Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2026

6,210 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 29 of 63

  • Wazuh 4.0.0 < 4.14.6 Path Traversal DoS via Agent Enrollment

    HighCVSS 7.0No exploitEPSS 0%

    wazuh · wazuhAug 18, 2026

  • Wazuh 4.0.0 < 4.14.7 API DoS via Deeply Nested JSON auth_context

    HighCVSS 7.1No exploitEPSS 0%

    wazuh · wazuhAug 18, 2026

  • Wazuh 4.0.0 < 4.14.6 Path Traversal Arbitrary Directory Deletion via Cluster Hello

    HighCVSS 7.0No exploitEPSS 0%

    wazuh · wazuhAug 18, 2026

  • Kraken Agents Peer-to-Peer Download Cache Poisoning via Digest Verification Bypass

    CriticalCVSS 9.1No exploitEPSS 0%

    uber · krakenAug 18, 2026

  • CVE-2025-9210
    32Monitor

    Missing JSON Web Token signature validation in Otalio Ship Property Management System

    HighCVSS 8.1No exploitEPSS 0%

    otalio · ship property management systemAug 18, 2026

  • NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege mana

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · cumulus linuxAug 18, 2026

  • NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is en

    HighCVSS 7.1No exploitEPSS 0%

    nvidia · nvosAug 18, 2026

  • NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.

    CriticalCVSS 9.1No exploitEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal.

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an allocation of resources without limits.

    HighCVSS 7.5No exploitEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause improper input validation.

    HighCVSS 7.5No exploitEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    nvidia · triton inference serverAug 18, 2026

  • MeshCentral has unsanitized data fields

    HighCVSS 8.3No exploit

    npm · meshcentralAug 18, 2026

  • FUXA: Unauthenticated SSRF via Socket.IO DEVICE_WEBAPI_REQUEST and DEVICE_PROPERTY with response reading

    HighCVSS 8.2No exploitEPSS 0%

    frangoteam · fuxaAug 18, 2026

  • An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the tcp_actions() fun

    HighCVSS 7.5No exploitEPSS 0%

    Aug 18, 2026

  • ZEBRA: Consensus divergence via P2SH sigop undercount in pure-Rust disabled-opcode parser

    CriticalCVSS 9.3No exploitEPSS 0%

    zcashfoundation · zebraAug 18, 2026

  • ZEBRA: Block suppression via NU5 same-header body poisoning of sent-hash cache

    HighCVSS 8.7No exploitEPSS 0%

    zcashfoundation · zebraAug 18, 2026

  • ZEBRA: IPv4-Mapped Mempool Misbehavior Update Aborts Zebra Address Book

    HighCVSS 7.5No exploitEPSS 0%

    zcashfoundation · zebraAug 18, 2026

  • Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability.

    HighCVSS 7.3No exploitEPSS 0%

    dell · alienware command center (awcc)Aug 18, 2026

  • FUXA: JWT lifecycle flaws allow deleted or demoted users to retain privileged sessions

    HighCVSS 7.5No exploitEPSS 0%

    frangoteam · fuxaAug 18, 2026

  • FUXA: Unauthenticated guest JWT bypasses Node-RED secure-mode authorization gate (Remote Script Execution)

    CriticalCVSS 9.2No exploitEPSS 0%

    frangoteam · fuxaAug 18, 2026

  • Lemur: Server-Side Request Forgery via the ACME client following server-controlled URLs

    HighCVSS 7.4No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • Lemur: Incomplete fix for CVE-2026-55166 -- ACME authority update endpoint allows non-admin to replace `acme_url` with internal IP, bypassing allowlist

    HighCVSS 7.7No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • Lemur: Authenticated low-privilege users can read plaintext destination credentials (SFTP password / private-key passphrase) via the destinations API

    HighCVSS 7.7No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • Lemur: Unchecked `replaces[]` lets any user silence notifications and hijack auto-rotation for arbitrary certificates

    HighCVSS 8.1No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • Lemur: Any user can revoke arbitrary certificates at the CA by uploading a duplicate record and revoking it

    HighCVSS 7.3No exploitEPSS 0%

    netflix · lemurAug 18, 2026

  • An issue in Open5GS v.2.7.0 allows a remote attacker to cause a denial of service via the ngap_send_to_nas() function in src/amf/ngap-path.c

    HighCVSS 7.5No exploitEPSS 0%

    Aug 18, 2026

  • TRENDnet TV-IP751WIC alphapd FUN_0043372C stack-based overflow

    HighCVSS 8.6No exploitEPSS 0%

    trendnet · tv-ip751wicAug 18, 2026

  • Memory-amplification denial of service via declared-length preallocation in Amazon ion-java

    HighCVSS 8.7No exploitEPSS 0%

    amazon ion · amazon ion javaAug 18, 2026

  • Memory-amplification denial of service via GZIP decompression bomb in Amazon ion-java

    HighCVSS 8.7No exploitEPSS 0%

    amazon ion · amazon ion javaAug 18, 2026

  • Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation

    HighCVSS 7.0No exploitEPSS 0%

    linuxfabrik · monitoring-pluginsAug 18, 2026

  • Blueprint Studio API authorization bypass for non-admin Home Assistant users

    HighCVSS 8.7No exploitEPSS 0%

    ha-china · blueprint-studioAug 18, 2026

  • Blueprint Studio Git credential helper command injection

    HighCVSS 8.6No exploitEPSS 0%

    ha-china · blueprint-studioAug 18, 2026

  • Vulnerability in the Oracle Hyperion Financial Reporting product of Oracle Hyperion (component: Server).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · hyperion financial managementAug 18, 2026

  • Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In PDF Export SDK).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · outside in technologyAug 18, 2026

  • Vulnerability in the Oracle Hyperion Infrastructure Technology product of Oracle Hyperion (component: Lifecycle Management).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · hyperion infrastructure technologyAug 18, 2026

  • Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · outside in technologyAug 18, 2026

  • Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · outside in technologyAug 18, 2026

  • Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Core).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · outside in technologyAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · hospitality simphonyAug 18, 2026

  • Vulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications (component: POS).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · hospitality simphonyAug 18, 2026

  • Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDB Operator).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · mysql clusterAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.1No exploitEPSS 0%

    oracle · general ledgerAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    HighCVSS 8.6No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle · weblogic serverAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Security).

    HighCVSS 8.7No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · access managerAug 18, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · identity managerAug 18, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · webcenter portalAug 18, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter portalAug 18, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle · webcenter portalAug 18, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter portalAug 18, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    HighCVSS 7.7No exploitEPSS 0%

    oracle · webcenter portalAug 18, 2026

  • Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware (component: Web Services Security).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · web services managerAug 18, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: PIA Core Technology).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsAug 18, 2026

  • Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.6No exploitEPSS 0%

    oracle · general ledgerAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    HighCVSS 7.1No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Search).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel Artificial Intelligence product of Oracle Siebel CRM (component: AI).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · siebel artificial intelligenceAug 18, 2026

  • Vulnerability in the Oracle Internet Procurement Connector product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · e-business suiteAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · general ledgerAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).

    HighCVSS 7.1No exploitEPSS 0%

    oracle · paymentsAug 18, 2026

  • Vulnerability in the Oracle Payments product of Oracle E-Business Suite (component: File Transmission).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · paymentsAug 18, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Application Interface).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server Infrastructure).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Migration).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Email Marketing).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · siebel apps - marketingAug 18, 2026

  • Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (component: REST).

    HighCVSS 7.4No exploitEPSS 0%

    oracle · siebel crmAug 18, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Business Interlink).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsAug 18, 2026

  • Vulnerability in the Oracle Enterprise Manager for Systems Infrastructure product of Oracle Enterprise Manager (component: Agent).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · enterprise manager for systems infrastructureAug 18, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Integration Broker).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsAug 18, 2026

  • Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · unified directoryAug 18, 2026

  • Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · unified directoryAug 18, 2026

  • Vulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD Core).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · unified directoryAug 18, 2026

  • Vulnerability in the Oracle Hyperion Calculation Manager product of Oracle Hyperion (component: Security).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · hyperion calculation managerAug 18, 2026

  • Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

    HighCVSS 8.7No exploitEPSS 0%

    oracle · service delivery platformAug 18, 2026

  • Vulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component: Messaging Enabler).

    CriticalCVSS 9.6No exploitEPSS 0%

    oracle · service delivery platformAug 18, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Data Mover).

    HighCVSS 7.2No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsAug 18, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Configuration Manager).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsAug 18, 2026