By publication date

Exploited and new serious CVEs: August 2026

7,237 records · 20 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 23 of 73

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-16863No exploit	IBM i is Affected By Out-of-Bounds Read Vulnerability []ibm · i · CWE-125 Memory safety	High7.7	—	0.4%	Aug 12, 2026
32Monitor	CVE-2026-16904No exploit	IBM i is Affected By improper privilege management in Navigator for iibm · i · CWE-269 RCE	High8.1	—	0.5%	Aug 12, 2026
35Monitor	CVE-2026-16906No exploit	IBM i is Affected By Multiple Vulnerabilities in Domain Name Systemibm · i · CWE-78 RCE Command injection	High8.8	—	0.7%	Aug 12, 2026
30Monitor	CVE-2026-16907No exploit	IBM i is Affected By Multiple Vulnerabilities in the Debug Serveribm · i · CWE-787 RCE Memory safety	High7.6	—	0.5%	Aug 12, 2026
30Monitor	CVE-2026-16931No exploit	IBM i is Affected By A Denial of Service Vulnerability []ibm · i · CWE-835 Pre-auth Denial of service	High7.5	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-16956No exploit	IBM Db2 Mirror for i is vulnerable to OS command injection []ibm · db2 mirror for i · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.8%	Aug 12, 2026
35Monitor	CVE-2026-17110No exploit	IBM i is Affected By Multiple Vulnerabilities in SQLibm · i · CWE-250 RCE	High8.8	—	0.7%	Aug 12, 2026
39Monitor	CVE-2026-17218No exploit	IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []ibm · i · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.7%	Aug 12, 2026
30Monitor	CVE-2026-17271No exploit	IBM i is Affected By Multiple Vulnerabilities in the Debug Serveribm · i · CWE-770 Pre-auth Denial of service	High7.5	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-17276No exploit	IBM i is Affected By Multiple Vulnerabilities in Navigator for iibm · i · CWE-269	Critical9.9	—	0.4%	Aug 12, 2026
31Monitor	CVE-2026-17418No exploit	IBM i is Affected By Multiple Vulnerabilities in SQLibm · i · CWE-89 SQL injection	High7.8	—	0.2%	Aug 12, 2026
33Monitor	CVE-2026-18235No exploit	IBM i is Affected By Multiple Vulnerabilities in Navigator for iibm · i · CWE-78 RCE Command injection	High8.3	—	0.5%	Aug 12, 2026
35Monitor	CVE-2026-18669No exploit	IBM i is Affected By A Privilege Escalation Vulnerability []ibm · i · CWE-250 RCE	High8.8	—	0.7%	Aug 12, 2026
35Monitor	CVE-2026-18713No exploit	IBM i is Affected By Multiple Vulnerabilities in Navigator for iibm · i · CWE-269	High8.8	—	0.5%	Aug 12, 2026
63This week	CVE-2026-42018Weaponized	Anonymous user token generation exposure in JFrog Artifactoryjfrog · artifactory · CWE-287 Pre-auth Auth bypass	High7.5	KEV	9.8%	Aug 12, 2026
35Monitor	CVE-2026-49467No exploit	TOTP enrollment hijack: password gate skipped due to unawaited promisesmp46 · pingvin-share-x · CWE-303	High8.8	—	0.6%	Aug 12, 2026
35Monitor	CVE-2026-69106No exploit	Potential cache poisoning in JFrog Artifactoryjfrog · artifactory · CWE-20	High8.8	—	0.5%	Aug 12, 2026
34Monitor	CVE-2026-73298No exploit	Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processesmicrosoft · container-migration-solution-accelerator · CWE-639 Broken access control (IDOR)	High8.7	—	0.9%	Aug 12, 2026
41Plan	CVE-2026-73299No exploit	Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderermicrosoft · prompty · CWE-94 pre-auth RCE SSTI	Critical10.0	—	1.7%	Aug 12, 2026
30Monitor	GHSA-jwjp-4649-v8jpNo exploit	SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsingNuGet · SIPSorcery · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	—	Aug 12, 2026
30Monitor	GHSA-pfvm-w89x-94jwNo exploit	SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)NuGet · SIPSorcery · CWE-248 Pre-auth Denial of service	High7.5	—	—	Aug 12, 2026
34Monitor	CVE-2026-12004No exploit	Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Accessibm · security verify access · CWE-134	High8.7	—	0.4%	Aug 12, 2026
28Monitor	CVE-2026-12005No exploit	Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Accessibm · security verify access · CWE-78 RCE Command injection	High7.2	—	0.5%	Aug 12, 2026
32Monitor	CVE-2026-13267No exploit	Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Accessibm · security verify access · CWE-302 Auth bypass	High8.1	—	0.3%	Aug 12, 2026
35Monitor	CVE-2026-13361No exploit	IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Executionibm · informix dynamic server · CWE-121 RCE Memory safety	High8.8	—	0.4%	Aug 12, 2026
35Monitor	CVE-2026-17082No exploit	IBM i is Affected By Multiple Vulnerabilities in the Debug Serveribm · i · CWE-269	High8.8	—	0.4%	Aug 12, 2026
39Monitor	CVE-2026-17083No exploit	IBM i is Affected By Multiple Vulnerabilities in the Debug Serveribm · i · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.8%	Aug 12, 2026
39Monitor	CVE-2026-17111No exploit	IBM i is Affected By Multiple Vulnerabilities in SQLibm · i · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Aug 12, 2026
35Monitor	CVE-2026-17417No exploit	IBM i is Affected By Remote Code Execution Vulnerabilities [, ]ibm · i · CWE-78 RCE Command injection	High8.8	—	0.7%	Aug 12, 2026
35Monitor	CVE-2026-17642No exploit	IBM i is Affected By Remote Code Execution Vulnerabilities [, ]ibm · i · CWE-78 RCE Command injection	High8.8	—	0.7%	Aug 12, 2026
39Monitor	CVE-2026-19656No exploit	ScadaLTS Authenticated Remote Code Executionscada-lts · scada-lts · CWE-862 RCE Broken access control (IDOR)	Critical9.9	—	0.5%	Aug 12, 2026
31Monitor	CVE-2026-46731No exploit	Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.dell · display and peripheral manager · CWE-290 RCE Auth bypass Local privilege escalation	High7.8	—	0.1%	Aug 12, 2026
31Monitor	CVE-2026-59914No exploit	Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.dell · display and peripheral manager · CWE-284 RCE Auth bypass Local privilege escalation	High7.8	—	0.1%	Aug 12, 2026
31Monitor	CVE-2026-59916No exploit	Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.dell · display and peripheral manager · CWE-290 RCE Auth bypass Local privilege escalation	High7.8	—	0.1%	Aug 12, 2026
31Monitor	CVE-2026-59917No exploit	Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.dell · display and peripheral manager · CWE-284 RCE Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Aug 12, 2026
39Monitor	CVE-2026-62420No exploit	Cross-project cluster migration bypasses project restrictions via cluster notification flagcanonical · lxd · CWE-863 Broken access control (IDOR)	Critical9.9	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-63293No exploit	Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as rootcanonical · lxd · CWE-59	Critical9.9	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-63294No exploit	Root RCE via image backup.yaml symlinkcanonical · lxd · CWE-59 RCE	Critical9.9	—	0.8%	Aug 12, 2026
39Monitor	CVE-2026-63296No exploit	Project restriction bypass via instance migration config overridecanonical · lxd · CWE-863 Broken access control (IDOR)	Critical9.9	—	0.4%	Aug 12, 2026
39Monitor	CVE-2026-63297No exploit	Cross-project instance copy bypasses target project restrictions via TOCTOU in config mergecanonical · lxd · CWE-367 Race condition	Critical9.9	—	0.3%	Aug 12, 2026
39Monitor	CVE-2026-63298No exploit	LXD arbitrary lxc.conf directive injection via NVIDIA instance configurationcanonical · lxd · CWE-78 RCE Command injection	Critical9.9	—	0.6%	Aug 12, 2026
39Monitor	CVE-2026-63299No exploit	Storage volume cross-project move and snapshot restore bypass project disk limitscanonical · lxd · CWE-770 Denial of service	Critical9.9	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-63300No exploit	Cross-project instance move bypasses all project restrictions allowing host command executioncanonical · lxd · CWE-862 RCE Broken access control (IDOR)	Critical9.9	—	0.5%	Aug 12, 2026
30Monitor	CVE-2026-67579No exploit	Filter expression injection via forged keyset pagination cursor in Ashash-hq · ash framework · CWE-89 SQL injection Deserialization	High7.5	—	0.6%	Aug 12, 2026
39Monitor	CVE-2026-72508No exploit	Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (//*)red hat · red hat advanced cluster management for kubernetes 2.11 · CWE-250 RCE	Critical9.9	—	0.8%	Aug 12, 2026
28Monitor	CVE-2026-72786No exploit	Craft CMS 5.0.0-RC1 before 5.10.8 Authentication Bypass via Password Resetcraftcms · cms · CWE-285 Auth bypass Broken access control (IDOR)	High7.1	—	0.4%	Aug 12, 2026
36Monitor	CVE-2026-72789No exploit	SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebookssiyuan-note · siyuan · CWE-862 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.2	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-72793No exploit	SiYuan before v3.7.4 Information Disclosure via /api/system/getConfsiyuan-note · siyuan · CWE-522 Pre-auth Info leak	Critical9.2	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-72794No exploit	siyuan before v3.7.4 Session Cookie Key Disclosure via getConfsiyuan-note · siyuan · CWE-522 Pre-auth Info leak	Critical9.2	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-72795No exploit	SiYuan before v3.7.4 Information Disclosure via Embed Blocksiyuan-note · siyuan · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-72798No exploit	SiYuan before v3.7.4 Information Disclosure via renderAttributeViewsiyuan-note · siyuan · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.4%	Aug 12, 2026
34Monitor	CVE-2026-72801No exploit	SiYuan before v3.7.4 Information Disclosure via Encryption Key Materialsiyuan-note · siyuan · CWE-522 Pre-auth Info leak	High8.7	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-72804No exploit	SiYuan before v3.7.4 Authentication Bypass via Graph Endpointssiyuan-note · siyuan · CWE-200 Pre-auth Auth bypass Info leak	Critical9.2	—	0.4%	Aug 12, 2026
35Monitor	CVE-2026-72807No exploit	SiYuan before v3.7.4 SQL Injection via queryBlocks templatesiyuan-note · siyuan · CWE-89 pre-auth RCE SQL injection	High8.8	—	0.3%	Aug 12, 2026
28Monitor	CVE-2026-72809No exploit	SiYuan before v3.7.4 Authentication Bypass via Localhost Trustsiyuan-note · siyuan · CWE-290 Auth bypass	High7.1	—	0.3%	Aug 12, 2026
39Monitor	CVE-2026-73268No exploit	Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injectionred hat · multicluster engine for kubernetes 2.1 · CWE-94 RCE	Critical9.9	—	0.8%	Aug 12, 2026
39Monitor	CVE-2026-73269No exploit	Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespacered hat · multicluster engine for kubernetes 2.1 · CWE-269	Critical9.9	—	0.5%	Aug 12, 2026
28Monitor	CVE-2026-73326No exploit	CamaleonCMS Missing Authorization via Plugin Administration Endpointsowen2345 · camaleoncms · CWE-862 Broken access control (IDOR) XSS	High7.2	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-73329No exploit	CamaleonCMS Stored XSS via Draft Post Title Creation Endpointowen2345 · camaleoncms · CWE-79 RCE XSS	Critical9.2	—	0.4%	Aug 12, 2026
30Monitor	CVE-2026-73330No exploit	CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Actionowen2345 · camaleoncms · CWE-1336 RCE SSTI	High7.5	—	0.7%	Aug 12, 2026
28Monitor	CVE-2026-73331No exploit	CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Fieldowen2345 · camaleoncms · CWE-89 SQL injection	High7.1	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-73332No exploit	CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Fieldowen2345 · camaleoncms · CWE-89 SQL injection XSS	Critical9.2	—	0.4%	Aug 12, 2026
34Monitor	CVE-2026-73413No exploit	Shescape: Quadratic-time denial of service in flag-protectionericcornelissen · shescape · CWE-400 Pre-auth Denial of service	High8.7	—	0.5%	Aug 12, 2026
36Monitor	CVE-2026-73414No exploit	Shescape: Shell injection via unescaped parentheses on Windows with CMDericcornelissen · shescape · CWE-78 pre-auth RCE Command injection	Critical9.2	—	0.8%	Aug 12, 2026
39Monitor	CVE-2026-10543No exploit	IBM® Db2® is vulnerable to privilege escalation with a specially crafted queryibm · db2 · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.3%	Aug 12, 2026
31Monitor	CVE-2026-13094No exploit	IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilitiesibm · i access client solutions · CWE-94 RCE	High7.8	—	0.2%	Aug 12, 2026
35Monitor	CVE-2026-13105No exploit	IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilitiesibm · i access client solutions · CWE-22 Pre-auth Path traversal	High8.8	—	0.4%	Aug 12, 2026
31Monitor	CVE-2026-13367No exploit	IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utilityibm · informix dynamic server · CWE-284 Local privilege escalation Broken access control (IDOR)	High7.8	—	0.1%	Aug 12, 2026
38Monitor	CVE-2026-13433No exploit	IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilitiesibm · i access client solutions · CWE-494 Pre-auth	Critical9.6	—	0.1%	Aug 12, 2026
29Monitor	CVE-2026-13476No exploit	IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Executionibm · informix dynamic server · CWE-78 pre-auth RCE Command injection	High7.3	—	0.4%	Aug 12, 2026
35Monitor	CVE-2026-13622No exploit	Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to hostred hat · red hat container native virtualization 4.12 · CWE-22 Path traversal	High8.8	—	0.2%	Aug 12, 2026
28Monitor	CVE-2026-14866No exploit	IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilitiesibm · i access client solutions · CWE-798 Hard-coded credentials	High7.1	—	0.1%	Aug 12, 2026
34Monitor	CVE-2026-16033No exploit	Arbitrary file read+write on host via templates/ symlink in malicious imagecanonical · lxd · CWE-22 Path traversal	High8.5	—	0.4%	Aug 12, 2026
28Monitor	CVE-2026-16480No exploit	IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify daibm · db2 · CWE-602	High7.1	—	0.3%	Aug 12, 2026
31Monitor	CVE-2026-16695No exploit	IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilitiesibm · i access client solutions · CWE-78 RCE Command injection	High7.8	—	0.2%	Aug 12, 2026
28Monitor	CVE-2026-18888No exploit	MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character datamongodb · bi connector odbc driver · CWE-787 Memory safety	High7.1	—	0.4%	Aug 12, 2026
38Monitor	CVE-2026-19001No exploit	MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object namesmongodb · bi connector odbc driver · CWE-190 pre-auth RCE Memory safety	Critical9.5	—	0.5%	Aug 12, 2026
35Monitor	CVE-2026-19002No exploit	Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Drivermongodb · bi connector odbc driver · CWE-120 Pre-auth Memory safety	High8.8	—	0.4%	Aug 12, 2026
35Monitor	CVE-2026-19004No exploit	MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parametersmongodb · bi connector odbc driver · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.5%	Aug 12, 2026
30Monitor	CVE-2026-19654No exploit	Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogdrsyslog · rsyslog · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Aug 12, 2026
30Monitor	CVE-2026-65370No exploit	ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks.apple · servicetalk · CWE-444 Pre-auth	High7.5	—	0.3%	Aug 12, 2026
39Monitor	CVE-2026-66898No exploit	Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCEcanonical · lxd · CWE-22 RCE Path traversal	Critical9.9	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-10534No exploit	IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parseribm · db2 · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.3%	Aug 12, 2026
32Monitor	CVE-2026-17485No exploit	IBM i is Affected By Denial of Service Vulnerability []ibm · i · CWE-125 Pre-auth Memory safety	High8.2	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-18749No exploit	The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared.cert/cc · vince · CWE-639 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Aug 12, 2026
33Monitor	CVE-2026-19003No exploit	MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settingsmongodb · bi connector odbc driver · CWE-121 Memory safety	High8.4	—	0.2%	Aug 12, 2026
30Monitor	CVE-2026-71469No exploit	Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dosred hat · red hat advanced cluster management for kubernetes 2.11 · CWE-770 Pre-auth Denial of service	High7.5	—	0.7%	Aug 12, 2026
36Monitor	CVE-2026-71471No exploit	Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container imagered hat · red hat advanced cluster management for kubernetes 2.11 · CWE-829 RCE	Critical9.0	—	1.2%	Aug 12, 2026
34Monitor	CVE-2026-71473No exploit	Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spokered hat · red hat advanced cluster management for kubernetes 2.11 · CWE-915	High8.5	—	0.4%	Aug 12, 2026
30Monitor	CVE-2026-73493No exploit	http4s-blaze-server: Unbounded WebSocket message aggregationhttp4s · blaze · CWE-770 Pre-auth Denial of service	High7.5	—	0.6%	Aug 12, 2026
29Monitor	CVE-2026-73495No exploit	blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)http4s · blaze · CWE-444 Pre-auth	High7.4	—	0.4%	Aug 12, 2026
30Monitor	CVE-2026-73498No exploit	MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachmentsooperset · mcp-atlassian · CWE-22 Path traversal	High7.7	—	0.4%	Aug 12, 2026
28Monitor	CVE-2026-73499No exploit	etcd: Watch API authorization bypass via open-ended range requestsetcd-io · etcd · CWE-863 Broken access control (IDOR)	High7.1	—	0.6%	Aug 12, 2026
34Monitor	CVE-2026-73500No exploit	etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadlineetcd-io · etcd · CWE-770 Pre-auth Denial of service	High8.7	—	0.3%	Aug 12, 2026
36Monitor	CVE-2026-73501No exploit	kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Defaultgetkin · kin-openapi · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Aug 12, 2026
37Monitor	CVE-2026-73519Proof of concept	WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secretwolfsoftwaresystemsltd · wolfstack · CWE-798 pre-auth RCE Auth bypass Hard-coded credentials	Critical9.3	—	1.2%	Aug 12, 2026
30Monitor	CVE-2026-47717Proof of concept	FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurationsfrangoteam · fuxa · CWE-201 Pre-auth	High7.5	—	1.3%	Aug 12, 2026
38Monitor	CVE-2026-49481No exploit	UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmdseriousm4x · upsnap · CWE-78 RCE Command injection SSTI	Critical9.6	—	1.4%	Aug 12, 2026
38Monitor	CVE-2026-71193No exploit	In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to openstack · designate · CWE-863 Broken access control (IDOR)	Critical9.6	—	0.5%	Aug 12, 2026
39Monitor	CVE-2026-16770No exploit	PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source documentmithaldu · pdf::webkit · CWE-88 Pre-auth	Critical9.8	—	0.7%	Aug 13, 2026

CVE-2026-16863
30Monitor
IBM i is Affected By Out-of-Bounds Read Vulnerability []
HighCVSS 7.7No exploitEPSS 0%
- Memory safety
ibm · iAug 12, 2026
CVE-2026-16904
32Monitor
IBM i is Affected By improper privilege management in Navigator for i
HighCVSS 8.1No exploitEPSS 0%
- RCE
ibm · iAug 12, 2026
CVE-2026-16906
35Monitor
IBM i is Affected By Multiple Vulnerabilities in Domain Name System
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · iAug 12, 2026
CVE-2026-16907
30Monitor
IBM i is Affected By Multiple Vulnerabilities in the Debug Server
HighCVSS 7.6No exploitEPSS 0%
- RCE
- Memory safety
ibm · iAug 12, 2026
CVE-2026-16931
30Monitor
IBM i is Affected By A Denial of Service Vulnerability []
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · iAug 12, 2026
CVE-2026-16956
39Monitor
IBM Db2 Mirror for i is vulnerable to OS command injection []
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
ibm · db2 mirror for iAug 12, 2026
CVE-2026-17110
35Monitor
IBM i is Affected By Multiple Vulnerabilities in SQL
HighCVSS 8.8No exploitEPSS 0%
- RCE
ibm · iAug 12, 2026
CVE-2026-17218
39Monitor
IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon []
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · iAug 12, 2026
CVE-2026-17271
30Monitor
IBM i is Affected By Multiple Vulnerabilities in the Debug Server
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · iAug 12, 2026
CVE-2026-17276
39Monitor
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
CriticalCVSS 9.9No exploitEPSS 0%
ibm · iAug 12, 2026
CVE-2026-17418
31Monitor
IBM i is Affected By Multiple Vulnerabilities in SQL
HighCVSS 7.8No exploitEPSS 0%
- SQL injection
ibm · iAug 12, 2026
CVE-2026-18235
33Monitor
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
HighCVSS 8.3No exploitEPSS 0%
- RCE
- Command injection
ibm · iAug 12, 2026
CVE-2026-18669
35Monitor
IBM i is Affected By A Privilege Escalation Vulnerability []
HighCVSS 8.8No exploitEPSS 0%
- RCE
ibm · iAug 12, 2026
CVE-2026-18713
35Monitor
IBM i is Affected By Multiple Vulnerabilities in Navigator for i
HighCVSS 8.8No exploitEPSS 0%
ibm · iAug 12, 2026
CVE-2026-42018
63This week
Anonymous user token generation exposure in JFrog Artifactory
HighCVSS 7.5KEVWeaponizedEPSS 9%
- Pre-auth
- Auth bypass
jfrog · artifactoryAug 12, 2026
CVE-2026-49467
35Monitor
TOTP enrollment hijack: password gate skipped due to unawaited promise
HighCVSS 8.8No exploitEPSS 0%
smp46 · pingvin-share-xAug 12, 2026
CVE-2026-69106
35Monitor
Potential cache poisoning in JFrog Artifactory
HighCVSS 8.8No exploitEPSS 0%
jfrog · artifactoryAug 12, 2026
CVE-2026-73298
34Monitor
Microsoft Container Migration Solution Accelerator: Authenticated IDOR allowing read/write/delete processes
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · container-migration-solution-acceleratorAug 12, 2026
CVE-2026-73299
41Plan
Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- SSTI
microsoft · promptyAug 12, 2026
GHSA-jwjp-4649-v8jp
30Monitor
SIPSorcery vulnerable to Denial of Service via out-of-bounds read in SCTP SACK chunk parsing
HighCVSS 7.5No exploit
- Pre-auth
- Memory safety
- Denial of service
NuGet · SIPSorceryAug 12, 2026
GHSA-pfvm-w89x-94jw
30Monitor
SIPSorcery: Malformed UDP datagram crashes TurnServer receive loop with no restart, disabling TURN UDP relay for all clients (DoS)
HighCVSS 7.5No exploit
- Pre-auth
- Denial of service
NuGet · SIPSorceryAug 12, 2026
CVE-2026-12004
34Monitor
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 8.7No exploitEPSS 0%
ibm · security verify accessAug 12, 2026
CVE-2026-12005
28Monitor
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
ibm · security verify accessAug 12, 2026
CVE-2026-13267
32Monitor
Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
ibm · security verify accessAug 12, 2026
CVE-2026-13361
35Monitor
IBM Informix Server Vulnerability in SQL Interface Handler Could Allow Remote Code Execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · informix dynamic serverAug 12, 2026
CVE-2026-17082
35Monitor
IBM i is Affected By Multiple Vulnerabilities in the Debug Server
HighCVSS 8.8No exploitEPSS 0%
ibm · iAug 12, 2026
CVE-2026-17083
39Monitor
IBM i is Affected By Multiple Vulnerabilities in the Debug Server
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · iAug 12, 2026
CVE-2026-17111
39Monitor
IBM i is Affected By Multiple Vulnerabilities in SQL
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
ibm · iAug 12, 2026
CVE-2026-17417
35Monitor
IBM i is Affected By Remote Code Execution Vulnerabilities [, ]
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · iAug 12, 2026
CVE-2026-17642
35Monitor
IBM i is Affected By Remote Code Execution Vulnerabilities [, ]
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · iAug 12, 2026
CVE-2026-19656
39Monitor
ScadaLTS Authenticated Remote Code Execution
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
scada-lts · scada-ltsAug 12, 2026
CVE-2026-46731
31Monitor
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Auth bypass
- Local privilege escalation
dell · display and peripheral managerAug 12, 2026
CVE-2026-59914
31Monitor
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain an Authentication Bypass by Spoofing vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Auth bypass
- Local privilege escalation
dell · display and peripheral managerAug 12, 2026
CVE-2026-59916
31Monitor
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Auth bypass
- Local privilege escalation
dell · display and peripheral managerAug 12, 2026
CVE-2026-59917
31Monitor
Dell Display and Peripheral Manager (DDPM Windows), versions prior to 2.3.0.17, contain Improper Access Control vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Broken access control (IDOR)
dell · display and peripheral managerAug 12, 2026
CVE-2026-62420
39Monitor
Cross-project cluster migration bypasses project restrictions via cluster notification flag
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
canonical · lxdAug 12, 2026
CVE-2026-63293
39Monitor
Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root
CriticalCVSS 9.9No exploitEPSS 0%
canonical · lxdAug 12, 2026
CVE-2026-63294
39Monitor
Root RCE via image backup.yaml symlink
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
canonical · lxdAug 12, 2026
CVE-2026-63296
39Monitor
Project restriction bypass via instance migration config override
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
canonical · lxdAug 12, 2026
CVE-2026-63297
39Monitor
Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge
CriticalCVSS 9.9No exploitEPSS 0%
- Race condition
canonical · lxdAug 12, 2026
CVE-2026-63298
39Monitor
LXD arbitrary lxc.conf directive injection via NVIDIA instance configuration
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
canonical · lxdAug 12, 2026
CVE-2026-63299
39Monitor
Storage volume cross-project move and snapshot restore bypass project disk limits
CriticalCVSS 9.9No exploitEPSS 0%
- Denial of service
canonical · lxdAug 12, 2026
CVE-2026-63300
39Monitor
Cross-project instance move bypasses all project restrictions allowing host command execution
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
canonical · lxdAug 12, 2026
CVE-2026-67579
30Monitor
Filter expression injection via forged keyset pagination cursor in Ash
HighCVSS 7.5No exploitEPSS 0%
- SQL injection
- Deserialization
ash-hq · ash frameworkAug 12, 2026
CVE-2026-72508
39Monitor
Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
red hat · red hat advanced cluster management for kubernetes 2.11Aug 12, 2026
CVE-2026-72786
28Monitor
Craft CMS 5.0.0-RC1 before 5.10.8 Authentication Bypass via Password Reset
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
craftcms · cmsAug 12, 2026
CVE-2026-72789
36Monitor
SiYuan before v3.7.4 Authentication Bypass via Encrypted Notebooks
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
siyuan-note · siyuanAug 12, 2026
CVE-2026-72793
36Monitor
SiYuan before v3.7.4 Information Disclosure via /api/system/getConf
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Info leak
siyuan-note · siyuanAug 12, 2026
CVE-2026-72794
36Monitor
siyuan before v3.7.4 Session Cookie Key Disclosure via getConf
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Info leak
siyuan-note · siyuanAug 12, 2026
CVE-2026-72795
36Monitor
SiYuan before v3.7.4 Information Disclosure via Embed Block
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
siyuan-note · siyuanAug 12, 2026
CVE-2026-72798
36Monitor
SiYuan before v3.7.4 Information Disclosure via renderAttributeView
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
siyuan-note · siyuanAug 12, 2026
CVE-2026-72801
34Monitor
SiYuan before v3.7.4 Information Disclosure via Encryption Key Material
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
siyuan-note · siyuanAug 12, 2026
CVE-2026-72804
36Monitor
SiYuan before v3.7.4 Authentication Bypass via Graph Endpoints
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
siyuan-note · siyuanAug 12, 2026
CVE-2026-72807
35Monitor
SiYuan before v3.7.4 SQL Injection via queryBlocks template
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
siyuan-note · siyuanAug 12, 2026
CVE-2026-72809
28Monitor
SiYuan before v3.7.4 Authentication Bypass via Localhost Trust
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
siyuan-note · siyuanAug 12, 2026
CVE-2026-73268
39Monitor
Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injection
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
red hat · multicluster engine for kubernetes 2.1Aug 12, 2026
CVE-2026-73269
39Monitor
Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace
CriticalCVSS 9.9No exploitEPSS 0%
red hat · multicluster engine for kubernetes 2.1Aug 12, 2026
CVE-2026-73326
28Monitor
CamaleonCMS Missing Authorization via Plugin Administration Endpoints
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
- XSS
owen2345 · camaleoncmsAug 12, 2026
CVE-2026-73329
36Monitor
CamaleonCMS Stored XSS via Draft Post Title Creation Endpoint
CriticalCVSS 9.2No exploitEPSS 0%
- RCE
- XSS
owen2345 · camaleoncmsAug 12, 2026
CVE-2026-73330
30Monitor
CamaleonCMS 2.9.1 Server-Side Template Injection via test_email Action
HighCVSS 7.5No exploitEPSS 0%
- RCE
- SSTI
owen2345 · camaleoncmsAug 12, 2026
CVE-2026-73331
28Monitor
CamaleonCMS 2.9.1 Authenticated SQL Injection via Post Slug Field
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
owen2345 · camaleoncmsAug 12, 2026
CVE-2026-73332
36Monitor
CamaleonCMS cama_contact_form Plugin Stored XSS via before_html Field
CriticalCVSS 9.2No exploitEPSS 0%
- SQL injection
- XSS
owen2345 · camaleoncmsAug 12, 2026
CVE-2026-73413
34Monitor
Shescape: Quadratic-time denial of service in flag-protection
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
ericcornelissen · shescapeAug 12, 2026
CVE-2026-73414
36Monitor
Shescape: Shell injection via unescaped parentheses on Windows with CMD
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Command injection
ericcornelissen · shescapeAug 12, 2026
CVE-2026-10543
39Monitor
IBM® Db2® is vulnerable to privilege escalation with a specially crafted query
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
ibm · db2Aug 12, 2026
CVE-2026-13094
31Monitor
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%
- RCE
ibm · i access client solutionsAug 12, 2026
CVE-2026-13105
35Monitor
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
ibm · i access client solutionsAug 12, 2026
CVE-2026-13367
31Monitor
IBM Informix Dynamic Server Privilege Escalation Vulnerability in oninit Utility
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
ibm · informix dynamic serverAug 12, 2026
CVE-2026-13433
38Monitor
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
ibm · i access client solutionsAug 12, 2026
CVE-2026-13476
29Monitor
IBM Informix Wire Listener Vulnerable to Unauthenticated Remote Code Execution
HighCVSS 7.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
ibm · informix dynamic serverAug 12, 2026
CVE-2026-13622
35Monitor
Kubevirt: virt-handler-rhel9: kubevirt: virt-handler migration proxy follows symlinks allowing container escape to host
HighCVSS 8.8No exploitEPSS 0%
- Path traversal
red hat · red hat container native virtualization 4.12Aug 12, 2026
CVE-2026-14866
28Monitor
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
HighCVSS 7.1No exploitEPSS 0%
- Hard-coded credentials
ibm · i access client solutionsAug 12, 2026
CVE-2026-16033
34Monitor
Arbitrary file read+write on host via templates/ symlink in malicious image
HighCVSS 8.5No exploitEPSS 0%
- Path traversal
canonical · lxdAug 12, 2026
CVE-2026-16480
28Monitor
IBM® Db2® is affected by an improper authorization vulnerability in the certain command, allowing a non-privileged user to bypass authority checks and modify da
HighCVSS 7.1No exploitEPSS 0%
ibm · db2Aug 12, 2026
CVE-2026-16695
31Monitor
IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
ibm · i access client solutionsAug 12, 2026
CVE-2026-18888
28Monitor
MongoDB BI Connector ODBC driver may write outside an allocated buffer when retrieving large floating point values as character data
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
mongodb · bi connector odbc driverAug 12, 2026
CVE-2026-19001
38Monitor
MongoDB BI Connector ODBC driver may write outside an allocated buffer when handling oversized catalog object names
CriticalCVSS 9.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
mongodb · bi connector odbc driverAug 12, 2026
CVE-2026-19002
35Monitor
Crafted database metadata may cause memory corruption in MongoDB BI Connector ODBC Driver
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
mongodb · bi connector odbc driverAug 12, 2026
CVE-2026-19004
35Monitor
MongoDB BI Connector ODBC Driver Memory-Safety Issue When Handling Stored Procedure Output Parameters
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
mongodb · bi connector odbc driverAug 12, 2026
CVE-2026-19654
30Monitor
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
rsyslog · rsyslogAug 12, 2026
CVE-2026-65370
30Monitor
ServiceTalk HTTP/1.x incorrectly handles malformed Transfer-Encoding which could result in request smuggling attacks.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apple · servicetalkAug 12, 2026
CVE-2026-66898
39Monitor
Path traversal via unvalidated instance name in backup tarball restore enables root file write / RCE
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Path traversal
canonical · lxdAug 12, 2026
CVE-2026-10534
39Monitor
IBM® Db2® is vulnerable to buffer overflow in the IXF IMPORT parser
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
ibm · db2Aug 12, 2026
CVE-2026-17485
32Monitor
IBM i is Affected By Denial of Service Vulnerability []
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
ibm · iAug 12, 2026
CVE-2026-18749
39Monitor
The type=track branch authorises on _is_my_case(t_attach.case) only and never checks VinceTrackAttachment.shared.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cert/cc · vinceAug 12, 2026
CVE-2026-19003
33Monitor
MongoDB BI Connector ODBC driver may write outside an allocated buffer when the setup dialog opens a data source with oversized path settings
HighCVSS 8.4No exploitEPSS 0%
- Memory safety
mongodb · bi connector odbc driverAug 12, 2026
CVE-2026-71469
30Monitor
Acm-search-v2-api-rhel9: search-v2-api: unbounded tokenreviews cache allows unauthenticated memory-exhaustion dos
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat advanced cluster management for kubernetes 2.11Aug 12, 2026
CVE-2026-71471
36Monitor
Acm-search-v2-rhel9: search-v2-operator: hub search cr collector.imageoverride propagated to every spoke as arbitrary container image
CriticalCVSS 9.0No exploitEPSS 1%
- RCE
red hat · red hat advanced cluster management for kubernetes 2.11Aug 12, 2026
CVE-2026-71473
34Monitor
Acm-search-v2-rhel9: search-v2-operator: addonfactory.getvaluesfromaddonannotation enables arbitrary helm-values override per spoke
HighCVSS 8.5No exploitEPSS 0%
red hat · red hat advanced cluster management for kubernetes 2.11Aug 12, 2026
CVE-2026-73493
30Monitor
http4s-blaze-server: Unbounded WebSocket message aggregation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
http4s · blazeAug 12, 2026
CVE-2026-73495
29Monitor
blaze: Chunked-body trailer fields promoted into Request.headers in blaze-server (front-end header-sanitization bypass)
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
http4s · blazeAug 12, 2026
CVE-2026-73498
30Monitor
MCP Atlassian is a Model Context Protocol (MCP): Arbitrary file read via missing path validation in confluence_upload_attachment
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
sooperset · mcp-atlassianAug 12, 2026
CVE-2026-73499
28Monitor
etcd: Watch API authorization bypass via open-ended range requests
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
etcd-io · etcdAug 12, 2026
CVE-2026-73500
34Monitor
etcd: `tlsListener.acceptLoop` spawns unbounded handshake goroutines with no deadline
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
etcd-io · etcdAug 12, 2026
CVE-2026-73501
36Monitor
kin-openapi: ValidationHandler.Load() Fail-Open Authentication Bypass via NoopAuthenticationFunc Default
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
getkin · kin-openapiAug 12, 2026
CVE-2026-73519
37Monitor
WolfStack < 25.9.2 Hard-coded Secret Authentication Bypass via X-WolfStack-Secret
CriticalCVSS 9.3Proof of conceptEPSS 1%
- pre-auth RCE
- Auth bypass
- Hard-coded credentials
wolfsoftwaresystemsltd · wolfstackAug 12, 2026
CVE-2026-47717
30Monitor
FUXA's Unauthenticated Project Data Disclosure Exposes Server-Side Scripts and Device Configurations
HighCVSS 7.5Proof of conceptEPSS 1%
- Pre-auth
frangoteam · fuxaAug 12, 2026
CVE-2026-49481
38Monitor
UpSnap vulnerable to Remote Code Execution via IP Field Template Injection in wake_cmd/shutdown_cmd
CriticalCVSS 9.6No exploitEPSS 1%
- RCE
- Command injection
- SSTI
seriousm4x · upsnapAug 12, 2026
CVE-2026-71193
38Monitor
In OpenStack Designate before 22.0.1, zone creation checks (_is_subzone, _is_superzone, and the duplicate-zone DB constraint) are scoped to
CriticalCVSS 9.6No exploitEPSS 0%
- Broken access control (IDOR)
openstack · designateAug 12, 2026
CVE-2026-16770
39Monitor
PDF::WebKit versions through 1.2 for Perl allow argument injection into wkhtmltopdf via meta tags in the source document
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
mithaldu · pdf::webkitAug 13, 2026