By publication date

Exploited and new serious CVEs: August 2026

5,261 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 27 of 53

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2026-73364No exploit	WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerabilitywpdesk · flexible subscriptions · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Aug 19, 2026
30Monitor	CVE-2026-73384No exploit	WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerabilitycmsminds · pay with contact form 7 · CWE-201 Pre-auth	High7.5	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-73385No exploit	WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerabilityoutanking team · outranking plugin options · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 19, 2026
30Monitor	CVE-2026-73386No exploit	WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerabilityzealousweb · track geolocation of users using contact form 7 · CWE-201 Pre-auth	High7.5	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-73387No exploit	WordPress Resido theme <= 1.5 - Local File Inclusion vulnerabilitysmartdatasoft · resido · CWE-98 Pre-auth	High8.1	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-73388No exploit	WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerabilityteconcetheme · nikstore core · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Aug 19, 2026
39Monitor	CVE-2026-73389No exploit	WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerabilitythe4 · kalles addons · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Aug 19, 2026
39Monitor	CVE-2026-73390No exploit	WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerabilityklbtheme · total donations · CWE-266 Pre-auth	Critical9.8	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-73391No exploit	WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerabilityklbtheme · total donations · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-73394No exploit	WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerabilitystitchexpress · stitch express · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 19, 2026
34Monitor	CVE-2019-25766No exploit	Renovate before 19.38.7 Credential Exposure via Go Modulesrenovatebot · renovate · CWE-532 Pre-auth Info leak	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2020-37267No exploit	Renovate 19.180.0 before 23.25.1 Token Leakage via Logsrenovatebot · renovate · CWE-532 Pre-auth Info leak	High8.7	—	0.4%	Aug 19, 2026
39Monitor	CVE-2026-16019No exploit	SQL Injection in Faydam Innovation's FAYDAM Dataloggerfaydam innovation inc. · faydam datalogger · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-54794No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.dell · openmanage enterprise · CWE-918 Pre-auth SSRF	High7.2	—	0.2%	Aug 19, 2026
36Monitor	CVE-2026-54795No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Commdell · openmanage enterprise · CWE-78 RCE Command injection	High8.8	—	2.2%	Aug 19, 2026
35Monitor	CVE-2026-56088No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Indell · openmanage enterprise · CWE-89 SQL injection	High8.8	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-70421No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.dell · openmanage enterprise · CWE-269	High7.2	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-70422No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Indell · openmanage enterprise · CWE-89 SQL injection	High8.8	—	0.4%	Aug 19, 2026
40Plan	CVE-2026-74803No exploit	Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64yootheme.com · zoo extension for joomla · CWE-434 Pre-auth File upload	Critical10.0	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-74804No exploit	Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64yootheme.com · zoo extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-75918No exploit	phpMyFAQ before 4.1.7 Authentication Bypass via Tracking Filephpmyfaq · phpmyfaq · CWE-200 Pre-auth Auth bypass Info leak	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-76205No exploit	phpMyFAQ before 4.1.7 SQL Injection via Glossaryphpmyfaq · phpmyfaq · CWE-89 SQL injection	High8.6	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-76207No exploit	phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookiephpmyfaq · phpmyfaq · CWE-304 Auth bypass	High8.6	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-76210No exploit	phpMyFAQ before v4.1.6 Local File Disclosure via PDF Exportphpmyfaq · phpmyfaq · CWE-73 Path traversal	High7.1	—	0.4%	Aug 19, 2026
36Monitor	CVE-2026-76213No exploit	phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttlephpmyfaq · phpmyfaq · CWE-307 Pre-auth	Critical9.1	—	0.4%	Aug 19, 2026
36Monitor	CVE-2026-76214No exploit	phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challengephpmyfaq · phpmyfaq · CWE-294 Pre-auth Auth bypass	Critical9.1	—	0.3%	Aug 19, 2026
30Monitor	CVE-2026-76216No exploit	Vikunja through 2.4.0 Principal-Type Confusion via LinkSharinggo-vikunja · vikunja · CWE-639 Broken access control (IDOR)	High7.7	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-76217No exploit	GitPython before 3.1.58 Arbitrary File Read via pathspec-from-filegitpython project · gitpython · CWE-73 Path traversal	High7.1	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-76218No exploit	GitPython before 3.1.58 Remote Code Execution via Repo.initgitpython project · gitpython · CWE-88 RCE	High7.7	—	0.7%	Aug 19, 2026
28Monitor	CVE-2026-76219No exploit	GitPython before 3.1.58 Arbitrary File Overwrite via read-treegitpython project · gitpython · CWE-88	High7.2	—	0.5%	Aug 19, 2026
34Monitor	CVE-2026-76220No exploit	GitPython before 3.1.58 Command Execution via split_single_char_optionsgitpython project · gitpython · CWE-88 RCE	High8.7	—	0.5%	Aug 19, 2026
33Monitor	CVE-2026-76222No exploit	GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Namegitpython project · gitpython · CWE-22 Pre-auth Path traversal	High8.4	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-76223No exploit	ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTIONarcadedata · arcadedb · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-76224No exploit	ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallbackarcadedata · arcadedb · CWE-94 RCE	High8.7	—	0.8%	Aug 19, 2026
33Monitor	CVE-2026-76225No exploit	ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSVarcadedata · arcadedb · CWE-918 SSRF	High8.3	—	0.3%	Aug 19, 2026
33Monitor	CVE-2026-76229No exploit	Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomizerenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76230No exploit	Renovate 35.63.0 before 40.33.0 Command Injection via npmrenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76231No exploit	Renovate 32.135.0 before 40.33.0 Command Injection via hermitrenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76232No exploit	Renovate 31.51.0 before 40.33.0 Command Injection via helmv3renovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
33Monitor	CVE-2026-76233No exploit	Renovate 39.53.0 before 40.33.0 Command Injection via gleam managerrenovatebot · renovate · CWE-77 RCE Command injection	High8.4	—	1.0%	Aug 19, 2026
28Monitor	CVE-2026-76236No exploit	stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstoneseidetic-labs · stigmem-node · CWE-639 Broken access control (IDOR)	High7.2	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-76237No exploit	stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantineeidetic-labs · stigmem-node · CWE-639 Broken access control (IDOR)	High8.6	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-76238No exploit	stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweepeidetic-labs · stigmem-node · CWE-863 Broken access control (IDOR)	High7.2	—	0.3%	Aug 19, 2026
30Monitor	CVE-2026-76240No exploit	stigmem Postgres SQL Injection via Schema Identifiereidetic-labs · stigmem · CWE-89 SQL injection	High7.5	—	0.3%	Aug 19, 2026
29Monitor	CVE-2026-76241No exploit	stigmem Plugin Signature Enforcement Bypass via Configurationeidetic-labs · stigmem · CWE-494 RCE	High7.3	—	0.1%	Aug 19, 2026
36Monitor	CVE-2026-76242No exploit	stigmem Federation Peer Registration Authentication Bypasseidetic-labs · stigmem · CWE-295 Pre-auth Auth bypass Weak crypto	Critical9.1	—	0.3%	Aug 19, 2026
36Monitor	CVE-2026-76243No exploit	stigmem before 0.9.0a2 Authentication Bypass via Disabled Autheidetic-labs · stigmem · CWE-285 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.2	—	0.5%	Aug 19, 2026
36Monitor	CVE-2026-76244No exploit	stigmem-node Insecure Federation Transport Configurationeidetic-labs · stigmem · CWE-319 Pre-auth Weak crypto	Critical9.1	—	0.2%	Aug 19, 2026
28Monitor	CVE-2026-76245No exploit	stigmem Federation Peer Token Timestamp Validation Bypasseidetic-labs · stigmem · CWE-345	High7.1	—	0.2%	Aug 19, 2026
29Monitor	CVE-2026-23501No exploit	Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Codell · recoverpoint for virtual machines · CWE-78 RCE Command injection	High7.2	—	2.0%	Aug 19, 2026
37Monitor	CVE-2026-45272No exploit	MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config Filepoxenstudio · talebook · CWE-94 RCE	Critical9.4	—	0.5%	Aug 19, 2026
34Monitor	CVE-2026-45273No exploit	MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpointpoxenstudio · talebook · CWE-862 Broken access control (IDOR)	High8.7	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-47187No exploit	SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Writelibfuse · sshfs · CWE-59 Pre-auth	Critical9.3	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-48711No exploit	SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')libfuse · sshfs · CWE-88 RCE	High7.0	—	0.2%	Aug 19, 2026
34Monitor	CVE-2026-49283No exploit	SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypasssimplesamlphp · saml2 · CWE-295 Auth bypass Weak crypto	High8.7	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-49289No exploit	SimpleSAMLphp SAML2: Possible DoS via XPath Transformsimplesamlphp · saml2 · CWE-400 Pre-auth Denial of service	High7.5	—	0.7%	Aug 19, 2026
31Monitor	CVE-2026-49816No exploit	Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.dell · command update · CWE-502 Deserialization Local privilege escalation	High7.8	—	0.3%	Aug 19, 2026
31Monitor	CVE-2026-49817No exploit	Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.dell · command update · CWE-502 Deserialization Local privilege escalation	High7.8	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-52792No exploit	Algernon: Server-side script source disclosure on Windows via NTFS filenamexyproto · algernon · CWE-69 Pre-auth	High8.7	—	0.6%	Aug 19, 2026
39Monitor	CVE-2026-52889No exploit	Formie: Server-Side Template Injection in Formie Hidden field defaultsverbb · formie · CWE-1336 pre-auth RCE SSTI	Critical9.8	—	1.2%	Aug 19, 2026
39Monitor	CVE-2026-53451No exploit	Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code executionsgoudelis · ground-station · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	1.0%	Aug 19, 2026
31Monitor	CVE-2026-53477No exploit	Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.dell · command update · CWE-367 Local privilege escalation Race condition	High7.8	—	0.1%	Aug 19, 2026
29Monitor	CVE-2026-56797No exploit	Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.dell · command update · CWE-367 Local privilege escalation Race condition	High7.3	—	0.1%	Aug 19, 2026
29Monitor	CVE-2026-58562No exploit	Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.dell · command update · CWE-862 Local privilege escalation Broken access control (IDOR)	High7.3	—	0.1%	Aug 19, 2026
31Monitor	CVE-2026-58564No exploit	Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.dell · command update · CWE-276 Local privilege escalation	High7.8	—	0.1%	Aug 19, 2026
35Monitor	CVE-2026-58565No exploit	Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.dell · command update · CWE-862 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 19, 2026
35Monitor	CVE-2026-71176No exploit	Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Indell · openmanage enterprise · CWE-89 SQL injection	High8.8	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-71961No exploit	Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handlershenzhen cudy technology co., ltd. · wr3000 2.0 · CWE-78 RCE Command injection	High8.7	—	2.7%	Aug 19, 2026
40Plan	CVE-2026-75949No exploit	Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-434 Pre-auth Path traversal File upload	Critical10.0	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-75953No exploit	Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-201 Pre-auth	High7.5	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-75954No exploit	Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-75956No exploit	Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3cmsjunkie.com · j-businessdirectory extension for joomla · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-62666No exploit	Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of supergetgrav · grav-plugin-api · CWE-639 Broken access control (IDOR)	High8.8	—	0.6%	Aug 19, 2026
32Monitor	CVE-2026-62667No exploit	Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACLgetgrav · grav-plugin-api · CWE-862 Broken access control (IDOR)	High8.1	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-62673No exploit	Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystemsgetgrav · grav · CWE-178 Pre-auth	High8.2	—	0.5%	Aug 19, 2026
32Monitor	CVE-2026-63407No exploit	Grav API Plugin: CORS 'Access-Control-Allow-Origin: *' on Authenticated API Responsesgetgrav · grav-plugin-api · CWE-942 Pre-auth	High8.2	—	0.3%	Aug 19, 2026
30Monitor	CVE-2026-63408No exploit	Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parametergetgrav · grav-plugin-api · CWE-598 Pre-auth	High7.5	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-64850No exploit	Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()getgrav · grav · CWE-94 RCE	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-64851No exploit	Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlersgetgrav · grav-plugin-shortcode-core · CWE-79 XSS	High8.5	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-64852No exploit	Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any accountgetgrav · grav-plugin-api · CWE-862 Broken access control (IDOR)	High8.7	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-19489Proof of concept	Vulnerability in NetScaler ADC and NetScaler Gateway.netscaler · adc · CWE-120 Pre-auth Memory safety	High8.8	—	0.4%	Aug 19, 2026
77This week	CVE-2026-19490Weaponized	NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490citrix · netscaler application delivery controller · CWE-288 Pre-auth Auth bypass	Critical9.3	KEV	33.2%	Aug 19, 2026
30Monitor	CVE-2026-67363Proof of concept	Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2balbooa.com · balbooa forms extension for joomla · CWE-472 Pre-auth CSRF	High7.7	—	0.5%	Aug 19, 2026
40Plan	CVE-2026-67364No exploit	Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2balbooa.com · balbooa forms extension for joomla · CWE-94 pre-auth RCE CSRF	Critical10.0	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-76235No exploit	Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_htmlred hat · red hat enterprise linux 10 · CWE-401 Pre-auth Denial of service	High7.5	—	0.5%	Aug 19, 2026
40Plan	CVE-2026-20030No exploit	Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-89 Pre-auth SQL injection	Critical10.0	—	0.5%	Aug 19, 2026
39Monitor	CVE-2026-20231No exploit	Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilitiescisco · cisco secure workload · CWE-74	Critical9.9	—	0.5%	Aug 19, 2026
40Plan	CVE-2026-20315No exploit	Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilitiescisco · cisco secure workload · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.4%	Aug 19, 2026
40Plan	CVE-2026-20317No exploit	Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilitiescisco · cisco secure workload · CWE-287 Pre-auth Auth bypass	Critical10.0	—	0.5%	Aug 19, 2026
38Monitor	CVE-2026-20318No exploit	Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilitiescisco · cisco secure workload · CWE-20	Critical9.6	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-20319No exploit	Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilitiescisco · cisco secure workload · CWE-119 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-20320No exploit	A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read secisco · cisco broadworks · CWE-611 Pre-auth XXE	High7.5	—	0.3%	Aug 19, 2026
40Plan	CVE-2026-20357No exploit	Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.6%	Aug 19, 2026
40Plan	CVE-2026-20358No exploit	Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-73 Pre-auth Path traversal	Critical10.0	—	0.4%	Aug 19, 2026
39Monitor	CVE-2026-20359No exploit	Cisco Crosswork Security Hardening Release: August 2026cisco · cisco crosswork planning · CWE-522 Info leak	Critical9.9	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-50173No exploit	Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only usersrheosoph · flow-like · CWE-863 Broken access control (IDOR)	High7.2	—	0.6%	Aug 19, 2026
67This week	CVE-2026-72529Weaponized	A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X ttrueconf · trueconf server · CWE-306 Pre-auth Auth bypass	Critical9.3	KEV	1.4%	Aug 19, 2026
69This week	CVE-2026-72530Weaponized	A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X ttrueconf · trueconf server · CWE-94 pre-auth RCE	Critical9.5	KEV	1.6%	Aug 19, 2026
32Monitor	CVE-2026-19234No exploit	Power System Buffer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-121 RCE Memory safety	High8.2	—	0.1%	Aug 19, 2026
30Monitor	CVE-2026-19875No exploit	Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflowlangflow · langflow · CWE-306 Pre-auth Auth bypass	High7.5	—	0.5%	Aug 19, 2026

CVE-2026-73364
39Monitor
WordPress Flexible Subscriptions plugin <= 1.8.1 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
wpdesk · flexible subscriptionsAug 19, 2026
CVE-2026-73384
30Monitor
WordPress Pay with Contact Form 7 plugin <= 1.0.4 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
cmsminds · pay with contact form 7Aug 19, 2026
CVE-2026-73385
30Monitor
WordPress Outranking plugin Options plugin <= 1.1.3 - Broken Access Control vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
outanking team · outranking plugin optionsAug 19, 2026
CVE-2026-73386
30Monitor
WordPress Track Geolocation Of Users Using Contact Form 7 plugin <= 3.0.2 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
zealousweb · track geolocation of users using contact form 7Aug 19, 2026
CVE-2026-73387
32Monitor
WordPress Resido theme <= 1.5 - Local File Inclusion vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
smartdatasoft · residoAug 19, 2026
CVE-2026-73388
37Monitor
WordPress Nikstore Core plugin <= 1.5 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
teconcetheme · nikstore coreAug 19, 2026
CVE-2026-73389
39Monitor
WordPress Kalles Addons plugin <= 1.0.6 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
the4 · kalles addonsAug 19, 2026
CVE-2026-73390
39Monitor
WordPress Total Donations plugin <= 2.0.5 - Privilege Escalation vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
klbtheme · total donationsAug 19, 2026
CVE-2026-73391
37Monitor
WordPress Total Donations plugin <= 2.0.5 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
klbtheme · total donationsAug 19, 2026
CVE-2026-73394
30Monitor
WordPress Stitch Express plugin <= 1.9.0 - Broken Access Control vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
stitchexpress · stitch expressAug 19, 2026
CVE-2019-25766
34Monitor
Renovate before 19.38.7 Credential Exposure via Go Modules
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
renovatebot · renovateAug 19, 2026
CVE-2020-37267
34Monitor
Renovate 19.180.0 before 23.25.1 Token Leakage via Logs
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
renovatebot · renovateAug 19, 2026
CVE-2026-16019
39Monitor
SQL Injection in Faydam Innovation's FAYDAM Datalogger
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
faydam innovation inc. · faydam dataloggerAug 19, 2026
CVE-2026-54794
28Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains a Server-Side Request Forgery (SSRF) vulnerability.
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- SSRF
dell · openmanage enterpriseAug 19, 2026
CVE-2026-54795
36Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Comm
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-56088
35Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-70421
28Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Privilege Management vulnerability.
HighCVSS 7.2No exploitEPSS 0%
dell · openmanage enterpriseAug 19, 2026
CVE-2026-70422
35Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-74803
40Plan
Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- File upload
yootheme.com · zoo extension for joomlaAug 19, 2026
CVE-2026-74804
37Monitor
Joomla Extension - yootheme.com - Unauthenticated SQL injection in Zoo < 4.1.64
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
yootheme.com · zoo extension for joomlaAug 19, 2026
CVE-2026-75918
34Monitor
phpMyFAQ before 4.1.7 Authentication Bypass via Tracking File
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76205
34Monitor
phpMyFAQ before 4.1.7 SQL Injection via Glossary
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76207
34Monitor
phpMyFAQ before 4.1.7 2FA Bypass via Remember-Me Cookie
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76210
28Monitor
phpMyFAQ before v4.1.6 Local File Disclosure via PDF Export
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76213
36Monitor
phpMyFAQ before 4.1.7 2FA Brute-Force via Session-Scoped Throttle
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76214
36Monitor
phpMyFAQ before 4.1.7 WebAuthn Replay Attack via Challenge
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
phpmyfaq · phpmyfaqAug 19, 2026
CVE-2026-76216
30Monitor
Vikunja through 2.4.0 Principal-Type Confusion via LinkSharing
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
go-vikunja · vikunjaAug 19, 2026
CVE-2026-76217
28Monitor
GitPython before 3.1.58 Arbitrary File Read via pathspec-from-file
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
gitpython project · gitpythonAug 19, 2026
CVE-2026-76218
30Monitor
GitPython before 3.1.58 Remote Code Execution via Repo.init
HighCVSS 7.7No exploitEPSS 0%
- RCE
gitpython project · gitpythonAug 19, 2026
CVE-2026-76219
28Monitor
GitPython before 3.1.58 Arbitrary File Overwrite via read-tree
HighCVSS 7.2No exploitEPSS 0%
gitpython project · gitpythonAug 19, 2026
CVE-2026-76220
34Monitor
GitPython before 3.1.58 Command Execution via split_single_char_options
HighCVSS 8.7No exploitEPSS 0%
- RCE
gitpython project · gitpythonAug 19, 2026
CVE-2026-76222
33Monitor
GitPython before 3.1.58 Path Traversal via .gitmodules Submodule Name
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- Path traversal
gitpython project · gitpythonAug 19, 2026
CVE-2026-76223
28Monitor
ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
arcadedata · arcadedbAug 19, 2026
CVE-2026-76224
34Monitor
ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback
HighCVSS 8.7No exploitEPSS 0%
- RCE
arcadedata · arcadedbAug 19, 2026
CVE-2026-76225
33Monitor
ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV
HighCVSS 8.3No exploitEPSS 0%
- SSRF
arcadedata · arcadedbAug 19, 2026
CVE-2026-76229
33Monitor
Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76230
33Monitor
Renovate 35.63.0 before 40.33.0 Command Injection via npm
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76231
33Monitor
Renovate 32.135.0 before 40.33.0 Command Injection via hermit
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76232
33Monitor
Renovate 31.51.0 before 40.33.0 Command Injection via helmv3
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76233
33Monitor
Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager
HighCVSS 8.4No exploitEPSS 1%
- RCE
- Command injection
renovatebot · renovateAug 19, 2026
CVE-2026-76236
28Monitor
stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
eidetic-labs · stigmem-nodeAug 19, 2026
CVE-2026-76237
34Monitor
stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
eidetic-labs · stigmem-nodeAug 19, 2026
CVE-2026-76238
28Monitor
stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweep
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
eidetic-labs · stigmem-nodeAug 19, 2026
CVE-2026-76240
30Monitor
stigmem Postgres SQL Injection via Schema Identifier
HighCVSS 7.5No exploitEPSS 0%
- SQL injection
eidetic-labs · stigmemAug 19, 2026
CVE-2026-76241
29Monitor
stigmem Plugin Signature Enforcement Bypass via Configuration
HighCVSS 7.3No exploitEPSS 0%
- RCE
eidetic-labs · stigmemAug 19, 2026
CVE-2026-76242
36Monitor
stigmem Federation Peer Registration Authentication Bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
eidetic-labs · stigmemAug 19, 2026
CVE-2026-76243
36Monitor
stigmem before 0.9.0a2 Authentication Bypass via Disabled Auth
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
eidetic-labs · stigmemAug 19, 2026
CVE-2026-76244
36Monitor
stigmem-node Insecure Federation Transport Configuration
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
eidetic-labs · stigmemAug 19, 2026
CVE-2026-76245
28Monitor
stigmem Federation Peer Token Timestamp Validation Bypass
HighCVSS 7.1No exploitEPSS 0%
eidetic-labs · stigmemAug 19, 2026
CVE-2026-23501
29Monitor
Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Co
HighCVSS 7.2No exploitEPSS 2%
- RCE
- Command injection
dell · recoverpoint for virtual machinesAug 19, 2026
CVE-2026-45272
37Monitor
MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
poxenstudio · talebookAug 19, 2026
CVE-2026-45273
34Monitor
MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
poxenstudio · talebookAug 19, 2026
CVE-2026-47187
37Monitor
SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
libfuse · sshfsAug 19, 2026
CVE-2026-48711
28Monitor
SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
HighCVSS 7.0No exploitEPSS 0%
- RCE
libfuse · sshfsAug 19, 2026
CVE-2026-49283
34Monitor
SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
- Weak crypto
simplesamlphp · saml2Aug 19, 2026
CVE-2026-49289
30Monitor
SimpleSAMLphp SAML2: Possible DoS via XPath Transform
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
simplesamlphp · saml2Aug 19, 2026
CVE-2026-49816
31Monitor
Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
- Local privilege escalation
dell · command updateAug 19, 2026
CVE-2026-49817
31Monitor
Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
- Local privilege escalation
dell · command updateAug 19, 2026
CVE-2026-52792
34Monitor
Algernon: Server-side script source disclosure on Windows via NTFS filename
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
xyproto · algernonAug 19, 2026
CVE-2026-52889
39Monitor
Formie: Server-Side Template Injection in Formie Hidden field defaults
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- SSTI
verbb · formieAug 19, 2026
CVE-2026-53451
39Monitor
Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Path traversal
sgoudelis · ground-stationAug 19, 2026
CVE-2026-53477
31Monitor
Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Race condition
dell · command updateAug 19, 2026
CVE-2026-56797
29Monitor
Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Race condition
dell · command updateAug 19, 2026
CVE-2026-58562
29Monitor
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
dell · command updateAug 19, 2026
CVE-2026-58564
31Monitor
Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
dell · command updateAug 19, 2026
CVE-2026-58565
35Monitor
Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
dell · command updateAug 19, 2026
CVE-2026-71176
35Monitor
Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
dell · openmanage enterpriseAug 19, 2026
CVE-2026-71961
35Monitor
Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler
HighCVSS 8.7No exploitEPSS 2%
- RCE
- Command injection
shenzhen cudy technology co., ltd. · wr3000 2.0Aug 19, 2026
CVE-2026-75949
40Plan
Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Path traversal
- File upload
cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026
CVE-2026-75953
30Monitor
Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026
CVE-2026-75954
37Monitor
Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026
CVE-2026-75956
34Monitor
Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026
CVE-2026-62666
35Monitor
Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
getgrav · grav-plugin-apiAug 19, 2026
CVE-2026-62667
32Monitor
Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACL
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
getgrav · grav-plugin-apiAug 19, 2026
CVE-2026-62673
32Monitor
Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
getgrav · gravAug 19, 2026
CVE-2026-63407
32Monitor
Grav API Plugin: CORS 'Access-Control-Allow-Origin: *' on Authenticated API Responses
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
getgrav · grav-plugin-apiAug 19, 2026
CVE-2026-63408
30Monitor
Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
getgrav · grav-plugin-apiAug 19, 2026
CVE-2026-64850
34Monitor
Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()
HighCVSS 8.7No exploitEPSS 0%
- RCE
getgrav · gravAug 19, 2026
CVE-2026-64851
34Monitor
Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers
HighCVSS 8.5No exploitEPSS 0%
- XSS
getgrav · grav-plugin-shortcode-coreAug 19, 2026
CVE-2026-64852
34Monitor
Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
getgrav · grav-plugin-apiAug 19, 2026
CVE-2026-19489
35Monitor
Vulnerability in NetScaler ADC and NetScaler Gateway.
HighCVSS 8.8Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
netscaler · adcAug 19, 2026
CVE-2026-19490
77This week
NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
CriticalCVSS 9.3KEVWeaponizedEPSS 33%
- Pre-auth
- Auth bypass
citrix · netscaler application delivery controllerAug 19, 2026
CVE-2026-67363
30Monitor
Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2
HighCVSS 7.7Proof of conceptEPSS 0%
- Pre-auth
- CSRF
balbooa.com · balbooa forms extension for joomlaAug 19, 2026
CVE-2026-67364
40Plan
Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- CSRF
balbooa.com · balbooa forms extension for joomlaAug 19, 2026
CVE-2026-76235
30Monitor
Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 10Aug 19, 2026
CVE-2026-20030
40Plan
Cisco Crosswork Security Hardening Release: August 2026
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- SQL injection
cisco · cisco crosswork planningAug 19, 2026
CVE-2026-20231
39Monitor
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities
CriticalCVSS 9.9No exploitEPSS 0%
cisco · cisco secure workloadAug 19, 2026
CVE-2026-20315
40Plan
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cisco · cisco secure workloadAug 19, 2026
CVE-2026-20317
40Plan
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
cisco · cisco secure workloadAug 19, 2026
CVE-2026-20318
38Monitor
Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities
CriticalCVSS 9.6No exploitEPSS 0%
cisco · cisco secure workloadAug 19, 2026
CVE-2026-20319
30Monitor
Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure workloadAug 19, 2026
CVE-2026-20320
30Monitor
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read se
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- XXE
cisco · cisco broadworksAug 19, 2026
CVE-2026-20357
40Plan
Cisco Crosswork Security Hardening Release: August 2026
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
cisco · cisco crosswork planningAug 19, 2026
CVE-2026-20358
40Plan
Cisco Crosswork Security Hardening Release: August 2026
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Path traversal
cisco · cisco crosswork planningAug 19, 2026
CVE-2026-20359
39Monitor
Cisco Crosswork Security Hardening Release: August 2026
CriticalCVSS 9.9No exploitEPSS 0%
- Info leak
cisco · cisco crosswork planningAug 19, 2026
CVE-2026-50173
28Monitor
Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
rheosoph · flow-likeAug 19, 2026
CVE-2026-72529
67This week
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t
CriticalCVSS 9.3KEVWeaponizedEPSS 1%
- Pre-auth
- Auth bypass
trueconf · trueconf serverAug 19, 2026
CVE-2026-72530
69This week
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t
CriticalCVSS 9.5KEVWeaponizedEPSS 1%
- pre-auth RCE
trueconf · trueconf serverAug 19, 2026
CVE-2026-19234
32Monitor
Power System Buffer Overflow
HighCVSS 8.2No exploitEPSS 0%
- RCE
- Memory safety
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-19875
30Monitor
Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
langflow · langflowAug 19, 2026