By publication date

Exploited and new serious CVEs: August 2026

5,213 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 31 of 53

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-16928No exploit	Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-122 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 20, 2026
35Monitor	CVE-2026-16932No exploit	Vulnerabilities in IBM AIX and PowerVM VIOSibm · vios · CWE-78 RCE Command injection	High8.8	—	0.1%	Aug 20, 2026
32Monitor	CVE-2026-49825No exploit	lxml: javascript: URL bypass in Cleaner via xlink:hreflxml · lxml · CWE-79 Pre-auth XSS	High8.2	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-61897No exploit	accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scriptscanonical · accountsservice · CWE-273 Local privilege escalation	High7.8	—	0.1%	Aug 20, 2026
31Monitor	CVE-2026-61898No exploit	accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scriptscanonical · accountsservice · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	0.1%	Aug 20, 2026
30Monitor	CVE-2026-63490No exploit	Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypassjknack · handlebars.java · CWE-22 Pre-auth Path traversal	High7.5	—	0.6%	Aug 20, 2026
34Monitor	CVE-2026-73220No exploit	CVAT: Stored XSS via annotation guides in audio taskscvat-ai · cvat · CWE-80 XSS	High8.5	—	0.4%	Aug 20, 2026
29Monitor	CVE-2026-19611No exploit	Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth foldingred hat · red hat build of apache camel 4 for quarkus 3 · CWE-173 Pre-auth	High7.4	—	1.0%	Aug 20, 2026
39Monitor	CVE-2026-63037No exploit	Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpointapache · inlong · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Aug 20, 2026
39Monitor	CVE-2026-63038No exploit	Apache InLong: SQL Injection via String Concatenation Vulnerability Reportapache · inlong · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Aug 20, 2026
39Monitor	CVE-2026-63039Proof of concept	Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleServiceapache · inlong · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Aug 20, 2026
32Monitor	CVE-2026-63040No exploit	Apache InLong: Missing authorization in StreamSource forceDeleteapache · inlong · CWE-552	High8.1	—	0.6%	Aug 20, 2026
32Monitor	CVE-2026-63042No exploit	Apache InLong: Missing authorization on DataNode management endpointsapache · inlong · CWE-552	High8.1	—	0.6%	Aug 20, 2026
30Monitor	CVE-2026-63043No exploit	Apache InLong: Agent path traversal via unvalidated file source pathapache · inlong · CWE-23 Pre-auth Path traversal	High7.5	—	0.8%	Aug 20, 2026
34Monitor	CVE-2026-75140No exploit	jsoup Uncontrolled Resource Consumption in XmlTreeBuilderjhy · soup · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Aug 20, 2026
31Monitor	CVE-2026-13121No exploit	Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerabilityparallels · ras client · CWE-749 RCE Local privilege escalation	High7.8	—	0.1%	Aug 20, 2026
31Monitor	CVE-2026-15679No exploit	Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerabilityhugging face · pytorch image models · CWE-502 RCE Deserialization	High7.8	—	0.4%	Aug 20, 2026
28Monitor	CVE-2026-15686No exploit	Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerabilityadminer · adminer · CWE-253 RCE	High7.2	—	1.0%	Aug 20, 2026
31Monitor	CVE-2026-18262No exploit	Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerabilityparallels · ras client · CWE-749 RCE Local privilege escalation	High7.8	—	0.1%	Aug 20, 2026
31Monitor	CVE-2026-18263No exploit	Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerabilityparallels · ras client · CWE-749 RCE Local privilege escalation	High7.8	—	0.1%	Aug 20, 2026
36Monitor	CVE-2026-18264No exploit	NoMachine getstat Command Injection Remote Code Execution Vulnerabilitynomachine · nomachine · CWE-78 RCE Command injection	High8.8	—	2.2%	Aug 20, 2026
39Monitor	CVE-2026-18265No exploit	OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerabilityosnexus · quantastor · CWE-306 pre-auth RCE Auth bypass	Critical9.8	—	1.0%	Aug 20, 2026
28Monitor	CVE-2026-18268No exploit	Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerabilitykenwood · dnr1007xr · CWE-78 RCE Local privilege escalation Command injection	High7.0	—	0.8%	Aug 20, 2026
31Monitor	CVE-2026-18270No exploit	Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerabilitykenwood · dnr1007xr · CWE-732 Local privilege escalation	High7.8	—	0.1%	Aug 20, 2026
29Monitor	CVE-2026-18274No exploit	Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerabilityheimdall data · database proxy · CWE-22 RCE Path traversal	High7.2	—	2.0%	Aug 20, 2026
35Monitor	CVE-2026-18279No exploit	Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerabilitysony · xav-9500es · CWE-120 pre-auth RCE Memory safety	High8.8	—	0.6%	Aug 20, 2026
32Monitor	CVE-2026-18281No exploit	Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerabilitysony · xav-9500es · CWE-122 pre-auth RCE Memory safety	High8.0	—	0.4%	Aug 20, 2026
32Monitor	CVE-2026-18282No exploit	Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerabilitysony · xav-9500es · CWE-122 pre-auth RCE Memory safety	High8.0	—	0.4%	Aug 20, 2026
31Monitor	CVE-2026-18284No exploit	Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerabilitysony · xav-9500es · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	1.0%	Aug 20, 2026
31Monitor	CVE-2026-18285No exploit	Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerabilityaeon · aeon · CWE-502 RCE Deserialization	High7.8	—	0.5%	Aug 20, 2026
31Monitor	CVE-2026-18286No exploit	Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerabilityaeon · aeon · CWE-94 RCE	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18287No exploit	Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerabilityaeon · aeon · CWE-94 RCE	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18288No exploit	OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityoriginlab · originpro · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18289No exploit	OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityoriginlab · originpro · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18290No exploit	OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityoriginlab · originpro · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18291No exploit	OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerabilityoriginlab · originpro · CWE-119 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18292No exploit	OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerabilityoriginlab · originpro · CWE-119 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18293No exploit	OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilityoriginlab · origin viewer · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18294No exploit	OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerabilityoriginlab · origin viewer · CWE-119 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18295No exploit	GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerabilitygstreamer · gstreamer · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18296No exploit	GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygstreamer · gstreamer · CWE-122 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18297No exploit	GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitygstreamer · gstreamer · CWE-121 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18298No exploit	GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygstreamer · gstreamer · CWE-122 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18299No exploit	GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerabilitygstreamer · gstreamer · CWE-416 RCE Memory safety	High7.8	—	0.2%	Aug 20, 2026
31Monitor	CVE-2026-18300No exploit	GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18301No exploit	GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18302No exploit	GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18303No exploit	GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-121 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18304No exploit	GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18305No exploit	GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18306No exploit	GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18307No exploit	GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-122 RCE Memory safety	High7.8	—	0.4%	Aug 20, 2026
31Monitor	CVE-2026-18308No exploit	GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.3%	Aug 20, 2026
31Monitor	CVE-2026-18309No exploit	GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerabilitygimp · gimp · CWE-190 RCE Memory safety	High7.8	—	0.4%	Aug 20, 2026
32Monitor	CVE-2026-40345Proof of concept	deepmerge-ts: Stack exhaustion when merging recursive object graphsrebeccastevens · deepmerge-ts · CWE-674 Pre-auth Denial of service	High8.2	—	0.5%	Aug 20, 2026
35Monitor	CVE-2026-54449No exploit	LangBot: Authenticated RCE Via MCP Configurationlangbot-app · langbot · CWE-77 RCE Command injection	High8.8	—	0.7%	Aug 20, 2026
28Monitor	CVE-2026-54616No exploit	NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return valuem2team · nanazip · CWE-125 Pre-auth Memory safety	High7.1	—	0.4%	Aug 20, 2026
39Monitor	CVE-2026-55642No exploit	dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured)t8y2 · dbx · CWE-306 pre-auth RCE Auth bypass	Critical9.8	—	0.6%	Aug 20, 2026
30Monitor	CVE-2026-61704No exploit	link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897op-engineering · link-preview-js · CWE-918 Pre-auth SSRF	High7.5	—	0.5%	Aug 20, 2026
32Monitor	CVE-2026-65842No exploit	Plate: SSRF with response disclosure in DOCX image embeddingudecode · plate · CWE-918 Pre-auth SSRF	High8.2	—	0.5%	Aug 20, 2026
30Monitor	CVE-2026-69183No exploit	Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)monkeytypegame · monkeytype · CWE-290 Pre-auth Auth bypass Denial of service	High7.5	—	0.4%	Aug 20, 2026
37Monitor	CVE-2026-71428No exploit	unstructured: Server-Side Request Forgery in the URL-based partitioningunstructured-io · unstructured · CWE-601 Pre-auth SSRF Open redirect	Critical9.3	—	0.4%	Aug 20, 2026
34Monitor	CVE-2026-77022No exploit	Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflowcomfast · cf-n1-s · CWE-119 Memory safety	High8.6	—	0.7%	Aug 20, 2026
32Monitor	CVE-2026-77176No exploit	Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicyred hat · red hat openshift container platform 4 · CWE-73 Path traversal	High8.1	—	0.4%	Aug 20, 2026
37Monitor	CVE-2026-2334No exploit	) Missing Server-Side File Extension Validation in vsDeskvsdesk · vsdesk · CWE-434 RCE File upload	Critical9.4	—	0.7%	Aug 20, 2026
36Monitor	CVE-2026-53424No exploit	Missing one-time-use enforcement in Samly allows replay of SAML bearer assertionsdropbox · samly · CWE-294 Pre-auth Auth bypass	Critical9.1	—	0.6%	Aug 20, 2026
30Monitor	CVE-2026-53425No exploit	Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responsesdropbox · samly · CWE-345 Pre-auth	High7.6	—	0.2%	Aug 20, 2026
28Monitor	CVE-2026-54623No exploit	django CMS: Plugin move endpoint allows cyclic reparenting (DoS)django-cms · django-cms · CWE-674 Denial of service	High7.1	—	0.4%	Aug 20, 2026
37Monitor	CVE-2026-63382No exploit	libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smugglinglibevent · libevent · CWE-444 Pre-auth	Critical9.2	—	1.9%	Aug 20, 2026
34Monitor	CVE-2026-63383No exploit	Libevent: decode_tag_internal() can lead to out-of-bounds readlibevent · libevent · CWE-125 Pre-auth Memory safety	High8.7	—	0.4%	Aug 20, 2026
34Monitor	CVE-2026-63384No exploit	Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.libevent · libevent · CWE-190 Pre-auth Memory safety	High8.7	—	0.4%	Aug 20, 2026
36Monitor	CVE-2026-63385No exploit	Libevent: HTTP header handling bugs create risk of access control bypass.libevent · libevent · CWE-444 Pre-auth	Critical9.2	—	1.2%	Aug 20, 2026
28Monitor	CVE-2026-63387No exploit	Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server responselibevent · libevent · CWE-121 Pre-auth Memory safety	High7.0	—	0.4%	Aug 20, 2026
33Monitor	CVE-2026-63388No exploit	Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX acceptlibevent · libevent · CWE-617	High8.4	—	0.1%	Aug 20, 2026
30Monitor	CVE-2026-63495No exploit	Libevent: Unbounded memory accumulation in WebSocket server via fragmented frameslibevent · libevent · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Aug 20, 2026
27Monitor	CVE-2026-72844Proof of concept	Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projectionsleanprover · lean4 · CWE-843	Medium6.8	—	0.1%	Aug 20, 2026
37Monitor	CVE-2026-73251No exploit	Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verificationcesanta · mongoose · CWE-295 Pre-auth Weak crypto	Critical9.3	—	0.1%	Aug 20, 2026
36Monitor	CVE-2026-73253No exploit	Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matchingcesanta · mongoose · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.3%	Aug 20, 2026
36Monitor	CVE-2026-73256No exploit	Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TEcesanta · mongoose · CWE-444 Pre-auth	Critical9.1	—	0.4%	Aug 20, 2026
36Monitor	CVE-2026-73257No exploit	Mongoose: Content-Length + Transfer-Encoding coexistence enables request smugglingcesanta · mongoose · CWE-444 Pre-auth	Critical9.1	—	0.6%	Aug 20, 2026
34Monitor	CVE-2026-76641No exploit	Expat Out-of-Bounds Read via dtdCopylibexpat · libexpat · CWE-125 Pre-auth Memory safety	High8.7	—	0.3%	Aug 20, 2026
32Monitor	GHSA-2mc4-j865-9q4rNo exploit	netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messagesCWE-200 Info leak	High8.1	—	—	Aug 20, 2026
30Monitor	GHSA-8cfx-wx3q-mh5qNo exploit	netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundaryCWE-400 Pre-auth Denial of service	High7.5	—	—	Aug 20, 2026
30Monitor	GHSA-4899-mpch-38p3No exploit	netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decodingCWE-400 Pre-auth Denial of service	High7.5	—	—	Aug 20, 2026
33Monitor	GHSA-fm29-4mq3-phg6No exploit	Winter: ImportExportController AJAX handlers bypass granular import/export permission gatePackagist · winter/wn-backend-module · CWE-862 Broken access control (IDOR)	High8.3	—	—	Aug 20, 2026
39Monitor	CVE-2026-19586Proof of concept	Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gatewaystp-link · er7212pc firmware · CWE-78 pre-auth RCE Command injection	Critical9.3	—	5.7%	Aug 20, 2026
34Monitor	CVE-2026-50190No exploit	Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink pageshaarli · shaarli · CWE-79 Pre-auth XSS	High8.6	—	0.4%	Aug 20, 2026
30Monitor	CVE-2026-53587Proof of concept	libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_datalibgit2 · libgit2 · CWE-20 Pre-auth Denial of service	High7.5	—	0.4%	Aug 20, 2026
28Monitor	CVE-2026-62315No exploit	Frappe: Mass assignment via set_valuefrappe · frappe · CWE-915	High7.1	—	0.4%	Aug 20, 2026
34Monitor	CVE-2026-66001No exploit	Frappe: Improper Authorization in OAuth2 Consent Endpointfrappe · frappe · CWE-352 Pre-auth CSRF	High8.5	—	0.3%	Aug 20, 2026
34Monitor	CVE-2026-66785No exploit	Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijackred hat · red hat advanced cluster management for kubernetes 2.17 · CWE-345	High8.7	—	0.2%	Aug 20, 2026
34Monitor	CVE-2026-66787No exploit	Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addressesred hat · red hat advanced cluster management for kubernetes 2.17 · CWE-345	High8.7	—	0.2%	Aug 20, 2026
39Monitor	CVE-2026-66788No exploit	Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker labelred hat · red hat advanced cluster management for kubernetes 2.17 · CWE-1104	Critical9.9	—	0.6%	Aug 20, 2026
34Monitor	CVE-2026-72852No exploit	darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflowhank-ai · darknet · CWE-190 Memory safety	High8.5	—	0.2%	Aug 20, 2026
34Monitor	CVE-2026-77148No exploit	Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflowcomfast · cf-n1-s · CWE-119 Memory safety	High8.6	—	0.7%	Aug 20, 2026
28Monitor	CVE-2026-75910No exploit	Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment templateaws · athena federated query clickhouse connector deployment template · CWE-266	High7.1	—	0.5%	Aug 20, 2026
34Monitor	CVE-2026-18420No exploit	RCE via Prototype Pollution in OpenSearch Dashboardsaws · amazon opensearch service · CWE-1321 RCE Prototype pollution	High8.7	—	0.9%	Aug 20, 2026
39Monitor	CVE-2026-43798No exploit	A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and contenapple · swiftnio ssh · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Aug 20, 2026
30Monitor	CVE-2026-52021No exploit	An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information via the src/middleware.ts,CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Aug 20, 2026
34Monitor	CVE-2026-53804No exploit	OTRS Community Edition OS Command Injection via PGP Configurationcenturan consulting · otrs community edition · CWE-78 RCE Command injection	High8.6	—	1.5%	Aug 20, 2026

CVE-2026-16928
30Monitor
Vulnerabilities in IBM AIX and PowerVM VIOS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
ibm · viosAug 20, 2026
CVE-2026-16932
35Monitor
Vulnerabilities in IBM AIX and PowerVM VIOS
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · viosAug 20, 2026
CVE-2026-49825
32Monitor
lxml: javascript: URL bypass in Cleaner via xlink:href
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- XSS
lxml · lxmlAug 20, 2026
CVE-2026-61897
31Monitor
accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
canonical · accountsserviceAug 20, 2026
CVE-2026-61898
31Monitor
accountsservice: shell injection via attacker-controlled ~/.pam_environment in Ubuntu language helper scripts
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
canonical · accountsserviceAug 20, 2026
CVE-2026-63490
30Monitor
Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
jknack · handlebars.javaAug 20, 2026
CVE-2026-73220
34Monitor
CVAT: Stored XSS via annotation guides in audio tasks
HighCVSS 8.5No exploitEPSS 0%
- XSS
cvat-ai · cvatAug 20, 2026
CVE-2026-19611
29Monitor
Wildfly-elytron: org.wildfly.security/wildfly-elytron-password-impl: wildfly-elytron: password keyspace reduction via nfkc fullwidth folding
HighCVSS 7.4No exploitEPSS 1%
- Pre-auth
red hat · red hat build of apache camel 4 for quarkus 3Aug 20, 2026
CVE-2026-63037
39Monitor
Apache InLong: Unauthenticated SQL injection in Manager OpenAPI audit alert rule list endpoint
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
apache · inlongAug 20, 2026
CVE-2026-63038
39Monitor
Apache InLong: SQL Injection via String Concatenation Vulnerability Report
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
apache · inlongAug 20, 2026
CVE-2026-63039
39Monitor
Apache InLong: SQL Injection via Unvalidated MyBatis Dollar-Sign Interpolation in AuditAlertRuleService
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
apache · inlongAug 20, 2026
CVE-2026-63040
32Monitor
Apache InLong: Missing authorization in StreamSource forceDelete
HighCVSS 8.1No exploitEPSS 0%
apache · inlongAug 20, 2026
CVE-2026-63042
32Monitor
Apache InLong: Missing authorization on DataNode management endpoints
HighCVSS 8.1No exploitEPSS 0%
apache · inlongAug 20, 2026
CVE-2026-63043
30Monitor
Apache InLong: Agent path traversal via unvalidated file source path
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
apache · inlongAug 20, 2026
CVE-2026-75140
34Monitor
jsoup Uncontrolled Resource Consumption in XmlTreeBuilder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
jhy · soupAug 20, 2026
CVE-2026-13121
31Monitor
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
parallels · ras clientAug 20, 2026
CVE-2026-15679
31Monitor
Hugging Face PyTorch Image Models checkpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Deserialization
hugging face · pytorch image modelsAug 20, 2026
CVE-2026-15686
28Monitor
Adminer multi_query Incorrect Check of Function Return Value Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 1%
- RCE
adminer · adminerAug 20, 2026
CVE-2026-18262
31Monitor
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
parallels · ras clientAug 20, 2026
CVE-2026-18263
31Monitor
Parallels RAS Client RDP Backend Service Exposed Dangerous Function Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
parallels · ras clientAug 20, 2026
CVE-2026-18264
36Monitor
NoMachine getstat Command Injection Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
nomachine · nomachineAug 20, 2026
CVE-2026-18265
39Monitor
OSNEXUS QuantaStor Missing Authentication Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
osnexus · quantastorAug 20, 2026
CVE-2026-18268
28Monitor
Kenwood DNR1007XR JKGenService Command Injection Local Privilege Escalation Vulnerability
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
kenwood · dnr1007xrAug 20, 2026
CVE-2026-18270
31Monitor
Kenwood DNR1007XR udhcpd Incorrect Permission Assignment Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
kenwood · dnr1007xrAug 20, 2026
CVE-2026-18274
29Monitor
Heimdall Data Database Proxy uploadJar Directory Traversal Remote Code Execution Vulnerability
HighCVSS 7.2No exploitEPSS 2%
- RCE
- Path traversal
heimdall data · database proxyAug 20, 2026
CVE-2026-18279
35Monitor
Sony XAV-9500ES RTSP SETUP Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
sony · xav-9500esAug 20, 2026
CVE-2026-18281
32Monitor
Sony XAV-9500ES l2_reassemble_sdu Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
sony · xav-9500esAug 20, 2026
CVE-2026-18282
32Monitor
Sony XAV-9500ES AVRCP_Br_Response_Parser Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 8.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
sony · xav-9500esAug 20, 2026
CVE-2026-18284
31Monitor
Sony XAV-9500ES Crash Dump Handler Command Injection Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Local privilege escalation
- Command injection
sony · xav-9500esAug 20, 2026
CVE-2026-18285
31Monitor
Aeon load_rehab_pile_dataset Deserialization of Untrusted Data Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Deserialization
aeon · aeonAug 20, 2026
CVE-2026-18286
31Monitor
Aeon load_human_activity_segmentation_datasets Code Injection Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
aeon · aeonAug 20, 2026
CVE-2026-18287
31Monitor
Aeon load_time_series_segmentation_benchmark Code Injection Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
aeon · aeonAug 20, 2026
CVE-2026-18288
31Monitor
OriginLab OriginPro OPJU File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · originproAug 20, 2026
CVE-2026-18289
31Monitor
OriginLab OriginPro OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · originproAug 20, 2026
CVE-2026-18290
31Monitor
OriginLab OriginPro OGG File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · originproAug 20, 2026
CVE-2026-18291
31Monitor
OriginLab OriginPro OGW File Parsing Memory Corruption Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · originproAug 20, 2026
CVE-2026-18292
31Monitor
OriginLab OriginPro OGG File Parsing Memory Corruption Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · originproAug 20, 2026
CVE-2026-18293
31Monitor
OriginLab Origin Viewer OPJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · origin viewerAug 20, 2026
CVE-2026-18294
31Monitor
OriginLab Origin Viewer OGW File Parsing Memory Corruption Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
originlab · origin viewerAug 20, 2026
CVE-2026-18295
31Monitor
GStreamer MRF File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gstreamer · gstreamerAug 20, 2026
CVE-2026-18296
31Monitor
GStreamer MRF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gstreamer · gstreamerAug 20, 2026
CVE-2026-18297
31Monitor
GStreamer OGG File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gstreamer · gstreamerAug 20, 2026
CVE-2026-18298
31Monitor
GStreamer PNG File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gstreamer · gstreamerAug 20, 2026
CVE-2026-18299
31Monitor
GStreamer rtpsbcdepay Use-After-Free Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gstreamer · gstreamerAug 20, 2026
CVE-2026-18300
31Monitor
GIMP HDR File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18301
31Monitor
GIMP PSD File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18302
31Monitor
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18303
31Monitor
GIMP TIF File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18304
31Monitor
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18305
31Monitor
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18306
31Monitor
GIMP SGI File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18307
31Monitor
GIMP TIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18308
31Monitor
GIMP TIF File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-18309
31Monitor
GIMP APNG File Parsing Integer Overflow Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
gimp · gimpAug 20, 2026
CVE-2026-40345
32Monitor
deepmerge-ts: Stack exhaustion when merging recursive object graphs
HighCVSS 8.2Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
rebeccastevens · deepmerge-tsAug 20, 2026
CVE-2026-54449
35Monitor
LangBot: Authenticated RCE Via MCP Configuration
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
langbot-app · langbotAug 20, 2026
CVE-2026-54616
28Monitor
NanaZip: Heap out-of-bounds read in NanaZip SquashFS LZ4 decompressor via unchecked negative return value
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
m2team · nanazipAug 20, 2026
CVE-2026-55642
39Monitor
dbx: Unauthenticated arbitrary SQL execution in dbx-web (authentication fails open when no password is configured)
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
t8y2 · dbxAug 20, 2026
CVE-2026-61704
30Monitor
link-preview-js DNS Rebinding SSRF Bypass / Incomplete Fix for CVE-2026-43897
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
op-engineering · link-preview-jsAug 20, 2026
CVE-2026-65842
32Monitor
Plate: SSRF with response disclosure in DOCX image embedding
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- SSRF
udecode · plateAug 20, 2026
CVE-2026-69183
30Monitor
Monkeytype: Rate-limit and anti-brute-force controls bypassable via spoofed HTTP headers (forgotPasswordEmail/verificationEmail mail bombing and badAuth bypass)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Denial of service
monkeytypegame · monkeytypeAug 20, 2026
CVE-2026-71428
37Monitor
unstructured: Server-Side Request Forgery in the URL-based partitioning
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SSRF
- Open redirect
unstructured-io · unstructuredAug 20, 2026
CVE-2026-77022
34Monitor
Comfast CF-N1-S SSID Configuration mbox-config sub_44B438 stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
comfast · cf-n1-sAug 20, 2026
CVE-2026-77176
32Monitor
Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
red hat · red hat openshift container platform 4Aug 20, 2026
CVE-2026-2334
37Monitor
) Missing Server-Side File Extension Validation in vsDesk
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- File upload
vsdesk · vsdeskAug 20, 2026
CVE-2026-53424
36Monitor
Missing one-time-use enforcement in Samly allows replay of SAML bearer assertions
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
dropbox · samlyAug 20, 2026
CVE-2026-53425
30Monitor
Missing InResponseTo validation in Samly allows acceptance of unsolicited SAML responses
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
dropbox · samlyAug 20, 2026
CVE-2026-54623
28Monitor
django CMS: Plugin move endpoint allows cyclic reparenting (DoS)
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
django-cms · django-cmsAug 20, 2026
CVE-2026-63382
37Monitor
libevent evhttp: Multiple HTTP Parser Bugs Enable Request Smuggling
CriticalCVSS 9.2No exploitEPSS 1%
- Pre-auth
libevent · libeventAug 20, 2026
CVE-2026-63383
34Monitor
Libevent: decode_tag_internal() can lead to out-of-bounds read
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
libevent · libeventAug 20, 2026
CVE-2026-63384
34Monitor
Libevent: `evtag_unmarshal_header()` decodes a wire `uint32` length into a signed `int` return value.
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
libevent · libeventAug 20, 2026
CVE-2026-63385
36Monitor
Libevent: HTTP header handling bugs create risk of access control bypass.
CriticalCVSS 9.2No exploitEPSS 1%
- Pre-auth
libevent · libeventAug 20, 2026
CVE-2026-63387
28Monitor
Libevent: Off-by-one stack buffer overflow in dnsname_to_labels via crafted DNS server response
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
libevent · libeventAug 20, 2026
CVE-2026-63388
33Monitor
Libevent: Heap out-of-bounds write in bufferevent_socket_set_conn_address_ reachable via AF_UNIX accept
HighCVSS 8.4No exploitEPSS 0%
libevent · libeventAug 20, 2026
CVE-2026-63495
30Monitor
Libevent: Unbounded memory accumulation in WebSocket server via fragmented frames
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
libevent · libeventAug 20, 2026
CVE-2026-72844
27Monitor
Lean 4 Kernel Type Checking Bypass via Mismatched Structure Projections
MediumCVSS 6.8Proof of conceptEPSS 0%
leanprover · lean4Aug 20, 2026
CVE-2026-73251
37Monitor
Mongoose Built-in TLS: CA-bundle certificate chain accepted without any signature verification
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
cesanta · mongooseAug 20, 2026
CVE-2026-73253
36Monitor
Mongoose: TLS Hostname Verification Bypass via Overly Permissive Wildcard Matching
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
cesanta · mongooseAug 20, 2026
CVE-2026-73256
36Monitor
Mongoose: HTTP/1.0 detection off-by-one enables request smuggling via chunked TE
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
cesanta · mongooseAug 20, 2026
CVE-2026-73257
36Monitor
Mongoose: Content-Length + Transfer-Encoding coexistence enables request smuggling
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
cesanta · mongooseAug 20, 2026
CVE-2026-76641
34Monitor
Expat Out-of-Bounds Read via dtdCopy
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
libexpat · libexpatAug 20, 2026
GHSA-2mc4-j865-9q4r
32Monitor
netty-incubator-codec-ohttp: BoringSSL HPKE private key bytes exposed through toString() and exception messages
HighCVSS 8.1No exploit
- Info leak
Aug 20, 2026
GHSA-8cfx-wx3q-mh5q
30Monitor
netty-incubator-codec-ohttp: Binary HTTP parser infinite loop on known-length field section boundary
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
Aug 20, 2026
GHSA-4899-mpch-38p3
30Monitor
netty-incubator-codec-ohttp BinaryHttpParser: Unauthenticated CPU-exhaustion DoS via infinite loop in field-section decoding
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
Aug 20, 2026
GHSA-fm29-4mq3-phg6
33Monitor
Winter: ImportExportController AJAX handlers bypass granular import/export permission gate
HighCVSS 8.3No exploit
- Broken access control (IDOR)
Packagist · winter/wn-backend-moduleAug 20, 2026
CVE-2026-19586
39Monitor
Pre-Authentication OS Command Injection in Omada Gateways on OpenVPN Server in Omada Gateways
CriticalCVSS 9.3Proof of conceptEPSS 5%
- pre-auth RCE
- Command injection
tp-link · er7212pc firmwareAug 20, 2026
CVE-2026-50190
34Monitor
Shaarli vulnerable to stored XSS via raw bookmark title in document <title> element on public permalink page
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- XSS
shaarli · shaarliAug 20, 2026
CVE-2026-53587
30Monitor
libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pkt.c:set_data
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
libgit2 · libgit2Aug 20, 2026
CVE-2026-62315
28Monitor
Frappe: Mass assignment via set_value
HighCVSS 7.1No exploitEPSS 0%
frappe · frappeAug 20, 2026
CVE-2026-66001
34Monitor
Frappe: Improper Authorization in OAuth2 Consent Endpoint
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- CSRF
frappe · frappeAug 20, 2026
CVE-2026-66785
34Monitor
Submariner: submariner: missing validation of remote endpoint subnets and clusterid enables cross-cluster traffic hijack
HighCVSS 8.7No exploitEPSS 0%
red hat · red hat advanced cluster management for kubernetes 2.17Aug 20, 2026
CVE-2026-66787
34Monitor
Lighthouse: lighthouse: cross-cluster dns spoofing via unvalidated endpointslice ip addresses
HighCVSS 8.7No exploitEPSS 0%
red hat · red hat advanced cluster management for kubernetes 2.17Aug 20, 2026
CVE-2026-66788
39Monitor
Lighthouse: lighthouse: arbitrary namespace injection via attacker-controlled broker label
CriticalCVSS 9.9No exploitEPSS 0%
red hat · red hat advanced cluster management for kubernetes 2.17Aug 20, 2026
CVE-2026-72852
34Monitor
darknet Integer Overflow in Convolutional Layer Buffer Sizing Leads to Heap Buffer Overflow
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
hank-ai · darknetAug 20, 2026
CVE-2026-77148
34Monitor
Comfast CF-N1-S Web Management mbox-config sub_44B50C stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
comfast · cf-n1-sAug 20, 2026
CVE-2026-75910
28Monitor
Incorrect privilege assignment in the Amazon aws-athena-query-federation ClickHouse connector deployment template
HighCVSS 7.1No exploitEPSS 0%
aws · athena federated query clickhouse connector deployment templateAug 20, 2026
CVE-2026-18420
34Monitor
RCE via Prototype Pollution in OpenSearch Dashboards
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Prototype pollution
aws · amazon opensearch serviceAug 20, 2026
CVE-2026-43798
39Monitor
A single crafted SSH message gives an unauthenticated network attacker an out-of-bounds stack write of attacker-controlled length and conten
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
apple · swiftnio sshAug 20, 2026
CVE-2026-52021
30Monitor
An issue in code100xDevs 100xdevs CMS v.1.0 (2026-04-30) allows a remote attacker to obtain sensitive information via the src/middleware.ts,
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
Aug 20, 2026
CVE-2026-53804
34Monitor
OTRS Community Edition OS Command Injection via PGP Configuration
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
centuran consulting · otrs community editionAug 20, 2026