By publication date

Exploited and new serious CVEs: August 2026

6,552 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 9 of 66

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
37Monitor	CVE-2026-48161No exploit	react18-use was vulnerable to malicious code execution via compromised commitsdai-shi · react18-use · CWE-506 Pre-auth	Critical9.3	—	0.6%	Aug 10, 2026
33Monitor	CVE-2026-8718No exploit	Out-of-bounds write in DTLS peer Connection ID getsockopt (`TLS_DTLS_PEER_CID_VALUE`) in Zephyr net sockets/TLSzephyrproject · zephyr · CWE-787 Memory safety	High8.4	—	0.1%	Aug 10, 2026
33Monitor	CVE-2026-8917No exploit	Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to wrasus · gpu tweak iii · CWE-822 Local privilege escalation	High8.4	—	0.1%	Aug 10, 2026
39Monitor	CVE-2026-34265No exploit	Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platformsap_se · sap netweaver and abap platform · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.6%	Aug 11, 2026
36Monitor	CVE-2026-44758No exploit	Code Injection vulnerability in Manufacturing Integration and Intelligencesap_se · sap manufacturing integration and intelligence · CWE-94 RCE	Critical9.1	—	0.7%	Aug 11, 2026
30Monitor	CVE-2026-44763No exploit	Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligencesap_se · sap manufacturing integration and intelligence · CWE-22 Path traversal	High7.6	—	0.3%	Aug 11, 2026
29Monitor	CVE-2026-44764No exploit	Missing Authorization Check in SAP Manufacturing Integration and Intelligencesap_se · sap manufacturing integration and intelligence · CWE-862 Pre-auth Broken access control (IDOR)	High7.3	—	0.3%	Aug 11, 2026
29Monitor	CVE-2026-44765No exploit	Missing Authorization Check in SAP Manufacturing Integration and Intelligencesap_se · sap manufacturing integration and intelligence · CWE-862 Pre-auth Broken access control (IDOR)	High7.3	—	0.3%	Aug 11, 2026
28Monitor	CVE-2026-58230No exploit	Multiple vulnerabilities in SAP Business AI Platform (Approuter)sap · approuter · CWE-601 Pre-auth Open redirect	High7.0	—	0.3%	Aug 11, 2026
35Monitor	CVE-2026-58243No exploit	Privilege Escalation vulnerability in SAP ABAP Developer Toolssap_se · sap abap developer tools · CWE-862 Broken access control (IDOR)	High8.8	—	0.4%	Aug 11, 2026
31Monitor	CVE-2026-66763No exploit	Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)sap_se · sap businessobjects business intelligence platform (central management server) · CWE-321 Local privilege escalation Hard-coded credentials	High7.9	—	0.1%	Aug 11, 2026
36Monitor	CVE-2026-19516Proof of concept	CVE-2026-19516 CVE Recordgrafana · grafana mcp server · CWE-918 SSRF	Critical9.1	—	0.3%	Aug 11, 2026
35Monitor	CVE-2026-16053No exploit	Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerabilitzohocorp · manageengine m365 manager plus · CWE-23 Path traversal	High8.5	—	1.7%	Aug 11, 2026
34Monitor	CVE-2026-19424No exploit	Inventec Appliances｜Chiline Cloud - Insecure Direct Object Referenceinventec appliances · chiline cloud · CWE-639 Pre-auth Broken access control (IDOR)	High8.7	—	0.5%	Aug 11, 2026
30Monitor	CVE-2026-71217Proof of concept	Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustionred hat · red hat enterprise linux 10 · CWE-20 Pre-auth Denial of service	High7.5	—	0.6%	Aug 11, 2026
37Monitor	CVE-2026-19425No exploit	Win Men Intermational｜Travel Agency Management System - SQL Injectionwin men intermational · travel agency management system · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.6%	Aug 11, 2026
36Monitor	CVE-2026-13716No exploit	Path Traversal: '.../...//' in Crafty Controllercraftycontrol · crafty controller · CWE-35 RCE Path traversal	Critical9.1	—	0.8%	Aug 11, 2026
28Monitor	CVE-2026-4757No exploit	A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation.axis communications ab · axis os · CWE-732	High7.2	—	0.5%	Aug 11, 2026
29Monitor	CVE-2026-19418No exploit	TYPO3 CMS - Broken Access Control in Backend and Install Tooltypo3 · typo3 cms · CWE-346 Broken access control (IDOR) XSS	High7.3	—	0.2%	Aug 11, 2026
39Monitor	CVE-2026-10579No exploit	Picketlink-federation: auth bypass in picketlink saml unsolicited-responsered hat · red hat jboss enterprise application platform 7.4.25 · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.8	—	0.4%	Aug 11, 2026
29Monitor	CVE-2026-15554No exploit	Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgeryred hat · red hat jboss enterprise application platform 7.4.25 · CWE-295 Pre-auth Auth bypass Weak crypto	High7.4	—	0.4%	Aug 11, 2026
35Monitor	CVE-2026-15555No exploit	Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshallerred hat · red hat jboss enterprise application platform 7.4.25 · CWE-502 pre-auth RCE Deserialization	High8.8	—	0.8%	Aug 11, 2026
32Monitor	CVE-2026-15556No exploit	Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertionsred hat · red hat jboss enterprise application platform 7.4.25 · CWE-347 Auth bypass Weak crypto	High8.1	—	0.3%	Aug 11, 2026
32Monitor	CVE-2026-15560No exploit	Openjdk-orb: unauthed class loading via iiop in eapred hat · red hat jboss enterprise application platform 7.4.25 · CWE-829 Pre-auth	High8.1	—	0.6%	Aug 11, 2026
30Monitor	CVE-2026-15561No exploit	Undertow-core: oom via missing limits in chunked trailer in eap's undertowred hat · red hat jboss enterprise application platform 7.4.25 · CWE-770 Pre-auth Denial of service	High7.5	—	0.7%	Aug 11, 2026
30Monitor	CVE-2026-15562No exploit	Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of servicered hat · red hat jboss enterprise application platform 7.4.25 · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Aug 11, 2026
29Monitor	CVE-2026-15563No exploit	Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dosred hat · red hat jboss enterprise application platform 7.4.25 · CWE-306 Pre-auth Auth bypass	High7.4	—	0.6%	Aug 11, 2026
30Monitor	CVE-2026-15565No exploit	Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage methodred hat · red hat jboss enterprise application platform 7.4.25 · CWE-120 Pre-auth Auth bypass Memory safety	High7.5	—	1.0%	Aug 11, 2026
30Monitor	CVE-2026-15567No exploit	Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listenerred hat · red hat jboss enterprise application platform 7.4.25 · CWE-789 Pre-auth Denial of service	High7.5	—	0.8%	Aug 11, 2026
31Monitor	CVE-2026-72693No exploit	Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root loginred hat · red hat enterprise linux 10 · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Aug 11, 2026
28Monitor	CVE-2026-72694No exploit	Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulationred hat · red hat enterprise linux 10 · CWE-59 Local privilege escalation	High7.1	—	0.1%	Aug 11, 2026
34Monitor	CVE-2026-73160No exploit	cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addressesmisp · cti-transmute · CWE-918 Pre-auth SSRF	High8.7	—	0.4%	Aug 11, 2026
29Monitor	CVE-2026-50058No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-125 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-50059No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-787 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-50060No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-416 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-50061No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-416 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-50062No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-125 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-50063No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-125 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-50064No exploit	A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update siemens · solid edge se2025 · CWE-787 Memory safety	High7.3	—	0.1%	Aug 11, 2026
29Monitor	CVE-2026-64629No exploit	A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230).siemens · parasolid v38.0 · CWE-125 Memory safety	High7.3	—	0.1%	Aug 11, 2026
27Monitor	CVE-2026-72744Proof of concept	Nuxt before 4.5.1 Information Disclosure via Chrome DevToolsnuxt · nuxt · CWE-200 Info leak	Medium6.9	—	0.1%	Aug 11, 2026
40Plan	CVE-2026-46670Proof of concept	YesWiki: Unauthenticated SQL Injectionyeswiki · yeswiki · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.9%	Aug 11, 2026
39Monitor	CVE-2026-51584No exploit	An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in serCWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Aug 11, 2026
40Plan	CVE-2026-58231Proof of concept	Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)sap_se · sap commerce cloud (data hub adapter) · CWE-94 pre-auth RCE	Critical10.0	—	0.8%	Aug 11, 2026
39Monitor	CVE-2026-72920No exploit	SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative controlseaweedfs · seaweedfs · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.7%	Aug 11, 2026
32Monitor	CVE-2026-72921No exploit	SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling pathsseaweedfs · seaweedfs · CWE-863 Broken access control (IDOR)	High8.1	—	0.4%	Aug 11, 2026
35Monitor	CVE-2026-19546No exploit	Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attributered hat · red hat enterprise linux 10 · CWE-94 RCE	High8.8	—	0.3%	Aug 11, 2026
36Monitor	CVE-2026-13737No exploit	Command Restriction Bypasscommvault · commvault · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.2	—	0.6%	Aug 11, 2026
36Monitor	CVE-2026-13738No exploit	Improper Authorization Validationcommvault · commvault · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.2	—	0.6%	Aug 11, 2026
35Monitor	CVE-2026-13739No exploit	Server-Side Request Forgery (SSRF)commvault · commvault · CWE-918 Pre-auth SSRF	High8.8	—	0.4%	Aug 11, 2026
29Monitor	CVE-2026-50236No exploit	Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift consolered hat · red hat openshift container platform 4.14 · CWE-918 SSRF	High7.4	—	0.4%	Aug 11, 2026
29Monitor	CVE-2026-50237No exploit	Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in opered hat · red hat openshift container platform 4.12 · CWE-918 SSRF	High7.4	—	0.4%	Aug 11, 2026
35Monitor	CVE-2026-72533No exploit	Portainer Portainer CE - Authentication Bypassportainer · portainer ce · CWE-287 Auth bypass	High8.8	—	0.5%	Aug 11, 2026
35Monitor	CVE-2026-72534No exploit	Authentik Security authentik - Privilege Escalationauthentik security · authentik · CWE-269	High8.8	—	0.4%	Aug 11, 2026
34Monitor	CVE-2026-72535No exploit	Chaskiq Chaskiq - Missing Authenticationchaskiq · chaskiq · CWE-306 Pre-auth Auth bypass	High8.6	—	0.5%	Aug 11, 2026
34Monitor	CVE-2026-72536No exploit	Chaskiq Chaskiq - Missing Authenticationchaskiq · chaskiq · CWE-306 Pre-auth Auth bypass	High8.6	—	0.5%	Aug 11, 2026
35Monitor	CVE-2026-72537No exploit	Authentik Security authentik - Privilege Escalationauthentik security · authentik · CWE-269	High8.8	—	0.3%	Aug 11, 2026
35Monitor	CVE-2026-72538No exploit	PrefectHQ Prefect - Argument Injectionprefecthq · prefect · CWE-88 RCE	High8.8	—	0.9%	Aug 11, 2026
30Monitor	CVE-2026-72543No exploit	OpenSignLabs OpenSign - Insecure Direct Object Referenceopensignlabs · opensign · CWE-639 Pre-auth Broken access control (IDOR)	High7.5	—	0.6%	Aug 11, 2026
30Monitor	CVE-2026-72544No exploit	OpenSignLabs OpenSign - Insufficient Verification of Data Authenticityopensignlabs · opensign · CWE-345 Pre-auth Auth bypass	High7.5	—	0.2%	Aug 11, 2026
37Monitor	CVE-2026-73080No exploit	SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedleseaweedfs · seaweedfs · CWE-918 Pre-auth SSRF	Critical9.3	—	0.5%	Aug 11, 2026
30Monitor	CVE-2026-72545No exploit	OpenSignLabs OpenSign - Insecure Direct Object Referenceopensignlabs · opensign · CWE-639 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Aug 11, 2026
28Monitor	CVE-2026-72546No exploit	Attendize Attendize - Insecure Direct Object Referenceattendize · attendize · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Aug 11, 2026
28Monitor	CVE-2026-72547No exploit	Attendize Attendize - Insecure Direct Object Referenceattendize · attendize · CWE-639 Broken access control (IDOR)	High7.1	—	0.2%	Aug 11, 2026
30Monitor	CVE-2026-72548No exploit	OpenSignLabs OpenSign - Information Disclosureopensignlabs · opensign · CWE-200 Pre-auth Auth bypass Info leak	High7.5	—	0.6%	Aug 11, 2026
39Monitor	CVE-2026-72550Proof of concept	Friendica Friendica - SQL Injectionfriendica · friendica · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.6%	Aug 11, 2026
35Monitor	CVE-2026-72551No exploit	Apioo Fusio - Remote Code Executionapioo · fusio · CWE-78 RCE Command injection	High8.8	—	1.0%	Aug 11, 2026
30Monitor	CVE-2026-72552No exploit	Dub Dub - Server-Side Request Forgerydub · dub · CWE-918 Pre-auth SSRF	High7.5	—	0.6%	Aug 11, 2026
32Monitor	CVE-2026-72555No exploit	Peppermint Lab Peppermint - Broken Access Controlpeppermint lab · peppermint · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 11, 2026
35Monitor	CVE-2026-72556No exploit	ZoneMinder ZoneMinder - Remote Code Executionzoneminder · zoneminder · CWE-78 RCE Command injection	High8.8	—	1.0%	Aug 11, 2026
35Monitor	CVE-2026-72557No exploit	Cockpit CMS Cockpit CMS - Unrestricted File Uploadcockpit cms · cockpit cms · CWE-434 RCE File upload	High8.8	—	0.4%	Aug 11, 2026
35Monitor	CVE-2026-72558No exploit	CiviCRM CiviCRM - SQL Injectioncivicrm · civicrm · CWE-89 SQL injection	High8.8	—	0.4%	Aug 11, 2026
35Monitor	CVE-2026-72561No exploit	Peppermint Lab Peppermint - Broken Access Controlpeppermint lab · peppermint · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Aug 11, 2026
35Monitor	CVE-2026-72562No exploit	Pimcore pimcore admin-ui-classic-bundle - SQL Injectionpimcore · pimcore admin-ui-classic-bundle · CWE-89 RCE SQL injection	High8.8	—	0.4%	Aug 11, 2026
32Monitor	CVE-2026-72563No exploit	BadChoice Handesk - Broken Access Controlbadchoice · handesk · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 11, 2026
32Monitor	CVE-2026-72595No exploit	BadChoice Handesk - Broken Access Controlbadchoice · handesk · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 11, 2026
32Monitor	CVE-2026-72596No exploit	Ghost Foundation Ghost - Broken Access Controlghost foundation · ghost · CWE-284 Broken access control (IDOR)	High8.1	—	0.3%	Aug 11, 2026
39Monitor	CVE-2026-72599No exploit	e107 e107 - SQL Injectione107 · e107 · CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.6%	Aug 11, 2026
30Monitor	CVE-2026-72600No exploit	Idurar IDURAR ERP CRM - Broken Access Controlidurar · idurar erp crm · CWE-284 Pre-auth Auth bypass Broken access control (IDOR)	High7.5	—	0.6%	Aug 11, 2026
30Monitor	CVE-2026-72601No exploit	CSZ CMS CSZ CMS - Broken Access Controlcsz cms · csz cms · CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.6%	Aug 11, 2026
30Monitor	CVE-2026-72602No exploit	AsyncFuncAI deepwiki-open - Path Traversalasyncfuncai · deepwiki-open · CWE-22 Pre-auth Auth bypass Path traversal	High7.5	—	0.7%	Aug 11, 2026
40Plan	CVE-2026-72603No exploit	wg-easy wg-easy - OS Command Injectionwg-easy · wg-easy · CWE-78 RCE Command injection	Critical9.9	—	2.2%	Aug 11, 2026
30Monitor	CVE-2026-72605No exploit	Swing Music Swing Music - Missing Authenticationswing music · swing music · CWE-306 Pre-auth Auth bypass	High7.5	—	0.5%	Aug 11, 2026
30Monitor	CVE-2026-72606No exploit	Pinry Pinry - Server-Side Request Forgerypinry · pinry · CWE-918 Pre-auth SSRF	High7.5	—	0.4%	Aug 11, 2026
28Monitor	CVE-2026-72607No exploit	Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Agekoha community · koha · CWE-89 SQL injection	High7.1	—	0.4%	Aug 11, 2026
28Monitor	CVE-2026-72609No exploit	Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.plkoha community · koha · CWE-89 SQL injection	High7.1	—	0.3%	Aug 11, 2026
32Monitor	CVE-2026-20715No exploit	Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard ManageabCWE-20 Pre-auth	High8.2	—	0.4%	Aug 11, 2026
28Monitor	CVE-2026-20716No exploit	Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege.intel · xeon 634 firmware · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.2	—	0.0%	Aug 11, 2026
33Monitor	CVE-2026-20727No exploit	Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.intel · proset\/wireless wifi · CWE-476 Pre-auth Memory safety	High8.3	—	0.5%	Aug 11, 2026
28Monitor	CVE-2026-20739No exploit	Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of seintel · proset\/wireless wifi · CWE-754 Pre-auth	High7.1	—	0.2%	Aug 11, 2026
33Monitor	CVE-2026-20741No exploit	Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.intel · proset\/wireless wifi · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.3	—	0.1%	Aug 11, 2026
28Monitor	CVE-2026-20745No exploit	Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.intel · proset\/wireless wifi · CWE-787 Pre-auth Memory safety	High7.1	—	0.2%	Aug 11, 2026
28Monitor	CVE-2026-20747No exploit	Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.intel · proset\/wireless wifi · CWE-754 Pre-auth	High7.1	—	0.2%	Aug 11, 2026
28Monitor	CVE-2026-20749No exploit	Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege.intel · proset\/wireless wifi · CWE-125 Pre-auth Memory safety	High7.2	—	0.2%	Aug 11, 2026
33Monitor	CVE-2026-20776No exploit	Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.intel · proset\/wireless wifi · CWE-754 Pre-auth	High8.3	—	0.5%	Aug 11, 2026
28Monitor	CVE-2026-20778No exploit	Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.intel · proset\/wireless wifi · CWE-125 Pre-auth Memory safety	High7.0	—	0.4%	Aug 11, 2026
28Monitor	CVE-2026-20787No exploit	Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of serintel · proset\/wireless wifi · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Aug 11, 2026
33Monitor	CVE-2026-20789No exploit	Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation ofintel · proset\/wireless wifi · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.4	—	0.1%	Aug 11, 2026
28Monitor	CVE-2026-20795No exploit	Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial ofintel · proset\/wireless wifi · CWE-119 Pre-auth Memory safety	High7.1	—	0.2%	Aug 11, 2026
28Monitor	CVE-2026-20878No exploit	Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of serintel · proset\/wireless wifi · CWE-476 Pre-auth Memory safety	High7.1	—	0.2%	Aug 11, 2026

CVE-2026-48161
37Monitor
react18-use was vulnerable to malicious code execution via compromised commits
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
dai-shi · react18-useAug 10, 2026
CVE-2026-8718
33Monitor
Out-of-bounds write in DTLS peer Connection ID getsockopt (`TLS_DTLS_PEER_CID_VALUE`) in Zephyr net sockets/TLS
HighCVSS 8.4No exploitEPSS 0%
- Memory safety
zephyrproject · zephyrAug 10, 2026
CVE-2026-8917
33Monitor
Untrusted Pointer Dereference in ASUS GPU Tweak III, GPUTweakII, AI Suite3, and VGAdll: An IOCTL vulnerability allows a local attacker to wr
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
asus · gpu tweak iiiAug 10, 2026
CVE-2026-34265
39Monitor
Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver and ABAP Platform
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
sap_se · sap netweaver and abap platformAug 11, 2026
CVE-2026-44758
36Monitor
Code Injection vulnerability in Manufacturing Integration and Intelligence
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
sap_se · sap manufacturing integration and intelligenceAug 11, 2026
CVE-2026-44763
30Monitor
Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence
HighCVSS 7.6No exploitEPSS 0%
- Path traversal
sap_se · sap manufacturing integration and intelligenceAug 11, 2026
CVE-2026-44764
29Monitor
Missing Authorization Check in SAP Manufacturing Integration and Intelligence
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
sap_se · sap manufacturing integration and intelligenceAug 11, 2026
CVE-2026-44765
29Monitor
Missing Authorization Check in SAP Manufacturing Integration and Intelligence
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
sap_se · sap manufacturing integration and intelligenceAug 11, 2026
CVE-2026-58230
28Monitor
Multiple vulnerabilities in SAP Business AI Platform (Approuter)
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Open redirect
sap · approuterAug 11, 2026
CVE-2026-58243
35Monitor
Privilege Escalation vulnerability in SAP ABAP Developer Tools
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
sap_se · sap abap developer toolsAug 11, 2026
CVE-2026-66763
31Monitor
Credentials disclosure in SAP BusinessObjects Business Intelligence Platform (Central Management Server)
HighCVSS 7.9No exploitEPSS 0%
- Local privilege escalation
- Hard-coded credentials
sap_se · sap businessobjects business intelligence platform (central management server)Aug 11, 2026
CVE-2026-19516
36Monitor
CVE-2026-19516 CVE Record
CriticalCVSS 9.1Proof of conceptEPSS 0%
- SSRF
grafana · grafana mcp serverAug 11, 2026
CVE-2026-16053
35Monitor
Zohocorp ManageEngine M365 Manager Plus and M365 Security Plus versions below 4820 are affected to Authenticated Path Traversal vulnerabilit
HighCVSS 8.5No exploitEPSS 1%
- Path traversal
zohocorp · manageengine m365 manager plusAug 11, 2026
CVE-2026-19424
34Monitor
Inventec Appliances｜Chiline Cloud - Insecure Direct Object Reference
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
inventec appliances · chiline cloudAug 11, 2026
CVE-2026-71217
30Monitor
Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabling remote denial of service via resource exhaustion
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat enterprise linux 10Aug 11, 2026
CVE-2026-19425
37Monitor
Win Men Intermational｜Travel Agency Management System - SQL Injection
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
win men intermational · travel agency management systemAug 11, 2026
CVE-2026-13716
36Monitor
Path Traversal: '.../...//' in Crafty Controller
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Path traversal
craftycontrol · crafty controllerAug 11, 2026
CVE-2026-4757
28Monitor
A VAPIX API parameter had improper input validation which could allow code execution and potentially lead to a privilege escalation.
HighCVSS 7.2No exploitEPSS 0%
axis communications ab · axis osAug 11, 2026
CVE-2026-19418
29Monitor
TYPO3 CMS - Broken Access Control in Backend and Install Tool
HighCVSS 7.3No exploitEPSS 0%
- Broken access control (IDOR)
- XSS
typo3 · typo3 cmsAug 11, 2026
CVE-2026-10579
39Monitor
Picketlink-federation: auth bypass in picketlink saml unsolicited-response
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15554
29Monitor
Undertow-core: undertow: authentication bypass via ajp ssl_cert/is_ssl forgery
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15555
35Monitor
Jboss-marshalling-river: wildfly-clustering-infinispan-marshalling: jboss deserialization rce via unfiltered river unmarshaller
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15556
32Monitor
Picketlink-federation: picketlink saml 2.0 auth bypass via missing assertions
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
- Weak crypto
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15560
32Monitor
Openjdk-orb: unauthed class loading via iiop in eap
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15561
30Monitor
Undertow-core: oom via missing limits in chunked trailer in eap's undertow
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15562
30Monitor
Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pre-authentication denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15563
29Monitor
Wildfly-iiop-openjdk: missing authentication on eap's iiop nameservice leads to mitm or dos
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15565
30Monitor
Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint with @serverendpoint class with any @onmessage method
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
- Memory safety
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-15567
30Monitor
Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on the iiop listener
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat jboss enterprise application platform 7.4.25Aug 11, 2026
CVE-2026-72693
31Monitor
Kbd: local privilege escalation in openvt via incorrect process owner verification allowing passwordless root login
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
red hat · red hat enterprise linux 10Aug 11, 2026
CVE-2026-72694
28Monitor
Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
red hat · red hat enterprise linux 10Aug 11, 2026
CVE-2026-73160
34Monitor
cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
misp · cti-transmuteAug 11, 2026
CVE-2026-50058
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-50059
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-50060
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-50061
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-50062
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-50063
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-50064
29Monitor
A vulnerability has been identified in Solid Edge SE2025 (All versions < V225.0 Update 15), Solid Edge SE2026 (All versions < V226.0 Update
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · solid edge se2025Aug 11, 2026
CVE-2026-64629
29Monitor
A vulnerability has been identified in Parasolid V38.0 (All versions < V38.0.235), Parasolid V38.1 (All versions < V38.1.230).
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
siemens · parasolid v38.0Aug 11, 2026
CVE-2026-72744
27Monitor
Nuxt before 4.5.1 Information Disclosure via Chrome DevTools
MediumCVSS 6.9Proof of conceptEPSS 0%
- Info leak
nuxt · nuxtAug 11, 2026
CVE-2026-46670
40Plan
YesWiki: Unauthenticated SQL Injection
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- SQL injection
yeswiki · yeswikiAug 11, 2026
CVE-2026-51584
39Monitor
An issue in usememos v0.27.1 allows a remote attacker to achieve account takeover via the ssoCredentials branch of the SignIn handler in ser
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
Aug 11, 2026
CVE-2026-58231
40Plan
Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
CriticalCVSS 10.0Proof of conceptEPSS 0%
- pre-auth RCE
sap_se · sap commerce cloud (data hub adapter)Aug 11, 2026
CVE-2026-72920
39Monitor
SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative control
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
seaweedfs · seaweedfsAug 11, 2026
CVE-2026-72921
32Monitor
SeaweedFS: Filer JWT allowed_prefixes literal prefix match allows cross-tenant access to sibling paths
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
seaweedfs · seaweedfsAug 11, 2026
CVE-2026-19546
35Monitor
Dbi: incomplete fix for cve-2026-14380 dbi: arbitrary code execution via caller-influenced profile attribute
HighCVSS 8.8No exploitEPSS 0%
- RCE
red hat · red hat enterprise linux 10Aug 11, 2026
CVE-2026-13737
36Monitor
Command Restriction Bypass
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
commvault · commvaultAug 11, 2026
CVE-2026-13738
36Monitor
Improper Authorization Validation
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
commvault · commvaultAug 11, 2026
CVE-2026-13739
35Monitor
Server-Side Request Forgery (SSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SSRF
commvault · commvaultAug 11, 2026
CVE-2026-50236
29Monitor
Openshift/console: authenticated ssrf with full response reflection and path neutralization via dev console webhook helpers in openshift console
HighCVSS 7.4No exploitEPSS 0%
- SSRF
red hat · red hat openshift container platform 4.14Aug 11, 2026
CVE-2026-50237
29Monitor
Openshift/console: namespace tenant ssrf with egress bypass, catalog poisoning, and admin-mediated supply chain escalation via projecthelmchartrepository in ope
HighCVSS 7.4No exploitEPSS 0%
- SSRF
red hat · red hat openshift container platform 4.12Aug 11, 2026
CVE-2026-72533
35Monitor
Portainer Portainer CE - Authentication Bypass
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
portainer · portainer ceAug 11, 2026
CVE-2026-72534
35Monitor
Authentik Security authentik - Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%
authentik security · authentikAug 11, 2026
CVE-2026-72535
34Monitor
Chaskiq Chaskiq - Missing Authentication
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
chaskiq · chaskiqAug 11, 2026
CVE-2026-72536
34Monitor
Chaskiq Chaskiq - Missing Authentication
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
chaskiq · chaskiqAug 11, 2026
CVE-2026-72537
35Monitor
Authentik Security authentik - Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%
authentik security · authentikAug 11, 2026
CVE-2026-72538
35Monitor
PrefectHQ Prefect - Argument Injection
HighCVSS 8.8No exploitEPSS 0%
- RCE
prefecthq · prefectAug 11, 2026
CVE-2026-72543
30Monitor
OpenSignLabs OpenSign - Insecure Direct Object Reference
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
opensignlabs · opensignAug 11, 2026
CVE-2026-72544
30Monitor
OpenSignLabs OpenSign - Insufficient Verification of Data Authenticity
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
opensignlabs · opensignAug 11, 2026
CVE-2026-73080
37Monitor
SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.FetchAndWriteNeedle
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SSRF
seaweedfs · seaweedfsAug 11, 2026
CVE-2026-72545
30Monitor
OpenSignLabs OpenSign - Insecure Direct Object Reference
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
opensignlabs · opensignAug 11, 2026
CVE-2026-72546
28Monitor
Attendize Attendize - Insecure Direct Object Reference
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
attendize · attendizeAug 11, 2026
CVE-2026-72547
28Monitor
Attendize Attendize - Insecure Direct Object Reference
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
attendize · attendizeAug 11, 2026
CVE-2026-72548
30Monitor
OpenSignLabs OpenSign - Information Disclosure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
opensignlabs · opensignAug 11, 2026
CVE-2026-72550
39Monitor
Friendica Friendica - SQL Injection
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- SQL injection
friendica · friendicaAug 11, 2026
CVE-2026-72551
35Monitor
Apioo Fusio - Remote Code Execution
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
apioo · fusioAug 11, 2026
CVE-2026-72552
30Monitor
Dub Dub - Server-Side Request Forgery
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
dub · dubAug 11, 2026
CVE-2026-72555
32Monitor
Peppermint Lab Peppermint - Broken Access Control
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
peppermint lab · peppermintAug 11, 2026
CVE-2026-72556
35Monitor
ZoneMinder ZoneMinder - Remote Code Execution
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
zoneminder · zoneminderAug 11, 2026
CVE-2026-72557
35Monitor
Cockpit CMS Cockpit CMS - Unrestricted File Upload
HighCVSS 8.8No exploitEPSS 0%
- RCE
- File upload
cockpit cms · cockpit cmsAug 11, 2026
CVE-2026-72558
35Monitor
CiviCRM CiviCRM - SQL Injection
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
civicrm · civicrmAug 11, 2026
CVE-2026-72561
35Monitor
Peppermint Lab Peppermint - Broken Access Control
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
peppermint lab · peppermintAug 11, 2026
CVE-2026-72562
35Monitor
Pimcore pimcore admin-ui-classic-bundle - SQL Injection
HighCVSS 8.8No exploitEPSS 0%
- RCE
- SQL injection
pimcore · pimcore admin-ui-classic-bundleAug 11, 2026
CVE-2026-72563
32Monitor
BadChoice Handesk - Broken Access Control
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
badchoice · handeskAug 11, 2026
CVE-2026-72595
32Monitor
BadChoice Handesk - Broken Access Control
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
badchoice · handeskAug 11, 2026
CVE-2026-72596
32Monitor
Ghost Foundation Ghost - Broken Access Control
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
ghost foundation · ghostAug 11, 2026
CVE-2026-72599
39Monitor
e107 e107 - SQL Injection
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
e107 · e107Aug 11, 2026
CVE-2026-72600
30Monitor
Idurar IDURAR ERP CRM - Broken Access Control
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
idurar · idurar erp crmAug 11, 2026
CVE-2026-72601
30Monitor
CSZ CMS CSZ CMS - Broken Access Control
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
csz cms · csz cmsAug 11, 2026
CVE-2026-72602
30Monitor
AsyncFuncAI deepwiki-open - Path Traversal
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Path traversal
asyncfuncai · deepwiki-openAug 11, 2026
CVE-2026-72603
40Plan
wg-easy wg-easy - OS Command Injection
CriticalCVSS 9.9No exploitEPSS 2%
- RCE
- Command injection
wg-easy · wg-easyAug 11, 2026
CVE-2026-72605
30Monitor
Swing Music Swing Music - Missing Authentication
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
swing music · swing musicAug 11, 2026
CVE-2026-72606
30Monitor
Pinry Pinry - Server-Side Request Forgery
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
pinry · pinryAug 11, 2026
CVE-2026-72607
28Monitor
Koha Community Koha - Stored SQL Injection via agefield in Automatic Item Modifications by Age
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
koha community · kohaAug 11, 2026
CVE-2026-72609
28Monitor
Koha Community Koha - SQL Injection via ORDER BY Direction in acqui/parcels.pl
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
koha community · kohaAug 11, 2026
CVE-2026-20715
32Monitor
Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Manageab
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
Aug 11, 2026
CVE-2026-20716
28Monitor
Improper access control for some Intel(R) Processors within Ring 3: User Applications may allow an escalation of privilege.
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
intel · xeon 634 firmwareAug 11, 2026
CVE-2026-20727
33Monitor
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20739
28Monitor
Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of se
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20741
33Monitor
Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.
HighCVSS 8.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20745
28Monitor
Out-of-bounds write for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of service.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20747
28Monitor
Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20749
28Monitor
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow an escalation of privilege.
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20776
33Monitor
Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service.
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20778
28Monitor
Out-of-bounds read for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service.
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20787
28Monitor
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of ser
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20789
33Monitor
Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation of
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20795
28Monitor
Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026
CVE-2026-20878
28Monitor
Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow a denial of ser
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
intel · proset\/wireless wifiAug 11, 2026