026-68423———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mtd: virt_concat: fix use-after-free in mtd_virt_concat_destroy() mtd_concat_destroy() frees item->concat so calling mtd_virt_concat_put_mtd_devices(item->concat) after…
CVE-2026-68422———2026-08-10In the Linux kernel, the following vulnerability has been resolved: btrfs: fix root leak if its reloc root is unexpected in merge_reloc_roots() If we have an unexpected reloc_root for our root, we jump to the out label but never drop the…
CVE-2026-68421———2026-08-10In the Linux kernel, the following vulnerability has been resolved: sched_ext: Don't warn on core-sched forced idle in put_prev_task_scx() put_prev_task_scx() warns when a runnable task drops to a lower sched_class without SCX_OPS_ENQ_LA…
CVE-2026-68418———2026-08-10In the Linux kernel, the following vulnerability has been resolved: RDMA/irdma: Prevent user-triggered null deref on QP create Previously, the user QP creation path would only attempt to populate iwqp->iwpbl if the user-provided req.user…
CVE-2026-68416———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mtd: fix double free and WARN_ON in add_mtd_device() error paths When device_register() or mtd_nvmem_add() fails inside add_mtd_device() for a partition, the error handl…
CVE-2026-68413———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ipw2100: fix potential memory leak in ipw2100_pci_init_one() The memory allocated in the ipw2100_alloc_device() function is not freed in some of the error paths in…
CVE-2026-68412———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: Fix an error handling path in cfg80211_wext_siwscan() If the test against IEEE80211_MAX_SSID_LEN fails, then 'creq' leaks.
CVE-2026-68411———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211_hwsim: clamp virtio RX length before skb_put hwsim_virtio_rx_work() passes the virtqueue used-ring length reported by the device straight to skb_put() on…
CVE-2026-68410———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: libertas: fix memory leak in helper_firmware_cb() helper_firmware_cb() neglects to free the single-stage firmware image after a successful async load, leading to a…
CVE-2026-68408———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: convert pmsr_free_wk to wiphy_work to fix deadlock When a netlink socket that owns a PMSR session is closed, cfg80211_release_pmsr() clears the request's…
CVE-2026-68407———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: nl80211: free RNR data on MBSSID mismatch nl80211_parse_beacon() rejects EMA RNR data when there are fewer RNR entries than MBSSID entries.
CVE-2026-68406———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate PMSR FTM preamble range PMSR FTM request parsing accepts preamble values outside the enumerated nl80211 preamble range.
CVE-2026-68405———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: free AP_VLAN bc_buf SKBs outside IRQ lock ieee80211_do_stop() removes AP_VLAN packets from the parent AP ps->bc_buf while holding ps->bc_buf.lock with IR…
CVE-2026-68403———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: initialize SDIO data work before cleanup brcmf_sdio_probe() stores the newly allocated bus in sdiodev->bus before allocating the ordered workqueue.
CVE-2026-68396———2026-08-10In the Linux kernel, the following vulnerability has been resolved: scsi: core: wake eh reliably when using scsi_schedule_eh Drivers which use the scsi_schedule_eh function to run the error handler currently risk the error handler thread…
CVE-2026-68395———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ata: sata_dwc_460ex: enable SATA interrupts only after IRQ handler is registered sata_dwc_enable_interrupts() is called before platform_get_irq() and ata_host_activate()…
CVE-2026-68386———2026-08-10In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Reject unhashed UDP sockets on sockmap update UDP sockets get SOCK_RCU_FREE set when (auto-)bound.
CVE-2026-68378———2026-08-10In the Linux kernel, the following vulnerability has been resolved: dpll: fix NULL pointer dereference in dpll_msg_add_pin_ref_sync() When a dpll_pin is shared across multiple dpll_device instances and those devices are being unregistere…
CVE-2026-68375———2026-08-10In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Handle partially initialized auxiliary devices bnxt_aux_devices_init() calls auxiliary_device_init() before all fields used by bnxt_aux_dev_release() are initia…
CVE-2026-68372———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: core: port: Deattach Type-C connector on component unbind connector_unbind() is the mirror of connector_bind(), but it is missing the symmetric call to typec_deatta…
CVE-2026-68369———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: gadget: printer: fix infinite loop in printer_read() printer_read() uses the same variable for the requested copy size and the number of bytes actually copied to us…
CVE-2026-68368———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_ncm: validate datagram bounds in ncm_unwrap_ntb() When unpacking host-supplied NTBs, ncm_unwrap_ntb() checks datagram length against frame_max but does no…
CVE-2026-68367———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: gadget: f_tcm: synchronize delayed set_alt with teardown The f_tcm set_alt() path defers endpoint setup to a work item and completes the delayed status response fro…
CVE-2026-68366———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: gadget: uvc: clamp SEND_RESPONSE length to the response buffer uvc_send_response() builds the UVC control response from a user-supplied struct uvc_request_data: r…
CVE-2026-68365———2026-08-10In the Linux kernel, the following vulnerability has been resolved: USB: serial: io_edgeport: cap received transmit credits The interrupt-status packet reports transmit credits returned by the device.
CVE-2026-68364———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix ISM dc_lock deadlock during suspend [Why] System hang observed during suspend/resume while video is playing.
CVE-2026-68363———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath9k: hif_usb: don't dereference hif_dev after re-arming firmware request ath9k_hif_request_firmware() re-arms an asynchronous firmware load via request_firmware_…
CVE-2026-68362———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix NULL pointer dereference in ath11k_hal_srng_access_begin In ATH11K_QMI_EVENT_FW_READY, ATH11K_FLAG_REGISTERED is set unconditionally even when ath11k_c…
CVE-2026-68361———2026-08-10In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-psu) Stop device IO before calling hid_hw_stop hid_hw_stop() does not stop the device IO.
CVE-2026-68360———2026-08-10In the Linux kernel, the following vulnerability has been resolved: hwmon: (corsair-cpro) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO.
CVE-2026-68359———2026-08-10In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-smart2) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO.
CVE-2026-68358———2026-08-10In the Linux kernel, the following vulnerability has been resolved: hwmon: (nzxt-kraken3) Stop device IO before calling hid_hw_stop Calling hid_hw_stop() does not stop the device IO.
CVE-2026-68357———2026-08-10In the Linux kernel, the following vulnerability has been resolved: watchdog: pretimeout: Fix UAF in watchdog_unregister_governor() When a watchdog governor is unregistered, it updates existing watchdog devices that were using this gover…
CVE-2026-68356———2026-08-10In the Linux kernel, the following vulnerability has been resolved: watchdog: airoha: Prevent division by zero when clock frequency is zero clk_get_rate() can return 0 when the clock provider is not properly configured or the clock is un…
CVE-2026-68355———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath11k: fix potential buffer underflow in ath11k_hal_rx_msdu_list_get() When the first entry in msdu_details has a zero buffer address, the code accesses msdu_deta…
CVE-2026-68351———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: bound memcpy length in cmd callback to prevent OOB read When the firmware sends a command response with a length mismatch, carl9170_cmd_callback() logs t…
CVE-2026-68350———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix OOB read from off-by-two in TX status handler The bounds check in carl9170_tx_process_status() uses `i > ((cmd->hdr.len / 2) + 1)` which is off by tw…
CVE-2026-68349———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: carl9170: fix buffer overflow in rx_stream failover path The failover continuation in carl9170_rx_stream() copies the full tlen from the second USB transfer instea…
CVE-2026-68347———2026-08-10In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Fix IRQ unsafe locking in gdom allocation Lockdep complains: [ 259.410489] ===================================================== [ 259.417287] WARNING…
CVE-2026-68346———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ALSA: hda: cs35l41: validate and free ACPI mute object cs35l41_get_acpi_mute_state() evaluates a _DSM method to get the ACPI mute state and reads the first byte from the…
CVE-2026-68345———2026-08-10In the Linux kernel, the following vulnerability has been resolved: arm_mpam: guard MBWU state before adding it to garbage __destroy_component_cfg() adds each RIS mbwu_state object to the MPAM garbage list when destroying component confi…
CVE-2026-68344———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: atm: ueagle-atm: reject descriptors that confuse probe and disconnect uea_probe() distinguishes a pre-firmware device from a post-firmware one using the USB id (UEA…
CVE-2026-68342———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ovpn: avoid putting unrelated P2P peer on socket release ovpn_peer_release_p2p() is called when an OVPN UDP socket is being destroyed.
CVE-2026-68339———2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btusb: validate Realtek vendor event length btusb_recv_event_realtek() reads the event code at data[0] and the Realtek subevent code at data[2] before decidin…
CVE-2026-68337———2026-08-10In the Linux kernel, the following vulnerability has been resolved: bpf: Reject redirect helpers without a bpf_net_context The bpf_redirect*() helpers and skb_do_redirect() obtain the per-task bpf_redirect_info via bpf_net_ctx_get_ri()…
CVE-2026-68336———2026-08-10In the Linux kernel, the following vulnerability has been resolved: bonding: fix devconf_all NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, the devconf_all is never initialized because inet6_init…
CVE-2026-68334———2026-08-10In the Linux kernel, the following vulnerability has been resolved: rxrpc: fix io_thread race in rxrpc_wake_up_io_thread() rxrpc_wake_up_io_thread() checks local->io_thread before waking it, but then reloads the pointer for wake_up_proce…
CVE-2026-68333———2026-08-10In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child().
CVE-2026-68332———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: airoha: Fix potential use-after-free in airoha_ppe_deinit() airoha_ppe_deinit() replaces the NPU pointer with NULL via rcu_replace_pointer() but does not wait for e…
CVE-2026-68331———2026-08-10In the Linux kernel, the following vulnerability has been resolved: dpaa2-eth: put MAC endpoint device on disconnect fsl_mc_get_endpoint() returns the MAC endpoint device with a reference taken through device_find_child().
CVE-2026-68328———2026-08-10In the Linux kernel, the following vulnerability has been resolved: nfp: Check resource mutex allocation nfp_cpp_resource_find() allocates a CPP mutex handle for the matching resource-table entry and then reports success.
CVE-2026-68327———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wan: wanxl: Only reset hardware after BAR mapping wanxl_pci_init_one() stores the freshly allocated card in driver data before the PLX BAR is mapped.
CVE-2026-68325———2026-08-10In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Bound the early ACPI HID map The ivrs_acpihid command-line parser appends entries to a fixed four-element early_acpihid_map array.
CVE-2026-68324———2026-08-10In the Linux kernel, the following vulnerability has been resolved: iommu/intel: Fix out-of-bounds memset in dmar_latency_disable() dmar_latency_disable() intends to zero out only the single latency_statistic entry for the given type, bu…
CVE-2026-68322———2026-08-10In the Linux kernel, the following vulnerability has been resolved: rds: Fix inet6_addr_lst NULL dereference when IPv6 is disabled When booting with the 'ipv6.disable=1' parameter, inet6_addr_lst is never initialized because inet6_init()…
CVE-2026-68321———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix FDIR filter leak on remove Perfect FDIR filters can be added while the interface is down and are kept on the software list for later restore.
CVE-2026-68319———2026-08-10In the Linux kernel, the following vulnerability has been resolved: pds_core: fix deadlock between reset thread and remove pci_reset_function() acquires device_lock before performing the reset.
CVE-2026-68318———2026-08-10In the Linux kernel, the following vulnerability has been resolved: pds_core: fix use-after-free on workqueue during remove In pdsc_remove(), the workqueue is destroyed before pdsc_teardown() is called.
CVE-2026-68317———2026-08-10In the Linux kernel, the following vulnerability has been resolved: pds_core: fix auxiliary device add/del races Two paths add or delete the same slot (pf->vfs[vf_id].padev): a VF's pdsc_reset_done() and the PF's devlink enable_vnet/disa…
CVE-2026-68313———2026-08-10In the Linux kernel, the following vulnerability has been resolved: tipc: fix infinite loop in __tipc_nl_compat_dumpit cmd->dumpit callback can return a negative errno, causing an infinite loop due to the while(len) condition.
CVE-2026-68312———2026-08-10In the Linux kernel, the following vulnerability has been resolved: cifs: fix cifsFileInfo leak on kmalloc failure in deferred close drain paths In cifs_close_deferred_file(), cifs_close_all_deferred_files(), and cifs_close_deferred_file…
CVE-2026-68311———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: guard link STA in decap offload mt7925_sta_set_decap_offload() iterates over the vif valid_links mask when updating decap offload state for an MLO st…
CVE-2026-68310———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7915: guard HE capability lookups mt7915_mcu_bss_he_tlv() and mt7915_mcu_sta_bfer_tlv() both run after checking HE support, then dereference the HE PHY cap…
CVE-2026-68309———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: connac: fix possible NULL-pointer deref in mt76_connac_mcu_uni_bss_he_tlv() mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap poi…
CVE-2026-68308———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: check pointer returned by mt76_connac_get_he_phy_cap() mt76_connac_get_he_phy_cap routine can theoretically return NULL so check cap pointer before d…
CVE-2026-68307———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: fix crash in reset link replay During reset recovery, mt7925_vif_connect_iter() replays firmware state for links tracked in mvif->valid_links.
CVE-2026-68306———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: fix possible NULL-pointer deref in mt7996_mcu_sta_bfer_eht() mt76_connac_get_eht_phy_cap routine can theoretically return NULL so check cap pointer b…
CVE-2026-68304———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: fix 802.1X-SHA256 call trace warning Based on wpa_auth as 1x_256 mode, need to set up "use_fwsup" with BRCMF_PROFILE_FWSUP_1X.
CVE-2026-68303———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/vc4: hvs/v3d: Fix null dereference in unbind The hvs and v3d drivers use dev_get_drvdata(master) in their unbind functions.
CVE-2026-68301———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: hsr: fix memory leak on slave unregistration by removing synced VLANs When an HSR master device is brought UP, it auto-adds VLAN 0 via vlan_vid0_add(), which propag…
CVE-2026-68296———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: gre: fix lltx regression for GRE tunnels with SEQ/CSUM Before commit 00d066a4d4ed ("netdev_features: convert NETIF_F_LLTX to dev->lltx"), NETIF_F_LLTX was set uncon…
CVE-2026-68292———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ice: prevent tstamp ring allocation for non-PF VSI types The pf->txtime_txqs bitmap tracks which Tx queues have ETF (Earliest TxTime First) offload enabled.
CVE-2026-68291———2026-08-10In the Linux kernel, the following vulnerability has been resolved: idpf: fix max_vport related crash on allocation error during init Set adapter->max_vports only after successful allocation of vports, netdevs and vport_config buffers.
CVE-2026-68289———2026-08-10In the Linux kernel, the following vulnerability has been resolved: tipc: fix integer overflow in tipc_recvmsg() and tipc_recvstream() In tipc_recvmsg(), the copy length is computed as: copy = min_t(int, dlen - offset, buflen); bufle…
CVE-2026-68288———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: drop_monitor: fix info leak in NET_DM_ATTR_PAYLOAD net_dm_packet_report_fill() and net_dm_hw_packet_report_fill() open code the NET_DM_ATTR_PAYLOAD attribute to avo…
CVE-2026-68286———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drop_monitor: perform u64_stats updates under IRQ-disabled section In net_dm_packet_trace_kfree_skb_hit() and net_dm_hw_trap_packet_probe(), u64_stats_update_begin() / u…
CVE-2026-68285———2026-08-10In the Linux kernel, the following vulnerability has been resolved: LoongArch: BPF: Fix memory leak in bpf_jit_free() When bpf_int_jit_compile() is called for subprograms, it returns early during the first pass (!prog->is_func || extra_p…
CVE-2026-68282———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/rockchip: analogix_dp: Add missing error check for platform_get_resource() Add missing error check for platform_get_resource() return value to prevent NULL pointer d…
CVE-2026-68281———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/imagination: Count paired job fence as dependency in prepare_job() The DRM scheduler's prepare_job() callback counts the remaining non-signaled native dependencies f…
CVE-2026-68280———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/bridge: cdns-dsi: Replace deprecated UNIVERSAL_DEV_PM_OPS() The deprecated UNIVERSAL_DEV_PM_OPS() macro uses the provided callbacks for both runtime PM and system sl…
CVE-2026-68279———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads in remote DPCD/I2C sideband reply parsers drm_dp_sideband_parse_remote_dpcd_read() reads num_bytes from the raw message and then unconditionall…
CVE-2026-68278———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix buffer overflows in sideband chunk accumulation drm_dp_sideband_append_payload() has three related bugs when processing device-provided sideband reply da…
CVE-2026-68277———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/dp/mst: fix OOB reads on 2-byte fields in sideband reply parsers Three sideband reply parsers read 16-bit fields as: val = (raw->msg[idx] << 8) | (raw->msg[idx+1]…
CVE-2026-68276———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx: fix cleaner shader IB buffer overflow The cleaner shader sysfs path allocates a 16-dword (64 byte) IB but incorrectly fills (align_mask + 1) dwords.
CVE-2026-68275———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: check amdgpu_vm_bo_find() result in GET_MAPPING_INFO The AMDGPU_GEM_OP_GET_MAPPING_INFO path of amdgpu_gem_op_ioctl() looks up the bo_va for the buffer objec…
CVE-2026-68272———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: validate CP_GFX_SHADOW chunk size in CS pass1 Add a minimum-length check for the AMDGPU_CHUNK_ID_CP_GFX_SHADOW chunk in amdgpu_cs_pass1(), matching the gate…
CVE-2026-68271———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix reversed error cleanup order in ucopy functions nouveau_uvmm_vm_bind_ucopy() and nouveau_exec_ucopy() place their error cleanup labels in allocation ord…
CVE-2026-68270———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/sysfb: Avoid possible truncation with calculating visible size Calculating the visible size of the system framebuffer can result in truncation of the result.
CVE-2026-68269———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Add missing nospec on parallel submit slot Add missing Spectre mitigation for userspace controlled parallel submission slot.
CVE-2026-68268———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe: Return error on non-migratable faults requiring devmem Non-migratable faults that require devmem incorrectly jump to the 'out' label, which squashes the error co…
CVE-2026-68267———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/xe/rtp: Add RING_FORCE_TO_NONPRIV_DENY to OA whitelists Unconditionally whitelisting OA registers is a security violation.
CVE-2026-68261———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/imagination: fix error checking of pvr_vm_context_lookup() Since pvr_vm_context_lookup() returns either NULL or a pointer, then stop using IS_ERR() for checking the…
CVE-2026-68259———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdkfd: Check bounds in allocate_event_notification_slot The valid event ids go from 0 to KFD_SIGNAL_EVENT_LIMIT allocate_event_notification_slot has an option to s…
CVE-2026-68256———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: detect_link_and_local_sink: DP alt mode timeout path leaks prev_sink reference prev_sink is unconditionally retained via dc_sink_retain at function en…
CVE-2026-68254———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/vrr: require valid min/max vfreq for VRR Ensure the EDID provided min/max vfreq are valid.
CVE-2026-68252———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68251———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma6.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68250———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68249———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma5.0: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68248———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915: Return NULL on error in active_instance Avoid returning &node->base when node is NULL due to OOM during GFP_ATOMIC allocation.
CVE-2026-68247———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/bios: range check LFP Data Block panel_type2 While the panel_type from LFP Data Block is range checked, panel_type2 is not.
CVE-2026-68246———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx11: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68244———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Do not leak siblings[] on proto context error After a successful BALANCE/PARALLEL_SUBMIT extension on context creation, error during processing of next use…
CVE-2026-68243———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/gem: Fix NULL deref in I915_CONTEXT_PARAM_SSEU Setting context engine slot N into I915_ENGINE_CLASS_INVALID / I915_ENGINE_CLASS_INVALID_NONE and attempting to a…
CVE-2026-68242———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/gt: Fix NULL deref on sched_engine alloc failure Avoid using intel_context_put() before intel_context_init() in execlists_create_virtual() as the kref_put() ins…
CVE-2026-68241———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/i915/mst: limit DP MST ESI service loop The loop in intel_dp_check_mst_status() keeps servicing interrupts originating from the sink without bound.
CVE-2026-68239———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/ttm: Account for NULL and handle pages in ttm_pool_backup Pages in ttm_pool_backup can be NULL or backup handles (ttm_backup_page_ptr_is_handle()), neither of which…
CVE-2026-68238———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Release VFCT ACPI table reference amdgpu_acpi_vfct_bios() fetches the VFCT table with acpi_get_table() but never releases it.
CVE-2026-68237———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/userq: fix indefinite fence wait during GPU reset pre_reset only force-completes fences of MAPPED queues.
CVE-2026-68235———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: dce100: skip non-DP stream encoders for DP MST On DCE8-class ASICs (e.g.
CVE-2026-68234———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix bo->pin leaking in amdgpu_bo_create_reserved amdgpu_bo_create_reserved() only allocates a new BO when *bo_ptr (struct amdgpu_bo **bo_ptr as input paramet…
CVE-2026-68233———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/vc4: Shut down BO cache timer before teardown The BO cache timer callback schedules time_work, and time_work can rearm the timer through vc4_bo_cache_free_old().
CVE-2026-68232———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/gpusvm: Fix MM reference leak in drm_gpusvm_range_evict If kvmalloc_array() fails in drm_gpusvm_range_evict(), the MM reference acquired earlier is not released, res…
CVE-2026-68231———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: airspy: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming().
CVE-2026-68227———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: cx231xx: fix devres lifetime USB drivers bind to USB interfaces and any device managed resources should have their lifetime tied to the interface rather than pare…
CVE-2026-68226———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: cx23885: add ioremap return check and cleanup Add a check for the return value of pci_ioremap_bar() in cx23885_dev_setup().
CVE-2026-68225———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: i2c: alvium: fix critical pointer access in alvium_ctrl_init The current implementation of alvium_ctrl_init creates several controls in function alvium_ctrl_init…
CVE-2026-68224———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: mali-c55: Fix possible ERR_PTR in enable_streams The media_pad_remote_pad_unique() function returns either a valid pointer or an ERR_PTR() on failure (-ENOTUNIQ i…
CVE-2026-68223———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: meson: vdec: Fix memory leak in error path of vdec_open The vdec_open() function previously jumped directly to err_m2m_release when vdec_init_ctrls() failed, skip…
CVE-2026-68221———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: nuvoton: npcm-video: fix memory leaks in probe and remove npcm_video_probe() allocates the npcm_video structure with kzalloc_obj() but never frees it on any probe…
CVE-2026-68220———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: nxp: imx8-isi: Add missing v4l2_subdev_cleanup() in crossbar and pipe Both mxc_isi_crossbar_init() and mxc_isi_pipe_init() call v4l2_subdev_init_finalize() which…
CVE-2026-68218———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: pci: dm1105: Free allocated workqueue Destroy allocated workqueue in remove() callback to free its resources, thus fixing memory leak.
CVE-2026-68217———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: pwc: Drain fill_buf on start_streaming() failure pwc_isoc_init() submits its isochronous URBs with usb_submit_urb(.., GFP_KERNEL) in a loop.
CVE-2026-68215———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: radio-si476x: Unregister v4l2_device on probe failure si476x_radio_probe() registers radio->v4l2dev before allocating the V4L2 controls and before registering the…
CVE-2026-68214———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: rtl2832: fix use-after-free in rtl2832_remove() cancel_delayed_work_sync() is called before i2c_mux_del_adapters() in rtl2832_remove().
CVE-2026-68212———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: saa7134: Fix a possible memory leak in saa7134_video_init1 In saa7134_video_init1(), the return value of the first saa7134_pgtable_alloc() is not checked.
CVE-2026-68211———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: stm32-dcmipp: Return queued buffers on start_streaming() failure The vb2 framework hands buffers to the driver via buf_queue() before calling start_streaming().
CVE-2026-68208———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: Fix the error code of devm_kzalloc() in vip_probe_slice() In vip_probe_slice(), the error check for devm_kzalloc() incorrectly uses PTR_ERR_OR_ZERO() whi…
CVE-2026-68207———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: ti: vpe: unwind v4l2 device registration on probe error If the vpe_top resource is missing, vpe_probe() returns -ENODEV after v4l2_device_register() has succeeded.
CVE-2026-68205———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: v4l2-fwnode: Fix subdev owner overwritten in v4l2_async_register_subdev_sensor() The v4l2 helper v4l2_async_register_subdev_sensor() calls v4l2_async_register_sub…
CVE-2026-68203———2026-08-10In the Linux kernel, the following vulnerability has been resolved: media: vivid: fix cleanup bugs in vivid_init() When platform_device_register() fails in vivid_init(), the embedded struct device in vivid_pdev has already been initializ…
CVE-2026-68197———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mwifiex: fix NULL dereference when the AP has HT-cap but no HT-oper mwifiex_tdls_add_ht_oper() gates its follow-the-AP-bandwidth path on bss_desc->bcn_ht_cap being…
CVE-2026-68195———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7615: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7615_rx_check() and mt7615_queue_rx_skb() dispatch it to mt7615_…
CVE-2026-68194———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7921_rx_check() and mt7921_queue_rx_skb() dispatch it to mt7921_…
CVE-2026-68193———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7925: drop TXRX_NOTIFY on non-mmio buses PKT_TYPE_TXRX_NOTIFY is an mmio-only event, but mt7925_rx_check() and mt7925_queue_rx_skb() dispatch it to mt7925_…
CVE-2026-68191———2026-08-10In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix NULL pointer dereference in rhash table destroy When unbinding the ath12k driver, kernel NULL pointer dereferences occur in irq_work_sync() called from…
CVE-2026-68190———2026-08-10In the Linux kernel, the following vulnerability has been resolved: staging: rtl8723bs: fix OOB reads in rtw_get_wps_ie() rtw_get_wps_ie() iterates over IE data from network frames without validating that the IE header and payload fit wi…
CVE-2026-68188———2026-08-10In the Linux kernel, the following vulnerability has been resolved: Bluetooth: RFCOMM: Fix session UAF in set_termios rfcomm_tty_set_termios() tests dlc->session without rfcomm_mutex and later passes the pointer to rfcomm_send_rpn().
CVE-2026-68187———2026-08-10In the Linux kernel, the following vulnerability has been resolved: exec: fix unsigned loop counter wrap in transfer_args_to_stack() The stop value is derived from bprm->p >> PAGE_SHIFT.
CVE-2026-68186———2026-08-10In the Linux kernel, the following vulnerability has been resolved: binfmt_misc: set have_execfd only once the interpreter is opened load_misc_binary() raises bprm->have_execfd as soon as it sees the 'O' (or 'C') flag.
CVE-2026-68185———2026-08-10In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jump_label_init() before parse_early_param() When enabling both CONFIG_MEM_ALLOC_PROFILING=y and CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y, then di…
CVE-2026-68184———2026-08-10In the Linux kernel, the following vulnerability has been resolved: cdrom: fix stack out-of-bounds read in CDROMVOLCTRL mmc_ioctl_cdrom_volume() first reads the audio control mode page into a 32-byte stack buffer with cgc->buflen set to…
CVE-2026-68183———2026-08-10In the Linux kernel, the following vulnerability has been resolved: firmware: stratix10-svc: fix memory leaks and list corruption bugs Fix a memory leak when gen_pool_alloc() fails by freeing pmem on the error path.
CVE-2026-68182———2026-08-10In the Linux kernel, the following vulnerability has been resolved: comedi: comedi_parport: deal with premature interrupt Syzbot reported a general protection fault in `comedi_get_is_subdevice_running()`, which was called from the interr…
CVE-2026-68181———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mei: bus: access mei_device under device_lock on cleanup Fix couple of problems in mei_cl_bus_dev_release(): mei_cl_flush_queues() is running without lock.
CVE-2026-68180———2026-08-10In the Linux kernel, the following vulnerability has been resolved: intel_th: fix MSC output device reference leak intel_th_output_open() looks up the output device with bus_find_device_by_devt(), which returns the device with a referenc…
CVE-2026-68176———2026-08-10In the Linux kernel, the following vulnerability has been resolved: tracing: Fix mmiotrace possible NULL dereferencing of hiter->dev If the mmio_pipe_open() fails to find a PCI device, the hiter->dev will be assigned to NULL.
CVE-2026-68175———2026-08-10In the Linux kernel, the following vulnerability has been resolved: tracing: Fix resource leak on mmiotrace trace_pipe close The mmiotrace tracer was added May 12th 2008.
CVE-2026-68174———2026-08-10In the Linux kernel, the following vulnerability has been resolved: tracing: Fix union collision of module and refcnt for dynamic events In 'struct trace_event_call', the 'module' pointer and the 'refcnt' atomic variable share the same m…
CVE-2026-68169———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: userspace: fix use-after-free in get_local_id In mptcp_pm_userspace_get_local_id(), the address entry is looked up under spinlock, but its id is read after dr…
CVE-2026-68168———2026-08-10In the Linux kernel, the following vulnerability has been resolved: afs: Fix afs_edit_dir_remove() to get, not find, block 0 Fix afs_edit_dir_remove() to use afs_dir_get_block() to get block 0 rather than afs_dir_find_block() as the latt…
CVE-2026-68167———2026-08-10In the Linux kernel, the following vulnerability has been resolved: btrfs: do not try compression for data reloc inodes [BUG] There is a syzbot report that the check inside get_new_location() triggered: BTRFS info (device loop0): foun…
CVE-2026-68166———2026-08-10In the Linux kernel, the following vulnerability has been resolved: userfaultfd: prevent registration of special VMAs Vova Tokarev says: userfaultfd allows registration on shadow stack VMAs.
CVE-2026-68165———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: validate ranges in damon_set_regions() DAMON core logic assumes zero length regions don't exist.
CVE-2026-68164———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mm/damon/core: disallow overlapping input ranges for damon_set_regions() damon_set_regions() assumes the input ranges are sorted by the address and don't overlap each ot…
CVE-2026-68151———2026-08-10In the Linux kernel, the following vulnerability has been resolved: binfmt_elf_fdpic: only honour the first PT_INTERP The program header scan handles PT_INTERP from a switch nested in the scan loop, so its break leaves the switch and not…
CVE-2026-68150———2026-08-10In the Linux kernel, the following vulnerability has been resolved: fs/super: fix emergency thaw double-unlock of s_umount do_thaw_all() iterates over all superblocks via __iterate_supers() with SUPER_ITER_EXCL, which acquires s_umount e…
CVE-2026-68146———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ftrace: Add global mutex to serialize trace_parser access In ftrace, the trace_parser structure is allocated and initialized when a trace file is opened, and is subseque…
CVE-2026-68139———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Use sender devcom for MPV master-up After PCIe DPC recovery, mlx5 reloads the affected functions and replays multiport affiliation events.
CVE-2026-68135———2026-08-10In the Linux kernel, the following vulnerability has been resolved: net: hip04: fix RX buffer leak on build_skb failure When build_skb() fails in hip04_rx_poll(), the driver jumps to the refill path without releasing the current RX buffe…
CVE-2026-68133———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICE_PTP_UNINIT, then ice_ptp_rebuild() will update the state to ICE_PTP_ERROR.
CVE-2026-68132———2026-08-10In the Linux kernel, the following vulnerability has been resolved: super: fix emergency thaw deadlock on frozen block devices do_thaw_all_callback() calls bdev_thaw() while holding sb->s_umount exclusively.
CVE-2026-68130———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: defer destroy_previous_session() until after NTLM authentication In ntlm_authenticate(), destroy_previous_session() is called using a user pointer resolved from t…
CVE-2026-68126———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mac802154: hold an interface reference across the scan worker mac802154_scan_worker() captures the scanning sub-interface under RCU and then keeps dereferencing sdata->d…
CVE-2026-68122———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ovpn: fix peer refcount leak in TCP error paths When either the TCP RX or TX error path calls ovpn_peer_hold() followed by schedule_work(&peer->tcp.defer_del_work), and…
CVE-2026-68115———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx10: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68114———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68113———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx12: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68112———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9.4.3: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68111———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/gfx9: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68110———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma4.4.2: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68109———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/sdma7.1: replace BUG_ON() with WARN_ON() There's no need to crash the kernel for these cases.
CVE-2026-68105———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: Fix kernel panic during driver load failure Avoid kernel panic if MES init fails during driver load.
CVE-2026-68102———2026-08-10In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix aperture mapping leak amdgpu_pci_remove() calls drm_dev_unplug() before invoking the driver fini routines.
CVE-2026-68099———2026-08-10In the Linux kernel, the following vulnerability has been resolved: ksmbd: restore DACL size on check_add_overflow() to avoid malformed ACL check_add_overflow() unconditionally writes the truncated sum into *d even on overflow, per its c…
CVE-2026-68095———2026-08-10In the Linux kernel, the following vulnerability has been resolved: fuse-uring: fix race between registration and connection abortion This fixes this race: - thread a: io_uring_enter -> register sqe -> fuse_uring_create_ring_ent -> all…
CVE-2026-68094———2026-08-10In the Linux kernel, the following vulnerability has been resolved: sched_ext: Preserve rq tracking across local DSQ dispatch dispatch_to_local_dsq() can run from scx_bpf_dsq_move_to_local() while ops.dispatch() has recorded the current…
CVE-2026-68093———2026-08-10In the Linux kernel, the following vulnerability has been resolved: KVM: SVM: Bump asid_generation on CPU online to avoid ASID collision after hotplug If a vCPU stays scheduled out (or blocked) while the last pCPU it ran on goes through…
CVE-2026-68092———2026-08-10In the Linux kernel, the following vulnerability has been resolved: time/jiffies: Register jiffies clocksource before usage Teddy reported that a XEN HVM has a long boot delay, which was bisected to the recent enhancements to the negativ…
CVE-2026-68090———2026-08-10In the Linux kernel, the following vulnerability has been resolved: debugobjects: Plug race against a concurrent OOM disable syzbot reported a puzzling splat: WARNING: kernel/time/hrtimer.c:443 at stub_timer+0xa/0x20 stub_timer() is…
CVE-2026-68089———2026-08-10In the Linux kernel, the following vulnerability has been resolved: iio: core: fix uninitialized data in debugfs If *ppos is non-zero then simple_write_to_buffer() will not initialize the start of buf[].
CVE-2026-68088———2026-08-10In the Linux kernel, the following vulnerability has been resolved: usb: gadget: function: rndis: add length check to response query Add variable representations for BufLength and BufOffset in rndis_query_response(), and perform a length…
CVE-2026-68087———2026-08-10In the Linux kernel, the following vulnerability has been resolved: HID: wacom: use GFP_ATOMIC in wacom_wac_queue_flush() wacom_wac_queue_flush() is called via the .raw_event callback (wacom_raw_event → wacom_wac_pen_serial_enforce → wac…
CVE-2026-68086———2026-08-10In the Linux kernel, the following vulnerability has been resolved: mm/khugepaged: write all dirty file folios when collapsing [There is no upstream commit, as this code was removed by upstream commit 044925f9b565 ("mm: fs: remove filem…
CVE-2026-68084———2026-08-10In the Linux kernel, the following vulnerability has been resolved: staging: vme_user: fix location monitor leak in tsi148 bridge tsi148_probe() allocates a location monitor resource and links it into tsi148_bridge->lm_resources.

Ibm · 184 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2024-27253Critical10.0—2026-08-12IBM DOORS Next 7.0.3 through 7.0.3 Interim Fix 018 could allow an authenticated user to bypass security logic to perform unauthorized activities.
CVE-2026-17186Critical9.9—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary CL commands due to improper neutralization of special elements in a command.
CVE-2026-16860Critical9.9—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an uncontrolled search path element.
CVE-2026-17184Critical9.8—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary code due to external control of file name or path.
CVE-2026-17182Critical9.8—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to bypass authentication and obtain or alter sensitive information due to improper validation of request URI path segments.
CVE-2026-17482Critical9.8—2026-08-13IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths.
CVE-2026-17083Critical9.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a stack-based buffer overflow.
CVE-2026-17218Critical9.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to an out-of-bounds write.
CVE-2026-16956Critical9.8—2026-08-12IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-12943Critical9.8—2026-07-30IBM HMC V10.3.1050.0 through 10.3.1064.0 and IBM HMC V11.1.1110.0 through 11.1.1112.0 Management systems in IBM Power environments (HMC and Novalink) could allow an unauthenticated user to execute arbitrary commands with elevated privilege…
CVE-2026-12118Critical9.8—2026-07-30IBM webMethods Integration (on prem) 10.15, 10.11 could allow an unauthenticated remote attacker to execute arbitrary code on the system due to the deserialization of untrusted data.
CVE-2026-17276Critical9.6—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to escalate privileges due to improper authorization in the handling of high-authority threads.
CVE-2026-10140Critical9.6—2026-06-30IBM Langflow OSS 1.0.0 through 1.10.0 voice mode contains improper shared-state handling that allows reuse of API clients across tenant boundaries.
CVE-2026-17181Critical9.3—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write files to arbitrary locations due to path traversal.
CVE-2026-19297Critical9.1—2026-08-13IBM Langflow OSS 1.0.0 through 1.9.6 could allow a remote attacker to obtain unauthorized access to user accounts due to improper restriction of excessive authentication attempts.
CVE-2026-18193High8.9—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of user-controlled addresses.
CVE-2026-18099High8.9—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary script code due to improper neutralization of user-controlled input.
CVE-2026-16879High8.8—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization using user-supplied input.
CVE-2026-18101High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper management of thread authority swaps.
CVE-2026-17481High8.8—2026-08-13IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs.
CVE-2026-17223High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-17029High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code due to an out-of-bounds write.
CVE-2026-16987High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper validation of the LANG environment variable.
CVE-2026-16975High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to a heap-based buffer overflow.
CVE-2026-16722High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management.
CVE-2026-16674High8.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to an untrusted search path.
CVE-2026-13105High8.8—2026-08-12IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration.
CVE-2026-17642High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of special elements used in an OS command.
CVE-2026-17417High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper neutralization of shell metacharacters.
CVE-2026-17082High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of a client-supplied profile name.
CVE-2026-13361High8.8—2026-08-12IBM Informix oninit sq_sgkprepare RCE via unchecked SQL Interface length field.
CVE-2026-18713High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to privilege escalation via Navigator for i.
CVE-2026-18669High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to a privilege escalation as the result of a remote code execution vulnerability in the activation engine component.
CVE-2026-17110High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management.
CVE-2026-16906High8.8—2026-08-12IBM i 7.6, and 7.5 could allow a remote authenticated attacker to execute arbitrary commands with elevated privileges due to improper neutralization of special elements used in an OS command.
CVE-2026-16856High8.8—2026-08-12IBM i 7.6, and 7.5 could allow a local attacker to gain elevated privileges due to improper neutralization of special elements used in an OS command.
CVE-2026-18847High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote unauthenticated attacker to harvest credentials due to spoofing of Navigator for i.
CVE-2026-18683High8.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to privilege escalation via Navigator for i.
CVE-2026-12004High8.7—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a format string injection vulnerability in the management interface t…
CVE-2026-17502High8.6—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-16815High8.6—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and potentially obtain sensitive information due to a stack-based buffer overflow.
CVE-2026-17179High8.5—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to cause a denial of service due to command injection.
CVE-2026-16967High8.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to system objects due to a time-of-check to time-of-use (TOCTOU) race condition involving symbolic links.
CVE-2026-16908High8.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain unauthorized access to arbitrary objects due to a path traversal vulnerability.
CVE-2026-17418High8.5—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause a denial of service due to improper neutralization of special elements used in an SQL command.
CVE-2026-17617High8.5—2026-08-05IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of URLs specified in custom resources.
CVE-2026-18249High8.4—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to gain elevated privileges due to improper validation of pointers read from Java-controlled addresses.
CVE-2026-10534High8.4—2026-08-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to buffer overflow in the IXF IMPORT parser.
CVE-2026-16708High8.3—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to obtain sensitive information due to external control of system configuration.
CVE-2026-17101High8.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code or obtain sensitive information due to improper authentication.
CVE-2026-13433High8.3—2026-08-12IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 (ACS) is vulnerable to downloading unverified product code when configured to update from an IBM i.
CVE-2026-18235High8.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary Control Language commands due to insufficient input validation.
CVE-2026-17095High8.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to unsafe reflection.
CVE-2026-17081High8.2—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory.
CVE-2026-18509High8.2—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to gain privilege escalation via the Navigator for i debugger.
CVE-2026-17272High8.2—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a buffer overflow.
CVE-2026-17220High8.2—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and modify authentication metadata due to a buffer overflow.
CVE-2026-17485High8.2—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service and obtain sensitive information due to an integer underflow.
CVE-2026-10543High8.2—2026-08-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is vulnerable to privilege escalation with a specially crafted query.
CVE-2026-17445High8.2—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of an attacker-supplied user profile name.
CVE-2026-10025High8.2—2026-08-05IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML External Entity (XXE) injection vulnerability.
CVE-2026-17206High8.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to execute arbitrary code due to a buffer overflow.
CVE-2026-17069High8.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of anti-CSRF tokens.
CVE-2026-17045High8.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform unauthorized operations and access sensitive information due to improper session management.
CVE-2026-16868High8.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of uninitialized memory during ASN.1 length processing.
CVE-2026-16867High8.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to access server resources with the privileges of an authenticated user due to improper authentication during NTLM session negotiation.
CVE-2026-17197High8.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to bypass security restrictions due to improper validation of client-asserted identity.
CVE-2026-13267High8.1—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an authenticated user to gain privileges of another user via a spe…
CVE-2026-12359High8.1—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow a remote attacker to access sensitive information due to an incons…
CVE-2026-16904High8.1—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment.
CVE-2026-18499High8.1—2026-08-12IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.8 is vulnerable to a privilege escalation when using Liberty collectives.
CVE-2026-18098High8.1—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and compromise system integrity due to an XML injection flaw.
CVE-2026-8400High8.1—2026-08-05IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Application Server - Liberty Continuous delivery has a flaw in the ORB component in IBM SDK, Java Technology Edition, may allow a malicious IIOP server to induce loading and i…
CVE-2026-16898High7.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path.
CVE-2026-18071High7.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management.
CVE-2026-16695High7.8—2026-08-12IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 could allow a local attacker to execute arbitrary code due to improper neutralization of special elements used in an OS command.
CVE-2026-13367High7.8—2026-08-12IBM Informix Dynamic Server 14.10, and 15.0 contain a local privilege escalation vulnerability in the oninit setuid-root utility.
CVE-2026-13094High7.8—2026-08-12IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable configuration file.
CVE-2026-14866High7.7—2026-08-12IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to injection of rogue certificate authority due to publicly writeable truststore.
CVE-2026-16863High7.7—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16961High7.6—2026-08-13IBM i 7.6, 7.5, and 7.4 s vulnerable to SQL injection.
CVE-2026-17111High7.6—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to SQL injection.
CVE-2026-16907High7.6—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary code due to improper bounds checking.
CVE-2026-18554High7.5—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-17177High7.5—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a denial of service due to uncontrolled recursion.
CVE-2026-17175High7.5—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication enforcement.
CVE-2026-16915High7.5—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper input validation.
CVE-2026-18077High7.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-17473High7.5—2026-08-13IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory.
CVE-2026-18846High7.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 s vulnerable to a buffer overflow from improperly validating client data.
CVE-2026-17229High7.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-17199High7.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to unbounded resource allocation.
CVE-2026-17004High7.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an infinite loop.
CVE-2026-16982High7.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to a heap buffer overflow.
CVE-2026-16887High7.5—2026-08-13IBM i 7.6 could allow a remote attacker to cause a denial of service due to an out-of-bounds write.
CVE-2026-13460High7.5—2026-08-13IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 GUI contains a hardcoded token in the source code, which was used for inter-node cluster communication and REST API authentication between GUI.
CVE-2026-17271High7.5—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper validation of input size.
CVE-2026-16931High7.5—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper handling of zero-length TCP options.
CVE-2026-12733High7.5—2026-07-30IBM DataPower Gateway could allow a remote attacker to cause a denial of service due to improper resource limitations.
CVE-2026-10545High7.5—2026-07-30IBM Planning Analytics Local 2.1.0 through 2.1.21 is vulnerable to an open redirect that allows an attacker to redirect users to arbitrary external websites via a crafted URL.
CVE-2024-25039High7.5—2026-07-30IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 do not limit the length of a connection which could allow for a Slowloris HTTP denial of service attack to take place.
CVE-2026-9322High7.5—2026-07-30IBM WebSphere Application Server 9.0, and 8.5 and IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.7 are vulnerable to a denial of service via a crafted HTTP request.
CVE-2026-9171High7.5—2026-07-17IBM WebSphere Application Server and WebSphere Application Server Liberty are vulnerable to a denial of service, caused by sending a specially-crafted request.
CVE-2026-11923High7.4—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected crypt…
CVE-2026-18511High7.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to generate a stack-based buffer overflow in the Native IBM i JSSE provider, caused by improper bounds checking during TLS session establishment.
CVE-2026-17099High7.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to improper authentication.
CVE-2026-14875High7.3—2026-08-13IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to arbitrary code execution on Windows when installed for all users due to publicly writeable directory.
CVE-2026-13476High7.3—2026-08-12IBM Informix Dynamic Server 14.10, 15.0, and 12.10 could allow an unauthenticated user to execute arbitrary commands with service account privileges on the system due to improper validation of user supplied input.
CVE-2026-12618High7.2—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 could allow an administrator to execute additional commands they are not entit…
CVE-2026-12005High7.2—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 contains a input validation vulnerability in the management interface that all…
CVE-2026-19483High7.1—2026-08-13IBM Storage Scale 5.2.3.0 through 5.2.3.8, and 6.0.0.0 through 6.0.1.0 Secrets may be disclosed in log files in IBM Storage Scale Management GUI The admin password is logged into the GUI log of IBM Storage Scale Systems Deploy and Upgrade…
CVE-2026-16896High7.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use (TOCTOU) race condition.
CVE-2026-13365High7.1—2026-08-13IBM Planning Analytics 2.0, and 2.1 Local is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts.
CVE-2026-17248High7.1—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to improper neutralization of special elements in an OS command.
CVE-2026-17616Medium6.8—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 Reverse Proxy in certain configurations may provide weaker than expected crypt…
CVE-2026-17268Medium6.8—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper validation of a session token.
CVE-2026-17173Medium6.5—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of file paths.
CVE-2026-18715Medium6.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper processing of XML external entities.
CVE-2026-18671Medium6.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to force a NetServer server thread exception, caused by an integer overflow during bounds checking in request processing.
CVE-2026-17075Medium6.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information and perform unauthorized operations due to improper validation of authentication tokens.
CVE-2026-16853Medium6.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-16692Medium6.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to cause a denial of service due to a stack-based buffer overflow.
CVE-2026-17419Medium6.5—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify SQL tables due to improper neutralization of special elements used in an SQL command.
CVE-2026-17266Medium6.5—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory.
CVE-2026-16694Medium6.4—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 is vulnerable to stored cross-site scripting.
CVE-2026-17209Medium6.3—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to execute arbitrary scripts due to cross-site scripting.
CVE-2026-17079Medium6.3—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to the ability to disable server-side input validation via a request parameter.
CVE-2026-18250Medium6.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and bypass security restrictions due to a race condition.
CVE-2026-17420Medium6.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements in an SQL parameter.
CVE-2024-40683Medium6.3—2026-07-30IBM Operations Analytics - Log Analysis 1.3.5.0, 1.3.5.1, 1.3.5.2, 1.3.5.3, 1.3.6.0, 1.3.6.1, 1.3.7.0, 1.3.7.1, 1.3.7.2, and 1.3.8.0, 1.3.8.1, 1.3.8.2, 1.3.8.3, 1.3.8.4 does not invalidate session after a password chance which could allow…
CVE-2025-0152Medium6.1—2026-07-30IBM Engineering Requirements Management DOORS and DOORS Web Access 9.7.2.1 through 9.7.2.11, and 9.6.1.1 through 9.6.1.13 is vulnerable to cross-site scripting.
CVE-2026-4942Medium5.9—2026-07-17IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to send a specifically crafted message and downgrade the Transport Layer Security (TLS) protocol to a version disabled in the server configuration.
CVE-2026-18097Medium5.5—2026-08-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to obtain sensitive information due to the logging of plain text passwords in trace files.
CVE-2026-18178Medium5.4—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
CVE-2026-17227Medium5.4—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to bypass security restrictions due to improper neutralization of special elements used in an SQL command.
CVE-2026-17226Medium5.4—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information or cause a denial of service due to an out-of-bounds read.
CVE-2026-16878Medium5.4—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-15995Medium5.4—2026-07-17IBM Cognos Analytics 12.1.3 GA Version with build number through 12.1.3-2606251736 could allow an attacker to obtain incorrect report summary results or cause report-processing failures due to a race condition in the Agentic AI assistant's…
CVE-2026-16905Medium5.3—2026-08-14IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information due to improper authentication.
CVE-2026-18020Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an off-by-one error in bounds checking.
CVE-2026-17649Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-17468Medium5.3—2026-08-13IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to forge valid session tokens due to the use of a hardcoded cryptographic key.
CVE-2026-17216Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an integer error when processing DRDA large-object headers.
CVE-2026-17212Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-17078Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to resource exhaustion.
CVE-2026-17077Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to the use of an uninitialized variable.
CVE-2026-17076Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to improper processing of DRDA and DDM resynchronization requests.
CVE-2026-16929Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a buffer overflow.
CVE-2026-16861Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an out-of-bounds read.
CVE-2026-16859Medium5.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to an out-of-bounds read.
CVE-2026-11932Medium5.3—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 is vulnerable to a denial of service attack.
CVE-2026-18531Medium5.3—2026-08-05IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote attacker to tamper with session data due to the use of a weak HMAC session signing secret.
CVE-2026-12762Medium5.3—2026-08-05IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.0 could allow a remote attacker to obtain sensitive information exposed in manifest files.
CVE-2026-11904Medium5.3—2026-07-30IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 and IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 could allow a r…
CVE-2026-8861Medium5.3—2026-07-17IBM Security Verify could allow a remote attacker to obtain sensitive information when a detailed technical error message is returned in the browser.  This information could be used in further attacks against the system.
CVE-2026-14979Medium5.3—2026-07-17IBM Engineering Lifecycle Management 7.0.3 ( Interim Fix 001 through ) Interim Fix 021, 7.1.0 ( Interim Fix 001 through ) Interim Fix 009, and 7.2.0 and 7.2.0 Interim Fix 001 DOORS could allow a remote attacker to cause a denial of service…
CVE-2026-17476Medium4.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of service due to an improper buffer write.
CVE-2026-13477Medium4.7—2026-08-05IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 could allow an authenticated privileged user to execute arbitrary commands with normal user privileges on the system due to improper validation of user suppl…
CVE-2026-18086Medium4.5—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to execute arbitrary code or cause a denial of service due to improper bounds checking.
CVE-2026-17438Medium4.4—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management.
CVE-2026-18068Medium4.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to obtain sensitive information due to a byte-count and element-count confusion.
CVE-2026-17088Medium4.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a path traversal vulnerability.
CVE-2026-16871Medium4.3—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a heap buffer overflow.
CVE-2026-16713Medium4.3—2026-08-13IBM Documentation Offline 1.0.0 through 1.4.1 IBM Documentation could allow a remote attacker to obtain sensitive information due to a security misconfiguration where the documentation server binds to an unrestricted IP address.
CVE-2026-16480Medium4.3—2026-08-12IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify database catalog data.
CVE-2026-18150Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to a race condition.
CVE-2026-18148Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to inject arbitrary content into Navigator log files due to improper output neutralization for logs.
CVE-2026-17222Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to modify data in certain SQL tables due to improper neutralization of special elements used in an SQL command.
CVE-2026-17109Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to add unexpected parameters to a command due to parameter injection.
CVE-2026-18144Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper authorization.
CVE-2026-18106Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information due to improper validation of user-supplied path input.
CVE-2026-17094Medium4.3—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive information and manipulate files due to a path traversal vulnerability.
CVE-2026-15656Medium4.3—2026-08-05IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorization tokens or session cookies.
CVE-2026-10569Medium4.3—2026-07-30IBM UCD - IBM UrbanCode Deploy 7.2 through 7.2.3.23, and 7.3 through 7.3.2.18 and IBM UCD - IBM DevOps Deploy 8.0 through 8.0.1.13, 8.1 through 8.1.2.6, and 8.2 through 8.2.1.0 is susceptible to an Exposure of Sensitive Information Vulnera…
CVE-2026-14501Medium4.3—2026-07-17IBM Db2 Genius Hub 1.1, 1.1.1, 1.1.2 and IBM Agentics 1.0 could allow an attacker to execute arbitrary code or obtain sensitive information due to the use of dangerous functions without sufficient restrictions.
CVE-2026-7366Medium4.2—2026-08-12IBM DataPower Gateway 11.0.0.0 through 11.0.0.1 and IBM DataPower Gateway 10.5.0.0 through 10.5.0.21 and IBM DataPower Gateway 10.6.0.0 through 10.6.0.9 allows a race condition that results in improper isolation of request state when handl…
CVE-2026-14971Low3.9—2026-07-17IBM PowerVM Novalink 2.2.02.2.12.2.1.1, and 2.3.02.3.0.12.3.12.3.2 IBM NovaLink APIs misconfiguration may increase attack surface and enable unintended or unauthorized operations under non-default conditions.
CVE-2026-17043Low3.8—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal.
CVE-2026-12730Low3.8—2026-08-05IBM Business Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to properly…
CVE-2026-18096Low3.3—2026-08-12IBM Db2 12.1.5 for Linux, UNIX and Windows (includes DB2 Connect Server) could allow a local attacker to cause a denial of service due to a memory leak.
CVE-2026-17074Low3.1—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management.
CVE-2026-11937Low3.1—2026-08-12IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 and IBM Verify Identity Access Container 11.0 through 11.0.3 and IBM Security Verify Access Container 10.0 through 10.0.9.2 Reverse Proxy i…
CVE-2026-18246Low3.0—2026-08-12IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to an interpretation conflict in the multipart parser.
CVE-2026-17071Low2.7—2026-08-13IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal.

Unknown · 114 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15413Critical10.0—2026-08-13The Link Factory WordPress plugin is a backdoor.
CVE-2026-14182Critical9.8—2026-08-13The Customer Email Verification for WooCommerce WordPress plugin before 3.2.6 does not correctly validate the email-verification activation code, relying on a loose comparison that an attacker can satisfy with a crafted value type, allowin…
CVE-2026-18391Critical9.8—2026-08-12The WooCommerce Subscriptions WordPress plugin before 9.1.0 does not validate user input before unserializing it on stores with High-Performance Order Storage enabled, leading to a PHP Object Injection issue which unauthenticated users can…
CVE-2026-18366Critical9.8—2026-08-12The Events Manager WordPress plugin before 7.4.1 does not properly scope its capability mapping, discarding the access control decisions WordPress already made for unrelated privileged actions, which allows unauthenticated users to change…
CVE-2026-16051Critical9.8—2026-08-12The wpmudev-updates WordPress plugin before 5.0.1 does not verify the integrity of the packages installed through its remote management interface, nor protect those requests against replay, allowing an attacker able to obtain or replay a v…
CVE-2026-15039Critical9.8—2026-08-12The giftware WordPress plugin before 4.2.10 does not validate the type of uploaded files in one of its upload paths, allowing unauthenticated users to upload arbitrary files, including PHP code, which can lead to remote code execution.
CVE-2026-19089Critical9.8—2026-08-10The Product Input Fields for WooCommerce WordPress plugin before 2.0.2 does not validate uploaded file types when its accepted-types setting is left empty, which its own documentation advertises as accepting all files, allowing unauthentic…
CVE-2026-16299Critical9.8—2026-08-10The Single Sign On For TNG WordPress plugin before 2.2.0 does not properly validate a password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full…
CVE-2026-16298Critical9.8—2026-08-10The FoodBoxBooker WordPress plugin before 1.0.7 does not properly validate the password reset request, allowing unauthenticated attackers to reset the password of arbitrary users, including administrators, which could lead to a full site t…
CVE-2026-16538Critical9.1—2026-08-12The Wallet for WooCommerce WordPress plugin before 1.6.10 does not verify the amount actually collected for a wallet top-up before crediting the wallet, allowing customers to top up their wallet balance for less than its value.
CVE-2026-19053Critical9.1—2026-08-10The ProSolution WP Client WordPress plugin before 2.0.6 does not sanitise and escape a parameter before using it in a SQL statement reachable by unauthenticated visitors, leading to a blind SQL injection.
CVE-2026-13613High8.8—2026-08-12The KiviCare WordPress plugin before 4.5.2 does not properly sanitise and escape user-supplied parameters before using them in a SQL query, allowing authenticated users with a clinic staff-level role to perform SQL injection.
CVE-2026-18786High8.8—2026-08-10The CheckView WordPress plugin before 2.3.2 does not restrict its REST API authentication filter to its own routes and unconditionally discards the authentication error raised for any request whose URI merely contains a CheckView WordPre…
CVE-2026-17540High8.8—2026-08-10The File Manager WordPress plugin before 6.9.1 does not properly authorise its file management commands, allowing any authenticated user, such as a subscriber, to read and delete arbitrary files under the WordPress installation directory…
CVE-2026-16985High8.8—2026-08-10The Squeeze WordPress plugin before 1.7.12 does not validate the file type or extension of the per-size image data written by one of its attachment-update actions, allowing users with the upload_files capability (Author and above) to writ…
CVE-2026-14293High8.8—2026-08-10The Autopay WordPress plugin before 5.0.1 does not perform any capability or nonce check before saving a styling option from a public request, and does not escape that value when it is later output on the checkout page, allowing unauthenti…
CVE-2026-15205High8.6—2026-08-14The Paymob for WooCommerce WordPress plugin before 4.1.9 does not properly sanitise a client-supplied identifier before using it in a SQL query within its public, unauthenticated payment callback, and performs this query before verifying t…
CVE-2026-18474High8.6—2026-08-12The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to a SQL injection exploitable by unauthenticated users when a non-default search field type is configu…
CVE-2026-19049High8.6—2026-08-10The ProSolution WP Client WordPress plugin before 2.0.9 does not sanitise a cookie value before using it in SQL queries, and processes that cookie on every request without any authentication or capability check, allowing unauthenticated us…
CVE-2026-11974High8.6—2026-07-29The wp-media-folder-addon WordPress plugin before 4.1.7 does not validate a user-supplied parameter before using it in a file read operation in two AJAX actions available to unauthenticated users, leading to Arbitrary File Disclosure and S…
CVE-2026-18945High8.2—2026-08-13The WP Helper Premium WordPress plugin before 4.7.6 does not verify the order key when rendering its custom order confirmation page or when handling the related AJAX actions, allowing unauthenticated users to view other customers' order de…
CVE-2026-13171High8.2—2026-08-12The Eventin WordPress plugin before 4.1.20 does not perform an authorization check on its waiting-list registration handler, allowing unauthenticated users to create WordPress user accounts for arbitrary email addresses and inject order r…
CVE-2026-16257High8.2—2026-08-10The Arvow AI SEO Writer WordPress plugin before 1.5.4 does not properly restrict access to one of its REST endpoints, whose only access control can be bypassed by unauthenticated users through type juggling when the Arvow AI SEO Writer Wor…
CVE-2026-18039High8.1—2026-08-14The Essential Addons for Elementor WordPress plugin before 6.7.2 does not prevent user-supplied registration fields from overwriting reserved account attributes, allowing unauthenticated attackers to register an account with an arbitrary…
CVE-2026-18230High8.1—2026-08-12The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement through one of its authenticated AJAX actions, which lacks an authorization check, allowing any authenticated us…
CVE-2026-18057High8.1—2026-08-12The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it in a SQL statement, allowing users with a subscriber account and above to perform SQL injection attacks and tamper with…
CVE-2026-16977High8.1—2026-08-12The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a dynamic SQL query built for a database-backed choice field, allowing subscriber-level users to perfo…
CVE-2026-18469High8.1—2026-08-10The Login & Register Forms WordPress plugin before 4.0.2 does not enforce its password reset attempt limit against a server-derived value, keying both the verification code and the per-source attempt counter on client-controlled data, all…
CVE-2026-18468High8.1—2026-08-10The Login & Register Forms WordPress plugin before 4.0.2 does not bind the password reset verification state to the account being reset or to the party that completed the verification, keying it instead on a value the client controls, all…
CVE-2026-18030High8.1—2026-08-10The BricksForge WordPress plugin before 3.1.8.8 does not verify the identity of the requester when processing a password change submitted through one of its form actions, allowing unauthenticated attackers to set an arbitrary password for…
CVE-2026-13600High8.1—2026-08-10The AutoNetTV Relay WordPress plugin before 3.0.14 does not perform any capability or authentication check before setting a WordPress administrator authentication cookie during its scheduled content-synchronization task.
CVE-2026-13610High7.5—2026-08-13The KiviCare WordPress plugin before 4.5.2 does not restrict the roles assignable through its unauthenticated registration endpoint, allowing unauthenticated attackers to create an active, privileged clinic-staff (doctor) account with ful…
CVE-2026-18789High7.5—2026-08-12The Ezoic WordPress plugin before 2.23.1 does not properly restrict access to some of its content export functionality, allowing unauthenticated attackers to trigger a server-side export of the site's database, including user password hash…
CVE-2026-18049High7.5—2026-08-12The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not perform any capability or nonce check on one of its public endpoint actions and builds an option name from a client-supplied value without restricting it to its own option…
CVE-2026-18048High7.5—2026-08-12The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not validate a client-controlled value used to build a file path in one of its public endpoint actions, and performs no authorisation check on it, allowing unauthenticated att…
CVE-2026-16253High7.5—2026-08-12The Total Upkeep WordPress plugin before 1.17.3 does not adequately protect the secret that authorizes its backup-restore functionality and exposes it to unauthenticated users, allowing them to disclose sensitive backup information and to…
CVE-2026-14925High7.5—2026-08-12The Import WP WordPress plugin before 2.14.23 does not perform any authorization check on one of its export-file download handlers, allowing unauthenticated attackers to download export files generated by administrators, which may contain…
CVE-2026-18946High7.5—2026-08-10The Contact Form to Any API WordPress plugin before 3.0.7 does not use a random filename when copying files uploaded through contact forms into a publicly accessible directory, allowing unauthenticated attackers to enumerate and download f…
CVE-2026-18470High7.5—2026-08-10The Login & Register Forms WordPress plugin before 4.0.2 does not verify that a password reset request comes from the account's owner, and does not adequately redact the address returned in its response, allowing unauthenticated users to…
CVE-2026-17542High7.5—2026-08-10The File Manager WordPress plugin before 6.9.1 does not perform any capability check on one of its file manager connector endpoints, allowing any authenticated user, such as a subscriber, to browse the entire WordPress installation directo…
CVE-2026-17541High7.5—2026-08-10The File Manager WordPress plugin before 6.9.1 does not have authorisation checks on one of its REST API routes, allowing unauthenticated users to read its file activity log, disclosing the file operations performed on the site, the paths…
CVE-2026-17022High7.5—2026-08-10The Salon Booking System WordPress plugin before 10.30.34 does not properly validate a booking's ownership token before loading it in its booking-wizard confirmation steps, allowing unauthenticated attackers to disclose other customers' b…
CVE-2026-14206High7.5—2026-08-10The HT Contact Form WordPress plugin before 2.9.3 does not perform any authorization check on the endpoint that returns a saved form draft, allowing unauthenticated users to read the personal data (name, email, phone, address) stored in f…
CVE-2026-14237High7.2—2026-08-10The vitepos WordPress plugin before 3.6.0, Vitepos WordPress plugin before 3.5.0 do not perform a per-target authorization check in their point-of-sale password-reset API and grant the custom Outlet Manager role an over-broad password-res…
CVE-2026-13170High7.2—2026-08-10The Eventin WordPress plugin before 4.1.20 does not properly validate a template path setting before using it to include a local file, allowing users with editor-level access and above to include and execute arbitrary local PHP files.
CVE-2026-16294High7.1—2026-08-12The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.17.1 does not validate one of its Podcast Episode URL settings before performing a server-side request with it, allowing users with a role as low as Contributor to perf…
CVE-2026-14290Medium6.8—2026-08-14The Embed Google Photos album WordPress plugin through 2.2.1 does not escape a shortcode attribute value before outputting it inside an HTML attribute, allowing users with the Contributor role or above to inject arbitrary JavaScript that e…
CVE-2026-15047Medium6.8—2026-08-10The s2Member WordPress plugin before 260805 does not escape several shortcode attributes before outputting them inside an inline script context, allowing users with contributor-level access to inject arbitrary JavaScript that executes whe…
CVE-2026-16747Medium6.5—2026-08-12The Kirki WordPress plugin before 6.2.1 does not properly authorise its front-end form submission REST routes and passes attacker-controlled input through shortcode execution, allowing unauthenticated users to run any shortcode registered…
CVE-2026-15045Medium6.5—2026-08-12The Wallet System for WooCommerce WordPress plugin before 2.7.10 does not validate a user-supplied wallet amount against the customer's actual stored balance during checkout, allowing authenticated customers to arbitrarily reduce their own…
CVE-2026-18943Medium6.5—2026-08-12The WPC Admin Columns WordPress plugin before 2.3.4 does not have authorisation checks in one of its AJAX actions, allowing users with a role as low as subscriber to read arbitrary user, post and term metadata, including data belonging to…
CVE-2026-13168Medium6.5—2026-08-12The Eventin WordPress plugin before 4.1.20 does not properly restrict access to stored customer records, allowing users with contributor-level access and above to read other customers' personal data such as names and email addresses.
CVE-2026-12976Medium6.5—2026-08-12The LearnPress WordPress plugin before 4.4.4 does not verify that a user is enrolled in a course before processing AI-assistant requests against that course's lesson content, allowing any authenticated user such as a subscriber to obtain…
CVE-2026-14548Medium6.5—2026-08-11The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to overwrite the administrator-configured tra…
CVE-2026-19077Medium6.5—2026-08-10The Duplicate Post WordPress plugin before 1.5.5 does not perform per-object authorisation checks in its bulk copy and delete operations, allowing any user whose role an administrator has granted Duplicate Post WordPress plugin before 1.5…
CVE-2026-19050Medium6.4—2026-08-12The ProSolution WP Client WordPress plugin before 2.0.9 does not validate a user-supplied URL, and does not check the capability or nonce of the requester, before performing a server-side HTTP request with it, allowing any authenticated us…
CVE-2026-17013Medium6.1—2026-08-12The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not sanitise and escape a parameter before reflecting it into an inline script block, which could allow unauthenticated attackers to perform Reflected Cross-Site Scripting att…
CVE-2026-17019Medium6.1—2026-08-10The JetEngine WordPress plugin before 3.8.13.1 does not sanitise uploaded SVG files before storing and serving them, and does not adequately restrict who can upload them, allowing unauthenticated attackers to upload a file containing malic…
CVE-2026-16739Medium5.9—2026-08-14The Epeken All Kurir for Woocommerce WordPress plugin through 2.1.4 does not verify that a payment-confirmation request originates from the owner of the targeted order, nor that any payment actually occurred, allowing unauthenticated attac…
CVE-2026-16949Medium5.8—2026-08-10The Term Pages WordPress plugin before 2.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement, allowing unauthenticated attackers to perform SQL injection attacks.
CVE-2026-18934Medium5.5—2026-08-10The RSS Aggregator by Feedzy WordPress plugin before 5.2.6 does not verify that the requesting user owns or is allowed to edit the import job named in the request, allowing users with author-level access and above to permanently delete th…
CVE-2026-14332Medium5.4—2026-08-13The Ecwid by Lightspeed Ecommerce Shopping Cart WordPress plugin before 7.0.9 does not perform a capability check or nonce verification on one of its store-management actions, allowing any authenticated user, such as a subscriber, to disco…
CVE-2026-19088Medium5.4—2026-08-13The ShopEngine Elementor WooCommerce Builder Addon WordPress plugin before 4.9.3 does not protect one of its authentication endpoints against CSRF, allowing an attacker to log a victim into an attacker-controlled account, so that the bill…
CVE-2026-19217Medium5.4—2026-08-12The Royal Addons for Elementor WordPress plugin before 1.7.1065 does not validate a widget setting used to build an HTML tag before outputting it, which could allow users with the Contributor role and above to perform Stored Cross-Site Sc…
CVE-2026-16066Medium5.4—2026-08-12The Welcart e-Commerce WordPress plugin before 2.11.34 does not sanitise or escape a product field before outputting it on the product pages, allowing users with the Author role and above to inject arbitrary web scripts that execute in the…
CVE-2026-15249Medium5.4—2026-08-12The Patterns Kit WordPress plugin through 1.0.3 does not escape a link attribute before its client-side script inserts it into the page, allowing users with a role as low as Contributor to store a payload that executes in the browser of a…
CVE-2026-18960Medium5.4—2026-08-10The Block User Account WordPress plugin before 2.0.1 does not enforce its account block on every authentication path, allowing a blocked user who holds an application password created before the block to retain their full role-level read a…
CVE-2026-17010Medium5.4—2026-08-10The Saitama Addon Pack WordPress plugin through 1.0.8 does not sanitise and escape certain post metadata values before outputting them, allowing users with contributor-level access and above to inject stored Cross-Site Scripting payloads t…
CVE-2026-15238Medium5.4—2026-08-10The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not verify record ownership before updating customer records, allowing any authenticated user with a low-privileged account (Subscriber and above) to modify or overwrite the pe…
CVE-2026-14941Medium5.4—2026-08-10The Customer Reviews for WooCommerce WordPress plugin before 5.116.0 does not perform nonce or capability checks on several settings-related AJAX actions, allowing users with minimal permissions such as Subscribers to invoke administrative…
CVE-2026-14224Medium5.4—2026-07-29The Easy Appointments WordPress plugin before 3.12.28 does not verify that the appointment targeted by its customer-data update action belongs to the current user; the action only checks a shared nonce that any authenticated user can obtai…
CVE-2026-13328Medium5.3—2026-08-13The Food Menu WordPress plugin before 6.0.2 does not perform any capability or ownership check on its reservation-status update action, which is also exposed to unauthenticated users and gated only by a nonce that is publicly available to…
CVE-2026-17008Medium5.3—2026-08-12The Quick Paypal Payments WordPress plugin through 5.7.50 does not verify the paid amount, receiver, or payment status in its PayPal IPN handler and marks an order paid on an order-token match alone, so a buyer who pays an arbitrary small…
CVE-2026-16990Medium5.3—2026-08-12The Payment Button for PayPal WordPress plugin through 1.2.3.44 does not enforce the merchant-configured price server-side and trusts a client-supplied payment amount, allowing unauthenticated attackers to create a real PayPal order agains…
CVE-2026-16621Medium5.3—2026-08-12The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does not verify that payment actually succeeded before completing an order in its PayPal return handler: it reads attacker-controlled parameters, performs no amoun…
CVE-2026-15213Medium5.3—2026-08-12The Welcart e-Commerce WordPress plugin before 2.11.33 does not verify the authenticity of its convenience-store / bank-transfer settlement callback: an unauthenticated request can flip an order from unpaid to settled purely from an order…
CVE-2026-19073Medium5.3—2026-08-12The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoints, and does not verify that the requester owns the account being queried, allowing unauthenticat…
CVE-2026-18035Medium5.3—2026-08-12The User Access Manager WordPress plugin before 2.3.15 does not apply its access restrictions to REST API requests, allowing unauthenticated attackers to read the content of posts, pages and custom post types that have been restricted to s…
CVE-2026-16737Medium5.3—2026-08-12The WP Travel Engine WordPress plugin before 6.8.5 does not perform authorization or ownership checks when loading a caller-supplied booking identifier in one of its unauthenticated cart actions, allowing unauthenticated attackers to disc…
CVE-2026-19074Medium5.3—2026-08-10The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unauthenticated sensitive information exposure via the AJAX action `acadp_public_custom_fields_listings…
CVE-2026-17021Medium5.3—2026-08-10The Salon Booking System WordPress plugin before 10.30.34 does not properly restrict access to some of its booking-modification AJAX actions and does not verify ownership of the targeted booking, allowing unauthenticated users to tamper wi…
CVE-2026-17012Medium5.3—2026-08-10The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not verify that the PayPal account which received a payment matches the merchant's configured account before marking the order as paid, allow…
CVE-2026-15237Medium5.3—2026-08-10The MotoPress Hotel Booking WordPress plugin before 6.2.3 does not perform any authorization or ownership check on a REST endpoint that creates payment records, allowing unauthenticated users to create completed payment records against arb…
CVE-2026-15229Medium5.3—2026-08-10The Pinpoint Booking System WordPress plugin through 2.9.9.7.1 does not validate the booking price on the server side, allowing unauthenticated users to create bookings at an arbitrary price (including zero) and, by selecting a specific p…
CVE-2026-14860Medium5.3—2026-08-10The Podcast Player WordPress plugin before 8.3.1 does not validate the destination of a server-side request built from user-supplied input, allowing unauthenticated attackers to make the server issue requests to arbitrary hosts and read b…
CVE-2026-13692Medium5.3—2026-07-29The PayU CommercePro Plugin WordPress plugin before 3.9.0 does not verify the payment-gateway signature before applying order modifications, allowing unauthenticated attackers to tamper with the totals, shipping and metadata of arbitrary W…
CVE-2026-19075Medium5.0—2026-08-10All-in-One Video Gallery registers a public, unauthenticated file-download handler triggered by `?vdl=<post_id>` on any `aiovg_videos` post (`public/video.php`, `AIOVG_Public_Video::download_video()`), which reads the post's `mp4` meta val…
CVE-2026-17018Medium4.9—2026-08-10The CubeWP Framework WordPress plugin through 1.1.30 does not perform a per-object read authorization check, nor restrict which metadata keys may be requested, on one of its REST API endpoints, allowing users with the Contributor role and…
CVE-2026-17023Medium4.8—2026-08-10The Salon Booking System WordPress plugin through 10.30.33 does not perform any capability check or validate an OAuth state value on its Google Calendar authorization callback, which is also hooked for unauthenticated users, allowing an u…
CVE-2026-13701Medium4.8—2026-08-10The Advanced Excerpt WordPress plugin before 4.5 does not sanitise and escape one of its settings before outputting it on the front end of the site, which could allow administrators (including those without the unfiltered_html capability…
CVE-2026-19052Medium4.3—2026-08-12The ProSolution WP Client WordPress plugin before 2.0.9 does not perform capability checks on two administrative AJAX actions, and the nonce they rely on is published on its public frontend, allowing any authenticated user, such as a subsc…
CVE-2026-18962Medium4.3—2026-08-12The WP Photo Album Plus WordPress plugin before 9.2.09.002 does not check that the current user is allowed to upload into the album they target when it processes a front-end upload, allowing any authenticated user, such as a Subscriber, to…
CVE-2026-18046Medium4.3—2026-08-12The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on the REST route that stores its geolocation service license key, so the route falls back to an authentication-…
CVE-2026-15388Medium4.3—2026-08-12The Cookie Consent WordPress plugin before 0.0.10 does not correctly enforce its intended administrator-only capability check on its consent-settings REST routes, so they fall back to an authentication-only gate, allowing any authenticate…
CVE-2026-14859Medium4.3—2026-08-12The WP Crowdfunding WordPress plugin before 2.2.1 does not check the campaign-submission capability in one of its AJAX actions, allowing any authenticated users such as Subscribers to create crowdfunding campaign posts despite not being gr…
CVE-2026-14858Medium4.3—2026-08-12The WP Crowdfunding WordPress plugin before 2.2.1 does not verify order ownership before returning order details, allowing any authenticated users such as Subscribers to read the personal data of any WooCommerce order and enumerate every o…
CVE-2026-14857Medium4.3—2026-08-12The WP Crowdfunding WordPress plugin before 2.2.1 does not verify ownership of a campaign before allowing its update history to be modified and a notification email sent to its backers, allowing any authenticated users such as Subscribers…
CVE-2026-13612Medium4.3—2026-08-12The KiviCare WordPress plugin before 4.5.2 does not verify that the requesting user owns the records being accessed, allowing authenticated patient-level users to read other patients' bills, invoices and appointment details.
CVE-2026-13177Medium4.3—2026-08-12The Eventin WordPress plugin before 4.1.20 does not properly restrict access to individual order records, allowing users with contributor-level access and above to read other customers' order data including personal information by iterati…
CVE-2026-14549Medium4.3—2026-08-11The Ray Enterprise Translation WordPress plugin through 1.7.3 does not perform any capability or nonce checks on one of its AJAX actions, allowing any authenticated user, including Subscribers, to add or delete the site's configured langua…
CVE-2026-18666Medium4.3—2026-08-10The Library Management System WordPress plugin before 3.6.7 does not sanitize and escape a user-supplied parameter before using it in a SQL statement, allowing users with a role as low as Subscriber to perform SQL injection and extract arb…
CVE-2026-18200Medium4.3—2026-08-10The FoodBoxBooker WordPress plugin before 1.0.8 does not verify that the user account being updated belongs to the user making the request, allowing authenticated users, with Subscriber-level access and above, to modify the profile details…
CVE-2026-17020Medium4.3—2026-08-10The Salon Booking System WordPress plugin through 10.31.0 does not verify that a requested booking belongs to the caller on one of its REST API endpoints, requiring only a basic read capability, allowing any authenticated user (including…
CVE-2026-14226Medium4.3—2026-07-30The Easy Appointments WordPress plugin before 3.12.28 does not require a sufficient capability on one of its appointment-listing REST endpoints, restricting it only to a capability that every authenticated user holds, allowing users with s…
CVE-2026-14223Medium4.3—2026-07-30The Easy Appointments WordPress plugin before 3.12.28 does not verify ownership or capability when returning stored customer details, allowing users with subscriber-level access to read any customer's personal information by iterating an i…
CVE-2026-14238Medium4.1—2026-08-10The vitepos WordPress plugin before 3.6.0 does not sanitize or parameterize an identifier taken from a REST request body before using it in a database query in one of its report endpoints, allowing users with administrator-level access to…
CVE-2026-14211Low3.8—2026-08-10The Booking for Appointments and Events Calendar WordPress plugin before 9.7 does not verify that an authenticated employee (provider) is related to the customer whose record is being accessed, allowing any employee with an Employee Panel…
CVE-2026-14222Low3.8—2026-07-30The Easy Appointments WordPress plugin before 3.12.28 does not perform any capability or nonce check in one of its connection-deletion actions, allowing users with contributor-level access to delete the booking configuration and disable th…
CVE-2026-14221Low3.8—2026-07-30The Easy Appointments WordPress plugin through 4.0 does not perform capability checks in several of its appointment-management actions, relying only on a nonce that any authenticated user can obtain, allowing users with contributor-level a…
CVE-2026-14213Low3.7—2026-08-13The Booking for Appointments and Events Calendar WordPress plugin before 2.4.6 does not verify that an authenticated employee (provider) is assigned to the appointment being accessed, allowing any employee to read any appointment by its i…
CVE-2026-18044Low3.7—2026-08-12The Estatik Real Estate Plugin WordPress plugin before 4.3.4 does not validate the same recipient list that it later uses to address the message sent by its property request form, allowing unauthenticated users to send emails to arbitrary…
CVE-2026-17016Low3.7—2026-08-10The Accept PayPal & Stripe with Subscriptions for WooCommerce WordPress plugin through 3.1.0 does not validate the amount actually paid against the order total in its PayPal Data Transfer return handler, allowing a customer to pay less tha…
CVE-2026-14188Low2.7—2026-07-30The Easy Appointments WordPress plugin before 3.12.28 does not perform a per-request capability or nonce check on one of its customer-listing handlers, allowing authenticated users with contributor-level access to read every stored custome…
CVE-2026-12971Low2.2—2026-08-10The LearnPress WordPress plugin before 4.4.4 does not validate a user-supplied URL before the server fetches it, allowing users with the instructor role to induce the server to issue requests to arbitrary external hosts, a blind and bound…

Red Hat · 111 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73269Critical9.9—2026-08-12A flaw was found in the cluster-curator-controller component.
CVE-2026-73268Critical9.9—2026-08-12A flaw was found in the cluster-curator-controller component of multicluster engine (MCE).
CVE-2026-72508Critical9.9—2026-08-12A flaw was found in the multicloud-operators-subscription component of Red Hat Advanced Cluster Management (RHACM).
CVE-2026-72526Critical9.9—2026-08-12A flaw was found in the multicloud-integrations component.
CVE-2026-18948Critical9.9—2026-08-10A flaw was found in Feast.
CVE-2026-14450Critical9.9—2026-08-10A flaw was found in the MaaS API.
CVE-2026-10579Critical9.8—2026-08-11A flaw was found in Picketlink Federation SAML; the unsolcited response handler would accept forged assertions with no verification or validation, permitting an unauthed attacker to authenticate as any principal in any role.
CVE-2026-70398Critical9.6—2026-08-12A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM).
CVE-2026-71471Critical9.0—2026-08-12A flaw was found in acm-search-v2-rhel9.
CVE-2026-13622High8.8—2026-08-12A symlink following vulnerability was found in KubeVirt's virt-handler migration proxy.
CVE-2026-19546High8.8—2026-08-11A flaw was found in DBI.
CVE-2026-15555High8.8—2026-08-11A flaw was found in JBoss marshalling.
CVE-2026-18982High8.8—2026-08-10A flaw was found in the RHOAI training-operator.
CVE-2026-18951High8.8—2026-08-10A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator.
CVE-2026-18950High8.8—2026-08-10A flaw was found in odh-dashboard.
CVE-2026-18949High8.8—2026-08-10A flaw was found in odh-dashboard.
CVE-2026-18617High8.8—2026-08-10A flaw was found in the Data Science Pipelines Operator (DSPO).
CVE-2026-13717High8.8—2026-08-10A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway.
CVE-2026-15572High8.8—2026-08-05A flaw was found in Keycloak's Dynamic Client Registration (DCR) security policy management.
CVE-2026-18608High8.7—2026-08-10A flaw was found in the Data Science Pipelines Operator (DSPO).
CVE-2026-71473High8.5—2026-08-12A flaw was found in the `search-v2-operator` component.
CVE-2026-18947High8.5—2026-08-10A flaw was found in Feast.
CVE-2026-71576High8.5—2026-08-10A flaw was found in multicluster-global-hub.
CVE-2026-12382High8.2—2026-07-15A flaw was found in the AAP Gateway Envoy proxy configuration.
CVE-2026-15560High8.1—2026-08-11when EAP runs with -secmgr, the openjdk-orb's JDKBridge honours attacker-supplied CDR codebase URLs during object unmarshalling on :3528, allowing an unauthenticated attacker to load and instantiate arbitrary classes from a remote URL in t…
CVE-2026-15556High8.1—2026-08-11A flaw was found in Picketlink's SP signature validation; a SAML response containing zero assertion elements matching the signature check can allow an attacker to forge a SAML response and auth as any principal with any roles on the protec…
CVE-2026-15467High8.1—2026-08-10A flaw was found in the trustyai-service-operator's LMEvalJob controller.
CVE-2026-15581High8.0—2026-08-10A flaw was found in the TrustyAI Service (TAS) deployment.
CVE-2026-72693High7.8—2026-08-11`openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged context.
CVE-2026-63622High7.8—2026-08-10A flaw was found in libvirt.
CVE-2026-54228High7.8—2026-06-13A time-of-check time-of-use (TOCTOU) race condition was found in the abrt-dbus D-Bus service's SetElement method.
CVE-2026-73122High7.7—2026-08-12A flaw was found in the multicloud-operators-channel component of Red Hat Advanced Cluster Management (RHACM).
CVE-2026-66878High7.7—2026-08-12A flaw was found in multicloud-operators-subscription.
CVE-2026-18941High7.7—2026-08-10A flaw was found in Feast and feast-operator.
CVE-2026-18621High7.6—2026-08-10A flaw was found in Data Science Pipelines (DSP).
CVE-2026-19387High7.6—2026-08-10A heap out-of-bounds write vulnerability was found in the GStreamer gst-plugins-bad adpcmdec element when decoding IMA/DVI ADPCM audio.
CVE-2026-18381High7.6—2026-07-30A flaw was found in the koku-metrics-operator for Red Hat OpenShift.
CVE-2026-71469High7.5—2026-08-12A flaw was found in search-v2-api.
CVE-2026-19654High7.5—2026-08-12A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module.
CVE-2026-71467High7.5—2026-08-11A flaw was found in search-v2-api.
CVE-2026-71217High7.5—2026-08-11A flaw was found in iperf3.
CVE-2026-15567High7.5—2026-08-11A flaw was found in Wildfly.
CVE-2026-15565High7.5—2026-08-11A flaw was found in Undertow.
CVE-2026-15562High7.5—2026-08-11A flaw was found in EAP's jboss-remoting.
CVE-2026-15561High7.5—2026-08-11A flaw was found in EAP's undertow http/1.1 chunked-transfer decoder.
CVE-2026-18618High7.5—2026-08-10A flaw was found in ml-metadata.
CVE-2026-18611High7.5—2026-08-10A flaw was found in the Data Science Pipelines Operator.
CVE-2026-50237High7.4—2026-08-11A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy.
CVE-2026-50236High7.4—2026-08-11An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers.
CVE-2026-15563High7.4—2026-08-11A flaw was found in EAP's IIOP.
CVE-2026-15554High7.4—2026-08-11the Undertow AJP listener honours forged ssl_cert and is_ssl AJP attributes without requiring any shared-secret authentication.
CVE-2026-16442High7.4—2026-08-05A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication.
CVE-2026-16443High7.4—2026-08-05A flaw was found in the SAML metadata import functionality of the keycloak-services component, which is the core engine for identity brokering in Red Hat Build of Keycloak.
CVE-2026-73266High7.1—2026-08-13A flaw was found in the clusterclaims-controller component of Multicluster Engine (MCE).
CVE-2026-71474High7.1—2026-08-11A flaw was found in insights-client.
CVE-2026-72694High7.1—2026-08-11A flaw was found in MRTG.
CVE-2026-18620High7.1—2026-08-10A flaw was found in Data Science Pipelines.
CVE-2026-19389High7.1—2026-08-10Multiple integer overflow and underflow vulnerabilities were found in the GStreamer gst-plugins-ugly ASF demuxer (asfdemux) when parsing header objects from crafted ASF, WMV, or WMA files.
CVE-2026-54229High7.0—2026-06-13A race condition was found in the abrt-dbus D-Bus service's ChownProblemDir method.
CVE-2026-71475Medium6.8—2026-08-11A flaw was found in insights-client.
CVE-2026-19278Medium6.8—2026-08-10A flaw was found in StackRox/RHACS Central's Auth Machine-to-Machine (M2M) token exchange.
CVE-2026-18382Medium6.8—2026-07-30A flaw was found in koku-metrics-operator.
CVE-2026-73583Medium6.6—2026-08-13A flaw was found in sblim-sfcb.
CVE-2026-74243Medium6.5—2026-08-14A flaw was found in Red Hat Quay.
CVE-2026-58224Medium6.5—2026-08-14A flaw was found in Samba's CTDB, the clustered database service used by Samba.
CVE-2026-18728Medium6.5—2026-08-13A flaw was found in open-iscsi.
CVE-2026-71846Medium6.5—2026-08-12A flaw was found in insights-client.
CVE-2026-18727Medium6.5—2026-08-12A flaw was found in open-iscsi's iscsiuio component.
CVE-2026-18726Medium6.5—2026-08-12A flaw was found in open-iscsi.
CVE-2026-19391Medium6.5—2026-08-11A flaw was found in insights-core where the password redaction layer fails to recognize credentials not keyed under the literal string 'password'.
CVE-2026-24330Medium6.5—2026-08-11A flaw was found in wildfly-core.
CVE-2026-16456Medium6.5—2026-08-10A flaw was found in the `odh-model-controller`.
CVE-2026-19404Medium6.5—2026-08-10A flaw was found in 389 Directory Server.
CVE-2026-18207Medium6.5—2026-07-29A flaw was found in the client policy enforcement mechanism of Keycloak.
CVE-2026-14258Medium6.5—2026-07-01A flaw was found in dhcpcd's IPv6 Neighbor Discovery Router Advertisement processing.
CVE-2026-64927Medium6.4—2026-08-12A flaw was found in the multicloud-operators-channel component.
CVE-2026-18967Medium6.4—2026-08-06A flaw was found in the SAML broker component of Keycloak, an identity and access management solution.
CVE-2026-73585Medium6.3—2026-08-13A flaw was found in sblim-cmpi-base.
CVE-2026-73584Medium6.3—2026-08-13A flaw was found in sblim-sfcb.
CVE-2026-71845Medium6.3—2026-08-11A flaw was found in insights-client.
CVE-2026-71577Medium6.3—2026-08-10A flaw was found in multicluster-global-hub.
CVE-2026-18938Medium6.2—2026-08-07A flaw was found in p11-kit.
CVE-2026-74245Medium5.9—2026-08-14A flaw was found in Red Hat Quay's exported logs feature.
CVE-2026-74244Medium5.9—2026-08-14A flaw was found in Red Hat Quay's Stripe billing webhook handler.
CVE-2026-18663Medium5.9—2026-08-12A flaw was found in 389-ds-base.
CVE-2026-19130Medium5.8—2026-08-12A flaw was found in the provider-credential-controller component of multicluster-engine (MCE).
CVE-2026-19617Medium5.5—2026-08-14A flaw was found in libdm.
CVE-2026-19548Medium5.5—2026-08-12Multiple Use-After-Free vulnerabilities were found in the add_archive_element function in ld/ldmain.c of the GNU linker (ld), a component of binutils.
CVE-2026-18942Medium5.5—2026-08-10A flaw was found in the Feast operator.
CVE-2026-63623Medium5.5—2026-08-10A flaw was found in libvirt.
CVE-2026-74240Medium5.4—2026-08-14A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and single sign-on (SSO) authentication.
CVE-2026-14614Medium5.4—2026-07-03A flaw was found in the ClientResource component of Keycloak's admin services when Fine-Grained Admin Permissions (FGAP) v2 is enabled.
CVE-2026-74242Medium5.3—2026-08-14A flaw was found in Red Hat Quay.
CVE-2026-19879Medium5.3—2026-08-14A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path.
CVE-2026-71468Medium5.3—2026-08-11A flaw was found in acm-search-v2-api-rhel9.
CVE-2026-14180Medium5.3—2026-08-11A flaw was found in the ChunkReader component of the Undertow HTTP server, which is used by WildFly and JBoss EAP to handle chunked transfer encoding.
CVE-2026-71218Medium5.3—2026-08-11A flaw was found in iperf3.
CVE-2026-24329Medium4.9—2026-08-11A flaw was found in wildfly-core.
CVE-2026-11986Medium4.9—2026-06-11A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities.
CVE-2026-74241Medium4.8—2026-08-14A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authentication handling.
CVE-2026-14781Medium4.8—2026-07-05A flaw exists in the org.keycloak.broker.oidc package where the OIDC broker incorrectly synchronizes the email_verified claim.
CVE-2026-13002Medium4.4—2026-08-14A flow has been identified into dnssec.c library, causing an infinite loop to dnsmasq service.
CVE-2026-6426Medium4.4—2026-08-10A type mismatch vulnerability was found in QEMU's vhost inflight migration VMState handling.
CVE-2026-19078Medium4.3—2026-08-11A flaw was found in the oauth-server component.
CVE-2026-19519Medium4.3—2026-08-11A flaw was found in claircore's RPM package scanner.
CVE-2026-14615Medium4.3—2026-07-03A flaw was found in the Fine-Grained Admin Permissions (FGAP) v2 implementation within Keycloak's administrative services.
CVE-2026-74247Medium4.2—2026-08-14A flaw was found in Red Hat Quay.
CVE-2026-19730Medium4.2—2026-08-13The 'podman quadlet install --replace' command opens the existing destination file with O_CREATE|O_WRONLY but omits O_TRUNC.
CVE-2026-19411Low3.9—2026-08-10A NULL pointer vulnerability has been found in the the shim application of dp.c library.
CVE-2026-18569Low3.7—2026-08-04A flaw was found in the backchannel logout endpoint of the keycloak-services component, which is part of the Red Hat Build of Keycloak.
CVE-2026-61477Low2.3—2026-08-07An injection vulnerability was found in libvirt's virtual network driver.

N/a · 106 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-59321Critical9.8—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state.
CVE-2025-59326Critical9.8—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections across temporary file systems, allowing for unsigned code to be executed from these locations.
CVE-2026-51584Critical9.8—2026-08-11An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in server/router/api/v1/auth_service.go, because SSO identity is matched only on an attacker-controllable…
CVE-2026-51080Critical9.8—2026-07-17libpvestorage-perl v9.1.1 and libpve-storage-perl v8.3.7 were discovered to contain an XML External Entity (XXE) vulnerability.
CVE-2026-51540Critical9.8—2026-07-13OpENer 2.3.0 (master branch up to commit 76b95cf) is vulnerable to a severe memory corruption issue caused by an integer underflow in the processing of connected explicit messages (SendUnitData).
CVE-2025-59324Critical9.1—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.
CVE-2026-51541Critical9.1—2026-07-13OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in CIP message parsing when handling malformed explicit requests with a forged EPath size.
CVE-2026-51538Critical9.1—2026-07-13EIPStackGroup OpENer 2.3.0 (commit 76b95cf) suffers from an Incorrect Access Control vulnerability in its handling of encapsulation sessions.
CVE-2026-51537Critical9.1—2026-07-13EIPStackGroup OpENer 2.3.0 (commit 76b95cf) has an out-of-bounds read issue in Connection Manager handling of ForwardOpen requests when processing short malformed packets.
CVE-2026-51536Critical9.1—2026-07-13In OpENer 2.3.0 (commit 76b95cf) when parsing incoming CIP (Common Industrial Protocol) network packets, the length parameter is inconsistently typed across the call stack.
CVE-2026-19385High8.8—2026-08-13Heap buffer overflow in PostgreSQL pg_dump of long function transform lists allows an object creator to execute arbitrary code as the operating system user running pg_dump, via a crafted transform list.
CVE-2026-18408High8.8—2026-08-13Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql \rest…
CVE-2026-16239High8.8—2026-08-13Type confusion in PostgreSQL "portal"/cursor lifecycle allows a user to execute arbitrary code as the operating system user running the database, via re-creation of a cursor or other portal with different types.
CVE-2026-16238High8.8—2026-08-13Type confusion in PostgreSQL pg_restore_attribute_stats() allows an object creator to execute arbitrary code as the operating system user running the database, via conflation of range and multirange values.
CVE-2026-15742High8.8—2026-08-13Integer wraparound in PostgreSQL fuzzystrmatch allows a user to direct writes to a huge range of addresses, executing arbitrary code as the operating system user running the database, via extreme inputs to SQL function levenshtein() or lev…
CVE-2026-15741High8.8—2026-08-13SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition.
CVE-2026-14680High8.8—2026-08-13Type confusion with PostgreSQL "internal" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument type.
CVE-2026-14677High8.8—2026-08-13Integer wraparound in PostgreSQL 32-bit builds of pltcl and plperl allows an object creator to cause the server to undersize an allocation and write out-of-bounds via crafted function bodies.
CVE-2026-14676High8.8—2026-08-13Heap buffer overflow in PostgreSQL pg_stat_statements allows the query author to execute arbitrary code as the operating system user running the database, via crafted queries containing array constants.
CVE-2026-14671High8.8—2026-08-13Type confusion in PostgreSQL module "refint" allows an object creator to execute arbitrary code as the operating system user running the database.
CVE-2026-14670High8.8—2026-08-13Heap buffer overflow in PostgreSQL plperl return of a tied hash allows the function owner to execute arbitrary code as the operating system user running the database, via a crafted function body.
CVE-2026-14669High8.8—2026-08-13Heap buffer overflow in PostgreSQL to_char(timestamptz) allows the party choosing the timezone to execute arbitrary code as the operating system user running the database, via a long POSIX timezone abbreviation.
CVE-2026-14664High8.8—2026-08-13Heap buffer overflow in PostgreSQL regexp allows the query author to execute arbitrary code as the operating system user running the database, via text that would not pass encoding validation.
CVE-2026-14662High8.8—2026-08-13Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs.
CVE-2026-51583High8.5—2026-08-11An issue in usememos through v0.30.0 allows a remote authenticated attacker to perform Server-Side Request Forgery (SSRF) via the Webhook validation mechanism in internal/webhook/validate.go, by setting a webhook target to an internal addr…
CVE-2026-67986High8.4—2026-08-13amazing-print/amazing_print at commit dc890dfafdf07088ea901df53c19c2710e5c5234 contains a Ruby code injection condition in AwesomeMethodArray#grep.
CVE-2025-59323High8.4—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to validate the integrity of the DataStore, a non-partitioned filesystem, responsible for storing configuration and cryptographic details.
CVE-2026-14679High8.2—2026-08-13Stack buffer overflow in PostgreSQL argument name matching allows an object creator to achieve unknown impacts via OUT parameter count.
CVE-2026-6464High8.1—2026-08-13Untrusted data inclusion in PostgreSQL psql COPY may allow a server administrator to elicit execution of data lines as psql commands, via error injection.
CVE-2026-14668High8.1—2026-08-13Type confusion regarding input of PostgreSQL ctid data type selectivity estimator allows an object creator to view a calculation derived from the value of an arbitrary 4-byte span of memory, via a chosen non-ctid input.
CVE-2026-67991High7.5—2026-08-13crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains a polynomial-time regular expression denial-of-service condition in RubyLLM::Utils.underscore on Ruby 3.1.x.
CVE-2025-59322High7.5—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to properly handle decryption errors and allows encrypted volumes to be mounted as plaintext.
CVE-2025-59327High7.5—2026-08-12In CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4, bootxsa.efi fails to properly validate LUKS encryption and, if encryption is present, all CryptoPro file integrity checks are skipped.
CVE-2025-59325High7.5—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to encrypt the initramfs contents, allowing for the offline recovery of secrets and cryptographic details.
CVE-2026-19010High7.3—2026-08-06A security vulnerability has been detected in TinyAGI 0.0.20.
CVE-2026-19009High7.3—2026-08-06A weakness has been identified in TinyAGI 0.0.20.
CVE-2026-19000High7.3—2026-08-06A vulnerability was identified in JeecgBoot up to 3.9.2.
CVE-2026-6471High7.2—2026-08-13Missing authorization in PostgreSQL logical decoding allows a non-superuser holding REPLICATION privilege to dlopen any file visible to the operating system account running the server, via the choice of logical decoding plugin.
CVE-2025-59319High7.2—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to certify the integrity of the intended boot partition and selects the first partition index matching a hardcoded type value.
CVE-2026-14663Medium6.5—2026-08-13Cleartext storage in PostgreSQL pgcrypto disabled ciphers allows a user to recover cleartext, via direct observation of the faulty ciphertext.
CVE-2025-15685Medium6.3—2026-08-12A flaw has been found in Open5GS up to 2.7.1.
CVE-2024-14044Medium6.3—2026-08-12A vulnerability was identified in Open5GS up to 2.7.1.
CVE-2024-14043Medium6.3—2026-08-12A vulnerability was determined in Open5GS up to 2.7.1.
CVE-2024-14042Medium6.3—2026-08-11A vulnerability was found in Open5GS up to 2.7.1.
CVE-2026-19022Medium6.3—2026-08-06A vulnerability was determined in OpenHands up to 0.62.0.
CVE-2026-67990Medium5.4—2026-08-13basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers.
CVE-2026-14672Medium5.3—2026-08-13Observable response discrepancy in PostgreSQL SCRAM authentication allows an unauthenticated user to test the existence of a user via observing the SCRAM iteration count.
CVE-2025-15684Medium5.3—2026-08-12A vulnerability was detected in Open5GS up to 2.7.6.
CVE-2026-19011Medium5.3—2026-08-06A vulnerability was detected in TinyAGI 0.0.20.
CVE-2026-19353Medium5.0—2026-08-09A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2.
CVE-2026-18816Medium5.0—2026-08-04A vulnerability was identified in Baserow up to 2.3.2.
CVE-2026-18592Medium4.7—2026-08-03A security flaw has been discovered in osCommerce 4.14.63493.
CVE-2025-59320Medium4.6—2026-08-12CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 stores TPM2.0 secrets in a serialized format within unused disk sectors.
CVE-2026-6470Medium4.3—2026-08-13Missing authorization in PostgreSQL DDL commands allows an object creator to achieve denial of service against ALTER and DROP of the type, via creating a dependency on the type.
CVE-2026-18024Medium4.3—2026-08-13Buffer over-read in PostgreSQL ascii() SQL function allows a user to disclose up to 3 bytes after the end of a specific allocation, via a crafted text value.
CVE-2026-14678Medium4.3—2026-08-13Buffer over-read in PostgreSQL pg_trgm index picksplit function reads past end of a heap buffer.
CVE-2025-15687Medium4.3—2026-08-12A security flaw has been discovered in Open5GS up to 2.7.6.
CVE-2025-15686Medium4.3—2026-08-12A vulnerability has been found in Open5GS up to 2.7.6.
CVE-2026-19213Medium4.3—2026-08-07A vulnerability was identified in WonderTrader up to 0.9.9.
CVE-2026-19212Medium4.3—2026-08-07A vulnerability was determined in WonderTrader up to 0.9.9.
CVE-2026-19037Medium4.3—2026-08-06A weakness has been identified in WonderTrader up to 0.9.9.
CVE-2026-18819Medium4.3—2026-08-04A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd.
CVE-2026-14681Medium4.2—2026-08-13Improper enforcement of message integrity in PostgreSQL GSSAPI support allows a user to negotiate GSSAPI contrary to pg_hba.conf rules, via initial direct TLS connection.
CVE-2026-14666Medium4.2—2026-08-13Incomplete tracking in PostgreSQL of changes to role membership, role attributes, and database ownership allows a query to continue using cached row-level security policies after those changes require a different policy, via plan reuse.
CVE-2026-6469Low3.8—2026-08-13Incorrect ownership assignment in PostgreSQL ALTER TABLE ALTER TYPE command reassigns ownership of dependent statistics objects to the current user.
CVE-2026-16241Low3.8—2026-08-13Integer underflow in PostgreSQL ECPG allows a database server administrator to achieve temporary denial of service against the ECPG client via sending a bytea value lacking the mandatory prefix.
CVE-2026-14673Low3.8—2026-08-13Untrusted search path in PostgreSQL amcheck allows a grantee of amcheck function EXECUTE privilege to execute arbitrary functions as the owners of expression indexes that depend on the search path, via setting a hostile search path before…
CVE-2026-19208Low3.7—2026-08-07A vulnerability was detected in WonderTrader up to 0.9.9.
CVE-2026-18682Low3.1—2026-08-03A security flaw has been discovered in OpenAkita up to 1.27.12.
CVE-2026-19110Low2.4—2026-08-06A vulnerability was determined in DataGear up to 5.0.0.
CVE-2026-18817Low2.2—2026-08-04A security flaw has been discovered in Baserow up to 2.3.2.
CVE-2026-20917———2026-08-11Exposure of sensitive information caused by incorrect data forwarding during transient execution for some Intel(R) Processors within Ring 0: Hypervisor and Kernel may allow information disclosure.
CVE-2026-20712———2026-08-11Incomplete cleanup in some UEFI firmware for some Intel(R) reference platforms within UEFI may allow an information disclosure.
CVE-2026-35502———2026-08-11Deserialization of untrusted data for some Intel(R) Extension for PyTorch before version 2.8.0 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-34175———2026-08-11Uncontrolled search path for some Hardware-Aware-Automated-MachineLearning NA before version 45cd723 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-32791———2026-08-11Untrusted search path for some Intel(R) Performance Counter Monitor (Intel(R) PCM) before version tag 202604 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-32788———2026-08-11Uncontrolled search path for some Approximate Bayesian Inference Framework before version on commit #484c949 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-32677———2026-08-11Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-28757———2026-08-11Protection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-28729———2026-08-11Integer overflow in the UEFI firmware for the Intel(R) Slim Bootloader may allow an information disclosure.
CVE-2026-28707———2026-08-11Protection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-28700———2026-08-11Uncontrolled search path for some EquiTriton before version f5ddbb5 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-25194———2026-08-11Out-of-bounds write in the firmware for the Intel(R) Slim Bootloader may allow a denial of service.
CVE-2026-24693———2026-08-11Protection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-21400———2026-08-11Protection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-21399———2026-08-11Heap-based buffer overflow for the Intel(R) Open Volume Kernel Library (Intel(R) Open VKL) library maintained by intel(R) before version 2.0.2 within Ring 3: User Applications may allow a denial of service.
CVE-2026-21387———2026-08-11Protection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20908———2026-08-11Time-of-check time-of-use race condition for the Intel(R) NPU Driver for Windows for all versions within Ring 1: Device Drivers may allow a denial of service.
CVE-2026-20906———2026-08-11Protection mechanism failure for some Intel(R) Neural Compressor software before version v3.6 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20903———2026-08-11Protection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20799———2026-08-11Untrusted search path for some Battery Life Diagnostic Tool software before version 2.9.0 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20786———2026-08-11Out-of-bounds read for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
CVE-2026-20770———2026-08-11Protection mechanism failure for some Cluster Management Toolkit for Kubernetes software before version v0.8.5 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20760———2026-08-11Improper handling of overlap between protected memory ranges in some microcode for some Intel(R) Processors within Ring 0: Hypervisor may allow an escalation of privilege.
CVE-2026-20755———2026-08-11Protection mechanism failure for some LLM Scaler software within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20734———2026-08-11Improper initialization in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT), and some Intel(R) Standard Manageability may allow an information disclosure.
CVE-2026-20728———2026-08-11Protection mechanism failure for some Intel Extension for TensorFlow software before version 2.15.0.3 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20715———2026-08-11Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageability may allow a denial of service.
CVE-2026-20713———2026-08-11Always-incorrect control flow implementation in some firmware for some Intel(R) Xeon(R) processors may allow an escalation of privilege.
CVE-2026-20708———2026-08-11Insertion of sensitive information into log file in the subsystem for the Intel(R) AMT and Intel(R) Standard Manageability may allow an information disclosure.
CVE-2026-20707———2026-08-11Hardware logic contains race conditions for some 3rd Gen Intel(R) Xeon(R) Scalable Processors within Ring 3: unprivileged software may allow a denial of service.
CVE-2026-20702———2026-08-11Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure.
CVE-2025-35987———2026-08-11Omission of security-relevant information for some Intel(R) Software Guard Extensions Data Center Attestation Primitives within Ring 0: Kernel may allow a denial of service.
CVE-2025-35973———2026-08-11Improper handling of values for some Intel(R) Processors within Ring 0: Kernel, Hypervisor and Bare Metal OS may allow an escalation of privilege.
CVE-2025-31938———2026-08-11Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure.
CVE-2025-31356———2026-08-11Insufficient verification of data authenticity for some Intel(R) Trust Domain Extensions (Intel(R) TDX) within Ring 0: Hypervisor may allow an information disclosure.

Elastic · 48 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72642High8.8—2026-08-13The native inference process that Elasticsearch uses to evaluate uploaded machine learning models accepts a model operation that computes a memory address from an offset supplied inside the model, without validating that the offset stays w…
CVE-2026-72665High8.1—2026-08-13Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Osquery and Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).
CVE-2026-72672High7.7—2026-08-13The Elastic Security capability that suggests existing field values while a user authors endpoint policy artifacts queries Elastic Defend event data with Kibana's internal Elasticsearch account instead of the account of the requesting user.
CVE-2026-72670High7.7—2026-08-13A lower privileged user who holds only the privilege to read agent policies can read the entire configuration of a configured Fleet proxy.
CVE-2026-72669High7.6—2026-08-13The state that Kibana stores for an Observability Onboarding flow is not bound to the user who created the flow, and the routes that read and update that state do not verify ownership.
CVE-2026-72677High7.3—2026-08-13Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139).
CVE-2026-72658High7.3—2026-08-13Cross-Site Request Forgery (CWE-352) in Kibana can lead to privilege escalation via Cross Site Request Forgery (CAPEC-62).
CVE-2026-72675High7.1—2026-08-13Missing Authorization (CWE-862) in Kibana can lead to cross-space information disclosure and unauthorized data modification via Privilege Abuse (CAPEC-122).
CVE-2026-72643High7.1—2026-08-13Kibana Agent Builder determines whether a caller owns a private agent by comparing a stable user identifier when one is recorded, and falling back to a comparison of the username when it is not.
CVE-2026-72632High7.1—2026-08-13Observable Discrepancy (CWE-203) in Kibana Fleet can lead to information disclosure via Excavation (CAPEC-116).
CVE-2026-72630High7.1—2026-08-13Incorrect Authorization (CWE-863) in Kibana Fleet can lead to privilege escalation via Privilege Abuse (CAPEC-122).
CVE-2026-72629High7.1—2026-08-13Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized cross-space access via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).
CVE-2026-72666Medium6.8—2026-08-13Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to unauthorized query execution against Elastic Agents that are assigned to a Kibana space the requesting user has no access to, via Accessing Functionality Not…
CVE-2026-72687Medium6.5—2026-08-13A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier.
CVE-2026-72686Medium6.5—2026-08-13A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input.
CVE-2026-72684Medium6.5—2026-08-13A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input.
CVE-2026-72683Medium6.5—2026-08-13A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate) to submit a request that…
CVE-2026-72681Medium6.5—2026-08-13Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature's functionality.
CVE-2026-72680Medium6.5—2026-08-13Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one t…
CVE-2026-72679Medium6.5—2026-08-13Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query.
CVE-2026-72678Medium6.5—2026-08-13Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure.
CVE-2026-72676Medium6.5—2026-08-13Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of attacker-supplied script content via Code Injection (CAPEC-242).
CVE-2026-72674Medium6.5—2026-08-13Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72667Medium6.5—2026-08-13Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to a denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72664Medium6.5—2026-08-13Missing Authorization (CWE-862) in Kibana can lead to unauthorized execution of Elastic Defend response actions on managed hosts via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).
CVE-2026-72663Medium6.5—2026-08-13Inefficient Algorithmic Complexity (CWE-407) in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153).
CVE-2026-72661Medium6.5—2026-08-13Missing Authorization (CWE-862) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).
CVE-2026-72660Medium6.5—2026-08-13Uncaught Exception (CWE-248), resulting from Improper Input Validation (CWE-20), in Kibana can lead to denial of service via Input Data Manipulation (CAPEC-153).
CVE-2026-72659Medium6.5—2026-08-13Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72657Medium6.5—2026-08-13Authorization Bypass Through User-Controlled Key (CWE-639) in Fleet Server can lead to information disclosure via Manipulating User-Controlled Variables (CAPEC-77).
CVE-2026-72656Medium6.5—2026-08-13Memory Allocation with Excessive Size Value (CWE-789) in the ES|QL query processing of Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72653Medium6.5—2026-08-13Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72651Medium6.5—2026-08-13Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72648Medium6.5—2026-08-13Cleartext Storage of Sensitive Information in an Environment Variable (CWE-526) in Elastic Cloud on Kubernetes (ECK) can lead to information disclosure via Retrieve Embedded Sensitive Data (CAPEC-37).
CVE-2026-72647Medium6.5—2026-08-13Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Serialized Data with Nested Payloads (CAPEC-230).
CVE-2026-72645Medium6.5—2026-08-13Memory Allocation with Excessive Size Value (CWE-789) in Elasticsearch can lead to denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72640Medium6.5—2026-08-13The Elastic Cloud on Kubernetes (ECK) operator reads a list of secret references from an annotation on secrets it manages, and it accepts the namespace recorded in each reference without validating that the reference is authorized for the…
CVE-2026-72639Medium6.5—2026-08-13Elasticsearch does not enforce an upper bound on a user-supplied count accepted by a search highlighting option, and the allocation derived from that count is not accounted against any circuit breaker.
CVE-2026-72638Medium6.5—2026-08-13Uncontrolled Recursion (CWE-674) in Elasticsearch can lead to denial of service via Input Data Manipulation (CAPEC-153).
CVE-2026-72636Medium6.5—2026-08-13Uncontrolled Recursion (CWE-674) in the Elasticsearch wildcard matching helper can lead to a denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72631Medium6.5—2026-08-13Improper Privilege Management (CWE-269) in Kibana Fleet can lead to privilege escalation via Privilege Escalation (CAPEC-233).
CVE-2026-49089Medium6.5—2026-08-13Allocation of Resources Without Limits or Throttling (CWE-770) in Kibana can lead to denial of service via Excessive Allocation (CAPEC-130).
CVE-2026-72673Medium5.4—2026-08-13Incorrect Authorization (CWE-863) in Kibana can lead to unauthorized deletion of Synthetics private locations via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).
CVE-2026-72685Medium4.3—2026-08-13A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input.
CVE-2026-72671Medium4.3—2026-08-13A Kibana Machine Learning capability that removes a saved object from the current space accepts machine learning trained models as a target, but it verifies only the privileges that apply to anomaly detection jobs and data frame analytics…
CVE-2026-72655Medium4.3—2026-08-13Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915) in the case management functionality of Elastic Security in Kibana can lead to unauthorized modification of case data by an authenticated user who has…
CVE-2026-72650Medium4.3—2026-08-13Authorization Bypass Through User-Controlled Key (CWE-639) in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs (CAPEC-1).
CVE-2026-49096Medium4.3—2026-08-13Uncaught Exception (CWE-248) in Kibana Cases can lead to denial of service via Input Data Manipulation (CAPEC-153).

Gitea · 47 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56654Critical9.8—2026-08-13Privilege Escalation via Access Token Scope Escalation in API
CVE-2026-56443Critical9.6—2026-08-13Token public-only scope bypassed on Limited-visibility owners (Repository + Package categories) — residual after CVE-2026-25714 / PR #37118
CVE-2026-58508Critical9.1—2026-08-13Two SSRF vulnerabilities in Gitea migration/mirror (DNS rebinding + missing re-validation)
CVE-2026-58443Critical9.1—2026-08-13Public-only repository tokens can update private PR head branches
CVE-2026-58433Critical9.1—2026-08-13Team-repository linking endpoint bypasses the RepoAdminChangeTeamAccess organization setting
CVE-2026-56750Critical9.1—2026-08-13Gitea Remember-Me Token Theft Not Invalidating Attacker Session
CVE-2026-55982Critical9.1—2026-08-13OIDC userinfo Endpoint Returns Identity Claims Without Enforcing API Token Scopes
CVE-2026-57894High8.5—2026-08-13Repository Migration Follows Git HTTP Redirects After URL Allow/Block Validation, Enabling Internal Git Repository Exfiltration
CVE-2026-58439High8.1—2026-08-13Branch Protection Bypass via PR Retargeting Preserves Stale `official` Approval Flag
CVE-2026-55987High8.1—2026-08-13OAuth2 sign-in reactivates an administrator-deactivated account on auth sources without refresh tokens (incomplete fix of #38009)
CVE-2026-24791High8.1—2026-08-13Public-only tokens bypass private-resource restrictions on `/api/v1/user` self routes
CVE-2026-58314High7.7—2026-08-13Two SSRF findings in Gitea 1.26.2
CVE-2026-59765High7.5—2026-08-13SSRF via Migration Asset Downloads Bypasses hostmatcher — Reads Internal Files and Cloud Metadata
CVE-2026-58438High7.5—2026-08-13Cross-repository IDOR in issue-dependency removal lets an attacker tamper with and comment on private repos they cannot access
CVE-2026-58436High7.5—2026-08-13ParseAcceptLanguage quadratic-time DoS via Locale middleware on unauthenticated requests
CVE-2026-58434High7.5—2026-08-13Private Repository Metadata Remains Accessible After Access Revocation
CVE-2026-58427High7.5—2026-08-13Private org member list leaked via /members API endpoint — incomplete fix for PR #38145
CVE-2026-58417High7.5—2026-08-13REST API exposes organization membership of private organizations to public
CVE-2026-54481High7.5—2026-08-13Internal API HTTP client hardcodes InsecureSkipVerify:true with no config override (CWE-295)
CVE-2026-58437High7.1—2026-08-13Repository Visibility Manipulation via Git Push Options
CVE-2026-58416High7.1—2026-08-13Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard)
CVE-2026-58440Medium6.8—2026-08-13Webhooks created by a collaborator keep firing after their repo access is revoked → ongoing real-time exfiltration of private repo content (incomplete revocation cleanup in `DeleteCollaboration`)
CVE-2026-58442Medium6.5—2026-08-13Repository migration SSRF via multi-answer DNS allow-list bypass
CVE-2026-58428Medium6.5—2026-08-13Release attachment extension allowlist bypass via web release edit form (variant of CVE-2025-68939)
CVE-2026-57897Medium6.5—2026-08-13Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs
CVE-2026-42931Medium6.5—2026-08-13Denial of Service via Unbounded io.ReadAll in NPM Package Tag Endpoint
CVE-2026-24059Medium6.5—2026-08-13The GET /api/v1/user/actions/runners/registration-token endpoint (and its owner- and repository-level equivalents) creates a new runner registration token if none exists, yet the API scope middleware classifies it as read-only because it i…
CVE-2026-58441Medium6.3—2026-08-13SSRF in restore-repo via unsanitized pull_request.yml Head.CloneURL
CVE-2026-56755Medium6.2—2026-08-13Denial of Service (CPU & Memory Exhaustion) via O(N^2) String Concatenation in Debian Package Upload
CVE-2026-56657Medium6.2—2026-08-13Gitea SSH Key Parser Denial of Service
CVE-2026-58432Medium5.9—2026-08-13Missing Authorization and Authorization Bypass Through User-Controlled Key and Incorrect Permission Assignment for Critical Resource and Exposure of Sensitive Information to an Unauthorized Actor in code.gitea.io/gitea
CVE-2026-57886Medium5.9—2026-08-13Cross-repository issue/comment attachment re-linking can expose private attachment content
CVE-2026-58435Medium5.4—2026-08-13Gitea LFS Deploy-Key Privilege Escalation
CVE-2026-55986Medium5.4—2026-08-13Email Management API Bypasses ManageCredentials Feature Restrictions
CVE-2026-58507Medium5.3—2026-08-13Private Repository Existence Disclosure via go-get Meta Endpoint
CVE-2026-58429Medium4.9—2026-08-13Public-Only Personal access tokens scope bypass in Organization and Permission Endpoints
CVE-2026-58420Medium4.4—2026-08-13Local File Inclusion via file:// URI in Migration Restore
CVE-2026-59763Medium4.3—2026-08-13Unbounded Arch package file metadata can cause resource amplification in Gitea package uploads
CVE-2026-58510Medium4.3—2026-08-13GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private
CVE-2026-58444Medium4.3—2026-08-13Personal access token scope enforcement bypass on the repository home page (`GET /{owner}/{repo}`) discloses private repository contents
CVE-2026-58431Medium4.3—2026-08-13Public-only API token restriction is not enforced on team API routes
CVE-2026-58425Medium4.3—2026-08-13OAuth token introspection returns metadata of tokens issued to other clients (RFC 7662 section 4 violation)
CVE-2026-50105Medium4.3—2026-08-13RSS/Atom feed handlers bypass API-token scope & public-only confinement (incomplete fix of #37698)
CVE-2026-23603Low3.1—2026-08-13Blind SSRF in OAuth2 avatar synchronization via unvalidated OIDC picture claim
CVE-2026-58511Low2.7—2026-08-13Webhook Authorization Header Returned in Plaintext via API
CVE-2026-58445Low2.7—2026-08-13Cross-repository label-ID enumeration oracle via unscoped DeleteIssueLabel API
CVE-2026-55984Low2.7—2026-08-13Null Pointer Dereference in AddTime API Causes Authenticated Denial of Service

Oracle · 44 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61207Critical9.3—2026-07-21Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: Manage Requisition Status).
CVE-2026-61289High8.8—2026-07-21Vulnerability in the Oracle Process Manufacturing Product Development product of Oracle E-Business Suite (component: Quality Management Specs).
CVE-2026-60924High8.8—2026-07-21Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60897High8.8—2026-07-21Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60890High8.8—2026-07-21Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60941High8.7—2026-07-21Vulnerability in the Oracle Service Fulfillment Manager product of Oracle E-Business Suite (component: Fulfillment Engine).
CVE-2026-61335High8.1—2026-07-21Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61333High8.1—2026-07-21Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61287High8.1—2026-07-21Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61000High8.1—2026-07-21Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60904High8.1—2026-07-21Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).
CVE-2026-60877High8.1—2026-07-21Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).
CVE-2026-60875High8.1—2026-07-21Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV).
CVE-2026-47014High8.1—2026-07-21Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: Security).
CVE-2026-61133High7.5—2026-07-21Vulnerability in the Oracle Commerce Platform product of Oracle Commerce (component: Dynamo Application Framework).
CVE-2026-60988High7.5—2026-07-21Vulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60894High7.5—2026-07-21Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61314High7.2—2026-07-21Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues).
CVE-2026-61285High7.2—2026-07-21Vulnerability in the Oracle Process Manufacturing Systems product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60926High7.2—2026-07-21Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60925High7.2—2026-07-21Vulnerability in the Oracle Public Sector Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60910High7.2—2026-07-21Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61299High7.1—2026-07-21Vulnerability in the Oracle Process Manufacturing Logistics product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60908High7.1—2026-07-21Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).
CVE-2026-61043Medium6.7—2026-07-21Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61046Medium6.6—2026-07-21Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60893Medium6.5—2026-07-21Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61269Medium6.3—2026-07-21Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component: WebUI).
CVE-2026-60842Medium6.1—2026-07-21Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite (component: Search).
CVE-2026-60940Medium5.7—2026-07-21Vulnerability in the Oracle Service Contracts product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60957Medium5.4—2026-07-21Vulnerability in the Oracle Transportation Execution product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60912Medium5.4—2026-07-21Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60911Medium5.4—2026-07-21Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-47021Medium5.3—2026-07-21Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D).
CVE-2026-47013Medium5.3—2026-07-21Vulnerability in Oracle Java SE (component: JavaFX).
CVE-2026-60907Medium5.0—2026-07-21Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Create Item Instance).
CVE-2026-61044Medium4.7—2026-07-21Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61316Medium4.3—2026-07-21Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).
CVE-2026-61315Medium4.3—2026-07-21Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: EDI).
CVE-2026-60896Low3.6—2026-07-21Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61303Low1.9—2026-07-21Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-61047Low1.9—2026-07-21Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60913Low1.9—2026-07-21Vulnerability in the Oracle Property Manager product of Oracle E-Business Suite (component: Internal Operations).
CVE-2026-60891Low1.9—2026-07-21Vulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component: Internal Operations).

Adobe · 41 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71398Critical10.0—2026-08-11Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-27302Critical10.0—2026-08-11Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48362Critical10.0—2026-08-11ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-71384Critical9.6—2026-08-11is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-71362Critical9.1—2026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-48381Critical9.0—2026-08-11Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-71387High8.8—2026-08-11ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-71386High8.8—2026-08-11is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-48413High8.7—2026-08-11Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-21273High8.7—2026-08-11is affected by an Improper Input Validation vulnerability that could result in privilege escalation.
CVE-2026-34635High8.4—2026-08-11is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass.
CVE-2026-21279High8.2—2026-08-11is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVE-2026-48440High8.1—2026-08-11ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user.
CVE-2026-25652High7.8—2026-08-11is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.
CVE-2026-48414High7.7—2026-08-11Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-48385High7.7—2026-08-11ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in a Security feature bypass.
CVE-2026-48415High7.6—2026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-48416High7.5—2026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-48439High7.5—2026-08-11CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVE-2026-48438High7.5—2026-08-11CAI Content Credentials is affected by a NULL Pointer Dereference vulnerability that could result in an application denial-of-service.
CVE-2026-48386High7.5—2026-08-11ColdFusion is affected by a Use of a Broken or Risky Cryptographic Algorithm vulnerability that could lead to disclosure of sensitive memory.
CVE-2026-71383High7.3—2026-08-11is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-48442High7.1—2026-08-11CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in a Arbitrary file system read.
CVE-2026-48411Medium6.5—2026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass.
CVE-2026-48436Medium6.5—2026-08-11CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVE-2026-48375Medium6.5—2026-08-11ColdFusion is affected by an Incorrect Authorization vulnerability that could result in an application denial-of-service.
CVE-2026-71389Medium6.2—2026-08-11CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.
CVE-2026-48445Medium6.2—2026-08-11CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVE-2026-48444Medium6.2—2026-08-11CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVE-2026-48443Medium6.2—2026-08-11CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVE-2026-48435Medium6.2—2026-08-11CAI Content Credentials is affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in an application denial-of-service.
CVE-2026-48434Medium6.2—2026-08-11CAI Content Credentials is affected by an Uncontrolled Resource Consumption vulnerability that could lead to application denial-of-service.
CVE-2026-48387Medium6.2—2026-08-11CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnerability that could result in an application denial-of-service.
CVE-2026-48446Medium5.5—2026-08-11CAI Content Credentials is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.
CVE-2026-48437Medium5.5—2026-08-11CAI Content Credentials is affected by an Improper Certificate Validation vulnerability that could result in a Security feature bypass.
CVE-2026-48376Medium5.4—2026-08-11is affected by an Improper Encoding or Escaping of Output vulnerability that could result in a Security feature bypass.
CVE-2026-48384Medium4.9—2026-08-11ColdFusion is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service.
CVE-2026-47922Medium4.7—2026-08-11CAI Content Credentials is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation.
CVE-2026-21269Medium4.6—2026-08-11ColdFusion is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields.
CVE-2026-71390Medium4.0—2026-08-11CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass.
CVE-2026-48412Low2.7—2026-08-11Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation.

Apache · 41 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73240Critical9.8—2026-08-12Specifically crafted inputs may lead to git argument injection in Apache Allura.
CVE-2026-55799Critical9.8—2026-08-10Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.
CVE-2026-44416Critical9.8—2026-08-10Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0.
CVE-2026-42537Critical9.8—2026-08-10Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.
CVE-2026-40920Critical9.8—2026-08-10Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0.
CVE-2026-32227Critical9.8—2026-08-10SQL Injection vulnerability vulnerability in Apache Ranger.
CVE-2026-28672Critical9.8—2026-08-10Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.
CVE-2026-66756Critical9.8—2026-07-30Improper Protection of Alternate Path vulnerability in Apache Tika.
CVE-2026-64608Critical9.8—2026-07-21Heap type confusion and out-of-bounds read/write in the Apache Fory C++ implementation.
CVE-2026-71290Critical9.1—2026-08-11Improper TLS hostname verification vulnerability in Apache HttpComponents Client 5.4 or newer. HostnameVerificationPolicy#BUILTIN setting has no effect when used with the async version of HttpClient.
CVE-2026-69223Critical9.1—2026-08-11Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).
CVE-2026-67587High8.8—2026-08-12Apache Airflow's Task SDK rebuilt a `Callback` object from serialized data by re-running its constructor, which imports the module named by the stored callback path.
CVE-2026-58076High8.8—2026-08-12Apache Airflow's serialization layer reconstructed exception nodes by calling `import_string()` on a class name taken from the serialized blob and instantiating it with arguments from the same blob, with no restriction on what could be imp…
CVE-2026-62391High8.1—2026-07-31The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases.
CVE-2026-73633High7.5—2026-08-14Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts.
CVE-2026-68968High7.5—2026-08-12Apache Airflow's Backfill API authorized a request against a Dag id supplied by the caller whenever the `backfill_id` path segment failed to parse.
CVE-2026-65942High7.5—2026-08-10TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0.
CVE-2026-61899High7.5—2026-08-10Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs.
CVE-2026-55814High7.5—2026-08-10Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.
CVE-2026-67260High7.3—2026-08-12Apache Airflow 3.3.0 moved human-in-the-loop tasks from the triggerer to a new `awaiting_input` task state swept by the scheduler.
CVE-2026-65948High7.3—2026-08-10UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0.  Note:  UnixAuth is NOT a recommended option for production deployments.  Users are recommended to upgrade to version 2.9.0, which fixes this issue.
CVE-2026-66256High7.2—2026-08-13** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Shindig.
CVE-2026-73239Medium6.5—2026-08-12Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types in Apache Allura.
CVE-2026-68971Medium6.5—2026-08-12Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and the XCom result check on `wait_dag_run_until_finished` authorized the target Dag without its team, unlike every other authorization site.
CVE-2026-68970Medium6.5—2026-08-12Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so secrets stored in that shape appeared in cleartext in task logs and in the Rendered Templates UI.
CVE-2026-68969Medium6.5—2026-08-12Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext when they were submitted through the bulk endpoints (`PATCH /api/v2/variables` and `PATCH /api/v2/connections`).
CVE-2026-65017Medium6.5—2026-08-12Apache Airflow's Config API did not mask team-scoped sensitive configuration values in multi-team deployments.
CVE-2026-59244Medium6.5—2026-08-12Apache Airflow's secrets masker did not mask `var.json` Variable values whose value is a dict in the Rendered Templates UI — the dict value failed an `isinstance(str)` guard — so a secret stored as a JSON Variable and referenced in a templ…
CVE-2026-68868Medium6.5—2026-08-12The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by the backend but dropped at the internal cal…
CVE-2026-68872Medium6.5—2026-08-10The AWS Systems Manager Parameter Store and Secrets Manager backends in Apache Airflow's Amazon provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed.
CVE-2026-68871Medium6.5—2026-08-10The Yandex Lockbox secrets backend in Apache Airflow's Yandex provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed.
CVE-2026-65945Medium6.5—2026-08-10Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue.
CVE-2026-44615Medium6.5—2026-07-31Path traversal vulnerability in Apache Zeppelin.
CVE-2026-62764Medium6.5—2026-07-17Improper Handling of Insufficient Privileges vulnerability in Apache Accumulo.
CVE-2026-73238Medium6.1—2026-08-12XSS vulnerability in code display in Apache Allura.
CVE-2026-73237Medium6.1—2026-08-12XSS vulnerability in Markdown handling in Apache Allura.
CVE-2026-68076Medium5.4—2026-08-12Apache Airflow's environment-variable secrets backend resolved a team-scoped Connection or Variable from the wrong team's scope.
CVE-2026-59242Medium5.4—2026-08-12Apache Airflow's XCom `GET /api/v2/{...}/xcomEntries/{key}?deserialize=true` endpoint passed a string-literal payload through `BaseXCom.deserialize_value` without the `_check_forbidden_xcom_keys` guard, allowing an authenticated API user w…
CVE-2026-64607Medium5.3—2026-07-31HttpClient based on the classic i/o model fails to correctly release the underlying connection back to the connection manager if it encounters an invalid or unsupported `Content-Encoding` header value in the response message. Please note t…
CVE-2026-54183Medium4.3—2026-08-12Apache Airflow's secrets masker hides values stored under sensitive key names when they are displayed in the UI.
CVE-2026-62354Medium4.3—2026-08-03Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values.

Intel · 36 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-20749High8.8—2026-08-11Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege.
CVE-2026-24911High8.6—2026-08-11Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
CVE-2026-20776High8.6—2026-08-11Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20727High8.6—2026-08-11Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
CVE-2026-20891High7.9—2026-08-11Improper authentication for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege.
CVE-2026-20737High7.9—2026-08-11Exposure of sensitive information to an unauthorized actor for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege.
CVE-2026-20789High7.8—2026-08-11Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of privilege.
CVE-2026-22887High7.4—2026-08-11Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
CVE-2026-20886High7.4—2026-08-11Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20878High7.4—2026-08-11Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20795High7.4—2026-08-11Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20787High7.4—2026-08-11Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20745High7.4—2026-08-11Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20741High7.4—2026-08-11Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20739High7.4—2026-08-11Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-39452High7.3—2026-08-11Protection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20890High7.3—2026-08-11Improper privilege management for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Privileged Process may allow an escalation of privilege.
CVE-2026-20898High7.2—2026-08-11Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalation of privilege.
CVE-2026-20885High7.2—2026-08-11Improper authentication in the Intel(R) TDX module for some Intel(R) platforms within Ring 0: Trust Domain may allow an information disclosure and escalation of privilege.
CVE-2026-20716High7.0—2026-08-11Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20778Medium6.8—2026-08-11Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
CVE-2026-20780Medium6.5—2026-08-11Uncontrolled resource consumption for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20747Medium6.5—2026-08-11Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.
CVE-2026-20783Medium6.1—2026-08-11Improper conditions check in the firmware for the Intel(R) NPU Driver for all versions within Ring 1: Device Drivers may allow a denial of service.
CVE-2026-20769Medium6.1—2026-08-11Improper conditions check for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
CVE-2026-20731Medium6.1—2026-08-11Improper buffer restrictions for the Intel(R) NPU Driver for all versions within Ring 3: User Applications may allow a denial of service.
CVE-2025-31936Medium5.7—2026-08-11Improper handling of overlap between protected memory ranges for some Intel(R) Xeon(R) 6 processors when using Intel(R) TDX within SMM may allow an escalation of privilege.
CVE-2026-27765Medium5.5—2026-08-11Improper input validation for some vLLM Hardware Plugin for Intel(R) Gaudi(R) software before version 0.16.0 within Ring 3: User Applications may allow a denial of service.
CVE-2026-20901Medium5.3—2026-08-11Improper input validation for some Intel(R) Xeon(R) processors within firmware may allow an escalation of privilege.
CVE-2026-20913Medium5.3—2026-08-11Improper input validation for some Intel(R) Neural Compressor software before version v3.7 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20775Medium5.3—2026-08-11Uncaught exception for some Intel(R) TDX modules within Ring 0: Trust Domain may allow a denial of service.
CVE-2026-20705Medium5.3—2026-08-11Insecure storage of sensitive information in the Intel(R) TDX module for some Intel(R) platform within Ring 0: Trust Domain may allow information disclosure.
CVE-2026-24099Medium5.1—2026-08-11Use after free for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
CVE-2026-20752Medium4.4—2026-08-11Improper authentication for some Intel(R) PROSet/Wireless WiFi Software within Ring 0: Kernel may allow an information disclosure.
CVE-2026-20765Medium4.2—2026-08-11Incorrect comparison for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege.
CVE-2026-20763Medium4.2—2026-08-11Incorrect calculation for some Intel(R) TDX Guest software before version 0.3.1 within Ring 3: User Applications may allow an escalation of privilege.

Dokploy · 35 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72902Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72901Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72886Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72882Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72880Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72876Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72872Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72869Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72868Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72867Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72865Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72864Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72863Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72862Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72740Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72738Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72736Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72735Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72733Critical9.9—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72878Critical9.6—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72877Critical9.6—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72737Critical9.6—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72883High8.8—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72875High8.8—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72866High8.8—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72734High8.4—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72871High7.5—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72873Medium6.5—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72739Medium6.5—2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72885———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72884———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72881———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72879———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72874———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).
CVE-2026-72870———2026-08-10Dokploy is a free, self-hostable Platform as a Service (PaaS).

Siyuan-note · 34 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72811Critical10.0—2026-08-14SiYuan versions <= v3.7.2 contain a SQL injection vulnerability in the backlink/mention search query (kernel/model/backlink.go), which concatenates stored block metadata (title, name, alias, anchor text) and the client-supplied keyword int…
CVE-2026-72810High8.6—2026-08-14SiYuan versions before v3.7.4 contain a publish-boundary bypass vulnerability in WebSocket broadcast sessions that allows anonymous readers to receive unfiltered edits.
CVE-2026-73608High8.6—2026-08-13SiYuan's development branch (endpoint introduced by commit 9b8e8956f, not present in v3.7.3 or master, patched in v3.7.4) contains a missing-authorization vulnerability in the /api/av/getAttributeViewSearchTarget endpoint.
CVE-2026-72804High8.6—2026-08-12SiYuan versions before v3.7.4 fail to validate publish-password tier in getGraph and getLocalGraph endpoints, allowing anonymous readers to retrieve block-level content of password-protected documents.
CVE-2026-72798High8.6—2026-08-12SiYuan versions before v3.7.4 fail to properly filter related-database content in renderAttributeView, allowing anonymous readers to access Relation and Rollup cell contents from hidden or password-protected databases.
CVE-2026-72795High8.6—2026-08-12SiYuan versions before v3.7.4 fail to filter embedded block content by publish access in the getBlockDOMWithEmbed and getBlockDOMsWithEmbed endpoints.
CVE-2026-72794High8.6—2026-08-12siyuan versions before v3.7.4 expose the session cookie signing key through the /api/system/getConf endpoint to unauthenticated users in publish mode.
CVE-2026-72793High8.6—2026-08-12SiYuan versions before v3.7.4 fail to mask sensitive configuration fields in the /api/system/getConf endpoint, allowing anonymous or publish-reader users to obtain the session-cookie signing key, OS username via pandoc path, and encrypted-…
CVE-2026-72789High8.6—2026-08-12SiYuan before v3.7.4 fails to properly validate publish access for encrypted notebooks, treating them as publicly accessible by default.
CVE-2026-72809High8.0—2026-08-12SiYuan versions <= v3.7.2 (patched in v3.7.4) contain an authentication bypass vulnerability in the kernel's CheckAuth function, which grants the administrator role (RoleAdministrator) to any request whose RemoteAddr is loopback (127.0.0.1…
CVE-2026-72807High8.0—2026-08-12SiYuan versions before v3.7.4 contain a second-order SQL injection vulnerability in attribute-view template columns that expose the queryBlocks function, which executes raw SQL using string substitution instead of parameterized queries.
CVE-2026-72801High7.5—2026-08-12SiYuan versions before v3.7.4 disclose encrypted-notebook key-derivation material and wrapped data keys through unauthenticated endpoints in publish mode.
CVE-2026-72812Medium6.5—2026-08-14SiYuan versions before v3.7.4 contain a missing authorization vulnerability in the /api/ref/refreshBacklink endpoint that allows anonymous readers to trigger persistent server-side writes.
CVE-2026-73630Medium5.8—2026-08-14SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/filetree/authFilePublishAccess endpoint, which is registered with CheckAuth only and is reachable anonymously.
CVE-2026-73049Medium5.8—2026-08-14SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getAttributeViewBacklinks endpoint that consults the forbidden access list instead of the visibility list when filtering backlinks.
CVE-2026-73048Medium5.8—2026-08-14SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getRefIDsByFileAnnotationID endpoint that returns block identifiers citing PDF annotations without publish-access filtering.
CVE-2026-73610Medium5.8—2026-08-13SiYuan before v3.7.4 contains an information disclosure vulnerability in the local storage filter that returns the administrator's entire storage map with only three keys sanitized.
CVE-2026-73609Medium5.8—2026-08-13SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getBookmarkLabels endpoint that returns all bookmark labels in the workspace without publish-access filtering.
CVE-2026-73607Medium5.8—2026-08-13SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/storage/getOutlineStorage endpoint that performs no authorization checks.
CVE-2026-73606Medium5.8—2026-08-13SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the /api/block/getRefIDs endpoint that fails to check password-protected document tiers.
CVE-2026-73605Medium5.8—2026-08-13SiYuan versions before v3.7.4 contain a path traversal vulnerability in the getUniqueFilename endpoint that allows anonymous readers to probe filesystem existence without validation or confinement.
CVE-2026-72808Medium5.8—2026-08-12SiYuan versions up to and including v3.7.2 (fixed in v3.7.4) contain an information disclosure vulnerability in the /api/asset/getFileAnnotation endpoint, which returns .sya PDF-annotation file content without a publish-access check.
CVE-2026-72806Medium5.8—2026-08-12SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the FilterViewByPublishAccess filter that fails to check publish password protection when rendering attribute views and database rows.
CVE-2026-72805Medium5.8—2026-08-12SiYuan versions before v3.7.4 fail to enforce publish-access checks on getBlockBreadcrumb, getRefText, and getBlockTreeInfos endpoints, allowing disclosure of protected document content and metadata.
CVE-2026-72803Medium5.8—2026-08-12SiYuan versions before v3.7.4 fail to enforce publish-access checks in the getBlockAttrs and batchGetBlockAttrs endpoints.
CVE-2026-72800Medium5.8—2026-08-12SiYuan versions before v3.7.4 fail to apply publish-access filtering to the getAttributeViewKeysByID endpoint, allowing authenticated readers to retrieve complete database column schemas including descriptions, select vocabularies, and tem…
CVE-2026-72799Medium5.8—2026-08-12SiYuan before v3.7.4 (affected <=v3.7.2) fails to enforce publish-access filters on five filetree path-resolution endpoints (getFullHPathByID, getHPathByID, getPathByID, getIDsByHPath, and getHPathByPath).
CVE-2026-72797Medium5.8—2026-08-12SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the getEncryptedNotebookStatus endpoint that returns encrypted notebook identifiers, names, and lock states without publish-access filtering.
CVE-2026-72796Medium5.8—2026-08-12SiYuan before v3.7.4 contains an access control bypass vulnerability where static-file routes in the server mux bypass publish-access controls enforced on the REST API.
CVE-2026-72792Medium5.8—2026-08-12SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/tag/getTag endpoint that returns tag labels and occurrence counts from password-protected documents to unauthenticated readers.
CVE-2026-72791Medium5.8—2026-08-12SiYuan v3.7.4-alpha.1 (a pre-release; the endpoint does not exist in stable v3.7.3 or earlier) contains an information disclosure vulnerability in the /api/av/getAttributeViewFieldViews endpoint.
CVE-2026-72790Medium5.8—2026-08-12SiYuan before v3.7.4 contains an information disclosure vulnerability in the /api/notebook/getNotebookInfo endpoint that returns notebook metadata without authorization checks.
CVE-2026-72788Medium5.8—2026-08-12SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the UILayout filter that fails to properly restrict administrator workspace state from publish readers.
CVE-2026-72802Medium5.3—2026-08-12SiYuan versions before v3.7.4 contain an information disclosure vulnerability in the resolveAssetPath endpoint that returns absolute filesystem paths unmodified to CheckAuth-only requests.

Rsyncproject · 33 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53791Critical9.1—2026-08-13rsync daemon before 3.5.0 contains an IP address spoofing vulnerability that allows unauthenticated remote attackers to bypass IP-based access controls by sending a crafted PROXY protocol header with a forged source address.
CVE-2026-70461High8.2—2026-08-13rsync 3.2.5 before 3.5.0 contains a heap out-of-bounds write vulnerability that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of a heap allocation by supplying a crafted files-from entry.
CVE-2026-70458High8.2—2026-08-13rsync 3.0.0 before 3.5.0 contains an out-of-bounds write vulnerability that allows attackers to corrupt memory by triggering HLINK_BUMP processing on file entries with the FLAG_HLINKED flag set while the hard-link preservation option is in…
CVE-2026-70456High8.2—2026-08-13rsync 3.0.1 before 3.5.0 contains an out-of-bounds write vulnerability in the read_args() function that allows a malicious sender to corrupt adjacent heap memory by sending a crafted argument list.
CVE-2026-70463High8.1—2026-08-13rsync 3.1.0 before 3.5.0 contains an authorization bypass in auth users directive parsing.
CVE-2026-70460High8.1—2026-08-13rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options.
CVE-2026-53795High8.1—2026-08-13rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options.
CVE-2026-53790High8.1—2026-08-13rsync before 3.5.0 contains multiple command and argument injection vulnerabilities that allow attackers to execute arbitrary commands by supplying malicious input through several code paths, including the RSYNC_CONNECT_PROG environment va…
CVE-2026-53783High8.1—2026-08-13rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to escape enforced directory restrictions by substituting a symlink f…
CVE-2026-70454High8.0—2026-08-13rsync 3.2.0 through 3.2.3 (openssl mode) and rsync-ssl through 3.4.4 (stunnel mode) contain a TLS certificate validation vulnerability that allows on-path attackers to intercept encrypted sessions by presenting self-signed or otherwise inv…
CVE-2026-53803High7.8—2026-08-13rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files by placing a symlink at a predictable output path such as --log-file, --write-batch, or daemon-mode log and statistics p…
CVE-2026-70464High7.5—2026-08-13rsync daemon 2.0.0 before 3.5.0 contains a denial of service vulnerability that allows unauthenticated remote attackers to exhaust daemon connection slots by stalling the handshake process before or after module selection without triggerin…
CVE-2026-70455High7.5—2026-08-13rsync 3.4.2 before 3.5.0 contains a denial of service vulnerability that allows a remote sender to exhaust system resources by specifying the --zt short alias for --compress-threads, which bypasses the refuse options directive's string mat…
CVE-2026-70453High7.5—2026-08-13rsync before 3.5.0 contains an algorithmic complexity vulnerability in the hash_search() function that allows a remote attacker to cause a denial of service by delivering a carefully constructed file list.
CVE-2026-70452High7.4—2026-08-13rsync 3.1.0 before 3.5.0 contains an access control bypass vulnerability that allows remote attackers to circumvent hosts deny rules by inducing DNS resolution failures during hostname-based access control evaluation.
CVE-2026-53793High7.4—2026-08-13rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended inner-module root confinement by constructing paths that resolve outside the chroot boundary when the module root contain…
CVE-2026-53802High7.1—2026-08-13rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --pass…
CVE-2026-53785High7.1—2026-08-13rsync before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to write files outside the intended destination directory tree by crafting relative paths with symlink components in --relative mode.
CVE-2026-53784High7.1—2026-08-13rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module root path or a component of it is a symlink.
CVE-2026-70462Medium6.5—2026-08-13rsync 3.1.0 before 3.5.0 contains a signed integer overflow vulnerability in the I/O timeout implementation that allows attackers to permanently disable connection timeouts by injecting MSG_IO_TIMEOUT messages carrying non-positive (zero o…
CVE-2026-70457Medium6.5—2026-08-13rsync 3.2.3 before 3.5.0 contains an out-of-bounds write in parse_size_arg() where the return value of snprintf() is used directly as an index into a .bss-segment array without bounds checking.
CVE-2026-53792Medium6.5—2026-08-13rsync before 3.5.0 contains an out-of-bounds read vulnerability in the sender-side block matching logic that allows a malicious receiver to trigger memory access before the start of an allocated buffer by sending a crafted checksum block w…
CVE-2026-53789Medium6.5—2026-08-13rsync before 3.5.0 contains an improper path handling vulnerability that allows a malicious sender to expand the scope of --delete operations beyond the intended destination subtree by sending a crafted file list that causes rsync to recla…
CVE-2026-53788Medium6.5—2026-08-13rsync before 3.5.0 contains a newline injection vulnerability in the name-converter uid/gid mapping interface that allows local attackers to forge protocol messages by creating user or group names containing newline characters.
CVE-2026-53786Medium6.5—2026-08-13rsync before 3.5.0 contains a filter rule bypass vulnerability that allows authenticated clients to override module-level filter restrictions by supplying malicious --filter merge file directives.
CVE-2026-53799Medium6.3—2026-08-13rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply arbitrary ACLs or extended attributes to unintended files by substituting a symlink at a predictable destination path be…
CVE-2026-53796Medium6.3—2026-08-13rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon receiver's destination directory handling that allows an attacker who can manipulate destination path parent components to r…
CVE-2026-53801Medium5.9—2026-08-13rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows attackers to cause the sender to enumerate and transfer files outside the module root's intended subtree.
CVE-2026-70459Medium5.3—2026-08-13rsync 3.0.0 before 3.5.0 contains a null pointer dereference vulnerability in the daemon child process that allows remote attackers to crash the daemon by sending a file list whose first entry is a dot entry not typed as a directory.
CVE-2026-53798Medium5.3—2026-08-13rsync before 3.5.0 contains a privilege confusion vulnerability in the name-converter subprocess uid/gid mapping that allows local attackers to cause transferred files to be owned by root by influencing name-converter responses to return e…
CVE-2026-53794Medium5.3—2026-08-13rsync before 3.5.0 contains a logic error in --max-alloc handling that allows a sender or configuration setting --max-alloc=0 to disable allocation sanity checks entirely rather than enforcing a zero-byte cap.
CVE-2026-53800Medium4.7—2026-08-13rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows attackers with symlink creation access to cause arbitrary file deletion.
CVE-2026-53797Medium4.7—2026-08-13rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's source tree traversal that allows an attacker who can manipulate a parent directory of the source tree to redirect file reads to unintended paths.

Mongodb · 32 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19001Critical9.8—2026-08-12The MongoDB BI Connector ODBC Driver may write outside the bounds of a fixed-size buffer when an application supplies an unusually long catalog, schema, or object name to a metadata retrieval function.
CVE-2026-18692High8.8—2026-08-11An issue in MongoDB Server's handling of timeseries bucket lifecycle could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed.
CVE-2026-18691High8.8—2026-08-11An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another.
CVE-2026-19004High8.1—2026-08-12An application using the MongoDB BI Connector ODBC Driver may experience a memory-safety issue when processing output parameters from a stored procedure.
CVE-2026-19002High8.1—2026-08-12A missing bounds check when parsing stored procedure parameter metadata in the MongoDB BI Connector ODBC Driver can result in an out-of-bounds write in the client application process.
CVE-2026-18712High8.1—2026-08-11An issue in MongoDB Server's Queryable Encryption maintenance operations could allow an authenticated user with privileges on one encrypted collection to cause unauthorized modification or destruction of data belonging to a different colle…
CVE-2026-18690High8.1—2026-08-11An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that their assigned privileges should not permit.
CVE-2026-19003High7.8—2026-08-12A data source definition containing an over-length file path setting may cause the MongoDB BI Connector ODBC Driver setup dialog to write outside the bounds of an allocated buffer.
CVE-2026-18693High7.6—2026-08-11An issue in MongoDB Server's handling of timeseries collections could allow an authenticated user with write privileges to cause an internal data structure to become inconsistent through certain document insertions.
CVE-2026-18697High7.5—2026-08-11An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate unexpectedly by submitting a specially formed aggregation command.
CVE-2026-18711High7.1—2026-08-11An issue in MongoDB Server's query execution engine could allow an authenticated user with read and write privileges to cause an internal reference to be used after the underlying memory has been freed, when running certain queries against…
CVE-2026-18694High7.1—2026-08-11An issue in MongoDB Server's geospatial query processing could allow an authenticated user with write privileges to cause certain malformed geometry data to be stored and later processed without proper validation.
CVE-2026-18688High7.1—2026-08-11An issue in MongoDB Server's aggregation framework could allow an authenticated user to trigger an out-of-bounds memory read by providing a specially formed numeric parameter in a certain aggregation pipeline stage.
CVE-2026-18687High7.1—2026-08-11MongoDB Server's handling of a Queryable Encryption maintenance operation did not properly validate certain request parameters against the collection's encrypted field configuration before use.
CVE-2026-18706Medium6.6—2026-08-11An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed.
CVE-2026-18888Medium6.5—2026-08-12The MongoDB BI Connector ODBC Driver converts floating point column values into text without checking that the result fits within the destination buffer.
CVE-2026-18710Medium6.5—2026-08-11A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity, to application log output in cleartext during routine client initialization.
CVE-2026-18705Medium6.5—2026-08-11An issue in MongoDB Server's Atlas Vector Search feature could allow an authenticated user with read access to one view to retrieve documents from a different, protected view over the same underlying collection.
CVE-2026-18704Medium6.5—2026-08-11An issue in MongoDB Server's aggregation framework could allow an authenticated user with only read privileges to perform write operations against collections they should not be able to modify.
CVE-2026-18701Medium6.5—2026-08-11An issue in MongoDB Server's query subsystem could allow an authenticated user with read privileges to cause the server process to terminate unexpectedly by submitting a specially formed query filter.
CVE-2026-18700Medium6.5—2026-08-11An issue in MongoDB Server's geospatial validation could allow an authenticated user with write privileges to cause an internal reference to be used after the underlying memory has been freed, through concurrent operations against a collec…
CVE-2026-18699Medium6.5—2026-08-11An issue in MongoDB Server's query planner could allow an authenticated user with read-level privileges to cause the server process to terminate unexpectedly by submitting a specially formed query against a collection with a text index.
CVE-2026-18696Medium6.5—2026-08-11An issue in MongoDB Server's applyOps command could allow an authenticated user with specific non-default privileges to perform certain data-definition operations, such as dropping or modifying collections, against collections they do not…
CVE-2026-18695Medium6.5—2026-08-11An issue in MongoDB Server's handling of certain query predicates against time-series collections with a metaField could allow an authenticated user with write access to cause the server process to terminate unexpectedly, resulting in a de…
CVE-2026-18709Medium6.4—2026-08-11An issue in MongoDB Server could allow an authenticated user with direct network access to a shard to improperly commit or abort an in-progress prepared transaction, bypassing the intended transaction coordination process.
CVE-2026-18708Medium6.4—2026-08-11An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value proc…
CVE-2026-18702Medium6.4—2026-08-11An issue in MongoDB Server could allow an authenticated user with limited, database-scoped privileges to modify diagnostic logging settings that affect the entire server rather than just the intended database.
CVE-2026-19502Medium5.5—2026-08-12MongoDB SQL Schema Builder CLI records its startup configuration to standard output and, when file logging is enabled, to a log file on disk.
CVE-2026-18698Medium5.4—2026-08-11An issue in MongoDB Server could allow an authenticated user with a limited database-scoped role to perform an action against protected system collections that should require more specific privileges.
CVE-2026-19503Medium4.8—2026-08-12MongoDB Schema Manager and MongoDB Atlas SQL ODBC Driver do not validate the scheme of the authorization and token endpoints returned by an OIDC issuer's discovery document.
CVE-2026-18707Medium4.3—2026-08-11An issue in MongoDB Server could allow an authenticated user, including one with no assigned privileges, to cause the server process to terminate unexpectedly by submitting a specially formed aggregation command.
CVE-2026-18703Medium4.2—2026-08-11An issue in MongoDB Server could allow a party with a valid client certificate and a corresponding user account to authenticate using a certificate-based authentication method, even when an administrator has configured the server to restri…

Google · 29 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16280Critical9.8—2026-07-24An integer overflow when calculating physical offsets for sparse PMRs may result in 32-bit truncation of address computations for PMRs larger than 4 GB.
CVE-2026-17749Critical9.6—2026-07-30Insufficient validation of untrusted input in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extensi…
CVE-2026-17738Critical9.6—2026-07-30Insufficient validation of untrusted input in Payments in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-19560High8.8—2026-08-11Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2026-19559High8.8—2026-08-11Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2026-19556High8.8—2026-08-11Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2026-19144High8.8—2026-08-06Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-17729High8.8—2026-07-30Use after free in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page.
CVE-2026-17661High8.8—2026-07-30Use after free in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.
CVE-2026-17735High8.7—2026-07-30Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-67180High8.4—2026-08-11Google Turbinia allows arbitrary command execution via worker tasks.
CVE-2026-19147High8.3—2026-08-06Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-49745High7.8—2026-07-24Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory.
CVE-2026-49744High7.8—2026-07-24Kernel software installed and running inside a Guest VM may post improper commands to the GPU Firmware to trigger a write of data outside the Guest's virtualised GPU memory.
CVE-2026-49743High7.8—2026-07-24Software installed and run as a non-privileged user may conduct improper GPU system calls to manipulate the lifetimes of synchronisation objects in the kernel, leading to read/write UAFs.
CVE-2026-7639High7.8—2026-07-10Software installed and run as a non-privileged user may conduct a sequence of improper GPU system calls causing use after free, which helps in facilitating unprivileged memory access from a shader code.
CVE-2026-45203High7.8—2026-07-10Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the host kernel.
CVE-2026-45196High7.8—2026-07-10Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation.
CVE-2026-41154High7.8—2026-07-10Software installed and run as a non-privileged user may cause OOB kernel memory reads or writes through GPU API calls.
CVE-2026-34196High7.8—2026-07-10Software installed and run as a non-privileged user may conduct improper GPU system calls to cause an integer overflow and map two GPU virtual addresses to the same physical address.
CVE-2026-19558High7.5—2026-08-11Use after free in Extensions in Google Chrome prior to 151.0.7922.137 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension.
CVE-2026-19142High7.5—2026-08-06Use after free in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
CVE-2026-17748Medium6.5—2026-07-30Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.
CVE-2026-17743Medium6.5—2026-07-30Insufficient policy enforcement in ControlledFrame in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page.
CVE-2026-17674Medium6.5—2026-07-30Inappropriate implementation in HTML in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass content security policy via a crafted HTML page.
CVE-2026-17664Medium6.5—2026-07-30Insufficient validation of untrusted input in Loader in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.
CVE-2026-17734Medium5.4—2026-07-30Inappropriate implementation in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
CVE-2026-17728Medium5.4—2026-07-30Inappropriate implementation in Extensions in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.
CVE-2026-17662Medium4.3—2026-07-30Insufficient policy enforcement in Prefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Jfrog · 25 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69106High8.8—2026-08-12A low-privileged user may poison cached artifact metadata under specific conditions, potentially causing consumers to retrieve untrusted content.
CVE-2026-69105High8.1—2026-08-12An unauthenticated attacker may cause untrusted package content to be cached under specific conditions, potentially affecting artifact integrity and availability.
CVE-2026-66375High8.1—2026-08-12A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.
CVE-2026-42018High7.5KEV2026-08-12JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources.
CVE-2026-68757High7.5—2026-08-12A user with access to a valid SAML response may impersonate another user under specific conditions.
CVE-2026-68759High7.2—2026-08-12A holder of a valid integration credential may impersonate other users under specific conditions.
CVE-2026-68752High7.2—2026-08-12A Project Resource Manager may gain broader administrative privileges under specific conditions.
CVE-2026-66016Medium6.7—2026-08-12Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.
CVE-2026-68756Medium6.6—2026-08-12A party with write access to stored session data may affect JFrog Artifactory under specific conditions.
CVE-2026-68758Medium6.5—2026-08-12A low-privileged authenticated user may access restricted support information under specific conditions.
CVE-2026-68754Medium6.5—2026-08-12A repository publisher without delete permission may modify protected package content under specific conditions.
CVE-2026-69107Medium5.9—2026-08-12An unauthenticated user may access restricted artifacts in JFrog Artifactory under specific conditions.
CVE-2026-66384Medium5.3KEV2026-08-12An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-68760Medium5.3—2026-08-12An unauthenticated user may bypass authentication under specific cache conditions.
CVE-2026-68753Medium5.3—2026-08-12An unauthenticated user may access restricted Artifactory content when a credentialed remote repository is configured in a specific way.
CVE-2026-66381Medium5.3—2026-08-12A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions.
CVE-2026-66377Medium5.3—2026-08-12An unauthenticated user may access restricted repository information under specific conditions.
CVE-2026-70547Medium4.3—2026-08-12An authenticated user without repository read permission may access package metadata under specific conditions.
CVE-2026-68755Medium4.3—2026-08-12A bundle writer may create misleading release promotion information under specific conditions.
CVE-2026-66382Medium4.3—2026-08-12An authenticated user may write files outside the intended Artifactory work directory under specific conditions.
CVE-2026-66380Medium4.3—2026-08-12An authenticated user without repository read permission may access private OCI referrer metadata under specific conditions.
CVE-2026-66379Medium4.3—2026-08-12An authenticated user may view private Puppet module metadata without repository read access.
CVE-2026-66378Medium4.3—2026-08-12An authenticated user without repository read permission may access private NuGet metadata under specific conditions.
CVE-2026-66376Medium4.2—2026-08-12Credentials for a deleted user may remain valid for a short period under specific conditions.
CVE-2026-65926Low3.1—2026-08-12An anonymous caller when anonymous access is enabled, or a low-privilege authenticated user, may learn private Release Bundle names and versions when the bundle name is known.

Samsung · 25 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21072High7.8—2026-08-10Improper input validation in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21071High7.8—2026-08-10Improper input validation in MPEG4 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21069High7.8—2026-08-10Incorrect conversion between numeric types in VC1 codec in libsavsvc.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21068High7.8—2026-08-10Stack-based buffer overflow in libril_sem.so prior to SMR Aug-2026 Release 1 allows privileged local attackers to execute arbitrary code.
CVE-2026-21067High7.8—2026-08-10Improper input validation in libsmsd.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21066High7.8—2026-08-10Improper input validation in libcodec2_sec_flacdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21065High7.8—2026-08-10Out-of-bounds write in libcodec2secqcelpdec.so prior to SMR Aug-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21059High7.1—2026-08-10Improper export of android application components in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-21058High7.1—2026-08-10Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows local attackers to delete file with Samsung Contacts' privilege.
CVE-2026-19518Medium6.5—2026-08-11Improper Validation of Specified Quantity in Input vulnerability in Samsung Open Source rlottie allows Input Data Manipulation.
CVE-2026-19517Medium6.5—2026-08-11Improper Validation of Specified Quantity in Input and Allocation of Resources Without Limits or Throttling vulnerability in Samsung Open Source rlottie allows Excessive Allocation.
CVE-2026-21083Medium6.5—2026-08-10Improper input validation in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21080Medium6.5—2026-08-10Cleartext storage of sensitive information in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to access sensitive data.
CVE-2026-21079Medium6.5—2026-08-10Missing encryption of sensitive data in Smart Switch prior to version 3.7.72.6 allows adjacent attackers to intercept transmitted data.
CVE-2026-21078Medium6.5—2026-08-10Insufficient verification of data authenticity in Smart Switch trouble scanning mode prior to version 3.7.72.6 allows adjacent attackers to spoof device identity.
CVE-2026-21061Medium6.5—2026-08-10Improper input validation in Samsung Dialer prior to SMR Aug-2026 Release 1 allows remote attackers to access SIM related functions.
CVE-2026-21073Medium6.1—2026-08-10Improper input validation in Galaxy Themes prior to SMR Aug-2026 Release 1 allows physical attackers to launch arbitrary activity.
CVE-2026-21063Medium6.1—2026-08-10Improper export of android application components in AppLock prior to SMR Aug-2026 Release 1 allows physical attackers to bypass app lock function.
CVE-2026-21082Medium5.5—2026-08-10Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21077Medium5.5—2026-08-10Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21076Medium5.5—2026-08-10Incorrect authorization in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information.
CVE-2026-21064Medium5.5—2026-08-10Improper access control in Weaver prior to SMR Aug-2026 Release 1 allows local attackers to cause device inoperability.
CVE-2026-21070Medium4.6—2026-08-10Improper input validation in Samsung Message prior to SMR Aug-2026 Release 1 allows physical attackers to access sensitive information.
CVE-2026-21060Medium4.6—2026-08-10Improper input validation in Samsung Contacts prior to SMR Aug-2026 Release 1 allows physical attackers to access data across multiple user profiles.
CVE-2026-21062Low3.3—2026-08-10Authorization bypass in SemClipboardService prior to SMR Aug-2026 Release 1 allows local attackers to access clipboard data.

Cisco · 24 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-20304Critical9.9—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.
CVE-2026-20303Critical9.9—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.
CVE-2026-20272Critical9.8—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVE-2026-20310Critical9.1—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.
CVE-2026-20267Critical9.0—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVE-2026-20312High8.8—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.
CVE-2026-20150High8.8—2026-07-15As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.
CVE-2026-20349High8.6KEV2026-08-11A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the…
CVE-2026-20271High8.6—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVE-2026-20270High8.6—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVE-2026-20269High8.6—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVE-2026-20268High8.6—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review.
CVE-2026-20156High8.1—2026-07-15As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.
CVE-2026-20313High7.7—2026-08-05As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst SD-WAN engineering team has conducted a comprehensive internal security review.
CVE-2026-20347High7.5—2026-08-07A vulnerability in the Mach-O file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device. This vul…
CVE-2026-20346High7.5—2026-08-07A vulnerability in the PDF file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device. This vulner…
CVE-2026-20345High7.5—2026-08-07A vulnerability in the GPT file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device. This vulner…
CVE-2026-20339High7.5—2026-08-07A vulnerability in the PESpin file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition or possibly other expanded impacts as a result of&nbsp;memory corruption on an affected device. This vul…
CVE-2026-20338High7.5—2026-08-07A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper memory handling when processing content in zip fil…
CVE-2026-20337High7.5—2026-08-07A vulnerability in the zip archive parser of ClamAV could allow an unauthenticated, remote attacker to cause a DoS condition on an affected device. This vulnerability is due to improper boundary checks for content in zip files during sc…
CVE-2026-20187High7.5—2026-07-15As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.
CVE-2026-20158High7.5—2026-07-15As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.
CVE-2026-20157High7.5—2026-07-15As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.
CVE-2026-20153High7.5—2026-07-15As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco RoomOS engineering team has conducted a comprehensive internal security review.

Budibase · 23 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72851Critical10.0—2026-08-13Budibase before 3.40.0 contains an unauthenticated SQL injection vulnerability in webhook-triggered automations with EXECUTE_QUERY steps.
CVE-2026-73300Critical9.6—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-72850Critical9.1—2026-08-13Budibase before 3.40.0 fails to properly sanitize S3 object keys, allowing authenticated builders to upload files with traversal sequences that are preserved during export.
CVE-2026-73305High8.8—2026-08-13Budibase is an open-source low-code platform.
CVE-2026-72855High8.5—2026-08-13Budibase before 3.40.0 contains server-side request forgery vulnerabilities in OpenAPI query import and REST query execution that allow authenticated builder-level users to bypass DNS pinning protections through DNS rebinding attacks.
CVE-2026-73618High8.3—2026-08-13Budibase Server before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB query execution endpoint where user-supplied parameters are interpolated into JSON query templates without proper sanitization of JSON metacharacters.
CVE-2026-73303High8.2—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-72856High8.1—2026-08-13Budibase versions before 3.40.0 contain an authorization/authentication bypass in the PUT /api/global/users/tenant/owner (changeTenantOwnerEmail) endpoint.
CVE-2026-72859High7.7—2026-08-14Budibase versions 3.39.4 before 3.40.0 contain an authorization regression in the S3 attachment upload endpoint that allows BASIC users to obtain S3 PutObject presigned URLs by sending POST requests to the attachments endpoint.
CVE-2026-72857High7.7—2026-08-13Budibase before 3.40.0 fails to redact datasource credentials stored in STRING typed fields, allowing authenticated users to read MongoDB connection strings and Firebase private keys in plaintext.
CVE-2026-72849High7.7—2026-08-13Budibase before 3.40.0 contains a cross-site request forgery vulnerability in the chat-link handoff endpoint that allows attackers to bind an external chat identity to a victim's account.
CVE-2026-73408High7.6—2026-08-13Budibase is an open-source low-code platform.
CVE-2026-72853High7.6—2026-08-13Budibase before 3.40.0 contains a SQL injection vulnerability in the Oracle datasource connector's post-write row lookup that fails to escape table names in identifiers.
CVE-2026-73406High7.5—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73617High7.1—2026-08-13Budibase before 3.40.0 contains a NoSQL injection vulnerability in the MongoDB datasource integration where user-supplied parameters are enriched with handlebars using noEscaping: true and parsed without operator filtering.
CVE-2026-73308Medium5.7—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73306Medium5.3—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73304Medium4.9—2026-08-13Budibase is an open-source low-code platform.
CVE-2026-73301Medium4.3—2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73302———2026-08-13Budibase is an open-source low-code platform.
CVE-2026-73409———2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73407———2026-08-12Budibase is an open-source low-code platform.
CVE-2026-73307———2026-08-12Budibase is an open-source low-code platform.

Sap_se · 23 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58231Critical10.0—2026-08-11SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation.
CVE-2026-34265Critical9.8—2026-08-11SAP NetWeaver Application Server ABAP allows an unauthenticated attacker to exploit logical errors in DIAG protocol parsing, resulting in memory corruption.
CVE-2026-44758Critical9.1—2026-08-11SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation.
CVE-2026-58243High8.8—2026-08-11SAP ABAP Development Tools does not perform necessary authorization checks for certain functionality, allowing an attacker with low privileges to execute unauthorized database operations against SAP NetWeaver AS ABAP.
CVE-2026-66763High7.9—2026-08-11SAP BusinessObjects Business Intelligence Platform stores certain sensitive credentials associated with user objects using a hard-coded cryptographic key.
CVE-2026-44763High7.6—2026-08-11SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input.
CVE-2026-44765High7.3—2026-08-11Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated remote attacker could access scheduling-related application functions without proper authorization validation.
CVE-2026-44764High7.3—2026-08-11Due to a Missing Authorization Check vulnerability in SAP Manufacturing Integration and Intelligence, an unauthenticated attacker could send crafted requests to the Cost Servlet using specific parameter values.
CVE-2026-58248Medium6.5—2026-08-11SAP BusinessObjects Business Intelligence Platform (Web Intelligence) allows a low-privileged attacker to upload a specially crafted spreadsheet file containing malicious external references.
CVE-2026-66779Medium6.3—2026-08-11Due to a Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP, an authenticated attacker could generate a malicious link and make it publicly accessible.
CVE-2026-66770Medium6.3—2026-08-11Due to an SQL Injection vulnerability in SAP Social intelligence, an authenticated attacker could directly inject an SQL DDL (Data Definition Language) string into the underlying database without further authorization.
CVE-2026-58235Medium6.3—2026-08-11SAP NetWeaver Application Server Java (Adobe Document Service) uses outdated open source cryptographic and data transfer libraries that contain known vulnerabilities addressed in later versions.
CVE-2026-66771Medium6.1—2026-08-11SAPUI5 allows a key user with content adaptation privileges to inject malicious script content into persisted application changes.
CVE-2026-66773Medium5.9—2026-08-11A malicious or compromised OData service could disclose sensitive authentication information and inject untrusted data into the application, which may leads to a high impact on confidentiality and low impact on integrity and no impact on A…
CVE-2026-58236Medium5.5—2026-08-11SAP NetWeaver Application Server ABAP and ABAP Platform allow an attacker with high privileges to bypass missing security controls on an internal code path leading to operating system command execution.
CVE-2026-58247Medium5.3—2026-08-11SAP ABAP Platform allows an unauthenticated user to send a specially crafted request to an internal component.
CVE-2026-40130Medium5.3—2026-08-11SAP SAPSPrint Service has memory corruption vulnerabilities in the handling of certain commands.
CVE-2026-66772Medium4.3—2026-08-11SAP BusinessObjects Business Intelligence Platform (Admin Tools) does not perform sufficient authorization check on certain administrative functionality.
CVE-2026-66764Medium4.3—2026-08-11Reprocess Bank Statement Items in SAP S/4HANA does not perform the necessary authorization checks for authenticated users, allowing them to use rules that have not been shared with them, resulting in privilege escalation.This vulnerability…
CVE-2026-58244Medium4.3—2026-08-11SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privil…
CVE-2026-58241Medium4.2—2026-08-11SAP NetWeaver and ABAP Platform (Change and Transport System - Customer Transport Integration Wizard) allows a low-privileged user to modify configuration tables that control access to data objects during specific operations.
CVE-2026-58245Low3.8—2026-08-11SAP Advanced Planning and Optimization (Model Mix Planning) contains a hardcoded credential within the source code of the application to perform authorization check to access certain functionalities in the application.
CVE-2026-44762Low3.7—2026-08-11SAP Data Services Management Console allows an overly permissive Content Security Policy (CSP) configuration and lacks certain restrictive directives, which could enable an authenticated malicious user to leverage this weakness in combinat…

Palo Alto Networks · 22 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-0284Critical9.9—2026-07-09An XML injection vulnerability in the Large Scale VPN (LSVPN) functionality of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to inject malicious XML content, potentially leading to information…
CVE-2026-0298High8.1—2026-08-13An improper input validation vulnerability exists in the Windows Pre-Logon Access Provider (PLAP) component of the Palo Alto Networks GlobalProtect™ app on Windows devices which enables a man-in-the-middle (MitM) attacker to execute arbitr…
CVE-2026-0297High8.1—2026-08-13A buffer overflow vulnerability exists in the Palo Alto Networks GlobalProtect™ app that enables a man-in-the-middle (MitM) attacker or a rogue gateway to disrupt system processes and potentially execute arbitrary code with elevated privil…
CVE-2026-0299High7.8—2026-08-13Local privilege escalation vulnerabilities in the Palo Alto Networks GlobalProtect™ app enable a local user to escalate their privileges to NT AUTHORITY\SYSTEM on Windows, and root on macOS and Linux.
CVE-2026-0294High7.8—2026-08-13A privilege escalation (PE) vulnerability in the Palo Alto Networks Prisma® Access Agent app on Windows and macOS devices enables a local user to execute code with elevated privileges.
CVE-2026-0301High7.5—2026-08-13An information disclosure vulnerability in the URL Filtering feature of Palo Alto Networks PAN-OS® software enables an unauthenticated user with network access to obtain sensitive information.
CVE-2026-0287High7.5—2026-07-09Multiple denial of service vulnerabilities in Palo Alto Networks PAN-OS® software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition by sending specially crafted network traffic to or through…
CVE-2026-0288High7.5—2026-07-08Multiple buffer overflow vulnerabilities in the User-ID Terminal Server Agent (TSA) component of Palo Alto Networks PAN-OS software allow an unauthenticated attacker with network access to cause a denial of service (DoS) condition or poten…
CVE-2026-0296High7.4—2026-08-13Improper certificate validation vulnerabilities in Palo Alto Networks GlobalProtect™ app enable an unauthenticated attacker with man-in-the-middle (MitM) access to intercept and modify application communications.
CVE-2026-0286High7.2—2026-07-09A command injection vulnerability in the management plane of Palo Alto Networks PAN-OS® software enables an authenticated administrator to execute arbitrary OS commands as root.
CVE-2026-0283High7.2—2026-07-09An authentication bypass vulnerability in Large Scale VPN ( LSVPN) functionality of Palo Alto Networks PAN-OS software allows an attacker with network access to bypass security restrictions and establish an unauthorized site-to-site VPN co…
CVE-2026-0280High7.2—2026-07-09An IPv6 packet processing vulnerability in the dataplane of Palo Alto Networks PAN-OS® software enables an unauthenticated attacker to bypass firewall security policy enforcement, allowing network traffic that should be blocked to reach pr…
CVE-2026-0281High7.1—2026-07-09An information disclosure vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to obtain web session tokens.
CVE-2026-0295High7.0—2026-08-13A race condition in the Palo Alto Networks GlobalProtect™ client on macOS enables a locally authenticated low-privileged attacker to escalate their privileges to root.
CVE-2026-0289Medium6.5—2026-08-13A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls.
CVE-2026-0282Medium6.5—2026-07-09A file deletion vulnerability in Palo Alto Networks PAN-OS® software enables an unauthenticated attacker with network access to the management web interface to delete files from a temporary directory.
CVE-2026-0279Medium6.1—2026-07-09Multiple cross site scripting vulnerabilities in the User-ID™ Authentication Portal (aka Captive Portal) service, GlobalProtect™ gateway/portal features and Clientless VPN of Palo Alto Networks PAN-OS® software enables a malicious unauthen…
CVE-2026-0293Medium6.0—2026-08-13A vulnerability in Palo Alto Networks Prisma® Access Agent on Windows enables a local attacker with administrator privileges to bypass the anti-tamper protection, enabling unauthorized access to protected processes and files.
CVE-2026-0292Medium6.0—2026-08-13An authentication bypass vulnerability in the network driver of Palo Alto Networks Prisma® Access Agent on Windows enables a local administrator to bypass security inspection, subsequently allowing them to inject and intercept arbitrary n…
CVE-2026-0290Medium5.5—2026-08-13An information disclosure vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a local attacker to view sensitive data.
CVE-2026-0285Medium4.9—2026-07-09A server-side request forgery (SSRF) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to make unauthorized requests from the firewall to internal…
CVE-2026-0291Medium4.4—2026-08-13An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to delete system files in a limited scope and disable Prisma Acc…

Zephyrproject · 21 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12366High8.8—2026-08-14Zephyr's dynamic kernel-object disposal path unref_check() in kernel/userspace/userspace.c frees an object's storage (k_free(dyn->data)) once its reference count reaches zero, after running a per-object-type cleanup.
CVE-2026-12364High8.4—2026-08-14The user-space system-call verifier z_vrfy_z_log_msg_static_create() in subsys/logging/log_msg.c was a pure pass-through: it forwarded the caller-supplied source, desc, package, and data arguments directly to the kernel-mode implementation…
CVE-2026-8718High8.4—2026-08-10tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the…
CVE-2026-12234High7.8—2026-08-12The userspace syscall verifiers z_vrfy_zsock_sendmsg() and z_vrfy_zsock_recvmsg() in subsys/net/lib/sockets/sockets.c snapshot the caller-supplied struct net_msghdr into a kernel-side copy with k_usermode_from_copy(), but then re-read the…
CVE-2026-11810High7.5—2026-08-10The UpdateHub firmware-update agent's probe handler (z_impl_updatehub_probe() in subsys/mgmt/updatehub/updatehub.c) parses the JSON metadata returned by the update server into a fixed two-level nested-array struct.
CVE-2026-10682Medium6.6—2026-07-27The userspace verifier z_vrfy_log_filter_set() for the log_filter_set syscall in subsys/logging/log_mgmt.c performed a signed comparison against the int16_t src_id parameter: src_id < (int16_t)log_src_cnt_get(domain_id).
CVE-2026-12236Medium6.5—2026-08-13The Bluetooth host GATT client function parse_read_std_char_desc() in subsys/bluetooth/host/gatt.c parses an ATT Read By Type Response received from a remote GATT server during BT_GATT_DISCOVER_STD_CHAR_DESC discovery.
CVE-2026-10681Medium6.5—2026-07-25In Zephyr's userspace dynamic-objects subsystem, thread_idx_alloc() in kernel/userspace/userspace.c allocated a new thread permission index from the global _thread_idx_map[] bitmap without holding lists_lock.
CVE-2026-12235Medium6.3—2026-08-12The Linkable Loadable Extensions (llext) subsystem mis-handles PLT/RELA relocation entries when linking a relocatable (partially-linked) ELF extension.
CVE-2026-12232Medium6.1—2026-08-12The Intel ALH digital-audio-interface driver function dai_alh_get_properties() in drivers/dai/intel/alh/alh.c used a caller-supplied int stream_id with no range validation.
CVE-2026-12233Medium5.9—2026-08-12The PSA Protected Storage credential backend (subsys/net/lib/tls_credentials/tls_credentials_trusted.c) declared its credential-store mutex as a plain zero-filled static struct k_mutex credential_lock; and never called k_mutex_init() on it.
CVE-2026-11894Medium5.9—2026-08-11The Realtek BEE Bluetooth HCI driver's send callback, bt_hci_bee_send() in drivers/bluetooth/hci/hci_bee.c, violated the bt_hci_driver_api buffer-ownership contract.
CVE-2026-11893Medium5.9—2026-08-11The Bluetooth HCI driver for Bouffalo Lab on-chip BLE controllers (BL60x/BL70x/BL61x), bt_bflb_send() in drivers/bluetooth/hci/hci_bflb.c, violates the bt_hci_driver_api.send() buffer-ownership contract.
CVE-2026-12365Medium5.8—2026-08-14A use-after-free exists in the Zephyr second-generation work queue (kernel/work.c) in the handling of delayable work timeouts.
CVE-2026-12052Medium5.2—2026-08-11The USB device-side CDC NCM class control-to-host handler usbd_cdc_ncm_cth in subsys/usb/device_next/class/usbd_cdc_ncm.c builds a fixed-size response for the GET_NTB_PARAMETERS (28-byte struct ntb_parameters) and GET_NTB_INPUT_SIZE (8-byt…
CVE-2026-12051Medium4.6—2026-08-11The USB DFU class implementation in Zephyr's new (experimental) device_next USB device stack contains a NULL pointer dereference in handle_download() (subsys/usb/device_next/class/usbd_dfu.c).
CVE-2026-12363Medium4.2—2026-08-14The LoRaWAN Fragmented Data Block Transport service (subsys/lorawan/services/frag_transport.c) does not validate the fragment counter in a received DATA_FRAGMENT command before forwarding it to the configured decoder.
CVE-2026-11811Low3.7—2026-08-10The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths.
CVE-2026-11809Low3.7—2026-08-10The UpdateHub OTA client in subsys/mgmt/updatehub/updatehub.c contains an out-of-bounds / uninitialized-memory read in z_impl_updatehub_probe().
CVE-2026-11985Low3.6—2026-08-11On the Zephyr ARM port, enabling the hardware FPU (CONFIG_FPU) forces the "Floating point ABI" choice, which defaults to CONFIG_FP_HARDABI.
CVE-2026-11812Low2.5—2026-08-10The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-f…

Surrealdb · 20 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-71390High8.8—2026-07-18SurrealDB before 2.2.6, 2.3.6, and 2.1.8 (and 3.0.0-alpha.7 and earlier) fails to validate DNS-resolved hostnames against --deny-net network access restrictions in its http::* functions.
CVE-2024-58362High8.8—2026-07-18SurrealDB before 1.5.5 (and 2.0.0-beta before 2.0.0-beta.3) accepts an arbitrary object in the signin and signup operations of the RPC API without recursively validating it for non-computed values.
CVE-2023-54366High8.8—2026-07-18SurrealDB before 1.0.1 sets default table permissions to FULL instead of NONE, allowing SELECT, CREATE, UPDATE, and DELETE operations on tables without explicit permissions.
CVE-2025-71392High8.0—2026-07-18SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 fails to properly escape table and field names in the command-line export command.
CVE-2024-58368High7.5—2026-07-18SurrealDB versions before 1.1.0 fail to properly parse the ID, DB, and NS headers in HTTP REST API requests containing special characters.
CVE-2025-71397Medium6.5—2026-07-18SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 allows authenticated users with OWNER or EDITOR permissions (at the root, namespace, or database level) to define custom database functions via DEFINE FUNCTION using nested…
CVE-2025-71396Medium6.5—2026-07-18SurrealDB before 2.0.5, 2.1.x before 2.1.5, and 2.2.x before 2.2.2 does not enforce a default execution-time limit on embedded JavaScript scripting functions when the scripting capability is explicitly enabled (via --allow-scripting or --a…
CVE-2025-71393Medium6.5—2026-07-18SurrealDB before 2.2.2 with scripting enabled fails to properly enforce recursion limits when native functions contain embedded JavaScript that issues new queries.
CVE-2025-71391Medium6.5—2026-07-18SurrealDB versions before 2.2.2 contain an uncaught exception vulnerability in the net module that allows authenticated users to crash the database.
CVE-2024-58369Medium6.5—2026-07-18SurrealDB versions before 1.1.1 fail to properly validate invocation of custom parameters and functions at root or namespace levels, causing server panic.
CVE-2024-58367Medium6.5—2026-07-18SurrealDB versions before 2.0.4 fail to properly enforce field permissions during SELECT, UPDATE, and DELETE operations, allowing authorized users to access unauthorized field values through various query techniques.
CVE-2024-58365Medium6.5—2026-07-18SurrealDB versions before 1.2.0 contain an uncaught exception vulnerability in the query executor when processing calls to nonexistent built-in functions.
CVE-2024-58364Medium6.5—2026-07-18SurrealDB versions before 1.2.1 contain an uncaught exception handling vulnerability in span rendering when parsing queries with errors on line terminator characters.
CVE-2024-58361Medium6.5—2026-07-18SurrealDB versions before 2.0.4 contain an uncaught exception handling vulnerability in the parser error rendering code when processing empty strings.
CVE-2024-58359Medium6.5—2026-07-18SurrealDB versions before 2.1.0 contain a denial of service vulnerability in the sorting mechanism when using ORDER BY rand() clause.
CVE-2024-58357Medium6.5—2026-07-18SurrealDB versions before 2.1.0 contain an uncaught exception vulnerability in the rand::time() function that panics when unwrap is called on a None result from timestamp_opt.
CVE-2024-58363Medium6.3—2026-07-18SurrealDB before 1.5.4 fails to properly validate authentication when a scope user switches databases using the USE clause or use method.
CVE-2024-58356Medium6.3—2026-07-18SurrealDB before 2.1.4 silently fails to overwrite table definitions when the DEFINE TABLE ...
CVE-2024-58358Medium4.9—2026-07-18SurrealDB versions before 2.1.0 contain a denial of service vulnerability in role conversion that allows privileged owner users to define users with nonexistent roles.
CVE-2025-71394Medium4.3—2026-07-18SurrealDB versions before 2.2.2 contain a local file read vulnerability in the DEFINE ANALYZER statement that allows authenticated users to read arbitrary files on the file system.

Siemens · 19 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58115Critical10.0—2026-08-11A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with Node-RED installed).
CVE-2026-64629High7.8—2026-08-11A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230).
CVE-2026-59701High7.8—2026-08-11A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001).
CVE-2026-59700High7.8—2026-08-11A vulnerability has been identified in Simcenter Femap (All versions < V2606.0001).
CVE-2026-59086High7.8—2026-08-11A vulnerability has been identified in Simcenter Femap (All versions < V2606), Simcenter Nastran (All versions < V2606).
CVE-2026-50064High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50063High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50062High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50061High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50060High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50059High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-50058High7.8—2026-08-11A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update 7).
CVE-2026-69109High7.5—2026-08-11A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3).
CVE-2026-57263Medium6.8—2026-08-11A vulnerability has been identified in LOGO!
CVE-2026-57262Medium6.8—2026-08-11A vulnerability has been identified in LOGO!
CVE-2026-69108Medium6.0—2026-08-11A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.1).
CVE-2026-59693Medium4.3—2026-08-11A vulnerability has been identified in Desigo DXR2 (All versions < V01.21.233.16-7862), Desigo PXC3 (All versions < V01.21.233.16-7862), Desigo PXC4 (All versions < V02.21.194.36-2715), Desigo PXC5.E003 (All versions < V02.21.194.36-2715)…
CVE-2026-47192———2026-08-14kas is a setup tool for bitbake based projects.
CVE-2026-47191———2026-08-14kas is a setup tool for bitbake based projects.

N8n · 16 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72765Critical9.9—2026-08-11n8n before 2.31.5 and before 2.32.1 contain a sandbox escape vulnerability in expression evaluation.
CVE-2026-72775High8.8—2026-08-11n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the PostgresTrigger node, which interpolates user-supplied identifier parameters (channel, function, and trigger names) into SQL statements without proper es…
CVE-2026-72772High8.8—2026-08-11n8n before 2.32.1 (and before 2.31.5) is vulnerable to account takeover via the Token Exchange Embed Login feature.
CVE-2026-72767High8.8—2026-08-11n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a remote code execution vulnerability in the Git node.
CVE-2026-72764High8.8—2026-08-11n8n's JavaScript task runner shared a single module cache across all users' Code-node executions.
CVE-2026-72762High8.8—2026-08-11n8n versions before 1.123.67, 2.31.5, and 2.32.1 contain an arbitrary file write vulnerability in the Edit Image node, which passes its output format parameter to the underlying image library without validation.
CVE-2026-72750High8.8—2026-08-11n8n before 1.123.67, 2.31.5, and 2.32.1 contains a SQL injection vulnerability in the Snowflake node's Execute Query operation, which interpolates expression values directly into the SQL string.
CVE-2026-72768High8.3—2026-08-11n8n versions before 2.32.1 contain a server-side request forgery protection bypass vulnerability in the MCP Client node that allows authenticated users to bypass SSRF protections.
CVE-2026-72769High8.1—2026-08-11n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the VM expression engine.
CVE-2026-72773High7.7—2026-08-11n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search (search_files) tool.
CVE-2026-72766High7.5—2026-08-11n8n before 1.123.67, 2.x before 2.31.5, and 2.32.x before 2.32.1 contain a type confusion vulnerability in the Send Email node, which does not enforce that its message fields are strings.
CVE-2026-72774Medium6.5—2026-08-11n8n before 1.123.67, 2.31.5, and 2.32.1 contains a credential authorization bypass in the HTTP Request node.
CVE-2026-72771Medium6.5—2026-08-11n8n versions before 2.32.1 fail to enforce the Allowed HTTP Request Domains allowlist in multiple AI and LLM nodes when user-supplied base or endpoint URLs are configured.
CVE-2026-72770Medium6.5—2026-08-11n8n versions before 1.123.67 contain a path traversal vulnerability in the Git node's fetch, pull, and push-tags operations that allows authenticated users to bypass repository-path containment checks.
CVE-2026-72763Medium6.5—2026-08-11n8n before 1.123.67, 2.31.5, and 2.32.1 validates credential-access only for a node's top-level credentials and not for credentials referenced inside an Execute Sub-workflow node's inline workflow JSON.
CVE-2026-72749Medium6.5—2026-08-11n8n before 1.123.67, 2.31.5, and 2.32.1 contains a prototype pollution vulnerability in the Edit Fields (Set) node.

Sourcecodester · 16 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19825High7.3—2026-08-14A security vulnerability has been detected in SourceCodester Simple Client Management System 1.0.
CVE-2026-19710High7.3—2026-08-13A vulnerability was found in SourceCodester Simple Student Information System.
CVE-2026-19384High7.3—2026-08-10A weakness has been identified in SourceCodester Simple Doctors Appointment System 1.0.
CVE-2026-19231High7.3—2026-08-07A security flaw has been discovered in SourceCodester Simple Doctors Appointment System 1.0.
CVE-2026-19211High7.3—2026-08-07A vulnerability was found in SourceCodester Photo Share Website 1.0.
CVE-2026-19196High7.3—2026-08-07A vulnerability was found in SourceCodester Photo Share Website 1.0.
CVE-2026-19021High7.3—2026-08-06A security vulnerability has been detected in SourceCodester Computer Repair Shop Management System 1.0.
CVE-2026-19210Medium6.3—2026-08-07A vulnerability has been found in SourceCodester Photo Share Website 1.0.
CVE-2026-19065Medium6.3—2026-08-06A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0.
CVE-2026-19229Medium5.3—2026-08-07A vulnerability was determined in SourceCodester Online Clothing Store.
CVE-2026-19839Medium4.7—2026-08-14A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0.
CVE-2026-19787Medium4.7—2026-08-14A vulnerability was determined in SourceCodester Air Cargo Management System 1.0.
CVE-2026-19066Medium4.3—2026-08-06A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0.
CVE-2026-19064Medium4.3—2026-08-06A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0.
CVE-2026-19230Low3.5—2026-08-07A vulnerability was identified in SourceCodester Photo Share Website 1.0.
CVE-2026-19209Low3.5—2026-08-07A flaw has been found in SourceCodester Photo Share Website 1.0.

Getgrav · 15 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72833High8.8—2026-08-14The Grav API plugin (getgrav/grav-plugin-api) versions >= 1.0.6 and <= 1.0.11 contain a privilege escalation vulnerability.
CVE-2026-72831High8.8—2026-08-14The Flex Objects plugin (through 1.4.6, tested with Grav 2.0.11) contains an incorrect authorization vulnerability in its Flex Objects API.
CVE-2026-72830High8.8—2026-08-14Grav API plugin versions before 1.0.13 fail to enforce API key scope caps in ConfigController super-scope gates, allowing scoped keys to write scheduler configuration.
CVE-2026-72829High8.8—2026-08-14The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope-cap bypass in UsersController's create() and update() methods.
CVE-2026-72827High8.8—2026-08-14Grav CMS before 2.0.13 contains a server-side template injection vulnerability in email-action parameters that allows low-privileged page editors to execute arbitrary operating-system commands.
CVE-2026-72826High8.8—2026-08-14The getgrav/grav-plugin-api plugin before 1.0.13 fails to validate that the scopes of a newly created API key are a subset of the caller's scopes in createApiKey.
CVE-2026-72824High8.8—2026-08-14The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API key scope-cap bypass in PagesController::guardTwigContent().
CVE-2026-72822High8.8—2026-08-14The getgrav/grav-plugin-api Composer package before 1.0.13 (affected <= 1.0.12) fails to enforce API key scope caps on the disable2fa endpoint.
CVE-2026-72819High8.8—2026-08-14Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code.
CVE-2026-72825High7.6—2026-08-14The getgrav/grav-plugin-api plugin before 1.0.13 contains an API-key scope cap bypass in the POST /reports/twig-content/allowlist endpoint (ReportsController).
CVE-2026-72828High7.2—2026-08-14Grav Plugin API (getgrav/grav-plugin-api) before 1.0.13 fails to enforce API-key scope caps in InvitationsController.
CVE-2026-72832Medium5.4—2026-08-14Grav versions from 1.5.2 through 2.0.12 contain a stored cross-site scripting vulnerability in the Security::detectXss() function (system/src/Grav/Common/Security.php).
CVE-2026-72823Medium5.4—2026-08-14The Grav API plugin (getgrav/grav-plugin-api) before 1.0.13 contains an API-key scope cap bypass in DemoController.
CVE-2026-72821Medium5.4—2026-08-14Grav Form plugin versions before 9.1.15 contain a stored cross-site scripting vulnerability in radio and toggle field option labels rendered with the Twig |raw filter.
CVE-2026-72820Medium4.9—2026-08-14Grav versions before 2.0.13 fail to properly validate backup profile root paths, allowing attackers to archive directories outside GRAV_ROOT when not in the hard-coded deny-list.

Fortinet · 14 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-26035Critical9.8—2026-08-12An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow…
CVE-2026-70468High8.1—2026-08-12A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5, FortiManager 7.2.5 through 7.2.9, FortiManager Cloud 7.6.1, FortiManager Cloud 7.4.3 through 7.4.5…
CVE-2026-70465High8.1—2026-08-12A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.11 may allow an unauthenticated attacker in a position to alter…
CVE-2026-59837Medium6.6—2026-07-14A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.4.0 through 7.4.1, FortiOS 7.2 all versions, FortiPAM 1.8.0 through 1.8.2, FortiPAM 1.7 all versions, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all…
CVE-2026-23573Medium6.1—2026-07-14An Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability [CWE-79] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiPAM 1.8.0, Forti…
CVE-2026-71407Medium5.6—2026-08-12A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6 may allow an unauthenticated attacker who can bypass stack protection and ASLR to execute arbitrary code or commands in the context…
CVE-2026-59839Medium5.5—2026-07-14A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versio…
CVE-2026-71408Medium5.3—2026-08-12A allocation of resources without limits or throttling vulnerability in Fortinet FortiOS 7.6.0 through 7.6.6, FortiOS 7.4 all versions, FortiOS 7.2 all versions may allow attacker to denial of service via <insert attack vector here>
CVE-2026-70466Medium5.3—2026-08-12A incomplete list of disallowed inputs vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4 all versions, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions may allow attacker to improper acc…
CVE-2026-59840Medium4.3—2026-07-14A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.5, FortiProxy 7.4.0 through 7…
CVE-2025-43892Medium4.3—2026-07-14A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions may allow an authenticated remote attacker to return a port…
CVE-2026-70467Low3.8—2026-08-12A server-side request forgery (ssrf) vulnerability in Fortinet FortiSIEM 7.5.0, FortiSIEM 7.4.0 through 7.4.2, FortiSIEM 7.3.0 through 7.3.5, FortiSIEM 7.2 all versions, FortiSIEM 7.1 all versions, FortiSIEM 7.0 all versions, FortiSIEM 6.7…
CVE-2025-62675Low3.4—2026-07-14An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 th…
CVE-2025-62826Low3.1—2026-07-14An Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') vulnerability [CWE-113] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 th…

Rapid7 · 14 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18972Critical9.6—2026-08-11An authenticated attacker can spoof another GUI user's identity by sending their request with the custom header \"Grpc-Metadata-USER\".
CVE-2026-18860High8.7—2026-08-11Velociraptor allows multi-tenant deployments named "Orgs".
CVE-2026-64954High8.2—2026-08-12Velociraptor allows scheduling new collections via VQL queries in notebooks.
CVE-2026-18639High7.3—2026-08-11When Velociraptor is configured to use an OIDC IdP for authentication, it uses the email claim as a username.
CVE-2026-18635High7.2—2026-08-11Velociraptor's VQL has a query() plugin which allows running a VQL query in a different org or user context.
CVE-2026-18640High7.1—2026-08-11The NewNotebook API does not sufficiently sanitize its parameters allowing an authenticated user with NOTEBOOK_EDIT permission to write the notebook record outside the org's data store directory.
CVE-2026-18636Medium6.8—2026-08-11The Velociraptor gRPC API has a VFSGetBuffer endpoint which allows reading files from the datastore.
CVE-2026-64952Medium6.5—2026-08-12The hunt_delete() VQL function allows deleting hunts.  Velociraptor misapplied the permission check requiring only COLLECT_CLIENT (usually assigned to the "investigator" role) instead of the "DELETE_RESULTS" permission (usually only assig…
CVE-2026-18652Medium6.5—2026-08-12Velociraptor allows reading Stacked result sets from the GUI.  Velociraptor's multi-tenant design stores sub orgs within the datastore directory. The path requested by the GUI is not correctly checked against the prefix deny list, allowing…
CVE-2026-18638Medium6.5—2026-08-11Any authenticated Velociraptor user — including one holding only the readerrole — can terminate the entire server process with a single request, by calling SetPassword with a username that does not exist.
CVE-2026-17535Medium6.2—2026-08-11Velociraptor's NTFS parsing library mishandles several out of bound and memory exhaustion bugs which may be triggered by maliciously crafted NTFS images.
CVE-2026-64955Medium6.1—2026-08-12When Microsoft Excel imports a CSV file, it executes cells beginning with certain characters as formulas, giving such CSV files arbitrary execution.  Velociraptor fails to sanitize such cells when exporting to CSV from various places such…
CVE-2026-18348Medium4.1—2026-08-11Missing authorization check in the upload_azure, upload_sftp, and upload_smb VQL plugins allows an authenticated analyst-role user can initiate attacker-controlled outbound network connections from the Velociraptor server, bypassing the NE…
CVE-2026-64951Low3.5—2026-08-12A rogue Velociraptor client can upload a malformed sparse file such that if the GUI attempts to expand the file, a panic occurs which may crash the server process.

Tenda · 14 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19747Critical9.8—2026-08-13A weakness has been identified in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625.
CVE-2026-19824High8.8—2026-08-14A weakness has been identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC.
CVE-2026-19823High8.8—2026-08-14A security flaw has been discovered in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC.
CVE-2026-19822High8.8—2026-08-14A vulnerability was identified in Tenda W20E 15.11.0.6(1068_1546_841)_CN_TDC.
CVE-2026-19821High8.8—2026-08-14A vulnerability was determined in Tenda AC12 15.03.06.23_multi_TD01.
CVE-2026-19792High8.8—2026-08-14A security flaw has been discovered in Tenda G0 up to 20260625.
CVE-2026-19791High8.8—2026-08-14A weakness has been identified in Tenda G0 up to 20260625.
CVE-2026-19790High8.8—2026-08-14A vulnerability was identified in Tenda G0 up to 20260625.
CVE-2026-19789High8.8—2026-08-14A vulnerability was determined in Tenda AC1206 15.03.06.23_multi_TD01.
CVE-2026-19788High8.8—2026-08-14A vulnerability was found in Tenda AC1206 15.03.06.23_multi_TD01.
CVE-2026-19346High8.8—2026-08-09A vulnerability was determined in Tenda CH22 1.0.0.1.
CVE-2026-19750High8.1—2026-08-13A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x.
CVE-2026-19749Low3.7—2026-08-13A vulnerability was detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625.
CVE-2026-19748Low3.7—2026-08-13A security vulnerability has been detected in Tenda CH7, CH7G, CH10, CP3, CP3 Pro, CP7, TC3B14C, TC3B15C, TC3T14C and TC3T15C up to 20260625.

Discourse · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72730High8.7—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72731High7.1—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72726Medium6.5—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72720Medium6.4—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72728Medium6.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72725Medium5.4—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72723Medium5.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72721Medium5.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72732Medium4.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72724Medium4.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72722Medium4.3—2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72729———2026-08-10Discourse is an open-source discussion platform.
CVE-2026-72727———2026-08-10Discourse is an open-source discussion platform.

Gitlab · 13 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15217High8.7—2026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization…
CVE-2026-15216High8.7—2026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed cross-site scripting due to improper neutralization…
CVE-2026-19228High8.5—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to cause AI usage to be attributed to another namespac…
CVE-2026-15423High8.5—2026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permission…
CVE-2026-16627High7.7—2026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions to escalate privileges due to improper san…
CVE-2026-16494High7.1—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to modify project settings restricted to higher-privil…
CVE-2026-7427Medium5.3—2026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.5 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an unauthenticated user to cause a denial of service…
CVE-2026-6821Medium4.3—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 12.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to bypass IP-based access restric…
CVE-2026-4879Medium4.3—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 16.0 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer-role permissions t…
CVE-2026-18433Medium4.3—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.4 and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to read policy configuration belonging to a namespace…
CVE-2026-8667Medium4.3—2026-08-12GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user with developer role to modify…
CVE-2026-18244Medium4.3—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 17.7 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed an authenticated user to view restricted configuration…
CVE-2025-9486Low3.3—2026-08-12GitLab has remediated an issue in GitLab EE affecting all versions from 15.6 before 19.0.6, 19.1 before 19.1.4, and 19.2 before 19.2.2 that under certain conditions could have allowed a user with a pending membership to receive permissions…

Baptistearno · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48765Critical9.9—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-47705Critical9.6—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48763High8.2—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48767High7.6—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48766High7.6—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48495High7.1—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-42142High7.1—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48762Medium5.4—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48483Medium5.4—2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-48494———2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-47704———2026-08-11TypeBot is a chatbot builder tool.
CVE-2026-47702———2026-08-11TypeBot is a chatbot builder tool.

Misp · 12 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73162———2026-08-11Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: * /account/follow * /account/delete_notification * /account/mark_notification_read * /account/mark_all_read …
CVE-2026-73161———2026-08-11Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feature.
CVE-2026-73160———2026-08-11Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoints.
CVE-2026-73159———2026-08-11Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's v-html.
CVE-2026-73158———2026-08-11Affected versions of cti-transmute insufficiently validate saved graph configuration data.
CVE-2026-73157———2026-08-11Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface using HTML interpolation.
CVE-2026-73156———2026-08-11Affected versions of cti-transmute fail to HTML-escape attacker-controlled values used in ECharts Sunburst and Treemap tooltip formatters.
CVE-2026-73155———2026-08-11Affected versions of cti-transmute allow authenticated users to add or remove emoji reactions on comments without first checking whether those users are authorized to view the target comment.
CVE-2026-73140———2026-08-11Affected versions of cti-transmute fail to apply comment-level access-control rules when generating evaluation report exports.
CVE-2026-72760———2026-08-10Affected versions of MISP cti-transmute disclose users' email addresses through the account following-list endpoint.
CVE-2026-72759———2026-08-10In affected versions of MISP cti-transmute, the conversion-history details endpoint performs an incomplete authorization check.
CVE-2026-72751———2026-08-10CTI-Transmute is affected by a stored cross-site scripting (XSS) vulnerability in the conversion graph used to visualise converted MISP and STIX content.

Canonical · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66898Critical9.9—2026-08-12A path traversal vulnerability in LXD allows an attacker to manipulate file system paths during backup import and restore operations.
CVE-2026-63300Critical9.9—2026-08-12An improper validation vulnerability in the instancePostMigration function in lxd/instance_post.go of LXD allows an authenticated attacker with can_create_instances permissions on a restricted project to bypass project-level security restr…
CVE-2026-63299Critical9.9—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated user to bypass project-level disk and volume limits.
CVE-2026-63298Critical9.9—2026-08-12An improper neutralization of special elements vulnerability in LXD's NVIDIA instance configuration handling allows an authenticated attacker to inject arbitrary configuration directives.
CVE-2026-63297Critical9.9—2026-08-12An authorization bypass vulnerability in LXD due to a timing flaw during configuration merging allows an authenticated attacker to bypass target project restrictions during cross-project instance copies.
CVE-2026-63296Critical9.9—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project restrictions during instance migration.
CVE-2026-63294Critical9.9—2026-08-12A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system.
CVE-2026-63293Critical9.9—2026-08-12A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system.
CVE-2026-62420Critical9.9—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass target project security restrictions during cross-project instance migrations.
CVE-2026-16033High8.5—2026-08-12A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation.
CVE-2026-63295Medium4.3—2026-08-12An authorization bypass vulnerability in LXD allows an authenticated attacker to bypass project-level container isolation restrictions.

Dell · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63700High7.8—2026-08-14Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Incorrect Default Permission vulnerability.
CVE-2026-59917High7.8—2026-08-12Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.
CVE-2026-59916High7.8—2026-08-12Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.
CVE-2026-59914High7.8—2026-08-12Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.
CVE-2026-46731High7.8—2026-08-12Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.
CVE-2026-66271High7.2—2026-08-14Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
CVE-2026-66270High7.2—2026-08-14Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Unrestricted Upload of File with Dangerous Type vulnerability.
CVE-2026-64993Medium6.8—2026-08-06Dell RVTools versions prior to 4.8.1, contains an improper certificate validation vulnerability in the collector.
CVE-2026-63702Medium6.3—2026-08-14Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Use of Hard-coded Credentials vulnerability.
CVE-2026-63701Medium6.3—2026-08-14Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain an Improper Deserialization of Untrusted Data vulnerability.
CVE-2026-66272Medium5.3—2026-08-14Dell Wyse Management Suite (WMS), versions prior to 2605.0.2, contain a Missing Authentication for Critical Function vulnerability.

Flowiseai · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73602Critical9.9—2026-08-13Flowise before 3.1.3 contains a sandbox escape vulnerability in the vm2 JavaScript sandbox that allows authenticated users to execute arbitrary code by exploiting moment locale validation bypass.
CVE-2026-73487Critical9.8—2026-08-13Flowise before 3.1.3 contains a regex-based Python code validator bypass in CSV and Airtable Agent nodes that allows unauthenticated attackers to inject malicious code via prompt injection.
CVE-2026-73601High8.8—2026-08-13Flowise versions before 3.1.3 contain a remote code execution vulnerability in the Custom MCP node when CUSTOM_MCP_PROTOCOL is set to stdio, allowing authenticated users to execute arbitrary commands by manipulating environment variables a…
CVE-2026-73486High8.8—2026-08-13Flowise before 3.1.3 contains a code injection vulnerability in the CSV Agent node's customReadCSV parameter that allows authenticated attackers to execute arbitrary Python code.
CVE-2026-73485High8.8—2026-08-13Flowise before 3.1.3 contains a code injection vulnerability in the Airtable Agent node that allows unauthenticated attackers to execute arbitrary Python code by bypassing the pythonCodeValidator blocklist through obfuscation techniques.
CVE-2026-73483High8.8—2026-08-13Flowise (packages flowise and flowise-components) in versions <= 3.1.2 contain a sandbox escape in the vm2/@flowiseai/nodevm JavaScript sandbox.
CVE-2026-73484High8.1—2026-08-13Flowise before 3.1.3 contains a sandbox escape vulnerability in pythonCodeValidator.ts that fails to block native Pandas DataFrame methods like to_csv, to_json, pipe, and query.
CVE-2026-71962High7.5—2026-08-10Flowise versions 2.2.4 through 3.1.4 contain a missing authorization vulnerability in the POST /api/v1/openai-assistants-file/download endpoint that allows unauthenticated attackers to access private files by exploiting the endpoint's incl…
CVE-2026-73604Medium6.5—2026-08-13Flowise before 3.1.3 contains an incomplete credential redaction vulnerability in the GET /api/v1/credentials/:id endpoint that returns decrypted secrets in plaintext.
CVE-2026-73488Medium6.5—2026-08-13Flowise versions before 3.1.3 contain an insecure direct object reference vulnerability in the GET /api/v1/organization/customer-default-source endpoint that allows authenticated attackers to access other customers' payment and profile dat…
CVE-2026-73603Medium5.3—2026-08-13Flowise before 3.1.4 fails to validate chatflow visibility in the unauthenticated text-to-speech endpoint, allowing attackers to abuse private chatflow TTS credentials.

Gl.inet · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18686Critical9.8—2026-08-04A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18685Critical9.8—2026-08-04A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18684Critical9.8—2026-08-03A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18602Critical9.8—2026-08-03A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18601Critical9.8—2026-08-03A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18787High8.8—2026-08-04A vulnerability was identified in GL.iNet AX1800 up to 4.8.3.
CVE-2026-18600High8.8—2026-08-03A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18598High8.8—2026-08-03A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18599High8.0—2026-08-03A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5.
CVE-2026-18584Medium5.4—2026-08-03A security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3000, XE3000 and XE300 up to 20260707.
CVE-2026-18585Medium4.3—2026-08-03A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707.

Sap · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58230High7.0—2026-08-11SAP Approuter does not sufficiently validate certain token content under specific configurations.
CVE-2026-66760Medium6.4—2026-08-11SAP Approuter does not correctly validate client certificates in certain callback flows.
CVE-2026-66777Medium5.9—2026-08-11SAP Approuter does not sufficiently validate certain incoming requests before forwarding them to backend destinations.
CVE-2026-66776Medium5.9—2026-08-11SAP Approuter does not consistently enforce integrity verification on certain session-related request headers under specific conditions.
CVE-2026-58238Medium5.9—2026-08-11SAP Approuter does not sufficiently handle certain requests under specific conditions.
CVE-2026-58237Medium5.9—2026-08-11WebSocket of SAP Approuter does not perform sufficient authorization checks in certain functionality.
CVE-2026-66778Medium5.3—2026-08-11SAP Approuter does not sufficiently sanitize certain request headers before forwarding traffic to internal components.
CVE-2026-66775Medium4.3—2026-08-11SAP Approuter does not enforce cross-site request forgery protection on the authentication flow by default.
CVE-2026-66761Medium4.3—2026-08-11SAP Approuter does not enforce sufficient flow control in certain functionality.
CVE-2026-66774Low3.7—2026-08-11SAP Approuter does not consistently handle certain error conditions.
CVE-2026-58239Low3.7—2026-08-11SAP Approuter does not sufficiently validate tenant context in inbound requests.

Tenable · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19682Critical9.9—2026-08-14A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.
CVE-2026-19681Critical9.9—2026-08-14An authenticated command injection vulnerability exists in Security Center related to file upload processing.
CVE-2026-19626Critical9.9—2026-08-14A remote code execution vulnerability exists in Tenable Security Center's report generation functionality.
CVE-2026-19679High8.8—2026-08-14An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.
CVE-2026-19635High8.8—2026-08-14A local privilege escalation vulnerability exists in Security Center.
CVE-2026-19629High8.1—2026-08-14A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups.
CVE-2026-19628High7.2—2026-08-14A command injection vulnerability exists in Tenable Security Center.
CVE-2026-19680High7.1—2026-08-14A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.
CVE-2026-19636Medium5.3—2026-08-14An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control.
CVE-2026-19631Medium4.9—2026-08-14A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.
CVE-2026-19639Medium4.3—2026-08-14An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.

Wso2 · 11 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5430Critical10.0—2026-08-06The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported.
CVE-2026-1728Critical9.8—2026-08-06Tokens issued to a low-privileged user are not sufficiently restricted, allowing them to be used to access product-level Admin REST APIs.
CVE-2025-15039Critical9.4—2026-08-06The Conditional Authentication (Adaptive Authentication) script does not correctly enforce the completion of all required authentication steps when a specific multi-step pattern involving certain authenticators is configured.
CVE-2025-13394Medium5.4—2026-08-06The Ajax processor within the Carbon console fails to adequately protect state-changing operations from Cross-Site Request Forgery (CSRF) attacks.
CVE-2024-8995Medium4.9—2026-08-06Unused authorization codes issued to deleted users are not being properly invalidated or removed from the system.
CVE-2026-0637Medium4.4—2026-08-06When an Event Publisher output adapter is configured with irrelevant properties, the affected products log these properties.
CVE-2025-13909Medium4.3—2026-08-06The system accepts authentication requests without sufficient validation to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-factor authenticators.
CVE-2025-11850Medium4.3—2026-08-06When secondary user stores are configured, the implicit-association resolver incorrectly initializes from a secondary user store and bypasses the primary user store during search and uniqueness checks.
CVE-2025-14779Low3.8—2026-08-06The Secret Type Management REST API does not correctly isolate access controls when deleting a secret type.
CVE-2025-13736Low3.7—2026-08-06When Multi-Attribute Login is enabled, the login interface fails to consistently mask the existence of user accounts.
CVE-2025-12627Low2.4—2026-08-06The user impersonation flow in WSO2 Identity Server fails to properly manage refresh tokens associated with impersonated sessions.

Craftcms · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72781High8.8—2026-08-11Craft CMS versions >= 5.0.0-RC1 before 5.10.7 and >= 4.0.0-RC1 before 4.18.3 contain a remote code execution vulnerability in the Twig sandbox mechanism.
CVE-2026-72778High8.8—2026-08-11Craft CMS versions from 4.0.0-RC1 before 4.18.2 and from 5.0.0-RC1 before 5.10.6 contain an authenticated remote code execution vulnerability in the control panel element-search condition handling.
CVE-2026-72786Medium6.5—2026-08-12Craft CMS versions before 5.10.8 contain an authentication bypass vulnerability in the elements/save action that allows authenticated users to change passwords without verification.
CVE-2026-72782Medium6.5—2026-08-11Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 interpolate environment variables and secrets (via ${ENV_VAR} strings in the elementId parameter) into Twig templates before rendering, even when the Twig sandbox…
CVE-2026-72780Medium6.5—2026-08-11Craft CMS before 5.10.5 fails to persist updated credential counters after WebAuthn assertion validation in the passkey login endpoint.
CVE-2026-72787Medium6.4—2026-08-12Craft CMS versions before 5.10.8 contain a stored cross-site scripting vulnerability in the control panel where draft names are rendered without HTML encoding in element chips and cards.
CVE-2026-72783Medium6.2—2026-08-11Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a theoretical path traversal weakness in the ensurePathIsContained function of the Local file system class.
CVE-2026-72784Medium5.4—2026-08-11Craft CMS versions >= 5.0.0-RC1 before 5.10.6 and >= 4.0.0-RC1 before 4.18.2 contain a server-side request forgery vulnerability in the GraphQL save<Volume>Asset mutation, which fetches an attacker-supplied URL server-side.
CVE-2026-72779Medium4.5—2026-08-11Craft CMS 5.0.0-RC1 before 5.10.6 and 4.0.0-RC1 before 4.18.2 contain an arbitrary file read vulnerability.
CVE-2026-72785Medium4.3—2026-08-11Craft CMS 5.0.0-RC1 through 5.10.5 contains an incorrect authorization vulnerability.

Progress · 10 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65941High8.8—2026-08-12In WhatsUp Gold versions released before 2026.0.2, an unauthenticated remote attacker with network access to the affected service can execute arbitrary code in the context of the IIS application service account.
CVE-2026-59688High8.4—2026-07-27An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system comm…
CVE-2026-59687High8.4—2026-07-27An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system comm…
CVE-2026-59686High8.4—2026-07-27An OS Command Injection vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with high privileges to execute arbitrary operating system comm…
CVE-2026-65937High8.0—2026-08-12In WhatsUp Gold versions released before 2026.0.2, an authenticated attacker can bypass frontend controls and inject persistent script content.
CVE-2026-59690High8.0—2026-07-27A Missing Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, MOVEit WAF, and Multi Tenant allows an authenticated attacker with low privileges to perform privileged adminis…
CVE-2026-59689High8.0—2026-07-27An Incorrect Authorization vulnerability in Progress Software LoadMaster, ECS Connection Manager, Object Scale Connection Manager, and MOVEit WAF allows an authenticated attacker with low privileges to escalate privileges to root on the af…
CVE-2026-65940Medium6.8—2026-08-12In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server.
CVE-2026-65939Medium6.8—2026-08-12In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can create a LogToFile action specifying an arbitrary file extension within the IIS web root.
CVE-2026-65938Medium4.3—2026-08-12In WhatsUp Gold versions released before 2026.0.2, an improper authorization vulnerability in the Scheduled Reports API allows any authenticated user to invoke restricted actions.

Admidio · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47231High8.1—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47233Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47230Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47227Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47226Medium6.5—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47229Medium5.4—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47228Medium5.2—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47234Medium4.4—2026-08-12Admidio is an open-source user management solution.
CVE-2026-47232Medium4.3—2026-08-12Admidio is an open-source user management solution.

Amd · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-0465———2026-08-11A Use‑After‑Free (UAF) vulnerability in the AMD Ryzen™ Master Utility Driver could allow a local attacker to access kernel memory, potentially resulting in loss of availability
CVE-2025-54512———2026-08-11A DLL hijacking vulnerability within the AMD Ryzen Master installation could allow a local user-privileged attacker to escalate privileges, potentially resulting in arbitrary code execution.
CVE-2025-0046———2026-08-11Incorrect directory permissions could allow a local user to escalate their privileges, potentially resulting in arbitrary code execution.
CVE-2026-43606———2026-08-11Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially perform timing analysis or electromagnetic emanation attacks, resulting in high confidentiality and i…
CVE-2025-8087———2026-08-11A DLL hijacking vulnerability in AMD Power Design Manager could allow a malicious local attacker to escalate privileges during the uninstallation process, potentially resulting in arbitrary code execution.
CVE-2025-61970———2026-08-11Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to create arbitrary code, potentially resulting in binary hijacking.
CVE-2025-48506———2026-08-11Uncontrolled search paths in Vitis™ Unified installation path on local Windows machines could allow DLL injection into these install paths, potentially resulting in arbitrary code execution.
CVE-2025-48505———2026-08-11Weak permissions in the Vitis™ Unified installation path on local Windows machines could allow a low-privileged user to achieve privileged escalation, potentially resulting in arbitrary code execution.
CVE-2025-0041———2026-08-11Uncontrolled search paths in the Vitis™ Embedded Single File Download (SFD) for local Windows installation could allow a low-privileged user to create arbitrary code execution.

Ecovacs Robotics · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66405High8.8—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the telnet servers enabled.
CVE-2026-66407High8.1—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC improperly implement authentication in WebSocket communication. The WebSocket private key may be retrieved through analyzing the traffic data via a man-in-the-middle attack, and communication contents ma…
CVE-2026-66403High7.5—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC leave the web server for debugging purposes enabled.
CVE-2026-66404Medium6.5—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC do not validate server certificates in MQTT communications.
CVE-2026-66411Medium5.3—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC incorrectly implement authentication algorithm in Websocket communications. An unauthenticated attacker may connect and operate the affected robot.
CVE-2026-66409Medium5.3—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords for their Wi-Fi hotspot networks. The password may be analyzed and obtained to connect to the access point of an affected robot.
CVE-2026-66410Medium4.8—2026-08-10Android and iOS apps ECOVACS PRO App improperly validate server certificates. Communication may be retrieved and/or altered.
CVE-2026-66406Medium4.8—2026-08-10DEEBOT PRO M1 and DEEBOT PRO K1VAC use wget command with server certificate validation disabled. A man-in-the-middle attack may allow to obtain and/or alter communications of the affected products.
CVE-2026-66408Medium4.6—2026-08-10The root accounts of DEEBOT PRO M1 and DEEBOT PRO K1VAC are configured with weak passwords. Physical access to an affected product may allow to obtain the password of the root account.

Filebrowser · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72839Critical9.8—2026-08-13filebrowser through 2.63.16 fails to properly restrict scope and permissions when self-signup is enabled with default CreateUserDir setting.
CVE-2026-72837High8.8—2026-08-14File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths.
CVE-2026-73613High8.2—2026-08-13filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Create permission to delete arbitrary files outside their scope.
CVE-2026-72836High8.1—2026-08-14FileBrowser before 2.63.19 does not account for case-insensitive filesystems when checking home directory ownership during self-registration.
CVE-2026-73612High8.1—2026-08-13File Browser before v2.63.22 fails to validate access rules for descendants during recursive copy, rename, and delete operations, allowing authenticated users to bypass path-based access controls.
CVE-2026-72835Medium6.8—2026-08-14filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths.
CVE-2026-73611Medium6.8—2026-08-13File Browser versions from 2.50.0 through 2.63.21 fail to validate JWT expiration when proxy authentication is configured with a non-default logout page.
CVE-2026-72838Medium6.5—2026-08-14FileBrowser versions before 2.63.19 fail to enforce the declared Upload-Length in the TUS resumable-upload PATCH endpoint, allowing authenticated users to write arbitrary data to disk.
CVE-2026-72834Medium4.3—2026-08-14filebrowser before 2.63.19 contains a permission bypass in the /api/resources endpoint.

Itsourcecode · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19767Medium6.3—2026-08-14A weakness has been identified in itsourcecode Hospital Management System 1.0.
CVE-2026-19364Medium6.3—2026-08-09A vulnerability was determined in itsourcecode Hospital Management System 1.0.
CVE-2026-19347Medium6.3—2026-08-09A vulnerability was identified in itsourcecode Hospital Management System 1.0.
CVE-2026-19071Medium6.3—2026-08-06A flaw has been found in itsourcecode Hospital Management System 1.0.
CVE-2026-19070Medium6.3—2026-08-06A vulnerability was detected in itsourcecode Hospital Management System 1.0.
CVE-2026-19069Medium6.3—2026-08-06A security vulnerability has been detected in itsourcecode Hospital Management System 1.0.
CVE-2026-19068Medium6.3—2026-08-06A weakness has been identified in itsourcecode Hospital Management System 1.0.
CVE-2026-19067Medium6.3—2026-08-06A security flaw has been discovered in itsourcecode Hospital Management System 1.0.
CVE-2026-19020Medium6.3—2026-08-06A weakness has been identified in itsourcecode Hospital Management System 1.0.

Netgear · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11814Medium6.8—2026-08-11A command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of th…
CVE-2026-11739Medium6.4—2026-08-11A command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality…
CVE-2026-11736Medium4.9—2026-08-11A stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality.
CVE-2026-11735Medium4.9—2026-08-11A stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality.
CVE-2026-11733Medium4.9—2026-08-11A buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device.
CVE-2026-9214Medium4.5—2026-08-11Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVE-2026-11737Medium4.5—2026-08-11Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality.
CVE-2026-11738Medium4.4—2026-08-11Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality.
CVE-2026-11734Low2.7—2026-08-11A buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable.

Opensignlabs · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72548High7.5—2026-08-11An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any organisation tenant record via the gettenant Parse cloud function.
CVE-2026-72545High7.5—2026-08-11An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to write to any contact record via the updatecontacttour Parse cloud function.
CVE-2026-72544High7.5—2026-08-11An integrity verification vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to forge document audit-trail entries via the triggerevent Parse cloud function.
CVE-2026-72543High7.5—2026-08-11An insecure direct object reference vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to retrieve any contact record via the getcontact Parse cloud function.
CVE-2026-72692High7.5—2026-08-10A missing authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to irreversibly decline any in-flight document and forge the decline attribution to an arbitrary user via the dec…
CVE-2026-72691High7.5—2026-08-10An authentication bypass vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to mint MASTER_KEY-signed file access tokens for arbitrary stored files via the getsignedurl Parse cloud functio…
CVE-2026-72689High7.5—2026-08-10A broken object-level authorization vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read complete contract records via the getDocument Parse cloud function.
CVE-2026-72688High7.5—2026-08-10A missing authentication vulnerability in OpenSignLabs opensignserver through 2.37.0 allows an unauthenticated remote attacker to read arbitrary stored documents via the fileupload Parse cloud function.
CVE-2026-72549Medium5.3—2026-08-11An information disclosure vulnerability in OpenSignLabs OpenSign through 2.37.0 allows unauthenticated remote attackers to map any email address or username to its internal user objectId via the getUserId Parse cloud function.

Priority · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59500Critical10.0—2026-08-13: Improper Authentication vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59507Critical9.3—2026-08-13: Use of Hard-coded Credentials : Exposure of Sensitive Information to an Unauthorized Actor : Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59506Critical9.3—2026-08-13: Missing Authentication for Critical Function vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59504Critical9.1—2026-08-13: Client-Side Enforcement of Server-Side Security vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59503Critical9.1—2026-08-13: Exposure of Sensitive Information to an Unauthorized Actor : Exposure of Private Personal Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59505High8.6—2026-08-13: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59499High8.6—2026-08-13: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions)..
CVE-2026-59501High8.2—2026-08-13: Improper Access Control vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).
CVE-2026-59502Medium5.3—2026-08-13: Observable Discrepancy vulnerability in Priority Portal Generator addon to Priority ERP (developed by Soft Solutions).

Silabs.com · 9 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19293High8.8—2026-08-13SMP security request (from peripheral) does not include the maximum encryption key size supported.
CVE-2026-19292High8.8—2026-08-13Re-pairing with a legitimate device can use a lower security level than previous making brute-forcing the LTK easier.
CVE-2026-19291High8.8—2026-08-13Bluetooth re-pairing with an existing device can use a lower security level.
CVE-2026-16101High8.8—2026-08-13Spoofing an already bonded device can force either RS9116W or SiWx917 to re-pair/bond with a rogue device.
CVE-2026-65936———2026-08-13A malformed Bluetooth connection request message can cause the RS9116W/SiWx917 to leak potentially sensitive information.  See vulnerability B-E4 in the related paper below.
CVE-2026-65935———2026-08-13Passkey entry Bluetooth LE legacy pairing can be bypassed in the RS9116W and SiWx917 by manipulating the temporary key value.  See vulnerability B-E3 in the related paper below.
CVE-2026-65934———2026-08-13An unencrypted 'pause encryption request' message causes a denial of service in the BT122 module.  See vulnerability B-E10 in the related paper below.
CVE-2026-65933———2026-08-13A malformed Bluetooth connection request message can cause the BT122 to leak potentially sensitive information.
CVE-2026-65932———2026-08-13The BT122 module stops advertising after receiving a plaintext 'pause enceryption response' message resulting in a denial of service.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-19847High8.8—2026-08-14A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19846High8.8—2026-08-14A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19845High8.8—2026-08-14A vulnerability was determined in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19844High8.8—2026-08-14A vulnerability was found in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19815High8.8—2026-08-14A flaw has been found in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19814High8.8—2026-08-14A vulnerability was detected in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19813High8.8—2026-08-14A security vulnerability has been detected in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19812High8.8—2026-08-14A weakness has been identified in TOTOLINK A800R 4.1.2cu.5137_B20200730.
CVE-2026-19811High8.8—2026-08-14A security flaw has been discovered in TOTOLINK A800R 4.1.2cu.5137_B20200730.

Autel · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8986Critical9.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection when processing OCPP GetDiagnostics requests.
CVE-2026-8985Critical9.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 is vulnerable to OS command injection in the /test endpoint exposed on TCP port 9002.
CVE-2026-8984Critical9.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 allows unauthenticated remote code execution via the service listening on TCP port 9002.
CVE-2026-8983Critical9.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 contains a hard-coded authentication token that bypasses authorization checks for multiple management endpoints.
CVE-2026-8987High8.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 contains a heap-based buffer overflow in the set_ap_param command handled by the /localcfg endpoint.
CVE-2026-8982High8.1—2026-07-21Two undocumented privileged accounts exist in Autel Maxi Charger Single firmware through V1.03.51.
CVE-2026-8989Medium6.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 permits unrestricted access to the NXP i.MX6 recovery mode through exposed hardware recovery pins.
CVE-2026-8988Medium6.8—2026-07-21Autel Maxi Charger Single firmware through V1.03.51 exposes an accessible UART interface that permits interruption of the boot process and access to the U-Boot bootloader.

H3c · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18810High7.3—2026-08-04A security vulnerability has been detected in H3C NX15 V100R017.
CVE-2026-18902High7.2—2026-08-05A vulnerability was detected in H3C NX15 V100R017.
CVE-2026-18901High7.2—2026-08-05A security vulnerability has been detected in H3C NX15 V100R017.
CVE-2026-18900High7.2—2026-08-05A weakness has been identified in H3C NX15 V100R017.
CVE-2026-18814High7.2—2026-08-04A vulnerability was found in H3C NX15 V100R017.
CVE-2026-18813High7.2—2026-08-04A vulnerability has been found in H3C NX15 V100R017.
CVE-2026-18812High7.2—2026-08-04A flaw has been found in H3C NX15 V100R017.
CVE-2026-18811High7.2—2026-08-04A vulnerability was detected in H3C NX15 V100R017.

Jovancoding · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73615High8.8—2026-08-13Network-AI versions before 5.15.1 contain a security matcher bypass vulnerability where SandboxPolicy evaluates raw command strings with quotes preserved while the executor tokenizes commands by stripping quotes before execution.
CVE-2026-73614High8.8—2026-08-13Network-AI ClaudeHookBridge before 5.15.1 truncates the target string to 500 characters before evaluating denyPatterns, while Claude Code executes the full untruncated command.
CVE-2026-46701High7.6—2026-07-20Network-AI is a TypeScript/Node.js multi-agent orchestrator.
CVE-2026-58484High7.1—2026-07-20Network-AI is a TypeScript/Node.js multi-agent orchestrator.
CVE-2026-58481Medium6.5—2026-07-20Network-AI is a TypeScript/Node.js multi-agent orchestrator.
CVE-2026-58413Medium6.1—2026-07-20Network-AI is a TypeScript/Node.js multi-agent orchestrator.
CVE-2026-58482Medium5.9—2026-07-20Network-AI, a TypeScript/Node.js multi-agent orchestrator, has a shipped, exported, documented feature called `ApprovalInbox` (`lib/approval-inbox.ts`).
CVE-2026-58414Medium5.5—2026-07-20Network-AI is a TypeScript/Node.js multi-agent orchestrator.

Lenovo · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63425High7.8—2026-08-13During an internal security assessment, a potential improper permissions vulnerability was discovered in Lenovo Dock Manager that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-63423High7.8—2026-08-13During an internal security assessment, a potential vulnerability was discovered in Lenovo Accessories and Display Manager for Enterprise for Windows that could allow a local authenticated user to execute arbitrary code with elevated privi…
CVE-2026-63424High7.3—2026-08-13During an internal security assessment, an improperly protected key was discovered in Lenovo Dock Manager that could allow a local authenticated user to escalate privileges.
CVE-2026-63426High7.1—2026-08-13During an internal security assessment, a potential vulnerability was discovered in Lenovo Dock Manager that could allow an authenticated local user to perform an arbitrary file deletion with elevated privileges.
CVE-2026-12036High7.1—2026-08-13An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to perform an arbitrary file deletion with elevated privileges.
CVE-2026-6387High7.0—2026-08-13A potential authentication bypass vulnerability was reported in Lenovo System Update that could allow a local authenticated user to execute arbitrary code with elevated privileges.
CVE-2026-15994High7.0—2026-08-13During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to execute code with elevated privileges.
CVE-2026-14256Medium4.7—2026-08-13ELAN reported a potential out-of-bounds write vulnerability in the ELAN TrackPoint driver that, under certain circumstances, could allow a local authenticated user to cause a system crash.

Quanovate Tech Inc. (Operating As Mira / Mira Care) · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68067Critical9.8—2026-08-11The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address.
CVE-2026-67568Critical9.1—2026-08-11The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.
CVE-2026-66875High8.8—2026-08-11In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–30 meters) can silently rebind the device to an attacker-controlled account, extract stored hormone…
CVE-2026-67558High7.4—2026-08-11The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advertisement name only, with no cryptographic peripheral authentication, MAC allowlist, or bonded-identit…
CVE-2026-66098Medium6.5—2026-08-11The Mira hormone monitor device firmware accepts a 0x01 write from any BLE central without authentication, causing the device to reboot into bootloader mode.
CVE-2026-66832Medium6.5—2026-08-11When the Mira Android app opens in-app WebView content (e.g., shop redirect flows), the user's live session token is appended to the URL as a query string parameter, and a persistent user identifier is included in the WebView's User-Agent…
CVE-2026-66340Medium5.3—2026-08-11The Mira cloud authentication endpoints do not enforce per-account rate limiting, per-IP throttling, or account lockout after repeated failed login attempts.
CVE-2026-64934Medium4.3—2026-08-11The Mira cloud API accepts the firmware version reported by the companion app as authoritative for a given device, without independently attesting the version from the device itself.

Rustfs · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73284High8.8—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73289High8.1—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73286High8.1—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73285High7.5—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73265Medium6.5—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73287Medium5.4—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73290Medium5.3—2026-08-12RustFS is a distributed object storage system built in Rust.
CVE-2026-73288———2026-08-12RustFS is a distributed object storage system built in Rust.

Sonicwall · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66147Critical9.4—2026-08-11An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.
CVE-2026-66145Critical9.1—2026-08-11An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
CVE-2026-18634High8.4—2026-08-11An insecure handling of serialized objects vulnerability was found in the one of the service of GMS application 9.5.1 (Build 9510.1044) and earlier versions.
CVE-2026-66154High8.3—2026-08-11An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044) and earlier versions which, under a successful MitM attack and controlled network conditions, could…
CVE-2026-66150High7.8—2026-08-11Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands…
CVE-2026-66149High7.8—2026-08-11Improper Control of Generation of Code ('Code Injection') Vulnerability in the SonicWall Email Security appliance allows an authenticated attacker with access to the SonicWall Email Security restricted CLI can inject arbitrary OS commands…
CVE-2026-66148Medium6.3—2026-08-11An authenticated command injection vulnerability was identified in GMS Command-Line Interface (CLI) 9.5.1 (Build 9510.1044) and earlier versions which allows low-privileged local user to execute system commands with root privileges.
CVE-2026-66146Medium6.1—2026-08-11Multiple Cross-Site Scripting (XSS) vulnerabilities were identified in GMS 9.5.1 (Build 9510.1044) and earlier versions that allow a remote attacker to execute javascript script in a user's browser.

Vim · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73070Medium5.5—2026-08-11Vim is an open source, command line text editor.
CVE-2026-73071Low3.3—2026-08-11Vim is an open source, command line text editor.
CVE-2026-73078———2026-08-11Vim is an open source, command line text editor.
CVE-2026-73077———2026-08-11Vim is an open source, command line text editor.
CVE-2026-73076———2026-08-11Vim is an open source, command line text editor.
CVE-2026-73075———2026-08-11Vim is an open source, command line text editor.
CVE-2026-73074———2026-08-11Vim is an open source, command line text editor.
CVE-2026-73072———2026-08-11Vim is an open source, command line text editor.

Wpmanageninja · 8 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73533Critical9.8—2026-08-13Ninja Tables Pro 5.2.11 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server.
CVE-2026-73532Critical9.8—2026-08-13Fluent Forms Pro 6.2.7 contains an embedded malicious code vulnerability introduced via a tampered plugin build served through a decommissioned update server.
CVE-2026-18146High7.2—2026-08-13The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Notification Smartcode Values in all versions up to, and including, 6.2.11 due…
CVE-2026-16636High7.2—2026-08-06The FluentSMTP – WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Recipient Display Name (to.name) in Email Logs in all versions…
CVE-2026-61964High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <= 5.2.9 versions.
CVE-2026-66467Medium6.5—2026-08-13Subscriber Cross Site Scripting (XSS) in FluentCommunity <= 2.7.5 versions.
CVE-2026-17571Medium6.1—2026-08-01The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'param' in all versions up to, and including, 6.2.8 due to insufficient inp…
CVE-2026-17567Medium5.3—2026-07-31The Fluent Forms – Customizable Contact Forms, Survey, Quiz, & Conversational Form Builder plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 6.2.8 via the 'transaction' parameter d…

Freepbx · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72578High8.8—2026-08-10A cross-site request forgery (CSRF) vulnerability in FreePBX Framework 17.0 allows an unauthenticated remote attacker to perform administrative actions on behalf of an authenticated administrator.
CVE-2026-73665———2026-08-13FreePBX is an open source IP PBX.
CVE-2026-73664———2026-08-13FreePBX is an open source IP PBX.
CVE-2026-73663———2026-08-13FreePBX is an open source IP PBX.
CVE-2026-73662———2026-08-13FreePBX is an open source IP PBX.
CVE-2026-73661———2026-08-13FreePBX is an open source IP PBX.
CVE-2026-73660———2026-08-13FreePBX is an open source IP PBX.

Gitpython-developers · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73625High8.8—2026-08-13GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.
CVE-2026-73624High8.1—2026-08-13GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.
CVE-2026-73620High8.1—2026-08-13GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs.
CVE-2026-73623High7.5—2026-08-13GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.
CVE-2026-73622High7.5—2026-08-13GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing variable references.
CVE-2026-73619Medium6.5—2026-08-13GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options.
CVE-2026-73621Medium5.4—2026-08-13GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without the check_unsafe_options guard present in the sibling iter_items method.

Gnu · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71394———2026-08-10GNU Emacs for Android improperly validates the table header input in sfnt_read_table_directory() in src/sfnt.c.
CVE-2026-71393———2026-08-10GNU Emacs for Android is vulnerable to an integer overflow in sfnt_read_name_table() in src/sfnt.c.
CVE-2026-71392———2026-08-10GNU Emacs for Android is vulnerable to an integer overflow in the sfnt_read_cmap_format_12() function in src/sfnt.c.
CVE-2026-71391———2026-08-10GNU Emacs for Android contains an off-by-one error in the gvar table parser in src/sfnt.c.
CVE-2026-66486———2026-08-10GNU cpio is vulnerable to improper encoding or escaping of output in its archive member listing functionality.
CVE-2026-66485———2026-08-10GNU cpio is vulnerable to an uncontrolled memory allocation in the make_path function at src/makepath.c.
CVE-2026-66484———2026-08-10GNU cpio contains a Path Traversal vulnerability in its tar archive extraction functionality.

Johnson Controls · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21662Critical9.8—2026-07-31Unrestricted upload of file with dangerous type vulnerability in Johnson Controls FM Systems Employee allows Using Malicious Files.
CVE-2026-34490Medium5.5—2026-07-31Cleartext storage of sensitive information vulnerability in Johnson Controls XAAP Application on Android allows an attacker on a jailbroken or otherwise compromised device to Retrieve Sensitive Data.
CVE-2026-34497Medium5.4—2026-07-31Improper neutralization of Script-Related HTML tags in a web page (basic XSS) vulnerability in Johnson Controls FM Systems Employee allows Cross-Site Scripting (XSS).
CVE-2026-34495Medium5.4—2026-07-31Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Johnson Controls FM Systems Employee allows Stored XSS.
CVE-2026-64887———2026-08-14Use of hard-coded cryptographic key vulnerability in Johnson Controls Airwall allows : Cryptanalytic Attack.
CVE-2026-34492———2026-08-14External control of file name or path vulnerability in Johnson Controls Airwall allows : File Manipulation.
CVE-2026-27871———2026-08-14Cwe-327 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Johnson Controls TL280 allows Cryptanalytic Attack.

Nozomi Networks · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-33390High8.1—2026-07-09An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions.
CVE-2026-31984High7.5—2026-07-09A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries.
CVE-2026-31982High7.1—2026-07-09An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter.
CVE-2026-33922Medium6.0—2026-08-11A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to insufficient validation of an input parameter.
CVE-2026-31981Medium5.9—2026-07-09A Stored HTML Injection vulnerability was discovered in the Diagram tab and Graph view due to a shared input validation function being insufficiently restrictive.
CVE-2026-31983Medium5.3—2026-07-09A Missing Authentication vulnerability was discovered in the SSH keys synchronization endpoint.
CVE-2026-33921Medium5.2—2026-08-11The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver was accessible to every local user of the host instead of being restricted to administrators only.

Owen2345 · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56721High8.8—2026-08-11CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows authenticated low-privileged attackers to overwrite any user's credentials by exploiting a paramete…
CVE-2026-73332High8.7—2026-08-12CamaleonCMS contains a stored cross-site scripting vulnerability in the cama_contact_form plugin that allows low-privileged authenticated attackers to inject arbitrary HTML by submitting unsanitized content to the before_html field through…
CVE-2026-73329High8.7—2026-08-12CamaleonCMS contains a stored cross-site scripting vulnerability that allows authenticated low-privileged users to execute arbitrary JavaScript in an administrator's browser by injecting unsanitized HTML payloads into the post title parame…
CVE-2026-73326High7.6—2026-08-12CamaleonCMS contains a missing authorization vulnerability that allows any authenticated low-privileged user to access and modify plugin settings by reaching four unprotected plugin-administration endpoints without administrator-level auth…
CVE-2026-73331High7.1—2026-08-12CamaleonCMS 2.9.1 contains an authenticated SQL injection vulnerability that allows authenticated attackers with post creation or editing privileges to submit a crafted slug value containing SQL syntax that the database backend evaluates a…
CVE-2026-73330Medium6.6—2026-08-12CamaleonCMS 2.9.1 contains a server-side template injection vulnerability that allows authenticated administrators to execute arbitrary commands by embedding ERB tags in the email parameter of the test_email settings action, which are eval…
CVE-2026-56720Medium4.3—2026-08-11CamaleonCMS version 2.9.2 and earlier contains a missing authorization vulnerability in the admin users controller that allows any authenticated user to access any other user's profile data by supplying an arbitrary user ID parameter.

Synacor · 7 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73570High8.9KEV2026-08-13A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled.
CVE-2026-73576Medium6.3—2026-08-13In Zimbra Collaboration (ZCS) before 10.1.17, weak cryptographic key generation vulnerability exists in the OnlyOffice integration.
CVE-2026-73572Medium6.1—2026-08-13In Zimbra Collaboration (ZCS) before 10.1.17, a stored cross-site scripting (XSS) vulnerability exists in the Zimbra Classic Web Client due to insufficient sanitization of specific attachment content during inline preview.
CVE-2026-73575Low3.1—2026-08-13In Zimbra Collaboration (ZCS) before 10.1.17, a Cross-Site Request Forgery (CSRF) vulnerability exists in the Exchange Web Services (EWS) endpoint of Zimbra Collaboration (ZCS) due to insufficient validation of request content types.
CVE-2026-73574Low3.1—2026-08-13In Zimbra Collaboration before 10.1.17, a local file inclusion (LFI) vulnerability exists in the Zimbra Classic Web Client due to improper validation of the fu request parameter.
CVE-2026-73573Low3.1—2026-08-13In Zimbra Collaboration (ZCS) before 10.1.17, a path traversal vulnerability exists in the Zimbra Briefcase document editing functionality due to improper validation of the packages parameter.
CVE-2026-73571Low3.1—2026-08-13An authorization bypass vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.17 due to improper authorization validation in delegated email sending functionality.

Amazon · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18245Critical9.0—2026-07-30Improper control of code generation in Amazon @aws-amplify/codegen-ui-react before 2.20.6 might allow a remote authenticated user to execute arbitrary code in end-user browsers, developer machines, CI/CD environments, and server-side rende…
CVE-2026-18953High8.6—2026-08-05Improper limitation of a pathname to a restricted directory in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working…
CVE-2026-18140High7.5—2026-07-30Uncontrolled recursion in the unknown-key skip path of the aws-smithy-json runtime crate before 0.62.7, which the smithy-rs code generator invokes from every generated struct deserializer, might allow remote unauthenticated users to cause…
CVE-2026-19642Medium5.9—2026-08-12An out-of-bounds write issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862 might allow a remote authenticated user to cause a crash or heap memory corruption in an application that processes crafted Base64-encoded input.
CVE-2026-18954Medium5.5—2026-08-05Incorrect authorization in the aggregation pipeline tool in Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP client to perform inappropriate write operations on the connected database via write-capable a…
CVE-2026-19643Medium5.3—2026-08-12An out-of-bounds read issue in the Base64 decoder in Amazon aws-sdk-cpp before 1.11.862, on some platforms, might allow a remote authenticated user to crash an application that processes crafted Base64-encoded input.

Axis Communications Ab · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4757High7.2—2026-08-11A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation.
CVE-2026-6181Medium5.9—2026-08-11The Device Configuration Framework is vulnerable to an authentication bypass flaw.
CVE-2026-5304Medium5.7—2026-08-11An ACAP configuration file lacks input validation, which could potentially lead to privilege escalation.
CVE-2026-5303Medium5.7—2026-08-11The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation.
CVE-2026-8158Medium5.3—2026-08-11The Signed Video Framework contained a  buffer overflow issue which could lead the application using this framework to crash.
CVE-2026-6505Medium5.1—2026-08-11The ACAP framework contains a Time-of-Check to Time-of-Use (TOCTOU) race condition, which could potentially lead to privilege escalation.

Eclipse · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12605Critical9.6—2026-08-06In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServlet ContentSources leaks the admin `gfresttoken` to attacker-controlled host if the victim is authenticated into the Admin Console -\> full unauthenticated takeov…
CVE-2026-16439Critical9.1—2026-07-21In Eclipse OpenJ9 versions up to 0.60, using -Xtrace to trace method arguments can lead to buffer underflow.
CVE-2026-46581High7.5—2026-08-05In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to a remote Facelet which will be included and processed as pa…
CVE-2026-16243High7.5—2026-07-21In Eclipse OMR versions up to 0.11, the arraycmp SIMD implementation for Z and P does not check if the number of bytes to compare is zero.
CVE-2026-14304Medium5.5—2026-08-05In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including source code versions up to v20260630 and ACTF based application miChecker versions up to 3.1.0), it has been identified that an XML External Entity (XXE) vulne…
CVE-2026-16454Medium4.3—2026-07-21In Eclipse hawkBit versions 1.0.3 and prior, a privilege escalation vulnerability (CWE-284 / CWE-862) has been identified in the Direct Device Integration (DDI) Controller.

Frappe · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72911Critical9.9—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72910High7.1—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72908Medium6.5—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72907Medium6.5—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72906Medium4.3—2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.
CVE-2026-72909———2026-08-10ERPNext is a free and open source Enterprise Resource Planning tool.

Go Standard Library · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56862High7.5—2026-08-13Handshake messages, such as KeyUpdate, are always considered as state-advancing, regardless of whether a handshake has been completed or not.
CVE-2026-56859High7.5—2026-08-13Previously, DecodeElement would reset the depth counter causing it to never fire; this could lead to stack exhaustion.
CVE-2026-56853High7.5—2026-08-13When a server is configured to support unencrypted HTTP/2, it reads a few bytes from each new connection to see if they contain the HTTP/2 client preface.
CVE-2026-33818High7.5—2026-08-13Enforce a recursion limit in Unmarshal to prevent stack exhaustion when parsing deeply-nested, recursive structures.
CVE-2026-56858Medium6.1—2026-08-13Previously, pathological inputs could close an unescaped '/' early, allowing for attack-controlled data to inject arbitrary content, potentially leading to XSS.
CVE-2026-56860Medium5.9—2026-08-13Previously, resolving relative paths containing parent directory ('..') segments performed string conversions and buffer rewrites on each step, resulting in quadratic time complexity and high memory allocation overhead.

Hclsoftware · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56619Medium5.4—2026-08-10HCL BigFix Mobile is vulnerable to Reflected Cross-Site Scripting (Reflected XSS) due to insufficient validation and output encoding of user-controlled input.
CVE-2026-21760Medium4.6—2026-07-17HCL DevOps Loop is affected by an Unauthorized Access to Admin Functionality (Forced Browsing) vulnerability.
CVE-2026-56620Medium4.3—2026-08-10HCL BigFix Mobile is vulnerable to information disclosure due to improper handling of exceptions and verbose error reporting.
CVE-2026-21761Medium4.2—2026-07-17HCL DevOps Loop is affected by a Cross-Origin Resource Sharing (CORS) misconfiguration.
CVE-2026-21762Low3.7—2026-07-17HCL DevOps Loop is affected by missing HTTP security headers.
CVE-2026-21764Low3.1—2026-07-17HCL DevOps Loop is affected by insufficient input validation that allows special characters where they should be restricted.

Kong Inc. · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18679———2026-08-12When kuma-dp is started against an HTTPS control plane and the operator did not pass a CA certificate, the data plane connects with TLS peer verification disabled, and the dataplane authentication token is sent over that unverified connect…
CVE-2026-18678———2026-08-12When an operator adds an HTTPS control plane profile to kumactl without providing a CA certificate, kumactl disables TLS verification and sends API tokens over the unverified connection.
CVE-2026-18677———2026-08-12In Kong Mesh running in universal mode with a MeshIdentity whose SPIFFE ID path template derives from the dataplane's kuma.io/workload label, the XDS authenticator in kuma-cp validates that label only when the dataplane token is bound to a…
CVE-2026-18676———2026-08-12The default kuma-cp configuration in Kong Mesh reveals the admin bootstrap token and signing keys to any webpage the operator visits while the control plane is reachable from their browser. Due to a CORS misconfiguration a cross-origin fet…
CVE-2026-18675———2026-08-12The dataplane token validator in kuma-cp performs an unchecked Go type assertion on the JWT kid header.
CVE-2026-18673———2026-08-12When kuma-dp is configured with the Envoy admin API on a Unix domain socket, which is the default, its readiness service on TCP port 9902 - bound to all interfaces - forwards almost the entire Envoy admin API to any caller that can reach t…

Kunbus · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57472———2026-08-14Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in versio…
CVE-2026-57471———2026-08-14Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in versio…
CVE-2026-57469———2026-08-14Nozomi Networks Labs identified a CWE-352: Cross-Site Request Forgery (CSRF) vulnerability in the web-based configuration backend of KUNBUS PiCtory in version 2.16.0 that allows a remote unauthenticated attacker to perform state-changing o…
CVE-2026-13198———2026-08-14Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification functionality of KUNBUS piControl in version 2.6.2 that allows a…
CVE-2026-13197———2026-08-14Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and process-image management functionality of KUNBUS piControl in ver…
CVE-2026-13196———2026-08-14Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local authenticated attacker with device configuration access to…

Miniorange · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61967Critical9.8—2026-08-13Unauthenticated Privilege Escalation in miniorange otp verification <= 5.5.1 versions.
CVE-2026-28149Critical9.8—2026-08-13Unauthenticated PHP Object Injection in Headless Single Sign On <= 1.6 versions.
CVE-2026-28148Critical9.8—2026-08-13Unauthenticated Bypass Vulnerability in Headless Single Sign On <= 1.6 versions.
CVE-2026-28008Critical9.8—2026-08-13Unauthenticated Broken Authentication in OAuth Single Sign On – SSO (OAuth Client) <= 7.0.0 versions.
CVE-2026-65520Critical9.3—2026-08-06Unauthenticated SQL Injection in WP OAuth Server <= 6.2.0 versions.
CVE-2026-61979High8.1—2026-08-13Unauthenticated Privilege Escalation in SAML SP Single Sign On <= 5.4.3 versions.

Openchoreo · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73843Critical9.6—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73842Critical9.0—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73841High8.8—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73667High8.8—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.
CVE-2026-73666High8.2—2026-08-13OpenChoreo is a developer platform for Kubernetes.
CVE-2026-73840Medium5.3—2026-08-13OpenChoreo is a complete, open-source developer platform for Kubernetes.

Roskus · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19871———2026-08-14Use of Hard-coded Credentials in the human resources component in Roskus Prospero Flow CRM before 5.15.9 allows unauthenticated remote attackers to authenticate as any employee onboarded through the standard flow, knowing only their email…
CVE-2026-19870———2026-08-14Authorization Bypass Through User-Controlled Key in the payroll module in Roskus Prospero Flow CRM before 5.15.10 allows authenticated users holding the read payroll permission to view the salary and banking details of employees of any oth…
CVE-2026-19734———2026-08-13Missing Authorization and Authorization Bypass Through User-Controlled Key in the product management component in Roskus Prospero Flow CRM before 5.4.7 allows authenticated users of any company to read the full sensitive data (price, cost…
CVE-2026-19539———2026-08-11Authorization Bypass Through User-Controlled Key in the ticket management component in Roskus Prospero Flow CRM before 5.4.9 allows authenticated users of any company to read the full content (title, description, and attachments) of ticket…
CVE-2026-19433———2026-08-10Authorization Bypass Through User-Controlled Key in the contact management component in Roskus Prospero Flow CRM before 5.4.8 allows authenticated users of any company to blindly overwrite the contact data of another company and to downloa…
CVE-2026-59233———2026-08-10Missing Authorization in the permission management component in Roskus Prospero Flow CRM before 5.2.1 allows any authenticated user to grant any role, including their own, the complete set of application permissions via a crafted POST requ…

Tbea · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-15683———2026-08-10TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server.
CVE-2025-15682———2026-08-10TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server.
CVE-2025-15681———2026-08-10TBEA TLogger V2.1.0.0B0.0.0.0 contains an authentication bypass in its web server.
CVE-2025-15680———2026-08-10TBEA TLogger V2.1.0.0B0.0.0.0 exposes a UART interface on the device's circuit board without sufficient protection.
CVE-2025-13294———2026-08-10An unauthenticated SQL injection vulnerability exists in the web server of TBEA TLogger V2.1.0.0B0.0.0.0.
CVE-2025-13293———2026-08-10A hard-coded or default root account credential in TBEA TLogger V2.1.0.0B0.0.0.0 allows an unauthenticated remote attacker to obtain root-level access to the device via the exposed SSH service.

Tp-link Systems Inc. · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-30241———2026-08-10Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions.  An authenticated adjacent attacker may inject spe…
CVE-2025-30240———2026-08-10The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices.
CVE-2025-30239———2026-08-10In affected TP-Link Aginet devices, use of hardcoded cryptographic keys embedded in the firmware to protect sensitive configuration data may allow an attacker who has access to device storage to recover the keys and decrypt stored data.
CVE-2025-30238———2026-08-10In affected TP-Link Aginet devices, insufficient authorization validation allows authenticated low-privileged users to execute higher-privileged operations.
CVE-2025-30237———2026-08-10The affected TP-Link Aginet devices contain a flaw in the web management interface where authentication checks are not consistently enforced on certain endpoints.
CVE-2026-12339———2026-08-10A Zip Slip vulnerability in the WebUI ISP Upgrade functionality allows arbitrary file write via a crafted archive containing directory traversal sequences.

Triggerdotdev · 6 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73656Critical9.9—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.
CVE-2026-73654High8.5—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.
CVE-2026-73658High8.2—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.
CVE-2026-73659High8.1—2026-08-13Trigger.dev is the open-source platform for building AI workflows in TypeScript.
CVE-2026-73655High7.4—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.
CVE-2026-73657Medium4.2—2026-08-13Trigger.dev is a platform for building and deploying fully managed AI agents and workflows.

Ancorathemes · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65578Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Agora <= 1.9 versions.
CVE-2026-65577Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Advice <= 1.18.0 versions.
CVE-2026-65576Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Adrena <= 1.2.14 versions.
CVE-2026-65575Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Accalia <= 1.5.3 versions.
CVE-2026-65574Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Abogado <= 1.18 versions.

Apple · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17716High8.4—2026-07-30Use after free in Updater in Google Chrome on Mac prior to 151.0.7922.72 allowed a local attacker to perform privilege escalation via malicious network traffic.
CVE-2026-19557High8.3—2026-08-11Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2026-65370High7.5—2026-08-12ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks.
CVE-2026-17913Medium5.4—2026-07-30Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to perform UI spoofing via a crafted HTML page.
CVE-2026-17724Medium4.2—2026-07-30Race in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

Aws · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18428High8.8—2026-08-13A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to…
CVE-2026-19311High8.1—2026-08-12Missing authorization in the Execute Monitor API in Amazon OpenSearch Alerting plugin might allow an authenticated remote user to read, modify, or delete arbitrary index data via a crafted inline monitor request with unintentional data sou…
CVE-2026-18952High8.1—2026-08-12Missing input validation in the threat intelligence feed parser in the OpenSearch Security Analytics plugin might allow an authenticated remote user to perform server-side request forgery and read local files via a crafted URL parameter to…
CVE-2026-19111High8.1—2026-08-06Insecure direct object reference in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 might allow remote authenticated users to access, modify, or delete memories belonging to other…
CVE-2026-16756High7.5—2026-07-23Missing connection and header-read timeouts and the absence of a concurrent-connection cap in the default serve() path of Amazon aws-smithy-http-server might allow remote attackers to cause a denial of service by opening many connections a…

Code-projects · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19344High7.3—2026-08-09A vulnerability has been found in code-projects Task Management System 1.0.
CVE-2026-19343High7.3—2026-08-09A flaw has been found in code-projects Task Management System 1.0.
CVE-2026-19342High7.3—2026-08-09A vulnerability was detected in code-projects Task Management System 1.0.
CVE-2026-19345Medium6.5—2026-08-09A vulnerability was found in code-projects Task Management System 1.0.
CVE-2026-19378Medium4.3—2026-08-10A vulnerability was found in code-projects Task Management System 1.0.

Cotonti · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55742Critical9.6—2026-06-18Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration rights handler.
CVE-2026-55741High8.8—2026-06-18Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the administration configuration handler.
CVE-2026-55744High8.1—2026-06-18Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module.
CVE-2026-55746High7.6—2026-06-18Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to stored Cross-Site Scripting in the Personal File Storage (PFS) module.
CVE-2026-55745Medium5.4—2026-06-18Cotonti 1.0.0 (master branch, commit f43f1fc3) is vulnerable to Cross-Site Request Forgery in the Personal File Storage (PFS) module.

Coturn · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73216Medium6.5—2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73215———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73214———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73213———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.
CVE-2026-73212———2026-08-11Coturn is a free open source implementation of TURN and STUN Server.

Electerm · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73226High8.8—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73224High8.8—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73227High8.1—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73225High8.1—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
CVE-2026-73223High8.1—2026-08-11electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.

Erlang · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59251High7.5—2026-07-27Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake.
CVE-2026-58227High7.5—2026-07-27The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake.
CVE-2026-55737High7.5—2026-07-27Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer and cras…
CVE-2026-54890High7.5—2026-07-27Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation.
CVE-2026-42792High7.5—2026-07-27Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) via connection slot exhaustion.

F5 · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-60005High8.2—2026-07-15NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_slice_module module.
CVE-2026-42533High8.1—2026-07-15A vulnerability exists in NGINX Plus and NGINX Open Source when a map directive uses regex matching and a string expression references the map's regex capture variables before referencing the map output variable.
CVE-2026-56434Medium6.5—2026-07-15NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_ssi_module module.
CVE-2026-48142Medium4.8—2026-06-17NGINX Plus and NGINX Open Source have a vulnerability in the ngx_http_charset_module module.
CVE-2026-60065Low3.7—2026-07-15When NGINX Plus is configured to use the Message Queuing Telemetry Transport (MQTT) filter module (ngx_stream_mqtt_filter_module), unauthenticated attackers can send requests with conditions beyond the attacker's control to cause a heap bu…

Gimp · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59090High8.4—2026-08-10A flaw was found in GIMP's PSD file format plugin.
CVE-2026-59087High7.8—2026-08-10A flaw was found in the GIMP image manipulation program, specifically within its Seattle Filmworks file loader.
CVE-2026-59091High7.3—2026-08-10A flaw was found in GIMP's file format plugins, including those for PSD and PAA files.
CVE-2026-59088Medium5.5—2026-08-10A flaw was found in GIMP.
CVE-2026-66757Medium5.5—2026-07-27A flaw was found in the file-sgi plugin in GIMP.

Gl-inet · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18616Critical9.8—2026-08-03A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5.
CVE-2026-18615Critical9.8—2026-08-03A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5.
CVE-2026-18614Critical9.8—2026-08-03A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5.
CVE-2026-18613Critical9.8—2026-08-03A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5.
CVE-2026-18612Critical9.8—2026-08-03A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5.

Hcl Software · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-62314Medium5.6—2026-08-13HCL AION is affected by a vulnerability where certain endpoints lack sufficient anti-automation controls.
CVE-2025-52640Medium4.7—2026-08-13HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation.
CVE-2026-21832Medium4.3—2026-08-13HCL AION is affected by a vulnerability where indirect prompt injection can lead to HTML injection in rendered output.
CVE-2025-62318Low3.7—2026-08-13HCL AION is affected by a vulnerability where JavaScript responses containing data could be referenced by external pages, potentially allowing sensitive information to be captured by an attacker-controlled page (JavaScript hijacking) under…
CVE-2025-62315Low3.4—2026-08-13HCL AION is affected by a vulnerability where certain input fields do not enforce sufficient server-side input validation.

Jupyterlab · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73626High7.5—2026-08-13JupyterLab versions >=4.6.0,<=4.6.1 and <=4.5.9 contain an allowlist/blocklist enforcement gap in PyPIExtensionManager.install().
CVE-2026-73417———2026-08-13jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.
CVE-2026-73416———2026-08-13jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.
CVE-2026-73627———2026-08-13JupyterLab (pip package 'jupyterlab') versions >=4.1.0,<=4.5.9 and >=4.6.0,<=4.6.1 contain a plugin manager lock-rule enforcement bypass.
CVE-2026-73415———2026-08-12jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.

Koha Community · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6428High7.6—2026-06-13SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated s…
CVE-2026-72609High7.1—2026-08-11An SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the acquisition => order_receive permission to read arbitrary database contents via the orderby request parameter in…
CVE-2026-72607High7.1—2026-08-11A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools => items_batchmod permission to read arbitrary database contents by storing a SQL payload in the agef…
CVE-2026-72608Medium6.5—2026-08-11A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the tools => label_creator permission to execute arbitrary SQL via the image_name field of a patron card layout.
CVE-2026-72610Medium4.3—2026-08-11A stored SQL injection vulnerability in Koha through 24.11.17, 25.05.12, 25.11.06, and 26.05.01 allows authenticated staff with the borrowers => edit_borrowers permission to cause a time-based denial of service by storing a SQL payload in…

Livebook · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-68746High8.8—2026-08-05Not Failing Securely ('Failing Open') vulnerability in livebook-dev livebook allows an unauthenticated network client to obtain full access to a Livebook server that enforces identity through Livebook Teams.
CVE-2026-66298High8.8—2026-08-05Origin Validation Error vulnerability in livebook-dev livebook allows untrusted notebook output JavaScript to trigger session-wide keyboard shortcuts, including forced evaluation of all cells and runtime restart.
CVE-2026-66881High8.1—2026-08-05Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path.
CVE-2026-66297High8.0—2026-08-05Improper Neutralization of Special Elements used in an OS Command (OS Command Injection) vulnerability in livebook-dev livebook allows command injection into generated deployment setup commands.
CVE-2026-66885Medium6.5—2026-08-05Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity.

Nagios Enterprises, Llc. · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48554High7.5—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to authenticated remote code execution via unfiltered NOTIFICATION-family macro substitution through the com_data parameter.
CVE-2026-48553High7.5—2026-08-12Nagios Core before 4.5.13 and Nagios XI before 2026R1.5 are vulnerable to authenticated remote code execution via custom-variable macro injection through the Nagios Remote Data Processor (NRDP).
CVE-2026-48551High7.4—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 contain a cross-site request forgery protection bypass via a self-supplied double-submit cookie.
CVE-2026-48550Medium6.1—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to reflected cross-site scripting in cmd.cgi via the NagFormId parameter.
CVE-2026-48552Medium5.4—2026-08-12Nagios Core before 4.5.14 and Nagios XI before 2026R1.7 are vulnerable to DOM-based cross-site scripting in jsonquery.js.

Nexcess · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28005Critical9.8—2026-08-06Unauthenticated Privilege Escalation in Kadence WooCommerce Email Designer <= 1.5.19 versions.
CVE-2026-66690High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in GiveWP <= 4.16.5 versions.
CVE-2026-73357Medium6.5—2026-08-13Donor Cross Site Scripting (XSS) in GiveWP < 4.16.6 versions.
CVE-2026-73349Medium5.3—2026-08-13Unauthenticated Broken Access Control in GiveWP < 4.16.6 versions.
CVE-2026-66696Medium4.3—2026-08-06Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <= 3.7.8 versions.

Noctedefensor · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19367Medium6.3—2026-08-09A vulnerability has been found in NocteDefensor LudusMCP 1.0.24.
CVE-2026-19366Medium5.3—2026-08-09A flaw has been found in NocteDefensor LudusMCP up to 1.0.24.
CVE-2026-19047Medium5.3—2026-08-06A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24.
CVE-2026-19045Medium5.3—2026-08-06A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24.
CVE-2026-19046Low3.3—2026-08-06A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24.

Nousresearch · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18993Medium6.3—2026-08-06A vulnerability was detected in NousResearch hermes-agent up to 0.16.0.
CVE-2026-18976Medium6.3—2026-08-06A vulnerability was determined in NousResearch hermes-agent up to 0.16.0.
CVE-2026-18775Medium6.3—2026-08-04A vulnerability has been found in NousResearch hermes-agent up to 0.16.0.
CVE-2026-18774Medium6.3—2026-08-04A flaw has been found in NousResearch hermes-agent up to 0.16.0.
CVE-2026-18773Medium6.3—2026-08-04A vulnerability was detected in NousResearch hermes-agent up to 2026.6.5.

Python Software Foundation · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18503———2026-08-10Attacker-controlled CSV samples can trigger super-linear regular-expression work during dialect sniffing and consume significant CPU when applications pass unbounded input to csv.Sniffer.sniff().
CVE-2026-6879———2026-07-28`Element.findall()` and fully-consumed `Element.iterfind()` exhibit `O(n^2)` time complexity when using XPath index predicates (e.g.
CVE-2026-11972———2026-06-23When using the "tarfile" module with a file opened in "streaming mode" (mode="r|") the tarfile module did not properly handle EOF, making archive parsing take exponentially longer.
CVE-2026-11940———2026-06-23tarfile.extractall() with the 'data' or 'tar' filter could be bypassed by a crafted archive where a hardlink references a symlink stored at a deeper name than the hardlink itself.  The extraction fallback validated the symlink at it's a…
CVE-2026-12003———2026-06-16To allow builds of Python to be run from an in-tree layout (rather than an installed file layout), the VPATH variable is defined at build time and used to locate certain landmarks - specifically, Modules/setup.local.

Unattributed · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13051Critical9.1—2026-08-13Form::Processor::Field::HtmlArea versions from 0.06 through 1.162360 for Perl allow attacker selected method dispatch and resource exhaustion via an HTML::Tidy diagnostic that validate passes to add_error as a Locale::Maketext template.
CVE-2022-4993Critical9.1—2026-08-13HTML::FormHandler versions before 0.410000 for Perl allow attacker selected method dispatch and resource exhaustion because _apply_actions and add_error use error message text built from request data as a Locale::Maketext bracket notation…
CVE-2026-13048High8.2—2026-08-13Data::MuForm::Localizer versions through 0.05 for Perl execute Perl from a message catalog header, reached at an arbitrary path because load_lexicon interpolates the language attribute into the catalog filename.
CVE-2026-53472Medium6.3—2026-08-14A flaw was found in migration-planner.
CVE-2026-19487Medium5.3—2026-08-13Perl versions from 5.9.4 before 5.41.9 produce incorrect regular expression match results when a stale failure flag ends the Aho-Corasick prescan early in S_find_byclass.

Usmannasir · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67614Critical9.8—2026-08-13CyberPanel before 3.0.0 contains a hard-coded JWT secret vulnerability in the WebTerminal FastAPI SSH service that allows unauthenticated remote attackers to forge valid authentication tokens and obtain an interactive root shell via WebSoc…
CVE-2026-71966High8.8—2026-08-10CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated command injection vulnerability in the remote backup transfer feature that allows authenticated attackers to execute arbitrary OS commands by controlling a remote server'…
CVE-2026-71965High8.8—2026-08-10CyberPanel 2.4.3, fixed in commit eca0c3c, contains an authenticated remote code execution vulnerability in the remote backup feature that allows authenticated attackers to gain root-level SSH access by supplying a malicious remote server…
CVE-2026-71964Medium6.5—2026-08-10CyberPanel 2.4.3, fixed in commit eca0c3c, contains an arbitrary file read vulnerability in the file manager component that allows authenticated attackers to read sensitive system files by uploading a crafted ZIP archive containing symboli…
CVE-2026-67613Medium4.9—2026-08-13CyberPanel before 3.0.0 contains a path traversal vulnerability that allows authenticated administrators to read arbitrary files from the server filesystem by supplying unsanitized file paths to the cloudAPI ReadReport endpoint.

Vllm-project · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73559Medium6.5—2026-08-13vLLM is an inference and serving engine for large language models.
CVE-2026-73558Medium5.3—2026-08-13vLLM is an inference and serving engine for large language models.
CVE-2026-73556Medium5.3—2026-08-13vLLM is an inference and serving engine for large language models.
CVE-2026-73555Medium5.3—2026-08-13vLLM is an inference and serving engine for large language models.
CVE-2026-73557———2026-08-13vLLM is an inference and serving engine for large language models.

Vulnerability-lookup · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73432———2026-08-12Vulnerability-Lookup contains a server-side request forgery (SSRF) vulnerability in the remote-instance synchronization functionality.
CVE-2026-73431———2026-08-12Vulnerability-Lookup contains an authentication weakness in its account activation and password-recovery mechanism.
CVE-2026-73405———2026-08-12An authorization bypass vulnerability in Vulnerability-Lookup allowed inactive or unconfirmed accounts to subscribe to Server-Sent Events (SSE) streams through the /pubsub/subscribe/<topic> endpoint.
CVE-2026-73374———2026-08-12A stored cross-site scripting (XSS) vulnerability existed in Vulnerability-Lookup in the render_tag_badges Jinja filter used to display reference tags associated with vulnerability records.
CVE-2026-72761———2026-08-10The webhook URL validator in `website/notifications/webhooks.py` uses `ip.is_global` to reject non-public addresses after DNS resolution.
CVESeverityCVSSKEVPublishedSummary
CVE-2026-18589Critical9.8—2026-08-03A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628.
CVE-2026-18588Critical9.8—2026-08-03A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628.
CVE-2026-18607High8.8—2026-08-03A security vulnerability has been detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc.
CVE-2026-18587High7.5—2026-08-03A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628.
CVE-2026-18590Medium6.3—2026-08-03A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628.

Webkul · 5 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19834Medium4.7—2026-08-14A vulnerability was determined in Webkul Bagisto up to 2.4.4.
CVE-2026-19838Medium4.3—2026-08-14A security vulnerability has been detected in Webkul Bagisto up to 2.4.4.
CVE-2026-19836Medium4.3—2026-08-14A security flaw has been discovered in Webkul Bagisto up to 2.4.4.
CVE-2026-19835Low3.8—2026-08-14A vulnerability was identified in Webkul Bagisto up to 2.4.4.
CVE-2026-19837Low2.7—2026-08-14A weakness has been identified in Webkul Bagisto up to 2.4.4.

Activepieces · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73084Medium6.1—2026-08-11Activepieces is an open source AI workflow automation platform.
CVE-2026-73083———2026-08-11Activepieces is an open source AI workflow automation platform.
CVE-2026-73082———2026-08-11Activepieces is an open source AI workflow automation platform.
CVE-2026-73081———2026-08-11Activepieces is an open source AI workflow automation platform.

Arraytics · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28002High8.5—2026-08-13Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Arraytics Booktics allows Blind SQL Injection.
CVE-2026-28173High7.1—2026-08-13Customer Arbitrary Content Deletion in WP Event SOlution <= 4.1.19 versions.
CVE-2026-28174Medium6.5—2026-08-13Customer Sensitive Data Exposure in WP Event SOlution <= 4.1.18 versions.
CVE-2026-66451Medium6.5—2026-08-06Unauthenticated Broken Authentication in WP Event SOlution <= 4.1.9 versions.

Axiomthemes · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65581Critical9.8—2026-08-06Unauthenticated PHP Object Injection in AI ANN <= 1.29.0 versions.
CVE-2026-65579Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Agricola <= 1.21.0 versions.
CVE-2026-65572Critical9.8—2026-08-06Unauthenticated PHP Object Injection in A.Williams <= 1.3.1 versions.
CVE-2026-65571Critical9.8—2026-08-06Unauthenticated PHP Object Injection in 69 Clothing <= 1.2.11.1 versions.

Cisagov · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55676High8.8—2026-08-11Malcolm is a network traffic analysis tool suite.
CVE-2026-63177High7.1—2026-08-11Malcolm is a network traffic analysis tool suite.
CVE-2026-63133Medium6.5—2026-08-11Malcolm is a network traffic analysis tool suite.
CVE-2026-63134Medium5.4—2026-08-11Malcolm is a network traffic analysis tool suite.

Codesupplyco · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28178Medium6.5—2026-08-06Contributor Cross Site Scripting (XSS) in Powerkit <= 3.1.0 versions.
CVE-2026-15649Medium6.4—2026-08-01The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Shortcode Attributes in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output escapin…
CVE-2026-15645Medium6.4—2026-08-01The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'nav' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output es…
CVE-2026-15644Medium6.4—2026-08-01The Powerkit – Supercharge your WordPress Site plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'style' Shortcode Attribute in all versions up to, and including, 3.1.0 due to insufficient input sanitization and output…

Dai-shi · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48161———2026-08-10react18-use is a React 19 use hook shim.
CVE-2026-48160———2026-08-10react-tracked provides state usage tracking with Proxies.
CVE-2026-48159———2026-08-10use-reducer-async is a React useReducer with async actions.
CVE-2026-48158———2026-08-10use-context-selector is a React useContextSelector hook in userland Between 2026-05-18 15:57:18 and 2026-05-19 15:24:34, the default branch contained malicious commits 9d8481a513b7b0d1c0941b220c69b25de748641b through 6f2dae054ca014068bdbbb…

Dromara · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69102Critical9.8—2026-08-11MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JWT tokens and authenticate as any user by exploiting the pas…
CVE-2026-19758High7.3—2026-08-14A vulnerability was determined in dromara lamp-cloud up to 5.10.0.
CVE-2026-19757High7.3—2026-08-14A vulnerability was found in Dromara lamp-cloud up to 5.10.0.
CVE-2026-19756Medium6.3—2026-08-13A vulnerability has been found in Dromara lamp-cloud up to 5.10.0.

Ericcornelissen · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73414———2026-08-12Shescape is a simple shell escape library for JavaScript.
CVE-2026-73413———2026-08-12Shescape is a simple shell escape library for JavaScript.
CVE-2026-73412———2026-08-12Shescape is a simple shell escape library for JavaScript.
CVE-2026-73411———2026-08-12Shescape is a simple shell escape library for JavaScript.

Eugeny · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72903High8.1—2026-08-10Tabby (formerly Terminus) is a highly configurable terminal emulator.
CVE-2026-73430Medium5.3—2026-08-12Russh is a Rust SSH client & server library.
CVE-2026-73429Medium5.3—2026-08-12Russh is a Rust SSH client & server library.
CVE-2026-73489Medium4.3—2026-08-13Russh is a Rust SSH client & server library.

Go-chi · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72817Medium6.5—2026-08-14go-chi/chi versions 0.9.0 before 5.3.0 contains an IP spoofing vulnerability in the RealIP middleware, which resolves the request source IP (Request.RemoteAddr) using the first IP in the X-Forwarded-For header without validating trusted pr…
CVE-2026-72816Medium6.5—2026-08-14go-chi/chi through 5.2.1 contains an IP spoofing vulnerability in the RealIP middleware (middleware/realip.go).
CVE-2026-72815———2026-08-14go-chi chi versions >= 5.2.1 and before 5.3.0 contain an IP spoofing vulnerability in the RealIP middleware, which blindly trusts the first (leftmost) value of the X-Forwarded-For HTTP header.
CVE-2025-71405———2026-08-14chi versions before v5.2.2 contain an open redirect vulnerability in the RedirectSlashes middleware function that uses the Host header to construct redirect URLs.

Hewlett Packard Enterprise (Hpe) · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44880High8.8—2026-07-21A buffer overflow vulnerability was found in the command line interface of AOS-CX.
CVE-2026-63454High7.2—2026-07-21An authenticated path traversal vulnerability exists in AOS-CX.
CVE-2026-63453High7.2—2026-07-21Buffer overflow vulnerabilities exist in the command line interface of AOS-CX.
CVE-2026-63457Medium6.5—2026-08-05A potential denial of service vulnerability exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78.

Hkuds · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19246Medium6.3—2026-08-07A vulnerability has been found in HKUDS nanobot up to 0.2.1.
CVE-2026-19243Medium6.3—2026-08-07A security vulnerability has been detected in HKUDS nanobot up to 0.2.1.
CVE-2026-19244Medium4.7—2026-08-07A vulnerability was detected in HKUDS nanobot up to 0.2.1.
CVE-2026-19245Low3.3—2026-08-07A flaw has been found in HKUDS nanobot up to 0.2.1.

Icagenda.com · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71570———2026-08-14Joomla Extension - icagenda.com - ACL bypass allowing arbitrary user enumeration < 2.0.0-4.0.11 - A backend operator granted access scoped to `com_icagenda` only could enumerate Joomla user profiles.
CVE-2026-67366———2026-08-14Joomla Extension - icagenda.com - CSRF on frontend registration actions in iCagenda < 2.0.0-4.0.11 - Multiple state changing operations in the frontend are callable without a CSRF token check.
CVE-2026-71571———2026-08-14Joomla Extension - icagenda.com - Authenticated SQL injection via unescaped numeric filter in iCagenda < 2.0.0-4.0.11 - Backend operators with permissions to access iCagenda could inject SQL.
CVE-2026-67365———2026-08-14Joomla Extension - icagenda.com - Unauthenticated SQL injection in iCagenda < 4.0.0-4.0.11 - Unauthenticated SQL injection in mod_icagenda_calendar (iCagenda), reachable via com_ajax with no session, token or account.

Joomshaper.com · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67287———2026-08-12Joomla Extension - joomshaper.com - Unauthenticated comment creation in SP Page Builder < 6.8.0 - An unauthenticated attacker can create comments on instances with disabled guest commenting by overriding the setting in question with user s…
CVE-2026-67286———2026-08-12Joomla Extension - joomshaper.com - Unauthenticated arbitrary directory creation and file write in SP Page Builder < 6.8.0 - An unauthenticated attacker can create arbitrary directories and files with a predefined name.
CVE-2026-67285———2026-08-12Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.
CVE-2026-65876———2026-07-27Joomla Extension - joomshaper.com - Unauthenticated SQL injection in SP Page Builder < 6.8.0 - Improper validation of catid parameters in the loadMoreArticles endpoint leads to an SQL injection vector.

Lasso Analytics, Inc. · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28156High8.5—2026-08-13Subscriber SQL Injection in Do Lasso <= 358 versions.
CVE-2026-28157High7.5—2026-08-13Subscriber Path Traversal in Do Lasso <= 358 versions.
CVE-2026-28158High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Do Lasso <= 358 versions.
CVE-2026-28155Medium6.5—2026-08-13Unauthenticated Insecure Direct Object References (IDOR) in Do Lasso <= 358 versions.

Openstack · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71193Critical9.6—2026-08-12In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to the target pool only.
CVE-2026-71194Medium6.8—2026-08-12In OpenStack Designate before 22.0.2, the mDNS handler performs pool-blind lookups when resolving record queries and NOTIFY requests.
CVE-2026-74250Medium6.3—2026-08-14In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.
CVE-2026-74248Medium4.3—2026-08-14OpenStack Octavia through 18.0.0 mishandles quality of service (QoS) policy authorization.

Oscal-compass · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46439High7.8—2026-08-14compliance-trestle is a tooling platform for managing compliance as code.
CVE-2026-46380Medium6.7—2026-08-14compliance-trestle is a tooling platform for managing compliance as code.
CVE-2026-45774———2026-08-13compliance-trestle is a tooling platform for managing compliance as code.
CVE-2026-45725———2026-08-13compliance-trestle is a tooling platform for managing compliance as code.

Samsung Mobile · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21084———2026-08-10Improper access control in SmartThings prior to version 1.8.47.24 allows local attackers to access sensitive information.
CVE-2026-21081———2026-08-10Improper export of android application components in SamsungPassAutofill prior to version 5.2.10.x allows local attackers to access sensitive information.
CVE-2026-21075———2026-08-10Improper authorization in handler for custom URL scheme in My Galaxy prior to version 6.3 allows remote attackers to access sensitive information.
CVE-2026-21074———2026-08-10Incorrect default permissions in Bixby prior to version 4.0.86.0 allows local attackers to execute arbitrary commands with Bixby privilege.

Themefic · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28186High8.1—2026-08-13Subscriber Broken Access Control in Travelfic Toolkit <= 1.5.1 versions.
CVE-2026-28188High7.3—2026-08-13Unauthenticated Broken Access Control in Hydra Booking <= 1.2.2 versions.
CVE-2026-27999Medium6.5—2026-08-13Subscriber Broken Access Control in Tourfic <= 2.23.1 versions.
CVE-2026-12801Medium6.4—2026-08-07The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-separator' attributes in all versions up to, and including, 3.5.43 due to insufficient input…

Utt · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19341High8.8—2026-08-09A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306.
CVE-2026-18898High8.8—2026-08-05A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-170306.
CVE-2026-18897High8.8—2026-08-05A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535.
CVE-2026-18895High8.8—2026-08-05A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535.

Zohocorp · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12571Critical9.8—2026-08-11An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
CVE-2026-12263High8.8—2026-08-13Zohocorp ManageEngine Password Manager Pro versions before 13232 and PAM360 versions before 8551 are vulnerable to an authentication bypass vulnerability due to improper SAML validation.
CVE-2026-11840High8.8—2026-08-13Zohocorp ManageEngine Password Manager Pro versions before 13232 and ManageEngine PAM360 versions before 8552 are vulnerable to authenticated SQL injection.
CVE-2026-16053High8.5—2026-08-11Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerability in Exchange Online backup module.

Zoom Communications · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53415High8.3—2026-08-11Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another participant via network access.
CVE-2026-53413High8.3—2026-08-11Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve remote code execution of another participant via network access.
CVE-2026-53416High7.1—2026-08-11Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via local access.
CVE-2026-53414Medium6.5—2026-08-11Missing bounds check in the annotator function of Zoom Clients allows buffer over-read, which may allow a meeting participant to conduct a denial of service on another participant via network access.

Zyxel Networks · 4 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13206Critical9.8—2026-08-10Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection.
CVE-2026-12984High8.2—2026-08-10Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data.
CVE-2026-6374High7.3—2026-08-10Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable.
CVE-2026-6373Medium6.5—2026-08-10Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting.

@Angular · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69151Medium6.1—2026-08-03Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.
CVE-2026-69149Medium6.1—2026-08-03Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.
CVE-2026-68945Medium6.1—2026-08-03Angular is a development platform for building mobile and desktop web applications using TypeScript/JavaScript and other languages.

@Auth · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73418High7.5—2026-08-12NextAuth.js provides authentication for Next.js.
CVE-2026-73419Medium6.8—2026-08-12NextAuth.js provides authentication for Next.js.
CVE-2026-73420———2026-08-13NextAuth.js provides authentication for Next.js.

Absolute · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55400Medium6.5—2026-08-13CVE-2026-55400 is an integer underflow in Secure Access servers prior to version 14.57.
CVE-2026-55402Medium5.9—2026-08-13CVE-2026-55402 is an out of bounds read vulnerability in Secure Access servers prior to version 14.57.
CVE-2026-55401Medium5.3—2026-08-13CVE-2026-55401 is a null dereference vulnerability on the load-balancing sub-system of Secure Access servers prior to 14.57.

Actix · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73051———2026-08-14actix-http versions before 3.12.1 contain an HTTP request smuggling vulnerability in the HTTP/1.1 parser that accepts requests with both Content-Length and Transfer-Encoding: chunked headers.
CVE-2026-72814———2026-08-14The actix-files crate (actix_files) before version 0.6.10 contains an information exposure vulnerability.
CVE-2026-72813———2026-08-14actix-files before 0.6.10 contains a denial of service vulnerability triggered by an empty Range header in GET requests for static files.

Acymailing Newsletter Team · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28182Medium6.5—2026-08-13Subscriber Cross Site Scripting (XSS) in AcyMailing SMTP Newsletter <= 10.11.1 versions.
CVE-2026-28181Medium6.5—2026-08-13Subscriber Broken Access Control in AcyMailing SMTP Newsletter <= 10.11.1 versions.
CVE-2026-66689Medium6.3—2026-08-13Unauthenticated Broken Access Control in Anti Spam and list cleaner &#8211; AcyChecker <= 2.0.0 versions.

Atlassian · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-21575High8.0—2026-07-21This High severity RCE (Remote Code Execution) vulnerability was introduced in version 3.4.11 of Sourcetree for Mac and Sourcetree for Windows.
CVE-2026-21579High7.5—2026-07-21This High severity Information Disclosure vulnerability was introduced in versions 7.17.0, 7.19.0, 8.5.0, 8.9.0, 9.0.1, 9.1.0, 9.2.0, 10.0.2, 10.1.0, and 10.2.0 of Confluence Data Center. This Information Disclosure vulnerability, with…
CVE-2026-21577Medium6.5—2026-07-21This High severity DoS (Denial of Service) vulnerability was introduced in versions 9.0.1, 9.1.0, 9.2.0, 9.3.1, 9.4.0, 9.5.1, 10.0.2, 10.1.0 and 10.2.0 of Confluence Data Center. This DoS (Denial of Service) vulnerability, with a CVSS S…

Attendize · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72547High7.1—2026-08-11An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to bulk import attendees into events belonging to other accounts via the postImportAttendee endpoint.
CVE-2026-72546High7.1—2026-08-11An insecure direct object reference vulnerability in Attendize through commit 9289acb allows any authenticated event organiser to inject attendees and orders into events belonging to other accounts via the postInviteAttendee endpoint.
CVE-2026-72690High7.1—2026-08-10An improper authorization vulnerability in Attendize through commit 9289acb allows an authenticated remote attacker to inject persistent mandatory survey questions into another organizer's events via the POST /event/{event_id}/question/cre…

Bdthemes · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-25403Medium6.5—2026-08-06Unauthenticated Broken Access Control in Ultimate Store Kit Elementor Addons <= 3.0.5 versions.
CVE-2026-65502Medium5.3—2026-08-06Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons <= 8.7.13 versions.
CVE-2026-0673Medium5.3—2026-08-06The Element Pack Addons for Elementor plugin for WordPress is vulnerable to Email Header Injection in all versions up to, and including, 8.3.15 via the `element_pack_contact_form` AJAX action.

Bitpressadmin · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15991High8.8—2026-08-06The File Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the connector function in all versions from 6.0 - 6.9.
CVE-2026-15006High7.5—2026-08-01The Bit integrations – Form Integration, Webhook, Spreadsheets, CRM, LMS & Email Automation plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.9.0 via the processAttachment function.
CVE-2026-16810Medium6.5—2026-08-14The Bit Form – Contact Form, Payment Forms, Multi Step Forms, Calculator & Custom Form Builder plugin for WordPress is vulnerable to generic SQL Injection via the 'data[queryCondition]' parameter in all versions up to, and including, 3.2.0…

Blackberry · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18085Medium6.9—2026-07-28An Improper Input Validation in the BlackBerry UEM Management Console of BlackBerry UEM 12.23.0 QF8 and earlier allows Arbitrary File Download and Potential Denial of Service.
CVE-2026-18084Medium6.1—2026-07-28Improper Neutralization of Input During Web Page Generation vulnerability in BlackBerry UEM Management Console of BlackBerry UEM allows Cross-Site Scripting (XSS).
CVE-2026-18247———2026-08-11A Cross Site Scripting (XSS) vulnerability in the Web Portals of AtHoc IWS in versions earlier than 7.21 HF-734 could allow an attacker to potentially execute actions in the context of the victim's session.

Boldgrid · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66708High8.2—2026-08-06Unauthenticated Broken Access Control in Total Upkeep <= 1.17.2 versions.
CVE-2026-18109High7.2—2026-08-14The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Author Name in all versions up to, and including, 2.10.3 due to insufficient input sanitization and output escaping.
CVE-2026-66695Medium6.5—2026-08-06Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.

Cert/cc · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18749Critical9.8—2026-08-12The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared.
CVE-2026-18744Medium6.5—2026-08-12Any authenticated case participant can fetch any OTHER vendor's CaseStatement + per-vul CaseMemberStatus by supplying that member's id — test_func only checks _is_my_case, not ownership of kwargs['member'].
CVE-2026-18750Medium5.3—2026-08-12vinny/views.py: (ModifyEmailNotifications) IDOR: view fetches VinceCommEmail by raw pk from URL and toggles email_function/name without checking the record's contact belongs to the requesting group-admin.

Commvault · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13739Critical9.8—2026-08-11A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability related to the handling of arbitrary target URLs.
CVE-2026-13738Critical9.8—2026-08-11CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations.
CVE-2026-13737Critical9.8—2026-08-11CommServe contained an allowlist bypass vulnerability affecting command execution authorization.

Cosmicstack-labs · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18998Medium6.3—2026-08-06A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12.
CVE-2026-18997Medium6.3—2026-08-06A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.12.
CVE-2026-18996Medium6.3—2026-08-06A vulnerability has been found in cosmicstack-labs mercury-agent up to 1.1.12.

Cozmoslabs · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18510High7.2—2026-08-06The TranslatePress – Translate Multilingual sites with AI Translation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content (URL-encoded gettext markers) in all versions up to, and including, 3.2.6 due to in…
CVE-2026-17505Medium6.1—2026-08-05The Translate Multilingual sites – TranslatePress plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in versions up to, and including, 3.2.5.
CVE-2026-66701Medium5.3—2026-08-06Unauthenticated Broken Access Control in Profile Builder <= 3.16.5 versions.

Danpros · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18645Medium5.4—2026-08-03A security flaw has been discovered in danpros HTMLy up to 3.1.1.
CVE-2026-18644Medium5.4—2026-08-03A vulnerability was identified in danpros HTMLy up to 3.1.1.
CVE-2026-18646Medium5.3—2026-08-03A weakness has been identified in danpros HTMLy up to 3.1.1.

Docker · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18171———2026-08-12Docker Sandboxes (sbx) applies the read-only intent of a runtime host mount to the in-guest container bind only: the underlying virtio-fs host-edge grant is added to the sandbox's policy-share allowlist with no access mode.
CVE-2026-12539———2026-06-18Docker Sandboxes (sbx) blocks ICMP egress with an authorizer applied only at network-creation time, and does not re-apply it to networks rebuilt from disk when the Docker daemon restarts, so a restart-surviving sandbox forwards ICMP to arb…
CVE-2026-12039———2026-06-18Docker Sandboxes (sbx) enforces an HTTP/S-only egress allowlist but does not apply it to DNS resolution: the per-network embedded DNS server forwards any queried name to the host resolver whenever the network is internet-connected, without…

Dtstack · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19762High7.3—2026-08-14A vulnerability was found in DTStack Taier 1.4.0.
CVE-2026-19761Medium4.7—2026-08-14A vulnerability has been found in DTStack Taier 1.4.0.
CVE-2026-19763Low3.8—2026-08-14A vulnerability was determined in DTStack Taier 1.4.0.

Emlog · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73849Critical9.8—2026-08-14Emlog is an open source website building system.
CVE-2026-73847Medium6.8—2026-08-14Emlog is an open source website building system.
CVE-2026-73850———2026-08-14Emlog is an open source website building system.

Fastschema · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72582High7.5—2026-08-10A NULL pointer dereference vulnerability in fastschema through v0.15.1 allows an unauthenticated remote attacker to crash the server process with a single HTTP request.
CVE-2026-72584High7.4—2026-08-10A time-of-check/time-of-use (TOCTOU) race condition in fastschema through v0.15.1 allows an unauthenticated remote attacker to bypass the OTP attempt limit on the account recovery flow, enabling brute-force attacks on 6-digit OTP codes.
CVE-2026-72583Medium5.4—2026-08-10A stored cross-site scripting (XSS) vulnerability in fastschema through v0.15.1 allows a low-privileged authenticated user to upload an SVG file containing malicious JavaScript by bypassing the MIME type allow-list check.

Flavorjones · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73490Medium4.7—2026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
CVE-2026-73492———2026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.
CVE-2026-73491———2026-08-12Loofah is a general library for manipulating and transforming HTML/XML documents and fragments, built on top of Nokogiri.

Foundationagents · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19060Medium5.3—2026-08-06A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2.
CVE-2026-19058Medium5.3—2026-08-06A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2.
CVE-2026-19059Low3.3—2026-08-06A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2.

Francoisjacquet · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19785Medium6.3—2026-08-14A vulnerability has been found in francoisjacquet RosarioSIS up to 12.7.4.
CVE-2026-19786Medium4.3—2026-08-14A vulnerability was found in francoisjacquet RosarioSIS up to 12.8.
CVE-2026-19784Medium4.3—2026-08-14A flaw has been found in francoisjacquet RosarioSIS up to 12.8.

Frangoteam · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47717High7.5—2026-08-12FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.
CVE-2026-72586High7.5—2026-08-10A missing authentication vulnerability in frangoteam/FUXA through 1.3.3 allows an unauthenticated remote attacker to query all historical sensor data via the DAQ_QUERY Socket.IO event.
CVE-2026-47718———2026-08-12FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software.

Freecad · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73234High7.8—2026-08-11FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-73235Medium6.1—2026-08-11FreeCAD is a free and open-source multiplatform 3D parametric modeler.
CVE-2026-73233———2026-08-11FreeCAD is a free and open-source multiplatform 3D parametric modeler.

Hashicorp · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8715Critical9.6—2026-08-13Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files f…
CVE-2026-14886High8.2—2026-08-10Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to ano…
CVE-2026-12624Medium4.3—2026-08-10Vault’s ACL policy engine did not consistently enforce a wildcard (glob) deny rule against LIST requests made with a trailing slash on the denied path.

Ivanti · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18129High8.1—2026-08-11Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections.
CVE-2026-18127High7.7—2026-08-11External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage.
CVE-2026-18125High7.5—2026-08-11An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service.

Kestra-io · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73247High8.6—2026-08-11Kestra is an open-source, event-driven orchestration platform.
CVE-2026-73246High7.5—2026-08-11Kestra is an open-source, event-driven orchestration platform.
CVE-2026-73245Medium6.5—2026-08-11Kestra is an open-source, event-driven orchestration platform.

Kovidgoyal · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73249High7.5—2026-08-11calibre is an e-book manager.
CVE-2026-73248———2026-08-11calibre is an e-book manager.
CVE-2026-72913———2026-08-10Kitty is a cross-platform GPU based terminal.

Maalfer · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19744———2026-08-13Cross-site Scripting in the Markdown renderer in maalfer Pentestify before 2.3.2 allows authenticated users to execute arbitrary JavaScript in the application origin via a Markdown link whose URL contains a double quote, which closes the a…
CVE-2026-19716———2026-08-13Stored Cross-site Scripting (CWE-79) in the user management component in maalfer Pentestify before 1.1.1 allows an authenticated attacker to execute arbitrary JavaScript in the browser of another authenticated user via a crafted username…
CVE-2026-19434———2026-08-11Cross-site Scripting in the finding renderer in maalfer Pentestify before 2.3.1 allows authenticated users to execute arbitrary JavaScript in the application origin via HTML markup stored in a finding's severity field, which the frontend i…

Magepeopleteam · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27345High7.5—2026-08-13Unauthenticated Broken Access Control in Taxi Booking Manager for WooCommerce <= 2.0.3 versions.
CVE-2026-27380High7.2—2026-08-13Editor PHP Object Injection in Car Rental Manager <= 1.3.9 versions.
CVE-2026-66687Medium6.5—2026-08-13Customer Cross Site Scripting (XSS) in WpBookingly <= 1.3.2 versions.

Mastodon · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72915High7.5—2026-08-10Mastodon is a free, open-source social network server based on ActivityPub.
CVE-2026-72914High7.5—2026-08-10Mastodon is a free, open-source social network server based on ActivityPub.
CVE-2026-72916———2026-08-10Mastodon is a free, open-source social network server based on ActivityPub.

Metabase · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72899Critical10.0—2026-08-10Metabase allows an unauthenticated attacker to inject arbitrary SQL via a publicly shared card or dashboard that exposes a field-filter (dimension) parameter.
CVE-2026-72898Critical10.0KEV2026-08-10Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access to the connected Metabase instance.
CVE-2026-72900Medium6.5—2026-08-10Metabase allows an authenticated, low-privileged attacker to read the entire Metabase application database.

Mf-yang · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19008Medium6.3—2026-08-06A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1.
CVE-2026-19007Medium6.3—2026-08-06A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1.
CVE-2026-19006Medium6.3—2026-08-06A vulnerability was found in mf-yang openclaw-cn 2026.2.5.

Miguelgrinberg · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48804High7.5—2026-08-11python-socketio is a Python implementation of the Socket.IO realtime client and server.
CVE-2026-48809High7.5—2026-08-11python-engineio is a Python implementation of the Engine.IO realtime client and server.
CVE-2026-48802High7.5—2026-08-11python-engineio is a Python implementation of the Engine.IO realtime client and server.

Mingsoft · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19355High7.3—2026-08-09A vulnerability was determined in MingSoft MCMS up to 3.0.6.
CVE-2026-19357Medium5.3—2026-08-09A security flaw has been discovered in MingSoft MCMS up to 3.0.6.
CVE-2026-19356Medium5.3—2026-08-09A vulnerability was identified in MingSoft MCMS up to 3.0.6.

Mz Automation · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19259Medium5.3—2026-08-08A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1.
CVE-2026-19206Medium5.3—2026-08-07A security flaw has been discovered in MZ Automation libiec61850 up to 1.6.1.
CVE-2026-19108Medium5.3—2026-08-06A vulnerability was found in MZ Automation libiec61850 up to 1.6.1.

Ondata · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73846Medium6.5—2026-08-14CKAN MCP Server is a tool for querying CKAN open data portals.
CVE-2026-73845Medium5.3—2026-08-14CKAN MCP Server is a tool for querying CKAN open data portals.
CVE-2026-73844Low3.7—2026-08-14CKAN MCP Server is a tool for querying CKAN open data portals.

Op-tee · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71969Medium6.7—2026-08-10OP-TEE OS through 4.10.0, fixed in commit 7b8b494, contains a buffer underwrite vulnerability in the RSA NOPAD encrypt and decrypt operations within the mbedTLS software backend and SE050 hardware driver that allows a malicious Trusted App…
CVE-2026-71968Medium6.7—2026-08-10OP-TEE OS through 4.10.0, fixed in commit 8794043, contains a use-after-free vulnerability in the Trusted Application loader that allows attackers with the ability to load a signed Trusted Application to corrupt secure-world kernel memory…
CVE-2026-71967Medium5.5—2026-08-10OP-TEE OS through 4.10.0, fixed in commit 0aadfc2, contains a null pointer dereference vulnerability in the Widevine pseudo-TA open_session handler that allows Normal World clients to cause a denial of service when CFG_WIDEVINE_PTA is enab…

Openbsd · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73282Medium4.8—2026-08-11In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.
CVE-2026-73281Low3.5—2026-08-11In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys.
CVE-2026-73283Low2.5—2026-08-11In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

Openwrt · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72842Critical9.9—2026-08-13luci-app-lxc contains an ACL inconsistency vulnerability that allows low-privileged authenticated LuCI users to access backend container management routes without proper authorization checks.
CVE-2026-72841Critical9.9—2026-08-13luci-app-openvpn fails to properly validate the instance_name2 parameter during file upload, allowing authenticated users to perform path traversal and write arbitrary files outside the intended directory.
CVE-2026-72840High8.8—2026-08-13OpenWrt LuCI contains an overly permissive ACL definition in luci-mod-system-mounts that grants write access to /etc/crontabs/root to users intended only for mount configuration.

Pax Technology · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19910High7.5—2026-08-14PAX Technology Q80 Application Installer Signature Verification Bypass Remote Code Execution Vulnerability.
CVE-2026-19909High7.5—2026-08-14PAX Technology Q80 AIP File Parsing Link Following Remote Code Execution Vulnerability.
CVE-2026-19908High7.1—2026-08-14PAX Technology Q80 XCB Daemon Missing Authentication Vulnerability.

Phoenix Contact · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2025-41769Critical9.8—2026-08-12The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration.
CVE-2025-41770High7.5—2026-08-12An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to interrupt access via the client application.
CVE-2025-41771Medium4.3—2026-08-12An authenticated attacker with low privileges can access an endpoint in the controller’s web interface that is vulnerable to SQL injection.

Prowler-cloud · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73263Critical9.9—2026-08-12Prowler is a cloud security platform.
CVE-2026-73264High7.6—2026-08-12Prowler is a cloud security platform.
CVE-2026-73262Medium5.4—2026-08-12Prowler is a cloud security platform.

Proxysql · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48772Critical10.0—2026-06-19ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL.
CVE-2026-48773Critical9.8—2026-06-19ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL.
CVE-2026-48774High7.5—2026-06-19ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL.

Seaweedfs · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72920Critical9.8—2026-08-11SeaweedFS is a distributed storage system.
CVE-2026-73080Critical9.3—2026-08-11SeaweedFS is a distributed storage system.
CVE-2026-72921High8.1—2026-08-11SeaweedFS is a distributed storage system.

Semaphoreui · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73294Critical9.9—2026-08-12Semaphore UI is a web interface for managing DevOps tools.
CVE-2026-73293High8.8—2026-08-12Semaphore UI is a web interface for managing DevOps tools.
CVE-2026-73292High8.3—2026-08-12Semaphore UI is a web interface for managing DevOps tools.

Shibby · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19036High7.2—2026-08-06A security flaw has been discovered in Shibby Tomato 1.28.0000.
CVE-2026-19035High7.2—2026-08-06A vulnerability was identified in Shibby Tomato 1.28.0000.
CVE-2026-19034High7.2—2026-08-06A vulnerability was determined in Shibby Tomato 1.28.0000.

Sigstore · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49478High8.7—2026-08-13Fulcio is a certificate authority for issuing code signing certificates for an OpenID Connect (OIDC) identity.
CVE-2026-48702High7.5—2026-08-13Rekor is a software supply chain transparency log.
CVE-2026-48791Low2.0—2026-08-13sigstore-java is a sigstore java client for interacting with sigstore infrastructure.

Stellarwp · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9273Critical9.3—2026-08-05The Membership Plugin – Kadence Memberships plugin for WordPress (formerly Restrict Content) is vulnerable to password reset link poisoning leading to account takeover in all versions up to, and including, 4.0.0.
CVE-2026-18435Medium6.4—2026-08-01The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'toggleIcon' Block Attribute in all versions up to, and including, 3.7.8 due to insufficient input sanitiz…
CVE-2026-18062Medium6.4—2026-08-01The Kadence Blocks — Page Builder Toolkit for Gutenberg Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Identity Block Inner Image Content in all versions up to, and including, 3.7.8.1 due to insufficient input…

Systemd · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16742Medium6.7—2026-08-10systemd-homed contains a local privilege escalation bug via arbitrary system group addition to a local, logged in, homed-managed user
CVE-2026-15059Medium5.5—2026-08-10Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation.
CVE-2026-15060Medium4.7—2026-08-10When systemd-machined >= v259 (or v258 with a custom `polkit` policy that allows `register-machine` access) is running on a desktop system, an unprivileged user logged in a desktop graphical session can kill arbitrary processes, even privi…

Webmin · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56020High8.1—2026-06-18The Webmin HTTP server (miniserv.pl) allows unauthenticated attackers to impersonate any user with a configured SSL client certificate by sending a forged HTTP header.
CVE-2026-56022Medium5.3—2026-06-18Webmin accepts basic authentication without session cookies when an attacker provides the 'User-Agent: webmin' header, allowing bypass of additional MFA requirements.
CVE-2026-56021Medium5.3—2026-06-18Webmin allows unauthenticated attackers to read the contents of any file ending in .conf within module directories, due to a bypassable regex pattern.

Windmill Labs · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72541Medium6.5—2026-08-11A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to overwrite any resource type schema via the update_resource_type endpoint.
CVE-2026-72539Medium6.5—2026-08-11An information disclosure vulnerability in Windmill Labs Windmill through 1.783.0 allows any authenticated workspace member to read legacy ownerless draft scripts that contain plaintext resource credentials.
CVE-2026-72542Medium5.4—2026-08-11A missing authorization vulnerability in Windmill Labs Windmill through 1.783.0 allows authenticated operators to write job progress and read job metrics for any job in the workspace regardless of ownership.

Wireshark · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19696Medium6.6—2026-08-13Ixia IxVeriWave and Vector Informatik BLF file parser crashes in 4.6.0 to 4.6.7 allows denial of service on Windows
CVE-2026-19695Medium4.7—2026-08-13Gammu DCT3 trace file parser crash in 4.6.0 to 4.6.7 allows denial of service
CVE-2026-19694Medium4.7—2026-08-13TTX Logger file parser crash in 4.6.0 to 4.6.7 allows denial of service

Withastro · 3 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73425Low3.7—2026-08-12Astro is a web framework for content-driven websites.
CVE-2026-73423———2026-08-12Astro is a web framework for content-driven websites.
CVE-2026-73422———2026-08-12Astro is a web framework for content-driven websites.

648540858 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19828Medium6.3—2026-08-14A vulnerability was identified in 648540858 wvp-GB28181-pro 2.7.4-20260107.
CVE-2026-19829Medium4.3—2026-08-14A security flaw has been discovered in 648540858 wvp-GB28181-pro 2.7.4-20260107.

Alldatacenter · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19826High7.3—2026-08-14A vulnerability was detected in alldatacenter alldata up to 0.6.8.
CVE-2026-19827Medium5.3—2026-08-14A flaw has been found in alldatacenter alldata up to 0.6.8.

Alseambusher · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72590Critical9.8—2026-08-10An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to inject arbitrary cron job entries by sending a crafted GET request to /crontab with URL-encoded newlines in the env…
CVE-2026-72589Critical9.8—2026-08-10An OS command injection vulnerability in alseambusher/crontab-ui through 0.4.2 allows an unauthenticated remote attacker to execute arbitrary system commands by importing a crafted crontab database file.

Andreahaku · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19329Medium5.3—2026-08-09A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946c644b8534771390.
CVE-2026-19282Medium5.3—2026-08-08A weakness has been identified in andreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0.

Aonetheme · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28161High8.8—2026-08-13Subscriber Privilege Escalation in Service Finder Booking <= 6.2 versions.
CVE-2026-28159Medium6.5—2026-08-13Subscriber Broken Access Control in Service Finder Booking <= 6.2 versions.

Apache Software Foundation · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44630High7.5—2026-08-10Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service.
CVE-2026-68870Medium5.3—2026-08-10The Azure Key Vault secrets backend in Apache Airflow's Microsoft Azure provider resolved a team-scoped Connection or Variable id through the team-agnostic lookup when the team-scoped lookup missed.

Apioo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72551High8.8—2026-08-11A remote code execution vulnerability in Apioo Fusio 8.8.3 allows authenticated users with the Developer role to execute arbitrary OS commands by exploiting a PHP-Sandbox allow-list bypass.
CVE-2026-72598Medium6.5—2026-08-11A server-side request forgery vulnerability in Apioo Fusio 8.8.3 allows authenticated consumer-role users to make the server issue HTTP requests to internal network addresses by registering a webhook URL pointing to an internal host.

Asyncfuncai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72567Critical9.8—2026-08-10An improper path validation vulnerability in AsyncFuncAI/deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to write to or delete arbitrary files with root privileges.
CVE-2026-72602High7.5—2026-08-11A path traversal vulnerability in AsyncFuncAI deepwiki-open through commit 16f35a0 allows unauthenticated remote attackers to obtain directory listings for arbitrary filesystem paths via the local-repository structure endpoint.

Authentik Security · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72537High8.8—2026-08-11A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to take over any user account including superusers by provisioning a SCIM user that match…
CVE-2026-72534High8.8—2026-08-11A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-scoped SCIM provisioning token to gain superuser privileges by provisioning a SCIM group that matches an existing admini…

Autodesk · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14478High7.8—2026-08-12A maliciously created executable, when executed on the victim's machine, may allow a local low-privileged attacker to inject unauthenticated IPC messages into named pipes, modify pipe permissions or ownership, and potentially impact confid…
CVE-2026-14479Medium5.5—2026-08-12A maliciously crafted input, when processed by the Autodesk Installer IPC frame parser, may trigger improper validation of an input-specified position or offset, resulting in an out-of-range substring operation.

Badchoice · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72595High8.1—2026-08-11A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to update ticket records belonging to other teams via the TicketsController@update endpoint.
CVE-2026-72563High8.1—2026-08-11A broken access control vulnerability in BadChoice Handesk as of 2026-07-10 allows any authenticated agent to overwrite lead records belonging to other teams via the LeadsController@update endpoint.

Basecamp · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73428Medium4.6—2026-08-13Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.
CVE-2026-73427———2026-08-12Trix is a what-you-see-is-what-you-get rich text editor for everyday writing.

Brainstorm Force · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66698High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in SureDash <= 1.10.1 versions.
CVE-2026-66688Medium6.5—2026-08-06Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor <= 1.45.2 versions.

Browserslist · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73089High7.5—2026-08-11Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools.
CVE-2026-73088High7.5—2026-08-11Browserslist is a configuration tool for sharing target browsers and Node.js versions between front-end tools.

Buildwps · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3639Medium6.4—2026-08-13The PPWP – Password Protect Pages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's `ppwp` shortcode attributes in all versions up to, and including, 1.9.21 due to insufficient input sanitization and output…
CVE-2026-3835Medium5.3—2026-08-13The Prevent Direct Access – Protect WordPress Files plugin for WordPress is vulnerable to unauthorized access of protected files due to insufficient token validation in the `get_advance_file_by_url()` method in all versions up to, and incl…

Calix · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19746Medium4.3—2026-08-13A vulnerability has been found in Calix GigaSpire 26.1.0.
CVE-2026-19745Medium4.3—2026-08-13A flaw has been found in Calix GigaSpire 26.1.0.

Capstone-engine · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49282Medium5.1—2026-08-14Capstone is a disassembly framework.
CVE-2026-49263———2026-08-14Capstone is a disassembly framework.

Chaskiq · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72536High8.6—2026-08-11A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to manipulate any tenant Stripe subscription via the stripeCreateIntent GraphQL mutation.
CVE-2026-72535High8.6—2026-08-11A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint Stripe Billing Portal sessions for any tenant via the stripeCustomerPortal GraphQL mutation.

Chocobozzz · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73211Critical9.8—2026-08-11PeerTube is an ActivityPub-federated video streaming platform.
CVE-2026-73090Critical9.3—2026-08-11PeerTube is an ActivityPub-federated video streaming platform.

Codepress · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66430High8.5—2026-08-13Subscriber SQL Injection in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.
CVE-2026-66429High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Visitor Traffic Real Time Statistics Pro <= 11.10 versions.

Codexthemes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57804High7.5—2026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in CodexThemes TheGem Theme Elements (for Elementor) allows PHP Local File Inclusion.
CVE-2026-65480Medium6.5—2026-07-23Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodexThemes TheGem allows DOM-Based XSS.

Colissimo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66697High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.
CVE-2026-66692Medium4.3—2026-08-06Customer Insecure Direct Object References (IDOR) in Colissimo Officiel : Méthodes de livraison pour WooCommerce <= 2.10.0 versions.

Cube-root · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72569Critical9.1—2026-08-10A path traversal vulnerability in cube-root/directory-serve through 1.3.7 allows an unauthenticated remote attacker to delete arbitrary files outside the intended served directory when the application is run with the --delete option.
CVE-2026-72570Medium5.4—2026-08-10A stored cross-site scripting (XSS) vulnerability in cube-root/directory-serve through 1.3.7 allows an attacker to inject arbitrary JavaScript into the web interface by uploading a file with a crafted filename containing HTML attribute-bre…

Cubewp1211 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13339High7.5—2026-08-02The CubeWP Framework plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.1.30 via the 'cubewp_get_svg_content' function.
CVE-2026-6453Medium6.5—2026-08-01The CubeWP Framework plugin for WordPress is vulnerable to SQL Injection in all versions up to and including 1.1.30.

Cursor · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73218———2026-08-11Cursor is a code editor built for programming with AI.
CVE-2026-73217———2026-08-11Cursor is a code editor built for programming with AI.

Cvat-ai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73221———2026-08-11CVAT is an open source interactive video and image annotation tool for computer vision.
CVE-2026-73219———2026-08-11CVAT is an open source interactive video and image annotation tool for computer vision.

Dayuanjiang · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72777High8.6—2026-08-13Next AI Draw.io through 0.4.16 contains a server-side request forgery vulnerability in the POST /api/parse-url endpoint due to hostname validation that only checks string patterns without DNS resolution.
CVE-2026-73037Medium6.1—2026-08-13Next AI Draw.io 0.2.1 through 0.4.16 contains a reflected cross-site scripting vulnerability in the mcp query parameter that is interpolated without escaping into HTML and JavaScript.

Denishua · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61966Critical9.3—2026-08-13Subscriber SQL Injection in WPJAM Basic <= 7.0.1 versions.
CVE-2026-66432High7.5—2026-08-13Subscriber Sensitive Data Exposure in WPJAM Basic <= 7.0.2.1 versions.

Diaowen · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18723Medium6.3—2026-08-04A vulnerability was determined in diaowen DWSurvey up to 6.14.0.
CVE-2026-18722Medium6.3—2026-08-04A vulnerability was found in diaowen DWSurvey up to 6.14.0.

Duhow · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72580Critical9.8—2026-08-10An OS command injection vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to execute arbitrary system commands on Xiaomi smart speakers running the patch.
CVE-2026-72581High8.6—2026-08-10A server-side request forgery (SSRF) vulnerability in duhow/xiaoai-patch through commit fb07049 allows a remote attacker to make the Xiaomi smart speaker perform HTTP requests to arbitrary internal or external URLs.

Dulldusk · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72593Critical9.8—2026-08-10A missing authentication vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to access the full file manager functionality including reading, writing, deleting, and uploading files anywhere on the server…
CVE-2026-72592Critical9.8—2026-08-10An unrestricted file upload vulnerability in dulldusk/phpfm through 1.8.0 allows an unauthenticated remote attacker to execute arbitrary PHP code on the server.

Dylan Kuhn · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66450High8.1—2026-08-13Unauthenticated Local File Inclusion in Geo Mashup <= 1.13.18 versions.
CVE-2026-66449High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Geo Mashup <= 1.13.18 versions.

E4jvikwp · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15918High7.5—2026-08-05VikAppointments Service Booking Calendar wordpress plugin is vulnerable to unauthenticated SQL injection due to one of the parameters that controls how the public reviews list is sorted is taken from the incoming request and used to build…
CVE-2026-16143High7.2—2026-08-05The VikRentItems – Flexible Rental Management System plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the customer email field of the booking checkout form in versions up to, and including, 1.2.1.

Eclipse Foundation · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19884———2026-08-14In Eclipse Theia versions up to and including 1.69.0, opening a folder starts source control integration without requiring the user to trust the folder first.
CVE-2026-15803———2026-08-12In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and exter…

Encode · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73228Medium5.3—2026-08-11Django REST framework is a toolkit for building Web APIs.
CVE-2026-73229Medium4.3—2026-08-11Django REST framework is a powerful and flexible toolkit for building Web APIs.

Enzovezzaro · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19752Medium6.3—2026-08-13A vulnerability was found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82.
CVE-2026-19751Medium6.3—2026-08-13A flaw has been found in EnzoVezzaro mcp-dominican-layer up to 39dd373786712650097ad31db27d5c477c8f9c82.

Etcd-io · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73500———2026-08-12etcd is a distributed key-value store for the data of a distributed system.
CVE-2026-73499———2026-08-12etcd is a distributed key-value store for the data of a distributed system.

Fabrikar.com · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67282———2026-08-12Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.
CVE-2026-66915———2026-08-10Joomla Extension - fabrikar.com - Remote code execution in Fabrik < 4.7.2 - An unauthenticated attacker could execute arbitrary code by using the ajax_calc feature of the calc plugin.

Facebook · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66707High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce <= 3.7.5 versions.
CVE-2026-66705High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress <= 5.2.1 versions.

Fastify · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19484High7.5—2026-08-13@fastify/busboy is a multipart form-data parser.
CVE-2026-19481High7.5—2026-08-13@fastify/busboy is a multipart form-data parser.

Fosowl · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72776Critical9.8—2026-08-13AgenticSeek (commit fc242c7) contains an unauthenticated remote code execution vulnerability that allows any network-adjacent attacker to execute arbitrary commands by submitting crafted queries to the unprotected POST /query API endpoint…
CVE-2026-73039Medium5.4—2026-08-13streama contains an insecure direct object reference vulnerability in ViewingStatusController that allows authenticated users to read and delete other users' viewing status records.

Freerdp · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73242———2026-08-11FreeRDP is a free implementation of the Remote Desktop Protocol.
CVE-2026-73241———2026-08-11FreeRDP is a free implementation of the Remote Desktop Protocol.

Friendica · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72550Critical9.8—2026-08-11An SQL injection vulnerability in Friendica through the 2026.08-dev branch allows unauthenticated remote attackers to execute arbitrary SQL statements via the photo-view order parameter.
CVE-2026-72597Medium6.5—2026-08-11A server-side request forgery vulnerability in Friendica through the 2026.08-dev branch allows authenticated users with a free self-registered account to probe internal network services via the link-preview endpoint.

Gallagher · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27844Low2.7—2026-07-07Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a Controller restart by sending specific requests, resulting in a temporary denial…
CVE-2026-27790Low2.7—2026-07-07Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected: * 9…

Gm_alex · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18352High7.5—2026-08-02The User Access Manager plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.3.15 via the 'uamgetfile' parameter parameter.
CVE-2026-15281Medium6.5—2026-08-05The User Access Manager plugin for WordPress is vulnerable to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-compat AJAX action in versions up to, and including, 2.3.12.

Golang.org/x/mod · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-56865High8.4—2026-08-13A malicious GOPROXY was previously capable of forging up to two sumdb tiles that allow for a requested module to bypass the GOSUMDB check and persist attacker-controlled module content to a local Go module cache.
CVE-2026-56864High7.5—2026-08-13A malicious GOSUMDB was capable of serving arbitrary module content not contained within the transparency log.

Gstreamer · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73433Medium6.6—2026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux).
CVE-2026-73434Medium6.1—2026-08-12A flaw was found in GStreamer gst-plugins-good (avidemux).

Heshengtao · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18973High7.3—2026-08-06A vulnerability has been found in heshengtao super-agent-party up to 0.4.1.
CVE-2026-18974Medium5.3—2026-08-06A vulnerability was found in heshengtao super-agent-party up to 0.4.1.

Http4s · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73493High7.5—2026-08-12Http4s (http4s-blaze-server) is a minimal, idiomatic Scala interface for HTTP services.
CVE-2026-73495High7.4—2026-08-12blaze is a Scala library for building asynchronous pipelines, with a focus on network IO.

Huggingface · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45804High7.5—2026-07-15Diffusers is the a library for pretrained diffusion models.
CVE-2026-69112High7.1—2026-08-10Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes.

Icegram · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16087Medium6.5—2026-08-01The Icegram Engage – Popups, Optins, CTAs & Lead Generation plugin for WordPress is vulnerable to second-order SQL Injection via 'messages[][id]' Parameter in all versions up to, and including, 3.1.42 due to insufficient escaping on the us…
CVE-2026-15951Medium4.9—2026-08-01The Icegram Mailer plugin for WordPress is vulnerable to SQL Injection via the 'fields' parameter in versions up to, and including, 1.0.12.

Imranrisal-dev · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18958High7.3—2026-08-05A vulnerability was detected in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c.
CVE-2026-18927Medium6.3—2026-08-05A vulnerability was determined in imranrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c.

Instawp · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13457High7.5—2026-08-11The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 0.1.3.6 via the (top-level script) function.
CVE-2026-73401Medium5.3—2026-08-13Unauthenticated Broken Access Control in InstaWP Connect <= 0.1.3.7 versions.

Jandedobbeleer · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73505High7.8—2026-08-13Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer.
CVE-2026-73506Medium6.1—2026-08-13Oh My Posh is the most customisable and low-latency cross platform/shell prompt renderer.

Jegtheme · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65549High7.2—2026-08-06Author PHP Object Injection in Jeg Kit for Elementor <= 3.2.10 versions.
CVE-2026-2916Medium4.3—2026-08-01The Jeg Kit for Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.1.1 via the `enqueue_scripts()` method in `class/dashboard/class-dashboard.php`.

Jetbrains · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62422Critical10.0—2026-07-14In JetBrains YouTrack before 2026.1.13757, 2025.3.148033, 2025.2.148048, 2025.1.148120, 2024.3.148430, 2024.2.148429 authentication bypass via direct database access leading to administrative access was possible
CVE-2026-65906High8.8—2026-07-23In JetBrains TeamCity before 2026.1.2, 2025.11.6 сode execution via Kotlin DSL sandbox escape was possible

Jonasbn · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-58102Critical9.1—2026-07-13Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow a heap out-of-bounds read via a long certificate extension OID in hv_exts.
CVE-2026-58101High7.5—2026-07-13Crypt::OpenSSL::X509 versions before 2.1.3 for Perl allow denial of service via NULL pointer dereference.

Kalcaddle · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18720Medium5.3—2026-08-04A flaw has been found in kalcaddle kodbox 1.67 Build 02.
CVE-2026-18721Medium4.3—2026-08-04A vulnerability has been found in kalcaddle kodbox 1.67 Build 02.

Kekingcn · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73243Medium5.8—2026-08-11kkFileView is a universal file online preview project based on Spring Boot.
CVE-2026-73244Medium5.3—2026-08-11kkFileView is a universal file online preview project based on Spring Boot.

Limesurvey · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18403———2026-08-14LimeSurvey Community Edition 7.0.5 contains an authenticated SQL injection vulnerability in the Central Participant Database (CPDB) workflow that copies survey participant tokens to the central participant list.
CVE-2026-63361———2026-08-14LimeSurvey Community Edition 7.0.5 contains an authenticated reflected cross-site scripting vulnerability in the HTML editor popup endpoint.

Lmammino · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19363Medium5.3—2026-08-09A vulnerability was found in lmammino oidc-authorizer up to 0.4.0.
CVE-2026-19362Medium5.3—2026-08-09A vulnerability has been found in lmammino oidc-authorizer 0.4.0.

Mailerpress · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18437Medium5.3—2026-07-31The MailerPress – Newsletter, email marketing & AI automation plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `mailerpress/v1/contact` endpoint in all versions up to, and including, 1.5.0…
CVE-2026-18436Medium5.3—2026-07-31The MailPress plugin for WordPress is vulnerable to unauthorized access in versions up to, and including, 1.5.0 via the campaign revision-restore REST endpoint (POST /wp-json/mailpress/v1/campaign/<id>/restore-revision/<revision_id>).

Mattermost · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14298Medium6.5—2026-08-13Mattermost versions 11.9.x <= 11.9.0, 11.8.x <= 11.8.4, 11.7.x <= 11.7.7, 10.11.x <= 10.11.22 fail to limit decompressed content size and enforce the configured maximum file size in the Boards archive import handler, which allows an authen…
CVE-2026-2299Medium4.2—2026-06-25The Mattermost Google Drive plugin before version 1.1.0 fails to validate channel membership in the file creation endpoint, allowing authenticated users with a connected Google account to share Google Drive files to unauthorized private ch…

Meeting-room-booking-system · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46688———2026-08-13The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms.
CVE-2026-46382———2026-08-13The Meeting Room Booking System (MRBS) is a PHP-based application for booking meeting rooms.

Mikado-themes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66657High8.1—2026-08-13Unauthenticated Local File Inclusion in Biagiotti Core <= 2.1.1 versions.
CVE-2026-66656High8.1—2026-08-13Unauthenticated Local File Inclusion in Foton Core <= 1.1.1 versions.

Missionsquad · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19041Medium6.3—2026-08-06A vulnerability has been found in MissionSquad mcp-api up to 1.11.8.
CVE-2026-19040Medium6.3—2026-08-06A flaw has been found in MissionSquad mcp-api up to 1.11.9.

Mithaldu · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16770Critical9.8—2026-08-13PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document.
CVE-2026-17431Medium6.1—2026-08-13PDF::WebKit versions through 1.2 for Perl allow OS command injection via a 2-arg open() of the output path in to_pdf and of stylesheet paths in _style_tag_for.

Mozilla · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16389Critical9.8—2026-07-21Incorrect boundary conditions, integer overflow in the Libraries component in NSS.
CVE-2026-14899High7.5—2026-07-22The code to parse MIME headers for display when forwarding a message (if the setting to view all headers was enabled) had an off-by-one error, allowing a single byte to be read from the memory after the buffer for the headers, and potentia…

Mz-automation · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18583Medium5.3—2026-08-03A weakness has been identified in mz-automation libiec61850 up to 1.6.1.
CVE-2026-18582Medium5.3—2026-08-03A security flaw has been discovered in mz-automation libiec61850 up to 1.6.1.

Nanocoai · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18991High7.3—2026-08-06A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64.
CVE-2026-19005Medium6.3—2026-08-06A vulnerability was detected in nanocoai NanoClaw up to 2.0.64.

Nasa · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72577Critical9.8—2026-08-10Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft.
CVE-2026-72579High7.5—2026-08-10An OS command injection vulnerability in NASA HyperCP (main branch) allows a network-adjacent attacker who can intercept or spoof responses from oceandata.sci.gsfc.nasa.gov to execute arbitrary system commands on the researcher's workstati…

Nceas · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48528Critical9.8—2026-08-14Metacat is data repository software that helps researchers preserve, share, and discover data.
CVE-2026-47754Critical9.3—2026-08-10Metacat is data repository software that helps researchers preserve, share, and discover data.

Netty · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73507High7.5—2026-08-13Netty is an asynchronous, event-driven network application framework.
CVE-2026-73508Medium5.3—2026-08-13Netty is an asynchronous, event-driven network application framework.

Nighttrek · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19334Medium5.3—2026-08-09A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9.
CVE-2026-19333Medium5.3—2026-08-09A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66.

Nodejs · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48933High7.5—2026-06-26A flaw in Node.js WebCrypto implementation can crash the process if the input of `subtle.encrypt()` is a multiple of 2GiB. This vulnerability affects all supported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.
CVE-2026-48618Medium6.5—2026-06-26A flaw in Node.js TLS hostname handling can cause Node.js unicode dot separator handling can lead to tls wildcard-depth authentication bypass due to resolver and verifier hostname normalization mismat. This can lead to confidentiality i…

Nsquared · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65508Critical9.3—2026-08-06Unauthenticated SQL Injection in Simply Schedule Appointments <= 1.6.12.10 versions.
CVE-2026-65513High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <= 1.6.12.10 versions.

O6 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18785Medium5.3—2026-08-04A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b.
CVE-2026-18784Medium5.3—2026-08-04A vulnerability was found in o6 open62541 up to 1.5.5.

Oberon Microsystems Ag · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16459———2026-08-13Padding oracle attack vulnerability in Oberon microsystem AG’s Oberon PSA Crypto library in all versions since 1.0.0 and prior to 2.1.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.
CVE-2026-16458———2026-08-13Padding oracle attack vulnerability in Oberon microsystem AG’s ocrypto library in all versions since 3.0.0 and prior to 4.0.1 allows an attacker to recover plaintexts via timing measurements of RSA PKCS#1 v1.5 decrypt operations.

Openvpn · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63650———2026-08-14OpenVPN 2.7_alpha1 through 2.7.5 using mbedTLS allows remote authenticated users to be misidentified by ignoring the configured X.509 username identity lookup field
CVE-2026-63649———2026-08-14The Windows interactive service in OpenVPN 2.4.0 through 2.6.21 and 2.7_alpha1 through 2.7.5 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via crafted optio…

Passionate Programmer Peter · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66663High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.
CVE-2026-73344Medium5.9—2026-08-13Author Cross Site Scripting (XSS) in WP Data Access <= 5.5.79 versions.

Peppermint Lab · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72561High8.8—2026-08-11A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 allows any authenticated non-administrative user to reconfigure the platform global OIDC/SSO settings via an unprotected configuration endpoint.
CVE-2026-72555High8.1—2026-08-11A broken access control vulnerability in Peppermint Lab Peppermint through commit ba6e217 exists because the Config.roles_active flag defaults to false, causing all permission checks on ticket, client, and user handlers to behave as no-ops…

Phplist · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73482High8.1—2026-08-13phpList before 3.7.0-RC5 contains a cross-site request forgery (CSRF) vulnerability in lists/admin/admins.php.
CVE-2026-73481Medium5.4—2026-08-13phpList before 3.7.0-RC5 fail to enforce CSRF token validation on the bounce rule deletion endpoint (bouncerules.php / bouncerule.php).

Pimcore · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44741High8.8—2026-08-12Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore.
CVE-2026-72562High8.8—2026-08-11An SQL injection vulnerability in Pimcore admin-ui-classic-bundle through version 2.3 allows authenticated backend users to execute arbitrary SQL via the DataObject grid id column filter.

Postgis · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73514High8.8—2026-08-13The address_standardizer extension for PostGIS through 3.7.0, fixed in commit 423570b, contains an out-of-bounds write vulnerability that allows a database user with the ability to supply caller-controlled relation names to standardize_add…
CVE-2026-73515High8.1—2026-08-13PostGIS before 3.7.0beta2 contains an out-of-bounds read vulnerability that allows attackers to cause memory disclosure or a server crash by supplying a malformed FlatGeobuf buffer.

Rajat Varlani · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65542High8.8—2026-08-06Unauthenticated Broken Authentication in Super Socializer <= 7.14.5 versions.
CVE-2026-65544High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Super Socializer <= 7.14.5 versions.

Razinsoft · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63106Critical9.8—2026-08-10ReadyEcommerce before 4.5.2 contains an unauthenticated SQL injection vulnerability in the product listing API where the rating parameter from the products endpoint is concatenated directly into a MySQL HAVING clause without parameterizati…
CVE-2026-63105Medium5.4—2026-08-10ReadyEcommerce before 4.5.2 contains a stored cross-site scripting (XSS) vulnerability that allows authenticated customers to inject malicious HTML payloads through the chat and support ticket messaging systems by exploiting unsanitized re…

Realmag777 · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66436Critical9.3—2026-08-13Unauthenticated SQL Injection in Active Products Tables for WooCommerce <= 1.1.1 versions.
CVE-2026-18881High7.5—2026-08-05The TableOn – WordPress Posts Table Filterable plugin for WordPress is vulnerable to blind SQL Injection via the `filter_data[comment_count]` parameter of the public `tableon_get_table_data` AJAX action in all versions up to, and including…

Realtyna · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14483Critical9.8—2026-07-31The Realtyna Organic IDX plugin + WPL Real Estate plugin for WordPress is vulnerable to Arbitrary File Upload in all versions up to, and including, 5.2.0 via the upload function.
CVE-2026-16236High8.8—2026-07-31The Realtyna Organic IDX plugin for WordPress is vulnerable to Arbitrary File Upload in versions up to, and including, 5.3.0.

Rocketchat · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72918Medium5.4—2026-08-10Rocket.Chat is an open-source, secure, fully customizable communications platform.
CVE-2026-72919Medium4.3—2026-08-10Rocket.Chat is an open-source, secure, fully customizable communications platform.

Rongzhitong · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18970High7.3—2026-08-06A flaw has been found in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617.
CVE-2026-18969High7.3—2026-08-06A vulnerability was detected in Rongzhitong Visual Integrated Command and Dispatch Platform up to 20260617.

Rrwo · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16766Critical9.8—2026-07-25Catalyst::View::Wkhtmltopdf versions before 0.6.1 for Perl allow shell command injection (RCE) via PDF render options.
CVE-2026-19566High7.5—2026-08-12Net::CIDR::Set versions before 0.23 for Perl allow memory exhaustion and malformed set ranges via unbounded IPv6 prefix lengths.

Rubengc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16091Medium6.4—2026-08-01The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'gamipress_rank' Shortcode in all versions up to, and including, 7.9…
CVE-2026-16090Medium6.4—2026-08-01The GamiPress – Gamification plugin to reward points, achievements, badges & ranks in WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'heading_size' Shortcode Attribute in 'gamipress_achievement' in all vers…

Rxi · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55738High8.8—2026-06-17A stack-based buffer overflow exists in the raw_to_header function in src/microtar.c in rxi microtar 0.1.0.
CVE-2026-54417High7.5—2026-06-17An integer overflow in the mtar_next function in src/microtar.c in rxi microtar 0.1.0 allows a remote attacker to cause a denial of service (uncontrolled CPU consumption / infinite loop) via a crafted tar archive.

S9y · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73629High8.5—2026-08-13Serendipity before 2.6.0 contains a server-side request forgery vulnerability in the serendipity_url_allowed() filter that fails to block hex-encoded IPv4 addresses, IPv6 literals, and link-local ranges.
CVE-2026-73628Medium6.1—2026-08-13Serendipity versions >= 2.3.5 and <= 2.6.0 contain a reflected cross-site scripting vulnerability in the search clean-URL route (/search/<term>).

Saadiqbal · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6627High8.2—2026-08-05The WPFormify – Stripe Payments with Form and Checkout plugin for WordPress is vulnerable to unauthorized modification and deletion of Stripe payment credentials in all versions up to, and including, 1.1.1.
CVE-2026-11995Medium5.3—2026-08-01The Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.9.0.

Samsung Open Source · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19588Medium6.5—2026-08-12Integer Overflow to Buffer Overflow vulnerability in Samsung Open Source rlottie allows Overflow Buffers.
CVE-2026-19587Medium6.5—2026-08-12Uncontrolled Resource Consumption vulnerability in Samsung Open Source rlottie allows Excessive Allocation.

Saurus · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73670High7.2—2026-08-13A CMS contains a SQL injection vulnerability in admin/db_data.php at line 509 that allows authenticated administrators to inject arbitrary SQL into a SHOW COLUMNS FROM statement by supplying unsanitized input through the table_name GET or…
CVE-2026-73671Medium6.1—2026-08-13Saurus CMS Community Edition contains an unauthenticated open redirect vulnerability in the logout handling code in classes/port.inc.php, where the url parameter supplied via GET or POST is passed directly to the Location header without do…

Scada-lts · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19656Critical9.9—2026-08-12ScadaLTS 2.7.8.1 exposes a server-side method that lacks authorization checks, allowing any authenticated user (including one holding only low-privilege, read-only permissions) to execute arbitrary operating system commands on the host.
CVE-2026-19657Medium6.1—2026-08-12ScadaLTS 2.7.8.1 reflects user-supplied input into an HTML response without sanitization.

Scott Paterson · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65517High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Button <= 2.0.4 versions.
CVE-2026-66660Medium6.5—2026-08-13Unauthenticated Broken Access Control in Contact Form 7 – PayPal & Stripe Add-on <= 2.5.1 versions.

Select-themes · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57803High7.5—2026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur Core allows PHP Local File Inclusion.
CVE-2026-57802High7.5—2026-07-13Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Select-Themes Struktur allows PHP Local File Inclusion.

Seriousm4x · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49819Critical9.8—2026-08-13UpSnap is a wake on lan web app.
CVE-2026-49481Critical9.6—2026-08-12UpSnap is a wake on lan web app.

Shabti Kaplan · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66662Critical9.8—2026-08-06Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps <= 3.29.10 versions.
CVE-2026-66470High7.1—2026-08-06Subscriber Broken Access Control in Frontend Admin by DynamiApps <= 3.29.10 versions.

Stablebit · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19191High7.8—2026-08-07A security vulnerability has been detected in StableBit DrivePool 2.3.13.1687.
CVE-2026-19190High7.8—2026-08-07A weakness has been identified in StableBit Scanner 2.6.13.4088.

Stiofansisland · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17605Medium6.6—2026-08-01The Payment forms, Buy now buttons, and Invoicing System | GetPaid plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.8.56 via the getpaid_payment_form_element function.
CVE-2026-18501Medium6.4—2026-08-06The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Variable Substitution in all versions up to, and inclu…

Strategy11 Team · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28004High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Business Directory <= 6.4.25 versions.
CVE-2026-61959Medium6.5—2026-08-06Subscriber Cross Site Scripting (XSS) in Business Directory <= 6.4.24 versions.

Stylemix · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66693Medium6.5—2026-08-13Subscriber Broken Access Control in Motors <= 1.4.113 versions.
CVE-2026-7753Medium6.5—2026-08-05The Cost Calculator Builder plugin for WordPress is vulnerable to unauthorized access of sensitive data due to a missing capability check on the `cost-calculator-custom-export-run` AJAX action (handler `CCBExportImport::export_calculators(…

Tabaoca.org · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67284———2026-08-12Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.3 - Authenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on files owned…
CVE-2026-67283———2026-08-12Joomla Extension - tabaoca.org - Improper ACL implementation allows file operations in Cotton Cloud < 2.0.2 - Unauthenticated users could perform various file-related operations (read, delete, overwrite, re-assign permissions) on every fil…

Teltonika Networks · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18368———2026-08-13In Teltonika Networks RUTOS devices, a vulnerability exists in modbusgwd due to improper handling of Modbus TCP request data.
CVE-2026-16455———2026-08-13In Teltonika Networks RUTOS devices running versions 7.07.1 through 7.24.1 and TSWOS devices running versions 1.03 through 1.10, a vulnerability exists whereby a lower privileged user can escalate privileges to administrative level due to…

Tesseract-ocr · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73067———2026-08-11Tesseract is an open source OCR engine.
CVE-2026-73066———2026-08-11Tesseract is an open source OCR engine.

The Opennms Group · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19135Medium5.4—2026-08-13A JEXL expression sandbox bypass exists in multiple versions of OpenNMS Meridian and Horizon.
CVE-2026-19182Medium4.3—2026-08-13An incorrect authorization check in the v2 Alarm REST API in OpenNMS Meridian and Horizon allows a low-privileged authenticated user (ROLE_REST) to acknowledge, escalate, or clear alarms recorded as an arbitrary username, and, when also as…

Themetechmount · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14365Critical9.8—2026-08-07The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.3.
CVE-2026-14364Critical9.8—2026-08-07The TrueBooker – Appointment Booking and Scheduler System plugin for WordPress is vulnerable to account takeover via improper password reset validation in all versions up to, and including, 1.2.3.

Themeum · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16974Medium6.4—2026-08-11The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the post_meta Shortcode in all versions up to, and including, 6.2.0 due to insufficient input sanitizatio…
CVE-2026-15601Medium4.9—2026-08-01The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to Path Traversal (Zip Slip) in all versions up to, and including, 6.0.13 via the extract_zip_file function.

Trendnet · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19830Medium5.3—2026-08-14A vulnerability was found in TRENDnet TEW-816DRM GURNC4.OT182B-C-TN-R1B028-US.EN.
CVE-2026-19841Low3.1—2026-08-14A flaw has been found in TRENDNET TEW-813DRU 1.01b01.

Truelockmc · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48056Critical10.0—2026-08-11Streambert is a cross-platform Electron Desktop App to stream and download video content.
CVE-2026-48046———2026-08-11Streambert is a cross-platform Electron Desktop App to stream and download video content.

Trusted Computing Group · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6726High7.9—2026-08-11An information leakage vulnerability was reported in the TCG TPM 2.0 reference code that could allow a local attacker with elevated privileges to obtain a credential from a TPM-aware CA for a falsified TPM key (such as an Attestation Key…
CVE-2026-6727Medium5.9—2026-08-11A timing side-channel vulnerability exists in the RSA OAEP decryption implementation.

Unlimited Elements · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28146Medium6.5—2026-08-06Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templates) <= 2.0.14 versions.
CVE-2026-28147Medium5.4—2026-08-03Missing Authorization vulnerability in Unlimited Elements Unlimited Elements For Elementor (Free Widgets, Addons, Templates) allows Exploiting Incorrectly Configured Access Control Security Levels.

Vitec · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61498Critical9.8—2026-07-13Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/gen_graphs.php endpoint that allows remote unauthenticated attackers to execute arbitrary commands by supplying shell metacharacters in…
CVE-2026-60121Critical9.8—2026-07-13Vitec Flamingo 4.12.2 contains an unauthenticated OS command injection vulnerability in the admin/ajax/ping.php endpoint that allows remote attackers to execute arbitrary commands by exploiting a double-evaluation flaw in shell argument ha…

Vsee · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13381High8.1—2026-07-20VSee Clinic 7.1.26 and API 1.3.0 contain an Insecure Direct Object Reference (IDOR) vulnerability in the /v1.3.0/api/files endpoint.
CVE-2026-13380High7.5—2026-07-20VSee Clinic 7.1.26 and VSee Clinic API 1.3.0 exposes cleartext SFTP credentials in the HTTP responses of three unauthenticated endpoints.

Weaver Network Co., Ltd. · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2022-50997High7.5—2026-08-11Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthenticated remote attackers to extract arbitrary data from the backend database by manipulating the id G…
CVE-2016-20097High7.5—2026-08-11Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote attackers to read arbitrary files by injecting a UNION SELECT payload into the markId GET parameter, wh…

Wedevs · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66466High7.5—2026-08-13Unauthenticated Broken Access Control in StoreGrowth: Smart Sales Booster for WooCommerce | BOGO, Upsells, Direct Checkout, Quick View, Side Cart <= 2.1.1 versions.
CVE-2026-11421Medium6.5—2026-08-05The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support plugin for WordPress is vulnerable to SQL Injection via the 'erpadvancefilter' parameter in all versions up to, and including, 1.17.4 due to insufficient escaping on…

Wpdirectorykit · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28001Critical9.3—2026-08-13Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.
CVE-2026-27538High7.5—2026-08-13Unauthenticated SQL Injection in WP Directory Kit <= 1.5.4 versions.

Wpmu Dev · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28111High8.8—2026-08-06Contributor Privilege Escalation in Forminator <= 1.56.0 versions.
CVE-2026-28143High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Forminator <= 1.56.0 versions.

Wpmudev · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15459High8.1—2026-08-06The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 5.0.0.
CVE-2026-18325High7.2—2026-08-06The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Forged Upload Record via Select Field in all versions up to, and including, 1.56.1 due to insuffi…

Wpwax · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3141Critical9.1—2026-08-01The FormGent plugin for WordPress is vulnerable to unauthorized arbitrary file deletion due to a missing capability check on the /wp-json/formgent/responses/attachments REST API endpoint in all versions up to, and including, 1.9.2 This is…
CVE-2025-15028High7.2—2026-08-06The FormGent – Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payments & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via form submission fields in all versions up to, and including, 1.9.2 due to…

Wupsales · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14526Critical9.8—2026-08-08The AI Copilot – Content Generator plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.5.6.
CVE-2026-6639High7.5—2026-08-05The AI Chatbot & Workflow Automation by AIWU plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.6.

Wwbn · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72748Critical9.1—2026-08-11AVideo contains an unauthenticated arbitrary file write vulnerability in the aVideoEncoderChunk.json.php endpoint that allows remote attackers to write up to 4 GB of arbitrary content to the server filesystem via HTTP PUT requests without…
CVE-2026-72747High7.2—2026-08-11AVideo fails to sanitize the phone field during user registration, allowing unauthenticated attackers to inject malicious JavaScript that persists in the database.

Zoom · 2 CVEs

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53412Critical9.8—2026-07-16Improper Input Validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an account takeover via network access.
CVE-2026-53411High7.8—2026-07-16A time-of-check to time-of-use (TOCTOU) race condition in the installation and uninstallation process of certain Zoom Clients for Windows could allow an authenticated local user to escalate privileges.

1meril · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28170High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Blog Floating Button <= 1.4.20 versions.

2wstechnologies · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5651Medium4.9—2026-08-05The Askeet plugin for WordPress is vulnerable to SQL Injection via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, askeet_export_all_results) in all versions up to, and including, 3.0.

3coresec · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19358Medium6.3—2026-08-09A weakness has been identified in 3CORESec Trapdoor up to 1.2.2.

4xmen · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72573High8.8—2026-08-10An OS command injection vulnerability in 4xmen/pm2panel (all versions) allows an authenticated remote attacker to execute arbitrary system commands on the host.

@Swc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72925Medium6.1—2026-08-11SWC is a TypeScript / JavaScript compiler written in Rust.

Aaif-goose · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72718———2026-08-10goose is general-purpose AI agent that runs on your machine.

Aaronsb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19285Medium5.3—2026-08-08A vulnerability was detected in aaronsb memory-graph up to 5cfd2382778837b9f6399080956eee670d00452c.

Abdullah1854 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19268Medium6.3—2026-08-08A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230.

Abracadabra50 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19327Medium5.3—2026-08-09A flaw has been found in abracadabra50 claude-sesh 1.0.0.

Abrinsmead · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19287Medium5.3—2026-08-08A flaw has been found in abrinsmead mindpilot-mcp 0.5.0.

Acyba · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15426High8.8—2026-08-11The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 10.11.1.

Adafap · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19374High7.3—2026-08-09A security vulnerability has been detected in adafap api-mcp up to 92b9a5d04acfec165c7d4ef852496593aa87be06.

Adenot · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19337Medium5.3—2026-08-09A vulnerability was determined in adenot mcp-google-search up to 0.3.1.

Adolfosalasgomez3011 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19281Medium5.3—2026-08-08A security flaw has been discovered in adolfosalasgomez3011 slidev-builder-mcp 2.1.0.

Advplyr · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73085———2026-08-11Audiobookshelf is a self-hosted audiobook and podcast server.

Affiliatewp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65515High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <= 2.35.0 versions.

Afonso Matos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66469High7.5—2026-08-13Unauthenticated Broken Access Control in Arvow AI SEO Writer <= 1.5.3 versions.

Aftership & Automizely · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66460Medium6.5—2026-08-13Subscriber Cross Site Scripting (XSS) in AfterShip Tracking <= 1.18.1 versions.

Afthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11977Medium6.5—2026-08-05The WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection via the 'wpma_metabox_authors_list' parameter in all versions up to, and including, 3.9.1 due to…

Agnihd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66465Critical9.8—2026-08-13Unauthenticated Broken Authentication in Cartify <= 1.3.0.1 versions.

Ahmadgb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61965High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in GeekyBot <= 1.2.6 versions.

Ahnlab · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-60357High8.1—2026-07-17AhnLab EPP Management v1.0.14.32-6249 was discovered to contain a NoSQL injection vulnerability via the eventlog/agentEvent/list endpoint.

Ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73086High7.4—2026-08-11nanoid is a secure, URL-friendly, unique string ID generator for JavaScript.

Aimeos · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49262Low3.0—2026-08-12In the Aimeos Pagible content management system prior to version 0.10.4, the administrative proxy route (`cmsproxy`) is vulnerable to a Server-Side Request Forgery (SSRF) attack via DNS Rebinding.

Akaunting · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16772High8.1—2026-08-14In Akaunting versions <= 3.1.21, low‑privileged authenticated users can modify their own account to assign themselves the admin role ID, granting full administrator privileges.

Akshay Menariya · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66684Medium5.3—2026-08-06Unauthenticated Sensitive Data Exposure in Export Import Menus <= 1.9.2 versions.

Aktsmm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19328Medium5.3—2026-08-09A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0.

Alex · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66685Medium5.3—2026-08-06Unauthenticated Sensitive Data Exposure in Featured Video Plus <= 2.3.3 versions.

Alian · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-10308Medium4.3—2026-08-14The Astro Booking Engine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0.

Aliyun · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19339Medium6.3—2026-08-09A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43.

Almico · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19382Low2.3—2026-08-10A weakness has been identified in Almico Speedfan 4.52.

Alphawolf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7441Medium6.4—2026-08-05The Simple Yearly Archive plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `posttype` attribute of the `SimpleYearlyArchive` shortcode in all versions up to, and including, 2.2.4 due to insufficient input sanitizat…

Amauri · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61984High7.5—2026-08-13Unauthenticated Broken Access Control in WPMobile.App <= 11.77 versions.

Amir Helzer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66711High7.1—2026-08-06Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual & Multicurrency <= 5.5.6 versions.

Amir20 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73087———2026-08-11Dozzle is a realtime log viewer for docker containers.

Andy_moyle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66478Critical9.3—2026-08-13Unauthenticated SQL Injection in Church Admin <= 5.1.1 versions.

Anephenix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73561High7.5—2026-08-13Hub is a Node.js WebSocket server and client with added features.

Angrysky56 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19330Medium5.3—2026-08-09A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0.0.

Antoineh · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8790Medium6.1—2026-08-05The Football Pool plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the `shouttext` POST parameter of the Shoutbox widget in all versions up to, and including, 2.13.4 due to insufficient input sanitization and output…

Anubissbe · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19340Medium6.3—2026-08-09A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0.

Approveme · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65523High7.5—2026-08-06Unauthenticated Insecure Direct Object References (IDOR) in Formidable Forms Signature Online Contract Automation <= 2.0.1 versions.

Arcadia Technology, Llc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13716Critical9.1—2026-08-11Path traversal in server import and admin file upload in Crafty Controller.

Argoproj · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15416High8.9—2026-07-14A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution.

Ash-hq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67579High7.4—2026-08-12Deserialization of Untrusted Data vulnerability in ash-project ash allows an unauthenticated attacker to inject a filter expression through a forged keyset pagination cursor, resulting in SQL injection or code execution depending on the da…

Ash-project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70395———2026-08-09Improper Neutralization of Special Elements in Data Query Logic vulnerability in ash-project ash allows an attacker to forge a relationship to a record they cannot name, and to recover the secret value used to look it up.

Asp-cms Project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2019-25765High7.5—2026-08-13ASP-CMS contains a SQL injection vulnerability in the commentList.asp endpoint that allows unauthenticated remote attackers to inject arbitrary SQL by manipulating the id parameter in GET requests to the comment listing script.

Astralisone · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19288Medium5.3—2026-08-08A vulnerability has been found in astralisone rive-mcp-server-core up to db1d0cc4cd52589116360428b7504fd0ca748b3e.

Asus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8917———2026-08-11Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to write a specific value to an arbitrary memory address, potentially leading to privilege escalation.

Automateyournetwork · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19338Medium5.3—2026-08-09A vulnerability was identified in automateyournetwork MCPyATS up to 0.1.4.

Automatisch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72566High7.7—2026-08-10A server-side request forgery (SSRF) vulnerability in automatisch through commit 41f3c56 allows a low-privileged authenticated user with 'manage Flow' permission to make the server fetch arbitrary URLs and retrieve the full response body v…

Automattic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73562Medium6.5—2026-08-13Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment.

Aveva · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-7639High7.1—2026-08-14The vulnerability, if exploited, could allow an authenticated miscreant with "DNA Authority - Operator" privilege to tamper with serialized data, potentially resulting in code execution during deserialization under the privilege of Ente…

Ays Pro · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65565High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Survey Maker <= 5.2.3.3 versions.

Azer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19323Medium5.3—2026-08-09A security flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2e88352b59b10d3b478d678b0.

Azuriom · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54415High8.1—2026-06-17Missing Authorization in the server management routes (routes/admin.php) in Azuriom Azuriom CMS before 1.2.11 on all platforms allows an authenticated attacker with the admin.access permission to create AzLink server tokens and take over n…

Backstage · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73563Medium4.7—2026-08-13Backstage is an open framework for building developer portals.

Baicells · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19771High7.2—2026-08-14A vulnerability was identified in Baicells EG3661M BaiCE_BQ6_2.0.5.3_NA.

Bartekke8it56w2 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19370Medium5.3—2026-08-09A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0.

Bash-it · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73036Medium4.4—2026-08-11Bash-it 3.2.0 contains a terminal escape sequence injection vulnerability in the barbuk theme's Python virtualenv prompt segment that allows local attackers to inject arbitrary terminal control sequences by embedding escape sequences in th…

Bazylhorsey · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19331Medium5.3—2026-08-09A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0.

Beardev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11920Medium4.9—2026-08-05The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to time-based SQL Injection via the 'order' parameter in all versions up to, and including, 5.7.9 due to insufficient escaping on the use…

Benoitc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49457Critical9.1—2026-08-14erlang_quic is a pure Erlang QUIC implementation.

Bensibley · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17506High7.2—2026-08-05The Independent Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 404 not_found_url tracking parameter in versions up to, and including, 2.15.0.

Berocket · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66439High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <= 3.2.0.3 versions.

Bestwebsoft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66456Medium6.5—2026-08-13Subscriber Cross Site Scripting (XSS) in Profile Extra Fields by BestWebSoft <= 1.3.4 versions.

Bitwarden · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-71959Medium5.8—2026-08-10Bitwarden Server before 2026.7.2 does not verify that the caller is a member of the organization identified in a POST /collect request body, allowing any authenticated user to write forged, arbitrarily backdated entries into any organizati…

Blix · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18648Medium5.3—2026-08-03A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305.

Bludit · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72576Medium5.4—2026-08-10A stored cross-site scripting (XSS) vulnerability in Bludit 4.0.0-beta allows a low-privileged authenticated user (Author role) to inject arbitrary JavaScript by uploading a crafted SVG file as the site logo.

Bluewave-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72588Medium5.3—2026-08-10A user enumeration vulnerability in bluewave-labs/Checkmate through 2.1.0 allows an unauthenticated remote attacker to determine whether a given email address is registered.

Booking Activities Team · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28176High8.8—2026-08-13Unauthenticated PHP Object Injection in Booking Activities <= 1.18.4 versions.

Bookingwp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66462High7.5—2026-08-13Unauthenticated Sensitive Data Exposure in WooCommerce Appointments <= 5.3.8 versions.

Bracketweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65580High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Agrion <= 1.0.0 versions.

Brainstormforce · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7623Medium6.4—2026-08-01The SureForms – Contact Form, Payment Form & Other Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'headingWrapper' parameter in all versions up to, and including, 2.8.1 due to insufficient inp…

Brandexponents · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66665Critical10.0—2026-08-06Unauthenticated Arbitrary File Upload in Type Hub <= 2.0.6 versions.

Britcoder · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15964Critical9.8—2026-08-01The Single Sign On For TNG plugin for WordPress is vulnerable to Authentication Bypass via unauthenticated password reset in all versions up to, and including, 2.0.0.

Butlerx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49864———2026-08-13wetty provides terminal access in browser over http/https.

Byron · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73479Medium5.0—2026-08-13dua-cli fails to filter terminal escape sequences when printing marked file paths after exiting the TUI interface.

Cachethq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69118High8.8—2026-08-10Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering that allows authenticated users to execute arbitrary PHP code.

Cal.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57858High8.9—2026-08-12Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytic…

Capsoftware · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69113Medium5.4—2026-08-11Cap v0.3.1 contains a broken access control vulnerability in the POST /api/video/comment endpoint that allows authenticated users to post comments on any private video without permission by supplying an arbitrary videoId in the request bod…

Cdeust · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49986———2026-08-14The Cortex MCP server (`neuro-cortex-memory`), a cross-platform persistent memory MCP, prior to version 3.17.1 treats the `CLAUDE_PROJECT_DIR` environment variable — automatically set by Claude Code to the currently open project directory…

Cedar-policy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49473High8.8—2026-08-13@cedar-policy/authorization-for-expressjs is an open-source Express.js middleware that integrates Cedar authorization into Express applications by mapping HTTP requests to Cedar actions and evaluating authorization policies before allowing…

Cemtan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18719Medium6.3—2026-08-04A vulnerability was detected in cemtan sar2html 4.0.0.

Chatwoot · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72719Medium6.7—2026-08-10Chatwoot is a customer engagement suite.

Checkmal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18605High7.0—2026-08-03A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10.

Checkpoint · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16232Critical9.8KEV2026-07-22An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges.

Chetans9 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18766Medium6.3—2026-08-04A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f.

Chiuwingyan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19062High7.3—2026-08-06A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670.

Civetweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-29035Medium6.5—2026-08-11CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that allows unauthenticated remote attackers to corrupt memory by sending compressed WebSocket frames when both USE_ZLIB an…

Civicrm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72558High8.8—2026-08-11An SQL injection vulnerability in CiviCRM through 6.18.alpha1 allows authenticated staff to read the entire database via the contact search RLIKE clause.

Claudiopizzillo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54419Critical9.8—2026-06-18claudiopizzillo PIAF-HMS (PBX-In-A-Flash Hotel Management System; no released versions, latest commit 389d2633441b65ced1c104212cd62be2bfca21e5) contains multiple unauthenticated SQL injection vulnerabilities.

Cloudflare · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11325High8.8—2026-08-12Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote code execution issue in `src/index.ts` reachable from certain GitHub Actions workflow configurations.

Cockpit Cms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72557High8.8—2026-08-11An unrestricted file upload vulnerability in Cockpit CMS 2.6.0 allows authenticated users to upload files of any extension including PHP scripts via the asset upload endpoint.

Cockpit Hq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73680High8.8—2026-08-14Cockpit CMS 2.14.0 and prior contains a command injection vulnerability in the FFmpeg integration that allows authenticated users with only the assets/upload permission to execute arbitrary commands by uploading a video file with a shell m…

Codename065 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16685Medium6.4—2026-08-01The Download Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'icon' Shortcode Attribute in all versions up to, and including, 3.3.66 due to insufficient input sanitization and output escaping.

Comesio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15941Medium6.5—2026-08-05The plugin provides an Admin Search page that allows users with the `edit_posts` capability to run Relevanssi searches from the WordPress dashboard.

Complianz · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65498Medium5.3—2026-07-23Unauthenticated Sensitive Data Exposure in Complianz <= 7.5.0 versions.

Composefs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70622Medium6.5—2026-08-10tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-contr…

Concourse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49826———2026-08-14Concourse is a container-based automation system written in Go.

Constant Contact · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65547High8.5—2026-08-06Subscriber SQL Injection in Creative Mail <= 1.6.9 versions.

Containers · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-47766———2026-08-14crun is an open source OCI Container Runtime fully written in C.

Contiki-ng · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5857High8.1—2026-08-06Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/mqtt.c sets topic_len_received=1 before checking topic_len against the 64-byte limit, so an over-length topic returns early but leaves the flag set.

Corebunch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72587Medium6.1—2026-08-10A cache poisoning vulnerability in CoreBunch/Instatic through 0.0.14 allows an unauthenticated remote attacker to poison the shared process-wide render cache by manipulating the u query parameter of the GET /_instatic/hole/<nodeId> server…

Cornelraiu-1 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7444High8.1—2026-08-05The Search Analytics for WP plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.16.

Cozy Vision Technologies Pvt. Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66424Critical9.8—2026-08-13Unauthenticated Privilege Escalation in SMS Alert Order Notifications <= 3.9.7 versions.

Cozythemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15950Medium6.4—2026-08-01The Cozy Blocks – Page Builder for Gutenberg Editor & FSE with 600+ Patterns, 58 Blocks & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'layoutCircle.alignment' Block Attribute in all versions up to, and i…

Crate · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49989———2026-08-14CrateDB is a distributed SQL database.

Crocoblock. Jetimpex Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28082High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in JetEngine <= 3.8.13.1 versions.

Cservit · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12743Medium4.9—2026-08-14The affiliate-toolkit – Multi-Network Affiliate & Amazon Product Display plugin for WordPress is vulnerable to time-based SQL Injection via the 'orderby' parameter in all versions up to, and including, 3.8.8 due to insufficient escaping on…

Csz Cms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72601High7.5—2026-08-11A broken access control vulnerability in CSZ CMS 1.3.2 allows unauthenticated remote attackers to read all form submissions including personally identifiable information via the admin form-submission viewer.

Cyberlord92 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12000High7.5—2026-08-05The Page and Post Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to and including 1.4.0 via the WordPress core REST endpoints /wp-json/wp/v2/pages, /wp-json/wp/v2/pages/<id>, /wp-json/wp/v2/…

Cybozu, Inc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57279Medium6.8—2026-08-10Cybozu Garoon contains a cross-site scripting vulnerability.

Daan.dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61980High7.5—2026-08-13Unauthenticated Arbitrary File Download in OMGF Pro <= 5.2.7 versions.

Damian Góra · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28179Medium5.9—2026-08-06Shop manager Cross Site Scripting (XSS) in FiboSearch <= 1.33.0 versions.

Daniel Brendel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72559Medium5.4—2026-08-11A stored cross-site scripting vulnerability in HortusFox 5.9 allows authenticated workspace members to inject persistent JavaScript into plant notes via Parsedown rendered without safe mode.

Daniel Iser · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28177High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Popup Maker <= 1.23.0 versions.

Daptin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72575Critical9.1—2026-08-10An improper authorization vulnerability in daptin through v0.12.34 allows unauthenticated remote attackers to read, create, update, and delete usergroup records.

Dartiss · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49466Medium6.5—2026-08-12Draft List is a WordPress plugin to manage and promote unpublished content.

Dassault Systèmes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17061Critical10.0—2026-08-11A Deserialization of Untrusted Data vulnerability affecting SIMULIA Execution Engine from Release 2023 through Release 2026 could lead to an unauthenticated remote code execution.

Data443 Risk Mitigation, Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28172High7.1—2026-08-06Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Manager <= 2.6.0 versions.

Dataease · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72743Medium5.4—2026-08-10SQLBot through 1.10.0, fixed in commit c3f40a5, contains a stored cross-site scripting vulnerability in the SQText dashboard component that renders TinyMCE output via v-html without sanitization.

Datavane · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69101High7.7—2026-08-14Datavane TIS v5.0.0 contains an XML external entity (XXE) injection vulnerability that allows authenticated attackers to perform server-side request forgery and out-of-band file exfiltration by supplying a crafted taskScript payload to the…

Davegamble · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-29036High7.5—2026-08-11cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() function within cJSON_Utils.c that allows unauthenticated attackers to cause JSON Patch operations to targe…

Davejesch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15018Medium5.3—2026-08-01The Database Collation Fix plugin for WordPress is vulnerable to time-based SQL Injection via the 'force-collation-algorithm' parameter in all versions up to, and including, 1.2.10 due to insufficient escaping on the user supplied paramete…

David Lingren · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61963High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant <= 3.38 versions.

David-a-wheeler · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48813———2026-08-11Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code.

Davila7 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73222High8.8—2026-08-11Claude Code Templates is a CLI tool for configuring and monitoring Claude Code.

Debevv · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54410High8.6—2026-06-14nanoMODBUS through v1.23.0 contains an off-by-one buffer overflow in the recv_msg_header function of the Modbus/TCP server that allows remote unauthenticated attackers to write one attacker-controlled byte past the end of the 260-byte rece…

Deepcool · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19192High7.8—2026-08-07A vulnerability was detected in DeepCool DisplayService 1.2.12.

Delskayn · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2024-58366High8.5—2026-07-18SurrealDB before 1.1.1 contains a format string vulnerability in the rquickjs Exception::throw_type function when scripting is enabled.

Devitemsllc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6020High7.2—2026-08-05The ShopLentor plugin for WordPress is vulnerable to arbitrary function execution via the woolentoropt/v1/custom-action REST API endpoint in all versions up to, and including, 3.3.7.

Devolutions · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19768High8.1—2026-08-14Improper control of generation of code ('Code Injection') in the settings feature in Devolutions PowerShell Universal 2026.2.3 and earlier allows an authenticated user with settings management permission to execute arbitrary PowerShell cod…

Dimitri Grassi · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66453Critical9.8—2026-08-13Unauthenticated Broken Authentication in Salon booking system <= 10.30.26 versions.

Divvypayhq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67585———2026-08-07Allocation of Resources Without Limits or Throttling vulnerability in DivvyPayHQ absinthe_federation allows an unauthenticated remote attacker to abort the Erlang VM via crafted _entities representation keys.

Django-helpdesk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73531Medium6.1—2026-08-13django-helpdesk before 2.3.3 contains a stored cross-site scripting vulnerability that allows unauthenticated attackers to inject arbitrary JavaScript by submitting HTML-formatted email messages or uploading .html/.htm file attachments thr…

Dmitriiweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19375Medium6.3—2026-08-10A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0.

Dokan, Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66699Medium5.3—2026-08-06Custom role Broken Access Control in Dokan <= 5.0.10 versions.

Dokaninc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8761High8.8—2026-08-05The Dokan plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 5.0.1.

Dolibarr · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19350Medium6.3—2026-08-09A vulnerability has been found in Dolibarr ERP up to 23.0.3.

Doobidoo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50027Critical9.8—2026-08-14mcp-memory-service is a semantic memory layer for AI applications.

Dotonpaper · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15403Medium4.9—2026-08-01The Pinpoint Booking System – Version 2 plugin for WordPress is vulnerable to blind SQL Injection via the 'field' parameter in all versions up to, and including, 2.9.9.6.9 due to insufficient escaping on the user supplied parameter and lac…

Dresende · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19351High7.3—2026-08-09A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28.

Driftregion · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54413High8.2—2026-06-14driftregion iso14229 through 0.9.0 contains an integer underflow and downstream out-of-bounds read in the Handle_0x27_SecurityAccess function in iso14229.c that allows a remote unauthenticated attacker to crash a UDS server and potentially…

Dub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72552High7.5—2026-08-11A server-side request forgery vulnerability in Dub as of 2026-07-10 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the metatags edge endpoint.

Dundee · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73480Medium5.0—2026-08-13gdu fails to strip terminal escape sequences from directory and file names when printing paths after TUI exit.

E107 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72599Critical9.8—2026-08-11An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter.

E2pdf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66710High8.1—2026-08-06Unauthenticated Local File Inclusion in e2pdf <= 1.32.40 versions.

Echoplugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28187High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Knowledge Base for Documentation, FAQs with AI Assistance <= 17.211.0 versions.

Edge-themes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66653High8.1—2026-08-13Unauthenticated Local File Inclusion in Barista <= 2.5.1 versions.

Edge22 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13458Medium6.4—2026-08-01The GenerateBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Dynamic Tag Injection in HTML Attributes in all versions up to, and including, 2.3.0 due to insufficient input sanitization and output escaping.

Efm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19379High7.3—2026-08-10A vulnerability was determined in EFM ipTIME AX8004M 15.09.0.

Ehco1996 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18818Medium6.3—2026-08-04A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26.

Elkarte Forum · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72553Medium5.4—2026-08-11A stored cross-site scripting vulnerability in ElkArte Forum 2.0 Beta 1 allows any registered member to inject persistent JavaScript into the profile fields cust_blurb and cust_locate.

Ente · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73230———2026-08-11Ente provides end-to-end encrypted cloud services and security tools.

Eosphoros-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73034Critical9.8—2026-08-11DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Pytho…

Epsilla-cloud · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18852Low3.3—2026-08-05A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a.

Eradman · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18370———2026-08-10entr is vulnerable to Heap-based buffer overflow in run_utility() function.

Error311 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54414Critical9.8—2026-06-19FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover.

Esafenet · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18859High7.3—2026-08-05A vulnerability was identified in ESAFENET CDG up to 20260615.

Essekia · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66659Critical9.3—2026-08-12Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection.

Estonian Information System Authority (Ria) · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59112———2026-08-10Improper verification of cryptographic signature and Improper Check for Unusual or Exceptional Conditions vulnerability in Estonian Information System Authority (RIA) libdigidocpp, DigiDoc4, DigiDoc on Android, and DigiDoc on iOS. This iss…

Everestthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66472Critical9.3—2026-08-13Unauthenticated SQL Injection in Everest Backup <= 2.3.12 versions.

Eyaushev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19765Medium6.3—2026-08-14A security flaw has been discovered in eyaushev swagger-testcase-mcp 5babb27c951fb404bc2b25ec80593616e49054e5.

Fahdaslam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18961High8.1—2026-08-12The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authentication Bypass via Unverified Provider Email in all versions up to, and including, 1.4.3.

Faker-js · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73231High7.8—2026-08-11Faker generates massive amounts of fake data in the browser and Node.js.

Faraday_project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54297High7.5—2026-06-24Faraday is an HTTP client library abstraction layer that provides a common interface over many adapters.

Fatedier · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73564———2026-08-13frp is a fast reverse proxy.

Feedmob · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19770Medium5.3—2026-08-14A vulnerability was identified in feedmob fm-mcp-servers 0.0.3.

Ffmpeg · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64833High7.1—2026-07-22FFmpeg versions 0.7.1 through 8.1.2 contain an out-of-bounds read vulnerability in the S/PDIF muxer that allows attackers to access memory beyond buffer boundaries by supplying a crafted DTS stream with a core_size value larger than the ac…

Ffuf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73232High7.5—2026-08-11ffuf is a fast web fuzzer written in Go.

Fifu.app · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73340Medium6.5—2026-08-13Contributor Cross Site Scripting (XSS) in Featured Image from URL <= 5.3.3 versions.

Filerun · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14863High8.8—2026-08-11FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve remote code execution by uploading a file with a malicious filename containing shell command substit…

Firecrawl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72904———2026-08-10Firecrawl turns entire websites into LLM-ready markdown or structured data.

Fitsoft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19426High8.2—2026-08-12POS System developed by FitSoft has a Missing Authentication vulnerability.

Flipper Code · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28144Medium4.3—2026-07-31Insertion of Sensitive Information Into Sent Data vulnerability in Flipper Code WP Maps allows Retrieve Embedded Sensitive Data.

Flow Neuroscience · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18164High8.1—2026-08-13An undocumented hard-coded credential, shared by all device units, is authorized to bypass authentication.

Fluxbuilder · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27543High8.1—2026-08-13Unauthenticated Privilege Escalation in MStore API <= 4.20.0 versions.

Flytohub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73530High7.7—2026-08-13Flyto2 Core before 2.28.0 contains a server-side request forgery guard bypass vulnerability that allows attackers to reach internal services by supplying URLs using the unblocked IPv6 address `::` which the kernel routes to loopback identi…

Forcepoint · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11970———2026-08-13This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExtension and bypass DLP protection in F1E Mac OS before v26.04.5758.

Fosrl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72564Critical9.6—2026-08-10An improper authorization vulnerability in fosrl/pangolin through v1.20.0 allows an authenticated remote attacker to authenticate to any resource in any organization by reusing an access token issued for a different resource.

Foxit · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18622Medium4.7—2026-08-13Foxit PDF Editor/Reader inconsistently alerts users when signature fields are abnormally modified, including alterations to appearance, coordinates, or field duplication.

Freeipa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19550High8.2—2026-08-11A flaw was found in FreeIPA.

Froiden · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18741Medium4.8—2026-08-13Worksuite SaaS versions prior to 6.0.14 contains a stored cross-site scripting vulnerability in the Asset Management module that allows authenticated administrators to inject arbitrary JavaScript by entering malicious payloads into the Loc…

Frostming · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73030High8.1—2026-08-10unearth through 0.18.2, fixed in commit 6c78164, contains a path traversal vulnerability in the is_within_directory function that fails to normalize paths before validation, allowing ../ sequences to bypass directory containment checks.

Fujitsu Research · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73325High7.8—2026-08-12Fujitsu Research's OneCompression library before 1.2.1 contains an unsafe deserialization vulnerability that allows attackers to execute arbitrary code by supplying a crafted model.pt checkpoint file, as QuantizedModelLoader.load_quantized…

Gabehf · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72591High7.7—2026-08-10A server-side request forgery (SSRF) vulnerability in gabehf/Koito through v0.3.2 allows an authenticated user to make the server perform HTTP requests to arbitrary internal or external hosts by supplying a crafted image_url value in the P…

Gamerz · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19794High7.2—2026-08-14The WP-Stats plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 2.56 due to insufficient input sanitization and output escaping.

Garu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13410High8.2—2026-07-17Dancer::Plugin::Auth::Google versions before 0.08 for Perl have TLS verification disabled.

Gchq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72912Medium4.3—2026-08-10CyberChef is a web app for encryption, encoding, compression, and data analysis.

Genkit-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-67179High7.8—2026-08-11Genkit does not properly validate host request headers.

Getkin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73501Critical9.1—2026-08-12kin-openapi is a Go project for handling OpenAPI files.

Getprobo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49820Medium4.7—2026-08-13Probo is a self-hostable governance, risk, and compliance (GRC) platform built for engineering and security teams.

Ggml-org · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18581Low3.3—2026-08-03A vulnerability was determined in ggml-org llama.cpp e15efe0.

Ghost Foundation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72596High8.1—2026-08-11A broken access control vulnerability in Ghost Foundation Ghost 5.x allows authenticated Author-role users to delete posts owned by other users.

Glibc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6368———2026-08-10Calling wordexp with WRDE_APPEND in the GNU C Library version 2.0 to version 2.43 can cause the interface to return invalid memory in the we_wordv member, which on subsequent calls to wordfree may abort the process.

Gnome · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18358High7.5—2026-07-31A flaw was found in gnome-remote-desktop as shipped in Red Hat Enterprise Linux.

Golang.org/x/image · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46603High7.5—2026-08-14VP8L decoding in golang.org/x/image/vp8l can allocate an excessive amount of memory when processing a crafted VP8L image containing many unused Huffman tree groups.

Golang.org/x/net · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46600High7.5—2026-07-21Parsing an invalid SVCB or HTTPS RR can panic when the size of a parameter value overflows the message buffer.

Goodrain · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72741High8.1—2026-08-13Rainbond through 6.9.7 contains a broken access control vulnerability in the CheckToken function that allows authenticated attackers to access unauthorized enterprise resources by substituting another enterprise's tenant name in URL paths.

Grafana · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19516Critical9.1—2026-08-11A caller-supplied X-Grafana-URL request header controls the destination of mcp-grafana's outbound requests, and the grafana_api_request tool lets the caller also choose the HTTP method, path, and body.

Gramsearch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73031High8.7—2026-08-11telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victims' browsers by sending crafted messages containing unsanitized HTML to a shared Telegram group.

Grokability · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19579Medium5.4—2026-08-11Snipe-IT before 8.6.0 contains an authorization bypass (insecure direct object reference) in the asset checkout-request cancellation endpoint.

Haiwell · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19188Critical10.0—2026-08-14A critical OS command injection vulnerability has been identified in the Haiwell IoT Cloud HMI Gateway product.

Hakan Ozevin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61962Critical10.0—2026-08-13Unauthenticated Arbitrary Code Execution in WP BASE Booking <= 6.3.0 versions.

Hamid Alinia · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65570High8.1—2026-08-06Unauthenticated Bypass Vulnerability in Login with phone number <= 1.8.70 versions.

Handwriting-ocr · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19372Medium5.3—2026-08-09A security flaw has been discovered in Handwriting-OCR handwriting-ocr-mcp-server 0.1.0.

Harttle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45618Critical10.0—2026-08-11LiquidJS is a Shopify/GitHub Pages compatible template engine.

Hassan Fakih · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66463High7.5—2026-08-13Unauthenticated Sensitive Data Exposure in iCARRY <= 2.9 versions.

Helloggx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19324Low3.3—2026-08-09A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38.

Ho3einie · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6079High7.3—2026-08-05The Material Dashboard plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the amd_ajax_target_task_manager() function in all versions up to, and including, 1.4.10.

Hongjing Century · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2024-58374High7.5—2026-08-13Hongjing e-HR contains an unauthenticated SQL injection vulnerability in the getSdutyTree servlet endpoint that allows remote unauthenticated attackers to access protected resources by supplying a path traversal sequence in the request URI…

Honojs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73565Medium5.3—2026-08-13@hono/node-server allows running the Hono application on Node.js.

Hubzilla · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70556Medium4.3—2026-08-06Hubzilla versions prior to 11.4 contains a cross-site request forgery vulnerability in the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post() that allows unauthenticated attackers to register arbitrary OAuth2 applicati…

Hulupeep · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19270Medium5.3—2026-08-08A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.0.

Humansignal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72560Medium6.5—2026-08-11A server-side request forgery vulnerability in HumanSignal Label Studio through 1.24.0.dev0 exists because SSRF_PROTECTION_ENABLED is set to false by default.

Ichigo3766 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19365Medium5.3—2026-08-09A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0.

Idurar · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72600High7.5—2026-08-11A broken access control vulnerability in Idurar IDURAR ERP CRM 4.1.0 allows unauthenticated remote attackers to download invoice PDF files containing customer PII via the /download router.

If-so Dynamic Content · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66446Critical9.3—2026-08-13Subscriber SQL Injection in If-So Dynamic Content Personalization <= 1.10 versions.

Impresscms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73679High7.2—2026-08-14ImpressCMS contains an authenticated remote code execution vulnerability in the custom tag module that allows authenticated administrators to execute arbitrary PHP code by storing a malicious payload in a custom tag with PHP type enabled.

Imran Tauqeer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28168High8.5—2026-08-13Subscriber SQL Injection in CubeWP <= 1.1.30 versions.

Incomestreamsurfer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19325Medium5.3—2026-08-09A security vulnerability has been detected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e.

Inisev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7693High7.2—2026-08-05The Backup Migration plugin for WordPress is vulnerable to OS Command Injection in all versions up to, and including, 2.1.5.1 due to insufficient sanitization of the `file` POST parameter on the `restoreBackup()` AJAX handler.

Inquirelab · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19263High7.3—2026-08-08A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06114.

Inspirythemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-10782Medium4.3—2026-08-01The RealHomes Memberships plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.0.9.

Insta · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19061Low3.7—2026-08-06A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469.

Insyde Software · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6484High8.2—2026-08-12In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.

Intelliants · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72604Medium6.5—2026-08-11A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated administrators to delete arbitrary files on the server via the admin panel file deletion endpoint.

Inventec Appliances · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19424High7.5—2026-08-11Chiline Cloud developed by Inventec Appliances has a Insecure Direct Object Reference vulnerability.

Isaacs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73566High7.5—2026-08-13node-tar is a tar archive manipulation library for Node.js.

Ishankjha740 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48771High8.2—2026-08-11ishankportfolio is a portfolio website.

It-recht Kanzlei · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66452Medium6.5—2026-08-06Unauthenticated Broken Access Control in Legal Text Connector of the IT-Recht Kanzlei <= 1.0.13 versions.

Ivanbebek · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65504High7.5—2026-08-06Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <= 3.3.0 versions.

Jane-xiaoer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19335Medium5.3—2026-08-09A vulnerability has been found in Jane-xiaoer skill-vision-control up to 1.3.0.

Jaspersoft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16626———2026-08-10Improper restriction of XML external entity reference vulnerability (unauthenticated) in Jaspersoft JasperReports Server.

Jazzband · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-9318Medium5.4—2026-08-12tablib prior to 3.10.0 contains a stored cross-site scripting vulnerability in the HTML export functionality that allows attackers to execute arbitrary JavaScript by embedding malicious payloads in dataset titles, which are interpolated un…

Jeequan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18631Medium6.3—2026-08-03A vulnerability was identified in jeequan jeepay up to 3.2.9.

Jeff Farthing · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66681Medium4.3—2026-08-06Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login <= 7.1.14 versions.

Jegstudio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66704High7.2—2026-08-13Unauthenticated Server Side Request Forgery (SSRF) in Gutenverse Companion <= 2.5.1 versions.

Jetmonsters · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28140High7.5—2026-08-06Unauthenticated Broken Access Control in JetFormBuilder <= 3.6.4.1 versions.

Jevon-zhong · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19326Medium4.4—2026-08-09A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1.

Jgwhite33 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11969Medium4.9—2026-08-05The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to generic SQL Injection via 'curselrevs[]' Parameter in all versions up to, and including, 14.3 due to insufficient escaping on the user supplied parameter and lack of su…

Jiangmin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19193High7.8—2026-08-07A flaw has been found in Jiangmin Antivirus 21.

Jina-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18647High7.3—2026-08-03A security vulnerability has been detected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1.

Jordy Meow · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65545High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in AI Engine <= 3.6.8 versions.

Jp-secure · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61982High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <= 1.8.6 versions.

Juneandgreen · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73567Critical9.1—2026-08-13sm-crypto provides JavaScript implementations of the Chinese cryptographic algorithms SM2, SM3, and SM4.

Justin Kruit · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66678Medium4.3—2026-08-06Contributor Broken Access Control in Advanced Custom Fields: Font Awesome Field <= 6.1.1 versions.

Kendysond · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66444Medium6.5—2026-08-13Subscriber Sensitive Data Exposure in Payment Forms for Paystack <= 4.0.5 versions.

Keras-team · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12570Medium5.5—2026-08-10A vulnerability in keras-team/keras versions <= 3.15.0 allows for a denial of service (DoS) attack when loading malicious .keras model files via the keras.models.load_model() function.

Keywordrush · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15979High8.1—2026-08-05The Content Egg – Affiliate Product Importer & Price Comparison plugin for WordPress is vulnerable to Arbitrary File Deletion via Path Traversal in versions up to and including 11.3.0.

Kingston · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19381High7.8—2026-08-10A security flaw has been discovered in Kingston FURY CTRL RGB Control Software 2.0.65.0.

Kino-kafkaesque · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19039Medium5.3—2026-08-06A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5.

Kirachon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19266Medium5.5—2026-08-08A vulnerability was determined in Kirachon context-engine up to 1.9.0.

Kitae Park · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61974High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.3.4 versions.

Koxudaxi · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-63720High7.5—2026-07-26datamodel-code-generator prior to version 0.70.0 contains a code injection vulnerability that allows attackers who control input schemas to achieve remote code execution by supplying a malicious customBasePath value containing embedded new…

Ks-gen-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19369Medium5.3—2026-08-09A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0.

Ladybird Web Solution · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72554Medium6.5—2026-08-11A broken access control vulnerability in Ladybird Web Solution Faveo Helpdesk 2.0.3 allows any self-registered customer to read ticket conversations belonging to other customers via the v1 REST API.

Langgenius · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18632Medium6.3—2026-08-03A security flaw has been discovered in langgenius dify up to 1.14.2.

Laravel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73683High8.1—2026-08-14Laravel Socialite's Facebook provider contains an authentication bypass vulnerability that allows unauthenticated attackers to replay captured OIDC id_tokens by exploiting the missing nonce claim validation in the getUserByOIDCToken() func…

Latepoint · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5391Medium6.4—2026-08-06The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'btn_wrapper_classes' attribute of the 'latepoint_resources' shortcode in all versions up to, and including, 5.3.2.

Lattepress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65554High7.1—2026-08-06Subscriber Broken Access Control in AnsPress – Question and answer 4.4.4 versions.

Lavkush-maurya · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18896Medium6.3—2026-08-05A vulnerability was determined in lavkush-maurya Student-Registration-System 1.0.

Leesinliang · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19044Medium5.3—2026-08-06A flaw has been found in LeeSinLiang godot-mcp 0.1.0.

Lester Chan · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66426High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in WP-Stats <= 2.56 versions.

Letta-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18990High7.3—2026-08-06A vulnerability was detected in letta-ai LettaBot 0.2.0.

Liambindle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54412High8.2—2026-06-14LiamBindle MQTT-C through version 1.1.6 contains a heap-based out-of-bounds read and integer underflow in the mqtt_unpack_publish_response function in src/mqtt.c that allows a remote unauthenticated attacker controlling an MQTT broker - or…

Libexpat Project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72522Medium6.2—2026-08-10libexpat before 2.8.3 has an out-of-bounds read and resultant infinite loop because low surrogates are treated the same as high surrogates during Unicode processing in the *_toUtf16 functions.

Libgit2 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5917High8.8—2026-08-11libgit2 versions before 1.8.7 and 1.9.0 before 1.9.7 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supply…

Libp2p · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73568High7.5—2026-08-13py-libp2p is the Python implementation of the libp2p networking stack.

Lightsyncpro · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6147High8.8—2026-08-05The LightSync Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the rest_replace_media() function in all versions up to, and including, 2.1.6.

Linux-pam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54411Medium5.9—2026-06-14Linux-PAM through 1.7.2 contains an observable timing discrepancy (CWE-208) in the pam_userdb module's plaintext-password comparison path in modules/pam_userdb/pam_userdb.c that allows a local or network-adjacent attacker able to repeatedl…

Liquidthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65582High7.7—2026-08-13Subscriber Arbitrary File Download in AI Hub <= 1.3.10 versions.

Lllyasviel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-31114———2026-08-11Fooocus is an image generating software.

Lmsys · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14890Critical9.1—2026-07-16SGLang uses an expert-parallel backup subsystem that exposes a ZeroMQ PULL socket on a routable network interface that does not contain authentication or deserialization safeguards, allowing an attacker to provide a malicious pickle file t…

Lobehub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72594High7.6—2026-08-10A stored cross-site scripting (XSS) vulnerability in lobehub/lobe-chat through v2.2.13 allows a low-privileged authenticated user to inject arbitrary JavaScript into the application by uploading a crafted SVG file as a user avatar.

Lock-upme · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19354Medium6.3—2026-08-09A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d8b09.

Lookyloo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73210———2026-08-11A Server-Side Request Forgery (SSRF) vulnerability existed in Lookyloo's PlaywrightCapture when the only_global_lookup option was enabled.

Lspace-io · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19054Medium5.3—2026-08-06A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71.

Lucasgelfond · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53970High7.5—2026-08-14ZeroBrew version 0.3.1 and prior contains a missing integrity verification vulnerability in the Ruby compatibility shim that allows network attackers to execute arbitrary code by substituting malicious content at formula resource or URL-ba…

Ly Corporation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13133———2026-08-10A vulnerability has been identified in LineInst.exe (LINE for Windows) prior to version 26.4.0, where Msftedit.dll is loaded via a relative path without a secure DLL search path, allowing a malicious DLL placed in the installer's directory…

Maaassistantarknights · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55576———2026-07-15MaaAssistantArknights is a one-click tool for daily Arknights tasks.

Macrozheng · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19361Low3.7—2026-08-09A flaw has been found in macrozheng mall 0504e86.

Magnolia Dxp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18478———2026-08-10Magnolia CMS is vulnerable to Stored XSS in import functionality.

Mailchimp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73346High7.6—2026-08-13Administrator SQL Injection in MailChimp For WooCommerce < 6.2 versions.

Mailmunch · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7520High8.1—2026-08-05The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `sign_in()` and `sign_up()` AJAX handlers in all versions up to, and including, 3.2.7.

Mar10 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48099High7.1—2026-08-13WsgiDAV is a generic and extendable WebDAV server based on WSGI.

Mariadb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49261Critical10.0—2026-06-11MariaDB server is a community developed fork of MySQL server.

Mark Jaquith · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66706Medium5.9—2026-08-06Author Cross Site Scripting (XSS) in Subscribe to Comments <= 2.3.1 versions.

Maruti Mohanty · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66454Medium6.5—2026-08-13Unauthenticated Broken Access Control in WP Social Avatar <= 1.5 versions.

Mauriciomilano · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19284Medium5.3—2026-08-08A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0.

Meesho · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18591Low2.1—2026-08-03A vulnerability was identified in Meesho Online Shopping App up to 20260607 on Android.

Mercado Pago · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28180Medium5.3—2026-08-06Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pago payments for WooCommerce <= 8.9.0 versions.

Mervb1 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16684Medium6.4—2026-08-01The Easy Property Listings plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'facebook' User Contact Method in all versions up to, and including, 3.5.24 due to insufficient input sanitization and output escaping.

Metaslider · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18400Medium6.4—2026-08-06The Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'delay' Post Meta Setting in all versions up to, and including, 3.111.0 due to insufficient…

Mifi · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19352Low3.1—2026-08-09A vulnerability was determined in mifi lossless-cut up to 3.69.0.

Mihail-barinov · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15662Medium6.4—2026-08-01The Advanced Woo Labels – Product Labels & Badges for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bg_color' parameter in all versions up to, and including, 2.48 due to insufficient input sanitizat…

Mihche · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65556Critical9.8—2026-08-06Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <= 3.1.43 versions.

Milestone Systems · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-3014Critical9.1—2026-07-14Milestone has released a new version of XProtect® (and several cumulative patch updates) which fix security vulnerability in Management Server API.

Mimiclab · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19279Medium5.3—2026-08-08A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0.

Mindsdb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73678Critical10.0—2026-08-14MindsDB Minds Platform version 26.1.0 and earlier contains an unauthenticated remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary OS commands by submitting crafted prompts to the unprotected POST…

Ministry Of Justice · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16999Medium6.3—2026-08-12Improper restriction of XML external entity reference vulnerability in Ministry of Justice UYAP Document Editor allows Serialized Data External Linking.

Mintplex-labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72917Medium5.9—2026-08-10AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting.

Mndpsingh287 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-14469Medium4.3—2026-08-01The Theme Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.

Model Context Protocol · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19753High7.3—2026-08-13A vulnerability was detected in Model Context Protocol mcp-rdf-explorer 1.0.0.

Mohibshaikh · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62241Critical9.1—2026-07-17clawvet self-hosted API server (apps/api) before 0.7.5 hard-codes a fallback JWT secret ('clawvet-dev-secret-change-me') in auth.ts and ships it as the default in .env.example.

Monomythdevelopment · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19038Medium6.3—2026-08-06A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0.

Muffingroup · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65548Critical9.9—2026-08-06Contributor Remote Code Execution (RCE) in Betheme <= 28.4.2 versions.

Mullvad · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19380Low2.3—2026-08-10A vulnerability was identified in Mullvad wireguard.sys 0.10.1.

Multiparcels · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66655High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in MultiParcels Shipping For WooCommerce <= 1.30.36 versions.

Multivendorx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66441High7.5—2026-08-13Unauthenticated Broken Access Control in MultiVendorX <= 5.0.10 versions.

Mustafaakin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72571High7.5—2026-08-10A path traversal vulnerability in mustafaakin/cast-localvideo (all versions) allows an unauthenticated remote attacker to read arbitrary files from the server.

Mvpthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66658High8.5—2026-08-13Subscriber SQL Injection in Reviewer <= 3.14.2 versions.

National Institute Of Information And Communications Technology · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72506Medium5.4—2026-08-13VoiceTra provided by National Institute of Information and Communications Technology (NICT) contains an incorrectly specified destination in a communication channel vulnerability.

Naturalintelligence · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73569———2026-08-13fast-xml-parser allows users to process XML from JS object without C/C++ based libraries or callbacks.

Nearai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18980Medium6.3—2026-08-06A vulnerability was identified in nearai ironclaw up to 0.29.1.

Nefteprodukttekhnika Llc · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12183Critical9.8—2026-06-13Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module.

Nellyw8 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19332Medium5.3—2026-08-09A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0.

Nessshon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-54635High7.5—2026-07-28pytonapi is a Python SDK for TONAPI that provides REST API, streaming, and webhook access to the TON blockchain.

Netatalk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45699High7.5—2026-08-14Netatalk is a Free and Open Source file server suite for Unix-like operating systems.

Netbox Labs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69117Medium6.5—2026-08-11NetBox 4.5.8 contains an ORM injection vulnerability that allows authenticated attackers, including those with read-only API tokens, to inject arbitrary Django ORM lookup expressions into nested object references by supplying crafted JSON…

Netease-youdao · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18995Medium4.3—2026-08-06A flaw has been found in netease-youdao LobsterAI 2026.6.10.

Netis Systems Co., Ltd. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73673High8.8—2026-08-14Netis NC63 router firmware V3.0.0.3327 contains an unauthenticated firmware update vulnerability that allows unauthenticated attackers to submit unsigned firmware images by exploiting a missing authentication enforcement flaw in the Boa we…

Newtype · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18610Medium5.3—2026-08-03A vulnerability was detected in NewType WebEIP up to 3.0.

Nextauthjs · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73421———2026-08-13NextAuth.js provides authentication for Next.js.

Nickboss · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66447Critical9.3—2026-08-06Unauthenticated SQL Injection in WordPress File Upload <= 5.1.7 versions.

Nik00726 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18344Medium6.1—2026-08-01The Wp Responsive Thumbnail Slider plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in versions up to, and excluding, 1.1.53.

Nikolaibibo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19371Medium5.3—2026-08-09A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0.

Nishishi Factory · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64940High8.6—2026-08-10Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression, which may allow an attacker who can access the affected product to log in to the management console.

Nltk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-71408High7.8—2026-07-24NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code.

Nmap Project · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72712Medium6.5—2026-08-11Nmap versions up to and including 7.99 contains a denial of service vulnerability that allows remote attackers to crash the application by sending a crafted packet containing a zero-length TCP option.

Nodebb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73038Medium6.1—2026-08-13NodeBB before 4.15.0 contains a stored cross-site scripting vulnerability in the renderEmoji function that fails to escape tag.icon.url and tag.name attributes.

Nodeca · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73643High7.5—2026-08-13js-yaml is a JavaScript YAML parser and dumper.

Northebridge · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50544Medium6.3—2026-08-13NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight.

Notepad-plus-plus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73250———2026-08-11Notepad++ is a free and open-source source code editor.

Nur-alam39 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55740Critical9.8—2026-06-18Nur-Alam39 bus-ticket (no released versions; latest commit 459cabdbeb99c00225b26e46e3c2c30ae1de7bad) contains an unauthenticated SQL injection vulnerability in bus_info.php.

Nuxt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72744Medium6.2—2026-08-11Nuxt versions >= 4.4.7 and < 4.5.1, and >= 3.21.7 and < 3.21.10, contain an information disclosure vulnerability in the development server's Chrome DevTools workspace endpoint (GET /.well-known/appspecific/com.chrome.devtools.json).

Nxp-auto-goldvip · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19359Medium4.7—2026-08-09A security vulnerability has been detected in nxp-auto-goldvip gvip up to 1.4.0.

O1lab · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72572High7.5—2026-08-10A path traversal vulnerability in o1lab/xmysql (all versions) allows an unauthenticated remote attacker to read and download arbitrary files from the server.

Oalders · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14741High7.5—2026-07-17HTTP::Date versions before 6.08 for Perl allow CPU exhaustion via polynomial regex backtracking in parse_date.

Onokazu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66661High7.7—2026-08-13Subscriber Privilege Escalation in Directories Pro <= 2.0.5 versions.

Open-webui · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59714High7.1—2026-08-13Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform.

Openbmb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72713High7.5—2026-08-11XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to read arbitrary files on the host by supplying parent-directory segments in the `file_name` form field…

Opencart · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18412Critical9.1—2026-08-10OpenCart extensions are uploaded as zip files with .ocmod.zip extensions.

Openidentityplatform · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73644Critical9.6—2026-08-13OpenDJ is an LDAPv3 compliant directory service.

Openimsdk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69115Medium6.5—2026-08-11OpenIM Server v3.8.3 contains a missing authorization vulnerability that allows any authenticated user to access admin-only management API endpoints by submitting POST requests with a regular user bearer token to /user/get_users, /user/get…

Openlistteam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73509High7.6—2026-08-13OpenList a file list program that supports multiple storage.

Openremote · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73616Medium6.5—2026-08-13OpenRemote notification deletion endpoints fail to enforce realm boundaries, allowing any realm administrator to delete notifications belonging to other realms.

Openssl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-14456High7.5—2026-08-13Issue summary: When an OpenSSL QUIC server (Listener SSL object) processes valid QUIC Initial packets for unknown destination connection IDs, it can allocate and queue new incoming channels without enforcing any limit.

Openzeppelin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73645———2026-08-13OpenZeppelin Confidential Contracts is an experimental library for developing applications on the Zama fhEVM.

Paoltaia · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19091High8.1—2026-08-11The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_revision function in all versions up to…

Papersgpt · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73032Critical9.6—2026-08-11PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts.

Pegasystems · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-10754———2026-08-10Pega Platform versions 8.5.0 through 25.1.2 are affected by an improper validation of cryptographic signatures that may allow an attacker to bypass security controls.

Pete Nelson · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66443High7.5—2026-08-13Unauthenticated Sensitive Data Exposure in REST API Log <= 1.7.1 versions.

Phialsbasement · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19373Medium5.3—2026-08-09A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1.0.0.

Phoenixframework · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64941———2026-08-10URL Redirection to Untrusted Site ('Open Redirect') vulnerability in phoenixframework phoenix_live_view allows an attacker to send a victim's browser to an origin of the attacker's choosing via a :to value containing ASCII tab, LF or CR.

Phpgurukul · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19207Low2.4—2026-08-07A security vulnerability has been detected in PHPGurukul Company Visitor Management System 1.0.

Picocms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72574Medium6.1—2026-08-10A host header injection vulnerability in picocms/Pico through 2.1.4 allows an unauthenticated remote attacker to control the origin of JavaScript and CSS assets loaded by the default theme.

Pimzino · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19336Medium5.3—2026-08-09A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6.

Ping Identity · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-32736———2026-08-10Cross-Site Request Forgery weaknesses in the Administrative Console of PingFederate versions before version 13.1 may allow actors to perform unauthorized actions via specially-crafted links triggered by administrators with active sessions.

Pinry · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72606High7.5—2026-08-11A server-side request forgery vulnerability in Pinry through 2.1.13 allows unauthenticated remote attackers to make the server issue HTTP requests to arbitrary internal or external hosts via the pin-from-URL feature.

Pixelyoursite · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18059Medium5.3—2026-08-01The PixelYourSite – Your smart PIXEL (TAG) & API Manager plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 11.2.1 via the getWooPurchaseEventParams.

Pluginops · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27536High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in MailChimp Subscribe Forms <= 4.3.3 versions.

Poco-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19019Medium4.8—2026-08-06A security flaw has been discovered in poco-ai poco-agent up to 0.5.4.

Poesis · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18856Medium4.7—2026-08-05A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33.

Portainer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72533High8.8—2026-08-11An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypass Docker proxy authorization checks via non-canonical URL normalization, defeating all authorization middleware.

Power Sofware · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19189High7.8—2026-08-07A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0.

Powerfulwp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66468High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Local Delivery Drivers for WooCommerce <= 3.0.0 versions.

Prefecthq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72538High8.8—2026-08-11An argument injection vulnerability in PrefectHQ Prefect through 3.8.2 allows authenticated users to achieve remote code execution via the git_clone pull step branch field.

Pronamic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16635High8.8—2026-08-01The Pronamic Pay plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.1.0 This is due to the `maybe_update_user_role()` function passing an attacker-controlled Gravity Forms field value (`$lea…

Properfraction · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66703Medium6.5—2026-08-06Contributor Cross Site Scripting (XSS) in MailOptin <= 1.2.78.0 versions.

Property Hive · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65560High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= 2.5.48 versions.

Pulsetto · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18844High8.1—2026-08-11The firmware of the Pulsetto Vagus Nerve Stimulator accepts several undisclosed commands over its Bluetooth Low Energy (BLE) interface.

Pv-bhat · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19368Low3.3—2026-08-09A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0.

Python · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4360Medium5.3—2026-06-30In the Tarfile.extract() function, the filter parameter is not passed properly when extracting hardlinks.

Qode · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65546Critical9.3—2026-08-06Unauthenticated SQL Injection in Qode Tours <= 3.1.3.1 versions.

Qos.ch Sarl · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19880———2026-08-14Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java (logback-classic module) allows path-traversal vulnerability.

Qstudio · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65552Critical9.8—2026-08-06Subscriber PHP Object Injection in Export User Data <= 2.2.6 versions.

Quarka · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27544Critical10.0—2026-08-13Unauthenticated Remote Code Execution (RCE) in QA Analytics <= 5.2.0.0 versions.

Quarkus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50559High7.5—2026-06-19Quarkus is a Java framework for building cloud-native applications.

Quasarframework · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73647Medium5.6—2026-08-13Quasar Framework is a framework for building high-performance Vue.js user interfaces.

Rails · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73648———2026-08-13rails-html-sanitizer is responsible for sanitizing HTML fragments in Rails applications.

Raineorshine · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73035Medium4.3—2026-08-10npm-check-updates through 23.0.2, fixed in commit b554b84, contains a terminal escape sequence injection vulnerability that allows an attacker to embed arbitrary terminal control characters in a dependency's package.json homepage or reposi…

Raisecom · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19764High7.3—2026-08-14A vulnerability was identified in Raisecom Communication Command and Dispatch Management Platform up to 7.6.5.

Rank Math Seo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66702High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <= 1.0.274.1 versions.

Razer · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18606High7.8—2026-08-03A weakness has been identified in Razer RzUpdateService 1.10.14.0.

Rconfig · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64826Medium6.5—2026-08-12rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the download_export() method.

Regclient · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49349Medium6.8—2026-08-12regclient is a Docker and OCI Registry Client in Go.

Revolutbusiness · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73353Medium5.3—2026-08-13Unauthenticated Broken Access Control in Revolut Gateway for WooCommerce < 4.22.10 versions.

Rockiger · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66455Medium6.0—2026-08-13Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.

Roland Barker · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28189High7.4—2026-08-13Unauthenticated Arbitrary File Deletion in Participants Database <= 2.7.8.4 versions.

Rtcamp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28185Critical9.8—2026-08-13Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.

Rustdesk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-57850High8.3—2026-07-10RustDesk before 1.4.9 does not enforce a session's authorized connection scope on the server side, so a peer granted a limited session type (FileTransfer, PortForward, ViewCamera, or Terminal) can send control messages and login options re…

Saad Iqbal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66425Medium6.5—2026-08-06Unauthenticated Broken Authentication in Gutena Forms – Contact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Builder <= 1.9.0 versions.

Saigroup · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19383Medium4.7—2026-08-10A security vulnerability has been detected in saithink/saigroup SaiAdmin up to 5.0.1.

Sangfor · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18641High7.3—2026-08-03A vulnerability was determined in Sangfor Operation and Maintenance Security Management System up to 3.0.13.

Scriptsbundle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66691Critical9.8—2026-08-13Unauthenticated Broken Access Control in Nokri <= 1.6.6 versions.

Seerr-team · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73291High7.1—2026-08-12Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby.

Sendpulse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13362Medium6.4—2026-08-01The SendPulse Email Marketing Newsletter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via _sp_form_code Post Meta in all versions up to, and including, 2.2.5 due to insufficient input sanitization and output escaping.

Seo Squirrly · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66664High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <= 14.2.0 versions.

Seraphinitesoft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17532Medium6.1—2026-08-05The Seraphinite Accelerator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions up to, and including, 2.29.15.

Sergey · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65507Critical9.8—2026-08-06Unauthenticated Privilege Escalation in AIWU <= 1.5.6 versions.

Sevenspark · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5116Medium4.4—2026-08-05The Contact Form 7 – Dynamic Text Extension plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 5.0.5.

Sh1zen · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5581Critical9.1—2026-08-05The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to unauthorized arbitrary media deletion in all versions up to, and including, 1.1.8.

Shabti · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15606High8.8—2026-08-11The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9.

Shamalli · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28142Critical9.3—2026-08-13Unauthenticated SQL Injection in Web Directory Free <= 1.7.13 versions.

Shandong Hoteam · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18854High7.3—2026-08-05A vulnerability has been found in Shandong Hoteam PDM Product Data Management System up to 8.3.10.

Shapedplugin · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18988Medium6.4—2026-08-08The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordionTitleTag' block attribute in versions up to, and including, 3.1.8.

Shenzhen Aitemi · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19348Critical9.8—2026-08-09A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea7890a.

Shepherdwind · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73649Critical9.8—2026-08-13Velocity.js is a JavaScript implementation of the Apache Velocity template engine.

Significant-gravitas · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72922High8.2—2026-08-11AutoGPT is a workflow automation platform for creating, deploying, and managing continuous artificial intelligence agents.

Signify · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73669High7.3—2026-08-13The Signify Philips Hue Bridge Pro firmware embeds a Mosquitto MQTT broker service that listens on all network interfaces without authentication.

Smepay · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66461High7.5—2026-08-13Unauthenticated Broken Access Control in SMEPay: UPI Gateway for WooCommerce <= 1.0.5 versions.

Smewebify · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49827Critical9.8—2026-08-13WebErpMesv2 is a Resource Management and Manufacturing execution system Web for industry.

Smp46 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49467High8.8—2026-08-12Pingvin Share X is a secure and easy self-hosted file sharing platform.

Smub · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15452Medium4.7—2026-08-05The Smash Balloon Social Photo Feed – Easy Social Feeds Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Query String in all versions up to, and including, 6.11.3 due to insufficient input sanitiz…

Snowflake · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19594High8.1—2026-08-12Insufficient input sanitization in Snowflake Python API (`snowflake.core`) versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal (CWE-22) via unencoded `..` identifier path seg…

Snstheme · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28154High7.1—2026-08-13Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in snstheme Samex - Clean, Minimal Shop WooCommerce WordPress Theme and snstheme M.Anh - Fashion WooCoommerce WordPress Theme allows Reflect…

Soflyy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65551High7.5—2026-08-06Missing Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrectly Configured Access Control Security Levels.

Solacewp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27535High7.1—2026-08-13Subscriber Broken Access Control in Solace Extra <= 1.6.0 versions.

Solutioned · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65541High7.3—2026-08-06Unauthenticated Broken Access Control in Staff Training <= 1.0.7 versions.

Sonalsinha21 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6972Medium6.4—2026-08-05The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `chart_size` attribute of the `skillwrapper` shortcode in all versions up to, and including, 2.6.

Sooperset · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73498High7.7—2026-08-12MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira).

Space Codes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66459Medium6.5—2026-08-13Unauthenticated Broken Access Control in AI for SEO <= 2.4.2 versions.

Spacebar Server · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69114Medium6.5—2026-08-10Spacebar Server before commit 8d126f4 contains a cross-channel message deletion vulnerability in the single-delete and bulk-delete message handlers that fail to scope message queries to the requested channel.

Spacetime · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11983Medium5.3—2026-08-06The Ad Inserter – Ad Manager & AdSense Ads plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.8.16 due to a missing capability check in the `ai_ajax` function.

Spip · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66738High8.8—2026-08-10SPIP before 4.4.18 contains a code injection vulnerability in SQLite-backed installations.

Square · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45799High7.5—2026-07-17Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java.

Squidfunk · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73295Medium5.4—2026-08-12Material for MkDocs is a powerful documentation framework built on top of MkDocs.

Stanford Nlp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72742High8.6—2026-08-11DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url…

Strategy11 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16230Critical9.8—2026-08-11The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, and including, 3.0.6.

Stylemixthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28145Medium5.3—2026-07-31Insufficient Verification of Data Authenticity vulnerability in StylemixThemes MasterStudy LMS allows Manipulating User State.

Sucuri · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73033Medium6.5—2026-08-10Sucuri Security WordPress plugin through version 2.7.3 contains a path traversal vulnerability in the pageIntegritySubmission() method in src/integrity.lib.php that allows authenticated administrators to delete arbitrary files by supplying…

Sunnyadn · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50029Medium5.3—2026-08-14js-toml is a TOML parser for JavaScript, Prior to version 1.1.2, the interpreter checks whether a key already exists in a parser-built container with `if (object[key])` instead of `if (key in object)`.

Supercleanse · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5062Medium4.9—2026-08-05The PrettyLinks – Affiliate Links, Link Branding, Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL Injection via the 's' (search) parameter on the Pretty Links listing page in all versions up to…

Superpwa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5108Medium4.4—2026-08-05The Super Progressive Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` setting in all versions up to, and including, 2.2.43.

Supsystic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27537Medium6.5—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Popup by Supsystic <= 1.11.2 versions.

Supsysticcom · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18322High8.8—2026-08-05The Smart Popup by Supsystic plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.12.0.

Surecart · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32548Medium5.3—2026-08-06Unauthenticated Broken Access Control in SureCart <= 4.6.2 versions.

Svg · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73650High8.2—2026-08-13SVGO, short for SVG Optimizer, is a Node.js library and command-line application for optimizing SVG files.

Swing Music · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72605High7.5—2026-08-11A missing authentication vulnerability in Swing Music 3.0.0 allows unauthenticated remote attackers to create arbitrary user accounts via the POST /auth/profile/create endpoint.

Syed Balkhi · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28141High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <= 4.2.3 versions.

Systerel · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18790Low3.3—2026-08-04A weakness has been identified in Systerel S2OPC up to 1.7.3.

Tangiblewp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66654Medium6.0—2026-08-13Subscriber Server Side Request Forgery (SSRF) in Vehica Core <= 1.0.104 versions.

Taubyte · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69119High8.3—2026-08-11Taubyte Tau v1.1.10 contains a missing authorization vulnerability in the services/auth HTTP service that allows any authenticated user to read or permanently delete another tenant's project by supplying an arbitrary project ID to the GET…

Techarohq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-62314Medium5.8—2026-07-15Anubis is a Web AI Firewall Utility that challenges users' connections in order to protect upstream resources from scraper bots.

Techeshta · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7726Medium6.5—2026-08-05The Layouts for WPBakery plugin for WordPress is vulnerable to unauthorized actions due to a missing capability check on the `Layouts_WPB_Remote::template_sync()` callback registered via `wp_ajax_nopriv_handle_sync` in all versions up to…

Temporal Technologies, Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65655———2026-08-11When OAuth authentication is enabled and browser-facing TLS terminates at a reverse proxy that forwards the callback to Temporal UI Server over HTTP, affected versions derive authentication-cookie Secure attributes from the proxy-to-server…

Tencent · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72565Critical9.8—2026-08-10A SQL injection vulnerability in Tencent APIJSON through 8.1.8 allows unauthenticated remote attackers to bypass per-table access control and read arbitrary database tables via the Map-form @having operator.

Testlinkopensourcetrms · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70561Medium6.5—2026-08-07TestLink 1.9.20 and prior contains an insecure direct object reference vulnerability that allows any authenticated user, including low-privilege guest accounts, to read arbitrary attachments by supplying an integer attachment ID to the att…

Textplus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18604Medium5.3—2026-08-03A vulnerability was identified in textPlus Text Message and Call App up to 8.3.5 on Android.

The Gnu C Library · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-6791———2026-08-10When expanding paths that begin with a tilde (~) followed by a username, the internal parse_tilde function extracts the username to determine the user's home directory.

The Netbsd Foundation · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-53996High7.0—2026-08-12NetBSD's hdaudio(4) driver in sys/dev/hdaudio/hdaudio.c contains a missing access control vulnerability that allows unprivileged local attackers to invoke the HDAUDIO_FGRP_SETCONFIG ioctl without elevated permissions by exploiting the abse…

Themegrill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-9266Medium4.3—2026-08-06The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueue_scripts() function in all versions up to, and including, 1.5.3.

Themeisle · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61960High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in WP Full Stripe Free <= 8.5.0 versions.

Themepoints · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66471Medium6.5—2026-08-13Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.

Themerex · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65573Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Abelle <= 1.22 versions.

Themeruby · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-4431Critical9.1—2026-08-05The Easy Post Submission plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `create_post()` function in all versions up to, and including, 2.3.0.

Thimpress · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66458Critical9.3—2026-08-13Unauthenticated SQL Injection in RealPress <= 1.1.2 versions.

Thrive Themes Coupon · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66694High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <= 10.9.3.1 versions.

Tigroumeow · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15988High8.8—2026-08-01The AI Engine – The Chatbot, AI Framework & MCP for WordPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.6.5 This is due to missing or incorrect nonce validation on the reauth_f…

Timstrifler · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12231Medium6.4—2026-08-02The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘ exad_infobox_image’ parameter in all versions up to, and including, 2.7.9.8 due to insufficient input sanitization and output es…

Tinyhumansai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-55743Critical9.6—2026-06-17The shell tool command allowlist in the SecurityPolicy of OpenHuman desktop agent through 0.54.0 (default Supervised security policy) can be bypassed to execute arbitrary OS commands with the privileges of the desktop user.

Toast Plugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66464Medium6.5—2026-08-13Unauthenticated Broken Access Control in Internal Link Optimiser <= 5.2.7 versions.

Tooljet · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73068Medium5.9—2026-08-11ToolJet is the open-source foundation am AI-native platform for building and deploying internal tools, workflows and AI agents.

Tp Link Systems Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12001———2026-07-27A hardcoded credential vulnerability exists in the firmware of multiple TP-Link routers (TL-WR845N v4, TL-WR850N v3, TL-WR902AC v4, Archer C20 v6 & Archer MR200 v5).
CVESeverityCVSSKEVPublishedSummary
CVE-2026-15141Medium5.7—2026-08-12The web interface of the affected device relies on the HTTP referrer header as part of request validation.  Requests containing empty Referer value, or omitting the Referer header entirely, may be accepted and processed due to insufficient…

Trainingbusinesspros · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11454Medium6.5—2026-08-05The Groundhogg — CRM, Newsletters, and Marketing Automation plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 4.5.2 via the GET /wp-json/gh/v4/contacts/<id> REST endpoint.

Trippo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18788High7.3—2026-08-04A security flaw has been discovered in Trippo ResponsiveFilemanager up to 9.14.0.

Ttttonyhe · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18968Medium4.3—2026-08-06A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45a2fcc81f6086751d8af124658720e8f8f.

Tursodatabase · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48790Medium5.5—2026-08-11Turso CLI is the command line interface (CLI) to the open-source database Turso.

Twentyhq · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73069Critical9.1—2026-08-11Twenty is an open-source CRM (customer relationship management) platform.

Tychesoftwares · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65559High7.2—2026-08-06Shop manager Privilege Escalation in Order Delivery Date for WooCommerce <= 4.6.0 versions.

Typemill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-44401Medium4.8—2026-08-10Typemill CMS version 2.x contains a persistent cross-site scripting vulnerability in the Markdown parser extension that allows authenticated users with theme-configuration access to inject malicious JavaScript URIs by supplying unsanitized…

Typeorm · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73651Medium5.7—2026-08-13TypeORM is a TypeScript and JavaScript ORM for Node.js that supports PostgreSQL, MySQL, MariaDB, SQLite, SQL Server, Oracle, and other databases.

Typo3 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19418———2026-08-11The referrer enforcement introduced with TYPO3-CORE-SA-2020-006 (CVE-2020-11069) became ineffective in TYPO3 v13.0, where TYPO3 CMS started serving the backend and Install Tool applications from the site's main entry script instead of the…

Uasoft · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19376High7.3—2026-08-10A vulnerability has been found in Uasoft Badaso 3.0.0-alpha.

Ultimate Fosters · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-70560Medium5.4—2026-08-12Ultimate POS (Stock Management & Point of Sale) contains a stored cross-site scripting vulnerability that allows low-privileged authenticated attackers to inject arbitrary HTML and script markup by setting a malicious payload in the user f…

Umarbajwa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15052High7.2—2026-08-01The MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Form Field Values in all versions up to, and including, 4.3.3 due to insufficient input sanitiza…

Universal Software Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-1621Medium5.3—2026-08-14Authentication bypass by primary weakness vulnerability in Universal Software Inc.

V-secure · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19195High7.8—2026-08-07A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39.

Vantage6 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73652———2026-08-13vantage6 is an open-source infrastructure for privacy preserving analysis.

Vibesurf-ai · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18770High7.3—2026-08-04A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63061300bf60fb176e1f57e0.

Vimeodev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65543High7.5—2026-08-06Subscriber Sensitive Data Exposure in Vimeo <= 1.2.2 versions.

Vitest-dev · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73653Critical9.4—2026-08-13Vitest is a testing framework powered by Vite.

Vladimir Garagulya · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66686Medium6.5—2026-08-06Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Collector (Database Cleanup) <= 0.14 versions.

Vmoranv · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49856Medium4.3—2026-08-13@jshookmcp/jshook is an MCP server that gives AI agents tools for JavaScript analysis and security research.

Vxcontrol · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18593Medium5.6—2026-08-03A weakness has been identified in vxcontrol PentAGI up to 2.1.0.

Watchguard · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-13079High7.8—2026-07-03A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed.

Wbolt.com · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65553Critical10.0—2026-08-06Unauthenticated Remote Code Execution (RCE) in Spider Analyser &#8211; WordPress搜索引擎蜘蛛分析插件 <= 2.1.3 versions.

Web-platform-dx · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-45819———2026-08-13baseline-browser-mapping 2.x before 2.11.0 calls process.exit() instead of throwing on invalid or conflicting input parameters, and can trigger immediate process termination, causing denial of service.

Webappick · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66709Critical9.1—2026-08-06Shop manager Remote Code Execution (RCE) in CTX Feed <= 6.6.42 versions.

Webaways · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15450High8.1—2026-08-01The Nex Forms – Ultimate Form Builder – Lite plugin for WordPress is vulnerable to arbitrary file deletion via path traversal in versions up to, and including, 9.2.3.

Webhosting4ugr · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61978Medium6.5—2026-08-13Unauthenticated Broken Access Control in Secure Card Gateway for ePay Paycenter (Piraeus Bank) <= 1.0.32 versions.

Webilia Inc. · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61969Critical9.3—2026-08-13Unauthenticated SQL Injection in Listdom <= 5.6.0 versions.

Webocoders · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7456Medium6.5—2026-08-05The Udimi Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the `ajax_disconnect()` function in all versions up to, and including, 3.2.

Webpros · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-64639———2026-08-12Incorrect database cloning process in Plesk from 18.0.52 before 18.0.79.6 and 18.0.80.2 allows a low-privileged user (customer, reseller) to execute arbitrary code on behalf of the database server administrator.

Wei-shaw · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73079High8.5—2026-08-11Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions.

Welcart · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-27539High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Welcart e-Commerce <= 2.11.31 versions.

Westerndeal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16614Medium4.9—2026-08-01The GSheetConnector – CF7 Google Sheets Connector with Real-Time Sync plugin for WordPress is vulnerable to generic SQL Injection via the 's' parameter in all versions up to, and including, 5.2.1 due to insufficient escaping on the user su…

Wg-easy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72603Critical9.9—2026-08-11An OS command injection vulnerability in wg-easy 15.3.0 allows users with the clients.create permission to execute arbitrary commands as root by injecting newline-delimited WireGuard PostUp directives into the client name field.

Win Men Intermational · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19425Critical9.8—2026-08-11Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability.

Wisemattic · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7529High7.5—2026-08-05The wiseCampaign – WooCommerce Conversions Made Easy plugin for WordPress is vulnerable to unauthorized modification and disclosure of data due to every one of its REST API endpoints being registered with `permission_callback => '__return_…

Wishlist Member · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-12949Critical9.8—2026-08-14The Wishlist Member plugin for WordPress is vulnerable to Account Takeover via Insufficient Verification of Data Authenticity in versions up to and including 3.34.1.

Wolfsoftwaresystemsltd · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73519Critical9.8—2026-08-12WolfStack before 25.9.2 contains a hard-coded cluster-authentication secret compiled into every build and published as a constant in src/auth/mod.rs, allowing remote unauthenticated attackers to bypass authentication by supplying this valu…

Wongcyrus · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-19360Medium4.7—2026-08-09A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3.

Woocommerce · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2025-14073Medium5.3—2026-08-01The WooCommerce PayPal Payments plugin for WordPress is vulnerable to Sensitive Information Disclosure due to an Insecure Direct Object Reference in all versions up to, and including, 3.3.2 via the `enqueue_paypal_insights_script_on_order_…

Woompaloompa · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66431High7.5—2026-08-13Unauthenticated Broken Access Control in Bitcoin Lightning Payment Gateway for WooCommerce (via CLINK) <= 1.0.7 versions.

Wp Umbrella · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66642Medium5.4—2026-08-10Cross-Site Request Forgery (CSRF) vulnerability in WP Umbrella allows Cross Site Request Forgery.

Wp Zone · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66683Medium5.3—2026-08-06Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript <= 2.0.16 versions.

Wp-buy · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28175High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Visitors Traffic Real Time Statistics <= 8.11 versions.

Wp.insider · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66712High7.5—2026-08-06Unauthenticated Broken Access Control in Simple Membership <= 4.7.8 versions.

Wpchill · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-16144High8.1—2026-08-01The Kali Forms — Contact Form & Drag-and-Drop Builder plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.4.20 via the _save_data function.

Wpdatatables · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65509High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in wpDataTables <= 7.5.1 versions.

Wpdeveloper · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-61961High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in EmbedPress <= 4.5.6 versions.

Wpdreams · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28139Critical9.8—2026-08-06Unauthenticated PHP Object Injection in Ajax Search Lite <= 4.14.4 versions.

Wpeverest · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-73403Medium5.3—2026-08-13Unauthenticated Broken Access Control in User Registration <= 5.2.6 versions.

Wpjobportal · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-65569High8.5—2026-08-06Subscriber SQL Injection in WP Job Portal <= 2.5.6 versions.

Wpkube · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-32469Medium5.3—2026-08-06Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <= 7.6.0 versions.

Wplakeorg · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17580Medium6.5—2026-08-01The Advanced Views – Display Custom Fields (ACF, Pods, MetaBox), Posts, CPT and Woo Products anywhere in Gutenberg, Elementor, Divi, Beaver… plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and in…

Wpswings · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-15414High8.8—2026-08-01The Subscriptions for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.0.0.

Wpvividplugins · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-17555Medium4.9—2026-08-01The WPvivid Backup & Migration plugin for WordPress is vulnerable to SQL Injection via the export_data parameter in versions up to, and including, 0.9.131.

Wpweb · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-8457Critical9.8—2026-08-02The WooCommerce - Social Login plugin for WordPress is vulnerable to Authentication Bypass in all versions up to and including 2.8.7.

Wpxpo · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-5158Medium6.4—2026-08-06The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites – PostX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13 due to insufficie…

Xerrors · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-50561Critical9.4—2026-08-12Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform.

Xpf0000 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-69116Medium6.1—2026-08-10FlyEnv before 4.18.0 fails to sanitize HTML from markdown rendering and AI chat content passed to Vue v-html directives.

Xplodedthemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66440High7.1—2026-08-06Unauthenticated Cross Site Scripting (XSS) in WPIDE – File Manager & Code Editor <= 3.5.7 versions.

Xpro · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-7105Medium4.3—2026-08-05The Xpro Addons plugin for WordPress is vulnerable to unauthorized creation of data due to a missing capability check on the `get_menu_content_editor()` function in all versions up to, and including, 1.5.1.

Xwiki · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-48048High7.5—2026-08-10XWiki Platform is a generic wiki platform.

Xwp · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-11907Medium6.5—2026-08-07The Stream plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 4.2.0.

Yeqifu · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18903Medium4.3—2026-08-05A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4.

Yeswiki · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-46670Critical9.8—2026-08-11YesWiki is a wiki system written in PHP.

Yithemes · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28169Medium5.3—2026-08-06Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnifier <= 2.52.0 versions.

Ymw0407 · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-49857High7.4—2026-08-13auth-fetch-mcp is an MCP server that lets AI assistants fetch content from authenticated web pages.

Yonifre · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-28003High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Maspik – Spam blacklist <= 2.9.1 versions.

Yushine · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18959Medium5.4—2026-08-05A flaw has been found in yushine InnoShop up to 0.8.2.

Zalktis Programmas (Sia "Zalktis Programmas") · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-59109High8.8—2026-08-13SQL injection in the Zalktis accounting application via trading-partner-controlled text fields in received electronic invoices.

Zaytech · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-66700High7.1—2026-08-13Unauthenticated Cross Site Scripting (XSS) in Smart Online Order for Clover <= 1.6.1 versions.

Zhayujie · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18992Medium6.3—2026-08-06A vulnerability was detected in zhayujie CowAgent up to 2.1.1.

Zombodroid · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-18853Medium5.3—2026-08-05A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android.

Zoneminder · 1 CVE

CVESeverityCVSSKEVPublishedSummary
CVE-2026-72556High8.8—2026-08-11A remote code execution vulnerability in ZoneMinder 1.39.17 allows any authenticated user to execute OS commands by exploiting a broken permission check in the Filter class.