By publication date

Exploited and new serious CVEs: August 2026

6,199 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 49 of 62

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-77144No exploit	Broken Access Control in extension "Events 2" (events2)typo3 · extension "events 2" · CWE-915 Broken access control (IDOR)	High7.1	—	0.4%	Aug 25, 2026
28Monitor	CVE-2026-77145No exploit	Broken Access Control in extension "Events 2" (events2)typo3 · extension "events 2" · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Aug 25, 2026
33Monitor	CVE-2026-77146No exploit	Broken Access Control in extension "femanager" (femanager)typo3 · extension "femanager" · CWE-862 Pre-auth Broken access control (IDOR)	High8.3	—	0.4%	Aug 25, 2026
30Monitor	CVE-2026-14457No exploit	RPK Server Signature Algorithm Selection Can Dereference a Missing Certificateopenssl · openssl · CWE-476 pre-auth RCE Memory safety Denial of service	High7.5	—	1.1%	Aug 25, 2026
31Monitor	CVE-2026-18798No exploit	QUIC Server May Trigger Double Free When Processing INITIAL Packetopenssl · openssl · CWE-415 pre-auth RCE Memory safety Denial of service	High7.5	—	1.6%	Aug 25, 2026
30Monitor	CVE-2026-54874No exploit	Excessive Memory Use Buffering DTLS Records for a Future Epochopenssl · openssl · CWE-405 Pre-auth Denial of service	High7.5	—	0.6%	Aug 25, 2026
34Monitor	CVE-2026-57863No exploit	Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpointcrater-invoice-inc · crater · CWE-22 RCE Path traversal	High8.7	—	0.8%	Aug 25, 2026
30Monitor	CVE-2026-63072Proof of concept	Heap Buffer Overflow in CMS Key Unwrappingopenssl · openssl · CWE-787 Pre-auth Memory safety Denial of service	High7.5	—	0.9%	Aug 25, 2026
39Monitor	CVE-2026-63073No exploit	Untrusted Sender DN Used as Format String in CMP Response Validationopenssl · openssl · CWE-134 Pre-auth	Critical9.8	—	1.1%	Aug 25, 2026
30Monitor	CVE-2026-63075No exploit	QUIC ACK-only Packet Retention Can Cause Memory Exhaustionopenssl · openssl · CWE-770 Pre-auth Denial of service	High7.5	—	0.5%	Aug 25, 2026
30Monitor	CVE-2026-63076No exploit	Invalid Pointer Dereference in CMP Server via Crafted protectionAlgopenssl · openssl · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	1.6%	Aug 25, 2026
36Monitor	CVE-2026-75803No exploit	AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()openssl · openssl · CWE-354 Pre-auth	Critical9.1	—	0.2%	Aug 25, 2026
40Plan	CVE-2026-77998No exploit	Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – Lminiorange.com · saml sso free for joomla extension for joomla · CWE-639 Pre-auth Auth bypass Broken access control (IDOR)	Critical10.0	—	0.5%	Aug 25, 2026
30Monitor	CVE-2026-55525No exploit	PraisonAI: SSRF via redirect-following in praisonaiagents web_crawlmervinpraison · praisonai · CWE-918 Pre-auth SSRF	High7.5	—	0.5%	Aug 25, 2026
34Monitor	CVE-2026-12878No exploit	In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.octopus · codefresh · CWE-269	High8.6	—	0.4%	Aug 25, 2026
32Monitor	CVE-2026-16231No exploit	hbs vulnerable to XSS via registerAsyncHelper output-escaping bypasshbs project · hbs · CWE-79 Pre-auth XSS	High8.1	—	0.4%	Aug 25, 2026
35Monitor	CVE-2026-49050No exploit	Apache DolphinScheduler: General user can mint admin access tokens via /access-tokensapache · dolphinscheduler · CWE-863 Broken access control (IDOR)	High8.8	—	0.5%	Aug 25, 2026
29Monitor	CVE-2026-75037No exploit	Polkit authentication bypass in LACTilya-zlobintsev · lact · CWE-290 Auth bypass	High7.3	—	0.1%	Aug 25, 2026
39Monitor	CVE-2026-16286No exploit	File Upload in TRTEK Software's Software Repository Managementtrtek technological products computer software hardware industry and trade limited company · software repository management · CWE-434 Pre-auth File upload	Critical9.8	—	0.5%	Aug 25, 2026
34Monitor	CVE-2026-55526No exploit	PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)mervinpraison · praisonai · CWE-350 SSRF	High8.5	—	0.3%	Aug 25, 2026
28Monitor	CVE-2026-55527No exploit	PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable locationmervinpraison · praisonai · CWE-22 Path traversal	High7.1	—	0.4%	Aug 25, 2026
32Monitor	CVE-2026-55528No exploit	praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)mervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	High8.2	—	0.4%	Aug 25, 2026
34Monitor	CVE-2026-55534No exploit	PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent executionmervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	High8.6	—	0.4%	Aug 25, 2026
28Monitor	CVE-2026-55537No exploit	PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114mervinpraison · praisonai · CWE-367 SSRF Race condition	High7.1	—	0.2%	Aug 25, 2026
29Monitor	CVE-2026-55538No exploit	PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unaumervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	High7.3	—	0.4%	Aug 25, 2026
28Monitor	CVE-2026-55540No exploit	PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinksmervinpraison · praisonai · CWE-22 Pre-auth Path traversal	High7.1	—	0.3%	Aug 25, 2026
35Monitor	CVE-2026-55541No exploit	PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforcedmervinpraison · praisonai · CWE-862 Pre-auth Broken access control (IDOR)	High8.8	—	0.4%	Aug 25, 2026
30Monitor	CVE-2026-69104No exploit	Potential unauthorized repository migration in JFrog Artifactoryjfrog · artifactory · CWE-862 Broken access control (IDOR)	High7.6	—	0.3%	Aug 25, 2026
34Monitor	CVE-2026-70551No exploit	Server-Side Request Forgery Via VCS remote download in JFrog Artifactoryjfrog · artifactory · CWE-918 SSRF	High8.5	—	0.3%	Aug 25, 2026
34Monitor	CVE-2026-12600No exploit	Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoderpoppler · innodata labs · CWE-400 Pre-auth Denial of service	High8.7	—	0.5%	Aug 25, 2026
39Monitor	CVE-2026-49845No exploit	Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL pathsapache · hive · CWE-94 pre-auth RCE SQL injection	Critical9.8	—	0.8%	Aug 25, 2026
29Monitor	CVE-2026-53561No exploit	Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive userapache · hive · CWE-287 Pre-auth Auth bypass	High7.4	—	0.3%	Aug 25, 2026
36Monitor	CVE-2026-55976No exploit	Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.urlapache · hive · CWE-918 Pre-auth SSRF	Critical9.1	—	1.0%	Aug 25, 2026
34Monitor	CVE-2026-59335No exploit	Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromisecloud foundry · uaa · CWE-178	High8.7	—	0.5%	Aug 25, 2026
35Monitor	CVE-2026-19949Proof of concept	All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Executionservmask · all-in-one wp migration and backup · CWE-89 RCE SQL injection	High8.8	—	0.9%	Aug 25, 2026
37Monitor	CVE-2026-57909No exploit	WatchGuard Agent path traversal allows unauthenticated remote code executionwatchguard · watchguard agent · CWE-94 pre-auth RCE Path traversal	Critical9.4	—	0.4%	Aug 25, 2026
37Monitor	CVE-2026-57910No exploit	WatchGuard Agent improper authentication allows unauthenticated remote code executionwatchguard · watchguard agent · CWE-306 pre-auth RCE Auth bypass	Critical9.3	—	0.2%	Aug 25, 2026
28Monitor	CVE-2026-75971No exploit	ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodesroxnor · shopengine elementor woocommerce builder addon – all in one woocommerce solution with ecommerce templates & woo widgets · CWE-269	High7.2	—	0.5%	Aug 25, 2026
37Monitor	CVE-2026-79657No exploit	NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserializationnltk · nltk · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	1.2%	Aug 25, 2026
33Monitor	CVE-2026-79659No exploit	Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfolin-snow · ech0 · CWE-918 SSRF	High8.3	—	0.3%	Aug 25, 2026
30Monitor	CVE-2026-55532No exploit	PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP servermervinpraison · praisonai · CWE-346 Pre-auth CSRF	High7.6	—	0.1%	Aug 25, 2026
32Monitor	CVE-2026-55533No exploit	PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secretmervinpraison · praisonai · CWE-287 Pre-auth Auth bypass	High8.2	—	0.4%	Aug 25, 2026
36Monitor	CVE-2026-55536No exploit	Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)mervinpraison · praisonai · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.5%	Aug 25, 2026
34Monitor	CVE-2026-55539No exploit	PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and deletemervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	High8.6	—	0.5%	Aug 25, 2026
39Monitor	CVE-2026-55546No exploit	QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Inputqwed-ai · qwed-mcp · CWE-94 pre-auth RCE	Critical9.8	—	0.7%	Aug 25, 2026
34Monitor	CVE-2026-55580No exploit	mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlistsonirico · mcp-shell · CWE-78 RCE Command injection	High8.6	—	0.1%	Aug 25, 2026
33Monitor	CVE-2026-55581No exploit	mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executablesonirico · mcp-shell · CWE-78 RCE Command injection	High8.4	—	0.4%	Aug 25, 2026
33Monitor	CVE-2026-55582No exploit	mcp-shell: Secure Mode Allowlist Bypass via Git Shell Aliassonirico · mcp-shell · CWE-78 RCE Command injection	High8.4	—	0.2%	Aug 25, 2026
36Monitor	CVE-2026-55640No exploit	Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )cbcoutinho · nextcloud-mcp-server · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.7%	Aug 25, 2026
35Monitor	CVE-2026-79674No exploit	NLTK 3.10.2 Path Traversal via corpus-reader constructorsnltk · nltk · CWE-73 Pre-auth Path traversal	High8.8	—	0.3%	Aug 25, 2026
37Monitor	CVE-2026-79675No exploit	NLTK before 3.10.3 JVM Argument Injection via Per-Call Optionsnltk · nltk · CWE-88 pre-auth RCE	Critical9.3	—	0.7%	Aug 25, 2026
32Monitor	CVE-2026-79676No exploit	NLTK before 3.10.3 Path Traversal via Symlink Bypassnltk · nltk · CWE-22 Pre-auth Path traversal	High8.2	—	0.4%	Aug 25, 2026
34Monitor	CVE-2026-79769No exploit	Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_argssparklemotion · nokogiri · CWE-843 Pre-auth	High8.7	—	0.3%	Aug 25, 2026
34Monitor	CVE-2026-79770No exploit	Nokogiri before 1.19.3 ReDoS via CSS selector tokenizernokogiri · nokogiri · CWE-1333 Pre-auth Denial of service	High8.7	—	0.4%	Aug 25, 2026
28Monitor	CVE-2026-79775No exploit	rclone Archive Backend SquashFS Parser Denial of Servicerclone · rclone · CWE-129	High7.1	—	0.3%	Aug 25, 2026
37Monitor	CVE-2026-79782No exploit	rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirectrclone · rclone · CWE-319 Pre-auth Weak crypto	Critical9.3	—	0.1%	Aug 25, 2026
34Monitor	CVE-2026-79784No exploit	Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configurationgemelo-ai · vocos · CWE-470 pre-auth RCE	High8.6	—	0.5%	Aug 25, 2026
32Monitor	CVE-2026-79785No exploit	X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloadscvhub520 · x-anylabeling · CWE-295 Pre-auth Weak crypto	High8.2	—	0.2%	Aug 25, 2026
34Monitor	CVE-2026-16233No exploit	Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VIni · labview · CWE-787 Memory safety	High8.5	—	0.1%	Aug 25, 2026
34Monitor	CVE-2026-16234No exploit	Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VIni · labview · CWE-125 Memory safety	High8.5	—	0.1%	Aug 25, 2026
39Monitor	CVE-2026-19912Proof of concept	The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserialkaltura · kaltura html5 video player, html5 library · CWE-20 pre-auth RCE Deserialization	Critical9.8	—	1.0%	Aug 25, 2026
30Monitor	CVE-2026-19913No exploit	The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl pakaltura · kaltura html5 video player, html5lib library · CWE-20 Pre-auth Deserialization	High7.5	—	0.5%	Aug 25, 2026
32Monitor	CVE-2026-24169No exploit	NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject convidia · unified fabric manager enterprise - ga · CWE-77 RCE Command injection	High8.0	—	0.5%	Aug 25, 2026
35Monitor	CVE-2026-24170No exploit	NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause impropenvidia · unified fabric manager enterprise - ga · CWE-287 Pre-auth Auth bypass	High8.8	—	0.5%	Aug 25, 2026
32Monitor	CVE-2026-24262No exploit	NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.nvidia · dgx spark uefi · CWE-787 Local privilege escalation Memory safety	High8.2	—	0.1%	Aug 25, 2026
32Monitor	CVE-2026-24263No exploit	NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer dereferenvidia · dgx spark uefi · CWE-476 Local privilege escalation Memory safety	High8.2	—	0.1%	Aug 25, 2026
32Monitor	CVE-2026-47626No exploit	NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.nvidia · dgx spark uefi · CWE-787 Local privilege escalation Memory safety	High8.2	—	0.1%	Aug 25, 2026
30Monitor	CVE-2026-55553No exploit	urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakagenode-modules · urllib · CWE-200 Pre-auth Info leak	High7.5	—	0.6%	Aug 25, 2026
34Monitor	CVE-2026-55557No exploit	browse-mcp: Arbitrary file write via unconfined download and state pathsthat1drifter · browse-mcp · CWE-22 Path traversal	High8.6	—	0.2%	Aug 25, 2026
32Monitor	CVE-2026-55571No exploit	djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch evdjust-org · djust · CWE-285 Pre-auth Auth bypass Broken access control (IDOR)	High8.2	—	0.5%	Aug 25, 2026
35Monitor	CVE-2026-55585No exploit	QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`qwed-ai · qwed-verification · CWE-94 RCE	High8.8	—	0.7%	Aug 25, 2026
28Monitor	CVE-2026-59184No exploit	OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB writeacademysoftwarefoundation · openexr · CWE-416 Pre-auth Memory safety	High7.1	—	0.2%	Aug 25, 2026
28Monitor	CVE-2026-59186No exploit	OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) buildsacademysoftwarefoundation · openexr · CWE-122 Pre-auth Memory safety	High7.1	—	0.2%	Aug 25, 2026
28Monitor	CVE-2026-59187No exploit	OpenEXR: exrmetrics deep pixelmode heap buffer overflowacademysoftwarefoundation · openexr · CWE-122 Pre-auth Memory safety	High7.1	—	0.4%	Aug 25, 2026
28Monitor	CVE-2026-59189No exploit	OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow originacademysoftwarefoundation · openexr · CWE-125 Pre-auth Memory safety	High7.1	—	0.3%	Aug 25, 2026
34Monitor	CVE-2026-64201No exploit	Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VIni · labview · CWE-125 Memory safety	High8.5	—	0.1%	Aug 25, 2026
34Monitor	CVE-2026-64202No exploit	Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VIni · labview · CWE-125 Memory safety	High8.5	—	0.1%	Aug 25, 2026
34Monitor	CVE-2026-64203No exploit	Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VIni · labview · CWE-125 Memory safety	High8.5	—	0.1%	Aug 25, 2026
34Monitor	CVE-2026-64204No exploit	Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VIni · labview · CWE-787 Memory safety	High8.5	—	0.1%	Aug 25, 2026
34Monitor	CVE-2026-75496No exploit	Webkul QloApps improper file upload validationwebkul · qloapps · CWE-434 RCE File upload	High8.6	—	0.9%	Aug 25, 2026
34Monitor	CVE-2026-75497No exploit	Webkul QloApps SQL injectionwebkul · qloapps · CWE-89 SQL injection	High8.6	—	0.8%	Aug 25, 2026
34Monitor	CVE-2026-75498No exploit	Webkul QloApps SQL injectionwebkul · qloapps · CWE-89 SQL injection	High8.6	—	0.8%	Aug 25, 2026
31Monitor	CVE-2026-79655No exploit	Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file writered hat · red hat enterprise linux 10 · CWE-59 Path traversal Local privilege escalation	High7.8	—	0.2%	Aug 25, 2026
19Monitor	CVE-2026-26211Proof of concept	Ekushey Project Manager CRM 5.0 Stored XSS via System Name Fieldcreativeitem · ekushey project manager crm · CWE-79 Auth bypass XSS	Medium4.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48417No exploit	Substance3D - Sampler \| Stack-based Buffer Overflow (CWE-121)adobe · substance 3d sampler · CWE-121 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48418No exploit	Substance3D - Sampler \| Out-of-bounds Write (CWE-787)adobe · substance 3d sampler · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 25, 2026
31Monitor	CVE-2026-48419No exploit	Substance3D - Sampler \| Out-of-bounds Write (CWE-787)adobe · substance 3d sampler · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 25, 2026
31Monitor	CVE-2026-48420No exploit	Substance3D - Sampler \| Out-of-bounds Write (CWE-787)adobe · substance 3d sampler · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 25, 2026
31Monitor	CVE-2026-48421No exploit	Substance3D - Sampler \| Out-of-bounds Write (CWE-787)adobe · substance 3d sampler · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 25, 2026
31Monitor	CVE-2026-48422No exploit	Substance3D - Sampler \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d sampler · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48423No exploit	Substance3D - Sampler \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d sampler · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48424No exploit	Substance3D - Sampler \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d sampler · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48425No exploit	Substance3D - Sampler \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d sampler · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48426No exploit	Substance3D - Designer \| Out-of-bounds Write (CWE-787)adobe · substance 3d designer · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 25, 2026
31Monitor	CVE-2026-48427No exploit	Substance3D - Designer \| Out-of-bounds Write (CWE-787)adobe · substance 3d designer · CWE-787 RCE Memory safety	High7.8	—	0.2%	Aug 25, 2026
31Monitor	CVE-2026-48428No exploit	Substance3D - Designer \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d designer · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48430No exploit	Substance3D - Designer \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d designer · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48431No exploit	Substance3D - Designer \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d designer · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48432No exploit	Substance3D - Designer \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d designer · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026
31Monitor	CVE-2026-48433No exploit	Substance3D - Designer \| Heap-based Buffer Overflow (CWE-122)adobe · substance 3d designer · CWE-122 RCE Memory safety	High7.8	—	0.3%	Aug 25, 2026

CVE-2026-77144
28Monitor
Broken Access Control in extension "Events 2" (events2)
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
typo3 · extension "events 2"Aug 25, 2026
CVE-2026-77145
28Monitor
Broken Access Control in extension "Events 2" (events2)
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
typo3 · extension "events 2"Aug 25, 2026
CVE-2026-77146
33Monitor
Broken Access Control in extension "femanager" (femanager)
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
typo3 · extension "femanager"Aug 25, 2026
CVE-2026-14457
30Monitor
RPK Server Signature Algorithm Selection Can Dereference a Missing Certificate
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- Memory safety
- Denial of service
openssl · opensslAug 25, 2026
CVE-2026-18798
31Monitor
QUIC Server May Trigger Double Free When Processing INITIAL Packet
HighCVSS 7.5No exploitEPSS 1%
- pre-auth RCE
- Memory safety
- Denial of service
openssl · opensslAug 25, 2026
CVE-2026-54874
30Monitor
Excessive Memory Use Buffering DTLS Records for a Future Epoch
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
openssl · opensslAug 25, 2026
CVE-2026-57863
34Monitor
Crater Invoice 6.0.6 Path Traversal RCE via update/unzip endpoint
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Path traversal
crater-invoice-inc · craterAug 25, 2026
CVE-2026-63072
30Monitor
Heap Buffer Overflow in CMS Key Unwrapping
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslAug 25, 2026
CVE-2026-63073
39Monitor
Untrusted Sender DN Used as Format String in CMP Response Validation
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
openssl · opensslAug 25, 2026
CVE-2026-63075
30Monitor
QUIC ACK-only Packet Retention Can Cause Memory Exhaustion
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
openssl · opensslAug 25, 2026
CVE-2026-63076
30Monitor
Invalid Pointer Dereference in CMP Server via Crafted protectionAlg
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
openssl · opensslAug 25, 2026
CVE-2026-75803
36Monitor
AEAD Forgeries with Empty Ciphertext When Using EVP_Cipher()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
openssl · opensslAug 25, 2026
CVE-2026-77998
40Plan
Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML SSO < 11.0.2, SAML SP Single Sign On – L
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
miniorange.com · saml sso free for joomla extension for joomlaAug 25, 2026
CVE-2026-55525
30Monitor
PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
mervinpraison · praisonaiAug 25, 2026
CVE-2026-12878
34Monitor
In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.
HighCVSS 8.6No exploitEPSS 0%
octopus · codefreshAug 25, 2026
CVE-2026-16231
32Monitor
hbs vulnerable to XSS via registerAsyncHelper output-escaping bypass
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- XSS
hbs project · hbsAug 25, 2026
CVE-2026-49050
35Monitor
Apache DolphinScheduler: General user can mint admin access tokens via /access-tokens
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
apache · dolphinschedulerAug 25, 2026
CVE-2026-75037
29Monitor
Polkit authentication bypass in LACT
HighCVSS 7.3No exploitEPSS 0%
- Auth bypass
ilya-zlobintsev · lactAug 25, 2026
CVE-2026-16286
39Monitor
File Upload in TRTEK Software's Software Repository Management
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
trtek technological products computer software hardware industry and trade limited company · software repository managementAug 25, 2026
CVE-2026-55526
34Monitor
PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)
HighCVSS 8.5No exploitEPSS 0%
- SSRF
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55527
28Monitor
PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55528
32Monitor
praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55534
34Monitor
PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55537
28Monitor
PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
HighCVSS 7.1No exploitEPSS 0%
- SSRF
- Race condition
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55538
29Monitor
PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unau
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55540
28Monitor
PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Path traversal
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55541
35Monitor
PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
mervinpraison · praisonaiAug 25, 2026
CVE-2026-69104
30Monitor
Potential unauthorized repository migration in JFrog Artifactory
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
jfrog · artifactoryAug 25, 2026
CVE-2026-70551
34Monitor
Server-Side Request Forgery Via VCS remote download in JFrog Artifactory
HighCVSS 8.5No exploitEPSS 0%
- SSRF
jfrog · artifactoryAug 25, 2026
CVE-2026-12600
34Monitor
Uncontrolled memory usage in Innodata Labs’ Poppler JPX decoder
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
poppler · innodata labsAug 25, 2026
CVE-2026-49845
39Monitor
Apache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
apache · hiveAug 25, 2026
CVE-2026-53561
29Monitor
Apache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache · hiveAug 25, 2026
CVE-2026-55976
36Monitor
Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- SSRF
apache · hiveAug 25, 2026
CVE-2026-59335
34Monitor
Case-Sensitive Authorization Check Bypass via Identity Zone ID Case Manipulation Leads to Full UAA Compromise
HighCVSS 8.7No exploitEPSS 0%
cloud foundry · uaaAug 25, 2026
CVE-2026-19949
35Monitor
All-in-One WP Migration and Backup <= 7.109 - Unauthenticated Second-Order SQL Injection via Archive Restore to Remote Code Execution
HighCVSS 8.8Proof of conceptEPSS 0%
- RCE
- SQL injection
servmask · all-in-one wp migration and backupAug 25, 2026
CVE-2026-57909
37Monitor
WatchGuard Agent path traversal allows unauthenticated remote code execution
CriticalCVSS 9.4No exploitEPSS 0%
- pre-auth RCE
- Path traversal
watchguard · watchguard agentAug 25, 2026
CVE-2026-57910
37Monitor
WatchGuard Agent improper authentication allows unauthenticated remote code execution
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
watchguard · watchguard agentAug 25, 2026
CVE-2026-75971
28Monitor
ShopEngine Elementor WooCommerce Builder Addon <= 4.9.4 - Authenticated (Shop Manager+) Privilege Escalation to WXR Import '<wp_option>' Nodes
HighCVSS 7.2No exploitEPSS 0%
roxnor · shopengine elementor woocommerce builder addon – all in one woocommerce solution with ecommerce templates & woo widgetsAug 25, 2026
CVE-2026-79657
37Monitor
NLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Deserialization
nltk · nltkAug 25, 2026
CVE-2026-79659
33Monitor
Ech0 before 4.7.3 Server-Side Request Forgery via fetchPeerConnectInfo
HighCVSS 8.3No exploitEPSS 0%
- SSRF
lin-snow · ech0Aug 25, 2026
CVE-2026-55532
30Monitor
PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- CSRF
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55533
32Monitor
PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55536
36Monitor
Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55539
34Monitor
PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiAug 25, 2026
CVE-2026-55546
39Monitor
QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
qwed-ai · qwed-mcpAug 25, 2026
CVE-2026-55580
34Monitor
mcp-shell — Security Disabled by Default in Bare-Binary Deploy Path + Shell Interpreter in Secure-Mode Allowlist
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
sonirico · mcp-shellAug 25, 2026
CVE-2026-55581
33Monitor
mcp-shell: Secure Mode Allowlist Bypass via Default `/bin/bash` Executable
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Command injection
sonirico · mcp-shellAug 25, 2026
CVE-2026-55582
33Monitor
mcp-shell: Secure Mode Allowlist Bypass via Git Shell Alias
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Command injection
sonirico · mcp-shellAug 25, 2026
CVE-2026-55640
36Monitor
Nextcloud MCP Server: Unauthenticated `POST /webhooks/nextcloud` allows arbitrary vector data deletion when `WEBHOOK_SECRET` is unset ( default )
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
cbcoutinho · nextcloud-mcp-serverAug 25, 2026
CVE-2026-79674
35Monitor
NLTK 3.10.2 Path Traversal via corpus-reader constructors
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 25, 2026
CVE-2026-79675
37Monitor
NLTK before 3.10.3 JVM Argument Injection via Per-Call Options
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
nltk · nltkAug 25, 2026
CVE-2026-79676
32Monitor
NLTK before 3.10.3 Path Traversal via Symlink Bypass
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Path traversal
nltk · nltkAug 25, 2026
CVE-2026-79769
34Monitor
Nokogiri before 1.19.4 Invalid Memory Read via initialize_copy_with_args
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
sparklemotion · nokogiriAug 25, 2026
CVE-2026-79770
34Monitor
Nokogiri before 1.19.3 ReDoS via CSS selector tokenizer
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
nokogiri · nokogiriAug 25, 2026
CVE-2026-79775
28Monitor
rclone Archive Backend SquashFS Parser Denial of Service
HighCVSS 7.1No exploitEPSS 0%
rclone · rcloneAug 25, 2026
CVE-2026-79782
37Monitor
rclone before 1.74.4 Security Token Disclosure via HTTPS to HTTP Redirect
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
rclone · rcloneAug 25, 2026
CVE-2026-79784
34Monitor
Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
gemelo-ai · vocosAug 25, 2026
CVE-2026-79785
32Monitor
X-AnyLabeling before 4.0.0-beta.9 Improper Certificate Validation in Model Downloads
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
cvhub520 · x-anylabelingAug 25, 2026
CVE-2026-16233
34Monitor
Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ni · labviewAug 25, 2026
CVE-2026-16234
34Monitor
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ni · labviewAug 25, 2026
CVE-2026-19912
39Monitor
The Kaltura HTML5 player (mwEmbed / html5lib) contains an unauthenticated remote code execution vulnerability caused by unsafe data deserial
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- Deserialization
kaltura · kaltura html5 video player, html5 libraryAug 25, 2026
CVE-2026-19913
30Monitor
The Kaltura HTML5 player (mwEmbed / html5lib) contains a local file disclosure vulnerability due to improper validation of the ServiceUrl pa
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
kaltura · kaltura html5 video player, html5lib libraryAug 25, 2026
CVE-2026-24169
32Monitor
NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject co
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Command injection
nvidia · unified fabric manager enterprise - gaAug 25, 2026
CVE-2026-24170
35Monitor
NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause imprope
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
nvidia · unified fabric manager enterprise - gaAug 25, 2026
CVE-2026-24262
32Monitor
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Memory safety
nvidia · dgx spark uefiAug 25, 2026
CVE-2026-24263
32Monitor
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer derefere
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Memory safety
nvidia · dgx spark uefiAug 25, 2026
CVE-2026-47626
32Monitor
NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Memory safety
nvidia · dgx spark uefiAug 25, 2026
CVE-2026-55553
30Monitor
urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
node-modules · urllibAug 25, 2026
CVE-2026-55557
34Monitor
browse-mcp: Arbitrary file write via unconfined download and state paths
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
that1drifter · browse-mcpAug 25, 2026
CVE-2026-55571
32Monitor
djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch ev
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
djust-org · djustAug 25, 2026
CVE-2026-55585
35Monitor
QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`
HighCVSS 8.8No exploitEPSS 0%
- RCE
qwed-ai · qwed-verificationAug 25, 2026
CVE-2026-59184
28Monitor
OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
academysoftwarefoundation · openexrAug 25, 2026
CVE-2026-59186
28Monitor
OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
academysoftwarefoundation · openexrAug 25, 2026
CVE-2026-59187
28Monitor
OpenEXR: exrmetrics deep pixelmode heap buffer overflow
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
academysoftwarefoundation · openexrAug 25, 2026
CVE-2026-59189
28Monitor
OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
academysoftwarefoundation · openexrAug 25, 2026
CVE-2026-64201
34Monitor
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ni · labviewAug 25, 2026
CVE-2026-64202
34Monitor
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ni · labviewAug 25, 2026
CVE-2026-64203
34Monitor
Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ni · labviewAug 25, 2026
CVE-2026-64204
34Monitor
Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
ni · labviewAug 25, 2026
CVE-2026-75496
34Monitor
Webkul QloApps improper file upload validation
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
webkul · qloappsAug 25, 2026
CVE-2026-75497
34Monitor
Webkul QloApps SQL injection
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
webkul · qloappsAug 25, 2026
CVE-2026-75498
34Monitor
Webkul QloApps SQL injection
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
webkul · qloappsAug 25, 2026
CVE-2026-79655
31Monitor
Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write
HighCVSS 7.8No exploitEPSS 0%
- Path traversal
- Local privilege escalation
red hat · red hat enterprise linux 10Aug 25, 2026
CVE-2026-26211
19Monitor
Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field
MediumCVSS 4.8Proof of conceptEPSS 0%
- Auth bypass
- XSS
creativeitem · ekushey project manager crmAug 25, 2026
CVE-2026-48417
31Monitor
Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48418
31Monitor
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48419
31Monitor
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48420
31Monitor
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48421
31Monitor
Substance3D - Sampler | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48422
31Monitor
Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48423
31Monitor
Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48424
31Monitor
Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48425
31Monitor
Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d samplerAug 25, 2026
CVE-2026-48426
31Monitor
Substance3D - Designer | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026
CVE-2026-48427
31Monitor
Substance3D - Designer | Out-of-bounds Write (CWE-787)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026
CVE-2026-48428
31Monitor
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026
CVE-2026-48430
31Monitor
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026
CVE-2026-48431
31Monitor
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026
CVE-2026-48432
31Monitor
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026
CVE-2026-48433
31Monitor
Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
adobe · substance 3d designerAug 25, 2026