By publication date

Exploited and new serious CVEs: August 2026

4,777 records · 21 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 42 of 48

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-81694No exploit	openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Commandjahlives · openssl encrypt · CWE-117 Pre-auth	Critical9.3	—	0.2%	Aug 27, 2026
37Monitor	CVE-2026-81695No exploit	openssl_encrypt before 1.4.9 Terminal Injection via key_idjahlives · openssl encrypt · CWE-117 Pre-auth	Critical9.3	—	0.2%	Aug 27, 2026
37Monitor	CVE-2026-81696No exploit	openssl_encrypt before 1.4.9 Terminal Injection via info Commandjahlives · openssl encrypt · CWE-117 Pre-auth	Critical9.3	—	0.2%	Aug 27, 2026
34Monitor	CVE-2026-81697No exploit	openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configurationjahlives · openssl_encrypt · CWE-426 Pre-auth	High8.7	—	0.2%	Aug 27, 2026
37Monitor	CVE-2026-81698No exploit	openssl_encrypt before 1.4.9 Shell Injection via info commandjahlives · openssl encrypt · CWE-78 pre-auth RCE Command injection	Critical9.3	—	0.4%	Aug 27, 2026
34Monitor	CVE-2026-81699No exploit	openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF costjahlives · openssl encrypt · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Aug 27, 2026
37Monitor	CVE-2026-81700No exploit	openssl_encrypt before 1.4.9 GPG Signature Verification Bypassjahlives · openssl encrypt · CWE-347 Pre-auth Weak crypto	Critical9.3	—	0.3%	Aug 27, 2026
37Monitor	CVE-2026-81701No exploit	openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned pluginjahlives · openssl encrypt · CWE-347 pre-auth RCE Weak crypto	Critical9.3	—	0.4%	Aug 27, 2026
37Monitor	CVE-2026-81702No exploit	openssl_encrypt before 1.4.9 Key Substitution via Identity Loadjahlives · openssl encrypt · CWE-345 Pre-auth	Critical9.3	—	0.1%	Aug 27, 2026
34Monitor	CVE-2026-81703No exploit	openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Keyjahlives · openssl encrypt · CWE-287 Pre-auth Auth bypass	High8.7	—	0.2%	Aug 27, 2026
34Monitor	CVE-2026-81704No exploit	openssl_encrypt before 1.4.9 Weak Key Derivation via D-Busjahlives · openssl encrypt · CWE-916 Pre-auth	High8.7	—	0.2%	Aug 27, 2026
34Monitor	CVE-2026-81705No exploit	openssl-encrypt before 1.4.9 Password Cleartext Leak via Debugjahlives · openssl encrypt · CWE-532 Pre-auth Info leak	High8.7	—	0.4%	Aug 27, 2026
37Monitor	CVE-2026-81706No exploit	openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowingjahlives · openssl encrypt · CWE-345 Pre-auth	Critical9.3	—	0.1%	Aug 27, 2026
37Monitor	CVE-2026-81707No exploit	openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Emailjahlives · openssl_encrypt · CWE-20 Pre-auth	Critical9.3	—	0.5%	Aug 27, 2026
37Monitor	CVE-2026-81714No exploit	openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypassjahlives · openssl encrypt · CWE-347 Pre-auth Weak crypto	Critical9.3	—	0.1%	Aug 27, 2026
34Monitor	CVE-2026-81715No exploit	openssl_encrypt before 1.4.9 Credential Exposure via Debug Outputjahlives · openssl encrypt · CWE-532 Pre-auth Info leak	High8.7	—	0.2%	Aug 27, 2026
34Monitor	CVE-2026-81716No exploit	openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversaljahlives · openssl encrypt · CWE-22 Pre-auth Path traversal	High8.7	—	0.2%	Aug 27, 2026
37Monitor	CVE-2026-81717No exploit	openssl_encrypt before 1.4.9 Integrity Bypass via Added Filesjahlives · openssl encrypt · CWE-347 Pre-auth Weak crypto	Critical9.3	—	0.1%	Aug 27, 2026
34Monitor	CVE-2026-81718No exploit	openssl_encrypt before 1.4.9 Weak Cryptographic Parametersjahlives · openssl_encrypt · CWE-326 Pre-auth Weak crypto	High8.7	—	0.1%	Aug 27, 2026
37Monitor	CVE-2026-81719No exploit	openssl_encrypt before 1.4.9 Remote Code Execution via Pluginjahlives · openssl encrypt · CWE-94 pre-auth RCE	Critical9.3	—	0.4%	Aug 27, 2026
34Monitor	CVE-2026-81721No exploit	openssl_encrypt before 1.4.9 Denial of Service via KDFjahlives · openssl encrypt · CWE-400 Pre-auth Auth bypass Denial of service	High8.7	—	0.5%	Aug 27, 2026
34Monitor	CVE-2026-81722No exploit	nltk PorterStemmer before 3.10.3 Quadratic-time DoSnltk · nltk · CWE-407 Pre-auth	High8.7	—	0.5%	Aug 27, 2026
40Plan	CVE-2026-81735No exploit	UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Executionbytedance · ui-tars-desktop · CWE-306 pre-auth RCE Auth bypass	Critical10.0	—	0.7%	Aug 27, 2026
28Monitor	CVE-2026-81817No exploit	Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modificationflowintel · flowintel · CWE-639 Broken access control (IDOR)	High7.2	—	0.3%	Aug 27, 2026
34Monitor	CVE-2026-81818No exploit	Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privilegesflowintel · flowintel · CWE-269	High8.6	—	0.3%	Aug 27, 2026
36Monitor	CVE-2026-81826No exploit	Flowintel Fails to Invalidate Active Sessions After Password Changeflowintel · flowintel · CWE-384 Pre-auth	Critical9.1	—	0.4%	Aug 27, 2026
34Monitor	CVE-2026-10036Proof of concept	SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsingspeechbrain · speechbrain · CWE-502 pre-auth RCE Deserialization	High8.7	—	0.6%	Aug 27, 2026
42Plan	CVE-2026-18885No exploit	Unauthenticated Remote Code Execution in GraphQL Composite Data APIservicenow · servicenow ai platform · CWE-94 pre-auth RCE	Critical10.0	—	7.2%	Aug 27, 2026
42Plan	CVE-2026-18886No exploit	Unauthenticated Privilege Escalation via System Configuration Image Upload Processorservicenow · servicenow ai platform · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	5.0%	Aug 27, 2026
40Plan	CVE-2026-19092Proof of concept	Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowingunknown · tutor lms · CWE-74 Pre-auth	Critical9.8	—	2.6%	Aug 27, 2026
24Monitor	CVE-2026-25250Proof of concept	EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."eazsolution · eazyfix · CWE-325	Medium6.0	—	0.1%	Aug 27, 2026
39Monitor	CVE-2026-30612No exploit	An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a CWE-494 pre-auth RCE	Critical9.8	—	0.4%	Aug 27, 2026
40Plan	CVE-2026-35868No exploit	A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.CWE-20 pre-auth RCE Command injection	Critical9.8	—	2.3%	Aug 27, 2026
40Plan	CVE-2026-35869No exploit	A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.CWE-20 pre-auth RCE Command injection	Critical9.8	—	2.3%	Aug 27, 2026
28Monitor	CVE-2026-36102No exploit	An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate privCWE-269	High7.2	—	0.5%	Aug 27, 2026
39Monitor	CVE-2026-37003No exploit	Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.CWE-94 pre-auth RCE	Critical9.8	—	1.3%	Aug 27, 2026
39Monitor	CVE-2026-37004No exploit	BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arCWE-1336 pre-auth RCE SSTI	Critical9.8	—	0.7%	Aug 27, 2026
39Monitor	CVE-2026-37006No exploit	A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code exeCWE-287 Pre-auth Auth bypass	Critical9.8	—	0.8%	Aug 27, 2026
39Monitor	CVE-2026-37007No exploit	A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path traversCWE-22 Pre-auth Path traversal	Critical9.8	—	0.9%	Aug 27, 2026
30Monitor	CVE-2026-37012No exploit	A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via harCWE-798 Pre-auth Hard-coded credentials	High7.5	—	0.4%	Aug 27, 2026
21Monitor	CVE-2026-37064Proof of concept	User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the appCWE-203 Pre-auth	Medium5.3	—	0.3%	Aug 27, 2026
36Monitor	CVE-2026-37065Proof of concept	Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.CWE-552 Pre-auth	Critical9.1	—	0.5%	Aug 27, 2026
26Monitor	CVE-2026-37066Proof of concept	Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 aCWE-22 Path traversal	Medium6.5	—	0.5%	Aug 27, 2026
21Monitor	CVE-2026-37067Proof of concept	Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker tCWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Aug 27, 2026
32Monitor	CVE-2026-37068Proof of concept	Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated uCWE-22 Path traversal	High8.1	—	0.5%	Aug 27, 2026
21Monitor	CVE-2026-37069Proof of concept	Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 allCWE-200 Pre-auth Info leak	Medium5.3	—	0.3%	Aug 27, 2026
26Monitor	CVE-2026-37070Proof of concept	Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read anyCWE-284 Broken access control (IDOR)	Medium6.5	—	0.3%	Aug 27, 2026
39Monitor	CVE-2026-37071Proof of concept	Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authentCWE-269 Pre-auth	Critical9.8	—	0.5%	Aug 27, 2026
39Monitor	CVE-2026-37072Proof of concept	Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 27, 2026
21Monitor	CVE-2026-37073Proof of concept	Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emaiCWE-284 Pre-auth Broken access control (IDOR)	Medium5.3	—	0.3%	Aug 27, 2026
30Monitor	CVE-2026-37198No exploit	An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP pCWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Aug 27, 2026
28Monitor	CVE-2026-54718No exploit	Silverstripe Advanced Workflow: Remote code execution via advanced workflow email templatesilverstripe · silverstripe-advancedworkflow · CWE-1336 RCE SSTI	High7.2	—	1.0%	Aug 27, 2026
35Monitor	CVE-2026-54721No exploit	Silverstripe UserForms: Remote code execution via userforms email subjectsilverstripe · silverstripe-userforms · CWE-94 RCE	High8.8	—	0.7%	Aug 27, 2026
30Monitor	CVE-2026-59282No exploit	Spring Framework Denial of Service via Unbounded List Growth in Data Bindingvmware · spring framework · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Aug 27, 2026
36Monitor	CVE-2026-59283No exploit	Spring Framework Safety Guard Bypass via SpEL Expression Compilationvmware · spring framework · CWE-913 Pre-auth	Critical9.1	—	0.5%	Aug 27, 2026
30Monitor	CVE-2026-59284No exploit	Spring Cloud Commons no allow list for writable env actuator endpointbroadcom · spring cloud commons · CWE-915	High7.6	—	0.4%	Aug 27, 2026
32Monitor	CVE-2026-59285No exploit	Spring for GraphQL Unsafe Deserialization in pagination supportvmware · spring for graphql · CWE-502 Pre-auth Deserialization	High8.1	—	0.4%	Aug 27, 2026
32Monitor	CVE-2026-59286No exploit	Spring for GraphQL loads Untrusted Resources in GraphiQL supportvmware · spring for graphql · CWE-494 pre-auth RCE	High8.1	—	0.3%	Aug 27, 2026
29Monitor	CVE-2026-59288No exploit	Spring for GraphQL Information Exposure in GraphiQL supportvmware · spring for graphql · CWE-200 Pre-auth Info leak	High7.4	—	0.3%	Aug 27, 2026
30Monitor	CVE-2026-59289No exploit	Spring for GraphQL Denial of Service via pagination supportvmware · spring for graphql · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Aug 27, 2026
32Monitor	CVE-2026-59307No exploit	Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale referencevmware · spring integration · CWE-502 Deserialization	High8.0	—	0.4%	Aug 27, 2026
39Monitor	CVE-2026-59313No exploit	Server Sent Event stream corruption in Spring MVC functional web frameworkvmware · spring framework · CWE-93 Pre-auth	Critical9.8	—	0.5%	Aug 27, 2026
32Monitor	CVE-2026-59316No exploit	Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)broadcom · spring authorization server · CWE-79 Pre-auth XSS	High8.2	—	0.3%	Aug 27, 2026
32Monitor	CVE-2026-59324No exploit	fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunctionvmware · spring integration · CWE-362 Pre-auth Race condition	High8.2	—	0.2%	Aug 27, 2026
40Plan	CVE-2026-6876No exploit	Sandbox Escape in ServiceNow AI Platformservicenow · servicenow ai platform · CWE-94 pre-auth RCE	Critical10.0	—	0.6%	Aug 27, 2026
42Plan	CVE-2026-74820No exploit	Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clauseservicenow · servicenow ai platform · CWE-89 pre-auth RCE SQL injection	Critical10.0	—	5.1%	Aug 27, 2026
30Monitor	CVE-2026-75889No exploit	CVE-2026-75889 CVE Recordgrafana · alloy · CWE-552	High7.7	—	0.2%	Aug 27, 2026
34Monitor	CVE-2026-76639Proof of concept	Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversalunitree robotics · g1 edu · CWE-22 pre-auth RCE Path traversal	High8.7	—	0.6%	Aug 27, 2026
30Monitor	CVE-2026-76640No exploit	Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stackunitree robotics · g1 edu · CWE-306 pre-auth RCE Auth bypass	High7.7	—	0.3%	Aug 27, 2026
34Monitor	CVE-2026-81728No exploit	Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keysdolibarr · dolibarr erp\/crm · CWE-89 SQL injection	High8.6	—	0.4%	Aug 27, 2026
28Monitor	CVE-2026-81729No exploit	Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletiondolibarr · dolibarr erp\/crm · CWE-863 Broken access control (IDOR)	High7.1	—	0.3%	Aug 27, 2026
35Monitor	CVE-2026-81730No exploit	Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filenamedolibarr · dolibarr erp\/crm · CWE-22 Pre-auth Path traversal	High8.8	—	0.5%	Aug 27, 2026
30Monitor	CVE-2026-81934No exploit	Redis TLS pending-data list use-after-freeredis · redis · CWE-416 RCE Memory safety	High7.5	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-5680No exploit	Undertow-core: undertow: denial of service via websocket permessage-deflate processingred hat · red hat jboss enterprise application platform 8.1 for rhel 10 · CWE-770 Pre-auth Denial of service	High7.5	—	1.0%	Aug 27, 2026
30Monitor	CVE-2026-78002No exploit	Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() functionred hat · red hat enterprise linux 10 · CWE-131 Pre-auth Denial of service	High7.5	—	1.0%	Aug 27, 2026
33Monitor	CVE-2026-81679No exploit	OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification APIopenremote · openremote · CWE-200 Info leak	High8.3	—	0.3%	Aug 27, 2026
33Monitor	CVE-2026-81726No exploit	NLTK through 3.10.3 Path Traversal via Model-Artifact APIsnltk · nltk · CWE-73 Pre-auth Path traversal	High8.3	—	0.3%	Aug 27, 2026
36Monitor	CVE-2026-18717No exploit	Improper Certificate Validation in ASE 2000applied systems engineering · ase2000 v2 · CWE-295 Pre-auth Weak crypto	Critical9.1	—	0.2%	Aug 27, 2026
34Monitor	CVE-2026-18965No exploit	Missing Authorization in PayRange APIpayrange · payrange api · CWE-862 Broken access control (IDOR)	High8.7	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-38344No exploit	A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to causCWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-38346No exploit	An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialCWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-38347No exploit	A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to causCWE-122 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-38348No exploit	An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) vCWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-38349No exploit	An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenialCWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-38350No exploit	An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a DenCWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Aug 27, 2026
35Monitor	CVE-2026-39944No exploit	Ceph: CephX AES Authentication errorceph · ceph · CWE-327 Weak crypto	High8.8	—	0.2%	Aug 27, 2026
31Monitor	CVE-2026-44629No exploit	Improper access control to the Synergis Softwire installation folder.genetec inc. · synergis softwire · CWE-922	High7.9	—	0.1%	Aug 27, 2026
34Monitor	CVE-2026-47727No exploit	Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)triliumnotes · trilium · CWE-94 pre-auth RCE SSTI	High8.6	—	0.5%	Aug 27, 2026
37Monitor	CVE-2026-48996No exploit	Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop clienttriliumnotes · trilium · CWE-79 RCE Local privilege escalation XSS	Critical9.3	—	0.2%	Aug 27, 2026
37Monitor	CVE-2026-53578No exploit	Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtmltriliumnotes · trilium · CWE-79 RCE Local privilege escalation XSS	Critical9.3	—	0.2%	Aug 27, 2026
37Monitor	CVE-2026-53579No exploit	Trilium: Note Import to RCE via Book Notetriliumnotes · trilium · CWE-79 RCE Local privilege escalation XSS	Critical9.3	—	0.2%	Aug 27, 2026
32Monitor	CVE-2026-53580No exploit	Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download featuretriliumnotes · trilium · CWE-73 Path traversal	High8.1	—	0.5%	Aug 27, 2026
36Monitor	CVE-2026-50152No exploit	Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only usersceph · ceph · CWE-285 Broken access control (IDOR)	Critical9.1	—	0.2%	Aug 27, 2026
32Monitor	CVE-2026-54083No exploit	Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletionwazuh · wazuh · CWE-22 Path traversal	High8.1	—	0.5%	Aug 27, 2026
28Monitor	CVE-2026-54085No exploit	Wazuh: Missing input validation in multiple active response scripts allows argument injectionwazuh · wazuh · CWE-88	High7.1	—	0.4%	Aug 27, 2026
32Monitor	CVE-2026-54330No exploit	Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalationceph · ceph · CWE-347 Weak crypto	High8.1	—	0.3%	Aug 27, 2026
35Monitor	CVE-2026-5706No exploit	Buffer overflow in Bluetooth Mesh SDK when handling extended advertisementssilicon labs · bt mesh sdk · CWE-130 pre-auth RCE	High8.9	—	0.3%	Aug 27, 2026
28Monitor	CVE-2026-61783No exploit	Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.keywazuh · wazuh · CWE-200 Info leak	High7.0	—	0.4%	Aug 27, 2026
30Monitor	CVE-2026-67560No exploit	Stack-based Buffer Overflow in Bendix EC80 Brake ECUbendix · ec80esp+ j1708 · CWE-121 pre-auth RCE Memory safety	High7.7	—	0.3%	Aug 27, 2026
37Monitor	CVE-2026-68929No exploit	FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorizationlabring · fastgpt · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.4%	Aug 27, 2026

CVE-2026-81694
37Monitor
openssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jahlives · openssl encryptAug 27, 2026
CVE-2026-81695
37Monitor
openssl_encrypt before 1.4.9 Terminal Injection via key_id
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jahlives · openssl encryptAug 27, 2026
CVE-2026-81696
37Monitor
openssl_encrypt before 1.4.9 Terminal Injection via info Command
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jahlives · openssl encryptAug 27, 2026
CVE-2026-81697
34Monitor
openssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
jahlives · openssl_encryptAug 27, 2026
CVE-2026-81698
37Monitor
openssl_encrypt before 1.4.9 Shell Injection via info command
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
jahlives · openssl encryptAug 27, 2026
CVE-2026-81699
34Monitor
openssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
jahlives · openssl encryptAug 27, 2026
CVE-2026-81700
37Monitor
openssl_encrypt before 1.4.9 GPG Signature Verification Bypass
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
jahlives · openssl encryptAug 27, 2026
CVE-2026-81701
37Monitor
openssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Weak crypto
jahlives · openssl encryptAug 27, 2026
CVE-2026-81702
37Monitor
openssl_encrypt before 1.4.9 Key Substitution via Identity Load
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jahlives · openssl encryptAug 27, 2026
CVE-2026-81703
34Monitor
openssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
jahlives · openssl encryptAug 27, 2026
CVE-2026-81704
34Monitor
openssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
jahlives · openssl encryptAug 27, 2026
CVE-2026-81705
34Monitor
openssl-encrypt before 1.4.9 Password Cleartext Leak via Debug
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
jahlives · openssl encryptAug 27, 2026
CVE-2026-81706
37Monitor
openssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jahlives · openssl encryptAug 27, 2026
CVE-2026-81707
37Monitor
openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
jahlives · openssl_encryptAug 27, 2026
CVE-2026-81714
37Monitor
openssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
jahlives · openssl encryptAug 27, 2026
CVE-2026-81715
34Monitor
openssl_encrypt before 1.4.9 Credential Exposure via Debug Output
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
jahlives · openssl encryptAug 27, 2026
CVE-2026-81716
34Monitor
openssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
jahlives · openssl encryptAug 27, 2026
CVE-2026-81717
37Monitor
openssl_encrypt before 1.4.9 Integrity Bypass via Added Files
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
jahlives · openssl encryptAug 27, 2026
CVE-2026-81718
34Monitor
openssl_encrypt before 1.4.9 Weak Cryptographic Parameters
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
jahlives · openssl_encryptAug 27, 2026
CVE-2026-81719
37Monitor
openssl_encrypt before 1.4.9 Remote Code Execution via Plugin
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
jahlives · openssl encryptAug 27, 2026
CVE-2026-81721
34Monitor
openssl_encrypt before 1.4.9 Denial of Service via KDF
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Denial of service
jahlives · openssl encryptAug 27, 2026
CVE-2026-81722
34Monitor
nltk PorterStemmer before 3.10.3 Quadratic-time DoS
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
nltk · nltkAug 27, 2026
CVE-2026-81735
40Plan
UI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
bytedance · ui-tars-desktopAug 27, 2026
CVE-2026-81817
28Monitor
Flowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
flowintel · flowintelAug 27, 2026
CVE-2026-81818
34Monitor
Flowintel Organization Administrator Can Reset Full Administrator Password and Escalate Privileges
HighCVSS 8.6No exploitEPSS 0%
flowintel · flowintelAug 27, 2026
CVE-2026-81826
36Monitor
Flowintel Fails to Invalidate Active Sessions After Password Change
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
flowintel · flowintelAug 27, 2026
CVE-2026-10036
34Monitor
SpeechBrain < 1.1.1 Arbitrary Code Execution via CKPT.yaml Parsing
HighCVSS 8.7Proof of conceptEPSS 0%
- pre-auth RCE
- Deserialization
speechbrain · speechbrainAug 27, 2026
CVE-2026-18885
42Plan
Unauthenticated Remote Code Execution in GraphQL Composite Data API
CriticalCVSS 10.0No exploitEPSS 7%
- pre-auth RCE
servicenow · servicenow ai platformAug 27, 2026
CVE-2026-18886
42Plan
Unauthenticated Privilege Escalation via System Configuration Image Upload Processor
CriticalCVSS 10.0No exploitEPSS 5%
- Pre-auth
- Broken access control (IDOR)
servicenow · servicenow ai platformAug 27, 2026
CVE-2026-19092
40Plan
Tutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing
CriticalCVSS 9.8Proof of conceptEPSS 2%
- Pre-auth
unknown · tutor lmsAug 27, 2026
CVE-2026-25250
24Monitor
EAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step" associated with "Secure Boot disable."
MediumCVSS 6.0Proof of conceptEPSS 0%
eazsolution · eazyfixAug 27, 2026
CVE-2026-30612
39Monitor
An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Aug 27, 2026
CVE-2026-35868
40Plan
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC2100_AZ3 V1.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
Aug 27, 2026
CVE-2026-35869
40Plan
A Command Injection vulnerability exists in the bs_SetLimitCli_info function within the libshare.so library of LB-link Router AC450M V4.0.0.
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Command injection
Aug 27, 2026
CVE-2026-36102
28Monitor
An issue in the inviteController.js component in Bluewave Labs Checkmate <=3.3.0 allows remote authenticated administrators to escalate priv
HighCVSS 7.2No exploitEPSS 0%
Aug 27, 2026
CVE-2026-37003
39Monitor
Agno up to and including 2.5.8 is vulnerable to Remote Code Execution (RCE) via prompt injection.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
Aug 27, 2026
CVE-2026-37004
39Monitor
BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute ar
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SSTI
Aug 27, 2026
CVE-2026-37006
39Monitor
A vulnerability in the WebSocket endpoint of gpt-researcher v0.14.7 and before allows an unauthenticated remote attacker to achieve code exe
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
Aug 27, 2026
CVE-2026-37007
39Monitor
A vulnerability in FileWriterTool in crewai-tools <= 1.10.2rc1 allows a remote attacker to achieve code execution via malicious path travers
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
Aug 27, 2026
CVE-2026-37012
30Monitor
A vulnerability in pentestgpt/core/langfuse.py in PentestGPT 1.0.0 allows remote attackers to disclose sensitive user telemetry data via har
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
Aug 27, 2026
CVE-2026-37064
21Monitor
User enumeration in /vfm-admin/ajax/usr-check.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to enumerate the app
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
Aug 27, 2026
CVE-2026-37065
36Monitor
Veno File Manager Project 4.4.9 is vulnerable to Arbitrary File Deletion in /vfm-admin/index.php?section=translations&action=update&remove=.
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
Aug 27, 2026
CVE-2026-37066
26Monitor
Path traversal leading to Arbitrary File Read in /vfm-admin/index.php and /vfm-admin/ajax/streamvid.php in Veno File Manager Project 4.4.9 a
MediumCVSS 6.5Proof of conceptEPSS 0%
- Path traversal
Aug 27, 2026
CVE-2026-37067
21Monitor
Incorrect access control in /vfm-admin/admin-panel/view/save-cvs.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker t
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Aug 27, 2026
CVE-2026-37068
32Monitor
Arbitrary file write in /vfm-admin/index.php?section=translations&action=update in Veno File Manager Project 4.4.9 allows an authenticated u
HighCVSS 8.1Proof of conceptEPSS 0%
- Path traversal
Aug 27, 2026
CVE-2026-37069
21Monitor
Absolute Path Disclosure in /vfm-admin/assets/zipstream/grandt/relativepath/RelativePath.Example1.php in Veno File Manager Project 4.4.9 all
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Info leak
Aug 27, 2026
CVE-2026-37070
26Monitor
Incorrect access control in /vfm-admin/ajax/streamvid.php in Veno File Manager Project in 4.4.9 allows an authenticated attacker to read any
MediumCVSS 6.5Proof of conceptEPSS 0%
- Broken access control (IDOR)
Aug 27, 2026
CVE-2026-37071
39Monitor
Arbitrary File Rename Leading to Privilege Escalation in Actions::renameFile() function in Veno File Manager Project 4.4.9 allows an authent
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
Aug 27, 2026
CVE-2026-37072
39Monitor
Veno File Manager Project Veno File Manager Project 4.4.9 is vulnerable to Incorrect Access Control in admin-head-updates.php.
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Aug 27, 2026
CVE-2026-37073
21Monitor
Incorrect access control in /vfm-admin/ajax/sendfiles.php in Veno File Manager Project 4.4.9 allows an unauthenticated attacker to send emai
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Aug 27, 2026
CVE-2026-37198
30Monitor
An integer overflow in the SMF component of Open5GS v2.7.6 allows attackers to cause a Denial of Service (DoS) via supplying a crafted GTP p
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-54718
28Monitor
Silverstripe Advanced Workflow: Remote code execution via advanced workflow email template
HighCVSS 7.2No exploitEPSS 1%
- RCE
- SSTI
silverstripe · silverstripe-advancedworkflowAug 27, 2026
CVE-2026-54721
35Monitor
Silverstripe UserForms: Remote code execution via userforms email subject
HighCVSS 8.8No exploitEPSS 0%
- RCE
silverstripe · silverstripe-userformsAug 27, 2026
CVE-2026-59282
30Monitor
Spring Framework Denial of Service via Unbounded List Growth in Data Binding
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
vmware · spring frameworkAug 27, 2026
CVE-2026-59283
36Monitor
Spring Framework Safety Guard Bypass via SpEL Expression Compilation
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
vmware · spring frameworkAug 27, 2026
CVE-2026-59284
30Monitor
Spring Cloud Commons no allow list for writable env actuator endpoint
HighCVSS 7.6No exploitEPSS 0%
broadcom · spring cloud commonsAug 27, 2026
CVE-2026-59285
32Monitor
Spring for GraphQL Unsafe Deserialization in pagination support
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Deserialization
vmware · spring for graphqlAug 27, 2026
CVE-2026-59286
32Monitor
Spring for GraphQL loads Untrusted Resources in GraphiQL support
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
vmware · spring for graphqlAug 27, 2026
CVE-2026-59288
29Monitor
Spring for GraphQL Information Exposure in GraphiQL support
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Info leak
vmware · spring for graphqlAug 27, 2026
CVE-2026-59289
30Monitor
Spring for GraphQL Denial of Service via pagination support
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
vmware · spring for graphqlAug 27, 2026
CVE-2026-59307
32Monitor
Deserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference
HighCVSS 8.0No exploitEPSS 0%
- Deserialization
vmware · spring integrationAug 27, 2026
CVE-2026-59313
39Monitor
Server Sent Event stream corruption in Spring MVC functional web framework
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
vmware · spring frameworkAug 27, 2026
CVE-2026-59316
32Monitor
Spring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- XSS
broadcom · spring authorization serverAug 27, 2026
CVE-2026-59324
32Monitor
fluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Race condition
vmware · spring integrationAug 27, 2026
CVE-2026-6876
40Plan
Sandbox Escape in ServiceNow AI Platform
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
servicenow · servicenow ai platformAug 27, 2026
CVE-2026-74820
42Plan
Unauthenticated SQL Injection via Dynamic Schema ORDER BY Clause
CriticalCVSS 10.0No exploitEPSS 5%
- pre-auth RCE
- SQL injection
servicenow · servicenow ai platformAug 27, 2026
CVE-2026-75889
30Monitor
CVE-2026-75889 CVE Record
HighCVSS 7.7No exploitEPSS 0%
grafana · alloyAug 27, 2026
CVE-2026-76639
34Monitor
Unitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal
HighCVSS 8.7Proof of conceptEPSS 0%
- pre-auth RCE
- Path traversal
unitree robotics · g1 eduAug 27, 2026
CVE-2026-76640
30Monitor
Unitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
unitree robotics · g1 eduAug 27, 2026
CVE-2026-81728
34Monitor
Dolibarr before 24.0.0 SQL Injection via the CSV and XLSX Import Update Keys
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
dolibarr · dolibarr erp\/crmAug 27, 2026
CVE-2026-81729
28Monitor
Dolibarr before 23.0.4 Incorrect Authorization on REST API Document Deletion
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
dolibarr · dolibarr erp\/crmAug 27, 2026
CVE-2026-81730
35Monitor
Dolibarr 9.0.0 through 23.0.4 Path Traversal via EmailCollector Attachment Filename
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
dolibarr · dolibarr erp\/crmAug 27, 2026
CVE-2026-81934
30Monitor
Redis TLS pending-data list use-after-free
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Memory safety
redis · redisAug 27, 2026
CVE-2026-5680
30Monitor
Undertow-core: undertow: denial of service via websocket permessage-deflate processing
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat jboss enterprise application platform 8.1 for rhel 10Aug 27, 2026
CVE-2026-78002
30Monitor
Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 10Aug 27, 2026
CVE-2026-81679
33Monitor
OpenRemote before 1.28.0 Cross-Realm Information Disclosure via Notification API
HighCVSS 8.3No exploitEPSS 0%
- Info leak
openremote · openremoteAug 27, 2026
CVE-2026-81726
33Monitor
NLTK through 3.10.3 Path Traversal via Model-Artifact APIs
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 27, 2026
CVE-2026-18717
36Monitor
Improper Certificate Validation in ASE 2000
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
applied systems engineering · ase2000 v2Aug 27, 2026
CVE-2026-18965
34Monitor
Missing Authorization in PayRange API
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
payrange · payrange apiAug 27, 2026
CVE-2026-38344
30Monitor
A NULL pointer dereference in the get_min_buffer_size function (/libswscale/slice.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to caus
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-38346
30Monitor
An integer overflow in the yuv2planeX_8_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-38347
30Monitor
A heap overflow in the ff_sws_alphablendaway function (libswscale/alphablend.c) of FFmpeg git-master commit 722a217 allows attackers to caus
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-38348
30Monitor
An integer overflow in the libswscale/utils.c component of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial of Service (DoS) v
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-38349
30Monitor
An integer overflow in the hScale16To19_c() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Denial
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-38350
30Monitor
An integer overflow in the target_sws_fuzzer() function (libswscale/output.c) of FFmpeg N-122528-gdd2976b9e1 allows attackers to cause a Den
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Aug 27, 2026
CVE-2026-39944
35Monitor
Ceph: CephX AES Authentication error
HighCVSS 8.8No exploitEPSS 0%
- Weak crypto
ceph · cephAug 27, 2026
CVE-2026-44629
31Monitor
Improper access control to the Synergis Softwire installation folder.
HighCVSS 7.9No exploitEPSS 0%
genetec inc. · synergis softwireAug 27, 2026
CVE-2026-47727
34Monitor
Trilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- SSTI
triliumnotes · triliumAug 27, 2026
CVE-2026-48996
37Monitor
Trilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client
CriticalCVSS 9.3No exploitEPSS 0%
- RCE
- Local privilege escalation
- XSS
triliumnotes · triliumAug 27, 2026
CVE-2026-53578
37Monitor
Trilium: Note Import to RCE via Mind Elixir dangerouslySetInnerHtml
CriticalCVSS 9.3No exploitEPSS 0%
- RCE
- Local privilege escalation
- XSS
triliumnotes · triliumAug 27, 2026
CVE-2026-53579
37Monitor
Trilium: Note Import to RCE via Book Note
CriticalCVSS 9.3No exploitEPSS 0%
- RCE
- Local privilege escalation
- XSS
triliumnotes · triliumAug 27, 2026
CVE-2026-53580
32Monitor
Trilium arbitrary file read and denial of service via file:// URLs in the automatic image-download feature
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
triliumnotes · triliumAug 27, 2026
CVE-2026-50152
36Monitor
Ceph Monitor subscription handler improperly authorizes config-key store reads, exposing cluster secrets to read-only users
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
ceph · cephAug 27, 2026
CVE-2026-54083
32Monitor
Wazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
wazuh · wazuhAug 27, 2026
CVE-2026-54085
28Monitor
Wazuh: Missing input validation in multiple active response scripts allows argument injection
HighCVSS 7.1No exploitEPSS 0%
wazuh · wazuhAug 27, 2026
CVE-2026-54330
32Monitor
Ceph RGW SigV4 handler accepts unsigned x-amz-* headers on presigned requests, allowing privilege escalation
HighCVSS 8.1No exploitEPSS 0%
- Weak crypto
ceph · cephAug 27, 2026
CVE-2026-5706
35Monitor
Buffer overflow in Bluetooth Mesh SDK when handling extended advertisements
HighCVSS 8.9No exploitEPSS 0%
- pre-auth RCE
silicon labs · bt mesh sdkAug 27, 2026
CVE-2026-61783
28Monitor
Wazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key
HighCVSS 7.0No exploitEPSS 0%
- Info leak
wazuh · wazuhAug 27, 2026
CVE-2026-67560
30Monitor
Stack-based Buffer Overflow in Bendix EC80 Brake ECU
HighCVSS 7.7No exploitEPSS 0%
- pre-auth RCE
- Memory safety
bendix · ec80esp+ j1708Aug 27, 2026
CVE-2026-68929
37Monitor
FastGPT: Unauthenticated WeChat channel hijack and denial of service via shareId-only authorization
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
labring · fastgptAug 27, 2026