Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2026

5,479 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 21 of 55

  • CVE-2026-75911
    34Monitor

    CodeWhale before 0.8.64 Remote Code Execution via allow_shell

    HighCVSS 8.5No exploitEPSS 0%

    hmbown · codewhaleAug 18, 2026

  • CVE-2026-75912
    33Monitor

    CodeWhale before 0.8.64 Argument Injection via git_blame

    HighCVSS 8.3No exploitEPSS 0%

    hmbown · codewhaleAug 18, 2026

  • CVE-2026-75913
    34Monitor

    CodeWhale before 0.8.64 Argument Injection via git_show

    HighCVSS 8.5No exploitEPSS 0%

    hmbown · codewhaleAug 18, 2026

  • CVE-2026-75914
    34Monitor

    CodeWhale before 0.8.64 Path Traversal via image_analyze symlink

    HighCVSS 8.7No exploitEPSS 0%

    hmbown · codewhaleAug 18, 2026

  • CVE-2026-75915
    34Monitor

    CodeWhale before 0.8.64 Environment Variable Leak via js_execution

    HighCVSS 8.7No exploitEPSS 0%

    hmbown · codewhaleAug 18, 2026

  • CVE-2026-75926
    37Monitor

    Hugo 0.162.0 to 0.164.x - Node Permission Model Bypass via Default TailwindCSS Child-Process Grant

    CriticalCVSS 9.3No exploitEPSS 0%

    gohugo · hugoAug 18, 2026

  • GHSA-2mf3-mr2r-r4vf
    30Monitor

    @rhinostone/swig: arbitrary local file read via include/extends path traversal

    HighCVSS 7.5No exploit

    npm · @rhinostone/swigAug 18, 2026

  • CVE-2026-15571
    29Monitor

    Keycloak-services: keycloak-services: predictable account-linking hash enables account takeover via malicious oidc client

    HighCVSS 7.3No exploitEPSS 0%

    red hat · red hat build of keycloak 26.6Aug 18, 2026

  • CVE-2026-18504
    21Monitor

    fastify vulnerable to schema validation bypass via root primitive coercion mismatch

    MediumCVSS 5.3Proof of conceptEPSS 0%

    fastify · fastifyAug 18, 2026

  • CVE-2026-52793
    32Monitor

    Froxlor: API Authentication bypasses 2FA Authentication

    HighCVSS 8.1No exploitEPSS 0%

    froxlor · froxlorAug 18, 2026

  • CVE-2026-54347
    34Monitor

    Froxlor: Stored XSS in DNS TXT Record Content Allows Customer-to-Admin Account Takeover

    HighCVSS 8.7No exploitEPSS 0%

    froxlor · froxlorAug 18, 2026

  • CVE-2026-54348
    28Monitor

    Froxlor: Second-Order SQL Injection via `Admins.add` `ipaddress` Parameter Allows Full Database Exfiltration

    HighCVSS 7.2No exploitEPSS 0%

    froxlor · froxlorAug 18, 2026

  • CVE-2026-55426
    31Monitor

    linuxfabrik-lib: Local privilege escalation using embedded command

    HighCVSS 7.8No exploitEPSS 0%

    linuxfabrik · monitoring-pluginsAug 18, 2026

  • CVE-2026-60856
    29Monitor

    Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Install and Packaging).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsAug 18, 2026

  • CVE-2026-18963
    38Monitor

    Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass

    CriticalCVSS 9.1Proof of conceptEPSS 6%

    red hat · red hat build of keycloak 26.4Aug 18, 2026

  • CVE-2026-19869
    30Monitor

    Privilege Escalation via Dropped Field-Level @authentication

    HighCVSS 7.6No exploitEPSS 0%

    neo4j · graphqlAug 18, 2026

  • CVE-2026-49222
    30Monitor

    Vvveb product question authorization bypass allows Vendors to read, approve, edit, or delete questions under other Vendors' products

    HighCVSS 7.6No exploitEPSS 0%

    givanz · vvvebAug 18, 2026

  • CVE-2026-49223
    30Monitor

    Vvveb product review authorization bypass allows Vendors to read, approve, edit, or delete reviews under other Vendors' products

    HighCVSS 7.6No exploitEPSS 0%

    givanz · vvvebAug 18, 2026

  • CVE-2026-49224
    33Monitor

    Vvveb post revision authorization bypass allows Authors to read, restore, or delete other Authors' post revisions

    HighCVSS 8.3No exploitEPSS 0%

    givanz · vvvebAug 18, 2026

  • CVE-2026-49225
    33Monitor

    Vvveb product revision authorization bypass allows Vendors to read, restore, or delete other Vendors' product revisions

    HighCVSS 8.3No exploitEPSS 0%

    givanz · vvvebAug 18, 2026

  • CVE-2026-49228
    35Monitor

    Vvveb product authorization bypass allows Vendors to read, duplicate, or delete other Vendors' products

    HighCVSS 8.8No exploitEPSS 0%

    givanz · vvvebAug 18, 2026

  • CVE-2026-50577
    29Monitor

    ePA 3.x Integration: AES-GCM Nonce Reuse via Frozen VAU Request Counter

    HighCVSS 7.4No exploitEPSS 0%

    fbeta-gmbh · epa3-service-opensourceAug 18, 2026

  • CVE-2026-50578
    30Monitor

    ePA 3.x Integration: TLS Certificate Verification Universally Disabled

    HighCVSS 7.5No exploitEPSS 0%

    fbeta-gmbh · epa3-service-opensourceAug 18, 2026

  • CVE-2026-52723
    36Monitor

    ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust

    CriticalCVSS 9.1No exploitEPSS 0%

    fbeta-gmbh · epa3-service-opensourceAug 18, 2026

  • CVE-2026-54730
    34Monitor

    authentik: Authentication Flow Bypass via Unguarded challenge_valid() in AuthenticatorEndpointGDTCStage and GoogleChromeStageView

    HighCVSS 8.6No exploitEPSS 0%

    goauthentik · authentikAug 18, 2026

  • CVE-2026-57580
    37Monitor

    authentik: Account Takeover via SAML NameID Comment Truncation

    CriticalCVSS 9.4No exploitEPSS 0%

    goauthentik · authentikAug 18, 2026

  • CVE-2026-61574
    35Monitor

    authentik RAC: access any endpoint via an unrelated application

    HighCVSS 8.8No exploitEPSS 0%

    goauthentik · authentikAug 18, 2026

  • CVE-2026-63337
    30Monitor

    RabbitMQ Java client: Unvalidated Class.forName in JSON-RPC ProcedureDescription enables arbitrary class loading

    HighCVSS 7.5No exploitEPSS 0%

    rabbitmq · rabbitmq-java-clientAug 18, 2026

  • CVE-2026-69219
    34Monitor

    RabbitMQ Java client ValueReader: Oversized LongString/bytes length triggers OOM via unchecked allocation

    HighCVSS 8.7No exploitEPSS 0%

    rabbitmq · rabbitmq-java-clientAug 18, 2026

  • CVE-2026-69220
    34Monitor

    RabbitMQ Java client ValueReader: Unbounded recursive table/array nesting causes StackOverflowError DoS

    HighCVSS 8.7No exploitEPSS 0%

    rabbitmq · rabbitmq-java-clientAug 18, 2026

  • CVE-2026-62491
    32Monitor

    Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · purchasingAug 18, 2026

  • CVE-2026-62988
    36Monitor

    Froxlor: Credential and 2FA secret disclosure via Froxlor API endpoints

    CriticalCVSS 9.0No exploitEPSS 0%

    froxlor · froxlorAug 18, 2026

  • CVE-2026-70708
    32Monitor

    Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · sales foundationAug 18, 2026

  • CVE-2026-70710
    35Monitor

    Vulnerability in the Oracle Sales Foundation product of Oracle E-Business Suite (component: Security API).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · sales foundationAug 18, 2026

  • CVE-2026-70713
    30Monitor

    Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Reports).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · isetupAug 18, 2026

  • CVE-2026-70718
    34Monitor

    Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · bills of materialAug 18, 2026

  • CVE-2026-70721
    34Monitor

    Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).

    HighCVSS 8.6No exploitEPSS 0%

    oracle · hyperion profitability and cost managementAug 18, 2026

  • CVE-2026-70722
    32Monitor

    Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · advanced inbound telephonyAug 18, 2026

  • CVE-2026-70723
    30Monitor

    Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).

    HighCVSS 7.7No exploitEPSS 0%

    oracle · hyperion profitability and cost managementAug 18, 2026

  • CVE-2026-70724
    30Monitor

    Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · mysql clusterAug 18, 2026

  • CVE-2026-70725
    30Monitor

    Vulnerability in the Oracle Advanced Inbound Telephony product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.6No exploitEPSS 0%

    oracle · advanced inbound telephonyAug 18, 2026

  • CVE-2026-70728
    34Monitor

    Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · autonomous health frameworkAug 18, 2026

  • CVE-2026-70729
    35Monitor

    Vulnerability in the Oracle Teleservice product of Oracle E-Business Suite (component: Service Request Form).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · teleserviceAug 18, 2026

  • CVE-2026-70730
    36Monitor

    Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · hyperion profitability and cost managementAug 18, 2026

  • CVE-2026-70731
    33Monitor

    Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).

    HighCVSS 8.4No exploitEPSS 0%

    oracle · autonomous health frameworkAug 18, 2026

  • CVE-2026-70733
    28Monitor

    Vulnerability in the Oracle Hyperion Profitability and Cost Management product of Oracle Hyperion (component: Deployment).

    HighCVSS 7.1No exploitEPSS 0%

    oracle · hyperion profitability and cost managementAug 18, 2026

  • CVE-2026-70734
    29Monitor

    Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · autonomous health frameworkAug 18, 2026

  • CVE-2026-70882
    34Monitor

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

    HighCVSS 8.7No exploitEPSS 0%

    oracle · hyperion data relationship managementAug 18, 2026

  • CVE-2026-70883
    36Monitor

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · hyperion data relationship managementAug 18, 2026

  • CVE-2026-70884
    36Monitor

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · hyperion data relationship managementAug 18, 2026

  • CVE-2026-70885
    34Monitor

    Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and security).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · hyperion data relationship managementAug 18, 2026

  • CVE-2026-70931
    32Monitor

    Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · workflowAug 18, 2026

  • CVE-2026-70932
    28Monitor

    Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).

    HighCVSS 7.2No exploitEPSS 0%

    oracle · order managementAug 18, 2026

  • CVE-2026-71038
    30Monitor

    Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product of Oracle Commerce (component: Experience Ma

    HighCVSS 7.5No exploitEPSS 0%

    oracle · commerce guided searchAug 18, 2026

  • CVE-2026-71039
    35Monitor

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Application Server).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · agile product lifecycle managementAug 18, 2026

  • CVE-2026-71040
    39Monitor

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · agile product lifecycle managementAug 18, 2026

  • CVE-2026-71044
    35Monitor

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Export).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · agile product lifecycle managementAug 18, 2026

  • CVE-2026-71045
    35Monitor

    Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Security).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · agile product lifecycle managementAug 18, 2026

  • CVE-2026-15315
    34Monitor

    Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C200

    HighCVSS 8.7Proof of conceptEPSS 0%

    tp-link · tapo c120 firmwareAug 18, 2026

  • CVE-2026-21580
    37Monitor

    This Critical severity Stored XSS, PrivEsc (Privilege Escalation), and Security Misconfiguration vulnerability was introduced in versions 7.

    CriticalCVSS 9.3No exploitEPSS 0%

    atlassian · confluence data centerAug 18, 2026

  • CVE-2026-48508
    35Monitor

    Lemur: Authorization bypass in StrictRolePermission / AuthorityCreatorPermission

    HighCVSS 8.8No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • CVE-2026-50143
    32Monitor

    Actor MCP path authority injection leaks Apify token

    HighCVSS 8.1No exploitEPSS 0%

    apify · apify-mcp-serverAug 18, 2026

  • CVE-2026-50161
    37Monitor

    libre: Integer overflow in websock_decode() masked frame length check leads to heap buffer overflow

    CriticalCVSS 9.3No exploitEPSS 0%

    baresip · reAug 18, 2026

  • CVE-2026-54552
    31Monitor

    sh _uid does not drop supplementary groups (incomplete privilege drop)

    HighCVSS 7.9No exploitEPSS 0%

    amoffat · shAug 18, 2026

  • CVE-2026-63642
    25Monitor

    MagicMirror newsfeed Socket.IO notification allows blind server-side request forgery

    MediumCVSS 6.3Proof of conceptEPSS 0%

    magicmirrororg · magicmirrorAug 18, 2026

  • CVE-2026-67920
    35Monitor

    An issue in Halo 2.25.4 allows a remote attacker to execute arbitrary code via the run.halo.app.migration.impl.MigrationServiceImpl.restoreW

    HighCVSS 8.8Proof of conceptEPSS 0%

    Aug 18, 2026

  • CVE-2026-71878
    36Monitor

    Authentication bypass in Integrated Publishing Toolkit

    CriticalCVSS 9.2No exploitEPSS 0%

    gbif · integrated publishing toolkitAug 18, 2026

  • CVE-2026-71879
    36Monitor

    Authentication bypass in Integrated Publishing Toolkit

    CriticalCVSS 9.1No exploitEPSS 0%

    gbif · integrated publishing toolkitAug 18, 2026

  • CVE-2026-71880
    30Monitor

    Server-side template injection in Integrated Publishing Toolkit

    HighCVSS 7.6No exploitEPSS 0%

    gbif · integrated publishing toolkitAug 18, 2026

  • CVE-2026-74038
    28Monitor

    Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment

    HighCVSS 7.0No exploitEPSS 0%

    wazuh · wazuhAug 18, 2026

  • CVE-2026-74039
    28Monitor

    Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context

    HighCVSS 7.1No exploitEPSS 0%

    wazuh · wazuhAug 18, 2026

  • CVE-2026-74044
    28Monitor

    Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

    HighCVSS 7.0No exploitEPSS 0%

    wazuh · wazuhAug 18, 2026

  • CVE-2026-75625
    36Monitor

    Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

    CriticalCVSS 9.1No exploitEPSS 0%

    uber · krakenAug 18, 2026

  • CVE-2025-9210
    32Monitor

    Missing JSON Web Token signature validation in Otalio Ship Property Management System

    HighCVSS 8.1No exploitEPSS 0%

    otalio · ship property management systemAug 18, 2026

  • CVE-2026-24183
    31Monitor

    NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege mana

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · cumulus linuxAug 18, 2026

  • CVE-2026-24185
    28Monitor

    NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is en

    HighCVSS 7.1No exploitEPSS 0%

    nvidia · nvosAug 18, 2026

  • CVE-2026-47606
    36Monitor

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.

    CriticalCVSS 9.1No exploitEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • CVE-2026-47627
    39Monitor

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • CVE-2026-47628
    30Monitor

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits.

    HighCVSS 7.5No exploitEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • CVE-2026-47629
    30Monitor

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation.

    HighCVSS 7.5No exploitEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • CVE-2026-47630
    22Monitor

    NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • GHSA-c7hr-448w-65px
    33Monitor

    MeshCentral has unsanitized data fields

    HighCVSS 8.3No exploit

    npm · meshcentralAug 18, 2026

  • CVE-2026-47719
    32Monitor

    FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading

    HighCVSS 8.2No exploitEPSS 0%

    frangoteam · fuxaAug 18, 2026

  • CVE-2026-52481
    30Monitor

    An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() fun

    HighCVSS 7.5No exploitEPSS 0%

    Aug 18, 2026

  • CVE-2026-52735
    37Monitor

    ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

    CriticalCVSS 9.3No exploitEPSS 0%

    zcashfoundation · zebraAug 18, 2026

  • CVE-2026-52736
    34Monitor

    ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache

    HighCVSS 8.7No exploitEPSS 0%

    zcashfoundation · zebraAug 18, 2026

  • CVE-2026-52829
    30Monitor

    ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book

    HighCVSS 7.5No exploitEPSS 0%

    zcashfoundation · zebraAug 18, 2026

  • CVE-2026-59915
    29Monitor

    Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability.

    HighCVSS 7.3No exploitEPSS 0%

    dell · alienware command center (awcc)Aug 18, 2026

  • CVE-2026-65984
    30Monitor

    FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions

    HighCVSS 7.5No exploitEPSS 0%

    frangoteam · fuxaAug 18, 2026

  • CVE-2026-67443
    36Monitor

    FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

    CriticalCVSS 9.2No exploitEPSS 0%

    frangoteam · fuxaAug 18, 2026

  • CVE-2026-70666
    29Monitor

    Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs

    HighCVSS 7.4No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • CVE-2026-71303
    30Monitor

    Lemur: Incomplete fix for CVE-2026-55166 -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist

    HighCVSS 7.7No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • CVE-2026-71307
    30Monitor

    Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API

    HighCVSS 7.7No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • CVE-2026-71308
    32Monitor

    Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates

    HighCVSS 8.1No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • CVE-2026-71417
    29Monitor

    Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it

    HighCVSS 7.3No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • CVE-2026-71675
    30Monitor

    An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c

    HighCVSS 7.5No exploitEPSS 0%

    Aug 18, 2026

  • CVE-2026-75877
    34Monitor

    TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow

    HighCVSS 8.6No exploitEPSS 0%

    trendnet · tv-ip751wicAug 18, 2026

  • CVE-2026-75935
    34Monitor

    Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

    HighCVSS 8.7No exploitEPSS 0%

    amazon ion · amazon ion javaAug 18, 2026

  • CVE-2026-75936
    34Monitor

    Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java

    HighCVSS 8.7No exploitEPSS 0%

    amazon ion · amazon ion javaAug 18, 2026

  • CVE-2026-52817
    28Monitor

    Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation

    HighCVSS 7.0No exploitEPSS 0%

    linuxfabrik · monitoring-pluginsAug 18, 2026