Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2026

7,237 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 60 of 73

  • CVE-2026-24169
    32Monitor

    NVIDIA UFM Enterprise contains a vulnerability in the plugin management API, where an authenticated user with low privileges could inject co

    HighCVSS 8.0No exploitEPSS 0%

    nvidia · unified fabric manager enterprise - gaAug 25, 2026

  • CVE-2026-24170
    35Monitor

    NVIDIA UFM Enterprise contains a vulnerability in the web interface authorization component, where an authenticated user could cause imprope

    HighCVSS 8.8No exploitEPSS 0%

    nvidia · unified fabric manager enterprise - gaAug 25, 2026

  • CVE-2026-24262
    32Monitor

    NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.

    HighCVSS 8.2No exploitEPSS 0%

    nvidia · dgx spark uefiAug 25, 2026

  • CVE-2026-24263
    32Monitor

    NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause a NULL pointer derefere

    HighCVSS 8.2No exploitEPSS 0%

    nvidia · dgx spark uefiAug 25, 2026

  • CVE-2026-47626
    32Monitor

    NVIDIA DGX Spark contains a vulnerability in the system firmware, where a privileged attacker could be able to cause an out-of-bounds write.

    HighCVSS 8.2No exploitEPSS 0%

    nvidia · dgx spark uefiAug 25, 2026

  • CVE-2026-55553
    30Monitor

    urllib: Cross-origin redirects preserve credential-bearing request headers, leading to potential credential leakage

    HighCVSS 7.5No exploitEPSS 0%

    node-modules · urllibAug 25, 2026

  • CVE-2026-55557
    34Monitor

    browse-mcp: Arbitrary file write via unconfined download and state paths

    HighCVSS 8.6No exploitEPSS 0%

    that1drifter · browse-mcpAug 25, 2026

  • CVE-2026-55571
    32Monitor

    djust authentication bypass: a login_required / on_mount LiveView mount redirect does not close the WebSocket, allowing an unauthenticated client to dispatch ev

    HighCVSS 8.2No exploitEPSS 0%

    djust-org · djustAug 25, 2026

  • CVE-2026-55585
    35Monitor

    QWED: Authenticated Remote Code Execution via Unsafe SymPy `parse_expr()`

    HighCVSS 8.8No exploitEPSS 0%

    qwed-ai · qwed-verificationAug 25, 2026

  • CVE-2026-59184
    28Monitor

    OpenEXR: OpenEXRUtil FlatImageChannel row nonzero dataWindow heap OOB write

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-59186
    28Monitor

    OpenEXR: Heap out-of-bounds write in TiledRgbaInputFile via integer overflow on 32-bit (ILP32) builds

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-59187
    28Monitor

    OpenEXR: exrmetrics deep pixelmode heap buffer overflow

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-59189
    28Monitor

    OpenEXR: Out-of-bounds read in DeepImageChannel::row() for non-zero dataWindow origin

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-64201
    34Monitor

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    HighCVSS 8.5No exploitEPSS 0%

    ni · labviewAug 25, 2026

  • CVE-2026-64202
    34Monitor

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    HighCVSS 8.5No exploitEPSS 0%

    ni · labviewAug 25, 2026

  • CVE-2026-64203
    34Monitor

    Out-of-Bounds Read Vulnerability in NI LabVIEW when loading VI

    HighCVSS 8.5No exploitEPSS 0%

    ni · labviewAug 25, 2026

  • CVE-2026-64204
    34Monitor

    Out-of-Bounds Write Vulnerability in NI LabVIEW when loading VI

    HighCVSS 8.5No exploitEPSS 0%

    ni · labviewAug 25, 2026

  • CVE-2026-75496
    34Monitor

    Webkul QloApps improper file upload validation

    HighCVSS 8.6No exploitEPSS 0%

    webkul · qloappsAug 25, 2026

  • CVE-2026-75497
    34Monitor

    Webkul QloApps SQL injection

    HighCVSS 8.6No exploitEPSS 0%

    webkul · qloappsAug 25, 2026

  • CVE-2026-75498
    34Monitor

    Webkul QloApps SQL injection

    HighCVSS 8.6No exploitEPSS 0%

    webkul · qloappsAug 25, 2026

  • CVE-2026-79655
    31Monitor

    Sos: sos: path traversal in sos clean tar extraction via unvalidated symlink/hardlink targets leads to arbitrary file write

    HighCVSS 7.8No exploitEPSS 0%

    red hat · red hat enterprise linux 10Aug 25, 2026

  • CVE-2026-26211
    19Monitor

    Ekushey Project Manager CRM 5.0 Stored XSS via System Name Field

    MediumCVSS 4.8Proof of conceptEPSS 0%

    creativeitem · ekushey project manager crmAug 25, 2026

  • CVE-2026-48417
    31Monitor

    Substance3D - Sampler | Stack-based Buffer Overflow (CWE-121)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48418
    31Monitor

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48419
    31Monitor

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48420
    31Monitor

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48421
    31Monitor

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48422
    31Monitor

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48423
    31Monitor

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48424
    31Monitor

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48425
    31Monitor

    Substance3D - Sampler | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-48426
    31Monitor

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-48427
    31Monitor

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-48428
    31Monitor

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-48430
    31Monitor

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-48431
    31Monitor

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-48432
    31Monitor

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-48433
    31Monitor

    Substance3D - Designer | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-55637
    35Monitor

    genieacs-mcp: DNS rebinding reaches local GenieACS MCP Streamable HTTP transport

    HighCVSS 8.8No exploitEPSS 0%

    geiserx · genieacs-mcpAug 25, 2026

  • CVE-2026-59982
    28Monitor

    OpenEXR: DWAA InputFile AC buffer overflow on ILP32 platforms

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-71360
    30Monitor

    CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)

    HighCVSS 7.5No exploitEPSS 0%

    adobe · c2paAug 25, 2026

  • CVE-2026-71382
    31Monitor

    Substance3D - Sampler | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d samplerAug 25, 2026

  • CVE-2026-71399
    31Monitor

    Adobe XD | Buffer Overflow (CWE-120)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · xdAug 25, 2026

  • CVE-2026-71442
    30Monitor

    CAI Content Credentials | Integer Underflow (Wrap or Wraparound) (CWE-191)

    HighCVSS 7.5No exploitEPSS 0%

    adobe · c2paAug 25, 2026

  • CVE-2026-71443
    30Monitor

    CAI Content Credentials | Improper Input Validation (CWE-20)

    HighCVSS 7.5No exploitEPSS 0%

    adobe · c2paAug 25, 2026

  • CVE-2026-71564
    31Monitor

    Substance3D - Designer | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d designerAug 25, 2026

  • CVE-2026-75749
    31Monitor

    Substance3D - Painter | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-75750
    31Monitor

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-75766
    31Monitor

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-75767
    31Monitor

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-75768
    31Monitor

    Substance3D - Painter | Untrusted Search Path (CWE-426)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-75769
    31Monitor

    Substance3D - Painter | Heap-based Buffer Overflow (CWE-122)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-75770
    31Monitor

    Substance3D - Painter | Out-of-bounds Write (CWE-787)

    HighCVSS 7.8No exploitEPSS 0%

    adobe · substance 3d painterAug 25, 2026

  • CVE-2026-76193
    40Plan

    Adobe Campaign Classic (ACC) | Server-Side Request Forgery (SSRF) (CWE-918)

    CriticalCVSS 10.0No exploitEPSS 1%

    adobe · campaignAug 25, 2026

  • CVE-2026-76195
    41Plan

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    CriticalCVSS 10.0No exploitEPSS 3%

    adobe · campaignAug 25, 2026

  • CVE-2026-76197
    41Plan

    Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)

    CriticalCVSS 10.0No exploitEPSS 3%

    adobe · campaignAug 25, 2026

  • CVE-2026-15310
    8Monitor

    zipfile: bzip2/LZMA/Zstandard members decompress without a max_length bound, defeating chunked-read memory limits

    LowCVSS 2.1No exploitEPSS 0%

    python software foundation · cpythonAug 25, 2026

  • CVE-2026-55609
    28Monitor

    sublinear-time-solver: Arbitrary file write in consciousness-explorer / sublinear-time-solver MCP export_state

    HighCVSS 7.1No exploitEPSS 0%

    ruvnet · sublinear-time-solverAug 25, 2026

  • CVE-2026-55620
    30Monitor

    eml_parser: DoS via deeply nested parens in Received headers

    HighCVSS 7.5No exploitEPSS 0%

    govcert-lu · eml_parserAug 25, 2026

  • CVE-2026-78379
    36Monitor

    Consent bypass in python_repl tool via batch kwargs forwarding in Amazon Strands Agents Tools

    CriticalCVSS 9.2No exploitEPSS 0%

    amazon · strands-agents-toolsAug 25, 2026

  • CVE-2026-79786
    28Monitor

    Coroot 1.20.2 through 1.24.5 Unvalidated Redirect URI in MCP OAuth Client Registration

    HighCVSS 7.0No exploitEPSS 0%

    coroot · corootAug 25, 2026

  • CVE-2026-79787
    37Monitor

    Alluxio through 2.9.5 S3 REST Proxy Authentication Bypass via Unverified Request Signature

    CriticalCVSS 9.3No exploitEPSS 0%

    alluxio · alluxioAug 25, 2026

  • CVE-2026-79788
    28Monitor

    Dradis Community Edition 5.1.0 through 5.2.0 Server-Side Request Forgery via Unrestricted AI Provider Address

    HighCVSS 7.1No exploitEPSS 0%

    dradis · dradis-ceAug 25, 2026

  • CVE-2026-80049
    34Monitor

    Airbyte Platform through 2.0.0 Cross-Workspace Authorization Bypass via Caller-Supplied workspaceId

    HighCVSS 8.7No exploitEPSS 0%

    airbytehq · airbyte-platformAug 25, 2026

  • CVE-2026-80050
    28Monitor

    ContiNew Admin through 4.1.0 Missing Authorization and File-Type Allowlist on Multipart Upload Endpoints

    HighCVSS 7.1No exploitEPSS 0%

    continew-org · continew-adminAug 25, 2026

  • GHSA-9qhg-99ww-9mqc
    32Monitor

    utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target

    HighCVSS 8.2No exploit

    PyPI · utcp-httpAug 25, 2026

  • GHSA-8cp3-qxj6-px34
    28Monitor

    utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion

    HighCVSS 7.1No exploit

    PyPI · utcp-httpAug 25, 2026

  • CVE-2026-43670
    35Monitor

    A Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts.

    HighCVSS 8.8No exploitEPSS 0%

    apple · safariAug 25, 2026

  • CVE-2026-45018
    39Monitor

    Chainlit: Command injection via MCP stdio transport allows unauthenticated remote code execution

    CriticalCVSS 9.8No exploitEPSS 1%

    chainlit · chainlitAug 25, 2026

  • CVE-2026-45019
    28Monitor

    Chainlit: SSRF via MCP SSE and streamable-http transports allows unauthenticated internal network access

    HighCVSS 7.2No exploitEPSS 0%

    chainlit · chainlitAug 25, 2026

  • CVE-2026-55099
    30Monitor

    icalendar: Algorithmic Complexity in Equality

    HighCVSS 7.5No exploitEPSS 0%

    collective · icalendarAug 25, 2026

  • CVE-2026-59981
    28Monitor

    OpenEXR: Heap OOB read in SampleCountChannel row when using nonzero dataWindow

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-64705
    22Monitor

    A buffer overflow was addressed with improved bounds checking.

    MediumCVSS 5.5Proof of conceptEPSS 0%

    apple · macosAug 25, 2026

  • CVE-2026-66152
    35Monitor

    A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file

    HighCVSS 8.8No exploitEPSS 0%

    sonicwall · netextenderAug 25, 2026

  • CVE-2026-66153
    28Monitor

    The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to mani

    HighCVSS 7.0No exploitEPSS 0%

    sonicwall · netextenderAug 25, 2026

  • CVE-2026-68513
    28Monitor

    OpenEXR: Heap buffer overflow in PyOpenEXR from literal/prefixed RGB channel name collision

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-68515
    28Monitor

    OpenEXR: Heap out-of-bounds write in exrmultiview with subsampled channel union

    HighCVSS 7.1No exploitEPSS 0%

    academysoftwarefoundation · openexrAug 25, 2026

  • CVE-2026-74932
    30Monitor

    WP Fastest Cache 0.9.0.3 - 1.5.0 - Unauthenticated Stored XSS via Host Header Cache Poisoning

    HighCVSS 7.5No exploitEPSS 0%

    unknown · wp fastest cacheAug 25, 2026

  • CVE-2026-79774
    37Monitor

    Winter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy

    CriticalCVSS 9.3No exploitEPSS 0%

    wintercms · winterAug 25, 2026

  • CVE-2026-39113
    16Monitor

    Buffer Overflow vulnerability in SQLite affected version source snapshots/builds containing Fossil check-in 8bdc0d485e3ad0c7a1e818da66f10695

    MediumCVSS 4.0Proof of conceptEPSS 0%

    Aug 25, 2026

  • CVE-2026-51368
    39Monitor

    An issue in Beijing Tongtech Co., Ltd tongweb v.7.0.24 in the Spring HttpInovkerServiceExporter component allows a remote attacker to execut

    CriticalCVSS 9.8No exploitEPSS 0%

    Aug 25, 2026

  • CVE-2026-52489
    31Monitor

    Buffer Overflow vulnerability in gpac 31becc9e08b88e525a4a62013a4000de1c0f8fd9 allows an attacker to execute arbitrary code via the svgNameT

    HighCVSS 7.8No exploitEPSS 0%

    Aug 25, 2026

  • CVE-2026-52491
    33Monitor

    An issue in libtiff 85f2ac8e0b01cb7db2bbecf4a3b891bdbef67938 allows an attacker to execute arbitrary code via the libtiff/tools/thumbnail.c:

    HighCVSS 8.4No exploitEPSS 0%

    Aug 25, 2026

  • CVE-2026-65081
    39Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its installation process, where an attacker could cause execution of untrusted code.

    CriticalCVSS 9.8No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65082
    31Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its migration command, where a local attacker could cause code injection.

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65083
    39Monitor

    NVIDIA OpenShell for Linux contains a vulnerability in its sandbox provisioning API, where an attacker could cause an incomplete list of dis

    CriticalCVSS 9.9No exploitEPSS 0%

    nvidia · openshellAug 25, 2026

  • CVE-2026-65084
    39Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its deployment process, where an attacker could cause improper certificate validation.

    CriticalCVSS 9.8No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65089
    31Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its status and logs plugin commands, where an attacker could cause OS command injectio

    HighCVSS 7.8No exploitEPSS 1%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65090
    31Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its NIM management component, where an attacker could cause OS command injection.

    HighCVSS 7.8No exploitEPSS 1%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65091
    36Monitor

    NVIDIA OpenShell for all platforms contains a vulnerability where a malicious gateway could cause OS command injection.

    HighCVSS 8.8No exploitEPSS 2%

    nvidia · openshellAug 25, 2026

  • CVE-2026-65092
    34Monitor

    NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy.

    HighCVSS 8.5No exploitEPSS 0%

    nvidia · openshellAug 25, 2026

  • CVE-2026-65093
    39Monitor

    NVIDIA OpenShell for Linux contains a vulnerability where an attacker could cause a sandbox escape.

    CriticalCVSS 9.9No exploitEPSS 0%

    nvidia · openshellAug 25, 2026

  • CVE-2026-65096
    31Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in the Telegram bridge component, where an attacker could cause an OS command injection.

    HighCVSS 7.8No exploitEPSS 1%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65097
    35Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its installation scripts, where an attacker could cause a download of code without int

    HighCVSS 8.8No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65098
    39Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its remote-access helper workflow, where an attacker could cause weak authentication.

    CriticalCVSS 9.8No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65099
    31Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its command-line interface, where an attacker could cause OS command injection.

    HighCVSS 7.8No exploitEPSS 1%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-65105
    32Monitor

    NVIDIA NemoClaw for Linux contains a vulnerability in its inference server setup, where a remote attacker may access the inference service w

    HighCVSS 8.1No exploitEPSS 0%

    nvidia · nemoclawAug 25, 2026

  • CVE-2026-75465
    30Monitor

    The /api.php/user/get_list endpoint in Maccms v10 v2026.1000.4055 is vulnerable to an Incorrect Access Control issue.

    HighCVSS 7.5No exploitEPSS 0%

    Aug 25, 2026

  • CVE-2026-77357
    34Monitor

    Mesop: DoS in /hot-reload endpoint allows unauthenticated attacker to exhaust worker threads and crash the server

    HighCVSS 8.7No exploitEPSS 0%

    mesop-dev · mesopAug 25, 2026

  • CVE-2026-77680
    21Monitor

    Libsoup3: libsoup: quadratic cpu denial of service in http range coalescing after cve-2025-32907 fix

    MediumCVSS 5.3Proof of conceptEPSS 0%

    red hat · red hat enterprise linux 10Aug 25, 2026