By publication date

Exploited and new serious CVEs: August 2026

5,860 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 16 of 59

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-74309No exploit	vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handlerlinux · linux Pre-auth	Critical10.0	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74311No exploit	virtio: rtc: tear down old virtqueues before restorelinux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-74315No exploit	lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()linux · linux Pre-auth	Critical9.8	—	0.5%	Aug 15, 2026
35Monitor	CVE-2026-74328No exploit	iommufd: Destroy the pages content after detaching from dmabuflinux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74343No exploit	kernfs: fix xattr race condition with multiple superblockslinux · linux Race condition	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74357No exploit	drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dumplinux · linux	High7.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-74364No exploit	bpf: Reject exclusive maps as inner maps in map-in-maplinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74371No exploit	bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compatlinux · linux	High7.8	—	0.1%	Aug 15, 2026
33Monitor	CVE-2026-74383No exploit	nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_poolslinux · linux	High8.4	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-74403No exploit	crypto: ccp - Check for page allocation failure correctly in TIOlinux · linux	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-74419No exploit	accel/amdxdna: Adjust size for copy_to_user()linux · linux	High7.3	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-74425No exploit	afs: handle CB.InitCallBackState3 requests without a server recordlinux · linux Pre-auth Denial of service	High7.5	—	0.3%	Aug 15, 2026
39Monitor	CVE-2026-74428No exploit	rxrpc: Fix double unlock in rxrpc_recvmsg()linux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74429No exploit	rxrpc: Fix the reception of a reply packet before data transmissionlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74430No exploit	rxrpc: Fix ACKALL packet handlinglinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74431No exploit	rxrpc: Fix potential infinite loop in rxrpc_recvmsg()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-74433No exploit	rxrpc: Fix UAF in rxgk_issue_challenge()linux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
39Monitor	CVE-2026-74434No exploit	rxrpc: Don't move a peeked OOB message onto the pending queuelinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 15, 2026
30Monitor	CVE-2026-74435No exploit	rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloclinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-74438No exploit	crypto: sun4i-ss - Remove insecure and unused rng_alglinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-14279No exploit	Wholesale Market <= 2.2.2 - Authenticated (Subscriber+) Privilege Escalation via 'role_required' Parametercedcommerce · wholesale market · CWE-269	High8.8	—	0.5%	Aug 15, 2026
40Plan	CVE-2026-15826Proof of concept	User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parametercozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editor · CWE-704 Pre-auth Auth bypass	Critical9.8	—	3.9%	Aug 15, 2026
28Monitor	CVE-2026-14433No exploit	Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parametervcita · online booking & scheduling calendar for wordpress by vcita · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Aug 15, 2026
30Monitor	CVE-2026-15142No exploit	Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collisionwebcodingplace · real estate manager pro · CWE-269	High7.5	—	0.3%	Aug 15, 2026
39Monitor	CVE-2026-16142No exploit	TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameterthemetechmount · truebooker – appointment booking and scheduler system · CWE-639 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Aug 15, 2026
35Monitor	CVE-2026-18438No exploit	Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatchwpdevteam · templately – elementor & gutenberg template library: 6500+ free & pro ready templates and cloud! · CWE-434 RCE File upload	High8.8	—	1.3%	Aug 15, 2026
31Monitor	CVE-2026-68461No exploit	device property: initialize the remaining fields of fwnode_handle in fwnode_init()linux · linux · CWE-665	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-68470No exploit	wifi: mac80211: validate extension-frame layout before RXlinux · linux · CWE-20 Pre-auth	High8.8	—	0.3%	Aug 15, 2026
35Monitor	CVE-2026-68471No exploit	wifi: ieee80211: validate MLE common info lengthlinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
32Monitor	CVE-2026-68472No exploit	wifi: cfg80211: validate EHT MLE before MLD ID readlinux · linux · CWE-125 Pre-auth Memory safety	High8.1	—	0.3%	Aug 15, 2026
39Monitor	CVE-2026-68477No exploit	ipvs: fix more places with wrong ipv6 transport offsetslinux · linux · CWE-20 Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-68479No exploit	Bluetooth: btrtl: validate firmware patch boundslinux · linux · CWE-190 Memory safety	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72003No exploit	wifi: brcmfmac: cyw: fix heap overflow on a short auth framelinux · linux · CWE-191 Pre-auth Memory safety	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-72005No exploit	wifi: rt2x00: avoid full teardown before work setup in probelinux · linux · CWE-404	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72009No exploit	pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSIlinux · linux · CWE-362 Race condition	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72012No exploit	tracing/osnoise: Call synchronize_rcu() when unregisteringlinux · linux · CWE-667	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72014No exploit	drbd: reject data replies with an out-of-range payload sizelinux · linux · CWE-190 Pre-auth Memory safety	Critical9.8	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-72018Proof of concept	dibs: loopback: validate offset and size in move_data()linux · linux · CWE-787 Memory safety	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-72019No exploit	macsec: don't read an unset MAC header in macsec_encrypt()linux · linux · CWE-125 Memory safety	High7.3	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72020No exploit	ipvs: reset full ip_vs_seq structs in ip_vs_conn_newlinux · linux · CWE-457 Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
32Monitor	CVE-2026-72021No exploit	ipvs: use parsed transport offset in SCTP state lookuplinux · linux · CWE-20 Pre-auth	High8.2	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-72024No exploit	mac802154: remove interfaces with RCU list deletionlinux · linux · CWE-362 Race condition	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72029No exploit	net: wwan: iosm: bound device offsets in the MUX downlink decoderlinux · linux · CWE-125 Pre-auth Memory safety	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-72034No exploit	fhandle: reject detached mounts in capable_wrt_mount()linux · linux · CWE-476 Memory safety	High7.8	—	0.1%	Aug 15, 2026
32Monitor	CVE-2026-72035No exploit	net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peekedlinux · linux · CWE-476 Pre-auth Memory safety	High8.2	—	0.5%	Aug 15, 2026
31Monitor	CVE-2026-72036No exploit	net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peekedlinux · linux · CWE-476 Memory safety	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72041No exploit	espintcp: use sk_msg_free_partial to fix partial sendlinux · linux · CWE-664 Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
35Monitor	CVE-2026-72045No exploit	octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PFlinux · linux · CWE-862 Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72049No exploit	ieee802154: admin-gate legacy LLSEC dump operationslinux · linux · CWE-862 Broken access control (IDOR)	High7.1	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72051No exploit	net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelinklinux · linux · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72052No exploit	net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelinklinux · linux · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72053No exploit	net: ipip: require CAP_NET_ADMIN in the device netns for changelinklinux · linux · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72054No exploit	net: ip_vti: require CAP_NET_ADMIN in the device netns for changelinklinux · linux · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72055No exploit	net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelinklinux · linux · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
32Monitor	CVE-2026-72057No exploit	net/sched: act_ct: preserve tc_skb_cb across defragmentationlinux · linux · CWE-662 Pre-auth	High8.2	—	0.5%	Aug 15, 2026
35Monitor	CVE-2026-72061No exploit	net: sit: require CAP_NET_ADMIN in the device netns for changelinklinux · linux · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72064No exploit	net: mana: Sync page pool RX frags for CPUlinux · linux · CWE-362 Pre-auth Race condition	Critical9.8	—	0.5%	Aug 15, 2026
39Monitor	CVE-2026-72065No exploit	net: mana: Validate the packet length reported by the NIClinux · linux · CWE-20 Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-72066No exploit	cpu: hotplug: Bound hotplug states sysfs outputlinux · linux · CWE-120 Memory safety	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72067No exploit	cpu: hotplug: Preserve per instance callback errorslinux · linux · CWE-754	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72069No exploit	locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()linux · linux · CWE-416 Pre-auth Memory safety	Critical9.8	—	0.7%	Aug 15, 2026
31Monitor	CVE-2026-72072No exploit	net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC deletelinux · linux · CWE-416 Memory safety	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72080No exploit	fs/resctrl: Fix use-after-free during unmountlinux · linux · CWE-416 Memory safety	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72083No exploit	scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVElinux · linux · CWE-416 Pre-auth Memory safety	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-72084No exploit	scsi: target: Bound PR-OUT TransportID parsing to the received bufferlinux · linux · CWE-125 Pre-auth Memory safety	Critical9.8	—	0.7%	Aug 15, 2026
37Monitor	CVE-2026-72085No exploit	scsi: xen: scsiback: Free unsubmitted command instead of double-putting itlinux · linux · CWE-416 Memory safety	Critical9.3	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72095No exploit	dma-fence: Make dma_fence_dedup_array() robust against 0-count inputlinux · linux · CWE-170	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72098No exploit	dm-verity: fix buffer overflow in FEC calculationlinux · linux · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.7%	Aug 15, 2026
28Monitor	CVE-2026-72099No exploit	dm-integrity: don't increment hash_offset twicelinux · linux · CWE-682	High7.1	—	0.5%	Aug 15, 2026
35Monitor	CVE-2026-72100No exploit	dm-integrity: fix a bug if the bio is out of limitslinux · linux · CWE-667	High8.8	—	0.4%	Aug 15, 2026
31Monitor	CVE-2026-72102No exploit	dm_early_create: fix freeing used table on dm_resume failurelinux · linux · CWE-415 Memory safety	High7.8	—	0.1%	Aug 15, 2026
29Monitor	CVE-2026-72103No exploit	dm: avoid leaking the caller's thread keyring via the table device filelinux · linux · CWE-200 Info leak	High7.3	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72105No exploit	dm-log: fix a bitset_size overflow on 32bit machineslinux · linux · CWE-190 Memory safety	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72107No exploit	dm era: fix out-of-bounds memory access for non-zero start sectorlinux · linux · CWE-125 Memory safety	High8.8	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-72108No exploit	dm thin metadata: fix metadata snapshot consistency on commit failurelinux · linux · CWE-672	High7.8	—	0.2%	Aug 15, 2026
31Monitor	CVE-2026-72110No exploit	bpf,fork: wipe ->bpf_storage before bailouts that access itlinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72111No exploit	bpf: Reset register bounds before narrowing retval range in check_mem_access()linux · linux	High8.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72113No exploit	can: bcm: add missing device refcount for CAN filter removallinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72114No exploit	can: bcm: validate frame length in bcm_rx_setup() for RTR replieslinux · linux	High7.8	—	0.1%	Aug 15, 2026
32Monitor	CVE-2026-72115No exploit	can: bcm: track a single source interface for ANYDEV timeout/throttle opslinux · linux Pre-auth	High8.1	—	0.3%	Aug 15, 2026
28Monitor	CVE-2026-72116No exploit	can: bcm: fix stale rx/tx ops after device removallinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72119No exploit	can: bcm: extend bcm_tx_lock usage for data and timer updateslinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72120No exploit	can: bcm: add missing rcu list annotations and operationslinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72121No exploit	can: bcm: add locking when updating filter and timer valueslinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
29Monitor	CVE-2026-72122No exploit	can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failurelinux · linux	High7.3	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72123No exploit	can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAFlinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72124No exploit	can: isotp: serialize TX state transitions under so->rx_locklinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
31Monitor	CVE-2026-72125No exploit	can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTERlinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72126No exploit	can: isotp: use unconditional synchronize_rcu() in isotp_release()linux · linux	High7.8	—	0.1%	Aug 15, 2026
39Monitor	CVE-2026-72129No exploit	nvmet-rdma: handle inline data with a nonzero offsetlinux · linux Pre-auth	Critical9.8	—	0.7%	Aug 15, 2026
39Monitor	CVE-2026-72130No exploit	nvmet-auth: reject short AUTH_RECEIVE bufferslinux · linux Pre-auth	Critical9.8	—	0.8%	Aug 15, 2026
31Monitor	CVE-2026-72135No exploit	tpm: Make the TPM character devices non-seekablelinux · linux	High7.8	—	0.1%	Aug 15, 2026
35Monitor	CVE-2026-72136No exploit	xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelinklinux · linux Local privilege escalation	High8.8	—	0.1%	Aug 15, 2026
28Monitor	CVE-2026-72143No exploit	platform/x86: ISST: Restore SST-PP control to all domainslinux · linux	High7.1	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72144No exploit	platform/x86: dell-laptop: fix missing cleanups in init error pathlinux · linux	High7.8	—	0.1%	Aug 15, 2026
30Monitor	CVE-2026-72149No exploit	dmaengine: tegra: Fix burst size calculationlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 15, 2026
35Monitor	CVE-2026-72157No exploit	net: thunderbolt: Fix frags[] overflow by bounding frame_countlinux · linux Pre-auth	High8.8	—	0.3%	Aug 15, 2026
35Monitor	CVE-2026-72160No exploit	ocfs2: reject dinodes with non-canonical i_mode typelinux · linux	High8.8	—	0.6%	Aug 15, 2026
31Monitor	CVE-2026-72162No exploit	ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_reclinux · linux	High7.8	—	0.1%	Aug 15, 2026
31Monitor	CVE-2026-72164No exploit	ocfs2: avoid moving extents to occupied clusterslinux · linux	High7.8	—	0.1%	Aug 15, 2026

CVE-2026-74309
40Plan
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrupt handler
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74311
31Monitor
virtio: rtc: tear down old virtqueues before restore
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74315
39Monitor
lockd: Avoid hashing uninitialized bytes in nlm4svc_lookup_file()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74328
35Monitor
iommufd: Destroy the pages content after detaching from dmabuf
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74343
31Monitor
kernfs: fix xattr race condition with multiple superblocks
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-74357
31Monitor
drm/amdgpu: fix KASAN slab-out-of-bounds in amdgpu_coredump ring dump
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74364
28Monitor
bpf: Reject exclusive maps as inner maps in map-in-map
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74371
31Monitor
bpf: fix BPF_PROG_QUERY OOB write and cgroup backward compat
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74383
33Monitor
nvme-pci: fix out-of-bounds access in nvme_setup_descriptor_pools
HighCVSS 8.4No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74403
31Monitor
crypto: ccp - Check for page allocation failure correctly in TIO
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74419
29Monitor
accel/amdxdna: Adjust size for copy_to_user()
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-74425
30Monitor
afs: handle CB.InitCallBackState3 requests without a server record
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74428
39Monitor
rxrpc: Fix double unlock in rxrpc_recvmsg()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74429
30Monitor
rxrpc: Fix the reception of a reply packet before data transmission
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74430
30Monitor
rxrpc: Fix ACKALL packet handling
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74431
30Monitor
rxrpc: Fix potential infinite loop in rxrpc_recvmsg()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74433
39Monitor
rxrpc: Fix UAF in rxgk_issue_challenge()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74434
39Monitor
rxrpc: Don't move a peeked OOB message onto the pending queue
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-74435
30Monitor
rxrpc: rxrpc_verify_data ensure rx_dec_buffer alloc
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-74438
31Monitor
crypto: sun4i-ss - Remove insecure and unused rng_alg
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-14279
35Monitor
Wholesale Market <= 2.2.2 - Authenticated (Subscriber+) Privilege Escalation via 'role_required' Parameter
HighCVSS 8.8No exploitEPSS 0%
cedcommerce · wholesale marketAug 15, 2026
CVE-2026-15826
40Plan
User Profile Builder <= 3.16.4 - Unauthenticated Authentication Bypass via Type Confusion to Administrator Account Takeover via 'username' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 3%
- Pre-auth
- Auth bypass
cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editorAug 15, 2026
CVE-2026-14433
28Monitor
Online Booking & Scheduling Calendar for WordPress by vcita <= 4.6.0 - Unauthenticated Stored Cross-Site Scripting via REST API 'business_id' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
vcita · online booking & scheduling calendar for wordpress by vcitaAug 15, 2026
CVE-2026-15142
30Monitor
Real Estate Manager Pro <= 12.8.6 - Authenticated (Subscriber+) Privilege Escalation via 'user_has_cap' Filter ID Collision
HighCVSS 7.5No exploitEPSS 0%
webcodingplace · real estate manager proAug 15, 2026
CVE-2026-16142
39Monitor
TrueBooker <= 1.2.6 - Unauthenticated Account Takeover via Insecure Direct Object Reference in 'truebooker_wp_user_id' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
themetechmount · truebooker – appointment booking and scheduler systemAug 15, 2026
CVE-2026-18438
35Monitor
Templately <= 3.7.1 - Authenticated (Contributor+) Arbitrary File Upload to Remote Code Execution via Gutenberg Cloud Import Attachment Filename Mismatch
HighCVSS 8.8No exploitEPSS 1%
- RCE
- File upload
wpdevteam · templately – elementor & gutenberg template library: 6500+ free & pro ready templates and cloud!Aug 15, 2026
CVE-2026-68461
31Monitor
device property: initialize the remaining fields of fwnode_handle in fwnode_init()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-68470
35Monitor
wifi: mac80211: validate extension-frame layout before RX
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-68471
35Monitor
wifi: ieee80211: validate MLE common info length
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-68472
32Monitor
wifi: cfg80211: validate EHT MLE before MLD ID read
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-68477
39Monitor
ipvs: fix more places with wrong ipv6 transport offsets
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-68479
31Monitor
Bluetooth: btrtl: validate firmware patch bounds
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72003
35Monitor
wifi: brcmfmac: cyw: fix heap overflow on a short auth frame
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72005
31Monitor
wifi: rt2x00: avoid full teardown before work setup in probe
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72009
31Monitor
pmdomain: imx93-blk-ctrl: Extract PHY as shared domain for DSI/CSI
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72012
31Monitor
tracing/osnoise: Call synchronize_rcu() when unregistering
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72014
39Monitor
drbd: reject data replies with an out-of-range payload size
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72018
31Monitor
dibs: loopback: validate offset and size in move_data()
HighCVSS 7.8Proof of conceptEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72019
29Monitor
macsec: don't read an unset MAC header in macsec_encrypt()
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72020
39Monitor
ipvs: reset full ip_vs_seq structs in ip_vs_conn_new
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72021
32Monitor
ipvs: use parsed transport offset in SCTP state lookup
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72024
31Monitor
mac802154: remove interfaces with RCU list deletion
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72029
35Monitor
net: wwan: iosm: bound device offsets in the MUX downlink decoder
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72034
31Monitor
fhandle: reject detached mounts in capable_wrt_mount()
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72035
32Monitor
net/sched: sch_taprio: Replace direct dequeue call with peek and qdisc_dequeue_peeked
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72036
31Monitor
net/sched: sch_multiq: Replace direct dequeue call with peek and qdisc_dequeue_peeked
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72041
39Monitor
espintcp: use sk_msg_free_partial to fix partial send
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72045
35Monitor
octeontx2-af: cn10k: restrict VF LMTLINE sharing to its own PF
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72049
28Monitor
ieee802154: admin-gate legacy LLSEC dump operations
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72051
35Monitor
net: ip6_tunnel: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72052
35Monitor
net: ip6_gre: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72053
35Monitor
net: ipip: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72054
35Monitor
net: ip_vti: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72055
35Monitor
net: ip6_vti: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72057
32Monitor
net/sched: act_ct: preserve tc_skb_cb across defragmentation
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72061
35Monitor
net: sit: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
linux · linuxAug 15, 2026
CVE-2026-72064
39Monitor
net: mana: Sync page pool RX frags for CPU
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Race condition
linux · linuxAug 15, 2026
CVE-2026-72065
39Monitor
net: mana: Validate the packet length reported by the NIC
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72066
31Monitor
cpu: hotplug: Bound hotplug states sysfs output
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72067
31Monitor
cpu: hotplug: Preserve per instance callback errors
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72069
39Monitor
locking/rt: Fix the incorrect RCU protection in rt_spin_unlock()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72072
31Monitor
net/mlx5e: macsec: fix use-after-free of metadata_dst on RX SC delete
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72080
31Monitor
fs/resctrl: Fix use-after-free during unmount
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72083
39Monitor
scsi: target: core: Fix iSCSI ISID use-after-free in REGISTER AND MOVE
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72084
39Monitor
scsi: target: Bound PR-OUT TransportID parsing to the received buffer
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72085
37Monitor
scsi: xen: scsiback: Free unsubmitted command instead of double-putting it
CriticalCVSS 9.3No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72095
31Monitor
dma-fence: Make dma_fence_dedup_array() robust against 0-count input
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72098
39Monitor
dm-verity: fix buffer overflow in FEC calculation
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72099
28Monitor
dm-integrity: don't increment hash_offset twice
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72100
35Monitor
dm-integrity: fix a bug if the bio is out of limits
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72102
31Monitor
dm_early_create: fix freeing used table on dm_resume failure
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72103
29Monitor
dm: avoid leaking the caller's thread keyring via the table device file
HighCVSS 7.3No exploitEPSS 0%
- Info leak
linux · linuxAug 15, 2026
CVE-2026-72105
31Monitor
dm-log: fix a bitset_size overflow on 32bit machines
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72107
35Monitor
dm era: fix out-of-bounds memory access for non-zero start sector
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
linux · linuxAug 15, 2026
CVE-2026-72108
31Monitor
dm thin metadata: fix metadata snapshot consistency on commit failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72110
31Monitor
bpf,fork: wipe ->bpf_storage before bailouts that access it
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72111
35Monitor
bpf: Reset register bounds before narrowing retval range in check_mem_access()
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72113
31Monitor
can: bcm: add missing device refcount for CAN filter removal
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72114
31Monitor
can: bcm: validate frame length in bcm_rx_setup() for RTR replies
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72115
32Monitor
can: bcm: track a single source interface for ANYDEV timeout/throttle ops
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72116
28Monitor
can: bcm: fix stale rx/tx ops after device removal
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72119
31Monitor
can: bcm: extend bcm_tx_lock usage for data and timer updates
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72120
31Monitor
can: bcm: add missing rcu list annotations and operations
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72121
35Monitor
can: bcm: add locking when updating filter and timer values
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72122
29Monitor
can: bcm: fix lockless bound/ifindex race and silent RX_SETUP failure
HighCVSS 7.3No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72123
31Monitor
can: bcm: defer rx_op deallocation to workqueue to fix thrtimer UAF
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72124
35Monitor
can: isotp: serialize TX state transitions under so->rx_lock
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72125
31Monitor
can: isotp: fix use-after-free race with concurrent NETDEV_UNREGISTER
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72126
31Monitor
can: isotp: use unconditional synchronize_rcu() in isotp_release()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72129
39Monitor
nvmet-rdma: handle inline data with a nonzero offset
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72130
39Monitor
nvmet-auth: reject short AUTH_RECEIVE buffers
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72135
31Monitor
tpm: Make the TPM character devices non-seekable
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72136
35Monitor
xfrm: xfrm_interface: require CAP_NET_ADMIN in the device netns for changelink
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 15, 2026
CVE-2026-72143
28Monitor
platform/x86: ISST: Restore SST-PP control to all domains
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72144
31Monitor
platform/x86: dell-laptop: fix missing cleanups in init error path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72149
30Monitor
dmaengine: tegra: Fix burst size calculation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 15, 2026
CVE-2026-72157
35Monitor
net: thunderbolt: Fix frags[] overflow by bounding frame_count
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 15, 2026
CVE-2026-72160
35Monitor
ocfs2: reject dinodes with non-canonical i_mode type
HighCVSS 8.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72162
31Monitor
ocfs2: fix UBSAN array-index-out-of-bounds in ocfs2_sum_rightmost_rec
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026
CVE-2026-72164
31Monitor
ocfs2: avoid moving extents to occupied clusters
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 15, 2026