Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2026

6,127 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 36 of 62

  • CVE-2026-76223
    28Monitor

    ArcadeDB before 26.8.1 Permission Bypass via DEFINE FUNCTION

    HighCVSS 7.1No exploitEPSS 0%

    arcadedata · arcadedbAug 19, 2026

  • CVE-2026-76224
    34Monitor

    ArcadeDB before 26.8.1 Remote Code Execution via Groovy Fallback

    HighCVSS 8.7No exploitEPSS 0%

    arcadedata · arcadedbAug 19, 2026

  • CVE-2026-76225
    33Monitor

    ArcadeDB before 26.8.1 Server-Side Request Forgery via LOAD CSV

    HighCVSS 8.3No exploitEPSS 0%

    arcadedata · arcadedbAug 19, 2026

  • CVE-2026-76229
    33Monitor

    Renovate 39.218.0 before 40.33.0 Arbitrary Command Injection via kustomize

    HighCVSS 8.4No exploitEPSS 1%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76230
    33Monitor

    Renovate 35.63.0 before 40.33.0 Command Injection via npm

    HighCVSS 8.4No exploitEPSS 1%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76231
    33Monitor

    Renovate 32.135.0 before 40.33.0 Command Injection via hermit

    HighCVSS 8.4No exploitEPSS 1%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76232
    33Monitor

    Renovate 31.51.0 before 40.33.0 Command Injection via helmv3

    HighCVSS 8.4No exploitEPSS 1%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76233
    33Monitor

    Renovate 39.53.0 before 40.33.0 Command Injection via gleam manager

    HighCVSS 8.4No exploitEPSS 1%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76236
    28Monitor

    stigmem before 0.9.0a12 Cross-Tenant BOLA via Tombstones

    HighCVSS 7.2No exploitEPSS 0%

    eidetic-labs · stigmem-nodeAug 19, 2026

  • CVE-2026-76237
    34Monitor

    stigmem before 0.9.0a12 Cross-Tenant BOLA via quarantine

    HighCVSS 8.6No exploitEPSS 0%

    eidetic-labs · stigmem-nodeAug 19, 2026

  • CVE-2026-76238
    28Monitor

    stigmem before 0.9.0a12 Cross-Tenant BOLA via decay sweep

    HighCVSS 7.2No exploitEPSS 0%

    eidetic-labs · stigmem-nodeAug 19, 2026

  • CVE-2026-76240
    30Monitor

    stigmem Postgres SQL Injection via Schema Identifier

    HighCVSS 7.5No exploitEPSS 0%

    eidetic-labs · stigmemAug 19, 2026

  • CVE-2026-76241
    29Monitor

    stigmem Plugin Signature Enforcement Bypass via Configuration

    HighCVSS 7.3No exploitEPSS 0%

    eidetic-labs · stigmemAug 19, 2026

  • CVE-2026-76242
    36Monitor

    stigmem Federation Peer Registration Authentication Bypass

    CriticalCVSS 9.1No exploitEPSS 0%

    eidetic-labs · stigmemAug 19, 2026

  • CVE-2026-76243
    36Monitor

    stigmem before 0.9.0a2 Authentication Bypass via Disabled Auth

    CriticalCVSS 9.2No exploitEPSS 0%

    eidetic-labs · stigmemAug 19, 2026

  • CVE-2026-76244
    36Monitor

    stigmem-node Insecure Federation Transport Configuration

    CriticalCVSS 9.1No exploitEPSS 0%

    eidetic-labs · stigmemAug 19, 2026

  • CVE-2026-76245
    28Monitor

    stigmem Federation Peer Token Timestamp Validation Bypass

    HighCVSS 7.1No exploitEPSS 0%

    eidetic-labs · stigmemAug 19, 2026

  • CVE-2026-23501
    29Monitor

    Dell RecoverPoint for VMs, versions 6.0.3 and 6.0.3.1, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Co

    HighCVSS 7.2No exploitEPSS 2%

    dell · recoverpoint for virtual machinesAug 19, 2026

  • CVE-2026-45272
    37Monitor

    MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File

    CriticalCVSS 9.4No exploitEPSS 0%

    poxenstudio · talebookAug 19, 2026

  • CVE-2026-45273
    34Monitor

    MyBooks: Privilege Escalation via Missing Authorization on Admin Settings Endpoint

    HighCVSS 8.7No exploitEPSS 0%

    poxenstudio · talebookAug 19, 2026

  • CVE-2026-47187
    37Monitor

    SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write

    CriticalCVSS 9.3No exploitEPSS 0%

    libfuse · sshfsAug 19, 2026

  • CVE-2026-48711
    28Monitor

    SSHFS: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')

    HighCVSS 7.0No exploitEPSS 0%

    libfuse · sshfsAug 19, 2026

  • CVE-2026-49283
    34Monitor

    SimpleSAMLphp HTTP-Artifact TLS validator confusion allows cross-IdP authentication bypass

    HighCVSS 8.7No exploitEPSS 0%

    simplesamlphp · saml2Aug 19, 2026

  • CVE-2026-49289
    30Monitor

    SimpleSAMLphp SAML2: Possible DoS via XPath Transform

    HighCVSS 7.5No exploitEPSS 0%

    simplesamlphp · saml2Aug 19, 2026

  • CVE-2026-49816
    31Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-49817
    31Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Deserialization of Untrusted Data vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-52792
    34Monitor

    Algernon: Server-side script source disclosure on Windows via NTFS filename

    HighCVSS 8.7No exploitEPSS 0%

    xyproto · algernonAug 19, 2026

  • CVE-2026-52889
    39Monitor

    Formie: Server-Side Template Injection in Formie Hidden field defaults

    CriticalCVSS 9.8No exploitEPSS 1%

    verbb · formieAug 19, 2026

  • CVE-2026-53451
    39Monitor

    Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution

    CriticalCVSS 9.8No exploitEPSS 1%

    sgoudelis · ground-stationAug 19, 2026

  • CVE-2026-53477
    31Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-56797
    29Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability.

    HighCVSS 7.3No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-58562
    29Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.

    HighCVSS 7.3No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-58564
    31Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, contain an Incorrect Default Permissions vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-58565
    35Monitor

    Dell Command Update (DCU), versions prior to 5.7.1, contain a Missing Authorization vulnerability.

    HighCVSS 8.8No exploitEPSS 0%

    dell · command updateAug 19, 2026

  • CVE-2026-71176
    35Monitor

    Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL In

    HighCVSS 8.8No exploitEPSS 0%

    dell · openmanage enterpriseAug 19, 2026

  • CVE-2026-71961
    35Monitor

    Cudy WR3000 2.0 OS Command Injection via Mesh MQTT Command Handler

    HighCVSS 8.7No exploitEPSS 2%

    shenzhen cudy technology co., ltd. · wr3000 2.0Aug 19, 2026

  • CVE-2026-75949
    40Plan

    Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3

    CriticalCVSS 10.0No exploitEPSS 0%

    cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026

  • CVE-2026-75953
    30Monitor

    Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3

    HighCVSS 7.5No exploitEPSS 0%

    cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026

  • CVE-2026-75954
    37Monitor

    Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3

    CriticalCVSS 9.3No exploitEPSS 0%

    cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026

  • CVE-2026-75956
    34Monitor

    Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3

    HighCVSS 8.7No exploitEPSS 0%

    cmsjunkie.com · j-businessdirectory extension for joomlaAug 19, 2026

  • CVE-2026-62666
    35Monitor

    Grav API Plugin: non-super api.users.write manager -> super-admin via createApiKey (incomplete fix of CVE-2026-59190); + 2FA strip of super

    HighCVSS 8.8No exploitEPSS 0%

    getgrav · grav-plugin-apiAug 19, 2026

  • CVE-2026-62667
    32Monitor

    Grav API Plugin : API Key 'scopes' Never Enforced - Delegated Least-Privilege Keys Carry Full User ACL

    HighCVSS 8.1No exploitEPSS 0%

    getgrav · grav-plugin-apiAug 19, 2026

  • CVE-2026-62673
    32Monitor

    Grav: .htaccess file extension rules bypass via case variation on case-insensitive filesystems

    HighCVSS 8.2No exploitEPSS 0%

    getgrav · gravAug 19, 2026

  • CVE-2026-63407
    32Monitor

    Grav API Plugin: CORS 'Access-Control-Allow-Origin: *' on Authenticated API Responses

    HighCVSS 8.2No exploitEPSS 0%

    getgrav · grav-plugin-apiAug 19, 2026

  • CVE-2026-63408
    30Monitor

    Grav API Plugin: JWT Access Token Accepted via `?token=` URL Query Parameter

    HighCVSS 7.5No exploitEPSS 0%

    getgrav · grav-plugin-apiAug 19, 2026

  • CVE-2026-64850
    34Monitor

    Grav: Remote code execution via unrestricted callable in Blueprint::dynamicData()

    HighCVSS 8.7No exploitEPSS 0%

    getgrav · gravAug 19, 2026

  • CVE-2026-64851
    34Monitor

    Grav Shortcode Core Plugin: Stored XSS in shortcode-core attribute handlers

    HighCVSS 8.5No exploitEPSS 0%

    getgrav · grav-plugin-shortcode-coreAug 19, 2026

  • CVE-2026-64852
    34Monitor

    Grav API Plugin: Missing authorization on API-key generate/revoke lets any admin.login user forge keys for any account

    HighCVSS 8.7No exploitEPSS 0%

    getgrav · grav-plugin-apiAug 19, 2026

  • CVE-2026-19490
    77This week

    NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490

    CriticalCVSS 9.3KEVWeaponizedEPSS 32%

    citrix · netscaler application delivery controllerAug 19, 2026

  • CVE-2026-67363
    30Monitor

    Joomla Extension - balbooa.com - Pre-auth Payment Amount Tampering in Balbooa Forms < 2.4.3.2

    HighCVSS 7.7Proof of conceptEPSS 0%

    balbooa.com · balbooa forms extension for joomlaAug 19, 2026

  • CVE-2026-67364
    40Plan

    Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2

    CriticalCVSS 10.0No exploitEPSS 0%

    balbooa.com · balbooa forms extension for joomlaAug 19, 2026

  • CVE-2026-76235
    30Monitor

    Cockpit-ws: cockpit: cockpit-ws: unauthenticated remote memory leak via cockpitlang cookie in send_login_html

    HighCVSS 7.5No exploitEPSS 0%

    red hat · red hat enterprise linux 10Aug 19, 2026

  • CVE-2026-20030
    40Plan

    Cisco Crosswork Security Hardening Release: August 2026

    CriticalCVSS 10.0No exploitEPSS 0%

    cisco · cisco crosswork planningAug 19, 2026

  • CVE-2026-20231
    39Monitor

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities

    CriticalCVSS 9.9No exploitEPSS 0%

    cisco · cisco secure workloadAug 19, 2026

  • CVE-2026-20315
    40Plan

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Access Control Vulnerabilities

    CriticalCVSS 10.0No exploitEPSS 0%

    cisco · cisco secure workloadAug 19, 2026

  • CVE-2026-20317
    40Plan

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities

    CriticalCVSS 10.0No exploitEPSS 0%

    cisco · cisco secure workloadAug 19, 2026

  • CVE-2026-20318
    38Monitor

    Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities

    CriticalCVSS 9.6No exploitEPSS 0%

    cisco · cisco secure workloadAug 19, 2026

  • CVE-2026-20319
    30Monitor

    Cisco Secure Workload Software Security Hardening Release August 2026 - Buffer Management Vulnerabilities

    HighCVSS 7.5No exploitEPSS 0%

    cisco · cisco secure workloadAug 19, 2026

  • CVE-2026-20320
    30Monitor

    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read se

    HighCVSS 7.5No exploitEPSS 0%

    cisco · cisco broadworksAug 19, 2026

  • CVE-2026-20357
    40Plan

    Cisco Crosswork Security Hardening Release: August 2026

    CriticalCVSS 10.0No exploitEPSS 0%

    cisco · cisco crosswork planningAug 19, 2026

  • CVE-2026-20358
    40Plan

    Cisco Crosswork Security Hardening Release: August 2026

    CriticalCVSS 10.0No exploitEPSS 0%

    cisco · cisco crosswork planningAug 19, 2026

  • CVE-2026-20359
    39Monitor

    Cisco Crosswork Security Hardening Release: August 2026

    CriticalCVSS 9.9No exploitEPSS 0%

    cisco · cisco crosswork planningAug 19, 2026

  • CVE-2026-50173
    28Monitor

    Flow-Like: Azure invoke presign grants app content write SAS to ExecuteEvents-only users

    HighCVSS 7.2No exploitEPSS 0%

    rheosoph · flow-likeAug 19, 2026

  • CVE-2026-72529
    67This week

    A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t

    CriticalCVSS 9.3KEVWeaponizedEPSS 1%

    trueconf · trueconf serverAug 19, 2026

  • CVE-2026-72530
    69This week

    A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X t

    CriticalCVSS 9.5KEVWeaponizedEPSS 1%

    trueconf · trueconf serverAug 19, 2026

  • CVE-2026-19234
    32Monitor

    Power System Buffer Overflow

    HighCVSS 8.2No exploitEPSS 0%

    ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026

  • CVE-2026-19875
    30Monitor

    Unauthenticated Registration POST Endpoint Permits Admin Email Overwrite and Outbound Relay Abuse in Langflow

    HighCVSS 7.5No exploitEPSS 0%

    langflow · langflowAug 19, 2026

  • CVE-2026-32475
    37Monitor

    WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability

    CriticalCVSS 9.0Proof of conceptEPSS 1%

    elementor · elementor proAug 19, 2026

  • CVE-2026-62680
    28Monitor

    Orval: Generation-time SSRF + remote/local file inclusion via unrestricted $ref

    HighCVSS 7.1No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-62681
    37Monitor

    Orval: RCE via OpenAPI path -> unescaped request-URL template literal (backtick breakout)

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-62682
    37Monitor

    Orval: RCE via servers[].url -> unescaped request-URL template literal (with getBaseUrlFromSpecification)

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2024-58376
    33Monitor

    Renovate 37.158.0 before 37.199.0 Command Injection via helmv3

    HighCVSS 8.4No exploitEPSS 0%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-67581
    34Monitor

    On-chain transfer proof is not single-use in mpp EVM payment method, enabling cross-challenge replay

    HighCVSS 8.7No exploitEPSS 0%

    zenhive · machine payments protocolAug 19, 2026

  • CVE-2026-71864
    37Monitor

    Orval: Import-time RCE via header parameter name -> computed-property-key injection in the zod client

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-71865
    37Monitor

    Orval: Import-time RCE via query parameter name -> computed-property-key injection in the zod cli

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-71866
    37Monitor

    Orval: Import-time RCE via schema property name -> computed-property-key injection in the zod client

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-71867
    37Monitor

    Orval: RCE via schema property name -> computed-property-key injection in the MSW mock generator

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-71868
    37Monitor

    Orval: Import-time RCE via enum-typed default -> zod module-level template literal

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-71869
    37Monitor

    Orval: Import-time RCE via array-items default -> zod module-level template literal

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-71871
    37Monitor

    Orval: Import-time RCE via header-parameter default -> zod module-level template literal

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-72716
    37Monitor

    Orval: Import-time RCE via query-parameter default -> zod module-level template literal

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-72717
    37Monitor

    Orval: Import-time RCE via schema default -> zod module-level template literal

    CriticalCVSS 9.3No exploitEPSS 0%

    orval-labs · orvalAug 19, 2026

  • CVE-2026-73136
    32Monitor

    Static memo configuration in mpp Tempo disables per-challenge attribution binding, enabling third-party replay

    HighCVSS 8.2No exploitEPSS 0%

    zenhive · machine payments protocolAug 19, 2026

  • CVE-2026-73541
    33Monitor

    Tempo fee sponsorship in mpp bounds each transaction but not aggregate exposure, allowing concurrent sponsor-wallet drain

    HighCVSS 8.3No exploitEPSS 0%

    zenhive · machine payments protocolAug 19, 2026

  • CVE-2026-75149
    34Monitor

    marimo < 0.23.15 Code Injection via MCP Server Configuration

    HighCVSS 8.7No exploitEPSS 0%

    marimo-team · marimoAug 19, 2026

  • CVE-2026-43961
    31Monitor

    Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution

    HighCVSS 7.8No exploitEPSS 0%

    vim · vimAug 19, 2026

  • CVE-2026-51367
    30Monitor

    An issue in Bottinelli Informatica Vedo Suite v.1.2.5 allows a remote attacker to obtain sensitive information via the api_vedo/chat endpoin

    HighCVSS 7.5Proof of conceptEPSS 0%

    Aug 19, 2026

  • CVE-2026-54796
    29Monitor

    Dell OpenManage Enterprise, versions prior to 4.7.0, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Comm

    HighCVSS 7.2No exploitEPSS 2%

    dell · openmanage enterpriseAug 19, 2026

  • CVE-2026-75916
    37Monitor

    SiYuan XSS-to-RCE via unescaped block metadata in hint popup

    CriticalCVSS 9.3No exploitEPSS 0%

    siyuan-note · siyuanAug 19, 2026

  • CVE-2026-75917
    37Monitor

    SiYuan before v3.7.4 XSS-to-RCE via pathName.ts

    CriticalCVSS 9.3No exploitEPSS 0%

    siyuan-note · siyuanAug 19, 2026

  • CVE-2026-76208
    35Monitor

    phpMyFAQ 3.1.0 through 4.1.6 Authentication Bypass via LDAP

    HighCVSS 8.8No exploitEPSS 0%

    phpmyfaq · phpmyfaqAug 19, 2026

  • CVE-2026-76221
    34Monitor

    GitPython before 3.1.58 Config Injection via option-name

    HighCVSS 8.7No exploitEPSS 0%

    gitpython project · gitpythonAug 19, 2026

  • CVE-2026-76226
    27Monitor

    Renovate 43.65.0 before 43.102.11 Remote Code Execution via lockFileMaintenance

    MediumCVSS 6.8No exploitEPSS 0%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76228
    33Monitor

    Renovate before 42.68.5 Remote Code Execution via Gradle Wrapper

    HighCVSS 8.4No exploitEPSS 0%

    renovatebot · renovateAug 19, 2026

  • CVE-2026-76234
    34Monitor

    libcrux before 0.0.6 Cryptographic Implementation Bug Fixes

    HighCVSS 8.7No exploitEPSS 0%

    celabshq · libcrux-ecdhAug 19, 2026

  • CVE-2026-14970
    30Monitor

    Vulnerabilities in IBM AIX and PowerVM VIOS

    HighCVSS 7.5No exploitEPSS 0%

    ibm · viosAug 19, 2026

  • CVE-2026-15061
    32Monitor

    Vulnerabilities in IBM AIX and PowerVM VIOS

    HighCVSS 8.2No exploitEPSS 0%

    ibm · viosAug 19, 2026

  • CVE-2026-15065
    36Monitor

    Vulnerabilities in IBM AIX and PowerVM VIOS

    CriticalCVSS 9.1No exploitEPSS 0%

    ibm · viosAug 19, 2026

  • CVE-2026-15068
    39Monitor

    Vulnerabilities in IBM AIX and PowerVM VIOS

    CriticalCVSS 9.9No exploitEPSS 0%

    ibm · viosAug 19, 2026

  • CVE-2026-15078
    32Monitor

    Vulnerabilities in IBM AIX and PowerVM VIOS

    HighCVSS 8.1No exploitEPSS 0%

    ibm · viosAug 19, 2026