By publication date

Exploited and new serious CVEs: August 2026

7,171 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 62 of 72

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-80195No exploit	Kimai before 2.63.0 Team Membership Removal via APIkimai · kimai · CWE-841	High8.7	—	0.3%	Aug 26, 2026
34Monitor	CVE-2026-80214No exploit	LibreNMS Virtualisation Discovery Module RCElibrenms · librenms · CWE-78 RCE Command injection	High8.6	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-15203No exploit	Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid softwaredanfoss · ic7-automation sp · CWE-1191 Pre-auth	Critical9.3	—	0.4%	Aug 26, 2026
21Monitor	CVE-2026-19094No exploit	Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parametersunknown · tutor lms · CWE-89 Pre-auth SQL injection	Medium5.3	—	0.3%	Aug 26, 2026
32Monitor	CVE-2026-19718No exploit	BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recoveryunknown · blogvault backup & staging · CWE-287 Pre-auth Auth bypass	High8.1	—	0.3%	Aug 26, 2026
28Monitor	CVE-2026-19760No exploit	WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Headeremrevona · wp fastest cache – wordpress cache plugin · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Aug 26, 2026
28Monitor	CVE-2026-58093No exploit	Kernel use-after-free via tty ioctlsfreebsd · freebsd · CWE-362 Local privilege escalation Race condition	High7.0	—	0.0%	Aug 26, 2026
31Monitor	CVE-2026-58094No exploit	TOCTOU race in POSIX shared memory large page configurationfreebsd · freebsd · CWE-367 Local privilege escalation Race condition	High7.8	—	0.1%	Aug 26, 2026
35Monitor	CVE-2026-58095No exploit	ppp(8): incorrect length calculation in mp_Enddisc()freebsd · freebsd · CWE-122 RCE Memory safety	High8.8	—	0.6%	Aug 26, 2026
35Monitor	CVE-2026-58096No exploit	ppp(8): missing length validation in LcpDecodeConfig()freebsd · freebsd · CWE-130 RCE	High8.8	—	0.6%	Aug 26, 2026
31Monitor	CVE-2026-58097No exploit	ppp(8): missing length validation in mp_SetEnddisc()freebsd · freebsd · CWE-122 RCE Memory safety	High7.8	—	0.1%	Aug 26, 2026
28Monitor	CVE-2026-74851No exploit	Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callbackunknown · pods · CWE-94 RCE	High7.2	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-74928No exploit	WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routesunknown · project manager · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Aug 26, 2026
30Monitor	CVE-2026-75797No exploit	AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameterunknown · ai engine · CWE-22 Path traversal	High7.7	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-77693No exploit	Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajaxunknown · order tip for woocommerce · CWE-73 Path traversal	High8.7	—	0.4%	Aug 26, 2026
28Monitor	CVE-2026-18331No exploit	Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameterstrategy11team · formidable forms – wordpress form builder for contact forms, calculators, quizzes & more · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Aug 26, 2026
39Monitor	CVE-2026-18431Proof of concept	Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Writethemefusion · avada (fusion) builder · CWE-862 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	0.8%	Aug 26, 2026
30Monitor	CVE-2026-18884No exploit	WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameterswpgenie · woocommerce lottery · CWE-89 Pre-auth SQL injection	High7.5	—	0.5%	Aug 26, 2026
35Monitor	CVE-2026-75977No exploit	Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookiekitae-park · mang board wp · CWE-269	High8.8	—	0.8%	Aug 26, 2026
35Monitor	CVE-2026-78236No exploit	Insecure PIN derivation mechanism in Admin By Request (ABR)admin by request (abr) · admin by request (abr) · CWE-284 Local privilege escalation Broken access control (IDOR)	High8.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-78237No exploit	Insufficient input validation in Admin By Request (ABR)admin by request (abr) · admin by request (abr) · CWE-20 Local privilege escalation	High7.8	—	0.1%	Aug 26, 2026
32Monitor	CVE-2026-18664No exploit	Wrong interpretation of ACL rangesnlnetlabs · nsd · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-19401No exploit	Remote UDP DoS by sending multiple DNS Cookie optionsnlnetlabs · nsd · CWE-400 Pre-auth Denial of service	High8.2	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-19538No exploit	Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLSnlnetlabs · nsd · CWE-290 Pre-auth Auth bypass	High8.2	—	0.4%	Aug 26, 2026
39Monitor	CVE-2026-77533No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protubiquiti inc · unifi protect application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
34Monitor	CVE-2026-80233No exploit	CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Uploadcayin technology · cayin cms-ws · CWE-434 RCE File upload	High8.6	—	0.8%	Aug 26, 2026
37Monitor	CVE-2026-80235No exploit	Thinking Software Technology｜EFence - Arbitrary File Uploadthinking software technology · efence · CWE-434 pre-auth RCE File upload	Critical9.3	—	0.8%	Aug 26, 2026
35Monitor	CVE-2026-80236No exploit	Thinking Software Technology｜Efence - SQL Injectionthinking software technology · efence · CWE-89 Pre-auth SQL injection	High8.8	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-80237No exploit	Thinking Software Technology｜Efence - Arbitrary File Uploadthinking software technology · efence · CWE-434 RCE File upload	High8.7	—	0.7%	Aug 26, 2026
34Monitor	CVE-2026-80192No exploit	better-auth SSO before 1.6.27 Domain Ownership Authentication Bypassbetter-auth · sso · CWE-287 Auth bypass Race condition	High8.6	—	0.3%	Aug 26, 2026
34Monitor	CVE-2026-80196No exploit	Kimai before 2.58.0 Authentication Bypass via Password Reset Linkkimai · kimai · CWE-640 Pre-auth Auth bypass	High8.7	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-80197No exploit	Kimai before 2.57.0 Improper Authorization via Favorite Endpointskimai · kimai · CWE-639 Broken access control (IDOR)	High8.7	—	0.2%	Aug 26, 2026
34Monitor	CVE-2026-80198No exploit	Kimai before 2.56.0 Information Disclosure via config() Twig Functionkimai · kimai · CWE-693 Pre-auth	High8.7	—	0.4%	Aug 26, 2026
37Monitor	CVE-2026-80202No exploit	Kimai before 2.56.0 Authorization Bypass via TimesheetVoterkimai · kimai · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.3%	Aug 26, 2026
30Monitor	CVE-2026-16444Proof of concept	Improper Validation of File Paths in TeamViewer Desktop Clientsteamviewer · full client, host, quicksupport & portable · CWE-73 Pre-auth Path traversal	High7.5	—	0.4%	Aug 26, 2026
35Monitor	CVE-2026-18794No exploit	OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwritecalcprogrammer1 · openrgb · CWE-1288 Pre-auth	High8.8	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-19042No exploit	Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handlingteamviewer · full client · CWE-78 pre-auth RCE Command injection	High8.8	—	1.7%	Aug 26, 2026
35Monitor	CVE-2026-59682No exploit	Arbitrary file overwrite and deletion local and remote in OpenRGBcalcprogrammer1 · openrgb · CWE-73 Pre-auth Path traversal	High8.8	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-59683No exploit	OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled stringscalcprogrammer1 · openrgb · CWE-73 Pre-auth Path traversal	Critical9.3	—	0.5%	Aug 26, 2026
39Monitor	CVE-2026-77534No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain deviubiquiti inc · unifi os server · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-77535No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Netubiquiti inc · unifi network application · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
39Monitor	CVE-2026-77536No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain deviubiquiti inc · unifi os server · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 26, 2026
40Plan	CVE-2026-77537No exploit	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to ubiquiti inc · unifi protect application · CWE-20 pre-auth RCE Command injection	Critical10.0	—	1.6%	Aug 26, 2026
32Monitor	CVE-2026-77538No exploit	A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to esubiquiti inc · unifi connect application · CWE-284 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Aug 26, 2026
36Monitor	CVE-2026-77539No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS ubiquiti inc · unifi os server · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
36Monitor	CVE-2026-77540No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS ubiquiti inc · unifi os server · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
36Monitor	CVE-2026-77541No exploit	A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Netwoubiquiti inc · unifi network application · CWE-284 Broken access control (IDOR)	Critical9.1	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-77542Proof of concept	A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterubiquiti inc · uid enterprise agent · CWE-20 RCE Command injection	Critical9.1	—	1.2%	Aug 26, 2026
39Monitor	CVE-2026-77543No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acceubiquiti inc · unifi access application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
36Monitor	CVE-2026-77545No exploit	A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability fubiquiti inc · unifi os server · CWE-489	Critical9.0	—	0.4%	Aug 26, 2026
28Monitor	CVE-2026-80346No exploit	StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Viewsstarrocks · starrocks · CWE-862 Broken access control (IDOR)	High7.1	—	0.5%	Aug 26, 2026
34Monitor	CVE-2026-80347No exploit	mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Bracketskazuph · mcp-fetch · CWE-918 Pre-auth SSRF	High8.7	—	0.3%	Aug 26, 2026
34Monitor	CVE-2026-80348No exploit	TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpointstarscloud · tarsweb · CWE-862 Broken access control (IDOR)	High8.7	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-80349No exploit	TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parametertarscloud · tarsweb · CWE-290 Pre-auth Auth bypass	Critical9.3	—	0.6%	Aug 26, 2026
28Monitor	CVE-2026-80350No exploit	OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URLoneuptime · oneuptime · CWE-918 SSRF	High7.1	—	0.4%	Aug 26, 2026
39Monitor	CVE-2026-18080Proof of concept	ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachmentwedevs · erp: complete hr, accounting & crm suite built for woocommerce · CWE-434 Pre-auth File upload	Critical9.8	—	0.8%	Aug 26, 2026
39Monitor	CVE-2026-77546No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acceubiquiti inc · unifi access application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
39Monitor	CVE-2026-77547No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acceubiquiti inc · unifi access application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
39Monitor	CVE-2026-77548No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protubiquiti inc · unifi protect application · CWE-20 RCE Command injection	Critical9.9	—	1.4%	Aug 26, 2026
36Monitor	CVE-2026-77549No exploit	A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulneraubiquiti inc · unifi os server · CWE-93 Pre-auth Auth bypass	Critical9.0	—	0.5%	Aug 26, 2026
40Plan	CVE-2026-77550No exploit	A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devicubiquiti inc · unifi os server · CWE-93 Pre-auth Auth bypass	Critical10.0	—	0.8%	Aug 26, 2026
36Monitor	CVE-2026-77551No exploit	A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Unubiquiti inc · unifi connect display cast pro · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.0	—	0.3%	Aug 26, 2026
39Monitor	CVE-2026-77552No exploit	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video ubiquiti inc · unifi enterprise audio/video bridge · CWE-20 pre-auth RCE Command injection	Critical9.8	—	1.6%	Aug 26, 2026
39Monitor	CVE-2026-77553No exploit	A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Accessubiquiti inc · unifi access application · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 26, 2026
40Plan	CVE-2026-77554No exploit	A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exeubiquiti inc · unifi talk application · CWE-20 pre-auth RCE Command injection	Critical10.0	—	1.6%	Aug 26, 2026
39Monitor	CVE-2026-77557No exploit	A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalatubiquiti inc · unifi protect ai key · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-80203No exploit	Grav before 1.0.18 Authentication Bypass via Scoped API Keygetgrav · grav · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.3	—	0.5%	Aug 26, 2026
37Monitor	CVE-2026-80204No exploit	Grav before 1.0.18 Authentication Bypass via Scoped API Keygetgrav · grav · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.3	—	0.2%	Aug 26, 2026
34Monitor	CVE-2026-80205No exploit	NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regexnltk · nltk · CWE-1333 Pre-auth Denial of service	High8.7	—	0.6%	Aug 26, 2026
32Monitor	CVE-2026-80206No exploit	NLTK 3.10.2 Regular Expression Denial of Service via tgrepnltk · nltk · CWE-1333 Pre-auth Denial of service	High8.2	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-15985No exploit	Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Loginradiustheme · classified listing - mobile number verification · CWE-289 Pre-auth Auth bypass	High8.1	—	0.5%	Aug 26, 2026
34Monitor	CVE-2026-12587No exploit	Embedded credentials in Virtuagymresamania · virtuagym · CWE-798 Hard-coded credentials	High8.6	—	0.3%	Aug 26, 2026
31Monitor	CVE-2026-77658No exploit	Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project filesgnome · dia · CWE-121 Memory safety	High7.8	—	0.2%	Aug 26, 2026
29Monitor	CVE-2026-79619No exploit	OpenZFS: user-namespace capability check allows unprivileged local authorization bypassopenzfs · openzfs · CWE-863 Local privilege escalation Broken access control (IDOR)	High7.3	—	0.1%	Aug 26, 2026
37Monitor	CVE-2026-12717No exploit	Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injectiongoogle cloud · bigquery data transfer service · CWE-74 RCE	Critical9.4	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-15990No exploit	Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameterstrategy11 · formidable charts · CWE-22 Pre-auth Path traversal	High7.5	—	0.9%	Aug 26, 2026
32Monitor	CVE-2026-18252No exploit	Inclusion of Functionality from Untrusted Control Sphere in GitLabgitlab · gitlab · CWE-829	High8.1	—	0.5%	Aug 26, 2026
30Monitor	CVE-2026-19271No exploit	Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenktübi̇tak bi̇lgem software technologies research institute · liderahenk · CWE-90 Pre-auth	High7.5	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-73108No exploit	RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodecrustdesk · rustdesk · CWE-770 Pre-auth Denial of service	High8.7	—	0.7%	Aug 26, 2026
36Monitor	CVE-2026-75896No exploit	Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenktübi̇tak bi̇lgem software technologies research institute · liderahenk · CWE-798 Pre-auth Hard-coded credentials	Critical9.1	—	0.4%	Aug 26, 2026
34Monitor	CVE-2026-75960No exploit	Insufficiently Protected Credentials in Rently Smart Homerently · smart home · CWE-522 Info leak	High8.7	—	0.3%	Aug 26, 2026
35Monitor	CVE-2026-77532No exploit	A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwiubiquiti inc · edgemax edgeswitch · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.2%	Aug 26, 2026
34Monitor	CVE-2026-54511No exploit	@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keysdahlia · logtape · CWE-93 Pre-auth	High8.6	—	0.4%	Aug 26, 2026
38Monitor	CVE-2026-54523No exploit	Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kukyverno · kyverno · CWE-862 Broken access control (IDOR)	Critical9.6	—	0.4%	Aug 26, 2026
29Monitor	CVE-2026-54550No exploit	IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entriesizpack · izpack · CWE-22 Pre-auth Path traversal	High7.4	—	0.4%	Aug 26, 2026
32Monitor	CVE-2026-54556No exploit	Http4s: HTTP/2 Denial of Service with Ember Backendhttp4s · http4s · CWE-409 Pre-auth	High8.2	—	0.5%	Aug 26, 2026
39Monitor	CVE-2026-74737No exploit	net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAGlinux · linux Pre-auth	Critical9.8	—	0.5%	Aug 26, 2026
30Monitor	CVE-2026-74741No exploit	net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enablinglinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-74742No exploit	veth: fix queue index used to wake the peer txq in veth_polllinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Aug 26, 2026
37Monitor	CVE-2026-74751No exploit	riscv: lib: Fix ZBB strnlen reading past count boundarylinux · linux Pre-auth	Critical9.4	—	0.4%	Aug 26, 2026
36Monitor	CVE-2026-75062No exploit	Eval Injection in google/langfun via default lf.query protocolgoogle · langfun · CWE-95 pre-auth RCE	Critical9.2	—	0.3%	Aug 26, 2026
39Monitor	CVE-2026-80519No exploit	ovpn: finish crypto callback cleanup before peer releaselinux · linux Pre-auth	Critical9.8	—	0.6%	Aug 26, 2026
30Monitor	CVE-2026-80520No exploit	ovpn: fix NULL dereference when killing missing keylinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Aug 26, 2026
28Monitor	CVE-2026-80523No exploit	clk: spacemit: k3: set hdma clock as criticallinux · linux Denial of service	High7.1	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80531No exploit	xfs: avoid UAF on sc->tempip in xrep_tempfile_createlinux · linux	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80537No exploit	xfs: fix off-by-one in rtrefcount btree root level validationlinux · linux	High7.8	—	0.1%	Aug 26, 2026
28Monitor	CVE-2026-80538No exploit	xfs: propagate errors from xfs_rtginode_loadlinux · linux	High7.1	—	0.1%	Aug 26, 2026
28Monitor	CVE-2026-80555No exploit	s390/vfio_ccw: Free all memory if cp_init() failslinux · linux Denial of service	High7.1	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80556No exploit	mmc: atmel-mci: Fix use-after-free in atmci_remove due to race conditionlinux · linux Race condition	High7.8	—	0.1%	Aug 26, 2026
31Monitor	CVE-2026-80559No exploit	Input: sur40 - fix input device registration orderinglinux · linux	High7.8	—	0.1%	Aug 26, 2026

CVE-2026-80195
34Monitor
Kimai before 2.63.0 Team Membership Removal via API
HighCVSS 8.7No exploitEPSS 0%
kimai · kimaiAug 26, 2026
CVE-2026-80214
34Monitor
LibreNMS Virtualisation Discovery Module RCE
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
librenms · librenmsAug 26, 2026
CVE-2026-15203
37Monitor
Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
danfoss · ic7-automation spAug 26, 2026
CVE-2026-19094
21Monitor
Tutor LMS < 4.0.6 - Unauthenticated SQLi via 'offset' and 'item_per_page' Parameters
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · tutor lmsAug 26, 2026
CVE-2026-19718
32Monitor
BlogVault, MalCare and WP Remote 5.16 - 6.62 - Unauthenticated Site Takeover via Connection Key Recovery
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · blogvault backup & stagingAug 26, 2026
CVE-2026-19760
28Monitor
WP Fastest Cache <= 1.5.0 - Unauthenticated Stored Cross-Site Scripting via HTTP Host Header
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
emrevona · wp fastest cache – wordpress cache pluginAug 26, 2026
CVE-2026-58093
28Monitor
Kernel use-after-free via tty ioctls
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Race condition
freebsd · freebsdAug 26, 2026
CVE-2026-58094
31Monitor
TOCTOU race in POSIX shared memory large page configuration
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Race condition
freebsd · freebsdAug 26, 2026
CVE-2026-58095
35Monitor
ppp(8): incorrect length calculation in mp_Enddisc()
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
freebsd · freebsdAug 26, 2026
CVE-2026-58096
35Monitor
ppp(8): missing length validation in LcpDecodeConfig()
HighCVSS 8.8No exploitEPSS 0%
- RCE
freebsd · freebsdAug 26, 2026
CVE-2026-58097
31Monitor
ppp(8): missing length validation in mp_SetEnddisc()
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
freebsd · freebsdAug 26, 2026
CVE-2026-74851
28Monitor
Pods < 3.3.9.1 - Author+ RCE via Shortcode Display Callback
HighCVSS 7.2No exploitEPSS 0%
- RCE
unknown · podsAug 26, 2026
CVE-2026-74928
30Monitor
WP Project Manager 2.1.0 - 4.0.6 - Unauthenticated Subscriber Account Creation via Trello Import Routes
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · project managerAug 26, 2026
CVE-2026-75797
30Monitor
AI Engine 3.3.3 - 3.7.1 - Subscriber+ Arbitrary File Read via 'url' Parameter
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
unknown · ai engineAug 26, 2026
CVE-2026-77693
34Monitor
Order Tip for WooCommerce < 1.6.0 - Shop Manager+ Arbitrary File Deletion via delete_exported_csv_file_ajax
HighCVSS 8.7No exploitEPSS 0%
- Path traversal
unknown · order tip for woocommerceAug 26, 2026
CVE-2026-18331
28Monitor
Formidable Forms <= 6.33.1 - Unauthenticated Stored Cross-Site Scripting via 'frm_user_id' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
strategy11team · formidable forms – wordpress form builder for contact forms, calculators, quizzes & moreAug 26, 2026
CVE-2026-18431
39Monitor
Avada <= 7.16 and Fusion Builder <= 3.16 - Unauthenticated Remote Code Execution via Arbitrary File Write
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
themefusion · avada (fusion) builderAug 26, 2026
CVE-2026-18884
30Monitor
WooCommerce Lottery <= 2.2.9 - Unauthenticated Time-Based SQL Injection via 'orderby' and 'order' Parameters
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
wpgenie · woocommerce lotteryAug 26, 2026
CVE-2026-75977
35Monitor
Mang Board WP <= 2.3.7 - Authenticated (Subscriber+) Privilege Escalation to Forged Authentication Cookie
HighCVSS 8.8No exploitEPSS 0%
kitae-park · mang board wpAug 26, 2026
CVE-2026-78236
35Monitor
Insecure PIN derivation mechanism in Admin By Request (ABR)
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
admin by request (abr) · admin by request (abr)Aug 26, 2026
CVE-2026-78237
31Monitor
Insufficient input validation in Admin By Request (ABR)
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
admin by request (abr) · admin by request (abr)Aug 26, 2026
CVE-2026-18664
32Monitor
Wrong interpretation of ACL ranges
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
nlnetlabs · nsdAug 26, 2026
CVE-2026-19401
32Monitor
Remote UDP DoS by sending multiple DNS Cookie options
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
nlnetlabs · nsdAug 26, 2026
CVE-2026-19538
32Monitor
Bypass of BLOCKED ACL items on proxy protocol port over TCP or TLS
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
nlnetlabs · nsdAug 26, 2026
CVE-2026-77533
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi protect applicationAug 26, 2026
CVE-2026-80233
34Monitor
CAYIN Technology｜CAYIN CMS-WS/CMS-SE/SMP - Arbitrary File Upload
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
cayin technology · cayin cms-wsAug 26, 2026
CVE-2026-80235
37Monitor
Thinking Software Technology｜EFence - Arbitrary File Upload
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- File upload
thinking software technology · efenceAug 26, 2026
CVE-2026-80236
35Monitor
Thinking Software Technology｜Efence - SQL Injection
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- SQL injection
thinking software technology · efenceAug 26, 2026
CVE-2026-80237
34Monitor
Thinking Software Technology｜Efence - Arbitrary File Upload
HighCVSS 8.7No exploitEPSS 0%
- RCE
- File upload
thinking software technology · efenceAug 26, 2026
CVE-2026-80192
34Monitor
better-auth SSO before 1.6.27 Domain Ownership Authentication Bypass
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
- Race condition
better-auth · ssoAug 26, 2026
CVE-2026-80196
34Monitor
Kimai before 2.58.0 Authentication Bypass via Password Reset Link
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
kimai · kimaiAug 26, 2026
CVE-2026-80197
34Monitor
Kimai before 2.57.0 Improper Authorization via Favorite Endpoints
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
kimai · kimaiAug 26, 2026
CVE-2026-80198
34Monitor
Kimai before 2.56.0 Information Disclosure via config() Twig Function
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kimai · kimaiAug 26, 2026
CVE-2026-80202
37Monitor
Kimai before 2.56.0 Authorization Bypass via TimesheetVoter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
kimai · kimaiAug 26, 2026
CVE-2026-16444
30Monitor
Improper Validation of File Paths in TeamViewer Desktop Clients
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
teamviewer · full client, host, quicksupport & portableAug 26, 2026
CVE-2026-18794
35Monitor
OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
calcprogrammer1 · openrgbAug 26, 2026
CVE-2026-19042
36Monitor
Command Injection in TeamViewer Desktop Client for Linux through Chat Link Handling
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
teamviewer · full clientAug 26, 2026
CVE-2026-59682
35Monitor
Arbitrary file overwrite and deletion local and remote in OpenRGB
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
calcprogrammer1 · openrgbAug 26, 2026
CVE-2026-59683
37Monitor
OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Path traversal
calcprogrammer1 · openrgbAug 26, 2026
CVE-2026-77534
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77535
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Net
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi network applicationAug 26, 2026
CVE-2026-77536
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devi
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77537
40Plan
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Command injection
ubiquiti inc · unifi protect applicationAug 26, 2026
CVE-2026-77538
32Monitor
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to es
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ubiquiti inc · unifi connect applicationAug 26, 2026
CVE-2026-77539
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77540
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77541
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Netwo
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi network applicationAug 26, 2026
CVE-2026-77542
36Monitor
A malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enter
CriticalCVSS 9.1Proof of conceptEPSS 1%
- RCE
- Command injection
ubiquiti inc · uid enterprise agentAug 26, 2026
CVE-2026-77543
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77545
36Monitor
A malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability f
CriticalCVSS 9.0No exploitEPSS 0%
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-80346
28Monitor
StarRocks through 4.0.13 Missing Authorization on DROP MATERIALIZED VIEW for Legacy Synchronous Materialized Views
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
starrocks · starrocksAug 26, 2026
CVE-2026-80347
34Monitor
mcp-fetch through 1.6.3 Server-Side Request Forgery via Unstripped IPv6 Literal Brackets
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
kazuph · mcp-fetchAug 26, 2026
CVE-2026-80348
34Monitor
TarsWeb through 3.0.16 Missing Authorization on Patch Deploy, Download and Delete Endpoints
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
tarscloud · tarswebAug 26, 2026
CVE-2026-80349
37Monitor
TarsWeb through 3.0.14 Authentication Bypass via Spoofed X-Forwarded-For and uid Parameter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
tarscloud · tarswebAug 26, 2026
CVE-2026-80350
28Monitor
OneUptime before 12.0.7 Server-Side Request Forgery via IPv4-Mapped IPv6 Webhook URL
HighCVSS 7.1No exploitEPSS 0%
- SSRF
oneuptime · oneuptimeAug 26, 2026
CVE-2026-18080
39Monitor
ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- File upload
wedevs · erp: complete hr, accounting & crm suite built for woocommerceAug 26, 2026
CVE-2026-77546
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77547
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Acce
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77548
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Prot
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
- Command injection
ubiquiti inc · unifi protect applicationAug 26, 2026
CVE-2026-77549
36Monitor
A malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnera
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77550
40Plan
A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devic
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
ubiquiti inc · unifi os serverAug 26, 2026
CVE-2026-77551
36Monitor
A malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in Un
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ubiquiti inc · unifi connect display cast proAug 26, 2026
CVE-2026-77552
39Monitor
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
ubiquiti inc · unifi enterprise audio/video bridgeAug 26, 2026
CVE-2026-77553
39Monitor
A malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
ubiquiti inc · unifi access applicationAug 26, 2026
CVE-2026-77554
40Plan
A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to exe
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Command injection
ubiquiti inc · unifi talk applicationAug 26, 2026
CVE-2026-77557
39Monitor
A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalat
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ubiquiti inc · unifi protect ai keyAug 26, 2026
CVE-2026-80203
37Monitor
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
getgrav · gravAug 26, 2026
CVE-2026-80204
37Monitor
Grav before 1.0.18 Authentication Bypass via Scoped API Key
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
getgrav · gravAug 26, 2026
CVE-2026-80205
34Monitor
NLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 26, 2026
CVE-2026-80206
32Monitor
NLTK 3.10.2 Regular Expression Denial of Service via tgrep
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
nltk · nltkAug 26, 2026
CVE-2026-15985
32Monitor
Classified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
radiustheme · classified listing - mobile number verificationAug 26, 2026
CVE-2026-12587
34Monitor
Embedded credentials in Virtuagym
HighCVSS 8.6No exploitEPSS 0%
- Hard-coded credentials
resamania · virtuagymAug 26, 2026
CVE-2026-77658
31Monitor
Dia: dia: stack buffer overflow in bus object via unvalidated handle count in project files
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
gnome · diaAug 26, 2026
CVE-2026-79619
29Monitor
OpenZFS: user-namespace capability check allows unprivileged local authorization bypass
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
openzfs · openzfsAug 26, 2026
CVE-2026-12717
37Monitor
Remote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
google cloud · bigquery data transfer serviceAug 26, 2026
CVE-2026-15990
30Monitor
Formidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
strategy11 · formidable chartsAug 26, 2026
CVE-2026-18252
32Monitor
Inclusion of Functionality from Untrusted Control Sphere in GitLab
HighCVSS 8.1No exploitEPSS 0%
gitlab · gitlabAug 26, 2026
CVE-2026-19271
30Monitor
Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
tübi̇tak bi̇lgem software technologies research institute · liderahenkAug 26, 2026
CVE-2026-73108
34Monitor
RustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
rustdesk · rustdeskAug 26, 2026
CVE-2026-75896
36Monitor
Use of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
tübi̇tak bi̇lgem software technologies research institute · liderahenkAug 26, 2026
CVE-2026-75960
34Monitor
Insufficiently Protected Credentials in Rently Smart Home
HighCVSS 8.7No exploitEPSS 0%
- Info leak
rently · smart homeAug 26, 2026
CVE-2026-77532
35Monitor
A malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwi
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ubiquiti inc · edgemax edgeswitchAug 26, 2026
CVE-2026-54511
34Monitor
@logtape/syslog: syslog log injection via unescaped control characters and unvalidated SD-NAME keys
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
dahlia · logtapeAug 26, 2026
CVE-2026-54523
38Monitor
Kyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including ku
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyvernoAug 26, 2026
CVE-2026-54550
29Monitor
IzPack: Path Traversal in UnpackerBase allows writing files outside the installation directory via malicious pack entries
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Path traversal
izpack · izpackAug 26, 2026
CVE-2026-54556
32Monitor
Http4s: HTTP/2 Denial of Service with Ember Backend
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
http4s · http4sAug 26, 2026
CVE-2026-74737
39Monitor
net: ethernet: ti: am65-cpsw-nuss: Fix port_id extraction from SRC TAG
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 26, 2026
CVE-2026-74741
30Monitor
net: ngbe: fix NULL pointer dereference in non-MSI-X interrupt enabling
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-74742
30Monitor
veth: fix queue index used to wake the peer txq in veth_poll
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-74751
37Monitor
riscv: lib: Fix ZBB strnlen reading past count boundary
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
linux · linuxAug 26, 2026
CVE-2026-75062
36Monitor
Eval Injection in google/langfun via default lf.query protocol
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
google · langfunAug 26, 2026
CVE-2026-80519
39Monitor
ovpn: finish crypto callback cleanup before peer release
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxAug 26, 2026
CVE-2026-80520
30Monitor
ovpn: fix NULL dereference when killing missing key
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-80523
28Monitor
clk: spacemit: k3: set hdma clock as critical
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-80531
31Monitor
xfs: avoid UAF on sc->tempip in xrep_tempfile_create
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80537
31Monitor
xfs: fix off-by-one in rtrefcount btree root level validation
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80538
28Monitor
xfs: propagate errors from xfs_rtginode_load
HighCVSS 7.1No exploitEPSS 0%
linux · linuxAug 26, 2026
CVE-2026-80555
28Monitor
s390/vfio_ccw: Free all memory if cp_init() fails
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxAug 26, 2026
CVE-2026-80556
31Monitor
mmc: atmel-mci: Fix use-after-free in atmci_remove due to race condition
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxAug 26, 2026
CVE-2026-80559
31Monitor
Input: sur40 - fix input device registration ordering
HighCVSS 7.8No exploitEPSS 0%
linux · linuxAug 26, 2026