By publication date

Exploited and new serious CVEs: August 2026

6,295 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 39 of 63

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-18430No exploit	HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reasonhumhub · humhub · CWE-79 XSS	High7.2	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-44252No exploit	Wazuh Manager dapi RBAC Bypass Allows Privilege Escalationwazuh · wazuh · CWE-863 Broken access control (IDOR)	High7.7	—	0.5%	Aug 19, 2026
32Monitor	CVE-2026-16933No exploit	Power System Integer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-190 Memory safety	High8.2	—	0.1%	Aug 19, 2026
30Monitor	CVE-2026-46343No exploit	Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()wazuh · wazuh · CWE-22 Path traversal	High7.5	—	0.4%	Aug 19, 2026
29Monitor	CVE-2026-17042No exploit	Power System Out-of-bounds Readibm · power system s922 \(9009-22g\) firmware · CWE-125 Memory safety	High7.3	—	0.1%	Aug 19, 2026
31Monitor	CVE-2026-17063No exploit	Power System Incorrect Authorizationibm · power system s1122 \(9824-22a\) firmware · CWE-863 Broken access control (IDOR)	High7.9	—	0.1%	Aug 19, 2026
33Monitor	CVE-2026-17091No exploit	Power System Integer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-190 Memory safety	High8.4	—	0.1%	Aug 19, 2026
35Monitor	CVE-2026-17414No exploit	Power System Improper Input Validationibm · power system s1122 \(9824-22a\) firmware · CWE-20 Pre-auth	High8.8	—	0.2%	Aug 19, 2026
35Monitor	CVE-2026-18821No exploit	Power System Out-of-bounds Writeibm · power system s1122 \(9824-22a\) firmware · CWE-787 pre-auth RCE Memory safety	High8.8	—	0.2%	Aug 19, 2026
29Monitor	CVE-2026-18871No exploit	Power System Buffer Overflowibm · power system s1122 \(9824-22a\) firmware · CWE-121 Memory safety	High7.3	—	0.1%	Aug 19, 2026
39Monitor	CVE-2026-19505No exploit	RDK-B WebUI improper cryptographic signature verification vulnerabilityrdk · rdk-b webui · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.8	—	0.5%	Aug 19, 2026
32Monitor	CVE-2026-19506No exploit	RDK-B WebUI race condition vulnerabilityrdk · rdk-b webui · CWE-362 Pre-auth Race condition	High8.1	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-19507No exploit	RDK WebUI uncontrolled resource consumptionrdk · rdk-b webui · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Aug 19, 2026
39Monitor	CVE-2026-19508No exploit	RDK WebUI heap-based buffer overflow vulnerabilityrdk · rdk-b webui · CWE-119 pre-auth RCE Memory safety	Critical9.8	—	0.9%	Aug 19, 2026
40Plan	CVE-2026-22306No exploit	Critical flaw impacting OZOLS ERP's automatic update channelozols grupa · ozols · CWE-319 Pre-auth Weak crypto	Critical10.0	—	0.2%	Aug 19, 2026
38Monitor	CVE-2026-55085No exploit	Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-liteether · etherpad · CWE-79 Pre-auth XSS	Critical9.6	—	0.4%	Aug 19, 2026
24Monitor	CVE-2026-55087Proof of concept	Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)ether · etherpad · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Aug 19, 2026
30Monitor	CVE-2026-62317No exploit	Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)logto-io · logto · CWE-1333 Pre-auth Denial of service	High7.5	—	0.7%	Aug 19, 2026
34Monitor	CVE-2026-63188No exploit	logto-tunnel serves files outside --experience-path via path traversallogto-io · logto · CWE-22 Pre-auth Path traversal	High8.7	—	0.5%	Aug 19, 2026
28Monitor	CVE-2026-75593No exploit	BuildKit: Malicious client can bypass destination directory validation on local sources uploadmoby · buildkit · CWE-22 Auth bypass Path traversal	High7.2	—	0.5%	Aug 19, 2026
35Monitor	CVE-2026-76647No exploit	Leantime JSON-RPC API contains a missing authorization vulnerabilityleantime · json-rpc api · CWE-200 Info leak	High8.8	—	0.5%	Aug 19, 2026
37Monitor	CVE-2026-62668No exploit	Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocolsgetgrav · grav · CWE-918 SSRF	Critical9.4	—	0.4%	Aug 19, 2026
29Monitor	CVE-2026-62669No exploit	Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challengegetgrav · grav · CWE-287 Pre-auth Auth bypass	High7.4	—	0.5%	Aug 19, 2026
32Monitor	CVE-2026-17015No exploit	IBM i Denial of Serviceibm · i · CWE-125 Memory safety	High8.1	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-18544No exploit	Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReferenceibm · portieris · CWE-862 Broken access control (IDOR)	High8.1	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-53542No exploit	Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hoststermix-ssh · termix · CWE-78 RCE Command injection	High8.8	—	0.6%	Aug 19, 2026
39Monitor	CVE-2026-53545No exploit	Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injectiontermix-ssh · termix · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.7%	Aug 19, 2026
38Monitor	CVE-2026-53546No exploit	Termix: Missing authorization in SSH host credential resolution exposes stored credentialstermix-ssh · termix · CWE-639 Broken access control (IDOR)	Critical9.6	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-53547No exploit	Termix: Account Takeover via Global Settings Disclosuretermix-ssh · termix · CWE-862 Broken access control (IDOR)	High8.8	—	0.5%	Aug 19, 2026
38Monitor	CVE-2026-53548No exploit	Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other userstermix-ssh · termix · CWE-285 Broken access control (IDOR)	Critical9.6	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-53549No exploit	Termix: Server-Side Request Forgery via Proxy Connectivity Testtermix-ssh · termix · CWE-918 SSRF	High7.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-61556No exploit	LiquidJS: An infinite loop vulnerability in `strip_html` filterharttle · liquidjs · CWE-835 Pre-auth Denial of service	High8.7	—	0.5%	Aug 19, 2026
30Monitor	CVE-2026-69222No exploit	LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the processharttle · liquidjs · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Aug 19, 2026
35Monitor	CVE-2026-75616Proof of concept	Command Injection in Router Web Management Interfacetp-link · archer c20 firmware · CWE-78 RCE Command injection	High8.5	—	2.8%	Aug 19, 2026
8Monitor	CVE-2026-76576No exploit	yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversalyangzongzhuan · ruoyi-vue · CWE-22 Path traversal	Low2.1	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-76584No exploit	TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflowtrendnet · tv-ip751wic · CWE-119 Memory safety	High8.6	—	0.8%	Aug 19, 2026
30Monitor	CVE-2024-13942No exploit	Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privilegesrockchip · rk3588s · CWE-367 RCE Race condition	High7.6	—	0.2%	Aug 19, 2026
32Monitor	CVE-2026-41424No exploit	Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpointwazuh · wazuh · CWE-863 Broken access control (IDOR)	High8.2	—	0.4%	Aug 19, 2026
33Monitor	CVE-2026-44901No exploit	Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerabilitywazuh · wazuh · CWE-502 RCE Deserialization	High8.4	—	0.7%	Aug 19, 2026
30Monitor	CVE-2026-45798No exploit	Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: fieldwazuh · wazuh · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.9%	Aug 19, 2026
36Monitor	CVE-2026-48024No exploit	Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh managerwazuh · wazuh · CWE-22 Path traversal	Critical9.1	—	0.7%	Aug 19, 2026
36Monitor	CVE-2026-48162No exploit	Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh managerwazuh · wazuh · CWE-73 Path traversal	Critical9.1	—	0.6%	Aug 19, 2026
36Monitor	CVE-2026-49441No exploit	Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh managerwazuh · wazuh · CWE-73 Path traversal	Critical9.1	—	0.7%	Aug 19, 2026
36Monitor	CVE-2026-71470No exploit	Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sared hat · red hat advanced cluster management for kubernetes 2.11 · CWE-913	Critical9.1	—	0.7%	Aug 19, 2026
34Monitor	CVE-2026-75141No exploit	FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxingffmpeg · ffmpeg · CWE-122 Memory safety	High8.5	—	0.1%	Aug 19, 2026
34Monitor	CVE-2026-75142No exploit	FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.cffmpeg · ffmpeg · CWE-121 Memory safety	High8.5	—	0.1%	Aug 19, 2026
37Monitor	CVE-2026-75143No exploit	FFmpeg Heap Buffer Overflow via RIST Protocol Readerffmpeg · ffmpeg · CWE-122 Pre-auth Memory safety	Critical9.3	—	0.7%	Aug 19, 2026
34Monitor	CVE-2026-75144No exploit	FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizerffmpeg · ffmpeg · CWE-122 Memory safety	High8.5	—	0.1%	Aug 19, 2026
28Monitor	CVE-2026-75146No exploit	FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.cffmpeg · ffmpeg · CWE-125 Pre-auth Memory safety	High7.2	—	0.2%	Aug 19, 2026
37Monitor	CVE-2025-14600No exploit	Admin Account Takeover via Path Traversal in vsDeskvsdesk · vsdesk · CWE-305 Pre-auth Auth bypass Deserialization	Critical9.3	—	0.5%	Aug 19, 2026
35Monitor	CVE-2025-14603No exploit	Use of user input in raw SQL queries in vsDesk leading to blind SQL injectionvsdesk · vsdesk Pre-auth SQL injection	High8.8	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-17183No exploit	CVE-2026-17183 CVE Recordgrafana · grafana oss · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	Aug 19, 2026
34Monitor	CVE-2026-55191No exploit	FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocationfreerdp · freerdp · CWE-122 Pre-auth Memory safety	High8.7	—	0.6%	Aug 19, 2026
28Monitor	CVE-2026-55192No exploit	FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatchfreerdp · freerdp · CWE-125 Pre-auth Memory safety	High7.2	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-55193No exploit	FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_fragfreerdp · freerdp · CWE-122 Pre-auth Memory safety	High8.7	—	0.4%	Aug 19, 2026
34Monitor	CVE-2026-55194No exploit	FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatchfreerdp · freerdp · CWE-122 Pre-auth Memory safety	High8.7	—	0.6%	Aug 19, 2026
28Monitor	CVE-2026-55564No exploit	FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragmentsfreerdp · freerdp · CWE-125 Pre-auth Memory safety	High7.1	—	0.3%	Aug 19, 2026
34Monitor	CVE-2026-61518No exploit	ISPConfig Authenticated SQL Injection via Remote API primary_id Parameterispconfig · ispconfig3 · CWE-89 SQL injection	High8.7	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-63633No exploit	FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→clientfreerdp · freerdp · CWE-122 Pre-auth Memory safety	High7.7	—	0.6%	Aug 19, 2026
28Monitor	CVE-2026-63652No exploit	FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDUfreerdp · freerdp · CWE-415 Memory safety	High7.1	—	0.5%	Aug 19, 2026
28Monitor	CVE-2026-76251No exploit	Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloudsplunk · splunk · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Aug 19, 2026
35Monitor	CVE-2026-76253No exploit	Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprisesplunk · splunk · CWE-269	High8.8	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-76254No exploit	SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprisesplunk · splunk · CWE-943 Pre-auth SQL injection	High8.8	—	0.4%	Aug 19, 2026
29Monitor	CVE-2026-76255No exploit	Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprisesplunk · splunk · CWE-862 Broken access control (IDOR)	High7.3	—	0.2%	Aug 19, 2026
30Monitor	CVE-2026-76262No exploit	Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprisesplunk · splunk · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Aug 19, 2026
37Monitor	CVE-2026-76310No exploit	Improper Access Control through Embedded Report REST API Requests in Splunk Enterprisesplunk · splunk · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.4	—	0.4%	Aug 19, 2026
37Monitor	CVE-2026-76312No exploit	Improper Access Control through Embedded Reports in Splunk Enterprisesplunk · splunk · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.4	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-76313No exploit	Remote Code Execution (RCE) through the REST API in Splunk Enterprisesplunk · splunk · CWE-284 RCE Broken access control (IDOR)	High8.8	—	0.6%	Aug 19, 2026
35Monitor	CVE-2026-76314No exploit	Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprisesplunk · splunk · CWE-94 RCE	High8.8	—	0.8%	Aug 19, 2026
35Monitor	CVE-2026-76315No exploit	Code Injection through Splunk Web Manager Configuration in Splunk Enterprisesplunk · splunk · CWE-94 RCE	High8.8	—	0.6%	Aug 19, 2026
35Monitor	CVE-2026-76316No exploit	Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprisesplunk · splunk · CWE-943 Pre-auth SQL injection	High8.8	—	0.5%	Aug 19, 2026
35Monitor	CVE-2026-76317No exploit	Path Traversal through the Lookup Configuration REST API in Splunk Enterprisesplunk · splunk · CWE-26 Path traversal	High8.8	—	0.5%	Aug 19, 2026
35Monitor	CVE-2026-76319No exploit	Remote Code Execution (RCE) through Federated Search in Splunk Enterprisesplunk · splunk · CWE-862 RCE Broken access control (IDOR)	High8.8	—	0.6%	Aug 19, 2026
29Monitor	CVE-2026-76321No exploit	SPL Injection through Nearby Event Searches in Splunk Enterprisesplunk · splunk · CWE-77 pre-auth RCE Command injection	High7.3	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-76322No exploit	SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprisesplunk · splunk · CWE-862 Broken access control (IDOR)	High8.0	—	0.3%	Aug 19, 2026
29Monitor	CVE-2026-76323No exploit	SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprisesplunk · splunk · CWE-20	High7.3	—	0.3%	Aug 19, 2026
37Monitor	CVE-2026-66794No exploit	Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public routered hat · multicluster engine for kubernetes 2.1 · CWE-918 Pre-auth Auth bypass SSRF	Critical9.3	—	0.6%	Aug 19, 2026
29Monitor	CVE-2026-76325No exploit	Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprisesplunk · splunk · CWE-79 RCE XSS	High7.3	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-76330No exploit	SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprisesplunk · splunk · CWE-20 Pre-auth	High7.1	—	0.3%	Aug 19, 2026
32Monitor	CVE-2026-76331No exploit	SPL Injection through the REST API in Splunk Enterprisesplunk · splunk · CWE-943 SQL injection	High8.1	—	0.4%	Aug 19, 2026
28Monitor	CVE-2026-76332No exploit	SPL Injection through Splunk Web in Splunk Enterprisesplunk · splunk · CWE-20 Pre-auth	High7.1	—	0.3%	Aug 19, 2026
28Monitor	CVE-2026-76333No exploit	Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprisesplunk · splunk · CWE-79 XSS	High7.1	—	0.3%	Aug 19, 2026
35Monitor	CVE-2026-76335No exploit	Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprisesplunk · splunk · CWE-94 RCE	High8.8	—	0.5%	Aug 19, 2026
28Monitor	CVE-2026-76336No exploit	Improper Access Control through the REST API in Splunk Enterprisesplunk · splunk · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Aug 19, 2026
32Monitor	CVE-2026-76338No exploit	Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprisesplunk · splunk · CWE-287 Pre-auth Auth bypass	High8.1	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-76344No exploit	Path Traversal through the Search Dispatch REST API in Splunk Enterprisesplunk · splunk · CWE-27 Path traversal	High7.7	—	0.4%	Aug 19, 2026
35Monitor	CVE-2026-76350No exploit	Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprisesplunk · splunk · CWE-269 RCE	High8.8	—	0.5%	Aug 19, 2026
35Monitor	CVE-2026-76352No exploit	Improper Authorization through the REST API in Splunk Enterprisesplunk · splunk · CWE-285 Broken access control (IDOR)	High8.8	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-76354No exploit	Path Traversal through Search Head Clustering in Splunk Enterprisesplunk · splunk · CWE-158 Path traversal	High8.1	—	0.4%	Aug 19, 2026
30Monitor	CVE-2026-76355No exploit	Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprisesplunk · splunk · CWE-306 Pre-auth Auth bypass	High7.5	—	0.5%	Aug 19, 2026
32Monitor	CVE-2026-76356No exploit	Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOARsplunk · soar · CWE-290 pre-auth RCE Auth bypass	High8.1	—	0.6%	Aug 19, 2026
30Monitor	CVE-2026-76357No exploit	Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOARsplunk · soar · CWE-22 RCE Path traversal	High7.6	—	0.4%	Aug 19, 2026
29Monitor	CVE-2026-76362No exploit	Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOARsplunk · soar · CWE-295 Pre-auth Weak crypto	High7.4	—	0.2%	Aug 19, 2026
32Monitor	CVE-2026-76387No exploit	SPL Injection through the REST API in Splunk Enterprise Securitysplunk · enterprise security · CWE-20	High8.1	—	0.4%	Aug 19, 2026
32Monitor	CVE-2026-76388No exploit	Privilege Escalation through Search Macro Permissions in Splunk Enterprise Securitysplunk · enterprise security · CWE-732	High8.1	—	0.3%	Aug 19, 2026
35Monitor	CVE-2026-76389No exploit	Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloudcisco · talos intelligence for enterprise security cloud · CWE-918 SSRF	High8.8	—	0.4%	Aug 19, 2026
33Monitor	CVE-2026-76391No exploit	Improper Privilege Management through Agent Run History in Splunk AI Toolkitsplunk · ai toolkit · CWE-863 Broken access control (IDOR)	High8.3	—	0.4%	Aug 19, 2026
33Monitor	CVE-2026-76394No exploit	Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkitsplunk · ai toolkit · CWE-862 Broken access control (IDOR)	High8.3	—	0.3%	Aug 19, 2026
35Monitor	CVE-2026-76395No exploit	Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkitsplunk · ai toolkit · CWE-502 RCE Deserialization	High8.8	—	0.6%	Aug 19, 2026
30Monitor	CVE-2026-76396No exploit	Improper Access Control through Scheduled Searches in Splunk AI Toolkitsplunk · ai toolkit · CWE-269 Deserialization	High7.5	—	0.3%	Aug 19, 2026

CVE-2026-18430
28Monitor
HumHub 1.18.4 - Stored XSS in comment-deletion notifications through unescaped administrator reason
HighCVSS 7.2No exploitEPSS 0%
- XSS
humhub · humhubAug 19, 2026
CVE-2026-44252
30Monitor
Wazuh Manager dapi RBAC Bypass Allows Privilege Escalation
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
wazuh · wazuhAug 19, 2026
CVE-2026-16933
32Monitor
Power System Integer Overflow
HighCVSS 8.2No exploitEPSS 0%
- Memory safety
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-46343
30Monitor
Wazuh: Arbitrary File Deletion via Cluster Protocol – Incomplete Path Validation in end_receiving_file()
HighCVSS 7.5No exploitEPSS 0%
- Path traversal
wazuh · wazuhAug 19, 2026
CVE-2026-17042
29Monitor
Power System Out-of-bounds Read
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
ibm · power system s922 \(9009-22g\) firmwareAug 19, 2026
CVE-2026-17063
31Monitor
Power System Incorrect Authorization
HighCVSS 7.9No exploitEPSS 0%
- Broken access control (IDOR)
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-17091
33Monitor
Power System Integer Overflow
HighCVSS 8.4No exploitEPSS 0%
- Memory safety
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-17414
35Monitor
Power System Improper Input Validation
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-18821
35Monitor
Power System Out-of-bounds Write
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-18871
29Monitor
Power System Buffer Overflow
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
ibm · power system s1122 \(9824-22a\) firmwareAug 19, 2026
CVE-2026-19505
39Monitor
RDK-B WebUI improper cryptographic signature verification vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
rdk · rdk-b webuiAug 19, 2026
CVE-2026-19506
32Monitor
RDK-B WebUI race condition vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Race condition
rdk · rdk-b webuiAug 19, 2026
CVE-2026-19507
30Monitor
RDK WebUI uncontrolled resource consumption
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
rdk · rdk-b webuiAug 19, 2026
CVE-2026-19508
39Monitor
RDK WebUI heap-based buffer overflow vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
rdk · rdk-b webuiAug 19, 2026
CVE-2026-22306
40Plan
Critical flaw impacting OZOLS ERP's automatic update channel
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Weak crypto
ozols grupa · ozolsAug 19, 2026
CVE-2026-55085
38Monitor
Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- XSS
ether · etherpadAug 19, 2026
CVE-2026-55087
24Monitor
Etherpad: x-proxy-path header reflected into admin HTML/JS/CSS (cache-poisoning XSS) and concatenated into redirect (open-redirect)
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
ether · etherpadAug 19, 2026
CVE-2026-62317
30Monitor
Logto: ReDoS via unescaped user input in email subaddressing regex (blockSubaddressing)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
logto-io · logtoAug 19, 2026
CVE-2026-63188
34Monitor
logto-tunnel serves files outside --experience-path via path traversal
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
logto-io · logtoAug 19, 2026
CVE-2026-75593
28Monitor
BuildKit: Malicious client can bypass destination directory validation on local sources upload
HighCVSS 7.2No exploitEPSS 0%
- Auth bypass
- Path traversal
moby · buildkitAug 19, 2026
CVE-2026-76647
35Monitor
Leantime JSON-RPC API contains a missing authorization vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Info leak
leantime · json-rpc apiAug 19, 2026
CVE-2026-62668
37Monitor
Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols
CriticalCVSS 9.4No exploitEPSS 0%
- SSRF
getgrav · gravAug 19, 2026
CVE-2026-62669
29Monitor
Grav Login Plugin: 2FA Bypass via 'login.regenerate2FASecret' - Secret Rotation During Pending Challenge
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
getgrav · gravAug 19, 2026
CVE-2026-17015
32Monitor
IBM i Denial of Service
HighCVSS 8.1No exploitEPSS 0%
- Memory safety
ibm · iAug 19, 2026
CVE-2026-18544
32Monitor
Portieris is vulnerable to Image Policy Bypass via Unvalidated ownerReference
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
ibm · portierisAug 19, 2026
CVE-2026-53542
35Monitor
Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
termix-ssh · termixAug 19, 2026
CVE-2026-53545
39Monitor
Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
termix-ssh · termixAug 19, 2026
CVE-2026-53546
38Monitor
Termix: Missing authorization in SSH host credential resolution exposes stored credentials
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
termix-ssh · termixAug 19, 2026
CVE-2026-53547
35Monitor
Termix: Account Takeover via Global Settings Disclosure
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
termix-ssh · termixAug 19, 2026
CVE-2026-53548
38Monitor
Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
termix-ssh · termixAug 19, 2026
CVE-2026-53549
30Monitor
Termix: Server-Side Request Forgery via Proxy Connectivity Test
HighCVSS 7.7No exploitEPSS 0%
- SSRF
termix-ssh · termixAug 19, 2026
CVE-2026-61556
34Monitor
LiquidJS: An infinite loop vulnerability in `strip_html` filter
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
harttle · liquidjsAug 19, 2026
CVE-2026-69222
30Monitor
LiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
harttle · liquidjsAug 19, 2026
CVE-2026-75616
35Monitor
Command Injection in Router Web Management Interface
HighCVSS 8.5Proof of conceptEPSS 2%
- RCE
- Command injection
tp-link · archer c20 firmwareAug 19, 2026
CVE-2026-76576
8Monitor
yangzongzhuan RuoYi-Vue Common Download Endpoint CommonController.java resourceDownload path traversal
LowCVSS 2.1No exploitEPSS 0%
- Path traversal
yangzongzhuan · ruoyi-vueAug 19, 2026
CVE-2026-76584
34Monitor
TRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
trendnet · tv-ip751wicAug 19, 2026
CVE-2024-13942
30Monitor
Rockchip RK3588s Secure BootROM TOCTOU (time-of-check to time-of-use) vulnerability leading to arbitrary code execution with highest privileges
HighCVSS 7.6No exploitEPSS 0%
- RCE
- Race condition
rockchip · rk3588sAug 19, 2026
CVE-2026-41424
32Monitor
Wazuh: Privilege Escalation via Admin-Protection Bypass in update-user API Endpoint
HighCVSS 8.2No exploitEPSS 0%
- Broken access control (IDOR)
wazuh · wazuhAug 19, 2026
CVE-2026-44901
33Monitor
Wazuh Cluster DAPI Protocol Deserialization of Untrusted Data Remote Code Execution Vulnerability
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Deserialization
wazuh · wazuhAug 19, 2026
CVE-2026-45798
30Monitor
Wazuh: Pre-auth stack-buffer-overflow in compare_wazuh_versions reachable from wazuh-authd (TCP/1515) via crafted enrollment V: field
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
wazuh · wazuhAug 19, 2026
CVE-2026-48024
36Monitor
Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager
CriticalCVSS 9.1No exploitEPSS 0%
- Path traversal
wazuh · wazuhAug 19, 2026
CVE-2026-48162
36Monitor
Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager
CriticalCVSS 9.1No exploitEPSS 0%
- Path traversal
wazuh · wazuhAug 19, 2026
CVE-2026-49441
36Monitor
Wazuh : peer-controlled metadata key in process_files_from_worker non-merged branch allows arbitrary file write under WAZUH_PATH on Wazuh manager
CriticalCVSS 9.1No exploitEPSS 0%
- Path traversal
wazuh · wazuhAug 19, 2026
CVE-2026-71470
36Monitor
Acm-search-v2-rhel9: search-v2-operator: search cr imageoverride/arguments/envvar flow unsanitized into pods running impersonating sa
CriticalCVSS 9.1No exploitEPSS 0%
red hat · red hat advanced cluster management for kubernetes 2.11Aug 19, 2026
CVE-2026-75141
34Monitor
FFmpeg Heap Buffer Overflow in hvcC Box Writer via HEVC Muxing
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ffmpeg · ffmpegAug 19, 2026
CVE-2026-75142
34Monitor
FFmpeg Stack Buffer Overflow in MPEG-PS Muxer via mpegenc.c
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ffmpeg · ffmpegAug 19, 2026
CVE-2026-75143
37Monitor
FFmpeg Heap Buffer Overflow via RIST Protocol Reader
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
ffmpeg · ffmpegAug 19, 2026
CVE-2026-75144
34Monitor
FFmpeg Heap Buffer Overflow in VC-2/Dirac RTP Packetizer
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ffmpeg · ffmpegAug 19, 2026
CVE-2026-75146
28Monitor
FFmpeg Out-of-Bounds Read in DASH Demuxer via dashdec.c
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Memory safety
ffmpeg · ffmpegAug 19, 2026
CVE-2025-14600
37Monitor
Admin Account Takeover via Path Traversal in vsDesk
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Deserialization
vsdesk · vsdeskAug 19, 2026
CVE-2025-14603
35Monitor
Use of user input in raw SQL queries in vsDesk leading to blind SQL injection
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
vsdesk · vsdeskAug 19, 2026
CVE-2026-17183
28Monitor
CVE-2026-17183 CVE Record
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
grafana · grafana ossAug 19, 2026
CVE-2026-55191
34Monitor
FreeRDP: Heap-buffer-overflow write in AVC444 YUV buffer allocation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-55192
28Monitor
FreeRDP: Out-of-bounds read in H.264 YUV-to-RGB conversion due to decoder/surface dimension mismatch
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-55193
34Monitor
FreeRDP: Heap-buffer-overflow write in TS Gateway RPC fragment receive due to uncapped bind_ack max_xmit_frag
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-55194
34Monitor
FreeRDPHeap-buffer-overflow write in TS Gateway RPC RESPONSE reassembly due to alloc_hint capacity mismatch
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-55564
28Monitor
FreeRDP: Out-of-bounds read in glyph_cache_get via crafted glyph fragments
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-61518
34Monitor
ISPConfig Authenticated SQL Injection via Remote API primary_id Parameter
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
ispconfig · ispconfig3Aug 19, 2026
CVE-2026-63633
30Monitor
FreeRDP: Heap buffer overflow in Opus audio decode (`freerdp_dsp_decode_opus` resizes the wrong stream) — server→client
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-63652
28Monitor
FreeRDP: Double-free of `client_formats` in the rdpsnd server channel on a malformed Client Audio Formats PDU
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
freerdp · freerdpAug 19, 2026
CVE-2026-76251
28Monitor
Missing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76253
35Monitor
Privilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
splunk · splunkAug 19, 2026
CVE-2026-76254
35Monitor
SPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
splunk · splunkAug 19, 2026
CVE-2026-76255
29Monitor
Risky Command Safeguards Bypass through Splunk Web in Splunk Enterprise
HighCVSS 7.3No exploitEPSS 0%
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76262
30Monitor
Exposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
splunk · splunkAug 19, 2026
CVE-2026-76310
37Monitor
Improper Access Control through Embedded Report REST API Requests in Splunk Enterprise
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76312
37Monitor
Improper Access Control through Embedded Reports in Splunk Enterprise
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76313
35Monitor
Remote Code Execution (RCE) through the REST API in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76314
35Monitor
Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- RCE
splunk · splunkAug 19, 2026
CVE-2026-76315
35Monitor
Code Injection through Splunk Web Manager Configuration in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- RCE
splunk · splunkAug 19, 2026
CVE-2026-76316
35Monitor
Stored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
splunk · splunkAug 19, 2026
CVE-2026-76317
35Monitor
Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- Path traversal
splunk · splunkAug 19, 2026
CVE-2026-76319
35Monitor
Remote Code Execution (RCE) through Federated Search in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76321
29Monitor
SPL Injection through Nearby Event Searches in Splunk Enterprise
HighCVSS 7.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
splunk · splunkAug 19, 2026
CVE-2026-76322
32Monitor
SPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise
HighCVSS 8.0No exploitEPSS 0%
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76323
29Monitor
SPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise
HighCVSS 7.3No exploitEPSS 0%
splunk · splunkAug 19, 2026
CVE-2026-66794
37Monitor
Cluster-proxy-addon: cluster-proxy-addon: unauthenticated ssrf to arbitrary managed-cluster services via public route
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- SSRF
red hat · multicluster engine for kubernetes 2.1Aug 19, 2026
CVE-2026-76325
29Monitor
Stored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise
HighCVSS 7.3No exploitEPSS 0%
- RCE
- XSS
splunk · splunkAug 19, 2026
CVE-2026-76330
28Monitor
SPL Injection through Monitoring Console Forwarder Filters in Splunk Enterprise
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
splunk · splunkAug 19, 2026
CVE-2026-76331
32Monitor
SPL Injection through the REST API in Splunk Enterprise
HighCVSS 8.1No exploitEPSS 0%
- SQL injection
splunk · splunkAug 19, 2026
CVE-2026-76332
28Monitor
SPL Injection through Splunk Web in Splunk Enterprise
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
splunk · splunkAug 19, 2026
CVE-2026-76333
28Monitor
Stored Cross-Site Scripting (XSS) through Dashboard Studio Workflow Actions in Splunk Enterprise
HighCVSS 7.1No exploitEPSS 0%
- XSS
splunk · splunkAug 19, 2026
CVE-2026-76335
35Monitor
Remote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- RCE
splunk · splunkAug 19, 2026
CVE-2026-76336
28Monitor
Improper Access Control through the REST API in Splunk Enterprise
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76338
32Monitor
Improper Authentication through REST API Distributed Search Token Requests in Splunk Enterprise
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
splunk · splunkAug 19, 2026
CVE-2026-76344
30Monitor
Path Traversal through the Search Dispatch REST API in Splunk Enterprise
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
splunk · splunkAug 19, 2026
CVE-2026-76350
35Monitor
Improper Privilege Management through PDF Attachments for Email Alert Actions in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- RCE
splunk · splunkAug 19, 2026
CVE-2026-76352
35Monitor
Improper Authorization through the REST API in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
splunk · splunkAug 19, 2026
CVE-2026-76354
32Monitor
Path Traversal through Search Head Clustering in Splunk Enterprise
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
splunk · splunkAug 19, 2026
CVE-2026-76355
30Monitor
Unauthenticated Information Disclosure through an Edge Processor Service Endpoint in Splunk Enterprise
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
splunk · splunkAug 19, 2026
CVE-2026-76356
32Monitor
Authentication Bypass through IP Address Spoofing in the Automation Broker in Splunk SOAR
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
splunk · soarAug 19, 2026
CVE-2026-76357
30Monitor
Remote Code Execution (RCE) through Path Traversal in the REST API in Splunk SOAR
HighCVSS 7.6No exploitEPSS 0%
- RCE
- Path traversal
splunk · soarAug 19, 2026
CVE-2026-76362
29Monitor
Improper Certificate Validation through CyberArk Vault Privileged Access Manager in Splunk SOAR
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
splunk · soarAug 19, 2026
CVE-2026-76387
32Monitor
SPL Injection through the REST API in Splunk Enterprise Security
HighCVSS 8.1No exploitEPSS 0%
splunk · enterprise securityAug 19, 2026
CVE-2026-76388
32Monitor
Privilege Escalation through Search Macro Permissions in Splunk Enterprise Security
HighCVSS 8.1No exploitEPSS 0%
splunk · enterprise securityAug 19, 2026
CVE-2026-76389
35Monitor
Server-Side Request Forgery (SSRF) through the REST API in Cisco Talos Intelligence for Enterprise Security Cloud
HighCVSS 8.8No exploitEPSS 0%
- SSRF
cisco · talos intelligence for enterprise security cloudAug 19, 2026
CVE-2026-76391
33Monitor
Improper Privilege Management through Agent Run History in Splunk AI Toolkit
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
splunk · ai toolkitAug 19, 2026
CVE-2026-76394
33Monitor
Missing Authorization in Container and Connection Management through the REST API in Splunk AI Toolkit
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
splunk · ai toolkitAug 19, 2026
CVE-2026-76395
35Monitor
Remote Code Execution (RCE) through Deserialization of Untrusted Data in the Model Loading REST API in Splunk AI Toolkit
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Deserialization
splunk · ai toolkitAug 19, 2026
CVE-2026-76396
30Monitor
Improper Access Control through Scheduled Searches in Splunk AI Toolkit
HighCVSS 7.5No exploitEPSS 0%
- Deserialization
splunk · ai toolkitAug 19, 2026