Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2026

7,237 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 7 of 73

  • CVE-2026-71280
    34Monitor

    go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch

    HighCVSS 8.5No exploitEPSS 0%

    go-shiori · shioriAug 5, 2026

  • CVE-2026-71281
    35Monitor

    peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA and CorDA Modules

    HighCVSS 8.8No exploitEPSS 0%

    huggingface · peftAug 5, 2026

  • CVE-2026-71284
    28Monitor

    Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename

    HighCVSS 7.2No exploitEPSS 0%

    fledge-iot · fledgeAug 5, 2026

  • CVE-2026-71285
    32Monitor

    Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages

    HighCVSS 8.1No exploitEPSS 0%

    louislam · uptime-kumaAug 5, 2026

  • CVE-2026-71288
    35Monitor

    Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_reports.pl

    HighCVSS 8.8No exploitEPSS 0%

    koha community · kohaAug 5, 2026

  • CVE-2026-71289
    39Monitor

    NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution via Exposed AMP Manager REST API

    CriticalCVSS 9.8No exploitEPSS 0%

    nasa-ammos · anmsAug 5, 2026

  • CVE-2026-71291
    35Monitor

    Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering

    HighCVSS 8.8No exploitEPSS 0%

    bolt · coreAug 5, 2026

  • CVE-2026-71292
    28Monitor

    Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter

    HighCVSS 7.2No exploitEPSS 0%

    intelliants · subrionAug 5, 2026

  • CVE-2026-10716
    30Monitor

    Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation

    HighCVSS 7.5No exploitEPSS 0%

    directus · directusAug 5, 2026

  • CVE-2026-17625
    35Monitor

    Langflow is affected by OS Command Injection in Model Context Protocol features

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2025-70962
    30Monitor

    Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control.

    HighCVSS 7.5Proof of conceptEPSS 0%

    Aug 5, 2026

  • CVE-2026-67623
    34Monitor

    Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook

    HighCVSS 8.6No exploitEPSS 1%

    mistralai · mistral-vibeAug 5, 2026

  • CVE-2026-70426
    36Monitor

    In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier,

    CriticalCVSS 9.0No exploitEPSS 0%

    jenkins project · jenkinsAug 5, 2026

  • CVE-2026-12410
    31Monitor

    CCleaner local privilege escalation via link following on uninstall

    HighCVSS 7.8No exploitEPSS 0%

    gen digital · ccleanerAug 5, 2026

  • CVE-2026-10025
    39Monitor

    IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    ibm · qradar security information and event managerAug 5, 2026

  • CVE-2026-13477
    35Monitor

    IBM QRadar SIEM is vulnerable to remote code execution by privileged users

    HighCVSS 8.8No exploitEPSS 0%

    ibm · qradar security information and event managerAug 5, 2026

  • CVE-2026-15587
    37Monitor

    Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentication Header

    CriticalCVSS 9.4No exploitEPSS 0%

    google cloud · google secops (chronicle soar)Aug 5, 2026

  • CVE-2026-39923
    36Monitor

    Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset

    CriticalCVSS 9.2No exploitEPSS 0%

    flarum · flarum frameworkAug 5, 2026

  • CVE-2026-39924
    30Monitor

    Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation

    HighCVSS 7.6No exploitEPSS 0%

    flarum · flarum frameworkAug 5, 2026

  • CVE-2026-48834
    30Monitor

    Apache Answer: Denial of service via crafted Accept-Language header parsing

    HighCVSS 7.5No exploitEPSS 0%

    apache · answerAug 5, 2026

  • CVE-2026-48911
    30Monitor

    Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow

    HighCVSS 7.5No exploitEPSS 0%

    apache · answerAug 5, 2026

  • CVE-2026-60023
    30Monitor

    Apache Answer: Unauthorized disclosure of deleted or pending answer content

    HighCVSS 7.5No exploitEPSS 0%

    apache · answerAug 5, 2026

  • CVE-2026-60053
    36Monitor

    Apache Answer: Residual Administrative API Key Access After Role or Account Revocation

    CriticalCVSS 9.1No exploitEPSS 0%

    apache · answerAug 5, 2026

  • CVE-2026-70601
    30Monitor

    Electron: Context isolation bypass via Function.prototype.bind hijack

    HighCVSS 7.5No exploitEPSS 0%

    electronjs · electronAug 5, 2026

  • CVE-2026-70604
    29Monitor

    Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads

    HighCVSS 7.4No exploitEPSS 0%

    electronjs · electronAug 5, 2026

  • CVE-2026-7326
    35Monitor

    Cross-site request forgery in Progress MarkLogic Server Admin UI

    HighCVSS 8.8No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-7327
    32Monitor

    Privilege escalation in Progress MarkLogic Server REST API document processing

    HighCVSS 8.1No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-7329
    39Monitor

    Privilege escalation in Progress MarkLogic Server REST query interfaces

    CriticalCVSS 9.9No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-7557
    36Monitor

    SAML authentication bypass in Progress MarkLogic Server

    CriticalCVSS 9.1No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-8709
    39Monitor

    Privilege escalation in Progress MarkLogic Server REST document patch operation

    CriticalCVSS 9.9No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-9190
    36Monitor

    HTTP request smuggling in Progress MarkLogic Server

    CriticalCVSS 9.1No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-9192
    39Monitor

    Authentication bypass in Progress MarkLogic Server ODBC App Server

    CriticalCVSS 9.8No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-9193
    39Monitor

    Privilege escalation in Progress MarkLogic Server Hadoop integration

    CriticalCVSS 9.9No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-9195
    37Monitor

    Cross-site scripting in Progress MarkLogic Server Query Console

    CriticalCVSS 9.3No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-9203
    34Monitor

    Server-side request forgery in Progress MarkLogic Server

    HighCVSS 8.5No exploitEPSS 0%

    progress · marklogic serverAug 5, 2026

  • CVE-2026-70615
    34Monitor

    boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation

    HighCVSS 8.5No exploitEPSS 0%

    boringproxy · boringproxyAug 5, 2026

  • CVE-2026-70616
    28Monitor

    boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint

    HighCVSS 7.1No exploitEPSS 0%

    boringproxy · boringproxyAug 5, 2026

  • CVE-2026-70617
    34Monitor

    Spacebar Server Missing Authorization via Group DM Recipient Endpoint

    HighCVSS 8.6No exploitEPSS 0%

    spacebar server · spacebar serverAug 5, 2026

  • CVE-2026-17617
    39Monitor

    Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator

    CriticalCVSS 9.8No exploitEPSS 0%

    ibm · application gateway operatorAug 5, 2026

  • CVE-2026-17623
    35Monitor

    Langflow is affected OS Command Injection in Model Context Protocol features

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-17626
    35Monitor

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-17630
    35Monitor

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-20124
    30Monitor

    Cisco IOS XE Software SNMP Denial of Service Vulnerability

    HighCVSS 7.7No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20200
    35Monitor

    Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability

    HighCVSS 8.8Proof of conceptEPSS 0%

    cisco · unified computing systemAug 5, 2026

  • CVE-2026-20263
    34Monitor

    Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20267
    36Monitor

    Cisco IOS XE Software Security Hardening Release

    CriticalCVSS 9.0No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20268
    34Monitor

    Cisco IOS XE Software Security Hardening Release

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20269
    34Monitor

    Cisco IOS XE Software Security Hardening Release

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20270
    34Monitor

    Cisco IOS XE Software Security Hardening Release

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20271
    34Monitor

    Cisco IOS XE Software Security Hardening Release

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20272
    39Monitor

    Cisco IOS XE Software Security Hardening Release

    CriticalCVSS 9.8No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20273
    34Monitor

    Cisco IOS XE Software Security Hardening Release

    HighCVSS 8.6No exploitEPSS 0%

    cisco · ios xeAug 5, 2026

  • CVE-2026-20303
    39Monitor

    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities

    CriticalCVSS 9.9Proof of conceptEPSS 0%

    cisco · cisco catalyst sd-wan controllerAug 5, 2026

  • CVE-2026-20304
    39Monitor

    Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities

    CriticalCVSS 9.9No exploitEPSS 0%

    cisco · cisco catalyst sd-wan controllerAug 5, 2026

  • CVE-2026-20310
    36Monitor

    Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access

    CriticalCVSS 9.1No exploitEPSS 0%

    cisco · cisco catalyst sd-wan controllerAug 5, 2026

  • CVE-2026-20311
    25Monitor

    Cisco IOS XE Software Web UI Denial of Service Vulnerability

    MediumCVSS 6.3No exploitEPSS 0%

    cisco · cisco ios xe softwareAug 5, 2026

  • CVE-2026-20312
    35Monitor

    Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities

    HighCVSS 8.8No exploitEPSS 0%

    cisco · cisco catalyst sd-wan controllerAug 5, 2026

  • CVE-2026-20313
    30Monitor

    Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities

    HighCVSS 7.7No exploitEPSS 0%

    cisco · cisco catalyst sd-wan controllerAug 5, 2026

  • CVE-2026-8446
    30Monitor

    Langflow is affected by security vulnerabilities in Model Context Protocol features

    HighCVSS 7.5No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-17583
    33Monitor

    Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integrity Check

    HighCVSS 8.3Proof of conceptEPSS 0%

    thermofisher · abi prism 310 data collection softwareAug 5, 2026

  • CVE-2026-18411
    28Monitor

    Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100

    HighCVSS 7.2No exploitEPSS 0%

    acrisure · karr btAug 5, 2026

  • CVE-2026-71309
    34Monitor

    rclone: Incomplete path validation allows backend root escape in serve restic

    HighCVSS 8.6No exploitEPSS 0%

    rclone · rcloneAug 5, 2026

  • CVE-2026-71312
    32Monitor

    rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Command Execution

    HighCVSS 8.0No exploitEPSS 0%

    rclone · rcloneAug 5, 2026

  • CVE-2026-71314
    30Monitor

    Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in island rendering

    HighCVSS 7.5No exploitEPSS 0%

    nuxt · nuxtAug 5, 2026

  • CVE-2026-71315
    32Monitor

    Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddleware auth gates (incomplete fix for CVE-2026-53721)

    HighCVSS 8.2No exploitEPSS 0%

    nuxt · nuxtAug 5, 2026

  • CVE-2026-67864
    30Monitor

    An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a denial of service via the NodeManagement type-instantiation log

    HighCVSS 7.5No exploitEPSS 0%

    Aug 5, 2026

  • CVE-2026-67865
    30Monitor

    S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 5, 2026

  • CVE-2026-71316
    30Monitor

    Nuxt runtime payload cache discloses another user's SSR data across users and to unauthenticated clients

    HighCVSS 7.5No exploitEPSS 0%

    nuxt · nuxtAug 5, 2026

  • CVE-2026-71320
    32Monitor

    Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nuxt Server Island Props

    HighCVSS 8.1No exploitEPSS 0%

    nuxt · nuxtAug 5, 2026

  • CVE-2026-71321
    30Monitor

    Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endpoint body before hash validation

    HighCVSS 7.5No exploitEPSS 0%

    nuxt · nuxtAug 5, 2026

  • CVE-2026-70431
    35Monitor

    Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scripting features that do not integrate with Script Security Plugin

    HighCVSS 8.8No exploitEPSS 0%

    jenkins project · jenkins multijob pluginAug 5, 2026

  • CVE-2026-70432
    35Monitor

    A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arb

    HighCVSS 8.8No exploitEPSS 0%

    jenkins project · jenkins multijob pluginAug 5, 2026

  • CVE-2026-70448
    28Monitor

    Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser to prevent XML external entity (XXE) attacks when processing Ivy

    HighCVSS 7.1No exploitEPSS 0%

    jenkins project · jenkins ivy report pluginAug 5, 2026

  • CVE-2026-70608
    28Monitor

    Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path

    HighCVSS 7.2No exploitEPSS 0%

    electronjs · electronAug 5, 2026

  • CVE-2026-9081
    28Monitor

    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality

    HighCVSS 7.1No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-67863
    30Monitor

    In open62541 1.5.5, a server-side use-after-free exists in the local MonitoredItem callback path.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 5, 2026

  • CVE-2026-10547
    32Monitor

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    HighCVSS 8.1No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-17624
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-17632
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-17633
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8Proof of conceptEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-18485
    34Monitor

    Local Privilege Escalation in NI-PAL

    HighCVSS 8.5No exploitEPSS 0%

    ni · ni-palAug 5, 2026

  • CVE-2026-48168
    40Plan

    PraisonAI: GitHub Actions Claude workflow command injection via unquoted PR branch name

    CriticalCVSS 10.0No exploitEPSS 1%

    mervinpraison · praisonaiAug 5, 2026

  • CVE-2026-8182
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-8183
    30Monitor

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    HighCVSS 7.7No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-8470
    36Monitor

    Langflow is affected by weaknesses in secret handling and sensitive configuration access

    CriticalCVSS 9.1No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-8478
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-9130
    28Monitor

    Langflow OSS is affected by arbitrary code execution in custom component validation and trusted code enforcement

    HighCVSS 7.1No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-9196
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-9201
    35Monitor

    Langflow OSS is affected by arbitrary code execution in component generation, validation, and custom component handling

    HighCVSS 8.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-9205
    39Monitor

    Langflow is affected by weaknesses in secret handling and sensitive configuration access

    CriticalCVSS 9.8No exploitEPSS 0%

    langflow · langflowAug 5, 2026

  • CVE-2026-52466
    39Monitor

    Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access Control.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 5, 2026

  • CVE-2026-67869
    30Monitor

    Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to cause a denial of service via the Service_Call validates input

    HighCVSS 7.5No exploitEPSS 0%

    Aug 5, 2026

  • CVE-2026-67870
    39Monitor

    In open62541 v1.5.5, the server-side AddReferences implementation contains an incomplete validation flaw for non-local ExpandedNodeId target

    CriticalCVSS 9.8No exploitEPSS 1%

    Aug 5, 2026

  • CVE-2026-67873
    39Monitor

    A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU encoding path.

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 5, 2026

  • CVE-2026-17556
    35Monitor

    Path traversal in GitHub Enterprise Server allowed unauthenticated deletion of instance storage via the X-GitHub-Request-Id header

    HighCVSS 8.8No exploitEPSS 0%

    github · enterprise serverAug 5, 2026

  • CVE-2026-18953
    25Monitor

    Improper limitation of a pathname to a restricted directory in aws-transform-mcp-server

    MediumCVSS 6.3Proof of conceptEPSS 0%

    amazon · aws transform mcp serverAug 5, 2026

  • CVE-2026-55522
    31Monitor

    PraisonAI workflow include bypasses tools.py autoload opt-in and executes included recipe code

    HighCVSS 7.8No exploitEPSS 0%

    mervinpraison · praisonaiAug 5, 2026

  • CVE-2026-55523
    30Monitor

    PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targets

    HighCVSS 7.7No exploitEPSS 0%

    mervinpraison · praisonaiAug 5, 2026

  • CVE-2026-55524
    30Monitor

    PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (validate-then-fetch gap)

    HighCVSS 7.5No exploitEPSS 0%

    mervinpraison · praisonaiAug 5, 2026

  • CVE-2026-66298
    34Monitor

    JS-view sandboxed output can synthesize keyboard events to trigger unconfirmed global shortcuts

    HighCVSS 8.6No exploitEPSS 0%

    livebook · livebookAug 5, 2026