By publication date

Exploited and new serious CVEs: August 2026

6,975 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 8 of 70

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-70559Proof of concept	Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAlldatalinkdc · dinky · CWE-306 Pre-auth Auth bypass	High8.7	—	0.4%	Aug 6, 2026
28Monitor	CVE-2026-70633No exploit	TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iteratortimescale · timescaledb · CWE-125 Memory safety	High7.1	—	0.5%	Aug 6, 2026
28Monitor	CVE-2026-70634No exploit	TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iteratortimescale · timescaledb · CWE-125 Memory safety	High7.2	—	0.5%	Aug 6, 2026
28Monitor	CVE-2026-70635No exploit	TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Indextimescale · timescaledb · CWE-125 Memory safety	High7.1	—	0.4%	Aug 6, 2026
34Monitor	CVE-2026-70636No exploit	Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpointflowiseai · flowise · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	High8.7	—	0.6%	Aug 6, 2026
34Monitor	CVE-2026-70638Proof of concept	llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cppggml · llama.cpp · CWE-122 RCE Memory safety	High8.5	—	0.2%	Aug 6, 2026
29Monitor	CVE-2026-70640No exploit	llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cppggml · llama.cpp · CWE-362 RCE Race condition	High7.3	—	0.2%	Aug 6, 2026
32Monitor	CVE-2026-71445No exploit	Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-frameworkail-project · ail-framework · CWE-79 XSS	High8.2	—	0.3%	Aug 6, 2026
34Monitor	CVE-2026-71476No exploit	Nx: Zip-Slip in the self-hosted remote cachenrwl · nx · CWE-22 pre-auth RCE Path traversal	High8.7	—	0.8%	Aug 6, 2026
30Monitor	CVE-2026-71488No exploit	league/commonmark: Quadratic-time denial of service when parsing crafted Markdownthephpleague · commonmark · CWE-407 Pre-auth Denial of service	High7.5	—	0.6%	Aug 6, 2026
21Monitor	CVE-2026-71554Proof of concept	h2: Duplicate Host header could facilitate request smugglingpython-hyper · h2 · CWE-444 Pre-auth Denial of service	Medium5.3	—	0.4%	Aug 6, 2026
31Monitor	CVE-2026-7406No exploit	BMP File Parsing Untrusted Pointer Dereference in certain Autodesk productsautodesk · advance steel · CWE-822 RCE	High7.8	—	0.1%	Aug 6, 2026
31Monitor	CVE-2026-8325No exploit	PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Productsautodesk · revit · CWE-787 RCE Memory safety	High7.8	—	0.1%	Aug 6, 2026
35Monitor	CVE-2026-49163No exploit	Application Insights Profiler Elevation of Privilege Vulnerabilitymicrosoft · application insights profiler · CWE-22 Path traversal	High8.8	—	1.0%	Aug 7, 2026
39Monitor	CVE-2026-50481No exploit	Azure Active Directory Elevation of Privilege Vulnerabilitymicrosoft · azure active directory · CWE-471	Critical9.9	—	0.8%	Aug 7, 2026
40Plan	CVE-2026-50515No exploit	Azure Service Bus Remote Code Execution Vulnerabilitymicrosoft · azure service bus · CWE-502 RCE Deserialization	Critical9.9	—	1.6%	Aug 7, 2026
38Monitor	CVE-2026-56161No exploit	Azure Logic Apps Information Disclosure Vulnerabilitymicrosoft · azure logic apps · CWE-284 Broken access control (IDOR)	Critical9.6	—	0.6%	Aug 7, 2026
40Plan	CVE-2026-56162No exploit	Azure SQL Database Elevation of Privilege Vulnerabilitymicrosoft · azure sql database · CWE-287 Pre-auth Auth bypass	Critical10.0	—	0.9%	Aug 7, 2026
39Monitor	CVE-2026-59115No exploit	Microsoft Entra Provisioning Service Elevation of Privilege Vulnerabilitymicrosoft · entra provisioning service · CWE-35 Path traversal	Critical9.9	—	1.0%	Aug 7, 2026
37Monitor	CVE-2026-59118No exploit	Copilot Cowork Elevation of Privilege Vulnerabilitymicrosoft · power apps · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.7%	Aug 7, 2026
39Monitor	CVE-2026-62830No exploit	Azure SRE Agent Elevation of Privilege Vulnerabilitymicrosoft · azure sre agent · CWE-862 Broken access control (IDOR)	Critical9.9	—	0.7%	Aug 7, 2026
40Plan	CVE-2026-62836No exploit	Azure SQL Managed Instance Elevation of Privilege Vulnerabilitymicrosoft · azure sql managed instance · CWE-923 Pre-auth	Critical10.0	—	0.6%	Aug 7, 2026
39Monitor	CVE-2026-62873No exploit	Microsoft 365 Admin Center Elevation of Privilege Vulnerabilitymicrosoft · windows admin center · CWE-347 Pre-auth Weak crypto	Critical9.8	—	0.6%	Aug 7, 2026
38Monitor	CVE-2026-62896No exploit	Microsoft Teams Elevation of Privilege Vulnerabilitymicrosoft · teams · CWE-287 Auth bypass	Critical9.6	—	0.6%	Aug 7, 2026
30Monitor	CVE-2026-62918No exploit	Microsoft Teams Spoofing Vulnerabilitymicrosoft · teams · CWE-347 Pre-auth Weak crypto	High7.5	—	0.4%	Aug 7, 2026
40Plan	CVE-2026-63508No exploit	Microsoft Planetary Computer Pro Elevation of Privilege Vulnerabilitymicrosoft · planetary computer · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.7%	Aug 7, 2026
40Plan	CVE-2026-65667No exploit	Microsoft Teams Elevation of Privilege Vulnerabilitymicrosoft · teams · CWE-862 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.7%	Aug 7, 2026
35Monitor	CVE-2026-65668No exploit	Microsoft Purview eDiscovery Elevation of Privilege Vulnerabilitymicrosoft · purview ediscovery · CWE-284 Broken access control (IDOR)	High8.8	—	0.7%	Aug 7, 2026
36Monitor	CVE-2026-68823No exploit	Azure Confidential Ledger Remote Code Execution Vulnerabilitymicrosoft · azure confidential ledger · CWE-749 RCE	Critical9.1	—	0.9%	Aug 7, 2026
38Monitor	CVE-2026-70332No exploit	Microsoft Office SharePoint Spoofing Vulnerabilitymicrosoft · sharepoint online · CWE-79 Pre-auth XSS	Critical9.6	—	0.8%	Aug 7, 2026
39Monitor	CVE-2026-14364No exploit	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'themetechmount · truebooker – appointment booking and scheduler system · CWE-640 Pre-auth	Critical9.8	—	0.5%	Aug 7, 2026
39Monitor	CVE-2026-14365No exploit	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'themetechmount · truebooker – appointment booking and scheduler system · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 7, 2026
39Monitor	CVE-2026-14205No exploit	WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameterunknown · wp events manager · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.4%	Aug 7, 2026
30Monitor	CVE-2026-14943No exploit	Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST APIunknown · password protected — lock entire site, pages, posts, categories, and partial content · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Aug 7, 2026
35Monitor	CVE-2026-15215No exploit	Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installationunknown · subscriptions for woocommerce · CWE-269 RCE	High8.8	—	0.6%	Aug 7, 2026
32Monitor	CVE-2026-15361No exploit	Content Views < 4.5 - Subscriber+ SQL Injection via preview_requestunknown · content views · CWE-89 SQL injection	High8.1	—	0.3%	Aug 7, 2026
32Monitor	CVE-2026-16030No exploit	MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authenticationunknown · mstore api · CWE-287 Pre-auth Auth bypass	High8.1	—	0.3%	Aug 7, 2026
36Monitor	CVE-2026-16038No exploit	MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gatewaysunknown · mstore api · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 7, 2026
30Monitor	CVE-2026-16041No exploit	MStore API < 4.21.0 - Unauthenticated Product Review Creationunknown · mstore api · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Aug 7, 2026
39Monitor	CVE-2026-16258No exploit	Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpointunknown · ajax search lite · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.8%	Aug 7, 2026
30Monitor	CVE-2026-16262No exploit	Estatik < 4.3.3 - Login CSRFunknown · estatik real estate plugin · CWE-352 Pre-auth CSRF Denial of service	High7.5	—	0.2%	Aug 7, 2026
35Monitor	CVE-2026-16263No exploit	WP Maps < 4.9.7 - Subscriber+ Local File Inclusionunknown · wp maps · CWE-22 RCE Path traversal	High8.8	—	0.5%	Aug 7, 2026
26Monitor	CVE-2026-16265Proof of concept	WP Maps < 4.9.7 - Subscriber+ Denial of Serviceunknown · wp maps · CWE-400 Denial of service	Medium6.5	—	0.4%	Aug 7, 2026
28Monitor	CVE-2026-19189No exploit	Power Sofware PowerISO Kernel Driver scdemu.sys privileges managementpower sofware · poweriso · CWE-266 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
31Monitor	CVE-2026-45198No exploit	GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrustedimagination technologies · graphics ddk · CWE-822	High7.8	—	0.1%	Aug 7, 2026
28Monitor	CVE-2026-49746No exploit	GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMemimagination technologies · graphics ddk · CWE-823 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
28Monitor	CVE-2026-19190No exploit	StableBit Scanner ScannerService Scanner.Service.exe permissionstablebit · scanner · CWE-266 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
28Monitor	CVE-2026-19191No exploit	StableBit DrivePool DrivePoolService DrivePool.Service.exe permissionstablebit · drivepool · CWE-266 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
28Monitor	CVE-2026-19192No exploit	DeepCool DisplayService DeepCoolDisplayService.exe access controldeepcool · displayservice · CWE-266 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
28Monitor	CVE-2026-19193Proof of concept	Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access controljiangmin · antivirus · CWE-266 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
28Monitor	CVE-2026-19195Proof of concept	V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access controlv-secure · jingyun antivirus · CWE-266 Local privilege escalation	High7.1	—	0.1%	Aug 7, 2026
30Monitor	CVE-2026-49007No exploit	Information leakage vulnerability in ZTE F689 productzte · f689 · CWE-798 Pre-auth Hard-coded credentials	High7.5	—	0.4%	Aug 7, 2026
39Monitor	CVE-2026-56793No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability.dell · openmanage server administrator · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.5%	Aug 7, 2026
32Monitor	CVE-2026-66491Proof of concept	Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3phoca.cz · phoca commander extension for joomla · CWE-22 Path traversal	High8.2	—	0.4%	Aug 7, 2026
24Monitor	CVE-2026-66492Proof of concept	Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3phoca.cz · phoca commander extension for joomla · CWE-22 Path traversal	Medium6.1	—	0.5%	Aug 7, 2026
25Monitor	CVE-2026-66493Proof of concept	Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3phoca.cz · phoca commander extension for joomla · CWE-22 Path traversal	Medium6.4	—	0.4%	Aug 7, 2026
35Monitor	CVE-2026-9169No exploit	LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windowslucid vision labs · arena sdk · CWE-427 RCE Local privilege escalation	High8.8	—	0.1%	Aug 7, 2026
33Monitor	CVE-2026-12070No exploit	TeamDavid: Arbitrary File Deletion via form field 'scjob'tobit laboratories ag · teamdavid · CWE-73 Path traversal	High8.4	—	0.3%	Aug 7, 2026
33Monitor	CVE-2026-54200No exploit	TeamDavid: Local File Inclusion via the form field 'scjob'tobit laboratories ag · teamdavid · CWE-73 Path traversal	High8.4	—	0.4%	Aug 7, 2026
34Monitor	CVE-2026-54202No exploit	TeamDavid: Path Traversal in the archive creation functionalitytobit laboratories ag · teamdavid · CWE-36 Path traversal	High8.5	—	0.4%	Aug 7, 2026
36Monitor	CVE-2026-54203No exploit	TeamDavid: Memory Leak leaking sensitive informationtobit laboratories ag · teamdavid · CWE-200 Pre-auth Info leak	Critical9.2	—	0.5%	Aug 7, 2026
30Monitor	CVE-2026-54204No exploit	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionalitytobit laboratories ag · teamdavid · CWE-20 Pre-auth Auth bypass SSRF	High7.7	—	0.5%	Aug 7, 2026
34Monitor	CVE-2026-54208No exploit	TeamDavid: Arbitrary File Write leading to Stored XSStobit laboratories ag · teamdavid · CWE-20 Pre-auth XSS	High8.5	—	0.5%	Aug 7, 2026
35Monitor	CVE-2026-54209No exploit	TeamDavid: Buffer Overflow in 'editini' functiontobit laboratories ag · teamdavid · CWE-125 Pre-auth Memory safety	High8.9	—	0.4%	Aug 7, 2026
38Monitor	CVE-2026-54210No exploit	TeamDavid: Buffer Overflow in file names of file upload functionalitiestobit laboratories ag · teamdavid · CWE-787 pre-auth RCE Memory safety	Critical9.5	—	0.6%	Aug 7, 2026
38Monitor	CVE-2026-54211No exploit	TeamDavid: Buffer Overflow in multiple form data parameterstobit laboratories ag · teamdavid · CWE-787 pre-auth RCE Memory safety	Critical9.5	—	0.6%	Aug 7, 2026
38Monitor	CVE-2026-54212No exploit	TeamDavid: Buffer Overflow in JSON-parsingtobit laboratories ag · teamdavid · CWE-787 pre-auth RCE Memory safety	Critical9.5	—	0.6%	Aug 7, 2026
36Monitor	CVE-2026-54213No exploit	TeamDavid: Denial of Service via endpoint 'internalRestart'tobit laboratories ag · teamdavid · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.7%	Aug 7, 2026
35Monitor	CVE-2026-54218No exploit	TeamDavid: Weak Cryptography and Insecure Password Storagetobit laboratories ag · teamdavid · CWE-321 Pre-auth Hard-coded credentials	High8.8	—	0.4%	Aug 7, 2026
39Monitor	CVE-2026-71558No exploit	Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserializationapache · fory · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.9%	Aug 7, 2026
30Monitor	CVE-2026-71559No exploit	Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadataapache · fory · CWE-502 Pre-auth Deserialization Denial of service	High7.5	—	0.7%	Aug 7, 2026
36Monitor	CVE-2026-71560No exploit	Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-pathapache · fory · CWE-502 Pre-auth Deserialization	Critical9.1	—	0.7%	Aug 7, 2026
37Monitor	CVE-2022-4995No exploit	Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jspweaver network co., ltd. · e-cology 9.0 · CWE-434 pre-auth RCE File upload	Critical9.3	—	1.1%	Aug 7, 2026
30Monitor	CVE-2026-15816No exploit	Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()red hat · red hat enterprise linux 10 · CWE-78 pre-auth RCE Command injection	High7.5	—	0.3%	Aug 7, 2026
34Monitor	CVE-2026-66494No exploit	Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0joomshaper.com · sp page builder extension for joomla · CWE-79 Pre-auth XSS	High8.7	—	0.4%	Aug 7, 2026
34Monitor	CVE-2026-14644No exploit	Nexus Repository 3 - Privilege Escalationsonatype · nexus repository manager · CWE-843	High8.6	—	0.6%	Aug 7, 2026
28Monitor	CVE-2026-17593No exploit	Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configurationsonatype · nexus repository manager · CWE-470	High7.2	—	0.7%	Aug 7, 2026
32Monitor	CVE-2026-17594Proof of concept	Nexus Repository 3 - Authorization Bypass in Repository Creationsonatype · nexus repository manager · CWE-863 Broken access control (IDOR)	High8.2	—	0.9%	Aug 7, 2026
34Monitor	CVE-2026-68772No exploit	ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializerzenml · zenml · CWE-502 RCE Deserialization	High8.5	—	0.7%	Aug 7, 2026
28Monitor	CVE-2026-71556No exploit	go-git: Worktree operations may follow symlinksgo-git · go-git · CWE-59 Pre-auth	High7.1	—	0.3%	Aug 7, 2026
25Monitor	CVE-2026-71557Proof of concept	go-git: Malicious reference names may modify files outside the reference storagego-git · go-git · CWE-22 Path traversal	Medium6.3	—	0.4%	Aug 7, 2026
28Monitor	CVE-2026-15570No exploit	Improper URL Scheme and Destination Validation in SmartCenter browserseturl Commandvestel · telefunken te24553b45v2dz smart tv · CWE-918 Pre-auth SSRF	High7.1	—	0.2%	Aug 7, 2026
38Monitor	CVE-2026-37171No exploit	A lack of tenant separation in SuperTokens Inc.supertokens · supertokens · CWE-863 Broken access control (IDOR)	Critical9.6	—	0.2%	Aug 7, 2026
36Monitor	CVE-2026-66914Proof of concept	Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1seblod.com · seblod extension for joomla · CWE-22 Pre-auth Path traversal	Critical9.2	—	1.5%	Aug 7, 2026
35Monitor	CVE-2026-64638Proof of concept	WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.wordpress · wordpress · CWE-79 pre-auth RCE XSS	High8.9	—	0.8%	Aug 7, 2026
28Monitor	CVE-2026-18497No exploit	The nothings stb TrueType library contains a heap buffer overflow vulnerabilitysean barrett (nothings) · nothings stb · CWE-122 Memory safety	High7.1	—	0.1%	Aug 7, 2026
37Monitor	CVE-2026-19264Proof of concept	Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeovergitroomhq · postiz-app · CWE-22 Pre-auth Path traversal	Critical9.3	—	1.0%	Aug 7, 2026
30Monitor	CVE-2026-15972No exploit	Unauthenticated denial of service via unbounded external gRPC connection acceptancehashicorp · consul · CWE-770 Pre-auth Denial of service	High7.5	—	0.5%	Aug 7, 2026
30Monitor	CVE-2026-62295No exploit	HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of servicehapifhir · org.hl7.fhir.core · CWE-20 Pre-auth Denial of service	High7.5	—	0.4%	Aug 7, 2026
30Monitor	CVE-2026-62296No exploit	HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of servicehapifhir · org.hl7.fhir.core · CWE-20 Pre-auth Denial of service	High7.5	—	0.4%	Aug 7, 2026
30Monitor	CVE-2026-65819No exploit	gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParsergopacket · gopacket · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Aug 7, 2026
34Monitor	CVE-2026-17600No exploit	Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivationsonatype · nexus repository manager · CWE-613	High8.7	—	0.4%	Aug 7, 2026
35Monitor	CVE-2026-17601No exploit	Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administratorsonatype · nexus repository manager · CWE-862 Broken access control (IDOR)	High8.9	—	0.5%	Aug 7, 2026
34Monitor	CVE-2026-17603No exploit	Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration APIsonatype · nexus repository manager · CWE-94 RCE SQL injection	High8.7	—	0.8%	Aug 7, 2026
30Monitor	CVE-2026-20337No exploit	ClamAV ZIP File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.6%	Aug 7, 2026
30Monitor	CVE-2026-20338No exploit	ClamAV ZIP File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-415 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 7, 2026
30Monitor	CVE-2026-20339No exploit	ClamAV PESpin File Format Processing Integer Overflow Vulnerabilitycisco · cisco secure endpoint · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 7, 2026
30Monitor	CVE-2026-20345No exploit	ClamAV GPT File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-121 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 7, 2026
30Monitor	CVE-2026-20346No exploit	ClamAV PDF File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 7, 2026
30Monitor	CVE-2026-20347No exploit	ClamAV Mach-O File Format Processing Memory Corruption Vulnerabilitycisco · cisco secure endpoint · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 7, 2026

CVE-2026-70559
34Monitor
Dinky Unauthenticated System Configuration and Credential Disclosure via GET /api/sysConfig/getAll
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
datalinkdc · dinkyAug 6, 2026
CVE-2026-70633
28Monitor
TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
timescale · timescaledbAug 6, 2026
CVE-2026-70634
28Monitor
TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator
HighCVSS 7.2No exploitEPSS 0%
- Memory safety
timescale · timescaledbAug 6, 2026
CVE-2026-70635
28Monitor
TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
timescale · timescaledbAug 6, 2026
CVE-2026-70636
34Monitor
Flowise 3.1.4 Authentication Bypass via OAuth2 Credential Refresh Endpoint
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
flowiseai · flowiseAug 6, 2026
CVE-2026-70638
34Monitor
llama.cpp b1886–b7445 Integer Overflow via new_1batch() in llama-android.cpp
HighCVSS 8.5Proof of conceptEPSS 0%
- RCE
- Memory safety
ggml · llama.cppAug 6, 2026
CVE-2026-70640
29Monitor
llama.cpp b1886–b7445 Race Condition Use-After-Free via llama-android.cpp
HighCVSS 7.3No exploitEPSS 0%
- RCE
- Race condition
ggml · llama.cppAug 6, 2026
CVE-2026-71445
32Monitor
Authenticated Reflected Cross-Site Scripting in Tag Error Responses in ail-framework
HighCVSS 8.2No exploitEPSS 0%
- XSS
ail-project · ail-frameworkAug 6, 2026
CVE-2026-71476
34Monitor
Nx: Zip-Slip in the self-hosted remote cache
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Path traversal
nrwl · nxAug 6, 2026
CVE-2026-71488
30Monitor
league/commonmark: Quadratic-time denial of service when parsing crafted Markdown
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
thephpleague · commonmarkAug 6, 2026
CVE-2026-71554
21Monitor
h2: Duplicate Host header could facilitate request smuggling
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
python-hyper · h2Aug 6, 2026
CVE-2026-7406
31Monitor
BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products
HighCVSS 7.8No exploitEPSS 0%
- RCE
autodesk · advance steelAug 6, 2026
CVE-2026-8325
31Monitor
PDF File Parsing Vulnerabilities in Certain Autodesk Desktop Products
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
autodesk · revitAug 6, 2026
CVE-2026-49163
35Monitor
Application Insights Profiler Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
microsoft · application insights profilerAug 7, 2026
CVE-2026-50481
39Monitor
Azure Active Directory Elevation of Privilege Vulnerability
CriticalCVSS 9.9No exploitEPSS 0%
microsoft · azure active directoryAug 7, 2026
CVE-2026-50515
40Plan
Azure Service Bus Remote Code Execution Vulnerability
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Deserialization
microsoft · azure service busAug 7, 2026
CVE-2026-56161
38Monitor
Azure Logic Apps Information Disclosure Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · azure logic appsAug 7, 2026
CVE-2026-56162
40Plan
Azure SQL Database Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · azure sql databaseAug 7, 2026
CVE-2026-59115
39Monitor
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
CriticalCVSS 9.9No exploitEPSS 1%
- Path traversal
microsoft · entra provisioning serviceAug 7, 2026
CVE-2026-59118
37Monitor
Copilot Cowork Elevation of Privilege Vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · power appsAug 7, 2026
CVE-2026-62830
39Monitor
Azure SRE Agent Elevation of Privilege Vulnerability
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · azure sre agentAug 7, 2026
CVE-2026-62836
40Plan
Azure SQL Managed Instance Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
microsoft · azure sql managed instanceAug 7, 2026
CVE-2026-62873
39Monitor
Microsoft 365 Admin Center Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · windows admin centerAug 7, 2026
CVE-2026-62896
38Monitor
Microsoft Teams Elevation of Privilege Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%
- Auth bypass
microsoft · teamsAug 7, 2026
CVE-2026-62918
30Monitor
Microsoft Teams Spoofing Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · teamsAug 7, 2026
CVE-2026-63508
40Plan
Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · planetary computerAug 7, 2026
CVE-2026-65667
40Plan
Microsoft Teams Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · teamsAug 7, 2026
CVE-2026-65668
35Monitor
Microsoft Purview eDiscovery Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · purview ediscoveryAug 7, 2026
CVE-2026-68823
36Monitor
Azure Confidential Ledger Remote Code Execution Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
microsoft · azure confidential ledgerAug 7, 2026
CVE-2026-70332
38Monitor
Microsoft Office SharePoint Spoofing Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- XSS
microsoft · sharepoint onlineAug 7, 2026
CVE-2026-14364
39Monitor
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid'
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
themetechmount · truebooker – appointment booking and scheduler systemAug 7, 2026
CVE-2026-14365
39Monitor
TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker_wp_user_id'
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
themetechmount · truebooker – appointment booking and scheduler systemAug 7, 2026
CVE-2026-14205
39Monitor
WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · wp events managerAug 7, 2026
CVE-2026-14943
30Monitor
Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
unknown · password protected — lock entire site, pages, posts, categories, and partial contentAug 7, 2026
CVE-2026-15215
35Monitor
Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Installation
HighCVSS 8.8No exploitEPSS 0%
- RCE
unknown · subscriptions for woocommerceAug 7, 2026
CVE-2026-15361
32Monitor
Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
HighCVSS 8.1No exploitEPSS 0%
- SQL injection
unknown · content viewsAug 7, 2026
CVE-2026-16030
32Monitor
MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · mstore apiAug 7, 2026
CVE-2026-16038
36Monitor
MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · mstore apiAug 7, 2026
CVE-2026-16041
30Monitor
MStore API < 4.21.0 - Unauthenticated Product Review Creation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · mstore apiAug 7, 2026
CVE-2026-16258
39Monitor
Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
unknown · ajax search liteAug 7, 2026
CVE-2026-16262
30Monitor
Estatik < 4.3.3 - Login CSRF
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- CSRF
- Denial of service
unknown · estatik real estate pluginAug 7, 2026
CVE-2026-16263
35Monitor
WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
unknown · wp mapsAug 7, 2026
CVE-2026-16265
26Monitor
WP Maps < 4.9.7 - Subscriber+ Denial of Service
MediumCVSS 6.5Proof of conceptEPSS 0%
- Denial of service
unknown · wp mapsAug 7, 2026
CVE-2026-19189
28Monitor
Power Sofware PowerISO Kernel Driver scdemu.sys privileges management
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
power sofware · powerisoAug 7, 2026
CVE-2026-45198
31Monitor
GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
HighCVSS 7.8No exploitEPSS 0%
imagination technologies · graphics ddkAug 7, 2026
CVE-2026-49746
28Monitor
GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
imagination technologies · graphics ddkAug 7, 2026
CVE-2026-19190
28Monitor
StableBit Scanner ScannerService Scanner.Service.exe permission
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
stablebit · scannerAug 7, 2026
CVE-2026-19191
28Monitor
StableBit DrivePool DrivePoolService DrivePool.Service.exe permission
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
stablebit · drivepoolAug 7, 2026
CVE-2026-19192
28Monitor
DeepCool DisplayService DeepCoolDisplayService.exe access control
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
deepcool · displayserviceAug 7, 2026
CVE-2026-19193
28Monitor
Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control
HighCVSS 7.1Proof of conceptEPSS 0%
- Local privilege escalation
jiangmin · antivirusAug 7, 2026
CVE-2026-19195
28Monitor
V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control
HighCVSS 7.1Proof of conceptEPSS 0%
- Local privilege escalation
v-secure · jingyun antivirusAug 7, 2026
CVE-2026-49007
30Monitor
Information leakage vulnerability in ZTE F689 product
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
zte · f689Aug 7, 2026
CVE-2026-56793
39Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
dell · openmanage server administratorAug 7, 2026
CVE-2026-66491
32Monitor
Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
HighCVSS 8.2Proof of conceptEPSS 0%
- Path traversal
phoca.cz · phoca commander extension for joomlaAug 7, 2026
CVE-2026-66492
24Monitor
Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3
MediumCVSS 6.1Proof of conceptEPSS 0%
- Path traversal
phoca.cz · phoca commander extension for joomlaAug 7, 2026
CVE-2026-66493
25Monitor
Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3
MediumCVSS 6.4Proof of conceptEPSS 0%
- Path traversal
phoca.cz · phoca commander extension for joomlaAug 7, 2026
CVE-2026-9169
35Monitor
LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
lucid vision labs · arena sdkAug 7, 2026
CVE-2026-12070
33Monitor
TeamDavid: Arbitrary File Deletion via form field 'scjob'
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54200
33Monitor
TeamDavid: Local File Inclusion via the form field 'scjob'
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54202
34Monitor
TeamDavid: Path Traversal in the archive creation functionality
HighCVSS 8.5No exploitEPSS 0%
- Path traversal
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54203
36Monitor
TeamDavid: Memory Leak leaking sensitive information
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Info leak
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54204
30Monitor
TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- SSRF
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54208
34Monitor
TeamDavid: Arbitrary File Write leading to Stored XSS
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- XSS
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54209
35Monitor
TeamDavid: Buffer Overflow in 'editini' function
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
- Memory safety
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54210
38Monitor
TeamDavid: Buffer Overflow in file names of file upload functionalities
CriticalCVSS 9.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54211
38Monitor
TeamDavid: Buffer Overflow in multiple form data parameters
CriticalCVSS 9.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54212
38Monitor
TeamDavid: Buffer Overflow in JSON-parsing
CriticalCVSS 9.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54213
36Monitor
TeamDavid: Denial of Service via endpoint 'internalRestart'
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-54218
35Monitor
TeamDavid: Weak Cryptography and Insecure Password Storage
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
tobit laboratories ag · teamdavidAug 7, 2026
CVE-2026-71558
39Monitor
Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
apache · foryAug 7, 2026
CVE-2026-71559
30Monitor
Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
apache · foryAug 7, 2026
CVE-2026-71560
36Monitor
Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Deserialization
apache · foryAug 7, 2026
CVE-2022-4995
37Monitor
Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- File upload
weaver network co., ltd. · e-cology 9.0Aug 7, 2026
CVE-2026-15816
30Monitor
Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die()
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Command injection
red hat · red hat enterprise linux 10Aug 7, 2026
CVE-2026-66494
34Monitor
Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- XSS
joomshaper.com · sp page builder extension for joomlaAug 7, 2026
CVE-2026-14644
34Monitor
Nexus Repository 3 - Privilege Escalation
HighCVSS 8.6No exploitEPSS 0%
sonatype · nexus repository managerAug 7, 2026
CVE-2026-17593
28Monitor
Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
HighCVSS 7.2No exploitEPSS 0%
sonatype · nexus repository managerAug 7, 2026
CVE-2026-17594
32Monitor
Nexus Repository 3 - Authorization Bypass in Repository Creation
HighCVSS 8.2Proof of conceptEPSS 0%
- Broken access control (IDOR)
sonatype · nexus repository managerAug 7, 2026
CVE-2026-68772
34Monitor
ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Deserialization
zenml · zenmlAug 7, 2026
CVE-2026-71556
28Monitor
go-git: Worktree operations may follow symlinks
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
go-git · go-gitAug 7, 2026
CVE-2026-71557
25Monitor
go-git: Malicious reference names may modify files outside the reference storage
MediumCVSS 6.3Proof of conceptEPSS 0%
- Path traversal
go-git · go-gitAug 7, 2026
CVE-2026-15570
28Monitor
Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- SSRF
vestel · telefunken te24553b45v2dz smart tvAug 7, 2026
CVE-2026-37171
38Monitor
A lack of tenant separation in SuperTokens Inc.
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
supertokens · supertokensAug 7, 2026
CVE-2026-66914
36Monitor
Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1
CriticalCVSS 9.2Proof of conceptEPSS 1%
- Pre-auth
- Path traversal
seblod.com · seblod extension for joomlaAug 7, 2026
CVE-2026-64638
35Monitor
WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen.
HighCVSS 8.9Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
wordpress · wordpressAug 7, 2026
CVE-2026-18497
28Monitor
The nothings stb TrueType library contains a heap buffer overflow vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
sean barrett (nothings) · nothings stbAug 7, 2026
CVE-2026-19264
37Monitor
Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover
CriticalCVSS 9.3Proof of conceptEPSS 1%
- Pre-auth
- Path traversal
gitroomhq · postiz-appAug 7, 2026
CVE-2026-15972
30Monitor
Unauthenticated denial of service via unbounded external gRPC connection acceptance
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hashicorp · consulAug 7, 2026
CVE-2026-62295
30Monitor
HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hapifhir · org.hl7.fhir.coreAug 7, 2026
CVE-2026-62296
30Monitor
HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
hapifhir · org.hl7.fhir.coreAug 7, 2026
CVE-2026-65819
30Monitor
gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
gopacket · gopacketAug 7, 2026
CVE-2026-17600
34Monitor
Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation
HighCVSS 8.7No exploitEPSS 0%
sonatype · nexus repository managerAug 7, 2026
CVE-2026-17601
35Monitor
Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
HighCVSS 8.9No exploitEPSS 0%
- Broken access control (IDOR)
sonatype · nexus repository managerAug 7, 2026
CVE-2026-17603
34Monitor
Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SQL injection
sonatype · nexus repository managerAug 7, 2026
CVE-2026-20337
30Monitor
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure endpointAug 7, 2026
CVE-2026-20338
30Monitor
ClamAV ZIP File Format Processing Memory Corruption Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure endpointAug 7, 2026
CVE-2026-20339
30Monitor
ClamAV PESpin File Format Processing Integer Overflow Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure endpointAug 7, 2026
CVE-2026-20345
30Monitor
ClamAV GPT File Format Processing Memory Corruption Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure endpointAug 7, 2026
CVE-2026-20346
30Monitor
ClamAV PDF File Format Processing Memory Corruption Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure endpointAug 7, 2026
CVE-2026-20347
30Monitor
ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure endpointAug 7, 2026