Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2026

7,138 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 63 of 72

  • CVE-2026-51106
    37Monitor

    An issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src/persistence/serialize.cpp component

    CriticalCVSS 9.3No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-74736
    31Monitor

    net/sched: cls_bpf: reject dev-bound programs bound to a different device

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74739
    31Monitor

    net/sched: cls_u32: skip hash tables in u32_bind_class()

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74743
    39Monitor

    macvlan: inherit needed_headroom and needed_tailroom from lowerdev

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74744
    39Monitor

    ipvlan: inherit needed_headroom and needed_tailroom from phy_dev

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74745
    30Monitor

    eth: bnxt: avoid deadlock when canceling IRQ affinity notifier

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74746
    39Monitor

    netfilter: flowtable: publish GC-visible tuple last

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74747
    31Monitor

    ipvs: revalidate ihl to prevent out-of-bounds access

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74748
    31Monitor

    netfilter: ipset: fix refcount race between list:set GC and swap

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74750
    30Monitor

    ovpn: defer key slot crypto freeing to workqueue

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74752
    39Monitor

    sctp: validate cookie AUTH state before use

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-74753
    31Monitor

    perf: Reject exited events as group leaders

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-70419
    37Monitor

    Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Com

    CriticalCVSS 9.1No exploitEPSS 2%

    dell · cloud disaster recoveryAug 26, 2026

  • CVE-2026-71171
    28Monitor

    Dell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Com

    HighCVSS 7.2No exploitEPSS 1%

    dell · cloud disaster recoveryAug 26, 2026

  • CVE-2026-75325
    39Monitor

    DWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '/api/dwsurvey/up/**' parameters.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-80521
    31Monitor

    af_unix: Unlink scc_entry in unix_del_edge().

    HighCVSS 7.8Proof of conceptEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80522
    31Monitor

    crypto: tegra - fix rctx->cryptlen calculation in tegra_gcm_do_one_req()

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80526
    31Monitor

    ASoC: tas2562: Validate values for volume writes

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80527
    30Monitor

    ceph: fix hanging __ceph_get_caps() with stale mds_wanted

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80528
    39Monitor

    ceph: avoid fs reclaim while using current->journal_info

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80530
    28Monitor

    xfs: fix exchange-range reflink flag clearing issue with INO1_WRITTEN

    HighCVSS 7.1No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80536
    33Monitor

    xfs: bounds-check buffer log item's dirty bitmap

    HighCVSS 8.4No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80540
    31Monitor

    drm/amdgpu: Fix UVD decode image min size calculation

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80541
    31Monitor

    drm/amdgpu: validate GEM_CREATE domain combinations

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80544
    31Monitor

    s390/zcrypt: Improve EP11 CPRB domain handling with ASN.1 parsing

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80545
    31Monitor

    s390/zcrypt: Improve EP11 CPRB length and overflow checks

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80546
    31Monitor

    s390/zcrypt: Improve CCA CPRB length and overflow checks

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80547
    35Monitor

    s390/vfio_ccw: Implement a crw lock

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80548
    35Monitor

    s390/vfio_ccw: Selectively expand io_mutex

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80549
    32Monitor

    s390/vfio_ccw: Move cp cleanup out of not operational

    HighCVSS 8.2No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80550
    31Monitor

    s390/vfio_ccw: Fix out of bounds check on CCW array

    HighCVSS 7.9No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80551
    37Monitor

    s390/vfio_ccw: Ensure first IDAW remains constant

    CriticalCVSS 9.3No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80552
    35Monitor

    s390/vfio_ccw: Ensure index for read/write regions are within range

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80553
    35Monitor

    s390/vfio_ccw: Cancel existing workqueues

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80554
    37Monitor

    s390/vfio_ccw: Limit the number of channel program segments

    CriticalCVSS 9.3No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80557
    39Monitor

    libceph: fix OOB read in decode_watchers() via missing bounds check

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80558
    39Monitor

    libceph: Avoid using invalid osd indices from primary_temp

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80561
    39Monitor

    libceph: fix multiple unsafe decodes in decode_locker()

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80572
    31Monitor

    Input: byd - synchronize timer deletion before freeing private data

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80574
    33Monitor

    Input: focaltech - fix array out-of-bounds in focaltech_process_rel_packet

    HighCVSS 8.4No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80576
    35Monitor

    drm/amdgpu: reject oversized IBs with per-ring packet limits

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80578
    29Monitor

    fbdev: core: Fix pointer desynchronization in fb_io_read()

    HighCVSS 7.3No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80579
    31Monitor

    fbdev: clear fb_info->mode before deleting a videomode

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80580
    31Monitor

    fbdev: bound mode sysfs output to the sysfs buffer

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80584
    33Monitor

    s390/qeth: validate user buffer length in SNMP and ARP query ioctls

    HighCVSS 8.4No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80585
    37Monitor

    mptcp: fastopen: only mark MPTFO subflows with SYN data

    CriticalCVSS 9.4No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80586
    39Monitor

    mptcp: options: reset DSS fields in case of unexpected size

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80587
    39Monitor

    mptcp: avoid combining some incoming suboptions

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80588
    30Monitor

    mptcp: reclaim forward-allocated memory on RX path errors

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80589
    39Monitor

    block: stop the timeout timer when releasing a never added disk

    CriticalCVSS 9.8No exploitEPSS 0%

    linux · linuxAug 26, 2026

  • CVE-2026-80428
    38Monitor

    ILIAS PHP Object Injection via Shibboleth Logout

    CriticalCVSS 9.3Proof of conceptEPSS 4%

    ilias-elearning e.v. · iliasAug 26, 2026

  • CVE-2026-81029
    34Monitor

    OpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI

    HighCVSS 8.5No exploitEPSS 0%

    open-metadata · openmetadataAug 26, 2026

  • CVE-2026-26445
    30Monitor

    stomper 5e2741e is vulnerable to Denial of Service.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-26446
    30Monitor

    Stomper 5e2741e is vulnerable to Denial of Service.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-26447
    30Monitor

    Stomper 5e2741e is vulnerable to Use-After-Free.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-26448
    39Monitor

    Stomper 5e2741e is vulnerable to Use-After-Free.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-26449
    30Monitor

    In Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the server triggers a null pointer dereference (or

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-46369
    30Monitor

    Nimiq: Validity store off by one error

    HighCVSS 7.5No exploitEPSS 0%

    nimiq · core-rs-albatrossAug 26, 2026

  • CVE-2026-54245
    30Monitor

    Fleet: SQL injection in Okta conditional access endpoint allows host-controlled compromise of the Fleet database

    HighCVSS 7.6No exploitEPSS 0%

    fleetdm · fleetAug 26, 2026

  • CVE-2026-60004
    76This week

    Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.

    CriticalCVSS 9.8KEVWeaponizedEPSS 23%

    gitea · giteaAug 26, 2026

  • CVE-2026-66003
    28Monitor

    Frappe: Access control bypass via REST API dot-notation fields on linked doctypes

    HighCVSS 7.1No exploitEPSS 0%

    frappe · frappeAug 26, 2026

  • CVE-2026-68000
    39Monitor

    The front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-68861
    36Monitor

    Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman

    HighCVSS 8.8No exploitEPSS 1%

    dell · powerprotect oneAug 26, 2026

  • CVE-2026-68863
    30Monitor

    Dell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow vulnerability.

    HighCVSS 7.5No exploitEPSS 0%

    dell · powerprotect oneAug 26, 2026

  • CVE-2026-74770
    36Monitor

    Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special Elements used in an OS Command ('OS Comman

    HighCVSS 8.8No exploitEPSS 1%

    dell · powerprotect oneAug 26, 2026

  • CVE-2026-74774
    30Monitor

    Dell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation vulnerability.

    HighCVSS 7.5No exploitEPSS 0%

    dell · powerprotect oneAug 26, 2026

  • CVE-2026-75327
    39Monitor

    In DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller/DocController.java has an arbitrary file upload v

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-75334
    39Monitor

    The report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-77652
    31Monitor

    Dia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index

    HighCVSS 7.8No exploitEPSS 0%

    gnome · diaAug 26, 2026

  • CVE-2026-79938
    35Monitor

    Dell PowerProtect Cyber Recovery, versions prior to 20.3, contain an Improper Authentication vulnerability.

    HighCVSS 8.8No exploitEPSS 0%

    dell · powerprotect cyber recoveryAug 26, 2026

  • CVE-2026-79939
    31Monitor

    Dell PowerProtect Cyber Recovery, versions Prior to 20.3, contain an UNIX Symbolic Link (Symlink) Following vulnerability.

    HighCVSS 7.8No exploitEPSS 0%

    dell · powerprotect cyber recoveryAug 26, 2026

  • CVE-2025-51675
    30Monitor

    An issue was discovered in openRISC OR1200 commit 83ac6b.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2025-61478
    30Monitor

    An issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a physically proximate attacker to cause a denial of

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-15973
    33Monitor

    LimeSurvey 7.0.5 - Stored XSS in Survey Menu Entries

    HighCVSS 8.4No exploitEPSS 0%

    limesurvey · limesurveyAug 26, 2026

  • CVE-2026-39275
    24Monitor

    Cross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to execute arbitrary code via the item.php, f

    MediumCVSS 6.1Proof of conceptEPSS 0%

    Aug 26, 2026

  • CVE-2026-52103
    39Monitor

    A zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component of SimpleX Chat before v6.5 allows attacke

    CriticalCVSS 9.8No exploitEPSS 1%

    Aug 26, 2026

  • CVE-2026-55228
    32Monitor

    Weblate:: WebIDOR in GroupViewSet allows authenticated project manager to gain unauthorized read access to any private project

    HighCVSS 8.1No exploitEPSS 0%

    weblateorg · weblateAug 26, 2026

  • CVE-2026-61792
    30Monitor

    Weblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)

    HighCVSS 7.7No exploitEPSS 0%

    weblateorg · weblateAug 26, 2026

  • CVE-2026-75411
    39Monitor

    JeecgBoot v3.9.2 is vulnerable to Remote command execution.

    CriticalCVSS 9.8No exploitEPSS 1%

    Aug 26, 2026

  • CVE-2026-75413
    30Monitor

    DocSys V2.02.80 is vulnerable to Any File Download.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-75414
    39Monitor

    In AntFlow V2.0.0, ActivitiTest.java enables users to execute JUEL expressions without filtering the user input, which leads to a command ex

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-75415
    30Monitor

    AntFlow V2.0.0 is vulnerable to Incorrect Access Control.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-79921
    35Monitor

    amqp091-go has a Potential Memory Exhaustion/Protocol Violation via Broker-Controlled Oversized Payload

    HighCVSS 8.9No exploitEPSS 0%

    rabbitmq · amqp091-goAug 26, 2026

  • CVE-2026-16809
    28Monitor

    LimeSurvey Community Edition 7.0.5 - Stored XSS in quota message rendering

    HighCVSS 7.2No exploitEPSS 0%

    limesurvey · limesurveyAug 26, 2026

  • CVE-2026-43621
    34Monitor

    Simple Machines Forum < 2.1.7 Authorization Confusion via Profile::load()

    HighCVSS 8.6Proof of conceptEPSS 0%

    simplemachines · smfAug 26, 2026

  • CVE-2026-55182
    34Monitor

    LibreNMS: Remote Code Execution by Signal Alert Transportation Module

    HighCVSS 8.6No exploitEPSS 1%

    librenms · librenmsAug 26, 2026

  • CVE-2026-61617
    30Monitor

    Pterodactyl Wings SFTP write path does not enforce disk quota, allowing node-wide disk exhaustion

    HighCVSS 7.7No exploitEPSS 0%

    pterodactyl · wingsAug 26, 2026

  • CVE-2026-63360
    29Monitor

    LimeSurvey Community Edition 7.0.5 - Reflected XSS in user activation confirmation endpoint

    HighCVSS 7.4No exploitEPSS 0%

    limesurvey · limesurveyAug 26, 2026

  • CVE-2026-64632
    34Monitor

    A vulnerability allowing a low-privileged user to capture the NTLM credentials of the Reporter service account.

    HighCVSS 8.5No exploitEPSS 0%

    veeam · oneAug 26, 2026

  • CVE-2026-65641
    37Monitor

    A vulnerability allowing an unauthenticated network attacker to coerce SMB authentication from the service account.

    CriticalCVSS 9.3No exploitEPSS 0%

    veeam · oneAug 26, 2026

  • CVE-2026-65642
    34Monitor

    Insecure direct object reference in Plesk 18.0.79.7 and earlier or 18.0.80 through 18.0.80.3, allows remote authenticated users to read and

    HighCVSS 8.6No exploitEPSS 0%

    webpros · pleskAug 26, 2026

  • CVE-2025-29419
    28Monitor

    CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.

    HighCVSS 7.1No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-65646
    39Monitor

    Improper neutralization of special elements in in Plesk's DNS zone management functionality allows remote authenticated users to disclose ar

    CriticalCVSS 9.9No exploitEPSS 0%

    webpros · pleskAug 26, 2026

  • CVE-2025-56798
    35Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12.14 and earlier allows remote attackers to

    HighCVSS 8.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-65647
    34Monitor

    Improper symlink resolution before file access in Plesk allows remote authenticated users to execute arbitrary code as root.

    HighCVSS 8.7Proof of conceptEPSS 0%

    webpros · plesk migratorAug 26, 2026

  • CVE-2026-75328
    30Monitor

    In DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller/DocController.java has an arbitrary file read vulnera

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-75329
    39Monitor

    The Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no authentication mechanism.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-75333
    30Monitor

    yx-image-recognition v1.0 is vulnerable to Path Traversal.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 26, 2026

  • CVE-2026-77298
    34Monitor

    SeaweedFS S3 OIDC Bearer authentication bypasses IAM role trust policy

    HighCVSS 8.7No exploitEPSS 0%

    seaweedfs · seaweedfsAug 26, 2026

  • CVE-2026-77317
    32Monitor

    SeaweedFS: SFTP path ACL literal prefix match permits cross-tenant file read and overwrite

    HighCVSS 8.1No exploitEPSS 0%

    seaweedfs · seaweedfsAug 26, 2026