By publication date

Exploited and new serious CVEs: August 2026

4,121 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 15 of 42

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-75976No exploit	TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflowtrendnet · tew-823dru · CWE-119 Memory safety	High8.6	—	0.8%	Aug 19, 2026
36Monitor	CVE-2026-11751No exploit	A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disablly corporation · armeria · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-76003No exploit	UTT HiPER 1200GW formGroupConfig strcpy stack-based overflowutt · hiper 1200gw · CWE-119 Memory safety	High8.6	—	0.7%	Aug 19, 2026
34Monitor	CVE-2026-76004No exploit	UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflowutt · hiper 1250gw · CWE-119 Memory safety	High8.6	—	0.7%	Aug 19, 2026
40Plan	CVE-2026-76008No exploit	Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflowcomfast · cf-n1-s · CWE-119 Pre-auth Memory safety	Critical10.0	—	1.0%	Aug 19, 2026
32Monitor	CVE-2026-19942No exploit	Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Metawpfeedback · atarim – ai agency for wordpress: edit pages, fix code, update plugins, seo & client feedback · CWE-22 RCE Path traversal	High8.1	—	1.0%	Aug 19, 2026
35Monitor	CVE-2026-49415No exploit	Local privilege escalation via execve(2) TOCTOU racefreebsd · freebsd · CWE-367 Race condition	High8.8	—	0.3%	Aug 19, 2026
35Monitor	CVE-2026-49418No exploit	Use-after-free in device pager page listfreebsd · freebsd · CWE-416 Memory safety	High8.8	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-49419No exploit	Jail reference count underflowfreebsd · freebsd · CWE-911	High8.8	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-70408No exploit	An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privilegextra innovation inc. · acmailer cgi · CWE-863 Broken access control (IDOR)	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-11565Proof of concept	Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_uiunknown · advanced file manager · CWE-862 Broken access control (IDOR)	High8.5	—	1.2%	Aug 19, 2026
34Monitor	CVE-2026-12983No exploit	Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injectionunknown · dinatur · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-13169No exploit	Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDORunknown · eventin · CWE-639 Broken access control (IDOR)	High8.1	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-13174No exploit	Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDORunknown · eventin · CWE-284 Broken access control (IDOR)	High7.2	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-14334No exploit	Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Uploadunknown · booking calendar, appointment booking system · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Aug 19, 2026
30Monitor	CVE-2026-14861No exploit	User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDORunknown · user verification by pickplugins · CWE-639 Pre-auth Broken access control (IDOR) Denial of service	High7.5	—	0.4%	Aug 19, 2026
27Monitor	CVE-2026-15253Proof of concept	Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Titleunknown · easy media replace · CWE-79 XSS	Medium6.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-16570No exploit	NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callbackunknown · nextscripts: social networks auto-poster · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
34Monitor	CVE-2026-16616No exploit	Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversalunknown · simple file list · CWE-22 Pre-auth Path traversal	High8.6	—	0.7%	Aug 19, 2026
35Monitor	CVE-2026-16617No exploit	Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Descriptionunknown · simple file list · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Aug 19, 2026
34Monitor	CVE-2026-16950No exploit	Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_productsunknown · product shortlist · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-17565No exploit	Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgeryunknown · animation addons for elementor · CWE-918 Pre-auth SSRF	High7.2	—	0.2%	Aug 19, 2026
39Monitor	CVE-2026-18031No exploit	TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callbackunknown · tabapay gateway · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Aug 19, 2026
41Plan	CVE-2026-18051Proof of concept	W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Keyunknown · w3 total cache · CWE-22 Pre-auth Path traversal	Critical10.0	—	2.0%	Aug 19, 2026
39Monitor	CVE-2026-18776No exploit	TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actionsunknown · truebooker · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-18937Proof of concept	Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injectionunknown · broken link checker · CWE-94 pre-auth RCE	Critical9.0	—	1.9%	Aug 19, 2026
28Monitor	CVE-2026-19055No exploit	ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parametersunknown · prosolution wp client · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
28Monitor	CVE-2026-19056No exploit	ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameterunknown · prosolution wp client · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
35Monitor	CVE-2026-19842No exploit	SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwriteunknown · saml single sign on · CWE-287 Pre-auth Auth bypass	High8.8	—	0.2%	Aug 19, 2026
35Monitor	CVE-2026-49420No exploit	Buffer overflow in libalias RTSP handlerfreebsd · freebsd · CWE-121 pre-auth RCE Memory safety	High8.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-49421No exploit	unlinkat(2) ignores AT_RESOLVE_BENEATH flagfreebsd · freebsd · CWE-273	High7.1	—	0.1%	Aug 19, 2026
33Monitor	CVE-2026-49422No exploit	Use-after-free in TCP RACK stack option handlerfreebsd · freebsd · CWE-416 Local privilege escalation Memory safety	High8.4	—	0.1%	Aug 19, 2026
35Monitor	CVE-2026-49427No exploit	posixshm: largepage shared memory objects not explicitly wiredfreebsd · freebsd · CWE-826	High8.8	—	0.5%	Aug 19, 2026
33Monitor	CVE-2026-49428No exploit	posixshm: system calls can incorrectly free memory of largepage objectsfreebsd · freebsd · CWE-915 Local privilege escalation	High8.4	—	0.3%	Aug 19, 2026
31Monitor	CVE-2026-49429No exploit	Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctlfreebsd · freebsd · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.1%	Aug 19, 2026
31Monitor	CVE-2026-49430No exploit	Kernel heap overflow in ZFS_IOC_RECV_NEW ioctlfreebsd · freebsd · CWE-122 Memory safety	High7.8	—	0.1%	Aug 19, 2026
28Monitor	CVE-2026-15780No exploit	WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameterveronalabs · wp statistics – simple, privacy-friendly google analytics alternative · CWE-79 Pre-auth Auth bypass XSS	High7.2	—	0.6%	Aug 19, 2026
28Monitor	CVE-2026-75981No exploit	TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scriptingcozmoslabs · translatepress – translate multilingual sites with ai translation · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Aug 19, 2026
39Monitor	CVE-2026-58081No exploit	Heap based buffer overflow in iconv(3)freebsd · freebsd · CWE-122 Pre-auth Memory safety	Critical9.8	—	0.5%	Aug 19, 2026
39Monitor	CVE-2026-58082No exploit	Stack based buffer overflow in iconv(3)freebsd · freebsd · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.5%	Aug 19, 2026
33Monitor	CVE-2026-58083No exploit	Use-after-free in kqueue copy-on-forkfreebsd · freebsd · CWE-416 Local privilege escalation Memory safety	High8.4	—	0.1%	Aug 19, 2026
30Monitor	CVE-2026-58085No exploit	Missing MAC validation in wg(4) packet decryptionfreebsd · freebsd · CWE-347 Pre-auth Weak crypto	High7.5	—	0.3%	Aug 19, 2026
32Monitor	CVE-2026-58086No exploit	ktrace(2) privilege incorrectly validated in jailsfreebsd · freebsd · CWE-273	High8.1	—	0.3%	Aug 19, 2026
31Monitor	CVE-2026-58087No exploit	Heap out-of-bounds access in semctl(2)freebsd · freebsd · CWE-125 Local privilege escalation Memory safety	High7.8	—	0.1%	Aug 19, 2026
29Monitor	CVE-2026-58088No exploit	Race condition in ELF core dump segment countingfreebsd · freebsd · CWE-362 Local privilege escalation Race condition	High7.4	—	0.1%	Aug 19, 2026
39Monitor	CVE-2026-72889No exploit	Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verifyCWE-347 Pre-auth Weak crypto	Critical9.8	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-75589No exploit	Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verifyCWE-208 Pre-auth	High7.5	—	0.5%	Aug 19, 2026
28Monitor	CVE-2026-76164No exploit	Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resourcesail-project · ail-framework · CWE-918 SSRF	High7.1	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-32552No exploit	WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerabilityyith · yith woocommerce membership premium · CWE-89 SQL injection	High8.5	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-61986No exploit	WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerabilitywasiliy strecker · contest gallery · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
28Monitor	CVE-2026-66596No exploit	WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerabilitystefano lissa · newsletter · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
39Monitor	CVE-2026-66613Proof of concept	WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerabilitycrocoblock. jetimpex inc. · jetengine · CWE-1336 pre-auth RCE SSTI	Critical9.8	—	0.7%	Aug 19, 2026
34Monitor	CVE-2026-66668No exploit	WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerabilitypeepso · community by peepso · CWE-89 SQL injection	High8.5	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-73182No exploit	WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerabilityjeff starr · bbq pro · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
37Monitor	CVE-2026-73183No exploit	WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerabilityget maps marker pro · maps marker pro · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-73184No exploit	WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerabilitylcweb · global gallery · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
37Monitor	CVE-2026-73185No exploit	WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerabilitywpo-hr · ngg smart image search · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Aug 19, 2026
39Monitor	CVE-2026-73347No exploit	WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerabilitythemetechmount · truebooker · CWE-266 Pre-auth	Critical9.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-73354No exploit	WordPress SimplyRETS Real Estate IDX plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerabilityreichertbrothers · simplyrets real estate idx · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Aug 19, 2026
39Monitor	CVE-2026-73364No exploit	WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerabilitywpdesk · flexible subscriptions · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Aug 19, 2026
30Monitor	CVE-2026-73384No exploit	WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerabilitycmsminds · pay with contact form 7 · CWE-201 Pre-auth	High7.5	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-73385No exploit	WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerabilityoutanking team · outranking plugin options · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 19, 2026
30Monitor	CVE-2026-73386No exploit	WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerabilityzealousweb · track geolocation of users using contact form 7 · CWE-201 Pre-auth	High7.5	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-73387No exploit	WordPress Resido theme <= 1.5 - Local File Inclusion vulnerabilitysmartdatasoft · resido · CWE-98 Pre-auth	High8.1	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-73388No exploit	WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerabilityteconcetheme · nikstore core · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Aug 19, 2026
39Monitor	CVE-2026-73389No exploit	WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerabilitythe4 · kalles addons · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Aug 19, 2026
39Monitor	CVE-2026-73390No exploit	WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerabilityklbtheme · total donations · CWE-266 Pre-auth	Critical9.8	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-73391No exploit	WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerabilityklbtheme · total donations · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-73394No exploit	WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerabilitystitchexpress · stitch express · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 19, 2026
34Monitor	CVE-2019-25766No exploit	Renovate before 19.38.7 Credential Exposure via Go Modulesrenovatebot · renovate · CWE-532 Pre-auth Info leak	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2020-37267No exploit	Renovate 19.180.0 before 23.25.1 Token Leakage via Logsrenovatebot · renovate · CWE-532 Pre-auth Info leak	High8.7	—	0.4%	Aug 19, 2026
39Monitor	CVE-2026-16019No exploit	SQL Injection in Faydam Innovation's FAYDAM Dataloggerfaydam innovation inc. · faydam datalogger · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-54794No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.dell · openmanage enterprise · CWE-918 Pre-auth SSRF	High7.2	—	0.2%	Aug 19, 2026
36Monitor	CVE-2026-54795No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Commdell · openmanage enterprise · CWE-78 RCE Command injection	High8.8	—	2.2%	Aug 19, 2026
35Monitor	CVE-2026-56088No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Indell · openmanage enterprise · CWE-89 SQL injection	High8.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-70421No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.dell · openmanage enterprise · CWE-269	High7.2	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-70422No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Indell · openmanage enterprise · CWE-89 SQL injection	High8.8	—	0.4%	Aug 19, 2026
40Plan	CVE-2026-74803No exploit	Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64yootheme.com · zoo extension for joomla · CWE-434 Pre-auth File upload	Critical10.0	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-74804No exploit	Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64yootheme.com · zoo extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-75918No exploit	phpMyFAQ before 4.1.7 Authentication Bypass via Tracking Filephpmyfaq · phpmyfaq · CWE-200 Pre-auth Auth bypass Info leak	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-76205No exploit	phpMyFAQ before 4.1.7 SQL Injection via Glossaryphpmyfaq · phpmyfaq · CWE-89 SQL injection	High8.6	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-76207No exploit	phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookiephpmyfaq · phpmyfaq · CWE-304 Auth bypass	High8.6	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-76210No exploit	phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exportphpmyfaq · phpmyfaq · CWE-73 Path traversal	High7.1	—	0.4%	Aug 19, 2026
36Monitor	CVE-2026-76213No exploit	phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttlephpmyfaq · phpmyfaq · CWE-307 Pre-auth	Critical9.1	—	0.4%	Aug 19, 2026
36Monitor	CVE-2026-76214No exploit	phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challengephpmyfaq · phpmyfaq · CWE-294 Pre-auth Auth bypass	Critical9.1	—	0.3%	Aug 19, 2026
30Monitor	CVE-2026-76216No exploit	Vikunja through 2.4.0 Principal-Type Confusion via LinkSharinggo-vikunja · vikunja · CWE-639 Broken access control (IDOR)	High7.7	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-76217No exploit	GitPython before 3.1.58 Arbitrary File Read via pathspec-from-filegitpython project · gitpython · CWE-73 Path traversal	High7.1	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-76218No exploit	GitPython before 3.1.58 Remote Code Execution via Repo.initgitpython project · gitpython · CWE-88 RCE	High7.7	—	0.7%	Aug 19, 2026
28Monitor	CVE-2026-76219No exploit	GitPython before 3.1.58 Arbitrary File Overwrite via read-treegitpython project · gitpython · CWE-88	High7.2	—	0.5%	Aug 19, 2026
34Monitor	CVE-2026-76220No exploit	GitPython before 3.1.58 Command Execution via split_single_char_optionsgitpython project · gitpython · CWE-88 RCE	High8.7	—	0.5%	Aug 19, 2026
33Monitor	CVE-2026-76222No exploit	GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Namegitpython project · gitpython · CWE-22 Pre-auth Path traversal	High8.4	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-76223No exploit	ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTIONarcadedata · arcadedb · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-76224No exploit	ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallbackarcadedata · arcadedb · CWE-94 RCE	High8.7	—	0.8%	Aug 19, 2026
33Monitor	CVE-2026-76225No exploit	ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVarcadedata · arcadedb · CWE-918 SSRF	High8.3	—	0.3%	Aug 19, 2026
33Monitor	CVE-2026-76229No exploit	Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomizerenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76230No exploit	Renovate 35.63.0 before 40.33.0 Command Injection via npmrenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76231No exploit	Renovate 32.135.0 before 40.33.0 Command Injection via hermitrenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76232No exploit	Renovate 31.51.0 before 40.33.0 Command Injection via helmv3renovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76233No exploit	Renovate 39.53.0 before 40.33.0 Command Injection via gleam managerrenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
28Monitor	CVE-2026-76236No exploit	stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstoneseidetic-labs · stigmem-node · CWE-639 Broken access control (IDOR)	High7.2	—	0.3%	Aug 19, 2026

CVE-2026-75976
34Monitor
TRENDnet TEW-823DRU NVRAM wan.cgi strcpy stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
trendnet · tew-823druAug 19, 2026
CVE-2026-11751
36Monitor
A vulnerability has been identified in armeria-xds versions prior to 1.41.0, where xDS upstream TLS peer verification may be silently disabl
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
ly corporation · armeriaAug 19, 2026
CVE-2026-76003
34Monitor
UTT HiPER 1200GW formGroupConfig strcpy stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
utt · hiper 1200gwAug 19, 2026
CVE-2026-76004
34Monitor
UTT HiPER 1250GW HTTP aspApBasicConfigUrcp strcpy stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
utt · hiper 1250gwAug 19, 2026
CVE-2026-76008
40Plan
Comfast CF-N1-S URI Parameter Parsing mbox-config get_para_from_uri stack-based overflow
CriticalCVSS 10.0No exploitEPSS 1%
- Pre-auth
- Memory safety
comfast · cf-n1-sAug 19, 2026
CVE-2026-19942
32Monitor
Atarim <= 5.1.1 - Authenticated (Author+) Arbitrary File Deletion via '_wp_attached_file' Meta
HighCVSS 8.1No exploitEPSS 1%
- RCE
- Path traversal
wpfeedback · atarim – ai agency for wordpress: edit pages, fix code, update plugins, seo & client feedbackAug 19, 2026
CVE-2026-49415
35Monitor
Local privilege escalation via execve(2) TOCTOU race
HighCVSS 8.8No exploitEPSS 0%
- Race condition
freebsd · freebsdAug 19, 2026
CVE-2026-49418
35Monitor
Use-after-free in device pager page list
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-49419
35Monitor
Jail reference count underflow
HighCVSS 8.8No exploitEPSS 0%
freebsd · freebsdAug 19, 2026
CVE-2026-70408
34Monitor
An incorrect authorization vulnerability exists in acmailer, which may allow a user to create a sub-account that has administrative privileg
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
extra innovation inc. · acmailer cgiAug 19, 2026
CVE-2026-11565
34Monitor
Advanced File Manager < 5.4.13 - Authenticated Arbitrary File Read and Write via fma_load_fma_ui
HighCVSS 8.5Proof of conceptEPSS 1%
- Broken access control (IDOR)
unknown · advanced file managerAug 19, 2026
CVE-2026-12983
34Monitor
Dinatur <= 1.18 - Unauthenticated SQL Injection via Column Name Injection
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · dinaturAug 19, 2026
CVE-2026-13169
32Monitor
Eventin < 4.1.21 - Contributor+ Arbitrary Event Modification, Deletion and Ownership Takeover via IDOR
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
unknown · eventinAug 19, 2026
CVE-2026-13174
28Monitor
Eventin < 4.1.21 - Contributor+ Speaker Account Deletion via IDOR
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
unknown · eventinAug 19, 2026
CVE-2026-14334
35Monitor
Booking calendar, Appointment Booking System <= 3.2.36 - Unauthenticated Stored XSS via SVG File Upload
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · booking calendar, appointment booking systemAug 19, 2026
CVE-2026-14861
30Monitor
User Verification <= 2.0.47 - Unauthenticated Arbitrary Account Lockout via IDOR
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- Denial of service
unknown · user verification by pickpluginsAug 19, 2026
CVE-2026-15253
27Monitor
Easy Media Replace <= 0.2.0 - Author+ Stored XSS via Attachment Title
MediumCVSS 6.8Proof of conceptEPSS 0%
- XSS
unknown · easy media replaceAug 19, 2026
CVE-2026-16570
28Monitor
NextScripts: Social Networks Auto-Poster < 4.4.8 - Reflected XSS via Facebook OAuth Callback
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unknown · nextscripts: social networks auto-posterAug 19, 2026
CVE-2026-16616
34Monitor
Simple File List <= 6.3.11 - Unauthenticated Arbitrary File Read and Move via Path Traversal
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Path traversal
unknown · simple file listAug 19, 2026
CVE-2026-16617
35Monitor
Simple File List <= 6.3.11 - Unauthenticated Stored XSS via File Description
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · simple file listAug 19, 2026
CVE-2026-16950
34Monitor
Product Shortlist <= 1.0.4 - Unauthenticated SQL Injection via get_shortlisted_products
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · product shortlistAug 19, 2026
CVE-2026-17565
28Monitor
Animation Addons for Elementor < 2.7.2 - Unauthenticated Server-Side Request Forgery
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- SSRF
unknown · animation addons for elementorAug 19, 2026
CVE-2026-18031
39Monitor
TabaPay Gateway <= 1.4.0 - Unauthenticated Account Takeover via Payment Callback
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · tabapay gatewayAug 19, 2026
CVE-2026-18051
41Plan
W3 Total Cache < 2.10.5 - Unauthenticated Arbitrary Directory File Write and .htaccess Overwrite via Path Traversal in the Page Cache Key
CriticalCVSS 10.0Proof of conceptEPSS 2%
- Pre-auth
- Path traversal
unknown · w3 total cacheAug 19, 2026
CVE-2026-18776
39Monitor
TrueBooker Appointment Booking < 1.2.7 - Unauthenticated Account Takeover via Multiple AJAX Actions
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · truebookerAug 19, 2026
CVE-2026-18937
37Monitor
Broken Link Checker < 2.4.12 - Unauthenticated RCE via Query Variable Injection
CriticalCVSS 9.0Proof of conceptEPSS 1%
- pre-auth RCE
unknown · broken link checkerAug 19, 2026
CVE-2026-19055
28Monitor
ProSolution WP Client < 2.0.11 - Reflected XSS via Multiple Parameters
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unknown · prosolution wp clientAug 19, 2026
CVE-2026-19056
28Monitor
ProSolution WP Client < 2.0.11 - Reflected XSS via 'page' Parameter
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unknown · prosolution wp clientAug 19, 2026
CVE-2026-19842
35Monitor
SAML Single Sign On 4.8.85 - 5.4.6 - Unauthenticated Administrator Account Takeover via SAML Trust Anchor Overwrite
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · saml single sign onAug 19, 2026
CVE-2026-49420
35Monitor
Buffer overflow in libalias RTSP handler
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-49421
28Monitor
unlinkat(2) ignores AT_RESOLVE_BENEATH flag
HighCVSS 7.1No exploitEPSS 0%
freebsd · freebsdAug 19, 2026
CVE-2026-49422
33Monitor
Use-after-free in TCP RACK stack option handler
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-49427
35Monitor
posixshm: largepage shared memory objects not explicitly wired
HighCVSS 8.8No exploitEPSS 0%
freebsd · freebsdAug 19, 2026
CVE-2026-49428
33Monitor
posixshm: system calls can incorrectly free memory of largepage objects
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
freebsd · freebsdAug 19, 2026
CVE-2026-49429
31Monitor
Kernel heap overflow in ZFS_IOC_USERSPACE_MANY ioctl
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-49430
31Monitor
Kernel heap overflow in ZFS_IOC_RECV_NEW ioctl
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-15780
28Monitor
WP Statistics <= 14.16.8 - Unauthenticated Stored Cross-Site Scripting via 'utm_campaign' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- XSS
veronalabs · wp statistics – simple, privacy-friendly google analytics alternativeAug 19, 2026
CVE-2026-75981
28Monitor
TranslatePress – Translate Multilingual sites with AI Translation <= 3.2.5 - Unauthenticated Stored Cross-Site Scripting
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
cozmoslabs · translatepress – translate multilingual sites with ai translationAug 19, 2026
CVE-2026-58081
39Monitor
Heap based buffer overflow in iconv(3)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-58082
39Monitor
Stack based buffer overflow in iconv(3)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-58083
33Monitor
Use-after-free in kqueue copy-on-fork
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-58085
30Monitor
Missing MAC validation in wg(4) packet decryption
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
freebsd · freebsdAug 19, 2026
CVE-2026-58086
32Monitor
ktrace(2) privilege incorrectly validated in jails
HighCVSS 8.1No exploitEPSS 0%
freebsd · freebsdAug 19, 2026
CVE-2026-58087
31Monitor
Heap out-of-bounds access in semctl(2)
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
freebsd · freebsdAug 19, 2026
CVE-2026-58088
29Monitor
Race condition in ELF core dump segment counting
HighCVSS 7.4No exploitEPSS 0%
- Local privilege escalation
- Race condition
freebsd · freebsdAug 19, 2026
CVE-2026-72889
39Monitor
Net::OAuth versions before 0.33 for Perl allow the sender to choose the signature algorithm in verify
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
Aug 19, 2026
CVE-2026-75589
30Monitor
Net::OAuth versions before 0.33 for Perl check HMAC-SHA1, HMAC-SHA256 and PLAINTEXT signatures with a non-constant-time comparison in verify
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
Aug 19, 2026
CVE-2026-76164
28Monitor
Authenticated Server-Side Request Forgery in AIL Framework Crawler Allows Access to Internal Network Resources
HighCVSS 7.1No exploitEPSS 0%
- SSRF
ail-project · ail-frameworkAug 19, 2026
CVE-2026-32552
34Monitor
WordPress YITH WooCommerce Membership Premium plugin <= 2.33.0 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
yith · yith woocommerce membership premiumAug 19, 2026
CVE-2026-61986
28Monitor
WordPress Contest Gallery plugin <= 30.0.5 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
wasiliy strecker · contest galleryAug 19, 2026
CVE-2026-66596
28Monitor
WordPress Newsletter plugin <= 9.3.3 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
stefano lissa · newsletterAug 19, 2026
CVE-2026-66613
39Monitor
WordPress JetEngine plugin <= 3.8.14 - Remote Code Execution (RCE) vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- SSTI
crocoblock. jetimpex inc. · jetengineAug 19, 2026
CVE-2026-66668
34Monitor
WordPress Community by PeepSo plugin <= 9.0.5.2 - SQL Injection vulnerability
HighCVSS 8.5No exploitEPSS 0%
- SQL injection
peepso · community by peepsoAug 19, 2026
CVE-2026-73182
28Monitor
WordPress BBQ Pro plugin <= 3.9 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
jeff starr · bbq proAug 19, 2026
CVE-2026-73183
37Monitor
WordPress Maps Marker Pro plugin <= 4.32 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
get maps marker pro · maps marker proAug 19, 2026
CVE-2026-73184
28Monitor
WordPress Global Gallery plugin <= 11.1.2 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
lcweb · global galleryAug 19, 2026
CVE-2026-73185
37Monitor
WordPress NGG Smart Image Search plugin < 4.0.0 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
wpo-hr · ngg smart image searchAug 19, 2026
CVE-2026-73347
39Monitor
WordPress TrueBooker plugin <= 1.2.6 - Privilege Escalation vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
themetechmount · truebookerAug 19, 2026
CVE-2026-73354
28Monitor
WordPress SimplyRETS Real Estate IDX plugin <= 3.2.8 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
reichertbrothers · simplyrets real estate idxAug 19, 2026
CVE-2026-73364
39Monitor
WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
wpdesk · flexible subscriptionsAug 19, 2026
CVE-2026-73384
30Monitor
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
cmsminds · pay with contact form 7Aug 19, 2026
CVE-2026-73385
30Monitor
WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
outanking team · outranking plugin optionsAug 19, 2026
CVE-2026-73386
30Monitor
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
zealousweb · track geolocation of users using contact form 7Aug 19, 2026
CVE-2026-73387
32Monitor
WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
smartdatasoft · residoAug 19, 2026
CVE-2026-73388
37Monitor
WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
teconcetheme · nikstore coreAug 19, 2026
CVE-2026-73389
39Monitor
WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
the4 · kalles addonsAug 19, 2026
CVE-2026-73390
39Monitor
WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
klbtheme · total donationsAug 19, 2026
CVE-2026-73391
37Monitor
WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
klbtheme · total donationsAug 19, 2026
CVE-2026-73394
30Monitor
WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
stitchexpress · stitch expressAug 19, 2026
CVE-2019-25766
34Monitor
Renovate before 19.38.7 Credential Exposure via Go Modules
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
renovatebot · renovateAug 19, 2026
CVE-2020-37267
34Monitor
Renovate 19.180.0 before 23.25.1 Token Leakage via Logs
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
renovatebot · renovateAug 19, 2026
CVE-2026-16019
39Monitor
SQL Injection in Faydam Innovation's FAYDAM Datalogger
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
faydam innovation inc. · faydam dataloggerAug 19, 2026
CVE-2026-54794
28Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- SSRF
dell · openmanage enterpriseAug 19, 2026
CVE-2026-54795
36Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Comm
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-56088
35Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-70421
28Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.
HighCVSS 7.2No exploitEPSS 0%
dell · openmanage enterpriseAug 19, 2026
CVE-2026-70422
35Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-74803
40Plan
Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- File upload
yootheme.com · zoo extension for joomlaAug 19, 2026
CVE-2026-74804
37Monitor
Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
yootheme.com · zoo extension for joomlaAug 19, 2026
CVE-2026-75918
34Monitor
phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76205
34Monitor
phpMyFAQ before 4.1.7 SQL Injection via Glossary
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76207
34Monitor
phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76210
28Monitor
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76213
36Monitor
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76214
36Monitor
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76216
30Monitor
Vikunja through 2.4.0 Principal-Type Confusion via LinkSharing
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
go-vikunja · vikunjaAug 19, 2026
CVE-2026-76217
28Monitor
GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
gitpython project · gitpythonAug 19, 2026
CVE-2026-76218
30Monitor
GitPython before 3.1.58 Remote Code Execution via Repo.init
HighCVSS 7.7No exploitEPSS 0%
- RCE
gitpython project · gitpythonAug 19, 2026
CVE-2026-76219
28Monitor
GitPython before 3.1.58 Arbitrary File Overwrite via read-tree
HighCVSS 7.2No exploitEPSS 0%
gitpython project · gitpythonAug 19, 2026
CVE-2026-76220
34Monitor
GitPython before 3.1.58 Command Execution via split_single_char_options
HighCVSS 8.7No exploitEPSS 0%
- RCE
gitpython project · gitpythonAug 19, 2026
CVE-2026-76222
33Monitor
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- Path traversal
gitpython project · gitpythonAug 19, 2026
CVE-2026-76223
28Monitor
ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
arcadedata · arcadedbAug 19, 2026
CVE-2026-76224
34Monitor
ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback
HighCVSS 8.7No exploitEPSS 0%
- RCE
arcadedata · arcadedbAug 19, 2026
CVE-2026-76225
33Monitor
ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV
HighCVSS 8.3No exploitEPSS 0%
- SSRF
arcadedata · arcadedbAug 19, 2026
CVE-2026-76229
33Monitor
Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76230
33Monitor
Renovate 35.63.0 before 40.33.0 Command Injection via npm
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76231
33Monitor
Renovate 32.135.0 before 40.33.0 Command Injection via hermit
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76232
33Monitor
Renovate 31.51.0 before 40.33.0 Command Injection via helmv3
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76233
33Monitor
Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76236
28Monitor
stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
eidetic-labs · stigmem-nodeAug 19, 2026