By publication date

Exploited and new serious CVEs: August 2026

4,777 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 11 of 48

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-40145No exploit	Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utilitybeyondtrust · endpoint privilege management (windows deployment) · CWE-1220 Local privilege escalation	High7.1	—	0.1%	Aug 17, 2026
35Monitor	CVE-2026-61666No exploit	websocket-driver: Denial of service via malformed Host headerfaye · websocket-driver-ruby · CWE-248 Pre-auth	High8.9	—	0.4%	Aug 17, 2026
35Monitor	CVE-2026-68518No exploit	Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstructionnicolargo · glances · CWE-78 RCE Command injection	High8.8	—	0.1%	Aug 17, 2026
31Monitor	CVE-2026-34398No exploit	FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbenchfreecad · freecad · CWE-95 RCE	High7.8	—	0.2%	Aug 17, 2026
31Monitor	CVE-2026-34399No exploit	FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Pagefreecad · freecad · CWE-95 RCE	High7.8	—	0.1%	Aug 17, 2026
28Monitor	CVE-2026-34789No exploit	FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restorefreecad · freecad · CWE-94 RCE	High7.0	—	0.1%	Aug 17, 2026
28Monitor	CVE-2026-35219No exploit	Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklistbudibase · budibase · CWE-918 SSRF	High7.1	—	0.4%	Aug 17, 2026
39Monitor	CVE-2026-39254No exploit	Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dyCWE-120 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Aug 17, 2026
39Monitor	CVE-2026-39255No exploit	Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dyCWE-120 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Aug 17, 2026
28Monitor	CVE-2026-40506No exploit	OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.phpopenemr · openemr · CWE-22 Path traversal Open redirect	High7.0	—	0.6%	Aug 17, 2026
28Monitor	CVE-2026-54356Proof of concept	Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`budibase · budibase · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Aug 17, 2026
32Monitor	CVE-2026-63409No exploit	Deskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow clientdeskflow · deskflow · CWE-125 Pre-auth Memory safety	High8.2	—	0.4%	Aug 17, 2026
33Monitor	CVE-2026-64657No exploit	Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQLbudibase · budibase · CWE-89 RCE SQL injection	High8.4	—	0.4%	Aug 17, 2026
36Monitor	CVE-2026-65640Proof of concept	WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher.wordpress · wordpress · CWE-434 RCE File upload	High8.8	—	1.9%	Aug 17, 2026
39Monitor	CVE-2026-67917No exploit	zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Aug 17, 2026
39Monitor	CVE-2026-67926No exploit	An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat ModuleCWE-94 pre-auth RCE	Critical9.8	—	0.8%	Aug 17, 2026
39Monitor	CVE-2026-67965No exploit	An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login functionCWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	Aug 17, 2026
39Monitor	CVE-2026-67966No exploit	Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root shCWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 17, 2026
34Monitor	CVE-2026-71518Proof of concept	Typemill < 2.26.0 Authorization Bypass via Media File Download Routetypemill · typemill · CWE-863 Pre-auth Broken access control (IDOR)	High8.7	—	0.5%	Aug 17, 2026
34Monitor	CVE-2026-73410No exploit	Budibase: SSRF via DNS rebinding in the REST datasource integrationbudibase · budibase · CWE-367 SSRF Race condition	High8.5	—	0.2%	Aug 17, 2026
34Monitor	CVE-2026-75105No exploit	phpIPAM Temporary Subnet Share Information Disclosure via Address Parameterphpipam · phpipam · CWE-639 Pre-auth Broken access control (IDOR)	High8.7	—	0.4%	Aug 17, 2026
34Monitor	CVE-2026-75482No exploit	SWE-agent Trajectory Inspector Path Traversal File Disclosureswe-agent · swe-agent · CWE-22 Pre-auth Path traversal	High8.7	—	0.7%	Aug 17, 2026
35Monitor	CVE-2026-9771No exploit	Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalationzephyrproject · zephyr · CWE-822 Local privilege escalation	High8.8	—	0.1%	Aug 17, 2026
31Monitor	GHSA-fhgh-wq4q-r37xNo exploit	uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is setGo · gitlab.com/uniget-org/cli · CWE-347 Weak crypto	High7.8	—	—	Aug 17, 2026
32Monitor	CVE-2026-33437No exploit	Stirling PDF: Stored XSS in Info Summarystirling-tools · stirling-pdf · CWE-79 Pre-auth XSS	High8.1	—	0.3%	Aug 17, 2026
33Monitor	CVE-2026-46345No exploit	compliance-trestle - jinja has an Arbitrary File Write via Path Traversaloscal-compass · compliance-trestle · CWE-22 Path traversal	High8.4	—	0.2%	Aug 17, 2026
39Monitor	CVE-2026-42163No exploit	Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Aug 17, 2026
39Monitor	CVE-2026-50770No exploit	An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.CWE-269 Pre-auth	Critical9.8	—	0.6%	Aug 17, 2026
39Monitor	CVE-2026-50772No exploit	An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password resetCWE-94 pre-auth RCE	Critical9.8	—	0.6%	Aug 17, 2026
36Monitor	CVE-2026-51346No exploit	SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obtaCWE-89 pre-auth RCE SQL injection	Critical9.1	—	0.7%	Aug 17, 2026
34Monitor	CVE-2026-54284No exploit	sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps triggerandialbrecht · sqlparse · CWE-407 Pre-auth	High8.7	—	0.3%	Aug 17, 2026
35Monitor	CVE-2026-43794No exploit	A memory corruption issue was addressed with improved memory handling.apple · safari · CWE-119 Pre-auth Memory safety	High8.8	—	0.4%	Aug 17, 2026
32Monitor	CVE-2026-45790No exploit	Dokploy: Invitation Role Escalation Allows Organization Takeoverdokploy · dokploy · CWE-269	High8.0	—	0.4%	Aug 17, 2026
36Monitor	CVE-2026-51977No exploit	An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privilegeCWE-321 Pre-auth Hard-coded credentials	Critical9.1	—	0.4%	Aug 17, 2026
21Monitor	CVE-2026-64788Proof of concept	The issue was addressed with improved memory handling.apple · ipados · CWE-119 Pre-auth Memory safety	Medium5.4	—	0.2%	Aug 17, 2026
26Monitor	CVE-2026-65330Proof of concept	The issue was addressed with improved memory handling.apple · ipados · CWE-119 Pre-auth Memory safety Denial of service	Medium6.5	—	0.4%	Aug 17, 2026
30Monitor	CVE-2026-65343Proof of concept	A use after free issue was addressed with improved memory management.apple · ipados · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Aug 17, 2026
35Monitor	CVE-2026-65346No exploit	An integer overflow was addressed with improved input validation.apple · ipados · CWE-190 pre-auth RCE Memory safety	High8.8	—	0.5%	Aug 17, 2026
26Monitor	CVE-2026-65349Proof of concept	An out-of-bounds read was addressed with improved input validation.apple · ipados · CWE-125 Memory safety	Medium6.6	—	0.1%	Aug 17, 2026
17Monitor	CVE-2026-65351Proof of concept	This issue was addressed through improved state management.apple · safari · CWE-703 Pre-auth Denial of service	Medium4.3	—	0.6%	Aug 17, 2026
39Monitor	CVE-2026-67854No exploit	SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary codeCWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.7%	Aug 17, 2026
39Monitor	CVE-2026-67868No exploit	A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems processCWE-122 pre-auth RCE Memory safety	Critical9.8	—	1.0%	Aug 17, 2026
28Monitor	CVE-2026-69148No exploit	MLflow: CreateModelVersion source validation does not check READ permission on referenced run_idmlflow · mlflow · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Aug 17, 2026
33Monitor	CVE-2026-9816No exploit	Insufficient server-side validation of board member role fields permits privilege escalationmattermost · mattermost server · CWE-863 Broken access control (IDOR)	High8.3	—	0.3%	Aug 17, 2026
30Monitor	CVE-2026-59893No exploit	sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)andialbrecht · sqlparse · CWE-1333 Pre-auth Denial of service	High7.5	—	0.3%	Aug 17, 2026
35Monitor	CVE-2026-62982No exploit	Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injectionnicolargo · glances · CWE-78 RCE Command injection	High8.8	—	0.1%	Aug 17, 2026
28Monitor	CVE-2026-68519No exploit	Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)nicolargo · glances · CWE-78 RCE Command injection	High7.1	—	0.1%	Aug 17, 2026
34Monitor	CVE-2026-71491No exploit	sqlparse: Quadratic O(n²) DoS in group_commentsandialbrecht · sqlparse · CWE-400 Pre-auth Denial of service	High8.7	—	0.2%	Aug 17, 2026
34Monitor	CVE-2026-71979No exploit	INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsingindilib · indi · CWE-121 Pre-auth Memory safety	High8.7	—	0.5%	Aug 17, 2026
34Monitor	CVE-2026-71980No exploit	Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()belledonnecommunications · bcg729 · CWE-125 Pre-auth Memory safety	High8.7	—	0.6%	Aug 17, 2026
35Monitor	CVE-2026-73522No exploit	COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listenercovesa · open1722 · CWE-121 pre-auth RCE Memory safety	High8.7	—	3.9%	Aug 17, 2026
34Monitor	CVE-2026-73523No exploit	COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncationcovesa · open1722 · CWE-197 Pre-auth	High8.7	—	0.5%	Aug 17, 2026
40Plan	CVE-2026-74253No exploit	Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0regularlabs.com · sourcerer extension for joomla · CWE-94 pre-auth RCE	Critical10.0	—	0.3%	Aug 17, 2026
37Monitor	CVE-2026-74254No exploit	Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5joomlack.fr · page builder ck extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Aug 17, 2026
35Monitor	CVE-2026-12553No exploit	HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Writehp inc. · web jetadmin · CWE-787 Pre-auth Memory safety	High8.9	—	0.4%	Aug 17, 2026
31Monitor	CVE-2026-50773No exploit	An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll CWE-427	High7.8	—	0.2%	Aug 17, 2026
39Monitor	CVE-2026-50774No exploit	An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.CWE-269 Pre-auth	Critical9.8	—	0.6%	Aug 17, 2026
31Monitor	CVE-2026-50776No exploit	Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information andCWE-22 pre-auth RCE Path traversal	High7.5	—	1.8%	Aug 17, 2026
39Monitor	CVE-2026-66792No exploit	Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clustersred hat · multicluster global hub 1.4.9 · CWE-863 Broken access control (IDOR)	Critical9.9	—	0.6%	Aug 17, 2026
34Monitor	CVE-2026-74238No exploit	TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decodertier4 · nebula · CWE-125 Pre-auth Memory safety	High8.7	—	0.4%	Aug 17, 2026
36Monitor	CVE-2026-42162No exploit	Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to anCWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Aug 17, 2026
39Monitor	CVE-2026-42164No exploit	Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows CWE-200 Pre-auth Info leak	Critical9.8	—	0.5%	Aug 17, 2026
34Monitor	CVE-2026-57485No exploit	Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpointstirling-tools · stirling-pdf · CWE-200 Info leak	High8.5	—	0.4%	Aug 17, 2026
39Monitor	CVE-2026-67678No exploit	File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary codeCWE-434 pre-auth RCE File upload	Critical9.8	—	0.7%	Aug 17, 2026
30Monitor	CVE-2026-68005No exploit	An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the hCWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Aug 17, 2026
28Monitor	CVE-2026-71553No exploit	ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoSapostrophecms · apostrophe · CWE-1321 Prototype pollution	High7.1	—	0.4%	Aug 17, 2026
28Monitor	CVE-2026-19589No exploit	Packer vulnerable to arbitrary file write via crafted plugin archive during installationhashicorp · packer · CWE-22 Path traversal	High7.1	—	0.1%	Aug 17, 2026
34Monitor	CVE-2026-47683No exploit	vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLikepatriksimek · vm2 · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Aug 17, 2026
39Monitor	CVE-2026-47686No exploit	vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCEpatriksimek · vm2 · CWE-693 RCE	Critical9.9	—	0.5%	Aug 17, 2026
39Monitor	CVE-2026-47698No exploit	vm2: Sandbox Breakout Using Dangerous Host Proto Mutatorspatriksimek · vm2 · CWE-913 pre-auth RCE	Critical9.8	—	0.9%	Aug 17, 2026
30Monitor	CVE-2026-65822No exploit	ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filterfrappe · erpnext · CWE-89 SQL injection	High7.6	—	0.4%	Aug 17, 2026
32Monitor	CVE-2026-65832No exploit	Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexingdeskflow · deskflow · CWE-125 Pre-auth Memory safety	High8.2	—	0.5%	Aug 17, 2026
39Monitor	CVE-2026-65974No exploit	ERPNext: Server-Side Template Injection leading to Remote Code Executionfrappe · erpnext · CWE-1336 RCE SSTI	Critical9.9	—	1.0%	Aug 17, 2026
39Monitor	CVE-2026-66795No exploit	Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)red hat · multicluster engine for kubernetes 2.1 · CWE-295 Weak crypto	Critical9.9	—	0.4%	Aug 17, 2026
39Monitor	CVE-2026-67967No exploit	Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code.CWE-121 pre-auth RCE Memory safety	Critical9.8	—	0.6%	Aug 17, 2026
34Monitor	CVE-2026-75103No exploit	Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeovercrawlab-team · crawlab · CWE-639 RCE Broken access control (IDOR)	High8.7	—	0.6%	Aug 17, 2026
37Monitor	CVE-2026-75106No exploit	OpnForm Editable Submission Secret Derivation via Empty Hashids Saltopnform · opnform · CWE-340 Pre-auth	Critical9.3	—	0.4%	Aug 17, 2026
28Monitor	CVE-2026-75109No exploit	Determined Missing Authorization Check on Generic Task Endpointsdetermined-ai · determined · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Aug 17, 2026
37Monitor	CVE-2026-75110No exploit	MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRETmemtensor · memos · CWE-697 Pre-auth Auth bypass	Critical9.3	—	0.6%	Aug 17, 2026
34Monitor	CVE-2026-75111No exploit	Evidently UI Path Traversal via Dataset Materialization Filenameevidentlyai · evidently · CWE-22 Pre-auth Path traversal	High8.7	—	0.5%	Aug 17, 2026
34Monitor	CVE-2026-75479No exploit	JimuReport Unauthenticated Report Listing and Share Token Disclosurejeecgboot · jimureport · CWE-306 Pre-auth Auth bypass	High8.7	—	0.4%	Aug 17, 2026
28Monitor	CVE-2026-75480No exploit	OpenViking Debug Vector Endpoints Multi-tenant Data Exposurevolcengine · openviking · CWE-863 Broken access control (IDOR)	High7.1	—	0.4%	Aug 17, 2026
34Monitor	CVE-2026-75481No exploit	SkyPilot Authentication Bypass via Service Account Role Escalationskypilot-org · skypilot · CWE-269 Auth bypass	High8.7	—	0.3%	Aug 17, 2026
28Monitor	CVE-2026-75531No exploit	Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandorapandora-analysis · pandora · CWE-79 Pre-auth XSS	High7.0	—	0.4%	Aug 17, 2026
34Monitor	CVE-2026-56677No exploit	9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpointdecolua · 9router · CWE-306 Pre-auth Auth bypass SSRF	High8.6	—	0.3%	Aug 17, 2026
70This week	CVE-2026-64849Weaponized	MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)lfprojects · mlflow · CWE-918 Pre-auth SSRF	Critical9.3	KEV	10.0%	Aug 17, 2026
30Monitor	CVE-2026-67918No exploit	Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath fuCWE-22 Pre-auth Path traversal	High7.5	—	1.3%	Aug 17, 2026
39Monitor	CVE-2026-67960No exploit	An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentControllCWE-94 pre-auth RCE	Critical9.8	—	0.7%	Aug 17, 2026
38Monitor	CVE-2026-71424No exploit	Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP serversonyx-dot-app · onyx · CWE-200 Info leak	Critical9.6	—	0.4%	Aug 17, 2026
39Monitor	CVE-2026-38165Proof of concept	A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows atCWE-94 pre-auth RCE SSTI	Critical9.8	—	0.8%	Aug 17, 2026
39Monitor	CVE-2026-67919Proof of concept	An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPlCWE-94 pre-auth RCE	Critical9.8	—	0.9%	Aug 17, 2026
31Monitor	CVE-2026-67961No exploit	An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.CWE-94 RCE	High7.8	—	0.1%	Aug 17, 2026
35Monitor	CVE-2026-75094No exploit	COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injectioncomfast · cf-n1-s · CWE-77 RCE Command injection	High8.5	—	3.1%	Aug 18, 2026
30Monitor	CVE-2026-11801Proof of concept	WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpointgwin · wpadverts – classifieds plugin · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	1.6%	Aug 18, 2026
40Plan	CVE-2026-15748Proof of concept	Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configurationwpmudev · forminator forms – contact form, payment form & custom form builder · CWE-434 pre-auth RCE File upload	Critical9.8	—	4.0%	Aug 18, 2026
28Monitor	CVE-2026-75091No exploit	Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scriptingmdmag · quill forms \| conversational multi step forms, surveys & quizzes · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Aug 18, 2026
32Monitor	CVE-2026-15371No exploit	Velociraptor Stored XSS in URL column typesrapid7 · velociraptor · CWE-177 XSS	High8.1	—	0.3%	Aug 18, 2026
39Monitor	CVE-2026-34884No exploit	Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Serverapache · skywalking mcp · CWE-918 Pre-auth SSRF	Critical9.8	—	0.6%	Aug 18, 2026
34Monitor	CVE-2026-23929No exploit	Prototype pollution leading to stored XSSzabbix · zabbix · CWE-1321 XSS Prototype pollution	High8.5	—	0.2%	Aug 18, 2026
30Monitor	CVE-2026-23933No exploit	Hardcoded session key in Zabbix 7.4zabbix · zabbix · CWE-259 Pre-auth Hard-coded credentials	High7.7	—	0.5%	Aug 18, 2026

CVE-2026-40145
28Monitor
Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
beyondtrust · endpoint privilege management (windows deployment)Aug 17, 2026
CVE-2026-61666
35Monitor
websocket-driver: Denial of service via malformed Host header
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
faye · websocket-driver-rubyAug 17, 2026
CVE-2026-68518
35Monitor
Glances: Command injection bypass of action-template sanitizer via cross-field shell-operator reconstruction
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
nicolargo · glancesAug 17, 2026
CVE-2026-34398
31Monitor
FreeCAD: Arbitrary Code Execution via eval() on untrusted project file metadata in BIM Workbench
HighCVSS 7.8No exploitEPSS 0%
- RCE
freecad · freecadAug 17, 2026
CVE-2026-34399
31Monitor
FreeCAD: Arbitrary Code Execution via eval() on untrusted SVG template scale field in BIM TechDraw Page
HighCVSS 7.8No exploitEPSS 0%
- RCE
freecad · freecadAug 17, 2026
CVE-2026-34789
28Monitor
FreeCAD: Arbitrary code execution via unsandboxed PyImport_ImportModule in PropertyPythonObject::Restore
HighCVSS 7.0No exploitEPSS 0%
- RCE
freecad · freecadAug 17, 2026
CVE-2026-35219
28Monitor
Budibase: SSRF in Automation Steps - Webhook, Zapier, N8N, Slack, Discord Bypass IP Blacklist
HighCVSS 7.1No exploitEPSS 0%
- SSRF
budibase · budibaseAug 17, 2026
CVE-2026-39254
39Monitor
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dy
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
Aug 17, 2026
CVE-2026-39255
39Monitor
Buffer Overflow vulnerability in SteelSeries GG (macOS) v.107.0.0 allows a remote attacker to execute arbitrary code via the libSSEdevice.dy
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
Aug 17, 2026
CVE-2026-40506
28Monitor
OpenEMR Path Traversal Arbitrary Directory Deletion via standard_tables_manage.php
HighCVSS 7.0No exploitEPSS 0%
- Path traversal
- Open redirect
openemr · openemrAug 17, 2026
CVE-2026-54356
28Monitor
Budibase authenticated arbitrary S3 signed upload URL issuance via `/api/attachments/:datasourceId/url`
HighCVSS 7.1Proof of conceptEPSS 0%
- Broken access control (IDOR)
budibase · budibaseAug 17, 2026
CVE-2026-63409
32Monitor
Deskflow: Odd-length DSOP options vector causes out-of-bounds read in Deskflow client
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
deskflow · deskflowAug 17, 2026
CVE-2026-64657
33Monitor
Budibase: Database Connector SQL Injections in PostgreSQL, MS SQL, and MySQL
HighCVSS 8.4No exploitEPSS 0%
- RCE
- SQL injection
budibase · budibaseAug 17, 2026
CVE-2026-65640
36Monitor
WordPress is vulnerable to a remote code execution vulnerability via malicious Postscript file upload by an Author level user or higher.
HighCVSS 8.8Proof of conceptEPSS 1%
- RCE
- File upload
wordpress · wordpressAug 17, 2026
CVE-2026-67917
39Monitor
zuraCast versions up to and including 0.23.7 contain a SQL injection vulnerability in the backup restore functionality.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Aug 17, 2026
CVE-2026-67926
39Monitor
An issue in JeecgBoot v.3.9.2 allows a remote attacker to execute arbitrary code via the files Parameter in JeecgBoot AI Chat Module
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Aug 17, 2026
CVE-2026-67965
39Monitor
An issue in Tneda W20E v.16.01.0.6(2782) allows a remote attacker to execute arbitrary code via the url_need_login function
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
Aug 17, 2026
CVE-2026-67966
39Monitor
Tenda W20E V16.01.0.6(2782) /goform/telnet endpoint allows unauthenticated remote attackers to activate the Telnet daemon and obtain root sh
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
Aug 17, 2026
CVE-2026-71518
34Monitor
Typemill < 2.26.0 Authorization Bypass via Media File Download Route
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
typemill · typemillAug 17, 2026
CVE-2026-73410
34Monitor
Budibase: SSRF via DNS rebinding in the REST datasource integration
HighCVSS 8.5No exploitEPSS 0%
- SSRF
- Race condition
budibase · budibaseAug 17, 2026
CVE-2026-75105
34Monitor
phpIPAM Temporary Subnet Share Information Disclosure via Address Parameter
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
phpipam · phpipamAug 17, 2026
CVE-2026-75482
34Monitor
SWE-agent Trajectory Inspector Path Traversal File Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
swe-agent · swe-agentAug 17, 2026
CVE-2026-9771
35Monitor
Missing device-pointer validation in flash_copy() syscall allows userspace privilege escalation
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
zephyrproject · zephyrAug 17, 2026
GHSA-fhgh-wq4q-r37x
31Monitor
uniget CLI: Metadata signature verification only runs when UNIGET_IGNORE_METADATA_SIGNATURE is set
HighCVSS 7.8No exploit
- Weak crypto
Go · gitlab.com/uniget-org/cliAug 17, 2026
CVE-2026-33437
32Monitor
Stirling PDF: Stored XSS in Info Summary
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- XSS
stirling-tools · stirling-pdfAug 17, 2026
CVE-2026-46345
33Monitor
compliance-trestle - jinja has an Arbitrary File Write via Path Traversal
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
oscal-compass · compliance-trestleAug 17, 2026
CVE-2026-42163
39Monitor
Mahara before 25.04.5 and 26.04.0 is vulnerable to unauthorized access to internal accounts via Learning Tools Interoperability (LTI) under
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Aug 17, 2026
CVE-2026-50770
39Monitor
An issue in Squirro Cognitive Search before v.3.14.2 allows a remote attacker to escalate privileges via a crafted request.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
Aug 17, 2026
CVE-2026-50772
39Monitor
An issue in Squirro Cognitive Search < 3.14.2 allows a remote attacker to execute arbitrary code via a crafted payload to the password reset
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Aug 17, 2026
CVE-2026-51346
36Monitor
SQL Injection vulnerability in StudIP 6.0.x before 6.0.3 and 5.4.x before 5.4.12 allows a remote attacker to execute arbitrary code and obta
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- SQL injection
Aug 17, 2026
CVE-2026-54284
34Monitor
sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
andialbrecht · sqlparseAug 17, 2026
CVE-2026-43794
35Monitor
A memory corruption issue was addressed with improved memory handling.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · safariAug 17, 2026
CVE-2026-45790
32Monitor
Dokploy: Invitation Role Escalation Allows Organization Takeover
HighCVSS 8.0No exploitEPSS 0%
dokploy · dokployAug 17, 2026
CVE-2026-51977
36Monitor
An issue in Trueview T18061 WiFi 3MP Robot Pan-Tilt Security Camera Version 1.0 allows a physically proximate attacker to escalate privilege
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
Aug 17, 2026
CVE-2026-64788
21Monitor
The issue was addressed with improved memory handling.
MediumCVSS 5.4Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
apple · ipadosAug 17, 2026
CVE-2026-65330
26Monitor
The issue was addressed with improved memory handling.
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosAug 17, 2026
CVE-2026-65343
30Monitor
A use after free issue was addressed with improved memory management.
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
apple · ipadosAug 17, 2026
CVE-2026-65346
35Monitor
An integer overflow was addressed with improved input validation.
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
apple · ipadosAug 17, 2026
CVE-2026-65349
26Monitor
An out-of-bounds read was addressed with improved input validation.
MediumCVSS 6.6Proof of conceptEPSS 0%
- Memory safety
apple · ipadosAug 17, 2026
CVE-2026-65351
17Monitor
This issue was addressed through improved state management.
MediumCVSS 4.3Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
apple · safariAug 17, 2026
CVE-2026-67854
39Monitor
SQL Injection vulnerability in Qcms v.6.0.6 allows a remote attacker to execute arbitrary code
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
Aug 17, 2026
CVE-2026-67868
39Monitor
A heap-based out-of-bounds write vulnerability exists in S2OPC 1.7.3 in server-side EventFilter handling during CreateMonitoredItems process
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
Aug 17, 2026
CVE-2026-69148
28Monitor
MLflow: CreateModelVersion source validation does not check READ permission on referenced run_id
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mlflow · mlflowAug 17, 2026
CVE-2026-9816
33Monitor
Insufficient server-side validation of board member role fields permits privilege escalation
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
mattermost · mattermost serverAug 17, 2026
CVE-2026-59893
30Monitor
sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
andialbrecht · sqlparseAug 17, 2026
CVE-2026-62982
35Monitor
Glances: Incomplete fix of CVE-2026-32608: action-template sanitizer is bypassed by nested stat values (process 'cmdline') → OS command injection
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
nicolargo · glancesAug 17, 2026
CVE-2026-68519
28Monitor
Glances: `--disable-config-exec` does not cover on-alert action commands (incomplete fix of CVE-2026-53925)
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Command injection
nicolargo · glancesAug 17, 2026
CVE-2026-71491
34Monitor
sqlparse: Quadratic O(n²) DoS in group_comments
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
andialbrecht · sqlparseAug 17, 2026
CVE-2026-71979
34Monitor
INDI indiserver 2.2.4.2 Stack Buffer Overflow via XML Tag Parsing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
indilib · indiAug 17, 2026
CVE-2026-71980
34Monitor
Belledonne Communications bcg729 1.1.2 Out-of-Bounds Read via decodeSIDframe()
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
belledonnecommunications · bcg729Aug 17, 2026
CVE-2026-73522
35Monitor
COVESA Open1722 0.9.2 Stack Buffer Overflow via avtp_to_can() in acf-can-listener
HighCVSS 8.7No exploitEPSS 3%
- pre-auth RCE
- Memory safety
covesa · open1722Aug 17, 2026
CVE-2026-73523
34Monitor
COVESA Open1722 0.9.2 Stack Memory Disclosure via acf-can-listener.c Integer Truncation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
covesa · open1722Aug 17, 2026
CVE-2026-74253
40Plan
Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 16.0.0
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
regularlabs.com · sourcerer extension for joomlaAug 17, 2026
CVE-2026-74254
37Monitor
Joomla Extension - joomlack.fr - SQL injection in Page Builder CK < 3.6.5
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
joomlack.fr · page builder ck extension for joomlaAug 17, 2026
CVE-2026-12553
35Monitor
HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
- Memory safety
hp inc. · web jetadminAug 17, 2026
CVE-2026-50773
31Monitor
An issue in CGM Germany - CompuGroup Medical CGM ISIS MED 2510.1.0.20 allows a remote attacker to execute arbtirary code via a crafted .dll
HighCVSS 7.8No exploitEPSS 0%
Aug 17, 2026
CVE-2026-50774
39Monitor
An issue in GAPTEQ Designer v.3.5 allows a remote attacker to escalate privileges via the Company Manger role.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
Aug 17, 2026
CVE-2026-50776
31Monitor
Directory Traversal vulnerability in Pronis Loisirs Billetterie CSE - < 04/2026 allows a remote attacker to obtain sensitive information and
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- Path traversal
Aug 17, 2026
CVE-2026-66792
39Monitor
Multicloud-operators-subscription: multicloud-operators-subscription: isclusteradmin() trusts user-settable annotations on managed clusters
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
red hat · multicluster global hub 1.4.9Aug 17, 2026
CVE-2026-74238
34Monitor
TIER IV Nebula 1.2.0 Heap Out-of-Bounds Read via VLP32 UDP Decoder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
tier4 · nebulaAug 17, 2026
CVE-2026-42162
36Monitor
Mahara before 25.04.5 and 26.04.0 is vulnerable to artefacts being accessible to others under certain circumstances when the file path to an
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
Aug 17, 2026
CVE-2026-42164
39Monitor
Mahara before 25.04.5 and 26.04.0 is vulnerable in the Text block/section functionality when a call is crafted in a certain way that allows
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Info leak
Aug 17, 2026
CVE-2026-57485
34Monitor
Stirling-PDF: Internal Service Account API Key Disclosure via Pipeline Endpoint
HighCVSS 8.5No exploitEPSS 0%
- Info leak
stirling-tools · stirling-pdfAug 17, 2026
CVE-2026-67678
39Monitor
File Upload vulnerability in RainyGao-Hithub DocSys v.2.02.80 allows a remote attacker to execute arbitrary code
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- File upload
Aug 17, 2026
CVE-2026-68005
30Monitor
An issue in ACME mini_httpd 1.30 and prior allows a remote attacker to cause a denial of service via the HTTP request header parser in the h
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Aug 17, 2026
CVE-2026-71553
28Monitor
ApostropheCMS: 2nd-order prototype pollution via PATCH leading to single-request persistent DoS
HighCVSS 7.1No exploitEPSS 0%
- Prototype pollution
apostrophecms · apostropheAug 17, 2026
CVE-2026-19589
28Monitor
Packer vulnerable to arbitrary file write via crafted plugin archive during installation
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
hashicorp · packerAug 17, 2026
CVE-2026-47683
34Monitor
vm2: bufferAllocLimit cap bypassed by Buffer.concat and Buffer.from arrayLike
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
patriksimek · vm2Aug 17, 2026
CVE-2026-47686
39Monitor
vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
patriksimek · vm2Aug 17, 2026
CVE-2026-47698
39Monitor
vm2: Sandbox Breakout Using Dangerous Host Proto Mutators
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
patriksimek · vm2Aug 17, 2026
CVE-2026-65822
30Monitor
ERPNext: SQL Injection in "Inactive Customers" report via unvalidated `doctype` filter
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
frappe · erpnextAug 17, 2026
CVE-2026-65832
32Monitor
Deskflow - Unauthenticated server-controlled out-of-bounds read in ServerProxy::setOptions / translateKey modifier-table indexing
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
deskflow · deskflowAug 17, 2026
CVE-2026-65974
39Monitor
ERPNext: Server-Side Template Injection leading to Remote Code Execution
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- SSTI
frappe · erpnextAug 17, 2026
CVE-2026-66795
39Monitor
Managedcluster-import-controller: csr auto-approver does not validate certificate subject or signername (spoke→hub cluster-admin)
CriticalCVSS 9.9No exploitEPSS 0%
- Weak crypto
red hat · multicluster engine for kubernetes 2.1Aug 17, 2026
CVE-2026-67967
39Monitor
Buffer Overflow vulnerability in Tenda W20E V16.01.0.6(2782) allows an attacker to execute arbitrary code.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
Aug 17, 2026
CVE-2026-75103
34Monitor
Crawlab Missing Authorization on Password Change Endpoint Allows Account Takeover
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
crawlab-team · crawlabAug 17, 2026
CVE-2026-75106
37Monitor
OpnForm Editable Submission Secret Derivation via Empty Hashids Salt
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
opnform · opnformAug 17, 2026
CVE-2026-75109
28Monitor
Determined Missing Authorization Check on Generic Task Endpoints
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
determined-ai · determinedAug 17, 2026
CVE-2026-75110
37Monitor
MemOS Authentication Bypass via Unset INTERNAL_SERVICE_SECRET
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
memtensor · memosAug 17, 2026
CVE-2026-75111
34Monitor
Evidently UI Path Traversal via Dataset Materialization Filename
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
evidentlyai · evidentlyAug 17, 2026
CVE-2026-75479
34Monitor
JimuReport Unauthenticated Report Listing and Share Token Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
jeecgboot · jimureportAug 17, 2026
CVE-2026-75480
28Monitor
OpenViking Debug Vector Endpoints Multi-tenant Data Exposure
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
volcengine · openvikingAug 17, 2026
CVE-2026-75481
34Monitor
SkyPilot Authentication Bypass via Service Account Role Escalation
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
skypilot-org · skypilotAug 17, 2026
CVE-2026-75531
28Monitor
Stored Cross-Site Scripting in URL Observables via Lookyloo Submission Handler in Pandora
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- XSS
pandora-analysis · pandoraAug 17, 2026
CVE-2026-56677
34Monitor
9Router: Authenticated Server-Side Request Forgery (SSRF) via OIDC Provider Test Endpoint
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
- SSRF
decolua · 9routerAug 17, 2026
CVE-2026-64849
70This week
MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
CriticalCVSS 9.3KEVWeaponizedEPSS 10%
- Pre-auth
- SSRF
lfprojects · mlflowAug 17, 2026
CVE-2026-67918
30Monitor
Directory Traversal vulnerability in hermes-studio v.0.6.26 allows a remote attacker to obtain sensitive information via the validatePath fu
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
Aug 17, 2026
CVE-2026-67960
39Monitor
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentControll
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Aug 17, 2026
CVE-2026-71424
38Monitor
Onyx: Cross-user OAuth-token leak via /api/mcp/servers* for per-user MCP servers
CriticalCVSS 9.6No exploitEPSS 0%
- Info leak
onyx-dot-app · onyxAug 17, 2026
CVE-2026-38165
39Monitor
A Server-Side Template Injection (SSTI) vulnerability in the Velocity template engine configuration of xdocreport v0.9.2 to v2.2.0 allows at
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- SSTI
Aug 17, 2026
CVE-2026-67919
39Monitor
An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the PluginEndpoint.java, installFromUri method, and DefaultPl
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
Aug 17, 2026
CVE-2026-67961
31Monitor
An issue in O2OA v.10.0.2 allows a local attacker to execute arbitrary code via the the sandbox mechanism of the Invoke script execution.
HighCVSS 7.8No exploitEPSS 0%
- RCE
Aug 17, 2026
CVE-2026-75094
35Monitor
COMFAST CF-N1-S CGI mbox-config sub_44B438 os command injection
HighCVSS 8.5No exploitEPSS 3%
- RCE
- Command injection
comfast · cf-n1-sAug 18, 2026
CVE-2026-11801
30Monitor
WPAdverts <= 2.3.2 - Missing Authorization to Unauthenticated Sensitive Information Disclosure via classifieds-types REST Endpoint
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
gwin · wpadverts – classifieds pluginAug 18, 2026
CVE-2026-15748
40Plan
Forminator Forms <= 1.56.1 - Unauthenticated Arbitrary File Upload via Forged Upload Field Configuration
CriticalCVSS 9.8Proof of conceptEPSS 4%
- pre-auth RCE
- File upload
wpmudev · forminator forms – contact form, payment form & custom form builderAug 18, 2026
CVE-2026-75091
28Monitor
Quill Forms <= 5.7.1 - Unauthenticated Stored Cross-Site Scripting
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
mdmag · quill forms | conversational multi step forms, surveys & quizzesAug 18, 2026
CVE-2026-15371
32Monitor
Velociraptor Stored XSS in URL column types
HighCVSS 8.1No exploitEPSS 0%
- XSS
rapid7 · velociraptorAug 18, 2026
CVE-2026-34884
39Monitor
Apache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP Server
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SSRF
apache · skywalking mcpAug 18, 2026
CVE-2026-23929
34Monitor
Prototype pollution leading to stored XSS
HighCVSS 8.5No exploitEPSS 0%
- XSS
- Prototype pollution
zabbix · zabbixAug 18, 2026
CVE-2026-23933
30Monitor
Hardcoded session key in Zabbix 7.4
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
zabbix · zabbixAug 18, 2026