By publication date

Exploited and new serious CVEs: August 2026

6,238 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 53 of 63

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-80202No exploit	Kimai before 2.56.0 Authorization Bypass via TimesheetVoterkimai · kimai · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.3%	Aug 26, 2026
30Monitor	CVE-2026-16444Proof of concept	Improper Validation of File Paths in TeamViewer Desktop Clientsteamviewer · full client, host, quicksupport & portable · CWE-73 Pre-auth Path traversal	High7.5	—	0.4%	Aug 26, 2026
35Monitor	CVE-2026-18794No exploit	OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwritecalcprogrammer1 · openrgb · CWE-1288 Pre-auth	High8.8	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-19042No exploit	Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handlingteamviewer · full client · CWE-78 pre-auth RCE Command injection	High8.8	—	1.7%	Aug 26, 2026
35Monitor	CVE-2026-59682No exploit	Arbitrary file overwrite and deletion local and remote in OpenRGBcalcprogrammer1 · openrgb · CWE-73 Pre-auth Path traversal	High8.8	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-59683No exploit	OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled stringscalcprogrammer1 · openrgb · CWE-73 Pre-auth Path traversal	Critical9.3	—	0.5%	Aug 26, 2026
39Monitor	CVE-2026-77534No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain deviubiquiti inc · unifi os server · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-77535No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Netubiquiti inc · unifi network application · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
39Monitor	CVE-2026-77536No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain deviubiquiti inc · unifi os server · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 26, 2026
40Plan	CVE-2026-77537No exploit	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to ubiquiti inc · unifi protect application · CWE-20 pre-auth RCE Command injection	Critical10.0	—	1.6%	Aug 26, 2026
32Monitor	CVE-2026-77538No exploit	A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to esubiquiti inc · unifi connect application · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Aug 26, 2026
36Monitor	CVE-2026-77539No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS ubiquiti inc · unifi os server · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
36Monitor	CVE-2026-77540No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS ubiquiti inc · unifi os server · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
36Monitor	CVE-2026-77541No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Netwoubiquiti inc · unifi network application · CWE-284 Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-77542Proof of concept	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterubiquiti inc · uid enterprise agent · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
39Monitor	CVE-2026-77543No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acceubiquiti inc · unifi access application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
36Monitor	CVE-2026-77545No exploit	A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability fubiquiti inc · unifi os server · CWE-489	Critical9.0	—	0.4%	Aug 26, 2026
28Monitor	CVE-2026-80346No exploit	StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Viewsstarrocks · starrocks · CWE-862 Broken access control (IDOR)	High7.1	—	0.5%	Aug 26, 2026
34Monitor	CVE-2026-80347No exploit	mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Bracketskazuph · mcp-fetch · CWE-918 Pre-auth SSRF	High8.7	—	0.3%	Aug 26, 2026
34Monitor	CVE-2026-80348No exploit	TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpointstarscloud · tarsweb · CWE-862 Broken access control (IDOR)	High8.7	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-80349No exploit	TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parametertarscloud · tarsweb · CWE-290 Pre-auth Auth bypass	Critical9.3	—	0.6%	Aug 26, 2026
28Monitor	CVE-2026-80350No exploit	OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URLoneuptime · oneuptime · CWE-918 SSRF	High7.1	—	0.4%	Aug 26, 2026
39Monitor	CVE-2026-18080Proof of concept	ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachmentwedevs · erp: complete hr, accounting & crm suite built for woocommerce · CWE-434 Pre-auth File upload	Critical9.8	—	0.8%	Aug 26, 2026
39Monitor	CVE-2026-77546No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acceubiquiti inc · unifi access application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
39Monitor	CVE-2026-77547No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acceubiquiti inc · unifi access application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
39Monitor	CVE-2026-77548No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protubiquiti inc · unifi protect application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
36Monitor	CVE-2026-77549No exploit	A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulneraubiquiti inc · unifi os server · CWE-93 Pre-auth Auth bypass	Critical9.0	—	0.5%	Aug 26, 2026
40Plan	CVE-2026-77550No exploit	A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devicubiquiti inc · unifi os server · CWE-93 Pre-auth Auth bypass	Critical10.0	—	0.8%	Aug 26, 2026
36Monitor	CVE-2026-77551No exploit	A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Unubiquiti inc · unifi connect display cast pro · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.0	—	0.3%	Aug 26, 2026
39Monitor	CVE-2026-77552No exploit	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video ubiquiti inc · unifi enterprise audio/video bridge · CWE-20 pre-auth RCE Command injection	Critical9.8	—	1.6%	Aug 26, 2026
39Monitor	CVE-2026-77553No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Accessubiquiti inc · unifi access application · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 26, 2026
40Plan	CVE-2026-77554No exploit	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exeubiquiti inc · unifi talk application · CWE-20 pre-auth RCE Command injection	Critical10.0	—	1.6%	Aug 26, 2026
39Monitor	CVE-2026-77557No exploit	A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalatubiquiti inc · unifi protect ai key · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-80203No exploit	Grav before 1.0.18 Authentication Bypass via Scoped API Keygetgrav · grav · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.3	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-80204No exploit	Grav before 1.0.18 Authentication Bypass via Scoped API Keygetgrav · grav · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.3	—	0.2%	Aug 26, 2026
34Monitor	CVE-2026-80205No exploit	NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexnltk · nltk · CWE-1333 Pre-auth Denial of service	High8.7	—	0.6%	Aug 26, 2026
32Monitor	CVE-2026-80206No exploit	NLTK 3.10.2 Regular Expression Denial of Service via tgrepnltk · nltk · CWE-1333 Pre-auth Denial of service	High8.2	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-15985No exploit	Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Loginradiustheme · classified listing - mobile number verification · CWE-289 Pre-auth Auth bypass	High8.1	—	0.5%	Aug 26, 2026
34Monitor	CVE-2026-12587No exploit	Embedded credentials in Virtuagymresamania · virtuagym · CWE-798 Hard-coded credentials	High8.6	—	0.3%	Aug 26, 2026
31Monitor	CVE-2026-77658No exploit	Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project filesgnome · dia · CWE-121 Memory safety	High7.8	—	0.2%	Aug 26, 2026
29Monitor	CVE-2026-79619No exploit	OpenZFS: user-namespace capability check allows unprivileged local authorization bypassopenzfs · openzfs · CWE-863 Local privilege escalation Broken access control (IDOR)	High7.3	—	0.1%	Aug 26, 2026
37Monitor	CVE-2026-12717No exploit	Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injectiongoogle cloud · bigquery data transfer service · CWE-74 RCE	Critical9.4	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-15990No exploit	Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameterstrategy11 · formidable charts · CWE-22 Pre-auth Path traversal	High7.5	—	0.9%	Aug 26, 2026
32Monitor	CVE-2026-18252No exploit	Inclusion of Functionality from Untrusted Control Sphere in GitLabgitlab · gitlab · CWE-829	High8.1	—	0.5%	Aug 26, 2026
30Monitor	CVE-2026-19271No exploit	Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenktübi̇tak bi̇lgem software technologies research institute · liderahenk · CWE-90 Pre-auth	High7.5	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-73108No exploit	RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodecrustdesk · rustdesk · CWE-770 Pre-auth Denial of service	High8.7	—	0.7%	Aug 26, 2026
36Monitor	CVE-2026-75896No exploit	Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenktübi̇tak bi̇lgem software technologies research institute · liderahenk · CWE-798 Pre-auth Hard-coded credentials	Critical9.1	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-75960No exploit	Insufficiently Protected Credentials in Rently Smart Homerently · smart home · CWE-522 Info leak	High8.7	—	0.3%	Aug 26, 2026
35Monitor	CVE-2026-77532No exploit	A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwiubiquiti inc · edgemax edgeswitch · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.2%	Aug 26, 2026
34Monitor	CVE-2026-54511No exploit	@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keysdahlia · logtape · CWE-93 Pre-auth	High8.6	—	0.4%	Aug 26, 2026
38Monitor	CVE-2026-54523Proof of concept	Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kukyverno · kyverno · CWE-862 Broken access control (IDOR)	Critical9.6	—	0.4%	Aug 26, 2026
29Monitor	CVE-2026-54550No exploit	IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entriesizpack · izpack · CWE-22 Pre-auth Path traversal	High7.4	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-54556No exploit	Http4s: HTTP/2 Denial of Service with Ember Backendhttp4s · http4s · CWE-409 Pre-auth	High8.2	—	0.5%	Aug 26, 2026
39Monitor	CVE-2026-74737No exploit	net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAGlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 26, 2026
30Monitor	CVE-2026-74741No exploit	net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enablinglinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-74742No exploit	veth: fix queue index used to wake the peer txq in veth_polllinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Aug 26, 2026
37Monitor	CVE-2026-74751No exploit	riscv: lib: Fix ZBB strnlen reading past count boundarylinux · linux Pre-auth	Critical9.4	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-75062No exploit	Eval Injection in google/langfun via default lf.query protocolgoogle · langfun · CWE-95 pre-auth RCE	Critical9.2	—	0.3%	Aug 26, 2026
39Monitor	CVE-2026-80519No exploit	ovpn: finish crypto callback cleanup before peer releaselinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-80520No exploit	ovpn: fix NULL dereference when killing missing keylinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 26, 2026
28Monitor	CVE-2026-80523No exploit	clk: spacemit: k3: set hdma clock as criticallinux · linux Denial of service	High7.1	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80531No exploit	xfs: avoid UAF on sc->tempip in xrep_tempfile_createlinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80537No exploit	xfs: fix off-by-one in rtrefcount btree root level validationlinux · linux	High7.8	—	0.1%	Aug 26, 2026
28Monitor	CVE-2026-80538No exploit	xfs: propagate errors from xfs_rtginode_loadlinux · linux	High7.1	—	0.1%	Aug 26, 2026
28Monitor	CVE-2026-80555No exploit	s390/vfio_ccw: Free all memory if cp_init() failslinux · linux Denial of service	High7.1	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80556No exploit	mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditionlinux · linux Race condition	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80559No exploit	Input: sur40 - fix input device registration orderinglinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80560No exploit	openrisc: signal: do not restore privileged SR bits on sigreturnlinux · linux Local privilege escalation	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80565No exploit	crypto: qce - fix error path in devm_qce_register_algslinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80568No exploit	Input: synaptics-rmi4 - block s_input when F54 queue is busylinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80569No exploit	Input: synaptics-rmi4 - bound the F54 report size to the allocated bufferlinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80570No exploit	Input: synaptics-rmi4 - zero report size on F54 work errorlinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80575No exploit	Input: cs40l50-vibra - validate custom data from user spacelinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80582No exploit	drm/shmem_helper: Check VMA boundaries for PMD mappingslinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80583No exploit	ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesseslinux · linux	High7.8	—	0.1%	Aug 26, 2026
39Monitor	CVE-2026-54569No exploit	SENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.coresenaite · senaite.core · CWE-95 pre-auth RCE	Critical9.8	—	1.1%	Aug 26, 2026
34Monitor	CVE-2026-54606No exploit	SunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embedjihong88 · suneditor · CWE-79 XSS	High8.5	—	0.5%	Aug 26, 2026
28Monitor	CVE-2026-80426No exploit	FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Descriptionvoxel51 · fiftyone · CWE-79 Pre-auth XSS	High7.0	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-80427No exploit	bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiternfriedly · bestzip · CWE-88	High8.6	—	0.2%	Aug 26, 2026
33Monitor	CVE-2026-81027No exploit	one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinningsongquanpeng · one-api · CWE-862 Broken access control (IDOR)	High8.4	—	0.3%	Aug 26, 2026
28Monitor	CVE-2026-81030No exploit	Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpointmage-ai · mage-ai · CWE-22 Path traversal	High7.1	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-81031No exploit	IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Updateidurar · idurar-erp-crm · CWE-639 Broken access control (IDOR)	High8.6	—	0.4%	Aug 26, 2026
37Monitor	CVE-2026-81032No exploit	NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configurationvesoft-inc · nebula · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.3%	Aug 26, 2026
33Monitor	CVE-2026-81034No exploit	Netmaker through 1.6.0 Improper Certificate Validation in SMTP Clientgravitl · netmaker · CWE-295 Pre-auth Weak crypto	High8.3	—	0.2%	Aug 26, 2026
28Monitor	CVE-2026-81035No exploit	Midday Missing Owner Check on Team Deletionmidday-ai · midday · CWE-862 Broken access control (IDOR)	High7.2	—	0.3%	Aug 26, 2026
34Monitor	CVE-2026-81036No exploit	Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uristalwartlabs · stalwart · CWE-601 Pre-auth Open redirect	High8.5	—	0.3%	Aug 26, 2026
36Monitor	CVE-2020-15874No exploit	An issue was discovered in LibreNMS 1.65.CWE-77 RCE Command injection	High8.8	—	2.2%	Aug 26, 2026
35Monitor	CVE-2020-15876No exploit	An issue was discovered in LibreNMS 1.65.CWE-89 SQL injection	High8.8	—	0.6%	Aug 26, 2026
35Monitor	CVE-2020-15878No exploit	An issue was discovered in LibreNMS 1.65.CWE-89 SQL injection	High8.8	—	0.6%	Aug 26, 2026
32Monitor	CVE-2026-32257No exploit	Winter: Stored XSS through Brand Settings custom styleswintercms · winter · CWE-79 XSS	High8.1	—	0.3%	Aug 26, 2026
32Monitor	CVE-2026-32258No exploit	Winter: Stored XSS through Editor Settings custom styleswintercms · winter · CWE-79 XSS	High8.1	—	0.3%	Aug 26, 2026
28Monitor	CVE-2026-35445No exploit	Winter: Authenticated backend users can bypass Users controller permission checkswintercms · winter · CWE-285 Broken access control (IDOR)	High7.1	—	0.4%	Aug 26, 2026
39Monitor	CVE-2023-42179No exploit	Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation procCWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 26, 2026
32Monitor	CVE-2026-47836No exploit	Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVNvmware · spring cloud config · CWE-367 Pre-auth Race condition	High8.1	—	0.2%	Aug 26, 2026
39Monitor	CVE-2026-47837No exploit	Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requestsvmware · spring cloud config · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 26, 2026
29Monitor	CVE-2026-47841No exploit	WebAuthn User Verification Bypass via Session Serializationvmware · spring security · CWE-863 Pre-auth Broken access control (IDOR)	High7.4	—	0.3%	Aug 26, 2026
34Monitor	CVE-2026-58474No exploit	whichllm < 0.5.16 Code Injection via run and snippet commandsandyyyy64 · whichllm · CWE-94 pre-auth RCE	High8.6	—	0.8%	Aug 26, 2026
34Monitor	CVE-2026-76784No exploit	Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devicestp-link systems inc. · hs103p3 / hs103p4 v5 · CWE-325 Pre-auth	High8.7	—	0.1%	Aug 26, 2026
37Monitor	CVE-2026-19485No exploit	Bucket Squatting in Vertex AI Search for Commercegoogle cloud · vertex ai search for commerce · CWE-330 Weak crypto	Critical9.3	—	0.3%	Aug 26, 2026
30Monitor	CVE-2026-36851Proof of concept	Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration.CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	Aug 26, 2026

CVE-2026-80202
37Monitor
Kimai before 2.56.0 Authorization Bypass via TimesheetVoter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
kimai · kimaiAug 26, 2026
CVE-2026-16444
30Monitor
Improper Validation of File Paths in TeamViewer Desktop Clients
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
teamviewer · full client, host, quicksupport & portableAug 26, 2026
CVE-2026-18794
35Monitor
OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
calcprogrammer1 · openrgbAug 26, 2026
CVE-2026-19042
36Monitor
Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
teamviewer · full clientAug 26, 2026
CVE-2026-59682
35Monitor
Arbitrary file overwrite and deletion local and remote in OpenRGB
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
calcprogrammer1 · openrgbAug 26, 2026
CVE-2026-59683
37Monitor
OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Path traversal
calcprogrammer1 · openrgbAug 26, 2026
CVE-2026-77534
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77535
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Net
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi network applicationAug 26, 2026
CVE-2026-77536
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77537
40Plan
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Command injection
ubiquiti inc · unifi protect applicationAug 26, 2026
CVE-2026-77538
32Monitor
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to es
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ubiquiti inc · unifi connect applicationAug 26, 2026
CVE-2026-77539
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77540
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77541
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Netwo
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi network applicationAug 26, 2026
CVE-2026-77542
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enter
CriticalCVSS 9.1Proof of conceptEPSS 1%
- RCE
- Command injection
ubiquiti inc · uid enterprise agentAug 26, 2026
CVE-2026-77543
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77545
36Monitor
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability f
CriticalCVSS 9.0No exploitEPSS 0%
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-80346
28Monitor
StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
starrocks · starrocksAug 26, 2026
CVE-2026-80347
34Monitor
mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
kazuph · mcp-fetchAug 26, 2026
CVE-2026-80348
34Monitor
TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpoints
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
tarscloud · tarswebAug 26, 2026
CVE-2026-80349
37Monitor
TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
tarscloud · tarswebAug 26, 2026
CVE-2026-80350
28Monitor
OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL
HighCVSS 7.1No exploitEPSS 0%
- SSRF
oneuptime · oneuptimeAug 26, 2026
CVE-2026-18080
39Monitor
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- File upload
wedevs · erp: complete hr, accounting & crm suite built for woocommerceAug 26, 2026
CVE-2026-77546
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77547
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77548
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi protect applicationAug 26, 2026
CVE-2026-77549
36Monitor
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnera
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77550
40Plan
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devic
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77551
36Monitor
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Un
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ubiquiti inc · unifi connect display cast proAug 26, 2026
CVE-2026-77552
39Monitor
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
ubiquiti inc · unifi enterprise audio/video bridgeAug 26, 2026
CVE-2026-77553
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77554
40Plan
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exe
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Command injection
ubiquiti inc · unifi talk applicationAug 26, 2026
CVE-2026-77557
39Monitor
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalat
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ubiquiti inc · unifi protect ai keyAug 26, 2026
CVE-2026-80203
37Monitor
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
getgrav · gravAug 26, 2026
CVE-2026-80204
37Monitor
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
getgrav · gravAug 26, 2026
CVE-2026-80205
34Monitor
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 26, 2026
CVE-2026-80206
32Monitor
NLTK 3.10.2 Regular Expression Denial of Service via tgrep
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 26, 2026
CVE-2026-15985
32Monitor
Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
radiustheme · classified listing - mobile number verificationAug 26, 2026
CVE-2026-12587
34Monitor
Embedded credentials in Virtuagym
HighCVSS 8.6No exploitEPSS 0%
- Hard-coded credentials
resamania · virtuagymAug 26, 2026
CVE-2026-77658
31Monitor
Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
gnome · diaAug 26, 2026
CVE-2026-79619
29Monitor
OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
openzfs · openzfsAug 26, 2026
CVE-2026-12717
37Monitor
Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
google cloud · bigquery data transfer serviceAug 26, 2026
CVE-2026-15990
30Monitor
Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
strategy11 · formidable chartsAug 26, 2026
CVE-2026-18252
32Monitor
Inclusion of Functionality from Untrusted Control Sphere in GitLab
HighCVSS 8.1No exploitEPSS 0%
gitlab · gitlabAug 26, 2026
CVE-2026-19271
30Monitor
Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
tübi̇tak bi̇lgem software technologies research institute · liderahenkAug 26, 2026
CVE-2026-73108
34Monitor
RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
rustdesk · rustdeskAug 26, 2026
CVE-2026-75896
36Monitor
Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
tübi̇tak bi̇lgem software technologies research institute · liderahenkAug 26, 2026
CVE-2026-75960
34Monitor
Insufficiently Protected Credentials in Rently Smart Home
HighCVSS 8.7No exploitEPSS 0%
- Info leak
rently · smart homeAug 26, 2026
CVE-2026-77532
35Monitor
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ubiquiti inc · edgemax edgeswitchAug 26, 2026
CVE-2026-54511
34Monitor
@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
dahlia · logtapeAug 26, 2026
CVE-2026-54523
38Monitor
Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including ku
CriticalCVSS 9.6Proof of conceptEPSS 0%
- Broken access control (IDOR)
kyverno · kyvernoAug 26, 2026
CVE-2026-54550
29Monitor
IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Path traversal
izpack · izpackAug 26, 2026
CVE-2026-54556
32Monitor
Http4s: HTTP/2 Denial of Service with Ember Backend
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
http4s · http4sAug 26, 2026
CVE-2026-74737
39Monitor
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 26, 2026
CVE-2026-74741
30Monitor
net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-74742
30Monitor
veth: fix queue index used to wake the peer txq in veth_poll
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-74751
37Monitor
riscv: lib: Fix ZBB strnlen reading past count boundary
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
linux · linuxAug 26, 2026
CVE-2026-75062
36Monitor
Eval Injection in google/langfun via default lf.query protocol
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
google · langfunAug 26, 2026
CVE-2026-80519
39Monitor
ovpn: finish crypto callback cleanup before peer release
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 26, 2026
CVE-2026-80520
30Monitor
ovpn: fix NULL dereference when killing missing key
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-80523
28Monitor
clk: spacemit: k3: set hdma clock as critical
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-80531
31Monitor
xfs: avoid UAF on sc->tempip in xrep_tempfile_create
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80537
31Monitor
xfs: fix off-by-one in rtrefcount btree root level validation
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80538
28Monitor
xfs: propagate errors from xfs_rtginode_load
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80555
28Monitor
s390/vfio_ccw: Free all memory if cp_init() fails
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-80556
31Monitor
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 26, 2026
CVE-2026-80559
31Monitor
Input: sur40 - fix input device registration ordering
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80560
31Monitor
openrisc: signal: do not restore privileged SR bits on sigreturn
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxAug 26, 2026
CVE-2026-80565
31Monitor
crypto: qce - fix error path in devm_qce_register_algs
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80568
31Monitor
Input: synaptics-rmi4 - block s_input when F54 queue is busy
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80569
31Monitor
Input: synaptics-rmi4 - bound the F54 report size to the allocated buffer
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80570
31Monitor
Input: synaptics-rmi4 - zero report size on F54 work error
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80575
31Monitor
Input: cs40l50-vibra - validate custom data from user space
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80582
31Monitor
drm/shmem_helper: Check VMA boundaries for PMD mappings
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80583
31Monitor
ASoC: codecs: lpass-tx-macro: Fix enum kcontrol accesses
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-54569
39Monitor
SENAITE.CORE: Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') and Missing Authorization in senaite.core
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
senaite · senaite.coreAug 26, 2026
CVE-2026-54606
34Monitor
SunEditor: DOM XSS in SunEditor Embed Plugin via External Script Element After Iframe Embed
HighCVSS 8.5No exploitEPSS 0%
- XSS
jihong88 · suneditorAug 26, 2026
CVE-2026-80426
28Monitor
FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- XSS
voxel51 · fiftyoneAug 26, 2026
CVE-2026-80427
34Monitor
bestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter
HighCVSS 8.6No exploitEPSS 0%
nfriedly · bestzipAug 26, 2026
CVE-2026-81027
33Monitor
one-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
songquanpeng · one-apiAug 26, 2026
CVE-2026-81030
28Monitor
Mage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
mage-ai · mage-aiAug 26, 2026
CVE-2026-81031
34Monitor
IDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
idurar · idurar-erp-crmAug 26, 2026
CVE-2026-81032
37Monitor
NebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
vesoft-inc · nebulaAug 26, 2026
CVE-2026-81034
33Monitor
Netmaker through 1.6.0 Improper Certificate Validation in SMTP Client
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
gravitl · netmakerAug 26, 2026
CVE-2026-81035
28Monitor
Midday Missing Owner Check on Team Deletion
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
midday-ai · middayAug 26, 2026
CVE-2026-81036
34Monitor
Stalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- Open redirect
stalwartlabs · stalwartAug 26, 2026
CVE-2020-15874
36Monitor
An issue was discovered in LibreNMS 1.65.
HighCVSS 8.8No exploitEPSS 2%
- RCE
- Command injection
Aug 26, 2026
CVE-2020-15876
35Monitor
An issue was discovered in LibreNMS 1.65.
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
Aug 26, 2026
CVE-2020-15878
35Monitor
An issue was discovered in LibreNMS 1.65.
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
Aug 26, 2026
CVE-2026-32257
32Monitor
Winter: Stored XSS through Brand Settings custom styles
HighCVSS 8.1No exploitEPSS 0%
- XSS
wintercms · winterAug 26, 2026
CVE-2026-32258
32Monitor
Winter: Stored XSS through Editor Settings custom styles
HighCVSS 8.1No exploitEPSS 0%
- XSS
wintercms · winterAug 26, 2026
CVE-2026-35445
28Monitor
Winter: Authenticated backend users can bypass Users controller permission checks
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
wintercms · winterAug 26, 2026
CVE-2023-42179
39Monitor
Bird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key derivation process, password validation proc
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Aug 26, 2026
CVE-2026-47836
32Monitor
Spring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Race condition
vmware · spring cloud configAug 26, 2026
CVE-2026-47837
39Monitor
Spring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
vmware · spring cloud configAug 26, 2026
CVE-2026-47841
29Monitor
WebAuthn User Verification Bypass via Session Serialization
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
vmware · spring securityAug 26, 2026
CVE-2026-58474
34Monitor
whichllm < 0.5.16 Code Injection via run and snippet commands
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
andyyyy64 · whichllmAug 26, 2026
CVE-2026-76784
34Monitor
Insufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
tp-link systems inc. · hs103p3 / hs103p4 v5Aug 26, 2026
CVE-2026-19485
37Monitor
Bucket Squatting in Vertex AI Search for Commerce
CriticalCVSS 9.3No exploitEPSS 0%
- Weak crypto
google cloud · vertex ai search for commerceAug 26, 2026
CVE-2026-36851
30Monitor
Path traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and network exfiltration.
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
Aug 26, 2026