Forum: Too Lazy BBS

Vulnerability Summary for the Week of August 3, 2026

From CISA@cisa@messages.cisa.gov to cisa@toolazy.synchro.net on Mon Aug 10 17:40:16 2026

--===============3798854877406425428==
Content-Type: multipart/alternative; boundary="===============0973038407628992069=="
MIME-Version: 1.0

--===============0973038407628992069==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

Cybersecurity and Infrastructure Security Agency (CISA)

You are subscribed to Vulnerability Bulletins for Cybersecurity and Infrast= ructure Security Agency. This information has recently been updated and is = now available.

The CISA Vulnerability Bulletin provides a summary of new vulnerabilities t= hat have been recorded in the past week. In some cases, the vulnerabilities=
in the bulletin may not yet have assigned CVSS scores.

Vulnerabilities are based on the=C2=A0Common Vulnerabilities and Exposures =
[ https://www.cve.org/ ]=C2=A0(CVE) vulnerability naming standard and are o= rganized according to severity, determined by the=C2=A0Common Vulnerability=
Scoring System [ https://www.cve.org/about/relatedefforts ]=C2=A0(CVSS) st= andard. The division of high, medium, and low severities correspond to the = following scores:

* *High*: vulnerabilities with a CVSS base score of 7.0=E2=80=9310.0=20

* *Medium*: vulnerabilities with a CVSS base score of 4.0=E2=80=936.9=20

* *Low*: vulnerabilities with a CVSS base score of 0.0=E2=80=933.9=20

Entries may include additional information provided by organizations and ef= forts sponsored by CISA. This information may include identifying informati= on, values, definitions, and related links. Patch information is provided w= hen available. Please note that some of the information in the bulletin is = compiled from external, open-source reports and is not a direct result of C= ISA analysis.

Vulnerability Summary for the Week of August 3, 2026 [ https://www.cisa.gov= /news-events/bulletins/sb26-222 ] 08/10/2026 1:00PM EDT=20

High Vulnerabilities

Primary
Vendor -- Product Description Published CVSS Score Source Info @fastify/aws= -lambda--@fastify/aws-lambda @fastify/aws-lambda version 6.4.0 decorates ea=
ch Fastify request with request.awsLambda.event and request.awsLambda.conte= xt, values that applications are documented to use for authorization decisi= ons such as reading API Gateway authorizer claims. In the default configura= tion, the getter that populates this decoration reads the client-controlled=
x-apigateway-event and x-apigateway-context HTTP headers before falling ba=
ck to the trusted internal request token, and those reserved headers are no=
t stripped from the incoming event. An unauthenticated attacker who can set=
a single HTTP header can therefore forge the entire Lambda proxy event, in= cluding the authorizer context, and override the genuine one. This results =
in a full authentication and authorization bypass and privilege escalation = for any application that trusts request.awsLambda.event for identity or acc= ess control. Only version 6.4.0 is affected. Patches: upgrade to @fastify/a= ws-lambda 6.4.1, which resolves the decoration only through the internal pe= r-invocation token and strips the reserved headers before the request is pr= ocessed. 2026-08-03 9.1 CVE-2026-18248 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18248 ] @fastify/static--@fastify/static @fastify/static before=
version 10.1.3 contains an incomplete fix for a previous route guard bypas=
s. The static file handler rejected only parent directory segments, but it = did not canonicalize dot segments, duplicate slashes, encoded dots, or back= slashes before route matching and before delegating to the send layer. As a=
result, an unauthenticated attacker could request a file protected by a ro= ute based guard using a non canonical path form that misses the guarded rou=
te yet resolves back onto the protected file, disclosing its contents. Appl= ications that protect a subtree of the static root with a route based guard=
are affected, while applications relying on the allowedPath option are not=
. This is fixed in @fastify/static 10.1.3, which canonicalizes the pathname=
, including rejecting backslashes, on the path used for routing and serving=
. 2026-08-06 7.5 CVE-2026-18427 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-18427 ] @msykes--Events Manager Unauthenticated Cross Site Scripting (XS=
S) in Events Manager <=3D 7.4.1 versions. 2026-08-06 7.1 CVE-2026-66457 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-66457 ] absmach--magistrala Magi= strala's Rules Engine allows authenticated users to create rules with embed= ded Go or Lua scripts executed server-side when IoT messages arrive. The Go=
script engine (re/golang.go) runs scripts through the Yaegi interpreter wi=
th stdlib.Symbols, exposing the full Go standard library (including os and = net/http) with validation limited to a regex blocking goroutines and panic(=
) calls; dangerous functions such as os.ReadFile, os.WriteFile, os.Remove, = and os.Environ remain fully accessible. The Lua script engine (re/lua.go) p= erforms no input validation at all and preloads dangerous libraries: db (ar= bitrary database access), ioutil (file I/O), an HTTP client (SSRF), and fil= epath (traversal). An authenticated low-privileged user can achieve arbitra=
ry file read/write, environment variable leakage, database access, and SSRF=
against internal microservices. 2026-08-05 8.8 CVE-2026-71235 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-71235 ] absmach--magistrala Magistrala (f= ormerly Mainflux)'s message-readers API reads a `format` value from the HTT=
P query string (readers/api/http/transport.go) with no validation and inter= polates it directly into raw SQL queries via fmt.Sprintf() in both the Post= greSQL reader (readers/postgres/messages.go: `fmt.Sprintf("SELECT * FROM %s=
WHERE %s ...", format, cond)`) and the TimescaleDB reader (readers/timesca= le/messages.go, same pattern), enabling SQL injection by any authenticated = user able to query channel messages. 2026-08-05 7.1 CVE-2026-71276 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-71276 ] Acrisure--KARR BT The KARR Se= curity System and SWDS dealer-installed automotive anti-theft systems use a=
shared Bluetooth authentication key across affected devices. An attacker w= ithin Bluetooth range can leverage this weakness to issue unauthorized comm= ands to the vehicle, potentially allowing unauthorized access to vehicle fu= nctions, including door unlocking and engine immobilization. 2026-08-05 8.1=
CVE-2026-18411 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18411 ] adafa= p--api-mcp A security vulnerability has been detected in adafap api-mcp up =
to 92b9a5d04acfec165c7d4ef852496593aa87be06. This affects the function cust= omAxios of the file app/api/proxy/route.ts of the component Proxy API Endpo= int. The manipulation of the argument url leads to server-side request forg= ery. The attack is possible to be carried out remotely. This product adopts=
a rolling release strategy to maintain continuous delivery. Therefore, ver= sion details for affected or updated releases cannot be specified. The proj= ect was informed of the problem early through an issue report but has not r= esponded yet. 2026-08-09 7.3 CVE-2026-19374 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-19374 ] adaltas--backmeup The backmeup npm package assembles=
shell command strings by directly concatenating its option values (name, s= ource, destination, filter) - e.g. cmd =3D "mkdir -p " + path.join(info.des= tination, info.name) + "; " - and executes the resulting string through a s= hell via ssh2-exec (locally via child_process, or remotely via SSH when an = ssh handle is supplied), rather than using execFile/spawn with an argument = array. The only processing applied is path.normalize()/path.join(), which d=
o not neutralize shell metacharacters (;, |, &, $(), backticks, newline). A=
ny application that passes attacker-influenced values into these options (e= .g. a user-chosen backup name) is vulnerable to arbitrary OS command execut= ion on the backup host, or on the remote SSH target when one is configured.=
2026-08-05 8.8 CVE-2026-71243 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-71243 ] Admidio--admidio Admidio before 5.0.11 contains an authentication=
bypass vulnerability in the forum module when configured in login-only mod=
e. The access control logic in modules/forum.php fails to validate the logi= n-only configuration state, allowing unauthenticated attackers to read foru=
m topics and posts by directly accessing the module with read-only paramete= rs. 2026-08-03 7.5 CVE-2026-69091 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-69091 ] Adobe--Adobe Campaign Classic Adobe Campaign Classic (ACC) is = affected by an Improper Neutralization of Special Elements Used in a Templa=
te Engine vulnerability that could result in arbitrary code execution in th=
e context of the current user. An attacker could exploit this vulnerability=
to execute arbitrary code. Exploitation of this issue does not require use=
r interaction. Scope is changed. 2026-08-03 10 CVE-2026-48323 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-48323 ] Adobe--Adobe Campaign Classic Adob=
e Campaign Classic (ACC) is affected by an Improper Neutralization of Speci=
al Elements used in an SQL Command ('SQL Injection') vulnerability that cou=
ld result in arbitrary code execution in the context of the current user. A=
n attacker could exploit this vulnerability to execute arbitrary SQL comman= ds, potentially gaining elevated access or control over the application. Ex= ploitation of this issue does not require user interaction. Scope is change=
d. 2026-08-03 10 CVE-2026-48330 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-48330 ] Adobe--Adobe Campaign Classic Adobe Campaign Classic (ACC) is af= fected by a Server-Side Request Forgery (SSRF) vulnerability that could res= ult in privilege escalation. Exploitation of this issue does not require us=
er interaction. Scope is changed. 2026-08-03 10 CVE-2026-48331 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-48331 ] Adobe--Adobe Campaign Classic Ado=
be Campaign Classic (ACC) is affected by an Improper Neutralization of Dire= ctives in Dynamically Evaluated Code ('Eval Injection') vulnerability that = could result in arbitrary code execution in the context of the current user=
. A low-privileged attacker could exploit this vulnerability to execute arb= itrary code. Exploitation of this issue does not require user interaction. = Scope is changed. 2026-08-03 9.6 CVE-2026-48317 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-48317 ] Adobe--Adobe Campaign Classic Adobe Campaign Cla= ssic (ACC) is affected by an Improper Neutralization of Special Elements us=
ed in an SQL Command ('SQL Injection') vulnerability that could result in a= rbitrary code execution in the context of the current user. A low-privilege=
d attacker could exploit this vulnerability to execute arbitrary code. Expl= oitation of this issue does not require user interaction. Scope is changed.=
2026-08-03 9.9 CVE-2026-48326 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-48326 ] Adobe--Adobe Campaign Classic Adobe Campaign Classic (ACC) is aff= ected by an Incorrect Authorization vulnerability that could result in priv= ilege escalation. An attacker could exploit this vulnerability to gain elev= ated privileges. Exploitation of this issue does not require user interacti= on. 2026-08-03 9.8 CVE-2026-48333 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-48333 ] Adobe--Adobe Campaign Classic Adobe Campaign Classic (ACC) is = affected by a Violation of Secure Design Principles vulnerability that coul=
d result in a Security feature bypass. An attacker could leverage this vuln= erability to bypass security measures and gain unauthorized read access. Ex= ploitation of this issue does not require user interaction. 2026-08-03 7.5 = CVE-2026-48399 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48399 ] advply= r--audiobookshelf audiobookshelf's authentication-exemption check (server/r= outers/Auth.js) matches unauthenticated-allowed GET routes against req.path=
via a regex requiring a literal /items/:id/cover or /authors/:id/image sha= pe, where req.path retains %2F sequences URL-encoded. Express's router deco= des the :id route parameter before handler code runs, so a %2F-encoded '../=
' sequence in :id (e.g. ..%2f..%2f..%2ftmp%2fpwned) passes the literal-path=
auth-exemption check while resolving to a real path-traversal payload once=
decoded. CacheManager.handleCoverCache then joins this decoded value into =
a cache file path and streams the result before any database-backed ownersh=
ip check. This bypasses the fix applied for CVE-2025-25205 (which anchored = the exemption regex and switched it to req.path) and results in unauthentic= ated arbitrary file read of any file matching the pattern *_<width>[x<heigh= t>].<ext> that the service account can read. 2026-08-05 7.5 CVE-2026-71209 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-71209 ] AffiliateWP--Affiliat= eWP Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <=3D 2.35.0 v= ersions. 2026-08-06 7.1 CVE-2026-65515 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-65515 ] Aircoookie--WLED WLED's GET /json/cfg endpoint (registe= red in wled00/wled_server.cpp) calls serveJson() with no settings-PIN check=
, unlike the /edit endpoint which explicitly checks correctPIN, disclosing = the device's general configuration (network, hardware, LED setup) to any un= authenticated client on the network. Separately, the settings-PIN unlock st= ate is tracked via a single global boolean `correctPIN` (wled00/wled.h), no=
t per-session state: once any single client submits the correct 4-digit PIN=
via POST /json, correctPIN becomes true for every client, granting all sub= sequent unauthenticated clients full configuration-write access (OTA firmwa=
re updates, WiFi reconfiguration, factory reset) until the device reboots. = 2026-08-05 8.2 CVE-2026-71264 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -71264 ] Amazon--Kiro CLI An uncontrolled search path element in Kiro CLI b= efore version 2.10.0 on Windows might allow a remote unauthenticated actor =
to execute arbitrary code via a maliciously crafted project directory conta= ining an executable that bypasses workspace trust protections when a local = user starts Kiro CLI in the directory. To remediate this issue, users shoul=
d upgrade to version 2.10.0 or higher. 2026-08-04 7.8 CVE-2026-18657 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-18657 ] Amazon--Kiro IDE An uncontr= olled search path element in Kiro IDE before version 1.0.228 on Windows mig=
ht allow a remote unauthenticated actor to execute arbitrary code via a mal= iciously crafted project directory containing an executable that bypasses w= orkspace trust protections when a local user opens the directory. To remedi= ate this issue, users should upgrade to version 1.0.228 or higher. 2026-08-=
04 7.8 CVE-2026-18656 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18656 ]=
Amir Helzer--WooCommerce Multilingual & Multicurrency Subscriber Cross Sit=
e Scripting (XSS) in WooCommerce Multilingual & Multicurrency <=3D 5.5.6 ve= rsions. 2026-08-06 7.1 CVE-2026-66711 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-66711 ] AncoraThemes--Abogado Unauthenticated PHP Object Injection=
in Abogado <=3D 1.18 versions. 2026-08-06 9.8 CVE-2026-65574 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-65574 ] AncoraThemes--Accalia Unauthentica= ted PHP Object Injection in Accalia <=3D 1.5.3 versions. 2026-08-06 9.8 CVE= -2026-65575 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65575 ] AncoraThe= mes--Adrena Unauthenticated PHP Object Injection in Adrena <=3D 1.2.14 vers= ions. 2026-08-06 9.8 CVE-2026-65576 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-65576 ] AncoraThemes--Advice Unauthenticated PHP Object Injection in=
Advice <=3D 1.18.0 versions. 2026-08-06 9.8 CVE-2026-65577 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-65577 ] AncoraThemes--Agora Unauthenticated = PHP Object Injection in Agora <=3D 1.9 versions. 2026-08-06 9.8 CVE-2026-65= 578 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65578 ] approveme--Formid= able Forms Signature Online Contract Automation Unauthenticated Insecure Di= rect Object References (IDOR) in Formidable Forms Signature Online Contract=
Automation <=3D 2.0.1 versions. 2026-08-06 7.5 CVE-2026-65523 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-65523 ] art-template--art-template art-te= mplate's sub-template resolution logic (src/compile/adapter/resolve-filenam= e.js), used by both the include() and extend() template directives, resolve=
s the target file path via path.resolve(root, filename) with no check after= ward that the result remains inside root. Because path.resolve() discards r= oot entirely when filename is an absolute path, and does not block '../' tr= aversal sequences, and the resolved path is passed directly to fs.readFileS= ync() in loader.js with its contents compiled and rendered, an application = that lets a sub-template name be influenced by external input (e.g. a query=
parameter passed into {{include page}}) allows an attacker to read arbitra=
ry files on disk that the Node process can access. 2026-08-05 7.5 CVE-2026-= 71215 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71215 ] ATN-B1--CPDLC L= ack of authentication for Very High Frequency Data Link messages allows rog=
ue ground stations to inject CPDLC messages leading to unexpected or mislea= ding clearances and potential pilot confusion. This type of attack can be c= arried out remotely over radio frequency. 2026-08-07 7.1 CVE-2025-71409 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2025-71409 ] ATN-B1--CPDLC Injection =
of false emergency or status messages over CPDLC may lead to misallocation =
of resources, operational confusion, and improper response actions by fligh=
t crews, traffic controllers, and ground operations. This type of attack ca=
n be carried out remotely over radio frequency. 2026-08-07 7.1 CVE-2025-714=
12 [ https://www.cve.org/CVERecord?id=3DCVE-2025-71412 ] Autodesk--FBX SDK =
A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, can t= rigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::Binary= ReadSectionHeader. A malicious actor can leverage this vulnerability to exe= cute arbitrary code in the context of the current process. 2026-08-04 7.8 C= VE-2026-10709 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10709 ] Autodes= k--FBX SDK A maliciously crafted FBX file, when parsed through Autodesk FBX=
SDK, can trigger a stack-based buffer overflow vulnerability in fbxsdk::Ex= tractDrive. A malicious actor can leverage this vulnerability to execute ar= bitrary code in the context of the current process. 2026-08-04 7.8 CVE-2026= -10710 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10710 ] Autodesk--Revi=
t A maliciously crafted PDF file, when parsed through Autodesk Revit, can f= orce an Out-of-Bounds Read vulnerability. A malicious actor can leverage th=
is vulnerability to cause a crash, read sensitive data, or execute arbitrar=
y code in the context of the current process. 2026-08-06 7.8 CVE-2026-11803=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-11803 ] Autodesk--Revit A ma= liciously crafted PDF file, when parsed through Autodesk Revit, can force a=
Use-After-Free vulnerability. A malicious actor can leverage this vulnerab= ility to cause a crash, disclose sensitive data, or execute arbitrary code =
in the context of the current process. 2026-08-06 7.8 CVE-2026-1289 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-1289 ] Autodesk--Revit A maliciously=
crafted BMP file, when parsed through certain Autodesk products, can force=
a Untrusted Pointer Dereference vulnerability. A malicious actor can lever= age this vulnerability to execute arbitrary code in the context of the curr= ent process. 2026-08-06 7.8 CVE-2026-7406 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-7406 ] Autodesk--Revit A maliciously crafted PDF file, when pa= rsed through Autodesk Revit, can force an Out-of-Bounds Write vulnerability=
. A malicious actor may leverage this vulnerability to cause a crash, cause=
data corruption, or execute arbitrary code in the context of the current p= rocess. 2026-08-06 7.8 CVE-2026-8325 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-8325 ] AWS--Amazon Bedrock AgentCore harness Insufficient input val= idation in Amazon Bedrock AgentCore harness might allow an authenticated re= mote user to execute configured tools bypassing model invocation and securi=
ty controls via crafted content blocks in conversation messages. AWS has ad= dressed this issue. No customer action is required. 2026-08-04 8.1 CVE-2026= -18830 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18830 ] AWS--aws-trans= form-mcp-server Improper limitation of a pathname to a restricted directory=
in the get_resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 = through 0.1.4 might allow a context-dependent actor to write arbitrary file=
s outside the intended working directory via the savePath parameter. To rem= ediate this issue, users should upgrade to version 0.1.5 or later. 2026-08-=
05 8.6 CVE-2026-18953 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18953 ]=
AWS--strands-agents-tools A prompt injection vulnerability in the shell to=
ol in Amazon Strands Agents Tools before 0.8.0 might allow remote actors to=
execute arbitrary operating system commands on the agent's host via a craf= ted prompt that sets the non_interactive parameter to true, bypassing the h= uman consent gate. To remediate this issue, users should upgrade to version=
0.8.0. 2026-08-03 8.8 CVE-2026-18733 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-18733 ] AWS--strands-agents-tools Insecure direct object reference=
in the mongodb_memory, elasticsearch_memory, and mem0_memory tools in Amaz=
on Strands Agents Tools before 0.8.3 might allow remote authenticated users=
to access, modify, or delete memories belonging to other tenants by influe= ncing the LLM to emit tool calls with a forged namespace parameter. To reme= diate this issue, users should upgrade to version 0.8.3. 2026-08-06 8.1 CVE= -2026-19111 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19111 ] Axiomthem= es--69 Clothing Unauthenticated PHP Object Injection in 69 Clothing <=3D 1.= 2.11.1 versions. 2026-08-06 9.8 CVE-2026-65571 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-65571 ] Axiomthemes--A.Williams Unauthenticated PHP Objec=
t Injection in A.Williams <=3D 1.3.1 versions. 2026-08-06 9.8 CVE-2026-6557=
2 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65572 ] axiomthemes--Agrico=
la Unauthenticated PHP Object Injection in Agricola <=3D 1.21.0 versions. 2= 026-08-06 9.8 CVE-2026-65579 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 65579 ] Axiomthemes--AI ANN Unauthenticated PHP Object Injection in AI ANN = <=3D 1.29.0 versions. 2026-08-06 9.8 CVE-2026-65581 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-65581 ] Ays Pro--Survey Maker Unauthenticated Cross = Site Scripting (XSS) in Survey Maker <=3D 5.2.3.3 versions. 2026-08-06 7.1 = CVE-2026-65565 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65565 ] baserC=
MS Users Community--BaserCMS BaserCMS provided by baserCMS Users Community = contains a CSV file injection vulnerability. If a user downloads and opens =
a CSV file containing malicious code injected by an attacker, the malicious=
code may be executed. 2026-08-03 7.1 CVE-2026-65875 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-65875 ] bensibley--Independent Analytics WordPress = Analytics Plugin The Independent Analytics plugin for WordPress is vulnerab=
le to Stored Cross-Site Scripting via the 404 not_found_url tracking parame= ter in versions up to, and including, 2.15.0. This is due to the get_cell_c= ontent() function applying urldecode() after esc_url() when rendering the U=
RL column for 404 entries - a sequence that allows percent-encoded HTML to = pass URL validation and then be reconstructed as raw markup, which wp_kses_= post() does not strip because it retains img elements and data-* attributes=
, and because the public REST endpoint /iawp/search accepts unauthenticated=
requests as long as they carry a signature that is itself embedded in publ=
ic page HTML. This makes it possible for unauthenticated attackers to injec=
t arbitrary web scripts in pages that will execute whenever a user accesses=
an injected page. 2026-08-05 7.2 CVE-2026-17506 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-17506 ] BeRocket--Advanced AJAX Product Filters Unauthe= nticated Cross Site Scripting (XSS) in Advanced AJAX Product Filters <=3D 3= .2.0.3 versions. 2026-08-06 7.1 CVE-2026-66439 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-66439 ] Bilin Software and Informatics Consultancy Inc.--= HUMANIST Digital Human Resources Unrestricted upload of file with dangerous=
type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMA= NIST Digital Human Resources allows Upload a Web Shell to a Web Server. Thi=
s issue affects HUMANIST Digital Human Resources: from 26.0 before 26.1. 20= 26-08-04 9.8 CVE-2026-14175 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1= 4175 ] Bilin Software and Informatics Consultancy Inc.--HUMANIST Digital Hu= man Resources Use of hard-coded cryptographic key vulnerability in Bilin So= ftware and Informatics Consultancy Inc. HUMANIST Digital Human Resources al= lows Read Sensitive Constants Within an Executable. This issue affects HUMA= NIST Digital Human Resources: from 26.0 before 26.1. 2026-08-04 9.1 CVE-202= 6-14804 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14804 ] Bilin Softwar=
e and Informatics Consultancy Inc.--HUMANIST Digital Human Resources Cleart= ext storage of sensitive information vulnerability in Bilin Software and In= formatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Inje= ction. This issue affects HUMANIST Digital Human Resources: from 26.0 befor=
e 26.1. 2026-08-04 9.8 CVE-2026-15721 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-15721 ] Bilin Software and Informatics Consultancy Inc.--HUMANIST = Digital Human Resources Use of GET request method with sensitive query stri= ngs vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANI=
ST Digital Human Resources allows Session Hijacking. This issue affects HUM= ANIST Digital Human Resources: from 26.0 before 26.1. 2026-08-04 7.4 CVE-20= 26-14838 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14838 ] bitpressadmi= n--File Manager The File Manager plugin for WordPress is vulnerable to arbi= trary file deletion due to insufficient file path validation in the connect=
or function in all versions from 6.0 - 6.9. This makes it possible for auth= enticated attackers, with subscriber-level access and above, to read and de= lete arbitrary files on the server, which can lead to remote code execution=
when the right file is deleted (such as wp-config.php). The bypass is trig= gered by passing cmd=3Drm or cmf=3Dfile in the URL query string of a POST r= equest: elFinder's bind registration reads the command exclusively from $_P= OST and therefore never registers the rm.pre permission handler, while the = dispatcher reads from the merged $_GET+$_POST superglobal and executes the =
rm or file command unchecked against a volume that defaults to ABSPATH. 202= 6-08-06 8.8 CVE-2026-15991 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15= 991 ] Bohdan Triapitsyn--OpenChamber OpenChamber 1.11.7 contains an unauthe= nticated remote code execution vulnerability that allows remote attackers t=
o execute arbitrary shell commands by sending crafted POST requests to the = /api/fs/exec endpoint, which passes commands verbatim to Node.js spawn() wi= thout any allowlist, blocklist, or argument validation. The authentication = middleware becomes a no-op when UI_PASSWORD is not configured, matching the=
default Docker deployment, enabling attackers to execute arbitrary OS comm= ands as the application user and retrieve full command output including std= out, stderr, and exit code from the server response. 2026-08-06 9.8 CVE-202= 6-53975 [ https://www.cve.org/CVERecord?id=3DCVE-2026-53975 ] Bohdan Triapi= tsyn--OpenChamber OpenChamber 1.11.7 contains a path traversal vulnerabilit=
y in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw=
that allows unauthenticated remote attackers to read arbitrary files by su= pplying the allowOutsideWorkspace=3Dtrue query parameter alongside an absol= ute path, bypassing the workspace boundary check in resolveReadPathFromCont= ext. Attackers can exploit the vacuous isPathWithinRoot guard to read sensi= tive files such as the JWT signing secret, SSH private keys, API credential=
s, and environment variables, enabling full authentication bypass by forgin=
g session cookies on password-protected deployments. 2026-08-06 9.1 CVE-202= 6-53976 [ https://www.cve.org/CVERecord?id=3DCVE-2026-53976 ] Bohdan Triapi= tsyn--OpenChamber OpenChamber 1.11.7 contains an authentication bypass vuln= erability that allows unauthenticated remote attackers to terminate the ser= ver process by sending a POST request to the /api/system/shutdown endpoint,=
which is registered before the authentication middleware in the Express ro= ute handler chain. Attackers can exploit the route registration order in bo= otstrap-runtime.js to reach the shutdown handler before auth middleware exe= cutes, causing denial of service to all active AI coding sessions and locki=
ng out legitimate remote users regardless of whether UI_PASSWORD is configu= red. 2026-08-06 7.5 CVE-2026-53977 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-53977 ] BoldGrid--Total Upkeep Unauthenticated Broken Access Control =
in Total Upkeep <=3D 1.17.2 versions. 2026-08-06 8.2 CVE-2026-66708 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-66708 ] bolt--core Bolt CMS renders = content field values through Twig's full application-level Environment with=
no SandboxExtension registered anywhere in the codebase. In src/Entity/Fie= ld.php, getTwigValue() calls shouldBeRenderedAsTwig(), which gates renderin=
g only on the field definition's allow_twig flag and a regex checking for `= {{`, `{%`, or `{#`; when true, the raw field value is compiled and rendered=
via `self::getTwig()->createTemplate($value)->render(['record' =3D> $this-= >getContent()])` with no sandboxing. Bolt's own bundled config/bolt/content= types.yaml sets `allow_twig: true` on the default "pages" contenttype's con= tent field out of the box. Any user with edit access to that content type (=
a standard editor role, not just an administrator) can inject a Twig payloa=
d such as `{{ ['id']|map('passthru')|join }}` that executes arbitrary OS co= mmands when the content is saved and rendered, achieving remote code execut= ion as the web server user. 2026-08-05 8.8 CVE-2026-71291 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-71291 ] boringproxy--boringproxy boringproxy t= hrough 0.10.0 contains a newline injection vulnerability that allows authen= ticated low-privileged users with tunnel-creation permission to inject arbi= trary lines into the server account's SSH authorized_keys file by supplying=
a percent-encoded newline character in the domain parameter of the tunnel = creation endpoint. Attackers can insert an unrestricted public key entry in=
to authorized_keys to gain persistent shell access, and subsequently read c= leartext credentials from the database file including all user tokens, tunn=
el private keys, and TLS certificates. 2026-08-05 9.9 CVE-2026-70615 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-70615 ] Brandexponents--Type Hub Un= authenticated Arbitrary File Upload in Type Hub <=3D 2.0.6 versions. 2026-0= 8-06 10 CVE-2026-66665 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66665 =
] brix--crypto-js crypto-js is a JavaScript library of crypto standards. Ve= rsions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.Word= Array.random() using a custom variation of the Multiply-With-Carry pseudora= ndom number generator, seeded from Math.random(), instead of a cryptographi= cally secure source. This generator was introduced in version 3.1.2-4 and r= emained present in nearly every 3.x release. Nominal requests for 128 or 25=
6 bits of entropy through this function produce effective search spaces of = approximately 2 to the 39th and 2 to the 47th possibilities, small enough t=
o enumerate on commodity hardware. Downstream wallet applications that used=
CryptoJS.lib.WordArray.random() as the entropy source for BIP39 recovery p= hrases are affected, and an attacker who enumerates the reduced output spac=
e can recover the resulting private keys and control the associated funds. = This issue is fixed in version 4.0.0. 2026-08-07 9 CVE-2026-71851 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-71851 ] Cacti--cacti Cacti's sanitize_= sql_column() (lib/functions.php) sanitizes user-supplied ORDER BY column na= mes using the regex `preg_replace('/[^a-zA-Z0-9_().]/', '', $column)`. Beca= use this allowlist retains letters, digits, underscore, parentheses, and do=
t (intended to support expressions like COUNT(id) and table.column), a payl= oad such as `SLEEP(5)` passes through completely unmodified. The sanitized = value is concatenated directly into raw SQL ORDER BY clauses (which cannot =
be parameterized) driven by a `sort_column` GET parameter in at least user_= log.php, utilities.php, user_domains.php, and user_group_admin.php, allowin=
g any authenticated Cacti user, regardless of privilege level, to perform t= ime-based blind SQL injection against the Cacti database. 2026-08-05 8.8 CV= E-2026-71287 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71287 ] CheckMAL= --AppCheck Pro A security flaw has been discovered in CheckMAL AppCheck Pro=
3.1.43.10. Affected is an unknown function in the library AppCheckD.sys of=
the component Kernel Mini-Filter Driver. Performing a manipulation results=
in uncontrolled search path. The attack requires a local approach. The com= plexity of an attack is rather high. The exploitability is told to be diffi= cult. The exploit has been released to the public and may be used for attac= ks. The vendor was contacted early about this disclosure but did not respon=
d in any way. 2026-08-03 7 CVE-2026-18605 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-18605 ] chiuwingyan--house A vulnerability has been found in c= hiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affec=
ts an unknown part of the file /paid/selectall.action. The manipulation of = the argument zuname leads to sql injection. The attack can be initiated rem= otely. The exploit has been disclosed to the public and may be used. Contin= ious delivery with rolling releases is used by this product. Therefore, no = version details of affected nor updated releases are available. The vendor = was contacted early about this disclosure but did not respond in any way. 2= 026-08-06 7.3 CVE-2026-19062 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 19062 ] Cinnamon--kotaemon kotaemon through 0.12.0 contains an insecure des= erialization vulnerability in the check_connection endpoint that allows una= uthenticated attackers to instantiate arbitrary Python classes by supplying=
crafted YAML/JSON input with a __type__ field. Attackers can exploit this =
to override the __type__ field with subprocess.check_output and arbitrary a= rguments, achieving remote code execution with application process privileg= es. 2026-08-04 9.8 CVE-2026-69098 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-69098 ] Cisco--Cisco Catalyst SD-WAN Controller As part of Cisco's ong= oing commitment to proactive security and product quality, the Cisco Cataly=
st SD-WAN engineering team has conducted a comprehensive internal security = review. This review resulted in software hardening releases that address mu= ltiple internally discovered vulnerabilities. The vulnerabilities tracked b=
y CVE-2026-20303 are related to improper input validation issues that are g= rouped under the Common Weakness Enumeration (CWE) CWE-20. 2026-08-05 9.9 C= VE-2026-20303 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20303 ] Cisco--= Cisco Catalyst SD-WAN Controller As part of Cisco's ongoing commitment to p= roactive security and product quality, the Cisco Catalyst SD-WAN engineerin=
g team has conducted a comprehensive internal security review. This review = resulted in a software hardening release that address multiple internally d= iscovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20304 ar=
e related to improper access control issues that are grouped under the Comm=
on Weakness Enumeration (CWE) CWE-284. 2026-08-05 9.9 CVE-2026-20304 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-20304 ] Cisco--Cisco Catalyst SD-WA=
N Controller As part of Cisco's ongoing commitment to proactive security an=
d product quality, the Cisco Catalyst SD-WAN engineering team has conducted=
a comprehensive internal security review. This review resulted in software=
hardening releases that address multiple internally discovered vulnerabili= ties. The vulnerabilities tracked by CVE-2026-20310 are related to improper=
link resolution before file access issues that are grouped under the Commo=
n Weakness Enumeration (CWE) CWE-59. 2026-08-05 9.1 CVE-2026-20310 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-20310 ] Cisco--Cisco Catalyst SD-WAN = Controller As part of Cisco's ongoing commitment to proactive security and = product quality, the Cisco Catalyst SD-WAN engineering team has conducted a=
comprehensive internal security review. This review resulted in software h= ardening releases that address multiple internally discovered vulnerabiliti= es. The vulnerabilities tracked by CVE-2026-20312 are related to Cleartext = storage of sensitive information issues that are grouped under the Common W= eakness Enumeration (CWE) CWE-312. 2026-08-05 8.8 CVE-2026-20312 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-20312 ] Cisco--Cisco Catalyst SD-WAN Co= ntroller As part of Cisco's ongoing commitment to proactive security and pr= oduct quality, the Cisco Catalyst SD-WAN engineering team has conducted a c= omprehensive internal security review. This review resulted in software har= dening releases that address multiple internally discovered vulnerabilities=
. The vulnerabilities tracked by CVE-2026-20313 are related to Improper lin=
k resolution before file access issues that are grouped under the Common We= akness Enumeration (CWE) CWE-1284. 2026-08-05 7.7 CVE-2026-20313 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-20313 ] Cisco--Cisco IOS XE Software As=
part of Cisco's ongoing commitment to proactive security and product quali= ty, the Cisco IOS XE Software engineering team has conducted a comprehensiv=
e internal security review. This review resulted in software hardening rele= ases that address multiple internally discovered vulnerabilities. The vulne= rabilities tracked by CVE-2026-20267 are related to improper access co= ntrol issues that are grouped under the Common Weakness Enumeration (CWE) P= illar CWE-284. 2026-08-05 9 CVE-2026-20267 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-20267 ] Cisco--Cisco IOS XE Software As part of Cisco's = ongoing commitment to proactive security and product quality, the Cisco IOS=
XE Software engineering team has conducted a comprehensive internal securi=
ty review. This review resulted in software hardening releases that address=
multiple internally discovered vulnerabilities. The vulnerabilities tracke=
d by CVE-2026-20272 are related to issues with improper neutralization of s= pecial elements that are grouped under the Common Weakness Enumeration (CWE=
) Pillar CWE-74. 2026-08-05 9.8 CVE-2026-20272 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-20272 ] Cisco--Cisco IOS XE Software A vulnerability in t=
he Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Softw= are could allow an unauthenticated, remote attacker to cause a denial of se= rvice (DoS) condition on an affected device. This vulnerability is due to i= mproper handling when parsing a specific BEEP SOAP request. An attacker cou=
ld exploit this vulnerability by sending a specific BEEP SOAP request to an=
affected device. A successful exploit could allow the attacker to cause th=
e device to reload unexpectedly, resulting in a DoS condition. 2026-08-05 8=
.6 CVE-2026-20263 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20263 ] Cis= co--Cisco IOS XE Software As part of Cisco's ongoing commitment to proactiv=
e security and product quality, the Cisco IOS XE Software engineering team = has conducted a comprehensive internal security review. This review resulte=
d in software hardening releases that address multiple internally discovere=
d vulnerabilities. The vulnerabilities tracked by CVE-2026-20268 are relate=
d to issues with improper restriction of operations within the bounds of a = memory buffer that are grouped under the Common Weakness Enumeration (CWE) = Pillar CWE-119. 2026-08-05 8.6 CVE-2026-20268 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-20268 ] Cisco--Cisco IOS XE Software As part of Cisco's on= going commitment to proactive security and product quality, the Cisco IOS X=
E Software engineering team has conducted a comprehensive internal security=
review. This review resulted in software hardening releases that address m= ultiple internally discovered vulnerabilities. The vulnerabilities tracked =
by CVE-2026-20269 are related to issues with improper control of a resource=
through its lifetime that are grouped under the Common Weakness Enumeratio=
n (CWE) Pillar CWE-664. 2026-08-05 8.6 CVE-2026-20269 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-20269 ] Cisco--Cisco IOS XE Software As part of Ci= sco's ongoing commitment to proactive security and product quality, the Cis=
co IOS XE Software engineering team has conducted a comprehensive internal = security review. This review resulted in software hardening releases that a= ddress multiple internally discovered vulnerabilities. The vulnerabilities = tracked by CVE-2026-20270 are related to incorrect calculation issues that = are grouped under the Common Weakness Enumeration (CWE) Pillar CWE-682. 202= 6-08-05 8.6 CVE-2026-20270 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20= 270 ] Cisco--Cisco IOS XE Software As part of Cisco's ongoing commitment to=
proactive security and product quality, the Cisco IOS XE Software engineer= ing team has conducted a comprehensive internal security review. This revie=
w resulted in software hardening releases that address multiple internally = discovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20271 a=
re related to insufficient control flow management issues that are grouped = under the Common Weakness Enumeration (CWE) Pillar CWE-691.   2026-08-=
05 8.6 CVE-2026-20271 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20271 ]=
Cisco--Cisco IOS XE Software As part of Cisco's ongoing commitment to proa= ctive security and product quality, the Cisco IOS XE Software engineering t= eam has conducted a comprehensive internal security review. This review res= ulted in a software hardening release that addresses multiple internally di= scovered vulnerabilities. The vulnerabilities tracked by CVE-2026-20273 are=
related to improper input validation issues that are grouped under the Com= mon Weakness Enumeration (CWE) Pillar CWE-20. 2026-08-05 8.6 CVE-2026-20273=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-20273 ] Cisco--Cisco IOS XE = Software A vulnerability in the Extensible Messaging Client Protocol (XMCP)=
, also referred to as the External Client protocol, of Cisco IOS Software a=
nd Cisco IOS XE Software could allow an unauthenticated, remote attacker to=
cause a denial of service (DoS) condition on an affected device. This vuln= erability is due to improper handling of malformed XMCP packets. An attacke=
r could exploit this vulnerability by sending a malformed XMCP packet to an=
affected device. A successful exploit could allow the attacker to cause th=
e affected device to reload unexpectedly, resulting in a DoS condition. The=
attacker does not need the XMCP client username to exploit this vulnerabil= ity. 2026-08-05 8.6 CVE-2026-20301 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-20301 ] Cisco--Cisco IOS XE Software A vulnerability in the Simple Ne= twork Management Protocol (SNMP) subsystem of Cisco IOS XE Software could a= llow an authenticated, remote attacker to cause an affected device to reloa=
d, resulting in a denial of service (DoS) condition. This vulnerability is = due to improper error handling when parsing SNMP requests. This vulnerabili=
ty affects all versions of SNMP — Versions 1, 2c, and 3. An attacker = could exploit this vulnerability by sending a malformed SNMP request to an = affected device. A successful exploit could allow the attacker to cause the=
device to reload unexpectedly. The attacker must have the SNMPv1 or v2c re= ad-only or read-write community string or valid SNMPv3 user credentials on = the affected device. 2026-08-05 7.7 CVE-2026-20124 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-20124 ] Cisco--Cisco Secure Endpoint A vulnerability =
in the zip archive parser of ClamAV could allow an unauthenticated, remote = attacker to cause a DoS condition on an affected device. This vulnerability=
is due to improper boundary checks for content in zip files during scannin=
g, which may result in an out-of-bounds write condition. An attacker could = exploit this vulnerability by submitting a crafted zip file for scanning. A=
successful exploit could allow the attacker to cause the ClamAV scanning p= rocess to terminate, resulting in a DoS condition on the affected software.=
2026-08-07 7.5 CVE-2026-20337 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-20337 ] Cisco--Cisco Secure Endpoint A vulnerability in the zip archive p= arser of ClamAV could allow an unauthenticated, remote attacker to cause a = DoS condition on an affected device. This vulnerability is due to improper = memory handling when processing content in zip files during scanning. An at= tacker could exploit this vulnerability by submitting a crafted zip file fo=
r scanning. A successful exploit could allow the attacker to cause the Clam=
AV scanning process to terminate as a result of a memory double-free, resul= ting in a DoS condition on the affected software. 2026-08-07 7.5 CVE-2026-2= 0338 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20338 ] Cisco--Cisco Sec= ure Endpoint A vulnerability in the PESpin file format parser of ClamAV cou=
ld allow an unauthenticated, remote attacker to cause a DoS condition or po= ssibly other expanded impacts as a result of memory corruption on an a= ffected device. This vulnerability is due to improper boundary checks for c= ontent in PESpin files during scanning, which may result in an integer over= flow. An attacker could exploit this vulnerability by submitting a crafted = file that contains PESpin content to be scanned by ClamAV on an affected de= vice. A successful exploit could allow the attacker to cause the ClamAV sca= nning process to terminate, resulting in a DoS condition on the affected so= ftware. 2026-08-07 7.5 CVE-2026-20339 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-20339 ] Cisco--Cisco Secure Endpoint A vulnerability in the GPT fi=
le format parser of ClamAV could allow an unauthenticated, remote attacker =
to cause a DoS condition or possibly other expanded impacts as a result of&= nbsp;memory corruption on an affected device. This vulnerability is due to = improper handling of an endian conversion operation, which may result in an=
out-of-bounds buffer write. An attacker could exploit this vulnerability b=
y submitting a crafted GPT file to be scanned by ClamAV on an affected devi= ce. A successful exploit could allow the attacker to cause the ClamAV scann= ing process to terminate, resulting in a DoS condition on the affected soft= ware. 2026-08-07 7.5 CVE-2026-20345 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-20345 ] Cisco--Cisco Secure Endpoint A vulnerability in the PDF file=
format parser of ClamAV could allow an unauthenticated, remote attacker to=
cause a DoS condition or possibly other expanded impacts as a result of&nb= sp;memory corruption on an affected device. This vulnerability is due to im= proper boundary checks for content in PDF files during scanning, which may = result in an out-of-bounds buffer read. An attacker could exploit this vuln= erability by submitting a crafted PDF file to be scanned by ClamAV on an af= fected device. A successful exploit could allow the attacker to cause the C= lamAV scanning process to terminate, resulting in a DoS condition on the af= fected software. 2026-08-07 7.5 CVE-2026-20346 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-20346 ] Cisco--Cisco Secure Endpoint A vulnerability in t=
he Mach-O file format parser of ClamAV could allow an unauthenticated, remo=
te attacker to cause a DoS condition or possibly other expanded impacts as =
a result of memory corruption on an affected device. This vulnerabilit=
y is due to improper boundary checks for content in Mach-O files during sca= nning, which may result in an out-of-bounds buffer read. An attacker could = exploit this vulnerability by submitting a crafted Mach-O file to be scanne=
d by ClamAV on an affected device. A successful exploit could allow the att= acker to cause the ClamAV scanning process to terminate, resulting in a DoS=
condition on the affected software. 2026-08-07 7.5 CVE-2026-20347 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-20347 ] Cisco--Cisco Secure Endpoint =
A vulnerability in the XAR file format parser of ClamAV could allow an unau= thenticated, remote attacker to cause a DoS condition or possibly other exp= anded impacts as a result of memory corruption on an affected device. = This vulnerability is due to improper boundary checks for content in XAR fi= les during scanning. An attacker could exploit this vulnerability by submit= ting a crafted file that contains XAR content to be scanned by ClamAV on an=
affected device. A successful exploit could allow the attacker to cause th=
e ClamAV scanning process to terminate, resulting in a DoS condition on the=
affected software. 2026-08-07 7.5 CVE-2026-20348 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-20348 ] Cisco--Cisco Unified Computing System (Standal= one) A vulnerability in the web-based management interface of Cisco IMC cou=
ld allow an authenticated, remote attacker with low privileges to execute a= rbitrary commands on the underlying operating system of an affected system = and elevate privileges to root.  This vulnerability is due to improper=
validation of user-supplied input. An attacker could exploit this vulnerab= ility by entering crafted inputs to the web-based management interface of t=
he affected software. A successful exploit could allow the attacker to exec= ute arbitrary commands on the underlying operating system as the root user.=   2026-08-05 8.8 CVE-2026-20200 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-20200 ] ClearFoundation--ClearOS ClearOS 7.9 contains an OS command=
injection vulnerability in the Log Viewer component that allows authentica= ted attackers to execute arbitrary commands by submitting unsanitized input=
through the filter parameter, which is interpolated directly into a shell = command in File.php. Attackers can inject command substitution payloads int=
o the filter parameter to execute arbitrary commands as the webconfig user,=
and due to extensive NOPASSWD sudo privileges granted to that user by defa= ult, immediately escalate to root. 2026-08-03 7.2 CVE-2026-67599 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-67599 ] CoCart--CoCart The CoCart WordP= ress plugin before 4.9.0 does not validate a user-supplied price value agai= nst the actual product price when items are added to the cart through one o=
f its public REST API endpoints, allowing unauthenticated users to set arbi= trary product prices and complete WooCommerce orders at manipulated totals.=
2026-08-06 7.5 CVE-2026-10524 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-10524 ] code-projects--Task Management System A vulnerability was detecte=
d in code-projects Task Management System 1.0. Affected is an unknown funct= ion of the file /index.php of the component Login. Performing a manipulatio=
n of the argument Password results in improper authentication. The attack i=
s possible to be carried out remotely. The exploit is now public and may be=
used. 2026-08-09 7.3 CVE-2026-19342 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-19342 ] code-projects--Task Management System A flaw has been found=
in code-projects Task Management System 1.0. Affected by this vulnerabilit=
y is an unknown functionality of the file /admin/AdminLogin.php. Executing =
a manipulation of the argument email/password can lead to sql injection. Th=
e attack may be performed from remote. The exploit has been published and m=
ay be used. 2026-08-09 7.3 CVE-2026-19343 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-19343 ] code-projects--Task Management System A vulnerability = has been found in code-projects Task Management System 1.0. Affected by thi=
s issue is some unknown functionality of the file /user/comment_count_user.= php. The manipulation of the argument task_id leads to sql injection. It is=
possible to initiate the attack remotely. The exploit has been disclosed t=
o the public and may be used. 2026-08-09 7.3 CVE-2026-19344 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-19344 ] Constant Contact--Creative Mail Subs= criber SQL Injection in Creative Mail <=3D 1.6.9 versions. 2026-08-06 8.5 C= VE-2026-65547 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65547 ] Contiki= -NG--Contiki-NG Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app= -layer/mqtt/mqtt.c sets topic_len_received=3D1 before checking topic_len ag= ainst the 64-byte limit, so an over-length topic returns early but leaves t=
he flag set. On the next TCP segment, tcp_input() re-invokes the parser wit=
h topic_received=3D=3D0, and the persisted topic_len_received=3D=3D1 skips = the length-reading block containing the guard, falling through directly to =
a memcpy() that uses the unvalidated 16-bit topic_len as the copy length. T=
he 65-byte topic[] destination overruns into adjacent struct fields includi=
ng the payload_chunk pointer, which subsequent MQTT code dereferences, givi=
ng a compromised or attacker-controlled broker an arbitrary-pointer-write p= rimitive. Contiki-NG's MQTT implementation has no TLS support so the connec= tion is plaintext. Impact ranges from information disclosure and denial of = service to remote code execution on embedded targets without memory protect= ion. 2026-08-06 8.1 CVE-2026-5857 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-5857 ] Contiki-NG--Contiki-NG Contiki-NG's LwM2M TLV parser lwm2m_tlv_= read() in os/services/lwm2m/lwm2m-tlv.c ignores its caller-supplied buffer = length argument and reads up to six bytes from the input buffer with no bou= nds check. The caller in lwm2m-engine.c iterates while there is at least on=
e byte remaining, so a crafted CoAP WRITE to any LwM2M endpoint whose final=
TLV supplies exactly one byte triggers up to five out-of-bounds reads of h= eap memory adjacent to the CoAP input buffer, disclosing memory contents (i= ncluding key material and peer addresses) through the parsed tlv->id, tlv->= length, and tlv->value fields. Corrupted tlv_len derived from the out-of-bo= unds memory further corrupts the caller's parse offset. In LwM2M NoSec mode=
, the default for constrained devices, no authentication is required. 2026-= 08-06 7.5 CVE-2026-5855 [ https://www.cve.org/CVERecord?id=3DCVE-2026-5855 =
] Contiki-NG--Contiki-NG Contiki-NG's DNS/mDNS resolver skip_name() in os/s= ervices/resolv/resolv.c walks DNS wire-format name labels with no packet-bo= undary check, and the caller in newdata() invokes it in a loop iterating nq= uestions times from the attacker-controlled DNS header before validating th=
e transaction ID. An attacker who sets nquestions higher than the number of=
complete questions present causes skip_name() to walk past the UDP packet = buffer, and the returned pointer is cast to struct dns_answer * for further=
memory reads. On builds with RESOLV_CONF_SUPPORTS_MDNS enabled, any peer o=
n the local segment can trigger the read unauthenticated via a multicast UD=
P 5353 packet with no outstanding query required; on standard DNS builds an=
attacker who can inject a UDP response from port 53 during an outstanding = query can trigger the same read. Impact is out-of-bounds read of uip_buf an=
d adjacent memory, disclosing memory contents or crashing the resolver. 202= 6-08-06 7.1 CVE-2026-5856 [ https://www.cve.org/CVERecord?id=3DCVE-2026-585=
6 ] cornelraiu-1--Search Analytics for WP The Search Analytics for WP plugi=
n for WordPress is vulnerable to Cross-Site Request Forgery in all versions=
up to, and including, 1.4.16. This is due to missing or incorrect nonce va= lidation on the `process_bulk_action()` function of `MWTSA_Stats_Table`. Th=
is makes it possible for unauthenticated attackers to delete arbitrary sear= ch-term records, including all associated search-history rows, via a forged=
request granted they can trick a user with access to the plugin's "Search = Analytics" dashboard page (Administrator by default) into performing an act= ion such as clicking on a link. 2026-08-05 8.1 CVE-2026-7444 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-7444 ] Cotonti--Cotonti Cotonti CMS's Comme= nts plugin deserializes user-supplied data without restricting the classes = that may be instantiated. In plugins/comments/controllers/actions/CreateAct= ion.php, a `ci` POST parameter obtained via `cot_import('ci', 'P', 'TXT')` = (trim-only sanitization) is passed to `unserialize(base64_decode($ci))` wit=
h no `allowed_classes` restriction, reachable by any member with write acce=
ss to comments (the default `Auth_members =3D> 'RW'` setting in plugins/com= ments/comments.setup.php). In plugins/comments/controllers/actions/EditActi= on.php, a `cb` parameter is similarly deserialized via `unserialize(base64_= decode($this->comeback))` in prepareComeBack(), reachable by any member edi= ting their own comment. Because unserialize() is called without allowed_cla= sses, an attacker can construct a serialized PHP object of any class loaded=
by Cotonti (a PHP Object Injection primitive). This was demonstrated in pr= actice using Cotonti's own MySQL_cache class: a crafted serialized MySQL_ca= che object, once deserialized and later garbage-collected, triggers its __d= estruct()->flush() chain, causing an attacker-controlled INSERT INTO cot_ca= che with attacker-chosen row values - confirming genuine POP-chain exploita= tion, with further impact (including potential RCE) contingent on other gad= get chains available in a given Cotonti installation's loaded classes. A th= ird sink in DeleteAction.php contains the identical unserialize() pattern b=
ut is gated behind an admin-only authorization check and is not reachable b=
y ordinary members. 2026-08-05 7.7 CVE-2026-71294 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-71294 ] cozmoslabs--TranslatePress Translate Multiling= ual sites with AI Translation The TranslatePress - Translate Multilingual s= ites with AI Translation plugin for WordPress is vulnerable to Stored Cross= -Site Scripting via Comment Content (URL-encoded gettext markers) in all ve= rsions up to, and including, 3.2.6 due to insufficient input sanitization a=
nd output escaping. This makes it possible for unauthenticated attackers to=
inject arbitrary web scripts in pages that will execute whenever a user ac= cesses an injected page. Comment moderation may delay exploitation for firs= t-time commenters, but does not prevent it, as the payload uses only WordPr= ess-permitted tags and attributes with percent-encoded characters that pass=
wp_kses URL validation unmodified. 2026-08-06 7.2 CVE-2026-18510 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-18510 ] crater-invoice--Crater Crater = isolates data per company_id, and its Invoice/Estimate/Payment/Expense poli= cies enforce both a Bouncer ability check and $user->hasCompany($model->com= pany_id). CustomerPolicy's view/update/delete methods omit the company-owne= rship check entirely, checking only the blanket ability. Route-model-bound = customer lookups and the bulk Customer::deleteCustomers() method are simila= rly unscoped (self::find($id) with no company filter). Any authenticated us=
er of one company can read, reassign (steal), or delete another company's c= ustomer records, with deletion cascading to that customer's invoices and pa= yments. 2026-08-05 8.2 CVE-2026-55739 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-55739 ] crater-invoice--crater Crater's NotePolicy checks only a b= lanket Bouncer ability (manage-all-notes / view-all-notes) with no company-= ownership comparison, unlike InvoicePolicy and other sibling policies which=
additionally verify $user->hasCompany($model->company_id). NotesController=
's show(), update(), and destroy() actions authorize via $this->authorize('= view notes'/'manage notes') without passing the target Note model, and Note=
's company-scoping (scopeWhereCompany) is applied only in the list endpoint=
, not in show/update/destroy. Any authenticated user of one company can rea=
d, edit, or delete another company's notes by ID. This is a distinct findin=
g from the previously reported CustomerPolicy company-ownership omission (a=
different policy class and controller). 2026-08-05 8.2 CVE-2026-71242 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-71242 ] Creative Mail--Creative M= ail The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitiz=
e and escape a parameter before using in an SQL statement, leading to an un= authenticated SQL injection when the abandoned cart email is managed by cre= ative mail. 2026-08-06 8.6 CVE-2026-3430 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-3430 ] Crocoblock. Jetimpex Inc.--JetEngine Unauthenticated Cro=
ss Site Scripting (XSS) in JetEngine <=3D 3.8.13.1 versions. 2026-08-06 7.1=
CVE-2026-28082 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28082 ] cwalt= er-at--FreeModbus The LINUXTCP port of FreeModbus contains an off-by-one bo= unds check in xMBPortTCPPool() (demo/LINUXTCP/port/porttcp.c). The check `i=
f (usTCPFrameBytesLeft > MB_TCP_BUF_SIZE)` uses a strict greater-than compa= rison instead of greater-than-or-equal against the 263-byte MB_TCP_BUF_SIZE=
limit. An MBAP frame with a Length field of 264 makes usTCPFrameBytesLeft = equal to 263, which passes the flawed check, and the subsequent recv() call=
writes up to 263 bytes starting at buffer offset 7 into the 263-byte stati=
c buffer aucTCPBuf, overflowing it by 7 bytes into the adjacent static vari= able usTCPBufPos. A single crafted, unauthenticated Modbus TCP packet trigg= ers the overflow, since Modbus has no built-in authentication. 2026-08-05 9=
.1 CVE-2026-71263 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71263 ] cyb= erlord92--Page and Post Restriction The Page and Post Restriction plugin fo=
r WordPress is vulnerable to Sensitive Information Exposure in versions up =
to and including 1.4.0 via the WordPress core REST endpoints /wp-json/wp/v2= /pages, /wp-json/wp/v2/pages/<id>, /wp-json/wp/v2/posts, and /wp-json/wp/v2= /posts/<id>. This is due to the plugin's REST guards - papr_restrict_page_p= ost_rest_api() and the the_posts filter registered by papr_filter_posts() -=
sourcing their restricted-ID list exclusively from papr_get_restricted_pos= ts_id(), which only reads the per-page metabox options papr_allowed_redirec= t_for_pages and papr_allowed_redirect_for_posts and never consults the two = global toggles papr_access_for_only_loggedin and papr_access_for_only_logge= din_posts that the plugin's own UI describes as 'Make all Pages Private' / = 'Make all Posts Private'. This makes it possible for unauthenticated attack= ers to read the full rendered content of every published page and post on s= ites configured with the documented global toggles, bypassing the security = boundary enforced on the frontend by papr_restrict_logged_in_users(). 2026-= 08-05 7.5 CVE-2026-12000 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1200=
0 ] D-Link Corporation--DWR-M961 D-Link DWR-M961 devices with hardware vers= ion C1 and firmware version before 1.1.5_C1_202607071108 contain a command = injection vulnerability in the /boafrm/formLtefotaUpgradeQuectel interface.=
A remote attacker can inject arbitrary malicious commands into the fota_ur=
l field, resulting in command execution with root privileges. 2026-08-08 9.=
8 CVE-2026-71944 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71944 ] D-Li=
nk Corporation--DWR-M961 D-Link DWR-M961 devices with hardware version C1 a=
nd firmware version before 1.1.5_C1_202607071108 contain a command injectio=
n vulnerability in the /boafrm/formLtefotaUpgradeFibocom interface. A remot=
e attacker can inject arbitrary malicious commands into the fota_url field,=
resulting in command execution with root privileges. 2026-08-08 9.8 CVE-20= 26-71945 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71945 ] D-Link Corpo= ration--DWR-M961 D-Link DWR-M961 devices with hardware version C1 and firmw= are version before 1.1.5_C1_202607071108 contain a command injection vulner= ability in the /boafrm/formPingDiagnosticRun interface. A remote attacker c=
an inject arbitrary malicious commands into the host field, resulting in co= mmand execution with root privileges. 2026-08-08 9.8 CVE-2026-71946 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-71946 ] D-Link Corporation--DWR-M961=
D-Link DWR-M961 devices with hardware version C1 and firmware version befo=
re 1.1.5_C1_202607071108 contain a command injection vulnerability in the /= boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inject = arbitrary malicious commands into the host and ipVer fields, resulting in c= ommand execution with root privileges. 2026-08-08 9.8 CVE-2026-71947 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-71947 ] D-Link Corporation--DWR-M96=
1 D-Link DWR-M961 devices with hardware version C1 and firmware version bef= ore 1.1.5_C1_202607071108 contain a command injection vulnerability in the = /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbi= trary malicious commands into the host field, resulting in command executio=
n with root privileges. 2026-08-08 9.8 CVE-2026-71948 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-71948 ] D-Link Corporation--DWR-M961 D-Link DWR-M9=
61 devices with hardware version C1 and firmware version before 1.1.5_C1_20= 2607071108 contain a command injection vulnerability in the /boafrm/formUSS= DSetup interface. A remote attacker can inject arbitrary malicious commands=
into the ussdValue and selectMenuValue fields, resulting in command execut= ion with root privileges. 2026-08-08 9.8 CVE-2026-71949 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-71949 ] D-Link Corporation--DWR-M961 D-Link DWR-= M961 devices with hardware version C1 and firmware version before 1.1.5_C1_= 202607071108 contain a command injection vulnerability in the /boafrm/formS= msManage interface. A remote attacker can inject arbitrary malicious comman=
ds into the action_value field, resulting in command execution with root pr= ivileges. 2026-08-08 9.8 CVE-2026-71950 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-71950 ] D-Link Corporation--DWR-M961 D-Link DWR-M961 devices wi=
th hardware version C1 and firmware version before 1.1.5_C1_202607071108 co= ntain a command injection vulnerability in the /boafrm/formIMEISetup interf= ace. A remote attacker can inject arbitrary malicious commands into the IME= I_value field, resulting in command execution with root privileges. 2026-08= -08 9.8 CVE-2026-71951 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71951 =
] D-Link Corporation--DWR-M961 D-Link DWR-M961 devices with hardware versio=
n C1 and firmware version before 1.1.5_C1_202607071108 contain a command in= jection vulnerability in the /boafrm/formPinManageSetup interface. A remote=
attacker can inject arbitrary malicious commands into the oldPIn field, re= sulting in command execution with root privileges. 2026-08-08 9.8 CVE-2026-= 71952 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71952 ] D-Link Corporat= ion--DWR-M961 D-Link DWR-M961 devices with hardware version C1 and firmware=
version before 1.1.5_C1_202607071108 contain a command injection vulnerabi= lity in the /boafrm/formNtp interface. A remote attacker can inject arbitra=
ry malicious commands into the ntpServerIp1 field, resulting in command exe= cution with root privileges. 2026-08-08 9.8 CVE-2026-71953 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-71953 ] D-Link Corporation--DWR-M961 D-Link D= WR-M961 devices with hardware version C1 and firmware version before 1.1.5_= C1_202607071108 contain a command injection vulnerability in the /boafrm/fo= rmL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malic= ious commands into the tunnelid and sessionid fields, resulting in command = execution with root privileges. 2026-08-08 9.8 CVE-2026-71954 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-71954 ] D-Link Corporation--DWR-M961 D-Lin=
k DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_2= 02602110044 contain a command injection vulnerability in the /boafrm/formWs=
c interface. A remote attacker can inject arbitrary malicious commands into=
the localPin, targetAPSsid, peerPin, and peerRptPin fields, resulting in c= ommand execution with root privileges. 2026-08-08 9.8 CVE-2026-71955 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-71955 ] D-Link Corporation--DWR-M96=
1 D-Link DWR-M961 devices with hardware version C1 and software version 1.1= .2_C1_202602110044 contain a command injection vulnerability in the app.cgi=
interface. A remote attacker can inject arbitrary malicious commands into = the netDig.ping.dst field, resulting in command execution with root privile= ges. 2026-08-08 9.8 CVE-2026-71956 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-71956 ] D-Link Corporation--DWR-M961 D-Link DWR-M961 devices with har= dware version C1 and software version 1.1.2_C1_202602110044 contain a buffe=
r overflow vulnerability in the app.cgi interface. A remote attacker can wr= ite an overly long string to the netAcc.addlist[].name field and execute ar= bitrary commands by crafting a specific payload, or cause the device to cra= sh. 2026-08-08 9.8 CVE-2026-71957 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-71957 ] D-Link Corporation--DWR-M961 D-Link DWR-M961 devices with hard= ware version C1 and software version 1.1.2_C1_202602110044 contain a buffer=
overflow vulnerability in the quicksetup.cgi interface. A remote attacker = can write overly long strings to the test4, ssid2, and username fields and = execute arbitrary commands by crafting a specific payload, or cause the dev= ice to crash. 2026-08-08 9.8 CVE-2026-71958 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-71958 ] Daniel Iser--Popup Maker Unauthenticated Cross Site = Scripting (XSS) in Popup Maker <=3D 1.23.0 versions. 2026-08-06 7.1 CVE-202= 6-28177 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28177 ] Data443 Risk = Mitigation, Inc.--Tracking Code Manager Unauthenticated Cross Site Request = Forgery (CSRF) in Tracking Code Manager <=3D 2.6.0 versions. 2026-08-06 7.1=
CVE-2026-28172 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28172 ] DataL= inkDC--Dinky Dinky's POST /download/uploadFromRsByLocal handler passes the = caller-supplied path parameter directly to new File(path) and file.transfer= To(dest) with no path validation. The route is marked @SaIgnore and /downlo= ad/** is excluded from the Sa-Token interceptor, so the only guard is a hea= der equality check against a dinkyToken value whose default (efda1551-7958-= 4e0f-80a8-dfd107df3e38) is hardcoded in source and shipped to every deploym= ent. Anyone who can reach Dinky's HTTP port (8888 by default) and supplies = the hardcoded token can write arbitrary files as the Dinky service account.=
The default Docker image runs on 8888 with no proxy or authentication and = chmod 777 on /opt/dinky, so the application's own classpath, launch scripts=
, and static assets are writable. Demonstrated impact: overwriting /opt/din= ky/config/static/index.html served attacker JavaScript to admin browsers im= mediately, and writing /opt/dinky/org/dinky/Dinky.class executed attacker c= ode as the Dinky service account at the next JVM start via a classpath-shad=
ow launched by script/bin/auto.sh. Writes are uid 9999 (flink), not root, s=
o /etc, /root, /home, and /usr are refused. Affects Dinky v1.2.5 (the curre=
nt release) and the development branch, where the code is byte-identical. 2= 026-08-06 9.8 CVE-2026-70558 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 70558 ] DataLinkDC--Dinky Dinky's SysConfigController.getAll() handler for = GET /api/sysConfig/getAll carries a method-level @SaIgnore annotation that = short-circuits the class-level @SaCheckLogin, so the Sa-Token interceptor l= ets the request through with no session or role check. Any remote unauthent= icated caller who can reach the Dinky HTTP port (8888 by default) receives = the full live system configuration (54 entries on a stock v1.2.5 install) w= ith one parameterless GET. Only one credential field (sys.maven.settings.re= positoryPassword) has a desensitization handler wired; the other credential= -bearing fields (sys.env.settings.dinkyToken, sys.ldap.settings.userPasswor=
d, sys.resource.settings.oss.accessKey and secretKey, and sys.dolphinschedu= ler.settings.token) return in cleartext. A bare install leaks the shipped d= efaults, including the hardcoded dinkyToken efda1551-7958-4e0f-80a8-dfd107d= f3e38 and minioadmin/minioadmin OSS keys; once an operator configures LDAP,=
object storage, or DolphinScheduler through the Settings Center, those liv=
e third-party credentials leak from the same endpoint. Because dinkyToken i=
s the sole gate on the sibling POST /download/uploadFromRsByLocal arbitrary=
file write, this disclosure defeats token rotation as a mitigation for tha=
t vulnerability. Affects Dinky v1.2.5 (the current release, 2025-11-05) and=
the development branch (dev HEAD 63b5a5a), where the affected code is byte= -identical. 2026-08-06 7.5 CVE-2026-70559 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-70559 ] David Lingren--Media LIbrary Assistant Unauthenticated=
Cross Site Scripting (XSS) in Media LIbrary Assistant <=3D 3.38 versions. = 2026-08-06 7.1 CVE-2026-61963 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -61963 ] debevv--nanoMODBUS nanoMODBUS through v1.23.0 contains an out-of-b= ounds write in the Modbus server-side handle_read_file_record() function (F=
C 0x14, Read File Record) in nanomodbus.c. The function validates that the = total request size does not exceed 245 bytes and that each sub-request's re= cord_length is at most 124, but it never validates the CUMULATIVE response = size across all sub-requests before processing them. The accumulator respon= se_data_size is declared as uint8_t and is incremented by 2 + record_length=
*2 for each of up to 35 sub-requests; with 35 sub-requests of record_length= =3D124, the cumulative demand is 8750 bytes, which overflows the uint8_t ac= cumulator. A subsequent loop then calls get_n(), an internal function with =
no bounds checking, once per sub-request to obtain a pointer into the 260-b= yte msg.buf receive buffer and advances the internal buf_idx by up to 248 b= ytes per call; swap_regs() then writes to that pointer unconditionally. A s= ingle crafted FC 0x14 request from an unauthenticated network client can ca= use up to ~8490 bytes to be written out of bounds past the 260-byte buffer,=
corrupting adjacent memory in the server process and leading to denial of = service or potential remote code execution, particularly on embedded/bare-m= etal targets without memory protection. 2026-08-05 9.8 CVE-2026-71254 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-71254 ] debevv--nanoMODBUS nanoMOD= BUS through v1.23.0 contains an out-of-bounds stack read leading to a wild-= pointer write in nmbs_read_device_identification_basic() / recv_read_device= _identification_res() in nanomodbus.c. A fixed 3-element stack array order[=
3] =3D {0,1,2} maps object IDs to buffer indices. The server-supplied objec= t_id field (0-255, read directly from the wire) is used without any bounds = check as buf_index =3D order[object_id]. When a malicious Modbus server sen=
ds a Read Device Identification response with object_id >=3D 3, this reads =
an out-of-bounds/garbage byte from the stack adjacent to order[], which is = then used as an index into a 3-element buffers[] array of char* pointers. T=
he resulting wild pointer is passed to strncpy() as the destination, causin=
g an arbitrary-address write with server-controlled data. 2026-08-05 9.8 CV= E-2026-71256 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71256 ] debevv--= nanoMODBUS nanoMODBUS through v1.23.0 contains an out-of-bounds write in th=
e Modbus client-side recv_read_device_identification_res() function (FC 0x2= B/MEI 0x0E, Read Device Identification) in nanomodbus.c. The server-supplie=
d object_length field (0-246) is validated only against the remaining PDU s= ize (res_size_left) and is never validated against the caller-supplied buff= ers_length parameter. After copying data with strncpy(buffers_out[buf_index=
], str, buffers_length), the code unconditionally writes a NUL terminator a=
t buffers_out[buf_index][object_length]. When a malicious or compromised Mo= dbus server sends a response with object_length greater than or equal to th=
e client's buffers_length, this NUL write lands past the end of the caller-= provided buffer, corrupting adjacent stack or heap memory on the client. 20= 26-08-05 8.6 CVE-2026-71255 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7= 1255 ] decidim--decidim Decidim is a participatory democracy framework. Pri=
or to 0.31.5 and in 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentica= tion is not bound to the organization selected by the current host, allowin=
g a JWT issued for one tenant to be replayed against another tenant's API t=
o read participantDetails data and reach the proposal.answer mutation path.=
This issue is fixed in versions 0.31.5 and 0.32.0.rc2. 2026-08-06 8.5 CVE-= 2026-45414 [ https://www.cve.org/CVERecord?id=3DCVE-2026-45414 ] decidim--d= ecidim Decidim is a participatory democracy framework. Prior to 0.30.9, fro=
m 0.31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-d= ocument verification admin UI embeds verification_attachment blobs through = reusable signed Active Storage disk URLs, allowing anyone who obtains a URL=
to download the scanned document without an authenticated Decidim session = until the signature expires. Verification-document images are rendered with=
variant_url(...), which produces signed /rails/active_storage/disk/... lin=
ks instead of routing the file through an authorization-checking controller=
. Because Decidim configures Active Storage service URLs to remain valid fo=
r seven days, the URL itself becomes the credential for that period. The af= fected files are verification_attachment blobs on Decidim::Authorization, a=
nd the admin review pages embed those signed URLs directly into the HTML fo=
r pending and confirmation views. This issue is fixed in versions 0.30.9, 0= .31.5, and 0.32.0.rc2. 2026-08-06 7.5 CVE-2026-45378 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-45378 ] DeepCool--DisplayService A vulnerability wa=
s detected in DeepCool DisplayService 1.2.12. This issue affects some unkno=
wn processing of the file C:\DeepCool\resources\service\x64\DeepCoolDisplay= Service.exe. Performing a manipulation results in improper access controls.=
The attack must be initiated from a local position. The exploit is now pub= lic and may be used. 2026-08-07 7.8 CVE-2026-19192 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-19192 ] Dell--Display and Peripheral Manager (DDPM Ma=
c) Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0.= 1005, contain an Improper Access Control vulnerability. A low privileged at= tacker with local access could potentially exploit this vulnerability, lead= ing to Elevation of privileges and arbitrary code execution. 2026-08-03 7.8=
CVE-2026-59912 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59912 ] Dell-= -Display and Peripheral Manager (DDPM Mac) Dell Display and Peripheral Mana= ger (DDPM Mac), versions prior to 2.3.0.1005, contain a Missing Authenticat= ion for Critical Function vulnerability. A low privileged attacker with loc=
al access could potentially exploit this vulnerability, leading to Elevatio=
n of privileges. 2026-08-03 7.8 CVE-2026-59913 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-59913 ] Dell--OpenManage Server Administrator Managed Nod=
e (Patch) for Windows Dell OpenManage Server Administrator, versions prior =
to 11.1.0.2, contains an Improper Authentication vulnerability. An unauthen= ticated attacker with remote access could potentially exploit this vulnerab= ility, leading to Unauthorized access. 2026-08-07 7.7 CVE-2026-56793 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-56793 ] Dell--Virtual Storage Integ= rator for VMware vSphere Client Dell Virtual Storage Integrator for VMware = vSphere Client, versions prior to 10.11.1.0, contain(s) a Sensitive Informa= tion Disclosure vulnerability. An unauthenticated remote attacker could pot= entially exploit this vulnerability, leading to information disclosure and = session hijacking. This vulnerability is considered critical as it allows a=
n unauthenticated attacker to obtain active session credentials and fully i= mpersonate authenticated users, including administrators. Dell recommends c= ustomers to upgrade at the earliest opportunity. 2026-08-06 9.1 CVE-2026-54= 489 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54489 ] Dell--Virtual Sto= rage Integrator for VMware vSphere Client Dell Virtual Storage Integrator f=
or VMware vSphere Client, versions prior to 10.11.1.0, contain(s) an OS Com= mand Injection vulnerability in the IAPI component. A remote unauthenticate=
d attacker could potentially exploit this vulnerability, leading to the exe= cution of arbitrary OS commands on the application's underlying operating s= ystem with root privileges. Exploitation may lead to a complete system take= over by an attacker. This vulnerability is considered critical as it allows=
an unauthenticated remote attacker to achieve arbitrary code execution as = root, potentially compromising the entire VSI deployment and underlying inf= rastructure. Dell recommends customers to upgrade at the earliest opportuni= ty. 2026-08-06 9.8 CVE-2026-67261 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-67261 ] devitemsllc--ShopLentor All-in-One WooCommerce Growth & Store = Enhancement Plugin The ShopLentor plugin for WordPress is vulnerable to arb= itrary function execution via the woolentoropt/v1/custom-action REST API en= dpoint in all versions up to, and including, 3.3.7. This is due to the hand= le_action() method passing user-supplied input directly to call_user_func()=
without an allowlist of permitted callbacks. This makes it possible for au= thenticated attackers, with Administrator-level access and above, to execut=
e arbitrary PHP callable functions via the 'callback' parameter. 2026-08-05=
7.2 CVE-2026-6020 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6020 ] dgr= aph-io--dgraph Dgraph is an open source distributed GraphQL database. Prior=
to 25.3.8, maybeQuoteArg in graphql/resolve/query_rewriter.go passes regex=
p filter strings into generated DQL without quoting or validating the /patt= ern/flags form, allowing crafted GraphQL query or mutation filters to injec=
t DQL operators, disclose unintended nodes, or expand modification and dele= tion targets. This issue is fixed in version 25.3.8. 2026-08-06 8.6 CVE-202= 6-63637 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63637 ] dhax--go-base=
go-base is a Go RESTful API Boilerplate template with JWT Authentication, = backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing secr=
et is hardcoded to the known string "random", letting any attacker who read=
s the public repository forge tokens for arbitrary users, including admin r= oles, and completely bypass authentication on all protected endpoints. This=
value is set in two places: the dev.env template (line 10) and a programma= tic fallback in cmd/serve.go (line 35), so the application uses it even whe=
n no .env file is present. The original mitigation in auth/jwt/tokenauth.go=
(lines 22 to 25) only caught the exact string "random", letting other weak=
secrets through, and replaced it with an in-memory key that was not persis= ted, invalidating all tokens on every restart and effectively causing a den= ial-of-service. This issue has been fixed in version 2026-05-18. 2026-08-03=
9.1 CVE-2026-48031 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48031 ] D= jangoCRM--django-crm DjangoCRM ships with its Django SECRET_KEY hardcoded d= irectly in the committed webcrm/settings.py rather than read from an enviro= nment variable. Since this key is used for session signing, CSRF token gene= ration, and password reset tokens, anyone who reads the public repository c=
an forge valid session cookies (including for the superadmin account), forg=
e CSRF tokens, and forge password reset tokens, achieving full account take= over. The repository also ships with DEBUG=3DTrue as the default, causing e= rror pages to leak database credentials, email credentials, OAuth data, and=
internal file paths. 2026-08-05 9.1 CVE-2026-71238 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-71238 ] DjangoCRM--django-crm DjangoCRM's massmail m= odule renders user-controlled EmlMessage fields (subject, content) through = Django's Template() constructor with no sanitization, in at least three loc= ations: message_previews.py builds an f-string embedding message.subject/me= ssage.content directly into a Template() call; email_creators.py passes eml= _message.subject directly as a template string to Template(); and helpers.p=
y contains the same f-string interpolation pattern. An authenticated user w= ith mass-mail message edit rights can inject Django template syntax ({{ }} =
/ {% %}) that executes at render time, enabling disclosure of other users' = data and password hashes via request context variables, CSRF token forgery,=
and inclusion of arbitrary registered templates. 2026-08-05 8.1 CVE-2026-7= 1239 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71239 ] djangoproject--D= jango An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.= 0.8. GeoDjango spatial lookups optimistically parse the right-hand-side val=
ue as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` co= nstructor. Any value used in a spatial lookup against a `GeometryField` or = `RasterField` reaches this constructor, including untrusted input, for exam= ple a spatial-field filter submitted through the Django admin changelist qu= ery string by a staff user with view permission. A `dict`, or a `str` holdi=
ng its JSON representation, is opened in write mode regardless of the const= ructor's `write=3DFalse` default, allowing a file with an attacker-chosen n= ame and contents to be written through a file-backed GDAL driver. Any other=
`str` is treated as a datasource, allowing an outbound network request thr= ough a GDAL virtual filesystem handler. Writing a file to a location later = imported by the application can result in remote code execution. Earlier, u= nsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluat=
ed and may also be affected. Django would like to thank Bence Nagy, localho= st-detect, and kimchunbok_ for reporting this issue. 2026-08-04 8.8 CVE-202= 6-15307 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15307 ] documize--com= munity Documize Community's attachment download route (domain/attachment/en= dpoint.go, Download function, registered via AddPublic with no auth middlew= are) accepts a `secure` query parameter and grants access whenever the para= meter is simply non-empty (len(secureToken) > 0), without comparing it to a=
ny server-stored value. Any non-empty string, such as ?secure=3Dx, bypasses=
authentication entirely and allows downloading any organization's attachme= nts. Sibling handlers in the same file (togglePublish, delete) correctly en= force session-based authorization, confirming this is an inconsistency rath=
er than intended design. 2026-08-05 7.5 CVE-2026-71234 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-71234 ] dokaninc--Dokan: AI Powered WooCommerce M= ultivendor Marketplace Solution Build Your Own Amazon, eBay, Etsy The Dokan=
plugin for WordPress is vulnerable to Privilege Escalation in all versions=
up to, and including, 5.0.1. This is due to a missing authorization check =
in the `CustomersController` REST controller (`includes/REST/CustomersContr= oller.php`), which re-registers WooCommerce's customer CRUD routes under th=
e `/dokan/v1/customers/` namespace and replaces WooCommerce's native `manag= e_woocommerce` capability check with a vendor-only check that inspects the = **requesting** user's role and never validates the **target** user. This ma= kes it possible for authenticated attackers with Vendor/Seller-level access=
and above to read, modify, or delete any WordPress user - including admini= strators - via `GET`/`PUT`/`DELETE` requests against `/wp-json/dokan/v1/cus= tomers/{id}`. Setting the `password` parameter on an administrator's record=
yields a full site takeover. 2026-08-05 8.8 CVE-2026-8761 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-8761 ] domoticz--domoticz Domoticz's MochadTC= P::MatchLine() handler for MOCHAD_RFSEC messages (hardware/MochadTCP.cpp) c= opies network-received data from the up-to-1028-byte m_mochadbuffer into a = fixed 50-byte stack buffer tempRFSECbuf using strcpy() with no length check=
, across three separate code branches (DS10A/KR10A/MS10A device types). An = attacker on the local network segment able to reach the Mochad TCP bridge (= default port 1099, no authentication) can send a crafted packet that overfl= ows tempRFSECbuf by up to several hundred bytes, corrupting the Domoticz wo= rker thread's stack. 2026-08-05 7.5 CVE-2026-71265 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-71265 ] dresende--node-sql-query A vulnerability was = found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by t= his vulnerability is the function SelectQuery.from/SelectQuery.build in the=
library lib/Select.js of the component Request Parameter Handler. Performi=
ng a manipulation results in sql injection. It is possible to initiate the = attack remotely. The exploit has been made public and could be used. Upgrad= ing to version 0.1.29 addresses this issue. The patch is named 3414c42f6de8= 9826fa1f5f36f6139d1e6552778e. Upgrading the affected component is recommend= ed. 2026-08-09 7.3 CVE-2026-19351 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-19351 ] dromara--lamp-cloud LAMP Rapid Development Platform through 5.= 6.2, fixed in commit 84b0c27, contains a remote code execution vulnerabilit=
y in GlueFactory that executes unsandboxed Groovy scripts from database tem= plate fields without compilation restrictions or whitelisting. Attackers ca=
n write or influence the script field via message template endpoints to exe= cute arbitrary Groovy code and OS commands on the backend server. 2026-08-0=
4 8.8 CVE-2026-69100 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69100 ] = E2Pdf--e2pdf Unauthenticated Local File Inclusion in e2pdf <=3D 1.32.40 ver= sions. 2026-08-06 8.1 CVE-2026-66710 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-66710 ] e4jvikwp--VikAppointments Services Booking Calendar VikAppo= intments Service Booking Calendar wordpress plugin is vulnerable to unauthe= nticated SQL injection due to one of the parameters that controls how the p= ublic reviews list is sorted is taken from the incoming request and used to=
build a database query without proper validation or sanitization. Because = this value is placed directly into the query, an attacker who is not logged=
in can inject arbitrary SQL through a normal booking page and read data fr=
om the site's database - including sensitive information such as WordPress = user credentials. No authentication or special privileges are required 2026= -08-05 7.5 CVE-2026-15918 [ https://www.cve.org/CVERecord?id=3DCVE-2026-159=
18 ] e4jvikwp--VikRentItems Flexible Rental Management System The VikRentIt= ems - Flexible Rental Management System plugin for WordPress is vulnerable =
to Stored Cross-Site Scripting via the customer email field of the booking = checkout form in versions up to, and including, 1.2.1. This is due to insuf= ficient input sanitization and output escaping in the saveorder() function,=
which stores the raw email value via VikRequest::getString() (applying onl=
y sanitize_text_field(), which does not neutralize HTML attribute-breaking = characters such as double quotes), and in the editorder template which echo=
es the stored custmail value into an HTML input element's value attribute w= ithout esc_attr(). This makes it possible for unauthenticated attackers to = inject arbitrary web scripts in pages that will execute whenever a user acc= esses an injected page. 2026-08-05 7.2 CVE-2026-16143 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-16143 ] Eclipse Foundation--Eclipse GlassFish In E= clipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in DownloadServle=
t ContentSources leaks the admin `gfresttoken` to attacker-controlled host =
if the victim is authenticated into the Admin Console - gt; full unauthenti= cated takeover of Eclipse GlassFish domain until the token expires. 2026-08= -06 9.6 CVE-2026-12605 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12605 =
] Eclipse Foundation--Eclipse Theia In Eclipse Theia versions up to and inc= luding 1.73.1, the `@theia/filesystem` backend binds `POST /file-upload` in=
every filesystem-enabled deployment. The handler takes an attacker-supplie=
d absolute path from the multipart `uri` field and calls `fs.move(tmp, targ= et, { overwrite: true })` with no workspace confinement and no authenticati= on. In browser (non-Electron) deployments the connection token is enforced = only on WebSocket upgrades; the HTTP middleware in `@theia/core` re-issues = the cookie and calls `next()` without rejecting tokenless HTTP requests. Be= cause `multipart/form-data` is a CORS-safelisted request type, a cross-orig=
in web page can trigger the write with no preflight and no credentials, res= ulting in an unauthenticated arbitrary file write outside the workspace to = any absolute path the backend process can write. This can escalate to remot=
e code execution, for example by overwriting a startup-executed file such a=
s `~/.bashrc`. Electron mode uses a separate `ElectronSecurityToken` and is=
not affected via this path. 2026-08-05 8.8 CVE-2026-60009 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-60009 ] Eclipse Foundation--Eclipse Theia In = Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/pl= ugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTTP endpo= int, which resolves the requested file path with `path.resolve(localPath, f= ilePath)` without verifying that the resolved path stays within the plugin'=
s directory. An unauthenticated network attacker can send percent-encoded `= ../` sequences (`%2e%2e%2f`) that decode into the path parameter and escape=
the plugin directory, allowing arbitrary files readable by the Theia backe=
nd process to be retrieved. Plugin IDs are derived deterministically from a=
plugin's publisher and name, so built-in plugins serve as reliable anchors=
that require no prior knowledge of the target system. 2026-08-05 7.5 CVE-2= 026-12609 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12609 ] Eclipse Fou= ndation--Eclipse Theia In Eclipse Theia versions up to and including 1.73.1=
, the `@theia/filesystem` backend exposes HTTP file-download endpoints (`GE=
T /file`, `GET /files/`, `PUT /files/`) that convert a client-supplied URI = directly to a filesystem path and stream the file, without confining it to = the workspace or any allow-listed root. In browser (non-Electron) deploymen=
ts the connection token is enforced only on WebSocket upgrades; the HTTP mi= ddleware in `@theia/core` re-issues the cookie and calls `next()` without r= ejecting tokenless HTTP requests, so these endpoints are reachable without =
a valid token. As a result an unauthenticated client can read any file read= able by the backend process, including files outside the opened workspace (= for example `/etc/hosts`, SSH keys, or tokens). Electron mode uses a separa=
te `ElectronSecurityToken` and is not affected via this path. 2026-08-05 7.=
5 CVE-2026-61891 [ https://www.cve.org/CVERecord?id=3DCVE-2026-61891 ] Efst= ratios Goudelis--Ground Station Ground Station prior to=C2=A00.6.0 contains=
an unauthenticated database-destruction and arbitrary-data-injection vulne= rability in the Socket.IO server's database_backup event handler that allow=
s any unauthenticated network peer to wipe or replace the entire SQLite dat= abase by sending a single full_restore command with a caller-supplied SQL b= lob. Attackers can connect to the Socket.IO server on port 7000 without cre= dentials due to disabled authentication enforcement and a wildcard CORS pol= icy, then emit the database_backup event to drop every existing table and r= ecreate the database from attacker-controlled CREATE TABLE and INSERT INTO = statements executed via raw exec_driver_sql, permanently destroying all sat= ellite records, orbital sources, hardware configurations, and observation s= chedules, or planting fabricated orbital-source URLs and observation entrie=
s that redirect the ground station to attacker-controlled servers on the ne=
xt scheduled sync. 2026-08-06 9.1 CVE-2026-53984 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-53984 ] Efstratios Goudelis--Ground Station Ground Stat= ion prior to=C2=A00.6.0=C2=A0contains an unauthenticated blind server-side = request forgery vulnerability in the orbital-source configuration path that=
allows any unauthenticated Socket.IO client to cause the ground-station pr= ocess to issue outbound HTTP requests to attacker-chosen destinations. Atta= ckers can connect to the Socket.IO server on port 7000 without credentials = due to disabled authentication enforcement and a wildcard CORS policy, then=
submit a data_submission event with submit-orbital-sources action to persi=
st an attacker-supplied URL in the database, then trigger an orbital sync v=
ia the equally unauthenticated background_task:start event. The URL is stor=
ed with no scheme allowlist, no host validation, and no rejection of loopba= ck, RFC1918, or link-local (cloud instance metadata at 169.254.169.254) add= resses, and is passed directly to requests.get in _fetch_http_3le and _fetc= h_http_omm in backend/tlesync/source_adapters.py. HTTP status codes and err=
or messages from the outbound request are emitted in the orbital_sync_state=
Socket.IO event to all connected clients, providing a serviceable oracle f=
or interpreting internal-service and cloud-metadata responses even though t=
he raw response body is not directly leaked. Because the malicious source p= ersists in the database across restarts and re-fires every 24 hours on the = scheduled sync cycle, the primitive gives durable long-term SSRF without th=
e attacker needing to remain connected. 2026-08-06 8.6 CVE-2026-53983 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-53983 ] Efstratios Goudelis--Groun=
d Station Ground Station prior to 0.6.0=C2=A0contains an unauthenticated de= nial-of-service vulnerability in the Socket.IO server's service_control eve=
nt handler that allows any unauthenticated network peer to forcibly termina=
te the ground-station process by sending a single restart_service command. = Attackers can connect to the Socket.IO server on port 7000 without credenti= als due to disabled authentication enforcement and a wildcard CORS policy, = then emit the service_control event to terminate all active satellite-track= ing sessions, SDR recording pipelines, demodulators, decoders, and rotator = controllers, with repeated triggering possible in Docker deployments to cre= ate a persistent denial-of-service condition. 2026-08-06 7.5 CVE-2026-53985=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-53985 ] electron--electron E= lectron is a framework for writing cross-platform desktop applications usin=
g JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-bet= a.5, apps that expose Promise-returning functions to web content via contex= tBridge may be vulnerable to a context isolation bypass. Untrusted web cont= ent could obtain access to the isolated preload world and, through it, ever=
y capability the preload script has. In renderers without a sandbox, or wit=
h nodeIntegration enabled, this may escalate to Node.js access. Apps are af= fected if they expose Promise-returning functions via contextBridge, the st= andard pattern for wrapping ipcRenderer.invoke, in windows that load untrus= ted content. This issue is fixed in versions 39.8.9, 40.9.2, 41.2.2, and 42= .0.0-beta.5. 2026-08-05 7.5 CVE-2026-70601 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-70601 ] electron--electron Electron is a framework for writin=
g cross-platform desktop applications using JavaScript, HTML and CSS. Prior=
to 39.8.10, 40.9.3, 41.4.0, and 42.0.0, a custom scheme registered with su= pportFetchAPI: true but without corsEnabled: true was not subject to CORS e= nforcement. A page loaded from a remote origin could therefore fetch() or X= MLHttpRequest that scheme cross-origin and read the full response body, rat= her than the read being blocked. Apps that serve sensitive data from such a=
scheme and load remote or untrusted content in a renderer are affected. Th=
is issue is fixed in versions 39.8.10, 40.9.3, 41.4.0, and 42.0.0. 2026-08-=
05 7.4 CVE-2026-70604 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70604 ]=
electron--electron Electron is a framework for writing cross-platform desk= top applications using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.3,=
and 42.0.1, a sandboxed iframe without the allow-popups keyword could stil=
l open a new window or trigger setWindowOpenHandler with no user interactio=
n because new-window navigations taking the OpenURL path did not apply the = iframe sandbox popup restriction. Apps that embed untrusted content in sand= boxed iframes and rely on the absence of allow-popups to prevent window cre= ation are affected, while apps that deny window creation in setWindowOpenHa= ndler or do not embed untrusted content in sandboxed iframes are not affect= ed. This issue is fixed in 39.8.10, 41.10.3, and 42.0.1. 2026-08-05 7.2 CVE= -2026-70608 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70608 ] emlog--em= log Emlog Pro through 2.6.23 contains a disabled TLS certificate validation=
vulnerability in include/service/ai.php that allows network-adjacent attac= kers to intercept outbound HTTPS requests to configured LLM providers by pr= esenting arbitrary TLS certificates, as CURLOPT_SSL_VERIFYPEER and CURLOPT_= SSL_VERIFYHOST are unconditionally disabled across sendStream(), sendImageR= equest(), send(), and fetchSearchHtml() with no option to re-enable verific= ation. Attackers can perform man-in-the-middle interception to extract Auth= orization Bearer API keys from every AI request and inject crafted AI respo= nses that may be acted upon by the tool-call execution pipeline, including = the query_database and update_config tool handlers. 2026-08-03 7.4 CVE-2026= -67598 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67598 ] ESAFENET--CDG =
A vulnerability was identified in ESAFENET CDG up to 20260615. Affected is =
an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Such m= anipulation of the argument keyid leads to sql injection. The attack may be=
performed from remote. The exploit is publicly available and might be used=
. The vendor was contacted early about this disclosure but did not respond =
in any way. 2026-08-05 7.3 CVE-2026-18859 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-18859 ] esphome--esphome ESPHome through 2026.7.0-dev contains=
an operator-precedence bug in the cv.url() validator in esphome/config_val= idation.py: `if parsed.scheme and parsed.netloc or parsed.scheme =3D=3D "fi= le": return parsed.geturl()`. Because `and` binds tighter than `or`, any fi= le: URI passes validation regardless of netloc. This validator gates the `u= rl:` field of the external_components YAML directive's git source schema, w= hich is passed to `git clone` (git supports file:// natively). A crafted `e= xternal_components` block with `url: "file:///attacker/repo"` clones an att= acker-controlled local path, which is then added to Python's import machine=
ry via ESPHome's component loader, executing arbitrary Python code when the=
YAML configuration is processed (e.g. via `esphome config`/`esphome run`).=
2026-08-05 8.6 CVE-2026-71259 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-71259 ] Eukaryot--sonic3air Sonic 3 A.I.R. before commit 2492d18 contains=
an unbounded memory allocation vulnerability in ReceivedPacketCache::enque= uePacket() that allows unauthenticated remote attackers to crash the server=
process by sending a crafted UDP packet with mUniquePacketID set to the ma= ximum uint32 value. The mUniquePacketID field is read directly from the UDP=
wire-format packet header without bounds checking, causing the server to a= llocate one CacheItem per missing packet ID gap, exhausting available host = memory and propagating an uncaught std::bad_alloc exception to std::termina= te(). 2026-08-06 7.5 CVE-2026-66733 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-66733 ] Facebook--Facebook for WooCommerce Unauthenticated Cross Sit=
e Scripting (XSS) in Facebook for WooCommerce <=3D 3.7.5 versions. 2026-08-=
06 7.1 CVE-2026-66707 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66707 ]=
Facebook--Facebook for WordPress Unauthenticated Cross Site Scripting (XSS=
) in Facebook for WordPress <=3D 5.2.1 versions. 2026-08-06 7.1 CVE-2026-66= 705 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66705 ] facelessuser--pym= down-extensions pymdown-extensions is a collection of extensions for the Py= thon Markdown library. In versions up to and including 11.0, four inline pr= ocessors (caret, tilde, betterem, and magiclink) use regular expressions wh= ose content groups can partition a run of delimiter characters in exponenti= ally many ways, causing catastrophic backtracking. As a result, a single un= trusted Markdown line under 50 bytes rendered with markdown.markdown() in e= ach extension's default configuration drives the rendering thread into unbo= unded CPU usage that grows exponentially with input length, enabling an una= uthenticated remote attacker who can submit Markdown to cause denial of ser= vice. The exposure is concrete for web applications that render user-suppli=
ed Markdown (comments, wikis, issue bodies, live preview), including any ap=
p using pymdownx.extra which bundles the vulnerable betterem default, as we=
ll as hosted docs/CI systems that build untrusted Markdown. The issue has b= een fixed in version 11.0.1. 2026-08-06 7.5 CVE-2026-67422 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-67422 ] FFmpeg--FFmpeg FFmpeg versions from 0=
.5 up to, but not including, 9.0 contain a signed integer overflow vulnerab= ility in the DVB subtitle parser in libavcodec/dvbsub_parser.c that allows = attackers to trigger a heap buffer overflow by supplying a crafted WTV file=
. The overflow causes the bounds-check guard expression to wrap to INT_MIN,=
bypassing the PARSE_BUF_SIZE comparison and invoking memcpy() with attacke= r-controlled data into a heap buffer, resulting in an out-of-bounds heap wr= ite and potential memory corruption or code execution. 2026-08-06 7.8 CVE-2= 026-70628 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70628 ] FFmpeg--FFm= peg FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-o= f-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) de= coder that allows remote attackers to corrupt heap memory by supplying a cr= afted AVI file during stream probing. The cfhd_decode() function fails to e= nforce the non-Bayer logical output-width invariant in the transform-type-2=
reconstruction path, causing horiz_filter_clip() to write oversized 16-bit=
sample rows far beyond the allocated output frame buffer, which can be esc= alated to arbitrary code execution via overwrite of a live cleanup callback=
pointer. 2026-08-06 7.8 CVE-2026-70632 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-70632 ] Flarum--Flarum Framework Flarum before 1.8.16 contains =
a password reset token expiry bypass vulnerability that allows unauthentica= ted attackers to reuse expired password reset tokens by submitting them dir= ectly to the reset processing endpoint. The SavePasswordController::handle(=
) method calls PasswordToken::findOrFail() without performing any expiry va= lidation, allowing attackers to bypass the 24-hour token lifetime enforced = only during form rendering and change any account's password to gain an aut= henticated session. 2026-08-05 8.1 CVE-2026-39923 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-39923 ] fledge-iot--fledge Fledge's backup-restore upl= oad handler, upload_backup() (python/fledge/services/core/api/backup_restor= e.py), takes the first extracted tar member's filename (tar_file_names[0]) = and builds a shell command via string formatting: `cmd =3D "cp {} {}".forma= t(source, backup_path); ret_code =3D os.system(cmd)`. The only pre-check on=
the filename is a prefix/suffix match (startswith(backup_prefix), endswith= (valid_extensions)), which a name such as `fledge_backup_$(id>/tmp/pwn).db`=
satisfies while still injecting a shell command substitution. Because os.s= ystem() invokes a shell and no quoting (shlex.quote, list-form subprocess) =
is applied, an admin uploading a crafted backup archive achieves arbitrary =
OS command execution. 2026-08-05 7.2 CVE-2026-71284 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-71284 ] FlowiseAI--Flowise Flowise through 3.1.4 con= tains an insecure direct object reference vulnerability in the OpenAI Assis= tants integration that allows authenticated attackers to access credentials=
belonging to other workspaces by supplying an arbitrary credential UUID to=
Assistants endpoints without workspace ownership verification. Attackers c=
an enumerate cross-workspace assistant metadata, retrieve file and vector s= tore listings, and upload files into victim workspaces by exploiting the mi= ssing workspace-scoped authorization check in the credential lookup logic. = 2026-08-06 9.9 CVE-2026-67622 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -67622 ] FlowiseAI--Flowise Flowise through 3.1.4 contains a server-side re= quest forgery vulnerability in the SSRF guard implemented in httpSecurity.t=
s, where the DEFAULT_DENY_LIST omits the Oracle Cloud Infrastructure metada=
ta endpoint 192.0.0.192 and the Alibaba Cloud metadata endpoint 100.100.100= .200, allowing authenticated attackers to force the server to issue arbitra=
ry GET requests to cloud instance metadata services. Attackers can send req= uests to the fetch-links API endpoint with a crafted URL parameter, bypassi=
ng deny-list validation including redirect-based bypasses, to reach instanc=
e metadata services and expose instance identity data and role credentials =
on Oracle Cloud Infrastructure or Alibaba Cloud deployments, with unauthent= icated access possible when URL-fetching nodes exist in public chatflows. 2= 026-08-08 7.7 CVE-2026-67620 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 67620 ] FlowiseAI--Flowise Flowise through 3.1.4 contains a missing authori= zation vulnerability that allows authenticated workspace members to perform=
unauthorized document store operations by accessing unprotected mutation e= ndpoints. Attackers holding only view-level permissions can send direct HTT=
P requests to the upsert and refresh document store routes to trigger docum= ent ingestion, refresh vector database contents, consume embedding API cred= its, and modify knowledge bases used by downstream chatflows. 2026-08-06 7.=
6 CVE-2026-67621 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67621 ] Flow= iseAI--Flowise Flowise through 3.1.4 contains an authentication bypass vuln= erability that allows unauthenticated attackers to access the OAuth2 creden= tial refresh endpoint by exploiting prefix-based whitelist matching in the = authentication middleware defined in packages/server/src/utils/constants.ts=
. Attackers can send a POST request to the oauth2-credential refresh route = with a trailing credential identifier to bypass all authentication and auth= orization checks, triggering unauthorized OAuth token rotation against cred= entials belonging to any workspace and potentially disrupting dependent OAu=
th integrations. This is a bypass of CVE-2026-41273. 2026-08-06 7.5 CVE-202= 6-70636 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70636 ] Foxit Softwar=
e Inc.--Foxit PDF Services API The PDF creation feature of Foxit PDF Servic=
es API supports referencing external files. Although local file access is r= estricted, an attacker could trigger an SSRF vulnerability by using URL red= irection to bypass validation, leading to information disclosure. 2026-08-0=
6 8.5 CVE-2026-18597 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18597 ] = frappe--frappe Frappe is a full-stack web application framework. Versions 1= 4.96.9 and below, and 15.0.0 through 15.71.0 have an insecure endpoint para= meter that is vulnerable to error-based SQL Injection through lack of valid= ation. Sensitive information such as versioning can be retrieved. This issu=
e is fixed in versions 14.96.10 and 15.72.0. 2026-08-07 8.1 CVE-2025-58375 =
[ https://www.cve.org/CVERecord?id=3DCVE-2025-58375 ] Gen Digital--CCleaner=
Link following vulnerability in the Uninstaller component in CCleaner prio=
r to 7.10.1464 on Windows allows a local, low-privileged attacker to escala=
te privileges to SYSTEM via a symlink/junction created during application u= ninstallation, which CCleaner follows when deleting the application's data = folder with elevated integrity. 2026-08-05 7.8 CVE-2026-12410 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-12410 ] GeoVision Inc.--GV-AS1620 (AS-Mana= ger) The product firmware contains an embedded, static RSA private key util= ized by the Lighttpd web server for TLS termination. Exposure of this priva=
te key allows malicious actors to breach the confidentiality and integrity =
of HTTPS communications, enabling traffic decryption and server spoofing. 2= 026-08-04 9.1 CVE-2026-18753 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 18753 ] GeoVision Inc.--GV-AS1620 (GV-Cloud) The product firmware contains =
an embedded, static RSA private key utilized by the Lighttpd web server for=
TLS termination. Exposure of this private key allows malicious actors to b= reach the confidentiality and integrity of HTTPS communications, enabling t= raffic decryption and server spoofing. 2026-08-04 9.1 CVE-2026-18754 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-18754 ] GeoVision Inc.--GV-ASManage=
r A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local at= tacker with write access to an unsafe search directory to execute arbitrary=
code. By placing a crafted dynamic-link library (DLL) file into the applic= ation search path prior to the legitimate library, the malicious code is lo= aded and executed under the security privileges of the GV-ASManager process=
. 2026-08-04 7.3 CVE-2026-18755 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-18755 ] getgrav--grav Grav CMS versions 2.0.7 through 2.0.10 fail to val= idate fully-qualified static method calls (Class::method) in blueprint dyna= mic-field directives because Blueprint::isSafeDynamicCall() only applies it=
s dangerous-callable denylist to strings that do not contain '::'. An accou=
nt with only page-editing rights (admin.pages, not super-admin or admin.pag= es_twig) can plant a directive in a page's form-field frontmatter that invo= kes an arbitrary public static PHP method with attacker-controlled argument=
s. Using built-in gadget methods this allows reading of any server-readable=
file (disclosed to anonymous visitors of the crafted page) and arbitrary c= reation/copying of files and directories under the web-server account. Fixe=
d in 2.0.11. 2026-08-03 8.1 CVE-2026-69088 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-69088 ] getgrav--grav Grav CMS 2.0.10 contains a path travers=
al vulnerability in ImageMedium::watermark(), which passes its unsanitized = $image argument to RocketTheme\Toolbox\ResourceLocator\UniformResourceLocat= or::findResource(). Because the file:// scheme branch only lexically collap= ses '..' segments without a realpath/containment check, an editor authoring=
Markdown image syntax with traversal sequences can cause arbitrary image f= iles outside Grav's media sandbox to be composited into a carrier image, wh= ich is then cached and served from a public, unauthenticated URL - disclosi=
ng those files to anonymous visitors. 2026-08-03 7.5 CVE-2026-69089 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-69089 ] ggml-org--llama.cpp llama.cp=
p builds b4882 through b9058 contain a heap buffer overflow vulnerability i=
n the KV cache state restore path where the state_read_data() function comp= utes write size without overflow checking, allowing attackers with write ac= cess to the slot_save_path directory to corrupt heap memory. Attackers can = craft malicious state files where cell_count multiplication overflows or ex= ceeds tensor buffer allocation to write attacker-controlled bytes past buff=
er boundaries, potentially resulting in heap metadata corruption, model wei= ght corruption, or arbitrary code execution via function pointer overwrite.=
2026-08-06 8.1 CVE-2026-43629 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-43629 ] ggml-org--llama.cpp llama.cpp builds b7492 through the latest b90=
60 contains a use-after-free vulnerability in the vocab pointer of llama-se= rver when the --sleep-idle-seconds feature is enabled, allowing unauthentic= ated remote attackers to execute arbitrary code. Attackers can trigger the = vulnerability by sending requests to affected endpoints while the server tr= ansitions to sleep mode, causing concurrent worker threads to dereference a=
freed vocab pointer that can be reclaimed with attacker-controlled data to=
achieve remote code execution. 2026-08-06 8.1 CVE-2026-43631 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-43631 ] ggml-org--llama.cpp llama.cpp buil=
ds b7492 through the latest b9060 contains a use-after-free vulnerability i=
n llama-server affecting six tokenization endpoints (/tokenize, /detokenize=
, /infill, /apply-template, /rerank, and /anthropic/count_tokens) that bypa=
ss the task queue and access ctx_server.vocab directly on HTTP worker threa= ds. Attackers can exploit a time-of-check-time-of-use race condition where = the main thread destroys and frees vocab after the synchronization lock is = released but before the handler finishes using it, causing a crash or poten= tial code execution when --sleep-idle-seconds is configured. 2026-08-06 8.1=
CVE-2026-43632 [ https://www.cve.org/CVERecord?id=3DCVE-2026-43632 ] ggml-= org--llama.cpp llama.cpp builds b1886 through b7445 contain a double free v= ulnerability in the LLaMA-Android JNI wrapper where new_1batch() allocates = memory using malloc() while free_1batch() deallocates it using the C++ dele=
te operator, causing heap metadata corruption. Attackers can trigger this m= emory management mismatch to cause denial of service through process crashe=
s or potentially achieve arbitrary code execution depending on allocator st= ate. 2026-08-06 7.8 CVE-2026-43622 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-43622 ] ggml-org--llama.cpp llama.cpp builds b1283 through b9058 cont= ain an integer overflow vulnerability in the llama_batch_init() function wh= ere unchecked multiplications in malloc() calls can wrap past INT32_MAX whe=
n computing allocation sizes. Attackers can pass specially crafted paramete=
rs to trigger integer overflow, causing heap corruption and potentially ach= ieving arbitrary code execution through subsequent batch operations that wr= ite past allocated buffer boundaries. 2026-08-06 7.8 CVE-2026-43627 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-43627 ] ggml-org--llama.cpp llama.cp=
p builds b3978 through b9058 contain an integer underflow and out-of-bounds=
read vulnerability in the DRY sampler that allows unauthenticated attacker=
s to trigger a heap buffer underflow by sending a crafted HTTP request with=
dry_allowed_length set to INT32_MIN to the /v1/completions or /v1/chat/com= pletions endpoints. Attackers can exploit this vulnerability to crash the s= erver with SIGSEGV causing denial of service for all connected users, or co= rrupt token sampling probabilities by reading garbage values from memory be= fore the allocated buffer. 2026-08-06 7.8 CVE-2026-43628 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-43628 ] ggml-org--llama.cpp llama.cpp builds b1= 886 through b7445 contain an integer overflow vulnerability in the LLaMA-An= droid JNI wrapper where the new_1batch() function multiplies sizeof(llama_s= eq_id) by an attacker-controlled n_seq_max parameter without overflow valid= ation, causing heap buffer allocation to wrap and allocate insufficient mem= ory. Attackers can exploit this by providing a crafted n_seq_max value thro= ugh a malicious model file or JNI call to trigger heap corruption and achie=
ve denial of service or arbitrary code execution on Android applications us= ing the LLaMA-Android binding. 2026-08-06 7.8 CVE-2026-70638 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-70638 ] ggml-org--llama.cpp llama.cpp build=
s b1886 through b7445 contain a race condition use-after-free vulnerability=
in the LLaMA-Android JNI wrapper where bench_1model() and free_1context() = lack synchronization, allowing Thread A to operate on freed memory while Th= read B concurrently frees the llama_context. Attackers can exploit this by = performing heap spray with attacker-controlled data containing a fake vtabl=
e to hijack the vtable pointer at offset +0x30, causing llama_batch_allocr:= :clear() to dereference arbitrary memory and achieve remote code execution.=
2026-08-06 7 CVE-2026-70640 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 70640 ] Gitea--Gitea Gitea prior to 1.27.0 contains a server-side request f= orgery vulnerability that allows authenticated attackers to bypass SSRF pro= tections by exploiting HTTP fetch operations in migration and OAuth avatar = code paths that use Go's default http.Get without a custom DialContext. Att= ackers can supply arbitrary URLs through release asset download URLs, pull-= request patch URLs, or OAuth avatar endpoints to reach internal services, c= loud instance-metadata endpoints, or read local files such as the applicati=
on configuration containing database credentials and signing secrets, with = exfiltrated content persisted as migration release assets for later retriev= al. 2026-08-05 7.6 CVE-2026-34966 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-34966 ] gitpython-developers--GitPython GitPython before 3.1.53 fails =
to properly escape section names in git config files, allowing attackers to=
inject arbitrary configuration directives through malicious submodule name=
s. Attackers can inject core.sshCommand or other dangerous config keys into=
the victim's .git/config via create_submodule or clone_from operations, ac= hieving remote code execution when git performs ssh operations. 2026-08-03 =
7 CVE-2026-69097 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69097 ] gitr= oomhq--postiz-app Postiz is an open-source social media scheduling tool. Th=
e route that serves locally stored media joins URL-supplied path segments o= nto the upload directory and streams the file without normalising the path =
or confining it to that directory, and the route requires no authentication=
. Raw dot-segments are collapsed before routing, but URL-encoded separators=
survive route matching and are decoded only once they reach the handler, r= estoring the traversal at the filesystem call. An unauthenticated remote at= tacker can therefore read any file readable by the application process, inc= luding the process environment, which exposes the JWT signing secret, the d= atabase connection string, and connected provider and billing secrets. Beca= use session tokens are signed with that secret and carry no expiry, this al= lows forging a non-expiring session as any user, including an administrator=
, without a password. 2026-08-07 9.8 CVE-2026-19264 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-19264 ] GL-iNet--GL-MT3000 A flaw has been found in = GL-iNet GL-MT3000 up to 4.4.5. This vulnerability affects the function plug= ins.remove_package/plugins.install_package of the file /cgi-bin/glc of the = component plugins.so Native Plugin. This manipulation causes command inject= ion. The attack can be initiated remotely. The exploit has been published a=
nd may be used. The vendor was contacted early about this disclosure and co= nfirmed the existence of the vulnerability. 2026-08-03 9.8 CVE-2026-18612 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-18612 ] GL-iNet--GL-MT3000 A v= ulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This issue af= fects the function plugins.set_config of the file /cgi-bin/glc of the compo= nent plugins.so Native Plugin. Such manipulation leads to injection. The at= tack can be launched remotely. The exploit has been disclosed to the public=
and may be used. The vendor was contacted early about this disclosure and = confirmed the existence of the vulnerability. 2026-08-03 9.8 CVE-2026-18613=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-18613 ] GL-iNet--GL-MT3000 A=
vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is the = function s2s.enable_echo_server of the file /cgi-bin/glc of the component s= 2s.so Native Plugin. Performing a manipulation of the argument port results=
in command injection. The attack may be initiated remotely. The exploit ha=
s been made public and could be used. The vendor was contacted early about = this disclosure and confirmed the existence of the vulnerability. 2026-08-0=
3 9.8 CVE-2026-18614 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18614 ] = GL-iNet--GL-MT3000 A vulnerability was determined in GL-iNet GL-MT3000 up t=
o 4.4.5. The affected element is the function wg-server.generate_publickey =
of the file /cgi-bin/glc of the component wg-server.so Native Plugin. Execu= ting a manipulation of the argument private_key can lead to command injecti= on. The attack may be launched remotely. The exploit has been publicly disc= losed and may be utilized. The vendor was contacted early about this disclo= sure and confirmed the existence of the vulnerability. 2026-08-03 9.8 CVE-2= 026-18615 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18615 ] GL-iNet--GL= -MT3000 A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. Th=
e impacted element is the function server.set_peer of the file /cgi-bin/glc=
of the component wg-server.so Native Plugin. The manipulation of the argum= ent public_key leads to command injection. Remote exploitation of the attac=
k is possible. The exploit is publicly available and might be used. The ven= dor was contacted early about this disclosure and confirmed the existence o=
f the vulnerability. 2026-08-03 9.8 CVE-2026-18616 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-18616 ] GL.iNet--AX1800 A vulnerability was identifie=
d in GL.iNet AX1800 up to 4.8.3. The affected element is the function remov= e_rule of the file /usr/share/gl-ngx/oui-rpc.lua of the component RPC Endpo= int. The manipulation of the argument args.id leads to command injection. T=
he attack is possible to be carried out remotely. The exploit is publicly a= vailable and might be used. The vendor was contacted early about this discl= osure. 2026-08-04 8.8 CVE-2026-18787 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-18787 ] GL.iNet--GL-MT3000 A vulnerability was found in GL.iNet GL-= MT3000 up to 4.4.5. This impacts the function ovpn-client.check_config of t=
he file /cgi-bin/glc of the component ovpn-client.so Native Plugin. Perform= ing a manipulation of the argument filename results in command injection. R= emote exploitation of the attack is possible. The exploit has been made pub= lic and could be used. The vendor was contacted early about this disclosure=
and confirmed the existence of the vulnerability. 2026-08-03 9.8 CVE-2026-= 18601 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18601 ] GL.iNet--GL-MT3= 000 A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affect=
ed is the function ovpn-client.get_recommend_config of the file /cgi-bin/gl=
c of the component ovpn-client.so Native Plugin. Executing a manipulation o=
f the argument Hostname can lead to command injection. The attack can be ex= ecuted remotely. The exploit has been publicly disclosed and may be utilize=
d. The vendor was contacted early about this disclosure and confirmed the e= xistence of the vulnerability. 2026-08-03 9.8 CVE-2026-18602 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-18602 ] GL.iNet--GL-MT3000 A weakness has b= een identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the fun= ction remove_profile of the file /cgi-bin/glc of the component modem.so. Th=
is manipulation causes command injection. It is possible to initiate the at= tack remotely. The exploit has been made available to the public and could =
be used for attacks. The vendor was contacted early about this disclosure a=
nd confirmed the existence of the vulnerability. 2026-08-03 9.8 CVE-2026-18= 684 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18684 ] GL.iNet--GL-MT300=
0 A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4= .5. Impacted is the function set_upgrade of the file /cgi-bin/glc of the co= mponent modem.so. Such manipulation leads to command injection. It is possi= ble to launch the attack remotely. The exploit has been disclosed publicly = and may be used. The vendor was contacted early about this disclosure and c= onfirmed the existence of the vulnerability. 2026-08-03 9.8 CVE-2026-18685 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-18685 ] GL.iNet--GL-MT3000 A = vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected e= lement is the function nas-web.add_user of the file /cgi-bin/glc of the com= ponent nas-web RPC Wrapper. Performing a manipulation results in command in= jection. The attack can be initiated remotely. The exploit is now public an=
d may be used. The vendor was contacted early about this disclosure and con= firmed the existence of the vulnerability. 2026-08-04 9.8 CVE-2026-18686 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-18686 ] GL.iNet--GL-MT3000 A vu= lnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affected ele= ment is the function logread.get_system_log of the file /usr/lib/oui-httpd/= rpc/logread of the component Logread Lua RPC plugin. The manipulation of th=
e argument module results in command injection. The attack can be launched = remotely. The exploit is now public and may be used. The vendor was contact=
ed early about this disclosure and confirmed the existence of the vulnerabi= lity. 2026-08-03 8.8 CVE-2026-18598 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-18598 ] GL.iNet--GL-MT3000 A flaw has been found in GL.iNet GL-MT300=
0 up to 4.4.5. The impacted element is the function logread.set_config of t=
he file /usr/lib/oui-httpd/rpc/logread of the component Logread Lua RPC Plu= gin. This manipulation of the argument record_size causes command injection=
. The exploit has been published and may be used. The vendor was contacted = early about this disclosure and confirmed the existence of the vulnerabilit=
y. 2026-08-03 8 CVE-2026-18599 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-18599 ] GL.iNet--GL-MT3000 A vulnerability has been found in GL.iNet GL-M= T3000 up to 4.4.5. This affects the function network.switch_info/network.sw= itch_status of the file /usr/lib/oui-httpd/rpc/network of the component Net= work Lua RPC Plugin. Such manipulation of the argument switch leads to comm= and injection. The attack may be launched remotely. The exploit has been di= sclosed to the public and may be used. The vendor was contacted early about=
this disclosure and confirmed the existence of the vulnerability. 2026-08-=
03 8.8 CVE-2026-18600 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18600 ]=
go-git--go-git go-git is an extensible git implementation library written =
in pure Go. Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (includi=
ng checkout, status, and add) resolve symbolic links inside the working tre=
e without confining resolution to the worktree boundary, so a maliciously c= rafted repository containing a symlink can cause go-git to read from or wri=
te to files outside the intended working directory when the repository is c= loned and its worktree operations are used. Versions 5.19.2 and 6.0.0-alpha= .5. 2026-08-07 7.1 CVE-2026-71556 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-71556 ] go-shiori--shiori Shiori's CheckToken function (internal/domai= ns/auth.go) validates only the JWT's HMAC signature and returns the embedde=
d claims.Account object unmodified, never re-fetching the account from the = database. No session store or token-revocation mechanism exists in the code= base. Deleting an account or demoting it from owner to a regular role has n=
o effect on tokens already issued to that account - a deleted or demoted ow= ner's token continues authenticating with its original owner-level privileg=
es until natural expiry, which can be up to 30 days with 'remember me' enab= led. 2026-08-05 8.2 CVE-2026-71206 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-71206 ] go-shiori--shiori go-shiori's DownloadBookmark() (internal/co= re/download.go) fetches a caller-supplied bookmark URL using a plain http.C= lient with no custom DialContext or destination-IP validation (no IsLoopbac= k(), IsPrivate(), IsUnspecified(), or IsLinkLocalUnicast() checks). An auth= enticated user creating or updating a bookmark via POST /api/bookmark, PUT = /api/v1/bookmarks/cache, or POST /api/bookmarks/ext can supply a loopback (= 127.0.0.1) or 0.0.0.0 (which Linux redirects to loopback) URL, causing the = server to make outbound requests to internal-only services, cloud metadata = endpoints, or other network-restricted resources. 2026-08-05 8.5 CVE-2026-7= 1280 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71280 ] google-maps-easy= -pro--google-maps-easy-pro Multiple Supsystic Pro plugins were distributed = with malicious code through the vendor's compromised update server, allowin=
g unauthenticated attackers to deploy a second-stage payload that exfiltrat=
es credentials and other sensitive data and grants full control of affected=
sites. 2026-08-06 9.8 CVE-2026-17032 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-17032 ] gopacket--gopacket gopacket provides packet processing cap= abilities for Go. Through version 1.7.0, multiple layer decoders use attack= er-controlled lengths, counts, or offsets before validating them against pa= cket buffers, allowing a crafted packet decoded through DecodingLayerParser=
or DecodeFromBytes to trigger an unrecovered panic and remotely deny servi= ce. A patch commit is available at 210f25f. 2026-08-07 7.5 CVE-2026-65819 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-65819 ] grocy--grocy Grocy's A=
PI request-body parser (controllers/Api/BaseApiController.php, GetParsedAnd= FilteredRequestBody) purifies incoming field values with HTMLPurifier, then=
manually reverses HTML-entity encoding of the resulting output by replacin=
g &lt;, &gt;, and &amp; back to <, >, and & immediately after p= urification. This double-decode reconstructs live HTML/script tags from the=
entity-encoded form that HTMLPurifier produced to neutralize them, re-intr= oducing stored XSS across API-writable fields (products, recipes, stock, us= ers, chores, and others) that are rendered elsewhere without re-sanitizatio=
n. 2026-08-05 8.7 CVE-2026-71236 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-71236 ] guzzle--guzzle Guzzle is an extensible PHP HTTP client. Prior t=
o 7.15.2 and 8.0.1, Guzzle gives a transport the request URI as text and su= pplies the Host header separately. The cURL handlers set CURLOPT_URL to the=
URI exactly as written and push that Host into CURLOPT_HTTPHEADER; StreamH= andler does the same through fopen(). libcurl then parses the authority its= elf, percent-decoding it and, on an IDN-capable build, applying IDNA mappin=
g, and uses the result to resolve, connect, name the TLS peer and address a=
proxy CONNECT, while the supplied Host suppresses the aligned one libcurl = would have generated. For a URI host written as 127.0.0.%31, filter_var() r= ejects the host as an IP literal, yet libcurl decodes it to 127.0.0.1 and r= eaches loopback with no DNS lookup while the server receives Host: 127.0.0.= %31. An attacker who influences a fetched URI can therefore reach a host th=
e application's checks excluded and read whatever the host exposes of the r= esponse. The same divergence moves Guzzle's own decisions onto a spelling t=
he transport does not use: no_proxy selects proxy routing from the literal = host, and RedirectMiddleware decides from it whether to strip Authorization=
and Cookie. Exploitation requires the application to build a request URI f= rom untrusted input and to make a host decision before handing it to Guzzle=
. This issue is fixed in versions 7.15.2 and 8.0.1. 2026-08-03 7.2 CVE-2026= -69246 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69246 ] H3C--NX15 A se= curity vulnerability has been detected in H3C NX15 V100R017. Impacted is an=
unknown function of the file /api/wizard/networkSetup. Such manipulation l= eads to missing authentication. The attack may be performed from remote. Th=
e vendor was contacted early about this disclosure. 2026-08-04 7.3 CVE-2026= -18810 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18810 ] H3C--NX15 A vu= lnerability was detected in H3C NX15 V100R017. The affected element is the = function Add of the file /api/esps. Performing a manipulation of the argume=
nt esps.filter.url results in command injection. It is possible to initiate=
the attack remotely. The exploit is now public and may be used. The vendor=
was contacted early about this disclosure. 2026-08-04 7.2 CVE-2026-18811 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-18811 ] H3C--NX15 A flaw has b= een found in H3C NX15 V100R017. The impacted element is the function esps.i= pv6.wan of the file /api/esps. Executing a manipulation of the argument wor= kMode can lead to command injection. It is possible to launch the attack re= motely. The exploit has been published and may be used. The vendor was cont= acted early about this disclosure. 2026-08-04 7.2 CVE-2026-18812 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-18812 ] H3C--NX15 A vulnerability has b= een found in H3C NX15 V100R017. This affects the function delete of the fil=
e /api/esps. The manipulation of the argument esps.apcm.version leads to co= mmand injection. The attack can be initiated remotely. The exploit has been=
disclosed to the public and may be used. The vendor was contacted early ab= out this disclosure. 2026-08-04 7.2 CVE-2026-18813 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-18813 ] H3C--NX15 A vulnerability was found in H3C NX=
15 V100R017. This impacts the function reload.reload_config of the file /ap= i/esps. The manipulation results in command injection. The attack can be la= unched remotely. The exploit has been made public and could be used. The ve= ndor was contacted early about this disclosure. 2026-08-04 7.2 CVE-2026-188=
14 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18814 ] H3C--NX15 A weakne=
ss has been identified in H3C NX15 V100R017. This impacts the function file= .exec of the file /api/esps of the component Backend RPC. This manipulation=
of the argument File causes os command injection. The attack may be initia= ted remotely. The exploit has been made available to the public and could b=
e used for attacks. The vendor was contacted early about this disclosure. 2= 026-08-05 7.2 CVE-2026-18900 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 18900 ] H3C--NX15 A security vulnerability has been detected in H3C NX15 V1= 00R017. Affected is the function service.add of the file /api/esps of the c= omponent Web API. Such manipulation leads to exposed dangerous routine. The=
attack may be launched remotely. The exploit has been disclosed publicly a=
nd may be used. The vendor was contacted early about this disclosure. 2026-= 08-05 7.2 CVE-2026-18901 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1890=
1 ] H3C--NX15 A vulnerability was detected in H3C NX15 V100R017. Affected b=
y this vulnerability is the function esps.wan.repeater.set/repeaterproc of = the file /api/esps. Performing a manipulation of the argument my2P4key resu= lts in command injection. Remote exploitation of the attack is possible. Th=
e exploit is now public and may be used. The vendor was contacted early abo=
ut this disclosure. 2026-08-05 7.2 CVE-2026-18902 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-18902 ] Hamid Alinia--Login with phone number Unauthen= ticated Bypass Vulnerability in Login with phone number <=3D 1.8.70 version=
s. 2026-08-06 8.1 CVE-2026-65570 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-65570 ] hapifhir--org.hl7.fhir.core HAPI FHIR is a complete implementat= ion of the HL7 FHIR standard for healthcare interoperability in Java. Prior=
to 6.9.11, the JSON utility parser in org.hl7.fhir.utilities.json.parser.J= sonParser enforces no maximum nesting depth for arrays or objects. As a res= ult, a small but deeply nested, syntactically valid FHIR JSON document can = trigger unbounded readArray() or readObject() recursion, raising a StackOve= rflowError before structural validation runs. An attacker who can submit JS=
ON resources for validation can thus crash the request thread, and services=
that do not isolate StackOverflowError safely may experience worker loss o=
r process instability - a denial-of-service condition. This issue is fixed =
in version 6.9.11. 2026-08-07 7.5 CVE-2026-62295 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-62295 ] hapifhir--org.hl7.fhir.core HAPI FHIR is a comp= lete implementation of the HL7 FHIR standard for healthcare interoperabilit=
y in Java. Prior to 6.9.11, XhtmlParser.java imposes no maximum element nes= ting depth, so a deeply nested text.div narrative triggers unbounded recurs= ion between parseElementInner() and parseElement(), raising a StackOverflow= Error. An attacker who can submit FHIR resources containing such narratives=
can thus crash a parsing or validation worker thread, affecting validator = services and any application that parses attacker-supplied FHIR JSON or XML=
. This issue is fixed in version 6.9.11. 2026-08-07 7.5 CVE-2026-62296 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-62296 ] Harsh21Patel--Inventory-M= anagement-System-PHP Inventory-Management-System-PHP's login.php constructs=
its authentication query via direct string concatenation of raw POST param= eters: $sql =3D "select * from user where email =3D '$email' and password =
=3D '$password'", with no escaping or parameterization, allowing authentica= tion bypass via a payload such as email=3D' OR 1=3D1 LIMIT 1-- -. Separatel=
y, delete.php executes mysqli_query($db, "DELETE FROM product WHERE product= _id=3D" . $_GET['id']) with no authentication check and no validation of th=
e id parameter, allowing an unauthenticated attacker to delete arbitrary pr= oduct rows or perform blind SQL injection via payloads such as id=3D0 OR SL= EEP(5). 2026-08-05 9.8 CVE-2026-71248 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-71248 ] HashBrownCMS--hashbrown-cms HashBrown CMS through 1.4.6 co= ntains an OS Command Injection vulnerability (CWE-78) in the media upload t= humbnail generation routine. Media.generateThumbnail() in src/Server/Entity= /Resource/Media.js builds a temporary file path as 'thumbnail' + Path.extna= me(filename) and passes it, unescaped, into a shell command executed via Ap= pService.exec() ('convert ' + tempFile + ...). The MIME-type filter in getM= IMEType() (src/Common/utilities.js) truncates the extracted extension at th=
e first '?' character, while Path.extname() does not, allowing a filename s= uch as 'x.jpg?$(command)' to pass the image-type check while still injectin=
g a shell command substitution into the exec() call. An authenticated user = holding the media resource scope can achieve arbitrary OS command execution=
in the context of the Node.js process via POST /api/{project}/{environment= }/media/new. 2026-08-05 8.8 CVE-2026-70374 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-70374 ] HashBrownCMS--hashbrown-cms HashBrown CMS through 1.4=
.6 contains an OS Command Injection vulnerability (CWE-78) in the Git deplo= yer component. GitDeployer.pullRepo() in src/Server/Entity/Deployer/GitDepl= oyer.js executes AppService.exec(`git checkout ${this.branch || 'master'}`)=
, interpolating the configured branch value directly into a shell command w= ith no escaping. GitDeployer.validate() only rejects a single-quote charact=
er in the repo, branch, username, and password fields; shell metacharacters=
such as ';', '&&', '|', backticks, and '$()' are not filtered. A user able=
to configure a project's Git deployer settings can set a malicious branch = value (e.g. 'master;<command>#') that executes automatically on every subse= quent deployer operation (media upload, content save, etc.), since pullRepo=
() is invoked unconditionally at the start of each such operation. This is = related to CVE-2020-6948, which addressed single-quote escaping of the repo=
, username, and password fields in the same file's git clone invocation; th=
e branch field used in the unquoted git checkout command was not covered by=
that fix and remains injectable. 2026-08-05 8.8 CVE-2026-70375 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-70375 ] HashiCorp--Consul Consul Communi=
ty Edition and Consul Enterprise 1.13.0 through 2.0.2 are vulnerable to an = unauthenticated denial of service through unbounded connection acceptance o=
n the external gRPC listeners. A remote attacker may exhaust agent file des= criptors, goroutines, and memory by opening many incomplete connections, po= tentially preventing legitimate clients from connecting. This vulnerability=
, CVE-2026-15972, is fixed in Consul 2.0.3 and Consul Enterprise 1.21.17, 1= .22.11, and 2.0.3. 2026-08-07 7.5 CVE-2026-15972 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-15972 ] HAVELSAN Inc.--Liman MYS Missing Authorization = vulnerability in HAVELSAN Inc. Liman MYS allows Accessing Functionality Not=
Properly Constrained by ACLs. This issue affects Liman MYS: from 2.2.3 bef= ore 2.3.1. 2026-08-04 8.8 CVE-2026-17070 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-17070 ] HAVELSAN Inc.--Liman MYS Missing Authorization vulnerab= ility in HAVELSAN Inc. Liman MYS allows Privilege Escalation. This issue af= fects Liman MYS: from 2.2.3 before 2.3.1. 2026-08-04 8.8 CVE-2026-18650 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-18650 ] heshengtao--super-agent-= party A vulnerability has been found in heshengtao super-agent-party up to = 0.4.1. The impacted element is the function sanitize_proxy_url of the file = server.py of the component extension_proxy Route. The manipulation of the a= rgument url leads to server-side request forgery. The attack can be initiat=
ed remotely. The exploit has been disclosed to the public and may be used. = The vendor was contacted early about this disclosure but did not respond in=
any way. 2026-08-06 7.3 CVE-2026-18973 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18973 ] Hewlett Packard Enterprise (HPE)--EdgeConnect SD-WAN Or= chestrator Multiple vulnerabilities in the REST API interface of HPE Networ= king SD-WAN Orchestrator could allow an unauthenticated remote attacker to = bypass web authentication mechanisms and access system functions. Successfu=
l exploitation could allow an attacker to view and modify potentially sensi= tive information on the target system. 2026-08-04 9.8 CVE-2026-63455 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-63455 ] Hewlett Packard Enterprise = (HPE)--EdgeConnect SD-WAN Orchestrator Multiple vulnerabilities in the REST=
API interface of HPE Networking SD-WAN Orchestrator could allow an unauthe= nticated remote attacker to bypass web authentication mechanisms and access=
system functions. Successful exploitation could allow an attacker to view = and modify potentially sensitive information on the target system. 2026-08-=
04 9.8 CVE-2026-63456 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63456 ]=
HKUDS--LightRAG LightRAG provides simple and fast retrieval-augmented gene= ration. Through version 1.5.4, the LightRAG API server binds to all network=
interfaces with authentication disabled by default, allowing an unauthenti= cated network attacker to read indexed document content, upload or delete d= ocuments, modify the knowledge graph, cancel pipelines, clear caches, and c= onsume LLM resources. This issue is mitigated in version 1.5.5rc1. 2026-08-=
07 9.8 CVE-2026-61808 [ https://www.cve.org/CVERecord?id=3DCVE-2026-61808 ]=
ho3einie--Material Dashboard The Material Dashboard plugin for WordPress i=
s vulnerable to unauthorized access and modification of data due to missing=
capability checks on the amd_ajax_target_task_manager() function in all ve= rsions up to, and including, 1.4.10. This makes it possible for unauthentic= ated attackers to enumerate all scheduled tasks (potentially exposing PII),=
execute arbitrary tasks, and delete any task via the public_amd_ajax_handl=
er AJAX action. 2026-08-05 7.3 CVE-2026-6079 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-6079 ] home-assistant--core Home Assistant is open source h= ome automation software focused on local control and privacy. Prior to 2026= .5.3, the Companion app treats tag links (NFC or QR) delivered through an O= S-level routing mechanism as if they were physically scanned, without valid= ating the calling app or prompting the user. As a result, any untrusted app=
on the device can forward an arbitrary tag to Home Assistant, causing it t=
o execute the associated automation as though a legitimate user had scanned=
an authorized tag. This allows silent, unattended automation execution by = untrusted local callers. This issue is fixed in version 2026.8.1. 2026-08-0=
7 7.1 CVE-2026-66060 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66060 ] = home-assistant--core Home Assistant is open source home automation software=
focused on local control and privacy. Prior to 2026.5.0, the iOS Companion=
app treats tag links (NFC or QR) delivered through an OS-level routing mec= hanism such as iOS universal links as if they were physically scanned, with= out validating the calling app or prompting the user. As a result, any untr= usted app on the device can forward an arbitrary tag to Home Assistant, cau= sing it to execute the associated automation as though a legitimate user ha=
d scanned an authorized tag. This allows silent, unattended automation exec= ution by untrusted local callers. This issue has been fixed in version 2026= .5.0. 2026-08-07 7.1 CVE-2026-66061 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-66061 ] huggingface--peft Hugging Face peft's LoRA-GA and CorDA init= ialization modules (src/peft/tuners/lora/corda.py lines ~102 and ~163, and = src/peft/tuners/lora/loraga.py line ~101) call torch.load() on config-speci= fied cache/covariance files without weights_only=3DTrue, bypassing peft's o=
wn safe-loading wrapper used elsewhere in the codebase. Because torch.load(=
) without weights_only=3DTrue performs full pickle deserialization, loading=
a malicious cache or covariance file (e.g. a shared/downloaded LoRA-GA or = CorDA cache) results in arbitrary code execution. 2026-08-05 8.8 CVE-2026-7= 1281 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71281 ] IBM--Application=
Gateway Operator IBM Application Gateway Operator 22.2 through 26.06 is vu= lnerable to Server-Side Request Forgery (SSRF) due to insufficient validati=
on of URLs specified in custom resources. 2026-08-05 8.5 CVE-2026-17617 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-17617 ] IBM--Langflow OSS IBM La= ngflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker=
to execute arbitrary commands due to improper validation of the command fi= eld in MCP server configurations. 2026-08-05 8.8 CVE-2026-17623 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-17623 ] IBM--Langflow OSS IBM Langflow O=
SS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 = through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 throu=
gh 1.10.3 could allow a remote authenticated attacker to execute arbitrary = code due to improper validation of module imports. 2026-08-05 8.5 CVE-2026-= 17624 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17624 ] IBM--Langflow O=
SS IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authentica= ted attacker to read, modify, or expose sensitive host files via Docker-bas=
ed MCP servers due to incomplete filtering of dangerous Docker volume-mount=
and device-mapping arguments. 2026-08-05 8.8 CVE-2026-17626 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-17626 ] IBM--Langflow OSS IBM Langflow OSS = 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute=
arbitrary code due to improper validation of Python code during AST-based = security scanning. 2026-08-05 8.8 CVE-2026-17632 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-17632 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 throug=
h 1.10.3 could allow a remote authenticated attacker to execute arbitrary c= ode due to code injection. 2026-08-05 8.5 CVE-2026-17633 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-17633 ] IBM--Langflow OSS IBM Langflow OSS 1.0.=
0 through 1.10.3 installations allow anyone on the internet to execute arbi= trary code on the server without any credentials via 2 HTTP requests. 2026-= 08-05 8.8 CVE-2026-8182 [ https://www.cve.org/CVERecord?id=3DCVE-2026-8182 =
] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3 could allow a rem= ote attacker to inject arbitrary code on the system, due to the improper co= ntrol of user input code. 2026-08-05 8.8 CVE-2026-8478 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-8478 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 t= hrough 1.10.3 Langflow allows remote authenticated attackers to bypass loca= lhost-only restrictions and write arbitrary MCP server configurations to ID=
E configuration files on the host system. 2026-08-05 8.5 CVE-2026-9077 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-9077 ] IBM--Langflow OSS IBM Lang= flow OSS 1.0.0 through 1.10.3 could allow an authenticated attacker to exec= ute unintended code during Agentic Assistant validation due to improper han= dling of LLM-generated components. The application executes model-generated=
Python code in the backend during validation prior to user approval, which=
may allow an attacker to trigger side effects such as outbound network acc= ess, file system interaction, or data exfiltration with the privileges of t=
he Langflow backend process. 2026-08-05 8.1 CVE-2026-9196 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-9196 ] IBM--Langflow OSS IBM Langflow OSS 1.0.=
0 through 1.10.3 could allow an authenticated attacker to execute arbitrary=
code due to a cryptographic weakness in the custom component validation me= chanism. When the optional hardening mode that restricts execution to trust=
ed component templates is enabled, the application validates component code=
using a truncated SHA-256 hash. Because the hash comparison relies on only=
a portion of the digest, an attacker can craft malicious component code th=
at collides with a trusted template hash and bypasses validation. Successfu=
l exploitation allows the attacker to introduce and execute unauthorized Py= thon code within the Langflow process, defeating the intended security cont= rol and potentially leading to full compromise of the affected instance. 20= 26-08-05 8.8 CVE-2026-9201 [ https://www.cve.org/CVERecord?id=3DCVE-2026-92=
01 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through=
1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, = 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 could allow a remote authent= icated attacker to execute arbitrary commands due to improper neutralizatio=
n of special elements used in an OS command. 2026-08-05 7.2 CVE-2026-17625 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-17625 ] IBM--Langflow OSS IBM=
Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to execute=
arbitrary code due to improper validation of configuration parameters. 202= 6-08-05 7.2 CVE-2026-17630 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17= 630 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 throug=
h 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3,=
and 1.0.0 through 1.10.3 could allow a remote attacker to traverse directo= ries on the system. An attacker could send a specially crafted URL request = containing "dot dot " sequences ( /.. /) to v i ew arbitrary files on the s= ystem. 2026-08-05 7.7 CVE-2026-8183 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-8183 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3 conta=
in an authentication bypass vulnerability in the Model Context Protocol (MC=
P) composer endpoint when mcp_composer_enabled=3Dtrue (default) and project=
s are configured with auth_type=3Doauth . 2026-08-05 7.5 CVE-2026-8446 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-8446 ] IBM--Langflow OSS IBM Lang= flow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, = and 1.0.0 through 1.10.3 use Python's non-cryptographic random module for g= enerating Fernet encryption keys from user secrets under 32 characters. The=
deterministic Mersenne Twister PRNG produces identical keys for identical = seeds, allowing attackers to reproduce encryption keys and decrypt stored A=
PI keys and authentication tokens. 2026-08-05 7.4 CVE-2026-8470 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-8470 ] IBM--Langflow OSS IBM Langflow OS=
S 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contains a Server-Side Req= uest Forgery (SSRF) vulnerability in the validate_model_provider_key() func= tion for the Ollama provider. The function accepts a user-supplied OLLAMA_B= ASE_URL parameter and passes it directly to requests.get() without validati= on, scheme/host allowlisting, or filtering of private IP ranges (loopback, = RFC1918, link-local addresses). 2026-08-05 7.1 CVE-2026-9081 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-9081 ] IBM--Langflow OSS IBM Langflow OSS 1= .0.0 through 1.10.3 contain an authorization bypass vulnerability in the Me= moryComponent that allows authenticated users to access chat history of oth=
er users via session_id collision. The MemoryComponent.retrieve_messages an=
d store_message methods filter on session_id without validating flow_id or = user_id ownership, enabling cross-user information disclosure through multi= ple authenticated API endpoints including /api/v1/run/*, /api/v1/responses,=
and /api/v2/workflow/*. This vulnerability only affects multi-user deploym= ents with LANGFLOW_AUTO_LOGIN=3DFalse. 2026-08-05 7.1 CVE-2026-9130 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-9130 ] IBM--Langflow OSS IBM Langflo=
w OSS contains a weak cryptographic key derivation vulnerability in the=C2= =A0ensure_fernet_key() function. 2026-08-05 7.4 CVE-2026-9205 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-9205 ] IBM--QRadar IBM QRadar 7.6.0.0 thro= ugh 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Interim Fix 005 has an XML Exter= nal Entity (XXE) injection vulnerability. The vulnerability resides in the = parseXmlPayload() function within the event processing pipeline ( q1labs_co= re.jar ). When at least one log source type is configured to use XML-format=
property autodetection, the system processes XML-formatted syslog events s= ent to port 514 (UDP/TCP) without authentication. 2026-08-05 8.2 CVE-2026-1= 0025 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10025 ] IBM--WebSphere A= pplication Server IBM WebSphere Application Server 8.5, and 9.0 and IBM Web= Sphere Application Server - Liberty Continuous delivery has a flaw in the O=
RB component in IBM SDK, Java Technology Edition, may allow a malicious IIO=
P server to induce loading and instantation of arbitrary classes. 2026-08-0=
5 8.1 CVE-2026-8400 [ https://www.cve.org/CVERecord?id=3DCVE-2026-8400 ] im= ranrisal-dev--Student-Management-System A vulnerability was detected in imr= anrisal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191= def/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. Affected by this vulnerabilit=
y is an unknown functionality of the file loginCheckTest.php of the compone=
nt Login. The manipulation of the argument username/password results in sql=
injection. The attack can be launched remotely. The exploit is now public = and may be used. This product does not use versioning. This is why informat= ion about affected and unaffected releases are unavailable. The vendor was = contacted early about this disclosure but did not respond in any way. 2026-= 08-05 7.3 CVE-2026-18958 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1895=
8 ] inisev--Backup Migration The Backup Migration plugin for WordPress is v= ulnerable to OS Command Injection in all versions up to, and including, 2.1= .5.1 due to insufficient sanitization of the `file` POST parameter on the `= restoreBackup()` AJAX handler. The handler applies `esc_attr()` - an HTML-c= ontext sanitizer that does not strip shell metacharacters - and concatenate=
s the result, unquoted, into a `php-cli -f-=C3=82=C2=A6 bmi_restore <file> = <remote>` command passed to `exec()`. This makes it possible for authentica= ted attackers, with Administrator-level access (or any user granted the plu= gin's `do_backups` capability) and above, to execute arbitrary OS commands =
as the web-server user, bypassing WordPress hardening constants such as `DI= SALLOW_FILE_EDIT` and `DISALLOW_FILE_MODS` that would otherwise prevent cod=
e execution from the admin UI. This is an incomplete fix of CVE-2023-7002, = which patched the same pattern only in the `$_POST['url']` path of `handleQ= uickMigration()`; the equivalent mitigations (`rawurlencode()` + explicit s= hell-metachar replacement + double-quoting in `exec()`) were never applied =
to `$backupName`. 2026-08-05 7.2 CVE-2026-7693 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-7693 ] INQUIRELAB--mcp-bridge-api A vulnerability was fou=
nd in INQUIRELAB mcp-bridge-api up to b30a82aa1d1d1139e0de846c41c8aadee6e06= 114. The impacted element is an unknown function of the file mcp-bridge.js =
of the component Servers Endpoint. Performing a manipulation of the argumen=
t command/args results in command injection. It is possible to initiate the=
attack remotely. This product is using a rolling release to provide contin= ious delivery. Therefore, no version details for affected nor updated relea= ses are available. The pull request to fix this issue awaits acceptance. 20= 26-08-08 7.3 CVE-2026-19263 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1= 9263 ] Integrate PhonePe with WooCommerce--Integrate PhonePe with WooCommer=
ce The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 do=
es not validate that a verified payment transaction belongs to the order be= ing marked as paid, nor does it verify the authenticity of its payment-comp= letion request, allowing unauthenticated attackers to reuse a single valid = transaction to mark arbitrary orders as paid and bypass payment. 2026-08-06=
7.5 CVE-2026-10599 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10599 ] i= ntelliants--subrion Subrion CMS's admin grid sorting helper, _gridGetSortin= g() in includes/classes/ia.base.controller.admin.php, whitelists the `dir` = (ASC/DESC) request parameter via in_array(), but falls back to the raw, att= acker-supplied `sort` GET parameter whenever the requested key is not prese=
nt in the per-controller $_gridSorting whitelist array: `$column =3D isset(= $this->_gridSorting[$params['sort']]) ? ... : $params['sort'];`, which is t= hen placed into `sprintf(' ORDER BY %s`%s` %s', $tableAlias, $column, $dire= ction)` with only backtick-quoting and no escaping. Because a backtick in t=
he payload breaks out of the identifier context, an authenticated admin ses= sion can inject arbitrary SQL (error-based via EXTRACTVALUE, or time-based = via SLEEP()) to extract database contents including administrator password = hashes. Most of Subrion's ~29 admin grid controllers either define no $_gri= dSorting whitelist at all (e.g. pages.php, transactions.php, languages.php)=
or an incomplete one covering only some of their sortable columns (e.g. me= mbers.php whitelists only 1 of 7 sortable fields), making the vast majority=
of admin grid endpoints exploitable. 2026-08-05 7.2 CVE-2026-71292 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-71292 ] invoiceninja--invoiceninja I= nvoiceNinja v5-stable renders an invoice or quote's "terms" field in the cl= ient portal using Laravel Blade's raw output directive {!! $entity->terms !=
!} (resources/views/portal/ninja2020/invoices/includes/terms.blade.php) wit=
h no HTML sanitization. StoreInvoiceRequest.php only strips newlines from t=
he field and does not purify HTML. An authenticated user with invoice creat= ion access can set the terms field via the REST API (PUT /api/v1/invoices/{= id}) to an HTML/JavaScript payload that executes in the client's browser wh=
en they view the invoice, enabling session cookie theft and client account = takeover. This is a distinct code path from the previously published invoic=
e line-item description field XSS (GHSA-98wm-cxpw-847p / CVE-2026-33628). 2= 026-08-05 8.7 CVE-2026-71233 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 71233 ] iot-ecology--rust-iot-platform rust-iot-platform's AuthToken reques= t-guard implementation (api/src/main.rs) only checks whether the Authorizat= ion HTTP header is present, and never validates its value against any sessi= on, token store, or signature. Any request carrying an arbitrary non-empty = Authorization header (e.g. `Authorization: fake`) satisfies the guard, gran= ting access to every endpoint protected only by this request guard. 2026-08= -05 9.1 CVE-2026-71277 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71277 =
] iot-ecology--rust-iot-platform rust-iot-platform allows creating a "calc = rule" via POST /calc-rule/create (api/src/controller/calc_rule_router.rs) c= ontaining an arbitrary `script` field. This route does not take the AuthTok=
en request guard used elsewhere in the application, making it reachable wit= hout authentication. The stored script is subsequently executed via quick_j= s::Context::eval() in api/src/biz/calc_run_biz.rs with no sandboxing, allow= ing an unauthenticated attacker to achieve arbitrary JavaScript execution i=
n the server process by creating and triggering a malicious calc rule. 2026= -08-05 9.8 CVE-2026-71278 [ https://www.cve.org/CVERecord?id=3DCVE-2026-712=
78 ] IoTSharp--IoTSharp IoTSharp BlobStorageController.cs lacks the [Author= ize] attribute applied to every other controller in the application (Device= sController, CustomersController, TenantsController, etc.), and no global a= uthorization FallbackPolicy is configured in Startup.cs, leaving its Upload= /Download/List/Modify/Delete endpoints reachable by unauthenticated remote = attackers. The path/filename parameters passed to these endpoints (e.g. `_b= lob.WriteFileAsync($"{path}/{formFile.FileName}", ...)`) are used without s= anitization, enabling path traversal that allows writing, reading, modifyin=
g, and deleting arbitrary files outside the intended blob storage directory=
, including web-accessible paths that can be leveraged for remote code exec= ution via webshell upload. 2026-08-05 9.8 CVE-2026-71262 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-71262 ] ivanbebek--BOX NOW Delivery Croatia Una= uthenticated Broken Access Control in BOX NOW Delivery Croatia <=3D 3.3.0 v= ersions. 2026-08-06 7.5 CVE-2026-65504 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-65504 ] JeecgBoot--JeecgBoot A vulnerability was identified in = JeecgBoot up to 3.9.2. The affected element is an unknown function of the f= ile /airag/chat/send of the component Anonymous Chat Attachment Parser. The=
manipulation leads to server-side request forgery. The attack can be initi= ated remotely. The exploit is publicly available and might be used. A fix i=
s planned for the upcoming release. 2026-08-06 7.3 CVE-2026-19000 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-19000 ] jegtheme--Jeg Kit for Elemento=
r Author PHP Object Injection in Jeg Kit for Elementor <=3D 3.2.10 versions=
. 2026-08-06 7.2 CVE-2026-65549 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-65549 ] jetmonsters--JetFormBuilder Unauthenticated Broken Access Contro=
l in JetFormBuilder <=3D 3.6.4.1 versions. 2026-08-06 7.5 CVE-2026-28140 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-28140 ] Jiangmin--Antivirus A f= law has been found in Jiangmin Antivirus 21. Impacted is the function Messa= geNotifyCallback in the library kvcore.sys of the component Minifilter Port=
. Executing a manipulation can lead to improper access controls. The attack=
needs to be launched locally. The exploit has been published and may be us= ed. The vendor was contacted early about this disclosure but did not respon=
d in any way. 2026-08-07 7.8 CVE-2026-19193 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-19193 ] jina-ai--reader A security vulnerability has been de= tected in jina-ai reader up to 1574bfd380d249c86c82db4dace0d9c8fe17e2b1. Th=
is issue affects the function isValidTLD of the file /backend/functions/src= /cloud-functions/crawler.ts of the component Crawler/Puppeteer. The manipul= ation leads to server-side request forgery. Remote exploitation of the atta=
ck is possible. The exploit has been disclosed publicly and may be used. Th=
is product follows a rolling release approach for continuous delivery, so v= ersion details for affected or updated releases are not provided. The vendo=
r was contacted early about this disclosure but did not respond in any way.=
2026-08-03 7.3 CVE-2026-18647 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-18647 ] Jordy Meow--AI Engine Unauthenticated Cross Site Scripting (XSS) =
in AI Engine <=3D 3.6.8 versions. 2026-08-06 7.1 CVE-2026-65545 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-65545 ] jp-secure--SiteGuard WP Plugin U= nauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <=3D 1.8.6=
versions. 2026-08-06 7.1 CVE-2026-61982 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-61982 ] juliangruber--brace-expansion The brace-expansion libra=
ry generates arbitrary strings containing a common prefix and suffix. Prior=
to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() does not apply maxLength whil=
e constructing comma-alternative intermediate arrays or padded sequences, a= llowing attacker-controlled input to exhaust memory or block the event loop=
. The fix for CVE-2026-14257 is bypassed by the vulnerability. This issue i=
s fixed in versions 1.1.18, 2.1.4, 3.0.6, and 5.0.9. 2026-08-03 7.5 CVE-202= 6-69152 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69152 ] kata-containe= rs--kata-containers Kata Containers is an open source project focusing on a=
standard implementation of lightweight Virtual Machines (VMs) that perform=
like containers. Prior to version 4.0.0, kata-runtime is vulnerable to hos=
t code execution via an unvalidated configuration path annotation. The runt= ime accepts an arbitrary io.katacontainers.config_path pod annotation and l= oads the referenced host TOML file without restriction. As a result, a pod = user who can place a file at a host-visible path can supply a configuration=
that selects an attacker-controlled hypervisor or virtio-fs daemon binary,=
executing code as root on the host. This issue is fixed in version 4.0.0. = 2026-08-07 9.6 CVE-2026-50540 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -50540 ] Keysight--Hawkeye Keysight IxChariot Endpoint and associated produ= cts contain a stack-based buffer overflow. An unauthenticated remote attack=
er can send a specially crafted packet and execute arbitrary code with admi= nistrative privileges. 2026-08-04 9.8 CVE-2026-49435 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-49435 ] Keysight--IxChariot Keysight IxChariot Endp= oint before 9.5.102 contains a heap-based buffer overflow. An unauthenticat=
ed remote attacker can send a specially crafted packet to crash the endpoin=
t or potentially execute arbitrary code. 2026-08-04 9.8 CVE-2017-20241 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2017-20241 ] Keysight--IxChariot Keysi= ght IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflo=
w. An unauthenticated remote attacker can send a specially crafted packet t=
o crash the endpoint or potentially execute arbitrary code. 2026-08-04 9.8 = CVE-2017-20242 [ https://www.cve.org/CVERecord?id=3DCVE-2017-20242 ] keywor= drush--Content Egg Affiliate Product Importer & Price Comparison The Conten=
t Egg - Affiliate Product Importer & Price Comparison plugin for WordPress =
is vulnerable to Arbitrary File Deletion via Path Traversal in versions up =
to and including 11.3.0. This is due to insufficient validation of the 'img= _file' field within the cegg_data post metadata: the value passes only thro= ugh wp_strip_all_tags() (which does not strip path traversal sequences), is=
stored directly in post meta, and is later concatenated without normalizat= ion into a filesystem path in getFullImgPath() before being passed to PHP's=
unlink(). This makes it possible for authenticated attackers, with author-= level access and above, to delete arbitrary files on the affected site's se= rver which may make remote code execution possible. 2026-08-05 8.1 CVE-2026= -15979 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15979 ] klever-io--kle= ver-go Klever-Go is the Go implementation of the Klever blockchain protocol=
. Prior to 1.7.18, the P2P resolver request handling logic is vulnerable to=
hash-array amplification. A connected peer can send a compressed RequestDa= taType_HashArrayType direct request that is only 442 bytes on the wire but = expands into 200,000 decoded hash entries inside the resolver path. The res= olver's antiflood logic counts only a single logical message and the compre= ssed wire size, and while Batch.Decompress() caps the decompressed byte siz=
e, it never limits the number of decoded repeated-field items. As a result,=
both TxResolver and TrieNodeResolver preallocate and iterate over the enti=
re unchecked set of decoded hashes, causing remote memory and CPU amplifica= tion against any node that accepts P2P peer connections. This issue is fixe=
d in version 1.7.18. 2026-08-07 7.5 CVE-2026-47249 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-47249 ] klever-io--klever-go Klever-Go is the Go impl= ementation of the Klever blockchain protocol. Versions 1.7.14 through 1.7.1=
7 are vulnerable to a nil-pointer panic triggered by a protobuf Transaction=
whose embedded RawData sub-message is omitted. This omission causes RawDat=
a to decode to nil. Every transaction gossiped on the Klever-Go P2P network=
is decoded and validated synchronously inside the libp2p pubsub topic-vali= dator callback, where txVersionChecker.CheckTxVersion dereferences tx.RawDa= ta.Version with no nil check. Because the libp2p pubsub callback, the under= lying go-libp2p-pubsub validation worker, and Klever's own network/p2p laye=
r install no recover(), the panic propagates and crashes the entire node pr= ocess. The attacker payload is a 3-byte protobuf message; no validator key,=
stake, funds, or on-chain account is required, and delivery aimed at enoug=
h of the BLS validator set can halt block production, resulting in a chain = halt. This issue has been fixed in version 1.7.18. 2026-08-07 7.5 CVE-2026-= 52878 [ https://www.cve.org/CVERecord?id=3DCVE-2026-52878 ] klever-io--klev= er-go Klever-Go is the Go implementation of the Klever blockchain protocol.=
In versions 1.7.14 through 1.7.17, the direct-message ingress handler spaw=
ns a new goroutine for every incoming direct message before the processor-l= evel antiflood layer makes any admission decision, with no semaphore, throt= tler, or bound on the number of concurrent in-flight spawns. Because the an= tiflood check runs inside the spawned goroutine rather than before it, a si= ngle connected peer can open a direct-send stream and send a stream of well= -formed messages to force unbounded goroutine creation, where each goroutin=
e allocates its own stack and holds a message reference until processing co= mpletes, adding scheduler and garbage-collection pressure faster than the r= untime can drain it. This lets one peer degrade the node's availability and=
its ability to process legitimate traffic, resulting in a remotely trigger= able denial of service. The issue is fixed in 1.7.18. 2026-08-07 7.5 CVE-20= 26-52879 [ https://www.cve.org/CVERecord?id=3DCVE-2026-52879 ] klever-io--k= lever-go Klever-Go is the Go implementation of the Klever blockchain protoc= ol. Versions from 1.7.14 through 1.7.17 are vulnerable to a remotely trigge= rable denial of service. Both REST APIs are started with the Gin Engine.Run=
convenience method, which serves requests through Go's default HTTP server=
with no ReadHeaderTimeout, ReadTimeout, or MaxHeaderBytes configured. As a=
result, incoming connections that never complete their request headers are=
held open indefinitely. When a REST listener is reachable beyond localhost=
through the documented all-interface bind or a Docker port-publish deploym= ent, a single unauthenticated client can open many slow-header connections = and hold them open until server file descriptors are exhausted, preventing = the API from accepting new connections. This renders the REST API unavailab=
le to legitimate clients. This issue is fixed in version 1.7.18. 2026-08-07=
7.5 CVE-2026-52880 [ https://www.cve.org/CVERecord?id=3DCVE-2026-52880 ] K= oenkk--zigbee2mqtt Zigbee2MQTT's ExternalJSExtension.getFilePath() (lib/ext= ension/externalJS.ts) joins a `name` parameter received via an MQTT message=
(topic zigbee2mqtt/bridge/request/extension/save) into the extensions base=
path using path.join(basePath, name) with no sanitization. Because path.jo= in() resolves `../` sequences, a name such as `../../tmp/evil.js` escapes t=
he intended extensions directory. The extension handler only validates that=
the name ends in .js/.mjs/.cjs, writes the file, and then dynamically impo= rts it via Node.js import(), achieving remote code execution. Requires the = `enable_external_js` config option (off by default, but commonly enabled in=
legacy installs) and MQTT broker access, which is frequently unauthenticat=
ed in real deployments. The identical unsanitized getFilePath() is also use=
d by the extension-removal handler, enabling arbitrary file deletion. 2026-= 08-05 8.1 CVE-2026-71279 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7127=
9 ] Koha Community--Koha Koha's reports/acquisitions_stats.pl builds its pe= r-cell statistics query in sub calculate by interpolating the user-controll=
ed Filter request parameters directly into WHERE fragments covering aqbaske= t.closedate, aqorders.datereceived, aqbooksellers.name, items.homebranch, i= tems.ccode, biblioitems.itemtype, aqbudgets.budget_code, aqorders.sort1, an=
d aqorders.sort2. The statement is prepared and executed with no bound para= meters. An authenticated staff user holding the reports module permission c=
an inject arbitrary SQL and read any table reachable by the Koha database u= ser, including borrowers (password hashes, two-factor secrets, personal dat= a), borrower_password_recovery, api_keys, and sessions. 2026-08-04 8.8 CVE-= 2026-70369 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70369 ] Koha Commu= nity--Koha Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calc= ulate by interpolating the user-controlled Line and Column request paramete=
rs directly into identifier positions of the query (SELECT DISTINCTROW, GRO=
UP BY, ORDER BY) with no whitelist validation. When Line contains itemcalln= umber and the cotedigits parameter is truthy, cotedigits is additionally co= ncatenated raw as the numeric argument of a LEFT() call. An authenticated s= taff user holding the reports module permission can inject arbitrary SQL an=
d read any table reachable by the Koha database user, including borrowers (= password hashes, two-factor secrets, personal data), api_keys, and sessions=
. 2026-08-04 8.8 CVE-2026-70370 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-70370 ] Koha Community--Koha Koha's reports/issues_avg_stats.pl builds d= ynamic SQL in sub calculate by concatenating several user-controlled reques=
t parameters directly into the query string. The Line and Column parameters=
are not validated against any whitelist and land verbatim in identifier po= sitions (SELECT DISTINCTROW, GROUP BY, ORDER BY), and each Filter slot is c= oncatenated raw into single-quoted LIKE, BETWEEN, and comparison fragments = with no bound parameters. An authenticated staff user holding the reports m= odule permission can inject arbitrary SQL and read any table reachable by t=
he Koha database user, including borrowers (password hashes, two-factor sec= rets, personal data), api_keys, and sessions. 2026-08-04 8.8 CVE-2026-70371=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-70371 ] Koha Community--Koha=
Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by co= ncatenating several user-controlled request parameters directly into the qu= ery string. The Criteria parameter is only normalized by a table-name prefi=
x and is never whitelisted, landing verbatim in identifier positions (SELEC=
T DISTINCTROW, GROUP BY, ORDER BY); Filter values are concatenated raw into=
single-quoted LIKE, BETWEEN, and comparison fragments, and the Limit param= eter is appended raw to a LIMIT clause. An authenticated staff user holding=
the reports module permission can inject arbitrary SQL and read any table = reachable by the Koha database user, including borrowers (password hashes, = two-factor secrets, personal data), api_keys, and sessions. 2026-08-04 8.8 = CVE-2026-70372 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70372 ] Koha C= ommunity--Koha Koha's reports/issues_stats.pl (the circulation statistics r= eport) builds its calculation query in sub calculate by concatenating sever=
al user-controlled request parameters directly into the SQL string. The Per= iodTypeSel, PeriodDaySel, and PeriodMonthSel parameters are interpolated ra=
w into single-quoted equality and function-comparison fragments, and the Fi= lter slots plus the Line and Column identifiers are likewise interpolated w= ith no whitelist and no placeholder binding. An authenticated staff user ho= lding the reports module permission can inject arbitrary SQL and read any t= able reachable by the Koha database user, including borrowers (password has= hes, two-factor secrets, personal data), api_keys, and sessions. 2026-08-04=
8.8 CVE-2026-70373 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70373 ] K= oha Community--Koha Koha's guided report builder (reports/guided_reports.pl=
) reads the `order_by` CGI parameter and, for each value, a dynamically-nam=
ed `{order}_ovalue` parameter, and concatenates both directly into an SQL O= RDER BY clause with no allowlist or validation: `my @order_by =3D $input->m= ulti_param('order_by'); foreach my $order (@order_by) { my $value =3D $inpu= t->param($order . "_ovalue"); $query_orderby =3D " ORDER BY $order $value";=
}`. The resulting string is appended verbatim to the final query in C4::Re= ports::Guided (`$query .=3D $orderby;`) with no escaping. Since ORDER BY co= lumns cannot be bound via prepared-statement placeholders, this requires an=
explicit allowlist, which does not exist. Any staff account with the low-p= rivilege create_reports or execute_reports permission (commonly granted to = non-admin library staff) can perform time-based blind SQL injection against=
the Koha database, which stores patron PII and staff/LDAP credentials. 202= 6-08-05 8.8 CVE-2026-71288 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71= 288 ] kosinix--raster The raster Rust crate's crop() function (src/editor.r=
s) clamps the crop width/height against source dimensions but only clamps t=
he offset_x/offset_y parameters against 0, never against the source width/h= eight. When an offset exceeds the corresponding source dimension, `width2 -=
offset_x` (or the height equivalent) underflows to a negative i32, which r= elease builds do not trap; the negative value is then cast to usize inside = Image::blank()'s Vec::with_capacity() call, triggering a capacity-overflow = panic and crashing the process on a single crafted crop request. 2026-08-05=
7.5 CVE-2026-71202 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71202 ] k= rayin--laravel-crm Krayin CRM 2.2.4 contains a missing authentication vulne= rability in the installer middleware that allows unauthenticated remote att= ackers to overwrite the primary administrator account by sending a crafted = HTTP POST request with the X-Requested-With: XMLHttpRequest header to bypas=
s the CanInstall middleware redirect check. Attackers can supply arbitrary = name, email, and password values to the admin-config-setup endpoint, which = performs an unauthenticated updateOrInsert targeting the hardcoded administ= rator user ID, enabling full administrative access to all CRM data. 2026-08= -03 9.8 CVE-2026-41452 [ https://www.cve.org/CVERecord?id=3DCVE-2026-41452 =
] krayin--laravel-crm Krayin CRM before 2.2.4 contains a blind SQL injectio=
n vulnerability in the leads DataGrid that allows authenticated users with = leads access to inject arbitrary SQL into a HAVING clause by manipulating t=
he rotten_lead[in] query parameter, which is concatenated without parameter= ized binding directly into a havingRaw() call in LeadDataGrid.php. Attacker=
s can exploit this flaw using time-based and boolean-based blind injection = techniques to extract the entire database contents, including user credenti=
al hashes, CRM records, and application configuration data. 2026-08-03 8.8 = CVE-2026-41453 [ https://www.cve.org/CVERecord?id=3DCVE-2026-41453 ] lattep= ress--AnsPress Question and answer Subscriber Broken Access Control in AnsP= ress - Question and answer 4.4.4 versions. 2026-08-06 7.1 CVE-2026-65554 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-65554 ] Leantime--Leantime Lean= time through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.TwoFA.ge= tSetupData, saveSecret, verifyAndEnable, and disable2FA, which act on a cal= ler-supplied userId parameter with no ownership check, session pinning, or = permission-attribute gate (unlike other RPC-exposed methods in the same dis= patcher). Any authenticated user can invoke getSetupData with an arbitrary = userId to read that user's live TOTP secret, or disable2FA to strip another=
account's two-factor authentication entirely, fully defeating account-leve=
l 2FA protection. This is related to CVE-2026-15509, which covers a similar=
missing-authorization pattern in the JSON-RPC editUser/addUser role-assign= ment path in the same application; the TwoFA service methods addressed here=
are a distinct, independently fixable set of RPC endpoints. 2026-08-05 8.1=
CVE-2026-54418 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54418 ] Lenov= o--XClarity Orchestrator An improper neutralization of special elements use=
d in an operating system command vulnerability was reported in Lenovo XClar= ity Orchestrator (LXCO) 2.2.0 that could allow an authenticated attacker to=
execute arbitrary operating system commands as a privileged user under a s= pecific circumstance. 2026-08-04 8.8 CVE-2026-16793 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-16793 ] letta-ai--LettaBot A vulnerability was detec= ted in letta-ai LettaBot 0.2.0. Impacted is an unknown function of the file=
src/api/server.ts of the component API Status Route. The manipulation resu= lts in missing authentication. The attack may be performed from remote. The=
exploit is now public and may be used. The vendor was contacted early abou=
t this disclosure but did not respond in any way. 2026-08-06 7.3 CVE-2026-1= 8990 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18990 ] lightsyncpro--Li= ghtSync Pro Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox =
& Shutterstock The LightSync Pro plugin for WordPress is vulnerable to arbi= trary file uploads due to missing file type validation in the rest_replace_= media() function in all versions up to, and including, 2.1.6. This makes it=
possible for authenticated attackers, with Author-level access and above, =
to upload arbitrary files on the affected site's server which may make remo=
te code execution possible. 2026-08-05 8.8 CVE-2026-6147 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-6147 ] Linux--Linux In the Linux kernel, the fo= llowing vulnerability has been resolved: sctp: don't free the ASCONF's own = transport in DEL-IP processing sctp_process_asconf() caches the transport t=
he ASCONF chunk is processed against in asconf->transport (=3D=3D chunk->tr= ansport, set once in sctp_rcv()). For an ASCONF located through its Address=
Parameter by __sctp_rcv_asconf_lookup(), that cached transport corresponds=
to the Address Parameter, which need not be the packet's source address. s= ctp_process_asconf_param() rejects a DEL-IP for the packet source address (= ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but nothing protects asconf->transport. A=
single ASCONF can therefore carry, in order: [Address Parameter L] [DEL-IP=
L] [DEL-IP 0.0.0.0] where L differs from the source. The DEL-IP for L pass=
es the D8 check and calls sctp_assoc_rm_peer() on the transport that asconf= ->transport still points at, freeing it (RCU-deferred). The following wildc= ard DEL-IP then reuses the now-dangling asconf->transport in sctp_assoc_set= _primary() and sctp_assoc_del_nonprimary_peers(): set_primary() dereference=
s the freed transport (->ipaddr, ->state) and plants the dangling pointer i= nto asoc->peer.primary_path / active_path, and del_nonprimary_peers(), keep= ing only the pointer that is no longer on the list, removes every real tran= sport, leaving the association with a transport_count of 0 and primary_path= /active_path pointing at freed memory. Reject a DEL-IP that targets the tra= nsport the ASCONF is being processed against, mirroring the existing source= -address guard, so the wildcard branch can never reuse a freed transport. 2= 026-08-04 9.8 CVE-2026-64564 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 64564 ] Linux--Linux In the Linux kernel, the following vulnerability has b= een resolved: xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_fra= gs() When iptfs_skb_add_frags() copies frag references from the source frag=
walk into a new SKB, it increments the page reference count via __skb_frag= _ref() but does not propagate SKBFL_SHARED_FRAG to the destination SKB's sk= b_shinfo->flags. If the source SKB carries shared frags (e.g. from a page-p= ool backed receive path), the new inner SKB will appear to ESP as having pr= ivately owned frags. A subsequent esp_input() call for a nested transport-m= ode SA then takes the no-COW fast path and decrypts in place, writing over = pages that are still referenced by the outer IPTFS SKB. This causes kernel-= visible memory corruption and can trigger a panic. All other frag-transfer = helpers in the kernel (skb_try_coalesce, skb_gro_receive, __pskb_copy_fclon=
e, skb_shift, skb_segment) correctly propagate SKBFL_SHARED_FRAG; align ipt= fs_skb_add_frags() with this convention by setting the flag inside the loop=
immediately after __skb_frag_ref() and nr_frags++, so every exit path that=
attaches a frag unconditionally propagates SKBFL_SHARED_FRAG. 2026-08-05 9=
.8 CVE-2026-64566 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64566 ] Lin= ux--Linux In the Linux kernel, the following vulnerability has been resolve=
d: smb: client: fix double-free in SMB2_close() replay A response-bearing a= ttempt can return a replayable error and free its response buffer. If SMB2_= close_init() fails before the next send, cleanup retains the previous buffe=
r type and frees that response again. Reset response bookkeeping before eac=
h attempt to prevent the stale free. 2026-08-06 9.8 CVE-2026-64597 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-64597 ] Linux--Linux In the Linux ker= nel, the following vulnerability has been resolved: KVM: x86: Check for inv= alid/obsolete root *after* making MMU pages available Check for a "stale" p= age fault, i.e. for an invalid and/or obsolete root, after making MMU pages=
available for the shadow MMU. If reclaiming shadow pages zaps an in-use ro= ot, i.e. marks it invalid, then KVM will attempt to map memory into an inva= lid root. On its own, populating an invalid root is "fine", but because chi=
ld shadow pages inherit their parent's role, any children created during th=
e map/fetch will be created as invalid pages, thus violating KVM's invarian=
t that invalid pages are never on the list of active MMU pages. Note, the u= nderlying flaw has existed since KVM first started tracking invalid roots i=
n 2008 (commit 2e53d63acba7, "KVM: MMU: ignore zapped root pagetables"), bu=
t the true badness only came along in 2020 (Linux 5.9) with the invariant t= hat invalid shadow pages can't be on the list of active pages. Note #2, inh= eriting role.invalid when creating child shadow pages is also far from idea=
l; that flaw will be addressed separately. 2026-08-04 8.8 CVE-2026-64561 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-64561 ] Linux--Linux In the Lin=
ux kernel, the following vulnerability has been resolved: KVM: nVMX: Hide s= hadow VMCS right after VMCLEAR free_nested() frees the shadow VMCS while vm= cs01 still points to it. But because it is asynchronous with respect to loa= ded_vmcs_clear(), the vCPU might migrate before the pointer is cleared and = __loaded_vmcs_clear() may then execute VMCLEAR. The VMCS needs to stay atta= ched until its explicit VMCLEAR completes, but then it can be hidden and th=
e page safely freed. 2026-08-04 8.8 CVE-2026-64562 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-64562 ] Linux--Linux In the Linux kernel, the followi=
ng vulnerability has been resolved: ksmbd: validate compound request size b= efore reading StructureSize2 When ksmbd validates a compound (chained) SMB2=
request, ksmbd_smb2_check_message() reads pdu->StructureSize2 without firs=
t checking that the compound element is large enough to contain it. Structu= reSize2 is a 2-byte field at offset 64 (__SMB2_HEADER_STRUCTURE_SIZE) from = the start of each element. The compound-walking logic only guarantees that =
a full 64-byte SMB2 header is present for the trailing element: when NextCo= mmand is 0, len is reduced to the number of bytes remaining after next_smb2= _rcv_hdr_off. A remote client can craft a compound request whose last eleme=
nt has exactly 64 bytes, so the 2-byte StructureSize2 read at offset 64 ext= ends one byte past the receive buffer, producing a slab-out-of-bounds read.=
BUG: KASAN: slab-out-of-bounds in ksmbd_smb2_check_message (fs/smb/server/= smb2misc.c:402) Read of size 2 at addr ffff888012ae31ac by task kworker/0:1= /14 The buggy address is located 172 bytes inside of allocated 173-byte reg= ion Workqueue: ksmbd-io handle_ksmbd_work Call Trace: ... kasan_report (mm/= kasan/report.c:595) ksmbd_smb2_check_message (fs/smb/server/smb2misc.c:402)=
handle_ksmbd_work (fs/smb/server/server.c:119) process_one_work (kernel/wo= rkqueue.c:3314) worker_thread (kernel/workqueue.c:3397) kthread (kernel/kth= read.c:436) ret_from_fork (arch/x86/kernel/process.c:158) ret_from_fork_asm=
(arch/x86/entry/entry_64.S:245) Reject any compound element that is too sm= all to hold StructureSize2 before dereferencing it. 2026-08-05 8.2 CVE-2026= -64578 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64578 ] Linux--Linux I=
n the Linux kernel, the following vulnerability has been resolved: wifi: br= cmfmac: drain bus_reset work on device removal brcmf_fw_crashed() and the d= ebugfs "reset" entry both schedule drvr->bus_reset, whose callback recovers=
drvr through container_of() and dereferences it. The removal path frees dr=
vr (brcmf_free -> wiphy_free) without draining the work, so a bus_reset cal= lback pending or running during removal can outlive drvr. Cancellation cann=
ot live in brcmf_detach() or brcmf_free(): the work callback reaches teardo=
wn through the bus .reset op (PCIe brcmf_pcie_reset -> brcmf_detach; SDIO b= rcmf_sdio_bus_reset -> brcmf_sdiod_remove -> brcmf_free), so cancelling the=
re would wait for the running work and deadlock. Add a per-bus mutex (bus_r= eset_lock) and route all arming through brcmf_bus_schedule_reset(), which u= nder the lock skips when the bus is marked removing. Each bus remove entry = calls brcmf_bus_cancel_reset_work(), which under the same lock sets removin=
g and cancels the work. Holding the mutex across cancel_work_sync() makes t=
he set-removing + drain step atomic. Every producer reaches the arming path=
from process context -- the PCIe firmware-halt notification runs in the th= readed IRQ handler (brcmf_pcie_isr_thread) and the SDIO hostmail path runs = from the data workqueue -- so the mutex is taken only in sleepable contexts=
. Where applicable the remove entry first stops the firmware-crash producer=
: on PCIe mask the mailbox and synchronize_irq; on SDIO unregister the bus = interrupt and cancel the data worker, which also reports firmware halts thr= ough brcmf_fw_crashed(). The mutex is initialized at bus allocation. The SD=
IO suspend power-off path frees drvr through the same brcmf_sdiod_remove() = and takes the same lock; resume re-allows the work only on a successful re-= probe. Also guard brcmf_fw_crashed() against a NULL bus_if/drvr: it can fir=
e before brcmf_attach() wires up drvr, and it dereferences drvr (bphy_err/b= rcmf_dev_coredump) before reaching the arming gate. The bus_reset work is s= hared across buses, so the drain is applied to every remove path: PCIe (the=
.reset op introduced by the Fixes commit), SDIO (arms the same work throug=
h brcmf_fw_crashed()), and USB (via the debugfs "reset" entry). cancel_work= _sync() drains a running or pending bus_reset work item before removal free=
s drvr, and patch 1/2 makes the scratch-buffer release safe when reset tear= down has already released those DMA buffers. This patch fixes the lifetime =
of the bus_reset work item itself. It does not attempt to address the separ= ate, pre-existing lifetime of the asynchronous firmware completion started =
by the PCIe reset path. That callback needs its own lifetime/ownership prot= ocol and is being tracked separately. This issue was found by an in-house s= tatic analysis tool. 2026-08-06 8.8 CVE-2026-64586 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-64586 ] Linux--Linux In the Linux kernel, the followi=
ng vulnerability has been resolved: smb/client: Fix error code in smb2_aead= _req_alloc() The "*num_sgs" variable is a u32 so "ERR_PTR(*num_sgs)" doesn'=
t work. We would have to do something similar to the previous line where it=
's cast to int and then long. However, it's simpler to store the return in =
an int ret variable. This bug would eventually result in a crash when deref= erence the invalid error pointer. 2026-08-06 8.8 CVE-2026-64598 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-64598 ] Linux--Linux In the Linux kernel=
, the following vulnerability has been resolved: rhashtable: clear stale it= er->p on table restart rhashtable_walk_start_check() has two restart paths = when resuming a walk. When iter->walker.tbl is valid, it re-validates iter-=

p against the table and sets iter->p =3D NULL if the object is gone. When = iter->walker.tbl is NULL (table was freed during resize), it resets slot an=

d skip but forgets to clear iter->p. rhashtable_walk_next() then dereferenc=
es the stale iter->p, reading freed memory. This is a use-after-free. Any c= aller that does multi-fragment rhashtable walks across walk_stop/walk_start=
boundaries is affected. Concrete cases include netlink_diag (__netlink_dia= g_dump in net/netlink/diag.c) and TIPC (tipc_nl_sk_walk in net/tipc/socket.= c). Crash stack (netlink_diag): BUG: KASAN: slab-use-after-free in rhashtab= le_walk_next+0x365/0x3c0 Read of size 8 at addr ffff88801a9d2438 (freed kma= lloc-2k, offset 1080) Call Trace: rhashtable_walk_next+0x365/0x3c0 (lib/rha= shtable.c:1016) __netlink_diag_dump+0x160/0x760 (net/netlink/diag.c:122) ne= tlink_diag_dump+0xc2/0x240 netlink_dump+0x5bc/0x1270 netlink_recvmsg+0x7a3/= 0x980 sock_recvmsg+0x1bc/0x200 __sys_recvfrom+0x1d4/0x2c0 2026-08-04 7.8 CV= E-2026-64563 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64563 ] Linux--L= inux In the Linux kernel, the following vulnerability has been resolved: bt= rfs: reject free space cache with more entries than pages When loading a v1=
free space cache, __load_free_space_cache() takes num_entries and num_bitm= aps straight from the on-disk btrfs_free_space_header. That header is store=
d in the tree_root under a key with type 0, which the tree-checker has no c= ase for, so neither count is validated before the load trusts it. The load = loops num_entries times and maps the next page whenever the current one run=
s out, going through io_ctl_check_crc() -> io_ctl_map_page(), which does io= _ctl->pages[io_ctl->index++]. But pages[] is allocated in io_ctl_init() fro=
m the cache inode's i_size, not from num_entries: num_pages =3D DIV_ROUND_U= P(i_size_read(inode), PAGE_SIZE); io_ctl->pages =3D kcalloc(num_pages, size= of(struct page *), GFP_NOFS); So if num_entries claims more records than th=
e pages can hold, io_ctl->index runs off the end of pages[]. The write side=
never hits this because io_ctl_add_entry() and io_ctl_add_bitmap() both st=
op once io_ctl->index >=3D io_ctl->num_pages; the read side just never had = the same check. To trigger it, take a clean cache (num_entries =3D <N> here=
), set num_entries in the header to 0x10000, and fix up the leaf checksum s=
o it still passes the tree-checker. The cache inode has i_size =3D 65536, s=
o num_pages is 16 and pages[] is a 16-pointer (kmalloc-128) array. The load=
now tries to read 65536 entries, io_ctl->index walks up to 16, and pages[1=
6] is read past the array: BUG: KASAN: slab-out-of-bounds in io_ctl_check_c=
rc (fs/btrfs/free-space-cache.c:420 fs/btrfs/free-space-cache.c:565) Read o=
f size 8 at addr ffff88800c833a80 by task kworker/u8:3/58 io_ctl_check_crc = (fs/btrfs/free-space-cache.c:420 fs/btrfs/free-space-cache.c:565) __load_fr= ee_space_cache (fs/btrfs/free-space-cache.c:655 fs/btrfs/free-space-cache.c= :820) load_free_space_cache (fs/btrfs/free-space-cache.c:1017) caching_thre=
ad (fs/btrfs/block-group.c:880) btrfs_work_helper (fs/btrfs/async-thread.c:= 312) process_one_work worker_thread kthread ret_from_fork free-space-cache.= c:420 is io_ctl_map_page(), inlined into io_ctl_check_crc() at line 565, wh= ich is why that is the frame KASAN names. The out-of-bounds slot is then tr= eated as a struct page and handed to crc32c(), so the bad read turns into a=
GP fault. Add the missing check to io_ctl_check_crc(), which is where both=
the entry loop and the bitmap loop end up. When num_entries is too large t=
he load now fails like any corrupt cache: __load_free_space_cache() drops i=
t and rebuilds the free space from the extent tree, so a valid cache is nev=
er rejected. 2026-08-05 7.8 CVE-2026-64567 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-64567 ] Linux--Linux In the Linux kernel, the following vulne= rability has been resolved: wifi: mac80211: fix unsol_bcast_probe_resp doub=
le free on alloc failure ieee80211_set_unsol_bcast_probe_resp() calls kfree= _rcu() on the old template before allocating the replacement. If the kzallo= c() then fails, it returns -ENOMEM while link->u.ap.unsol_bcast_probe_resp = still points at the object already queued for freeing. A later update or AP=
teardown re-queues that same rcu_head; the second free is caught by KASAN = when the RCU sheaf is processed in softirq: BUG: KASAN: double-free in rcu_= free_sheaf (mm/slub.c:5850) Free of addr ffff88800d06f300 by task exploit/1=
45 ... __rcu_free_sheaf_prepare (mm/slub.c:2634 mm/slub.c:2940) rcu_free_sh= eaf (mm/slub.c:5850) rcu_core (kernel/rcu/tree.c:2617 kernel/rcu/tree.c:286=
9) handle_softirqs (kernel/softirq.c:622) The buggy address belongs to the = cache kmalloc-128 of size 128 Queue the old object for kfree_rcu() only aft=
er the new one is published, matching ieee80211_set_probe_resp() and ieee80= 211_set_s1g_short_beacon(). 2026-08-05 7.8 CVE-2026-64568 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-64568 ] Linux--Linux In the Linux kernel, the = following vulnerability has been resolved: wifi: mac80211: fix fils_discove=
ry double free on alloc failure ieee80211_set_fils_discovery() calls kfree_= rcu() on the old template before allocating the replacement. If the kzalloc=
() then fails, it returns -ENOMEM while link->u.ap.fils_discovery still poi= nts at the object already queued for freeing. A later update or AP teardown=
(ieee80211_stop_ap()) re-queues that same rcu_head; the second free is cau= ght by KASAN when the RCU sheaf is processed in softirq: BUG: KASAN: double= -free in rcu_free_sheaf (mm/slub.c:5850) Free of addr ffff88800c065280 by t= ask swapper/0/0 ... __rcu_free_sheaf_prepare (mm/slub.c:2634 mm/slub.c:2940=
) rcu_free_sheaf (mm/slub.c:5850) rcu_core (kernel/rcu/tree.c:2617 kernel/r= cu/tree.c:2869) handle_softirqs (kernel/softirq.c:622) The buggy address be= longs to the cache kmalloc-96 of size 96 Queue the old object for kfree_rcu=
() only after the new one is published, matching ieee80211_set_probe_resp()=
and ieee80211_set_s1g_short_beacon(). 2026-08-05 7.8 CVE-2026-64570 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-64570 ] Linux--Linux In the Linux k= ernel, the following vulnerability has been resolved: wifi: mac80211: tear = down new links on vif update error path When ieee80211_vif_update_links() a= dds new links it allocates a link container for each and calls ieee80211_li= nk_init() (which registers the per-link debugfs files with file->private_da=
ta pointing into the container) and ieee80211_link_setup(). If the subseque=
nt drv_change_vif_links() fails, the error path restores the old pointers a=
nd jumps to 'free', which frees the new containers but never removes their = debugfs entries or stops the links. The debugfs files survive with file->pr= ivate_data dangling at the freed container, so a later open()+read() (e.g. = link-1/txpower) dereferences freed memory in ieee80211_if_read_link(), a us= e-after-free. The removal path already dismantles links correctly via ieee8= 0211_tear_down_links(), which removes each link's keys and debugfs entries = and calls ieee80211_link_stop(); the add path on the error branch does not.=
Commit be1ba9ed221f ("wifi: mac80211: avoid weird state in error path") ha= rdened this same error path for the link-removal case (new_links =3D=3D 0) = but left the newly-added links' teardown unaddressed. drv_change_vif_links(=
) can fail at runtime on MLO drivers (internal allocation / queue / firmwar=
e command failures). Remove the new links' debugfs entries and stop them be= fore freeing. BUG: KASAN: slab-use-after-free in ieee80211_if_read_link (ne= t/mac80211/debugfs_netdev.c:127) Read of size 8 at addr ffff888011290000 by=
task exploit/145 Call Trace: ... ieee80211_if_read_link (net/mac80211/debu= gfs_netdev.c:127) short_proxy_read (fs/debugfs/file.c:373) vfs_read (fs/rea= d_write.c:572) ksys_read (fs/read_write.c:716) do_syscall_64 (arch/x86/entr= y/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.= S:121) ... Oops: general protection fault, probably for non-canonical addre=
ss 0xdffffc000000000a RIP: 0010:ieee80211_if_read_link (net/mac80211/debugf= s_netdev.c:127) Kernel panic - not syncing: Fatal exception 2026-08-05 7.8 = CVE-2026-64574 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64574 ] Linux-= -Linux In the Linux kernel, the following vulnerability has been resolved: = bpf: tcp: fix double sock release on batch realloc bpf_iter_tcp_batch() rel= eases the current batch via bpf_iter_tcp_put_batch(), which drops the socke=
t refs and rewrites each slot with the socket cookie, then grows the batch.=
cur_sk/end_sk are kept for bpf_iter_tcp_resume(), but on realloc failure t=
he function returns ERR_PTR() before resume runs, leaving cur_sk < end_sk o= ver slots that now hold cookies rather than sock pointers. bpf_iter_tcp_seq= _stop() then calls bpf_iter_tcp_put_batch() again and dereferences a cookie=
as a struct sock. Empty the batch on the failure path so stop() does not r= elease it again. The sockets were already freed by the first bpf_iter_tcp_p= ut_batch(), so nothing leaks, and a later read() rescans the bucket from th=
e start instead of skipping it. The sibling GFP_NOWAIT failure path still h= olds real socket references and is left for stop() to release. BUG: KASAN: = null-ptr-deref in __sock_gen_cookie Read of size 8 at addr 0000000000000059=
by task exploit ... __sock_gen_cookie (net/core/sock_diag.c:28) bpf_iter_t= cp_put_batch (net/ipv4/tcp_ipv4.c:2918) bpf_iter_tcp_seq_stop (net/ipv4/tcp= _ipv4.c:3270) bpf_seq_read (kernel/bpf/bpf_iter.c:205) vfs_read (fs/read_wr= ite.c:572) ksys_read (fs/read_write.c:716) do_syscall_64 entry_SYSCALL_64_a= fter_hwframe Kernel panic - not syncing: Fatal exception 2026-08-05 7.8 CVE= -2026-64575 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64575 ] Linux--Li= nux In the Linux kernel, the following vulnerability has been resolved: nex= thop: initialize extack in nh_res_bucket_migrate() nh_res_bucket_migrate() = passes an uninitialized netlink_ext_ack to call_nexthop_res_bucket_notifier= s(). When nh_notifier_res_bucket_info_init() fails (e.g. the kzalloc return=
s -ENOMEM), the error is propagated back before any notifier sets extack._m= sg, and the error path formats the stale pointer with pr_err_ratelimited("%= s\n", extack._msg). With CONFIG_INIT_STACK_NONE this dereferences uninitial= ized stack memory: Oops: general protection fault, probably for non-canonic=
al address ... KASAN: maybe wild-memory-access in range [...] RIP: 0010:str= ing (lib/vsprintf.c:730) vsnprintf (lib/vsprintf.c:2945) _printk (kernel/pr= intk/printk.c:2504) nh_res_bucket_migrate (net/ipv4/nexthop.c:1816) nh_res_= table_upkeep (net/ipv4/nexthop.c:1866) rtm_new_nexthop (net/ipv4/nexthop.c:= 3323) rtnetlink_rcv_msg (net/core/rtnetlink.c:7076) netlink_sendmsg (net/ne= tlink/af_netlink.c:1900) Kernel panic - not syncing: Fatal exception Zero-i= nitialize extack so _msg is NULL on error paths that never set it. 2026-08-=
05 7.1 CVE-2026-64576 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64576 ]=
Linux--Linux In the Linux kernel, the following vulnerability has been res= olved: gtp: check skb_pull_data() return in gtp1u_send_echo_resp() gtp1u_se= nd_echo_resp() ignores skb_pull_data()'s return value. Its caller gtp1u_udp= _encap_recv() only guarantees 16 bytes (udphdr + gtp1_header), but the pull=
requests 20 (gtp1_header_long + udphdr). For a 16-19 byte echo request the=
pull fails and returns NULL without advancing skb->data; execution continu= es, and the following skb_push() plus the IP header pushed by iptunnel_xmit=
() move skb->data below skb->head, tripping skb_under_panic(). Fix it by dr= opping the packet when skb_pull_data() fails. skbuff: skb_under_panic: ... = kernel BUG at net/core/skbuff.c:214! Call Trace: skb_push (net/core/skbuff.= c:2648) iptunnel_xmit (net/ipv4/ip_tunnel_core.c:82) gtp_encap_recv (driver= s/net/gtp.c:701 drivers/net/gtp.c:808 drivers/net/gtp.c:920) udp_queue_rcv_= one_skb (net/ipv4/udp.c:2388) ... Kernel panic - not syncing: Fatal excepti=
on in interrupt 2026-08-05 7.5 CVE-2026-64577 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-64577 ] Linux--Linux In the Linux kernel, the following vu= lnerability has been resolved: xfrm6: clear dst.dev on error to avoid doubl=
e netdev_put in xfrm6_fill_dst() On the error path where in6_dev_get(dev) r= eturns NULL, xfrm6_fill_dst() releases the device reference with netdev_put=
() but leaves xdst->u.dst.dev set. dst_destroy() later calls netdev_put(dst= ->dev) again, so the same net_device reference is released twice, underflow= ing its refcount (ref_tracker WARNING + "unregister_netdevice: waiting for = <dev> to become free"). Clear xdst->u.dst.dev after the netdev_put(), the s= ame way the XFRM device-offload paths xfrm_dev_state_add() and xfrm_dev_pol= icy_add() in net/xfrm/xfrm_device.c NULL ->dev when releasing the reference=
on error. ref_tracker: reference already released. ref_tracker: allocated = in: xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:86) ... udpv6_sendmsg (net/ipv6= /udp.c:1696) ... ref_tracker: freed in: xfrm6_fill_dst (net/ipv6/xfrm6_poli= cy.c:90) ... WARNING: lib/ref_tracker.c:322 at ref_tracker_free+0x58b/0x780=
dst_destroy (net/core/dst.c:115) rcu_core handle_softirqs ... 2026-08-05 7=
.8 CVE-2026-64580 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64580 ] Lin= ux--Linux In the Linux kernel, the following vulnerability has been resolve=
d: xfrm: fix sk_dst_cache double-free in xfrm_user_policy() xfrm_user_polic= y() clears the socket dst cache with __sk_dst_reset(), i.e. the non-atomic = __sk_dst_set(sk, NULL): it reads sk_dst_cache with rcu_dereference_protecte= d(), stores NULL and dst_release()s the old dst. That is only safe if no ot= her thread modifies sk_dst_cache concurrently. For a connected UDP socket t= hat does not hold: the transmit fast path (udp_sendmsg -> sk_dst_check -> s= k_dst_reset) resets the cache locklessly with an atomic xchg(). A per-socke=
t policy change racing a send can make both sides observe the same old dst = and each dst_release() it, dropping the socket's single reference twice and=
freeing the xfrm_dst bundle while it is still referenced: BUG: KASAN: slab= -use-after-free in dst_release Write of size 4 at addr ffff88801897b6c0 by = task exploit/155 Call Trace: ... dst_release (... ./include/linux/rcuref.h:= 109) xfrm_user_policy (./include/net/sock.h:2239 ./include/net/sock.h:2256 = net/xfrm/xfrm_state.c:3053) do_ip_setsockopt (net/ipv4/ip_sockglue.c:1347) = ip_setsockopt (net/ipv4/ip_sockglue.c:1417) do_sock_setsockopt (net/socket.= c:2368) __sys_setsockopt (net/socket.c:2393) __x64_sys_setsockopt (net/sock= et.c:2396) do_syscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_= after_hwframe (arch/x86/entry/entry_64.S:121) Reachable by an unprivileged = user via a user+network namespace. Use the atomic sk_dst_reset() so the cac=
he is cleared and released with a single xchg(): whichever side wins releas=
es the dst once, the other sees NULL and does nothing. Behaviour is otherwi=
se unchanged. 2026-08-05 7.8 CVE-2026-64581 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-64581 ] Linux--Linux In the Linux kernel, the following vuln= erability has been resolved: RDMA/rxe: Fix a use-after-free problem in rxe_= mmap rxe_mmap() removes a rxe_mmap_info struct from the pending_mmaps list = and releases pending_lock while the struct's kref is still at 1: list_del_i= nit(&ip->pending_mmaps); spin_unlock_bh(&rxe->pending_lock); /* ref =3D=3D =
1, no lock held */ ret =3D remap_vmalloc_range(vma, ip->obj, 0); /* walks P= TEs */ [...] rxe_vma_open(vma); /* kref_get, ref =C3=83=C2=A2--=E2=84=A2 2 =
*/ remap_vmalloc_range_partial() walks PTEs without any lock. A concurrent = DESTROY_CQ ioctl on another CPU calls: kref_put(&q->ip->ref, rxe_mmap_relea= se) /* ref 1=C3=83=C2=A2-=C2=A0-=E2=84=A20 */ vfree(ip->obj) /* clears vmal= loc PTEs mid-walk */ kfree(ip) /* frees rxe_mmap_info */ This yields: 1. Ke= rnel crash, vmalloc_to_page() returns NULL when vfree wins the per-PTE race=

vm_insert_page(NULL) =C3=83=C2=A2-=E2=84=A2 GPF in validate_page_before=

_insert 2. Page UAF, vmalloc_to_page() reads a stale PTE before vfree clear=
s it. User VMA holds a PTE to a free'd page which might eventually get real= located later by vmalloc which allows the attacker to get a clean page-leve=
l UAF. It is worth noting that even though a page-level UAF is possible giv=
en the strong primitive, it is statistically very difficult to achieve give=
n the very short time window (after the last insert_page and before the kre= f_get). The call trace are as below: Oops: general protection fault, probab=
ly for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI = KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU:=
0 UID: 1000 PID: 413 Comm: poc Not tainted 7.0.0-rc5-dirty #28 PREEMPT(laz=
y) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04/= 01/2014 RIP: 0010:validate_page_before_insert+0x32/0x300 Code: e5 41 57 41 =
56 49 89 fe 41 55 41 54 53 48 89 f3 e8 93 b5 a3 ff 48 8d 7b 08 48 b8 00 00 =
00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 7b 02 00 00 4c 8=
b 63 08 31 ff 4d 89 e5 41 83 e5 RSP: 0018:ffff88811b15f2f0 EFLAGS: 00000202=
RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 RDX: 000= 0000000000001 RSI: 0000000000000000 RDI: 0000000000000008 RBP: ffff88811b15= f318 R08: 0000000000000000 R09: 0000000000000000 R10: 0000000000000000 R11:=
0000000000000000 R12: ffff8881181eee00 R13: 0000000000000000 R14: ffff8881= 181eee00 R15: ffff8881181eee20 FS: 00007b1e000f76c0(0000) GS:ffff8884268e00= 00(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 00000000800= 50033 CR2: 00007b1e00a24ac0 CR3: 0000000116eb3000 CR4: 00000000000006f0 Cal=
l Trace: <TASK> insert_page+0x8f/0x190 ? __pfx_insert_page+0x10/0x10 ? kasa= n_save_alloc_info+0x38/0x60 vm_insert_page+0x2e7/0x400 remap_vmalloc_range_= partial+0x212/0x3e0 remap_vmalloc_range+0x6e/0xb0 ? __kasan_check_write+0x1= 4/0x30 rxe_mmap+0x2e9/0x5d0 ib_uverbs_mmap+0x1ad/0x2c0 __mmap_region+0x12c2= /0x2ad0 ? __pfx___mmap_region+0x10/0x10 ? __sanitizer_cov_trace_switch+0x58= /0xb0 ? mas_prev_slot+0x360/0x39c0 ? __sanitizer_cov_trace_switch+0x58/0xb0=
? mas_next_slot+0x1e5b/0x2f40 ? __sanitizer_cov_trace_cmp8+0x18/0x30 ? unm= apped_area_topdown+0x4dd/0x610 ? kfree+0x1b1/0x440 ? free_cpumask_var+0x16/= 0x30 ? __kasan_slab_free+0x7d/0xa0 ? __sanitizer_cov_trace_cmp8+0x18/0x30 m= map_region+0x2e6/0x3c0 do_mmap+0xa3e/0x12a0 ? __pfx_do_mmap+0x10/0x10 ? __k= asan_check_write+0x14/0x30 ? down_write_killable+0xba/0x160 ? __pfx_down_wr= ite_killable+0x10/0x10 ? __sanitizer_cov_trace_cmp4+0x16/0x30 vm_mmap_pgoff= +0x2d4/0x4a0 ? __pfx_vm_mmap_pgoff+0x10/0x10 ? fget+0x1bf/0x270 ksys_mmap_p= goff+0x40c/0x690 ? __sanitizer_cov_trace_const_cmp4+0x16/0x30 ? __pfx_ksys_= mmap_pgoff+0x10/0x10 ? __kasan_check_write+0x14/0x30 ? _raw_spin_trylock+0x= bb/0x130 ? __pfx__raw_spin_trylock+0x10/0x10 __x64_sys_mmap+0x135/0x1e0 x64= _sys_c ---truncated--- 2026-08-05 7.8 CVE-2026-64582 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-64582 ] Linux--Linux In the Linux kernel, the follo= wing vulnerability has been resolved: usb: gadget: udc: bdc: free IRQ and d= rain func_wake_notify before teardown The Broadcom BDC UDC driver registers=
its IRQ handler with devm_request_irq() in bdc_udc_init(), so the IRQ is r= eleased by devm only after bdc_remove() returns. devm releases resources in=
reverse LIFO order, but bdc_remove() runs bdc_udc_exit() and bdc_hw_exit()=

bdc_mem_free() manually before returning: bdc_udc_exit() tears down ind=

ividual endpoint objects via bdc_free_ep(), while bdc_hw_exit() -> bdc_mem_= free() frees and NULLs the DMA-coherent status-report ring (bdc->srr.sr_bds=
) and kfree()s bdc->bdc_ep_array. Both happen while the IRQ handler (bdc_ud= c_interrupt, requested with IRQF_SHARED) remains deliverable in the window =
up to the post-remove devm free_irq(). On receipt of a shared interrupt in = that window, bdc_udc_interrupt() dereferences bdc->srr.sr_bds[bdc->srr.dqp_= index] (NULL or freed DMA) and dispatches sr_handler callbacks that index i= nto bdc_ep_array, causing a NULL-deref or use-after-free. The same window a= ffects the delayed_work bdc->func_wake_notify, which is armed from the IRQ = handler via bdc_sr_uspc() -> handle_link_state_change() -> schedule_delayed= _work() and may self-rearm from its own callback bdc_func_wake_timer(). No = cancel exists anywhere in the driver, so a queued work item that fires afte=
r bdc_remove() returns and the bdc structure is devm-freed dereferences fre=
ed memory. Replace devm_request_irq() with request_irq() and add an explici=
t free_irq(bdc->irq, bdc) in bdc_remove(). Clear BDC_GIE before free_irq() =
to stop the device from asserting interrupts, then free_irq() drains any in= -flight handler, then cancel_delayed_work_sync() drains the func_wake_notif=
y delayed work. This ordering ensures the IRQ handler and delayed work cann=
ot interfere with the subsequent endpoint and DMA teardown in bdc_udc_exit(=
) and bdc_hw_exit(). Wire the matching free_irq() into the bdc_udc_init() e= rror path so the IRQ is released on probe failure, and route the bdc_init_e= p() failure through err0 instead of returning directly. This issue was foun=
d by an in-house static analysis tool. 2026-08-06 7.8 CVE-2026-64583 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-64583 ] Linux--Linux In the Linux k= ernel, the following vulnerability has been resolved: usb: gadget: f_midi: = cancel pending IN work before freeing the midi object The f_midi driver emb= eds a work item (midi->work) whose handler, f_midi_in_work(), dereferences = the enclosing struct f_midi through container_of(). This work is armed from=
two sites: f_midi_complete(), on a normal IN-endpoint completion, and f_mi= di_in_trigger(), on an ALSA rawmidi output-stream start. Neither f_midi_dis= able() nor f_midi_unbind() cancels midi->work. f_midi_disable() only disabl=
es the endpoints and drains the in_req_fifo; it does not synchronize the wo=
rk item, and the sound card is released asynchronously to the final free of=
the midi object. The midi object is reference-counted (midi->free_ref) and=
is freed in f_midi_free() only once both the usb_function reference and th=
e rawmidi private_data reference have been dropped. In f_midi_unbind(), f_m= idi_disable() runs before the sound card is released, so while the USB endp= oints are already disabled the rawmidi device is still usable by an open su= bstream. A concurrent userspace write on such a substream can reach f_midi_= in_trigger() and queue midi->work again after f_midi_disable() has returned=
. A work item armed this way may still be pending when the last reference d= rops and f_midi_free() proceeds to kfree(midi), letting f_midi_in_work() de= reference the struct after it has been freed, a use-after-free. For this re= ason cancelling midi->work in f_midi_disable() would not be sufficient: the=
ALSA trigger path can rearm the work after disable() returns. Cancelling a=
t the refcount-zero free site is the boundary after which neither arming so= urce can survive, because by then both references that keep the midi object=
alive have been dropped: the USB endpoints are already disabled and the ra= wmidi device has been released. Fix this by calling cancel_work_sync(&midi-= >work) in the refcount-zero block of f_midi_free(), before the embedded wor= k_struct is freed along with the rest of the structure. opts->lock is a sle= eping mutex, so calling cancel_work_sync() under it is permitted, and the h= andler takes midi->transmit_lock rather than opts->lock, so no self-deadloc=
k can occur while it waits for a running instance of the work to finish. Th=
is issue was found by an in-house static analysis tool. 2026-08-06 7.8 CVE-= 2026-64584 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64584 ] Linux--Lin=
ux In the Linux kernel, the following vulnerability has been resolved: can:=
esd_usb: kill anchored URBs before freeing netdevs esd_usb_disconnect() fr= ees each CAN netdev with free_candev() inside its per-netdev loop and only = calls unlink_all_urbs(dev) afterwards. The per-netdev private data (struct = esd_usb_net_priv) is embedded in the net_device allocation returned by allo= c_candev(), so once free_candev() has run, dev->nets[i] points to freed mem= ory. unlink_all_urbs() then dereferences the freed dev->nets[i] to kill the=
per-netdev TX anchor (usb_kill_anchored_urbs(&priv->tx_submitted)), clear = active_tx_jobs, and reset priv->tx_contexts[]. Reorder the teardown so the = anchored URBs are killed before the netdevs are freed, matching other CAN/U=
SB drivers in the same directory such as ems_usb, usb_8dev and mcba_usb, wh= ich unregister, then unlink, then free: unregister the netdevs first (which=
stops their TX queues), call unlink_all_urbs(dev) once, then free the netd= evs. This issue was found by an in-house static analysis tool. 2026-08-06 7=
.8 CVE-2026-64585 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64585 ] Lin= ux--Linux In the Linux kernel, the following vulnerability has been resolve=
d: net: ethernet: arc: emac: quiesce interrupts before requesting IRQ Norma=
l RX/TX interrupts are enabled later, in arc_emac_open(), so probe should n=
ot see interrupt delivery in the usual case. However, hardware may still pr= esent stale or latched interrupt status left by firmware or the bootloader.=
If probe later unwinds after devm_request_irq() has installed the handler,=
such a stale interrupt can still reach arc_emac_intr() during teardown and=
race with release of the associated net_device. Avoid that window by putti=
ng the device into a known quiescent state before requesting the IRQ: disab=
le all EMAC interrupt sources and clear any pending EMAC interrupt status b= its. This keeps the change hardware-focused and minimal, while preventing s= purious IRQ delivery from leftover state. 2026-08-06 7 CVE-2026-64587 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-64587 ] Linux--Linux In the Linux = kernel, the following vulnerability has been resolved: fuse-uring: fix data=
races on ring->ready On weakly-ordered architectures, the store to fiq->op=
s can be reordered past the store to ring->ready, allowing a CPU that sees = ring->ready =3D=3D true via fuse_uring_ready() to dispatch requests through=
a stale fiq->ops pointer. Upgrade the store to smp_store_release() and the=
load in fuse_uring_ready() to smp_load_acquire() so that the preceding WRI= TE_ONCE(fiq->ops, ...) is visible to any CPU that observes ring->ready =3D=
=3D true. Additionally, fuse_uring_do_register() publishes ring->ready with=
WRITE_ONCE() but the fast-path check reads it with a plain load. This is a=
marked-vs-unmarked access that KCSAN will flag. Wrap it in READ_ONCE() to = mark it without adding unnecessary ordering. Also wrap the fc->ring load in=
fuse_uring_ready() in READ_ONCE() to prevent the compiler from reloading i=
t between the NULL check and the dereference. 2026-08-06 7.8 CVE-2026-64588=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-64588 ] Linux--Linux In the = Linux kernel, the following vulnerability has been resolved: crypto: amlogi=
c - avoid double cleanup in meson_crypto_probe() When meson_allocate_chanli= st() fails after a partial allocation, it already unwinds the allocated cha= nlist state through its local error path. meson_crypto_probe() then jump to=
error_flow and calls meson_free_chanlist() again, causing the same per-flo=
w resources to be torn down twice. In the reproduced failure path, the seco=
nd teardown re-entered crypto_engine_exit() on an already destroyed worker = and KASAN reported a slab-use-after-free in kthread_destroy_worker(). Preve=
nt double-free by handling partial allocation failures locally within meson= _allocate_chanlist() and skipping the outer cleanup path. The bug was first=
flagged by an experimental analysis tool we are developing for kernel memo= ry-management bugs while analyzing v6.13-rc1. The tool is still under devel= opment and is not yet publicly available. The bug was reproduced in a QEMU = x86_64 guest booted with KASAN on v7.1, using the reproducer under tools/te= sting/meson_crypto_probe. The reproducer forces the second dma_alloc_attrs(=
) call in the gxl-crypto probe path to return NULL, making meson_allocate_c= hanlist() fail after partial initialization. On the unpatched kernel this r= eliably triggered a slab-use-after-free. With this fix applied, the same re= producer no longer emits any KASAN report and the probe fails cleanly with = -ENOMEM. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D BUG: KASAN: slab-= use-after-free in kthread_destroy_worker+0xb2/0xd0 Read of size 8 at addr f= f1100010c057a68 by task insmod/265 CPU: 1 UID: 0 PID: 265 Comm: insmod Tain= ted: G O 7.1.0-rc2-00376-g810af9adc907-dirty #10 PREEMPT(lazy) Tainted: [O]= =3DOOT_MODULE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.15= .0-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x68/0xa0 print_report+0x= cb/0x5e0 ? __virt_addr_valid+0x21d/0x3f0 ? kthread_destroy_worker+0xb2/0xd0=
? kthread_destroy_worker+0xb2/0xd0 kasan_report+0xca/0x100 ? kthread_destr= oy_worker+0xb2/0xd0 kthread_destroy_worker+0xb2/0xd0 meson_crypto_probe+0x4= d0/0xc10 [amlogic_gxl_crypto] platform_probe+0x99/0x140 really_probe+0x1c6/= 0x6a0 ? __pfx___device_attach_driver+0x10/0x10 __driver_probe_device+0x248/= 0x310 ? acpi_driver_match_device+0xb0/0x100 driver_probe_device+0x48/0x210 =
? __pfx___device_attach_driver+0x10/0x10 __device_attach_driver+0x160/0x320=
bus_for_each_drv+0x104/0x190 ? __pfx_bus_for_each_drv+0x10/0x10 ? _raw_spi= n_unlock_irqrestore+0x2c/0x50 __device_attach+0x19d/0x3b0 ? __pfx___device_= attach+0x10/0x10 ? do_raw_spin_unlock+0x53/0x220 device_initial_probe+0x78/= 0xa0 bus_probe_device+0x5b/0x130 device_add+0xcfd/0x1430 ? __pfx_device_add= +0x10/0x10 ? insert_resource+0x34/0x50 ? lock_release+0xc9/0x290 platform_d= evice_add+0x24e/0x590 ? __pfx_meson_crypto_probe_repro_init+0x10/0x10 [meso= n_crypto_probe_repro] meson_crypto_probe_repro_init+0x330/0xff0 [meson_cryp= to_probe_repro] do_one_initcall+0xc0/0x450 ? __pfx_do_one_initcall+0x10/0x1=
0 ? _raw_spin_unlock_irqrestore+0x2c/0x50 ? __create_object+0x59/0x80 ? kas= an_unpoison+0x27/0x60 do_init_module+0x27b/0x7d0 ? __pfx_do_init_module+0x1= 0/0x10 ? kasan_quarantine_put+0x84/0x1d0 ? kfree+0x32c/0x510 ? load_module+= 0x561e/0x5ff0 load_module+0x54fe/0x5ff0 ? __pfx_load_module+0x10/0x10 ? sec= urity_file_permission+0x20/0x40 ? kernel_read_file+0x23d/0x6e0 ? mmap_regio= n+0x235/0x4a0 ? __pfx_kernel_read_file+0x10/0x10 ? __file_has_perm+0x2c0/0x= 3e0 init_module_from_file+0x158/0x180 ? __pfx_init_module_from_file+0x10/0x=
10 ? __lock_acquire+0x45a/0x1ba0 ? idempotent_init_module+0x315/0x610 ? loc= k_release+0xc9/0x290 ? lock ---truncated--- 2026-08-06 7.8 CVE-2026-64599 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-64599 ] Linux--Linux In the Li= nux kernel, the following vulnerability has been resolved: ALSA: us144mkii:=
capture_urb_complete: redundant usb_anchor_urb corrupts anchor list on eac=
h resubmission In capture_urb_complete(), usb_anchor_urb() is called on eve=
ry completion callback, but the URB is already anchored from the initial su= bmission in tascam_trigger_start(). Each redundant call corrupts the anchor=
's doubly-linked list and inflates the URB refcount. When usb_kill_anchored= _urbs() traverses the list during stream stop / suspend / disconnect, the c= orrupted list leads to use-after-free. Remove the redundant usb_anchor_urb(=
) from the resubmit path. 2026-08-06 7.8 CVE-2026-64601 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-64601 ] Loca Software Informatics Technology Ltd=
. Co.--CMS Improper neutralization of special elements used in an SQL comma=
nd ('SQL injection') vulnerability in Loca Software Informatics Technology = Ltd. Co. CMS allows SQL Injection. This issue affects CMS: through 06082026= .=C2=A0NOTE: The vendor was contacted early about this disclosure but did n=
ot respond in any way. 2026-08-06 9.8 CVE-2026-5134 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-5134 ] louislam--uptime-kuma Uptime Kuma's Matomo an= alytics integration (server/analytics/matomo-analytics.js) injects the admi= n-configurable Matomo `siteId` value as a bare, unquoted JavaScript express= ion inside a <script> block rendered on every public status page: `_paq.pus= h(['setSiteId', ${escapedSiteIdHTMLAttribute}]);`. The escaping pipeline us=
ed (jsesc with isScriptContext:true, then html-escaper.escape()) does not e= scape the characters `]`, `)`, `;`, `(`, which are sufficient to break out =
of the array/push expression context. A siteId value such as `1]);alert(doc= ument.cookie)//`, once saved by an editor/admin, executes arbitrary JavaScr= ipt for every unauthenticated visitor of the public /status/<slug> page, en= abling session-cookie theft and full page takeover. 2026-08-05 8.1 CVE-2026= -71285 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71285 ] LUCID Vision L= abs--Arena SDK DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.= 0.80.49 on Windows allows a local attacker to execute arbitrary code with t=
he privileges of the application by placing a malicious DLL in a user-contr= olled directory listed in the PATH environment variable, which the SDK trav= erses when a required dependency is not found locally. 2026-08-07 8.8 CVE-2= 026-9169 [ https://www.cve.org/CVERecord?id=3DCVE-2026-9169 ] lyric777--Boo= k-Management-System Book-Management-System's Flask API endpoints /student, = /record, /books, /find_stu_book, and /find_not_return_book are missing the = @login_required decorator that protects sibling routes (/search_student, /s= torage) in the same file. This allows any unauthenticated remote user to re= trieve student PII (name, gender, card validity, debt status) and full book= -borrowing history by supplying a card_id. Because card_id values are seque= ntial integers, the entire student database can be enumerated without authe= ntication. 2026-08-05 7.5 CVE-2026-71241 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-71241 ] mackron--dr_libs dr_libs dr_wav.h (all versions through=
current master) contains an integer overflow in W64 CUE chunk metadata par= sing. In drwav__metadata_process_chunk(), a stage-1 capacity estimate trunc= ates the 64-bit W64 chunk sizeInBytes to size_t before dividing by DRWAV_CU= E_POINT_BYTES; on 32-bit builds this truncation causes the pre-allocated ex= tra metadata capacity to be computed incorrectly. The subsequent read in dr= wav__read_cue_to_metadata_obj() computes the actual cue point count and all= ocation size using the full-precision, attacker-controlled cuePointCount fi= eld without cross-checking it against the stage-1 capacity estimate, and th=
e only bounds enforcement on the resulting memory region (drwav__metadata_g= et_memory()) is a DRWAV_ASSERT, which compiles to a no-op under -DNDEBUG (t=
he default for release builds). A crafted W64 WAV file can therefore cause =
a heap buffer overflow in any 32-bit application parsing untrusted WAV meta= data. 2026-08-05 7.8 CVE-2026-71261 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-71261 ] magicblack--maccms10 MacCMS10's admin template editor (appli= cation/admin/controller/Template.php) blocks dangerous PHP functions in tem= plate content via a blacklist regex, but the blacklist omitted exec, passth= ru, popen, show_source, create_function, register_shutdown_function, regist= er_tick_function, and error_log. Combined with ThinkPHP's {if} template tag=
, which embeds the condition attribute directly into raw PHP (<?php if(cond= ition): ?>), an authenticated administrator could inject a payload such as = {if condition=3D"exec('id > /tmp/pwned.txt')"}{/if} to achieve remote code = execution. Fixed in commit 71ad3bb29570e110d8e973acff68040a3050ddf0 (2026-0= 6-22), which added the missing functions to the filter. 2026-08-05 7.2 CVE-= 2026-71232 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71232 ] mailmunch-= -Mailmunch Forms for Mailchimp The MailChimp Forms by MailMunch plugin for = WordPress is vulnerable to unauthorized modification of data due to a missi=
ng capability check on the `sign_in()` and `sign_up()` AJAX handlers in all=
versions up to, and including, 3.2.7. This makes it possible for authentic= ated attackers, with Subscriber-level access and above, to relink the site'=
s MailMunch integration to an attacker-controlled MailMunch account by subm= itting attacker-supplied credentials. Once relinked, all subscriber data ca= ptured by the plugin's forms is delivered to the attacker, and the forms/la= nding pages rendered on the site are pulled from the attacker's MailMunch a= ccount. 2026-08-05 8.1 CVE-2026-7520 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-7520 ] mautic--mautic Mautic's getLeadIdsByFieldValueAction (LeadBu= ndle/Controller/AjaxController.php) reads a field parameter from the reques=
t, sanitizes it only with InputHelper::clean() (which HTML-entity-encodes q= uotes and angle brackets but does not restrict other characters), and passe=
s it into LeadRepository::buildQueryForGetLeadsByFieldValue() where it is c= oncatenated directly as a raw SQL column identifier ($col =3D 'l.'.$field) = rather than being validated against a whitelist of real column names or pas= sed as a bound parameter. Since Doctrine cannot parameterize identifiers, a=
nd the sanitizer does not block spaces, parentheses, or other SQL-relevant = characters, an attacker can inject SQL via the field name itself. The actio=
n requires only a valid session (any authenticated user), unlike sibling ac= tions in the same controller that carry additional permission checks. 2026-= 08-05 7.1 CVE-2026-71245 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7124=
5 ] mawww--kakoune Kakoune is a code editor. Prior to version 2026.05.21, t=
he bundled, enabled by default, `autorestore.kak` script can be exploited b=
y malicious backup files leading to arbitrary kakoune and shell commands be= ing executed by simply opening a file. Kakoune 2026.05.21 fixes the issue. =
As a workaround, add `autorestore-disable` to the user kakrc will disable t=
he autorestore feature. 2026-08-07 8.6 CVE-2026-48120 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-48120 ] maximeAmini--Atals-Livre Atlas-Livre conta= ins an improper access control vulnerability in the admin controllers under=
Espace_admin/controleur/ that allows unauthenticated attackers to bypass s= ession-based authentication guards by sending raw HTTP requests that ignore=
redirects. Attackers can invoke destructive admin actions such as record d= eletion by requesting controller endpoints with GET parameters like supp, b= ecause the PHP header() redirect is never followed by an exit or die call, = allowing all subsequent code including database operations to execute regar= dless of session state. 2026-08-04 9.8 CVE-2026-69703 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-69703 ] MaxSite--MaxSite CMS MaxSite CMS 109.5 and=
earlier contains an authentication bypass vulnerability in the AJAX dispat= cher that allows unauthenticated attackers to access admin-gated endpoints =
by supplying any X-Requested-With header and requesting a base64-encoded pa=
th resolving to any *-ajax.php file in the codebase. Attackers can exploit = this dispatcher bypass to reach privileged plugin endpoints without credent= ials, enabling actions such as manipulating poll states and vote counts, an=
d amplifying the impact of any dangerous operation performed by admin-only = ajax files across the plugin tree. 2026-08-04 9.8 CVE-2026-70552 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-70552 ] MaxSite--MaxSite CMS MaxSite CM=
S contains a remote code execution vulnerability that allows unauthenticate=
d attackers to inject arbitrary PHP code into the application configuration=
file by submitting crafted POST requests to the install endpoint after ins= tallation is complete. Attackers can supply a malicious db_dbprefix value c= ontaining a single quote to break out of a PHP string literal in applicatio= n/config/database.php, appending attacker-controlled PHP statements that ar=
e executed by the web server on every subsequent request, resulting in pers= istent unauthenticated remote code execution as the web-server process user=
. 2026-08-04 9.8 CVE-2026-70553 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-70553 ] MaxSite--MaxSite CMS MaxSite CMS contains a PHP object injection=
vulnerability that allows unauthenticated attackers to execute arbitrary c= ode by passing attacker-controlled serialized data in the maxsite_comuser c= ookie directly to unserialize() without validation or class allowlisting. A= ttackers can craft a malicious serialized PHP object payload delivered in a=
single HTTP request to trigger magic methods during object graph reconstru= ction, enabling property-oriented programming attacks or remote code execut= ion via available gadget chains such as those targeting SoapClient or Imagi=
ck extensions. 2026-08-04 9.8 CVE-2026-70554 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-70554 ] Menulux Software Inc.--Mobile App Authorization byp= ass through User-Controlled key vulnerability in Menulux Software Inc. Mobi=
le App allows Software Integrity Attack. This issue affects Mobile App: thr= ough 12.05.2026. 2026-08-03 9.8 CVE-2026-2346 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-2346 ] MervinPraison--PraisonAI PraisonAI is a multi-agent=
teams system. In versions prior to 4.6.40, the bundled Claude GitHub Actio=
ns workflow is vulnerable to command injection because it embeds an attacke= r-controlled pull request branch name into a Bash run: block without quotin=
g or validation. Additionally, the workflow allows any @claude comment to t= rigger the job regardless of whether the commenter is a trusted collaborato=
r. An outside contributor can open a pull request from a fork whose branch = name contains shell metacharacters and comment @claude, causing Bash to exe= cute arbitrary shell code in the GitHub Actions runner. Because these comma= nds run in a job holding a GitHub App token with write permissions, OIDC ac= cess, and gh/git access, the injection can be chained through $GITHUB_PATH =
to compromise later privileged steps, enabling repository writes, pull requ= est and issue manipulation, or OIDC-token abuse. This issue has been fixed =
in version 4.6.40. 2026-08-05 10 CVE-2026-48168 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-48168 ] MervinPraison--PraisonAI PraisonAI is a multi-ag= ent teams system. In versions 3.9.26 through 4.6.57 of praiseonai and 0.12.=
12 through 1.6.57 of praiseonaiagents, the workflow "include" feature is vu= lnerable to code execution. Workflow._execute_include() implicitly imports = and runs an included recipe's tools.py via a raw importlib.util.spec_from_f= ile_location() and spec.loader.exec_module() call, without honoring the PRA= ISONAI_ALLOW_TEMPLATE_TOOLS/PRAISONAI_ALLOW_LOCAL_TOOLS autoload opt-in gat=
es or routing through the centralized safe loader that protects the other t= ools.py autoload paths. As a result, a workflow that includes an attacker-c= ontrolled local recipe directory executes arbitrary module-level Python cod=
e during include setup, before any child workflow parsing or model call, an=
d the same sink is reachable through the higher-level praisonai.recipe.run(=
) recipe API. An attacker who can cause a victim process to run a workflow =
or recipe that includes an untrusted local recipe achieves arbitrary Python=
code execution as the PraisonAI process user, a variant that bypasses the = hardening applied to the previously disclosed automatic tools.py RCE adviso=
ry family. This issue has been fixed in version 4.6.58 of praisonai and 1.6= .58 of praisonaiagents. 2026-08-05 7.8 CVE-2026-55522 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-55522 ] MervinPraison--PraisonAI PraisonAI is a mu= lti-agent teams system. In versions prior to 1.6.58, the web_crawl tool per= forms its SSRF check only on the initially supplied URL, allowing the prote= ction to be bypassed so the tool connects to attacker-chosen internal desti= nations. The check resolves the hostname once with socket.gethostbyname and=
rejects private/loopback/link-local results, but then passes the URL to a = fetcher using httpx.Client(follow_redirects=3DTrue) (or urllib.request.urlo= pen when httpx is absent, which also follows redirects) that re-resolves th=
e hostname at connect time with no further validation. This validate-here/f= etch-there gap is exploitable through both HTTP redirects and DNS rebinding=
. If an attacker can influence URLs passed to web_crawl(), directly or thro= ugh an agent/tool workflow, they can cause the PraisonAI host to fetch loop= back, private-network, or cloud metadata endpoints reachable from that host=
, with the response body returned in the web_crawl() result. This issue has=
been fixed in version 1.6.58. 2026-08-05 7.5 CVE-2026-55524 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-55524 ] MervinPraison--praisonai-platform P= raisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the Prai= sonAI Platform API have two authorization failures that together break work= space isolation. The service layer for issues and projects performs global = primary-key lookups without checking workspace ownership, so any authentica= ted user can read, modify, and delete resources in any workspace just by sw= apping UUIDs in their API requests. On top of that, every member management=
endpoint (add, update role, remove) only requires `min_role=3D"member"`, w= hich lets any workspace member promote themselves to owner and kick out the=
original owner. A low-privilege member of one workspace can steal data fro=
m every other workspace and take over any workspace they belong to. Both is= sues come from the same gap: the route layer pulls `workspace_id` from the = URL and verifies membership, but the service layer ignores the workspace sc= ope for resource lookups and ignores the caller's role level for member ope= rations. The `require_workspace_member()` dependency does its job correctly=
. The problem is that the service layer doesn't use the information it prov= ides. Version 0.1.4 of the PraisonAI Platform API patch the issue. 2026-08-=
07 8.8 CVE-2026-48169 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48169 ]=
Miantang--IoT-PHP Miantang/IoT-PHP's index.php implements a POST /userlogi=
n route that reads the password directly from $_POST['pwd'] with no sanitiz= ation and concatenates it into a raw SQL string: mysql_query("select * from=
userlists where username=3D'$username' and password=3D'$password' limit 1"=
). The username value is passed through htmlspecialchars(), which does not = encode single quotes by default and therefore does not prevent SQL injectio=
n through the password field. An unauthenticated attacker can submit a payl= oad such as pwd=3D' OR '1'=3D'1 to bypass authentication and, via UNION-bas=
ed injection, extract arbitrary data from the database. 2026-08-05 9.8 CVE-= 2026-71237 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71237 ] Microck--o= pencode-studio OpenCode Studio before 2.4.4 contains a missing authenticati=
on vulnerability that allows unauthenticated remote attackers to read arbit= rary files within the temp and static/music directories by directly accessi=
ng the GET /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attack= ers can retrieve intermediate audio, video artifacts, and subtitles belongi=
ng to other users' jobs, and additionally delete any video by ID through th=
e unauthenticated DELETE /api/short-video/:videoId endpoint. 2026-08-04 9.1=
CVE-2026-69110 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69110 ] Micro= soft--Application Insights Profiler Improper limitation of a pathname to a = restricted directory ('path traversal') in Application Insights Profiler al= lows an authorized attacker to elevate privileges over a network. 2026-08-0=
6 8.8 CVE-2026-49163 [ https://www.cve.org/CVERecord?id=3DCVE-2026-49163 ] = Microsoft--Azure Active Directory Modification of assumed-immutable data (m= aid) in Azure Active Directory allows an authorized attacker to elevate pri= vileges over a network. 2026-08-06 9.9 CVE-2026-50481 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-50481 ] Microsoft--Azure Confidential Ledger Expos=
ed dangerous method or function in Azure Confidential Ledger allows an auth= orized attacker to execute code over a network. 2026-08-06 9.1 CVE-2026-688=
23 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68823 ] Microsoft--Azure L= ogic Apps Improper access control in Azure Logic Apps allows an authorized = attacker to disclose information over a network. 2026-08-06 9.6 CVE-2026-56= 161 [ https://www.cve.org/CVERecord?id=3DCVE-2026-56161 ] Microsoft--Azure = Service Bus Deserialization of untrusted data in Azure Service Bus allows a=
n authorized attacker to execute code over a network. 2026-08-06 9.9 CVE-20= 26-50515 [ https://www.cve.org/CVERecord?id=3DCVE-2026-50515 ] Microsoft--A= zure SQL Database Improper authentication in Azure SQL Database allows an u= nauthorized attacker to elevate privileges over a network. 2026-08-06 10 CV= E-2026-56162 [ https://www.cve.org/CVERecord?id=3DCVE-2026-56162 ] Microsof= t--Azure SQL Managed Instance Improper restriction of communication channel=
to intended endpoints in Azure SQL Managed Instance allows an unauthorized=
attacker to elevate privileges over a network. 2026-08-06 8.7 CVE-2026-628=
36 [ https://www.cve.org/CVERecord?id=3DCVE-2026-62836 ] Microsoft--Azure S=
RE Agent Missing authorization in Azure SRE Agent allows an authorized atta= cker to elevate privileges over a network. 2026-08-06 9.9 CVE-2026-62830 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-62830 ] Microsoft--Microsoft 36=
5 Admin Center Improper verification of cryptographic signature in Microsof=
t 365 Admin Center allows an unauthorized attacker to elevate privileges ov=
er a network. 2026-08-06 9.8 CVE-2026-62873 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-62873 ] Microsoft--Microsoft 365 Apps for Enterprise Use aft=
er free in Microsoft Office Excel allows an unauthorized attacker to execut=
e code over a network. 2026-08-03 8.8 CVE-2026-62870 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-62870 ] Microsoft--Microsoft Edge (Chromium-based) = Origin validation error in Microsoft Edge (Chromium-based) allows an unauth= orized attacker to disclose information over a network. 2026-08-03 8.1 CVE-= 2026-66318 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66318 ] Microsoft-= -Microsoft Edge (Chromium-based) External control of file name or path in M= icrosoft Edge for Android allows an unauthorized attacker to disclose infor= mation over a network. 2026-08-03 7.4 CVE-2026-65802 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-65802 ] Microsoft--Microsoft Edge (Chromium-based) = Use after free in Microsoft Edge (Chromium-based) allows an unauthorized at= tacker to execute code over a network. 2026-08-03 7.5 CVE-2026-66315 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-66315 ] Microsoft--Microsoft Edge (= Chromium-based) Access of resource using incompatible type ('type confusion=
') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to ex= ecute code over a network. 2026-08-03 7.4 CVE-2026-66321 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-66321 ] Microsoft--Microsoft Edge (Chromium-bas= ed) Origin validation error in Microsoft Edge (Chromium-based) allows an un= authorized attacker to perform spoofing over a network. 2026-08-03 7.1 CVE-= 2026-66322 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66322 ] Microsoft-= -Microsoft Edge for Android External control of file name or path in Micros= oft Edge for Android allows an unauthorized attacker to disclose informatio=
n locally. 2026-08-03 7.7 CVE-2026-66310 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-66310 ] Microsoft--Microsoft Entra Provisioning Service '.../..= .//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authori= zed attacker to elevate privileges over a network. 2026-08-06 9.9 CVE-2026-= 59115 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59115 ] Microsoft--Micr= osoft Planetary Computer Pro (GeoCatalog) Missing authentication for critic=
al function in Microsoft Planetary Computer Pro allows an unauthorized atta= cker to elevate privileges over a network. 2026-08-06 10 CVE-2026-63508 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-63508 ] Microsoft--Microsoft Pow=
er Apps Improper authorization in Microsoft Power Apps allows an unauthoriz=
ed attacker to elevate privileges over a network. 2026-08-06 9.3 CVE-2026-5= 9118 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59118 ] Microsoft--Micro= soft Purview eDiscovery Improper access control in Microsoft Purview eDisco= very allows an authorized attacker to elevate privileges over a network. 20= 26-08-06 8.8 CVE-2026-65668 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6= 5668 ] Microsoft--Microsoft SharePoint Online Improper neutralization of in= put during web page generation ('cross-site scripting') in Microsoft Office=
SharePoint allows an unauthorized attacker to perform spoofing over a netw= ork. 2026-08-06 9.6 CVE-2026-70332 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-70332 ] Microsoft--Microsoft Teams Missing authorization in Microsoft=
Teams allows an unauthorized attacker to elevate privileges over a network=
. 2026-08-06 10 CVE-2026-65667 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-65667 ] Microsoft--Microsoft Teams Improper authentication in Microsoft T= eams allows an authorized attacker to elevate privileges over a network. 20= 26-08-06 9.6 CVE-2026-62896 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6= 2896 ] Microsoft--Microsoft Teams Improper verification of cryptographic si= gnature in Microsoft Teams allows an unauthorized attacker to perform spoof= ing over a network. 2026-08-06 7.5 CVE-2026-62918 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-62918 ] MihChe--WPBruiser {no- Captcha anti-Spam} Unau= thenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spam} <=3D = 3.1.43 versions. 2026-08-06 9.8 CVE-2026-65556 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-65556 ] milvus-io--milvus Milvus through 2.6.22 and 3.0.0=
contains an unauthenticated denial of service vulnerability that allows re= mote attackers to terminate service components by sending a crafted HTTP GE=
T request to the management server on port 9091. Attackers can exploit the = unprotected /management/stop endpoint, which bypasses REST API authenticati=
on middleware, by supplying a 'role' parameter to shut down the proxy, data= node, or querynode components, resulting in denial of service. 2026-08-05 7=
.5 CVE-2026-69111 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69111 ] Min= gSoft--MCMS A vulnerability was determined in MingSoft MCMS up to 3.0.6. Th=
is affects the function ModelDataImpl.queryDiyFormData of the file /mdiy/fo= rm/data/list.do of the component ms-mdiy. Executing a manipulation of the a= rgument formFields can lead to sql injection. The attack may be performed f= rom remote. The exploit has been publicly disclosed and may be utilized. Th=
e vendor was contacted early about this disclosure but did not respond in a=
ny way. 2026-08-09 7.3 CVE-2026-19355 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-19355 ] miniOrange 2FA--miniOrange 2FA The miniOrange 2FA WordPres=
s plugin before 6.2.8 does not correctly limit the number of second-factor = verification attempts, tracking them against a client-supplied identifier t= hat is reissued on every login, allowing an attacker who already knows a us= er's password to guess the one-time code without limit and take over the ac= count. 2026-08-06 7.5 CVE-2026-16619 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-16619 ] miniOrange--WP OAuth Server Unauthenticated SQL Injection i=
n WP OAuth Server <=3D 6.2.0 versions. 2026-08-06 9.3 CVE-2026-65520 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-65520 ] mistralai--mistral-vibe Mis= tral Vibe before 2.23.3 contains a remote code execution vulnerability that=
allows attackers to execute arbitrary commands by embedding a malicious co= re.fsmonitor hook in a repository's .git/config file, which is triggered wh=
en vibe invokes git status --porcelain without suppressing hook execution. = Attackers can distribute or create a crafted repository containing a malici= ous fsmonitor entry to achieve arbitrary command execution with the victim'=
s full privileges when any vibe command is run inside that repository. 2026= -08-05 8.8 CVE-2026-67623 [ https://www.cve.org/CVERecord?id=3DCVE-2026-676=
23 ] mlflow--mlflow MLflow's AI Gateway accepts an auth_config.api_base val=
ue when creating a gateway secret (mlflow/server/handlers.py, _create_gatew= ay_secret) with no validation of scheme, host, or IP range; the value is st= ored verbatim. The gateway proxy endpoint (mlflow/server/gateway_api.py, ra= w_proxy) subsequently issues an HTTP request to that stored api_base plus a=
caller-supplied path and returns the full response body. MLflow's existing=
SSRF guard, _validate_webhook_url (which blocks non-global and metadata IP= s), is never invoked anywhere in this gateway secret/proxy code path. The C= reateGatewaySecret action additionally has no entry in the permission-valid= ator map, so it requires only basic authentication rather than any specific=
scope, meaning any authenticated user - including read-only accounts - can=
create a secret pointing at an internal address and reach it via the proxy=
endpoint, potentially exposing cloud-instance IAM credentials via metadata=
services. This is related to CVE-2026-4035, which addresses a distinct mec= hanism in the same gateway-secret feature (server-side $ENV_VAR resolution = inside the api_key field leaking credentials to the configured upstream); t=
he finding here is an independent missing-validation gap in the api_base de= stination itself, unaffected by that fix. 2026-08-05 7.1 CVE-2026-71211 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-71211 ] MonsterInsights Pro--Mon= sterInsights Pro The official MonsterInsights Pro update distribution bucke=
t (`monster-insights.s3.amazonaws.com`) was compromised. Both the current r= elease (10.2.2) and the version MonsterInsights rolled back to (10.2.0) con= tain a malicious file, `class-system-check.php`. Three distinct variants we=
re observed on 2026-06-11, all sharing the same AES-256-GCM key, confirming=
a single threat actor. The attacker retains write access to the S3 bucket = and has been actively iterating on the payload throughout the day. 2026-08-=
06 10 CVE-2026-11976 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11976 ] = mrswapnilsahu--Stock-Inventory-Management-System The Stock-Inventory-Manage= ment-System application's login.php assigns raw $_POST username/password va= lues to $_SESSION and builds its authentication query by directly concatena= ting those session values into a SQL statement with no parameterization or = escaping. An unauthenticated remote attacker can submit a payload such as '=
OR '1'=3D'1 in the login form to bypass authentication entirely. The same = script additionally contains hardcoded administrative credentials (admin/ne= ola) in a post-login conditional check, providing a second, independent ful= l-authentication-bypass path. 2026-08-05 9.8 CVE-2026-71207 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-71207 ] MSI--Radix AXE6600 MSI Radix AXE6600=
router firmware version v781521 contains a command injection vulnerability=
in the wps.cgi interface that allows remote attackers to execute arbitrary=
commands by injecting malicious input through the pin2g, pin5g, or pin6g p= arameters. Attackers can exploit these unsanitized parameters to execute ar= bitrary commands on the affected device and obtain root privileges. 2026-08= -08 9.8 CVE-2026-71983 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71983 =
] MSI--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521 cont= ains a command injection vulnerability in the urlfilter function that allow=
s remote attackers to execute arbitrary commands on the affected device. At= tackers can exploit the urlfilter function to inject malicious commands and=
obtain root privileges on the underlying system. 2026-08-08 9.8 CVE-2026-7= 1984 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71984 ] MSI--Radix AXE66=
00 MSI Radix AXE6600 router firmware version v781521 contains a command inj= ection vulnerability in the accesscontrol function that allows remote attac= kers to execute arbitrary commands on the affected device. Attackers can ex= ploit this vulnerability through the accesscontrol function to execute mali= cious commands and obtain root privileges on the underlying system. 2026-08= -08 9.8 CVE-2026-71985 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71985 =
] MSI--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521 cont= ains a command injection vulnerability in the dmz function that allows remo=
te attackers to execute arbitrary commands on the affected device. Attacker=
s can exploit this vulnerability through the dmz function to execute malici= ous commands and obtain root privileges on the underlying system. 2026-08-0=
8 9.8 CVE-2026-71986 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71986 ] = MSI--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521 contai=
ns a command injection vulnerability in the alg function that allows remote=
attackers to execute arbitrary commands on the affected device. Attackers = can exploit this vulnerability through the alg function to execute maliciou=
s commands and obtain root privileges on the underlying system. 2026-08-08 = 9.8 CVE-2026-71987 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71987 ] MS= I--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521 contains=
a command injection vulnerability in the portFw function that allows remot=
e attackers to execute arbitrary commands on the affected device. Attackers=
can exploit this vulnerability through the alg function to execute malicio=
us commands and obtain root privileges on the underlying system. 2026-08-08=
9.8 CVE-2026-71988 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71988 ] M= SI--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521 contain=
s a command injection vulnerability in the porTrigger function that allows = remote attackers to execute arbitrary commands on the affected device. Atta= ckers can exploit this vulnerability through the alg function to execute ma= licious commands and obtain root privileges on the underlying system. 2026-= 08-08 9.8 CVE-2026-71989 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7198=
9 ] MSI--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521 co= ntains a command injection vulnerability in the TelnetSSH function used for=
SSH configuration that allows remote attackers to execute arbitrary comman=
ds on the affected device. Attackers can exploit this vulnerability through=
the SSH configuration interface to inject malicious commands and obtain ro=
ot privileges on the underlying system. 2026-08-08 9.8 CVE-2026-71990 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-71990 ] MSI--Radix AXE6600 MSI Rad=
ix AXE6600 router firmware version v781521 contains a command injection vul= nerability in the TelnetSSH function used for Telnet configuration that all= ows remote attackers to execute arbitrary commands on the affected device. = Attackers can exploit this vulnerability through the Telnet configuration i= nterface to inject malicious commands and obtain root privileges on the und= erlying system. 2026-08-08 9.8 CVE-2026-71991 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-71991 ] MSI--Radix AXE6600 MSI Radix AXE6600 router firmwa=
re version v781521 contains a command injection vulnerability in the macfil= ter function that allows remote attackers to execute arbitrary commands on = the affected device. Attackers can exploit the macfilter function to inject=
malicious commands and obtain root privileges on the underlying system. 20= 26-08-08 9.8 CVE-2026-71992 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7= 1992 ] MSI--Radix AXE6600 MSI Radix AXE6600 router firmware version v781521=
contains a command injection vulnerability in the openvpn function that al= lows remote attackers to execute arbitrary commands on the affected device.=
Attackers can exploit the macfilter function to inject malicious commands = and obtain root privileges on the underlying system. 2026-08-09 9.8 CVE-202= 6-71993 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71993 ] Muffingroup--= Betheme Contributor Remote Code Execution (RCE) in Betheme <=3D 28.4.2 vers= ions. 2026-08-06 9.9 CVE-2026-65548 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-65548 ] nanocoai--NanoClaw A security vulnerability has been detecte=
d in nanocoai NanoClaw up to 2.0.64. This affects an unknown part of the fi=
le container/agent-runner/src/mcp-tools/core.ts of the component send_file.=
Such manipulation leads to path traversal. The attack can be executed remo= tely. The exploit has been disclosed publicly and may be used. The project = was informed of the problem early through an issue report but has not respo= nded yet. 2026-08-06 7.3 CVE-2026-18991 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18991 ] NASA-AMMOS--anms The NASA-AMMOS Asynchronous Network Ma= nagement System (ANMS) reference implementation's default docker-compose.ym=
l publishes the amp-manager service's REST API directly to the host network=
interface (port 8089, e.g. "${ION_MGR_PORT:-8089}:8089/tcp") with cap_add:=
NET_ADMIN, NET_RAW, SYS_NICE, bypassing the CAM (Configuration and Access = Manager) gateway that is otherwise the system's sole authentication boundar=
y. The underlying REST server, implemented with CivetWeb in JHUAPL/dtnma-to= ols (src/refdm/nm_rest.c), is configured with enable_auth_domain_check set =
to "no" and registers every route, including the DTNMA agent command-dispat=
ch endpoints (.../agents/{eid|idx}/send, which accept and forward EXECSET-e= ncoded command sets to a registered DTNMA agent), with a null authenticatio=
n callback. Any network-reachable client can therefore enumerate registered=
agents, submit arbitrary command sets to them, and clear stored reports, e= ntirely without credentials. This affects NASA-AMMOS/anms and JHUAPL-DTNMA/= dtnma-tools as published; both repositories present this as a reference/gro= und DTN network-management implementation and testbed, and the affected com= ponents communicate with DTNMA agents (which may represent simulated or rea=
l spacecraft/ground nodes depending on deployment) rather than being flight=
software running onboard a spacecraft. 2026-08-05 9.8 CVE-2026-71289 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-71289 ] NASA-AMMOS--plandev (seque= ncing-server) The Aerie/PlanDev sequencing-server's authorization middlewar=
e (sequencing-server/src/app.ts) derives the caller's Hasura session role v=
ia getHasuraSession(), which prefers a session_variables object taken direc= tly from the client-supplied JSON request body over the Authorization heade= r's JWT claims, with no verification that the request actually originated f= rom Hasura. By setting {"session_variables":{"x-hasura-role":"aerie_admin"}=
} in the body of a request to POST /command-expansion/put-expansion with no=
Authorization header, an unauthenticated attacker satisfies the role check=
and can insert arbitrary expansion rules into sequencing.expansion_rule, w= hich govern how spacecraft activities are translated into commands. Separat= ely, POST /put-dictionary is explicitly listed in the ENDPOINTS_WHITELIST a=
nd is exempt from any authentication, allowing unauthenticated writes of co= mmand dictionaries. 2026-08-05 9.8 CVE-2026-71214 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-71214 ] National Security Agency--Ghidra Ghidra contai=
ns an arbitrary code execution vulnerability in the Swift demangler analyze=
r that allows an attacker to execute arbitrary binaries by supplying a mali= cious Ghidra project with a crafted Swift tool directory path. When a victi=
m opens the attacker-supplied project, SwiftDemanglerAnalyzer restores the = persisted Swift binary directory from project state and SwiftNativeDemangle=
r executes the resolved binary without integrity or signature verification,=
causing attacker-controlled executables to run under the Ghidra process us=
er with no prompt or confirmation. 2026-08-03 7 CVE-2026-18718 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-18718 ] Nexcess--GiveWP Unauthenticated C= ross Site Scripting (XSS) in GiveWP <=3D 4.16.5 versions. 2026-08-06 7.1 CV= E-2026-66690 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66690 ] Nexcess-= -Kadence WooCommerce Email Designer Unauthenticated Privilege Escalation in=
Kadence WooCommerce Email Designer <=3D 1.5.19 versions. 2026-08-06 9.8 CV= E-2026-28005 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28005 ] NexTor--= NexTor IP Changer NexTor IP Changer is a command-line tool that leverages t=
he Tor network to periodically rotate a user's IP address. Versions prior t=
o 2.0.0 have a command execution vulnerability due to unsafe use of `shell= =3DTrue` with commands that rely on executable resolution through the `PATH=
` environment variable. An attacker controlling the execution environment c=
an place malicious executables such as sudo earlier in the `PATH`, resultin=
g in execution of attacker-controlled code. Version 2.0.0 fixes the issue. = 2026-08-07 7.8 CVE-2026-48097 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -48097 ] NexTor--NexTor IP Changer NexTor IP Changer is a command-line tool=
that leverages the Tor network to periodically rotate a user's IP address.=
Versions prior to 2.0.0 execute privileged system commands using `sudo` an=
d `shell=3DTrue` directly inside application logic. In environments where p= asswordless sudo (`NOPASSWD`) is enabled, privileged commands may execute s= ilently without explicit user confirmation. Version 2.0.0 fixes the issue. = 2026-08-07 7.3 CVE-2026-48098 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -48098 ] NI--NI-PAL There is a local privilege escalation vulnerability rec= ently discovered in the NI-PAL kernel driver.=C2=A0=C2=A0This may allow a l= ocal, authenticated user to escalate privileges and execute arbitrary code.= =C2=A0=C2=A0This vulnerability affects NI-PAL 26.3.1 and prior versions run= ning on Microsoft Windows. 2026-08-05 7.8 CVE-2026-18485 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-18485 ] nickboss--WordPress File Upload Unauthe= nticated SQL Injection in WordPress File Upload <=3D 5.1.7 versions. 2026-0= 8-06 9.3 CVE-2026-66447 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66447=
] node-red--node-red Node-RED's local-filesystem library storage module (g= etLibraryEntry() and saveLibraryEntry() in packages/node_modules/@node-red/= runtime/lib/storage/localfilesystem/library.js), reachable via GET/POST /li= brary/:lib/:type/*path, joins the user-supplied path parameter directly int=
o the filesystem path via fspath.join(libDir, type, path) with no traversal=
sanitization, containment check, or path normalization/prefix verification=
. An authenticated user (including read-only-scoped tokens for the read pat=
h) can supply a path containing `../` sequences to read arbitrary files out= side the library directory; a user with write access can write arbitrary fi= les, enabling remote code execution via SSH authorized_keys or cron injecti= on. This is a distinct, separately unpatched traversal from the previously = fixed CVE-2021-21298 (Projects API). 2026-08-05 7.2 CVE-2026-71269 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-71269 ] NSquared--Simply Schedule App= ointments Unauthenticated SQL Injection in Simply Schedule Appointments <=
=3D 1.6.12.10 versions. 2026-08-06 9.3 CVE-2026-65508 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-65508 ] NSquared--Simply Schedule Appointments Una= uthenticated Cross Site Scripting (XSS) in Simply Schedule Appointments <=
=3D 1.6.12.10 versions. 2026-08-06 7.1 CVE-2026-65513 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-65513 ] nuxsmin--sysPass sysPass's FileBackupServi= ce::doBackupFiles() in lib/SP/Services/Backup/FileBackupService.php around = line 388 builds a tar shell command by string-concatenating the backup dire= ctory path $this->path directly into the command line ('tar czf ' . $backup= FileApp . ' ' . BASE_PATH . ' --exclude \"' . $this->path . '\" 2>&1') and = passes the result to PHP's exec() with no application of escapeshellarg() a=
nd no validation of the path against a safe character set. The $this->path = value is read from the sysPass configuration, which is persisted in the dat= abase and writable through the admin settings API and the admin UI. An admi= nistrator (or an attacker who has obtained an admin API token or admin sess= ion) can therefore store a backup path containing shell metacharacters and = trigger a backup operation to execute arbitrary OS commands as the web serv=
er process user (typically www-data or apache). Because sysPass is a passwo=
rd manager whose sole purpose is to hold credentials for other systems, cod=
e execution as the web-server user permits reading sysPass's master passwor=
d and encryption key from memory or configuration files, decrypting every s= tored credential in the database, exporting the entire password vault, pivo= ting to internal systems using the disclosed credentials, and installing pe= rsistent backdoors on the password-manager host. 2026-08-06 7.2 CVE-2026-63= 725 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63725 ] nuxt--devtools Nu=
xt is an open-source web development framework for Vue.js. Prior to 3.3.1, = Nuxt DevTools (development mode only) exposes a bidirectional RPC channel o= ver the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affected ve= rsions the channel has no authentication: any client that can reach the Vit=
e HMR endpoint (ws://<host>:<port>/, subprotocol vite-hmr) can call RPC met= hods, with no token, handshake, or origin check before the channel is estab= lished. The updateOptions(), clearOptions(), and openInEditor() methods do = not enforce the ensureDevAuthToken check that the other mutating methods us=
e. openInEditor() reads the persisted behavior.openInEditor value and passe=
s it to the launch-editor package, which spawns it as a child process. That=
value is settable through the equally unauthenticated updateOptions(). An = attacker who can reach the HMR port can therefore chain updateOptions('beha= vior', { openInEditor: '<command>' }) then openInEditor('<any-existing-file= >') to execute an arbitrary program on the developer's machine. This issue =
is fixed in 3.3.1. 2026-08-05 9.6 CVE-2026-71319 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-71319 ] nuxt--nuxt Nuxt is an open-source web developme=
nt framework for Vue.js. From 3.21.7 until 3.21.10 and 4.5.1, mixed-case ro= uteRules keys can fail to match case-folded lookups when router.options.sen= sitive is false and drop appMiddleware authorization gates. This is caused =
by an incomplete fix for CVE-2026-53721. This issue is fixed in 3.21.10 and=
4.5.1. 2026-08-05 8.2 CVE-2026-71315 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-71315 ] nuxt--nuxt Nuxt is an open-source web development framewor=
k for Vue.js. From 3.4.0 until 3.21.10 and 4.5.1, an attacker can inject a = template key through /__nuxt_island/ props into a dynamic component when `v= ue.runtimeCompiler: true` is enabled, causing template execution in the Nit=
ro process. This issue is fixed in 3.21.10 and 4.5.1. 2026-08-05 8.1 CVE-20= 26-71320 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71320 ] nuxt--nuxt N= uxt is an open-source web development framework for Vue.js. From 3.1.0 unti=
l 3.21.10 and 4.5.1, an unauthenticated attacker can use a server island v-= for prop, including vforToArray and , to trigger unbounded SSR memory alloc= ation until MAX_VFOR_LENGTH =3D 100000 and crash the Nuxt process. This iss=
ue is fixed in 3.21.10 and 4.5.1. 2026-08-05 7.5 CVE-2026-71314 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-71314 ] nuxt--nuxt Nuxt is an open-sourc=
e web development framework for Vue.js. From 4.4.0 until 4.5.1, runtime cac= he:nuxt:payload entries for /<page>/_payload.json can be returned before ro= ute middleware and page guards because import.meta.prerender is not enforce=
d, disclosing another user's SSR data. This issue is fixed in 4.5.1. 2026-0= 8-05 7.5 CVE-2026-71316 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71316=
] nuxt--nuxt Nuxt is an open-source web development framework for Vue.js. = From 3.1.0 until 3.21.10 and 4.5.1, the internal island renderer endpoint `= /__nuxt_island/...` decodes and hashes attacker-controlled JSON body input = with destr and ohash before validating the URL-resident hash. An unauthenti= cated `POST /__nuxt_island/_.json` with a large JSON body is fully read, pa= rsed, hashed, and then rejected, which wastes CPU on Nitro single event loo=
p and delays concurrent requests. No valid hash and no authentication are r= equired. This issue is fixed in 3.21.10 and 4.5.1. 2026-08-05 7.5 CVE-2026-= 71321 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71321 ] NVIDIA--Dynamo = NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving = topology, where an attacker could cause an out-of-bounds write. A successfu=
l exploit of this vulnerability might lead to code execution, escalation of=
privileges, data tampering, denial of service, and information disclosure.=
2026-08-04 9.8 CVE-2026-24254 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-24254 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerability w= here an attacker could cause an out-of-bounds write. A successful exploit o=
f this vulnerability might lead to denial of service and data tampering. 20= 26-08-04 8.2 CVE-2026-24253 [ https://www.cve.org/CVERecord?id=3DCVE-2026-2= 4253 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerability wher=
e an attacker could cause deserialization of untrusted data. A successful e= xploit of this vulnerability might lead to denial of service and data tampe= ring. 2026-08-04 8.2 CVE-2026-47623 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-47623 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerabil= ity in the multimodal embedding cache, where an attacker could cause a hash=
collision by submitting images that share an identical pixel byte sequence=
but have different dimensions. A successful exploit of this vulnerability = might lead to data tampering. 2026-08-04 7.5 CVE-2026-24255 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-24255 ] NVIDIA--Dynamo NVIDIA Dynamo for Lin=
ux contains a vulnerability in the image loading component where an attacke=
r may cause improper limitation of a pathname to a restricted directory. A = successful exploit of this vulnerability might lead to information disclosu= re. 2026-08-04 7.5 CVE-2026-47612 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-47612 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerabilit=
y where an attacker may cause improper limitation of a pathname to a restri= cted directory by supplying a crafted local path in a multimodal request. A=
successful exploit of this vulnerability might lead to information disclos= ure. 2026-08-04 7.5 CVE-2026-47613 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-47613 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerabili=
ty where an attacker may cause server-side request forgery. A successful ex= ploit of this vulnerability might lead to information disclosure. 2026-08-0=
4 7.5 CVE-2026-47614 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47614 ] = NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerability where an at= tacker may cause server-side request forgery by supplying a crafted URL in =
a multimodal request. A successful exploit of this vulnerability might lead=
to information disclosure. 2026-08-04 7.5 CVE-2026-47615 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-47615 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux=
contains a vulnerability in the multimodal media fetcher where an attacker=
may cause server-side request forgery. A successful exploit of this vulner= ability might lead to information disclosure. 2026-08-04 7.5 CVE-2026-47616=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-47616 ] NVIDIA--Dynamo NVIDI=
A Dynamo for Linux contains a vulnerability in the multimodal media fetcher=
where an attacker may cause server-side request forgery via DNS rebinding.=
A successful exploit of this vulnerability might lead to information discl= osure. 2026-08-04 7.5 CVE-2026-47617 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-47617 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerabi= lity in the Rust multimodal media fetcher where an attacker could cause ser= ver-side request forgery. A successful exploit of this vulnerability might = lead to information disclosure. 2026-08-04 7.5 CVE-2026-47618 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-47618 ] odysseus-dev--odysseus Odysseus be= fore commit bf325f6 contains a missing authorization vulnerability that all= ows authenticated non-admin users to manage server-wide embedding backend c= onfiguration by invoking endpoint management routes that verify session aut= hentication but omit the admin authorization guard. Attackers can supply an=
attacker-controlled URL to overwrite the embedding backend persisted in th=
e endpoint configuration file and process environment, causing all subseque=
nt embedding operations including chat messages, RAG queries, memory entrie=
s, and vault text to be transmitted in plaintext to the attacker-controlled=
destination, or delete the endpoint configuration to deny embedding servic=
e to all users. 2026-08-04 8.8 CVE-2026-70619 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-70619 ] OMICRON electronics GmbH--OMICRON StationGuard OMI= CRON StationGuard before version 4.10 contains a cryptographic timing side-= channel vulnerability in the backend authentication mechanism that may allo=
w an unauthenticated attacker to forge valid authentication credentials, by= pass authentication and authorization, and impersonate legitimate clients. =
An attacker can gain full access to the system configuration, allowing modi= fication, reset, or unauthorized alteration of system parameters. 2026-08-0=
6 8.7 CVE-2026-16315 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16315 ] = open-reception--appointment-booking-software OpenReception's appointment bo= oking software provides an end-to-end encrypted appointment booking platfor=
m. Prior to version 1.0.1, a fully provisioned OpenReception instance accep=
ts unauthenticated POST requests to `/setup/create-admin-account` and creat=
es additional GLOBAL_ADMIN accounts without verifying that an admin already=
exists. Any unauthenticated network attacker who can submit a same-origin = form POST gains full platform-level administrative control. The newly creat=
ed account is `is_active=3Dtrue` with `confirmation_state=3DACCESS_GRANTED`=
and does not require completing email confirmation; the GLOBAL_ADMIN row i=
s created active and immediately usable. Login and tenant enumeration succe=
ed without any further interaction. This is distinct from the deployment ra=
ce condition already documented on the `Claiming an instance` page. That do= cumented race covers the window between deployment and first claim. The bug=
reported here works after the operator has properly claimed and configured=
the instance: the layout-level guard that protects the setup page only red= irects on GET, while the `default` form action handler creates the user wit= hout rechecking `adminExists()`. Three GLOBAL_ADMIN accounts were created i=
n succession during testing, with no rate limiting observed. Audit-specific=
event logging beyond standard application logs was not assessed; the stand= ard `[error]` line that surfaces only when a uniqueness conflict is hit is = not the same as a security event for "additional admin created post-claim".=
The form post is rejected for browser drive-by CSRF by SvelteKit's built-i=
n same-origin check, but any tool that supplies a matching `Origin` header = (curl, Burp, automated scanners, server-side proxies) bypasses this trivial= ly. No additional preconditions exist. Users should upgrade to version 1.0.=
1 to receive a patch. 2026-08-06 9.8 CVE-2026-48085 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-48085 ] open-reception--appointment-booking-software=
OpenReception's appointment booking software provides an end-to-end encryp= ted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN pr= omotes themselves to platform-wide GLOBAL_ADMIN through a single PUT reques=
t. The role-update handler accepts the `GLOBAL_ADMIN` enum value from any t= enant admin updating their own tenant's staff. No policy check enforces tha=
t "only an existing GLOBAL_ADMIN may grant GLOBAL_ADMIN", so the schema val= idation IS the authorization decision. After re-login, the JWT contains the=
new role and the formerly-tenant-scoped admin reaches every other tenant o=
n the platform. On the hosted OpenReception service this is a scope-changed=
escalation: a single customer-side tenant administrator gains full platfor= m-wide administrative control over all other tenants' configuration, users,=
staff records, operational metadata, and tenant lifecycle. Plaintext appoi= ntment contents remain subject to the E2E model unless chained with the sta= ff-crypto poisoning issue (V-4) or with staff-passkey hijacking (V-1). On a=
single-tenant self-hosted deployment it is still a privilege escalation be= cause TENANT_ADMIN should not be able to create new tenants, modify global = configuration, or manage other administrators. The same handler also accept=
s updates targeted at any colleague within the tenant. A tenant admin can p= romote a separate collaborator account instead of themselves, leaving their=
own audit trail clean while the platform-wide breach happens through a sep= arate identity. Version 1.0.2 fixes the issue. 2026-08-06 9.9 CVE-2026-4808=
6 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48086 ] open-reception--app= ointment-booking-software OpenReception's appointment booking software prov= ides an end-to-end encrypted appointment booking platform. Prior to version=
1.0.2, the registration handler at `POST /api/auth/register/{userId}` vali= dates the relationship between the WebAuthn challenge and the registration = cookie's email but never validates that the `userId` in the URL belongs to = that email. An unauthenticated attacker requests a challenge for their own = email, generates a registration response with their own authenticator, and = submits it against any victim user's URL. The challenge-vs-cookie email mat=
ch passes, the WebAuthn ceremony validates, and `addPasskey` writes the att= acker's credential into the victim's `user_passkey` rows. The next victim-e= mail login accepts a passkey assertion from the attacker's authenticator an=
d issues a session as the victim. User IDs are not strictly secret on this = platform, but the exact set of exposure surfaces should be assessed by the = maintainers. Staff-list endpoints return user IDs to authenticated tenant m= embers per the route signature; live verification of all exposure surfaces = (whether user IDs leak through any unauthenticated route, through invite-co= nfirmation URLs, or through other administrative views) is part of the pend= ing live PoC. Where the attacker knows the victim's email and userId, the a= nalysis below becomes account takeover. Version 1.0.2 fixes the issue. 2026= -08-06 9.8 CVE-2026-48087 [ https://www.cve.org/CVERecord?id=3DCVE-2026-480=
87 ] open-reception--appointment-booking-software OpenReception's appointme=
nt booking software provides an end-to-end encrypted appointment booking pl= atform. Prior to version 1.0.4, the route `POST /api/tenants/{tenantId}/sta= ff/{staffId}/crypto` accepts and stores attacker-controlled ML-KEM-768 publ=
ic keys against any tenant on the platform without authentication. The hand= ler logs an "Unauthorized crypto key storage attempt" warning when neither =
a session nor a registration cookie is present, then proceeds to insert the=
row regardless. The platform's E2E claim that "even administrators cannot = view sensitive information" is broken: any unauthenticated network attacker=
can register themselves as an additional encryption recipient for any tena= nt's future patient appointments. A second variant of the bug suppresses th=
e unauthorized-warning log entry. The Zod schema makes the `email` field op= tional. When the request body omits `email` and the request carries no regi= stration cookie, the comparison `registrationEmail =3D=3D=3D email` becomes=
`undefined =3D=3D=3D undefined`, which evaluates to `true`. The handler tr= eats the request as a legitimate registration flow, skips the warning entir= ely, and stores the row. Successful storage is still recorded as an `[info]=
` log line, but the security-relevant warning that operators are most likel=
y to monitor or alert on is gone. The `staff_crypto` table has no unique co= nstraint on `user_id`, so an arbitrary number of attacker rows can coexist = for the same staff identifier and all return as `is_active=3Dtrue`. The sup= plied `staffId` does not need to match any existing user or pending invite.=
Schema validation on `passkeyId`, `publicKey`, and `privateKeyShare` is al=
so weak: the literal string `<placeholder-base64>` was accepted, indicating=
no length, format, or cryptographic-validity check beyond field presence. = This weakness is independent of the auth bypass but compounds it: a poisone=
d directory can also be filled with malformed entries that break legitimate=
booking flows. The injected key is consumed by the public booking flow. Af= ter completing the unauthenticated `bootstrap-challenge` and `bootstrap-ver= ify` ceremony as a "patient", the resulting `bookingAccessToken` is accepte=
d by `GET /api/tenants/{id}/appointments/staff-public-keys`, which returns = the attacker-controlled keys alongside any legitimate ones. A new appointme=
nt encrypts its tunnel key with ML-KEM to all listed recipients, so the att= acker becomes a co-recipient of the encryption and can decapsulate the tunn=
el key with the matching secret. From there, all appointment payloads for t= hat booking are decryptable. Version 1.0.4 patches the issue. 2026-08-06 9.=
4 CVE-2026-48088 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48088 ] open= -reception--appointment-booking-software OpenReception's appointment bookin=
g software provides an end-to-end encrypted appointment booking platform. P= rior to version 1.0.2, the `GET /api/tenants/{id}` endpoint returns the ful=
l tenant record to any authenticated `TENANT_ADMIN` of that tenant, includi=
ng the `databaseUrl` field. This field contains the live PostgreSQL connect= ion string the application uses to connect to that tenant's database. In th=
e tested official `docker-compose.prod.yml` deployment, the connection stri=
ng contained the user `postgres` with `rolsuper=3Dtrue` and the plaintext p= assword from `secrets/postgres_password.txt`. Operators who configure a non= -superuser PostgreSQL user via `secrets/postgres_user.txt` would expose a l= ess privileged credential, but the disclosure of the connection string itse=
lf is independent of that choice. The same credential applies to every data= base managed by that PostgreSQL instance: the central `appointment_booking`=
database, every per-tenant database (one per tenant), and the postgres adm= inistrative database. A `TENANT_ADMIN` of one tenant who can reach `postgre= s:5432` (directly via internal network, indirectly via any SSRF, RCE, or fi= le-read in the application) can read every other tenant's appointment ciphe= rtexts, key shares, and metadata; read the central user table, including al=
l `GLOBAL_ADMIN` accounts, password hashes, and session records; modify or = delete any data in any tenant database; and/or i a superuser-scoped deploym= ent: use PostgreSQL's `pg_read_server_files`, `COPY ... FROM PROGRAM`, and = `CREATE EXTENSION` for further escalation inside the database container. Th=
is breaks the per-tenant database isolation that is otherwise the primary c= ross-tenant control in the application. The application code carefully scop=
es most queries to the calling tenant's database, but those scopings are ir= relevant once the attacker holds the credentials that bypass the applicatio=
n entirely. Version 1.0.2 fixes the issue. 2026-08-06 8 CVE-2026-48080 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-48080 ] open-reception--appointme= nt-booking-software OpenReception's appointment booking software provides a=
n end-to-end encrypted appointment booking platform. Prior to version 1.0.2=
, a TENANT_ADMIN can store `javascript:` URLs in the tenant `links` configu= ration (`website`, `imprint`, `privacyStatement`). These values are returne=
d to the patient-facing landing page via `/api/public`, hydrated into the S= velteKit Button component, and rendered as `<a href=3D"javascript:...">` el= ements without URL-scheme filtering. A patient who clicks any such link exe= cutes the attacker's JavaScript inside the patient browser origin, where pa= tient form data is read before client-side encryption is applied. This brea=
ks the project's central trust claim that the server is an untrusted relay = and that administrators cannot read patient data. Patient-side encryption h= appens after form input, so JavaScript executing in the patient origin can = read or alter the plaintext before encryption is performed. Version 1.0.2 f= ixes the issue. 2026-08-06 8.1 CVE-2026-48081 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-48081 ] open-reception--appointment-booking-software OpenR= eception's appointment booking software provides an end-to-end encrypted ap= pointment booking platform. Prior to version 1.0.2, when a user navigates t=
o the `/logout` page, the page's server-side load handler deletes the `acce= ss_token` cookie before calling `/api/auth/logout` via an internal `event.f= etch()`. The internal fetch consequently runs without the auth cookie, so `= apiAuthHandle` rejects it, the logout handler never executes, and `SessionS= ervice.revokeSession()` is never called for the current session. The DB ses= sion row remains valid until its natural expiry (one week by default). The = user sees a successful logout (cookie gone, UI returns to login), but any p= arty still holding a copy of the now-deleted access token can continue maki=
ng authenticated API calls until the session naturally expires. The root ca= use is a simple ordering mistake. The same auth subsystem implements the co= rrect order in `/api/auth/logout`: revoke the current DB session first, the=
n delete the cookie. The page-level wrapper does the opposite. Version 1.0.=
2 initiates server-side logout before removing authentication cookies and f= irst appears in version 1.0.2. Version 2.0.0 later replaces this with a rac= e-free client-side logout flow. 2026-08-06 7.4 CVE-2026-48079 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-48079 ] open-reception--appointment-bookin= g-software OpenReception's appointment booking software provides an end-to-= end encrypted appointment booking platform. Versions prior to 1.0.2 don't t= hrottle failed passphrase login attempts. An attacker can submit unlimited = wrong passphrase guesses against any known email address, capped only by th=
e Argon2 verification cost (about 100 milliseconds per attempt on the teste=
d host, giving 10 attempts per second sustained). The same backend implemen=
ts a working per-account throttle on the WebAuthn challenge endpoint, which=
returns HTTP 429 after roughly 19 attempts. The passphrase branch simply d= oes not invoke that throttle, leaving a supported high-value login path unp= rotected against credential stuffing and dictionary attacks. The asymmetry = confirms this is an oversight rather than a design choice. The throttle inf= rastructure exists, is wired into the same auth backend, and works on the W= ebAuthn path. The passphrase branch in `/api/auth/login` was not updated to=
record failed attempts. Combined with the application's minimum-passphrase=
policy (12 characters, no entropy or dictionary checks), accounts using co= mmon base patterns such as `Spring2026!XX` or words from a leak corpus are = realistically reachable in days on a single CPU, hours on a small GPU farm.=
Version 1.0.2 patches the issue. 2026-08-06 7.4 CVE-2026-48084 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-48084 ] open-webui--open-webui Open WebU=
I is an extensible, feature-rich, and user-friendly self-hosted AI platform=
. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=3DTrue, /oauth/= {provider}/token/exchange accepts a raw provider access token and validates=
it by calling the provider userinfo endpoint without confirming which OAut=
h client the token was issued to. Anyone holding an access token minted for=
any client registered with the same provider could exchange it for an Open=
WebUI session as that token user, including applications the operator does=
not control and has never authorized. This issue is fixed in 0.11.0. 2026-= 08-04 8.1 CVE-2026-70482 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7048=
2 ] open-webui--open-webui Open WebUI is an extensible, feature-rich, and u= ser-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, the terminal=
file-preview serveUrl iframe branch always granted allow-same-origin toget= her with allow-scripts for HTML files served from the application origin. A=
ny authenticated user with access to a configured terminal server could cau=
se script in a previewed file to run in the Open WebUI origin, read the vic= tim's session token from localStorage, and take over the account, with poss= ible server-side code execution if the victim was an admin or held workspac= e.functions. This issue is fixed in 0.11.0. 2026-08-04 8.2 CVE-2026-70486 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-70486 ] open-webui--open-webui=
Open WebUI is an extensible, feature-rich, and user-friendly self-hosted A=
I platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/Mark= down/KatexRenderer.svelte could store and render a chat message whose math = block makes KaTeX fail with a stack overflow instead of a parse error. The = catch branch fell back to inserting the original math source into the page =
as HTML through {@html} rather than as text, so script in the message runs =
in the browser of whoever views it, including shared chats and channels. Th=
e viewer's session token in localStorage can be stolen, and an administrato=
r viewer can have their account taken over. This issue is fixed in 0.11.0. = 2026-08-04 8.7 CVE-2026-70492 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -70492 ] open-webui--open-webui Open WebUI is an extensible, feature-rich, = and user-friendly self-hosted AI platform. From 0.10.0 until 0.11.0, the DE= LETE /api/v1/folders/{id} handler in backend/open_webui/routers/folders.py = allowed a user granted write access to a shared chat folder to permanently = delete chats and messages belonging to the folder owner. The cascade follow= ing the authorization check is bound to the folder owner's id, but the subf= older check accepted any inherited write grant instead of requiring ownersh=
ip or administrator status. A collaborator can destroy the owner's subtree =
or force-move chats out of it when delete_contents=3Dfalse. This issue is f= ixed in 0.11.0. 2026-08-04 8.1 CVE-2026-70494 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-70494 ] open-webui--open-webui Open WebUI is an extensible=
, feature-rich, and user-friendly self-hosted AI platform. From 0.9.6 until=
0.11.0, with WEB_LOADER_ENGINE=3Dplaywright, the Playwright web loader val= idates only the top-level page request and lets sub-resource requests pass = unvalidated. A page supplied by an authenticated user can use JavaScript to=
reach blocked internal addresses, and returned DOM can include data read f= rom those addresses in web-search or RAG output. This issue is fixed in 0.1= 1.0. 2026-08-04 7.7 CVE-2026-70479 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-70479 ] open-webui--open-webui Open WebUI is an extensible, feature-r= ich, and user-friendly self-hosted AI platform. From 0.9.0 until 0.11.0, Op=
en WebUI checked whether a user-supplied URL destination was globally routa= ble by applying ipaddress.is_global to the literal IPv6 address without exa= mining IPv4 addresses embedded in transition encodings. On a deployment wit=
h a NAT64 gateway, any verified user could wrap an internal or cloud-metada=
ta IPv4 address in the NAT64 well-known prefix, pass the filter, and receiv=
e the internal response body through RAG URL ingestion, URL-to-markdown con= version, or web-search content retrieval. This issue is fixed in 0.11.0. 20= 26-08-04 7.1 CVE-2026-70485 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7= 0485 ] open62541--open62541 v1.5.5 open62541 1.5.5 contains an out-of-bound=
s read in the client-side function responseReadNamespacesArray() in src/cli= ent/ua_client_connect.c. 2026-08-04 7.5 CVE-2026-67857 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-67857 ] open62541--open62541 v1.5.5 Buffer Overfl=
ow vulnerability exists in open62541 1.5.5 when the Local Discovery Server = (LDS) is built with multicast discovery enabled through the MDNSD backend. =
An unauthenticated remote attacker can send a RegisterServer or RegisterSer= ver2 request containing many unique discoveryUrls. This allows remote attac= kers to cause a denial of service. 2026-08-04 7.5 CVE-2026-67858 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-67858 ] open62541--open62541 v1.5.5 Buf= fer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to = cause a denial of service via the Discovery/LDS handling. 2026-08-04 7.5 CV= E-2026-67859 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67859 ] open6254= 1--open62541 v1.5.5 An issue in open62541 v.1.5.5 and before allows a remot=
e attacker to cause a denial of service via the UA_Client_getRemoteDataType=
s component 2026-08-04 7.5 CVE-2026-67861 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-67861 ] open62541--open62541 v1.5.5 In open62541 1.5.5, a serv= er-side use-after-free exists in the local MonitoredItem callback path. The=
issue occurs when UA_Subscription_localPublish continues to use the curren=
t UA_Notification after a callback invokes UA_Server_deleteMonitoredItem fo=
r the current local MonitoredItem. This allows a remote attacker to cause a=
denial of service. 2026-08-05 7.5 CVE-2026-67863 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-67863 ] open62541--open62541 v1.5.5 Buffer Overflow vu= lnerability in open62541 v1.5.5 allows a remote attacker to cause a denial =
of service via the Service_Call validates input arguments against runtime-r= esolved InputArguments metadata 2026-08-05 7.5 CVE-2026-67869 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-67869 ] openemr--openemr OpenEMR through 8= .2.0 contains a remote code execution vulnerability in the document categor=
y tree component (library/classes/Tree.class.php) that allows authenticated=
administrators to execute arbitrary operating system commands by injecting=
PHP payloads into the categories database table. Attackers can chain arbit= rary SQL execution to alter the id column type to VARCHAR and insert a mali= cious PHP payload, which is then executed via an unsanitized eval() call wh= enever any page instantiates CategoryTree, including unauthenticated and lo= w-privilege pages, resulting in command execution as the web server user. 2= 026-08-03 9.1 CVE-2026-39932 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 39932 ] openemr--openemr OpenEMR through 8.2.0 contains an improper authent= ication vulnerability in the OAuth2 dynamic client registration endpoint th=
at allows unauthenticated attackers to register a malicious client with sys= tem-level FHIR scopes by supplying a self-generated RSA keypair via the jwk=
s field. Once an administrator approves the registered client, attackers ca=
n use the client_credentials grant with a self-signed JWT assertion to obta=
in access tokens granting read access to all FHIR resources across all pati= ents in the system. 2026-08-03 8.1 CVE-2026-67610 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-67610 ] openemr--openemr OpenEMR through 8.2.0 contain=
s an authentication bypass vulnerability that allows attackers with valid c= redentials to circumvent multi-factor authentication by exploiting the expo= sed OAuth2 password grant flow through an unauthenticated client registrati=
on endpoint. Attackers can register an OAuth2 client via the unauthenticate=
d registration endpoint and use the password grant to exchange credentials = for an API access token, bypassing the normal web interface authentication = and any enforced multi-factor authentication controls. 2026-08-03 8.1 CVE-2= 026-67611 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67611 ] openemr--op= enemr OpenEMR through 8.2.0 contains an authenticated SQL injection vulnera= bility in the backup configuration import feature that allows administrator=
s with admin or super ACL privileges to execute arbitrary DDL and DML state= ments against the application database by uploading a crafted SQL file at t=
he form_step=3D202 parameter in backup.php. Attackers can exploit the unfil= tered shell_exec invocation of the mysql command-line client to extract cre= dential hashes, modify access control tables, inject backdoor accounts, cre= ate persistent triggers or stored procedures, and write arbitrary files to = the filesystem where MySQL FILE privileges and permissive secure_file_priv = settings are configured. 2026-08-03 7.2 CVE-2026-39931 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-39931 ] openshwprojects--OpenBK7231T_App OpenBK72= 31T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores channel labels r= eceived via the MQTT SetChannelLabel command using strdup() with no HTML sa= nitization. CHANNEL_GetLabel() returns these labels unsanitized, and they a=
re rendered via hprintf255() at 15+ locations in src/httpserver/http_fns.c = with no HTML encoding. An attacker with MQTT broker access (commonly unauth= enticated in real deployments) can set a channel label containing a <script=

payload that executes when any user views the device's web panel. 2026-08=

-05 8.5 CVE-2026-71274 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71274 =
] OpenSIPS--opensips OpenSIPS is a Session Initiation Protocol (SIP) server=
implementation. Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a=
buffer overflow in the {s.b64encode}=C2=A0string transformation. The size = check for {s.b64encode} only verifies that the input fits within the 64 KB = transformation buffer, but base64 encoding expands the data by roughly a th= ird, so an input between about 49,153 and 65,535 bytes produces more output=
than the buffer can hold and overflows it by up to 21,844 bytes. Because t= hese transformation buffers sit next to each other in memory and are reused=
for chained transformations, the overflow writes attacker-controlled data = into the adjacent buffer and corrupts values used by later transformations = processing the same SIP message. A remote attacker can trigger this by send= ing a SIP message with a large header value (roughly 50,000 bytes or more) = when the routing script applies =C2=A0{s.b64encode}=C2=A0 to attacker-contr= olled input, making exploitability dependent on the deployment's routing co= nfiguration. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1. 202= 6-08-04 9.1 CVE-2026-45100 [ https://www.cve.org/CVERecord?id=3DCVE-2026-45= 100 ] OpenSIPS--opensips OpenSIPS is a Session Initiation Protocol (SIP) se= rver implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construc= t_uri() function concatenates multiple URI components (protocol, username, = domain, port, params) into a fixed 1024-byte global BSS buffer without any = bounds checking. When a routing script calls construct_uri() with an attack= er-controlled username, a combined component length exceeding 1024 bytes ov= erflows the buffer, corrupting adjacent global data with attacker-controlle=
d content. The overflow reaches disable_503_translation, a global flag cont= rolling SIP 503 response handling, allowing an attacker to deterministicall=
y set the flag via the URI username and alter the server's routing behavior=
for subsequent messages. Because the same buffer is shared with contact_bu= ilder(), the overflow also corrupts that function's data, and without a mem= ory sanitizer the adjacent globals are silently overwritten on every reques=
t containing a long username. This issue has been fixed in versions 3.6.6 a=
nd 4.0.0-rc1. 2026-08-04 9.1 CVE-2026-45537 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-45537 ] OpenSIPS--opensips OpenSIPS is a Session Initiation = Protocol (SIP) server implementation. In versions 4.0.0 and prior, processi=
ng a SIP message with a header name longer than 255 bytes causes a stack bu= ffer overflow when sip_to_json() is called in the routing script. Function = sip_to_json() (modules/sipmsgops/sipmsgops.c) copies SIP header names into =
a fixed 255-byte stack buffer without bounds checking, performing a memcpy =
of the full header-name length even though the SIP parser imposes no such l= imit (a header name can be roughly 65000 bytes). As a result, when a routin=
g script calls sip_to_json(), a SIP message with a header name longer than = 255 bytes triggers a stack buffer overflow in which both the length and con= tent of the overwrite are attacker-controlled, corrupting the saved frame p= ointer and return address. A single unauthenticated UDP packet to the SIP p= ort (5060) can crash the process or, on builds without stack protections, h= ijack the return address to achieve remote code execution. This affects dep= loyments whose routing script invokes sip_to_json(). This issue was not fix=
ed at the time of publication. 2026-08-04 9.8 CVE-2026-45538 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-45538 ] OpenSIPS--opensips OpenSIPS is a Se= ssion Initiation Protocol (SIP) server implementation. In versions prior to=
3.6.6 and 4.0.0-rc1, the TCP message framing layer parses the Content-Leng=
th header using unsigned int arithmetic with no overflow check. When an att= acker sends a Content-Length value that overflows unsigned int (e.g., 42949= 67296), the framing layer computes a wrapped-around value (e.g., 0) and spl= its the TCP stream at the wrong boundary, causing the body of the first SIP=
message to be processed as a separate message and enabling SIP message smu= ggling. Because Content-Length is parsed in the transport layer before auth= entication, an unauthenticated, network-based attacker can smuggle arbitrar=
y SIP messages over any TCP-based transport (proto_tcp, proto_tls, proto_ws=
, proto_wss) on any instance with TCP enabled, with no routing-script preco= nditions. This allows smuggled messages to bypass front-end SBC/proxy secur= ity policies, inherit the connection's authentication context, and evade ra=
te limiting. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1. 202= 6-08-04 7.5 CVE-2026-45103 [ https://www.cve.org/CVERecord?id=3DCVE-2026-45= 103 ] openwrt--luci OpenWrt luci-app-dockerman (LuCI master and openwrt-25.=
12 snapshots containing the ucode docker_rpc.uc RPC backend after the JS/uc= ode conversion) contains an OS command injection vulnerability. The package=
's read ACL grants broad ubus access to docker.* / docker.container.*, whic=
h exposes the docker.container.ttyd_start method even though it performs mu= tating operations. The run_ttyd handler builds a shell command from the req= uest-controlled id, cmd, and uid fields and passes it to system() without q= uoting or argv-style execution in the rpcd root context. An authenticated a= ttacker holding only the luci-app-dockerman read ACL can inject shell metac= haracters (e.g., in id) to execute arbitrary commands as root via an HTTP P= OST to /ubus. openwrt-24.10 and openwrt-23.05 do not contain this backend a=
nd are not affected; no patched version was known as of the advisory. 2026-= 08-03 8.8 CVE-2026-69096 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6909=
6 ] openwrt--luci OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb0038= 9dba2cdc5e779e0ffdd contains a path traversal vulnerability in the bmx7-inf=
o CGI script that allows unauthenticated attackers to read files outside th=
e configured runtimeDir. Attackers can supply directory traversal sequences=
in the query string to escape the intended directory and read sensitive fi= les accessible to the CGI process. 2026-08-03 7.5 CVE-2026-69095 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-69095 ] openyak--openyak OpenYak is a l= ocal-first agent runtime for reliable tool-using models, with a desktop wor= kspace built on top. Prior to version 1.1.3, the OpenYak desktop backend bi= nds an HTTP API to `127.0.0.1:<random port>` (commonly 19141) without serve= r-side Origin validation, loopback authentication, or Content-Type enforcem= ent, and with a wildcard CORS policy. Any webpage a user visits while OpenY=
ak is running can issue cross-origin requests to this local server - the br= owser acts as a proxy into loopback, bypassing OS-level network isolation. = Chained, this lets a malicious page execute arbitrary shell commands on the=
host (RCE) via the build agent with `permission_presets.bash=3Dtrue`, shut=
down the service, and exfiltrate chat history and account PII - with no us=
er interaction beyond opening the page. Version 1.1.3 patches the issue. 20= 26-08-07 9.6 CVE-2026-46409 [ https://www.cve.org/CVERecord?id=3DCVE-2026-4= 6409 ] OpenZeppelin--contracts-wizard OpenZeppelin Contracts Wizardis a web=
application to interactively build a contract out of components from OpenZ= eppelin Contracts. Versions prior to 0.10.9 generate a Hardhat test file (`= test/test.ts`) by interpolating user-supplied `opts.name` (ERC20/ERC721) an=
d `opts.uri` (ERC1155) directly into TypeScript string literals at `zip-har= dhat.ts:48` and `:50` without any JavaScript string escaping. No authentica= tion is required: an attacker crafts a URL such as `https[:]//wizard[.]open= zeppelin[.]com/#/erc20?name=3D");require("child_process").execSync("...");(=
"` and shares it with a developer. When the victim downloads the resulting = zip archive and runs `npx hardhat test`, the injected Node.js code executes=
with the developer's local OS privileges. Version 0.10.9 fixes the issue. = 2026-08-06 8.8 CVE-2026-48054 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -48054 ] Passionate Programmer Peter--WP Data Access Unauthenticated Cross = Site Scripting (XSS) in WP Data Access <=3D 5.5.79 versions. 2026-08-06 7.1=
CVE-2026-66663 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66663 ] Payme=
nt Gateway for Redsys & WooCommerce Lite--Payment Gateway for Redsys & WooC= ommerce Lite The Payment Gateway for Redsys & WooCommerce Lite WordPress pl= ugin before 7.0.2 does not verify the authenticity of incoming payment-prov= ider notifications for one of its payment methods before marking orders as = paid, allowing unauthenticated attackers to forge a payment-confirmation ca= llback and complete their own orders without paying. 2026-08-06 7.5 CVE-202= 6-12584 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12584 ] Payment Plugi=
ns for PayPal WooCommerce--Payment Plugins for PayPal WooCommerce The Payme=
nt Plugins for PayPal WooCommerce WordPress plugin before 2.0.20 does not h= ave proper authorization checks on a REST endpoint, allowing unauthenticate=
d users to bypass payments 2026-08-06 7.5 CVE-2026-13399 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-13399 ] perspective-dev--perspective Perspectiv=
e 5.0.0 contains a remote code execution vulnerability that allows unauthen= ticated attackers to execute arbitrary operating system commands by submitt= ing crafted expression strings to the PolarsVirtualServer backend, which pa= sses client-supplied input directly to Python's eval() with only __builtins= __=3D{} cleared. Attackers can exploit Python object attribute traversal th= rough the interpreter's loaded class list to reach subprocess.Popen via a T= ableValidateExprReq or TableMakeViewReq protobuf message, achieving arbitra=
ry command execution in the Perspective host process. 2026-08-04 8.8 CVE-20= 26-67195 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67195 ] perspective-= dev--perspective Perspective 5.0.0 contains a denial-of-service vulnerabili=
ty in the VirtualServer protocol dispatcher that allows unauthenticated rem= ote attackers to crash the server process by sending malformed or incomplet=
e protobuf messages. Attackers can send well-formed requests such as ViewTo= ArrowReq with no viewport set or MakeTableReq with no data field to trigger=
unwrap() calls on None values at nine distinct sites, causing the process =
to abort with SIGABRT. 2026-08-04 7.5 CVE-2026-67198 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-67198 ] perspective-dev--perspective Perspective 5.= 0.0 contains a path traversal vulnerability that allows unauthenticated rem= ote attackers to read arbitrary files from the server filesystem by includi=
ng literal ../ segments in HTTP request URL paths. Attackers can bypass the=
insufficient query-string-stripping sanitization to traverse outside the c= onfigured asset root directory and retrieve sensitive files such as system = credentials and application secrets, with results exposed cross-origin due =
to a wildcard Access-Control-Allow-Origin header set on all responses. 2026= -08-04 7.5 CVE-2026-67200 [ https://www.cve.org/CVERecord?id=3DCVE-2026-672=
00 ] pipeboard-co--meta-ads-mcp Meta Ads MCP is a Model Context Protocol (M= CP) server that lets AI assistants run Meta Ads. Prior to version 1.0.109, = `AuthInjectionMiddleware.dispatch()` at `http_auth_integration.py:272` unco= nditionally forwards unauthenticated Streamable HTTP requests to downstream=
MCP tool handlers without issuing a `401` response, allowing any network-r= eachable caller to invoke MCP tools without authentication. When no per-req= uest credential is present, tool handlers fall back to the `META_ACCESS_TOK= EN` environment variable, and when the downstream Meta Graph API call fails=
, `api.py:263-269` serialises the raw `httpx` request URL-including the ope= rator's `access_token` as a query parameter-into the JSON-RPC response body=
, delivering the credential to the unauthenticated caller. Version 1.0.109 = fixes the issue. 2026-08-07 9.1 CVE-2026-48039 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-48039 ] pluck-cms--Pluck CMS Pluck CMS's admin panel reli=
es solely on a Referer-header comparison (requestedByTheSameDomain() in dat= a/inc/functions.admin.php, gating every admin.php action) for CSRF protecti= on, with no per-request anti-CSRF token anywhere in the admin area. When a = request carries no Referer/Host information, the function's elseif branch r= eturns true, treating the request as same-origin. Because a cross-site atta= cker page can suppress the Referer header (e.g. via <meta name=3Dreferrer c= ontent=3Dno-referrer>), it can force an authenticated administrator's brows=
er to submit forged admin actions with no valid Referer, including creating=
pages with raw HTML (stored XSS via the rendered page) and installing PHP = modules/themes (remote code execution). 2026-08-05 9.6 CVE-2026-70376 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-70376 ] pluck-cms--Pluck CMS Pluck=
CMS through 4.7.21 restricts dangerous file uploads in its admin file-mana= gement feature using a fixed blacklist in data/inc/files.php ('.php','php3'= ,'php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4','.ph5','.= asp','.cgi','.phar'), checked against the last 4-5 characters of the filena= me. The blacklist omits the '.php8' extension. An authenticated administrat=
or can upload a file named e.g. shell.php8, which is stored unmodified and,=
on servers running PHP 8.x, is executed as PHP by the web server, resultin=
g in remote code execution. 2026-08-05 7.2 CVE-2026-54416 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-54416 ] Power Sofware--PowerISO A security fla=
w has been discovered in Power Sofware PowerISO 9.3.0.0. Affected by this i= ssue is some unknown functionality in the library C:\Windows\System32\drive= rs\scdemu.sys of the component Kernel Driver. The manipulation results in i= mproper privilege management. The attack is only possible with local access=
. The exploit has been released to the public and may be used for attacks. = The vendor was contacted early about this disclosure but did not respond in=
any way. 2026-08-07 7.8 CVE-2026-19189 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19189 ] Premium SEO--Premium SEO The Premium SEO WordPress plug=
in is malicious: it ships an unauthenticated backdoor that creates a hidden=
administrator account and, in some builds, also enables remote code execut= ion, server-side request forgery and arbitrary front-end script/content inj= ection, giving an unauthenticated attacker full control of the affected sit=
e. 2026-08-06 10 CVE-2026-14812 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-14812 ] Progress Software Corporation--MarkLogic Server An improper priv= ilege management vulnerability in the SQL, SPARQL, and Optic REST query int= erfaces of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an aut= henticated user with a low-privileged REST role to escalate privileges to a= dministrator. This enables execution of privileged operations and unauthori= zed data access. 2026-08-05 9.9 CVE-2026-7329 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-7329 ] Progress Software Corporation--MarkLogic Server An = improper verification of cryptographic signature vulnerability in the SAML = authentication module of Progress MarkLogic Server before 11.3.6 and 12.0.3=
allows an unauthenticated remote attacker to bypass authentication and imp= ersonate any user, including administrators. This vulnerability affects dep= loyments with SAML single sign-on enabled. 2026-08-05 9.1 CVE-2026-7557 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-7557 ] Progress Software Corpora= tion--MarkLogic Server An improper privilege management vulnerability in th=
e REST API document patch operation of Progress MarkLogic Server before 11.= 3.6 and 12.0.3 allows an authenticated user with a low-privileged REST role=
to escalate privileges and execute privileged operations against the Secur= ity database. 2026-08-05 9.9 CVE-2026-8709 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-8709 ] Progress Software Corporation--MarkLogic Server An HTT=
P request smuggling vulnerability in the HTTP App Server of Progress MarkLo= gic Server before 11.3.6 and 12.0.3 allows a remote attacker to bypass auth= entication and authorization checks, hijack a legitimate user's session, or=
capture credentials. The vulnerability occurs when a crafted HTTP request = containing both Content-Length and Transfer-Encoding headers causes a rever=
se proxy and MarkLogic Server to interpret request boundaries differently. = 2026-08-05 9.1 CVE-2026-9190 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 9190 ] Progress Software Corporation--MarkLogic Server An authentication by= pass vulnerability in the ODBC App Server of Progress MarkLogic Server befo=
re 11.3.6 and 12.0.3 allows an unauthenticated remote attacker to bypass pa= ssword verification and execute queries with the privileges of any named us=
er known to the server, including administrators. 2026-08-05 9.8 CVE-2026-9= 192 [ https://www.cve.org/CVERecord?id=3DCVE-2026-9192 ] Progress Software = Corporation--MarkLogic Server An improper privilege management vulnerabilit=
y in the Hadoop integration of Progress MarkLogic Server before 11.3.6 and = 12.0.3 allows an authenticated user with a low-privileged Hadoop role to es= calate privileges and execute privileged operations against the Security da= tabase. 2026-08-05 9.9 CVE-2026-9193 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-9193 ] Progress Software Corporation--MarkLogic Server A cross-site=
scripting vulnerability in the Query Console of Progress MarkLogic Server = before 11.3.6 and 12.0.3 allows a remote attacker who lures an authenticate=
d administrator to a crafted URL to execute arbitrary JavaScript in the adm= inistrator's browser session, capture credentials, and perform privileged a= ctions on the administrator's behalf. 2026-08-05 9.3 CVE-2026-9195 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-9195 ] Progress Software Corporation-= -MarkLogic Server An improper privilege management vulnerability in the RES=
T API document processing pipeline of Progress MarkLogic Server before 11.3=
.6 and 12.0.3 allows an authenticated user with an administrative REST role=
to escalate privileges. This can result in unauthorized disclosure of sens= itive server-side data when it is accessed by a higher-privileged user. 202= 6-08-05 8.1 CVE-2026-7327 [ https://www.cve.org/CVERecord?id=3DCVE-2026-732=
7 ] Progress Software Corporation--MarkLogic Server A server-side request f= orgery vulnerability in Progress MarkLogic Server before 11.3.6 and 12.0.3 = allows an authenticated user with low-privileged roles to bypass protection=
s for cloud instance metadata endpoints. Successful exploitation can disclo=
se cloud credentials and compromise cloud resources accessible to the host = instance. 2026-08-05 8.5 CVE-2026-9203 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-9203 ] Progress Software Corporation--MarkLogic Server A cross-= site request forgery vulnerability in the Admin UI of Progress MarkLogic Se= rver before 11.3.6 and 12.0.3 allows a remote attacker who lures an authent= icated administrator to a malicious web page to perform administrative acti= ons on the administrator's behalf. This can result in unauthorized changes =
to security configuration. 2026-08-05 7.5 CVE-2026-7326 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-7326 ] Property Hive--Houzez Property Feed Unaut= henticated Cross Site Scripting (XSS) in Houzez Property Feed <=3D 2.5.48 v= ersions. 2026-08-06 7.1 CVE-2026-65560 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-65560 ] Puwell Technology Inc.--IP Camera Puwell IP Camera firm= ware versions 2.x through 4.x contains an authentication bypass vulnerabili=
ty that allows unauthenticated attackers to access device functions by send= ing protocol-conforming packets over TCP port 23456 without credentials. At= tackers can exploit the unvalidated Session field in the proprietary contro=
l protocol header to access live video streams, control pan and tilt motors=
, activate audio functions, and remotely restart the device. 2026-08-04 9.8=
CVE-2026-61514 [ https://www.cve.org/CVERecord?id=3DCVE-2026-61514 ] Puwel=
l Technology Inc.--IP Camera Puwell IP Camera firmware versions 2.x through=
4.x contains an unauthenticated command injection vulnerability that allow=
s remote attackers to execute arbitrary operating system commands by sendin=
g a crafted JSON payload to the DebugShell interface exposed on TCP port 34= 567. Attackers can exploit the lack of authentication and input sanitizatio=
n in the binary protocol service to pass arbitrary commands directly to the=
underlying operating system, achieving root-level code execution and compl= ete device compromise. 2026-08-04 9.8 CVE-2026-61515 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-61515 ] QODE--Qode Tours Unauthenticated SQL Inject= ion in Qode Tours <=3D 3.1.3.1 versions. 2026-08-06 9.3 CVE-2026-65546 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-65546 ] qstudio--Export User Data=
Subscriber PHP Object Injection in Export User Data <=3D 2.2.6 versions. 2= 026-08-06 9.8 CVE-2026-65552 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 65552 ] Qualcomm, Inc.--Snapdragon Memory Corruption when processing Device=
Capability Extended attributes in certain NAN Service Discovery Frames wit=
h invalid length values. 2026-08-04 9.6 CVE-2026-25289 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-25289 ] Qualcomm, Inc.--Snapdragon Cryptographic = Issue while processing registration requests with malformed or missing auth= entication parameters. 2026-08-04 8.1 CVE-2026-24079 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-24079 ] Qualcomm, Inc.--Snapdragon Memory corruptio=
n while processing a packet with a size close to the maximum allowed value.=
2026-08-04 7.8 CVE-2026-21366 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-21366 ] Qualcomm, Inc.--Snapdragon Memory Corruption when handling malfor= med request parameters in the fingerprint TA. 2026-08-04 7.8 CVE-2026-24080=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-24080 ] Qualcomm, Inc.--Snap= dragon Memory Corruption while processing IOCTL device driver requests with=
invalid arguments. 2026-08-04 7.8 CVE-2026-24083 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-24083 ] Qualcomm, Inc.--Snapdragon Weak configuration = when UE does not verify the consistency of its additional security capabili= ties with the replayed capabilities. 2026-08-04 7.5 CVE-2026-24084 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-24084 ] Qualcomm, Inc.--Snapdragon Tr= ansient DOS when processing a short target wake time channel usage response=
frame with insufficient packet size. 2026-08-04 7.4 CVE-2026-25288 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-25288 ] Qualcomm, Inc.--Snapdragon M= emory Corruption when processing untrusted user input in the fastboot comma=
nd handler for audio framework configuration. 2026-08-04 7.6 CVE-2026-25292=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-25292 ] raghav993--toner-man= agement toner-management's admin state-changing handlers (add.php, edit.php=
, delete.php under admin/toners, admin/toner-brands, admin/printers, and re= lated admin subdirectories) executed INSERT/UPDATE/DELETE database operatio=
ns with no authentication or authorization check, while access control was = enforced only in listing views. An unauthenticated remote attacker could in= voke these handlers directly to create, modify, or destroy application data=
. The vendor has since merged a fix requiring an authenticated admin sessio=
n before any such handler proceeds. 2026-08-05 8.2 CVE-2026-71252 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-71252 ] Rajat Varlani--Super Socialize=
r Unauthenticated Broken Authentication in Super Socializer <=3D 7.14.5 ver= sions. 2026-08-06 8.8 CVE-2026-65542 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-65542 ] Rajat Varlani--Super Socializer Unauthenticated Cross Site = Scripting (XSS) in Super Socializer <=3D 7.14.5 versions. 2026-08-06 7.1 CV= E-2026-65544 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65544 ] rancher-= -rancher Rancher issues long-lived registration tokens to authenticate node=
s and agents joining a downstream cluster. These tokens were stored and exp= osed in plaintext with no expiration, so a malicious user could obtain one = either through the Rancher API, etcd, stored automation, or direct file acc= ess on a node, and could use it at any time to register a rogue node into t=
he cluster. 2026-08-05 8.8 CVE-2026-55997 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-55997 ] Rank Math SEO--Rank Math SEO Unauthenticated Cross Sit=
e Scripting (XSS) in Rank Math SEO <=3D 1.0.274.1 versions. 2026-08-06 7.1 = CVE-2026-66702 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66702 ] Razer-= -RzUpdateService A weakness has been identified in Razer RzUpdateService 1.= 10.14.0. Affected by this vulnerability is an unknown functionality of the = file C:\Program Files (x86)\Razer\RzUpdateEngineService\RzUpdateService.exe=
of the component Named Pipe Handler. Executing a manipulation of the argum= ent lpThreadParameter can lead to improper privilege management. The attack=
requires local access. The exploit has been made available to the public a=
nd could be used for attacks. The vendor was contacted early about this dis= closure. 2026-08-03 7.8 CVE-2026-18606 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18606 ] rclone--rclone rclone is a command-line program to sync=
files and directories to and from different cloud storage providers. Prior=
to v1.75.0, rclone interpolates remote SFTP paths into PowerShell hash com= mands in backend/sftp/sftp.go, and quoteOrEscapeShellPath escapes only ASCI=
I apostrophe even though PowerShell treats U+2018, U+2019, U+201A, and U+20=
1B as single-quote delimiters, allowing an attacker-controlled filename to = terminate the intended path literal and append PowerShell statements that e= xecute as the victim SSH account when server-side hashing is invoked. This = issue is fixed in v1.75.0. 2026-08-05 8 CVE-2026-71312 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-71312 ] realmag777--TableOn WordPress Posts Table=
Filterable The TableOn - WordPress Posts Table Filterable plugin for WordP= ress is vulnerable to blind SQL Injection via the `filter_data[comment_coun= t]` parameter of the public `tableon_get_table_data` AJAX action in all ver= sions up to, and including, 1.0.5.1. This is due to insufficient escaping o=
n the user-supplied parameter and lack of sufficient preparation on the exi= sting SQL query - the value is split on `:` and both halves are interpolate=
d directly into a `posts_where` SQL clause without `intval()` casting or `$= wpdb->prepare()`. This makes it possible for unauthenticated attackers to a= ppend additional SQL queries into the already-existing query that can be us=
ed to extract sensitive information from the database (researcher demonstra= ted extraction of database(), wp_users.user_login, and wp_users.user_pass).=
2026-08-05 7.5 CVE-2026-18881 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-18881 ] Red Hat--Multicluster Engine for Kubernetes A flaw was found in t=
he Multicluster Engine for Kubernetes ClusterCurator controller. A tenant a= dministrator with namespace-scoped privileges can exploit this vulnerabilit=
y by creating a namespaced ClusterCurator. This action inadvertently grants=
the tenant administrator the ability to mint a token for a ServiceAccount = with cluster-wide administrative authority. This leads to a privilege escal= ation, allowing the tenant administrator to gain full control over the clus= ter. 2026-08-05 9.1 CVE-2026-10059 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-10059 ] Red Hat--Red Hat Advanced Cluster Management for Kubernetes 2=
A flaw was found in the Application Subscription controller (multicluster-= operators-subscription) of Red Hat Advanced Cluster Management for Kubernet=
es (ACM). A user with namespace-scoped "edit" privileges in an ACM hub name= space can create a Channel resource pointing to a Helm repository they cont= rol and a Subscription resource referencing it. The app-subscription contro= ller fetches and applies the Helm chart contents with its own elevated auth= ority, without verifying whether the subscription creator holds the "open-c= luster-management:subscription-admin" role and without restricting applied = resources to the subscription namespace. This allows the attacker to includ=
e cluster-scoped resources in the Helm chart, such as a ClusterRoleBinding = granting the attacker's ServiceAccount the "cluster-admin" ClusterRole. Suc= cessful exploitation results in full cluster-admin privilege escalation. Th=
is contradicts the ACM documentation which states that non-subscription-adm=
in users should have resources deployed into the subscription namespace onl=
y. 2026-08-05 9.9 CVE-2026-10090 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-10090 ] Red Hat--Red Hat build of Keycloak 26.4 A flaw was found in Key= cloak's Dynamic Client Registration (DCR) security policy management. The "= Allowed Protocol Mapper Types" policy, which restricts which types of data = mappers a client can use, fails to re-validate the mapper type during a cli= ent update if the mapper's configuration remains unchanged. An attacker wit=
h client registration privileges can exploit this by first registering an a= llowed mapper type with a malicious configuration and then swapping it for =
a restricted, high-privilege mapper type (such as one that hardcodes admini= strative roles). This allows the attacker to gain full administrative acces=
s to the Keycloak realm. 2026-08-05 8.8 CVE-2026-15572 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-15572 ] Red Hat--Red Hat build of Keycloak 26.4 A=
flaw was found in Keycloak's Authorization Services. The component respons= ible for matching request paths to security policies (PathMatcher) does not=
properly normalize URIs before comparison. By adding extra characters like=
a trailing slash or matrix parameters to a URL, an attacker can trick the = system into applying a less restrictive security policy than intended. This=
allows an authenticated user to access administrative or restricted areas = they should not have permission to see. 2026-08-05 8.1 CVE-2026-15573 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-15573 ] Red Hat--Red Hat build of = Keycloak 26.4 A flaw was found in the Dynamic Client Registration (DCR) com= ponent of Keycloak, an identity and access management solution. The default=
DCR policy fails to properly validate the claim path for User Property map= pers, allowing them to write values to sensitive internal claim locations. =
An attacker with a standard user account and a limited Initial Access Token=
can exploit this to forge administrative roles in their access token. This=
allows the attacker to take over other clients, steal confidential secrets=
, and potentially gain full administrative control over the realm. 2026-08-=
05 8.1 CVE-2026-16102 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16102 ]=
Red Hat--Red Hat build of Keycloak 26.4 A flaw was found in the SAML broke=
r component of Keycloak, which is used to manage identity federation and us=
er authentication. The issue occurs because the IdP-initiated Single Sign-O=
n endpoint fails to check if a provider is restricted to account linking on= ly. This allows an attacker with control over a linked upstream identity to=
bypass login restrictions and gain full access to a local user account. 20= 26-08-05 7.4 CVE-2026-16442 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1= 6442 ] Red Hat--Red Hat build of Keycloak 26.4 A flaw was found in the SAML=
metadata import functionality of the keycloak-services component, which is=
the core engine for identity brokering in Red Hat Build of Keycloak. When = importing identity provider metadata that lacks specific usage attributes f=
or keys, the system incorrectly disables signature validation for SAML resp= onses even if a signing certificate is provided. This issue allows an unaut= henticated attacker to forge a SAML response and gain unauthorized access t=
o a user account by knowing their external identifier. 2026-08-05 7.4 CVE-2= 026-16443 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16443 ] Red Hat--Re=
d Hat Enterprise Linux 10 A flaw was found in dracut. The die() error-handl= ing function writes its message into a shell script under the initramfs eme= rgency-hook directory without properly shell-quoting it. When the message c= ontains data derived from the DHCP ROOT_PATH option, an attacker on the adj= acent network who controls a rogue DHCP server can inject a command-substit= ution sequence that executes as root the next time dracut sources its emerg= ency hook scripts during standard boot-failure handling. 2026-08-07 7.5 CVE= -2026-15816 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15816 ] Red Hat--= Red Hat Enterprise Linux 10 A flaw was found in the GStreamer gst-plugins-g= ood package. The rtph264depay and rtph265depay RTP depayloader elements do = not enforce a maximum size limit on the reassembly buffer used during fragm= ented RTP packet processing. A remote, unauthenticated attacker can send a = continuous stream of RTP fragments without ever transmitting an end-of-frag= ment marker, causing the reassembly buffer to grow without bound until proc= ess memory is exhausted. This results in a denial of service through proces=
s termination. 2026-08-06 7.5 CVE-2026-18649 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-18649 ] Red Hat--Red Hat Enterprise Linux 10 A flaw was fou=
nd in udisks2. A local attacker with an active console session can exploit = insufficient authorization checking on the 'as-user' option in the org.free= desktop.UDisks2.Filesystem.Mount() D-Bus method. This allows the attacker t=
o spoof the 'as-user' parameter, mounting filesystems on behalf of arbitrar=
y users, including privileged accounts. This can lead to local privilege es= calation through mount point injection and manipulation of the mount namesp= ace visible to privileged users. 2026-08-06 7.8 CVE-2026-7867 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-7867 ] Red Hat--Red Hat Enterprise Linux 6=
A heap-based buffer overflow vulnerability exists in the GIMP DDS (DirectD= raw Surface) file parser. When a crafted DDS file declares a D3D9 pixel for= mat but sets a lower bits-per-pixel (bpp) value in the header, the loader a= llocates an undersized heap buffer. Subsequent pixel data consumption at th=
e real format's stride causes a write past the heap buffer boundary, leadin=
g to heap metadata corruption and potential code execution. 2026-08-08 7.8 = CVE-2026-42170 [ https://www.cve.org/CVERecord?id=3DCVE-2026-42170 ] Red Ha= t--Red Hat Enterprise Linux 9 A heap-buffer-overflow vulnerability exists i=
n the APNG (Animated PNG) file loader of GIMP. This flaw occurs when the `f= cTL` width exceeds the `IHDR` width, leading to pixel data being written pa=
st the end of a heap allocation. Additionally, a heap-based buffer overflow=
exists in the DDS plug-in due to a BPP mismatch in the `load_layer()` func= tion. Both vulnerabilities can be triggered by opening a specially crafted = image file, potentially leading to code execution. 2026-08-04 7.3 CVE-2026-= 42169 [ https://www.cve.org/CVERecord?id=3DCVE-2026-42169 ] Rongzhitong--Vi= sual Integrated Command and Dispatch Platform A vulnerability was detected =
in Rongzhitong Visual Integrated Command and Dispatch Platform up to 202606= 17. Impacted is an unknown function of the file /dm/dispatch/userinfo/uploa=
d. Performing a manipulation of the argument File results in unrestricted u= pload. It is possible to initiate the attack remotely. The exploit is now p= ublic and may be used. The vendor was contacted early about this disclosure=
but did not respond in any way. 2026-08-05 7.3 CVE-2026-18969 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-18969 ] Rongzhitong--Visual Integrated Co= mmand and Dispatch Platform A flaw has been found in Rongzhitong Visual Int= egrated Command and Dispatch Platform up to 20260617. The affected element =
is an unknown function of the file /dm/dispatch/user/findAll. Executing a m= anipulation of the argument Name can lead to sql injection. It is possible =
to launch the attack remotely. The exploit has been published and may be us= ed. The vendor was contacted early about this disclosure but did not respon=
d in any way. 2026-08-05 7.3 CVE-2026-18970 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-18970 ] rxi--microtar microtar's mtar_write_file_header() an=
d mtar_write_dir_header() functions (src/microtar.c) copy a caller-supplied=
entry name into the 100-byte `name` field of a stack-allocated mtar_header=
_t via strcpy(h.name, name), with no check that strlen(name) is less than 1=
00 before the copy. Any application that calls these functions with an exte= rnally-influenced filename longer than 99 characters (e.g. when archiving u= ser-supplied or attacker-controlled filenames) triggers a stack buffer over= flow. 2026-08-05 9.8 CVE-2026-71267 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-71267 ] saadiqbal--WPFormify Stripe Payments with Form and Checkout = The WPFormify - Stripe Payments with Form and Checkout plugin for WordPress=
is vulnerable to unauthorized modification and deletion of Stripe payment = credentials in all versions up to, and including, 1.1.1. This is due to mis= sing capability checks and nonce verification on the `wpf_stripe_callback_s= uccess()` and `wpf_stripe_disconnect()` functions, both hooked to `admin_in= it`. The `admin_init` hook fires on `admin-post.php` which is accessible wi= thout authentication. This makes it possible for unauthenticated attackers =
to overwrite the site's Stripe API credentials with attacker-controlled val= ues (redirecting payments to the attacker's Stripe account) or disconnect t=
he Stripe integration entirely by deleting the stored credentials. 2026-08-=
05 8.2 CVE-2026-6627 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6627 ] S= angfor--Operation and Maintenance Security Management System A vulnerabilit=
y was determined in Sangfor Operation and Maintenance Security Management S= ystem up to 3.0.13. Affected by this vulnerability is the function com.sbr.= fort.foreignDP.DpLoginController of the file /fort/portal_login of the comp= onent Login Endpoint. This manipulation causes os command injection. The at= tack can be initiated remotely. The exploit has been publicly disclosed and=
may be utilized. The vendor was contacted early about this disclosure but = did not respond in any way. 2026-08-03 7.3 CVE-2026-18641 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-18641 ] Scott Paterson--Easy PayPal Buy Now Bu= tton Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Butt=
on <=3D 2.0.4 versions. 2026-08-06 7.1 CVE-2026-65517 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-65517 ] Scripta--eScriptorium Authorization bypass=
in the Line, LineTranscription, VirtualCollection, tag and process API end= points in Scripta/eScriptorium through 26.04.1 allows a remote authenticate=
d user to read, modify and delete other users' transcription content via pr= imary keys supplied in the request body, which are queried against the glob=
al model manager instead of the request-scoped queryset 2026-08-06 8.8 CVE-= 2026-18258 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18258 ] Scripta--e= Scriptorium Server-side request forgery in the METS and IIIF import URI han= dling in Scripta eScriptorium through 26.04.1 allows a remote authenticated=
user to make the server issue arbitrary HTTP requests to internal hosts, i= ncluding the cloud instance metadata service, via the mets_uri or iiif_uri = parameter of POST /api/documents/{pk}/imports/, because the IMPORT_ALLOWED_= DOMAINS setting defaults to '*' and no address filtering, redirect cap or t= imeout is applied 2026-08-06 8.5 CVE-2026-18359 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-18359 ] Scripta--eScriptorium Missing authorization in t=
he OcrModelRight create and delete views in Scripta eScriptorium through 26= .04.1 allows a remote authenticated user to grant themselves access to anot= her user's private OCR model and to revoke any user's OCR model access via =
a POST request, because the ownership check is placed in get_context_data()=
and therefore runs only on the GET rendering path 2026-08-06 7.1 CVE-2026-= 18277 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18277 ] SecureAge--Catc= hPulse An improper access control vulnerability in=C2=A0CatchPulse=C2=A0cou=
ld allow a non-administrative local-attacker to connect to an unrestricted = kernel filter communication port and bypass=C2=A0CatchPulse's=C2=A0security=
policy enforcement. 2026-08-06 8.4 CVE-2026-55978 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-55978 ] SEO Squirrly--SEO Plugin by Squirrly SEO Unau= thenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SEO <=3D 1= 4.2.0 versions. 2026-08-06 7.1 CVE-2026-66664 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-66664 ] sequelize--sequelize Sequelize is a Node.js ORM to= ol. Prior to 6.37.4, SQL injection is possible with strings only if dialect=
is set to oracle. The escape function defined in sql-string.js does not es= cape quotes if the value starts with TO_TIMESTAMP or TO_DATE. In the Oracle=
dialect, when val is a string and starts with TO_TIMESTAMP or TO_DATE, esc= ape returns val directly instead of replacing single quotes. An attacker ca=
n inject arbitrary SQL expressions through an application value that reache=
s this escape path. This issue is fixed in version 6.37.4. 2026-08-03 9.8 C= VE-2026-69240 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69240 ] Sergey-= -AIWU Unauthenticated Privilege Escalation in AIWU <=3D 1.5.6 versions. 202= 6-08-06 9.8 CVE-2026-65507 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65= 507 ] sh1zen--Multi Uploader for Gravity Forms The Multi Uploader for Gravi=
ty Forms plugin for WordPress is vulnerable to unauthorized arbitrary media=
deletion in all versions up to, and including, 1.1.8. This is due to missi=
ng capability checks in the `plupload_ajax_delete_file()` function, which i=
s registered via `wp_ajax_nopriv_gfmu_delete_file`. The nonce intended for = CSRF protection is exposed on any public-facing page containing a multi-upl= oader form field via the `GFMU_options` JavaScript object. This makes it po= ssible for unauthenticated attackers to permanently delete any WordPress me= dia attachment by supplying its attachment ID, potentially leading to compl= ete media library destruction. 2026-08-05 9.1 CVE-2026-5581 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-5581 ] Shabti Kaplan--Frontend Admin by Dyna= miApps Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps=
<=3D 3.29.10 versions. 2026-08-06 9.8 CVE-2026-66662 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-66662 ] Shabti Kaplan--Frontend Admin by DynamiApp=
s Subscriber Broken Access Control in Frontend Admin by DynamiApps <=3D 3.2= 9.10 versions. 2026-08-06 7.1 CVE-2026-66470 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-66470 ] Shandong Hoteam--PDM Product Data Management System=
A vulnerability has been found in Shandong Hoteam PDM Product Data Managem= ent System up to 8.3.10. The impacted element is the function GetStoredClas= sByFilter of the file /Base/BaseService.asmx/DataService. The manipulation =
of the argument FilterString leads to sql injection. Remote exploitation of=
the attack is possible. The exploit has been disclosed to the public and m=
ay be used. The vendor was contacted early about this disclosure but did no=
t respond in any way. 2026-08-05 7.3 CVE-2026-18854 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-18854 ] Shenzhen Aitemi--M300 Wi-Fi Repeater A secur= ity flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repeater r0-ea78= 90a. Impacted is the function sprintf of the file /protocol.csp?fname=3Dnet= &opt=3Dsmacfilter_conf&function=3Dset&act=3Dadd&name=3Dtest&enable=3D1. Per= forming a manipulation of the argument enable/name/mac results in command i= njection. The attack may be initiated remotely. The exploit has been releas=
ed to the public and may be used for attacks. 2026-08-09 9.8 CVE-2026-19348=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-19348 ] Shibby--Tomato A vul= nerability was determined in Shibby Tomato 1.28.0000. Affected by this vuln= erability is the function new_qoslimit_stop of the file /tmp/qoslimittc_sto= p.sh. Executing a manipulation of the argument wan_iface can lead to os com= mand injection. The attack can be launched remotely. The exploit has been p= ublicly disclosed and may be utilized. This project is superseded by FreshT= omato. 2026-08-06 7.2 CVE-2026-19034 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-19034 ] Shibby--Tomato A vulnerability was identified in Shibby Tom= ato 1.28.0000. Affected by this issue is the function new_qoslimit_start of=
the file /etc/qoslimit. The manipulation of the argument new_qoslimit_enab=
le leads to os command injection. The attack may be initiated remotely. The=
exploit is publicly available and might be used. This project is supersede=
d by FreshTomato. 2026-08-06 7.2 CVE-2026-19035 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-19035 ] Shibby--Tomato A security flaw has been discover=
ed in Shibby Tomato 1.28.0000. This affects the function sub_40F88C of the = file /tmp/ppp/wanoptions. The manipulation of the argument ppp_custom resul=
ts in os command injection. The attack may be launched remotely. The exploi=
t has been released to the public and may be used for attacks. This project=
is superseded by FreshTomato. 2026-08-06 7.2 CVE-2026-19036 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-19036 ] siyuan-note--siyuan SiYuan versions=
before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchA= ssetContent endpoint reachable by unauthenticated users and publish RoleRea= der tokens. Attackers can execute arbitrary SQL on the read-write asset-con= tent database via unescaped method parameters and REGEXP clauses to read, m= odify, or delete cross-notebook data. 2026-08-03 10 CVE-2026-69083 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-69083 ] siyuan-note--siyuan SiYuan ve= rsions <=3D v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which = passes a client-supplied SQL statement verbatim to the main read-write siyu= an.db handle with no single-statement, read-only, or admin restrictions. Th=
e endpoint is gated only by CheckAuth, making it reachable by the publish R= oleReader token and by anonymous users when publish authentication is disab= led. Because the underlying driver executes stacked statements, an attacker=
can read and modify content across all opened cleartext notebooks (encrypt=
ed per-box notebooks are excluded). Fixed in v3.7.3. 2026-08-03 10 CVE-2026= -69084 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69084 ] siyuan-note--s= iyuan SiYuan before v3.7.3 contains a SQL injection vulnerability in the /a= pi/filetree/searchDocs endpoint, where the caller-supplied keyword paramete=
r is concatenated directly into SQL statements with no escaping or paramete=
r binding. The endpoint is reachable by a publish RoleReader token, or unau= thenticated when publish mode is enabled with Publish.Auth.Enable set to fa= lse. Because the statement executes on a read-write SQLite handle via a dri= ver that supports stacked (semicolon-separated) statements, an attacker can=
read and modify database content across all cleartext (non-encrypted) note= books on the instance. 2026-08-03 10 CVE-2026-69085 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-69085 ] siyuan-note--siyuan SiYuan versions before v= 3.7.3 contain an authentication bypass vulnerability in publish mode where = content-returning endpoints getHeadingChildrenDOM, getHeading*Transaction, = and getBacklinkDoc perform no password check despite protecting the primary=
getDoc endpoint. Anonymous attackers can retrieve full content of password= -protected documents by obtaining internal block IDs from reader-accessible=
endpoints and calling unprotected content endpoints to bypass the password=
gate. 2026-08-03 8.6 CVE-2026-68584 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-68584 ] siyuan-note--siyuan SiYuan before v3.7.3 fails to apply pub= lish-access filters to the getBacklinkDoc and getBackmentionDoc content end= points (/api/ref/getBacklinkDoc and /api/ref/getBackmentionDoc). While the = corresponding backlink list endpoints filter publish-forbidden documents, t=
he content endpoints (gated only by CheckAuth) do not. A publish-mode reade=
r - including an anonymous reader when publish Basic Auth is disabled - can=
call these endpoints directly with a publish-forbidden document's ID to re= trieve its rendered DOM content and to determine whether the document refer= ences a given block (a reference-existence oracle). 2026-08-03 8.6 CVE-2026= -68586 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68586 ] siyuan-note--s= iyuan SiYuan versions before v3.7.3 contain an information disclosure vulne= rability in the getHeadingDeleteTransaction, getHeadingLevelTransaction, an=
d getHeadingInsertTransaction endpoints that return rendered block DOM with= out publish-access checks. Anonymous readers or publish RoleReader tokens c=
an supply a heading block ID to read full rendered content of publish-disab= led documents that should be restricted. 2026-08-03 8.6 CVE-2026-68587 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-68587 ] siyuan-note--siyuan SiYua=
n versions before v3.7.3 fail to validate the avID parameter on all code br= anches in attribute-view read endpoints, allowing attackers to construct tr= aversal paths that escape the storage directory. Authenticated users with R= oleReader permissions or anonymous clients when publish authentication is d= isabled can read JSON files outside the attribute-view directory to disclos=
e cross-scope database content. 2026-08-03 7.7 CVE-2026-69086 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-69086 ] socketio--socket.io Socket.IO enab= les bidirectional and low-latency communication for every platform. Prior t=
o 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO packet can make th=
e server wait for a large number of binary attachments and buffer them, whi=
ch can be exploited to make the server run out of memory. This vulnerabilit=
y is fixed in 4.2.7, 3.4.5, and 3.3.6. 2026-08-03 7.5 CVE-2026-69185 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-69185 ] Soflyy--Breakdance Missing = Authorization vulnerability in Soflyy Breakdance allows Exploiting Incorrec= tly Configured Access Control Security Levels. This issue affects Breakdanc=
e: from n/a before 2.7. 2026-08-06 7.5 CVE-2026-65551 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-65551 ] solutioned--Staff Training Unauthenticated=
Broken Access Control in Staff Training <=3D 1.0.7 versions. 2026-08-06 7.=
3 CVE-2026-65541 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65541 ] Soph= os--Sophos Endpoint for macOS A privilege escalation vulnerability allows l= ocal users to execute arbitrary code as root via Sophos Endpoint for macOS = older than version 2026.1.1 and Sophos Home for macOS older than version 10= .11.6. 2026-08-06 9.3 CVE-2026-18367 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-18367 ] SourceCodester--Computer Repair Shop Management System A se= curity vulnerability has been detected in SourceCodester Computer Repair Sh=
op Management System 1.0. Affected by this issue is some unknown functional= ity of the file /classes/Master.php?f=3Ddelete_product. Such manipulation o=
f the argument ID leads to sql injection. It is possible to launch the atta=
ck remotely. The exploit has been disclosed publicly and may be used. 2026-= 08-06 7.3 CVE-2026-19021 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1902=
1 ] SourceCodester--Photo Share Website A vulnerability was found in Source= Codester Photo Share Website 1.0. The impacted element is an unknown functi=
on of the file /social/ajax.php?action=3Dlogin. The manipulation of the arg= ument email results in sql injection. The attack can be launched remotely. = The exploit has been made public and could be used. 2026-08-07 7.3 CVE-2026= -19196 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19196 ] SourceCodester= --Photo Share Website A vulnerability was found in SourceCodester Photo Sha=
re Website 1.0. This affects an unknown function of the file /social/ajax.p= hp?action=3Dsignup. Performing a manipulation of the argument email results=
in sql injection. Remote exploitation of the attack is possible. The explo=
it has been made public and could be used. 2026-08-07 7.3 CVE-2026-19211 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-19211 ] SourceCodester--Simple = Doctors Appointment System A security flaw has been discovered in SourceCod= ester Simple Doctors Appointment System 1.0. This vulnerability affects unk= nown code of the file /admin/ajax.php?action=3Ddelete_appointment. The mani= pulation of the argument ID results in sql injection. The attack may be lau= nched remotely. The exploit has been released to the public and may be used=
for attacks. 2026-08-07 7.3 CVE-2026-19231 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-19231 ] Spacebar Server--Spacebar Server Spacebar Server bef= ore commit dcfd910 contains a missing authorization vulnerability that allo=
ws any authenticated attacker to add themselves to arbitrary group DM chann= els by sending a PUT request to the channels recipient endpoint without mem= bership verification. Attackers can exploit the unguarded PUT /channels/{ch= annel_id}/recipients/{user_id} handler to join private group DMs, read comp= lete message history, post messages as a participant, and force-add third-p= arty users without their consent. 2026-08-05 8.1 CVE-2026-70617 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-70617 ] StableBit--DrivePool A security = vulnerability has been detected in StableBit DrivePool 2.3.13.1687. This vu= lnerability affects unknown code of the file C:\Program Files\StableBit\Dri= vePool\DrivePool.Service.exe of the component DrivePoolService. Such manipu= lation leads to permission issues. The attack must be carried out locally. = The exploit has been disclosed publicly and may be used. 2026-08-07 7.8 CVE= -2026-19191 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19191 ] StableBit= --Scanner A weakness has been identified in StableBit Scanner 2.6.13.4088. = This affects an unknown part of the file C:\Program Files (x86)\StableBit\S= canner\Service\Scanner.Service.exe of the component ScannerService. This ma= nipulation causes permission issues. The attack is restricted to local exec= ution. The exploit has been made available to the public and could be used = for attacks. 2026-08-07 7.8 CVE-2026-19190 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-19190 ] statamic--cms Statamic is a Laravel and Git powered c= ontent management system (CMS). Prior to 5.74.1 and 6.24.0, when OAuth logi=
n was enabled with a provider that does not guarantee verified email addres= ses, an unauthenticated attacker could sign in as an existing user, potenti= ally including a super admin, without knowing that user's password, because=
the application matched OAuth identities to accounts by email address alon=
e. Exploitation requires OAuth to be explicitly enabled with such a provide=
r. This issue is fixed in versions 5.74.1 and 6.24.0. 2026-08-06 8.1 CVE-20= 26-64665 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64665 ] stellarwp--M= embership Plugin Kadence Memberships The Membership Plugin - Kadence Member= ships plugin for WordPress (formerly Restrict Content) is vulnerable to pas= sword reset link poisoning leading to account takeover in all versions up t=
o, and including, 4.0.0. This is due to the legacy lost-password handler rc= _process_lost_password_form() consuming the attacker-controlled rc_redirect=
POST parameter into two unvalidated sinks in legacy/includes/forms.php: wp= _redirect( esc_url( $_POST['rc_redirect'] ) . ... ) at line 243, and add_qu= ery_arg( array( 'key' =3D> $key, 'login' =3D> ... ), $_POST['rc_redirect'] =
) inside rc_send_password_reset_email() at line 306. The nonce required to = reach the handler is broadcast by the public [login_form] shortcode at line=
207 to any anonymous visitor. This makes it possible for unauthenticated a= ttackers to issue a password-reset request for any account (including admin= istrators) whose reset email body points the victim at an attacker-controll=
ed host carrying a valid reset key/login. When the victim clicks the link, = the reset key leaks to the attacker, who can replay it against the legitima=
te site to complete account takeover. 2026-08-05 9.3 CVE-2026-9273 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-9273 ] Stephan Muelle--libkcapi Memor=
y Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO = path can return an error before all submitted IOCBs are drained, allowing l= ater kernel writes into caller-owned output buffers. 2026-08-05 7.3 CVE-202= 6-71226 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71226 ] Stirling-Tool= s--Stirling-PDF Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (Conve= rtWebsiteToPDF.java) was not updated with the CustomHtmlSanitizer/SsrfProte= ctionService SSRF protections that were added to three sibling conversion e= ndpoints (html/pdf, file/pdf, markdown/pdf). The endpoint validates only th=
at the initial requested URL resolves to a public IP, then fetches the page=
's HTML server-side and hands it, unsanitized, to a WeasyPrint subprocess. = Embedded resource references in the fetched HTML (e.g. `<img src=3D"http://= 169.254.169.254/...">`) are fetched by WeasyPrint with no per-resource SSRF=
filtering, allowing an attacker-controlled page to cause the server to ret= rieve cloud metadata endpoints or internal network resources and leak their=
contents back into the generated PDF. 2026-08-05 8.6 CVE-2026-71270 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-71270 ] supsysticcom--Smart Popup b=
y Supsystic The Smart Popup by Supsystic plugin for WordPress is vulnerable=
to Privilege Escalation in all versions up to, and including, 1.12.0. This=
is due to a permission map collision in the `havePermissions()` function i=
n `classes/frame.php`, where `array_merge()` overwrites the popup module's = administrator-restricted method list with the base controller's value, sile= ntly removing `save` from protected actions; this is compounded by the subs= cription confirmation email embedding the same generic `pps_nonce` that the=
unauthenticated `wp_ajax_nopriv_save` endpoint accepts, and by the complet=
e absence of any server-side role allowlist in `createWpSubscriber()`. This=
makes it possible for unauthenticated attackers to submit a crafted POST r= equest to `admin-ajax.php` using a nonce obtained from a public subscriptio=
n confirmation email, setting `params[tpl][sub_wp_create_user_role]` to `ad= ministrator` via the exposed `popupControllerPps::save()` action, and then = triggering the stored confirmation flow to create a persistent WordPress Ad= ministrator account with attacker-chosen credentials. 2026-08-05 8.8 CVE-20= 26-18322 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18322 ] SUSE--NeuVec= tor NeuVector through 5.4.9 is can potentially leak information from manage=
r /network/graph API=C2=A0due to missing authentication and cached data con= taining sensitive information. 2026-08-05 7.3 CVE-2026-25703 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-25703 ] SUSE--Rancher A privilege escalatio=
n vulnerability exists in Rancher's impersonation middleware (pkg/auth/requ= ests/impersonate.go). An authenticated Rancher user with the default user g= lobal role can gain full administrative access to the Rancher control plane=
and transitively to all downstream clusters it manages. This issue affects=
Rancher: from 2.11.0 before 2.11.16, from 2.12.0 before 2.12.12, from 2.13=
.0 before 2.13.8, and from 2.14.0 before 2.14.2. 2026-08-05 9.1 CVE-2026-44= 945 [ https://www.cve.org/CVERecord?id=3DCVE-2026-44945 ] SUSE--Rancher Whe=
n API audit logging is enabled, the middleware reads the entire HTTP reques=
t body into memory without enforcing a size limit on login endpoints. Becau=
se the audit middleware is positioned earlier in the handler chain than Ran= cher's APIBodyLimitingHandler, the body-size cap (default 1 MiB) is bypasse=
d for requests that pass through the audit copyReqBody path. An unauthentic= ated attacker can send arbitrarily large request bodies to the public login=
endpoints, causing the Rancher Manager server process to allocate memory p= roportional to the supplied body size. With just a few concurrent connectio= ns, this can exhaust available memory and terminate the Rancher Manager pla=
ne process, making the Rancher API and UI unavailable and interrupting mana= gement of all downstream clusters. 2026-08-05 7.5 CVE-2026-59675 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-59675 ] Swiss Federal Office of Informa= tion Technology, Systems and Telecommunication--@oblique/cli @oblique/cli 1= 5.4.0 contains an OS command injection vulnerability in the project creatio=
n functionality. The CLI constructs shell commands through string concatena= tion and executes them with execSync(). A user-controlled project-name argu= ment is inserted into the shell command without proper neutralization, allo= wing shell metacharacters to execute additional operating-system commands w= hen the CLI is invoked with a crafted project name. 2026-08-05 7.8 CVE-2026= -16022 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16022 ] Syed Balkhi--N= extGEN Gallery Unauthenticated Cross Site Scripting (XSS) in NextGEN Galler=
y <=3D 4.2.3 versions. 2026-08-06 7.1 CVE-2026-28141 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-28141 ] Synology--Synology Assistant An incorrect d= efault permissions vulnerability in Synology Assistant before 7.0.7-50095 a= llows local users to read or write arbitrary files and conduct denial-of-se= rvice during installation. 2026-08-03 7.3 CVE-2026-4793 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-4793 ] syoyo--tinyobjloader-c tinyobjloader-c's = tinyobj_parse_and_index_mtl_file() (tinyobj_loader_c.h) reads each line of =
a .mtl material file into a fixed 4096-byte stack buffer `linebuf` via memc= py(linebuf, p, p_len), guarded only by `assert(p_len < 4095)`. Because asse= rt() compiles to a no-op under -DNDEBUG (standard for release builds), a cr= afted .mtl file containing a line (e.g. a "newmtl" material name) longer th=
an 4096 bytes overflows linebuf into the adjacent stack variable namebuf an=
d beyond, corrupting the stack of any application that loads attacker-suppl= ied 3D model/material files. The identical vulnerable pattern is duplicated=
in a second function in the same file. 2026-08-05 7.8 CVE-2026-71266 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-71266 ] TBTAK BLGEM Software Techn= ologies Research Institute--pardus-image-writer External control of file na=
me or path vulnerability in T=C3=83=C6=92=C3=85=E2=80=9CB=C3=83=E2=80=9E=C3= =82=C2=B0TAK B=C3=83=E2=80=9E=C3=82=C2=B0LGEM Software Technologies Researc=
h Institute pardus-image-writer allows Removing Important Client Functional= ity. This issue affects pardus-image-writer: before 1.0.4. 2026-08-04 7.1 C= VE-2026-18806 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18806 ] Telenia=
Software--TVox Telenia Software TVox 26.5.3 and prior 26.x versions, and 2= 4.9.21 and prior 24.x versions, contain an authentication bypass vulnerabil= ity in set_env.php where the redirectToLoginAdminIRequestHaveAccessToken() = function derives the current page name from PHP_SELF and skips authenticati=
on when the value matches 'login_admin.php'. Attackers can append '/login_a= dmin.php' to the path of any target PHP script to cause the authentication = check to pass and gain unauthenticated access to all PHP scripts under the = manager HTML directory. 2026-08-03 9.8 CVE-2026-64827 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-64827 ] Telenia Software--TVox Telenia Software TV=
ox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions, con= tain an OS command injection vulnerability in action_audio.php that allows = authenticated attackers to execute arbitrary operating system commands by p= assing an unsanitized pid parameter into an exec() call when the action par= ameter is set to checkProcess. Attackers can inject malicious OS commands t= hrough the pid request parameter to execute arbitrary commands with the pri= vileges of the apache user. 2026-08-03 7.2 CVE-2026-67608 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-67608 ] Telenia Software--TVox Telenia Softwar=
e TVox 26.5.3 and prior 26.x versions, and 24.9.21 and prior 24.x versions,=
contain a privilege escalation vulnerability that allows attackers with ac= cess to the apache account to execute arbitrary commands as root by exploit= ing an insecure sudoers configuration in /etc/sudoers.d/telenia. The config= uration grants the apache user NOPASSWD execution of /bin/nice, which can b=
e leveraged to invoke arbitrary commands, enabling full root-level command = execution without supplying a password. 2026-08-03 7.8 CVE-2026-67609 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-67609 ] Tenable, Inc.--Sensor Prox=
y A vulnerability in Tenable Sensor Proxy allows a remote attacker to execu=
te code with elevated privileges by inducing an operator to connect the sen= sor to an attacker-controlled host. 2026-08-03 9.6 CVE-2026-18667 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-18667 ] Tenda--CH22 A vulnerability wa=
s determined in Tenda CH22 1.0.0.1. This vulnerability affects the function=
formCertListInfo of the file /goform/CertListInfo. This manipulation of th=
e argument Name causes command injection. The attack can be initiated remot= ely. The exploit has been publicly disclosed and may be utilized. 2026-08-0=
9 8.8 CVE-2026-19346 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19346 ] = thebradleysanders--IOTSmartHome IOTSmartHome's gui/login.php checkCookie() = function builds an authentication query as SELECT * FROM users WHERE ID=3D'= <decoded lastLogin cookie>' after base64-decoding the client-supplied lastL= ogin cookie via safe_decode(), which performs URL-safe base64 decoding with=
no sanitization of the decoded value before it is concatenated into the SQ=
L string. An unauthenticated attacker can set a lastLogin cookie containing=
a base64-encoded SQL injection payload (e.g. base64("' OR '1'=3D'1")) to b= ypass authentication and, via UNION-based injection, extract arbitrary data=
including user credentials. 2026-08-05 9.8 CVE-2026-71231 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-71231 ] ThemeREX--Abelle Unauthenticated PHP = Object Injection in Abelle <=3D 1.22 versions. 2026-08-06 9.8 CVE-2026-6557=
3 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65573 ] themeruby--Easy Pos=
t Submission Frontend Posting, Guest Publishing & Submit Content for WordPr= ess The Easy Post Submission plugin for WordPress is vulnerable to unauthor= ized modification of data due to a missing capability check on the `create_= post()` function in all versions up to, and including, 2.3.0. This is due t=
o the `rbsm_submit_post` AJAX action being registered for unauthenticated u= sers via `wp_ajax_nopriv_rbsm_submit_post` without any authorization checks=
when a `postId` parameter is supplied. This makes it possible for unauthen= ticated attackers to modify the title, content, excerpt, categories, and ta=
gs of arbitrary posts, as well as change the post status to draft (effectiv= ely unpublishing them) via the 'postId' parameter. 2026-08-05 9.1 CVE-2026-= 4431 [ https://www.cve.org/CVERecord?id=3DCVE-2026-4431 ] themetechmount--T= rueBooker Appointment Booking and Scheduler System The TrueBooker - Appoint= ment Booking and Scheduler System plugin for WordPress is vulnerable to acc= ount takeover via improper password reset validation in all versions up to,=
and including, 1.2.3. This is due to the plugin not properly validating a = user's identity before resetting their password. This makes it possible for=
unauthenticated attackers to reset the password of arbitrary user accounts=
, including administrators, and gain access to those accounts. 2026-08-07 9=
.8 CVE-2026-14364 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14364 ] the= metechmount--TrueBooker Appointment Booking and Scheduler System The TrueBo= oker - Appointment Booking and Scheduler System plugin for WordPress is vul= nerable to authorization bypass in all versions up to, and including, 1.2.3=
. This is due to the plugin not properly verifying that a user is authorize=
d to perform an action. This makes it possible for unauthenticated attacker=
s to change the password of arbitrary user accounts, including administrato= rs, which can be leveraged to gain access to those accounts. 2026-08-07 9.8=
CVE-2026-14365 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14365 ] theot= herphil--imagecli imagecli's `scale <ratio>` pipeline operation (Scale::app= ly() in src/image_ops.rs) computes output width/height as (dimension as f32=
* ratio) as u32 with no upper-bound validation on the CLI-supplied ratio, = which is parsed via nom::number::complete::float with no range check. A lar=
ge ratio (e.g. 100000) causes an attempted allocation of hundreds of teraby= tes, aborting the process. Any application embedding imagecli as a library = and accepting user-controlled pipeline strings is remotely crashable with a=
single request. 2026-08-05 7.5 CVE-2026-70377 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-70377 ] theotherphil--imagecli imagecli's `carve <ratio>`=
pipeline operation (Carve::apply() in src/image_ops.rs) only asserts `rati=
o <=3D 1.0`, never validating that the ratio is positive. A negative ratio = (e.g. -5) causes the computed target width to saturate to 0 via Rust's defi= ned float-to-uint cast, which is then passed to imageproc::seam_carving::sh= rink_width - a function that panics when given a width below 2, crashing th=
e process. This shares the same missing-input-validation root cause as the = sibling `scale` finding in the same file but is an independently fixable, d= istinct code path. 2026-08-05 7.5 CVE-2026-70378 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-70378 ] thephpleague--commonmark league/commonmark is a=
PHP library for parsing and rendering CommonMark Markdown. From 0.6.0 unti=
l 2.9.0, specially crafted Markdown lines can cause the parser to have quad= ratic time complexity when converting, because several parsing paths repeat= edly rescan growing portions of a line to translate between character posit= ions and byte positions, and the Autolink extension can also copy and valid= ate the remaining line at every URL-like prefix, allowing an attacker who c=
an submit Markdown for conversion to consume disproportionate CPU time with=
a comparatively small request. This issue is fixed in 2.9.0. 2026-08-06 7.=
5 CVE-2026-71488 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71488 ] Ther=
mo Fisher--Applied Biosystems 3500/3500xL Series Data Collection Software T=
he affected Thermo Fisher Applied Biosystems Genetic Analyzers are=C2=A0vul= nerable because .fsa/.hid output files can be edited. An attacker could tam= per with these files, altering DNA data and resulting in inaccurate DNA tes=
t outcomes. 2026-08-05 8.4 CVE-2026-17583 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-17583 ] thiagoralves--OpenPLC_v3 OpenPLC Runtime v3's compile_= program() function (webserver/openplc.py) parses `(*FILE:path content*)` di= rectives from uploaded Structured Text (.st) program files and writes the r= eferenced content to `os.path.join('./core', file_path)` with no validation=
that file_path stays within the ./core directory. A crafted .st file conta= ining a directive such as `(*FILE:../../../etc/cron.d/x * * * * root <comma= nd>*)` writes attacker-controlled content to an arbitrary filesystem path, = enabling remote code execution (e.g. via cron or SSH authorized_keys). A pa= th-validation function, validate_file_path(), exists elsewhere in the codeb= ase (webserver/credentials.py) but is never invoked from compile_program(),=
leaving the sink unprotected. OpenPLC additionally ships with hardcoded de= fault credentials (openplc:openplc), lowering the practical bar for exploit= ation. 2026-08-05 9.9 CVE-2026-71268 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-71268 ] thomaspoignant--scim-patch `scim-patch`, a library to perfo=
rm SCIM patch, prior to version 0.9.1 performs prototype pollution when app= lying a SCIM PATCH operation whose `value` object contains a key like `"__p= roto__.someProp"`. After one such patch, `Object.prototype.someProp` is set=
process-wide, affecting every plain object in the Node process. Any servic=
e that calls `scimPatch()` on attacker-controlled JSON (i.e. any SCIM endpo= int accepting `PATCH` from an external IdP) is exploitable on a stock Node = runtime. Version 0.9.1 contains a patch. A workaround is available. Calling=
`Object.freeze(Object.prototype)` (and the same on `Array.prototype`, `Fun= ction.prototype`) at process startup neutralizes this class of bug - assign= ment to a frozen prototype becomes a silent no-op in sloppy mode or a `Type= Error` in strict mode. Node's `--frozen-intrinsics` flag does this for buil= t-ins automatically. 2026-08-07 9.1 CVE-2026-48170 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-48170 ] Thrive Themes Coupon--Thrive Architect Unauth= enticated Cross Site Scripting (XSS) in Thrive Architect <=3D 10.9.3.1 vers= ions. 2026-08-06 7.1 CVE-2026-66694 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-66694 ] timescale--timescaledb TimescaleDB through 2.29.1, fixed in = commit 517c13e, contains an out-of-bounds read in the Dictionary compressio=
n reverse row iterator (tsl/src/compression/algorithms/dictionary.c). The f= orward path validates the decoded index; the reverse path uses an assertion=
compiled out of release builds, leaving the 64-bit Simple8b index unvalida= ted and the read offset attacker-controlled. Attackers with DML access to a=
physical compressed relation can store a crafted datum and run a reverse-o= rder scan. With a pass-by-value column type the out-of-bounds Datum is retu= rned to the client as a normal column value, disclosing backend memory incl= uding the shared buffer pool, which SQL access control does not cover. 2026= -08-06 8.1 CVE-2026-70634 [ https://www.cve.org/CVERecord?id=3DCVE-2026-706=
34 ] timescale--timescaledb TimescaleDB through 2.29.1, fixed in commit 517= c13e, contains an out-of-bounds read vulnerability that allows authenticate=
d attackers to cause query-result integrity failures or backend crashes by = supplying a crafted Simple8b selector-11 value, which is stored in the sign=
ed int16 Arrow dictionary-index type and bypasses index validation checks i=
n bulk text dictionary decompression. Attackers with direct DML access to a=
non-frozen physical compressed hypertable relation can trigger an out-of-b= ounds read before the base of the live offsets array through the VectorAgg = single-text hashing strategy, resulting in incorrect aggregation output, ba= ckend SIGSEGV, or PostgreSQL crash recovery depending on build configuratio=
n. 2026-08-06 7.1 CVE-2026-70635 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-70635 ] TinyAGI--TinyAGI A weakness has been identified in TinyAGI 0.0.= 20. This issue affects the function collectFiles of the file packages/core/= src/response.ts of the component Message API Endpoint. This manipulation ca= uses file inclusion. The attack can be initiated remotely. The exploit has = been made available to the public and could be used for attacks. The projec=
t was informed of the problem early through an issue report but has not res= ponded yet. 2026-08-06 7.3 CVE-2026-19009 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-19009 ] TinyAGI--TinyAGI A security vulnerability has been det= ected in TinyAGI 0.0.20. Impacted is the function processMessage of the fil=
e packages/main/src/index.ts of the component Message API Endpoint. Such ma= nipulation leads to missing authorization. The attack can be launched remot= ely. The exploit has been disclosed publicly and may be used. The project w=
as informed of the problem early through an issue report but has not respon= ded yet. 2026-08-06 7.3 CVE-2026-19010 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19010 ] treeverse--lakeFS lakeFS is an open-source tool that tr= ansforms object storage into a Git-like repositories. Prior to version 1.81=
.1 of the open source edition and 1.84.0 of the enterprise edition, lakeFS = Web UI renders markdown files from repository objects without sanitizing th=
e resulting HTML. A user with write access to any repository branch can com= mit a `.md` object containing arbitrary HTML/JavaScript. Any other user who=
opens that object, or who navigates to a repository or directory containin=
g a malicious `README.md`, executes the attacker-supplied script in their o=
wn authenticated session. lakeFS fixes the issue in v1.81.1 and lakeFS Ente= rprise fixes the issue in in v1.84.0. Enterprise customers using older vers= ions can temporarily disable Markdown rendering by adding YAML to their con= fig. No workaround exists for OSS release. Users are advised to upgrade to = the latest version for both lakeFS and lakeFS-Enterprise. 2026-08-07 8.7 CV= E-2026-48026 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48026 ] Trilby M= edia--grav-plugin-scheduler-webhook Grav CMS's scheduler-webhook plugin con= tains an authentication bypass in the webhook token check. When the webhook=
feature is enabled but no webhookToken is configured, a compound condition=
al short-circuits and skips token validation, so an unauthenticated remote = attacker who can reach POST /scheduler/webhook can trigger the operator's a= lready-configured scheduled jobs by sending a single request. The primitive=
is triggering-existing-jobs, not attacker-chosen command execution: the at= tacker controls when the jobs run and which one runs (via ?job=3D), but doe=
s not control what the jobs do. Code execution follows only when the operat=
or has configured a job that shells out, and even then the attacker control=
s timing rather than payload. Not a default-install issue: reaching the end= point requires the separate scheduler-webhook GPM plugin to be installed, s= cheduler.modern.webhook.enabled to be true (default false), and no webhookT= oken to be configured; a stock Grav or Grav-Admin install exposes nothing h= ere. 2026-08-07 7.3 CVE-2026-11430 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-11430 ] Trippo--ResponsiveFilemanager A security flaw has been discov= ered in Trippo ResponsiveFilemanager up to 9.14.0. The impacted element is =
an unknown function of the file filemanager/dialog.php. The manipulation re= sults in unrestricted upload. The attack may be performed from remote. The = exploit has been released to the public and may be used for attacks. The ve= ndor was contacted early about this disclosure but did not respond in any w= ay. This vulnerability only affects products that are no longer supported b=
y the maintainer. 2026-08-04 7.3 CVE-2026-18788 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-18788 ] TUBITAK BILGEM Software Technologies Research In= stitute--eta-otp-lock Deserialization of untrusted data vulnerability in TU= BITAK BILGEM Software Technologies Research Institute eta-otp-lock allows O= bject Injection. This issue affects eta-otp-lock: before 1.0.4. 2026-08-03 = 7.8 CVE-2026-18642 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18642 ] ty= chesoftwares--Order Delivery Date for WooCommerce Shop manager Privilege Es= calation in Order Delivery Date for WooCommerce <=3D 4.6.0 versions. 2026-0= 8-06 7.2 CVE-2026-65559 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65559=
] typemill--typemill Typemill's login endpoint (POST /tm/login, Controller= WebAuth::login()) performs no rate-limiting, failed-attempt counting, or ac= count lockout when captcha is disabled, which is the default configuration.=
An unauthenticated attacker can send unlimited password-guessing requests = against any account, including administrators, with no throttling. The only=
attempt-counting/lockout logic present in the same file protects an option=
al secondary email-authcode step and does not apply to the primary password=
check. 2026-08-05 9.1 CVE-2026-71213 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-71213 ] Uasoft--Badaso A vulnerability has been found in Uasoft Ba= daso 3.0.0-alpha. This vulnerability affects the function ApiRequest::class=
of the file src/Routes/api.php of the component File API. The manipulation=
leads to permission issues. It is possible to initiate the attack remotely=
. The exploit has been disclosed to the public and may be used. The project=
was informed of the problem early through an issue report but has not resp= onded yet. 2026-08-09 7.3 CVE-2026-19376 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19376 ] Unisoc (Shanghai) Technologies Co., Ltd.--T8100/T9100/T= 8200/T8300 In nr modem, there is a possible improper input validation. This=
could lead to remote denial of service with System execution privileges ne= eded. 2026-08-03 7.5 CVE-2026-21548 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-21548 ] Unisoc (Shanghai) Technologies Co., Ltd.--T8100/T9100/T8200/= T8300 In modem, there is a possible improper input validation. This could l= ead to remote denial of service with no additional execution privileges nee= ded 2026-08-03 7.5 CVE-2026-21549 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-21549 ] Unisoc (Shanghai) Technologies Co., Ltd.--T8100/T9100/T8200/T8= 300 In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede=
d 2026-08-03 7.5 CVE-2026-21550 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-21550 ] Unisoc (Shanghai) Technologies Co., Ltd.--T8100/T9100/T8200/T830=
0 In modem, there is a possible improper input validation. This could lead =
to remote denial of service with no additional execution privileges needed = 2026-08-03 7.5 CVE-2026-21551 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -21551 ] Unisoc (Shanghai) Technologies Co., Ltd.--T8100/T9100/T8200/T8300 =
In modem, there is a possible improper input validation. This could lead to=
remote denial of service with no additional execution privileges needed 20= 26-08-03 7.5 CVE-2026-21552 [ https://www.cve.org/CVERecord?id=3DCVE-2026-2= 1552 ] Unisoc (Shanghai) Technologies Co., Ltd.--T8100/T9100/T8200/T8300 In=
modem, there is a possible improper input validation. This could lead to r= emote denial of service with no additional execution privileges needed 2026= -08-03 7.5 CVE-2026-21553 [ https://www.cve.org/CVERecord?id=3DCVE-2026-215=
53 ] Unisoc (Shanghai) Technologies Co., Ltd.--UDX710 In modem, there is a = possible improper input validation. This could lead to remote denial of ser= vice with no additional execution privileges needed 2026-08-03 7.5 CVE-2026= -21554 [ https://www.cve.org/CVERecord?id=3DCVE-2026-21554 ] Unisoc (Shangh= ai) Technologies Co., Ltd.--UDX710 In modem, there is a possible improper i= nput validation. This could lead to remote denial of service with no additi= onal execution privileges needed 2026-08-03 7.5 CVE-2026-21555 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-21555 ] usememos--memos Memos' webhook UR=
L validation, isReservedIP() (internal/webhook/validate.go), checks a candi= date IP against a reservedCIDRs list that omits 0.0.0.0/8 and never calls i= p.IsUnspecified() - unlike the correctly implemented sibling function isInt= ernalIP() in internal/httpgetter/html_meta.go, which does. Because Linux re= directs connections to 0.0.0.0 to loopback (127.0.0.1), an attacker registe= ring a webhook URL of http://0.0.0.0:PORT/ bypasses the reserved-IP check a=
nd causes the Memos server to make outbound HTTP requests to its own loopba=
ck interface, exposing internal-only services. 2026-08-05 8.5 CVE-2026-7127=
1 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71271 ] usememos--memos Mem= os' webhook dispatch function safeDialContext() (internal/webhook/webhook.g=
o) resolves the target hostname via net.DefaultResolver.LookupHost() and va= lidates the resulting IPs against reserved ranges, but then dials net.JoinH= ostPort(host, port) using the original hostname rather than the already-val= idated IP address. Because net.Dialer.DialContext() performs its own indepe= ndent DNS resolution, an attacker controlling DNS for the webhook's hostnam=
e (e.g. via a short TTL) can return a public, allowed IP during validation = and a different, internal IP at dial time - a classic time-of-check/time-of= -use DNS-rebinding bypass of the SSRF protection. 2026-08-05 8.5 CVE-2026-7= 1272 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71272 ] UTT--HiPER 1200G=
W A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-1703= 06. This affects the function strcpy of the file /goform/ConfigAdvideo. The=
manipulation of the argument timestart results in stack-based buffer overf= low. The attack can be launched remotely. The exploit has been released to = the public and may be used for attacks. The vendor was contacted early abou=
t this disclosure but did not respond in any way. 2026-08-05 8.8 CVE-2026-1= 8898 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18898 ] UTT--HiPER 1200G=
W A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.= 3-170306. This impacts the function strcpy of the file /goform/pptpSrvGloba= lConfig. Such manipulation of the argument EncryptionMode leads to stack-ba= sed buffer overflow. The attack can be executed remotely. The exploit has b= een disclosed publicly and may be used. The vendor was contacted early abou=
t this disclosure but did not respond in any way. 2026-08-09 8.8 CVE-2026-1= 9341 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19341 ] UTT--HiPER 1250G=
W A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535. = Impacted is the function strcpy of the file /goform/APSecurity_5g. Performi=
ng a manipulation of the argument cipher results in stack-based buffer over= flow. It is possible to initiate the attack remotely. The exploit has been = made public and could be used. The vendor was contacted early about this di= sclosure but did not respond in any way. 2026-08-05 8.8 CVE-2026-18895 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-18895 ] UTT--HiPER 1250GW A vulne= rability was identified in UTT HiPER 1250GW up to v3.2.7-210907-180535. The=
impacted element is the function strcpy of the file /goform/getOneApConfTe= mpEntry. The manipulation of the argument tempName leads to stack-based buf= fer overflow. The attack can be initiated remotely. The exploit is publicly=
available and might be used. The vendor was contacted early about this dis= closure but did not respond in any way. 2026-08-05 8.8 CVE-2026-18897 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-18897 ] V-Secure--Jingyun Antiviru=
s A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. Th=
e affected element is an unknown function in the library ZyArk.sys of the c= omponent Kernel Driver. The manipulation leads to improper access controls.=
The attack needs to be performed locally. The exploit has been disclosed t=
o the public and may be used. The vendor was contacted early about this dis= closure but did not respond in any way. 2026-08-07 7.8 CVE-2026-19195 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-19195 ] vibesurf-ai--VibeSurf A vu= lnerability has been found in vibesurf-ai VibeSurf up to cd6e519d507cdd4d63= 061300bf60fb176e1f57e0. Impacted is an unknown function of the file /code o=
f the component Python Validation Handler. The manipulation leads to code i= njection. Remote exploitation of the attack is possible. This product follo=
ws a rolling release approach for continuous delivery, so version details f=
or affected or updated releases are not provided. The vendor was contacted = early about this disclosure but did not respond in any way. 2026-08-04 7.3 = CVE-2026-18770 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18770 ] vimeod= ev--Vimeo Subscriber Sensitive Data Exposure in Vimeo <=3D 1.2.2 versions. = 2026-08-06 7.5 CVE-2026-65543 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -65543 ] vovchic17--aiosend aiosend is a synchronous and asynchronous Crypt=
o Pay API client. Pror to version 3.0.7, `WebhookHandler.feed_update()` des= erializes the entire request body before verifying the HMAC signature. This=
allows an unauthenticated attacker to force expensive parsing of arbitrary=
JSON payloads that will ultimately be rejected, leading to unnecessary CPU=
and memory consumption. Version 3.0.7 fixes the issue. Some workarounds ar=
e available. Restrict request body size at the reverse proxy or web framewo= rk, rate-limit webhook endpoints, and/or reject oversized requests before J= SON parsing. 2026-08-06 7.5 CVE-2026-70646 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-70646 ] Wavlink--WL-NU516U1 A vulnerability has been found in=
Wavlink WL-NU516U1 708c073-mt7628. This affects the function fgets of the = file nas.cgi. The manipulation of the argument CONTENT_LENGTH leads to stac= k-based buffer overflow. Remote exploitation of the attack is possible. You=
should upgrade the affected component. The vendor was contacted early, res= ponded in a very professional manner and quickly released a fixed version o=
f the affected product. 2026-08-03 9.8 CVE-2026-18588 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-18588 ] Wavlink--WL-NU516U1 A vulnerability was fo= und in Wavlink WL-NU516U1 708c073-mt7628. This impacts the function change_= password of the file nas.cgi. The manipulation of the argument User1Passwd = results in stack-based buffer overflow. The attack can be executed remotely=
. The exploit has been made public and could be used. The affected componen=
t should be upgraded. The vendor was contacted early, responded in a very p= rofessional manner and quickly released a fixed version of the affected pro= duct. 2026-08-03 9.8 CVE-2026-18589 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-18589 ] Wavlink--WL-NU516U1 A flaw has been found in Wavlink WL-NU51= 6U1 708c073-mt7628. The impacted element is an unknown function of the comp= onent Config Import. Executing a manipulation of the argument Password can = lead to os command injection. The attack may be launched remotely. This att= ack is characterized by high complexity. The exploitability is regarded as = difficult. The exploit has been published and may be used. It is advisable =
to upgrade the affected component. The vendor was contacted early, responde=
d in a very professional manner and quickly released a fixed version of the=
affected product. 2026-08-03 7.5 CVE-2026-18587 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-18587 ] Wavlink--WN572 A security vulnerability has bee=
n detected in Wavlink WN572, WN570H, WN573, WN529, WN530, WN531, WN535, etc=
. WN529, WN530, WN531, WN535, WN536, WN551, WN557 and NU516 up to 20260609.=
Affected by this issue is the function strcpy of the file upload.cgi of th=
e component lighttpd. The manipulation of the argument HTTP_COOKIE leads to=
stack-based buffer overflow. It is possible to initiate the attack remotel=
y. The exploit has been disclosed publicly and may be used. 2026-08-03 8.8 = CVE-2026-18607 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18607 ] wbolt.= com--Spider Analyser- WordPress Unauthenticated Remote Code Execution (RCE)=
in Spider Analyser; WordPress<=3D 2.1.3 versions. 2026-08-06 10 CVE-2026-6= 5553 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65553 ] Weaver Network C= o., Ltd.--E-cology 9.0 Weaver (Fanwei) E-cology 9.0 versions prior to 10.52=
contain a file upload vulnerability that allows a remote, unauthenticated = attacker to upload arbitrary files, including JSP webshells, by submitting =
a multipart/form-data POST request to /workrelate/plan/util/uploaderOperate= .jsp with arbitrary secId and plandetailid field values. Successful exploit= ation results in remote code execution under the privileges of the applicat= ion server process.=C2=A0Exploitation evidence was first observed by the Sh= adowserver Foundation on 2023-10-14 (UTC). 2026-08-07 9.8 CVE-2022-4995 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2022-4995 ] WebAppick--CTX Feed Shop = manager Remote Code Execution (RCE) in CTX Feed <=3D 6.6.42 versions. 2026-= 08-06 9.1 CVE-2026-66709 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6670=
9 ] WebPros--Plesk An SQL injection vulnerability in Plesk Obsidian up to 1= 8.0.80 for Linux and Windows allows an authenticated user to read arbitrary=
data from the panel database. 2026-08-07 7.7 CVE-2026-64636 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-64636 ] WebsiteBaker Org e.V.--WebsiteBaker=
CMS WebsiteBaker CMS before 2.13.10 contains a code injection vulnerabilit=
y in the Droplets editor that allows authenticated administrators to inject=
arbitrary PHP code by submitting malicious content through the droplet Cod=
e field, which is written verbatim to a publicly accessible PHP file with n=
o content sanitization. Attackers can save a PHP webshell via the save_drop= let handler to a predictable path inside the modules directory, enabling un= authenticated users to achieve remote code execution by making direct HTTP = requests to the written file. 2026-08-03 7.2 CVE-2026-61523 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-61523 ] WebsiteBaker Org e.V.--WebsiteBaker = CMS WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vu= lnerability in the module installation feature that allows authenticated ad= ministrators to achieve remote code execution by uploading a crafted ZIP ar= chive containing a PHP webshell alongside a valid info.php metadata file. A= ttackers can place the malicious archive through the module installation in= terface, causing the application to extract the webshell into a web-accessi= ble modules/ subdirectory where it becomes immediately executable by any un= authenticated user via direct HTTP request. 2026-08-03 7.2 CVE-2026-61524 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-61524 ] wisemattic--wiseCampai=
gn WooCommerce Conversions Made Easy The wiseCampaign - WooCommerce Convers= ions Made Easy plugin for WordPress is vulnerable to unauthorized modificat= ion and disclosure of data due to every one of its REST API endpoints being=
registered with `permission_callback =3D> '__return_true'` in all versions=
up to, and including, 1.1.16. This makes it possible for unauthenticated a= ttackers to read and modify the plugin's banner, stockbar, and core setting=
s - including saving/updating banner records, toggling stockbar/feature fla= gs, changing the active banner, and uploading background-image files via wp= _handle_upload() - without any nonce or capability check. 2026-08-05 7.5 CV= E-2026-7529 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7529 ] wp-downloa= dmanager--wp-downloadmanager The wp-downloadmanager WordPress plugin, in ve= rsion 1.68.11 (also affecting the 6.9.4 release line), allows an admin-priv= ileged user (current_user_can('manage_downloads')) to upload arbitrary file=
s via download-add.php with no extension or MIME-type validation of any kin=
d - no wp_check_filetype_and_ext(), no validate_file(), and no extension bl= ocklist exist anywhere in the upload handler. The destination path is addit= ionally built by concatenating the raw, unsanitized $_POST['file_upload_to'=
] value with no traversal check (no ../ filtering, no basename()/realpath()=
applied). Since the base download path is required to live under WP_CONTEN= T_DIR (a web-accessible location), an uploaded PHP file lands in a web-serv= able path and can be directly executed, resulting in remote code execution.=
The plugin's own later changelog confirms these protections were absent in=
this version: v1.69 added file-type validation via wp_check_filetype_and_e= xt(), and v1.69.1 added directory-traversal protection - neither existed in=
1.68.11. 2026-08-05 7.2 CVE-2026-18933 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18933 ] wp.insider--Simple Membership Unauthenticated Broken Ac= cess Control in Simple Membership <=3D 4.7.8 versions. 2026-08-06 7.5 CVE-2= 026-66712 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66712 ] WPC Name Yo=
ur Price for WooCommerce--WPC Name Your Price for WooCommerce The WPC Name = Your Price for WooCommerce WordPress plugin before 2.2.5 does not enforce i=
ts server-side price allowlist for products configured in "Select" price mo= de, allowing an unauthenticated visitor to add such a product to the cart a=
t an arbitrary value below the merchant-defined allowed prices and commit a=
real order at that price (revenue loss / underpriced orders). This is a di= stinct, unfixed vector from CVE-2025-12115, whose 2.2.0 fix only addressed = applying a custom price to products where Name Your Price is disabled and l= eft the Select-mode allowlist unenforced through 2.2.4. 2026-08-06 7.5 CVE-= 2026-16620 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16620 ] wpDataTabl= es--wpDataTables Unauthenticated Cross Site Scripting (XSS) in wpDataTables=
<=3D 7.5.1 versions. 2026-08-06 7.1 CVE-2026-65509 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-65509 ] WPDeveloper--EmbedPress Unauthenticated Cros=
s Site Scripting (XSS) in EmbedPress <=3D 4.5.6 versions. 2026-08-06 7.1 CV= E-2026-61961 [ https://www.cve.org/CVERecord?id=3DCVE-2026-61961 ] wpdreams= --Ajax Search Lite Unauthenticated PHP Object Injection in Ajax Search Lite=
<=3D 4.14.4 versions. 2026-08-06 9.8 CVE-2026-28139 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-28139 ] wpjobportal--WP Job Portal Subscriber SQL I= njection in WP Job Portal <=3D 2.5.6 versions. 2026-08-06 8.5 CVE-2026-6556=
9 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65569 ] wpmanageninja--Flue= ntSMTP WP SMTP Plugin with Amazon SES, SendGrid, Mailgun, Postmark, Cloudfl= are, toSend, Gmail and Any SMTP The FluentSMTP - WP SMTP Plugin with Amazon=
SES, SendGrid, MailGun, Postmark, Google and Any SMTP Provider plugin for = WordPress is vulnerable to Stored Cross-Site Scripting via Recipient Displa=
y Name (to.name) in Email Logs in all versions up to, and including, 2.2.95=
due to insufficient input sanitization and output escaping. This makes it = possible for unauthenticated attackers to inject arbitrary web scripts in p= ages that will execute whenever a user accesses an injected page. The paylo=
ad is delivered via an attacker-controlled recipient display name (to.name)=
in a wp_mail() call and does not fire in the log list view - only in the d= etail view when an administrator uses the Prev/Next navigation controls, as=
that path bypasses the escapeHtml pipeline used by the list view. 2026-08-=
06 7.2 CVE-2026-16636 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16636 ]=
WPManageNinja--Ninja Tables Unauthenticated Cross Site Scripting (XSS) in = Ninja Tables <=3D 5.2.9 versions. 2026-08-06 7.1 CVE-2026-61964 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-61964 ] WPMU DEV--Forminator Contributor=
Privilege Escalation in Forminator <=3D 1.56.0 versions. 2026-08-06 8.8 CV= E-2026-28111 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28111 ] WPMU DEV= --Forminator Unauthenticated Cross Site Scripting (XSS) in Forminator <=3D = 1.56.0 versions. 2026-08-06 7.1 CVE-2026-28143 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-28143 ] wpmudev--Forminator Forms Contact Form, Payment F= orm & Custom Form Builder The Forminator Forms - Contact Form, Payment Form=
& Custom Form Builder plugin for WordPress is vulnerable to Stored Cross-S= ite Scripting via Forged Upload Record via Select Field in all versions up = to, and including, 1.56.1 due to insufficient input sanitization and output=
escaping. This makes it possible for unauthenticated attackers to inject a= rbitrary web scripts in pages that will execute whenever a user accesses an=
injected page. The exploit is possible because Forminator_Core::sanitize_a= rray() skips all filtering for keys prefixed with 'select-', and set_field_= data() treats a submitted 'return' member as a trusted internal flag - allo= wing an unauthenticated attacker to forge and persist a complete upload fie=
ld record with an arbitrary file_url value without any sanitization or vali= dation. 2026-08-06 7.2 CVE-2026-18325 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-18325 ] wpmudev--WPMU DEV Dashboard The WPMU DEV Dashboard plugin = for WordPress is vulnerable to Authentication Bypass in all versions up to,=
and including, 5.0.0. On sites not yet connected to the WPMU DEV Hub - the=
default state after installation - the site API key that keys the WDP-AUTH=
request signature is empty, making the signature verified by validate_hash=
() trivially forgeable; version 5.0.0 additionally removed the replay check=
in validate_nonce(), and the remote handler is bound to the public init ho=
ok with no capability check. This makes it possible for unauthenticated att= ackers to invoke privileged Hub actions - including installing and activati=
ng a plugin from an attacker-supplied URL (resulting in remote code executi= on), deleting plugins and themes, upgrading WordPress core, or logging in a=
s an administrator via SSO. Sites connected to a WPMU DEV account, which ha=
ve a non-empty 64-character API key, are not affected. 2026-08-06 8.1 CVE-2= 026-15459 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15459 ] wpwax--Form= Gent Next-Gen AI Form Builder for WordPress with Multi-Step, Quizzes, Payme= nts & More The FormGent - Next-Gen AI Form Builder for WordPress with Multi= -Step, Quizzes, Payments & More plugin for WordPress is vulnerable to Store=
d Cross-Site Scripting via form submission fields in all versions up to, an=
d including, 1.9.2 due to insufficient input sanitization and output escapi= ng. This makes it possible for unauthenticated attackers to inject arbitrar=
y web scripts in pages that will execute whenever a user accesses an inject=
ed page. 2026-08-06 7.2 CVE-2025-15028 [ https://www.cve.org/CVERecord?id= =3DCVE-2025-15028 ] WSO2--WSO2 API Manager In multi-tenant deployments, the=
Publisher REST APIs fail to enforce tenant isolation correctly. This allow=
s a user in one tenant, possessing sufficient privileges to invoke these AP= Is, to perform operations that impact other tenants. The vulnerability allo=
ws a privileged user to perform publisher operations such as exposing or mo= difying API Metadata in another tenant environment. This impact is only rea= lized in multi-tenant deployments. 2026-08-06 9 CVE-2025-14561 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2025-14561 ] WSO2--WSO2 API Manager Tokens iss= ued to a low-privileged user are not sufficiently restricted, allowing them=
to be used to access product-level Admin REST APIs. Exploitation of this v= ulnerability allows a low-privileged user to invoke the Admin REST APIs of = WSO2 products, potentially leading to full administrative account takeover.=
This requires the attacker to already possess a low-privileged user accoun=
t and be able to obtain a valid token for it. 2026-08-06 9.8 CVE-2026-1728 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-1728 ] WSO2--WSO2 API Manager=
The System REST API accepts user-supplied file uploads without enforcing s= ufficient validation on the file type or destination, allowing files to be = written to arbitrary server-accessible locations. Exploitation requires aut= henticated administrative access with publisher privileges. Successful expl= oitation permits an authenticated publisher to upload files to server-acces= sible locations. Depending on the deployment environment and how uploaded f= iles are handled, this could lead to the execution of uploaded content, pot= entially resulting in remote code execution. 2026-08-06 9.1 CVE-2026-3418 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-3418 ] WSO2--WSO2 API Manager = The XML and schema validation functionalities within the SchemaValidator Me= diator process XML input as part of validation flows. Under certain conditi= ons, the XML parser allows the resolution of external entities when handlin=
g user-supplied XML content during validation operations. This behavior can=
occur when an attacker supplies crafted XML payloads to the relevant media= tor flows with sufficient privileges. Successful exploitation may allow a h= ighly privileged actor to read files accessible within the server hosting t=
he affected product. Additionally, it may be possible to trigger outbound r= equests to unintended internal or external locations, depending on the serv=
er environment and network configuration. Specially crafted XML payloads ca=
n also lead to excessive resource consumption during parsing, impacting the=
availability of the product. 2026-08-06 8.7 CVE-2026-3415 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-3415 ] WSO2--WSO2 Identity Server The Conditi= onal Authentication (Adaptive Authentication) script does not correctly enf= orce the completion of all required authentication steps when a specific mu= lti-step pattern involving certain authenticators is configured. This allow=
s an attacker to bypass intermediate authentication challenges by exploitin=
g how the script handles callbacks and re-execution of authentication steps=
. Successful exploitation allows a malicious actor to gain unauthorized acc= ess to a targeted user account. This vulnerability can only be exploited wh=
en all of the following conditions are met: the application login flow cont= ains a specific secondary authenticator, the Conditional Authentication scr= ipt is configured with particular event callbacks and re-executes an authen= tication step, the targeted user has one of the impacted authenticators enr= olled, and the attacker successfully completes any preceding authentication=
steps. 2026-08-06 9.4 CVE-2025-15039 [ https://www.cve.org/CVERecord?id=3D= CVE-2025-15039 ] WSO2--WSO2 Universal Gateway The JWT authentication mechan= ism accepts tokens signed with algorithms other than those explicitly confi= gured or supported. This allows an attacker to craft a JWT with an unsuppor= ted algorithm, which is then incorrectly validated, leading to unauthorized=
access. Successful exploitation of this vulnerability may result in unauth= orized access to the system, including the potential compromise of administ= rative accounts and full account takeover. The CVSS score is adjusted to 9.=
8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) in single-tenant deploymen= ts, reflecting that the impact is contained within a single security author= ity boundary. 2026-08-06 10 CVE-2026-5430 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-5430 ] wupsales--AI Copilot Content Generator The AI Copilot -=
Content Generator plugin for WordPress is vulnerable to authorization bypa=
ss in all versions up to, and including, 1.5.6. This is due to the plugin n=
ot properly verifying that a user is authorized to perform an action. This = makes it possible for unauthenticated attackers to create a new administrat= or-level user account and achieve full site takeover by saving and executin=
g a malicious workflow containing a wp_create_user action node specifying r= ole=3Dadministrator. This vulnerability is exploitable by unauthenticated a= ttackers on any site where the [aiwu-form] shortcode or public chatbot is r= endered on a frontend page, as the waic-nonce value is emitted into publicl=
y accessible JavaScript (WAIC_DATA.waicNonce) on those pages, rendering the=
nonce check a non-functional authorization barrier. 2026-08-08 9.8 CVE-202= 6-14526 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14526 ] wupsales--AI = Copilot Content Generator The AI Chatbot & Workflow Automation by AIWU plug=
in for WordPress is vulnerable to Sensitive Information Exposure in all ver= sions up to, and including, 1.4.6. This is due to the `getCurrentTaskResult= s()` method in `modules/workspace/controller.php` being accessible without = authentication or authorization checks. The method is not included in the w= orkspace controller's `getNoncedMethods()` array, the base `getPermissions(=
)` returns an empty array, and all AJAX actions are registered with `wp_aja= x_nopriv_` hooks (`classes/frame.php:282`). When tasks are created via feat= ures like the Bulk Post Generator, the task parameters - including the Open=
AI API key in plaintext, AI prompts, keywords, and full AI model configurat= ion - are stored in the database and returned in the JSON response. This ma= kes it possible for unauthenticated attackers to enumerate sequential task = IDs and retrieve sensitive configuration data including API keys. 2026-08-0=
5 7.5 CVE-2026-6639 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6639 ] Xp= lodedThemes--WPIDE File Manager & Code Editor Unauthenticated Cross Site Sc= ripting (XSS) in WPIDE - File Manager & Code Editor <=3D 3.5.7 versions. 20= 26-08-06 7.1 CVE-2026-66440 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6= 6440 ] Zbtlink--CPE2801 Firmware Zbtlink router firmware ships an embedded = remote-control implant, ENDLESSDOORS, present in every published build acro=
ss the product line. It is the open-source ycsunjane/rctl tool built in as =
an OpenWrt package (librctl.so), started at boot and run as root under the = process name kworker to blend in with the kernel's [kworker/*] threads. It = opens no listening port; it phones home over cleartext TCP to a hardcoded c= ommand-and-control server (command channel 7000, interactive-shell callback=
7001) with no authentication and no transport encryption, re-attempting co= ntact roughly every 35 seconds. Its command handler passes any received str= ing to popen() as uid=3D0, and a reserved rctlbash command returns an inter= active root shell. Because the channel is unauthenticated and cleartext, co= ntrol is not limited to whoever planted it: any party that answers at the C=
2 address, occupies the network path (DNS or route hijack), or acquires the=
hardcoded fallback domain obtains unauthenticated remote code execution as=
root. 2026-08-05 9.8 CVE-2026-66747 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-66747 ] ZenML--ZenML ZenML 0.94.6 contains a remote code execution = vulnerability in the CloudpickleMaterializer component that allows attacker=
s with write access to a shared artifact store to execute arbitrary code by=
planting a malicious pickle file. Attackers can replace a stored artifact.= pkl file with a crafted cloudpickle payload containing a malicious __reduce=
__ method, which executes arbitrary system commands when any user or pipeli=
ne materializes the artifact through the unsanitized cloudpickle.load() cal=
l in cloudpickle_materializer.py. 2026-08-07 8 CVE-2026-68772 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-68772 ] zephyrproject--zephyr The hawkBit = device management client in subsys/mgmt/hawkbit accumulates the body of an = HTTP response from the update server into a heap buffer in response_json_cb=
() (subsys/mgmt/hawkbit/hawkbit.c). The buffer is sized to hold the receive=
d body bytes but reserves no space for a terminating NUL. When the full res= ponse has arrived, the code writes response_data[downloaded_size] =3D ' ' -=
and whenever the accumulated body length equals the allocation, that termi= nator lands one byte past the end of the heap object (a heap-based out-of-b= ounds write, CWE-122 / CWE-787). The body length and fragmentation are take=
n directly from the parsed HTTP response (rsp->body_frag_start / rsp->body_= frag_len) and are fully controlled by the remote hawkBit server, which choo= ses its own response length. The precise trigger depends on how the buffer = grows, and both forms are remotely reachable. Since v4.0.0 the reallocation=
is sized to exactly downloaded_size + body_len, so any response body large=
r than the 1100-byte initial buffer makes the out-of-bounds write determini= stic; such response sizes are normal for hawkBit deployment metadata. Befor=
e v4.0.0 the buffer grew by doubling and the growth check ((downloaded_size=
+ body_len) > response_buffer_size) is false at equality, so a response bo=
dy whose length is exactly the current allocation - 1100 bytes with the def= ault initial buffer - skips the reallocation entirely and writes the termin= ator at response_data[1100] of an 1100-byte object. The HTTP length-mismatc=
h check does not catch this, because the declared and received lengths genu= inely agree. Either form is reachable by a malicious, compromised, or man-i= n-the-middle update server (TLS is optional and, when enabled, does not pro= tect against a hostile server), with no authentication of response content = and no client-side length cap protecting the write. The out-of-bounds write=
is a fixed single NUL byte immediately following the allocation, corruptin=
g adjacent allocator metadata or the next allocation. The practical impact =
is heap corruption leading to denial of service (fault on a subsequent allo= cation or free), with the bounded, allocator-dependent possibility of furth=
er corruption. The fix sizes the buffer to the body length plus one and cop= ies with memcpy, ensuring the terminator always lands within the allocation=
. 2026-08-03 8.2 CVE-2026-10849 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-10849 ] zephyrproject--zephyr The Bluetooth host ATT layer (subsys/bluet= ooth/host/att.c) associates each in-flight ATT TX buffer with its owning ch= annel via the static tx_meta_data_storage[] array (data->att_chan =3D chan)=
. When a buffer's last reference is dropped, its net-buf destroy callback d= efers the completion handling to the system workqueue (att_tx_destroy -> at= t_tx_destroy_work_handler -> att_on_sent_cb -> bt_att_sent), where bt_att_s= ent dereferences the channel and its ATT context (sys_slist_get(&att->reqs)=
). When a peer disconnects while an ATT PDU (a server notification/indicati=
on or any response) is still in flight in the controller TX path, L2CAP tea=
rs the channel down in l2cap_chan_del(): it runs the disconnected callback = and then the released callback (bt_att_released), which frees the channel s= lab slot. Because the in-flight buffer is held by the connection TX path ra= ther than the channel's own queue, its deferred destroy work can run after = the channel has been freed. The att_on_sent_cb guard intended to drop the s= tale callback itself dereferences meta->att_chan, which is now a dangling p= ointer into a freed (and possibly reused) slab slot. A remote peer with an = ATT connection can drive this by disconnecting during routine ATT traffic; =
no pairing or user interaction is required to reach the ATT bearer. The res= ult is a use-after-free read/write of freed channel memory, reliably crashi=
ng the Bluetooth host (denial of service) and, because the channel slab slo=
t may be reused, potentially corrupting live memory. The fix makes bt_att_r= eleased() NULL the att_chan field of every tx_meta_data_storage[] entry sti=
ll referencing the channel before freeing it, so the deferred guard observe=
s a NULL pointer and drops the callback. Teardown and the destroy work both=
run on the cooperative system workqueue, so the array update is serialized=
and needs no lock. 2026-08-04 7.1 CVE-2026-11368 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-11368 ] ZTE--F689 By accessing unencrypted information=
in the device firmware, an attacker can obtain the initial login credentia=
ls for the device's web interface. 2026-08-07 7.5 CVE-2026-49007 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-49007 ] Zucchetti S.p.a.--FirmaCheck Fi= rmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerability t= hat allows local attackers to execute arbitrary code by placing a crafted o= penssl.cnf file in the unvalidated C:\Program Files (x86)\Common Files\SSL\=
directory path. Attackers can write a malicious OpenSSL configuration file=
referencing an attacker-controlled DLL to achieve code execution at startu=
p process privilege level when FirmaCheck.exe runs automatically at system = startup. 2026-08-03 7.8 CVE-2026-41447 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-41447 ] Zyxel--ATP series firmware A path traversal vulnerabili=
ty in the CLI command used to execute configuration files in Zyxel ATP seri=
es firmware versions from V4.32 through V5.42 Patch 1, USG FLEX series firm= ware versions from V4.50 through V5.42 Patch 1, USG FLEX 50(W) series firmw= are versions from V4.16 through V5.42 Patch 1, and USG20(W)-VPN series firm= ware versions from V4.16 through V5.42 Patch 1 could allow an authenticated=
attacker with administrator privileges to execute a crafted malicious conf= iguration file on an affected device. 2026-08-04 7.2 CVE-2026-14818 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-14818 ] Zyxel--WAX650S firmware A po= st-authentication command injection vulnerability in the "export-cgi" CGI p= rogram in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could allo=
w an authenticated attacker with administrator privileges to execute OS com= mands on an affected device. 2026-08-04 7.2 CVE-2026-6837 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-6837 ]=20

Back to top [ #top ]

Medium Vulnerabilities

Primary
Vendor -- Product Description Published CVSS Score Source Info 299ko--299Ko=
299Ko's public contact form (plugin/contact/controllers/ContactController.= php, home()) sets raw POST field values (name, firstname, email, message) i= nto the page template with no sanitization. The template engine's variable = output function (common/Template.php, _show_var()) echoes values with no ht= mlspecialchars() call, and the sink template (contact.tpl) outputs these va= lues unescaped into an HTML attribute and a textarea. An unauthenticated at= tacker can submit a payload such as name=3D"><script>alert(document.domain)= </script> to achieve reflected XSS against any visitor who submits or is tr= icked into auto-submitting the form, including a targeted administrator, en= abling session token theft. 2026-08-05 6.1 CVE-2026-71249 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-71249 ] 2wstechnologies--Askeet Talk to Your W= ooCommerce Data The Askeet plugin for WordPress is vulnerable to SQL Inject= ion via the 'sql_query' parameter in multiple AJAX actions (askeet_execute_= sql_query, askeet_export_all_results) in all versions up to, and including,=
3.0. This is due to the askeet_is_safe_query() filter being bypassable usi=
ng MySQL conditional comments (e.g., /*!UNION*/). The filter strips regular=
block comments before checking for forbidden SQL keywords, but MySQL inter= prets conditional comments as executable code. This makes it possible for a= uthenticated attackers, with Administrator-level access and above, to appen=
d additional SQL queries into already existing queries that can be used to = extract sensitive information from the database. 2026-08-05 4.9 CVE-2026-56=
51 [ https://www.cve.org/CVERecord?id=3DCVE-2026-5651 ] 3CORESec--Trapdoor =
A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affected b=
y this vulnerability is the function DefaultFunction. This manipulation cau= ses improper access controls. The attack can be initiated remotely. The ven= dor was contacted early about this disclosure. 2026-08-09 6.3 CVE-2026-1935=
8 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19358 ] aaronsb--memory-gra=
ph A vulnerability was detected in aaronsb memory-graph up to 5cfd238277883= 7b9f6399080956eee670d00452c. Affected by this vulnerability is the function=
JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemorySto= rage.saveMemories of the file src/tools/memoryTools.ts. The manipulation re= sults in path traversal. The attack must be initiated from a local position=
. This product operates on a rolling release basis, ensuring continuous del= ivery. Consequently, there are no version details for either affected or up= dated releases. The project was informed of the problem early through an is= sue report but has not responded yet. 2026-08-08 5.3 CVE-2026-19285 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-19285 ] abdullah1854--MCPGateway A v= ulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f= 40530149de324b8097de424230. This impacts the function getUsageByDateRange o=
f the file src/services/claude-usage.ts of the component Claude Usage Range=
Endpoint. The manipulation of the argument since leads to command injectio=
n. The attack can be initiated remotely. The exploit is publicly available = and might be used. Continious delivery with rolling releases is used by thi=
s product. Therefore, no version details of affected nor updated releases a=
re available. The project was informed of the problem early through an issu=
e report but has not responded yet. 2026-08-08 6.3 CVE-2026-19268 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-19268 ] abracadabra50--claude-sesh A f= law has been found in abracadabra50 claude-sesh 1.0.0. This issue affects t=
he function getEnrichedData/enrichSession of the file src/services/enricher= .ts. Executing a manipulation of the argument sessionId can lead to path tr= aversal. The attack needs to be launched locally. This patch is called 786c= 9d74800e6d0858b65778f31beb71b3983a50. Applying a patch is advised to resolv=
e this issue. 2026-08-09 5.3 CVE-2026-19327 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-19327 ] abrinsmead--mindpilot-mcp A flaw has been found in a= brinsmead mindpilot-mcp 0.5.0. Affected by this issue is some unknown funct= ionality of the component HistoryService. This manipulation of the argument=
ID causes path traversal. The attack needs to be launched locally. The pro= ject was informed of the problem early through an issue report but has not = responded yet. 2026-08-08 5.3 CVE-2026-19287 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-19287 ] adenot--mcp-google-search A vulnerability was deter= mined in adenot mcp-google-search up to 0.3.1. Impacted is an unknown funct= ion of the file src/index.ts of the component read_webpage. Executing a man= ipulation of the argument url can lead to server-side request forgery. The = attack is restricted to local execution. This patch is called f071d491b6850= 11ca04e8ab8d586fc65f86bcee1. It is advisable to implement a patch to correc=
t this issue. 2026-08-09 5.3 CVE-2026-19337 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-19337 ] Admidio--admidio Admidio versions before 5.0.11 cont= ain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint=
that echoes unencoded exception messages to the HTTP response. Unauthentic= ated attackers can inject arbitrary JavaScript through SAML Issuer elements=
or LightSaml library parameters to execute code in users' browsers and hij= ack sessions. 2026-08-03 6.5 CVE-2026-69092 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-69092 ] Admidio--admidio Admidio before 5.0.11 fails to vali= date target organization membership in role handlers, allowing authenticate=
d role administrators to delete, activate, deactivate, or edit roles belong= ing to other organizations. Attackers can supply a role UUID from another o= rganization to groups_roles.php handlers to modify that organization's role=
s without authorization. 2026-08-03 4.9 CVE-2026-69090 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-69090 ] Admidio--admidio Admidio before 5.0.11 do=
es not validate the adm_csrf_token in modules/category-report/preferences.p= hp, which performs persistent Category Report configuration changes based o=
n GET parameters (delete and copy). An attacker can trick an authenticated = administrator into visiting a crafted URL to delete or duplicate Category R= eport configurations, affecting the integrity and availability of that modu= le's configuration. 2026-08-03 4.6 CVE-2026-69093 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-69093 ] Admidio--admidio Admidio before 5.0.11 contain=
s an insecure direct object reference vulnerability in the save_temporary m= ode of mylist_function.php that allows authenticated users to hijack list c= onfigurations. Attackers can enumerate global list UUIDs and overwrite admi= n-curated global lists or other users' private lists by supplying a list_uu=
id parameter, transferring ownership and demoting global lists to personal = configurations. 2026-08-03 4.3 CVE-2026-69094 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-69094 ] Adobe--Adobe Genuine Software Integrity Service Ad= obe Genuine Software Integrity Service was affected by an Incorrect Authori= zation vulnerability that could result in a Security feature bypass. An att= acker could have leveraged this vulnerability to bypass security measures a=
nd gain unauthorized limited write access. Exploitation of this issue did n=
ot require user interaction, but required the attacker to have access to th=
e local environment the application is installed on. 2026-08-07 4 CVE-2026-= 71381 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71381 ] adolfosalasgome= z3011--slidev-builder-mcp A security flaw has been discovered in adolfosala= sgomez3011 slidev-builder-mcp 2.1.0. This affects the function generateChar=
t of the file src/tools/generateAssets.ts of the component generateAssets T= ool. Performing a manipulation of the argument outputDir results in command=
injection. The attack is only possible with local access. The project was = informed of the problem early through an issue report but has not responded=
yet. 2026-08-08 5.3 CVE-2026-19281 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-19281 ] afthemes--WP Post Author Author Box, Multiple Authors, Guest=
Authors & Custom Avatars The WP Post Author - Author Box, Multiple Authors=
, Guest Authors & Custom Avatars plugin for WordPress is vulnerable to gene= ric SQL Injection via the 'wpma_metabox_authors_list' parameter in all vers= ions up to, and including, 3.9.1 due to insufficient escaping on the user s= upplied parameter and lack of sufficient preparation on the existing SQL qu= ery. This makes it possible for authenticated attackers, with author-level = access and above, to append additional SQL queries into already existing qu= eries that can be used to extract sensitive information from the database. = Exploitation is a two-step chain: an attacker first saves a crafted guest-a= uthor token via the wpma_metabox_authors_list parameter during post creatio=
n or editing, then triggers the injection when any admin user loads the pos=
t list screen at /wp-admin/edit.php, causing the injected SQL result to be = rendered in the Authors column. 2026-08-05 6.5 CVE-2026-11977 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-11977 ] aizuda--SnailJob (snail-job) Snail= Job 1.7.0 contains a denial of service vulnerability in the FuryUtil.deseri= alize helper that allows authenticated attackers to crash the server by sup= plying a crafted Zstandard-compressed payload with an inflated frame_conten= t_size field in the frame header. Attackers can store a base64-encoded Zsta= ndard payload declaring an arbitrarily large decompressed size in a retry t= ask argument, causing the JVM to attempt an unbounded array allocation and = triggering an unrecoverable java.lang.OutOfMemoryError when the task is dis= patched through the retry-task pipeline. 2026-08-04 6.5 CVE-2026-69702 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-69702 ] akaunting--akaunting Akau= nting's shared download route (app/Http/Controllers/Common/Uploads.php::dow= nload(), reachable at uploads/{id}/download behind only generic auth middle= ware) fetched the requested Media record by ID with no verification that it=
belonged to the requesting portal customer's own company, allowing any aut= henticated portal customer to download any other company's uploaded files b=
y guessing or enumerating media IDs. Fixed in commit 80ef6d3 (2026-07-12), = which added an explicit ownership check comparing the media's parent record=
contact_id against the requesting user's own contact. 2026-08-05 6.5 CVE-2= 026-71251 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71251 ] Akshay Mena= riya--Export Import Menus Unauthenticated Sensitive Data Exposure in Export=
Import Menus <=3D 1.9.2 versions. 2026-08-06 5.3 CVE-2026-66684 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-66684 ] aktsmm--skill-ninja-mcp-server =
A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. Impa= cted is the function getInstalledSkills/installSkill/updateAgentsMd/uninsta= llSkill of the file src/installer.ts. The manipulation of the argument work= spacePath leads to path traversal. The attack needs to be performed locally=
. Upgrading to version 0.1.1 is recommended to address this issue. The iden= tifier of the patch is 855b46739e0f6e8388f17f9d0066ac4298a3965d. Upgrading = the affected component is recommended. 2026-08-09 5.3 CVE-2026-19328 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-19328 ] Alex--Featured Video Plus U= nauthenticated Sensitive Data Exposure in Featured Video Plus <=3D 2.3.3 ve= rsions. 2026-08-06 5.3 CVE-2026-66685 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-66685 ] aliyun--alibabacloud-dataworks-mcp-server A security flaw = has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.4=
3. The impacted element is the function ReadResourceRequestSchema of the fi=
le src/resources/initResources.ts. The manipulation of the argument request= .params.uri results in server-side request forgery. The attack may be launc= hed remotely. The project was informed of the problem early through an issu=
e report but has not responded yet. 2026-08-09 6.3 CVE-2026-19339 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-19339 ] alphawolf--Simple Yearly Archi=
ve The Simple Yearly Archive plugin for WordPress is vulnerable to Stored C= ross-Site Scripting via the `posttype` attribute of the `SimpleYearlyArchiv=
e` shortcode in all versions up to, and including, 2.2.4 due to insufficien=
t input sanitization and output escaping on user supplied attributes. This = makes it possible for authenticated attackers, with Contributor-level acces=
s and above, to inject arbitrary web scripts in pages that will execute whe= never a user accesses an injected page. 2026-08-05 6.4 CVE-2026-7441 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-7441 ] andreahaku--codex_mcp A vuln= erability was found in andreahaku codex_mcp up to 1ff521cc6cc57cfe56ddef946= c644b8534771390. The affected element is an unknown function of the file sr= c/codex-process-simple.ts of the component ask MCP Tool. The manipulation o=
f the argument model results in command injection. The attack requires a lo= cal approach. This product does not use versioning. This is why information=
about affected and unaffected releases are unavailable. The project was in= formed of the problem early through an issue report but has not responded y= et. 2026-08-09 5.3 CVE-2026-19329 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-19329 ] andreahaku--llm_memory_mcp A weakness has been identified in a= ndreahaku llm_memory_mcp up to f11dc8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. Th=
is impacts the function auto.capture of the file src/autolearn/GitHooksMana= ger.ts of the component llm_memory_mcp. Executing a manipulation of the arg= ument hash can lead to command injection. The attack is restricted to local=
execution. This product does not use versioning. This is why information a= bout affected and unaffected releases are unavailable. The project was info= rmed of the problem early through an issue report but has not responded yet=
. 2026-08-08 5.3 CVE-2026-19282 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-19282 ] angrysky56--advanced-reasoning-mcp A vulnerability was determine=
d in angrysky56 advanced-reasoning-mcp 1.0.0. The impacted element is the f= unction create_system_json/create_library to get_system_json/switch_memory_= library of the file src/index.ts. This manipulation causes path traversal. = The attack requires local access. The project was informed of the problem e= arly through an issue report but has not responded yet. 2026-08-09 5.3 CVE-= 2026-19330 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19330 ] antoineh--= Football Pool The Football Pool plugin for WordPress is vulnerable to Refle= cted Cross-Site Scripting via the `shouttext` POST parameter of the Shoutbo=
x widget in all versions up to, and including, 2.13.4 due to insufficient i= nput sanitization and output escaping. When a shoutbox form submission fail=
s the nonce check (or `shouttext` is empty, or the user is unable to save),=
the raw POST value is echoed back into a `<textarea>` element using `print= f('%s', ...)` with no HTML escaping. This makes it possible for unauthentic= ated attackers to execute arbitrary web scripts in the browser of an authen= ticated victim (Subscriber-level or higher) who is tricked into submitting =
a crafted POST request to a page that contains the Shoutbox widget. 2026-08= -05 6.1 CVE-2026-8790 [ https://www.cve.org/CVERecord?id=3DCVE-2026-8790 ] = anubissbe--ProjectHub-Mcp A weakness has been identified in anubissbe Proje= ctHub-Mcp up to 5.0.0. This affects an unknown function of the file backend= -fix/complete_backend.js of the component Webhooks API. This manipulation o=
f the argument url causes server-side request forgery. Remote exploitation =
of the attack is possible. The project was informed of the problem early th= rough an issue report but has not responded yet. 2026-08-09 6.3 CVE-2026-19= 340 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19340 ] Arraytics--WP Eve=
nt SOlution Unauthenticated Broken Authentication in WP Event SOlution <=3D=
4.1.9 versions. 2026-08-06 6.5 CVE-2026-66451 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-66451 ] astralisone--rive-mcp-server-core A vulnerability=
has been found in astralisone rive-mcp-server-core up to db1d0cc4cd5258911= 6360428b7504fd0ca748b3e. This affects an unknown part of the file packages/= mcp-server/src/tools/importRiveFile.ts of the component importRiveFile Flow=
. Such manipulation of the argument libraryId leads to path traversal. The = attack needs to be performed locally. This product implements a rolling rel= ease for ongoing delivery, which means version information for affected or = updated releases is unavailable. The project was informed of the problem ea= rly through an issue report but has not responded yet. 2026-08-08 5.3 CVE-2= 026-19288 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19288 ] ATN-B1--CPD=
LC Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequenc=
y Link Control frames can terminate sessions and lead to a loss of CPDLC fu= nctions requiring a reversion to voice communication and increased controll=
er workload. This type of attack can be carried out remotely over radio fre= quency. 2026-08-07 5.3 CVE-2025-71410 [ https://www.cve.org/CVERecord?id=3D= CVE-2025-71410 ] ATN-B1--CPDLC Broadcast control frames can disconnect mult= iple aircraft simultaneously leading to delayed clearances and air traffic = controller overload. This type of attack can be carried out remotely over r= adio frequency. 2026-08-07 5.3 CVE-2025-71411 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2025-71411 ] ATN-B1--CPDLC Malformed or out-of-sequence frames =
at the Aviation Very High Frequency Link Control X.25 layers cause repeated=
resets which may result in increased workload and reduced situational awar= eness. This type of attack can be carried out remotely over radio frequency=
. 2026-08-07 5.3 CVE-2025-71413 [ https://www.cve.org/CVERecord?id=3DCVE-20= 25-71413 ] Autodesk--Revit A maliciously crafted TIF file, when parsed thro= ugh certain Autodesk products during image import, can cause an Out-of-Boun=
ds Read in the image handling library. A malicious actor can leverage this = vulnerability to cause a denial of service 2026-08-06 5.5 CVE-2026-7405 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-7405 ] automateyournetwork--MCPy= ATS A vulnerability was identified in automateyournetwork MCPyATS up to 0.1= .4. The affected element is the function processGenerateRequest of the file=
mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. T=
he manipulation of the argument folder/name leads to path traversal. The at= tack must be carried out locally. 2026-08-09 5.3 CVE-2026-19338 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-19338 ] AWS--amazon-mq-mcp-server Improp=
er restriction of intended endpoints in the RabbitMQ broker connection tool=
s of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) before 2.0.24 = may allow a remote unauthenticated actor (via prompt injection) to obtain A= mazon MQ for RabbitMQ broker credentials or OAuth access tokens sent to a c= rafted endpoint controlled through a broker hostname introduced in the MCP = client context. To remediate this issue, users should upgrade to version 2.= 0.24. 2026-08-03 6.5 CVE-2026-18655 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-18655 ] AWS--aws-cli Key exchange without entity authentication in t=
he EMR SSH helper commands in Amazon AWS CLI before 1.45.28 and AWS CLI v2 = before 2.35.3 might allow man-in-the-middle attackers to intercept SSHsessi= ons and file transfers via network positioning between the client and the E=
MR cluster endpoint. To remediate this issue, users should upgrade to AWS C=
LI v1 1.45.28 or later, or AWS CLI v2 2.35.3 or later. 2026-08-03 6.8 CVE-2= 026-18654 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18654 ] AWS--docume= ntdb-mcp-server Incorrect authorization in the aggregation pipeline tool in=
Amazon AWS Labs DocumentDB MCP Server before 1.0.12 might allow an authent= icated MCP client to perform inappropriate write operations on the connecte=
d database via write-capable aggregation pipeline stages that bypass the re= ad-only mode enforcement logic. To remediate this issue, users should upgra=
de to version 1.0.12 or later. 2026-08-05 5.5 CVE-2026-18954 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-18954 ] azer--react-analyzer-mcp A security=
flaw has been discovered in azer react-analyzer-mcp up to 335f2a3585f265e2= e88352b59b10d3b478d678b0. Affected by this vulnerability is the function ge= nerateProjectDocs of the file src/index.ts of the component analyze-projec.=
The manipulation of the argument projectName results in path traversal. Th=
e attack is only possible with local access. This product implements a roll= ing release for ongoing delivery, which means version information for affec= ted or updated releases is unavailable. The project was informed of the pro= blem early through an issue report but has not responded yet. 2026-08-09 5.=
3 CVE-2026-19323 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19323 ] bart= ekke8it56w2--new-mcp A vulnerability was determined in bartekke8it56w2 new-= mcp 0.1.0. This impacts the function fs.writeFileSync/fs.existsSync/fs.read= FileSync of the file index.ts of the component geminithinking. This manipul= ation of the argument sessionCommand/sessionPath causes path traversal. The=
attack requires local access. The project was informed of the problem earl=
y through an issue report but has not responded yet. 2026-08-09 5.3 CVE-202= 6-19370 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19370 ] Baserow--Base= row A vulnerability was identified in Baserow up to 2.3.2. Affected by this=
vulnerability is the function verify of the file backend/src/baserow/api/t= wo_factor_auth/views.py of the component 2FA Verify Endpoint. Such manipula= tion leads to improper authentication. The attack may be launched remotely.=
This attack is characterized by high complexity. The exploitation appears =
to be difficult. Upgrading to version 2.3.3 addresses this issue. You shoul=
d upgrade the affected component. The vendor was contacted early, responded=
in a very professional manner and quickly released a fixed version of the = affected product. 2026-08-04 5 CVE-2026-18816 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-18816 ] bazylhorsey--obsidian-mcp-server A vulnerability w=
as identified in bazylhorsey obsidian-mcp-server 1.0.0. This affects the fu= nction readCanvas/writeCanvas of the file src/services/CanvasService.ts. Su=
ch manipulation leads to path traversal. An attack has to be approached loc= ally. The project was informed of the problem early through an issue report=
but has not responded yet. 2026-08-09 5.3 CVE-2026-19331 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-19331 ] bdthemes--Element Pack Addons for Elem= entor Elementor Widgets, Elementor Templates, Elementor Addons The Element = Pack Addons for Elementor plugin for WordPress is vulnerable to Email Heade=
r Injection in all versions up to, and including, 8.3.15 via the `element_p= ack_contact_form` AJAX action. This is due to insufficient sanitization of = newline characters in user-supplied input that gets concatenated into email=
headers. This makes it possible for unauthenticated attackers to inject ar= bitrary email headers into emails sent by the contact form. 2026-08-06 5.3 = CVE-2026-0673 [ https://www.cve.org/CVERecord?id=3DCVE-2026-0673 ] bdthemes= --Element Pack Elementor Addons Unauthenticated Bypass Vulnerability in Ele= ment Pack Elementor Addons <=3D 8.7.13 versions. 2026-08-06 5.3 CVE-2026-65= 502 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65502 ] bdthemes--Ultimat=
e Store Kit Elementor Addons Unauthenticated Broken Access Control in Ultim= ate Store Kit Elementor Addons <=3D 3.0.5 versions. 2026-08-06 6.5 CVE-2026= -25403 [ https://www.cve.org/CVERecord?id=3DCVE-2026-25403 ] beardev--JoomS= port for Sports: Team & League, Football, Hockey & more The JoomSport - for=
Sports: Team & League, Football, Hockey & more plugin for WordPress is vul= nerable to time-based SQL Injection via the 'order' parameter in all versio=
ns up to, and including, 5.7.9 due to insufficient escaping on the user sup= plied parameter and lack of sufficient preparation on the existing SQL quer=
y. This makes it possible for authenticated attackers, with administrator-l= evel access and above, to append additional SQL queries into already existi=
ng queries that can be used to extract sensitive information from the datab= ase. The affected admin page lacks nonce or CSRF protection on the GET requ= est, meaning an unauthenticated attacker could exploit this vulnerability b=
y tricking an authenticated administrator into issuing a crafted request. A= dditionally, the vulnerability is only triggered when the 'orderby' paramet=
er is also present and non-empty alongside the 'order' parameter. 2026-08-0=
5 4.9 CVE-2026-11920 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11920 ] = Bilin Software and Informatics Consultancy Inc.--HUMANIST Digital Human Res= ources Improper Limitation of a Pathname to a Restricted Directory ('Path T= raversal') vulnerability in Bilin Software and Informatics Consultancy Inc.=
HUMANIST Digital Human Resources allows Path Traversal. This issue affects=
HUMANIST Digital Human Resources: from 26.0 before 26.1. 2026-08-04 6.5 CV= E-2026-14194 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14194 ] Bilin So= ftware and Informatics Consultancy Inc.--HUMANIST Digital Human Resources I= nsufficient session expiration vulnerability in Bilin Software and Informat= ics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing Sessio=
n IDs (aka Session Replay). This issue affects HUMANIST Digital Human Resou= rces: from 26.0 before 26.1. 2026-08-04 6.5 CVE-2026-14465 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-14465 ] Bilin Software and Informatics Consul= tancy Inc.--HUMANIST Digital Human Resources Improper neutralization of inp=
ut during web page generation ('cross-site scripting') vulnerability in Bil=
in Software and Informatics Consultancy Inc. HUMANIST Digital Human Resourc=
es allows Stored XSS. This issue affects HUMANIST Digital Human Resources: = from 26.0 before 26.1. 2026-08-04 5.4 CVE-2026-14192 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-14192 ] Bilin Software and Informatics Consultancy = Inc.--HUMANIST Digital Human Resources Observable response discrepancy vuln= erability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digit=
al Human Resources allows Account Footprinting. This issue affects HUMANIST=
Digital Human Resources: from 26.0 before 26.1. 2026-08-04 5.3 CVE-2026-14= 202 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14202 ] Bilin Software an=
d Informatics Consultancy Inc.--HUMANIST Digital Human Resources URL redire= ction to untrusted site ('open redirect') vulnerability in Bilin Software a=
nd Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Phi= shing. This issue affects HUMANIST Digital Human Resources: from 26.0 befor=
e 26.1. 2026-08-04 5.4 CVE-2026-14219 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-14219 ] Blix--Email Blue Mail Calendar App A vulnerability was det= ected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the functio=
n FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component=
react-native-receive-sharing-intent. The manipulation of the argument _dis= play_name results in path traversal. The attack is only possible with local=
access. The exploit is now public and may be used. The vendor was contacte=
d early about this disclosure but did not respond in any way. 2026-08-03 5.=
3 CVE-2026-18648 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18648 ] Bold= Grid--W3 Total Cache Unauthenticated Path Traversal in W3 Total Cache <=3D = 2.10.2 versions. 2026-08-06 6.5 CVE-2026-66695 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-66695 ] boringproxy--boringproxy boringproxy through 0.10=
.0 contains a resource exhaustion vulnerability that allows any authenticat=
ed user to permanently exhaust server file descriptors, goroutines, and mem= ory by sending requests to the GET /loading endpoint with attacker-supplied=
id query parameter values. Because the handler performs no map-lookup vali= dity check and receives on a nil channel that blocks forever, with no timeo= ut, no context cancellation, and no server-side reclamation due to absent H= TTP server timeouts, each malicious request permanently holds one goroutine=
, one file descriptor, and approximately 50 kB of memory until the server's=
file descriptor limit is reached and listener Accept calls fail, halting a=
ll tunnel traffic forwarding for all users. 2026-08-05 6.5 CVE-2026-70616 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-70616 ] Brainstorm Force--Ulti= mate Addons for Elementor Contributor Cross Site Scripting (XSS) in Ultimat=
e Addons for Elementor <=3D 1.45.2 versions. 2026-08-06 6.5 CVE-2026-66688 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-66688 ] cemtan--sar2html A vu= lnerability was detected in cemtan sar2html 4.0.0. This affects an unknown = part of the file sar2html.py of the component Search. Performing a manipula= tion of the argument Search results in sql injection. It is possible to ini= tiate the attack remotely. The exploit is now public and may be used. The v= endor was contacted early about this disclosure but did not respond in any = way. 2026-08-04 6.3 CVE-2026-18719 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-18719 ] chetans9--core-php-admin-panel A flaw has been found in cheta= ns9 core-php-admin-panel up to 90d07ed5aac5e0f09b6a5828d7bb2eb83010763f. Th=
is issue affects some unknown processing of the file /Applications/MAMP/htd= ocs/core-php-admin-panel-master/customers.php. Executing a manipulation of = the argument filter_col can lead to sql injection. The attack may be launch=
ed remotely. The exploit has been published and may be used. This product o= perates on a rolling release basis, ensuring continuous delivery. Consequen= tly, there are no version details for either affected or updated releases. = The vendor was contacted early about this disclosure but did not respond in=
any way. 2026-08-04 6.3 CVE-2026-18766 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18766 ] chirpstack--chirpstack ChirpStack's SQLite-backend devi=
ce tag filtering (chirpstack/src/storage/device.rs, in both get_count() and=
list()) interpolates the user-supplied tag KEY directly into a raw SQL fra= gment via Rust's format!() macro (`dsl::sql::<Bool>(&format!("device.tags->= >'{}' =3D", k)).bind::<Text, _>(v)`), while only the tag VALUE is safely pa= rameter-bound via Diesel's .bind(). An authenticated user with device-list = access can inject SQL via a crafted tag key when the SQLite backend (chirps= tack-sqlite package) is in use; the PostgreSQL backend is unaffected as it = uses Diesel's native JSONB containment operator instead of raw SQL string f= ormatting. 2026-08-05 6.5 CVE-2026-71282 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-71282 ] Cisco--Cisco Catalyst SD-WAN Manager A vulnerability in=
the web-based management interface of Cisco Catalyst SD-WAN Manager could = allow an authenticated, remote attacker to view sensitive information in cl= ear text on an affected system. This vulnerability is due to insufficient a= ccess control enforcement for specific template types that are not included=
in the encryption allowlist. A low-privileged attacker could exploit this = vulnerability by viewing logs on the local system or on a remote logging se= rver. A successful exploit could allow the attacker to view sensitive authe= ntication credentials, which could lead to further compromise of network in= frastructure and connected services. 2026-08-05 6.5 CVE-2026-20294 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-20294 ] Cisco--Cisco Enterprise NFV I= nfrastructure Software A vulnerability in the web-based management interfac=
e of Cisco Integrated Management Controller (IMC) could allow an authentica= ted, remote attacker to conduct a cross-site scripting (XSS) attack against=
a user of the interface. This vulnerability is due to insufficient validat= ion of user input. An attacker could exploit this vulnerability by persuadi=
ng a user of an affected interface to click a crafted link. A successful ex= ploit could allow the attacker to execute arbitrary script code in the brow= ser of the targeted user or access sensitive, browser-based information. 20= 26-08-05 4.8 CVE-2026-20198 [ https://www.cve.org/CVERecord?id=3DCVE-2026-2= 0198 ] Cisco--Cisco IOS XE Software A vulnerability in the web-based manage= ment interface of Cisco IOS XE Software could allow an authenticated, remot=
e attacker with low privileges to cause a denial of service (DoS) condition=
on an affected device. This vulnerability is due to insufficient error han= dling in the web-based management interface. An attacker could exploit this=
vulnerability by authenticating with a malformed certificate. A successful=
exploit could allow the attacker to cause the affected device to reload, r= esulting in a DoS condition. 2026-08-05 6.3 CVE-2026-20311 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-20311 ] Cisco--Cisco IOS XE Software A vulner= ability in the web-based management interface of Cisco IOS XE Software coul=
d allow an authenticated, remote attacker with low privileges to perform a = denial of service (DoS) attack against an affected device. This vulnerabili=
ty is due to insufficient input validation. An attacker could exploit this = vulnerability by sending crafted input to the web-based management interfac=
e of an affected device. A successful exploit could allow the attacker to c= ause the web-based management interface to become unresponsive. 2026-08-05 = 4.3 CVE-2026-20308 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20308 ] Ci= sco--Cisco RoomOS Software A vulnerability in the logging subsystem of Cisc=
o RoomOS could allow an authenticated, local attacker with low privileges t=
o access sensitive information. This vulnerability is due to the logging of=
sensitive information. An attacker could exploit this vulnerability by ena= bling a specific logging level and then collecting the system logs. A succe= ssful exploit could allow the attacker to view sensitive information like u= ser login credentials. 2026-08-05 5.7 CVE-2026-20289 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-20289 ] Cisco--Cisco Terminal Services Agent A vuln= erability in the network driver of Cisco Terminal Service (TS) Agent could = allow an authenticated, remote attacker to bypass firewall rules that are a= ssociated with the account of the attacker. This vulnerability is due to an=
incorrect mapping of network connections to user accounts. An attacker wit=
h at least user-level credentials could exploit this vulnerability by sendi=
ng crafted network traffic to an affected device. A successful exploit coul=
d allow the attacker to inherit the firewall rules associated with a differ= ent user in the system. 2026-08-05 5 CVE-2026-20028 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-20028 ] Cisco--Cisco Unified Computing System (Stand= alone) A vulnerability in the web-based management interface of Cisco IMC c= ould allow an authenticated, remote attacker with Admin privileges to = execute arbitrary commands on the underlying operating system of an affecte=
d system and elevate privileges to root.  This vulnerability is due to=
improper validation of user-supplied input. An attacker could exploit this=
vulnerability by entering crafted inputs to the web-based management inter= face of the affected software. A successful exploit could allow the attacke=
r to execute arbitrary commands on the underlying operating system as the r= oot user.  Cisco has assigned this vulnerability a SIR of High rather = than Medium as the score indicates because additional security implications=
could occur when the attacker becomes root. 2026-08-05 6.5 CVE-2026-2= 0288 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20288 ] CloudFoundry Fou= ndation--BOSH Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metada=
ta attacker to make the agent write a root-owned file with partially attack= er-controlled body to any path ending in .network, and create any missing p= arent directories with mode 0777 via network Alias on Ubuntu. Affected vers= ions: BOSH agent < v2.847.0 (jammy <=3D v1.1202, or noble <=3D v1.364). Low=
er bound unspecified in advisory ("All bosh agent versions"). 2026-08-06 4.=
2 CVE-2026-41861 [ https://www.cve.org/CVERecord?id=3DCVE-2026-41861 ] code= -projects--Task Management System A vulnerability was found in code-project=
s Task Management System 1.0. This affects an unknown part of the file /use= r/UpdateTaskStatus.php. The manipulation of the argument task_id/val result=
s in missing authorization. It is possible to launch the attack remotely. T=
he exploit has been made public and could be used. 2026-08-09 6.5 CVE-2026-= 19345 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19345 ] code-projects--= Task Management System A vulnerability was found in code-projects Task Mana= gement System 1.0. This issue affects some unknown processing of the file /= user/CommentSave.php. The manipulation of the argument comment/task_id/mine= Id/recId/myName/myImage results in cross site scripting. It is possible to = launch the attack remotely. The exploit has been made public and could be u= sed. 2026-08-09 4.3 CVE-2026-19378 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19378 ] codesupplyco--Powerkit Contributor Cross Site Scripting (XSS)=
in Powerkit <=3D 3.1.0 versions. 2026-08-06 6.5 CVE-2026-28178 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-28178 ] Colissimo--Colissimo Officiel : = Mthodes de livraison pour WooCommerce Customer Insecure Direct Object Refer= ences (IDOR) in Colissimo Officiel : M=C3=83=C6=92=C3=82=C2=A9thodes de liv= raison pour WooCommerce <=3D 2.10.0 versions. 2026-08-06 4.3 CVE-2026-66692=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-66692 ] cosmicstack-labs--me= rcury-agent A vulnerability has been found in cosmicstack-labs mercury-agen=
t up to 1.1.12. This vulnerability affects the function PermissionManager.c= heckShellCommand of the file src/capabilities/permissions.ts of the compone=
nt run_command Handler. Such manipulation leads to incorrect privilege assi= gnment. The attack may be performed from remote. The exploit has been discl= osed to the public and may be used. The project was informed of the problem=
early through an issue report but has not responded yet. 2026-08-06 6.3 CV= E-2026-18996 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18996 ] cosmicst= ack-labs--mercury-agent A vulnerability was found in cosmicstack-labs mercu= ry-agent up to 1.1.12. This issue affects the function Agent.handleBgComman=
d of the file src/core/agent.ts of the component bg Command Handler. Perfor= ming a manipulation results in incorrect authorization. It is possible to i= nitiate the attack remotely. The exploit has been made public and could be = used. The project was informed of the problem early through an issue report=
but has not responded yet. 2026-08-06 6.3 CVE-2026-18997 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-18997 ] cosmicstack-labs--mercury-agent A vuln= erability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Im= pacted is the function SubAgent.run of the file src/core/sub-agent.ts of th=
e component delegate_task Tool. Executing a manipulation can lead to improp=
er authorization. It is possible to launch the attack remotely. The exploit=
has been publicly disclosed and may be utilized. The project was informed =
of the problem early through an issue report but has not responded yet. 202= 6-08-06 6.3 CVE-2026-18998 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18= 998 ] Cozmoslabs--Profile Builder Unauthenticated Broken Access Control in = Profile Builder <=3D 3.16.5 versions. 2026-08-06 5.3 CVE-2026-66701 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-66701 ] cozmoslabs--TranslatePress T= ranslate Multilingual sites with AI Translation The Translate Multilingual = sites - TranslatePress plugin for WordPress is vulnerable to Reflected Cros= s-Site Scripting via the 's' parameter in versions up to, and including, 3.= 2.5. This is due to the translate_page() function unconditionally replacing=
the plugin's internal #!trpst# and #!trpen# marker tokens with literal ang=
le brackets across the entire HTML page output after WordPress has already = sanitized and escaped user input - allowing the attacker to bypass WordPres= s's normal HTML escaping by using these tokens, which are not HTML special = characters, in the search query. This makes it possible for unauthenticated=
attackers to inject arbitrary web scripts in pages that execute if they ca=
n successfully trick a user into performing an action such as clicking on a=
specially crafted link. 2026-08-05 6.1 CVE-2026-17505 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-17505 ] Damian Gra--FiboSearch Shop manager Cross=
Site Scripting (XSS) in FiboSearch <=3D 1.33.0 versions. 2026-08-06 5.9 CV= E-2026-28179 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28179 ] danpros-= -HTMLy A vulnerability was identified in danpros HTMLy up to 3.1.1. Affecte=
d by this issue is the function unlink of the file /system/htmly.php of the=
component Delete Username Endpoint. Such manipulation of the argument File=
leads to path traversal. The attack can be launched remotely. The exploit =
is publicly available and might be used. The vendor was contacted early abo=
ut this disclosure but did not respond in any way. 2026-08-03 5.4 CVE-2026-= 18644 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18644 ] danpros--HTMLy =
A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affe= cts the function add_content of the file /system/admin/admin.php of the com= ponent Admin Content Endpoint. Performing a manipulation of the argument ol= dfile results in path traversal. The attack may be initiated remotely. The = exploit has been released to the public and may be used for attacks. The ve= ndor was contacted early about this disclosure but did not respond in any w= ay. 2026-08-03 5.4 CVE-2026-18645 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-18645 ] danpros--HTMLy A weakness has been identified in danpros HTMLy=
up to 3.1.1. This vulnerability affects unknown code of the file /system/h= tmly.php of the component Author Name Handler. Executing a manipulation of = the argument Name can lead to path traversal. The attack may be launched re= motely. The exploit has been made available to the public and could be used=
for attacks. The vendor was contacted early about this disclosure but did = not respond in any way. 2026-08-03 5.3 CVE-2026-18646 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-18646 ] dartiss--code-embed The Code Embed WordPre=
ss plugin prior to version 2.6.1 is vulnerable to stored Cross-Site Scripti=
ng (XSS) through the external URL embed feature in post content. The vulner= able code scans rendered content for URL embed tokens, fetches the remote U= RL, and inserts the remote response body into the page without output sanit= ization or an `unfiltered_html` capability check. This allows a Contributor=
attacker to submit a pending post containing an inert-looking URL token th=
at executes attacker-controlled JavaScript when an Administrator or Editor = previews or reviews the post. This is distinct from CVE-2026-2512, which af= fected custom field meta values up to version 2.5.1. This vector affects ve= rsion 2.6 and uses the documented external URL embed feature in post conten=
t. This particular issue is patched in version 2.6.1. 2026-08-07 6.5 CVE-20= 26-48093 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48093 ] DataPress (D= ataverse Integration)--DataPress (Dataverse Integration) The DataPress (Dat= averse Integration) WordPress plugin before 2.91 does not properly restrict=
access to its template rendering feature and exposes the viewing user's da=
ta to it, allowing users with a role as low as Contributor to disclose sens= itive information, such as the session cookies of higher privileged users w=
ho view the affected content. 2026-08-06 6.8 CVE-2026-5336 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-5336 ] decidim--decidim Decidim is a particip= atory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, and =
in 0.32.0.rc1 before 0.32.0.rc2, the /admin/csv_census/census_logs record-m= anagement endpoints do not enforce full administrator authorization before = rendering or mutating Decidim::Verifications::CsvDatum, allowing a particip= ant manager to create, alter, or remove census records. This issue is fixed=
in versions 0.30.9, 0.31.5, and 0.32.0.rc2. 2026-08-06 6 CVE-2026-45415 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-45415 ] decidim--decidim Decidi=
m is a participatory democracy framework. Prior to 0.30.9, from 0.31.0 befo=
re 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, when VAPID delivery is enab= led, the notification subscription flow stores a client-supplied push endpo= int without validating that it belongs to an approved push service, and Sen= dPushNotification later passes that endpoint to WebPush.payload_send, allow= ing an authenticated user to create stored, mostly blind server-side reques=
ts to arbitrary reachable HTTPS endpoints. This issue is fixed in versions = 0.30.9, 0.31.5, and 0.32.0.rc2. 2026-08-06 6.4 CVE-2026-45573 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-45573 ] decidim--decidim Decidim is a part= icipatory democracy framework. Prior to 0.30.9, from 0.31.0 before 0.31.5, = and in 0.32.0.rc1 before 0.32.0.rc2, an administrator with landing-page edi= ting privileges can store arbitrary HTML and JavaScript in an HTML content = block, which Decidim::ContentBlocks::HtmlCell#html_content renders without = sanitization, causing the script to execute in visitors' browsers. This iss=
ue is fixed in versions 0.30.9, 0.31.5, and 0.32.0.rc2. 2026-08-06 4.8 CVE-= 2026-45572 [ https://www.cve.org/CVERecord?id=3DCVE-2026-45572 ] Deciso B.V= .--OPNsense OPNsense before 26.1.9 contains a stored cross-site scripting v= ulnerability that allows authenticated attackers with firewall rule managem= ent privileges to inject arbitrary HTML or JavaScript by embedding payloads=
in the firewall rule description field via the filter API endpoint. The un= sanitized description value is persisted and later rendered through the def= ault cell formatter in opnsense_bootgrid.js, which assigns raw cell content=
to innerHTML, causing injected scripts to execute in the browser of any au= thenticated user who views the Firewall Rules page, enabling session hijack= ing or credential theft. 2026-08-03 5.4 CVE-2026-49131 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-49131 ] Deciso B.V.--OPNsense OPNsense before 26.= 1.9 contains a stored cross-site scripting vulnerability that allows authen= ticated attackers to inject arbitrary HTML or JavaScript by embedding paylo= ads in the certificate description field via the trust certificate API. The=
unsanitized description value is persisted and later rendered in the Dashb= oard Certificates widget through Certificates.js, which interpolates the ra=
w value into HTML attribute and text content sinks without encoding, causin=
g injected scripts to execute in the browser of any authenticated user who = views the Dashboard, enabling session hijacking or credential theft. 2026-0= 8-03 5.4 CVE-2026-49132 [ https://www.cve.org/CVERecord?id=3DCVE-2026-49132=
] DedeCMS--DedeCMS A vulnerability has been found in DedeCMS up to 5.7.118=
UTF8SP2. The affected element is the function _4_Setup of the file install= /index.php of the component Installation Wizard. Such manipulation leads to=
file inclusion. The attack can be executed remotely. This attack is charac= terized by high complexity. The exploitability is described as difficult. T=
he exploit has been disclosed to the public and may be used. 2026-08-09 5 C= VE-2026-19353 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19353 ] Dell--D= ell OpenManage Server Administrator Managed Node (Patch) for Windows Dell O= penManage Server Administrator, versions prior to 11.1.0.2, contains a Rela= tive Path Traversal vulnerability. A low privileged attacker with remote ac= cess could potentially exploit this vulnerability, leading to Filesystem ac= cess for attacker. 2026-08-07 6.5 CVE-2026-56794 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-56794 ] Dell--Monitor driver Dell Monitor driver, versi=
on 1.0.0.0, contains an Improper Link Resolution Before File Access ('Link = Following') vulnerability. A low privileged attacker with local access coul=
d potentially exploit this vulnerability, leading to Elevation of Privilege=
s. 2026-08-03 6.6 CVE-2026-40717 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-40717 ] Dell--RVTools Dell RVTools versions prior to 4.8.1, contains an=
improper certificate validation vulnerability in the collector. A remote u= nauthenticated attacker could potentially exploit this vulnerability leadin=
g to loss of confidentiality and integrity. 2026-08-06 6.8 CVE-2026-64993 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-64993 ] dgtlmoon--changedetect= ion.io changedetection.io's /settings save handler builds an update dict fr=
om form.data['application'] and blind-merges it into the stored application=
settings via .update(). Because WTForms represents an unchecked checkbox a=
s False rather than 'unchanged', and only the 'password' field is special-c= ased against this problem, a POST to /settings that omits the api_access_to= ken_enabled field (e.g. a minimal scripted request) silently disables API k=
ey enforcement for the entire REST API, exposing the full watch list, histo= ry, and configuration to unauthenticated requests. 2026-08-05 6.3 CVE-2026-= 71204 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71204 ] dgtlmoon--chang= edetection.io changedetection.io's /login route checks the submitted passwo=
rd against a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session r= ate limiting, failed-attempt counter, or lockout (no rate-limiting library =
is present in requirements.txt). Because the entire application is protecte=
d by one shared password with no per-user accounts, a successful brute-forc=
e guess grants full administrative access, including the ability to view/re= generate the API token. 2026-08-05 6.5 CVE-2026-71205 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-71205 ] dgtlmoon--changedetection.io changedetecti= on.io's REST API resources are protected by an @auth.check_token decorator = validating the caller's x-api-key header, except the Spec resource register=
ed at /api/v1/full-spec (changedetectionio/api/Spec.py), whose get() method=
carries neither @auth.check_token nor @validate_openapi_request. An unauth= enticated client can retrieve the full merged OpenAPI schema (all endpoint = paths, parameters, and registered processor plugins) even when API access c= ontrol is enabled and every sibling /api/v1/* route correctly requires the = key. 2026-08-05 5.3 CVE-2026-71203 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-71203 ] diaowen--DWSurvey A vulnerability was found in diaowen DWSurv=
ey up to 6.14.0. Impacted is the function in DwDeisgnSurveyController.devSu= rvey. of the file /api/dwsurvey/app/v6/dw-design-survey/dev-survey.do of th=
e component Survey Handler. The manipulation results in authorization bypas=
s. The attack can be launched remotely. The exploit has been made public an=
d could be used. The vendor was contacted early about this disclosure but d=
id not respond in any way. 2026-08-04 6.3 CVE-2026-18722 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-18722 ] diaowen--DWSurvey A vulnerability was d= etermined in diaowen DWSurvey up to 6.14.0. The affected element is an unkn= own function of the file /api/dwsurvey/app/survey/up-survey-status.do of th=
e component Survey Status Handler. This manipulation causes improper author= ization. The attack may be initiated remotely. The exploit has been publicl=
y disclosed and may be utilized. The vendor was contacted early about this = disclosure but did not respond in any way. 2026-08-04 6.3 CVE-2026-18723 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-18723 ] diboot--diboot-core dib= oot-core's POST /common/load-related-data endpoint resolves caller-supplied=
field names to any @TableField column of any entity and returns those valu=
es for all rows, with no field or entity allowlist. The only guard, related= DataSecurityCheck(), returns true unconditionally, so any authenticated use=
r (including a zero-role account) can read @JsonIgnore-annotated secret fie= lds such as IamAccount.authSecret and IamAccount.secretSalt for every accou= nt, or arbitrary secret fields of any other entity. Shiro's two-iteration M=
D5 with an 8-character salt is trivially crackable offline, so the disclose=
d admin password hashes convert to full administrative takeover. The endpoi=
nt is not example code; the official diboot-admin-ui frontend requires it, =
so deployments following the vendor's recommended integration expose it. Th=
e mechanism was renamed relatedData* to attachMore* on the development bran= ch, but attachMoreSecurityCheck() also returns true unconditionally. 2026-0= 8-06 6.5 CVE-2026-70557 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70557=
] DjangoCRM--django-crm DjangoCRM's toggle_default_sorting view is the onl=
y route in common/urls.py that is not wrapped in login_required or staff_me= mber_required, and it redirects to a caller-supplied next_url GET parameter=
after only checking secure_url(next_url), which merely verifies the target=
host matches the current site's domain (blocking only cross-domain redirec= ts) while allowing any same-site path with no authentication required to re= ach the view. This enables unauthenticated phishing redirects and referrer-= based token leakage via redirect chains. 2026-08-05 4.3 CVE-2026-71240 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-71240 ] djangoproject--Django An = issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `dja= ngo.contrib.admin.utils.display_for_field()` renders `URLField` values as c= lickable links in the admin without validating the URL. A value stored with=
an unsafe scheme is displayed as a link on changelist and read-only admin = pages, which allows cross-site scripting against staff users who click the = link. Exploitation requires the unsafe value to already be stored in the da= tabase. `URLField` validation through a `ModelForm` or the admin rejects un= safe schemes, so this affects applications that persist `URLField` data wit= hout running model validation, for example through direct queryset writes, = deserialization, or bulk import of untrusted input. Django would like to th= ank Egor Saltykov for reporting this issue. 2026-08-04 6.1 CVE-2026-15920 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-15920 ] djangoproject--Django =
An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. `= django.utils.translation.check_for_language()` is subject to a potential de= nial-of-service attack when given many distinct, very long language codes, = which are retained as keys in an in-memory cache and consume process memory=
. Such codes reach the function through the `django.views.i18n.set_language= ()` view, which is not routed by default. The consumed memory is bounded, s= ince request data is limited by the `DATA_UPLOAD_MAX_MEMORY_SIZE` setting (= default 2.5 MB) and the cache holds a fixed maximum number of entries. Earl= ier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not e= valuated and may also be affected. Django would like to thank Jaeyoung Jang=
for reporting this issue. 2026-08-04 5.3 CVE-2026-15337 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-15337 ] djangoproject--Django An issue was disc= overed in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango's `djang= o.contrib.gis.geos.GEOSGeometry` is subject to a potential denial-of-servic=
e when parsing deeply nested `GEOMETRYCOLLECTION` objects supplied as well-= known text (WKT), well-known binary (WKB), or hex-encoded WKB, which trigge=
rs unbounded recursion and a segmentation fault in the underlying GEOS libr= ary. Spatial field lookups and the `django.contrib.gis.forms.GeometryField`=
form field are also affected. Earlier, unsupported Django series (such as = 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected. Djang=
o would like to thank Andrew MacPherson and kimchunbok_ for reporting this = issue. 2026-08-04 5.3 CVE-2026-15830 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-15830 ] dmitriiweb--article-scraper-mcp A vulnerability was detecte=
d in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the f= unction fetch_article of the file news_scraper_mcp/server.py. The manipulat= ion of the argument url results in server-side request forgery. The attack = may be performed from remote. The exploit is now public and may be used. Th=
e project was informed of the problem early through an issue report but has=
not responded yet. 2026-08-09 6.3 CVE-2026-19375 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-19375 ] documenso--documenso Documenso's sign-field-wi= th-token.ts, used by the live document-signing UI, allows a recipient with = the ASSISTANT role to fetch and complete fields belonging to any later-or-e= qual-order, not-yet-signed recipient in the same envelope, with no restrict= ion on field type. The handler upserts a Signature record tied to the targe=
t field's recipientId with no check that field.type is SIGNATURE and the ac= ting recipient owns it. A newer V2 signing path (sign-envelope-field.ts) ex= plicitly blocks assistants from completing SIGNATURE fields, and the projec= t's own test suite comments confirm this guard is absent from the V1 path u= sed here. In a sequential-signing document, an assistant recipient can ther= efore forge another signer's signature field. 2026-08-05 6.5 CVE-2026-71247=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-71247 ] Dokan, Inc.--Dokan C= ustom role Broken Access Control in Dokan <=3D 5.0.10 versions. 2026-08-06 = 5.3 CVE-2026-66699 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66699 ] Do= libarr--ERP A vulnerability has been found in Dolibarr ERP up to 23.0.3. Af= fected is the function fail of the file htdocs/takepos/invoice.php of the c= omponent TakePOS Module. Such manipulation leads to missing authorization. = The attack may be performed from remote. The name of the patch is 8992ce870= 4da947b6abe7b65a6fe59aed736bb81. It is advisable to implement a patch to co= rrect this issue. 2026-08-09 6.3 CVE-2026-19350 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-19350 ] Domoticz--Domoticz Domoticz versions prior to 20= 26.3 contains a stored cross-site scripting vulnerability in the mobile das= hboard that allows authenticated attackers to inject arbitrary HTML and Jav= aScript by updating Text or Alert subtype device values through the API. Th=
e mobile dashboard renders device data via ng-bind-html with only an nl2br(=
) transform that performs no HTML escaping, allowing attackers to store mal= icious payloads that execute in any administrator's browser upon viewing th=
e mobile dashboard, enabling session cookie theft and account takeover. 202= 6-08-07 4.4 CVE-2026-11425 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11= 425 ] duckdb--duckdb-aws The DuckDB AWS extension for DuckDB contains a sec= urity policy bypass vulnerability that allows any database user with SQL ex= ecution permissions to extract plaintext AWS credentials by calling the loa= d_aws_credentials function with the redact_secret parameter set to false, c= ircumventing the database-wide allow_unredacted_secrets=3Dfalse policy. Att= ackers can invoke this single function to retrieve the underlying AWS crede= ntial chain including access_key_id, secret_access_key, session_token, and = region in plaintext, which are immediately valid against AWS APIs and parti= cularly impactful in managed environments where pg_duckdb is preloaded and =
an AWS credential chain such as IMDSv2, IRSA, ECS task role, or EC2 instanc=
e role is reachable. 2026-08-03 6.5 CVE-2026-58139 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-58139 ] Easy Booking--Easy Booking The Easy Booking W= ordPress plugin before 3.5.0 does not re-enforce a bookable product's confi= gured minimum booking duration on the server side when adding to cart and c= alculating the booking price, allowing unauthenticated users to place below= -minimum bookings and complete underpriced orders. 2026-08-06 5.3 CVE-2026-= 14831 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14831 ] Ehco1996--djang= o-sspanel A weakness has been identified in Ehco1996 django-sspanel up to 2= 023.12.26. This affects the function TicketDetailView of the file apps/sspa= nel/views.py of the component Support Ticket Handler. Executing a manipulat= ion can lead to authorization bypass. The attack can be executed remotely. = The vendor was contacted early about this disclosure but did not respond in=
any way. This vulnerability only affects products that are no longer suppo= rted by the maintainer. 2026-08-04 6.3 CVE-2026-18818 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-18818 ] ELAN Microelectronics Corp.--ELAN Smart-Pa=
d A stack-based buffer overflow vulnerability exists in ELAN Microelectroni=
cs Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Intel=
SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on the = hardware-derived report count, allowing an out-of-range value to be forward=
ed to ETD.sys where it is used as a loop counter for a stack buffer copy wi= thout destination size validation. A local attacker with standard user priv= ileges can trigger a kernel bugcheck (BSOD 0xF7 DRIVER_OVERRAN_STACK_BUFFER=
), resulting in denial of service. This issue affects ELAN Smart-Pad throug=
h ETD24.21.52.3. 2026-08-06 4.7 CVE-2026-18909 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-18909 ] electron--electron Electron is a framework for wr= iting cross-platform desktop applications using JavaScript, HTML and CSS. P= rior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses =
on macOS to confirm it was launched by a same-signed parent process could b=
e bypassed by a local process. Apps that enable fuse-based hardening restri= cting ELECTRON_RUN_AS_NODE and NODE_OPTIONS to same-signed parents rely on = this check, and a local attacker could bypass it and run code inside the si= gned app, inheriting its TCC permissions and keychain access. This issue is=
fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3. 2026-08-05 6.3 CVE-202= 6-70597 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70597 ] electron--ele= ctron Electron is a framework for writing cross-platform desktop applicatio=
ns using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.= 0.0-beta.3, extension tab and scripting APIs were not scoped to the extensi= on's own session. A malicious or compromised extension loaded into one sess= ion could navigate, script, and read from windows belonging to a different = session. Apps are only affected if they load Chrome extensions via session.= loadExtension and rely on separate sessions to isolate that extension from = other content. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and = 42.0.0-beta.3. 2026-08-05 6.6 CVE-2026-70602 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-70602 ] electron--electron Electron is a framework for writ= ing cross-platform desktop applications using JavaScript, HTML and CSS. Pri=
or to 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1, shell.openPath() did not r= eject paths containing embedded null bytes. Apps that perform string-only v= alidation of file paths, for example checking the file extension, before pa= ssing them to shell.openPath() could be bypassed, allowing an attacker-cont= rolled path to open a different file than the one that passed validation. A= pps are only affected if they pass paths derived from untrusted input to sh= ell.openPath() and rely on string-based validation without a filesystem che= ck. This issue is fixed in versions 39.8.6, 40.9.0, 41.1.1, and 42.0.0-beta= .1. 2026-08-05 6 CVE-2026-70603 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-70603 ] electron--electron Electron is a framework for writing cross-pla= tform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.9,=
40.9.2, 41.2.1, and 42.0.0-beta.3, the DevTools reveal in file manager act= ion could launch the target file rather than reveal it. An attacker with a = separate means of running script inside the DevTools frontend, such as a ma= licious DevTools extension, could use showItemInFolder handling to execute = native code outside the sandbox when DevTools is opened for windows exposed=
to untrusted content or untrusted DevTools extensions. This issue is fixed=
in 39.8.9, 40.9.2, 41.2.1, and 42.0.0-beta.3. 2026-08-05 6.9 CVE-2026-7061=
1 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70611 ] electron--electron = Electron is a framework for writing cross-platform desktop applications usi=
ng JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.0-be= ta.1, serial-port and media permission checks made from an iframe passed th=
e top-level frame origin to session.setPermissionCheckHandler instead of th=
e requesting iframe origin. Origin-based handler logic could grant a cross-= origin iframe device access intended only for the top-level origin. This is= sue is fixed in 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1. 2026-08-05 5.9 C= VE-2026-70599 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70599 ] electro= n--electron Electron is a framework for writing cross-platform desktop appl= ications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, a=
nd 42.0.0-beta.3, when following HTTP redirects, net.fetch() and net.reques= t() did not restrict which schemes a redirect could target. A remote server=
could redirect a request to a local resource, and if the app returns or fo= rwards the response body, local file contents could be disclosed. Apps are = only affected if they make net requests to attacker-influenced URLs with re= directs followed and expose the response body. This issue is fixed in versi= ons 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3. 2026-08-05 5.9 CVE-2026-7060=
5 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70605 ] electron--electron = Electron is a framework for writing cross-platform desktop applications usi=
ng JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0.0, = when a custom protocol handler returned a ProtocolResponse with a url and n=
o session, Electron made the upstream request through defaultSession instea=
d of the session that handled the protocol. A cached response could then be=
reused across otherwise isolated session partitions. Apps that use Protoco= lResponse.url, omit ProtocolResponse.session, and rely on separate sessions=
to isolate content are affected. This issue is fixed in versions 40.10.6, = 41.9.1, 42.5.1, and 43.0.0. 2026-08-05 5.9 CVE-2026-70606 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-70606 ] electron--electron Electron is a frame= work for writing cross-platform desktop applications using JavaScript, HTML=
and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, some window o= ptions supplied by web content in the window.open() features string were ap= plied to the new BrowserWindow without an allowlist. Untrusted content coul=
d set window options it should not control, including options that cause th=
e main process to access attacker-chosen file or network paths, when untrus= ted content can call window.open() and the app does not override child wind=
ow options via setWindowOpenHandler or overrideBrowserWindowOptions. This i= ssue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3. 2026-08-05 5.3 = CVE-2026-70607 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70607 ] electr= on--electron Electron is a framework for writing cross-platform desktop app= lications using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, = and 42.0.0-beta.1, the mode option of webContents.openDevTools() was not sa= nitized before use by the DevTools frontend. If an attacker can influence t= his value, script under their control may run in the DevTools context, whic=
h in unsandboxed configurations has access to Node.js, including when untru= sted input reaches the mode argument of openDevTools() or untrusted content=
calls openDevTools() on a webview it embeds. This issue is fixed in 39.8.7=
, 40.9.0, 41.2.0, and 42.0.0-beta.1. 2026-08-05 5.7 CVE-2026-70609 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-70609 ] electron--electron Electron i=
s a framework for writing cross-platform desktop applications using JavaScr= ipt, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.0-beta.4, obje= cts copied across the contextBridge boundary from untrusted content could c= arry an attacker-influenced prototype, enabling prototype-pollution-style a= ttacks against preload code despite context isolation being enabled. Apps a=
re only affected if their preload code accepts object arguments from untrus= ted content and reads properties from them without own-property checks, whi=
le apps that only accept primitive arguments or validate object arguments a=
re not affected. This issue is fixed in 39.8.9, 40.9.2, 41.2.2, and 42.0.0-= beta.4. 2026-08-05 5.4 CVE-2026-70610 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-70610 ] electron--electron Electron is a framework for writing cro= ss-platform desktop applications using JavaScript, HTML and CSS. Prior to 3= 9.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, requests to open external protoco=
l URLs from web content did not take iframe sandbox restrictions into accou= nt, so a sandboxed iframe could cause an OS-registered external application=
to be launched. The frame sandbox state was also not made available to the=
app permission handlers, affecting apps that render untrusted content in s= andboxed iframes and grant the openExternal permission by default when no s= etPermissionRequestHandler is installed. This issue is fixed in 39.8.8, 40.= 9.0, 41.2.1, and 42.0.0-beta.3. 2026-08-05 5.4 CVE-2026-70612 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-70612 ] Endress+Hauser--FDI Package librar=
y A vulnerability in the iDTM FDI allows an attacker with elevated privileg=
es and access to the host system to enable the debug interface by placing a=
crafted file in the application directory, potentially resulting in unauth= orized access to connected devices and exposure, modification, or disruptio=
n of device data or operation. 2026-08-03 6.7 CVE-2026-9593 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-9593 ] esphome--esphome ESPHome through 2026= .7.0-dev discloses plaintext passwords via its web_server component. In Web= Server::text_json_() (esphome/components/web_server/web_server.cpp), a text=
entity configured with mode: password (TEXT_MODE_PASSWORD) has its JSON "s= tate" field correctly masked as "********", but the same serialization path=
unconditionally writes the raw password into the JSON "value" field via se= t_json_icon_state_value()/set_json_value(). Because web_server listens on p= ort 80 with no authentication by default, any attacker on the local network=
can retrieve the plaintext password (e.g. WiFi credentials, API tokens) vi=
a GET /text/<entity_id> or the /events EventSource stream. 2026-08-05 6.5 C= VE-2026-71260 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71260 ] Eugeny-= -russh Russh is a Rust SSH client & server library. Prior to 0.62.5, russh = dispatches channel-scoped Handler callbacks for recipient channel IDs that = were never opened or confirmed in russh/src/server/encrypted.rs, server_rea= d_authenticated, and the exec_request callback. Version 0.62.5 fixes the is= sue. 2026-08-03 6.5 CVE-2026-68930 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-68930 ] Eukaryot--sonic3air Sonic 3 A.I.R. before commit 2492d18 cont= ains a missing source address validation vulnerability in ConnectionManager=
where established connections are resolved by a two-byte local connection = handle alone without verifying that the datagram source address matches the=
registered remote address for the connection. An on-path attacker who can = observe cleartext UDP traffic can inject arbitrary packets into any establi= shed session by forging the two-byte connection identifier, enabling sessio=
n termination via TerminateConnectionPacket, arbitrary channel message forg= ery, and forged request responses without requiring IP address spoofing. 20= 26-08-06 5.9 CVE-2026-66732 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6= 6732 ] Event Booking Manager for WooCommerce (Pro)--Event Booking Manager f=
or WooCommerce (Pro) The Event Booking Manager for WooCommerce (Pro) WordPr= ess plugin before 5.0.3 does not validate the ticket price on the server du= ring its native (non-WooCommerce) checkout, trusting the per-ticket price s= upplied by the client instead of re-deriving the event's configured price. = This allows unauthenticated users to book paid event tickets for free, obta= ining completed bookings and valid tickets at no cost. 2026-08-06 5.3 CVE-2= 026-16067 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16067 ] Events Made=
Easy--Events Made Easy The Events Made Easy WordPress plugin before 3.1.2 = does not bind the payment authorization token to the payment record being c= harged, allowing unauthenticated attackers to pay a low amount for a cheap = booking and have a separate, higher-priced booking marked as fully paid. 20= 26-08-06 5.3 CVE-2026-14842 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1= 4842 ] facelessuser--pymdown-extensions PyMdown Extensions is a set of exte= nsions for the Python-Markdown markdown project. In versions up to and incl= uding 10.21.3, the b64 extension is vulnerable to a path traversal that dis= closes arbitrary files: it inlines images referenced by <img src=3D"..."> b=
y joining the src onto the configured base_path with os.path.normpath and o= pening the result directly, without verifying that the resolved path stays = inside base_path. As a result, an src containing ../ sequences or an absolu=
te path reads a file outside base_path as long as it has an allowed image e= xtension (.png, .jpg, .jpeg, .gif, .svg), and the file's contents are then = base64-encoded into the rendered output, disclosing them. An application th=
at renders untrusted Markdown with pymdownx.b64 enabled can therefore leak = the contents of image-extension files readable by the process to whoever co= ntrols the Markdown or views the output, a targeted file-read bounded by th=
e extension check. This issue has been fixed in version 11.0. 2026-08-06 5.=
3 CVE-2026-61632 [ https://www.cve.org/CVERecord?id=3DCVE-2026-61632 ] FFmp= eg--FFmpeg FFmpeg versions from 3.0 up to, but not including, 9.0 contain a=
n uninitialized heap memory read vulnerability in the native RSCC decoder (= libavcodec/rscc.c) that allows attackers to disclose heap memory contents b=
y supplying a crafted video file with a compressed tile that decompresses f= ewer bytes than the declared tile geometry requires. When rscc_decode_frame=
() calls av_image_copy_plane() without validating the decompressed byte cou=
nt against the tile dimensions, the unwritten suffix of the persistent inte= rmediate buffer ctx->inflated_buf is copied into the decoded frame, potenti= ally exposing data from prior heap allocations or previous decoded frames i=
n persistent decoding services. 2026-08-06 5.5 CVE-2026-70629 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-70629 ] FFmpeg--FFmpeg FFmpeg versions fro=
m 3.0 up to, but not including, 9.0 contain an uninitialized heap memory re=
ad vulnerability in the native Screenpresso decoder (libavcodec/screenpress= o.c) that allows attackers to recover sensitive memory contents by supplyin=
g a crafted SPV1 packet with a valid zlib stream that decompresses fewer by= tes than the full frame requires. The screenpresso_decode_frame() function = fails to validate the produced byte count before calling av_image_copy_plan= e() to copy the complete frame dimensions from the persistent ctx->inflated= _buf buffer, causing unwritten heap memory from prior allocations or prior = frames to be copied into decoded output and potentially exposing sensitive = data such as userspace addresses from persistent decoding services. 2026-08= -06 5.5 CVE-2026-70630 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70630 =
] FFmpeg--FFmpeg FFmpeg versions from 0.5 up to, but not including, 9.0 con= tain an uninitialized heap memory disclosure vulnerability in the native TI=
FF decoder in libavcodec/tiff.c. An attacker who can cause FFmpeg to decode=
a crafted TIFF file can supply a valid Deflate-compressed strip that termi= nates successfully after producing fewer bytes than the declared strip requ= ires. The tiff_unpack_zlib() function allocates a heap buffer sized for the=
full declared strip but copies all declared rows via memcpy() regardless o=
f how many bytes zlib actually decompressed, causing unwritten bytes that c=
an contain stale data from prior heap allocations to be incorporated into d= ecoded image output and potentially exposing sensitive data in persistent s= ervices. 2026-08-06 5.5 CVE-2026-70631 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-70631 ] firefly-iii--firefly-iii Firefly III's webhook URL vali= dator (IsValidWebhookUrl.php) filters most private/reserved IPv4 ranges but=
contains an explicit early-return that allows any resolved address in 127.= 0.0.0/8, permitting an authenticated user (with webhooks enabled, which is = off by default) to configure a webhook targeting loopback services on the s= erver. Additionally, the validator resolves the target hostname once via ge= thostbyname() at validation time, but the actual outbound request (Standard= WebhookSender.php, via Guzzle) re-resolves the hostname independently at se=
nd time, allowing a DNS-rebinding attacker to pass validation against a pub= lic IP and have the real request delivered to a private or internal address=
. The webhook response body is only written to a server-side debug log, not=
returned to the triggering user, so this is a blind SSRF primitive rather = than one with direct response read-back. 2026-08-05 4.3 CVE-2026-71250 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-71250 ] Five Star Restaurant Rese= rvations--Five Star Restaurant Reservations The Five Star Restaurant Reserv= ations WordPress plugin before 2.7.23 does not verify the authenticity of i= ncoming payment notifications, failing to validate the payment recipient, a= mount, and status or to bind the notification to the intended booking, allo= wing unauthenticated attackers to mark arbitrary pending reservations as pa=
id and confirmed. 2026-08-06 5.3 CVE-2026-15147 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-15147 ] Flarum--Flarum Framework Flarum before 1.8.16 co= ntains an improper session invalidation vulnerability that allows attackers=
who hold a valid session token to retain full account access after a victi=
m changes their password, because the access_tokens table is never cleared =
on password change events. The TokensClearer::clearPasswordTokens() functio=
n only removes rows from the password_tokens table while leaving all active=
session cookies and API bearer tokens intact, including long-lived Remembe= rAccessToken entries, and administrator-forced password resets via the user=
update endpoint are equally ineffective at revoking attacker-held sessions=
. 2026-08-05 6.8 CVE-2026-39924 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-39924 ] fledge-iot--fledge Fledge's backup-restore upload handler, uploa= d_backup() (python/fledge/services/core/api/backup_restore.py), calls tarfi= le.extractall(temp_path) on an admin-uploaded tar archive with no filter ar= gument and no per-member path validation. A crafted tar archive containing = member names with `../` path components extracts files outside the intended=
temporary directory, allowing arbitrary file writes anywhere on the filesy= stem reachable by the Fledge process. Requires the admin role (@has_permiss= ion("admin")). 2026-08-05 4.9 CVE-2026-71283 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-71283 ] Formidable Forms--Formidable Forms The Formidable F= orms WordPress plugin before 6.32.1 does not properly validate the status o=
f a PayPal subscription payment before marking it complete, allowing unauth= enticated users to bypass payment and trigger paid form actions - such as d= igital content access, license delivery, and membership activation - withou=
t being charged. 2026-08-06 5.9 CVE-2026-11361 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-11361 ] FoundationAgents--MetaGPT A vulnerability was fou=
nd in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the fun= ction DataInterpreter of the file metagpt/roles/di/data_interpreter.py. The=
manipulation results in code injection. The attack must be initiated from =
a local position. The exploit has been made public and could be used. The v= endor was contacted early about this disclosure but did not respond in any = way. 2026-08-06 5.3 CVE-2026-19058 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19058 ] FoundationAgents--MetaGPT A vulnerability was identified in F= oundationAgents MetaGPT up to 0.8.2. This impacts an unknown function. Such=
manipulation leads to code injection. The attack needs to be performed loc= ally. The exploit is publicly available and might be used. The vendor was c= ontacted early about this disclosure but did not respond in any way. 2026-0= 8-06 5.3 CVE-2026-19060 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19060=
] getgrav--grav-plugin-form The Grav form plugin (getgrav/grav-plugin-form=
) before 9.1.13 contains an open redirect vulnerability. Since v9.1.11, the=
redirect process action evaluates user-supplied form data inside Twig expr= essions, and Grav::redirect() accepts external URLs without origin validati= on. When a form blueprint defines a redirect target such as redirect: "{{ f= orm.value('next') }}" using an attacker-controllable field, an unauthentica= ted form submitter can supply a value like https://evil.com to cause a 302 = redirect to an arbitrary external site, enabling phishing. 2026-08-03 6.5 C= VE-2026-69087 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69087 ] GetPaid= --GetPaid The GetPaid WordPress plugin before 2.8.55 does not verify the au= thenticity of incoming Worldpay payment notifications, allowing unauthentic= ated attackers to forge a notification that marks a pending invoice as paid=
without any payment being made. 2026-08-06 5.9 CVE-2026-12901 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-12901 ] ggml-org--llama.cpp llama.cpp bui= lds b5702 through b7653 contain an out-of-bounds read vulnerability in the = recurrent memory state restore path that allows attackers with write access=
to the slot save directory to read memory past the end of the allocated ce= lls array. Attackers can craft a malicious slot file with an oversized seq_=
id value to trigger an out-of-bounds read that leaks heap data including po= inter values into server logs, defeating ASLR protections and facilitating = further exploitation. 2026-08-06 6.5 CVE-2026-43630 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-43630 ] ggml-org--llama.cpp llama.cpp builds b1886 t= hrough b7445 contain a null pointer dereference vulnerability in the LLaMA-= Android JNI wrapper where the bench_1model() function fails to validate the=
model context pointer before dereferencing it. Attackers can supply a mali= cious, corrupt, or truncated model file to trigger a null context condition=
, causing a SIGSEGV crash that terminates the Android application process a=
nd results in denial of service. 2026-08-06 5.5 CVE-2026-70639 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-70639 ] ghostfolio--ghostfolio Ghostfolio=
is an open source wealth management software. Prior to version 3.4.0, Ghos= tfolio's Stripe checkout success-URL handler at `GET /api/v1/subscription/s= tripe/callback?checkoutSessionId=3D<id>` retrieves the Stripe Checkout Sess= ion by ID and unconditionally grants a Premium subscription to the session'=
s `client_reference_id` - without ever checking `session.payment_status` or=
`session.status`. There is no separate Stripe webhook endpoint with `strip= e-signature` verification; this callback is the sole code path that creates=
Stripe-driven subscriptions. Any authenticated user can self-grant a 1-yea=
r Premium subscription without ever paying. Version 3.4.0 rejects sessions = unless `session.payment_status =3D=3D=3D 'paid'` AND `session.status =3D=3D= =3D 'complete'` (fails closed). Additionally, new unique `stripeCheckoutSes= sionId` column a session can't be redeemed twice (race-safe via DB unique c= onstraint). 2026-08-07 6.5 CVE-2026-47127 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-47127 ] GitroomHQ--postiz-app An issue in the billing and lice= nse activation subsystem allows remote attackers to bypass payment authoriz= ation workflows. By exploiting insufficient cryptographic validation or lac=
k of server-side state verification on promotional/lifetime-deal (LTD) rede= mption codes, an unauthenticated attacker can forge valid redemption tokens=
or replay existing single-use codes to activate permanent, tier-highest pa=
id subscriptions without a financial transaction. 2026-08-06 6.5 CVE-2026-1= 9127 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19127 ] GL.iNet--E5800 A=
security vulnerability has been detected in GL.iNet E5800, E750, X2000, X3= 000, XE3000 and XE300 up to 20260707. Impacted is an unknown function of th=
e file /sdk/v1 of the component eSIM LPA API. Such manipulation leads to im= proper authorization. The attack can only be initiated within the local net= work. The vendor was contacted early about this disclosure and confirmed th=
e existence of the vulnerability. 2026-08-03 5.4 CVE-2026-18584 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-18584 ] GL.iNet--MT3000 A vulnerability = was detected in GL.iNet MT3000, MT6000, BE9300, BE3600, MT3600BE, E5800, BE= 6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. The affected element=
is the function nas-web.get_file_list of the component APPS-NAS Module. Pe= rforming a manipulation results in heap-based buffer overflow. The attack m=
ay be initiated remotely. The vendor was contacted early about this disclos= ure and confirmed the existence of the vulnerability. 2026-08-03 4.3 CVE-20= 26-18585 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18585 ] gm_alex--Use=
r Access Manager The User Access Manager plugin for WordPress is vulnerable=
to Second-Order SQL Injection via the 'id' parameter of the wp_ajax_save-a= ttachment-compat AJAX action in versions up to, and including, 2.3.12. This=
is due to insufficient validation on the objectId value stored in the save= AjaxAttachmentData() function and subsequent unparameterized concatenation =
in the addQueryExcludedPostFilter() function - the stored value is later re= trieved from the database and used as an array key, then directly imploded = into a SQL NOT IN() clause without integer casting or prepared statements. = This makes it possible for authenticated attackers, with subscriber-level a= ccess and above, to append additional SQL queries into already existing que= ries that can be used to extract sensitive information from the database. 2= 026-08-05 6.5 CVE-2026-15281 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 15281 ] GNOME--Epiphany A flaw was found in Epiphany. An issue in how the b= rowser reads web addresses allows attackers to fake the domain name shown i=
n the address bar. If a user clicks a specially crafted link containing a c= olon (for example, [https://trusted.com:80@attacker.com/](https://trusted.c= om:80@attacker.com/)), the address bar and security menus will display the = safe website (trusted.com) but it will actually load the attacker website (= attacker.com) on the screen. This allows attackers to create convincing phi= shing pages to trick users into trusting a malicious site. 2026-08-06 5.4 C= VE-2026-18487 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18487 ] go-git-= -go-git go-git is an extensible git implementation library written in pure = Go. Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized be= fore being used to construct on-disk paths under the reference storage dire= ctory, so a maliciously crafted reference name (for example containing dire= ctory-traversal sequences) can cause go-git to write files outside the inte= nded reference storage directory. Versions 5.19.2 and 6.0.0-alpha.5 fix the=
issue. 2026-08-07 6.3 CVE-2026-71557 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-71557 ] guzzle--guzzle Guzzle is an extensible PHP HTTP client. Pr= ior to 7.15.2 and 8.0.1, SetCookie::matchesDomain() gives every subdomain o=
f a cookie Domain that cookie unless SetCookie::matchesDomain() recognizes = the Domain as an IP literal or a numeric host, and the decision comes from = the domain's own text, so two spellings a transport reads as an address kee=
p subdomain scope. Hexadecimal and mixed-base forms such as 0x7f000001 and = 0177.0.0.0x1 go unrecognized while libcurl 8.21.0 reads both as 127.0.0.1. =
A percent-escaped Domain keeps that scope on both branches because percent-= decoding sits above numeric parsing, so 192.168.0.%31 and 127.0.0.1%2e are = registered names in the URI grammar rather than address literals, and no nu= meric rule in any base classifies them, while libcurl decodes the host befo=
re resolving and reads them as 192.168.0.1 and 127.0.0.1. A cookie stored f=
or Domain=3D0x7f000001 is placed in the Cookie header of a request to evil.= 0x7f000001, disclosing a session identifier or token to a host that is not = that address, and a response from evil.0x7f000001 setting Domain=3D0x7f0000=
01 is accepted into the jar and replayed to the address, so a server answer= ing for the look-alike name can fix a session or set application state. Exp= loitation requires the application to enable cookie support, address an ori= gin by one of these spellings, and contact a host whose name ends in that s= pelling. This issue is fixed in versions 7.15.2 and 8.0.1. 2026-08-03 6.5 C= VE-2026-69245 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69245 ] Handwri= ting-OCR--handwriting-ocr-mcp-server A security flaw has been discovered in=
Handwriting-OCR handwriting-ocr-mcp-server 0.1.0. Affected by this vulnera= bility is the function fs.readFileSync of the file src/index.ts of the comp= onent upload_document. Performing a manipulation of the argument File resul=
ts in path traversal. Attacking locally is a requirement. The project was i= nformed of the problem early through an issue report but has not responded = yet. 2026-08-09 5.3 CVE-2026-19372 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19372 ] hapifhir--org.hl7.fhir.core HAPI FHIR is a complete implement= ation of the HL7 FHIR standard for healthcare interoperability in Java. Pri=
or to 6.9.11, the hidden scan command concatenates attacker-controlled Impl= ementation Guide titles, profile titles, and source references into scan.ht=
ml without escaping in Scanner.java. As a result, a user who scans an attac= ker-supplied IG/profile and then opens or publishes the generated local/CI = HTML report can trigger stored cross-site scripting, executing attacker-con= trolled JavaScript in the report's browser context. This issue is fixed in = version 6.9.11. 2026-08-07 5 CVE-2026-62293 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-62293 ] HashiCorp--Consul Consul Community Edition and Consu=
l Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary fi=
le read when configured to use the Vault Connect CA provider with JWT or Ap= pRole authentication. A privileged attacker with `operator:write` permissio=
n may direct Consul to read and forward credential files outside the intend=
ed scope, potentially leading to the exfiltration of sensitive secrets from=
the Consul server host. This vulnerability, CVE-2026-19017, is fixed in Co= nsul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08-07 6.=
8 CVE-2026-19017 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19017 ] Hash= iCorp--Consul Consul Community Edition and Consul Enterprise 1.18.0 through=
2.0.2 are vulnerable to an authenticated denial of service in the Enterpri= se-to-Community Edition downgrade path that may allow an authorized caller =
to crash the Consul server. A caller with config-entry write permission can=
submit a service-router configuration entry that causes the agent to exit = unexpectedly. This vulnerability, CVE-2026-19012, is fixed in Consul 2.0.3 = and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08-07 5.3 CVE-2026-= 19012 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19012 ] HashiCorp--Cons=
ul Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are v= ulnerable to an uncontrolled resource consumption issue in the Connect CA r= oots endpoint that may allow a remote caller to grow the agent's Connect CA=
roots cache without bound, defeating the operator's cache-disable configur= ation. This vulnerability, CVE-2026-19015, is fixed in Consul 2.0.3 and Con= sul Enterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08-07 5.3 CVE-2026-19015 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-19015 ] HashiCorp--Consul Cons=
ul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are vulnerab=
le to an unauthenticated denial of service in several agent HTTP API endpoi= nts. A remote caller could cause the agent to consume substantial memory be= fore the request was rejected. This vulnerability, CVE-2026-19113, is fixed=
in Consul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08= -07 5.3 CVE-2026-19113 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19113 =
] HashiCorp--Consul Consul Community Edition and Consul Enterprise 1.20.1 t= hrough 2.0.2 are vulnerable to an L7 intention authorization bypass when a = service proxy is configured with a custom public listener. An authenticated=
mesh workload may reach HTTP paths that are blocked by a path-based deny i= ntention. This vulnerability, CVE-2026-15970, is fixed in Consul 2.0.3 and = Consul Enterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08-07 4.2 CVE-2026-1597=
0 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15970 ] HashiCorp--Consul C= onsul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are vuln= erable to an uncontrolled resource consumption issue in the Connect authori= zation endpoint that may allow a caller to grow the agent's intention-match=
cache without bound, defeating the operator's cache-disable configuration.=
This vulnerability, CVE-2026-190124, is fixed in Consul 2.0.3 and Consul E= nterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08-07 4.3 CVE-2026-19014 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-19014 ] HashiCorp--Consul Consul Co= mmunity Edition and Consul Enterprise 1.19.1 through 2.0.2 did not enforce = the {{session:write}} ACL permission for session deletion operations submit= ted through the transaction API. An authenticated caller with network acces=
s to the Consul server RPC port could delete arbitrary sessions without hol= ding the required permission. This vulnerability, CVE-2026-19016, is fixed =
in Consul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3. 2026-08-=
07 4.2 CVE-2026-19016 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19016 ]=
HCL Software--HCL iControl HCL iControl is affected by Weak SSL/TLS Versio=
n Supported vulnerability. It was observed that the application was using w= eak TLS versions such as TLS 1.0 and 1.1. These outdated protocols lack mod= ern security features, making them vulnerable to known attacks and exposing=
sensitive information during data transmission. 2026-08-03 4.8 CVE-2026-56= 609 [ https://www.cve.org/CVERecord?id=3DCVE-2026-56609 ] HCLSoftware--HCL = Digital Experience and Digital Experience Compose The default login portlet=
in HCL Digital Experience and Digital Experience Compose insufficiently pr= otects credentials. =C2=A0Under certain very specific use cases and specifi=
c configurations, sensitive information may be written to web server logs.= =C2=A0 This only affects applications using the default login portlet. 2026= -08-05 5.4 CVE-2026-21766 [ https://www.cve.org/CVERecord?id=3DCVE-2026-217=
66 ] heshengtao--super-agent-party A vulnerability was found in heshengtao = super-agent-party up to 0.4.1. This affects the function get_file_content o=
f the file server.py of the component execute_tool_manually Endpoint. The m= anipulation of the argument tool_name/tool_params results in information di= sclosure. The attack can be launched remotely. The exploit has been made pu= blic and could be used. The vendor was contacted early about this disclosur=
e but did not respond in any way. 2026-08-06 5.3 CVE-2026-18974 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-18974 ] Hewlett Packard Enterprise (HPE)= --HPE Integrated Lights-Out 6 (iLO 6) A potential denial of service vulnera= bility exists in HPE Integrated Lights-Out 6 (iLO 6) prior to v1.78. 2026-0= 8-05 6.5 CVE-2026-63457 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63457=
] hfiref0x--LightFTP LightFTP through 2.4 contains multiple data race vuln= erabilities in ftpserv.c that allow anonymous attackers to cause undefined = behavior by issuing LIST followed by ABOR commands without authentication. = The control thread closes data_socket and file_fd descriptors while worker = threads concurrently operate on the same fields in worker_thread_cleanup, a= llowing stale file descriptors to be reassigned by the OS and subsequently = used by worker threads on unrelated resources, resulting in potential denia=
l of service. 2026-08-06 5.9 CVE-2026-70637 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-70637 ] HKUDS--nanobot A security vulnerability has been det= ected in HKUDS nanobot up to 0.2.1. Impacted is the function ExecTool._guar= d_command/ExecTool._spawn of the file nanobot/agent/tools/shell.py of the c= omponent Shell Allowlist Handler. Such manipulation leads to os command inj= ection. The attack can be executed remotely. The exploit has been disclosed=
publicly and may be used. Upgrading to version 0.3.0 is recommended to add= ress this issue. The name of the patch is 4562. It is advisable to upgrade = the affected component. Multiple issues were reported to the project. They = reacted with a high level of professionalism and kindness: "These five repo= rts are variants of the same root cause: validation of shell commands conta= ining multiple segments, wrappers, comments, or chained commands. The issue=
was fixed by validating every executable shell segment against the configu= red allowlist". 2026-08-07 6.3 CVE-2026-19243 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-19243 ] HKUDS--nanobot A vulnerability has been found in H= KUDS nanobot up to 0.2.1. This affects the function _download_image_data_ur=
l of the file nanobot/providers/image_generation.py of the component Provid= er-returned Image URL Handler. The manipulation leads to server-side reques=
t forgery. It is possible to initiate the attack remotely. The exploit has = been disclosed to the public and may be used. The identifier of the patch i=
s 5095. It is recommended to apply a patch to fix this issue. The vendor ex= plains: "We confirm that provider-returned image URLs required the same SSR=
F protections applied to other network retrieval paths. (...) The patch is = currently available on main and is planned for the next patch release, v0.3= .1." 2026-08-07 6.3 CVE-2026-19246 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19246 ] HKUDS--nanobot A vulnerability was detected in HKUDS nanobot =
up to 0.2.1. The affected element is the function connect_mcp_servers of th=
e file nanobot/agent/tools/mcp.py of the component MCP enabledTools Scope H= andler. Performing a manipulation results in improper access controls. The = attack is possible to be carried out remotely. The exploit is now public an=
d may be used. Upgrading to version 0.3.0 is sufficient to fix this issue. = The patch is named 4436. You should upgrade the affected component. Multipl=
e issues were reported to the project. They reacted with a high level of pr= ofessionalism and kindness: "Both reports describe the same root cause: MCP=
resource and prompt wrappers could be registered outside the intended enab= ledTools scope. The registration boundary was corrected". 2026-08-07 4.7 CV= E-2026-19244 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19244 ] home-ass= istant--core Home Assistant is open source home automation software focused=
on local control and privacy. Prior to 2026.6.1, the Android Companion app=
is vulnerable to an open redirect. The app passes the URL fragment from a = homeassistant://invite deep link into the onboarding flow without ever disp= laying the destination hostname. Because no screen in the invitation or onb= oarding flow shows the parsed server URL before onboarding commits to it, a=
victim has no way to distinguish a legitimate invite from a malicious one.=
An attacker can craft an invite so that a single tap on the legitimate-loo= king "Connect to my Home Assistant server" button opens their /auth/authori=
ze endpoint in the URL-less onboarding WebView, presenting a look-alike log=
in page that captures the victim's credentials. Since invitations are inten= ded to onboard brand-new users, targets are especially unlikely to notice t=
he substitution. This issue is fixed in version 2026.6.1. 2026-08-07 4.3 CV= E-2026-59717 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59717 ] honojs--= hono Hono is a Web application framework that provides support for any Java= Script runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, =
is vulnerable to a regular expression denial of service (ReDoS). During a p= reflight OPTIONS request, the middleware parses the attacker-controlled Acc= ess-Control-Request-Headers header using a whitespace-tolerant regular expr= ession whose backtracking makes its running time quadratic in the input len= gth. Because the header value is bounded only by the deployment's maximum H= TTP header size, a single preflight carrying a long run of whitespace can c= onsume seconds of CPU and block request processing. On runtimes that share = one execution thread across requests, this stalls concurrent requests as we= ll, and repeated requests can render the service unresponsive. This affects=
the default configuration, since the vulnerable path is reached whenever c= ors() is used with an unset or empty allowHeaders. Applications that set a = non-empty allowHeaders are not affected. This issue is fixed in version 4.1= 2.34. 2026-08-07 5.3 CVE-2026-69207 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-69207 ] honojs--hono Hono is a Web application framework that provid=
es support for any JavaScript runtime. From 4.12.0 to 4.12.33, the language= Detector middleware is vulnerable to algorithmic complexity denial of servi=
ce when processing a crafted language tag containing a large number of hyph=
en separated subtags. To implement progressive language tag truncation, nor= malizeLanguage() repeatedly calls parts.slice(0, i).join('-') for every pos= sible prefix, so the total amount of string processing grows quadratically = with the number of subtags. Language values may come from a query parameter=
, cookie, Accept-Language header, or URL path, depending on the detector co= nfiguration, and the default detector order enables query string, cookie, a=
nd header detection, so applications using languageDetector() may expose th=
is processing to unauthenticated requests. An attacker may repeatedly send = requests containing long, hyphen separated language tags, causing excessive=
CPU consumption and preventing unrelated requests from being processed. Th=
is issue is fixed in version 4.12.34. 2026-08-07 5.3 CVE-2026-71848 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-71848 ] honojs--hono Hono is a Web a= pplication framework that provides support for any JavaScript runtime. From=
3.8.0 to 4.12.33, memo() from hono/jsx retains the result of a server side=
render and reuses it for later renders with comparator equal props, and re= quest scoped values read inside the component take no part in that comparis= on, so a response can contain HTML rendered for another user's request. Com= ponents wrapped with memo() are compared by props alone; values read implic= itly during rendering, such as JSX Context through createContext() and useC= ontext(), useRequestContext() from hono/jsx-renderer, and getContext() from=
hono/context-storage, do not participate, and the retained result lives as=
long as the wrapped component, so it outlives the request that produced it=
. A user may receive a response containing HTML rendered for another user w= hen both render the same memoized component with comparator equal props on = the same warm instance, which may disclose another user's account or profil=
e data, disclose request scoped secrets embedded in HTML such as CSRF token=
s, or expose role specific content to users who should not receive it. This=
issue is fixed in version 4.12.34. 2026-08-07 4.8 CVE-2026-71850 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-71850 ] Hubzilla--Hubzilla Hubzilla 11= .2.1 contains a cross-site request forgery vulnerability in the OAuth2 /aut= horize endpoint handled by Zotlabs\Module\Authorize::post() that allows una= uthenticated attackers to register arbitrary OAuth2 applications under an a= uthenticated user's account by submitting a cross-origin POST request witho=
ut CSRF token or Origin/Referer validation. Attackers can craft a malicious=
HTML form that autosubmits attacker-chosen OAuth2 parameters including cli= ent_id, client_secret, redirect_uri, and scope to silently register a persi= stent OAuth2 application, enabling interception of future OAuth2 authorizat= ion codes when the victim later authenticates against the attacker-controll=
ed client. 2026-08-06 4.3 CVE-2026-70556 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-70556 ] Hulupeep--mcp-ui-probe A security flaw has been discove= red in Hulupeep mcp-ui-probe up to 0.2.0. Affected is the function get_jour= ney/delete_journey/analyze_journey/usage_stats of the file src/journey/Jour= neyStorage.ts of the component Journey/Usage. The manipulation of the argum= ent journeyId/filename results in path traversal. The attack requires a loc=
al approach. The project was informed of the problem early through an issue=
report but has not responded yet. 2026-08-08 5.3 CVE-2026-19270 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-19270 ] IBM--Cloud Pak For Business Aut= omation IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 2= 6.0.0 could allow a remote attacker to obtain sensitive information exposed=
in manifest files. 2026-08-05 5.3 CVE-2026-12762 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-12762 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 throu=
gh 1.10.3 allows authenticated users can exploit a built-in Langflow compon= ent to read arbitrary server environment variables, exposing sensitive secr= ets despite security controls intended to disable custom components. 2026-0= 8-05 6.5 CVE-2026-10128 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10128=
] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3 allows users to = read arbitrary files from the server filesystem, including other users' upl= oaded documents, the JWT signing secret, the SQLite database, and process e= nvironment variables, by sending a crafted MCP `resources/read` request wit=
h a URL-encoded path traversal sequence in the filename. 2026-08-05 6.5 CVE= -2026-7646 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7646 ] IBM--Langfl=
ow OSS IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-si=
de request forgery (SSRF) due to incomplete and ineffective SSRF protection=
enforcement. 2026-08-05 6.5 CVE-2026-7657 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-7657 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.=
3 does not properly validate the username field, allowing attackers to inje=
ct path traversal sequences and bypass containment checks. This enables mul= tiple severe impacts, including arbitrary directory deletion, cross-tenant = data destruction, and JWT signing key deletion leading to session invalidat= ion. 2026-08-05 6.5 CVE-2026-7658 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-7658 ] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3 does no=
t properly validate ownership in the deprecated POST /api/v1/build/{flow_id= }/vertices endpoint, allowing an authenticated user to inject arbitrary gra=
ph data into a shared cache for any flow. This may result in cross-user cac=
he pollution, unauthorized workflow execution, or denial of service. 2026-0= 8-05 5.9 CVE-2026-10547 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10547=
] IBM--Langflow OSS IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to=
Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`)=
. This occurs because user-supplied knowledge base names are used directly =
to create file paths without proper sanitization or containment checks. An = authenticated attacker can exploit this flaw to create directories and writ=
e files anywhere on the server's filesystem. 2026-08-05 5.4 CVE-2026-7869 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-7869 ] IBM--Maximo Application=
Suite IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote = attacker to tamper with session data due to the use of a weak HMAC session = signing secret. 2026-08-05 5.3 CVE-2026-18531 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-18531 ] IBM--Maximo Application Suite IBM Maximo Applicati=
on Suite 9.2, 9.1, and 9.0 does not set the secure attribute on authorizati=
on tokens or session cookies. Attackers may be able to get the cookie value=
s by sending a http:// link to a user or by planting this link in a site th=
e user goes to. The cookie will be sent to the insecure link and the attack=
er can then obtain the cookie value by snooping the traffic. 2026-08-05 4.3=
CVE-2026-15656 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15656 ] IBM--= QRadar IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 In= terim Fix 005 could allow an authenticated privileged user to execute arbit= rary commands with normal user privileges on the system due to improper val= idation of user supplied input. 2026-08-05 4.7 CVE-2026-13477 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-13477 ] Ichigo3766--image-gen-mcp A vulner= ability was identified in Ichigo3766 image-gen-mcp 0.1.0. The impacted elem= ent is an unknown function of the file src/index.ts of the component upscal= e_images. Such manipulation of the argument output_path leads to path trave= rsal. The attack must be carried out locally. The project was informed of t=
he problem early through an issue report but has not responded yet. 2026-08= -09 5.3 CVE-2026-19365 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19365 =
] imple Membership--Simple Membership The Simple Membership WordPress plugi=
n before 4.7.7 does not verify that a PayPal payment notification was sent =
to the site's own configured merchant account before activating a membershi=
p, allowing unauthenticated users to activate or extend a membership using =
a payment made to an arbitrary PayPal account they control. 2026-08-06 5.3 = CVE-2026-14936 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14936 ] imranr= isal-dev--Student-Management-System A vulnerability was determined in imran= risal-dev Student-Management-System 18ea7904c339e0c7b0234724a79c939ce6191de= f/a8d43a29aaf267e7ca97171d6dbb44057bcd7f8c. This affects the function store= ProfileImage of the file student_profile_pic.php of the component Shared Up= load Helper. Executing a manipulation of the argument choose_file can lead =
to unrestricted upload. The attack can be executed remotely. The exploit ha=
s been publicly disclosed and may be utilized. This product implements a ro= lling release for ongoing delivery, which means version information for aff= ected or updated releases is unavailable. The vendor was contacted early ab= out this disclosure but did not respond in any way. 2026-08-05 6.3 CVE-2026= -18927 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18927 ] IncomeStreamSu= rfer--roo-code-memory-bank-mcp-server A security vulnerability has been det= ected in IncomeStreamSurfer roo-code-memory-bank-mcp-server up to 9dcb2fb5e= 6b65a35ac1983885a6d4e5621a0081e. This affects the function readMemoryBankFi= le/appendMemoryBankEntry of the file src/index.ts of the component read_mem= ory_bank_file/append_memory_bank_entry. Such manipulation of the argument f= ile_name leads to path traversal. The attack must be carried out locally. T= his product utilizes a rolling release system for continuous delivery, and =
as such, version information for affected or updated releases is not disclo= sed. The project was informed of the problem early through an issue report = but has not responded yet. 2026-08-09 5.3 CVE-2026-19325 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-19325 ] indravoyager--xidown xidown (a yt-dlp/f= fmpeg GUI wrapper) builds its yt-dlp command-line invocation (xidown/core/s= canner.py and downloader.py) by appending the user-provided or scanned URL =
as a bare trailing positional argument, with no '--' end-of-options marker = and no scheme validation anywhere in the codebase. Because yt-dlp parses an=
y argument beginning with '-' as a CLI option rather than link text, a craf= ted 'URL' value such as -U (yt-dlp's self-update flag) or --exec=3D... is p= arsed as a real yt-dlp option instead of a URL, altering the tool's control=
flow before its own URL validation runs. Full code execution via --exec wa=
s not demonstrated in the single-URL flow tested, but the underlying argume= nt-injection primitive is confirmed and unmitigated across all call sites. = 2026-08-05 4.4 CVE-2026-71212 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -71212 ] IT-Recht Kanzlei--Legal Text Connector of the IT-Recht Kanzlei Una= uthenticated Broken Access Control in Legal Text Connector of the IT-Recht = Kanzlei <=3D 1.0.13 versions. 2026-08-06 6.5 CVE-2026-66452 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-66452 ] itsourcecode--Hospital Management Sy= stem A weakness has been identified in itsourcecode Hospital Management Sys= tem 1.0. Affected by this vulnerability is an unknown functionality of the = file /servicetype.php. This manipulation of the argument editid causes sql = injection. It is possible to initiate the attack remotely. The exploit has = been made available to the public and could be used for attacks. 2026-08-06=
6.3 CVE-2026-19020 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19020 ] i= tsourcecode--Hospital Management System A security flaw has been discovered=
in itsourcecode Hospital Management System 1.0. The affected element is an=
unknown function of the file /treatment.php. Performing a manipulation of = the argument editid results in sql injection. Remote exploitation of the at= tack is possible. The exploit has been released to the public and may be us=
ed for attacks. 2026-08-06 6.3 CVE-2026-19067 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-19067 ] itsourcecode--Hospital Management System A weaknes=
s has been identified in itsourcecode Hospital Management System 1.0. The i= mpacted element is an unknown function of the file /treatmentdetail.php. Ex= ecuting a manipulation of the argument patientid can lead to sql injection.=
The attack can be executed remotely. The exploit has been made available t=
o the public and could be used for attacks. 2026-08-06 6.3 CVE-2026-19068 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-19068 ] itsourcecode--Hospital=
Management System A security vulnerability has been detected in itsourceco=
de Hospital Management System 1.0. This affects an unknown function of the = file /treatmentrecord.php. The manipulation of the argument editid leads to=
sql injection. The attack is possible to be carried out remotely. The expl= oit has been disclosed publicly and may be used. 2026-08-06 6.3 CVE-2026-19= 069 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19069 ] itsourcecode--Hos= pital Management System A vulnerability was detected in itsourcecode Hospit=
al Management System 1.0. This impacts an unknown function of the file /vie= wadmin.php. The manipulation of the argument delid results in sql injection=
. The attack may be performed from remote. The exploit is now public and ma=
y be used. 2026-08-06 6.3 CVE-2026-19070 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19070 ] itsourcecode--Hospital Management System A flaw has bee=
n found in itsourcecode Hospital Management System 1.0. Affected is an unkn= own function of the file /viewappointment.php. This manipulation of the arg= ument delid causes sql injection. It is possible to initiate the attack rem= otely. The exploit has been published and may be used. 2026-08-06 6.3 CVE-2= 026-19071 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19071 ] itsourcecod= e--Hospital Management System A vulnerability was identified in itsourcecod=
e Hospital Management System 1.0. This issue affects some unknown processin=
g of the file /viewdoctor.php. Such manipulation of the argument delid lead=
s to sql injection. The attack can be launched remotely. The exploit is pub= licly available and might be used. 2026-08-09 6.3 CVE-2026-19347 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-19347 ] itsourcecode--Hospital Manageme=
nt System A vulnerability was determined in itsourcecode Hospital Managemen=
t System 1.0. The affected element is an unknown function of the file /view= doctorconsultancycharge.php. This manipulation of the argument delid causes=
sql injection. The attack is possible to be carried out remotely. The expl= oit has been publicly disclosed and may be utilized. 2026-08-09 6.3 CVE-202= 6-19364 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19364 ] Jane-xiaoer--= skill-vision-control A vulnerability has been found in Jane-xiaoer skill-vi= sion-control up to 1.3.0. This vulnerability affects the function getSkillV= ersionsDir of the file src/svc/utils/config.ts. Such manipulation of the ar= gument skillName leads to path traversal. The attack can only be performed = from a local environment. The project was informed of the problem early thr= ough an issue report but has not responded yet. 2026-08-09 5.3 CVE-2026-193=
35 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19335 ] jeequan--jeepay A = vulnerability was identified in jeequan jeepay up to 3.2.9. This vulnerabil= ity affects the function WebSecurityConfig of the file jeepay-manager/src/m= ain/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of the c= omponent PreAuthorize Handler. The manipulation leads to authorization bypa= ss. The attack may be initiated remotely. The exploit is publicly available=
and might be used. The vendor was contacted early about this disclosure bu=
t did not respond in any way. 2026-08-03 6.3 CVE-2026-18631 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-18631 ] Jeff Farthing--Theme My Login Unauth= enticated Cross Site Request Forgery (CSRF) in Theme My Login <=3D 7.1.14 v= ersions. 2026-08-06 4.3 CVE-2026-66681 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-66681 ] Jevon-Zhong--Ai-doctor A vulnerability was detected in = Jevon-Zhong Ai-doctor 0.0.1. This vulnerability affects the function delete= Image of the file ai-doctor-server/src/filemanagement/filemanagement.servic= e.ts. Performing a manipulation of the argument imagePath results in path t= raversal. The attack must be initiated from a local position. The project w=
as informed of the problem early through an issue report but has not respon= ded yet. 2026-08-09 4.4 CVE-2026-19326 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19326 ] jgwhite33--WP TripAdvisor Review Slider The WP TripAdvi= sor Review Slider plugin for WordPress is vulnerable to generic SQL Injecti=
on via 'curselrevs[]' Parameter in all versions up to, and including, 14.3 = due to insufficient escaping on the user supplied parameter and lack of suf= ficient preparation on the existing SQL query. This makes it possible for a= uthenticated attackers, with administrator-level access and above, to appen=
d additional SQL queries into already existing queries that can be used to = extract sensitive information from the database. 2026-08-05 4.9 CVE-2026-11= 969 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11969 ] jhy--jsoup jsoup =
is a Java library for working with real-world HTML. From 1.14.3 until 1.23.=
1, jsoup's HTML parser could incorrectly handle a malformed tag name ending=
in a control character, causing the tag to acquire the parsing behavior of=
a different element. When a custom Safelist permits certain raw-text eleme= nts, this misparsing can cause content that should remain inert text to be = emitted as active markup after serialization, potentially resulting in cros= s-site scripting. jsoup's built-in Safelists are not affected. This issue i=
s fixed in version 1.23.1. 2026-08-06 4.7 CVE-2026-71497 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-71497 ] jupyterhub--jupyterhub JupyterHub is so= ftware that allows users to create a multi-user server for Jupyter notebook=
s. Prior to 5.5.0, invalid input to form-based login authenticators can pla=
ce an unbounded attacker-controlled username in failed-login logs, allowing=
an unauthenticated attacker to consume logging and storage resources. This=
issue is fixed in version 5.5.0. 2026-08-07 5.3 CVE-2026-54338 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-54338 ] Justin Kruit--Advanced Custom Fi= elds: Font Awesome Field Contributor Broken Access Control in Advanced Cust=
om Fields: Font Awesome Field <=3D 6.1.1 versions. 2026-08-06 4.3 CVE-2026-= 66678 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66678 ] kalcaddle--kodb=
ox A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerabil= ity affects unknown code of the file /index.php?plugin/msgWarning/action of=
the component msgWarning Plugin. Executing a manipulation can lead to impr= oper authorization. It is possible to launch the attack remotely. The explo=
it has been published and may be used. The vendor was contacted early about=
this disclosure but did not respond in any way. 2026-08-04 5.3 CVE-2026-18= 720 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18720 ] kalcaddle--kodbox=
A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This iss=
ue affects some unknown processing of the file /user/sso/apiLogin of the co= mponent SSO API Login. The manipulation of the argument callbackUrl leads t=
o open redirect. The attack can be initiated remotely. The exploit has been=
disclosed to the public and may be used. The vendor was contacted early ab= out this disclosure but did not respond in any way. 2026-08-04 4.3 CVE-2026= -18721 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18721 ] kata-container= s--kata-containers Kata Containers is an open source implementation of ligh= tweight Virtual Machines (VMs) that perform like containers. In versions pr= ior to 4.0.0, the kata-agent is vulnerable to an authorization bypass in co= nfidential-guest memory management. In Confidential Containers (CoCo) deplo= yments, the kata-agent enforces an OPA/Rego-based AgentPolicy that must aut= horize every ttRPC API call, forming the security boundary that prevents an=
untrusted host from directing the confidential guest. Two ttRPC methods in= troduced with the mem-agent feature are missing this authorization check, s=
o an untrusted host can invoke them unconditionally regardless of the guest=
's policy configuration. When mem-agent is enabled (off by default), this l= ets the host tamper with in-guest memory management by forcing swap, aggres= sive eviction, or compaction, resulting in attacker-controlled availability=
and performance degradation of the confidential workload entirely outside = the agent-policy boundary. The impact does not include memory disclosure or=
code execution, and severity is bounded by the precondition that mem-agent=
must be explicitly enabled. This issue is fixed in version 4.0.0. 2026-08-=
07 5.7 CVE-2026-64676 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64676 ]=
Kino-Kafkaesque--ssh-mcp-server A vulnerability was detected in Kino-Kafka= esque ssh-mcp-server up to 8ebbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impact=
ed is the function ssh_exec of the file src/index.ts of the component SSH C= ommand Handler. Performing a manipulation of the argument host/username res= ults in command injection. The attack requires a local approach. The actual=
existence of this vulnerability is currently in question. This product ado= pts a rolling release strategy to maintain continuous delivery. Therefore, = version details for affected or updated releases cannot be specified. The p= roject maintainer explains: "The intended threat model is that this MCP ser= ver is a local/trusted tool for an agent to execute commands over SSH, so c= allers already have meaningful execution capability through the exposed she= ll." 2026-08-06 5.3 CVE-2026-19039 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19039 ] Kirachon--context-engine A vulnerability was determined in Ki= rachon context-engine up to 1.9.0. This affects the function execGitCommand=
of the file src/mcp/utils/gitUtils.ts of the component review-git-diff End= point. Executing a manipulation of the argument args can lead to command in= jection. Upgrading to version 1.9.1 mitigates this issue. This patch is cal= led e0729dcfd3a2b1682a7bff86e7174852c03419ba. It is advisable to upgrade th=
e affected component. 2026-08-08 5.5 CVE-2026-19266 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-19266 ] klever-io--klever-go Klever-Go is the Go imp= lementation of the Klever blockchain protocol. In versions prior to 1.7.18,=
the account-data trie syncers are vulnerable to a resource-exhaustion flaw=
that leaks bounded throttler slots on error paths. In syncDataTrie() (in b= oth userAccountsSyncer.go and kappAccountsSyncer.go), StartProcessing() res= erves a slot from the NumGoRoutinesThrottler, but the corresponding EndProc= essing() is only called on the success path and on the duplicate-root early=
return. As a result, any error from trie.NewTrie(), trie.NewTrieSyncer(), =
or trieSyncer.StartSyncing() (including the network-dependent timeout path)=
permanently consumes one slot for the lifetime of the throttler. An attack=
er who can repeatedly cause trie-node sync failures or timeouts during boot= strap can exhaust the bounded throttler, after which further account-data t= rie syncs stop making progress and SyncAccounts() returns a timeout. Becaus=
e epoch bootstrap in syncUserAccountsState() and syncKappAccountsState() ab= orts on any such error, this causes bootstrap to fail, a core availability = issue affecting fresh, restarting, or resyncing nodes and validators. This = issue is fixed in version 1.7.18. 2026-08-07 5.9 CVE-2026-49343 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-49343 ] KS-GEN-AI--jira-mcp-server A vul= nerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affects the f= unction axios.get of the file src/index.ts of the component add_attachment_= from_public_url. The manipulation of the argument imageUrl results in serve= r-side request forgery. The attack requires a local approach. The project w=
as informed of the problem early through an issue report but has not respon= ded yet. 2026-08-09 5.3 CVE-2026-19369 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19369 ] kubesphere--KubeSphere KubeSphere's cluster-controller = reconciliation (pkg/utils/clusterclient/clusterclient.go, addCluster) proce= sses every Cluster custom resource's connection configuration and immediate=
ly calls Discovery().ServerVersion() against the CRD-specified Kubernetes A=
PI endpoint, which is parsed only for URL syntax (url.Parse) with no allow/= deny-list for loopback, RFC1918 private ranges, link-local, or cloud-metada=
ta addresses (e.g. 169.254.169.254). A user able to create or update a Clus= ter CRD can force the controller-manager and apiserver pods to issue outbou=
nd requests to arbitrary internal or metadata endpoints. 2026-08-05 6.5 CVE= -2026-71208 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71208 ] langchain= -ai--langgraph LangGraph Checkpoint Postgres and SQLite Checkpoint are the = Postgres and SQLite implementations of LangGraph's checkpoint saver. Prior =
to 3.1.1, the langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite=
packages persisted hierarchical namespaces as a dot joined string and scop=
ed reads by matching that string as a simple prefix pattern, so a read scop=
ed to one namespace could also match a sibling namespace whose flattened fo=
rm shares the same leading characters, or a namespace label containing unes= caped pattern metacharacters, allowing an authenticated caller to retrieve = stored items belonging to another tenant or user through an ordinary scoped=
search or list namespaces call, with no crafted input required. This issue=
is fixed in versions 3.1.1 of langgraph-checkpoint-postgres and langgraph-= checkpoint-sqlite. 2026-08-06 5.3 CVE-2026-71433 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-71433 ] langchain-ai--langgraphjs @langchain/langgraph-= checkpoint-mongodb provides a LangGraph.js CheckpointSaver implementation t= hat uses MongoDB for storage. Versions 1.3.0 and below are vulnerable to No= SQL injection: checkpoint identifiers (thread_id, checkpoint_ns, checkpoint= _id) from config.configurable are passed into MongoDB find() queries in Mon= goDBSaver.getTuple() without type enforcement. If an attacker supplies an o= bject payload (such as MongoDB operators $gt or $ne) instead of a string, i=
t can be interpreted as a query operator, bypassing thread scoping and leak= ing checkpoints, including pending writes, across tenants. Applications are=
at risk if they forward untrusted input into config.configurable without c= oercing it to strings or validating it against a schema, particularly in mu= lti-tenant or user-isolated setups. Apps that only use server-issued, strin= g-typed identifiers with schema validation rejecting non-string fields are = not affected. This issue has been fixed in version 1.3.1. 2026-08-04 6.7 CV= E-2026-48121 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48121 ] langgeni= us--dify A security flaw has been discovered in langgenius dify up to 1.14.=
2. This issue affects the function jinja2.Template of the file api/core/hel= per/code_executor/jinja2/jinja2_transformer.py of the component Jinja2 Hand= ler. The manipulation results in improper neutralization of special element=
s used in a template engine. The attack may be launched remotely. The explo=
it has been released to the public and may be used for attacks. The vendor = was contacted early about this disclosure but did not respond in any way. 2= 026-08-03 6.3 CVE-2026-18632 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 18632 ] latepoint--Appointment Booking Plugin LatePoint | Calendar & Schedu= ling for WordPress The LatePoint plugin for WordPress is vulnerable to Stor=
ed Cross-Site Scripting via the 'btn_wrapper_classes' attribute of the 'lat= epoint_resources' shortcode in all versions up to, and including, 5.3.2. Th=
is is due to insufficient input sanitization and output escaping in the 'lo= cations' branch of the 'shortcode_latepoint_resources' function. This makes=
it possible for authenticated attackers, with contributor level access and=
above, to inject arbitrary web scripts in pages that will execute whenever=
a user accesses an injected page. 2026-08-06 6.4 CVE-2026-5391 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-5391 ] lavkush-maurya--Student-Registrat= ion-System A vulnerability was determined in lavkush-maurya Student-Registr= ation-System 1.0. The affected element is an unknown function of the file /= student/changepass.php. Executing a manipulation of the argument oldpass ca=
n lead to sql injection. It is possible to launch the attack remotely. The = exploit has been publicly disclosed and may be utilized. The vendor was con= tacted early about this disclosure but did not respond in any way. 2026-08-=
05 6.3 CVE-2026-18896 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18896 ]=
LeeSinLiang--godot-mcp A flaw has been found in LeeSinLiang godot-mcp 0.1.=
0. Affected by this vulnerability is the function executeOperation of the f= ile src/index.ts of the component create_scene/add_node. This manipulation =
of the argument projectPath causes command injection. The attack needs to b=
e launched locally. The project was informed of the problem early through a=
n issue report but has not responded yet. 2026-08-06 5.3 CVE-2026-19044 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-19044 ] Lenovo--XClarity Orchest= rator An improper certificate validation vulnerability was reported in mult= iple Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could all=
ow an adjacent network attacker to intercept sensitive communications by pe= rforming a machine-in-the-middle attack against HTTPS connections during TL=
S certificate validation under certain circumstances. 2026-08-04 6.1 CVE-20= 26-16792 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16792 ] litestar-org= --litestar Litestar is an Asynchronous Server Gateway Interface (ASGI) fram= ework. In versions prior to 2.22.0, an attacker can bypass the allowed host=
s validation by omitting the Host header and supplying an X-Forwarded-Host = header set to a whitelisted domain. The AllowedHostsMiddleware trusts the X= -Forwarded-Host header as a fallback when the Host header is absent. Since = X-Forwarded-Host is a client-controllable header, this enables host header = injection attacks such as password reset poisoning, cache poisoning, and se= rver-side request routing manipulation. Any application using AllowedHostsC= onfig is affected when deployed without a reverse proxy that strips X-Forwa= rded-Host, or when accepting HTTP/1.0 connections. This issue has been fixe=
d in version 2.22.0. 2026-08-03 5.9 CVE-2026-48061 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-48061 ] lmammino--oidc-authorizer A vulnerability has=
been found in lmammino oidc-authorizer 0.4.0. This issue affects the funct= ion parse_token_from_header of the file src/parse_token_from_header.rs of t=
he component Authorization Header Parsing. The manipulation of the argument=
authorization_token leads to denial of service. Remote exploitation of the=
attack is possible. The exploit has been disclosed to the public and may b=
e used. The vendor was contacted early about this disclosure but did not re= spond in any way. 2026-08-09 5.3 CVE-2026-19362 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-19362 ] lmammino--oidc-authorizer A vulnerability was fo= und in lmammino oidc-authorizer up to 0.4.0. Impacted is an unknown functio=
n of the file src/handler.rs of the component Lambda Authorizer. The manipu= lation results in sensitive information in log files. The attack can be exe= cuted remotely. `src/handler.rs` logs raw Authorization header values and c= omplete bearer tokens/JWTs on authentication failure paths, potentially exp= osing credentials through CloudWatch Logs. `src/models.rs` serializes the c= omplete validated JWT claims set with `serde_json::to_string(token_claims).= unwrap()` and propagates it through `context["jwtClaims"]` to downstream in= tegrations. This code performs serialization, not deserialization, and does=
not process attacker-controlled `jwtClaims` input. The exploit has been ma=
de public and could be used. The vendor was contacted early about this disc= losure but did not respond in any way. 2026-08-09 5.3 CVE-2026-19363 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-19363 ] lock-upme--OPMS A vulnerabi= lity was found in lock-upme OPMS up to 831440f37a92c1568f2e071d5233bc873a9d= 8b09. The impacted element is an unknown function of the file controllers/m= essages/message.go of the component IN Clause Handler. Performing a manipul= ation of the argument ids results in sql injection. The attack is possible =
to be carried out remotely. This product adopts a rolling release strategy =
to maintain continuous delivery. Therefore, version details for affected or=
updated releases cannot be specified. The vendor was contacted early about=
this disclosure but did not respond in any way. 2026-08-09 6.3 CVE-2026-19= 354 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19354 ] Logo Software Ind= ustry and Trade Inc.--e-Logo Purchasing Portal Improper neutralization of i= nput during web page generation ('cross-site scripting') vulnerability in L= ogo Software Industry and Trade Inc. E-Logo Purchasing Portal allows Stored=
XSS. This issue affects e-Logo Purchasing Portal: before 1.52. 2026-08-06 = 5.4 CVE-2026-8166 [ https://www.cve.org/CVERecord?id=3DCVE-2026-8166 ] Lspa= ce-io--lspace-server A vulnerability was detected in Lspace-io lspace-serve=
r up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the fu= nction fileExists/readFile/writeFile/deleteFile of the file src/core/reposi= tory.ts of the component Repositories File API. Performing a manipulation o=
f the argument filePath results in path traversal. The attack is only possi= ble with local access. Continious delivery with rolling releases is used by=
this product. Therefore, no version details of affected nor updated releas=
es are available. The project was informed of the problem early through an = issue report but has not responded yet. 2026-08-06 5.3 CVE-2026-19054 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-19054 ] marimo-team--marimo marimo=
before 0.23.15 contains a configuration injection vulnerability that allow=
s notebook authors to exfiltrate operator API keys by embedding a malicious=
base_url in PEP-723 inline script metadata, which is merged into session c= onfiguration with higher precedence than the operator's own settings due to=
insufficient sanitization in sanitize_pyproject_dict. When an operator ope=
ns the crafted notebook and makes an AI request, marimo resolves the attack= er-controlled base_url from the notebook config while falling back to the o= perator's OPENAI_API_KEY environment variable for authentication, transmitt= ing the API key to the attacker-controlled endpoint without requiring any c= ell execution. 2026-08-04 6.5 CVE-2026-67618 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-67618 ] Mark Jaquith--Subscribe to Comments Author Cross Si=
te Scripting (XSS) in Subscribe to Comments <=3D 2.3.1 versions. 2026-08-06=
5.9 CVE-2026-66706 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66706 ] M= auricioMilano--coder-api A security vulnerability has been detected in Maur= icioMilano coder-api up to 1.1.0. Affected is the function createProject of=
the file src/core/projects.ts of the component Projects Endpoint. The mani= pulation leads to command injection. The attack must be carried out locally=
. The project was informed of the problem early through an issue report but=
has not responded yet. 2026-08-08 5.3 CVE-2026-19284 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-19284 ] maximeAmini--Atals-Livre Atals-Livre conta= ins a SQL injection vulnerability that allows attackers to manipulate datab= ase queries by passing unsanitized input through a GET parameter to the sup= p() deletion helper function. Attackers can inject malicious SQL syntax via=
the vulnerable GET parameter to perform unauthorized database operations i= ncluding data deletion and extraction. 2026-08-04 6.5 CVE-2026-69704 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-69704 ] mealie-recipes--mealie Meal= ie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.py) reso= lves a target hostname once, checks the resolved IP against private-range r= ules, but then issues the actual outbound HTTP request using the original h= ostname, which the underlying async transport re-resolves independently. Be= cause the validated IP is never pinned to the actual connection, a DNS-rebi= nding attacker (returning a public IP to the validation lookup and a privat= e/metadata IP to the real connection) defeats the guard. This is reachable =
by any authenticated user via /api/recipes/create/url, /api/recipes/test-sc= rape-url, and /api/recipes/{slug}/image, and the scraper reflects fetched c= ontent back to the requester, allowing an authenticated user to read intern=
al HTTP services and cloud-metadata endpoints. 2026-08-05 5.3 CVE-2026-7121=
0 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71210 ] Medixant--RadiAnt D= ICOM Opening a crafted DICOM file containing malicious JPEG-compressed pixe=
l data triggers an attacker-controlled heap out-of-bounds write, which may = allow an attacker to remotely execute arbitrary code. 2026-08-06 4.3 CVE-20= 26-17264 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17264 ] Mercado Pago= --Mercado Pago payments for WooCommerce Unauthenticated Insecure Direct Obj= ect References (IDOR) in Mercado Pago payments for WooCommerce <=3D 8.9.0 v= ersions. 2026-08-06 5.3 CVE-2026-28180 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-28180 ] metaslider--Slider, Gallery, and Carousel by MetaSlider=
Image Slider, Video Slider The Slider, Gallery, and Carousel by MetaSlider=
- Image Slider, Video Slider plugin for WordPress is vulnerable to Stored = Cross-Site Scripting via 'delay' Post Meta Setting in all versions up to, a=
nd including, 3.111.0 due to insufficient input sanitization and output esc= aping. This makes it possible for authenticated attackers, with custom-leve=
l access and above, to inject arbitrary web scripts in pages that will exec= ute whenever a user accesses an injected page. The ml-slider custom post ty=
pe is registered without custom capability restrictions and the ml-slider_s= ettings meta key is unprotected, allowing Author-level users to set the mal= icious delay value via XML-RPC custom_fields when creating an ml-slider pos=
t. 2026-08-06 6.4 CVE-2026-18400 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-18400 ] mf-yang--openclaw-cn A vulnerability was found in mf-yang openc= law-cn 2026.2.5. This affects an unknown part of the file src/agents/bash-t= ools.exec.ts of the component Ggateway Exec Approval Flow. The manipulation=
results in incorrect authorization. The attack may be performed from remot=
e. The exploit has been made public and could be used. The project was info= rmed of the problem early through an issue report but has not responded yet=
. 2026-08-06 6.3 CVE-2026-19006 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-19006 ] mf-yang--openclaw-cn A vulnerability was determined in mf-yang o= penclaw-cn up to 0.2.1. This vulnerability affects the function isApprovedE= levatedSender of the file src/auto-reply/reply/reply-elevated.ts. This mani= pulation causes improper privilege management. It is possible to initiate t=
he attack remotely. The exploit has been publicly disclosed and may be util= ized. The project was informed of the problem early through an issue report=
but has not responded yet. 2026-08-06 6.3 CVE-2026-19007 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-19007 ] mf-yang--openclaw-cn A vulnerability w=
as identified in mf-yang openclaw-cn up to 0.2.1. This issue affects the fu= nction assertNoSymlinkEscape of the file src/agents/sandbox-paths.ts of the=
component apply_patch Tool. Such manipulation leads to link following. It =
is possible to launch the attack remotely. The exploit is publicly availabl=
e and might be used. The project was informed of the problem early through =
an issue report but has not responded yet. 2026-08-06 6.3 CVE-2026-19008 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-19008 ] Microsoft--Microsoft Ed=
ge (Chromium-based) Improper control of generation of code ('code injection=
') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to pe= rform spoofing over a network. 2026-08-03 6.1 CVE-2026-65804 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-65804 ] Microsoft--Microsoft Edge (Chromium= -based) Missing authorization in Microsoft Edge (Chromium-based) allows an = unauthorized attacker to perform tampering locally. 2026-08-03 6.2 CVE-2026= -66311 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66311 ] Microsoft--Mic= rosoft Edge (Chromium-based) Buffer over-read in Microsoft Edge (Chromium-b= ased) allows an authorized attacker to execute code over a network. 2026-08= -03 6.5 CVE-2026-66312 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66312 =
] Microsoft--Microsoft Edge (Chromium-based) Origin validation error in Mic= rosoft Edge (Chromium-based) allows an unauthorized attacker to perform tam= pering locally. 2026-08-03 6.8 CVE-2026-66313 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-66313 ] Microsoft--Microsoft Edge (Chromium-based) Time-of= -check time-of-use (toctou) race condition in Microsoft Edge (Chromium-base=
d) allows an unauthorized attacker to disclose information over a network. = 2026-08-03 6.5 CVE-2026-66314 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -66314 ] Microsoft--Microsoft Edge (Chromium-based) Server-side request for= gery (ssrf) in Microsoft Edge (Chromium-based) allows an unauthorized attac= ker to perform spoofing over a network. 2026-08-03 6.1 CVE-2026-66325 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-66325 ] Microsoft--Microsoft Edge = (Chromium-based) Missing authorization in Microsoft Edge (Chromium-based) a= llows an unauthorized attacker to execute code over a network. 2026-08-03 6=
.5 CVE-2026-66326 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66326 ] Mic= rosoft--Microsoft Edge (Chromium-based) Origin validation error in Microsof=
t Edge (Chromium-based) allows an unauthorized attacker to perform spoofing=
over a network. 2026-08-03 5.4 CVE-2026-66316 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-66316 ] Microsoft--Microsoft Edge (Chromium-based) Origin=
validation error in Microsoft Edge (Chromium-based) allows an unauthorized=
attacker to perform tampering over a network. 2026-08-03 5.4 CVE-2026-6631=
7 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66317 ] microweber--microwe= ber Microweber CMS through 2.0.20 contains a stored cross-site scripting vu= lnerability in the content tagging system that allows admin-authenticated a= ttackers to inject arbitrary JavaScript by submitting malicious payloads vi=
a the tag_names parameter of the GET /api/save_content_admin endpoint, bypa= ssing three independent sanitization controls including XSS middleware that=
ignores GET requests, a strip_unsafe() function that only matches double-q= uoted onerror attributes, and a titlecase normalizer that passes HTML decim=
al entity-encoded payloads through unchanged. Attackers can store malicious=
scripts that execute without user interaction for every visitor to the pub= lic blog page and within the admin post editor, enabling session riding thr= ough same-origin fetch requests using the CSRF token embedded in the page. = 2026-08-03 4.8 CVE-2026-67617 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -67617 ] miguelcobain--ember-dynamic-render-template The render-template co= mponent of ember-dynamic-render-template (addon/components/render-template.= js) passes its `templateString` property directly into Ember/Glimmer's comp= ileTemplate() (from @ember/template-compilation) with no sanitization, allo= w-listing, or validation of the input. Because compileTemplate() dynamicall=
y compiles and renders the supplied string as a live Handlebars/Glimmer tem= plate, any application that renders attacker-influenced data through this c= omponent's templateString property is exposed to client-side template injec= tion: an attacker-controlled Handlebars expression is compiled and executed=
in the context of the rendering component, which can be leveraged for cros= s-site scripting depending on what helpers/context are exposed to the compi= led template. 2026-08-05 6.1 CVE-2026-71286 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-71286 ] MIMICLab--mcp-pdf-vision A vulnerability was identif= ied in MIMICLab mcp-pdf-vision 1.1.0. The impacted element is the function = load_pdf of the file src/index.ts. Such manipulation of the argument pdfPat= h/sessionId leads to command injection. The attack can only be performed fr=
om a local environment. The project was informed of the problem early throu=
gh an issue report but has not responded yet. 2026-08-08 5.3 CVE-2026-19279=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-19279 ] MingSoft--MCMS A vul= nerability was identified in MingSoft MCMS up to 3.0.6. This impacts an unk= nown function of the file /mdiy/form/data/list of the component ms-mdiy. Th=
e manipulation leads to information disclosure. It is possible to initiate = the attack remotely. The exploit is publicly available and might be used. T=
he vendor was contacted early about this disclosure but did not respond in = any way. 2026-08-09 5.3 CVE-2026-19356 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19356 ] MingSoft--MCMS A security flaw has been discovered in M= ingSoft MCMS up to 3.0.6. Affected is an unknown function of the file /mdiy= /form/get of the component ms-mdiy. The manipulation results in information=
disclosure. It is possible to launch the attack remotely. The exploit has = been released to the public and may be used for attacks. The vendor was con= tacted early about this disclosure but did not respond in any way. 2026-08-=
09 5.3 CVE-2026-19357 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19357 ]=
MissionSquad--mcp-api A flaw has been found in MissionSquad mcp-api up to = 1.11.9. The affected element is an unknown function of the file src/service= s/dcrClients.ts. Executing a manipulation can lead to server-side request f= orgery. The attack may be performed from remote. Upgrading to version 1.11.=
10 is sufficient to fix this issue. This patch is called f068ab4ad6f0907ac7= 001b995588c2673f11a755. You should upgrade the affected component. 2026-08-=
06 6.3 CVE-2026-19040 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19040 ]=
MissionSquad--mcp-api A vulnerability has been found in MissionSquad mcp-a=
pi up to 1.11.8. The impacted element is the function this.packageService.i= nstallPackage of the file src/controllers/packages.ts of the component NPM = Package Version Handler. The manipulation leads to command injection. It is=
possible to initiate the attack remotely. Upgrading to version 1.11.9 is s= ufficient to resolve this issue. The identifier of the patch is a40f54d4533= ba6618e1749383a245900eeb024c1. The affected component should be upgraded. 2= 026-08-06 6.3 CVE-2026-19041 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 19041 ] Mobi-Com Polska Sp. z o.o.--stunnel A stack-based out-of-bounds rea=
d vulnerability exists in the "s_vlog" function of stunnel, when handling o= versized log messages via "vsnprintf". A remote attacker with network acces=
s to a stunnel service can send protocol inputs that trigger a log message = longer than 1024 bytes, leading to an out-of-bounds stack read and a potent= ial crash. In certain corner cases, the same vulnerability could be used to=
replace a series of trailing "\n" characters with " ". 2026-08-04 6.5 CVE-= 2026-70368 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70368 ] Mobi-Com P= olska Sp. z o.o.--stunnel A Server-Side Request Forgery (SSRF) bypass vulne= rability exists in "stunnel" 5.79 and lower when configured in SOCKS proxy = mode. This flaw allows a client to bypass intended localhost restrictions b=
y using IPv4-mapped IPv6 addresses (e.g., "::ffff:127.0.0.1") or unspecifie=
d addresses ("0.0.0.0", "::"), enabling access to loopback-only services on=
the "stunnel" host that should not be network-reachable. 2026-08-04 5.4 CV= E-2026-70367 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70367 ] Monomyth= Development--la-forge-mcp A security vulnerability has been detected in Mon= omythDevelopment la-forge-mcp 1.0.0. This issue affects the function screen= shotElement of the file src/index.ts of the component screenshot_element To= ol. Such manipulation of the argument output_name leads to path traversal. = The attack can be executed remotely. Upgrading to version 1.1.1 is capable =
of addressing this issue. The name of the patch is 1102172c9adec4a619e241ef= d6bfb74f5b1f4332. Upgrading the affected component is advised. The vendor w=
as contacted early, responded in a very professional manner and quickly rel= eased a fixed version of the affected product. 2026-08-06 6.3 CVE-2026-1903=
8 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19038 ] MZ Automation--libi= ec61850 A vulnerability was found in MZ Automation libiec61850 up to 1.6.1.=
The affected element is the function deleteDataSetValuesShadowBuffer of th=
e file src/iec61850/server/mms_mapping/reporting.c of the component URCB Re= validation. The manipulation results in use after free. The attack needs to=
be approached locally. The exploit has been made public and could be used.=
Upgrading to version 1.6.2 is sufficient to fix this issue. The patch is i= dentified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affect=
ed component is advised. 2026-08-06 5.3 CVE-2026-19108 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-19108 ] MZ Automation--libiec61850 A security fla=
w has been discovered in MZ Automation libiec61850 up to 1.6.1. This affect=
s the function SVReceiver_stopThreadless of the file src/sampled_values/sv_= subscriber.c of the component ASDU Element Handler. Performing a manipulati=
on results in heap-based buffer overflow. The attack must be initiated from=
a local position. The exploit has been released to the public and may be u= sed for attacks. Upgrading to version 1.6.2 is able to mitigate this issue.=
The patch is named a96bd674e0238276dd1387d31d52e55229d0771e. The affected = component should be upgraded. 2026-08-07 5.3 CVE-2026-19206 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-19206 ] MZ Automation--libiec61850 A vulnera= bility has been found in MZ Automation libiec61850 up to 1.6.1. The affecte=
d element is the function MmsMapping_varAccessSpecToObjectReference of the = file src/iec61850/common/iec61850_common.c of the component MMS Protocol Wo= rkflow. Such manipulation of the argument GetNamedVariableListAttributesRes= ponse.itemId leads to heap-based buffer overflow. The attack must be carrie=
d out locally. The exploit has been disclosed to the public and may be used=
. The project was informed of the problem early through an issue report but=
has not responded yet. 2026-08-08 5.3 CVE-2026-19259 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-19259 ] mz-automation--libiec61850 A security flaw=
has been discovered in mz-automation libiec61850 up to 1.6.1. This vulnera= bility affects the function Reporting_RCBWriteAccessHandler of the file src= /iec61850/server/mms_mapping/reporting.c of the component Report Sending Pa=
th Handler. The manipulation results in free of memory not on the heap. It =
is possible to launch the attack remotely. The exploit has been released to=
the public and may be used for attacks. Upgrading to version 1.6.2 is able=
to resolve this issue. The patch is identified as 5b2a69f44256b8548927d8af= dd7ac5f5381abe1e. It is suggested to upgrade the affected component. The ve= ndor was contacted early about this disclosure. 2026-08-03 5.3 CVE-2026-185=
82 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18582 ] mz-automation--lib= iec61850 A weakness has been identified in mz-automation libiec61850 up to = 1.6.1. This issue affects the function checkDataSetAccess of the file src/i= ec61850/server/mms_mapping/mms_mapping.c of the component MMS Request Handl= er. This manipulation causes out-of-bounds read. The attack can be initiate=
d remotely. The exploit has been made available to the public and could be = used for attacks. Upgrading to version 1.6.2 is capable of addressing this = issue. Patch name: 062062daf4cb50c7aa76e01d6fb4d58fc9278a7d. Upgrading the = affected component is recommended. The vendor was contacted early about thi=
s disclosure. 2026-08-03 5.3 CVE-2026-18583 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-18583 ] nanocoai--NanoClaw A vulnerability was detected in n= anocoai NanoClaw up to 2.0.64. Affected is the function handleCreateAgent o=
f the file src/modules/agent-to-agent/create-agent.ts of the component Chil= d-Agent Creation. Performing a manipulation results in improper privilege m= anagement. Remote exploitation of the attack is possible. The exploit is no=
w public and may be used. The project was informed of the problem early thr= ough an issue report but has not responded yet. 2026-08-06 6.3 CVE-2026-190=
05 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19005 ] nearai--ironclaw A=
vulnerability was identified in nearai ironclaw up to 0.29.1. Affected is = the function classify_command_risk of the file src/tools/builtin/shell.rs. = Such manipulation leads to command injection. The attack may be launched re= motely. The exploit is publicly available and might be used. The name of th=
e patch is a1d7c3ba428ed575900469b207fb5668725f9a71. Applying a patch is ad= vised to resolve this issue. 2026-08-06 6.3 CVE-2026-18980 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-18980 ] NellyW8--MCP4EDA A security vulnerabi= lity has been detected in NellyW8 MCP4EDA 1.0.0. Affected by this vulnerabi= lity is an unknown functionality of the component run_openlane/view_wavefor=
m. The manipulation of the argument design_name/vcd_file leads to command i= njection. Local access is required to approach this attack. The project was=
informed of the problem early through an issue report but has not responde=
d yet. 2026-08-09 5.3 CVE-2026-19332 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-19332 ] netease-youdao--LobsterAI A flaw has been found in netease-= youdao LobsterAI 2026.6.10. This affects the function parseMediaTokensFromT= ext of the file src/renderer/services/artifactParser.ts of the component ME= DIA Path Handler. This manipulation causes information disclosure. The atta=
ck is possible to be carried out remotely. The exploit has been published a=
nd may be used. The project was informed of the problem early through an is= sue report but has not responded yet. 2026-08-06 4.3 CVE-2026-18995 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-18995 ] netty--netty Netty is an asy= nchronous, event-driven network application framework. Prior to 4.1.136.Fin=
al and 4.2.16.Final, the RedisArrayAggregator Redis codec clears retained p= artial aggregate state when the maxNestedArrayDepth limit is exceeded, but =
it does not clear the same state when the sibling maxElements limit is exce= eded. A peer can start a valid RESP array, send a bulk string child, then s= end a nested array header longer than the configured maxElements. Netty thr= ows a decoder exception in decodeRedisArrayHeader, but the existing partial=
aggregate remains retained in the handler. If the application leaves the c= hannel alive after the exception, later messages are still consumed into th=
e pre-error aggregate, allowing an unauthenticated peer to keep attacker-co= ntrolled aggregate state alive across a security-limit exception and pin re= tained pooled buffers. This issue is fixed in versions 4.1.136.Final and 4.= 2.16.Final. 2026-08-07 6.5 CVE-2026-56818 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-56818 ] NewType--WebEIP A vulnerability was detected in NewTyp=
e WebEIP up to 3.0. This affects an unknown part of the file /EIP_Com_FileL= ist.aspx. The manipulation results in improper authentication. It is possib=
le to launch the attack remotely. The exploit is now public and may be used=
. The vendor was contacted early about this disclosure but did not respond =
in any way. 2026-08-03 5.3 CVE-2026-18610 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-18610 ] Nexcess--Gutenberg Blocks by Kadence Blocks Contributo=
r Sensitive Data Exposure in Gutenberg Blocks by Kadence Blocks <=3D 3.7.8 = versions. 2026-08-06 4.3 CVE-2026-66696 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-66696 ] NightTrek--Ollama-mcp A flaw has been found in NightTre=
k Ollama-mcp up to 80cf2e17cfc144963a475b619093a2d13c13dbc9. This affects a=
n unknown part of the file src/index.ts. This manipulation of the argument = name/modelfile/source/destination causes command injection. The attack can = only be executed locally. This product is using a rolling release to provid=
e continious delivery. Therefore, no version details for affected nor updat=
ed releases are available. The project was informed of the problem early th= rough an issue report but has not responded yet. 2026-08-09 5.3 CVE-2026-19= 334 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19334 ] NightTrek--Supaba= se-MCP A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36= b0af6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affec= ted by this issue is some unknown functionality of the component generate_t= ypes. The manipulation of the argument schema results in command injection.=
The attack needs to be approached locally. The project was informed of the=
problem early through an issue report but has not responded yet. 2026-08-0=
9 5.3 CVE-2026-19333 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19333 ] = Nikolaibibo--claude-comfyui-mcp A vulnerability was identified in Nikolaibi=
bo claude-comfyui-mcp 1.0.0. Affected is the function copyFileSync of the f= ile src/tools/utils.ts of the component comfy_upload_image. Such manipulati=
on of the argument image_path leads to path traversal. An attack has to be = approached locally. The project was informed of the problem early through a=
n issue report but has not responded yet. 2026-08-09 5.3 CVE-2026-19371 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-19371 ] Ninja Forms--Ninja Forms=
The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-supp= lied query-string input, used to pre-populate a form field's default value,=
from being processed as a shortcode, allowing unauthenticated attackers to=
execute arbitrary shortcodes registered on the site when a form so configu= red is embedded on a public page. 2026-08-06 4.8 CVE-2026-15256 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-15256 ] NocteDefensor--LudusMCP A vulner= ability has been found in NocteDefensor LudusMCP 1.0.24. Affected by this v= ulnerability is an unknown functionality of the file src/tools/rangeConfig.=
ts of the component read_range_config. The manipulation of the argument Sou= rce leads to server-side request forgery. The attack may be initiated remot= ely. The project was informed of the problem early through an issue report = but has not responded yet. 2026-08-09 6.3 CVE-2026-19367 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-19367 ] NocteDefensor--LudusMCP A weakness has = been identified in NocteDefensor LudusMCP up to 1.0.24. The affected elemen=
t is the function SecretDialog.showSecretDialog of the file src/utils/secre= tDialog.ts of the component get_credential_from_user. This manipulation of = the argument Description causes command injection. It is possible to launch=
the attack on the local host. The project was informed of the problem earl=
y through an issue report but has not responded yet. 2026-08-06 5.3 CVE-202= 6-19045 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19045 ] NocteDefensor= --LudusMCP A vulnerability was detected in NocteDefensor LudusMCP up to 1.0= .24. This affects the function executeArbitraryCommand/executeCommand of th=
e file src/ludusMCP/cliWrapper.ts of the component ludus_cli_execute. Perfo= rming a manipulation of the argument command/args results in command inject= ion. The attack needs to be approached locally. The project was informed of=
the problem early through an issue report but has not responded yet. 2026-= 08-06 5.3 CVE-2026-19047 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1904=
7 ] NocteDefensor--LudusMCP A flaw has been found in NocteDefensor LudusMCP=
up to 1.0.24. Affected is an unknown function of the file src/tools/insert= CredsRangeConfig.ts of the component insert_creds_range_config. Executing a=
manipulation of the argument configPath/outputPath can lead to path traver= sal. The attack is restricted to local execution. The project was informed =
of the problem early through an issue report but has not responded yet. 202= 6-08-09 5.3 CVE-2026-19366 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19= 366 ] NousResearch--hermes-agent A vulnerability was detected in NousResear=
ch hermes-agent up to 2026.6.5. Affected by this issue is the function _che= ck_slash_access of the file gateway/run.py of the component Quick Command H= andler. The manipulation results in incorrect authorization. The attack can=
be launched remotely. The exploit is now public and may be used. The vendo=
r was contacted early about this disclosure but did not respond in any way.=
2026-08-04 6.3 CVE-2026-18773 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-18773 ] NousResearch--hermes-agent A flaw has been found in NousResearch = hermes-agent up to 0.16.0. This affects the function save_url_image of the = file agent/image_gen_provider.py of the component xAI Image Generation Prov= ider. This manipulation causes server-side request forgery. The attack may =
be initiated remotely. The exploit has been published and may be used. The = vendor was contacted early about this disclosure but did not respond in any=
way. 2026-08-04 6.3 CVE-2026-18774 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-18774 ] NousResearch--hermes-agent A vulnerability has been found in=
NousResearch hermes-agent up to 0.16.0. This vulnerability affects the fun= ction browser_snapshot of the file tools/browser_tool.py of the component B= rowser Tooling. Such manipulation leads to server-side request forgery. The=
attack may be launched remotely. The exploit has been disclosed to the pub= lic and may be used. The vendor was contacted early about this disclosure b=
ut did not respond in any way. 2026-08-04 6.3 CVE-2026-18775 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-18775 ] NousResearch--hermes-agent A vulner= ability was determined in NousResearch hermes-agent up to 0.16.0. This impa= cts the function get_tool_definitions of the file agent/agent_init.py of th=
e component disabled_toolsets Handler. This manipulation causes incorrect p= rivilege assignment. The attack may be initiated remotely. The exploit has = been publicly disclosed and may be utilized. The project was informed of th=
e problem early through an issue report. 2026-08-06 6.3 CVE-2026-18976 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-18976 ] NousResearch--hermes-agen=
t A vulnerability was detected in NousResearch hermes-agent up to 0.16.0. A= ffected by this issue is some unknown functionality of the file hermes-agen= t/model_tools.py of the component Memory Toolset. The manipulation results =
in improper access controls. The attack can be executed remotely. The explo=
it is now public and may be used. 2026-08-06 6.3 CVE-2026-18993 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-18993 ] nuxt--nuxt Nuxt is an open-sourc=
e web development framework for Vue.js. From 3.1.0 until 3.21.10 and 4.5.1,=
an attacker can supply a top-level `as` prop to the /__nuxt_island/ endpoi=
nt and drive dynamic component resolution through <component :is>, resolveD= ynamicComponent, or h(). This issue is fixed in 3.21.10 and 4.5.1. 2026-08-=
05 4.8 CVE-2026-71318 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71318 ]=
NVIDIA--Dynamo NVIDIA Dynamo for Linux examples and recipes contain a vuln= erability where an attacker could cause a system failure. A successful expl= oit of this vulnerability might lead to code execution, data tampering, den= ial of service, and information disclosure. 2026-08-04 6.6 CVE-2026-47619 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-47619 ] NVIDIA--Dynamo NVIDIA = Dynamo for Linux contains a vulnerability where an attacker could cause a r= ace condition in the LoRA manager singleton initialization. A successful ex= ploit of this vulnerability might lead to data tampering and denial of serv= ice. 2026-08-04 6.5 CVE-2026-47620 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-47620 ] NVIDIA--Dynamo NVIDIA Dynamo for Linux contains a vulnerabili=
ty where an attacker could cause a race condition in the LoRA manager singl= eton initialization. A successful exploit of this vulnerability might lead =
to denial of service and data tampering. 2026-08-04 6.5 CVE-2026-47621 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-47621 ] NVIDIA--Dynamo NVIDIA Dyn= amo for Linux contains a vulnerability where an attacker could cause the ge= neration of error messages that contain sensitive information. A successful=
exploit of this vulnerability might lead to information disclosure. 2026-0= 8-04 5.3 CVE-2026-47622 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47622=
] NVIDIA--Triton Inference Server NVIDIA Triton Inference Server for Linux=
contains a vulnerability where a user could cause files outside the model = repository to be read, written to, or modified by providing a path in the m= odel name to the Triton MLflow plugin. A successful exploit of this vulnera= bility might lead to denial of service and information disclosure. 2026-08-=
04 4.4 CVE-2026-47487 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47487 ]=
nxp-auto-goldvip--gvip A security vulnerability has been detected in nxp-a= uto-goldvip gvip up to 1.4.0. Affected by this issue is the function Sitewi= seCustomFunction of the component Lambda Function Handler. Such manipulatio=
n leads to improper access controls. The attack can be launched remotely. U= pgrading to version 1.15.0 can resolve this issue. Upgrading the affected c= omponent is advised. The project explains: "The reported IAM permission con= figuration is a known historical issue that was already addressed in 2024, = beginning with GoldVIP version 1.13.0. The permissions were updated in subs= equent releases, including version 1.15.0. In addition, we also sent a requ= est to either update or deprecate the older release in the AWS SAR applicat= ion repository." 2026-08-09 4.7 CVE-2026-19359 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-19359 ] o6--open62541 A vulnerability was found in o6 ope= n62541 up to 1.5.5. This issue affects the function UA_Client_readNodeClass= Attribute of the file src/client/ua_client_highlevel.c. Performing a manipu= lation results in heap-based buffer overflow. Attacking locally is a requir= ement. The exploit has been made public and could be used. The project clos=
ed the issue report, stating that this is not the official way to report a = security vulnerability. 2026-08-04 5.3 CVE-2026-18784 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-18784 ] o6--open62541 A vulnerability was determin=
ed in o6 open62541 ca356b088ada7dee824d1b4acd07c1ff07ce242b. Impacted is th=
e function UA_Client_getRemoteDataTypes of the file examples/custom_datatyp= e/client_types_custom.c. Executing a manipulation can lead to use after fre=
e. It is possible to launch the attack on the local host. The exploit has b= een publicly disclosed and may be utilized. The project closed the issue re= port, stating that this is not the official way to report a security vulner= ability. 2026-08-04 5.3 CVE-2026-18785 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18785 ] odysseus-dev--odysseus Odysseus before commit 87babb5 c= ontains a server-side request forgery vulnerability that allows admin-privi= leged attackers to direct the server to probe internal network resources by=
supplying arbitrary URLs to the embedding endpoint configuration without s= cheme, host, IP range, or DNS rebind validation. Attackers can submit loopb= ack addresses, RFC 1918 ranges, or link-local addresses through the embeddi=
ng endpoint API to partially read responses from cloud instance metadata se= rvices, internal APIs, and other hosts reachable from the server. 2026-08-0=
4 6.8 CVE-2026-70620 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70620 ] = OMICRON electronics GmbH--OMICRON StationGuard OMICRON StationGuard 4.00 co= ntains an improper input validation vulnerability in its IEC 61850 Sampled = Values (SV) frame processing. A specially crafted SV frame can cause the af= fected process to terminate, disrupting alert processing for Sampled Values=
traffic. The vulnerability does not affect overall system availability or = the processing of other traffic types, and the process is automatically res= tarted, and the failure is immediately reported to the user. 2026-08-06 4.3=
CVE-2026-16316 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16316 ] open-= reception--appointment-booking-software OpenReception's appointment booking=
software provides an end-to-end encrypted appointment booking platform. Pr= ior to version 1.0.5, the `add-to-tunnel` endpoint creates a new appointmen=
t row in any client tunnel without any caller authentication. A request tha=
t supplies any valid `tunnelId` and any valid `emailHash` (the two need not=
belong to the same tunnel) results in an inserted appointment with `status=
=3D "CONFIRMED"`, attacker-controlled ciphertext fields, attacker-controll=
ed date and duration, and an attacker-chosen agent. The endpoint validates = only that some tunnel exists with the given `emailHash`, then writes the ap= pointment using the attacker-supplied `tunnelId` directly. The `emailHash` = lookup is effectively an existence check on the tenant; it does not authent= icate the caller as the owner of the supplied `tunnelId`. Combined with the=
absence of any session, Authorization header, booking access token, or PoW=
, this makes the endpoint accept arbitrary appointment writes into arbitrar=
y tunnels. By contrast, the sibling endpoint `create-new-client` (used to b= ootstrap a brand-new client tunnel) requires a Bearer bootstrap booking acc= ess token issued by the bootstrap-challenge / bootstrap-verify flow. The `a= dd-to-tunnel` endpoint, intended for return-clients booking additional appo= intments, has no equivalent gate. The application's own middleware confirms=
this is intentional: `add-to-tunnel` is explicitly listed in the apiAuthHa= ndle public-route allowlist alongside the bootstrap and challenge endpoints=
(which legitimately have no session). Version 1.0.5 fixes the issue. 2026-= 08-06 6.5 CVE-2026-48075 [ https://www.cve.org/CVERecord?id=3DCVE-2026-4807=
5 ] open-reception--appointment-booking-software OpenReception's appointmen=
t booking software provides an end-to-end encrypted appointment booking pla= tform. The new-client booking flow in versions 1.0.1 and prior consists of = three calls: `bootstrap-challenge` (returns a 16-bit PoW challenge with `di= fficulty=3D4` leading hex zeroes), `bootstrap-verify` (validates the PoW an=
d issues a Bearer booking access token), and `create-new-client` (consumes = the token and creates the tunnel and first appointment). The token correctl=
y binds to `tenantId`, `tunnelId`, `clientPublicKey`, and `emailHash`, but = never to `channelId`. The `bootstrap-challenge` request schema does not eve=
n accept a `channelId`, and the issued token's payload contains no channel = information. Independently, the service function `createNewClientWithAppoin= tment` checks only `channel.archived =3D false`. The `channel.isPublic` che=
ck that protects `addAppointmentToTunnel` is missing in the new-client path=
. The combination means: an attacker completes the bootstrap flow normally = (16-bit PoW, completes in well under one second on commodity hardware, no r= ate limiting beyond the throttle store), receives a valid booking access to= ken, and then submits the `create-new-client` payload with `channelId` poin= ting to a private (`isPublic =3D false`) channel. The booking lands as `CON= FIRMED` if the target channel has `requiresConfirmation =3D false` (the def= ault), otherwise as `NEW`. The patient-facing UI does not list private chan= nels in its picker (`/api/public/channels` correctly filters `isPublic =3D = true`), so the channel ID must be obtained out of band. The companion findi=
ng V-10 (schedule endpoint discloses private channels) provides exactly tha=
t: a single unauthenticated GET reveals every private channel ID for any te= nant. V-10 plus V-11 together make private channels fully reachable to anon= ymous attackers. As of time of publication, no known patched versions are a= vailable. 2026-08-06 6.5 CVE-2026-48076 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-48076 ] open-reception--appointment-booking-software OpenRecept= ion's appointment booking software provides an end-to-end encrypted appoint= ment booking platform. Prior to version 1.0.2, the `/api/log` endpoint acce= pts unauthenticated POST requests, applies no schema validation to the mess= age body, writes attacker-controlled content directly into the application'=
s stdout log, interprets newline characters as real line breaks, and enforc=
es no size or rate limits. Three independent abuse modes follow: log inject= ion (forge log lines that look like legitimate system events), log volume D=
oS (saturate the logging pipeline at sustained 100+ requests per second of = small messages), and oversized-payload submission (100 KB payloads accepted=
; larger sizes not tested). The most operationally damaging mode is log inj= ection. An attacker can inject lines that an operator scanning logs would m= istake for real system errors, mask their own activity behind fake noise, o=
r pollute SIEM alerting rules with crafted false positives. A line such as = `[error]: injected admin error` injected from an unauthenticated source is = indistinguishable from the application's own error output once written to d= isk. Version 1.0.2 fixes the issue. 2026-08-06 6.5 CVE-2026-48083 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-48083 ] open-reception--appointment-bo= oking-software OpenReception's appointment booking software provides an end= -to-end encrypted appointment booking platform. Prior to version 1.0.4, the=
PIN-type challenge throttle uses `emailHash` as the only key. The throttle=
rows live in the central `challenge_throttle` table, which is shared acros=
s all tenants. Every tenant's `/api/tenants/{id}/appointments/verify-challe= nge` endpoint increments the same row when a PIN response fails, and every = tenant's `/api/tenants/{id}/appointments/challenge` endpoint reads the same=
row when deciding whether to issue a new challenge. When the same `emailHa= sh` exists in multiple tenants on the same OpenReception instance (the same=
patient holding tunnels in two different clinics that share the platform),=
an attacker who knows the patient's email can lock out that patient on ten= ant B by issuing failed challenge responses against tenant A. The attacker = needs no relationship to tenant B; the lockout propagates through the share=
d throttle row. The lockout escalates with repeated failures. The first loc= kout triggers at 4 failed attempts and lasts approximately 60 seconds. Subs= equent failures escalate the lockout duration to 5 minutes, 30 minutes, and=
60 minutes per the throttle service's escalation logic. Repeated bursts pr= oduce sustained denial of service against the targeted email. Version 1.0.4=
patches the issue. 2026-08-06 5.8 CVE-2026-48071 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-48071 ] open-reception--appointment-booking-software O= penReception's appointment booking software provides an end-to-end encrypte=
d appointment booking platform. Prior to version 1.1.0, the GET handler at = `/api/tenants/{id}/appointments/{appointmentId}` performs no authorization = check before returning the appointment record. Any party who knows or obtai=
ns a valid appointment UUID receives the full row, including channel and ag= ent IDs, time and timezone, status, and the AES-GCM ciphertext components (= `encryptedPayload`, `iv`, `authTag`, `dataKey`). The same file's DELETE han= dler calls `checkPermission(locals, tenantId, true)` before allowing deleti= on. The intent is clear: appointment records are tenant-scoped and require = authentication to access. The GET handler is missing the equivalent call. T=
he middleware chain (`apiAuthHandle`, `authGuard`) does not compensate: API=
paths bypass `authGuard` entirely, and `apiAuthHandle` does not block requ= ests to non-admin paths when no token is present. Version 1.1.0 patches the=
issue. 2026-08-06 5.3 CVE-2026-48077 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-48077 ] open-reception--appointment-booking-software OpenReception=
's appointment booking software provides an end-to-end encrypted appointmen=
t booking platform. Prior to version 1.0.5, the unauthenticated `/api/tenan= ts/{id}/schedule` endpoint returns every non-archived channel for a tenant = regardless of the channel's `isPublic` flag. Channels marked `isPublic =3D = false` are intended to be invisible to public callers; the dashboard create=
s them deliberately to hide internal-only services from the patient booking=
UI. The schedule endpoint ignores the flag entirely and discloses channel = names, descriptions, IDs, agent associations, pause status, confirmation re= quirements, and computed slot availability for the requested date range. Th=
e asymmetry between `addAppointmentToTunnel` (which enforces `eq(channel.is= Public, true)`) and the schedule endpoint (which does not) confirms the des= ign intent: private channels exist as a real access boundary in the booking=
flow, just not in the schedule disclosure. Version 1.0.5 patches the issue=
. 2026-08-06 5.3 CVE-2026-48078 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-48078 ] open-webui--open-webui Open WebUI is an extensible, feature-rich=
, and user-friendly self-hosted AI platform. Prior to 0.11.0, Open WebUI re= solved a hostname during URL validation and rejected private, loopback, and=
link-local addresses, but the HTTP clients resolved the hostname again at = connection time. An authenticated attacker who controlled authoritative DNS=
for a submitted hostname could answer with a public address during validat= ion and an internal one during connection, reaching cloud metadata, loopbac=
k admin APIs, or internal services through URL ingest, chat image_url fetch= es, image editing, or OAuth profile-picture fetches, with most paths return= ing the response to the attacker and the OAuth path forwarding the OAuth ac= cess token. This issue is fixed in 0.11.0. 2026-08-04 6.3 CVE-2026-54020 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-54020 ] open-webui--open-webui = Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI=
platform. From 0.9.0 until 0.11.0, automation recurrence parsing in backen= d/open_webui/utils/automations.py anchored minutely and hourly rules at a f= ixed date of 2000-01-01 and then walked forward one interval at a time to f= ind the next run. A single FREQ=3DMINUTELY rule enumerates roughly a quarte= r-century of occurrences synchronously on the event loop that also serves s= cheduler, HTTP, and WebSocket traffic, and the scheduler recomputes the nex=
t run for every claimed row on each poll. This causes availability impact f=
or every other user of the instance. This issue is fixed in 0.11.0. 2026-08= -04 6.5 CVE-2026-70489 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70489 =
] open-webui--open-webui Open WebUI is an extensible, feature-rich, and use= r-friendly self-hosted AI platform. From 0.8.8 until 0.11.0, the terminal W= ebSocket route in backend/open_webui/routers/terminals.py authenticated its=
own first-message JWT and never applied the verified-user role gate that g= et_verified_user enforces on HTTP terminal routes. An account whose role is=
pending, including a registered but unapproved account or an account deact= ivated back to pending, can open an interactive terminal session when at le= ast one terminal server is configured and its access grants cover the accou= nt. This loses the account-approval boundary for terminal access while the = HTTP terminal routes correctly reject the same account. This issue is fixed=
in 0.11.0. 2026-08-04 6.3 CVE-2026-70490 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-70490 ] open-webui--open-webui Open WebUI is an extensible, fe= ature-rich, and user-friendly self-hosted AI platform. In 0.10.2 and earlie=
r, the GET /api/v1/tools/, GET /api/v1/tools/list, and GET /api/v1/tools/id= /{id} endpoints in backend/open_webui/routers/tools.py returned full Python=
tool source to authenticated non-admin read-only users. ToolResponse delib= erately omitted source and specs, but ToolUserResponse permitted extra fiel=
ds and handlers spread a full tool model dump into the response, re-admitti=
ng omitted fields. A non-admin with a read grant can obtain another user's = server-side tool source, which commonly embeds hard-coded API keys, credent= ials, and internal service URLs. This issue is fixed in 0.11.0. 2026-08-04 = 6.5 CVE-2026-70491 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70491 ] op= en-webui--open-webui Open WebUI is an extensible, feature-rich, and user-fr= iendly self-hosted AI platform. From 0.9.6 until 0.11.0, the built-in knowl= edge search path in backend/open_webui/tools/knowledge_fs.py and backend/op= en_webui/tools/builtin.py let a chat participant choose a pattern used to g= rep knowledge files. Patterns containing regex metacharacters were compiled=
with Python's backtracking re engine and run against every line of every r= eachable file with no time limit, so a crafted pattern such as (x|x)*y and = one matching uploaded file line can pin one CPU core and block the event lo= op. This causes availability impact for every other user of the affected wo= rker. This issue is fixed in 0.11.0. 2026-08-04 6.5 CVE-2026-70493 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-70493 ] open-webui--open-webui Open W= ebUI is an extensible, feature-rich, and user-friendly self-hosted AI platf= orm. From 0.5.0 until 0.11.0, the standard channel message update and delet=
e handlers accepted any caller holding write access on the channel without = checking that the caller wrote the message. Because write access is the sam=
e grant a member needs to post, any ordinary participant in a shared standa=
rd channel could rewrite or permanently delete another participant message,=
while group and direct message handlers enforced authorship. This issue is=
fixed in 0.11.0. 2026-08-04 5.4 CVE-2026-70481 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-70481 ] open-webui--open-webui Open WebUI is an extensib= le, feature-rich, and user-friendly self-hosted AI platform. From 0.8.8 unt=
il 0.11.0, inline direct model metadata accepted client-supplied knowledge = attachments without filtering them against the caller's read access. Any au= thenticated user who knew another user's file id could have the builtin kno= wledge tools return indexed chunks from that file, causing a read-only cros= s-user confidentiality loss while leaving knowledge-base permissions and sa= ved workspace model validation unaffected. This issue is fixed in 0.11.0. 2= 026-08-04 5.3 CVE-2026-70487 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 70487 ] open-webui--open-webui Open WebUI is an extensible, feature-rich, a=
nd user-friendly self-hosted AI platform. From 0.6.34 until 0.11.0, Open We= bUI renders vega and vega-lite fenced code blocks in chat content by buildi=
ng a Vega view in the viewer browser without a restricted resource loader. = Any user who can place such a block where another user will see it can make=
that user browser issue attacker-chosen outbound GET requests and read res= ponses from same-origin or CORS-permissive targets into the rendered page. = This issue is fixed in 0.11.0. 2026-08-04 4.1 CVE-2026-70480 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-70480 ] open-webui--open-webui Open WebUI i=
s an extensible, feature-rich, and user-friendly self-hosted AI platform. F= rom 0.7.0 until 0.11.0, the legacy chat-completions features block trusted =
a client-supplied image_generation flag and did not re-check the features.i= mage_generation permission that the direct image routes and native function= -calling path enforce. An authenticated user whose image-generation permiss= ion had been revoked could still consume the operator's configured image pr= ovider through chat completions, spending API credits and provider quota an=
d writing generated files to operator storage, without exposing provider cr= edentials or other users' data. This issue is fixed in 0.11.0. 2026-08-04 4=
.3 CVE-2026-70484 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70484 ] ope= n-webui--open-webui Open WebUI is an extensible, feature-rich, and user-fri= endly self-hosted AI platform. From 0.9.6 until 0.11.0, the sync cleanup en= dpoint authorized write access to the knowledge base in the URL but then ac= ted on directory and file ids supplied in the request body without checking=
that those objects belonged to that knowledge base. A user with write acce=
ss to one knowledge base could delete directories and remove file embedding=
s from another knowledge base, causing documents to drop out of retrieval r= esults and breaking chat-with-file for targeted documents without disclosin=
g contents. This issue is fixed in 0.11.0. 2026-08-04 4.3 CVE-2026-70488 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-70488 ] openbao--openbao OpenBa=
o is an open source identity-based secrets management system. Prior to vers= ion 2.5.4, in OpenBao's Kerberos auth method on the `GET` handler, or when =
an `Authorization: Negotiate` header is supplied, the response is includes =
a `logical.Auth` object in addition to an error message. This results in to= kens being created with only the default policy, default TTL, and no entity=
information, which are hidden by the returned error message. No access to = these tokens by the caller occurs and the authentication token is not ever = made accessible outside of `sys/raw`. This is fixed in OpenBao v2.5.4. As a=
workaround, users may set a rate limit quota to limit the creation of thes=
e paths. As the path is unauthenticated, it isn't possible to deny access t=
o it. 2026-08-07 5.3 CVE-2026-46405 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-46405 ] openemr--openemr OpenEMR through 8.2.0 contains a stored cro= ss-site scripting vulnerability in the patient portal template system that = allows authenticated administrators to inject arbitrary HTML and JavaScript=
by storing malicious payloads through the template save mode, which only f= ilters literal PHP open tags. Attackers can exploit the lack of output enco= ding at the template retrieval endpoint combined with missing HttpOnly cook=
ie attributes to exfiltrate session tokens via document.cookie access, enab= ling full session hijacking of any admin, clinician, or portal patient who = views a poisoned template. 2026-08-03 4.8 CVE-2026-67612 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-67612 ] OpenHands--OpenHands A vulnerability wa=
s determined in OpenHands up to 0.62.0. The affected element is the functio=
n initialize_repo of the file OpenHands/resolver/send_pull_request.py. This=
manipulation causes command injection. Remote exploitation of the attack i=
s possible. The vendor deleted the original GitHub issue report. It appears=
that the affected path/file got removed in version 1.7.0. 2026-08-06 6.3 C= VE-2026-19022 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19022 ] openshw= projects--OpenBK7231T_App OpenBK7231T's /cfg_wifi_set endpoint (src/httpser= ver/http_fns.c) accepts configuration changes via a plain GET request with =
no CSRF token. If the `web_admin_password_enabled` parameter is absent from=
the request, an else-branch silently clears the device's web admin passwor=
d to an empty string. A one-click CSRF payload (e.g. an <img> tag pointing =
at /cfg_wifi_set with new SSID/password parameters and web_admin_password_e= nabled omitted) visited by an authenticated admin's browser both hijacks th=
e device's WiFi configuration and disables its web password protection. 202= 6-08-05 6.5 CVE-2026-71273 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71= 273 ] openshwprojects--OpenBK7231T_App OpenBK7231T's http_fn_ota_exec() (sr= c/httpserver/http_fns.c) reflects the `host` query parameter directly into =
an HTML response via hprintf255(request, "<h3>OTA requested for %s!</h3>", = tmpA) with no HTML encoding, allowing a crafted URL such as /ota_exec?host= =3D<script>alert(1)</script> to execute JavaScript in an authenticated admi= n's browser when they click a malicious link. 2026-08-05 5.4 CVE-2026-71275=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-71275 ] OpenSIPS--opensips O= penSIPS is a Session Initiation Protocol (SIP) server implementation. In ve= rsions prior to 3.6.6 and 4.0.0-rc1, the find_line_delimiter() function in = the multipart body parser performs an out-of-bounds read via strncmp() when=
searching for MIME boundary delimiters. After finding a -- pattern near th=
e end of the body, the function compares delimiter.len bytes (typically 20-= 70) starting from a position at or past the logical end of the body buffer,=
reading past the body boundary. The bug triggers when a SIP message has Co= ntent-Type: multipart/mixed with a boundary parameter and its body contains=
-- within two to three bytes of the body's end without being followed by t=
he actual boundary delimiter. This issue has been fixed in versions 3.6.6 a=
nd 4.0.0-rc1. 2026-08-04 5.3 CVE-2026-45705 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-45705 ] OpenStack--Ironic In OpenStack Ironic through 38.0.0=
, a project reader that makes a crafted request to Ironic can return Portgr= oups assigned to Nodes owned or leased by another project. 2026-08-05 5 CVE= -2026-71201 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71201 ] osCommerc= e--osCommerce A security flaw has been discovered in osCommerce 4.14.63493.=
Affected by this issue is the function EmailController of the file app/lib= /backend/controllers/EmailController.php of the component Email Template Co= nfiguration. Performing a manipulation of the argument email_templates_key = results in sql injection. It is possible to initiate the attack remotely. T=
he exploit has been released to the public and may be used for attacks. The=
vendor was contacted early about this disclosure but did not respond in an=
y way. 2026-08-03 4.7 CVE-2026-18592 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-18592 ] owen2345--camaleon-cms Camaleon CMS through 2.9.2, fixed in=
commit 88ab703, contains a missing authorization vulnerability on the draf=
ts endpoint that allows any authenticated low-privileged user to create dra=
ft posts by bypassing role and permission checks. Attackers can send reques=
ts to the drafts endpoint using only session authentication to create unaut= horized drafts that appear in the administrative drafts queue. 2026-08-03 4=
.3 CVE-2026-67616 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67616 ] pap= erless-ngx--paperless-ngx Paperless-ngx's MailAccountViewSet.test() action,=
when called with an existing account's ID and a masked password field, reu= ses the stored password, account_type, refresh_token, and expiration from t= hat existing account while allowing the caller to supply a different imap_s= erver, imap_port, and imap_security in the same request. The test connectio=
n then authenticates to the caller-specified server using the real stored c= redentials. A user holding only object-level change_mailaccount permission =
on the target account (not full admin) can redirect the test connection to =
an attacker-controlled IMAP host, causing the real stored IMAP password or = OAuth token to be sent to that host. 2026-08-05 6.5 CVE-2026-71244 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-71244 ] perspective-dev--perspective = Perspective 5.0.0 contains a denial of service vulnerability that allows re= mote attackers to block the server event loop indefinitely by submitting a = crafted expression containing unbounded for or while loop constructs in a T= ableMakeViewReq message. Attackers can embed an arbitrarily large iteration=
count in an expression column evaluated once per table row, causing the To= rnado IOLoop to block without any iteration cap, deadline, or cancellation = check, rendering the server unresponsive to all connected clients. 2026-08-=
04 6.5 CVE-2026-67199 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67199 ]=
perspective-dev--perspective Perspective 5.0.0 contains a cross-site scrip= ting vulnerability in the built-in Debug plugin that allows attackers to in= ject arbitrary HTML and JavaScript by writing table cell values containing = unescaped HTML markup, which are interpolated directly into innerHTML durin=
g CSV serialization rendering. Attackers can craft table rows with payloads=
such as unquoted attribute injections containing event handler attributes = that bypass RFC 4180 quoting, since angle brackets and event handler attrib= utes are never escaped before assignment, causing malicious scripts to exec= ute in the embedding page's origin. 2026-08-04 5.4 CVE-2026-67196 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-67196 ] PhialsBasement--KoboldCPP-MCP-= Server A weakness has been identified in PhialsBasement KoboldCPP-MCP-Serve=
r 1.0.0. Affected by this issue is the function makeRequest of the file src= /index.ts of the component BaseConfigSchema. Executing a manipulation of th=
e argument apiUrl can lead to server-side request forgery. It is possible t=
o launch the attack on the local host. The project was informed of the prob= lem early through an issue report but has not responded yet. 2026-08-09 5.3=
CVE-2026-19373 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19373 ] pilin= ux--gorest GoRest is a Golang starter kit built with the Gin framework for = prototyping and developing RESTful APIs. In versions prior to 1.12.2 nMemor= ySecret2FA contains a race condition due to an unsynchronized package-level=
map used to store 2FA secrets. Multiple HTTP handlers in handler/login.go = and handler/twoFA.go read from and write to this map concurrently, and beca= use Go's runtime treats unsynchronized concurrent map access as an unrecove= rable fatal error, an attacker can repeatedly trigger this condition to cra=
sh the process on demand. This results in high, repeatable availability imp= act with no confidentiality or integrity consequences. This issue has been = fixed in version 1.12.2. 2026-08-04 5.9 CVE-2026-48154 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-48154 ] Pimzino--spec-workflow-mcp A vulnerabilit=
y was found in Pimzino spec-workflow-mcp up to 2.2.6. This issue affects th=
e function ApprovalStorage.createApproval of the file src/tools/approvals.t=
s. Performing a manipulation of the argument categoryName results in path t= raversal. The attack is only possible with local access. Upgrading to versi=
on 2.2.7 is capable of addressing this issue. The patch is named 9c7a7839e6= 90bb4543f0e7481b5740d23808e5fe. It is advisable to upgrade the affected com= ponent. 2026-08-09 5.3 CVE-2026-19336 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-19336 ] pixelfed--pixelfed Pixelfed's SearchController (behind the=
auth middleware) accepts a URL via its remote-search parameters and fetche=
s it server-side through ActivityPubFetchService, whose validateUrl() only = blocks the literal hosts 127.0.0.1, localhost, and ::1 and requires https, = without checking the resolved IP against private, internal, or link-local r= anges (e.g. 169.254.169.254). Optional DNS validation is disabled by defaul=
t and, when enabled, only confirms a DNS record exists without filtering by=
IP range. The fetch response body is returned to the requester only when t=
he Content-Type matches an ActivityPub content type, making this a semi-bli=
nd but authenticated SSRF primitive reachable by any logged-in user. 2026-0= 8-05 4.3 CVE-2026-71246 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71246=
] poco-ai--poco-agent A security flaw has been discovered in poco-ai poco-= agent up to 0.5.4. Affected is the function WorkspaceManager._setup_session= _persistence of the file executor/app/core/workspace.py of the component Cl= aude File Handler. The manipulation results in incomplete cleanup. The atta=
ck may be performed from remote. Attacks of this nature are highly complex.=
The exploitability is told to be difficult. The exploit has been released =
to the public and may be used for attacks. 2026-08-06 4.8 CVE-2026-19019 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-19019 ] Poesis--Rhymix CMS A vu= lnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts = the function procImporterAdminCheckXmlFile of the file modules/importer/imp= orter.admin.controller.php of the component Data Import Module. This manipu= lation of the argument filename causes server-side request forgery. The att= ack is possible to be carried out remotely. The exploit has been publicly d= isclosed and may be utilized. Upgrading to version 2.1.34 will fix this iss= ue. It is recommended to upgrade the affected component. 2026-08-05 4.7 CVE= -2026-18856 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18856 ] ProjectSe= nd--ProjectSend ProjectSend r2029 contains a reflected cross-site scripting=
vulnerability in thumbnails-regenerate.php that allows remote attackers to=
inject arbitrary HTML and JavaScript by supplying unsanitized values in th=
e start_date and end_date GET parameters, which are echoed unescaped into H= TML attribute values. Attackers can craft a malicious URL that, when follow=
ed by an authenticated victim with edit_settings permissions, executes inje= cted scripts in the application origin to steal session cookies or perform = unauthorized actions including user management, file management, and applic= ation settings changes. 2026-08-05 6.1 CVE-2026-53992 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-53992 ] properfraction--MailOptin Contributor Cros=
s Site Scripting (XSS) in MailOptin <=3D 1.2.78.0 versions. 2026-08-06 6.5 = CVE-2026-66703 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66703 ] python= -hyper--h2 h2 is a pure-Python implementation of a HTTP/2 protocol stack. V= ersions up to and including 4.4.0 accept request header blocks containing m= ore than one Host header, and forward every Host header to the consuming ap= plication. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting = request carries two Host header lines, providing a request smuggling primit= ive. This issue is fixed in version 4.4.1. 2026-08-06 5.3 CVE-2026-71554 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-71554 ] Qualcomm, Inc.--Snapdra= gon Memory Corruption when processing registry values with incorrect types = using a direct query method. 2026-08-04 6.7 CVE-2026-24076 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-24076 ] Qualcomm, Inc.--Snapdragon Informatio=
n Disclosure when processing wireless network channel switch information wi=
th improperly formatted length fields. 2026-08-04 6.5 CVE-2026-24077 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-24077 ] Qualcomm, Inc.--Snapdragon = Information Disclosure when IPSec negotiation fails or is not established p= roperly during NG-eCall SIP signaling. 2026-08-04 6.5 CVE-2026-24078 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-24078 ] RackTables--RackTables A se= curity vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8a= ab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. T=
he manipulation leads to cross-site request forgery. The attack is possible=
to be carried out remotely. The exploit has been disclosed publicly and ma=
y be used. The project maintainer confirms: "[I]t seems plausible, in that = RackTables does not at this time have any CSRF prevention. You may assign a=
CVE ID to this, but there is no guarantee it will be handled in urgent, or=
even timely, manner, or at all." 2026-08-04 4.3 CVE-2026-18819 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-18819 ] rclone--rclone rclone is a comma= nd-line program to sync files and directories to and from different cloud s= torage providers. Prior to 1.75.0, a valid but nondefault FTP filename enco= ding in backend/ftp/ftp.go can restore raw CR/LF immediately before an atta= cker-controlled path is interpolated into the line-oriented FTP control cha= nnel, and github.com/jlaffaye/ftp formats the argument through textproto.Co= nn.Cmd without rejecting CR or LF, allowing a filename such as victim CRLF = DELE other-secret CRLF NOOP to inject an independent authenticated FTP comm= and when the victim copies or syncs to a more-privileged FTP destination. T= his issue is fixed in 1.75.0. 2026-08-05 6.4 CVE-2026-71311 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-71311 ] rclone--rclone rclone is a command-l= ine program to sync files and directories to and from different cloud stora=
ge providers. From v1.51.0 until v1.75.0, the local backend in backend/loca= l/local.go relies on the configurable filename encoder to prevent remote fi= lename data from becoming operating-system path syntax, so a local destinat= ion using Slash, None, Raw, or on Windows an encoding that preserves backsl= ash can decode a standard-encoded fullwidth dot-dot component or native bac= kslash form into an actual parent-directory component before filepath.Join = resolves it outside the configured local root, allowing an attacker-control= led source object to create or overwrite files outside the selected destina= tion directory as the rclone process. This issue is fixed in v1.75.0. 2026-= 08-05 6.9 CVE-2026-71313 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7131=
3 ] rclone--rclone rclone is a command-line program to sync files and direc= tories to and from different cloud storage providers. Prior to 1.75.0, the = shared HTTP CONNECT helper in lib/proxy/http.go parses proxy CONNECT respon= ses with http.ReadResponse over an unrestricted buffered reader, allowing a=
malicious or compromised configured proxy, or an active on-path actor cont= rolling a plaintext HTTP proxy hop, to send oversized headers that grow mem= ory until the rclone process fails. The affected helper is used by FTP and = SFTP proxy connections, and SFTP reaches the parser before SSH server authe= ntication, so target host key validation does not constrain a malicious pro= xy. This issue is fixed in 1.75.0. 2026-08-05 5.9 CVE-2026-71310 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-71310 ] RealHomes Memberships--RealHome=
s Memberships The RealHomes Memberships WordPress plugin before 3.1.0 does = not verify that a membership payment actually completed, nor check a nonce =
or the user's capability, before granting a paid membership package, allowi=
ng any authenticated user such as a Subscriber to obtain paid membership pa= ckages without paying. 2026-08-06 4.3 CVE-2026-15246 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-15246 ] Red Hat--Red Hat Build of Keycloak A flaw w=
as found in the SAML broker component of Keycloak, an identity and access m= anagement solution. When configured as a SAML broker using the IdP-Initiate=
d flow, Keycloak fails to enforce the OneTimeUse condition in SAML assertio= ns. This allows an attacker who captures a valid, unused assertion to repla=
y it multiple times. Successful exploitation could allow an attacker to hij= ack a user's session and gain unauthorized access to the system as that use=
r. 2026-08-06 6.4 CVE-2026-18967 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-18967 ] Red Hat--Red Hat build of Keycloak 26.4 A flaw was found in the=
LDAP storage provider of Keycloak, which is used to federate user identiti=
es from external directories. The issue occurs when a delegated administrat=
or performs a search using a specific LDAP entry Distinguished Name (DN). D=
ue to missing validation, the system allows lookups for users located outsi=
de the configured search boundary, leading to the disclosure of account inf= ormation from unauthorized parts of the directory and unintended importing =
of those users into local storage. 2026-08-05 5.4 CVE-2026-16071 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-16071 ] Red Hat--Red Hat build of Keycl= oak 26.6 A flaw was found in the user-event metrics recording of Keycloak. = When metrics are enabled, the system records raw error messages from failed=
account operations as Prometheus metric labels. Because these error messag=
es can include user-supplied input like nonexistent client IDs, an authenti= cated user can create a massive number of unique metric entries, eventually=
exhausting system memory and causing the service to crash or become unavai= lable. 2026-08-05 6.5 CVE-2026-16100 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-16100 ] Red Hat--Red Hat Directory Server 11 A flaw was found in 38=
9 Directory Server. During SASL PLAIN authentication, the server installs c= onnection-level bind credentials before performing the account-lock check. =
If the account is subsequently found to be locked, the bind is reported as = failed to the client, but the already-installed authenticated state on the = connection is not reverted. A client that supplies valid credentials for an=
account that has been administratively locked can continue to use the same=
connection with that account's privileges, defeating account lock as an ac= cess-revocation control. 2026-08-03 5.4 CVE-2026-18651 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-18651 ] Red Hat--Red Hat Enterprise Linux 10 A fl=
aw was found in p11-kit. A local attacker, or one with equivalent access to=
a reachable RPC channel, could exploit an integer overflow vulnerability. =
By sending specially crafted messages, the attacker can cause the system to=
miscalculate memory allocation for nested attributes. This leads to a memo=
ry corruption issue, specifically a heap out-of-bounds write, which can cra=
sh the p11-kit RPC parsing process, resulting in a Denial of Service (DoS).=
This vulnerability is only exploitable on 32 bit systems. 2026-08-07 6.2 C= VE-2026-18938 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18938 ] Red Hat= --Red Hat Enterprise Linux 10 A flaw was found in SSSD. The sss_nss_protoco= l_parse_addr() function in the NSS responder does not validate the addrlen = field against the remaining packet body size. A local attacker can exploit = this via a crafted GETHOSTBYADDR request to the NSS responder socket, causi=
ng an out-of-bounds read and process crash, resulting in a denial of servic=
e. 2026-08-03 5.5 CVE-2026-68742 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-68742 ] Red Hat--Red Hat Enterprise Linux 10 A flaw was found in SSSD. = The extract_authtok_v1() function in the PAM responder does not validate th=
e auth_token_length field against the remaining buffer size before processi= ng. A local attacker can exploit this via a crafted protocol v1 request to = the PAM responder socket, causing an out-of-bounds read and process crash, = resulting in a denial of service. 2026-08-04 5.5 CVE-2026-68743 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-68743 ] Red Hat--Red Hat Enterprise Linu=
x 6 A flaw was found in GIMP's file-png plugin. A remote attacker can explo=
it this by crafting a malicious Animated Portable Network Graphics (APNG) i= mage containing an oversized tRNS chunk. This can lead to a stack-based buf= fer overflow (CWE-121), causing the file-png plugin to crash and resulting =
in a Denial of Service (DoS) for the user. 2026-08-03 5.5 CVE-2026-6694 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-6694 ] Red Hat--Red Hat Enterpri=
se Linux 6 A flaw was found in GIMP. A remote attacker could exploit this b=
y tricking a user into opening a specially crafted PAA (Paint Shop Pro Arra=
y) image file. This vulnerability, a heap-based out-of-bounds write in the = decode_lzss() function of the PAA file format plugin, allows data to be wri= tten beyond the intended memory buffer. This could lead to heap metadata co= rruption and potentially enable the attacker to execute arbitrary code on t=
he affected system. 2026-08-03 5.5 CVE-2026-6695 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-6695 ] Red Hat--Red Hat Enterprise Linux 6 A flaw was f= ound in dhcp-server. A remote attacker with network access to the OMAPI (Op=
en Management Application Programming Interface) port, especially if not se= cured with TSIG (Transaction Signature) key authentication, could send a sp= ecially crafted lease creation request. This request, containing an overly = long InfiniBand MAC address, triggers a buffer overflow in the `print_hw_ad= dr()` function. Successful exploitation leads to a persistent denial of ser= vice (DoS), causing the `dhcpd` service to crash and preventing it from res= tarting without manual intervention. 2026-08-04 4.9 CVE-2026-18103 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-18103 ] Red Hat--Red Hat Hardened Ima= ges A flaw was found in the RPM Package Manager (RPM). A local user could b=
e affected by a heap buffer overflow vulnerability when processing a specia= lly crafted NDB database file. This issue arises from an error in how RPM h= andles certain calculations during file parsing, leading to an incorrect me= mory allocation. An attacker could leverage this to cause a denial of servi= ce, making the system unavailable. 2026-08-05 5.5 CVE-2026-44605 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-44605 ] Red Hat--Red Hat Hardened Image=
s A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's increment=
al dumpdir 'X' rename handling allows a local attacker with write access to=
a directory being backed up to influence the restore process if the attack=
er has access to the system where the restore is being performed. During re= storation, files or directories may be created, renamed or overwritten outs= ide the intended extraction directory. This could lead to unauthorized file=
modification or, in some cases, privilege escalation. Exploitation does no=
t require the attacker to modify or craft the archive, and standard backup = and restore workflows-including extracting into a newly created directory w= ithout using the -P option do not mitigate the issue. 2026-08-03 4.4 CVE-20= 26-18477 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18477 ] Red Hat--Red=
Hat Hardened Images A flaw was found in GNU tar. When extracting an archiv=
e with the --one-top-level option, hardlink targets are not confined to the=
designated top-level directory and may resolve relative to the extraction = working directory. A crafted archive can create hardlinks that escape the i= ntended boundary and, when combined with a preexisting symbolic link under = the working directory, may allow writing outside that boundary during a sin= gle extraction. 2026-08-03 4.4 CVE-2026-18508 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-18508 ] Red Hat--Red Hat Hardened Images A TOCTOU (Time-of= -Check-Time-of-Use) race condition vulnerability was found in the fixfiles = script in policycoreutils. When running fixfiles relabel or fixfiles restor=
e, the script used find and chcon commands to locate and relabel unlabeled = files under /tmp and other directories. A local attacker could exploit a ra=
ce window between the file discovery and the label change operation by swap= ping directory components with symlinks, causing chcon to follow the symlin=
k and modify SELinux labels on arbitrary system files. This could undermine=
SELinux mandatory access control protections on critical files such as /et= c/shadow. 2026-08-07 4.4 CVE-2026-19079 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19079 ] Red Hat--Red Hat JBoss Enterprise Application Platform =
7 A path traversal flaw was found in WildFly's domain mode implementation. = The LocalFileRepository.getFile() and getConfigurationFile() methods in wil= dfly-core/deployment-repository do not validate that the resolved file path=
remains within the configured repository or configuration root directories=
. A remote attacker who has obtained the slave host controller secret or co= mpromised a slave host controller can supply a crafted relative path contai= ning directory traversal sequences (e.g., ../../etc/passwd) via the slave-D=
C wire protocol, causing the Domain Controller to resolve and serve arbitra=
ry files readable by the DC process. This leads to unauthorized disclosure =
of sensitive information such as configuration files, keystores, and system=
credentials. 2026-08-04 4.4 CVE-2026-17614 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-17614 ] Red Hat--Red Hat OpenShift Container Platform 4 A fl=
aw was found in openshift/oauth-proxy. On paths configured to bypass authen= tication (skip-auth-regex), the proxy forwards client-supplied identity hea= ders (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token) to the=
upstream application without stripping them. An unauthenticated attacker c=
an inject forged identity headers on whitelisted paths. 2026-08-05 6.5 CVE-= 2026-49331 [ https://www.cve.org/CVERecord?id=3DCVE-2026-49331 ] Registrati= onMagic--RegistrationMagic The RegistrationMagic WordPress plugin before 6.= 0.9.5 does not compare the verified PayPal capture's amount, currency, paye=
e, or prior use against the registration it is finalising: its server-side = check only confirms the capture status is COMPLETED. An unauthenticated att= acker can therefore finalise an expensive paid registration with any genuin= ely-completed low-value capture, and replay a single capture across unlimit=
ed registrations because captures are not de-duplicated. 2026-08-06 5.3 CVE= -2026-15208 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15208 ] Relevanss= i--Relevanssi Premium A Better Search The plugin provides an Admin Search p= age that allows users with the `edit_posts` capability to run Relevanssi se= arches from the WordPress dashboard. The AJAX handler accepts a URL-encoded=
`args` parameter, parses it into a `WP_Query`, and then passes user-contro= lled taxonomy query data into Relevanssi's taxonomy restriction builder. Th=
e taxonomy value is sanitized as text but is not parameterized for SQL befo=
re being interpolated into a term taxonomy lookup query. This allows an aut= henticated contributor-level attacker to inject SQL through the Admin Searc=
h AJAX request and execute time-based blind SQL injection against the WordP= ress database. 2026-08-05 6.5 CVE-2026-15941 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-15941 ] Revenue Administration--E-Signature Server-Side req= uest forgery (SSRF) vulnerability in Revenue Administration Turkiye's E-Sig= nature allows Server Side Request Forgery. This issue affects Turkiye's E-S= ignature: from 2.4.4.0 before 2.5.1.0. 2026-08-07 5.4 CVE-2026-16027 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-16027 ] Saad Iqbal--Gutena Forms Co= ntact Form, Survey Form, Feedback Form, Booking Form, and Custom Form Build=
er Unauthenticated Broken Authentication in Gutena Forms - Contact Form, Su= rvey Form, Feedback Form, Booking Form, and Custom Form Builder <=3D 1.9.0 = versions. 2026-08-06 6.5 CVE-2026-66425 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-66425 ] Samsung Open Source--rlottie Improper input validation = vulnerability in Samsung Open Source rlottie allows Oversized Serialized Da=
ta Payloads. 2026-08-04 5.5 CVE-2026-18772 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-18772 ] Scripta--eScriptorium Authorization bypass in the pro= cess and annotation taxonomy serializers in Scripta eScriptorium through 26= .04.1 allows a remote authenticated user to run segmentation and transcript= ion against other users' document parts, overwriting their content, via par=
t primary keys supplied to a many=3DTrue related field whose queryset restr= iction was applied to the ManyRelatedField instead of its child_relation an=
d therefore had no effect 2026-08-06 6.5 CVE-2026-18275 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-18275 ] Scripta--eScriptorium Missing authorizat= ion in the websocket consumer in Scripta eScriptorium through 26.04.1 allow=
s a remote authenticated user to subscribe to any document's event stream a=
nd observe another user's segmentation, transcription, import, export and t= raining activity via the object_cls and object_pk values of a join-room mes= sage, which are passed to group_add without an access check 2026-08-06 4.3 = CVE-2026-18276 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18276 ] Secure= Age--CatchPulse An improper access control check in=C2=A0CatchPulse's=C2=A0= named pipe communication interface could allow an attacker to invoke=C2=A0C= atchPulse=C2=A0functions.=C2=A0This=C2=A0is limited to operations that enfo= rce more restrictive security policies. 2026-08-06 5.2 CVE-2026-55979 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-55979 ] SecureAge--CatchPulse A de= nial-of-service vulnerability in=C2=A0CatchPulse=C2=A0could allow an attack=
er to conduct a stack buffer overrun attack, leading to a denial-of-service=
condition. 2026-08-06 5.5 CVE-2026-55980 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-55980 ] Security Optimizer--Security Optimizer The Security Op= timizer WordPress plugin from 1.5.8 to 1.6.4 does not correctly validate re= quests to its optional IP-based login restriction feature, allowing the res= triction to be bypassed so that unauthenticated requests from non-allowlist=
ed IP addresses can reach and use the login form, defeating the access cont= rol the administrator configured. 2026-08-06 5.3 CVE-2026-13342 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-13342 ] seraphinitesoft--Seraphinite Acc= elerator The Seraphinite Accelerator plugin for WordPress is vulnerable to = Reflected Cross-Site Scripting via the 'seraph_accel_prep' parameter in ver= sions up to, and including, 2.29.15. This is due to the CacheExtractPrepare= PageParams() function using PHP's loose inequality operator (!=3D) to compa=
re the expected HMAC string against the JSON-decoded 'nonce' value - supply= ing the JSON boolean true causes any non-empty HMAC string to compare as lo= osely equal, bypassing the signature check - combined with insufficient out= put escaping in the _CbContentFinishSkip() function, which concatenates the=
attacker-controlled 'selfTest' field directly into the HTML response body.=
This makes it possible for unauthenticated attackers to inject arbitrary w=
eb scripts in pages that execute if they can successfully trick a user into=
performing an action such as clicking on a specially crafted link. 2026-08= -05 6.1 CVE-2026-17532 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17532 =
] sevenspark--DTX Dynamic Text Extension for Contact Form 7 The Contact For=
m 7 - Dynamic Text Extension plugin for WordPress is vulnerable to Stored C= ross-Site Scripting in all versions up to, and including, 5.0.5. This is du=
e to insufficient output escaping on form shortcode keys displayed in the a= dmin "Scan Forms for Post Meta and User Data Keys" page. This makes it poss= ible for authenticated attackers, with Editor-level access and above, to in= ject arbitrary web scripts that execute when an Administrator runs the scan=
feature. 2026-08-05 4.4 CVE-2026-5116 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-5116 ] shapedplugin--Easy Accordion AI-Powered FAQ & Accordion = Blocks, Product FAQ The Easy Accordion plugin for WordPress is vulnerable t=
o Stored Cross-Site Scripting via the 'accordionTitleTag' block attribute i=
n versions up to, and including, 3.1.8. This is due to insufficient input s= anitization and output escaping in the accordion_header_renderer() function=
, which emits the attacker-supplied tag name using esc_attr() in an HTML ta= g-name context instead of tag_escape(). This makes it possible for authenti= cated attackers, with contributor-level access and above, to inject arbitra=
ry web scripts in pages that will execute whenever a user accesses an injec= ted page. 2026-08-08 6.4 CVE-2026-18988 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18988 ] Sharp Corporation--Network Scanner Tool Lite Network Sc= anner Tool and Network Scanner Tool Lite provided by Sharp Corporation, wit=
h the initial configuration, require no authentication and accept files unl= imitedly. When the affected products are used with the initial configuratio=
n, anyone can connect to them without authentication and upload files unlim= itedly. This may cause a denial-of-service (DoS) condition on the PC. Furth= ermore, if a malicious file is uploaded, a PC user may be tricked to execut=
e the file to attack other entities from that PC. 2026-08-03 5.3 CVE-2026-6= 2416 [ https://www.cve.org/CVERecord?id=3DCVE-2026-62416 ] Sharp Corporatio= n--Sharp MFPs Sharp and Toshiba Tec MFPs (multifunction printers) for a cer= tain market have been shipped with the user authentication feature disabled=
in the initial configuration. When used with the initial configuration, th=
e address book editing and a range of features related to Document Filing c=
an be accessed without user authentication. Products intended for the Japan= ese market are not affected. 2026-08-03 6.5 CVE-2026-63563 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-63563 ] Sharp Corporation--Sharp MFPs Sharp a=
nd Toshiba Tec MFPs (multifunction printers) fail to properly authorize req= uests to directly access certain image data stored to the affected product.=
2026-08-03 5.3 CVE-2026-60011 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-60011 ] shlinkio--Shlink Shlink contains a blind SQL injection vulnerabil= ity that allows any authenticated API key holder to inject arbitrary SQL fr= agments by supplying an unvalidated direction value in the orderBy query pa= rameter of the tag statistics endpoint. Attackers can craft a malicious dir= ection string containing SQL subqueries that flows unsanitized into a Doctr= ine QueryBuilder ORDER BY clause, enabling time-based, boolean-oracle, and = error-based extraction of sensitive data including long URLs, visitor recor= ds, IP addresses, geolocation data, user agents, and hashed API key secrets=
from any tenant. 2026-08-03 6.5 CVE-2026-18737 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-18737 ] shlinkio--Shlink Shlink contains a server-side r= equest forgery vulnerability that allows authenticated API key holders to c= ause the server to issue arbitrary HTTP GET requests by supplying a crafted=
long URL during short URL creation with title auto-resolution enabled. Att= ackers can submit URLs pointing to public hosts that redirect to internal t= argets, including loopback addresses, link-local ranges, and cloud metadata=
endpoints such as 169.254.169.254, to exfiltrate internal service informat= ion via the HTML title element returned in the short URL creation response.=
2026-08-03 5 CVE-2026-18736 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 18736 ] shlinkio--Shlink Shlink versions 5.0.0 through 5.1.5 contain a CSV = formula injection vulnerability that allows unauthenticated remote attacker=
s to plant spreadsheet formulas into exported visit data by supplying malic= ious values in User-Agent, Referer, or request path headers beginning with = formula-triggering characters such as =3D, +, -, or @. Attackers can craft =
a single unauthenticated request against any short URL to embed DDE or WEBS= ERVICE formula payloads into CSV cells, which are then executed on an admin= istrator's client machine when the exported CSV file is opened in a spreads= heet application that evaluates formulas. 2026-08-03 4.7 CVE-2026-18738 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-18738 ] silverstripe--silverstri= pe-cms Silverstripe CMS is an open source content management system. Prior =
to 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scriptin=
g when viewed using the page list view, because page titles are rendered in=
to the breadcrumb trail without being escaped. This issue is fixed in 6.2.1=
. 2026-08-06 5.4 CVE-2026-54717 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-54717 ] Simple CAPTCHA with Cloudflare Turnstile--Simple CAPTCHA with Cl= oudflare Turnstile The Simple CAPTCHA with Cloudflare Turnstile WordPress p= lugin before 1.42.0 does not bind its Turnstile validation cache to the sin= gle-use challenge token in its Forminator integration, instead keying it to=
an attacker-controlled, reusable request value, allowing unauthenticated a= ttackers to solve one challenge and then replay token-less form submissions=
for a short window, defeating the anti-abuse protection the plugin provide=
s. 2026-08-07 5.3 CVE-2026-15239 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-15239 ] siyuan-note--siyuan SiYuan versions before v3.7.3 contain a met= adata disclosure vulnerability in the /api/block/getBlockInfo endpoint that=
returns document root metadata including title for publish-forbidden docum= ents without publish-access checks. Anonymous readers or publish RoleReader=
tokens can supply a block ID to retrieve the title, notebook, path, root I=
D, and icon of documents administrators marked as excluded from publishing.=
2026-08-03 5.8 CVE-2026-68585 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-68585 ] smub--Smash Balloon Social Photo Feed Easy Social Feeds Plugin Th=
e Smash Balloon Social Photo Feed - Easy Social Feeds Plugin plugin for Wor= dPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_URI Quer=
y String in all versions up to, and including, 6.11.3 due to insufficient i= nput sanitization and output escaping. This makes it possible for unauthent= icated attackers to inject arbitrary web scripts in pages that execute if t= hey can successfully trick a user into performing an action such as clickin=
g on a link. 2026-08-05 4.7 CVE-2026-15452 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-15452 ] SNOMED International--Snowstorm SNOMED International = Snowstorm contains a reflected XSS vulnerability within the "Web Route" red= irection functionality. An attacker can inject arbitrary JavaScript which w= ill execute upon a target user navigating to a crafted, malicious link. Fix=
ed in 10.12.2 and 10.9.3. 2026-08-04 5 CVE-2026-66300 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-66300 ] sonalsinha21--SKT Skill Bar The SKT Skill = Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via t=
he `chart_size` attribute of the `skillwrapper` shortcode in all versions u=
p to, and including, 2.6. This is due to insufficient input sanitization an=
d output escaping on the `chart_size` attribute, which is concatenated dire= ctly into an inline `<style>` block. This makes it possible for authenticat=
ed attackers, with Contributor-level access and above, to inject arbitrary = web scripts in pages that will execute whenever a user accesses an injected=
page. 2026-08-05 6.4 CVE-2026-6972 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-6972 ] SourceCodester--Online Clothing Store A vulnerability was det= ermined in SourceCodester Online Clothing Store. Affected by this issue is = some unknown functionality of the file /_notes/ of the component Dreamweave=
r Metadata Files. Executing a manipulation can lead to file and directory i= nformation exposure. The attack can be launched remotely. The exploit has b= een publicly disclosed and may be utilized. 2026-08-07 5.3 CVE-2026-19229 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-19229 ] SourceCodester--Online=
Examination & Learning Management System A vulnerability was determined in=
SourceCodester Online Examination & Learning Management System 1.0. This i= ssue affects some unknown processing of the file upload_files.php. This man= ipulation causes unrestricted upload. The attack may be initiated remotely.=
2026-08-06 6.3 CVE-2026-19065 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-19065 ] SourceCodester--Online Examination & Learning Management System A=
vulnerability was found in SourceCodester Online Examination & Learning Ma= nagement System 1.0. This vulnerability affects unknown code of the file /v= iew.php. The manipulation of the argument ID results in authorization bypas=
s. The attack can be launched remotely. 2026-08-06 4.3 CVE-2026-19064 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-19064 ] SourceCodester--Online Exa= mination & Learning Management System A vulnerability was identified in Sou= rceCodester Online Examination & Learning Management System 1.0. Impacted i=
s an unknown function of the file view_students.php. Such manipulation of t=
he argument class_group leads to authorization bypass. The attack may be la= unched remotely. 2026-08-06 4.3 CVE-2026-19066 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-19066 ] SourceCodester--Photo Share Website A vulnerabili=
ty has been found in SourceCodester Photo Share Website 1.0. The impacted e= lement is an unknown function of the file /social/ajax.php?action=3Dsave_up= load. Such manipulation of the argument img[]/imgName[] leads to unrestrict=
ed upload. The attack may be launched remotely. The exploit has been disclo= sed to the public and may be used. 2026-08-07 6.3 CVE-2026-19210 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-19210 ] Spacebar Server--Spacebar Serve=
r Spacebar Server before commit 51da17c contains a missing authorization vu= lnerability that allows any authenticated user to enumerate complete guild = membership by querying the GET /guilds/{guild_id}/roles/{role_id}/member-id=
s endpoint without guild membership verification. Attackers can exploit the=
unprotected route handler in the roles member-ids endpoint, which lacks pe= rmission checks present in sibling endpoints, to retrieve the full list of = member user IDs for any guild on the instance using only a valid bearer tok=
en and a known guild ID. 2026-08-05 4.3 CVE-2026-70618 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-70618 ] spacetime--Ad Inserter Ad Manager & AdSen=
se Ads The Ad Inserter - Ad Manager & AdSense Ads plugin for WordPress is v= ulnerable to authorization bypass in all versions up to, and including, 2.8= .16 due to a missing capability check in the `ai_ajax` function. This makes=
it possible for unauthenticated attackers to view the contents of ad block=
s that an administrator has restricted to administrator-only visibility. 20= 26-08-06 5.3 CVE-2026-11983 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1= 1983 ] statamic--cms Statamic is a Laravel and Git powered content manageme=
nt system (CMS). Prior to 5.74.1 and 6.24.0, an authenticated Control Panel=
user could view content from entries they did not have permission to view,=
including entry content and custom field values, from any collection and i= ncluding unpublished entries, through the navigation endpoint, though no da=
ta could be modified. This issue is fixed in versions 5.74.1 and 6.24.0. 20= 26-08-06 6.5 CVE-2026-64662 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6= 4662 ] statamic--cms Statamic is a Laravel and Git powered content manageme=
nt system (CMS). Prior to 5.74.1 and 6.24.0, manipulating user-supplied inp=
ut incorporated into Antlers templates could result in the loss of content = and assets, on sites whose templates pass untrusted input into affected are= as, and exploitation did not require authentication. This issue is fixed in=
versions 5.74.1 and 6.24.0. 2026-08-06 6.5 CVE-2026-64663 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-64663 ] statamic--cms Statamic CMS's user-aug= mentation resolver, AugmentedUser::get() in src/Auth/AugmentedUser.php, con= tains an explicit case for the `two_factor_recovery_codes` handle that retu= rns the user's raw two-factor recovery codes with no access restriction: `i=
f ($handle =3D=3D=3D 'two_factor_recovery_codes') { return new Value($this-= >data->get('two_factor_recovery_codes'), ...); }`. Unlike sensitive fields = such as password/password_hash, which are excluded from AugmentedUser entir= ely, two_factor_recovery_codes is neither excluded from augmentation nor pr= esent in Statamic's Antlers variable guard lists (guardedVariablePatterns/g= uardedContentVariablePatterns in src/Providers/ViewServiceProvider.php, and=
the runtime GlobalRuntimeState guard paths), which by default only guard c= onfig.app.key. On any Antlers template field where raw/dynamic template ren= dering is enabled for a given field (an admin/developer-configured, bluepri= nt-level field option), a template such as `{{ current_user.two_factor_reco= very_codes }}{{ value }}|{{ /current_user.two_factor_recovery_codes }}` ren= ders the viewing user's own 2FA recovery codes directly into the HTML respo= nse, allowing an attacker who can view or capture that response (e.g. via a=
shared/observable page, or a crafted link causing a victim to render it) t=
o obtain the codes and bypass 2FA. Exploitation requires that dynamic Antle=
rs rendering already be enabled on a field the target user's data flows thr= ough, which is a blueprint-configuration privilege rather than a standard c= ontent-editing permission. 2026-08-05 6.2 CVE-2026-71293 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-71293 ] statamic--cms Statamic is a Laravel and=
Git powered content management system (CMS). Prior to 5.74.3 and 6.24.2, t=
he default ("automagic") form notification email rendered user-submitted va= lues without escaping, allowing an unauthenticated form submitter to inject=
HTML into the notification emails sent to the configured recipients. This = issue is fixed in versions 5.74.3 and 6.24.2. 2026-08-06 6.1 CVE-2026-71435=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-71435 ] statamic--cms Statam=
ic is a Laravel and Git powered content management system (CMS). Prior to 5= .74.3 and 6.24.2, public frontend forms did not enforce the file upload res= trictions that the Control Panel enforces, so an unauthenticated visitor co= uld upload file types an administrator had intended to disallow through a f= orm's assets or files field, and for assets fields, files could be stored o=
n a public, web-accessible disk, though the application's global upload all= owlist still blocked executable types such as .php and .html. This issue is=
fixed in versions 5.74.3 and 6.24.2. 2026-08-06 5.3 CVE-2026-71434 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-71434 ] statamic--cms Statamic is a = Laravel and Git powered content management system (CMS). Prior to 5.74.1 an=
d 6.24.0, an authenticated Control Panel user could use an endpoint intende=
d for the user creation wizard to determine if a given email address belong=
ed to an existing user, without having permission to view users, though the=
endpoint only exposed user existence and not any other user data. This iss=
ue is fixed in versions 5.74.1 and 6.24.0. 2026-08-06 4.3 CVE-2026-64664 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-64664 ] Stephan Muelle--libkcap=
i A flaw was found in libkcapi. When performing one-shot symmetric cipher o= perations on large inputs (over 64 KiB) in stateful modes such as Counter (= CTR) or Cipher Block Chaining (CBC), the library improperly reuses the Init= ialization Vector (IV) for each internal data chunk. A remote attacker coul=
d potentially exploit this by making an application that uses libkcapi proc= ess specially crafted large inputs. This can lead to a significant weakenin=
g of data confidentiality, as the repeated IV use can expose relationships =
in encrypted plaintext, and may also affect data integrity by causing incor= rect cryptographic processing. 2026-08-05 6.5 CVE-2026-71225 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-71225 ] Stephan Muelle--libkcapi A flaw was=
found in libkcapi. A local attacker can influence an application that uses=
the Asynchronous Input/Output (AIO) interface. By reusing an AIO-enabled h= andle after a prior completion error, the _kcapi_aio_read_all() function ca=
n enter a non-terminating wait loop. This can lead to a persistent denial o=
f service, making the affected application or thread unresponsive. 2026-08-=
05 5.1 CVE-2026-71227 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71227 ]=
stiofansisland--UsersWP Front-end login form, User Registration, User Prof= ile & Members Directory plugin for WP The UsersWP - Front-end login form, U= ser Registration, User Profile & Members Directory plugin for WP plugin for=
WordPress is vulnerable to Stored Cross-Site Scripting via Badge Widget Va= riable Substitution in all versions up to, and including, 1.2.69 due to ins= ufficient input sanitization and output escaping. This makes it possible fo=
r authenticated attackers, with subscriber-level access and above, to injec=
t arbitrary web scripts in pages that will execute whenever a user accesses=
an injected page. 2026-08-06 6.4 CVE-2026-18501 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-18501 ] Strategy11 Team--Business Directory Subscriber = Cross Site Scripting (XSS) in Business Directory <=3D 6.4.24 versions. 2026= -08-06 6.5 CVE-2026-61959 [ https://www.cve.org/CVERecord?id=3DCVE-2026-619=
59 ] stylemix--Cost Calculator Builder The Cost Calculator Builder plugin f=
or WordPress is vulnerable to unauthorized access of sensitive data due to =
a missing capability check on the `cost-calculator-custom-export-run` AJAX = action (handler `CCBExportImport::export_calculators()`) in all versions up=
to, and including, 3.6.17. The handler only verifies a nonce, but the corr= esponding `ccb_export_nonce` is broadcast on every wp-admin page (including=
pages reachable to Subscribers, such as `/wp-admin/profile.php`) by the `c= cb_add_admin_nonces` callback hooked to `admin_head`. This makes it possibl=
e for authenticated attackers, with Subscriber-level access and above, to e= xport every calculator's full configuration - including stored Stripe secre=
t keys, PayPal client secrets, Razorpay secret keys, webhook secret keys, a=
nd reCAPTCHA secret keys. 2026-08-05 6.5 CVE-2026-7753 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-7753 ] Subscriptions for WooCommerce--Subscriptio=
ns for WooCommerce The Subscriptions for WooCommerce WordPress plugin befor=
e 2.0.1 does not validate the payment amount or bind the PayPal order token=
to the order being completed on the WooCommerce order-received flow: it ca= ptures a client-supplied token and marks the order paid whenever the captur=
e status is COMPLETED, without comparing the captured amount to the order t= otal. This allows an attacker (unauthenticated where guest checkout is enab= led) to substitute an approved, uncaptured PayPal order token and have an e= xpensive order marked paid without paying its price. 2026-08-07 5.9 CVE-202= 6-15211 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15211 ] supercleanse-= -PrettyLinks Affiliate Link Management, URL Shortener, Link Cloaking, Track= ing & Branded Short Links The PrettyLinks - Affiliate Links, Link Branding,=
Link Tracking, Marketing and Stripe Payments Plugin plugin for WordPress i=
s vulnerable to SQL Injection via the 's' (search) parameter on the Pretty = Links listing page in all versions up to, and including, 3.6.20. This is du=
e to insufficient escaping on the user supplied parameter and lack of suffi= cient preparation on the existing SQL query in the `search_links_table()` f= unction. This makes it possible for authenticated attackers, with Administr= ator-level access and above, to append additional SQL queries into already = existing queries that can be used to extract sensitive information from the=
database. 2026-08-05 4.9 CVE-2026-5062 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-5062 ] superpwa--Super Progressive Web Apps The Super Progressi=
ve Web Apps plugin for WordPress is vulnerable to Stored Cross-Site Scripti=
ng via the `superpwa_settings[offline_message_txt]` setting in all versions=
up to, and including, 2.2.43. This is due to insufficient input sanitizati=
on and output escaping. The offline message value is stored without sanitiz= ation, passed to the frontend via `wp_localize_script()` without escaping, = and rendered using `innerHTML` in the JavaScript snackbar component. This m= akes it possible for authenticated attackers, with Administrator-level acce=
ss and above, to inject arbitrary web scripts in pages that will execute wh= enever a user triggers the offline snackbar. 2026-08-05 4.4 CVE-2026-5108 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-5108 ] SuperTokens Inc.--Super= Tokens Core A lack of tenant separation in SuperTokens Inc. SuperTokens Cor=
e v6.0.0 to v11.4.0 allows an authenticated party in one tenant to access s= essions, data, and endpoints of another tenant. 2026-08-07 5.9 CVE-2026-371=
71 [ https://www.cve.org/CVERecord?id=3DCVE-2026-37171 ] SureCart--SureCart=
Unauthenticated Broken Access Control in SureCart <=3D 4.6.2 versions. 202= 6-08-06 5.3 CVE-2026-32548 [ https://www.cve.org/CVERecord?id=3DCVE-2026-32= 548 ] SUSE--Rancher The endpoint /v3/import/{token}_{clusterId}.yaml retrie= ves the cluster object before validating the token. When a valid cluster ID=
references a cluster that has private registry secrets configured, a nil p= ointer dereference in pkg/systemtemplate/private_registry.go causes the req= uest to return HTTP 502 Bad Gateway. For cluster IDs that do not exist, the=
endpoint returns HTTP 200. This observable difference in response codes co= nstitutes a reliable enumeration oracle. 2026-08-05 5.3 CVE-2026-55998 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-55998 ] SUSE--Rancher A denial-of= -service vulnerability was identified in multiple TLS listeners in Rancher.=
Both the cattle-cluster-agent component running in downstream clusters and=
the Rancher server itself use the dynamiclistener library to serve TLS tra= ffic. Without an effective CN filter configured, dynamiclistener automatica= lly appended to each serving certificate any hostname presented via Server = Name Indication (SNI) in incoming TLS requests. An unauthenticated attacker=
with network access within the affected cluster could send a large number =
of TLS requests with distinct hostnames, causing the serving certificate to=
accumulate an unbounded number of Subject Alternative Names (SANs). Eventu= ally, the certificate grows large enough that TLS handshakes fail with an e= xcessive message size error, causing a denial of service on the affected li= steners. 2026-08-05 4.3 CVE-2026-55996 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-55996 ] sveltejs--kit SvelteKit is a framework for rapidly deve= loping robust, performant web applications using Svelte. Prior to 2.70.2, t=
he content negotiation header parser used by SvelteKit's request handling (= for headers such as Accept) uses a regular expression vulnerable to quadrat=
ic backtracking, so a maliciously crafted header value can cause excessive = CPU consumption and degrade or deny service. Version 2.70.2 fixes the issue=
. 2026-08-07 5.3 CVE-2026-66062 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-66062 ] TBTAK BLGEM Software Technologies Research Institute--eta-otp-lo=
ck Invocation of process using visible sensitive information vulnerability =
in T=C3=83=C6=92=C3=85=E2=80=9CB=C3=83=E2=80=9E=C3=82=C2=B0TAK B=C3=83=E2= =80=9E=C3=82=C2=B0LGEM Software Technologies Research Institute eta-otp-loc=
k allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4=
. 2026-08-06 5 CVE-2026-18915 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -18915 ] techeshta--Layouts for WPBakery The Layouts for WPBakery plugin fo=
r WordPress is vulnerable to unauthorized actions due to a missing capabili=
ty check on the `Layouts_WPB_Remote::template_sync()` callback registered v=
ia `wp_ajax_nopriv_handle_sync` in all versions up to, and including, 1.1.3=
. This makes it possible for unauthenticated attackers to force the WordPre=
ss server to issue outbound HTTP requests to the plugin vendor's external A=
PI (`https://www.layoutsforwpbakery.com/wp-json/layoutsforwpbakery/v1/{temp= lates,categories}`) and to write the JSON-decoded responses verbatim into t=
he site's `wp_options` table via `set_transient()` - at any rate the attack=
er chooses, with no nonce verification, capability check, or rate limiting.=
2026-08-05 6.5 CVE-2026-7726 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -7726 ] TestLinkOpenSourceTRMS--TestLink TestLink 1.9.20 and prior contains=
an insecure direct object reference vulnerability that allows any authenti= cated user, including low-privilege guest accounts, to read arbitrary attac= hments by supplying an integer attachment ID to the attachmentdownload.php = handler without any project or role authorization check. Attackers can enum= erate sequential integer IDs through the attachment download endpoint to re= trieve file contents from private projects they have no membership in, bypa= ssing the per-project access control model and exposing test specifications=
, requirements documents, execution evidence, and other sensitive uploaded = files across the entire installation. 2026-08-07 6.5 CVE-2026-70561 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-70561 ] textPlus--Text Message and C= all App A vulnerability was identified in textPlus Text Message and Call Ap=
p up to 8.3.5 on Android. This impacts the function DialerActivity of the c= omponent com.gogii.textplus. Such manipulation leads to improper export of = android application components. The attack needs to be performed locally. T=
he exploit is publicly available and might be used. The vendor was contacte=
d early about this disclosure. 2026-08-03 5.3 CVE-2026-18604 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-18604 ] The-Pocket--PocketFlow (pocketflow-= coding-agent cookbook example) The pocketflow-coding-agent cookbook example=
in The-Pocket/PocketFlow implements a `_path(workdir, p)` helper as a thin=
os.path.join(workdir, p) wrapper with no canonicalization or containment c= heck, used unguarded by the ReadFile, ListFiles, PatchRead, and PatchApply = file-access tools. Because os.path.join returns an absolute `p` unchanged (= ignoring workdir) and does not resolve '../' sequences, an agent invocation=
whose file-tool arguments include an absolute path or a traversal sequence=
can read or write files outside the configured working directory. Severity=
reflects that this affects an illustrative cookbook example rather than a = core library API; applications that copy this pattern into production are a= ffected. 2026-08-05 6.8 CVE-2026-55747 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-55747 ] themefic--Ultra Addons for Contact Form 7 The Ultra Add= ons for Contact Form 7 plugin for WordPress is vulnerable to Stored Cross-S= ite Scripting via the Range Slider 'data-label' and 'data-separator' attrib= utes in all versions up to, and including, 3.5.43 due to insufficient input=
sanitization and output escaping. This makes it possible for authenticated=
attackers, with contributor-level access and above, to inject arbitrary we=
b scripts in pages that will execute whenever a user accesses an injected p= age. 2026-08-07 6.4 CVE-2026-12801 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-12801 ] themegrill--Accelerate The Accelerate theme for WordPress is = vulnerable to unauthorized modification of data due to a missing capability=
check on the enqueue_scripts() function in all versions up to, and includi= ng, 1.5.3. This makes it possible for authenticated attackers, with Subscri= ber-level access and above, to install and activate the ThemeGrill Demo Imp= orter plugin. 2026-08-06 4.3 CVE-2025-9266 [ https://www.cve.org/CVERecord?= id=3DCVE-2025-9266 ] thephpleague--commonmark league/commonmark is a PHP li= brary for parsing and rendering CommonMark Markdown. From 1.5.0 until 2.9.0=
, the AttributesExtension's href and src unsafe-link filter can be bypassed=
by embedding control bytes, such as a tab, carriage return, line feed, or = leading C0 control character, in a javascript: URL that browsers discard be= fore parsing the scheme, causing the browser to still execute the script ev=
en when the unsafe-link filter is enabled. This issue is fixed in 2.9.0. 20= 26-08-06 6.1 CVE-2026-71478 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7= 1478 ] THM-Health--PILOS PILOS (Platform for Interactive Live-Online Semina= rs) is a frontend for BigBlueButton. From 2.1.0 until 4.14.1, PILOS does no=
t send a Cross-Origin-Opener-Policy response header, so pages opened by PIL=
OS via a link that opens a new browsing context (e.g., target=3D"_blank") r= etain a window.opener reference back to the originating PILOS tab. A malici= ous destination page reached this way can use window.opener to navigate or = manipulate the original PILOS tab, a technique known as reverse tabnabbing,=
potentially redirecting an authenticated user to a phishing page that mimi=
cs PILOS. This issue is fixed in version 4.14.1. 2026-08-06 4.1 CVE-2026-71= 555 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71555 ] timescale--timesc= aledb TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-= of-bounds read vulnerability in the Gorilla compression reverse row iterato=
r that allows authenticated attackers to cause a denial of service by stori=
ng a crafted compressed datum with an internally inconsistent BitArray. Att= ackers with DML access to a compressed hypertable can trigger an unsigned i= nteger wraparound in the reverse iterator bucket index computation, causing=
a read beyond the end of the bucket array, resulting in a SIGSEGV crash th=
at can be repeatedly triggered on each subsequent reverse-order scan. 2026-= 08-06 6.5 CVE-2026-70633 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7063=
3 ] TinyAGI--TinyAGI A vulnerability was detected in TinyAGI 0.0.20. The af= fected element is the function buildSystemPrompt of the file packages/serve= r/src/routes/agents.ts. Performing a manipulation results in file inclusion=
. The attack may be initiated remotely. The exploit is now public and may b=
e used. The project was informed of the problem early through an issue repo=
rt but has not responded yet. 2026-08-06 5.3 CVE-2026-19011 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-19011 ] trainingbusinesspros--Groundhogg CRM=
, Newsletters, and Marketing Automation The Groundhogg - CRM, Newsletters, = and Marketing Automation plugin for WordPress is vulnerable to Insecure Dir= ect Object Reference in all versions up to, and including, 4.5.2 via the GE=
T /wp-json/gh/v4/contacts/<id> REST endpoint. The endpoint's permission cal= lback checks only the role-level view_contacts capability and read_single()=
returns the full contact record by sequential integer ID without the objec= t-level view_contact ownership check applied elsewhere in the codebase. Thi=
s makes it possible for authenticated attackers holding view_contacts but n=
ot view_others_contacts - notably Groundhogg's built-in Sales Rep role, des= igned to see only its own contacts - to read any contact record on the site=
, including PII, contact meta, owner IDs, the admin edit URL, and (for cont= acts linked to a WordPress user) that user's full capability set. 2026-08-0=
5 6.5 CVE-2026-11454 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11454 ] = TryGhost--Ghost Ghost is a Node.js content management system. From 0.10.0 u= ntil 6.54.1, a vulnerability in custom themes allowed a staff user to write=
files outside of the uploads directory. This could be used to alter the be= havior of the installation through custom theme upload path traversal in Lo= calStorageBase and theme storage name handling. This issue is fixed in vers= ion 6.54.1. 2026-08-04 6.6 CVE-2026-70593 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-70593 ] TryGhost--Ghost Ghost is a Node.js content management = system. From 2.2.0 until 6.54.1, Ghost Admin did not invalidate existing se= ssions on login which could have allowed for session fixation attacks. Succ= essful exploitation would have required another vulnerability on the same d= omain where Ghost Admin was hosted. This issue is fixed in version 6.54.1. = 2026-08-04 6.7 CVE-2026-70594 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -70594 ] TryGhost--Ghost Ghost is a Node.js content management system. From=
5.26.0 until 6.54.1, the Universal Import feature in Ghost Admin failed to=
properly sanitize imported content resulting in XSS in post content. This = issue is fixed in version 6.54.1. 2026-08-04 5 CVE-2026-70588 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-70588 ] TryGhost--Ghost Ghost is a Node.js=
content management system. From 1.20.1 until 6.54.1, an Administrator-leve=
l user could remotely overwrite certain files on the filesystem through the=
database backup filename, leading to integrity and availability issues. Th=
e database export endpoint failed to reject path separators in the caller-s= upplied filename. This issue is fixed in version 6.54.1. 2026-08-04 5.5 CVE= -2026-70592 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70592 ] TryGhost-= -Ghost Ghost is a Node.js content management system. From 4.22.0 until 6.54= .1, a missing validation check allowed users to redeem subscription offers = that were no longer active. This issue is fixed in version 6.54.1. 2026-08-=
04 4.8 CVE-2026-70589 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70589 ]=
TryGhost--Ghost Ghost is a Node.js content management system. Prior to 6.5= 4.1, any staff-level user was able to leak the hashed passwords of other st= aff users through the Ghost Admin API. An offline password-guessing attack = against the hashes could lead to account takeover if successful, but Device=
Verification should have prevented an attacker from logging in with a reco= vered password. Depending on the database used, leaked hashes may not have = had the correct casing for all characters, increasing the difficulty of a p= assword-guessing attack. This issue is fixed in version 6.54.1. 2026-08-04 = 4.8 CVE-2026-70590 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70590 ] Tr= yGhost--Ghost Ghost is a Node.js content management system. From 0.10.0 unt=
il 6.54.1, a Server-Side Request Forgery in Ghost Admin image fetching allo= wed any staff-level user to perform a blind HTTP GET request against intern=
al hosts. No output was returned, but this could have been used to probe op=
en ports on internal hosts. This issue is fixed in version 6.54.1. 2026-08-=
04 4.1 CVE-2026-70591 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70591 ]=
TryGhost--Ghost Ghost is a Node.js content management system. From 6.26.0 = until 6.54.1, a validation issue allowed some functionality, such as Webmen= tions, to be abused by an unauthenticated user to make limited HTTP request=
s to hosts in the Ghost server's internal network. A successful attack woul=
d not result in any response data being returned. This vulnerability is fix=
ed in 6.54.1. 2026-08-05 4 CVE-2026-70595 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-70595 ] TryGhost--Ghost Ghost is a Node.js content management = system. From 4.9.0 until 6.54.1, an input validation issue allowed any staf=
f user to create a post with content in feature_image_caption that could be=
used to hijack another staff user's Ghost Admin session, resulting in priv= ilege escalation. This issue is fixed in 6.54.1. 2026-08-05 4.3 CVE-2026-70= 596 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70596 ] ttttonyhe--OBlog =
A security vulnerability has been detected in ttttonyhe OBlog up to 3ca6a45= a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown processi=
ng of the file /tags.php. Such manipulation of the argument day leads to cr= oss site scripting. The attack may be performed from remote. The exploit ha=
s been disclosed publicly and may be used. This product utilizes a rolling = release system for continuous delivery, and as such, version information fo=
r affected or updated releases is not disclosed. The vendor was contacted e= arly about this disclosure but did not respond in any way. 2026-08-05 4.3 C= VE-2026-18968 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18968 ] Tutor L= MS--Tutor LMS The Tutor LMS WordPress plugin before 3.9.14 does not properl=
y verify enrollment when restricting access to protected course content, al= lowing authenticated users with subscriber-level access and above who are e= nrolled in at least one course to view paid lesson, quiz, and assignment co= ntent belonging to other courses. 2026-08-06 4.3 CVE-2026-14306 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-14306 ] uhop--node-re2 node-re2 provides=
RE2 regular expression bindings for Node.js. Prior to version 1.25.1, the = WrappedRE2::Replace function built its replacement result and passed it to =
V8 using ToLocalChecked without checking for the empty MaybeLocal that V8 r= eturns when the resulting string or buffer exceeds V8's maximum string leng= th. When a global replace uses an output amplifying replacement template, t=
he result can grow quadratically with the input size, and once the result e= xceeds V8's maximum string length, the unchecked ToLocalChecked call causes=
a fatal, uncatchable process abort instead of a catchable exception. This = issue is fixed in version 1.25.1. 2026-08-06 6.2 CVE-2026-71430 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-71430 ] uhop--node-re2 node-re2 provides=
RE2 regular expression bindings for Node.js. Prior to version 1.26.1, pass= ing a Buffer whose final bytes form a truncated (incomplete) multi-byte UTF=
-8 sequence could cause the native binding to read past the end of the allo= cated buffer while attempting to decode the final, incomplete code point. T= his could result in an out-of-bounds read and potential disclosure of adjac= ent memory contents. This issue is fixed in version 1.26.1. 2026-08-06 5.1 = CVE-2026-71498 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71498 ] Unlimi= ted Elements--Unlimited Elements For Elementor (Free Widgets, Addons, Templ= ates) Contributor Arbitrary File Download in Unlimited Elements For Element=
or (Free Widgets, Addons, Templates) <=3D 2.0.14 versions. 2026-08-06 6.5 C= VE-2026-28146 [ https://www.cve.org/CVERecord?id=3DCVE-2026-28146 ] Unlimit=
ed Elements--Unlimited Elements For Elementor (Free Widgets, Addons, Templa= tes) Missing Authorization vulnerability in Unlimited Elements Unlimited El= ements For Elementor (Free Widgets, Addons, Templates) allows Exploiting In= correctly Configured Access Control Security Levels. This issue affects Unl= imited Elements For Elementor (Free Widgets, Addons, Templates): from n/a t= hrough 2.0.15. 2026-08-03 5.4 CVE-2026-28147 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-28147 ] Vladimir Garagulya--Plugins Garbage Collector (Data= base Cleanup) Unauthenticated Cross Site Request Forgery (CSRF) in Plugins = Garbage Collector (Database Cleanup) <=3D 0.14 versions. 2026-08-06 6.5 CVE= -2026-66686 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66686 ] vxcontrol= --PentAGI A weakness has been identified in vxcontrol PentAGI up to 2.1.0. = This affects an unknown part of the file backend/pkg/templates/prompts/pent= ester.tmpl of the component Tool Management Protocol Handler. Executing a m= anipulation can lead to sandbox issue. It is possible to launch the attack = remotely. The attack requires a high level of complexity. It is indicated t= hat the exploitability is difficult. The exploit has been made available to=
the public and could be used for attacks. The vendor was contacted early a= bout this disclosure but did not respond in any way. 2026-08-03 5.6 CVE-202= 6-18593 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18593 ] Wavlink--WL-N= U516U1 A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628.=
Affected is the function set_sys_adm of the file adm.cgi of the component = Admin Password Handler. This manipulation causes os command injection. The = attack is possible to be carried out remotely. The exploit has been publicl=
y disclosed and may be utilized. It is suggested to upgrade the affected co= mponent. The vendor was contacted early, responded in a very professional m= anner and quickly released a fixed version of the affected product. 2026-08= -03 6.3 CVE-2026-18590 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18590 =
] webocoders--Udimi Tools The Udimi Tools plugin for WordPress is vulnerabl=
e to unauthorized modification of data due to a missing capability check on=
the `ajax_disconnect()` function in all versions up to, and including, 3.2=
. This makes it possible for authenticated attackers, with Subscriber-level=
access and above, to delete the plugin's six configuration options - inclu= ding the API key, connected Udimi user email, and tracking-script payload -=
effectively disconnecting the site from the configured Udimi account. The = companion `ajax_connect()` handler is missing the same checks, allowing the=
same low-privilege attackers to overwrite those options with an attacker-s= upplied API key. 2026-08-05 6.5 CVE-2026-7456 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-7456 ] wedevs--ERP: Complete HR, Accounting & CRM Suite Bu= ilt for WooCommerce The ERP: Complete HR, Accounting & CRM Suite with WooCo= mmerce CRM Support plugin for WordPress is vulnerable to SQL Injection via = the 'erpadvancefilter' parameter in all versions up to, and including, 1.17=
.4 due to insufficient escaping on the user supplied parameter and lack of = sufficient preparation on the existing SQL query. The handler runs the valu=
e through sanitize_text_field, which preserves single quotes, and the downs= tream erp_crm_contact_advance_filter() function interpolates it directly in=
to a single-quoted SQL WHERE clause before execution via $wpdb->get_results= (). This makes it possible for authenticated attackers, with the plugin-sup= plied CRM Agent role (or higher CRM Manager / WordPress admin) and the erp_= crm_list_contact capability, to append additional SQL queries into already = existing queries that can be used to extract sensitive information from the=
database. 2026-08-05 6.5 CVE-2026-11421 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-11421 ] WonderTrader--WonderTrader A weakness has been identifi=
ed in WonderTrader up to 0.9.9. This vulnerability affects the function Mat= chEngine::update_lob of the file src/WtBtCore/MatchEngine.cpp of the compon= ent Internal Limit Order Book Cache Handler. This manipulation causes enfor= cement of behavioral workflow. Remote exploitation of the attack is possibl=
e. The exploit has been made available to the public and could be used for = attacks. The vendor was contacted early about this disclosure but did not r= espond in any way. 2026-08-06 4.3 CVE-2026-19037 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-19037 ] WonderTrader--WonderTrader A vulnerability was = determined in WonderTrader up to 0.9.9. This impacts an unknown function of=
the file src/Includes/WTSTradeDef.hpp of the component TraderATP Cash Trad=
e Conversion. Executing a manipulation of the argument m_offsetType can lea=
d to use of uninitialized variable. The attack can be executed remotely. Th=
e exploit has been publicly disclosed and may be utilized. The vendor was c= ontacted early about this disclosure but did not respond in any way. 2026-0= 8-07 4.3 CVE-2026-19212 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19212=
] WonderTrader--WonderTrader A vulnerability was identified in WonderTrade=
r up to 0.9.9. Affected is the function _undone_qty in the library src/WtCo= re/TraderAdapter.h of the component Pending Order Handler. The manipulation=
of the argument getUndoneQty leads to enforcement of behavioral workflow. = The attack is possible to be carried out remotely. The exploit is publicly = available and might be used. The vendor was contacted early about this disc= losure but did not respond in any way. 2026-08-07 4.3 CVE-2026-19213 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-19213 ] wongcyrus--ExcelLexBot A vu= lnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This affects=
the function ExcelLexBotS3TriggerFunction of the component Lambda Function=
Handler. Performing a manipulation results in improper privilege managemen=
t. The attack may be initiated remotely. The vendor was contacted early abo=
ut this disclosure but did not respond in any way. This vulnerability only = affects products that are no longer supported by the maintainer. 2026-08-09=
4.7 CVE-2026-19360 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19360 ] W=
P Events Manager--WP Events Manager The WP Events Manager WordPress plugin = before 2.2.5 does not verify that an incoming payment notification originat=
es from the site's configured merchant account, nor that the paid amount ma= tches the booking total, allowing unauthenticated users to mark any booking=
as paid without a legitimate payment reaching the merchant, including othe=
r users' bookings. 2026-08-07 5.3 CVE-2026-15148 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-15148 ] WP Hotel Booking--WP Hotel Booking The WP Hotel=
Booking WordPress plugin before 2.3.3 does not ensure that room quantities=
and the resulting order total are non-negative when placing a booking, and=
relies on client-controlled cart data, allowing unauthenticated users to c= reate confirmed reservations for free or at an arbitrarily reduced price. 2= 026-08-06 5.3 CVE-2026-15149 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 15149 ] WP Hotel Booking--WP Hotel Booking The WP Hotel Booking WordPress p= lugin before 2.3.2 does not verify that a payment notification corresponds =
to a payment made to the site's own merchant account, nor that the paid amo= unt matches the booking total, allowing unauthenticated users to have their=
bookings marked as fully paid without any payment reaching the site owner.=
2026-08-06 5.3 CVE-2026-15152 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-15152 ] WP Travel Engine--WP Travel Engine The WP Travel Engine WordPress=
plugin before 6.8.2 does not verify that an incoming PayPal payment notifi= cation was sent to the site's configured merchant account, nor that the pai=
d amount matches the order total, before marking a booking as paid, allowin=
g unauthenticated attackers to mark bookings as fully paid using a token pa= yment made to an attacker-controlled account. 2026-08-06 5.3 CVE-2026-12501=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-12501 ] WP Zone--Custom CSS = and JavaScript Unauthenticated Sensitive Data Exposure in Custom CSS and Ja= vaScript <=3D 2.0.16 versions. 2026-08-06 5.3 CVE-2026-66683 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-66683 ] WPKube--CAPTCHA 4WP Unauthenticated=
Bypass Vulnerability in CAPTCHA 4WP <=3D 7.6.0 versions. 2026-08-06 5.3 CV= E-2026-32469 [ https://www.cve.org/CVERecord?id=3DCVE-2026-32469 ] wpxpo--P= ost Grid Gutenberg Blocks PostX The Post Grid Gutenberg Blocks for News, Ma= gazines, Blog Websites - PostX plugin for WordPress is vulnerable to Stored=
Cross-Site Scripting via the 'inputPlaceHolder' parameter in all versions =
up to, and including, 5.0.13 due to insufficient input sanitization and out= put escaping. This makes it possible for authenticated attackers, with Cont= ributor-level access and above, to inject arbitrary web scripts in pages th=
at will execute whenever a user accesses an injected page. 2026-08-06 6.4 C= VE-2026-5158 [ https://www.cve.org/CVERecord?id=3DCVE-2026-5158 ] WSO2--WSO=
2 API Control Plane The user self-signup flow in multiple WSO2 products fai=
ls to adequately validate user-supplied input. This weakness allows arbitra=
ry unvalidated data to be included within user claims, which are then used =
by downstream processes. Allowing unvalidated input into user claims can le=
ad to various security risks. Malicious or malformed data injected during s= ignup could be processed by other parts of the application, potentially ena= bling attacks such as content manipulation, redirection, user interface inc= onsistencies, unauthorized actions, and data exposure. The actual impact de= pends on how the compromised data is consumed and the privileges associated=
with the affected users. 2026-08-06 4 CVE-2024-10302 [ https://www.cve.org= /CVERecord?id=3DCVE-2024-10302 ] WSO2--WSO2 API Manager Unused authorizatio=
n codes issued to deleted users are not being properly invalidated or remov=
ed from the system. This allows for the persistence of these codes, enablin=
g them to be potentially reused. If an attacker possesses both the authoriz= ation code and the associated client credentials (client ID and client secr= et), they can leverage these unused codes to obtain access tokens on behalf=
of users who have already been deleted. This may lead to unauthorized acce=
ss to sensitive resources and services, contingent on the scopes originally=
authorized for the compromised authorization code. 2026-08-06 4.9 CVE-2024= -8995 [ https://www.cve.org/CVERecord?id=3DCVE-2024-8995 ] WSO2--WSO2 API M= anager The Swagger UI Try-out console within the API Publisher documentatio=
n allows an external Swagger API definition URL to be loaded, overriding th=
e existing API definitions within the Publisher portal. By exploiting this = vulnerability, malicious actors can deceive users into interacting with the=
se overwritten API definitions. This could lead to the exposure of sensitiv=
e information or the initiation of unintended requests to backend services.=
2026-08-06 4.3 CVE-2025-6508 [ https://www.cve.org/CVERecord?id=3DCVE-2025= -6508 ] WSO2--WSO2 API Manager When an Event Publisher output adapter is co= nfigured with irrelevant properties, the affected products log these proper= ties. This logging occurs without sufficient validation or sanitization of = the property values. A malicious actor with access to the 'wso2carbon' log = files could retrieve sensitive information, such as user credentials or oth=
er confidential data, that was inadvertently logged due to misconfiguration=
, potentially leading to unauthorized access. 2026-08-06 4.4 CVE-2026-0637 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-0637 ] WSO2--WSO2 Enterprise = Integrator The account locking mechanism fails to trigger when secondary us=
er stores are inaccessible. The software does not maintain a consistent sta=
te for account locking if it cannot reach all configured user stores, allow= ing an attacker to repeatedly attempt authentication with invalid credentia=
ls without triggering the lockout mechanism for users within active stores.=
When the account locking mechanism is bypassed due to the inaccessibility =
of secondary user stores, users in accessible user stores are left vulnerab=
le to brute force attacks. A malicious actor can exploit this by attempting=
numerous invalid password combinations against a user account without the = expected account lockout consequence. 2026-08-06 5.9 CVE-2024-6832 [ https:= //www.cve.org/CVERecord?id=3DCVE-2024-6832 ] WSO2--WSO2 Enterprise Integrat=
or When internal roles are removed from a user within the WSO2 product, the=
system fails to invalidate any previously issued authentication tokens ass= ociated with that user. This vulnerability could allow users to retain thei=
r previous access privileges even after their roles have been revoked. As a=
result, a user can continue to perform unauthorized actions or access rest= ricted resources until the expired tokens naturally expire. 2026-08-06 5 CV= E-2025-12317 [ https://www.cve.org/CVERecord?id=3DCVE-2025-12317 ] WSO2--WS=
O2 Identity Server The Ajax processor within the Carbon console fails to ad= equately protect state-changing operations from Cross-Site Request Forgery = (CSRF) attacks. Specifically, it utilizes the HTTP GET method for these ope= rations, and while the SameSite=3DLax cookie attribute is employed for miti= gation, this mechanism is bypassed as it permits cookies to be sent with cr= oss-origin top-level navigation requests, including GET requests. This allo=
ws an attacker to trick an authenticated user's browser into unknowingly ex= ecuting unintended actions. An attacker can exploit this vulnerability to p= erform unauthorized state-altering requests on behalf of authenticated user=
s. This could lead to consequences such as data modification, account chang= es, or other actions that could result in data compromise or loss of user c= ontrol over their account. However, this attack is only feasible if the Car= bon console and related services are exposed to the public internet, which =
is not recommended according to WSO2's security guidelines. 2026-08-06 5.4 = CVE-2025-13394 [ https://www.cve.org/CVERecord?id=3DCVE-2025-13394 ] WSO2--= WSO2 Identity Server When secondary user stores are configured, the implici= t-association resolver incorrectly initializes from a secondary user store = and bypasses the primary user store during search and uniqueness checks. Th=
is allows a subject to be associated with an unintended local account if th=
e same lookup claim (e.g., username or email) exists in both the primary an=
d a secondary store. If duplicate claim values exist across user stores, th=
is issue can lead to identity confusion due to incorrect implicit associati= ons when using an external Identity Provider (IDP). Legitimate user account=
s in the primary user store may fail to associate correctly with their corr= esponding external IDP accounts, potentially restricting access if the seco= ndary account has fewer privileges. Deployments are not affected if no seco= ndary user stores are configured, implicit association is disabled, or clai=
m values are globally unique. 2026-08-06 4.3 CVE-2025-11850 [ https://www.c= ve.org/CVERecord?id=3DCVE-2025-11850 ] WSO2--WSO2 Identity Server The syste=
m accepts authentication requests without sufficient validation to enforce = tenant isolation when using Email OTP, SMS OTP, or Magic Link as first-fact=
or authenticators. This failure to adequately separate user data between te= nants can lead to the exposure of personally identifiable information. Succ= essful exploitation allows an attacker to disclose personally identifiable = information of users in different tenants, resulting in privacy violations = and potential regulatory non-compliance. This may include unauthorized acce=
ss to user details such as mobile numbers. 2026-08-06 4.3 CVE-2025-13909 [ = https://www.cve.org/CVERecord?id=3DCVE-2025-13909 ] WSO2--WSO2 Micro Integr= ator The Class Mediator fails to correctly validate or sanitize `messageCon= text` properties when they are used to populate dynamic values. This allows=
authenticated users to potentially access or modify data across different = system invocations that should be isolated. This weakness can lead to the d= isclosure of sensitive information belonging to other users or the unintend=
ed modification of system data by authenticated users. The exact impact dep= ends on how `messageContext` properties are utilized within the affected WS=
O2 products. 2026-08-06 6.8 CVE-2024-6541 [ https://www.cve.org/CVERecord?i= d=3DCVE-2024-6541 ] xpro--Xpro Addons 140+ Widgets for Elementor The Xpro A= ddons plugin for WordPress is vulnerable to unauthorized creation of data d=
ue to a missing capability check on the `get_menu_content_editor()` functio=
n in all versions up to, and including, 1.5.1. This makes it possible for a= uthenticated attackers, with Subscriber-level access and above, to create a= rbitrary published posts of the `xpro_content` custom post type with attack= er-controlled titles. The created posts are publicly queryable on the front= -end, enabling content injection, SEO spam, and database pollution. 2026-08= -05 4.3 CVE-2026-7105 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7105 ] = xwp--Stream Activity Log & Audit Trail The Stream plugin for WordPress is v= ulnerable to authorization bypass in all versions up to, and including, 4.2= .0. This is due to the plugin not properly verifying that a user is authori= zed to perform an action. This makes it possible for authenticated attacker=
s, with subscriber-level access and above, to access all Stream activity re= cords via the Heartbeat API. 2026-08-07 6.5 CVE-2026-11907 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-11907 ] yeqifu--warehouse A vulnerability was=
determined in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b467= 0e4. This issue affects some unknown processing of the file src/main/java/c= om/yeqifu/sys/controller/FileController.java. This manipulation of the argu= ment path causes path traversal. It is possible to initiate the attack remo= tely. The exploit has been publicly disclosed and may be utilized. This pro= duct is using a rolling release to provide continious delivery. Therefore, =
no version details for affected nor updated releases are available. The ven= dor was contacted early about this disclosure but did not respond in any wa=
y. 2026-08-05 4.3 CVE-2026-18903 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-18903 ] YITHEMES--YITH WooCommerce Zoom Magnifier Unauthenticated Sensi= tive Data Exposure in YITH WooCommerce Zoom Magnifier <=3D 2.52.0 versions.=
2026-08-06 5.3 CVE-2026-28169 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-28169 ] yushine--InnoShop A flaw has been found in yushine InnoShop up to=
0.8.2. Affected by this issue is the function FileManagerController::destr= oyFiles of the file innopacks/restapi/routes/panel-api.php of the component=
Files Endpoint. This manipulation causes path traversal. The attack may be=
initiated remotely. The exploit has been published and may be used. The ve= ndor was contacted early about this disclosure but did not respond in any w= ay. 2026-08-05 5.4 CVE-2026-18959 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-18959 ] zephyrproject--zephyr The SF32LB MPI QSPI NOR flash driver (dr= ivers/flash/flash_sf32lb_mpi_qspi_nor.c) validated the flash offset and len= gth on its read and write paths with the test (offset + size) > data->size.=
Because offset is a signed off_t while size is unsigned, a negative offset=
is converted to a large unsigned value and the addition can wrap to a smal=
l result that passes the check. The read path then performs memcpy(dst, (vo=
id *)(data->base + offset), size) and the write path programs flash at offs=
et and cache-invalidates data->base + offset, in both cases accessing memor=
y outside the mapped flash window. The driver's erase path already rejected=
negative offsets, but read and write did not. In builds with CONFIG_USERSP= ACE, flash_read and flash_write are syscalls whose verifiers validate the d= evice object and the caller's buffer but deliberately delegate offset bound=
s checking to the driver. An unprivileged thread that has been granted acce=
ss to this flash device can therefore call the syscall with a crafted negat= ive offset and a buffer valid in its own memory domain, and reach the unche= cked access. The most direct impact is on the read path: by choosing a nega= tive offset and matching size, an attacker slides the memcpy source below t=
he flash base and copies arbitrary CPU-addressable memory into its own buff= er, disclosing memory it is not authorized to read. The write path addition= ally allows programming flash at an out-of-range address and invalidating a=
n attacker-chosen cache range, affecting integrity and availability. Reacha= bility requires userspace to be enabled and the raw flash device object to =
be granted to an untrusted thread. The fix replaces the check with qspi_nor= _range_is_valid(), which rejects negative offsets and performs the bound co= mparison in overflow-safe 64-bit arithmetic on both paths, and additionally=
adds an SRAM DMA bounce buffer plus source/destination overlap rejection t=
o prevent a separate DMA bus-hang condition. 2026-08-07 6.6 CVE-2026-11743 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-11743 ] zhayujie--CowAgent A = vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vulnerabi= lity affects the function _select_tools of the file agent/evolution/executo= r.py of the component Self-Evolution Review Agent. Performing a manipulatio=
n results in incorrect authorization. The attack is possible to be carried = out remotely. The exploit is now public and may be used. 2026-08-06 6.3 CVE= -2026-18992 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18992 ] ZomboDroi= d--Meme Generator App A security vulnerability has been detected in ZomboDr= oid Meme Generator App 4.6830 on Android. This issue affects the function t= 5.l.c of the component com.zombodroid.MemeGenerator. Such manipulation lead=
s to path traversal. Local access is required to approach this attack. The = exploit has been disclosed publicly and may be used. The vendor was contact=
ed early about this disclosure but did not respond in any way. 2026-08-04 5=
.3 CVE-2026-18853 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18853 ] ZTE= --F689 By accessing unencrypted information in the device firmware, an atta= cker can obtain credentials related to the integrity verification of a spec= ific application function on the device. 2026-08-07 6.5 CVE-2026-49008 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-49008 ] ZTE--F689 By accessing un= encrypted information in the device firmware, an attacker can obtain creden= tials related to TLS transmission. 2026-08-07 5.3 CVE-2026-49006 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-49006 ] ZTE--NX799J (Red Magic 11 Air) = The built-in PostgreSQL service on the mobile device suffers from misconfig= uration flaws and command injection vulnerabilities. This service listens o=
n a specific port, runs with root privileges, and is protected by weak cred= entials. The database supports the COPY FROM PROGRAM syntax, allowing local=
attackers to bypass Android's permission sandbox and gain full root access=
. 2026-08-05 6.5 CVE-2026-49004 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-49004 ] Zyxel--WAX650S firmware An improper authentication vulnerability=
in the "social_login.cgi" CGI program in Zyxel WAX650S firmware versions t= hrough 7.10(ABRM.4)C0 could allow an attacker on the WLAN to bypass captive=
portal authentication. 2026-08-04 6.5 CVE-2026-8508 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-8508 ]=20

Back to top [ #top ]

Low Vulnerabilities

Primary
Vendor -- Product Description Published CVSS Score Source Info Baserow--Bas= erow A security flaw has been discovered in Baserow up to 2.3.2. Affected b=
y this issue is the function BaserowImpersonateAuthTokenSerializer of the f= ile backend/src/baserow/api/admin/users/serializers.py of the component Ina= ctive Non-Staff User Handler. Performing a manipulation results in improper=
authorization. Remote exploitation of the attack is possible. The complexi=
ty of an attack is rather high. The exploitation is known to be difficult. = The presence of this vulnerability remains uncertain at this time. Upgradin=
g to version 2.3.3 can resolve this issue. The affected component should be=
upgraded. The project maintainer explains: "While the problem exists, I'm = not really sure if it's a vulnerability. (....) Even though the back gives =
a token for a deactivate user, none of the endpoints actually work. That sa= id, we will fix it, but so far it seems more like a bug instead of a vulner= ability." 2026-08-04 2.2 CVE-2026-18817 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18817 ] cli--cli GitHub CLI (gh) is GitHub's official command l= ine tool. Prior to version 2.97.0, gh auth status masked only the character=
s after the last underscore in certain fine-grained personal access tokens = and GitHub App tokens. As a result, part of an affected token could appear =
in terminal or CI output that is captured or shared. Authenticated users ar=
e affected if they ran gh auth status (without the --show-token flag) with =
a token type whose format contains an underscore after the prefix. This inc= ludes fine-grained personal access tokens (github_pat_*) and GitHub App ins= tallation and user access tokens (ghs_*, ghu_*; for example, ghs_<APPID>_<J= WT>), as well as the Actions GITHUB_TOKEN. Classic tokens such as gho_* and=
ghp_* have an underscore-free body and are not affected. This issue is fix=
ed in version 2.97.0. 2026-08-06 3.3 CVE-2026-64652 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-64652 ] DataGear--DataGear A vulnerability was deter= mined in DataGear up to 5.0.0. The impacted element is the function HtmlTpl= DashboardWidgetHtmlRenderer of the file HtmlTplDashboardWidgetHtmlRenderer.= java of the component Chart Name Handler. This manipulation of the argument=
Title causes cross site scripting. It is possible to initiate the attack r= emotely. The exploit has been publicly disclosed and may be utilized. The v= endor was contacted early about this disclosure but did not respond in any = way. 2026-08-06 2.4 CVE-2026-19110 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19110 ] Easy Appointments--Easy Appointments The Easy Appointments Wo= rdPress plugin through 3.12.26 does not correctly validate shortcode input =
in one of its block-rendering actions, checking only the first tag of the s= upplied string against an allowlist while rendering the entire string, allo= wing users with contributor-level access to execute arbitrary registered sh= ortcodes. 2026-08-06 2.7 CVE-2026-14225 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-14225 ] electron--electron Electron is a framework for writing = cross-platform desktop applications using JavaScript, HTML and CSS. Prior t=
o 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3, offscreen rendering frame dat=
a received from the GPU process was not fully validated by the main process=
. A compromised GPU process could cause the main process to read out-of-bou= nds memory while producing paint event images, disclosing memory or crashin=
g the app. This issue is fixed in 39.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.=
3. 2026-08-05 3.9 CVE-2026-70598 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-70598 ] electron--electron Electron is a framework for writing cross-pl= atform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8=
, 40.9.0, 41.2.1, and 42.0.0-beta.3, the native autofill popup could be pos= itioned by a cross-origin iframe outside that iframe's bounds, over the emb= edding page's UI, enabling clickjacking or spoofing of trusted UI. Apps are=
only affected if they embed untrusted content in iframes within windows th=
at also display trusted UI. Apps that do not embed untrusted third-party co= ntent are not affected. This issue is fixed in versions 39.8.8, 40.9.0, 41.= 2.1, and 42.0.0-beta.3. 2026-08-05 3.1 CVE-2026-70600 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-70600 ] epsilla-cloud--vectordb A vulnerability ha=
s been found in epsilla-cloud vectordb up to 0.3.18/df5a5f5afb85a2376a0f2f3= 16c79dea9b2c6ac7a. This impacts the function SplitTokens/ShuntingYard of th=
e file engine/query/expr/expr.cpp of the component Filter Parser. Such mani= pulation leads to improper check for unusual conditions. The attack needs t=
o be performed locally. The exploit has been disclosed to the public and ma=
y be used. The vendor was contacted early about this disclosure but did not=
respond in any way. 2026-08-04 3.3 CVE-2026-18852 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-18852 ] FoundationAgents--MetaGPT A vulnerability was=
determined in FoundationAgents MetaGPT up to 0.8.2. This affects the funct= ion read of the file metagpt/tools/libs/editor.py. This manipulation causes=
path traversal. The attack needs to be launched locally. The exploit has b= een publicly disclosed and may be utilized. The vendor was contacted early = about this disclosure but did not respond in any way. 2026-08-06 3.3 CVE-20= 26-19059 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19059 ] ggml-org--ll= ama.cpp A vulnerability was determined in ggml-org llama.cpp e15efe0. Affec= ted by this issue is some unknown functionality of the file common/jinja/pa= rser.cpp of the component Jinja Minja Template Parser. Executing a manipula= tion with the input {{9|9|{ can lead to reachable assertion. The attack req= uires local access. The exploit has been publicly disclosed and may be util= ized. The project was informed of the problem early through an issue report=
but has not responded yet. 2026-08-03 3.3 CVE-2026-18581 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-18581 ] HCL Software--HCL iControl HCL iContro=
l is affected by Missing Access Control vulnerability. The application fail=
ed to enforce proper granular access controls, allowing users to access or = view administrator-level functionalities without appropriate authorization.=
2026-08-03 3.7 CVE-2026-56608 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-56608 ] HelloGGX--shadcn-vue-mcp A weakness has been identified in HelloG=
GX shadcn-vue-mcp up to e170e277b94235cde627803277fc8c41103a4d38. Affected =
by this issue is the function fs.promises.readFile of the file src/server/c= allback-server.ts. This manipulation of the argument filepath causes path t= raversal. The attack is restricted to local execution. This product adopts =
a rolling release strategy to maintain continuous delivery. Therefore, vers= ion details for affected or updated releases cannot be specified. The proje=
ct was informed of the problem early through an issue report but has not re= sponded yet. 2026-08-09 3.3 CVE-2026-19324 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-19324 ] HKUDS--nanobot A flaw has been found in HKUDS nanobot=
up to 0.2.1. The impacted element is the function ExecTool._prepare_comman=
d of the file nanobot/agent/tools/shell.py of the component Login-shell Env= ironment Handler. Executing a manipulation can lead to information disclosu= re. The attack requires local access. The exploit has been published and ma=
y be used. Upgrading to version 0.3.0 is sufficient to resolve this issue. = This patch is called 4525. The affected component should be upgraded. Multi= ple issues were reported to the project. They reacted with a high level of = professionalism and kindness: "The report concerns shell startup files rein= troducing environment variables when command execution defaults to a login = shell. The default was changed so exec does not use a login shell unless ex= plicitly requested". 2026-08-07 3.3 CVE-2026-19245 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-19245 ] honojs--hono Hono is a Web application framew= ork that provides support for any JavaScript runtime. From 4.7.0 to 4.12.33=
, the Proxy Helper proxy() function in hono/proxy does not remove response = headers named by the origin's Connection header. Per RFC 9110 Section 7.6.1=
, an intermediary must remove the header fields listed in a message's Conne= ction header field before forwarding the message, in addition to the well k= nown hop by hop headers, but the proxy() function only removed the well kno=
wn hop by hop headers, including Connection itself, from origin responses. =
A client may therefore receive response headers that the origin intended on=
ly for its immediate peer, disclosing connection scoped or internal metadat=
a contained in such headers, when an application proxies responses from an = origin that declares additional, non standard headers as hop by hop via the=
Connection response header. This issue is fixed in version 4.12.34. 2026-0= 8-07 3.7 CVE-2026-71849 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71849=
] IBM--Business Automation Workflow containers and traditional IBM Busines=
s Automation Workflow containers and traditional 26.0.0, 25.0.0 through 25.= 0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, and 24.0.0 thro= ugh 24.0.0 Interim Fix 009 IBM Business Automation Workflow fails to proper=
ly verify that the hostname matches the server certificate potentially allo= wing connections to an attacker-controlled server. 2026-08-05 3.8 CVE-2026-= 12730 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12730 ] Insta--InstaKNX= ServiceApp A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Af= fected by this issue is the function CreateWebClientAndDownloadFileList of = the component Firmware Update Handler. Executing a manipulation can lead to=
insufficient verification of data authenticity. It is possible to launch t=
he attack remotely. Attacks of this nature are highly complex. The exploita= tion is known to be difficult. The vendor was contacted early about this di= sclosure but did not respond in any way. 2026-08-06 3.7 CVE-2026-19061 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-19061 ] Lenovo--XClarity Essentia=
ls OneCLI A temporary file creation vulnerability in the Linux version of L= enovo XClarity Essentials OneCLI 5.5.0 and below could allow a local low-pr= ivileged attacker to overwrite or truncate arbitrary local files with progr= am-generated data when OneCLI is executed with elevated privileges. 2026-08= -04 3.9 CVE-2026-16791 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16791 =
] macrozheng--mall A flaw has been found in macrozheng mall 0504e86. This v= ulnerability affects unknown code of the file /sso/getAuthCode of the compo= nent mall-portal Module. Executing a manipulation can lead to weak password=
recovery. The attack may be launched remotely. This attack is characterize=
d by high complexity. It is stated that the exploitability is difficult. Th=
e exploit has been published and may be used. The vendor deleted the GitHub=
issue for this vulnerability without any explanation. Afterwards the vendo=
r was contacted early about this disclosure via email but did not respond i=
n any way. 2026-08-09 3.7 CVE-2026-19361 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19361 ] Meesho--Online Shopping App A vulnerability was identif= ied in Meesho Online Shopping App up to 20260607 on Android. Affected by th=
is vulnerability is an unknown functionality of the component com.meesho.su= pply. Such manipulation of the argument user_id/phone number/email address/= name leads to cleartext storage of sensitive information. The attack can be=
executed directly on the physical device. The exploit is publicly availabl=
e and might be used. The vendor was contacted early about this disclosure. = 2026-08-03 2.1 CVE-2026-18591 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -18591 ] mifi--lossless-cut A vulnerability was determined in mifi lossless= -cut up to 3.69.0. Affected by this issue is some unknown functionality of = the file src/main/httpServer.ts of the component Built-in HTTP API Service.=
Executing a manipulation can lead to server-side request forgery. The atta=
ck requires access to the local network. This attack is characterized by hi=
gh complexity. The exploitation is known to be difficult. The exploit has b= een publicly disclosed and may be utilized. This patch is called 2608023489= 55231442c4bae6c2d9d8ede947af0a. It is best practice to apply a patch to res= olve this issue. The project maintainer provides this view: "I'm not sure t= hat this is a critical vulnerability, because it is behind an experimental = CLI flag and the NTLM behavior isn't really a LosslessCut bug." The CVSS ve= ctor reflects the high level of pre-requisites. 2026-08-09 3.1 CVE-2026-193=
52 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19352 ] NocteDefensor--Lud= usMCP A security vulnerability has been detected in NocteDefensor LudusMCP =
up to 1.0.24. The impacted element is an unknown function of the file src/t= ools/ludusEnvironmentGuidesSearch.ts of the component ludus_environment_gui= des_search. Such manipulation of the argument guide_name leads to path trav= ersal. Local access is required to approach this attack. The project was in= formed of the problem early through an issue report but has not responded y= et. 2026-08-06 3.3 CVE-2026-19046 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-19046 ] open-reception--appointment-booking-software OpenReception's a= ppointment booking software provides an end-to-end encrypted appointment bo= oking platform. Prior to version 1.0.6, the bootstrap challenge endpoint at=
`/api/tenants/{id}/appointments/bootstrap-challenge` issues a SHA-256 proo= f-of-work with `difficulty=3D4` hex zeros, equivalent to 16 bits of work. M= odern hardware solves this in under 200 milliseconds, providing essentially=
no friction against automated abuse of the patient booking flow. Proof-of-= work is used in the booking flow as a rate-limiter for unauthenticated clie= nts establishing tunnels and submitting appointments. At 16 bits of difficu= lty, the construct is decorative rather than effective. An attacker can sol=
ve PoW challenges as fast as the server can issue them, defeating the rate-= limiting purpose. The handler also calls `challengeThrottleService.checkThr= ottle(binding, "passkey")`, but the binding includes attacker-controlled va= lues (`tunnelId`, `clientPublicKey`, and optional `emailHash`). For each fr= esh attempt, the attacker can supply new values, producing a new throttle k=
ey and bypassing the per-binding accumulation. Practical abuse friction is = therefore the PoW difficulty itself, not a stable per-IP or per-email serve= r-side throttle. Version 1.0.6 fixes the issue. 2026-08-06 3.7 CVE-2026-480=
82 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48082 ] open-reception--ap= pointment-booking-software OpenReception's appointment booking software pro= vides an end-to-end encrypted appointment booking platform. Prior to versio=
n 1.0.6, when a TENANT_ADMIN deletes an existing staff user, the underlying=
`StaffService.deleteStaffMember()` runs an additional invite cleanup that = deletes from the central `user_invite` table by email. The `email` clause h=
as no `tenantId` predicate. Any pending invite in any tenant that shares th=
e deleted staff's email is removed. A TENANT_ADMIN of tenant A who deletes =
a staff record with email `victim[@]example[.]com` also deletes the pending=
invite for `victim[@]example[.]com` in tenant B, even though they have no = relationship to tenant B. The user-side delete is correctly scoped (`eq(use= r.id, staffId), eq(user.tenantId, tenantId)`), and the pending-invite-only = delete path (when `staffId` is itself an invite ID) is also tenant-scoped. = The bug is specifically in the invite cleanup that runs as a side effect of=
deleting an existing staff user. Version 1.0.6 patches the issue. 2026-08-=
06 2.7 CVE-2026-48074 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48074 ]=
open-webui--open-webui Open WebUI is an extensible, feature-rich, and user= -friendly self-hosted AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/= chats/{id} cancelled a chat's in-flight tasks before checking whether the c= aller could delete that chat. Any authenticated user who knew another user'=
s chat id could abort that user's running model response, title generation,=
or tag generation, even though the delete was refused and no chat data was=
deleted, modified, or disclosed. This issue is fixed in 0.11.0. 2026-08-04=
3.1 CVE-2026-70483 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70483 ] O= penAkita--OpenAkita A security flaw has been discovered in OpenAkita up to = 1.27.12. This vulnerability affects unknown code of the file /api/upload of=
the component File Upload API. The manipulation of the argument File resul=
ts in cross site scripting. The attack may be performed from remote. A high=
complexity level is associated with this attack. It is stated that the exp= loitability is difficult. The exploit has been released to the public and m=
ay be used for attacks. The vendor was contacted early about this disclosur=
e but did not respond in any way. 2026-08-03 3.1 CVE-2026-18682 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-18682 ] Passster--Passster The Passster = WordPress plugin before 4.3.7 does not restrict low-privilege users holding=
the edit_posts capability from reading globally password-protected content=
through the WordPress core REST API when global protection is enabled, all= owing any Contributor or higher to read the content of protected pages and = posts without knowing the password. 2026-08-06 2.7 CVE-2025-15674 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2025-15674 ] PHPGurukul--Company Visitor Ma= nagement System A security vulnerability has been detected in PHPGurukul Co= mpany Visitor Management System 1.0. This issue affects some unknown proces= sing of the file /manage-newvisitors.php. The manipulation of the argument = fullname leads to cross site scripting. The attack can be initiated remotel=
y. The exploit has been disclosed publicly and may be used. 2026-08-07 2.4 = CVE-2026-19207 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19207 ] PV-Bha= t--gemsuite-mcp A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Af= fected by this issue is some unknown functionality of the file src/handlers= /unified-gemini.ts of the component gemini_search/gemini_reason/gemini_proc= ess/gemini_analyze. The manipulation of the argument file_path/file_paths r= esults in path traversal. The attack must be initiated from a local positio=
n. The project was informed of the problem early through an issue report bu=
t has not responded yet. 2026-08-09 3.3 CVE-2026-19368 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-19368 ] Red Hat--Red Hat Build of Keycloak A flaw=
was found in the backchannel logout endpoint of the keycloak-services comp= onent, which is part of the Red Hat Build of Keycloak. This component handl=
es authentication and session management for applications. The issue occurs=
when an OIDC identity provider is configured to skip signature validation.=
In this specific setup, the system incorrectly accepts logout requests tha=
t have no cryptographic signature. An attacker who knows certain technical = details about a user's session can use this flaw to force that user to be l= ogged out, potentially disrupting their work. 2026-08-04 3.7 CVE-2026-18569=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-18569 ] Red Hat--Red Hat Ent= erprise Linux 10 A flaw was found in SSSD. The sss_nss_protocol_fill_initgr=
() function in the NSS responder pre-allocates reply space for all group en= tries but does not shrink the packet when groups are skipped, causing unini= tialized heap bytes to be transmitted to the client. A local attacker can e= xploit this to disclose cached directory data and heap layout information f= rom the sssd_nss process. 2026-08-04 3.3 CVE-2026-68744 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-68744 ] Red Hat--Red Hat Enterprise Linux 10 An = injection vulnerability was found in libvirt's virtual network driver. The = network XML parser does not strip newline characters from DNS TXT record va= lue attributes and SRV record domain/target attributes. These values are wr= itten verbatim into the dnsmasq configuration file generated by the network=
driver, allowing a user with permission to define virtual networks to inje=
ct arbitrary dnsmasq configuration directives such as dhcp-script, leading =
to arbitrary command execution as root. 2026-08-07 2.3 CVE-2026-61477 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-61477 ] rpm-software-management--p= opt A flaw was found in popt, a command-line option parsing library. An off= -by-one error in the poptStuffArgs function, when repeatedly called by a ho=
st application or through deep alias nesting, can lead to corruption of int= ernal program data. This corruption could potentially enable a local attack=
er to execute arbitrary code if the host application then unsafely processe=
s the altered data. 2026-08-04 2.5 CVE-2026-18739 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-18739 ] rpm-software-management--popt An integer under= flow was found in the popt library when formatting help text for option tab= les that exceed the terminal width. A local user who can cause an applicati=
on to print help under those conditions may cause that application to crash=
or fail to display help, resulting in a denial of service of the affected = application. 2026-08-05 2.2 CVE-2026-18839 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-18839 ] Sharp Corporation--Sharp MFPs Sharp and Toshiba Tec M= FPs (multifunction printers) caches data internally when printing, and leav=
e them uncleared. They may be accessed later by other users. 2026-08-03 2.4=
CVE-2026-63545 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63545 ] Sourc= eCodester--Photo Share Website A flaw has been found in SourceCodester Phot=
o Share Website 1.0. The affected element is an unknown function of the fil=
e /social/index.php?page=3Dhome. This manipulation of the argument Comment = causes cross site scripting. The attack may be initiated remotely. The expl= oit has been published and may be used. 2026-08-07 3.5 CVE-2026-19209 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-19209 ] SourceCodester--Photo Shar=
e Website A vulnerability was identified in SourceCodester Photo Share Webs= ite 1.0. This affects an unknown part of the file /social/ajax.php?action= =3Dsave_upload of the component Comment Input Box. The manipulation of the = argument content leads to cross site scripting. The attack may be initiated=
remotely. The exploit is publicly available and might be used. 2026-08-07 = 3.5 CVE-2026-19230 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19230 ] Sy= sterel--S2OPC A weakness has been identified in Systerel S2OPC up to 1.7.3.=
This affects the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResp= onse of the file src/ClientServer/frontend/client_wrapper/internal/state_ma= chine.c of the component DeleteMonitoredItemsRequest Handler. This manipula= tion causes out-of-bounds read. The attack can only be executed locally. Th=
e exploit has been made available to the public and could be used for attac= ks. The vendor was contacted early about this disclosure but did not respon=
d in any way. 2026-08-04 3.3 CVE-2026-18790 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-18790 ] TBTAK BLGEM Software Technologies Research Institute= --pardus-domain-joiner Unverified ownership vulnerability in T=C3=83=C6=92= =C3=85=E2=80=9CB=C3=83=E2=80=9E=C3=82=C2=B0TAK B=C3=83=E2=80=9E=C3=82=C2=B0= LGEM Software Technologies Research Institute pardus-domain-joiner allows P= rivilege Abuse. This issue affects pardus-domain-joiner: before 0.5.5. 2026= -08-06 3.3 CVE-2026-15599 [ https://www.cve.org/CVERecord?id=3DCVE-2026-155=
99 ] WonderTrader--WonderTrader A vulnerability was detected in WonderTrade=
r up to 0.9.9. Impacted is the function TraderDD::queryTrades of the file s= rc/TraderDD/TraderDD.cpp. The manipulation of the argument FID_JYLB results=
in enforcement of behavioral workflow. The attack can be launched remotely=
. A high complexity level is associated with this attack. The exploitabilit=
y is considered difficult. The exploit is now public and may be used. The v= endor was contacted early about this disclosure but did not respond in any = way. 2026-08-07 3.7 CVE-2026-19208 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-19208 ] WSO2--WSO2 Identity Server The Secret Type Management REST AP=
I does not correctly isolate access controls when deleting a secret type. T=
he on-delete cascade logic, when triggered, fails to enforce organizational=
boundaries, leading to the removal of secrets associated with that type ac= ross all organizations. Exploitation of this vulnerability can result in th=
e unintended deletion of secrets across the entire deployment, potentially = causing configuration failures, service interruptions, and a denial-of-serv= ice condition. This vulnerability requires delete permissions for the Secre=
t Type Management REST API, which are by default only granted to administra= tors. 2026-08-06 3.8 CVE-2025-14779 [ https://www.cve.org/CVERecord?id=3DCV= E-2025-14779 ] WSO2--WSO2 Identity Server The user impersonation flow in WS=
O2 Identity Server fails to properly manage refresh tokens associated with = impersonated sessions. This allows an attacker who has obtained an access t= oken for an impersonated user to leverage the refresh token grant to obtain=
new access tokens, extending their ability to act as the legitimate user. =
An attacker who gains access to an impersonated user's access token can exp= loit this weakness to renew their authorization. This results in the contin= ued ability to perform actions on behalf of the actual user, compromising l=
og integrity and traceability by masking the true actor. 2026-08-06 2.4 CVE= -2025-12627 [ https://www.cve.org/CVERecord?id=3DCVE-2025-12627 ] WSO2--WSO=
2 Identity Server as Key Manager When Multi-Attribute Login is enabled, the=
login interface fails to consistently mask the existence of user accounts.=
For valid users, the server resolves and displays their canonical username=
, while for non-existent users, it echoes the original input. This occurs r= egardless of the validate_username configuration. The discovery of valid us= ernames can increase the risk of brute force attacks, social engineering at= tacks, and targeted information leakage. Attackers can leverage this inform= ation to craft more effective phishing campaigns or social engineering tact= ics to compromise user accounts or extract sensitive data. 2026-08-06 3.7 C= VE-2025-13736 [ https://www.cve.org/CVERecord?id=3DCVE-2025-13736 ] zephyrp= roject--zephyr The kernel queue helper z_queue_node_peek() in kernel/queue.=
c dereferences a node taken from a queue's data_q list, reading the node's = flag byte and, for items enqueued via k_queue_alloc_append/alloc_prepend, t=
he data pointer of an internally allocated alloc_node struct. The implement= ations of z_impl_k_queue_peek_head() and z_impl_k_queue_peek_tail() perform=
ed this read-and-dereference without holding the queue's spinlock, while ev= ery other accessor of the same list - including k_queue_get(), which unlink=
s a node and k_free()s its backing alloc_node - operates under that lock. B= ecause peek was unsynchronized, a concurrent k_queue_get() on the same queu=
e (on an SMP build, or under preemption/ISR concurrency) can free the node = between the moment peek obtains the node pointer and the moment it derefere= nces it. The peek then reads flag bits and a data pointer out of freed, pot= entially re-allocated heap memory and returns a stale or dangling pointer t=
o its caller. k_fifo and k_lifo are thin wrappers over k_queue, so this aff= ects buffer queues used throughout the net_buf, Bluetooth, USB, and network= ing subsystems; the peek operations are also system calls reachable from CO= NFIG_USERSPACE threads. The consequences are a use-after-free read that can=
leak stale heap contents (one pointer word) and, when the returned danglin=
g pointer is subsequently consumed as a live buffer, a dereference that can=
crash the system or corrupt memory. Exploitation requires winning a small = race window with local access (e.g. a userspace process racing k_queue_peek=
_* against k_queue_get on a shared queue, or two CPUs), so practical impact=
is bounded and of low severity. The fix wraps both peek implementations wi=
th k_spin_lock/k_spin_unlock on the queue lock, making the read-and-derefer= ence atomic with respect to the concurrent unlink-and-free and bringing pee=
k into line with the rest of the queue's locking discipline. 2026-08-07 3.6=
CVE-2026-11742 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11742 ] ZTE--= F689 The root password hash of the device can be obtained through unencrypt=
ed information in the firmware. 2026-08-07 2.4 CVE-2026-49005 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-49005 ] ZTE--SmartLife The ZTE Smart Life = app contains an SQL injection vulnerability that allows attackers to execut=
e UNION SELECT statements to query sensitive data in the feedback.db databa=
se across tables, including user accounts, phone numbers, feedback content,=
and local debug log paths, thereby enabling the theft of local privacy dat=
a. 2026-08-05 3.9 CVE-2026-8029 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-8029 ]=20

Back to top [ #top ]

Severity Not Yet Assigned

Primary
Vendor -- Product Description Published CVSS Score Source Info Academy LMS-= -Academy LMS The Academy LMS WordPress plugin before 3.8.3 does not verify = course enrollment or lesson publication status when returning a single less=
on through its REST API, allowing users with a self-service student (Subscr= iber-level) account to disclose the content of arbitrary lessons, including=
lessons of paid courses they are not enrolled in and unpublished (draft, p= ending, private) lessons. 2026-08-03 not yet calculated CVE-2026-16563 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-16563 ] Admin Safety Guard Login = Security, Limit Logins, 2FA & Brute Force Protection--Admin Safety Guard Lo= gin Security, Limit Logins, 2FA & Brute Force Protection The Admin Safety G= uard - Login Security, Limit Logins, 2FA & Brute Force Protection WordPress=
plugin before 1.4.0 does not perform any capability check on one of its RE=
ST API endpoints, allowing unauthenticated attackers to retrieve the full l= ist of registered users including their usernames, email addresses, roles, = and two-factor authentication enrollment status. 2026-08-08 not yet calcula= ted CVE-2026-16578 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16578 ] ae= hrc--pathling Pathling is a set of tools that make it easier to use FHIR an=
d clinical terminology within health data analytics. Prior to version 2.0.0=
of Pathling Server, Pathling's `/$result` endpoint allows a caller who can=
obtain any valid async export job ID to supply `file` parameter values con= taining path traversal sequences. The handler verifies only the supplied `j= ob` and never normalises or confines the requested `file` path to that job'=
s `jobs/<jobId>` directory before opening it as a filesystem resource. Beca= use async export scratch space lives under the same warehouse database root=
as persisted resource tables, an attacker can use their own export job to = read other files from the warehouse. This is fixed in Pathling Server 2.0.0=
. The `$result` handler now resolves and canonicalizes the requested file p= ath and rejects any request that escapes the job's `jobs/<jobId>` directory=
. As an interim mitigation, disable the async export operations (`pathling.= operations.exportEnabled`, `patientExportEnabled`, `groupExportEnabled`, `b= ulkSubmitEnabled`) or enable authentication and restrict export capability =
to trusted callers. 2026-08-07 not yet calculated CVE-2026-47659 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-47659 ] aehrc--pathling Pathling is a s=
et of tools that make it easier to use FHIR and clinical terminology within=
health data analytics. Prior to version 2.0.0 of Pathling Server, Pathling=
's bulk-submit operation allows an allowed submitter to supply an explicit = `oauthMetadataUrl` parameter that is not validated against `pathling.bulkSu= bmit.allowableSources`. When present, the bulk-submit OAuth flow trusts met= adata and the returned `token_endpoint` from the caller-chosen location, th=
en builds outbound OAuth client authentication directly from the submitter'=
s stored credentials. This is fixed in Pathling Server 2.0.0. 2026-08-07 no=
t yet calculated CVE-2026-47660 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-47660 ] aehrc--pathling Pathling is a set of tools that make it easier t=
o use FHIR and clinical terminology within health data analytics. Prior to = version 2.0.0 of Pathling Server, Pathling's `/$result` endpoint allows a c= aller who can obtain any valid async export job ID to supply `file` paramet=
er values containing path traversal sequences. The handler verifies only th=
e supplied `job` and never normalises or confines the requested `file` path=
to that job's `jobs/<jobId>` directory before opening it as a filesystem r= esource. Because async export scratch space lives under the same warehouse = database root as persisted resource tables, an attacker can use their own e= xport job to read other files from the warehouse. This is fixed in Pathling=
Server 2.0.0. As an interim mitigation, disable the async export operation=
s (`pathling.operations.exportEnabled`, `patientExportEnabled`, `groupExpor= tEnabled`, `bulkSubmitEnabled`) or enable authentication and restrict expor=
t capability to trusted callers. 2026-08-07 not yet calculated CVE-2026-476=
61 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47661 ] aehrc--pathling Pa= thling is a set of tools that make it easier to use FHIR and clinical termi= nology within health data analytics. Prior to version 2.0.0 of Pathling Ser= ver, Pathling's typed CRUD/search/batch FHIR surface allows an authenticate=
d caller with only coarse operation authorities to act on attacker-chosen r= esource families because those entrypoints do not consistently enforce the = documented per-resource `read` and `write` authorities. The documented auth= orization model requires an operation authority (e.g. `pathling:search`) to=
be paired with the matching per-resource `read` or `write` authority (e.g.=
`pathling:read:Patient`). Delete and batch are documented to require write=
authority for all referenced resource types. However, typed search, update=
, and related handlers are annotated only with `@OperationAccess(...)` and = act on the provider-selected resource type without checking the correspondi=
ng per-resource authority. This is fixed in Pathling Server 2.0.0. 2026-08-=
07 not yet calculated CVE-2026-47662 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-47662 ] aehrc--pathling Pathling is a set of tools that make it eas= ier to use FHIR and clinical terminology within health data analytics. Prio=
r to version 2.0.0 of Pathling Server, Pathling's typed CRUD/search/batch F= HIR surface allows an authenticated caller with only coarse operation autho= rities to act on attacker-chosen resource families because those entrypoint=
s do not consistently enforce the documented per-resource `read` and `write=
` authorities. The documented authorization model requires an operation aut= hority (e.g. `pathling:search`) to be paired with the matching per-resource=
`read` or `write` authority (e.g. `pathling:read:Patient`). Delete and bat=
ch are documented to require write authority for all referenced resource ty= pes. However, typed search, update, and related handlers are annotated only=
with `@OperationAccess(...)` and act on the provider-selected resource typ=
e without checking the corresponding per-resource authority. This is fixed =
in Pathling Server 2.0.0. 2026-08-07 not yet calculated CVE-2026-47663 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-47663 ] aehrc--pathling Pathling =
is a set of tools that make it easier to use FHIR and clinical terminology = within health data analytics. Prior to version 2.0.0 of Pathling Server, th=
e `$import-pnp` operation in Pathling Server accepts a caller-supplied `exp= ortUrl` and uses it as the remote FHIR Bulk Export endpoint without constra= ining it to a trusted source. When PNP credentials are configured, Pathling=
builds a credentialed bulk-export client targeting the caller-chosen host,=
downloads manifest-selected files, and then reclassifies those staged file=
s as trusted local `file://` imports - bypassing the configured `allowableS= ources` allowlist that protects the ordinary `$import` operation. This is f= ixed in Pathling Server 2.0.0. As a workaround, disable the `$import-pnp` o= peration (`pathling.operations.importPnpEnabled=3Dfalse`) or do not configu=
re PNP credentials. 2026-08-07 not yet calculated CVE-2026-47664 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-47664 ] agentfront--frontmcp FrontMCP i=
s a TypeScript-first framework for the Model Context Protocol (MCP). Prior =
to 1.5.7, the sandboxed codecall:execute=C2=A0tool exposes live host Zod=C2= =A0schema instances to the script via=C2=A0getTool(), and because Zod v4 de= fines=C2=A0_zod as a non-configurable, non-writable own property, the ECMAS= cript Proxy invariants force the security membrane to hand back the raw hos=
t object, letting a script reach=C2=A0_zod.constr.constructor=C2=A0(the hos=
t Function=C2=A0constructor) and execute arbitrary code in the server proce= ss. A single tools/call is sufficient to escape the sandbox and achieve rem= ote code execution as the server user, exposing everything the process hold=
s such as OAuth client secrets, JWT_SECRET, session keys, database credenti= als, and cloud instance metadata. Because the framework's=C2=A0DEFAULT_AUTH= _OPTIONS=C2=A0is public mode, an unconfigured server serves this to unauthe= nticated callers, and on authenticated servers an indirect prompt injection=
in tool output or fetched content can trigger it without a human attackerT= his issue is fixed in version 1.5.7. 2026-08-05 not yet calculated CVE-2026= -67531 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67531 ] AI Engine--AI = Engine The AI Engine WordPress plugin before 3.6.4 does not verify ownershi=
p of a guest's uploaded chatbot files before deletion, authorising the acti=
on solely by a client-supplied session cookie value, so an unauthenticated = attacker who obtains a victim's session identifier and file reference can d= elete that victim's uploaded files. 2026-08-08 not yet calculated CVE-2026-= 16953 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16953 ] AI Engine--AI E= ngine The AI Engine WordPress plugin before 3.6.4 does not redact secret co= nfiguration values before exposing them in an admin page's inline script da= ta, allowing users with the Editor role to read the site's stored third-par=
ty API key and authentication tokens in cleartext, despite those secrets be= ing restricted to administrators everywhere else. 2026-08-06 not yet calcul= ated CVE-2026-16954 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16954 ] A=
I Engine--AI Engine The AI Engine WordPress plugin before 3.6.6 does not co= nfine a caller-supplied file path before reading it and forwarding the cont= ents to an external service, allowing users with a subscriber-level account=
to read arbitrary files from the server and exfiltrate them off-host. Reac= hing the issue at subscriber level requires a non-default public API featur=
e to be enabled; otherwise the same issue is reachable by an administrator,=
which on multisite allows a non-super subsite administrator to read the ne= twork-shared configuration and its secrets. 2026-08-08 not yet calculated C= VE-2026-16955 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16955 ] ail-pro= ject--ail-framework AIL Framework contained a reflected cross-site scriptin=
g vulnerability in the /tag/add_tags endpoint. When an error occurred while=
processing a tag operation, the application returned the error value direc= tly as an HTML response using str(res[0]). If attacker-controlled input was=
included in the generated error message, a crafted request could cause arb= itrary HTML or JavaScript to be reflected in the response without appropria=
te output encoding. An attacker could exploit the vulnerability by convinci=
ng an authenticated AIL Framework user to open a specially crafted link. Su= ccessful exploitation could allow JavaScript to execute in the victim's bro= wser within the security context of the AIL Framework application. Dependin=
g on the victim's privileges and the application's protections, the attacke=
r could perform actions using the victim's session, access information avai= lable to the victim, or modify data through authenticated application reque= sts. The vulnerability requires user interaction because the authenticated = victim must follow or open the crafted request. The attacker does not neces= sarily require an AIL Framework account, provided that the crafted request = can be delivered to an already authenticated user. 2026-08-06 not yet calcu= lated CVE-2026-71445 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71445 ] = ail-project--ail-framework AIL Framework contains a stored cross-site scrip= ting vulnerability in the crawler domain view. Crawled URLs were embedded d= irectly into the JavaScript onclick handler used to display a stored screen= shot, without context-appropriate encoding. An attacker who can cause a spe= cially crafted URL to be recorded in the crawler history can inject JavaScr= ipt syntax into the stored URL value. The payload remains stored by AIL and=
is subsequently included in the domain view. When an authenticated analyst=
clicks the screenshot icon associated with the malicious URL, the injected=
JavaScript executes in the analyst's browser within the security context o=
f the AIL Framework application. Successful exploitation could allow an att= acker to access information available to the analyst's session, modify disp= layed content, or perform application actions using the analyst's privilege=
s. Exploitation requires the victim to interact with the affected screensho=
t entry. The vulnerability was corrected by serializing the crawled URL wit=
h Jinja's tojson filter before inserting it into the JavaScript handler. Th=
is safely escapes characters that could otherwise terminate the JavaScript = string and introduce executable code. 2026-08-06 not yet calculated CVE-202= 6-71446 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71446 ] ail-project--= ail-framework AIL Project contains a stored cross-site scripting vulnerabil= ity in the translation controls displayed for chat messages and forum posts=
. The affected templates inserted message and post identifiers directly int=
o inline JavaScript onclick handlers: onclick=3D"translateMessageToPreferre= dLanguage('{{ message['id'] }}', '{{ mess_id_escape }}', this)" and: onclic= k=3D"translatePostToPreferredLanguage('{{ post['id'] }}', '{{ post_id_escap=
e }}', this)" These values were HTML-template escaped but were not safely e= ncoded for use as JavaScript string literals inside an HTML attribute. A sp= ecially crafted identifier containing quotation marks, escape characters, o=
r other JavaScript syntax could therefore terminate the expected string arg= ument and inject arbitrary JavaScript into the event handler. Because the a= ffected values are associated with indexed chat messages or forum posts, a = malicious value may remain stored by AIL and be rendered whenever an analys=
t accesses the corresponding chat or forum explorer view. Successful exploi= tation requires the victim to click the affected Translate to preferred lan= guage button. The injected code would then execute in the victim's browser = under the security origin of the AIL instance. 2026-08-06 not yet calculate=
d CVE-2026-71447 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71447 ] aio-= libs--aiohttp AIOHTTP is an asynchronous HTTP client/server framework for a= syncio and Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a r= equest smuggling attack relating to WebSocket upgrades. If using the server= -side component, an attacker may be able to execute a request smuggling vul= nerability using an edge case in the WebSocket upgrade procedure. A WebSock=
et upgrade request with a body could cause the parser to switch protocols b= efore the complete request body was received, leaving trailing bytes to be = handled as upgraded-protocol or pipelined data rather than normal HTTP body=
data. This issue is fixed in version 3.14.2. 2026-08-03 not yet calculated=
CVE-2026-69243 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69243 ] aio-l= ibs--aiohttp AIOHTTP is an asynchronous HTTP client/server framework for as= yncio and Python. Prior to 3.14.3, an out-of-bounds heap read could occur i=
n the C response parser while building an error message for a malformed res= ponse. An attacker controlled server, or possibly an accidental response, c= ould trigger a DoS in the client. The vulnerable path was error message con= struction in aiohttp/_http_parser.pyx, where an llhttp error-position point=
er was used to build a snippet for malformed chunked responses and malforme=
d request or response bytes at the buffer end. This issue is fixed in versi=
on 3.14.3. 2026-08-03 not yet calculated CVE-2026-69244 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-69244 ] Ajax Load More--Ajax Load More The Ajax = Load More WordPress plugin before 8.0.1 does not properly sanitise and esca=
pe a parameter before using it in a SQL query, allowing unauthenticated att= ackers to perform time-based blind SQL injection and extract sensitive data=
from the database. 2026-08-05 not yet calculated CVE-2026-15360 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-15360 ] Ajax Search Lite--Ajax Search L= ite The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent th=
e deserialization of untrusted input, allowing unauthenticated attackers to=
perform PHP Object Injection. When a suitable POP chain is present via ano= ther installed Ajax Search Lite WordPress plugin before 4.14.5 or , this ca=
n be leveraged to achieve Remote Code Execution. 2026-08-07 not yet calcula= ted CVE-2026-16258 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16258 ] an= gular--angular Angular is a development platform for building mobile and de= sktop web applications using TypeScript/JavaScript and other languages. Pri=
or to 20.3.27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated = request parameters, allowing semantically distinct HttpClient requests to u=
se the same transfer-cache key and reuse a wrong backend response. This iss=
ue is fixed in versions 20.3.27, 21.2.19, and 22.0.2. 2026-08-03 not yet ca= lculated CVE-2026-68945 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68945=
] angular--angular Angular is a development platform for building mobile a=
nd desktop web applications using TypeScript/JavaScript and other languages=
. Prior to 20.3.27, 21.2.19, and 22.0.7, a Cross-Site Scripting (XSS) vulne= rability exists in @angular/platform-server's DOM emulation dependency (dom= ino) when serializing the content of fallback raw-content elements (<iframe=

, <noembed>, <noframes>, and <noscript>). This issue is fixed in versions = 20.3.27, 21.2.19, and 22.0.7. 2026-08-03 not yet calculated CVE-2026-69149 =

[ https://www.cve.org/CVERecord?id=3DCVE-2026-69149 ] angular--angular Angu= lar is a development platform for building mobile and desktop web applicati= ons using TypeScript/JavaScript and other languages. Prior to 20.3.27, 21.2= .19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-onerror an=
d other i18n-on event-handler attributes, allowing a lower-trust translatio=
n file to replace a static handler with executable JavaScript. This issue i=
s fixed in versions 20.3.27, 21.2.19, and 22.0.1. 2026-08-03 not yet calcul= ated CVE-2026-69151 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69151 ] a= nkitects--anki Anki is a program for creating and reviewing flashcards. Pri=
or to 25.09.3, endpoints in Anki's local HTTP server do not adequately cons= train requested media and built-in data paths, allowing scripts served from=
shared decks, or malicious websites combined with an origin-check bypass, =
to read local files through directory traversal. This issue is fixed in ver= sion 25.09.3. 2026-08-06 not yet calculated CVE-2026-64677 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-64677 ] Apache Software Foundation--Apache An= swer Improper Handling of Length Parameter Inconsistency vulnerability in A= pache Answer. This issue affects Apache Answer: through 2.0.1. Unauthentica= ted attackers can cause a denial of service via a specially crafted Accept-= Language header that triggers excessive CPU consumption during parsing. Use=
rs are recommended to upgrade to version 2.0.2, which fixes the issue. 2026= -08-05 not yet calculated CVE-2026-48834 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-48834 ] Apache Software Foundation--Apache Answer Insufficient = Verification of Data Authenticity vulnerability in Apache Answer. This issu=
e affects Apache Answer: through 2.0.1. A missing authorization check in th=
e external-login email binding flow allows unauthenticated attackers to tak=
e over arbitrary user accounts by tricking victims into clicking a crafted = confirmation link. Users are recommended to upgrade to version 2.0.2, which=
fixes the issue. 2026-08-05 not yet calculated CVE-2026-48911 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-48911 ] Apache Software Foundation--Apach=
e Answer Improper Input Validation vulnerability in Apache Answer. This iss=
ue affects Apache Answer: through 2.0.1. A missing ownership check in the a= vatar-cleanup logic allows any authenticated user to delete other users' up= loaded files by supplying their file URLs. Users are recommended to upgrade=
to version 2.0.2, which fixes the issue. 2026-08-05 not yet calculated CVE= -2026-48912 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48912 ] Apache So= ftware Foundation--Apache Answer Improper Authorization vulnerability in Ap= ache Answer. This issue affects Apache Answer: through 2.0.1. Any authentic= ated user can reject arbitrary pending edit-revisions without review permis= sion due to a missing authorization check on the reject operation. Users ar=
e recommended to upgrade to version 2.0.2, which fixes the issue. 2026-08-0=
5 not yet calculated CVE-2026-50749 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-50749 ] Apache Software Foundation--Apache Answer Exposure of Sensit= ive Information to an Unauthorized Actor vulnerability in Apache Answer. Th=
is issue affects Apache Answer: through 2.0.1. Deleted or pending answers c= ould be retrieved by unauthorized users through the single-answer read path=
when the parent question remained visible, exposing answer content that sh= ould not have been accessible. Users are recommended to upgrade to version = 2.0.2, which fixes the issue. 2026-08-05 not yet calculated CVE-2026-60023 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-60023 ] Apache Software Found= ation--Apache Answer Insufficient Session Expiration vulnerability in Apach=
e Answer. This issue affects Apache Answer: through 2.0.1. Administrative A=
PI keys remained usable after the owning administrator was demoted or the a= ccount was marked inactive, suspended, or deleted, allowing continued acces=
s until the keys were explicitly removed. Users are recommended to upgrade =
to version 2.0.2, which fixes the issue. 2026-08-05 not yet calculated CVE-= 2026-60053 [ https://www.cve.org/CVERecord?id=3DCVE-2026-60053 ] Apache Sof= tware Foundation--Apache CXF Apache CXF allows to control the maximum attac= hment size via the=C2=A0"attachment-max-size". Prior to Apache CXF 4.2.3 an=
d 4.1.8 and 3.6.12, there was no default placed on this size, meaning that =
a denial of service attack is possible if the user doesn't explicitly set t=
he limit. Users should update to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which = fixes this problem by imposing a default attachment size limit of 50mb. 202= 6-08-06 not yet calculated CVE-2026-54225 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-54225 ] Apache Software Foundation--Apache CXF The OpenID Conn= ect Core 1.0 specification mandates that the RP MUST validate the `c_hash` = parameter when operating in the Hybrid Flow.=C2=A0If an Apache CXF RP is in= tegrated with a non-compliant or misconfigured Identity Provider (IdP) that=
omits the `c_hash`, the RP becomes vulnerable to Authorization Code Substi= tution/Injection attacks.=C2=A0Users are recommended to upgrade to versions=
4.2.3 or 4.1.8 or 3.6.12, which fix this issue. 2026-08-06 not yet calcula= ted CVE-2026-57817 [ https://www.cve.org/CVERecord?id=3DCVE-2026-57817 ] Ap= ache Software Foundation--Apache CXF A race condition in JCacheCodeDataProv= ider allows an attacker to redeem a single authorization code multiple time=
s via concurrent requests, resulting in the issuance of multiple distinct, = valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.= 1.8 or 3.6.12, which fix this issue. 2026-08-06 not yet calculated CVE-2026= -57818 [ https://www.cve.org/CVERecord?id=3DCVE-2026-57818 ] Apache Softwar=
e Foundation--Apache CXF Apache CXF allows to set a limit on the number of = form parameters in a JAX-RS message via the "maxFormParameterCount" configu= ration option. However, no default limit is set which may lead to denial of=
service attacks when processing=C2=A0 requests with very large numbers of = form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.=
8 or 3.6.12, which fix this issue by using a default limit of 500 parameter=
s. 2026-08-06 not yet calculated CVE-2026-57819 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-57819 ] Apache Software Foundation--Apache CXF In Apache=
CXF's OAuth2 Dynamic Client Registration endpoint, the authorization serve=
r accepts and stores the `scope` value supplied in the client registration = request verbatim, without validating it against an AS-defined allowlist. Th=
is could lead to a client self-assigning privileged scopes at registration = time. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12=
, which fix this issue. 2026-08-06 not yet calculated CVE-2026-61466 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-61466 ] Apache Software Foundation-= -Apache CXF Apache CXF's JwtRequestCodeFilter copies all claims from a sign=
ed request JWT into the authorization parameter map without excluding secur= ity-sensitive parameters. A client that can produce a validly-signed reques=
t JWT (e.g., one whose client_secret is known or compromised) can thereby s= ubstitute the code_challenge, code_challenge_method, nonce, and state value=
s that were set in the outer HTTP request, undermining PKCE integrity and O= penID Connect replay protection. Users are recommended to upgrade to versio=
ns 4.2.3 or 4.1.8 or 3.6.12, which fix this issue. 2026-08-06 not yet calcu= lated CVE-2026-63687 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63687 ] = Apache Software Foundation--Apache CXF An incomplete fix for=C2=A0CVE-2026-= 50645 means that it is still possible to perform a denial of service attack=
on Apache CXF by sending a message with many attachment headers. Users are=
recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix thi=
s issue. 2026-08-06 not yet calculated CVE-2026-64958 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-64958 ] Apache Software Foundation--Apache CXF Apa= che CXF reads a top-level WSDL through its hardened StaxUtils=C2=A0path, wh= ich disables XML DTDs and external entities. However, any <wsdl:import>=C2= =A0or <xsd:import>=C2=A0referenced from that top-level WSDL is handed off t=
o WSDL4J, which does not=C2=A0disable DOCTYPE declarations or external enti= ties. As a result, the protections applied to the top-level document do not=
extend to imported documents, leaving imported WSDL/XSD content vulnerable=
to XML External Entity (XXE) attacks.=C2=A0Users are recommended to upgrad=
e to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue. 2026-08-06 no=
t yet calculated CVE-2026-65432 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-65432 ] Apache Software Foundation--Apache CXF Apache CXF's OIDC relying= -party token validation could accept self-issued ID tokens without enforcin=
g required claim checks (issuer/subject/audience/time and sub_jwk binding),=
enabling authentication bypass with crafted tokens. However, note that sel= f-issued ID tokens are not accepted by default in the validator. Users are = recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes th=
is issue. 2026-08-06 not yet calculated CVE-2026-65583 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-65583 ] Apache Software Foundation--Apache CXF Ap= ache CXF's JMS transport deserializes the body of any inbound JMS ObjectMes= sage=C2=A0using native Java deserialization, with no type restrictions in p= lace. Any attacker able to place a message on the service's JMS destination=
can submit a malicious serialized object, leading to denial of service or,=
if a suitable gadget class is on the classpath, remote code execution. The=
fix disables ObjectMessage=C2=A0deserialization by default, with a configu= ration switch to re-enable it if needed.=C2=A0Users are recommended to upgr= ade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue. 2026-08-06 = not yet calculated CVE-2026-66909 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-66909 ] Apache Software Foundation--Apache CXF In Apache CXF's Default= EncryptingCodeDataProvider,=C2=A0a captured authorization code can be redee= med an unlimited number of times due to a flaw in the implementation of the= =C2=A0removeCodeGrant functionality. This violates the RFC requirement that= =C2=A0"The authorization code MUST NOT be used more than once." Users are r= ecommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this = issue. 2026-08-06 not yet calculated CVE-2026-68079 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-68079 ] Apache Software Foundation--Apache CXF In Ap= ache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still = decrypt successfully, and TokenIntrospectionService reports active:true. Th=
e same applies to refresh tokens. This violates the RFC stipulations that '= The authorization server MUST invalidate the token.' and 'introspection of =
a revoked token MUST return {"active":false}'. Users are recommended to upg= rade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue. 2026-08-06=
not yet calculated CVE-2026-68481 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-68481 ] Apache Software Foundation--Apache Fory Heap type confusion v= ulnerability in Apache Fory C++ deserialization. This issue affects Apache = Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can byp= ass type compatibility checks during polymorphic smart-pointer deserializat= ion, causing an object of an incompatible type to be treated as the declare=
d base type. This may result in undefined behavior and potentially lead to = denial of service or arbitrary code execution. Users are recommended to upg= rade to Apache Fory 1.5.0, which fixes this issue. Applications not using A= pache Fory C++ polymorphic smart-pointer deserialization are not affected. = 2026-08-07 not yet calculated CVE-2026-71558 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-71558 ] Apache Software Foundation--Apache Fory Deserializa= tion of Untrusted Data vulnerability in the Go implementation of Apache For=
y allows an attacker to cause a denial of service by supplying crafted data=
containing malformed type metadata, which triggers an uncaught panic. This=
issue affects Apache Fory: from 0.16.0 before 1.5.0.=C2=A0 Users of other = language implementations are not affected. Users are recommended to upgrade=
to version 1.5.0, which fixes the issue. 2026-08-07 not yet calculated CVE= -2026-71559 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71559 ] Apache So= ftware Foundation--Apache Fory Out-of-bounds Read vulnerability in Apache F= ory C++ deserialization. This issue affects Apache Fory C++ versions from 0= .14.0 before 1.5.0 when deserializing structs containing tagged integer fie= lds. A crafted input payload may trigger an out-of-bounds heap read in the = tagged integer fast-path deserializer, potentially causing information disc= losure or denial of service. Users are recommended to upgrade to Apache For=
y 1.5.0, which fixes this issue. Applications that do not use Apache Fory C=
++ or do not use tagged integer fields are not affected. 2026-08-07 not yet=
calculated CVE-2026-71560 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71= 560 ] Apache Software Foundation--Apache Jena Fuseki Improper Limitation of=
a Pathname to a Restricted Directory ('Path Traversal') vulnerability in A= pache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Us= ers are recommended to upgrade to version 6.2.0, which fixes the issue. 202= 6-08-03 not yet calculated CVE-2026-61372 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-61372 ] Apache Software Foundation--Apache NiFi Authorization = handling for Parameter Context validation requests in Apache NiFi 1.10.0 th= rough 2.10.0 allows clients with read access to submit proposed Parameter v= alues. The proposed values override current configuration, enabling users w= ith read access to invoke predefined component validation methods with alte= rnative settings. Apache NiFi installations that do not implement different=
levels of authorization for viewing and modifying Parameter Context config= uration are not subject to this vulnerability. Upgrading to Apache NiFi 2.1= 1.0 is the recommended mitigation, requiring write access to submit Paramet=
er Context validation requests. 2026-08-03 not yet calculated CVE-2026-6235=
4 [ https://www.cve.org/CVERecord?id=3DCVE-2026-62354 ] Apache Software Fou= ndation--Apache NiFi Apache NiFI 1.10.0 through 2.10.0 provide a Parameter = Context update REST API method that does not enforce authorization checking=
on components referencing Parameter values. Updating a Parameter Context c=
an change parameter values that affect referencing components, but framewor=
k authorization was limited to read and write privileges on the Parameter C= ontext itself. As a result of the missing authorization, an authenticated u= ser authorized to modify a Parameter Context, but not authorized on referen= cing components, could alter Parameter values affecting those components. I=
n deployments where a Parameter value contains executable scripting content=
, updating a Parameter can result in code execution during automatic compon= ent validation, without starting the referencing component. The impact was = limited to stopped components by existing verification checks, and the issu=
e applies only to deployments that use component-level authorization polici= es. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which al= igns the Parameter Context update method authorization with other methods, = adding authorization checking on affected components. 2026-08-03 not yet ca= lculated CVE-2026-68979 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68979=
] Apache Software Foundation--Apache NiFi Apache NiFi 2.0.0 through 2.10.0=
support creating, reading, and deleting Assets associated with Parameter C= ontexts through the REST API. The framework authorizes asset deletion again=
st the owning Parameter Context using the supplied Parameter Context Identi= fier and Asset Identifier. The framework performed authorized based on the = supplied Parameter Context Identifier without verifying the requested Ident= ifier against the stored Identifier. Apache NiFi installations that do not = implement different levels of authorization across Parameter Contexts are n=
ot subject to this vulnerability, because the framework enforces write perm= issions as the security boundary. Upgrading to Apache NiFi 2.11.0 is the re= commended mitigation, which verifies Parameter Context ownership of the req= uested Asset before deletion using the same strategy applied to Asset read = operations. 2026-08-03 not yet calculated CVE-2026-68980 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-68980 ] Apache Software Foundation--Apache NiFi=
Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for th=
e application REST API using a Jersey encoding filter. The framework enforc=
ed a configurable maximum request size on the compressed payload rather tha=
n the decompressed output, allowing a malicious client to send crafted requ= ests that could consume excessive amounts of memory. Upgrading to Apache Ni=
Fi 2.11.0 is the recommended mitigation, which relocates response compressi=
on to Jetty Server and disables decompression of gzip-encoded HTTP requests=
. 2026-08-03 not yet calculated CVE-2026-68981 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-68981 ] Apache Software Foundation--Apache Polaris Apache=
Polaris did not consistently validate storage locations supplied during ta= ble and view registration. An authenticated principal with permission to re= gister a table or view could, depending on the affected release and registr= ation path, cause Polaris to use the catalog's storage credentials to read =
a caller-selected Iceberg metadata file before verifying that the file was = within the catalog's allowed storage locations. If the catalog's underlying=
credentials could read an object outside=C2=A0that boundary, this could di= sclose limited information from the object. Polaris could also accept regis= tration metadata located within an allowed location that contained referenc=
es to storage locations outside the allowed boundary. This second condition=
did not itself cause Polaris to read the=C2=A0referenced external location=
s during registration. The demonstrated impact is limited to confidentialit=
y. No unauthorized data=C2=A0modification or availability impact has been d= emonstrated. The server-side read requires a deployment using S3 credential=
vending and an object outside the allowed locations that the catalog's und= erlying storage credentials can read. Exploitation requires an authenticate=
d principal with=C2=A0table- or view-registration privileges. 2026-08-06 no=
t yet calculated CVE-2026-64640 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-64640 ] Apache Software Foundation--Apache Portable Runtime Utility APR-= util versions 1.6.3 (and earlier) function apr_password_validate() was not = constant-time with regards to hashes or passwords comparisons, potentially = leaking their content via a side channel timing attack particularly on plat= forms without crypt() such as=C2=A0=C2=A0Windows, BeOS, NetWare, or Android=
. Users are recommended to upgrade to version 1.6.4, which fixes this issue=
. 2026-08-06 not yet calculated CVE-2025-49506 [ https://www.cve.org/CVERec= ord?id=3DCVE-2025-49506 ] Apache Software Foundation--Apache Portable Runti=
me Utility A bug in APR-util version 1.6.3 (and earlier) allows a stack rec= ursion attack against any library consumer which parses XML from untrusted = sources and uses the=C2=A0apr_xml_quote_elem() function. Users are recommen= ded to upgrade to version 1.6.4, which fixes this issue. 2026-08-06 not yet=
calculated CVE-2026-32327 [ https://www.cve.org/CVERecord?id=3DCVE-2026-32= 327 ] Apache Software Foundation--Apache Portable Runtime Utility Improper = Neutralization of Special Elements used in an SQL Command ('SQL Injection')=
vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provid= er. This issue affects Apache Portable Runtime Utility: from 1.6.0 through = 1.6.3 2026-08-06 not yet calculated CVE-2026-34191 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-34191 ] Apache Software Foundation--Apache Portable R= untime Utility Heap-based Buffer Overflow vulnerability in Apache Portable = Runtime Utility redis client. This issue affects Apache Portable Runtime Ut= ility: from 1.6.0 through 1.6.3. Users are recommended to upgrade to versio=
n 1.6.4, which fixes the issue. 2026-08-06 not yet calculated CVE-2026-3450=
1 [ https://www.cve.org/CVERecord?id=3DCVE-2026-34501 ] Apache Software Fou= ndation--Apache Portable Runtime Utility Heap-based Buffer Overflow vulnera= bility in Apache Portable Runtime Utility memcached client This issue affec=
ts Apache Portable Runtime Utility: from 1.3.0 through 1.6.3. 2026-08-06 no=
t yet calculated CVE-2026-34502 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-34502 ] Apache Software Foundation--Apache Qpid Broker-J A pre-authentic= ation attacker could leverage type size/count handling to cause excessive a= llocation leading to potential denial of service. This issue affects Apache=
Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version=
10.1.0, which fixes the issue. 2026-08-05 not yet calculated CVE-2026-6806=
0 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68060 ] Apache Software Fou= ndation--Apache Qpid Broker-J A pre-authentication attacker could leverage = type nesting to cause a StackOverflowError potentially leading to denial of=
service. This issue affects Apache Qpid Broker-J: through 10.0.1. Users ar=
e recommended to upgrade to version 10.1.0, which fixes the issue. 2026-08-=
05 not yet calculated CVE-2026-68073 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-68073 ] Apache Software Foundation--Apache Qpid Broker-J A pre-auth= entication attacker could leverage unbounded symbol value caching to cause = resource exhaustion leading to denial of service. This issue affects Apache=
Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version=
10.1.0, which fixes the issue. 2026-08-05 not yet calculated CVE-2026-6807=
4 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68074 ] Apache Software Fou= ndation--Apache Qpid Broker-J An authenticated attacker could exceed the se= ssion flow control incoming window potentially leading to denial of service=
. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are recomm= ended to upgrade to version 10.1.0, which fixes the issue. 2026-08-05 not y=
et calculated CVE-2026-68075 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 68075 ] Apache Software Foundation--Apache Qpid Broker-J An authenticated a= ttacker can craft a disposition frame with large or illegal ranges causing = excessive CPU usage due to naive range handling, leading to denial of servi= ce. This issue affects Apache Qpid Broker-J: through 10.0.1. Users are reco= mmended to upgrade to version 10.1.0, which fixes the issue. 2026-08-05 not=
yet calculated CVE-2026-68077 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-68077 ] Apache Software Foundation--Apache Qpid Broker-J It was not possi= ble to govern the maximum number of transfer frames per incoming delivery, = enabling an authenticated attacker to cause excessive resource usage and po= tential denial of service. This issue affects Apache Qpid Broker-J: through=
10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes th=
e issue. 2026-08-05 not yet calculated CVE-2026-68078 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-68078 ] Apache Software Foundation--Apache Qpid Br= oker-J It was not possible to govern the rate at which the broker would res= pond to an echo flow, enabling an authenticated attacker to cause excessive=
resource usage and potential denial of service. This issue affects Apache = Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to version = 10.1.0, which fixes the issue. 2026-08-05 not yet calculated CVE-2026-68080=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-68080 ] Apache Software Foun= dation--Apache Qpid Proton Dotnet A pre-authentication attacker could lever= age unbounded symbol value caching to cause resource exhaustion leading to = denial of service. This issue affects Apache Qpid Proton-Dotnet: through 1.= 0.0. Users are recommended to upgrade to version 1.1.0, which fixes the iss= ue. 2026-08-05 not yet calculated CVE-2026-67465 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-67465 ] Apache Software Foundation--Apache Qpid Proton = Dotnet pre-authentication attacker could leverage type size/count handling =
to cause excessive allocation leading to potential denial of service. This = issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommend=
ed to upgrade to version 1.1.0, which fixes the issue. 2026-08-05 not yet c= alculated CVE-2026-67551 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6755=
1 ] Apache Software Foundation--Apache Qpid Proton Dotnet A pre-authenticat= ion attacker could leverage type nesting to cause a StackOverflowError pote= ntially leading to denial of service. This issue affects Apache Qpid Proton= -Dotnet through 1.0.0. Users are recommended to upgrade to version 1.1.0, w= hich fixes the issue 2026-08-05 not yet calculated CVE-2026-67552 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-67552 ] Apache Software Foundation--Ap= ache Qpid Proton Dotnet An authenticated attacker could exceed the session = flow control incoming window potentially leading to denial of service. This=
issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommen= ded to upgrade to version 1.1.0, which fixes the issue. 2026-08-05 not yet = calculated CVE-2026-67553 [ https://www.cve.org/CVERecord?id=3DCVE-2026-675=
53 ] Apache Software Foundation--Apache Qpid Proton Dotnet An authenticated=
attacker can craft a disposition frame with large or illegal ranges causin=
g excessive CPU usage due to naive range handling, leading to denial of ser= vice. This issue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users ar=
e recommended to upgrade to version 1.1.0, which fixes the issue. 2026-08-0=
5 not yet calculated CVE-2026-67554 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-67554 ] Apache Software Foundation--Apache Qpid Proton Dotnet It was=
not possible to govern the maximum number of transfer frames per incoming = delivery, enabling an authenticated attacker to cause excessive resource us= age and potential denial of service This issue affects Apache Qpid Proton-D= otnet: through 1.0.0. Users are recommended to upgrade to version 1.1.0, wh= ich fixes the issue. 2026-08-05 not yet calculated CVE-2026-67555 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-67555 ] Apache Software Foundation--Ap= ache Qpid Proton-J A pre-authentication attacker could leverage unbounded s= ymbol value caching to cause resource exhaustion leading to denial of servi= ce. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are reco= mmended to upgrade to version 0.35.0, which fixes the issue. 2026-08-05 not=
yet calculated CVE-2026-66257 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-66257 ] Apache Software Foundation--Apache Qpid Proton-J A pre-authentica= tion attacker could leverage type size/count handling to cause excessive al= location leading to potential denial of service. This issue affects Apache = Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to version = 0.35.0, which fixes the issue. 2026-08-05 not yet calculated CVE-2026-66273=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-66273 ] Apache Software Foun= dation--Apache Qpid Proton-J A pre-authentication attacker could leverage t= ype nesting to cause a StackOverflowError potentially leading to denial of = service. This issue affects Apache Qpid Proton-J: through 0.34.1. Users are=
recommended to upgrade to version 0.35.0, which fixes the issue. 2026-08-0=
5 not yet calculated CVE-2026-66274 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-66274 ] Apache Software Foundation--Apache Qpid Proton-J An authenti= cated attacker could exceed the session flow control incoming window potent= ially leading to denial of service. This issue affects Apache Qpid Proton-J=
: through 0.34.1. Users are recommended to upgrade to version 0.35.0, which=
fixes the issue. 2026-08-05 not yet calculated CVE-2026-66275 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-66275 ] Apache Software Foundation--Apach=
e Qpid Proton-J An authenticated attacker can craft a disposition frame wit=
h large or illegal ranges causing excessive CPU usage due to naive range ha= ndling, leading to denial of service. This issue affects Apache Qpid Proton= -J: through 0.34.1. Users are recommended to upgrade to version 0.35.0, whi=
ch fixes the issue. 2026-08-05 not yet calculated CVE-2026-66276 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-66276 ] Apache Software Foundation--Apa= che Qpid Proton-J It was not possible to govern the maximum number of trans= fer frames per incoming delivery, enabling an authenticated attacker to cau=
se excessive resource usage and potential denial of service. This issue aff= ects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade=
to version 0.35.0, which fixes the issue. 2026-08-05 not yet calculated CV= E-2026-66277 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66277 ] Apache S= oftware Foundation--Apache Qpid ProtonJ2 A pre-authentication attacker coul=
d leverage unbounded symbol value caching to cause resource exhaustion lead= ing to denial of service. This issue affects Apache Qpid ProtonJ2: through = 1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the i= ssue. 2026-08-05 not yet calculated CVE-2026-67588 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-67588 ] Apache Software Foundation--Apache Qpid Proto= nJ2 A pre-authentication attacker could leverage type size/count handling t=
o cause excessive allocation leading to potential denial of service. This i= ssue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to = upgrade to version 1.2.0, which fixes the issue. 2026-08-05 not yet calcula= ted CVE-2026-67589 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67589 ] Ap= ache Software Foundation--Apache Qpid ProtonJ2 A pre-authentication attacke=
r could leverage type nesting to cause a StackOverflowError potentially lea= ding to denial of service. This issue affects Apache Qpid ProtonJ2: through=
1.1.0. Users are recommended to upgrade to version 1.2.0, which fixes the = issue. 2026-08-05 not yet calculated CVE-2026-67590 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-67590 ] Apache Software Foundation--Apache Qpid Prot= onJ2 An authenticated attacker could exceed the session flow control incomi=
ng window potentially leading to denial of service. This issue affects Apac=
he Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to versio=
n 1.2.0, which fixes the issue. 2026-08-05 not yet calculated CVE-2026-6759=
1 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67591 ] Apache Software Fou= ndation--Apache Qpid ProtonJ2 It was not possible to govern the maximum num= ber of transfer frames per incoming delivery, enabling an authenticated att= acker to cause excessive resource usage and potential denial of service. Th=
is issue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended=
to upgrade to version 1.2.0, which fixes the issue 2026-08-05 not yet calc= ulated CVE-2026-67592 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67592 ]=
Apple--macOS An authentication issue was addressed with improved state man= agement. This issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, = macOS Tahoe 26.6.1. An attacker on the network may be able to authenticate =
to Screen Sharing without valid credentials. 2026-08-06 not yet calculated = CVE-2026-65400 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65400 ] Appoin= tment Hour Booking--Appointment Hour Booking The Appointment Hour Booking W= ordPress plugin before 1.5.88 does not validate a client-supplied booking p= rice against the server-side configured service price, allowing unauthentic= ated users to submit an arbitrary final price (including zero or negative) = that is stored as the authoritative booking price, corrupting booking and p= ayment records. 2026-08-08 not yet calculated CVE-2026-16282 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-16282 ] ash-project--ash Uncontrolled Resou= rce Consumption vulnerability in ash-project ash allows an attacker to exha= ust the memory of the node via a crafted keyset pagination cursor. Read act= ions with keyset pagination deserialize the client-supplied page[:after] or=
page[:before] cursor in decode_values/2 in lib/ash/page/keyset.ex, which b= ase64-decodes the value and passes it to :erlang.binary_to_term/2 without b= ounding its size. The Erlang external term format supports zlib-compressed = payloads, which the decoder inflates transparently, so a cursor of a few ki= lobytes can allocate tens of megabytes of heap in a single call. Ash itself=
only ever encodes cursors uncompressed, so the decoder accepts a term shap=
e its encoder never produces. Concurrent requests aggregate these allocatio=
ns and can terminate the node. This issue affects ash: from 1.17.0 before 3= .31.1. 2026-08-09 not yet calculated CVE-2026-69659 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-69659 ] ash-project--ash Improper Neutralization of = Special Elements in Data Query Logic vulnerability in ash-project ash allow=
s an attacker to forge a relationship to a record they cannot name, and to = recover the secret value used to look it up. When manage_relationship is us=
ed with on_lookup: :relate on a belongs_to relationship, the client-supplie=
d lookup value is passed to Ash.Query.filter/2 without being cast to the at= tribute type. A nested map submitted where a scalar is expected is therefor=
e interpreted as a filter predicate rather than a literal, so a lookup for =
a specific record becomes a query for any record matching a condition. The = same path omits Ash.Query.limit(1), leaving Ash.read_one/2 able to distingu= ish no match from one match from several, which turns comparison predicates=
into an oracle for the lookup value. Authorization is unaffected; the dest= ination read policy still applies. This issue affects ash: from 1.52.0-rc.1=
1 before 3.31.1. 2026-08-09 not yet calculated CVE-2026-70395 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-70395 ] ASUSTOR Inc.--ABP The background s= ervice of ABP or AES runs as NT AUTHORITY\SYSTEM and implements a file-base=
d inter-process communication (IPC) mechanism protected by AES encryption. = Because the encryption key file is readable by standard users and protected=
using DPAPI. Any authenticated local user can recover the key and forge va= lid IPC requests. Furthermore, the service does not check the identity of t=
he requesting process and validates destination paths using an insufficient=
substring check. A local attacker can submit crafted encrypted requests co= ntaining directory traversal sequences to perform arbitrary file reads and = arbitrary file writes as NT AUTHORITY\SYSTEM, leading to full local privile=
ge escalation. Affected products and versions include: ABP (ASUSTOR Backup = Plan) 2.0.7.10171 and earlier as well as AES (ASUSTOR EZSync) 1.1.1.3113 an=
d earlier. 2026-08-04 not yet calculated CVE-2026-18759 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-18759 ] beaugunderson--ip-address ip-address is =
a library for parsing and manipulating IPv4 and IPv6 addresses in JavaScrip=
t. Prior to 10.3.1, Address4 accepts an octet written with a leading zero a=
nd decodes it as decimal, while the WHATWG URL host parser, inet_aton, and = getaddrinfo all decode a leading zero as octal. The library and the network=
stack therefore disagree about which host a string names. new Address4('01= 2.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate() of false, but f= etch('http://012.0.0.1/') connects to 10.0.0.1. An application that builds =
a network trust-boundary decision on these checks, for example a filter int= ended to block Server-Side Request Forgery, or SSRF, will classify an inter= nal target as external and allow the request. The defect is in the parse ga=
te rather than in any one classifier, so every consumer of Address4 inherit=
s it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT(), isInSubnet(), is= HostInSubnet(), and correctForm() are all computed from the mis-decoded oct= ets. This issue is fixed in version 10.3.1. 2026-08-03 not yet calculated C= VE-2026-69192 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69192 ] beaugun= derson--ip-address ip-address is a library for parsing and manipulating IPv=
4 and IPv6 addresses in JavaScript. From 10.1.1 until 10.2.2, every special= -use classification method is built on isInSubnet, which short-circuits to = false whenever the address's own subnet mask is shorter than the reference = range's mask. That mask comes verbatim from the CIDR suffix on the parsed i= nput, so appending a suffix such as /0 suppresses classification entirely: = isLoopback(), isPrivate(), isLinkLocal(), isCGNAT(), isMulticast(), isUnspe= cified(), isBroadcast(), isULA(), and getType() all report an internal addr= ess as unremarkable, while correctForm() and address still return the real = internal target. An application that builds a network trust-boundary decisi=
on on these checks, for example a filter intended to block Server-Side Requ= est Forgery, or SSRF, may therefore treat an internal target as external an=
d allow the request. The underlying bit comparison is correct, and mask(n) = already returns the first n bits of the full parsed address independently o=
f subnetMask; the defect is solely that the containment guard sits in the c= lassification path. This issue is fixed in version 10.2.2. 2026-08-03 not y=
et calculated CVE-2026-69198 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 69198 ] Bit Form--Bit Form The Bit Form WordPress plugin before 3.2.0 does = not sanitize an uploaded signature image before storing it, allowing unauth= enticated attackers to upload a crafted SVG file containing JavaScript that=
executes when the file is viewed, leading to Stored Cross-Site Scripting. = 2026-08-05 not yet calculated CVE-2026-16573 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-16573 ] Blog Floating Button--Blog Floating Button The Blog=
Floating Button WordPress plugin through 1.4.20 does not sanitize or escap=
e the visitor User-Agent header, which it stores through an unauthenticated=
tracking REST endpoint and later renders unescaped in an administrator rep= ort page. This allows an unauthenticated attacker to store a malicious scri=
pt that executes in the session of any administrator who views the access r= eport, leading to site takeover. 2026-08-03 not yet calculated CVE-2026-153=
83 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15383 ] BNE Testimonials--= BNE Testimonials The BNE Testimonials WordPress plugin before 2.0.8.2 does = not properly escape a shortcode attribute for a JavaScript context before e= choing it into an inline script, allowing users with the contributor role a=
nd above to inject arbitrary JavaScript that executes in the browser of any= one viewing the affected content. 2026-08-07 not yet calculated CVE-2026-15= 245 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15245 ] Brizy--Brizy The = Brizy WordPress plugin before 2.8.19 does not properly restrict who can mod= ify its site-global design data and does not sanitise part of that data bef= ore outputting it, allowing authenticated users with Author-level access an=
d above to store arbitrary JavaScript that is then served unsanitised on th=
e site's front-end pages and executes in the browser of every visitor, incl= uding administrators. 2026-08-04 not yet calculated CVE-2026-16068 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-16068 ] Brizy--Brizy The Brizy WordPr= ess plugin before 2.8.19 does not sanitize or escape featured-image focal-p= oint coordinates submitted through one of its AJAX actions before storing t= hem and later echoing them into HTML attributes in the post editor's Featur=
ed Image meta box, allowing users with the Contributor role or above to inj= ect arbitrary web scripts that execute in the session of a higher-privilege=
d user who opens the post for review. 2026-08-04 not yet calculated CVE-202= 6-16069 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16069 ] Brizy--Brizy = The Brizy WordPress plugin before 2.8.19 does not properly verify authoriza= tion on the object being modified before updating a template's type meta, v= alidating a request parameter that is different from the one used in the wr= ite operation, allowing users with Contributor-level access and above to ch= ange the template-type assignment of templates owned by other users. 2026-0= 8-04 not yet calculated CVE-2026-16070 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-16070 ] Caliptra--Core ROM Time-of-check time-of-use (TOCTOU) v= ulnerability combined with missing input validation in Caliptra Core ROM (U= pdateResetFlow::run()) in subsystem mode allows a compromised local attacke=
r to silently bypass secure boot by supplying an AXI staging address that i=
s not validated against the strap-configured SS_EXTERNAL_STAGING_AREA_BASE_= ADDR, enabling firmware to be modified between verification and loading int=
o ICCM. Attestation continues to report the originally verified image diges=
t, masking the compromise. Exploitation requires a compromised MCU firmware=
with AXI manager access to unprotected SRAM reachable by Caliptra. This is= sue affects Core ROM: 2.1.0 through 2.1.1. 2026-08-04 not yet calculated CV= E-2026-11835 [ https://www.cve.org/CVERecord?id=3DCVE-2026-11835 ] Caliptra= --Core ROM Insufficient verification of data authenticity in Caliptra Core = ROM and Core Firmware (validate_debug_unlock_token()) in subsystem mode all= ows an attacker with access to the integrator's debug unlock signing servic=
e to unlock production debug on an unintended device by presenting a valid = token issued for a different device sharing the same debug unlock key hash.=
The 384-bit challenge nonce continues to prevent replay of previously issu=
ed tokens. Practical impact is limited to loss of per-device scope enforcem= ent within a set of devices that share the same unlock authority by design;=
it does not enable debug unlock on devices outside that set. This issue af= fects Core ROM: 2.0.0 through 2.0.2, 2.1.0 through 2.1.1; Core Firmware: 2.= 0.0 through 2.0.1, 2.1.0. 2026-08-04 not yet calculated CVE-2026-11836 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-11836 ] ChamaWP--ChamaWP The Cham= aWP WordPress plugin before 1.0.13 does not properly validate user input be= fore passing it to a PHP deserialization function, allowing unauthenticated=
attackers to inject arbitrary PHP objects, which could lead to remote code=
execution when a suitable gadget chain is present via other installed code=
. 2026-08-03 not yet calculated CVE-2025-15672 [ https://www.cve.org/CVERec= ord?id=3DCVE-2025-15672 ] ChamaWP--ChamaWP The ChamaWP WordPress plugin bef= ore 1.0.13 does not properly validate a password reset request, allowing un= authenticated attackers to reset the password of arbitrary users, including=
administrators, which could lead to a full site takeover. 2026-08-03 not y=
et calculated CVE-2026-16300 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 16300 ] Chat Widget: Floating Customer Support Button for 30+ Channels, Sup= porting SMS, Calls, and Chat--Chat Widget: Floating Customer Support Button=
for 30+ Channels, Supporting SMS, Calls, and Chat The Chat Widget: Floatin=
g Customer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat=
WordPress plugin before 1.8.2 does not validate the type, extension, conte= nt, or size of files submitted to its public response endpoint and stores t= hem under the uploads directory, so an unauthenticated user can upload arbi= trary files. The original extension is discarded (files are stored under a = bare UUID), so this does not yield code execution or stored XSS; impact is = bounded to disk consumption and content hosting. The storing path requires = the channel's response storage or mail-forwarding to be configured. 2026-08= -04 not yet calculated CVE-2026-16548 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-16548 ] Checkimate WooCommerce Checkout, Abandoned Cart Recovery &=
Order Bumps--Checkimate WooCommerce Checkout, Abandoned Cart Recovery & Or= der Bumps The Checkimate - WooCommerce Checkout, Abandoned Cart Recovery & = Order Bumps WordPress plugin through 1.0.13 does not properly restrict acce=
ss to its license-management functionality, relying on a shared secret comp= uted entirely from publicly available information, allowing unauthenticated=
attackers to deactivate the Checkimate - WooCommerce Checkout, Abandoned C= art Recovery & Order Bumps WordPress plugin through 1.0.13's premium licens= ing state and erase the stored license key. 2026-08-06 not yet calculated C= VE-2026-14829 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14829 ] checkpo= int--Security Management Server An authentication bypass vulnerability in C= heck Point Security Management Server and Multi-Domain Security Management = Server (MDS) could allow an unauthenticated remote attacker with network ac= cess to Management services to execute arbitrary commands on the Security M= anagement Server. Successful exploitation could result in full compromise o=
f the Security Management system. Check Point discovered this issue interna= lly and has no indication of active exploitation. 2026-08-03 not yet calcul= ated CVE-2026-18574 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18574 ] C= hild Pages Card--Child Pages Card The Child Pages Card WordPress plugin bef= ore 1.09 does not sanitise and escape some of its shortcode attributes befo=
re outputting them back in a page, allowing users with the contributor role=
and above to perform Stored Cross-Site Scripting attacks. 2026-08-06 not y=
et calculated CVE-2026-18395 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 18395 ] CJCOLLIER--Google::Auth Google::Auth versions before 0.09 for Perl = allow server side request forgery and credential exfiltration via unvalidat=
ed URLs taken from the credentials JSON. The URLs the library requests are = read from the credentials JSON, and their hosts were not checked against th=
e universe domain before the request. For an external_account configuration=
, retrieve_subject_token fetched credential_source.url with headers from th=
e same JSON, and fetch_access_token posted the subject token to token_url, = then sent the STS access token it received to service_account_impersonation= _url in an Authorization: Bearer header. The authorized_user, impersonated_= service_account and service_account configurations posted the client secret=
and refresh token, the source access token, and a signed JWT assertion to = their own JSON-supplied token_uri or impersonation URL. Any caller that bui= lds credentials from a configuration it does not fully control issues those=
requests from the application's network position, reaching hosts the confi= guration names, including internal services and link-local metadata endpoin= ts, and hands them the credentials each request carries. The service_accoun=
t assertion is bound to aud, so it is not replayable against Google. Versio=
n 0.06 added a _validate_url host check to the external_account class, keye=
d on a universe_domain read from the same credentials JSON. Version 0.07 ga= ted a JSON-supplied universe domain behind GOOGLE_EXTERNAL_ACCOUNT_ALLOW_CU= STOM_UNIVERSES=3D1, deriving the pin flag from arguments that an earlier BU= ILDARGS pass had already merged on the make_creds path. Version 0.08 passed=
the pin decision through as an explicit constructor argument and moved _va= lidate_url to Google::Auth::Credentials, adding the call to UserRefreshCred= entials and ImpersonatedServiceAccountCredentials, and 0.09 added it to Ser= viceAccountCredentials. 2026-08-04 not yet calculated CVE-2026-66901 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-66901 ] CJCOLLIER--Google::Auth Goo= gle::Auth versions before 0.06 for Perl run a command named in an external_= account credentials JSON via an ungated system call. The Pluggable subclass=
reads credential_source.executable.command from the credentials JSON and r= uns it as `system($command)`, a single argument call that passes the whole = string to /bin/sh -c. The executable's environment_variables map from the s= ame JSON is copied into %ENV first. No opt-in gate guards the call. make_cr= eds selects the Pluggable subclass whenever credential_source.executable is=
present, so the path is reached from the standard Application Default Cred= entials flow, including a "type": "external_account" configuration read fro=
m the file named by GOOGLE_APPLICATION_CREDENTIALS. Configurations without = credential_source.executable do not select this subclass and do not reach t=
he call. Any caller that builds credentials from a configuration it does no=
t fully control runs the embedded command with the privileges of the applic= ation process. 2026-08-04 not yet calculated CVE-2026-66902 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-66902 ] Classified Listing--Classified Listi=
ng The Classified Listing WordPress plugin before 5.4.4 does not perform a = capability or ownership check on an AJAX action that returns a post's conte= nt, allowing users with contributor-level access and above to read the cont= ent of any post, page, or custom post type on the site - including drafts, = pending, and private posts owned by other users - regardless of ownership. = 2026-08-03 not yet calculated CVE-2026-16274 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-16274 ] Classified Listing--Classified Listing The Classifi=
ed Listing WordPress plugin before 5.4.4 does not perform a capability chec=
k on an AJAX action that returns aggregated store revenue totals, allowing = users with contributor-level access and above to read daily revenue figures=
normally restricted to administrators and report managers. 2026-08-03 not = yet calculated CVE-2026-16276 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -16276 ] Clearfy Cache--Clearfy Cache The Clearfy Cache WordPress plugin be= fore 2.4.3 does not perform a capability check in one of its admin-page dis= patch paths, allowing any authenticated user such as a Subscriber to render=
admin-only settings pages and disclose their contents, including administr= ative nonces, while the canonical page URL correctly restricts access. 2026= -08-04 not yet calculated CVE-2026-16295 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-16295 ] Clearfy Cache--Clearfy Cache The Clearfy Cache WordPres=
s plugin before 2.4.3 does not validate the redirect target in its Cyrliter=
a old-URL redirect handler, passing a decoded request URI to an unsafe redi= rect function, which allows unauthenticated attackers to redirect visitors =
to an arbitrary external URL when a non-default option is enabled. 2026-08-=
04 not yet calculated CVE-2026-16296 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-16296 ] Clearfy Cache--Clearfy Cache The Clearfy Cache WordPress pl= ugin before 2.4.3 does not restrict the classes allowed when unserializing = settings-import data, allowing users with administrator access to perform P=
HP Object Injection attacks, which may lead to remote code execution when a=
suitable gadget chain is present in the environment. 2026-08-03 not yet ca= lculated CVE-2026-16297 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16297=
] cli--cli GitHub CLI (gh) is GitHub's official command line tool. Prior t=
o 2.97.0, some HTTP request URLs interpolate variable path components witho=
ut percent encoding, allowing URL path metacharacters in attacker-controlle=
d repository or resource values to make gh address a different API endpoint=
or resource than the user intended. This issue is fixed in version 2.97.0.=
2026-08-06 not yet calculated CVE-2026-64653 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-64653 ] cli--cli GitHub CLI (gh) is GitHub's official comm= and line tool. Prior to version 2.97.0, multiple GitHub CLI commands printe=
d externally controlled gist, API, pull request, release, codespace, skill,=
or agent-task content without neutralizing terminal escape sequences. An a= ttacker who can influence that content can embed escape sequences that are = interpreted by the terminal of a user who runs an affected command, with im= pact ranging from cosmetic manipulation of the title or on-screen content t=
o, on some terminal emulators, command execution. This extends the same cla=
ss of issue as CVE-2026-45803-which addressed only gh run view --log-to the=
other affected command paths. This issue is fixed in version 2.97.0. 2026-= 08-06 not yet calculated CVE-2026-64654 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-64654 ] cli--cli GitHub CLI (gh) is GitHub's official command l= ine tool. Prior to 2.97.0, gh attestation verify=C2=A0 builds the certifica=
te Subject Alternative Name matcher from the --signer-repo and --signer-wor= kflow=C2=A0 flag values without escaping regex metacharacters, so a user-su= pplied repository or workflow name is treated as a regular expression rathe=
r than a literal string. Because GitHub permits characters such as =C2=A0`.= `=C2=A0 in organization, repository, and workflow path names and =C2=A0`.`= =C2=A0 is a regex wildcard, an attacker can register a lookalike name (for = example=C2=A0github/artifact.attestations-workflows) that satisfies a match=
er intended for a different trusted signer (github/artifact-attestations-wo= rkflows), bypassing the intended Sigstore attestation verification. Exploit= ation requires the attacker to create a plausible lookalike repository and = produce valid attestations from it, which could undermine supply chain veri= fication for CI/CD pipelines or policy gates that pin trust to a specific s= igning workflow. This issue is fixed in version 2.97.0. 2026-08-06 not yet = calculated CVE-2026-64655 [ https://www.cve.org/CVERecord?id=3DCVE-2026-646=
55 ] Comments--Comments The Comments WordPress plugin before 7.6.60 does no=
t properly escape a user-supplied URL before outputting it inside an HTML a= ttribute, allowing unauthenticated users to store a Cross-Site Scripting pa= yload that executes in the browser of any user, including administrators, w=
ho views the affected content. 2026-08-07 not yet calculated CVE-2026-15032=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-15032 ] Content Views--Conte=
nt Views The Content Views WordPress plugin before 4.5 does not perform a c= apability check on one of its AJAX actions and does not properly sanitise a= ttacker-supplied data before using it in a SQL query, allowing any authenti= cated user, including Subscribers, to perform SQL injection attacks. 2026-0= 8-07 not yet calculated CVE-2026-15361 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-15361 ] Contest Gallery--Contest Gallery The Contest Gallery Wo= rdPress plugin before 30.0.7 does not route its front-end login through the=
standard WordPress authentication flow, issuing an authentication cookie d= irectly after the password check, which bypasses installed brute-force-prot= ection and two-factor-authentication Contest Gallery WordPress plugin befor=
e 30.0.7 and enables unlimited, unthrottled password guessing against any a= ccount (including administrators) up to full account takeover. 2026-08-05 n=
ot yet calculated CVE-2026-16055 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-16055 ] Contest Gallery--Contest Gallery The Contest Gallery WordPress = plugin before 30.0.7 does not perform any capability or nonce check in one =
of its handlers, allowing any authenticated user down to Subscriber to read=
the site's entire stored OpenAI prompt history. 2026-08-04 not yet calcula= ted CVE-2026-16056 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16056 ] Co= ntest Gallery--Contest Gallery The Contest Gallery WordPress plugin before = 30.0.7 does not perform per-object capability or nonce checks in one of its=
post-deletion handlers, gating it only by a coarse role-membership test, w= hich allows any Author-level or higher user to permanently delete arbitrary=
posts, pages, and other content they do not own. 2026-08-03 not yet calcul= ated CVE-2026-16057 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16057 ] C= reate Block Theme--Create Block Theme The Create Block WordPress plugin bef= ore 2.10.0 does not correctly escape user-supplied text before writing it i= nto a generated PHP pattern file, allowing a multisite subsite administrato=
r (who holds the capability gating this action but is denied the capability=
that normally gates PHP file editing) to inject and execute arbitrary PHP = code on the server. 2026-08-04 not yet calculated CVE-2026-16623 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-16623 ] Create--Create The Create WordP= ress plugin before 2.5.4 does not perform an authorization check before ret= urning content over one of its REST API routes, and that route additionally=
publishes the requested content as a side effect, allowing unauthenticated=
attackers to read unpublished content and to make it publicly available. 2= 026-08-09 not yet calculated CVE-2026-16992 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-16992 ] Create--Create The Create WordPress plugin before 2.= 5.4 does not perform an authorization check before rendering content over o=
ne of its public REST API routes, and that route additionally publishes the=
requested content as a side effect, allowing unauthenticated attackers to = read unpublished content and to make it publicly available. 2026-08-09 not = yet calculated CVE-2026-18037 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -18037 ] CubeWP Framework--CubeWP Framework The CubeWP Framework WordPress = plugin before 1.1.31 does not properly sanitize and escape a parameter befo=
re using it in a SQL statement through an AJAX action, and does not include=
a capability check on that action, allowing users with Subscriber-level ac= cess and above to perform SQL injection attacks. 2026-08-09 not yet calcula= ted CVE-2026-17017 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17017 ] Cu= stom Fields--Custom Fields The Custom Fields WordPress plugin before 1.5.1 = does not validate a user-supplied file path before deletion, allowing unaut= henticated users to delete arbitrary files on the server (such as wp-config= .php), which can lead to a full site takeover. 2026-08-05 not yet calculate=
d CVE-2026-16940 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16940 ] cvat= -ai--cvat CVAT is an open source interactive video and image annotation too=
l for computer vision. In versions 1.6.0 through 2.64.0, an attacker with w= rite access to a cloud storage that's been added to a CVAT instance, or abi= lity to add new cloud storages, is able to overwrite arbitrary files on the=
server's filesystem. This issue has been fixed in version 2.65.0. 2026-08-=
04 not yet calculated CVE-2026-47682 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-47682 ] cvat-ai--cvat CVAT is an open source interactive video and = image annotation tool for computer vision. Versions 2.5.0 through 2.66.0 co= ntain a XSS vulnerability that can be accessed through annotation guide ass= ets. When CVAT serves the files attached to an annotation guide, it labels = them with a media type (=C2=A0Content-Type=C2=A0) that the attacker can inf= luence, so instead of treating an uploaded file as plain data, the victim's=
browser can be told to treat it as an HTML page and run any JavaScript ins= ide it. This issue has been fixed in version 2.67.0. 2026-08-04 not yet cal= culated CVE-2026-65986 [ https://www.cve.org/CVERecord?id=3DCVE-2026-65986 =
] dartiss--shareopenly The ShareOpenly WordPress plugin prior to version 1.= 2.1 contains a Cross-Site Scripting vulnerability caused by the absence of = WordPress's `esc_url()` escaping function on the `$url` variable before it =
is rendered into HTML content. This variable is constructed from `home_url(=
add_query_arg( array(), $wp->request ) )` and is concatenated directly int=
o an HTML `href` attribute on every singular post or page where the plugin'=
s sharing link is displayed. WordPress's security handbook mandates that ev= ery URL placed in HTML output must be passed through `esc_url()`, which bot=
h HTML-encodes special characters (converting `"`, `<`, `>` into their safe=
HTML entity equivalents) and strips dangerous URI schemes such as `javascr= ipt:` and `data:`. The omission of this function means that if the `$url` v= alue ever contains HTML-special characters or a dangerous URI scheme - thro= ugh a `home_url` WordPress filter applied by another plugin or theme, throu=
gh certain web server or hosting configurations, or through future code cha= nges - the unescaped content will be injected verbatim into the rendered HT=
ML of every post or page on the site. Version 1.2.1 contains a patch for th=
e issue. 2026-08-07 not yet calculated CVE-2026-48094 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-48094 ] Database for Contact Form 7, WPforms, Elem= entor forms--Database for Contact Form 7, WPforms, Elementor forms The Data= base for Contact Form 7, WPforms, Elementor forms WordPress plugin before 1= .5.5 does not properly sanitise and escape a parameter before using it in a=
SQL statement, leading to a SQL Injection exploitable by users granted a s= pecific capability which is limited to administrators by default but can be=
delegated to lower privileged roles. 2026-08-04 not yet calculated CVE-202= 6-14872 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14872 ] Datadog--Andr= oid App In versions of the Datadog Android application prior to v545-5.9.2,=
OnCallNotificationActivity is declared exported with no permission guard. =
A co-installed application can launch it with attacker-controlled Intent ex= tras, including a full-screen lock-screen message, an arbitrary on-call pag=
e ID, and an arbitrary Intent to run inside the Datadog process. This requi= res: A malicious application co-installed on the victim's device. An active=
Datadog session in the Android app. Impact: After a single tap on the Ackn= owledge button, the app sends a forged on-call acknowledgement to the backe=
nd under the victim's session, launches the attacker-supplied Intent from w= ithin the Datadog process (reaching otherwise non-exported components), and=
turns on the screen while dismissing the keyguard. 2026-08-07 not yet calc= ulated CVE-2026-44964 [ https://www.cve.org/CVERecord?id=3DCVE-2026-44964 ]=
Datadog--Android App In versions of the Datadog Android application prior =
to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActiv= ity, MonitorSavedViewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPage= sWidgetActivity, SloWidgetActivity, DashboardWidgetActivity) are exported w= ith no permission guard. Each accepts a caller-supplied AppWidgetManager.EX= TRA_APPWIDGET_ID and, when no deep-link destination is resolved, uses it to=
load the matching widget's stored session and automatically log in as that=
user. Because Android widget IDs are small sequential integers, a co-insta= lled application can brute-force this value to find one that matches a widg=
et configured on the victim's device. This requires: A malicious applicatio=
n co-installed on the victim's device. At least one of the six widgets conf= igured on the victim's home screen. An active Datadog session cached locall=
y. Impact: The matching configuration activity opens in the foreground unde=
r the victim's session and renders live infrastructure data. Exposure is li= mited to a visual side channel (e.g., screen recording or accessibility ser= vices); the calling application cannot programmatically read the rendered d= ata. 2026-08-07 not yet calculated CVE-2026-44965 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-44965 ] Datadog--Android App In versions of the Datado=
g Android application prior to v541-5.9.2, BubbleChatActivity is exported w= ith no permission guard and accepts a SEND intent with a caller-supplied co= nversation_id. When the activity closes and no in-process session matches t= hat ID, it unconditionally cancels notification ID 9201 (the Bits AI chat n= otification), with no check on the caller's identity or ownership of the co= nversation. This requires a malicious application co-installed on the victi= m's device. Impact: A co-installed application can silently dismiss the vic= tim's Bits AI chat notification. No chat content is exposed; conversation d= ata remains server-authentication gated and is never returned to the caller=
. 2026-08-07 not yet calculated CVE-2026-47361 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-47361 ] Datadog--Android App In versions of the Datadog A= ndroid application prior to v554-5.9.4, two Room-backed SQLite databases st= ore sensitive content in plaintext: LocalNotificationDatabase (notification=
title, message, recipient, service, tags, and on-call/incident deep links)=
and SearchRecentDatabase (the user's full in-app search history). Impact: = Any actor able to bypass the app sandbox can read these databases in plaint= ext. 2026-08-07 not yet calculated CVE-2026-47362 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-47362 ] Datadog--Android App In versions of the Datado=
g Android application prior to v541-5.9.2, the exported launcher activity A= ppActivity accepts an attacker-supplied session (including OAuth tokens) fr=
om Intent extras with no permission guard, and signs the app into that sess= ion without validating it against the backend. This requires a malicious ap= plication co-installed on a device with the Datadog app installed, and an O= Auth token the attacker is willing to load into the victim's app. Impact: A=
co-installed application can switch the victim's Datadog app to a session = the attacker controls. This is an account-confusion issue; it does not by i= tself expose the victim's existing session or data. 2026-08-07 not yet calc= ulated CVE-2026-47363 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47363 ]=
Datadog--Android App In versions of the Datadog Android application prior =
to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, = with no user-facing opt-out. Impact: The Datadog user UUID and crash data a=
re visible within Firebase Crashlytics. This UUID is not identifying outsid=
e Datadog's own systems. 2026-08-07 not yet calculated CVE-2026-47364 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-47364 ] DHL Shipping Germany for W= ooCommerce--DHL Shipping Germany for WooCommerce The DHL Shipping Germany f=
or WooCommerce WordPress plugin before 4.0.1 does not perform any authoriza= tion check (no capability, nonce, login, or ownership check) on one of its = shipping-label download endpoints, so an unauthenticated attacker can enume= rate sequential ids and download every stored shipping label, each containi=
ng the customer's full name, complete postal address, and order reference. = 2026-08-05 not yet calculated CVE-2026-16981 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-16981 ] DHL Shipping Germany for WooCommerce--DHL Shipping = Germany for WooCommerce The DHL Shipping Germany for WooCommerce WordPress = plugin before 4.0.1 does not protect its shipping-label storage directory w= ith server-independent access control, relying only on an Apache .htaccess = file, so on a web server that does not honor .htaccess (such as nginx) an u= nauthenticated visitor can download stored shipping labels (each containing=
a customer's name and postal address) by requesting predictable filenames.=
2026-08-05 not yet calculated CVE-2026-16993 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-16993 ] Directus--Directus Directus contains an authentica= ted SQL injection vulnerability in the collection creation flow when the in= stance uses PostgreSQL with PostGIS enabled. An administrator can create a = collection with a geometry field whose fields[].type value starts with geom= etry but contains attacker-controlled SQL syntax after the geometry subtype= .This issue affects Directus: before 12.1.0. 2026-08-05 not yet calculated = CVE-2026-10716 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10716 ] DivvyP= ayHQ--absinthe_federation Allocation of Resources Without Limits or Throttl= ing vulnerability in DivvyPayHQ absinthe_federation allows an unauthenticat=
ed remote attacker to abort the Erlang VM via crafted _entities representat= ion keys. Every key of every object in the representations argument of the = federation-mandated _entities field is converted with String.to_atom/1 by c= onvert_key/2 in lib/absinthe/federation/schema/entities_field.ex. represent= ations is typed as the open-ended _Any scalar, so its keys bypass schema co= ercion and the attacker names them freely. Atoms are never garbage collecte=
d and the BEAM atom table is hard-capped (about 1,048,576 entries by defaul= t), so one request carrying tens of thousands of unique keys creates that m= any permanent atoms and a handful of such requests exhausts the table and a= borts the node. The impact is confined to availability: no data is read or = altered, and recovery requires restarting the application. This issue affec=
ts absinthe_federation: from 0.1.0 before 0.9.3. 2026-08-07 not yet calcula= ted CVE-2026-67585 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67585 ] Do= kan: AI Powered WooCommerce Multivendor Marketplace Solution--Dokan: AI Pow= ered WooCommerce Multivendor Marketplace Solution The Dokan: AI Powered Woo= Commerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 doe=
s not verify order ownership on a REST endpoint that performs bulk order-st= atus changes, allowing users with a Dokan vendor account to modify the stat=
us of any WooCommerce order on the marketplace, including orders belonging =
to other vendors and the store's own customers. 2026-08-03 not yet calculat=
ed CVE-2026-16564 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16564 ] Dok= an: AI Powered WooCommerce Multivendor Marketplace Solution--Dokan: AI Powe= red WooCommerce Multivendor Marketplace Solution The Dokan: AI Powered WooC= ommerce Multivendor Marketplace Solution WordPress plugin before 5.0.9 does=
not verify product ownership on its product-attribute REST write endpoints=
, allowing users with a Dokan vendor account to modify the product attribut=
es and default attributes of any other vendor's products on the marketplace=
. 2026-08-03 not yet calculated CVE-2026-16565 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-16565 ] Dokan: AI Powered WooCommerce Multivendor Marketp= lace Solution--Dokan: AI Powered WooCommerce Multivendor Marketplace Soluti=
on The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution WordP= ress plugin before 5.0.11 does not verify that a downloadable product belon=
gs to the requesting vendor before granting download permissions through on=
e of its order REST endpoints, allowing an authenticated vendor to grant th= eir own customer free download access to another vendor's paid downloadable=
files. 2026-08-08 not yet calculated CVE-2026-16574 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-16574 ] Download Monitor--Download Monitor The Down= load Monitor WordPress plugin before 5.2.6 does not perform authorization c= hecks on one of its download-logging AJAX actions, and exposes the nonce pr= otecting it to unauthenticated visitors, allowing unauthenticated users to = inject arbitrary download log entries and inflate a site's download statist= ics. 2026-08-08 not yet calculated CVE-2026-16608 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-16608 ] Drag and Drop Multiple File Upload for WooComm= erce--Drag and Drop Multiple File Upload for WooCommerce The Drag and Drop = Multiple File Upload for WooCommerce WordPress plugin before 1.1.8 does not=
prevent unauthenticated users from obtaining a valid nonce that is the onl=
y control gating its file-deletion routine, allowing anonymous attackers to=
delete files staged in its upload directory and irreversibly destroy custo= mers' pending order attachments. 2026-08-06 not yet calculated CVE-2026-160=
54 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16054 ] Easy Integration f=
or Dropbox--Easy Integration for Dropbox The Easy Integration for Dropbox W= ordPress plugin before 2.2.0 does not perform authorization checks on sever=
al of its file-management AJAX actions that it also registers for unauthent= icated users, allowing an unauthenticated attacker to list, download and up= load arbitrary files across the connected Dropbox account and to read the c= onnected account and administrator email addresses. 2026-08-04 not yet calc= ulated CVE-2026-15958 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15958 ]=
Eclipse Foundation--Eclipse Accessibility Tools Framework (ACTF) In Eclips=
e Accessibility Tools Framework (ACTF) versions up to 1.6.0 (including sour=
ce code versions up to v20260630 and ACTF based application miChecker versi= ons up to 3.1.0), it has been identified that an XML External Entity (XXE) = vulnerability exists. If this vulnerability is exploited, a malicious third=
party could gain access to local resources or internal network resources v=
ia computer running applications that use Eclipse ACTF, including miChecker=
. 2026-08-05 not yet calculated CVE-2026-14304 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-14304 ] Eclipse Foundation--Eclipse Jetty - EE8 In Eclips=
e Jetty, the Digest authentication server-side component uses ISO-8859-1 to=
encode the password as bytes. This was done because the initial specificat= ion for HTTP did not specify explicitly a charset, and it was assumed to be=
ISO-8859-1 for historical reasons. If the password contains characters tha=
t cannot be represented in ISO-8859-1, they are silently replaced by `?`. T= his happens with passwords that contain Chinese, Cyrillic or Greek characte= rs, for example: `=C3=83=C5=BD=C3=82=C2=B1=C3=83=C5=BD=C3=82=C2=B2123` conv= erts to `??123`. An attacker can send a request with a digest `Authorizatio=
n` header crafted with a password made of only `?` characters; the server w= ould match any password of the same length that contains non-ISO-8859-1 cha= racters. Recent HTTP Digest [RFC-7616](https://datatracker.ietf.org/doc/htm= l/rfc7616) supports a `charset` parameters that defaults to UTF-8 that allo=
ws for correct encoding/decoding of passwords. 2026-08-04 not yet calculate=
d CVE-2026-10050 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10050 ] Ecli= pse Foundation--Eclipse Milo In Eclipse Milo versions 1.0.0 through 1.1.4, = `OpcUaServerConfig.copy()` fails to preserve a configured `RoleMapper`. On = servers that rely on role permissions and construct the running configurati=
on through `copy()`, sessions receive no role IDs and the default access co= ntroller skips role-permission checks, allowing an anonymous client where a= nonymous sessions are permitted to read role-permission metadata, invoke pr= otected methods, or delete protected nodes. 2026-08-04 not yet calculated C= VE-2026-58080 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58080 ] Eclipse=
Foundation--Eclipse Milo In Eclipse Milo versions 0.6.0 through 1.1.4, use= rname-token processing returns distinguishable errors for invalid RSA PKCS#=
1 v1.5 padding and other authentication failures, allowing an on-path attac= ker who captures a victim's `Basic128Rsa15`-encrypted username token to use=
repeated unauthenticated `ActivateSession` requests as a padding oracle, r= ecover the victim's password, and authenticate with the recovered credentia= ls. 2026-08-04 not yet calculated CVE-2026-60007 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-60007 ] Eclipse Foundation--Eclipse Milo In Eclipse Mil=
o versions 1.0.0 through 1.1.4, monitored-item quota accounting is not exce= ption-safe: if item creation fails with an unchecked error, the server-glob=
al reservation is not restored. Deeply nested PubSub ExtensionObjects in a = `CreateMonitoredItems` event filter can trigger a `StackOverflowError` duri=
ng decoding, allowing an unauthenticated remote client to exhaust a finite = global monitored-item quota and prevent all clients from creating new monit= ored items until restart. Existing monitored items and other server functio=
ns remain unaffected. 2026-08-04 not yet calculated CVE-2026-61387 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-61387 ] Eclipse Foundation--Eclipse M= ilo In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatch=
es the original mixed batch to address-space handlers after calculating aut= horization, allowing an anonymous or otherwise low-privileged client to exe= cute a denied method by batching it with an allowed method. 2026-08-04 not = yet calculated CVE-2026-62927 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -62927 ] Eclipse Foundation--Eclipse Milo In Eclipse Milo versions 0.6.0 th= rough 1.1.4, OPC UA server diagnostics nodes do not enforce access authoriz= ation. An anonymous client can enable diagnostics over a None/None endpoint=
without a certificate; with a trusted client application certificate over = SignAndEncrypt, it can read security diagnostics for other active sessions,=
exposing usernames, login history, authentication mechanisms, security mod=
es and policies, and public client certificates. 2026-08-04 not yet calcula= ted CVE-2026-63248 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63248 ] Ec= lipse Foundation--Eclipse Milo In Eclipse Milo versions 0.6.0 through 1.1.4=
, UASC server transport handlers fail to release retained partial message c= hunks when a channel disconnects, allowing a remote unauthenticated client =
to exhaust pooled direct memory by repeatedly sending incomplete chunks and=
disconnecting, potentially terminating the server. 2026-08-04 not yet calc= ulated CVE-2026-63252 [ https://www.cve.org/CVERecord?id=3DCVE-2026-63252 ]=
Eclipse Foundation--Eclipse Mojarra In Eclipse Mojarra versions 2.3 and fo= llowing, URL handing in `DefaultFaceletFactory` does not properly sanitize = and/or block remote URLs, allowing an attacker to specify a URL to a remote=
Facelet which will be included and processed as part of the normal request=
, with the privileges of the target server. This could allow access to rest= ricted files such as `WEB-INF/web.xml` or `/etc/passwd`. 2026-08-05 not yet=
calculated CVE-2026-46581 [ https://www.cve.org/CVERecord?id=3DCVE-2026-46= 581 ] Eclipse Foundation--Eclipse Theia In Eclipse Theia versions 0.7.0 and=
up until including 1.73.1, the `PreferenceUtils.merge` function in `@theia= /core` recursively merges preference values without rejecting prototype-rel= ated keys (`__proto__`, `constructor`, `prototype`). Because this function =
is invoked by `PreferenceServiceImpl.doResolve` for every preference resolu= tion across scopes (default, user, workspace, folder), a crafted preference=
value in a workspace settings file (`.theia/settings.json` or `.vscode/set= tings.json`) can pollute `Object.prototype` when the user opens the workspa= ce, potentially altering application logic across the Theia process. 2026-0= 8-05 not yet calculated CVE-2026-14574 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-14574 ] element-hq--element-call Element Call is a native Matri=
x video conferencing application. Versions 0.5.17 through 0.19.3 report ana= lytics data to a PostHog server, when configured to by a `posthog` key in c= onfig.json or by the `posthogApiHost` and `posthogApiKey` URL parameters. S= everal fields of this data (`$initial_person_info`, `$session_entry_url`, a=
nd `$current_url`) were found to contain the full URL of the user's visited=
page, including the fragment. Users of a standalone Element Call 'SPA' ins= tance such as https://call.element.io may therefore have reported the full = URLs of certain calls, including encryption passwords, to the configured Po= stHog server, potentially compromising the confidentiality of the calls to = actors who could access both the PostHog analytics data and the encrypted m= edia streams. The same issue is present in Element Call's embedded package,=
but in practice it does not impact applications using this package (includ= ing Element Web, Element Desktop, Element X iOS, and Element X Android) bec= ause they distribute encryption keys over Matrix rather than encoding a pas= sword in the URL. The issue is patched in Element Call 0.19.4. Some workaro= unds are available. Users may opt out of analytics in the 'Feedback' tab of=
Element Call's settings and create new links for future calls. Admins who = host Element Call as a standalone application may disable PostHog analytics=
entirely by removing the `posthog` key from their deployment's config.json=
file. 2026-08-07 not yet calculated CVE-2026-48007 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-48007 ] elixir-ecto--postgrex Improper Neutralizatio=
n of Special Elements used in an SQL Command ('SQL Injection') vulnerabilit=
y in elixir-ecto postgrex allows SQL Injection via the :comment option of P= ostgrex.stream/4. An attacker who can influence that value can close the co= mment delimiter with */ and extend the streamed statement with their own cl= auses, which execute under the connection's role. Ecto exposes the same opt= ion through Ecto.Repo.stream/2. Postgrex appends the comment by concatenati=
ng it into the statement text sent in the Parse message, without escaping o=
r rejecting */. The option is validated by comment_not_present!/1 at every = other execution point; stream/4 never calls it. Because Parse accepts a sin= gle command, the injection is confined to the streamed statement and furthe=
r statements cannot be chained. This issue affects postgrex: from 0.19.3 be= fore 0.22.4. 2026-08-07 not yet calculated CVE-2026-66838 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-66838 ] EmbedPress--EmbedPress The EmbedPress = WordPress plugin before 4.6.1 does not validate user-supplied URLs before m= aking server-side requests through unauthenticated endpoints, allowing unau= thenticated attackers to induce the site to send HTTP requests to internal = hosts and services that WordPress core URL validation does not cover (a bli=
nd Server-Side Request Forgery). 2026-08-04 not yet calculated CVE-2026-105=
26 [ https://www.cve.org/CVERecord?id=3DCVE-2026-10526 ] Emlog--Emlog CMS E= mlog CMS <=3D 2.6.14 contains a stored cross-site scripting (XSS) vulnerabi= lity in the article publishing module (/admin/article.php). A remote authen= ticated attacker can inject arbitrary JavaScript code via the article conte= nt. When an administrator reviews or previews the submitted article in the = backend, the malicious script executes in the admin's browser session, allo= wing the attacker to perform administrative actions such as creating a back= door administrator account. 2026-08-03 not yet calculated CVE-2026-52520 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-52520 ] EONSR AEO Agent--EONSR = AEO Agent The EONSR AEO Agent WordPress plugin through 3.7.9 does not perfo=
rm any authorisation check on one of its REST API routes and disables HTML = sanitisation before saving the post, allowing unauthenticated attackers to = create administrator-attributed published posts containing arbitrary web sc= ripts that execute in the browser of any visitor, including administrators = (Stored XSS). 2026-08-06 not yet calculated CVE-2026-11588 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-11588 ] Erlang Ecosystem Foundation--oidcc_pl=
ug Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem = Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent = session binding inert, removing a defense in depth control against replay o=
f a stolen session. This vulnerability is associated with program files lib= /oidcc/plug/authorize.ex and lib/oidcc/plug/authorization_callback.ex, and = program routines Oidcc.Plug.Authorize.call/2 and Oidcc.Plug.AuthorizationCa= llback.call/2. Oidcc.Plug.Authorize.call/2 reads the initiating client's us=
er agent with get_req_header(conn, "User-Agent"). Plug lowercases incoming = header names, but get_req_header/2 matches the supplied key exactly and per= forms no normalization of its own, so the mixed-case lookup always returns =
an empty list and nil is written into the session. On the callback side, Oi= dcc.Plug.AuthorizationCallback treats a stored nil user agent as nothing to=
compare and returns :ok without inspecting the request. The two behaviours=
combine so that the check passes unconditionally on every request, includi=
ng for deployments that explicitly opted in with check_useragent: true, and=
an authorization callback can be completed from a different user agent tha=
n the one that initiated the flow without detection. The check fails open s= ilently, with no error and no log entry, so a deployment cannot tell the bi= nding is absent. The impact is limited to defense in depth. The inert check=
does not by itself allow an attacker to complete an authorization flow; it=
removes one layer that would otherwise hinder use of a stolen or leaked se= ssion, such as an exfiltrated session cookie replayed from a different clie= nt. The CSRF/state, nonce, and PKCE checks are unaffected and continue to f= unction. Deployments that never enabled check_useragent are not affected in=
practice, since they never expected the binding. The corresponding lookup =
in Oidcc.Plug.AuthorizationCallback correctly uses the lowercase key and is=
not affected. This issue affects oidcc_plug: from 0.1.0-alpha.3 before 0.5= .0. 2026-08-04 not yet calculated CVE-2026-66883 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-66883 ] Erlang Ecosystem Foundation--oidcc_plug Cross-S= ite Request Forgery vulnerability in Erlang Ecosystem Foundation oidcc_plug=
(Oidcc.Plug.AuthorizationCallback module) allows an attacker to make a vic= tim's browser complete an authorization flow the victim never initiated. Th=
is vulnerability is associated with program file lib/oidcc/plug/authorizati= on_callback.ex and program routine Oidcc.Plug.AuthorizationCallback.call/2.=
A callback request that carries no Oidcc.Plug.Authorize session is process=
ed with every security check disabled rather than being rejected. call/2 su= bstitutes permissive defaults for the absent session, and each downstream c= heck treats its value as nothing to compare and returns :ok, so the nonce, = state, PKCE, peer IP and user agent checks are all skipped. A separate clau=
se of check_state/2 also accepts a state-less request when a verifier is pr= esent. An attacker obtains an authorization code for their own provider acc= ount, then induces the victim to visit the callback endpoint with that code=
and no state parameter. The application signs the victim in as the attacke=
r, so the victim's subsequent actions occur in the attacker's account where=
the attacker can read them. Applications reusing one callback for both sig= ning in and linking a provider account are further exposed to account takeo= ver, the attacker's account becoming linked to the victim's. The permissive=
fallback serves no conforming flow. Third-party-initiated login reaches a = relying party at a separate login initiation endpoint and causes it to send=
a fresh authentication request, and this library implements no such endpoi= nt. Oidcc.Plug.Authorize always sends a state parameter, which an authoriza= tion server must echo, so no legitimate callback lacks one. This issue affe= cts oidcc_plug: from 0.2.0-beta.1 before 0.5.0. 2026-08-04 not yet calculat=
ed CVE-2026-66884 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66884 ] Est= atik Real Estate Plugin--Estatik Real Estate Plugin The Estatik Real Estate=
Plugin WordPress plugin before 4.3.3 does not properly enforce its anti-sp=
am check or restrict the recipient routing of its property request form, al= lowing unauthenticated users to send emails to arbitrary recipients with ar= bitrary subject, body and Reply-To, effectively using the site as a mail re= lay for spam or phishing. 2026-08-06 not yet calculated CVE-2026-14547 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-14547 ] Estatik Real Estate Plugi= n--Estatik Real Estate Plugin The Estatik Real Estate Plugin WordPress plug=
in before 4.3.3 does not bind its OAuth social login flow to the initiating=
user session, allowing an unauthenticated attacker to log a victim into an=
attacker-controlled account (login CSRF), so that the victim's subsequent = activity is stored under and readable by the attacker. 2026-08-07 not yet c= alculated CVE-2026-16262 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1626=
2 ] Events Manager--Events Manager The Events Manager WordPress plugin befo=
re 7.4 does not perform any authorization check on a REST route that serves=
temporarily stored file uploads, allowing unauthenticated users to retriev=
e another user's in-progress upload when its temporary identifier is known.=
The identifier is high-entropy, is disclosed only to the uploader, and the=
file is removed on submission or by a scheduled cleanup, so a cross-user r= ead is not achievable by guessing alone. 2026-08-06 not yet calculated CVE-= 2026-18050 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18050 ] Fastadmin-= -Fastadmin v1.6.1.20250430 SQL injection vulnerability in Fastadmin v.1.6.1= .20250430 allows an attacker to exectue arbitrary code via the application/= common/controller/Backend.php component 2026-08-03 not yet calculated CVE-2= 026-51775 [ https://www.cve.org/CVERecord?id=3DCVE-2026-51775 ] FasterXML--= jackson-core The non-blocking (asynchronous) JSON parser in jackson-core do=
es not enforce the maxNumberLength constraint defined in StreamReadConstrai= nts (default: 1000 characters). An attacker able to submit JSON to an appli= cation that uses the async parser API can supply a number token of arbitrar=
y length, leading to excessive memory allocation and potential CPU exhausti= on, resulting in a denial of service. The synchronous parser enforces this = limit correctly, so the constraint is applied inconsistently depending on w= hich parsing API the application uses. Root cause: the async parsing path i=
n NonBlockingUtf8JsonParserBase and related classes never invokes the numbe=
r length validation methods. Number parsing methods such as _finishNumberIn= tegralPart() accumulate digits into the TextBuffer without any length check=
, then call _valueComplete() to finalize the token. _valueComplete() does n=
ot call resetInt() or resetFloat(), which are the methods in ParserBase whe=
re validateIntegerLength() and validateFPLength() are performed. Because th=
at validation step is skipped, maxNumberLength is never enforced on the asy=
nc code path. Impact: an attacker sending a JSON document containing an arb= itrarily long number to an application using the async parser (for example =
a Spring WebFlux or other reactive application) can cause unbounded allocat= ion in the TextBuffer and an OutOfMemoryError. If the application subsequen= tly calls getBigIntegerValue() or getDecimalValue(), the JVM may additional=
ly be tied up in O(n^2) BigInteger parsing, causing CPU-based denial of ser= vice. No privileges or user interaction beyond the ability to submit data f=
or parsing are required. This issue affects com.fasterxml.jackson.core:jack= son-core from version 2.15.0 through 2.18.5 and from 2.19.0 through 2.21.0,=
and tools.jackson.core:jackson-core from 3.0.0 through 3.0.x. Versions pri=
or to 2.15.0 are not affected, because StreamReadConstraints -- which defin=
es the maxNumberLength setting -- was first introduced in jackson-core 2.15= .0, so no such constraint exists to be bypassed in earlier releases. Note t= hat GHSA-72hv-8253-57qq records the lower bound of the affected 2.x range a=
s 2.0.0. 2026-08-04 not yet calculated CVE-2026-18401 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-18401 ] FasterXML--jackson-core The fix released i=
n jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (GHSA-72hv-8253-57qq, n= umber length constraint bypass in the non-blocking parser) is incomplete. T= his record covers the remaining bypass. The earlier fix wired validateInteg= erLength() into a new _setIntLength() helper and invoked it wherever the in= teger portion of a number is decided: a terminator byte arrives, a '.' or '= e'/'E' is seen, or input ends inside a fully buffered value. It was not inv= oked on the attacker-relevant path where the parser runs out of input while=
still inside the MINOR_NUMBER_INTEGER_DIGITS minor state and returns NOT_A= VAILABLE to the caller. As a result, an attacker who streams JSON to a non-= blocking parser in many small chunks, without ever sending a terminator byt=
e, keeps the parser inside MINOR_NUMBER_INTEGER_DIGITS indefinitely. _textB= uffer.expandCurrentSegment() grows the accumulator on every chunk while val= idateIntegerLength() is never called. The accumulator is bounded only by ma= xStringLength (20 MiB by default) rather than by maxNumberLength (1000 by d= efault), an amplification of roughly 20,000x over the documented limit. Bec= ause Java char values occupy two bytes, a single connection can be driven t=
o approximately 40 MiB of heap before the validator finally fires when the = value completes. The equivalent fraction-path code is correct: _finishFloat= Fraction() calls _setFractLength() before its NOT_AVAILABLE return. The mis= sing call affects the integer-digit paths in _startPositiveNumber(), _start= NegativeNumber() and _finishNumberIntegralPart() in NonBlockingUtf8JsonPars= erBase. Impact: reactive frameworks such as Spring WebFlux/Reactor, Quarkus=
, Helidon and Vert.x feed inbound HTTP or gRPC bytes to the async parser as=
they arrive, which is precisely the chunked-feed shape required. Operators=
who set StreamReadConstraints.maxNumberLength expecting it to cap memory p=
er number value do not get that guarantee; memory accumulates per concurren=
t connection and attacker-controlled concurrency can exhaust the JVM heap. = The synchronous parsers (UTF8StreamJsonParser, ReaderBasedJsonParser) and t=
he async parser operating on complete input are not affected. Exploitation = requires only the ability to stream data to a parsing endpoint; no privileg=
es or user interaction are needed. This issue affects com.fasterxml.jackson= .core:jackson-core from version 2.15.0 through 2.18.7, and from 2.19.0 thro= ugh 2.21.3, and tools.jackson.core:jackson-core from 3.0.0 through 3.1.3. V= ersions prior to 2.15.0 are not affected, because StreamReadConstraints -- = which defines the maxNumberLength setting -- was first introduced in jackso= n-core 2.15.0, so no such constraint exists to be bypassed in earlier relea= ses. Note that GHSA-r7wm-3cxj-wff9 states the affected 2.x range without a = lower bound. The 2.22.x and 3.2.x release lines are not affected: those bra= nches were created after the fix commit landed on 2026-05-21 and therefore = contain it from their initial releases (2.22.0, tagged 2026-06-03, and 3.2.=
0, tagged 2026-06-08). 2026-08-04 not yet calculated CVE-2026-68494 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-68494 ] fedify-dev--fedify Fedify is=
a TypeScript library for building federated server apps powered by Activit= yPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, 2.1, 2.2, and=
2.3 maintenance lines, getNodeInfo() follows an attacker-controlled links[= ].href value from /.well-known/nodeinfo without scheme, redirect, or privat= e-address validation, allowing requests to loopback, link-local, cloud meta= data, and private-network services and returning their response bodies. Thi=
s issue is fixed in versions 1.9.13, 1.10.12, 2.0.22, 2.1.18, 2.2.7, and 2.= 3.2. 2026-08-06 not yet calculated CVE-2026-62857 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-62857 ] FineAdmin--FineAdmin V1.0 SQL Injection vulner= ability in FineAdmin V1.0 allows a remote attacker to execute arbitrary cod=
e via the `field` and `order` parameters in paginated list endpoints 2026-0= 8-06 not yet calculated CVE-2026-67689 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-67689 ] flowintel--flowintel FlowIntel is affected by a stored = cross-site scripting vulnerability through multiple user-controlled or admi= nistrator-controlled fields. Persisted values-including case titles, ticket=
identifiers, recurring-case information, user profile attributes, organisa= tion names, and role names-were rendered inside DOM elements subsequently c= ompiled by Vue. Although normal HTML escaping could neutralize direct HTML = markup, it did not prevent an attacker from injecting Vue interpolation exp= ressions using the configured [[ ... ]] delimiters. An authenticated attack=
er able to modify one of the affected fields could store a malicious Vue ex= pression. When another user viewed an affected case, report, profile, recur= ring-case page, or navigation component, Vue could evaluate the injected ex= pression in the context of the FlowIntel application. Successful exploitati=
on could allow arbitrary JavaScript execution in the victim's browser under=
the FlowIntel origin. This could expose information available to the victi=
m, perform actions using the victim's authenticated session, or modify appl= ication data within the victim's privileges. The patch introduces a dedicat=
ed vue_escape filter that escapes HTML-sensitive characters and breaks Vue = interpolation delimiters before the values are rendered. The filter is appl= ied to the affected case, account, organisation, role, configuration, and n= avigation fields. 2026-08-03 not yet calculated CVE-2026-69075 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-69075 ] FlowiseAI--Flowise Flowise is a d= rag & drop user interface to build a customized large language model flow. = Prior to 3.1.3, the OAuth2 token refresh endpoint POST /api/v1/oauth2-crede= ntial/refresh/:credentialId is unauthenticated by design and performs a ser= ver-side HTTP request to the credential-controlled accessTokenUrl without S= SRF protections. Runtime validation confirmed that the endpoint was reachab=
le without authentication, triggered outbound POST requests to an attacker-= controlled server, reflected the full remote response body to the caller th= rough tokenInfo, and sent client_id, client_secret, grant_type=3Drefresh_to= ken, and refresh_token in the request body. This issue is fixed in version = 3.1.3. 2026-08-04 not yet calculated CVE-2026-69250 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-69250 ] FlowiseAI--Flowise Flowise is a drag & drop = user interface to build a customized large language model flow. Prior to 3.= 1.3, Flowise record manager and agent memory nodes allowed users to set arb= itrary TypeORM DataSource options through the additionalConfig input in pac= kages/components/nodes/recordmanager/MySQLRecordManager/MySQLrecordManager.= ts, packages/components/nodes/recordmanager/PostgresRecordManager/PostgresR= ecordManager.ts, packages/components/nodes/recordmanager/SQLiteRecordManage= r/SQLiteRecordManager.ts, packages/components/nodes/memory/AgentMemory/MySQ= LAgentMemory/MySQLAgentMemory.ts, and packages/components/nodes/memory/Agen= tMemory/AgentMemory.ts. TypeORM DataSource options such as entities, subscr= ibers, and migrations can load local JavaScript files, allowing an authenti= cated user to execute arbitrary code on the server by uploading a JavaScrip=
t payload and referencing it from additionalConfig.entities. This issue is = fixed in version 3.1.3. 2026-08-04 not yet calculated CVE-2026-69251 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-69251 ] FlowiseAI--Flowise Flowise =
is a drag & drop user interface to build a customized large language model = flow. Prior to 3.1.3, the /api/v1/files route was protected only by the fea= t:files feature gate and did not enforce checkPermission on GET or DELETE. =
A low-privileged authenticated API key with unrelated permissions could cal=
l GET /api/v1/files to list files under the organization storage root and D= ELETE /api/v1/files?path=3D... to delete files belonging to other workspace=
s in the same organization because getAllFiles and deleteFile used activeOr= ganizationId and a user-controlled path without restricting access by permi= ssions or activeWorkspaceId. This issue is fixed in version 3.1.3. 2026-08-=
04 not yet calculated CVE-2026-69252 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-69252 ] FlowiseAI--Flowise Flowise is a drag-and-drop user interfac=
e for building customized large language model (LLM) flows. Prior to versio=
n 3.1.3, several custom-tool components - AgentAsTool, ChatflowTool, and Ex= ecuteFlow - ran code in the in-process =C2=A0vm2=C2=A0 sandbox. To build th=
at code, they inserted a user-controlled =C2=A0baseURL=C2=A0 value straight=
into the JavaScript source, for example =C2=A0const url =3D "${baseURL}/..= .";=C2=A0. The only check on =C2=A0baseURL=C2=A0 was =C2=A0isValidURL=C2=A0=
, but a valid-looking URL can still contain characters that break out of a = code string. An authenticated user could craft a =C2=A0baseURL=C2=A0 that p= assed this check, closed the surrounding string, and injected their own Jav= aScript into the sandboxed script (code injection, CWE-94). The =C2=A0vm2= =C2=A0 sandbox runs in the same Node.js process as Flowise and exposes risk=
y dependencies. As a result, the injected code could escape the sandbox and=
run arbitrary code on the Flowise server as the Flowise process user. Expl= oitation only requires an authenticated session. The issue is fixed in vers= ion 3.1.3, which passes the URL to the sandbox as data instead of inserting=
it into code and adds stricter URL validation. 2026-08-04 not yet calculat=
ed CVE-2026-69253 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69253 ] Flo= wiseAI--Flowise Flowise is a drag & drop user interface to build a customiz=
ed large language model flow. Prior to 3.1.3, executeJavaScriptCode() accep= ted caller-provided nodeVMOptions and merged them over the default NodeVM s= ecurity settings in packages/components/src/utils.ts. An authenticated atta= cker reaching packages/server/src/routes/node-custom-functions/index.ts cou=
ld run a custom function that imported flowise-components/dist/src/utils.js=
, called executeJavaScriptCode() again with nodeVMOptions.require.builtin s=
et to allow all built-in modules, and then required child_process to execut=
e arbitrary system commands as root on the Flowise server. This issue is fi= xed in version 3.1.3. 2026-08-04 not yet calculated CVE-2026-69254 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-69254 ] FlowiseAI--Flowise Flowise is=
a drag & drop user interface to build a customized large language model fl= ow. Prior to 3.1.3, the CSVAgent in packages/components/nodes/agents/CSVAge= nt/CSVAgent.ts extracted attacker-controlled CSV data with file.split(',').= pop() and interpolated it directly into executable Python as base64_string = =3D "${base64String}" before calling Pyodide. The validatePythonCodeForData= Frame() denylist only checked later LLM-generated code and did not validate=
this initial code block. An authenticated attacker could inject a closing = quote followed by Python code, use Pyodide's js bridge to load Node.js chil= d_process, and execute arbitrary operating system commands as root in the F= lowise container. This issue is fixed in version 3.1.3. 2026-08-04 not yet = calculated CVE-2026-69255 [ https://www.cve.org/CVERecord?id=3DCVE-2026-692=
55 ] FlowiseAI--Flowise Flowise is a drag & drop user interface to build a = customized large language model flow. Prior to 3.1.3, the CSVAgent node all= owed users to provide Python code that is executed through pyodide; althoug=
h a denylist blocked dangerous Python constructs, pandas.read_pickle() coul=
d deserialize a pickled payload and achieve code execution without matching=
the denied words. The affected file is flowise-components/nodes/agents/CSV= Agent/CSVAgent.ts, where user-supplied customReadCSVFunc is evaluated as pd= .${customReadCSVFunc}. An authenticated user who can create or modify a cha= tflow can add a CSV Agent, place a malicious read_pickle payload in the Add= itional Parameters, save the chatflow, and trigger /api/v1/prediction/<UUID=

to execute commands. This issue is fixed in version 3.1.3. 2026-08-04 not=

yet calculated CVE-2026-69256 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-69256 ] FlowiseAI--Flowise Flowise is a drag & drop user interface to bui=
ld a customized large language model flow. Prior to 3.1.3, Flowise's HTTP s= ecurity module httpSecurity.ts did not normalize IPv4-mapped IPv6 addresses=
such as ::ffff:127.0.0.1 and ::ffff:169.254.169.254 before checking them a= gainst the deny list. Because ipaddr.js reports these addresses as ipv6 whi=
le IPv4 CIDR deny-list entries are ipv4, isDeniedIP() skipped the IPv4 CIDR=
checks. An attacker who controls DNS resolution for a hostname used by the=
HTTP Node, API Chain, Document Loader, MCP tool, or other paths using secu= reAxiosRequest(), secureFetch(), or checkDenyList() could return a AAAA rec= ord for an IPv4-mapped target and cause requests to reach localhost, intern=
al services, or cloud metadata endpoints. This issue is fixed in version 3.= 1.3. 2026-08-04 not yet calculated CVE-2026-69257 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-69257 ] FlowiseAI--Flowise Flowise is a drag & drop us=
er interface to build a customized large language model flow. Prior to 3.1.=
3, the unauthenticated POST /api/v1/prediction/:id endpoint accepted an ove= rrideConfig object and unconditionally spread it into internal flowConfig a=
nd flowData objects in packages/server/src/utils/buildChatflow.ts and packa= ges/server/src/utils/index.ts without checking apiOverrideStatus. This allo= wed unauthenticated attackers to inject arbitrary properties into the flow = execution context of any public chatflow, overwrite values such as chatId, = sessionId, and chatHistory, and control values resolved through $flow.* tem= plate variables consumed by flow nodes. This issue is fixed in version 3.1.=
3. 2026-08-04 not yet calculated CVE-2026-69258 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-69258 ] FlowiseAI--Flowise Flowise is a drag & drop user=
interface to build a customized large language model flow. Prior to 3.1.3,=
the SQLite Record Manager node in packages/components/nodes/recordmanager/= SQLiteRecordManager/SQLiteRecordManager.ts accepted user-controlled additio= nalConfig and spread it after the intended database setting, allowing addit= ionalConfig.database to overwrite the SQLite database path. An authenticate=
d attacker using the published Docker image, which ran as root, could write=
a SQLite database to paths such as /etc/chromium/exploit.conf; by controll= ing the table name and namespace value, the attacker could place shell synt=
ax into the database file and trigger execution when Puppeteer launched Chr= omium and sourced /etc/chromium/*.conf. This issue is fixed in version 3.1.=
3. 2026-08-04 not yet calculated CVE-2026-69259 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-69259 ] FlowiseAI--Flowise Flowise is a drag & drop user=
interface to build a customized large language model flow. Prior to 3.1.3,=
`DELETE /api/v1/chatflows/:id` authorized requests with checkAnyPermission= ('chatflows:delete,agentflows:delete'), so possession of either permission = was sufficient to reach the delete path. The delete logic then resolved the=
target record only by id and workspaceId and did not validate the target r= esource type, allowing a caller with only agentflows:delete to delete a CHA= TFLOW and a caller with only chatflows:delete to delete an AGENTFLOW in the=
same workspace. This issue is fixed in version 3.1.3. 2026-08-04 not yet c= alculated CVE-2026-69262 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6926=
2 ] FlowiseAI--Flowise Flowise is a drag & drop user interface to build a c= ustomized large language model flow. Prior to 3.1.3, the mitigation for CVE= -2025-8943 blocked -y and --yes flags on npx, but packages/components/nodes= /tools/MCP/core.ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, an=
d NODE_OPTIONS by exact environment-variable name. Because npm reads config= uration from npm_config_* variables, setting npm_config_yes=3Dtrue reproduc=
ed --yes behavior without using a blocked flag, causing npx to auto-install=
and execute the named package when a Custom MCP server launched. This issu=
e is fixed in version 3.1.3. 2026-08-04 not yet calculated CVE-2026-69263 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-69263 ] FlowiseAI--Flowise Pri=
or to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled segment o=
f the csvFile data URI directly into a Python source-code template that is = then executed by Pyodide. Because Pyodide is loaded with the default js bri= dge to globalThis, which on Node.js exposes eval and dynamic import, the at= tacker can break out of the Python string literal, hand a JavaScript string=
to js.eval, dynamically import Node built-in modules such as fs and child_= process, and execute arbitrary file I/O or OS commands as the Flowise proce= ss. The two validator paths around this code, validatePythonCodeForDataFram=
e and validateCustomReadCSVFunction, are never applied to the bootstrap tem= plate. A workspace user with chatflows:create or agentflows/chatflows updat=
e permission can plant a CSV Agent node with a crafted csvFile; once the ch= atflow is exposed via POST /api/v1/prediction/:id, any unauthenticated requ= est triggers host remote code execution. This issue is fixed in version 3.1= .3. 2026-08-04 not yet calculated CVE-2026-69264 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-69264 ] FlowiseAI--Flowise Flowise is a drag & drop use=
r interface to build a customized large language model flow. Prior to 3.1.3=
, Flowise validatePythonCodeForDataFrame in packages/components/src/pythonC= odeValidator.ts can be bypassed with Unicode homoglyph identifiers, allowin=
g arbitrary Python execution inside Pyodide and full OS command execution o=
n the Flowise host via Pyodide js module interop. The validator gates pyodi= de.runPythonAsync in packages/components/nodes/agents/CSVAgent/CSVAgent.ts = and packages/components/nodes/agents/AirtableAgent/AirtableAgent.ts with an=
ASCII word-boundary blacklist. JavaScript regex word boundaries are ASCII-= only, while Python 3 NFKC-normalizes identifiers at parse time, so homoglyp=
h forms such as __cl=C3=83=C2=B0=C3=82=C2=9D=C3=82=C2=90=C3=85=C2=A1ss__, _= _subcl=C3=83=C2=B0=C3=82=C2=9D=C3=82=C2=90=C3=85=C2=A1sses__, __b=C3=83=C2= =B0=C3=82=C2=9D=C3=82=C2=90=C3=85=C2=A1se__, and __b=C3=83=C2=B0=C3=82=C2= =9D=C3=82=C2=90=C3=82=C2=AEiltins__ bypass the blacklist and are parsed as = their ASCII equivalents. This issue is fixed in version 3.1.3. 2026-08-04 n=
ot yet calculated CVE-2026-70470 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-70470 ] FlowiseAI--Flowise Flowise is a drag-and-drop user interface fo=
r building customized large language model (LLM) flows. Prior to 3.1.3, Flo= wise injects $vars into the code execution sandbox without requiring variab= les:view, bypassing the permission-protected Variables API. Variables for t=
he active workspace are fetched at packages/components/src/utils.ts and run= time variables are resolved from server environment variables, while the of= ficial variables route enforces variables:view. A user or API key that is d= enied variables:view can call /api/v1/node-custom-function and receive $var=
s pre-populated with all variables for the workspace, including Variable.na=
me to Variable.value static variables and Variable.name to process.env[Vari= able.name] runtime variables. This can expose secrets such as database pass= words, JWT secrets, SMTP passwords, and cloud keys, depending on the worksp= ace Variables configuration. This issue is fixed in version 3.1.3. 2026-08-=
04 not yet calculated CVE-2026-70471 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-70471 ] FlowiseAI--Flowise Flowise is a drag & drop user interface =
to build a customized large language model flow. Prior to 3.1.3, Flowise op= enai-assistants-vector-store endpoints accept a client-controlled credentia=
l parameter and load credentials by id without checking whether that creden= tial belongs to the caller workspace. Route permissions assistants:* only c= heck feature access. The controller passes req.query.credential straight to=
the service, and the service uses findOneBy({ id: credentialId }), decrypt=
s the credential, and calls OpenAI APIs without a workspaceId check. If an = attacker knows another workspace credentialId, the attacker can use that wo= rkspace OpenAI key, read, modify, or delete victim vector stores and files,=
cause billing impact on the victim OpenAI account, and violate multi-tenan=
t boundaries. This issue is fixed in version 3.1.3. 2026-08-04 not yet calc= ulated CVE-2026-70472 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70472 ]=
FlowiseAI--Flowise Flowise is a drag-and-drop user interface for building = customized large language model (LLM) flows. Prior to 3.1.3, Flowise GET /a= pi/v1/upsert-history returns the entire server-wide upsert history instead =
of being scoped to the requesting user, tenant, or workspace. The response = can exceed 100MB and includes sensitive configuration data, including Vecto=
r Store settings such as Qdrant Server URL and collection name. The observe=
d behavior indicates missing or insufficient authorization checks, workspac= e/project/tenant isolation, and pagination or limits, exposing integration = parameters and infrastructure details that may enable further targeted atta= cks. This issue is fixed in version 3.1.3. 2026-08-04 not yet calculated CV= E-2026-70473 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70473 ] FlowiseA= I--Flowise Flowise is a drag-and-drop user interface for building customize=
d large language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth=
2 credential endpoints that look up credentials by id alone with no workspa= ceId filter. The authorize, callback, and refresh handlers query the Creden= tial table by id only; callback and refresh are whitelisted from authentica= tion. This allows any authenticated user to initiate OAuth2 flows against c= redentials belonging to other workspaces, allows an unauthenticated attacke=
r to forge OAuth2 callbacks to overwrite tokens in any credential, and allo=
ws an unauthenticated attacker to refresh tokens for any credential. The af= fected routes include /api/v1/oauth2-credential/authorize/<VICTIM_CREDENTIA= L_UUID>, /api/v1/oauth2-credential/callback?code=3DATTACKER_AUTH_CODE&state= =3D<VICTIM_CREDENTIAL_UUID>, and /api/v1/oauth2-credential/refresh/<VICTIM_= CREDENTIAL_UUID>. This issue is fixed in version 3.1.3. 2026-08-04 not yet = calculated CVE-2026-70474 [ https://www.cve.org/CVERecord?id=3DCVE-2026-704=
74 ] FlowiseAI--Flowise Flowise is a drag & drop user interface to build a = customized large language model flow. Prior to 3.1.3, the PUT /api/v1/execu= tions/:id endpoint in packages/server/src/routes/executions/index.ts lacks = the checkAnyPermission() middleware that protects other execution endpoints=
. Any authenticated user, regardless of assigned permissions, can modify ex= ecution state, data, and metadata of any execution in their workspace, enab= ling privilege escalation and manipulation of workflow execution results. T= his issue is fixed in 3.1.3. 2026-08-04 not yet calculated CVE-2026-70475 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-70475 ] FlowiseAI--Flowise Flo= wise is a drag & drop user interface to build a customized large language m= odel flow. Prior to 3.1.3, several organization billing endpoints in packag= es/server/src/enterprise/routes/organization.route.ts and packages/server/s= rc/enterprise/controllers/organization.controller.ts accept attacker-contro= lled Stripe subscriptionId values without verifying that the identifier bel= ongs to the authenticated user's organization. An authenticated attacker ca=
n perform unauthorized Stripe subscription operations on other tenants, inc= luding changing subscription plans or modifying seat quantities, resulting =
in financial impact and service disruption. This issue is fixed in 3.1.3. 2= 026-08-04 not yet calculated CVE-2026-70476 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-70476 ] FlowiseAI--Flowise Flowise is a drag & drop user int= erface to build a customized large language model flow. Prior to 3.1.3, a p= rompt injection sent to a chatflow using a CSV Agent node can cause the LLM=
to respond with a malicious Python script that bypasses the blocklist vali= dator and executes in an unsandboxed Pyodide environment. The specific flaw=
exists within the run method of the CSV_Agents class, where untrusted data=
is used to construct an LLM prompt and the resulting pythonCode is validat=
ed by validatePythonCodeForDataFrame before execution. An attacker can leve= rage this to execute arbitrary code in the context of the service account. = This issue is fixed in 3.1.3. 2026-08-04 not yet calculated CVE-2026-70477 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-70477 ] FlowiseAI--Flowise Fl= owise is a drag & drop user interface to build a customized large language = model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/refresh/:cre= dentialId endpoint is included in WHITELIST_URLS and requires no authentica= tion. The endpoint decrypts the stored credential, sends a refresh request =
to the configured OAuth provider with the client secret and refresh token, = and returns the refreshed access_token in the response body. An attacker wi=
th a credential ID can use the token to access the victim's connected servi=
ce and can also exhaust refresh-token quota. This issue is fixed in 3.1.3. = 2026-08-04 not yet calculated CVE-2026-70478 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-70478 ] fprime--framework v4.2.2 The Ref::SignalGen compone=
nt of fprime framework v4.2.2 does not validate the safety of user-controll=
ed parameters, allowing attackers to cause a Denial of Service (DoS) via in= putting unsafe parameters. 2026-08-03 not yet calculated CVE-2026-67976 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-67976 ] fprime--framework v4.2.2=
An integer overflow in the Svc::FileDownlink::SendPartial component of fpr= ime framework v4.2.2 allows attackers to cause a Denial of Service (DoS) vi=
a a crafted input. 2026-08-03 not yet calculated CVE-2026-67977 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-67977 ] Frappe--ERPNext An Improper Auth= orization vulnerability exists in ERPNext version <v16.25.0 and <15.115.0 d=
ue to insufficient access control in the whitelisted API method erpnext.crm= .doctype.prospect.prospect.get_opportunities. This issue affects ERPNext: b= efore 15.115.0, before 16.26.0. 2026-08-04 not yet calculated CVE-2026-1322=
7 [ https://www.cve.org/CVERecord?id=3DCVE-2026-13227 ] frappe--frappe Frap=
pe is a full-stack web application framework. Prior to 16.18.0, the Workspa=
ce Save API accepts a controlled workspace identifier from any authenticate=
d user without enforcing workspace ownership, allowing modification of anot= her user's private workspace and persistent script injection. This issue is=
fixed in version 16.18.0. 2026-08-06 not yet calculated CVE-2026-47185 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-47185 ] frappe--frappe Frappe is=
a full-stack web application framework. Prior to 15.108.0 and 16.18.3, tem= porary magic login link generation can use an attacker-controlled request H= ost header, allowing a remote attacker to cause emailed login links to poin=
t to an attacker-controlled domain and capture the login token when a recip= ient follows the link. This issue is fixed in versions 15.108.0 and 16.18.3=
. 2026-08-06 not yet calculated CVE-2026-47194 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-47194 ] frappe--frappe Frappe is a full-stack web applica= tion framework. Prior to 15.110.0 and 16.20.0, the restore and bulk_restore=
endpoints do not apply the appropriate document permission checks, allowin=
g an authenticated user to restore deleted documents without the required a= uthorization. This issue is fixed in versions 15.110.0 and 16.20.0. 2026-08= -06 not yet calculated CVE-2026-47765 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-47765 ] frappe--frappe Frappe is a full-stack web application fram= ework. Prior to 16.19.0 and 15.109.0, Data Import does not escape imported = column headers before rendering previews and results, allowing an authentic= ated importer to persist script content that executes when another user vie=
ws the import interface. This issue is fixed in versions 16.19.0 and 15.109= .0. 2026-08-06 not yet calculated CVE-2026-49391 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-49391 ] frappe--frappe Frappe is a full-stack web appli= cation framework. Prior to 16.23.0 and 15.112.0, Document Follow notificati=
on generation does not re-evaluate the recipient's current document permiss= ions, allowing users whose access was revoked or reduced to continue receiv= ing document data by email. This issue is fixed in versions 16.23.0 and 15.= 112.0. 2026-08-07 not yet calculated CVE-2026-66000 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-66000 ] frappe--frappe Frappe is a full-stack web ap= plication framework. Prior to 16.20.0 and 15.112.0, unrestricted access to =
a Document Follow API (update_follow) is possible for an authenticated user=
. This issue is fixed in versions 16.20.0 and 15.112.0. 2026-08-07 not yet = calculated CVE-2026-66058 [ https://www.cve.org/CVERecord?id=3DCVE-2026-660=
58 ] frappe--frappe Frappe is a full-stack web application framework. Prior=
to 16.20.0 and 15.112.0, a field-level permissions bypass exposes restrict=
ed DocType fields. This issue is fixed in versions 16.23.0 and 15.112.0. 20= 26-08-07 not yet calculated CVE-2026-66059 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-66059 ] GDPR Cookie Compliance--GDPR Cookie Compliance The GD=
PR Cookie Compliance WordPress plugin before 5.1.0 expires the visitor's co= okies from an action that is reachable without authentication and performs =
no request-origin check, allowing an attacker to log any user out and delet=
e the site's cookies by luring them to a crafted link. 2026-08-05 not yet c= alculated CVE-2026-16613 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1661=
3 ] GEO my WP--GEO my WP The GEO my WP WordPress plugin before 4.5.5.3 does=
not perform any ownership or capability check on two of its logged-in AJAX=
actions, allowing users with subscriber-level access or above to modify or=
permanently delete other users' and posts' geolocation records by supplyin=
g arbitrary record IDs. 2026-08-03 not yet calculated CVE-2026-15260 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-15260 ] GeoDirectory--GeoDirectory = The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and esca=
pe a place-category setting before outputting it back in an admin page, all= owing high-privilege users such as editors and above to perform Stored Cros= s-Site Scripting attacks even when the unfiltered_html capability is disall= owed (for example in a multisite setup). 2026-08-05 not yet calculated CVE-= 2025-15677 [ https://www.cve.org/CVERecord?id=3DCVE-2025-15677 ] GeoDirecto= ry--GeoDirectory The GeoDirectory WordPress plugin before 2.8.168 does not = restrict a user-search handler to users allowed to list users, allowing any=
authenticated user with Contributor-level access or higher to retrieve the=
email addresses of all registered users, including administrators. 2026-08= -05 not yet calculated CVE-2026-16968 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-16968 ] GeoDirectory--GeoDirectory The GeoDirectory WordPress plug=
in before 2.8.169 does not perform any authorization check when returning m=
ap marker data for a single requested listing, allowing unauthenticated use=
rs to disclose the title and exact geographic coordinates of non-public (pe= nding or draft) listings. 2026-08-09 not yet calculated CVE-2026-16988 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-16988 ] getkirby--kirby Kirby is =
an open-source content management system. Prior to 4.9.5 and from 5.0.0 thr= ough 5.5.1, the REST API error handler can return unsanitized PHP error mes= sages that expose the full filesystem path of the Kirby installation to una= uthenticated API users. This vulnerability affects all Kirby sites that hav=
e not disabled the REST API with the 'api' =3D> false option. This issue is=
fixed in versions 4.9.5 and 5.5.2. 2026-08-07 not yet calculated CVE-2026-= 69127 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69127 ] GitHub--Enterpr= ise Server A denial of service vulnerability was identified in GitHub Enter= prise Server that allowed an unauthenticated attacker to cause excessive CP=
U consumption and exhaust the pool of request-handling worker processes by = sending a crafted form-encoded HTTP POST request containing deeply nested p= arameters. Because request parameters were parsed before routing and authen= tication, any POST endpoint could be used to trigger the condition, which c= ould render the instance unresponsive. This vulnerability affected all vers= ions of GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.= 20.3, 3.19.7, 3.18.10, and 3.17.16. 2026-08-05 not yet calculated CVE-2026-= 15996 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15996 ] GitHub--Enterpr= ise Server A path traversal vulnerability was identified in GitHub Enterpri=
se Server that allowed an unauthenticated attacker to delete arbitrary file=
s and directories on the instance, including the entire user storage direct= ory containing Git LFS objects, release assets, attachments, and avatars. T=
he X-GitHub-Request-Id request header was used without sanitization as a fi= lesystem path segment for the upload buffer directory, so a traversal value=
pointed the buffer at an arbitrary path and the deferred cleanup routine r= ecursively removed the traversed target. Exploitation required only network=
reachability to the instance and no authentication, and it worked even whe=
n private mode was enabled. This vulnerability affected all versions of Git= Hub Enterprise Server prior to 3.22 and was fixed in versions 3.21.4, 3.20.=
6, 3.19.10, 3.18.13 and 3.17.19. This vulnerability was reported via the Gi= tHub Bug Bounty program. 2026-08-05 not yet calculated CVE-2026-17556 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-17556 ] Google Authenticator--Goog=
le Authenticator The Google Authenticator WordPress plugin before 0.56 does=
not verify a CSRF nonce when saving its two-factor setup, allowing attacke=
rs to trick a logged-in user into overwriting their own 2FA secret with an = attacker-controlled value, which enables two-factor authentication and lock=
s the victim out of their account. 2026-08-06 not yet calculated CVE-2026-1= 4204 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14204 ] Google Cloud--Go= ogle SecOps (Chronicle SOAR) Improper Privilege Management in Google SecOps=
(Chronicle SOAR) versions prior to 6.3.85 on Google Cloud Platform allows =
an authenticated attacker to escalate privileges to system-level administra= tive access using a crafted internal authentication header. This vulnerabil= ity was patched with version 6.3.85, and no customer action is needed. 2026= -08-05 not yet calculated CVE-2026-15587 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-15587 ] Google--@a2ui/web_core The openUrl function in @a2ui/we= b_core passes an agent-controlled URL directly to window.open() without val= idating the URI scheme. A malicious agent can supply a javascript: URI as t=
he url argument of a Button component's functionCall action. When the user = clicks the rendered button, arbitrary JavaScript executes in the victim app= lication's browser origin, constituting a stored/reflected XSS with Critica=
l severity. No non-default configuration is required; the Basic Catalog is = enabled by default. 2026-08-04 not yet calculated CVE-2026-10032 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-10032 ] Google--Android In multiple fun= ctions of vpu_ioctl.c, there is a possible use after free due to a use afte=
r free. This could lead to remote escalation of privilege with no additiona=
l execution privileges needed. User interaction is not needed for exploitat= ion. 2026-08-04 not yet calculated CVE-2026-0163 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-0163 ] Google--Chrome Use after free in WebGL in Google=
Chrome on Android prior to 151.0.7922.109 allowed a remote attacker who ha=
d compromised the renderer process to potentially perform a sandbox escape = via a crafted HTML page. (Chromium security severity: Critical) 2026-08-06 = not yet calculated CVE-2026-19137 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-19137 ] Google--Chrome Heap buffer overflow in CrashReporting in Googl=
e Chrome prior to 151.0.7922.109 allowed a remote attacker who had compromi= sed the renderer process to potentially perform a sandbox escape via a craf= ted HTML page. (Chromium security severity: High) 2026-08-06 not yet calcul= ated CVE-2026-19138 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19138 ] G= oogle--Chrome Race in CredentialProvider in Google Chrome on Windows prior =
to 151.0.7922.109 allowed a local attacker to perform OS-level privilege es= calation via a malicious file. (Chromium security severity: High) 2026-08-0=
6 not yet calculated CVE-2026-19139 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-19139 ] Google--Chrome Use after free in GPU in Google Chrome prior =
to 151.0.7922.109 allowed a remote attacker who had compromised the rendere=
r process to potentially perform a sandbox escape via a crafted HTML page. = (Chromium security severity: High) 2026-08-06 not yet calculated CVE-2026-1= 9140 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19140 ] Google--Chrome U=
se after free in Resources in Google Chrome on Android prior to 151.0.7922.= 109 allowed a remote attacker who had compromised the renderer process to p= otentially perform a sandbox escape via a crafted HTML page. (Chromium secu= rity severity: High) 2026-08-06 not yet calculated CVE-2026-19141 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-19141 ] Google--Chrome Use after free =
in Views in Google Chrome prior to 151.0.7922.109 allowed a remote attacker=
who convinced a user to engage in specific UI gestures to potentially expl= oit heap corruption via a crafted HTML page. (Chromium security severity: H= igh) 2026-08-06 not yet calculated CVE-2026-19142 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-19142 ] Google--Chrome Insufficient validation of untr= usted input in WebAPKs in Google Chrome on Android prior to 151.0.7922.109 = allowed a local attacker to potentially perform a sandbox escape via a mali= cious file. (Chromium security severity: High) 2026-08-06 not yet calculate=
d CVE-2026-19143 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19143 ] Goog= le--Chrome Use after free in HTML in Google Chrome prior to 151.0.7922.109 = allowed a remote attacker to potentially exploit heap corruption via a craf= ted HTML page. (Chromium security severity: High) 2026-08-06 not yet calcul= ated CVE-2026-19144 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19144 ] G= oogle--Chrome Use after free in Translate in Google Chrome prior to 151.0.7= 922.109 allowed a remote attacker to execute arbitrary code inside a sandbo=
x via a crafted HTML page. (Chromium security severity: High) 2026-08-06 no=
t yet calculated CVE-2026-19145 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-19145 ] Google--Chrome Uninitialized Use in GPU in Google Chrome on Andr= oid prior to 151.0.7922.109 allowed a remote attacker who had compromised t=
he renderer process to obtain potentially sensitive information from proces=
s memory via a crafted HTML page. (Chromium security severity: High) 2026-0= 8-06 not yet calculated CVE-2026-19146 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19146 ] Google--Chrome Use after free in Aura in Google Chrome =
on Linux prior to 151.0.7922.109 allowed a remote attacker who had compromi= sed the renderer process to potentially perform a sandbox escape via a craf= ted HTML page. (Chromium security severity: High) 2026-08-06 not yet calcul= ated CVE-2026-19147 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19147 ] G= oogle--Chrome Out of bounds write in GPU in Google Chrome on Linux prior to=
151.0.7922.109 allowed a remote attacker who had compromised the renderer = process to potentially perform a sandbox escape via a crafted HTML page. (C= hromium security severity: High) 2026-08-06 not yet calculated CVE-2026-191=
48 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19148 ] Google--Chrome Use=
after free in Aura in Google Chrome on Linux prior to 151.0.7922.109 allow=
ed a remote attacker to potentially perform a sandbox escape via a crafted = HTML page. (Chromium security severity: Critical) 2026-08-06 not yet calcul= ated CVE-2026-19149 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19149 ] G= oogle--Chrome Inappropriate implementation in V8 in Google Chrome prior to = 151.0.7922.109 allowed a remote attacker to execute arbitrary code inside a=
sandbox via a crafted HTML page. (Chromium security severity: High) 2026-0= 8-06 not yet calculated CVE-2026-19150 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19150 ] Google--Chrome Use after free in V8 in Google Chrome pr= ior to 151.0.7922.109 allowed a remote attacker to execute arbitrary code i= nside a sandbox via a crafted HTML page. (Chromium security severity: High)=
2026-08-06 not yet calculated CVE-2026-19151 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-19151 ] Google--Chrome Insufficient policy enforcement in = Navigation in Google Chrome prior to 151.0.7922.109 allowed a remote attack=
er who had compromised the renderer process to potentially perform a sandbo=
x escape via a crafted HTML page. (Chromium security severity: High) 2026-0= 8-06 not yet calculated CVE-2026-19152 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19152 ] Google--Chrome Insufficient validation of untrusted inp=
ut in Workers in Google Chrome prior to 151.0.7922.109 allowed a remote att= acker who had compromised the renderer process to bypass site isolation via=
a crafted HTML page. (Chromium security severity: High) 2026-08-06 not yet=
calculated CVE-2026-19153 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19= 153 ] Google--Chrome Use after free in Skia in Google Chrome on Android pri=
or to 151.0.7922.109 allowed a remote attacker who had compromised the rend= erer process to potentially perform a sandbox escape via a crafted HTML pag=
e. (Chromium security severity: Critical) 2026-08-06 not yet calculated CVE= -2026-19154 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19154 ] Google--C= hrome Use after free in Payments in Google Chrome prior to 151.0.7922.109 a= llowed a remote attacker who had compromised the renderer process to potent= ially perform a sandbox escape via a crafted HTML page. (Chromium security = severity: High) 2026-08-06 not yet calculated CVE-2026-19155 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-19155 ] Google--Chrome Heap buffer overflow=
in Base in Google Chrome prior to 151.0.7922.109 allowed an attacker who c= onvinced a user to install a malicious extension to potentially exploit hea=
p corruption via a crafted Chrome Extension. (Chromium security severity: H= igh) 2026-08-06 not yet calculated CVE-2026-19156 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-19156 ] Google--Chrome Out of bounds write in ANGLE in=
Google Chrome on Android prior to 151.0.7922.109 allowed a remote attacker=
to potentially perform a sandbox escape via a crafted HTML page. (Chromium=
security severity: Critical) 2026-08-06 not yet calculated CVE-2026-19157 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-19157 ] Google--Chrome Use af= ter free in Views in Google Chrome on Windows prior to 151.0.7922.109 allow=
ed a remote attacker who convinced a user to engage in specific UI gestures=
to potentially exploit heap corruption via a crafted HTML page. (Chromium = security severity: High) 2026-08-06 not yet calculated CVE-2026-19158 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-19158 ] Google--Chrome Use after f= ree in Views in Google Chrome prior to 151.0.7922.109 allowed a remote atta= cker who convinced a user to engage in specific UI gestures to potentially = exploit heap corruption via a crafted HTML page. (Chromium security severit=
y: High) 2026-08-06 not yet calculated CVE-2026-19159 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-19159 ] Google--Chrome Uninitialized Use in Skia i=
n Google Chrome prior to 151.0.7922.109 allowed a remote attacker who had c= ompromised the renderer process to leak cross-origin data via a crafted HTM=
L page. (Chromium security severity: High) 2026-08-06 not yet calculated CV= E-2026-19160 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19160 ] Google--= Chrome Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 a= llowed a remote attacker who had compromised the renderer process to leak c= ross-origin data via a crafted HTML page. (Chromium security severity: High=
) 2026-08-06 not yet calculated CVE-2026-19161 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-19161 ] Google--Chrome Out of bounds write in V8 in Googl=
e Chrome prior to 151.0.7922.109 allowed a remote attacker to execute arbit= rary code inside a sandbox via a crafted HTML page. (Chromium security seve= rity: High) 2026-08-06 not yet calculated CVE-2026-19162 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-19162 ] Google--Chrome Use after free in Media =
in Google Chrome on Windows prior to 151.0.7922.109 allowed a remote attack=
er who had compromised the renderer process to potentially perform a sandbo=
x escape via a crafted HTML page. (Chromium security severity: High) 2026-0= 8-06 not yet calculated CVE-2026-19163 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-19163 ] Google--Chrome Insufficient validation of untrusted inp=
ut in Codecs in Google Chrome prior to 151.0.7922.109 allowed a remote atta= cker to potentially perform a sandbox escape via a crafted HTML page. (Chro= mium security severity: High) 2026-08-06 not yet calculated CVE-2026-19164 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-19164 ] Google--Chrome Use af= ter free in Extensions in Google Chrome prior to 151.0.7922.109 allowed an = attacker who convinced a user to install a malicious extension to execute a= rbitrary code inside a sandbox via a crafted Chrome Extension. (Chromium se= curity severity: High) 2026-08-06 not yet calculated CVE-2026-19165 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-19165 ] Google--Chrome Use after fre=
e in Web Authentication in Google Chrome prior to 151.0.7922.109 allowed a = remote attacker to potentially perform a sandbox escape via a crafted HTML = page. (Chromium security severity: High) 2026-08-06 not yet calculated CVE-= 2026-19166 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19166 ] Google--Ch= rome Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allow=
ed a remote attacker who had compromised the renderer process to leak cross= -origin data via a crafted HTML page. (Chromium security severity: High) 20= 26-08-06 not yet calculated CVE-2026-19167 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-19167 ] Google--Chrome Inappropriate implementation in V8 in = Google Chrome prior to 151.0.7922.109 allowed a remote attacker to execute = arbitrary code inside a sandbox via a crafted HTML page. (Chromium security=
severity: High) 2026-08-06 not yet calculated CVE-2026-19168 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-19168 ] Google--Chrome Insufficient valida= tion of untrusted input in Contextual Tasks in Google Chrome prior to 151.0= .7922.109 allowed a remote attacker to perform privilege escalation via a c= rafted HTML page. (Chromium security severity: High) 2026-08-06 not yet cal= culated CVE-2026-19169 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19169 =
] Google--Chrome Use after free in WebGL in Google Chrome on Android prior =
to 151.0.7922.109 allowed a remote attacker to potentially perform a sandbo=
x escape via a crafted HTML page. (Chromium security severity: Critical) 20= 26-08-06 not yet calculated CVE-2026-19170 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-19170 ] Google--Chrome Use after free in Media in Google Chro=
me on Windows prior to 151.0.7922.109 allowed a remote attacker to potentia= lly perform a sandbox escape via a crafted HTML page. (Chromium security se= verity: High) 2026-08-06 not yet calculated CVE-2026-19171 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-19171 ] Google--Chrome Use after free in View=
s in Google Chrome prior to 151.0.7922.109 allowed a remote attacker who ha=
d compromised the renderer process to potentially perform a sandbox escape = via a crafted HTML page. (Chromium security severity: Critical) 2026-08-06 = not yet calculated CVE-2026-19172 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-19172 ] Google--Chrome Out of bounds write in Skia in Google Chrome pr= ior to 151.0.7922.109 allowed a remote attacker who had compromised the ren= derer process to potentially perform a sandbox escape via a crafted HTML pa= ge. (Chromium security severity: High) 2026-08-06 not yet calculated CVE-20= 26-19173 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19173 ] Google--Chro=
me Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed =
a remote attacker to execute arbitrary code inside a sandbox via a crafted = HTML page. (Chromium security severity: High) 2026-08-06 not yet calculated=
CVE-2026-19174 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19174 ] Googl= e--Chrome Use after free in Payments in Google Chrome prior to 151.0.7922.1=
09 allowed a remote attacker to potentially perform a sandbox escape via a = crafted HTML page. (Chromium security severity: High) 2026-08-06 not yet ca= lculated CVE-2026-19175 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19175=
] Google--Chrome Use after free in Skia in Google Chrome prior to 151.0.79= 22.109 allowed a remote attacker who had compromised the renderer process t=
o execute arbitrary code inside a sandbox via a crafted HTML page. (Chromiu=
m security severity: High) 2026-08-06 not yet calculated CVE-2026-19176 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-19176 ] Google--Chrome Insuffici= ent validation of untrusted input in UI in Google Chrome prior to 151.0.792= 2.109 allowed a remote attacker who had compromised the renderer process to=
potentially perform a sandbox escape via a crafted HTML page. (Chromium se= curity severity: High) 2026-08-06 not yet calculated CVE-2026-19177 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-19177 ] Gutenberg Essential Blocks--= Gutenberg Essential Blocks The Gutenberg Essential Blocks WordPress plugin = before 6.4.0 does not restrict access to one of its public REST routes and = over-fetches a non-public WooCommerce per-product sales metric into the res= ponse, allowing unauthenticated users to read the lifetime number of units = sold for any published product. 2026-08-06 not yet calculated CVE-2026-1315=
3 [ https://www.cve.org/CVERecord?id=3DCVE-2026-13153 ] Gutenberg Essential=
Blocks--Gutenberg Essential Blocks The Gutenberg Essential Blocks WordPres=
s plugin before 6.4.0 does not verify that an attacker-supplied post type i=
s publicly viewable before querying it in one of its public REST routes, al= lowing unauthenticated users to read published entries of custom post types=
that the site registered as non-public. 2026-08-06 not yet calculated CVE-= 2026-13154 [ https://www.cve.org/CVERecord?id=3DCVE-2026-13154 ] H3C--H3C M= agic H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V10= 0R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 = V100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multip=
le command injection vulnerabilities in the /api/esps request handler. The = affected object interfaces and methods are esps.dhcpd.vlan (getlist, delete=
), esps.filter.url (add, modify), esps.apcm.version (delete, H3C Magic NX15=
only), esps.swcm.version (delete, upgrade, all affected models except H3C = Magic NX15), and esps.system.ntp (set, all affected models except H3C Magic=
NX15). Attacker-controlled request parameters are incorporated into shell = expressions executed by eval without adequate validation, allowing a remote=
attacker to execute arbitrary commands as root and gain complete control o=
f the affected device. 2026-08-04 not yet calculated CVE-2025-29296 [ https= ://www.cve.org/CVERecord?id=3DCVE-2025-29296 ] HP Inc--HP DesignJet T3500 C= ertain HP DesignJet products may be potentially vulnerable to cross-site sc= ripting (XSS), which may allow unauthenticated HTTP requests to view print = job previews. 2026-08-03 not yet calculated CVE-2026-18243 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-18243 ] ics-park--ics-park v2.0 Insecure Perm= issions vulnerability in ics-park v.2.0 allows a remote attacker to escalat=
e privileges via the /system/role/save endpoint in RoleController.java and = system/user/update endpoint in UserController.java 2026-08-06 not yet calcu= lated CVE-2026-67687 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67687 ] = ICS-Park--Smart Park Management System V2.0 ICS-Park Smart Park Management = System v2.0 contains an unrestricted file upload vulnerability in the file = upload module. This allows a remote attacker to execute arbitrary code. 202= 6-08-06 not yet calculated CVE-2026-67688 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-67688 ] Imagination Technologies--Graphics DDK Kernel software=
from a non-secure operating system on a platform with Trusted Execution En= vironment support, may cause GPU Firmware to boot up using data from non-se= cure memory. The GPU thread of control (Firmware) uses a pointer from non-s= ecure memory belonging to the Rich Execution Environment (REE) when saving =
or retrieving internal data between the tightly coupled private memory to m= ain memory. An attacker with control over the REE kernel may modify the poi= nter value, corrupting the data used by the GPU Firmware. 2026-08-07 not ye=
t calculated CVE-2026-45198 [ https://www.cve.org/CVERecord?id=3DCVE-2026-4= 5198 ] Imagination Technologies--Graphics DDK Software installed and run as=
a non-privileged user may conduct improper GPU system calls to trigger OOB=
access and kernel null pointer dereference in an error path. Null pointer = dereference occurs in an error path of a function running in kernel thread =
of execution leading to kernel exceptions, platform instability and denial =
of service. 2026-08-07 not yet calculated CVE-2026-45204 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-45204 ] Imagination Technologies--Graphics DDK = Software installed and run as a non-privileged user may conduct improper GP=
U system calls to cause OOB read kernel memory access and in certain cases = cause GPU UAF of arbitrary pages. Incorrect validation of array index can l= ead to OOB read and potentially to GPU UAF of arbitrary pages. 2026-08-07 n=
ot yet calculated CVE-2026-49746 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-49746 ] Import and export users and customers--Import and export users = and customers The Import and export users and customers WordPress plugin be= fore 2.4.3 does not restrict the path of a file it reads and displays durin=
g a CSV import, allowing high-privileged users to read arbitrary files on t=
he server. 2026-08-03 not yet calculated CVE-2025-15673 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2025-15673 ] Import and export users and customers--I= mport and export users and customers The Import and export users and custom= ers WordPress plugin before 2.4.2 does not enforce WordPress's role-assignm= ent and per-user edit permissions during CSV import, allowing a user holdin=
g only the user-creation capability to create an administrator account and =
to overwrite an existing administrator's password or email. 2026-08-03 not = yet calculated CVE-2026-16534 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -16534 ] Improve SEO--Improve SEO The Improve SEO WordPress plugin through = 2.0.11 does not properly validate uploaded files, checking only the file co= ntent type while writing the file with the attacker-supplied extension into=
a publicly accessible directory, allowing unauthenticated users to upload = executable PHP files and achieve remote code execution. 2026-08-04 not yet = calculated CVE-2026-16618 [ https://www.cve.org/CVERecord?id=3DCVE-2026-166=
18 ] InfiniteWP Client--InfiniteWP Client The InfiniteWP Client WordPress p= lugin before 1.13.6 does not properly verify the site-connection state and = the authenticity of requests to its remote-management endpoint on WordPress=
Multisite installations, allowing unauthenticated attackers to bind their = own key, hijack an administrator session, and take over the entire network,=
leading to remote code execution. 2026-08-09 not yet calculated CVE-2026-1= 5038 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15038 ] Insert or Embed = Articulate Content into WordPress--Insert or Embed Articulate Content into = WordPress The Insert or Embed Articulate Content into WordPress plugin thro= ugh 4.3000000027 does not correctly validate the contents of an uploaded ar= chive, relying on a bypassable check that lets an Editor-level user upload =
a server-executable file into a public directory, resulting in remote code = execution on servers configured to execute it. 2026-08-03 not yet calculate=
d CVE-2026-16060 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16060 ] Inte= grated Systems Technologies, Inc.--NetKids iMark NetKids iMark, provided by=
Integrated Systems Technologies, Inc., contains an Uncontrolled Search Pat=
h Element vulnerability (CWE-427). An authenticated attacker may exploit th=
is vulnerability to execute arbitrary code with SYSTEM privileges. 2026-08-=
05 not yet calculated CVE-2026-66344 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-66344 ] Integrated Systems Technologies, Inc.--NetKids iMark NetKid=
s iMark, provided by Integrated Systems Technologies, Inc., contains an Unq= uoted Search Path or Element vulnerability (CWE-428). An authenticated atta= cker may exploit this vulnerability to execute arbitrary code with SYSTEM p= rivileges. 2026-08-05 not yet calculated CVE-2026-66839 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-66839 ] Iptanus File Upload--Iptanus File Upload=
The Iptanus File Upload WordPress plugin before 5.1.8 does not properly sa= nitise and escape a parameter before using it in a SQL statement, leading t=
o an SQL injection exploitable by unauthenticated users. 2026-08-09 not yet=
calculated CVE-2026-17044 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17= 044 ] Jenkins Project--Jenkins In Remoting 3384.v60d89463d9e0 and earlier, = except 3355.3357.v931d3c992987, included in Jenkins 2.575 and earlier, LTS = 2.568.1 and earlier, the JEP-200 class filter is not applied to classes res= olved via a fallback path in the Remoting deserialization implementation, a= llowing agent processes, code running on agents, and attackers with Agent/C= onnect permission to bypass the JEP-200 deserialization filter for classes =
on the Jenkins core classpath. 2026-08-05 not yet calculated CVE-2026-70426=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-70426 ] Jenkins Project--Jen= kins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely han= dle symbolic links with effectively empty names during the extraction of `.= tar` and `.tar.gz` archives, allowing attackers able to control agent proce= sses to provide crafted archives to the controller to write files to arbitr= ary locations on the file system, restricted only by file system access per= missions of the user running Jenkins. 2026-08-05 not yet calculated CVE-202= 6-70427 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70427 ] Jenkins Proje= ct--Jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly i= dentifies file paths attempting path traversal in file parameter names, all= owing attackers with Item/Configure and Item/Build permission to write file=
s to arbitrary locations on the controller file system. 2026-08-05 not yet = calculated CVE-2026-70428 [ https://www.cve.org/CVERecord?id=3DCVE-2026-704=
28 ] Jenkins Project--Jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and ea= rlier handles case-insensitivity in user names and group names inconsistent= ly, allowing attackers able to create new users or groups with names that c= ase-insensitively match other characters to impersonate other users or be g= ranted their permissions in some circumstances. 2026-08-05 not yet calculat=
ed CVE-2026-70429 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70429 ] Jen= kins Project--Jenkins Jenkins 2.575 and earlier, LTS 2.568.1 and earlier do=
es not restrict the types of objects that can be instantiated as part of th=
e project naming strategy configuration, allowing attackers with Overall/Ma= nage permission to instantiate arbitrary types related to configuration, in= cluding those intended for configuration only by administrators. 2026-08-05=
not yet calculated CVE-2026-70430 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-70430 ] Jenkins Project--Jenkins AWS CodeBuild Plugin Missing permiss= ion checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier allow attackers=
with Overall/Read permission to enumerate credentials IDs of credentials s= tored in Jenkins. 2026-08-05 not yet calculated CVE-2026-70447 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-70447 ] Jenkins Project--Jenkins CodeSona=
r Plugin Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and ea= rlier allow attackers with Overall/Read permission to enumerate credentials=
IDs of credentials stored in Jenkins. 2026-08-05 not yet calculated CVE-20= 26-70446 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70446 ] Jenkins Proj= ect--Jenkins External Workspace Manager Plugin Jenkins External Workspace M= anager Plugin 1.4.1 and earlier does not perform a permission check (1.4.0 = and earlier) or performs an improper permission check (1.4.1) when providin=
g access to externally-managed workspaces through the workspace browser, al= lowing attackers with Overall/Read permission to read files in workspaces t= hey are not authorized to access. 2026-08-05 not yet calculated CVE-2026-70= 436 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70436 ] Jenkins Project--= Jenkins Google Chat Notification Plugin Jenkins Google Chat Notification Pl= ugin 166.ve6b_de280f2e8 and earlier does not set the appropriate context fo=
r credentials lookup, allowing attackers with Item/Configure permission to = access and capture credentials they are not entitled to use. 2026-08-05 not=
yet calculated CVE-2026-70442 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-70442 ] Jenkins Project--Jenkins HCL AppScan Plugin Missing permission ch= ecks in Jenkins HCL AppScan Plugin 1.8.3 and earlier allow attackers with O= verall/Read permission to enumerate credentials IDs of credentials stored i=
n Jenkins. 2026-08-05 not yet calculated CVE-2026-70433 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-70433 ] Jenkins Project--Jenkins Horreum Plugin = Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set = the appropriate context for credentials lookup, allowing attackers with Ite= m/Configure permission to have Jenkins send credentials they are not entitl=
ed to use to the administrator-configured Horreum URL. 2026-08-05 not yet c= alculated CVE-2026-70443 [ https://www.cve.org/CVERecord?id=3DCVE-2026-7044=
3 ] Jenkins Project--Jenkins Ivy Report Plugin Jenkins Ivy Report Plugin 1.=
2 and earlier does not configure its XML parser to prevent XML external ent= ity (XXE) attacks when processing Ivy report files. 2026-08-05 not yet calc= ulated CVE-2026-70448 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70448 ]=
Jenkins Project--Jenkins Multijob Plugin Jenkins Multijob Plugin 669.v9d96= a_d9c71b_0 and earlier provides Groovy scripting features that do not integ= rate with Script Security Plugin, allowing attackers with Item/Create or It= em/Configure permission to execute arbitrary code in the context of the Jen= kins controller JVM. 2026-08-05 not yet calculated CVE-2026-70431 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-70431 ] Jenkins Project--Jenkins Multi= job Plugin A cross-site request forgery (CSRF) vulnerability in Jenkins Mul= tijob Plugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute ar= bitrary code in the context of the Jenkins controller JVM. 2026-08-05 not y=
et calculated CVE-2026-70432 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 70432 ] Jenkins Project--Jenkins Parameterized Remote Trigger Plugin A miss= ing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2.2 a=
nd earlier allows attackers with Overall/Read permission to enumerate crede= ntials IDs of credentials stored in Jenkins. 2026-08-05 not yet calculated = CVE-2026-70438 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70438 ] Jenkin=
s Project--Jenkins Qualys Container Scanning Connector Plugin Jenkins Qualy=
s Container Scanning Connector Plugin 1.8.0.5 and earlier does not escape u= ser-controlled field values in a JavaScript context, resulting in a stored = cross-site scripting (XSS) vulnerability exploitable by attackers with Item= /Configure permission. 2026-08-05 not yet calculated CVE-2026-70440 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-70440 ] Jenkins Project--Jenkins Sau=
ce OnDemand Plugin Missing permission checks in Jenkins Sauce OnDemand Plug=
in 2.2.0 and earlier allow attackers with Overall/Read permission to enumer= ate credentials IDs of credentials stored in Jenkins. 2026-08-05 not yet ca= lculated CVE-2026-70445 [ https://www.cve.org/CVERecord?id=3DCVE-2026-70445=
] Jenkins Project--Jenkins SCM-Manager Plugin A cross-site request forgery=
(CSRF) vulnerability in Jenkins SCM-Manager Plugin 1.11.1 and earlier allo=
ws attackers to connect to an attacker-specified URL using attacker-specifi=
ed credentials IDs obtained through another method, capturing credentials s= tored in Jenkins. 2026-08-05 not yet calculated CVE-2026-70434 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-70434 ] Jenkins Project--Jenkins SCM-Mana= ger Plugin A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 = and earlier allows attackers with Overall/Read permission to connect to an = attacker-specified URL using attacker-specified credentials IDs obtained th= rough another method, capturing credentials stored in Jenkins. 2026-08-05 n=
ot yet calculated CVE-2026-70435 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-70435 ] Jenkins Project--Jenkins Summary Display Plugin Jenkins Summary=
Display Plugin 1.15 and earlier does not escape the job name in a JavaScri=
pt context in build report pages, resulting in a stored cross-site scriptin=
g (XSS) vulnerability exploitable by attackers with Item/Create or Item/Con= figure permission. 2026-08-05 not yet calculated CVE-2026-70441 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-70441 ] Jenkins Project--Jenkins Violati=
on Comments to GitLab Plugin A missing permission check in Jenkins Violatio=
n Comments to GitLab Plugin 2.62.0 and earlier allows attackers with Overal= l/Read permission to enumerate credentials IDs of credentials stored in Jen= kins. 2026-08-05 not yet calculated CVE-2026-70444 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-70444 ] Jenkins Project--Jenkins Webhook Secret Crede= ntials Provider Plugin Jenkins Webhook Secret Credentials Provider Plugin 1= 6.v0cfa_f0215cf5 and earlier does not use a constant-time comparison functi=
on when checking whether the provided and expected webhook bearer token are=
equal, potentially allowing attackers to use statistical methods to obtain=
a valid webhook bearer token. 2026-08-05 not yet calculated CVE-2026-70437=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-70437 ] Jenkins Project--Jen= kins XML Job to Job DSL Plugin Jenkins XML Job to Job DSL Plugin 0.1.13 and=
earlier does not perform permission checks, allowing attackers lacking app= ropriate permissions to invoke the conversion functionality. 2026-08-05 not=
yet calculated CVE-2026-70439 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-70439 ] JONASBN--Crypt::OpenSSL::PKCS12 Crypt::OpenSSL::PKCS12 versions b= efore 1.98 for Perl allow a NULL pointer dereference in print_attribute via=
a zero length BMPSTRING attribute. print_attribute() sizes the destination=
buffer for a BMPSTRING attribute from its declared byte length with `Renew= (*attribute, length, char)`. A zero length attribute makes that a zero size=
reallocation, which Perl implements as a free returning NULL, so the buffe=
r pointer becomes NULL, the following `strncpy` copies nothing, and the cal= ler dereferences NULL in the `strlen()` it passes to `newSVpvn()`. A zero l= ength BMPSTRING is even length, so the ASN.1 decoder accepts it and the val=
ue reaches this code. The UTF8STRING, OCTET STRING and BIT STRING arms size=
on `length + 1` or `length * 4 + 1` and are unaffected. Any caller that pa= sses an untrusted PKCS#12 file to info_as_hash() can crash the process. inf= o() prints attribute values directly without sizing a buffer and is unaffec= ted. 2026-08-09 not yet calculated CVE-2026-17510 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-17510 ] joomshaper.com--SP Page Builder extension for = Joomla Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Sh= apes API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can=
store malicious JavaScript in a Joomla site's database via a single HTTP r= equest. When an administrator opens the SP Page Builder editor, the JavaScr= ipt executes in their browser automatically.. 2026-08-07 not yet calculated=
CVE-2026-66494 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66494 ] jpill= ora--chisel Chisel is a TCP/UDP tunnel, transported over HTTP and secured v=
ia SSH. In versions prior to 1.11.5, authenticated clients can bypass --aut= hfile ACL restrictions and tunnel traffic to arbitrary destinations reachab=
le from the server. The ACL is enforced only during the initial handshake a= gainst declared remotes, but never on subsequent SSH channels that carry ac= tual traffic. A malicious client can authenticate with a permitted remote, = then open channels to any host:port it wants. This issue has been fixed in = version 1.11.5. 2026-08-03 not yet calculated CVE-2026-48113 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-48113 ] kata-containers--kata-containers Ka=
ta Containers is an open source project focusing on a standard implementati=
on of lightweight Virtual Machines (VMs) that perform like containers. Prio=
r to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a gu= est-root to host-root escape. In this configuration, Kata runs the host vir= tiofsd as root with --sandbox none --seccomp none, so an attacker with root= -equivalent access inside the guest can bypass the guest virtio-fs client e= ntirely by taking over the virtio-fs PCI device and building a virtqueue in=
userspace to submit raw FUSE requests directly to the host virtiofsd. A cr= afted FUSE_SYMLINK request whose new symlink name is an absolute host path =
is honored outside the configured shared directory, allowing guest root to = create root-owned symlinks in sensitive host locations such as /etc/cron.d.=
By pointing such a symlink at a guest-controlled crontab payload reachable=
through a live runtime process's mount namespace, the attacker causes the = host cron daemon to execute that payload as host root, crossing the Kata is= olation boundary. This issue is fixed in version 3.31.0. 2026-08-07 not yet=
calculated CVE-2026-47243 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47= 243 ] klever-io--klever-go Klever-Go is the Go implementation of the Klever=
blockchain protocol. Prior to 1.7.20, header signature verification counts=
the unused padding bits of the PubKeysBitmap toward the two-thirds validat=
or quorum. These padding bits do not correspond to any validator and are ig= nored by the actual BLS aggregate-signature check, so a malicious or compro= mised block producer can set them to reach the required quorum while gather= ing fewer genuine validator signatures than the protocol demands. As a resu= lt, nodes that import or intercept the header accept it as correctly signed=
without a real two-thirds quorum, weakening consensus safety and undermini=
ng finality. This issue is fixed in version 1.7.20. 2026-08-07 not yet calc= ulated CVE-2026-58262 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58262 ]=
Kong--Kong Event Gateway Kong Event Gateway versions 1.0.0 through 1.1.1 a=
nd 1.2.0 do not enforce key rotation before reaching NIST SP 800-38D recomm= ended usage limit for AES-GCM encryption keys with random nonces when the A=
WS IAM encryption feature is enabled. If a producer sends messages at a sus= tained high rate without key rotation, which only occurs on reboot of the K= ong Event Gateway instance, the probability of a nonce collision becomes no= n-negligible. An authorized consumer who detects a nonce collision can reco= ver parts of plaintext from the affected messages. New versions 1.1.2 and 1= .2.1 enforce automatic key rotation before the recommended usage limit is r= eached. 2026-08-05 not yet calculated CVE-2026-17578 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-17578 ] Latvijas Valsts radio un televzijas centrs = (LVRTC)--eParaksttjs 3.0 eParakst=C3=83=E2=80=9E=C3=82=C2=ABt=C3=83=E2=80= =9E=C3=82=C2=81js 3.0 for Windows before version 1.10.0 retrieves and execu= tes its automatic updates over a channel that is not authenticated or integ= rity-protected. On each launch the application fetches an update descriptor=
(XML) over TLS but accepts any TLS certificate (a permissive TrustManager = and a HostnameVerifier that always returns true), does not verify any digit=
al signature on the update descriptor, and does not verify the Authenticode=
signature or a checksum of the downloaded installer before running it. A m= an-in-the-middle attacker able to redirect www.eparaksts.lv can serve a cra= fted update descriptor pointing to an attacker-controlled executable, which=
the client downloads and executes, resulting in arbitrary code execution o=
n the victim host. 2026-08-03 not yet calculated CVE-2026-0392 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-0392 ] Legion of the Bouncy Castle Inc.--= BC-FJA In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.=
X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key mat= erial held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSe= cretKey and the PBKD and scrypt parameter classes was zeroised on garbage c= ollection by overriding Object.finalize. Finalization runs at an unspecifie=
d time and in an unspecified order and is serviced by a single finalizer th= read, so where objects carrying a finalizer are allocated faster than that = thread retires them the pending-finalization queue grows without bound: dis= posal falls arbitrarily far behind, which can contribute to an OutOfMemoryE= rror under load, and the key material those objects hold stays resident in = the heap for as long as they are queued, defeating the purpose of the zeroi= sation. The behaviour was not a problem on Java 8 or Java 11; it is later J= VMs, on which finalization has been deprecated and progressively de-emphasi= sed, where it becomes one. Disposal of these classes now runs from a java.l= ang.ref.Cleaner registered in the multi-release jdk1.9 overlay, so on Java =
9 and later it no longer depends on the finalizer being scheduled. Bouncy C= astle for Java (bcprov) and Bouncy Castle for Java LTS are not affected, as=
neither implements the finalizer-based zeroisation scheme. 2026-08-08 not = yet calculated CVE-2026-13505 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -13505 ] Legion of the Bouncy Castle Inc.--BC-FJA In Bouncy Castle for Java=
FIPS (BC-FJA) before bc-fips 2.1.3, the native entropy source used on Inte=
l platforms retried the CPU entropy instructions without any bound. RDSEED = and RDRAND report failure through their carry flag, and the JNI seeding rou= tine spun re-issuing the instruction for as long as that flag stayed clear,=
so a persistent failure of the on-chip entropy source - whether from a har= dware fault, from the underlying DRBG being exhausted by contention across = many cores, or from a hypervisor that does not provide the instruction - le=
ft the calling thread looping indefinitely inside the JNI call, where it co= uld be neither interrupted nor timed out. Any operation drawing from the na= tive entropy source could therefore hang, denying service to the applicatio=
n. The retry loops are now bounded (200 attempts for RDSEED and 20 for RDRA= ND, twice the baselines given in Intel's Digital Random Number Generator so= ftware implementation guide), pausing between attempts and, on exhaustion, = clearing any partially written buffer and throwing rather than continuing t=
o spin. The clear is performed by an un-elidable memzero, which uses a vola= tile pointer and an assembly memory barrier so that a compiler cannot optim= ise the erase away as a dead store. Bouncy Castle for Java (bcprov) is not = affected, as it has no native entropy source; the 1.0.X and 2.0.X FIPS seri=
es are not affected. 2026-08-08 not yet calculated CVE-2026-8798 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-8798 ] Legion of the Bouncy Castle Inc.= --BC-JAVA In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocate=
s from untrusted lengths before integrity check. This issue also affects Bo= uncy Castle for Java LTS before 2.73.12. 2026-08-03 not yet calculated CVE-= 2026-12185 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12185 ] Legion of = the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, CMS = AuthEnvelopedData fails to enforce tag-length on decryption. This issue als=
o affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for = Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X = series) and 2.1.12 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-1= 2802 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12802 ] Legion of the Bo= uncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, KCCMBlockC= ipher MAC does not bind nonce when AAD is absent (cross-nonce AEAD forgery)=
. This issue also affects Bouncy Castle for Java LTS before 2.73.12. 2026-0= 8-03 not yet calculated CVE-2026-12803 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-12803 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Cas= tle for Java before 1.85, IESEngine stream-mode MAC forgery via length-depe= ndent KDF split. This issue also affects Bouncy Castle for Java LTS before = 2.73.12. 2026-08-03 not yet calculated CVE-2026-12816 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-12816 ] Legion of the Bouncy Castle Inc.--BC-JAVA =
In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips final = tag on chunk-aligned data. This issue also affects Bouncy Castle for Java L=
TS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-fip=
s 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series). 2= 026-08-03 not yet calculated CVE-2026-12817 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-12817 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy = Castle for Java before 1.85, MLS wire decoder allocates attacker-declared o= paque length before bounds check. 2026-08-03 not yet calculated CVE-2026-12= 852 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12852 ] Legion of the Bou= ncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, RSA PKCS#1 = verification skips last two hash bytes in NULL-omitted path. This issue als=
o affects Bouncy Castle for Java LTS before 2.73.12. 2026-08-03 not yet cal= culated CVE-2026-12860 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12860 =
] Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java befor=
e 1.85, Lazy ASN.1 sequence forcing resets nesting-depth guard. This issue = also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle f=
or Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X s= eries) and 2.1.3 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-135=
06 [ https://www.cve.org/CVERecord?id=3DCVE-2026-13506 ] Legion of the Boun=
cy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, PKCS#12 MAC = and bag-decryption KDF iteration-count bound (DoS). This issue also affects=
Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS=
(BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2= .1.3 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-13586 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-13586 ] Legion of the Bouncy Castle In= c.--BC-JAVA In Bouncy Castle for Java before 1.85, Possible OOM from unboun= ded up-front allocation on a definite-length read. This issue also affects = Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS = (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.= 1.3 (2.1.X series), and before bctls-fips 1.0.24. 2026-08-03 not yet calcul= ated CVE-2026-14682 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14682 ] L= egion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1= .85, PKCS#8 / PBES2 decryptors honour unbounded KDF cost from input. This i= ssue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Cas= tle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series), 2.0.12=
(2.0.X series) and 2.1.12 (2.1.X series). 2026-08-03 not yet calculated CV= E-2026-15055 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15055 ] Legion o=
f the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, Qu= adratic-time escaping when stringifying X.500 distinguished names. This iss=
ue also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castl=
e for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.=
X series) and 2.1.3 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-= 58059 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58059 ] Legion of the B= ouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, HSS publi= c-key level count unbounded, enabling huge allocation on verify. This issue=
also affects Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle = for Java FIPS (BC-FJA) before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X=
series). 2026-08-03 not yet calculated CVE-2026-58060 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-58060 ] Legion of the Bouncy Castle Inc.--BC-JAVA=
In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext to=
caller buffer before tag check. This issue also affects Bouncy Castle for = Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc= -fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series)=
. 2026-08-03 not yet calculated CVE-2026-58061 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-58061 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Boun=
cy Castle for Java before 1.85, Stapled OCSP response accepted without bind= ing to the checked certificate. This issue also affects Bouncy Castle for J= ava LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-= fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series). 2026-08-03 not yet calc= ulated CVE-2026-58062 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58062 ]=
Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before=
1.85, BCFKS keystore load honours unbounded KDF cost from untrusted file. = This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Boun=
cy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0=
.2 (2.0.X series) and 2.1.3 (2.1.X series). 2026-08-03 not yet calculated C= VE-2026-58063 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58063 ] Legion =
of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, J= SSE hostname verifier CN-fallback enabled by default despite documented opt= -in. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and=
Bouncy Castle for Java FIPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X serie= s), 2.0.24 (2.0.X series) and 2.1.24 (2.1.X series). 2026-08-03 not yet cal= culated CVE-2026-59638 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59638 =
] Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java befor=
e 1.85, CMS verifySignatures returns true for SignedData with zero signers.=
This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bou= ncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1.0.X series),=
2.0.12 (2.0.X series) and 2.1.12 (2.1.X series). 2026-08-03 not yet calcul= ated CVE-2026-59639 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59639 ] L= egion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1= .85, OpenPGP CFB quick-check oracle active on symmetric/session-key paths. = This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Boun=
cy Castle for Java FIPS (BC-FJA) before bcpg-fips 1.0.13 (1.0.X series), 2.= 0.13 (2.0.X series) and 2.1.13 (2.1.X series). 2026-08-03 not yet calculate=
d CVE-2026-59640 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59640 ] Legi=
on of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85=
, S/MIME validator trusts signer-asserted signingTime for path validation. = This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Boun=
cy Castle for Java FIPS (BC-FJA) before bcmail-fips and bcjmail-fips 1.0.7 = (1.0.X series), 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series). 2026-08-03 n=
ot yet calculated CVE-2026-59641 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-59641 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for = Java before 1.85, CMS AuthenticatedData content not bound to MAC when authA= ttrs present. This issue also affects Bouncy Castle for Java LTS before 2.7= 3.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fips 1.0.12 (1= .0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series). 2026-08-03 n=
ot yet calculated CVE-2026-59642 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-59642 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for = Java before 1.85, OpenPGP inline-signature policy failures silently ignored=
. This issue also affects Bouncy Castle for Java FIPS (BC-FJA) before bcpg-= fips 2.0.13. 2026-08-03 not yet calculated CVE-2026-59643 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-59643 ] Legion of the Bouncy Castle Inc.--BC-J= AVA In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitra=
ry 32-bit generation counter from sender. 2026-08-03 not yet calculated CVE= -2026-59644 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59644 ] Legion of=
the Bouncy Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, OER=
parser recurses without depth limit on self-referential IEEE 1609.2 schema=
. This issue also affects Bouncy Castle for Java LTS before 2.73.12, and Bo= uncy Castle for Java FIPS (BC-FJA) before bcutil-fips 2.0.7 (2.0.X series) = and 2.1.7 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-59645 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-59645 ] Legion of the Bouncy Cast=
le Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, DTLS handshake reas= sembler allocates buffer from unchecked 24-bit length. This issue also affe= cts Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java F= IPS (BC-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series)=
and 2.1.24 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-59646 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-59646 ] Legion of the Bouncy Ca= stle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, CRMF/CMP password= -MAC honours unbounded iteration count. This issue also affects Bouncy Cast=
le for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) be= fore bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2= .1.X series). 2026-08-03 not yet calculated CVE-2026-59647 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-59647 ] Legion of the Bouncy Castle Inc.--BC-= JAVA In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours atta= cker-chosen memory and passes. This issue also affects Bouncy Castle for Ja=
va LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg= -fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series=
). 2026-08-03 not yet calculated CVE-2026-59648 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-59648 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Bou= ncy Castle for Java before 1.85, OpenPGP user-attribute subpacket length bo= unded only by JVM max memory. This issue also affects Bouncy Castle for Jav=
a LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-= fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series)=
. 2026-08-03 not yet calculated CVE-2026-59649 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-59649 ] Legion of the Bouncy Castle Inc.--BC-JAVA In Boun=
cy Castle for Java before 1.85, MTI/A0 DH agreement exponentiates unvalidat=
ed peer value. This issue also affects Bouncy Castle for Java LTS before 2.= 73.12. 2026-08-03 not yet calculated CVE-2026-59650 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-59650 ] Legion of the Bouncy Castle Inc.--BC-JAVA In=
Bouncy Castle for Java before 1.85, BKS keystore accepts legacy version wi=
th 16-bit integrity MAC key. This issue also affects Bouncy Castle for Java=
LTS before 2.73.12. 2026-08-03 not yet calculated CVE-2026-59651 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-59651 ] Legion of the Bouncy Castle In= c.--BC-JAVA In Bouncy Castle for Java before 1.85, LDAP filter injection in=
legacy jdk1.4 LDAPStoreHelper. 2026-08-03 not yet calculated CVE-2026-5965=
2 [ https://www.cve.org/CVERecord?id=3DCVE-2026-59652 ] Legion of the Bounc=
y Castle Inc.--BC-JAVA In Bouncy Castle for Java before 1.85, Name Constrai= nts bypass via trailing dot in rfc822Name and URI. This issue also affects = Bouncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS = (BC-FJA) before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.= 1.3 (2.1.X series). 2026-08-03 not yet calculated CVE-2026-8763 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-8763 ] LEONT--perl Perl versions through=
5.45.1 have out-of-bounds heap reads and writes during regular expression = matching via an undersized superlinear cache in S_regmatch. The regex engin= e's superlinear cache holds one bit per subject position for each participa= ting WHILEM node, so the bit count is the subject length plus one times the=
number of nodes. Nothing checks that product for positive overflow of the = signed 32-bit count: a 286331153 byte subject matched against a pattern wit=
h 15 participating nodes stores the count as 14, leaving a two byte cache. = The cache is then indexed from the real match position and node number, so = reads go past the end of the allocation, and on failure CACHEsayNO sets a b=
it past it. A caller that matches an attacker controlled subject of this si=
ze against a pattern of this shape can crash the process or corrupt heap me= mory. 2026-08-09 not yet calculated CVE-2026-15534 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-15534 ] lib60870-C--lib60870-C 2.4.0 A heap-based buf= fer overflow exists in lib60870-C 2.4.0 in the server-side FileSegment ASDU=
encoding path. The issue occurs because FileSegment_encode() validates onl=
y the standalone segment length via FileSegment_GetMaxDataSize() and does n=
ot verify the residual capacity of the current ASDU frame before encoding o= bject fields and segment data 2026-08-05 not yet calculated CVE-2026-67873 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-67873 ] Link Library--Link Li= brary The Link Library WordPress plugin before 7.9.3 does not properly sani= tise and escape a user-supplied value before using it in a SQL query, allow= ing unauthenticated users to perform SQL injection attacks. 2026-08-03 not = yet calculated CVE-2026-16532 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -16532 ] Link Library--Link Library The Link Library WordPress plugin befor=
e 7.9.4 does not sanitise and escape a parameter before reflecting it back =
in a response, allowing unauthenticated attackers to perform Reflected Cros= s-Site Scripting attacks against users who can be tricked into performing a=
n action. 2026-08-08 not yet calculated CVE-2026-16535 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-16535 ] Linux--Linux In the Linux kernel, the fol= lowing vulnerability has been resolved: Input: ims-pcu - fix heap-buffer-ov= erflow in ims_pcu_process_data() The `ims_pcu_process_data()` processes inc= oming URB data byte by byte. However, it fails to check if the `read_pos` i= ndex exceeds IMS_PCU_BUF_SIZE. If a malicious USB device sends a packet lar= ger than IMS_PCU_BUF_SIZE, `read_pos` will increment indefinitely. Moreover=
, since `read_pos` is located immediately after `read_buf`, the attacker ca=
n overwrite `read_pos` itself to arbitrarily control the index. This manipu= lated `read_pos` is subsequently used in `ims_pcu_handle_response()` to cop=
y data into `cmd_buf`, leading to a heap buffer overflow. Specifically, an = attacker can overwrite the `cmd_done.wait.head` located at offset 136 relat= ive to `cmd_buf` in the `ims_pcu_handle_response()`. Consequently, when the=
driver calls `complete(&pcu->cmd_done)`, it triggers a control flow hijack=
by using the manipulated pointer. Fix this by adding a bounds check for `r= ead_pos` before writing to `read_buf`. If the packet is too long, discard i=
t, log a warning, and reset the parser state. [dtor: factor out resetting p= acket state, reset checksum as well] 2026-08-04 not yet calculated CVE-2026= -64565 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64565 ] Linux--Linux I=
n the Linux kernel, the following vulnerability has been resolved: mpls: fi=
x NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=3Dn On CONFIG_INET= =3Dn builds, mpls_valid_fib_dump_req() walks the parsed attribute table its= elf instead of calling ip_valid_fib_dump_req(). The RTA_OIF arm passes tb[R= TA_OIF] to nla_get_u32() without checking it is present, so an RTM_GETROUTE=
dump for AF_MPLS with strict checking and no RTA_OIF hits a NULL dereferen= ce. RTM_GETROUTE is RTNL_KIND_GET, which rtnetlink_rcv_msg() permits withou=
t CAP_NET_ADMIN, so an unprivileged user can trigger it. Oops: general prot= ection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [= #1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000-0x00= 00000000000007] RIP: 0010:mpls_valid_fib_dump_req (net/mpls/af_mpls.c:2189)=
Call Trace: mpls_dump_routes (net/mpls/af_mpls.c:2236) netlink_dump (net/n= etlink/af_netlink.c:2331) __netlink_dump_start (net/netlink/af_netlink.c:24= 46) rtnetlink_rcv_msg (net/core/rtnetlink.c:7033) netlink_rcv_skb (net/netl= ink/af_netlink.c:2556) netlink_unicast (net/netlink/af_netlink.c:1345) netl= ink_sendmsg (net/netlink/af_netlink.c:1900) __sock_sendmsg (net/socket.c:79=
0) ____sys_sendmsg (net/socket.c:2684) ___sys_sendmsg (net/socket.c:2738) _= _sys_sendmsg (net/socket.c:2770) do_syscall_64 (arch/x86/entry/syscall_64.c= :94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) Skip un= set attributes, as ip_valid_fib_dump_req() does. 2026-08-05 not yet calcula= ted CVE-2026-64569 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64569 ] Li= nux--Linux In the Linux kernel, the following vulnerability has been resolv= ed: wifi: p54: validate RX frame length in p54_rx_eeprom_readback() p54_rx_= eeprom_readback() copies the requested EEPROM slice out of a device-supplie=
d readback frame without checking that the skb actually holds that many byt= es. Commit da1b9a55ff11 ("wifi: p54: prevent buffer-overflow in p54_rx_eepr= om_readback()") closed the destination overflow by copying a fixed priv->ee= prom_slice_size (and rejecting a mismatched advertised len), but the source=
side is still unbounded: nothing verifies the frame is long enough to supp=
ly that many bytes. A malicious USB device can send a short frame whose adv= ertised len matches priv->eeprom_slice_size while the payload is truncated.=
The equality check passes and memcpy() reads past the end of the skb, leak= ing adjacent heap: BUG: KASAN: slab-out-of-bounds in p54_rx (drivers/net/wi= reless/intersil/p54/txrx.c:507) Read of size 1016 at addr ffff88800f077114 =
by task swapper/0/0 Call Trace: <IRQ> ... __asan_memcpy (mm/kasan/shadow.c:= 105) p54_rx (drivers/net/wireless/intersil/p54/txrx.c:507) p54u_rx_cb (driv= ers/net/wireless/intersil/p54/p54usb.c:163) __usb_hcd_giveback_urb (drivers= /usb/core/hcd.c:1657) dummy_timer (drivers/usb/gadget/udc/dummy_hcd.c:2005)=
... </IRQ> The buggy address belongs to the object at ffff88800f0770c0 whi=
ch belongs to the cache skbuff_small_head of size 704 The buggy address is = located 84 bytes inside of allocated 704-byte region [ffff88800f0770c0, fff= f88800f077380) Check that the slice fits in the skb before copying. 2026-08= -05 not yet calculated CVE-2026-64571 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-64571 ] Linux--Linux In the Linux kernel, the following vulnerabil= ity has been resolved: ipv4: fib: free fib_alias with kfree_rcu() on insert=
error path fib_table_insert() publishes new_fa into the leaf's fa_list wit=
h fib_insert_alias() before calling the fib entry notifiers. When a notifie=
r fails, the error path removes new_fa with fib_remove_alias() (hlist_del_r= cu) and frees it right away with kmem_cache_free(). fib_table_lookup() walk=
s that list under rcu_read_lock() only, so a concurrent lookup that already=
reached new_fa keeps reading it after the free: BUG: KASAN: slab-use-after= -free in fib_table_lookup (net/ipv4/fib_trie.c:1601) Read of size 1 at addr=
ffff88810676d4eb by task exploit/297 Call Trace: fib_table_lookup (net/ipv= 4/fib_trie.c:1601) ip_route_output_key_hash_rcu (net/ipv4/route.c:2814) ip_= route_output_key_hash (net/ipv4/route.c:2705) __ip4_datagram_connect (net/i= pv4/datagram.c:49) udp_connect (net/ipv4/udp.c:2144) __sys_connect (net/soc= ket.c:2167) __x64_sys_connect (net/socket.c:2173) do_syscall_64 entry_SYSCA= LL_64_after_hwframe which belongs to the cache ip_fib_alias of size 56 Trig= gering the error path needs CAP_NET_ADMIN and a registered fib notifier tha=
t can reject a route; a netdevsim device whose IPv4 FIB resource is exhaust=
ed is enough. Free new_fa with alias_free_mem_rcu(), as fib_table_delete() = already does for a fib_alias removed from the trie. 2026-08-05 not yet calc= ulated CVE-2026-64572 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64572 ]=
Linux--Linux In the Linux kernel, the following vulnerability has been res= olved: Bluetooth: qca: fix NVM tag length underflow in TLV parser In the TL= V_TYPE_NVM branch of qca_tlv_check_data() the tag loop bound is "while (idx=
< length - sizeof(struct tlv_type_nvm))". "length" is a signed int from th=
e firmware TLV header and sizeof(struct tlv_type_nvm) is a size_t (12), so = "length" is converted to size_t and any firmware-supplied "length" < 12 mak=
es the subtraction wrap to a huge value. The loop body then reads a 12-byte=
struct tlv_type_nvm past the end of the short vmalloc'd firmware buffer (a=
nd the EDL_TAG_ID_* handlers can write past it). Rewrite the bound as "idx =
+ sizeof(struct tlv_type_nvm) <=3D length"; both operands are non-negative,=
so it no longer underflows and a "length" too small for one record correct=
ly skips the loop. BUG: KASAN: vmalloc-out-of-bounds in qca_download_firmwa= re.isra.0 (drivers/bluetooth/btqca.c:421) Read of size 2 at addr ffffc90000= 0e5004 by task kworker/u9:0/52 Workqueue: hci0 hci_power_on Call Trace: ...=
kasan_report (mm/kasan/report.c:595) qca_download_firmware.isra.0 (drivers= /bluetooth/btqca.c:421 drivers/bluetooth/btqca.c:617) qca_uart_setup (drive= rs/bluetooth/btqca.c:948) qca_setup (drivers/bluetooth/hci_qca.c:2029) hci_= uart_setup (drivers/bluetooth/hci_ldisc.c:438) hci_dev_open_sync (net/bluet= ooth/hci_sync.c:5227) hci_power_on (net/bluetooth/hci_core.c:920) process_o= ne_work (kernel/workqueue.c:3322) worker_thread (kernel/workqueue.c:3486) k= thread (kernel/kthread.c:436) ret_from_fork (arch/x86/kernel/process.c:158)=
ret_from_fork_asm (arch/x86/entry/entry_64.S:245) 2026-08-05 not yet calcu= lated CVE-2026-64573 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64573 ] = Linux--Linux In the Linux kernel, the following vulnerability has been reso= lved: xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reins= ert xfrm_hash_rebuild()'s first loop preallocates the bins/chains the reins= ert loop needs, so the reinsert (after hlist_del_rcu()) cannot allocate or = fail. But its guard is inverted: it skips policies with prefixlen < thresho=
ld and preallocates for the rest. prefixlen < threshold is exactly when pol= icy_hash_bysel() returns NULL and the reinsert takes the allocating xfrm_po= licy_inexact_insert() path. So the loop preallocates for the exact policies=
(which never allocate) and skips the inexact ones, whose bin/node is then = allocated GFP_ATOMIC during reinsert. On failure the error path only WARN_O= NCE()s and continues, leaving a poisoned bydst node; the next rebuild's hli= st_del_rcu() dereferences LIST_POISON2 and takes a GPF. Reachable under mem= ory pressure, deterministic via failslab. Invert the guard so preallocation=
covers exactly the reinserted policies; the reinsert then allocates nothin=
g and cannot fail. Crash: Oops: general protection fault, probably for non-= canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI KASAN: mayb=
e wild-memory-access in range [0xdead...] ... Workqueue: events xfrm_hash_r= ebuild RIP: 0010:xfrm_hash_rebuild+0x5b3/0x1190 RAX: dead000000000122 (LIST= _POISON2 + offset) ... Call Trace: hlist_del_rcu (include/linux/rculist.h:5= 99) xfrm_hash_rebuild (net/xfrm/xfrm_policy.c:1365) process_one_work (kerne= l/workqueue.c:3322) worker_thread (kernel/workqueue.c:3486) kthread (kernel= /kthread.c:436) ret_from_fork (arch/x86/kernel/process.c:158) ret_from_fork= _asm (arch/x86/entry/entry_64.S:245) ... Kernel panic - not syncing: Fatal = exception in interrupt 2026-08-05 not yet calculated CVE-2026-64579 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-64579 ] Linux--Linux In the Linux ke= rnel, the following vulnerability has been resolved: i2c: core: fix NULL-de= ref on adapter registration failure If adapter registration ever fails the = release callback would trigger a NULL-pointer dereference as the completion=
struct has not been initialised. Note that before the offending commit thi=
s would instead have resulted in a minor memory leak of the adapter name. 2= 026-08-06 not yet calculated CVE-2026-64589 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-64589 ] Linux--Linux In the Linux kernel, the following vuln= erability has been resolved: dma-buf/udmabuf: skip redundant cpu sync to fi=
x cacheline EEXIST warning When CONFIG_DMA_API_DEBUG_SG is enabled, importi=
ng a udmabuf into a DRM driver (e.g. amdgpu for video playback in GNOME Vid= eos / Showtime) triggers a spurious warning: DMA-API: amdgpu 0000:03:00.0: = cacheline tracking EEXIST, \ overlapping mappings aren't supported WARNING:=
kernel/dma/debug.c:619 at add_dma_entry+0x473/0x5f0 The call chain is: amd= gpu_cs_ioctl -> amdgpu_ttm_backend_bind -> dma_buf_map_attachment -> [udmab= uf] map_udmabuf -> get_sg_table -> dma_map_sgtable(dev, sg, direction, 0) /=
/ attrs=3D0 -> debug_dma_map_sg -> add_dma_entry -> EEXIST This happens bec= ause udmabuf builds a per-page scatter-gather list via sg_set_folio(). When=
begin_cpu_udmabuf() has already created an sg table mapped for the misc de= vice, and an importer such as amdgpu maps the same pages for its own device=
via map_udmabuf(), the DMA debug infrastructure sees two active mappings w= hose physical addresses share cacheline boundaries and warns about the over= lap. The DMA_ATTR_SKIP_CPU_SYNC flag suppresses this check in add_dma_entry=
() because it signals that no CPU cache maintenance is performed at map/unm=
ap time, making the cacheline overlap harmless. All other major dma-buf exp= orters already pass this flag: - drm_gem_map_dma_buf() passes DMA_ATTR_SKIP= _CPU_SYNC - amdgpu_dma_buf_map() passes DMA_ATTR_SKIP_CPU_SYNC The CPU sync=
at map/unmap time is also redundant for udmabuf: begin_cpu_udmabuf() and e= nd_cpu_udmabuf() already perform explicit cache synchronization via dma_syn= c_sgtable_for_cpu/device() when CPU access is requested through the dma-buf=
interface. Pass DMA_ATTR_SKIP_CPU_SYNC to dma_map_sgtable() and dma_unmap_= sgtable() in udmabuf to suppress the spurious warning and skip the redundan=
t sync. 2026-08-06 not yet calculated CVE-2026-64590 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-64590 ] Linux--Linux In the Linux kernel, the follo= wing vulnerability has been resolved: iommu/vt-d: Avoid WARNING in sva unbi=
nd path The Intel IOMMU driver allows SVA on devices even if they do not su= pport PCI/PRI. Commit 39c20c4e83b9 ("iommu/vt-d: Only handle IOPF for SVA w= hen PRI is supported") modified the SVA bind path to allow this configurati=
on by skipping IOPF enablement when PRI is missing. However, it failed to u= pdate the unbind path. This creates an imbalance: the unbind path attempts =
to disable IOPF for a device that never had it enabled, triggering a WARNIN=
G in intel_iommu_disable_iopf(): WARNING: drivers/iommu/intel/iommu.c:3475 =
at intel_iommu_disable_iopf+0x4f/0x90d Call Trace: <TASK> blocking_domain_s= et_dev_pasid+0x50/0x70 iommu_detach_device_pasid+0x89/0xc0 iommu_sva_unbind= _device+0x73/0x150 xe_vm_close_and_put+0x4d2/0x1200 [xe] Fix this by bypass= ing IOPF operations for SVA domains on non-PRI hardware in both the bind an=
d unbind paths. 2026-08-06 not yet calculated CVE-2026-64591 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-64591 ] Linux--Linux In the Linux kernel, t=
he following vulnerability has been resolved: riscv: mm: Unconditionally sf= ence.vma for spurious fault Svvptc does not guarantee that it's safe to jus=
t return here. Since we have already cleared our bit, if, theoretically, th=
e bounded timeframe for the accessed page to become valid still hasn't happ= ened after sret, we could fault again and actually crash. Hopefully, these = spurious faults should be rare enough that this is an acceptable slowdown. = 2026-08-06 not yet calculated CVE-2026-64592 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-64592 ] Linux--Linux In the Linux kernel, the following vul= nerability has been resolved: btrfs: do not trim a device which is not writ= eable [BUG] There is a bug report that btrfs/242 can randomly fail with the=
following NULL pointer dereference: run fstests btrfs/242 at 2026-06-01 10= :25:08 BTRFS: device fsid d4d7f234-487c-4787-88e4-47a8b68c9874 devid 1 tran= sid 9 /dev/sdc (8:32) scanned by mount (122609) BTRFS info (device sdc): fi= rst mount of filesystem d4d7f234-487c-4787-88e4-47a8b68c9874 BTRFS info (de= vice sdc): using crc32c checksum algorithm BTRFS warning (device sdc): devi=
d 2 uuid fbe72d72-3272-482d-80fb-ab88ed398192 is missing BTRFS warning (dev= ice sdc): devid 2 uuid fbe72d72-3272-482d-80fb-ab88ed398192 is missing BTRF=
S info (device sdc): allowing degraded mounts BTRFS info (device sdc): turn= ing on async discard BTRFS info (device sdc): enabling free space tree Unab=
le to handle kernel NULL pointer dereference at virtual address 00000000000= 00018 user pgtable: 4k pages, 48-bit VAs, pgdp=3D000000013fd6b000 CPU: 4 UI=
D: 0 PID: 122625 Comm: fstrim Not tainted 7.0.10-2-default #1 PREEMPT(full)=
openSUSE Tumbleweed e9a5f6b24978fba3bf015a992f865837fdfff3dd Hardware name=
: QEMU KVM Virtual Machine, BIOS edk2-20250812-19.fc42 08/12/2025 pstate: 0= 1400005 (nzcv daif +PAN -UAO -TCO +DIT -SSBS BTYPE=3D--) pc : btrfs_trim_fs= +0x34c/0xa00 [btrfs] lr : btrfs_trim_fs+0x1f0/0xa00 [btrfs] Call trace: btr= fs_trim_fs+0x34c/0xa00 [btrfs f02c1d570ceea621c69d302ba75dd61868083840] (P)=
btrfs_ioctl_fitrim+0xe8/0x178 [btrfs f02c1d570ceea621c69d302ba75dd61868083= 840] btrfs_ioctl+0xdd4/0x2bd8 [btrfs f02c1d570ceea621c69d302ba75dd618680838= 40] __arm64_sys_ioctl+0xac/0x108 invoke_syscall.constprop.0+0x5c/0xd0 el0_s= vc_common.constprop.0+0x40/0xf0 do_el0_svc+0x24/0x40 el0_svc+0x40/0x1d0 el0= t_64_sync_handler+0xa0/0xe8 el0t_64_sync+0x1b0/0x1b8 Code: 17ffff83 f94017e=
0 f9002be0 f9402ea0 (f9400c00) ---[ end trace 0000000000000000 ]--- Also th=
e reporter is very kind to test the following ASSERT() added to btrfs_trim_= free_extents_throttle(): ASSERT(device->bdev, "devid=3D%llu path=3D%s dev_s= tate=3D0x%lx\n", device->devid, btrfs_dev_name(device), device->dev_state);=
And it shows the following output: assertion failed: device->bdev, in exte= nt-tree.c:6630 (devid=3D2 path=3D/dev/sdd dev_state=3D0x82) Which means the=
device->bdev is NULL, and the dev_state is BTRFS_DEV_STATE_IN_FS_METADATA =
| BTRFS_DEV_STATE_ITEM_FOUND, without BTRFS_DEV_STATE_WRITEABLE flag set. [= CAUSE] The pc points to the following call chain: btrfs_trim_fs() |- btrfs_= trim_free_extents() |- btrfs_trim_free_extents_throttle() |- bdev_max_disca= rd_sectors(device->bdev) So the NULL pointer dereference is caused by devic= e->bdev being NULL. This looks impossible by a quick glance, as just before=
calling btrfs_trim_free_extents_throttle(), we have skipped any device tha=
t has BTRFS_DEV_STATE_MISSING flag set. However in this particular case, th= ere is a window where the missing device is later re-scanned, causing btrfs=
to remove the BTRFS_DEV_STATE_MISSING flag: btrfs_control_ioctl() |- btrfs= _scan_one_device() |- device_list_add() |- rcu_assign_pointer(device->name,=
name); | This updates the missing device's path to the new good path. | |-=
clear_bit(BTRFS_DEV_STATE_MISSING, &device->dev_state) This removes the BT= RFS_DEV_STATE_MISSING flag. This allows the missing device to re-appear and=
clear the BTRFS_DEV_STATE_MISSING flag. However the device still does not = have the BTRFS_DEV_STATE_WRITEABLE flag set, nor is its bdev pointer update=
d. The bdev pointer remains NULL, triggering the crash later. [FIX] This is=
a big de-synchronization between BTRFS_DEV_STATE_MISSING and device->bdev = pointer, and shows a gap in btrfs's re-appearing-device handling. The prope=
r handling of re-appearing device will need quite some extra work, which is=
out of the context of this small ---truncated--- 2026-08-06 not yet calcul= ated CVE-2026-64593 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64593 ] L= inux--Linux In the Linux kernel, the following vulnerability has been resol= ved: usb: gadget: f_fs: initialize reset_work at allocation time ffs_fs_kil= l_sb() unconditionally calls cancel_work_sync() on ffs->reset_work when a f= unctionfs instance is unmounted: ffs_data_reset(ffs); cancel_work_sync(&ffs= ->reset_work); However ffs->reset_work is only ever initialized via INIT_WO= RK() in ffs_func_set_alt() and ffs_func_disable(), and only on the FFS_DEAC= TIVATED path. That state is reached solely by ffs_data_closed() when the in= stance is mounted with the "no_disconnect" option, so for the common case (=
no "no_disconnect", or mounted and unmounted without ever being deactivated=
) reset_work is never initialized. ffs_data_new() allocates the ffs_data wi=
th kzalloc_obj() and does not initialize reset_work, and ffs_data_reset()/f= fs_data_clear() do not touch it either, so reset_work.func is left NULL. ca= ncel_work_sync() on such a work then trips the WARN_ON(!work->func) guard i=
n __flush_work(): WARNING: kernel/workqueue.c:4301 at __flush_work+0x330/0x= 360, CPU#3: umount Call trace: __flush_work cancel_work_sync ffs_fs_kill_sb=
[usb_f_fs] deactivate_locked_super deactivate_super cleanup_mnt __cleanup_= mnt task_work_run exit_to_user_mode_loop el0_svc On older kernels cancel_wo= rk_sync() on a zero-initialized work struct was a silent no-op, which hid t=
he missing initialization. Initialize reset_work once in ffs_data_new() so =
it is always valid for the lifetime of the ffs_data, and drop the now-redun= dant INIT_WORK() calls from the two deactivation paths. 2026-08-06 not yet = calculated CVE-2026-64594 [ https://www.cve.org/CVERecord?id=3DCVE-2026-645=
94 ] Linux--Linux In the Linux kernel, the following vulnerability has been=
resolved: HID: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove()=
hid_go_cfg_probe() initialises drvdata.go_cfg_setup and schedules it to ru=
n 2 ms later: INIT_DELAYED_WORK(&drvdata.go_cfg_setup, &cfg_setup); schedul= e_delayed_work(&drvdata.go_cfg_setup, msecs_to_jiffies(2)); cfg_setup() der= eferences drvdata.hdev to issue MCU command requests. hid_go_cfg_remove() t= ears down sysfs and stops the HID device, but never drains the delayed work=
. If the device is unbound within the 2 ms scheduling delay (a probe failur=
e rolling back via remove, or a fast rmmod after probe), the work fires aft=
er hid_destroy_device() has dropped its reference and released the underlyi=
ng hdev struct, leaving cfg_setup() with a stale drvdata.hdev pointer. Mirr=
or the sibling driver hid-lenovo-go-s.c, whose hid_gos_cfg_remove() already=
calls cancel_delayed_work_sync() on its analogous work, and drain go_cfg_s= etup at the top of hid_go_cfg_remove(). The cancel must come before guard(m= utex)(&drvdata.cfg_mutex) because cfg_setup() acquires that mutex; reversin=
g the order would deadlock. 2026-08-06 not yet calculated CVE-2026-64595 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-64595 ] Linux--Linux In the Lin=
ux kernel, the following vulnerability has been resolved: libfs: set SB_I_N= OEXEC and SB_I_NODEV by default in init_pseudo() Since commit 1e7ab6f67824 = ("anon_inode: rework assertions"), path_noexec() warns when an anonymous-in= ode file is mmap'd from a superblock that has not set SB_I_NOEXEC. dma-buf = backs its files this way and never set the flag, so mmap of any exported bu= ffer trips the warning on a CONFIG_DEBUG_VFS=3Dy kernel: WARNING: CPU: 11 P= ID: 121813 at fs/exec.c:118 path_noexec+0x47/0x50 do_mmap+0x2b5/0x680 vm_mm= ap_pgoff+0x129/0x210 ksys_mmap_pgoff+0x177/0x240 __x64_sys_mmap+0x33/0x70 i= nit_pseudo() sets up internal SB_NOUSER mounts that are never path-reachabl=
e. Set both flags here so every pseudo filesystem gets them by default inst= ead of each caller setting them. SB_I_NODEV is inert for unreachable mounts=
. SB_I_NOEXEC has one visible effect: an executable mapping of a pseudo-fs = fd, such as a dma-buf, now fails with -EPERM, which is the invariant the as= sertion enforces. No in-tree caller maps these executable. Reproduce on CON= FIG_DEBUG_VFS=3Dy: make -C tools/testing/selftests/dmabuf-heaps sudo ./tool= s/testing/selftests/dmabuf-heaps/dmabuf-heap -t system 2026-08-06 not yet c= alculated CVE-2026-64596 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6459=
6 ] Linux--Linux In the Linux kernel, the following vulnerability has been = resolved: iio: adc: spear: Initialize completion before requesting IRQ In t=
he report from Jaeyoung Chung: "spear_adc_probe() in drivers/iio/adc/spear_= adc.c registers its interrupt handler with devm_request_irq() before it ini= tializes st->completion with init_completion(). If an interrupt arrives aft=
er devm_request_irq() and before init_completion(), the handler calls compl= ete() on an uninitialized completion, causing a kernel panic. The probe pat=
h, in spear_adc_probe(): iodev =3D devm_iio_device_alloc(&pdev->dev, sizeof= (*st)); /* st kzalloc-zeroed */ ... retval =3D devm_request_irq(&pdev->dev,=
irq, spear_adc_isr, 0, LPC32XXAD_NAME, st); /* register handler */ ... ini= t_completion(&st->completion); /* initialize completion */ spear_adc_isr() = calls complete(): complete(&st->completion); If the device raises an interr= upt before init_completion() runs, complete() acquires the uninitialized wa= it.lock and walks the zeroed task_list in swake_up_locked(). The zeroed tas= k_list makes list_empty() return false, so swake_up_locked() dereferences a=
NULL list entry, triggering a KASAN wild-memory-access." Fix the chance of=
a spurious IRQ causing an uninitialized pointer dereference by moving init= _completion() above devm_request_irq(). 2026-08-06 not yet calculated CVE-2= 026-64602 [ https://www.cve.org/CVERecord?id=3DCVE-2026-64602 ] Linux--Linu=
x In the Linux kernel, the following vulnerability has been resolved: platf= orm/x86: intel-hid: Protect ACPI notify handler against recursion Since com= mit e2ffcda16290 ("ACPI: OSL: Allow Notify () handlers to run on all CPUs")=
ACPI notify handlers like the intel-hid notify_handler() may run on multip=
le CPU cores racing with themselves. On convertibles and detachables (match=
ed by DMI chassis-type 31 and 32 in dmi_auto_add_switch[]) the SW_TABLET_MO=
DE input device is registered lazily from notify_handler() on the first tab= let-mode event, via intel_hid_switches_setup(). When two such events race o=
n different CPUs both can pass the !priv->switches check and register the p= riv->switches input device twice, resulting in a duplicate sysfs entry and =
a subsequent NULL pointer dereference. This is the same class of bug fixed =
by commit e075c3b13a0a ("platform/x86: intel-vbtn: Protect ACPI notify hand= ler against recursion") for the sibling intel-vbtn driver. Protect intel-hi=
d notify_handler() from racing with itself with a mutex to fix this. 2026-0= 8-06 not yet calculated CVE-2026-64603 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-64603 ] Linux--Linux In the Linux kernel, the following vulnera= bility has been resolved: KVM: VMX: Grab vmcs12 on CR8 interception update = iff vCPU is in guest mode When updating CR8 intercepts, get vmcs12 if and o= nly if the vCPU is in guest mode so that a future change can have update CR=
8 intercepts during vCPU creation, without running afoul of get_vmcs12()'s = lockdep assertion. ------------[ cut here ]------------ debug_locks && !(lo= ck_is_held(&(&vcpu->mutex)->dep_map) || !refcount_read(&vcpu->kvm->users_co= unt)) WARNING: arch/x86/kvm/vmx/nested.h:61 at get_vmcs12 arch/x86/kvm/vmx/= nested.h:60 [inline], CPU#0: syz.2.19/5879 WARNING: arch/x86/kvm/vmx/nested= .h:61 at vmx_update_cr8_intercept+0x3de/0x4e0 arch/x86/kvm/vmx/vmx.c:6879, = CPU#0: syz.2.19/5879 Modules linked in: CPU: 0 UID: 0 PID: 5879 Comm: syz.2= .19 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard PC = (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:get_vm= cs12 arch/x86/kvm/vmx/nested.h:60 [inline] RIP: 0010:vmx_update_cr8_interce= pt+0x3de/0x4e0 arch/x86/kvm/vmx/vmx.c:6879 Call Trace: <TASK> apic_update_p=
pr arch/x86/kvm/lapic.c:984 [inline] kvm_lapic_reset+0x1c24/0x2980 arch/x86= /kvm/lapic.c:3023 kvm_vcpu_reset+0x44c/0x1bf0 arch/x86/kvm/x86.c:12986 kvm_= arch_vcpu_create+0x746/0x8b0 arch/x86/kvm/x86.c:12847 kvm_vm_ioctl_create_v= cpu+0x428/0x930 virt/kvm/kvm_main.c:4201 kvm_vm_ioctl+0x893/0xd50 virt/kvm/= kvm_main.c:5159 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs/ioctl.c:= 597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x64 arch/x= 86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x86/entry/= syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK> No functio= nal change intended. 2026-08-06 not yet calculated CVE-2026-64604 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-64604 ] Linux--Linux In the Linux kern= el, the following vulnerability has been resolved: KVM: nVMX: Put vmcs12 pa= ges if nested VM-Enter fails due to invalid guest state Put all vmcs12 page=
s if KVM synthesizes a nested VM-Exit due to invalid guest while emulating = VMLAUNCH or VMRESUME. The invalid guest state path doesn't use nested_vmx_v= mexit() as that API is intended to be used if and only if L2 is active, and=
the open coded equivalent neglects to put the vmcs12 pages. Failure to put=
the vmcs12 pages leaks any pinned pages (and/or mappings) if L1 retries VM= LAUNCH/VMRESUME. Note, the !from_vmenter scenario doesn't suffer the same p= roblem, as vmx_get_nested_state_pages() only gets/pins/maps the vmcs12 page=
s if L2 is active, i.e. if a "full" VM-Exit is guaranteed before KVM will r= etry getting vmcs12 pages. 2026-08-08 not yet calculated CVE-2026-68081 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-68081 ] Linux--Linux In the Linu=
x kernel, the following vulnerability has been resolved: libceph: fix two u= nsafe bare decodes in decode_lockers() decode_lockers() in cls_lock_client.=
c contains two bare decode operations that allow a malicious or compromised=
OSD to trigger slab-out-of-bounds reads: 1. ceph_decode_32(p) at the num_l= ockers field has no preceding bounds check. ceph_start_decoding() accepts s= truct_len=3D0 as valid -- the internal ceph_decode_need(p, end, 0, bad) alw= ays passes -- so when an OSD sends struct_len=3D0, ceph_start_decoding() re= turns success with p =3D=3D end. The immediately following bare ceph_decode= _32(p) then reads 4 bytes past the validated buffer boundary. The garbage v= alue is passed directly to kzalloc_objs() as the locker count. The sibling = function decode_watchers() in osd_client.c already uses ceph_decode_32_safe=
() after its own ceph_start_decoding() call. decode_lockers() was the only = site using the bare variant. 2. ceph_decode_8(p) after the decode_locker() = loop has no preceding bounds check. If an OSD crafts num_lockers such that = the loop advances p exactly to end, the subsequent bare ceph_decode_8(p) re= ads one byte past the validated buffer boundary. The result is passed direc= tly into *type, which is used as a lock type discriminator by callers, givi=
ng an OSD-controlled one-byte OOB read with direct influence over the lock = type field. Fix both by replacing bare operations with their safe variants:=
ceph_decode_32(p) -> ceph_decode_32_safe(p, end, *num_lockers, err_inval) = ceph_decode_8(p) -> ceph_decode_8_safe(p, end, *type, err_free_lockers) The=
goto targets differ intentionally: err_inval: is a new label returning -EI= NVAL directly. It is used for the pre-allocation failure path where *locker=
s is not yet allocated and must not be passed to ceph_free_lockers(). err_f= ree_lockers: is the existing label. It is used for the post-allocation fail= ure path where *lockers is allocated and must be freed. ret is set to -EINV=
AL before ceph_decode_8_safe() so that err_free_lockers returns the correct=
error code on bounds violation. Without this, err_free_lockers would retur=
n a stale ret value (0 from the successful decode_locker() loop), silently = swallowing the error. -EINVAL is correct for both failure paths. The data r= eceived from the OSD is structurally malformed. -ENOMEM would misrepresent = the failure class to callers and to stable@ backporters triaging error path=
s. Attacker model: a malicious or compromised OSD in a multi-tenant Ceph de= ployment can trigger this against any kernel client that issues the lock.ge= t_info class method (e.g. during RBD exclusive lock acquisition). [ idryomo=
v: trim changelog, formatting ] 2026-08-08 not yet calculated CVE-2026-6808=
2 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68082 ] Linux--Linux In the=
Linux kernel, the following vulnerability has been resolved: x86/bugs: Mak=
e Safe-RET robust against interrupt injection An attacker injecting interru= pts while the Safe-RET mitigation executes on machines affected by SRSO can=
neutralize the safe return sequence, potentially leading to data leakage t= hrough speculative execution. Fixup register state as if the Safe-RET seque= nce executed successfully by "emulating" it, in a manner of speaking, and a= void executing a RET instruction after returning from the interrupt. 2026-0= 8-06 not yet calculated CVE-2026-68480 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-68480 ] livebook-dev--livebook Improper Neutralization of Speci=
al Elements used in an OS Command (OS Command Injection) vulnerability in l= ivebook-dev livebook allows command injection into generated deployment set=
up commands. LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.docker_ins= tructions/2 and LivebookWeb.Hub.Teams.DeploymentGroupAgentComponent.fly_ins= tructions/4 in lib/livebook_web/live/hub/teams/deployment_group_agent_compo= nent.ex interpolate deployment group environment variable values into the g= enerated Docker and Fly.io setup commands without shell escaping. The value=
s originate from the deployment group configuration and reach the sinks thr= ough Livebook.Hubs.Dockerfile.online_docker_info/3. Both sinks place the va= lue inside a double-quoted shell word, so a value containing a command subs= titution such as $(...) or backticks is evaluated by the shell without any = need to break out of the quoting, and a literal double quote terminates the=
quoted word and allows arbitrary further tokens. The generated command is = displayed in the Livebook web interface with a copy button, so a user who c= opies it and runs it without reviewing it first executes the injected comma= nds on their own machine, under their own account. An attacker requires pri= vileges sufficient to set deployment group environment variables, while the=
resulting code execution occurs on the machine of whoever runs the generat=
ed command. The Kubernetes instructions are not affected, because they rend=
er the same values into a YAML manifest with escaping rather than into a sh= ell command. This issue affects livebook: from 0.13.0 before 0.18.7 and fro=
m 0.19.0 before 0.19.9. 2026-08-05 not yet calculated CVE-2026-66297 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-66297 ] livebook-dev--livebook Orig=
in Validation Error vulnerability in livebook-dev livebook allows untrusted=
notebook output JavaScript to trigger session-wide keyboard shortcuts, inc= luding forced evaluation of all cells and runtime restart. Livebook's JS-vi=
ew feature renders notebook-defined JavaScript inside a sandboxed, cross-or= igin iframe specifically because that JavaScript is untrusted. The trusted = iframe shell in iframe/priv/static/iframe/v5.html forwards every keydown ev= ent fired in its own window to the parent page without consulting Event.isT= rusted, so an event synthesized by the untrusted script through window.disp= atchEvent is forwarded exactly as a genuine keystroke would be. The parent-= side relay in assets/js/hooks/js_view.js reconstructs and re-dispatches it =
on the live page with no further validation, and because assets/js/hooks/se= ssion.js registers the global shortcut handler on the document in the captu=
re phase, that handler acts on the replicated event regardless of how it wa=
s produced. Sandboxed output JavaScript can therefore drive Livebook's sess= ion-wide keyboard shortcuts. Two of them reach LivebookWeb.SessionLive and = execute immediately with no confirmation: the shortcut for queueing full ev= aluation runs every cell in the notebook, and the shortcut for reconnecting=
the runtime disconnects and reconnects it, discarding in-memory state. A t= hird shortcut deletes the focused cell behind a confirmation dialog that th=
e user can permanently dismiss, after which it too executes silently. Force=
d full evaluation is the significant consequence, because it causes the not= ebook's own Elixir code to run without the user choosing to evaluate anythi= ng. A user who merely opens a notebook obtained from a third party, or reac= hed from published documentation, can have its code executed on their runti= me. Livebook also mirrors cell outputs to every connected client, so a mali= cious output triggers in a collaborator's browser as soon as it renders. Th=
is issue affects livebook: from 0.5.0 before 0.18.7 and from 0.19.0 before = 0.19.9. 2026-08-05 not yet calculated CVE-2026-66298 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-66298 ] livebook-dev--livebook Relative Path Traver= sal vulnerability in livebook-dev livebook allows an attacker-authored note= book to write a file with attacker-controlled content to an arbitrary path.=
A .livemd notebook can declare file_entries metadata, each entry carrying =
a name. Every path that creates a file entry through the user interface val= idates that name with Livebook.Notebook.validate_file_entry_name/2, which r= equires a flat filename of alphanumerics, dashes, underscores and dots, end= ing in an extension. The import path does not: Livebook.LiveMarkdown.Import= .file_entry_metadata_to_attrs/1 in lib/livebook/live_markdown/import.ex tak=
es the name verbatim from the notebook source. For a URL-type file entry, L= ivebook.Session.file_entry_cache_file/2 in lib/livebook/session.ex resolves=
that name beneath the session's temporary directory without checking that = the result stays inside it, and Livebook.FileSystem.Utils.resolve_unix_like= _path/2 collapses parent-directory segments while clamping only at the file= system root. When the entry's content is requested and no cached copy exist=
s, Livebook fetches the entry's URL and writes the response body to the res= olved path, creating parent directories as needed. The attacker therefore c= ontrols both the destination and the contents of the written file, which ma=
y land anywhere the Livebook process can write. The same missing containmen=
t check is present in Livebook.Session.to_attachment_file_entry/2. A victim=
who opens an attacker-supplied notebook and causes the entry to be fetched=
triggers the write within their own authenticated session; the attacker ne= eds no account on the target instance. URL-type entries are also not placed=
under notebook stamping quarantine on import, so no warning is shown. This=
issue affects livebook: from 0.11.0 before 0.18.7 and from 0.19.0 before 0= .19.9. 2026-08-05 not yet calculated CVE-2026-66881 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-66881 ] livebook-dev--livebook Cross-Site Request Fo= rgery (CSRF) vulnerability in livebook-dev livebook allows an attacker to a= uthenticate a victim's browser session under the attacker's own Livebook Te= ams identity. When Livebook is configured to use Livebook Teams for identit=
y, Livebook.ZTA.LivebookTeams.handle_request/4 in lib/livebook/zta/livebook= _teams.ex handles the OAuth-style callback carrying a teams_identity marker=
and a code parameter. The clause exchanges that code for an access token a=
nd writes the token into the browser session without verifying any value th=
at ties the callback to the browser session that started the login. No stat=
e or nonce is generated when the flow is initiated: Livebook.Teams.Requests= .create_auth_request/1 in lib/livebook/teams/requests.ex sends an empty req= uest body, so no per-attempt value is ever registered, and the callback cla= use has nothing to compare against. An attacker who holds membership in the=
same Livebook Teams organisation as the target instance can therefore begi=
n the login flow themselves, retain the resulting authorization code withou=
t redeeming it, and induce a victim to open a crafted URL carrying that cod=
e. The victim's browser completes the exchange and the resulting session is=
bound to the attacker's identity rather than the victim's. The victim is n=
ot required to hold any particular privilege, and no credential belonging t=
o the victim is involved. The vulnerability does not allow the attacker to = authenticate as the victim. The consequence is that a user believes they ar=
e working in their own authenticated session while they are in fact operati=
ng as another identity. Work performed in that session is attributed to the=
attacker's account, and secrets, uploaded data, or notebook results the vi= ctim produces are exposed to the attacker rather than kept in the victim's = own account. The authorization code must be redeemed within a short window = after the login flow begins, which constrains the timing of the attack but = not its feasibility. This issue affects livebook: from 0.15.0 before 0.18.7=
and from 0.19.0 before 0.19.9. 2026-08-05 not yet calculated CVE-2026-6688=
5 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66885 ] livebook-dev--liveb= ook Not Failing Securely ('Failing Open') vulnerability in livebook-dev liv= ebook allows an unauthenticated network client to obtain full access to a L= ivebook server that enforces identity through Livebook Teams. A Livebook Ag= ent or App Server connected to Livebook Teams caches the identifier of the = deployment group it belongs to, and resolves that identifier against a loca= lly cached list of deployment groups on every request in order to decide wh= ether Teams identity enforcement is active. Livebook.Hubs.TeamClient.handle= _call/3 in lib/livebook/hubs/team_client.ex does not distinguish a deployme=
nt group that could not be resolved from one that was resolved with identit=
y enforcement switched off: the clause matches only the case where a group = was found with enforcement enabled, and falls through to a catch-all that r= eports enforcement as switched off for everything else. The two neighbourin=
g functions that decide user and application access resolve the same identi= fier and treat the same unresolved result as a denial. When the identity st= atus is reported as switched off, Livebook.ZTA.LivebookTeams.authenticate/3=
in lib/livebook/zta/livebook_teams.ex returns empty identity metadata and = allows the request to continue instead of halting it. LivebookWeb.UserPlug.= build_current_user/3 merges that empty metadata into a newly built user, wh= ose access type defaults to full access, and LivebookWeb.AuthPlug.authorize= d?/1 grants access to any user holding full access. The cached identifier b= ecomes unresolvable when the deployment group it refers to is deleted while=
the agent is not connected to receive the change, most concretely when a d= eployment group is deleted during the window in which an agent is disconnec= ted or reconnecting. The client removes the group from its cached list with= out clearing the identifier that refers to it. Any client able to reach the=
affected server over the network is then granted the same access as a full=
y privileged member of the organisation, including the ability to read note= books and configured secrets, execute code on the server's runtime, and dis= rupt its operation. This issue affects livebook: from 0.19.7 before 0.19.9.=
2026-08-05 not yet calculated CVE-2026-68746 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-68746 ] LogMyTrip--LogMyTrip The LogMyTrip WordPress plugi=
n through 1.9 does not sanitize and escape a value taken from a cookie befo=
re using it in a SQL query, allowing unauthenticated users to perform SQL i= njection attacks on any page that renders one of the LogMyTrip WordPress pl= ugin through 1.9's shortcodes. 2026-08-03 not yet calculated CVE-2026-16572=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-16572 ] lud--oaskit Improper=
Neutralization of Input During Web Page Generation (XSS) vulnerability in = lud oaskit allows reflected cross-site scripting via the default HTML error=
handler. Oaskit.ErrorHandler.Default.format_reason/4 and Oaskit.ErrorHandl= er.Default.reason_to_html/1 in lib/oaskit/error_handler/default.ex render r= equest-validation failures as an HTML page whenever the request's Accept he= ader contains html, interpolating request-controlled strings into that page=
without HTML escaping. The unescaped values are object keys taken from a r= equest body or from an object or deepObject query parameter, which appear i=
n the JSON Schema error's instance path when a schema rejects them (for exa= mple under additionalProperties: false), and the raw Content-Type header, r= eflected in unsupported-media-type errors when it fails to parse. Because b= rowsers send Accept: text/html on ordinary top-level navigation, a crafted = GET link is sufficient to trigger the error page; no form submission, custo=
m Content-Type, or attacker-controlled script on the victim's side is requi= red. A payload such as filter[</code></h2><script>alert(document.domain)</s= cript>]=3Dx terminates the enclosing markup and the injected script execute=
s in the origin of the application using oaskit, giving it access to that o= rigin's cookies, session, and same-origin responses. Both HTML error render= ing and the vulnerable handler are enabled by default: Oaskit.Plugs.Validat= eRequest defaults :html_errors to true and :error_handler to Oaskit.ErrorHa= ndler.Default, so applications following the documented usage are affected = without any opt-in. This issue affects oaskit: from 0.1.0 before 0.14.1. 20= 26-08-03 not yet calculated CVE-2026-66296 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-66296 ] LWS Optimize--LWS Optimize The LWS Optimize WordPress=
plugin before 4.1.2 does not properly escape a value submitted through an = unauthenticated analytics endpoint before storing it and rendering it in an=
administrative dashboard, allowing unauthenticated attackers to inject arb= itrary web scripts that execute when an administrator views the affected da= shboard page. 2026-08-09 not yet calculated CVE-2026-16032 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-16032 ] LY Corporation--LINE client for Andro=
id A code injection vulnerability exists in the LINE Android app prior to v= ersion 26.7.2. The profile rendering component does not adequately validate=
or sandbox externally supplied script content embedded in profile template=
s. As a result, an attacker who is able to place crafted content in a profi=
le could cause unintended code to execute with the application's privileges=
when a victim views that profile. A server-side mitigation has been deploy=
ed that also protects existing Android clients that have not been updated t=
o version 26.7.2. 2026-08-04 not yet calculated CVE-2026-16881 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-16881 ] M-Files Corporation--M-Files Serv=
er Denial-of-service vulnerability in M-Files Server versions before=C2=A02= 6.5.16015.3 allows an authenticated admin user to cause the M-Files Server = process to crash and fail to restart. 2026-08-05 not yet calculated CVE-202= 6-0931 [ https://www.cve.org/CVERecord?id=3DCVE-2026-0931 ] MediaTek, Inc.-= -MediaTek chipset In hevc decoder, there is a possible out of bounds write = due to an integer overflow. This could lead to remote escalation of privile=
ge if a malicious actor has already obtained the System privilege. User int= eraction is not needed for exploitation. Patch ID: ALPS11104718; Issue ID: = MSV-8297. 2026-08-03 not yet calculated CVE-2026-20464 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-20464 ] MediaTek, Inc.--MediaTek chipset In wlan =
AP driver, there is a possible out of bounds write due to a missing bounds = check. This could lead to remote (proximal/adjacent) escalation of privileg=
e with no additional execution privileges needed. User interaction is not n= eeded for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-7834. 2026-0= 8-03 not yet calculated CVE-2026-20465 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-20465 ] MediaTek, Inc.--MediaTek chipset In sec boot, there is =
a possible escalation of privilege due to a heap buffer overflow. This coul=
d lead to local escalation of privilege, if an attacker has physical access=
to the device, with no additional execution privileges needed. User intera= ction is not needed for exploitation. Patch ID: AUTO00845351 (Note: For MT2= 737) / ALPS11072643 (Note: For MT6880, MT6890, MT6990); Issue ID: MSV-6929.=
2026-08-03 not yet calculated CVE-2026-20466 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-20466 ] MediaTek, Inc.--MediaTek chipset In apusys, there =
is a possible escalation of privilege due to a missing bounds check. This c= ould lead to local escalation of privilege if a malicious actor has already=
obtained the System privilege. User interaction is not needed for exploita= tion. Patch ID: AUTO00837766; Issue ID: MSV-6767. 2026-08-03 not yet calcul= ated CVE-2026-20467 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20467 ] M= ediaTek, Inc.--MediaTek chipset In apusys, there is a possible escalation o=
f privilege due to a confused deputy. This could lead to local escalation o=
f privilege if a malicious actor has already obtained the System privilege.=
User interaction is not needed for exploitation. Patch ID: AUTO00833804; I= ssue ID: MSV-6741. 2026-08-03 not yet calculated CVE-2026-20468 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-20468 ] MediaTek, Inc.--MediaTek chipset=
In trusted_mem, there is a possible escalation of privilege due to imprope=
r input validation. This could lead to local escalation of privilege if a m= alicious actor has already obtained the System privilege. User interaction =
is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533. 202= 6-08-03 not yet calculated CVE-2026-20469 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-20469 ] MediaTek, Inc.--MediaTek chipset In Telephony, there i=
s a possible information disclosure due to a missing permission check. This=
could lead to local information disclosure with no additional execution pr= ivileges needed. User interaction is not needed for exploitation. Patch ID:=
ALPS11086431; Issue ID: MSV-8189. 2026-08-03 not yet calculated CVE-2026-2= 0470 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20470 ] MediaTek, Inc.--= MediaTek chipset In DA, there is a possible out of bounds write due to a mi= ssing bounds check. This could lead to local denial of service, if an attac= ker has physical access to the device, with no additional execution privile= ges needed. User interaction is not needed for exploitation. Patch ID: ALPS= 10991588 (Note: For MT6880, MT6890, MT6990, MT6988, MT6986, MT6813) / AUTO0= 0851171 (Note: For MT2735, MT2737); Issue ID: MSV-7790. 2026-08-03 not yet = calculated CVE-2026-20471 [ https://www.cve.org/CVERecord?id=3DCVE-2026-204=
71 ] MediaTek, Inc.--MediaTek chipset In TFA, there is a possible out of bo= unds write due to a missing bounds check. This could lead to local denial o=
f service if a malicious actor has already obtained the System privilege. U= ser interaction is not needed for exploitation. Patch ID: ALPS10991467; Iss=
ue ID: MSV-7764. 2026-08-03 not yet calculated CVE-2026-20472 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-20472 ] MediaTek, Inc.--MediaTek chipset I=
n display, there is a possible memory corruption due to use after free. Thi=
s could lead to local escalation of privilege if a malicious actor has alre= ady obtained the System privilege. User interaction is not needed for explo= itation. Patch ID: ALPS11019722; Issue ID: MSV-7759. 2026-08-03 not yet cal= culated CVE-2026-20473 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20473 =
] MediaTek, Inc.--MediaTek chipset In display, there is a possible escalati=
on of privilege due to a race condition. This could lead to local escalatio=
n of privilege if a malicious actor has already obtained the System privile= ge. User interaction is not needed for exploitation. Patch ID: ALPS11019183=
; Issue ID: MSV-7758. 2026-08-03 not yet calculated CVE-2026-20474 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-20474 ] MediaTek, Inc.--MediaTek chip= set In display, there is a possible out of bounds write due to a missing bo= unds check. This could lead to local escalation of privilege if a malicious=
actor has already obtained the System privilege. User interaction is not n= eeded for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748. 2026-08= -03 not yet calculated CVE-2026-20475 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-20475 ] MediaTek, Inc.--MediaTek chipset In ccci, there is a possi= ble out of bounds read due to a missing bounds check. This could lead to lo= cal denial of service with User execution privileges needed. User interacti=
on is not needed for exploitation. Patch ID: ALPS10981532; Issue ID: MSV-76= 60. 2026-08-03 not yet calculated CVE-2026-20476 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-20476 ] MediaTek, Inc.--MediaTek chipset In display, th= ere is a possible out of bounds write due to a missing bounds check. This c= ould lead to local escalation of privilege if a malicious actor has already=
obtained the System privilege. User interaction is not needed for exploita= tion. Patch ID: ALPS11009963; Issue ID: MSV-7658. 2026-08-03 not yet calcul= ated CVE-2026-20477 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20477 ] M= ediaTek, Inc.--MediaTek chipset In Audio HAL, there is a possible out of bo= unds write due to a heap buffer overflow. This could lead to local denial o=
f service with User execution privileges needed. User interaction is not ne= eded for exploitation. Patch ID: ALPS10981454 (Note: For MT6880, MT6890, MT= 6988, MT6990) / AUTO00851293 (Note: For MT2735, MT2737); Issue ID: MSV-7638=
. 2026-08-03 not yet calculated CVE-2026-20478 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-20478 ] MediaTek, Inc.--MediaTek chipset In Modem, there =
is a possible out of bounds read due to a missing bounds check. This could = lead to remote denial of service, if a UE has connected to a rogue base sta= tion controlled by the attacker, with no additional execution privileges ne= eded. User interaction is not needed for exploitation. Patch ID: MOLY007410= 71; Issue ID: MSV-7620. 2026-08-03 not yet calculated CVE-2026-20479 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-20479 ] MediaTek, Inc.--MediaTek ch= ipset In Audio HAL, there is a possible out of bounds write due to a heap b= uffer overflow. This could lead to local denial of service with User execut= ion privileges needed. User interaction is not needed for exploitation. Pat=
ch ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / A= UTO00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586. 2026-08-03 not = yet calculated CVE-2026-20480 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -20480 ] MediaTek, Inc.--MediaTek chipset In geniezone, there is a possible=
out of bounds write due to a missing bounds check. This could lead to loca=
l escalation of privilege if a malicious actor has already obtained the Sys= tem privilege. User interaction is not needed for exploitation. Patch ID: A= LPS10965373; Issue ID: MSV-6935. 2026-08-03 not yet calculated CVE-2026-204=
81 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20481 ] MediaTek, Inc.--Me= diaTek chipset In wlan STA FW, there is a possible system becoming unrespon= sive due to logging. This could lead to remote (proximal/adjacent) denial o=
f service with no additional execution privileges needed. User interaction =
is not needed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824=
. 2026-08-03 not yet calculated CVE-2026-20482 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-20482 ] MediaTek, Inc.--MediaTek chipset In Telephony, th= ere is a possible escalation of privilege due to a missing permission check=
. This could lead to local escalation of privilege with no additional execu= tion privileges needed. User interaction is not needed for exploitation. Pa= tch ID: ALPS11087526; Issue ID: MSV-8243. 2026-08-03 not yet calculated CVE= -2026-20483 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20483 ] MediaTek,=
Inc.--MediaTek chipset In TFA, there is a possible information disclosure = due to a missing permission check. This could lead to local information dis= closure if a malicious actor has already obtained the System privilege. Use=
r interaction is not needed for exploitation. Patch ID: ALPS11053160; Issue=
ID: MSV-8004. 2026-08-03 not yet calculated CVE-2026-20484 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-20484 ] MediaTek, Inc.--MediaTek chipset In = HFRP, there is a possible out of bounds write due to a missing bounds check=
. This could lead to local escalation of privilege if a malicious actor has=
already obtained the System privilege. User interaction is not needed for = exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931. 2026-08-03 not ye=
t calculated CVE-2026-20485 [ https://www.cve.org/CVERecord?id=3DCVE-2026-2= 0485 ] MediaTek, Inc.--MediaTek chipset In imgsensor, there is a possible a= pplication crash due to incorrect error handling. This could lead to local = escalation of privilege if a malicious actor has already obtained the Syste=
m privilege. User interaction is not needed for exploitation. Patch ID: ALP= S11012302; Issue ID: MSV-7833. 2026-08-03 not yet calculated CVE-2026-20486=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-20486 ] MediaTek, Inc.--Medi= aTek chipset In display, there is a possible information disclosure due to =
a missing bounds check. This could lead to local information disclosure if =
a malicious actor has already obtained the System privilege. User interacti=
on is not needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-77= 57. 2026-08-03 not yet calculated CVE-2026-20488 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-20488 ] MediaTek, Inc.--MediaTek chipset In display, th= ere is a possible information disclosure due to an integer overflow. This c= ould lead to local information disclosure if a malicious actor has already = obtained the System privilege. User interaction is not needed for exploitat= ion. Patch ID: ALPS11004274; Issue ID: MSV-7749. 2026-08-03 not yet calcula= ted CVE-2026-20489 [ https://www.cve.org/CVERecord?id=3DCVE-2026-20489 ] Me= diaTek, Inc.--MediaTek chipset In ccci, there is a possible out of bounds r= ead due to a missing bounds check. This could lead to local denial of servi=
ce if a malicious actor has already obtained the System privilege. User int= eraction is not needed for exploitation. Patch ID: ALPS10981501; Issue ID: = MSV-7669. 2026-08-03 not yet calculated CVE-2026-20490 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-20490 ] MediaTek, Inc.--MediaTek chipset In med, = there is a possible out of bounds write due to an incorrect bounds check. T= his could lead to local denial of service with User execution privileges ne= eded. User interaction is not needed for exploitation. Patch ID: ALPS109814=
78 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For MT2735, MT2= 737); Issue ID: MSV-7652. 2026-08-03 not yet calculated CVE-2026-20491 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-20491 ] MediaTek, Inc.--MediaTek = chipset In Audio HAL, there is a possible system becoming unresponsive due =
to a race condition. This could lead to local denial of service with User e= xecution privileges needed. User interaction is not needed for exploitation=
. Patch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO0= 0851250 (Note: For MT2735, MT2737); Issue ID: MSV-7583. 2026-08-03 not yet = calculated CVE-2026-20492 [ https://www.cve.org/CVERecord?id=3DCVE-2026-204=
92 ] MediaTek, Inc.--MediaTek chipset In wifi, there is a possible out of b= ounds write due to a missing bounds check. This could lead to local denial =
of service if a malicious actor has already obtained the System privilege. = User interaction is not needed for exploitation. Patch ID: BORA00154903; Is= sue ID: MSV-7575. 2026-08-03 not yet calculated CVE-2026-20493 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-20493 ] MediaTek, Inc.--MediaTek chipset =
In wifi, there is a possible out of bounds read due to a missing bounds che= ck. This could lead to local information disclosure if a malicious actor ha=
s already obtained the System privilege. User interaction is not needed for=
exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001, BORA001= 54907; Issue ID: MSV-7570. 2026-08-03 not yet calculated CVE-2026-20494 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-20494 ] MediaTek, Inc.--MediaTek=
chipset In Bluetooth driver, there is a possible permission bypass due to =
a missing permission check. This could lead to local escalation of privileg=
e with User execution privileges needed. User interaction is not needed for=
exploitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296. 2026-08-03 not = yet calculated CVE-2026-20495 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -20495 ] MediaTek, Inc.--MediaTek chipset In geniezone, there is a possible=
out of bounds read due to a missing bounds check. This could lead to local=
information disclosure if a malicious actor has already obtained the Syste=
m privilege. User interaction is not needed for exploitation. Patch ID: ALP= S11036877; Issue ID: MSV-7132. 2026-08-03 not yet calculated CVE-2026-20496=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-20496 ] MediaTek, Inc.--Medi= aTek chipset In geniezone, there is a possible out of bounds write due to a=
missing bounds check. This could lead to local escalation of privilege if =
a malicious actor has already obtained the System privilege. User interacti=
on is not needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; I= ssue ID: MSV-6941. 2026-08-03 not yet calculated CVE-2026-20497 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-20497 ] MediaTek, Inc.--MediaTek chipset=
In geniezone, there is a possible escalation of privilege due to a missing=
permission check. This could lead to local escalation of privilege if a ma= licious actor has already obtained the System privilege. User interaction i=
s not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-6765. = 2026-08-03 not yet calculated CVE-2026-20498 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-20498 ] Meow Gallery--Meow Gallery The Meow Gallery WordPre=
ss plugin before 5.5.2 does not escape an attachment's alt text before outp= utting it into an attribute of the link it builds for linked galleries, all= owing users with the Author role or above to store a JavaScript payload tha=
t executes in the browser of any visitor (including administrators) who vie=
ws a post containing such a gallery. 2026-08-07 not yet calculated CVE-2026= -15386 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15386 ] mermaid-js--me= rmaid Mermaid is a JavaScript tool that uses Markdown-inspired text to crea=
te and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is = vulnerable to CSS injection via sibling combinator selectors generated from=
diagram-supplied class or id names. An attacker who can supply diagram tex=
t can inject arbitrary CSS into the rendered page, potentially altering the=
appearance or behavior of unrelated page elements. This issue is fixed in = versions 10.9.8 and 11.16.1. 2026-08-06 not yet calculated CVE-2026-50159 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-50159 ] mermaid-js--mermaid Me= rmaid is a JavaScript tool that uses Markdown-inspired text to create and m= odify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16.1, Me= rmaid XY Charts are vulnerable to an infinite loop denial of service in the=
setXAxisRangeData function when configuring an X-Axis with invalid paramet= ers. Because each loop iteration appends an element to an array, this gener= ally causes a RangeError to appear after a few seconds, but it may instead = cause the page or JavaScript process to crash from memory exhaustion, depen= ding on the environment. This issue is fixed in versions 10.9.8 and 11.16.1=
. 2026-08-06 not yet calculated CVE-2026-71436 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-71436 ] mermaid-js--mermaid Mermaid is a JavaScript tool = that uses Markdown-inspired text to create and modify diagrams and charts. = From version 11.5.0 until 11.16.1, Mermaid Architecture Diagrams are vulner= able to prototype pollution when a diagram defines a group with an id of __= proto__. Because the group id is used directly as an object property key wi= thout validation, an attacker who can supply diagram text can pollute Objec= t.prototype, potentially affecting the behavior of the embedding applicatio=
n. This issue is fixed in version 11.16.1. 2026-08-06 not yet calculated CV= E-2026-71437 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71437 ] mermaid-= js--mermaid Mermaid is a JavaScript tool that uses Markdown-inspired text t=
o create and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Merma= id's configuration setters (mermaid.initialize, mermaidAPI.setConfig, and m= ermaidAPI.updateSiteConfig) merge caller-supplied configuration into Mermai= d's internal config using the assignWithDepth deep-merge helper, which is v= ulnerable to prototype pollution. This is only exploitable if an applicatio=
n forwards untrusted data directly into one of these configuration entry po= ints, which is outside their documented usage; diagram-supplied configurati=
on (e.g. %%{init: {}}%% or YAML frontmatter) is not affected. This issue is=
fixed in versions 10.9.8 and 11.16.1. 2026-08-06 not yet calculated CVE-20= 26-71438 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71438 ] mermaid-js--= mermaid Mermaid is a JavaScript tool that uses Markdown-inspired text to cr= eate and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mer= maid Radar Diagrams allow arbitrary large values for the ticks parameter, w= hich can cause high CPU usage and freeze the rendering webpage or JavaScrip=
t process for long periods of time, potentially until the process is killed=
from memory exhaustion. This issue is fixed in version 11.16.1. 2026-08-06=
not yet calculated CVE-2026-71439 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-71439 ] MervinPraison--PraisonAI PraisonAI is a multi-agent teams sys= tem. In versions 1.5.128 through 1.6.57, the praisonaiagents.tools.web_craw= l_tools.web_crawl() function is vulnerable to server-side request forgery. = While it validates the initially supplied URL and blocks direct loopback an=
d private destinations, its default httpx fallback uses httpx.Client(follow= _redirects=3DTrue) and does not revalidate intermediate or final redirect t= argets. An attacker who can influence a URL passed to web_crawl(), directly=
or through an agent or tool workflow, can supply an attacker-controlled pu= blic URL that passes the initial host check and then redirects to loopback,=
private-network, or cloud metadata endpoints reachable from the host, with=
the redirected response body returned in the web_crawl() result. This cons= titutes an incomplete fix and patch bypass for the previously disclosed web= _crawl SSRF class (GHSA-qq9r-63f6-v542 / CVE-2026-40160 and GHSA-8f4v-xfm9-= 3244), since the guard validates only the requested URL and not the destina= tion actually fetched after redirection. This issue has been fixed in versi=
on 1.6.58. 2026-08-05 not yet calculated CVE-2026-55523 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-55523 ] miniOrange 2FA--miniOrange 2FA The miniO= range 2FA WordPress plugin before 6.2.7 does not restrict who can trigger i=
ts second-factor configuration OTP send, nor bind the OTP recipient to the = enrolling user's own address, allowing a low-privileged user to send one-ti= me-passcode emails to arbitrary recipients and to exhaust the site's metere=
d OTP allowance, preventing legitimate users from receiving their second-fa= ctor codes. 2026-08-04 not yet calculated CVE-2026-16035 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-16035 ] miniOrange 2FA--miniOrange 2FA The mini= Orange 2FA WordPress plugin before 6.2.7 does not bind the second factor be= ing configured during the pre-login two-factor challenge to the target acco= unt's existing factor, allowing an attacker who knows a user's password to = rebind that user's second factor to an attacker-controlled destination, com= plete the challenge, and take over the account, including administrator acc= ounts. 2026-08-05 not yet calculated CVE-2026-16036 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-16036 ] misp--cti-transmute CTI-Transmute is affecte=
d by a server-side request forgery vulnerability in the evaluation report P= DF-generation functionality. User-controlled CTI content, including convers= ion names, descriptions, and comments, is converted from Markdown to HTML a=
nd rendered as a PDF using WeasyPrint. Before the patch, the renderer used = WeasyPrint's default URL-fetching behavior without restricting the protocol=
s or destinations that could be referenced by the generated HTML. An attack=
er able to supply content included in an evaluation report could inject cra= fted resource references using schemes such as http://, https://, or file:/=
/. When the report was rendered, CTI-Transmute could fetch these resources = using the application server's network connectivity and filesystem privileg= es. Successful exploitation could allow an attacker to: * access services a= vailable only from the CTI-Transmute server or its internal network; * prob=
e internal hosts and service endpoints; * retrieve local files readable by = the application process; and * expose fetched content through the generated=
PDF, depending on the referenced resource type and rendering context. The = vulnerability is corrected by providing WeasyPrint with a restrictive URL f= etcher that permits only self-contained data: URIs. The externally hosted G= oogle Fonts stylesheet was also removed so that PDF generation performs no = intentional network or filesystem fetches. 2026-08-03 not yet calculated CV= E-2026-69078 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69078 ] misp--ct= i-transmute CTI-Transmute contains an uncontrolled resource-consumption vul= nerability in the unauthenticated /activity_timeline endpoint. The endpoint=
accepts a user-controlled days query parameter that was not restricted to =
a reasonable range. A remote, unauthenticated attacker could submit an exce= ssively large value for this parameter, causing the application to retrieve=
and process activity data over an arbitrarily large period. This could con= sume excessive database, CPU, or memory resources, delay the processing of = concurrent requests, or trigger an internal server error. Repeated requests=
could further degrade the availability of the CTI-Transmute website. The v= ulnerability is corrected by clamping the requested timeline range to a min= imum of one day and a maximum of 1,095 days. 2026-08-03 not yet calculated = CVE-2026-69079 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69079 ] misp--= cti-transmute CTI-Transmute contained a cross-site request forgery vulnerab= ility in the administrative user deletion functionality. The /account/delet= e/<id> endpoint accepted HTTP GET requests for an operation that modified a= pplication state. An unauthenticated remote attacker could construct a mali= cious link or embed a request targeting this endpoint and induce an authent= icated CTI-Transmute administrator to visit the attacker-controlled content=
. If the administrator had an active session, the browser would automatical=
ly include the administrator's session credentials, causing the selected us=
er account to be deleted without the administrator intentionally confirming=
the operation. Successful exploitation requires interaction from a current=
ly authenticated administrator who has permission to delete users. The atta= cker does not need a CTI-Transmute account or administrative privileges bec= ause the forged request executes using the victim administrator's session. = The vulnerability could allow an attacker to delete arbitrary user accounts=
, resulting in unauthorized modification of application state and denial of=
access for affected users. Depending on whether administrators can delete = other administrators or the final administrative account, exploitation coul=
d also disrupt administration of the CTI-Transmute instance. The patch reso= lves the issue by restricting the deletion endpoint to HTTP POST requests a=
nd submitting the deletion through a form containing a CSRF token. 2026-08-=
03 not yet calculated CVE-2026-69082 [ https://www.cve.org/CVERecord?id=3DC= VE-2026-69082 ] misp--cti-transmute CTI-Transmute contains a stored cross-s= ite scripting vulnerability caused by insufficient neutralization of Vue te= mplate expression delimiters in server-rendered user-controlled data. An un= authenticated attacker can create a public conversion whose name or descrip= tion contains a malicious Vue expression using the application's configured=
[[ ... ]] delimiters. User profile names may provide an additional injecti=
on vector. Although Jinja HTML escaping is applied, the resulting value is = subsequently included in a DOM region compiled by Vue. Vue interprets the a= ttacker-controlled value as a template expression rather than ordinary text=
. By accessing the JavaScript Function constructor from within the expressi= on, an attacker can execute arbitrary JavaScript in the security context of=
the CTI-Transmute origin. The application's nonce-based Content Security P= olicy does not prevent exploitation because the Vue runtime compiler requir=
es the unsafe-eval policy exception. The malicious payload is stored by the=
application and executed whenever another user opens an affected page, suc=
h as the public conversion detail page. The victim may be a normal user or =
an administrator. Successful exploitation could allow the attacker to: * Ac= cess data available to the victim through the application. * Extract API ke= ys, tokens, or other sensitive information exposed to the page. * Perform a= uthenticated actions using the victim's session. * Modify conversions or ot= her application data. * Escalate the impact by targeting an administrator. =
A demonstrated payload can use [].constructor.constructor(...) to obtain th=
e JavaScript Function constructor and execute arbitrary code. The regressio=
n tests also show that a short first-stage payload could retrieve an uncapp=
ed conversion description and evaluate a larger second-stage payload. The p= atch addresses the vulnerability by registering a global Jinja finalize hoo=
k that inserts a zero-width Unicode word joiner inside every Vue delimiter = found in server-rendered values. This prevents Vue from recognizing the val= ues as template expressions while preserving their visible representation. = 2026-08-06 not yet calculated CVE-2026-71502 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-71502 ] misskey-dev--misskey Misskey is an open source, fed= erated social media platform. Versions 2025.3.2 and later, but prior to 202= 6.5.4, contain a vulnerability where a lack of proper permission checks all= ows access to certain data points from the Direct Messages (formerly Chat) = feature, regardless of account permissions. This vulnerability occurs wheth=
er or not federation is enabled. Notes created with "specified" visibility = (formerly "direct" visibility) are not affected. This issue has been fixed =
in version 2026.5.4. 2026-08-03 not yet calculated CVE-2026-46712 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-46712 ] misskey-dev--misskey Misskey i=
s an open source, federated social media platform. Versions 12.37.0 and lat= er, but prior to 2026.5.4, contain a vulnerability in the JSON-LD signature=
validation and compaction process that allows spoofed activities to be acc= epted as valid. This issue has been fixed in version 2026.5.4. 2026-08-03 n=
ot yet calculated CVE-2026-46713 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-46713 ] misskey-dev--misskey Misskey is an open source, federated socia=
l media platform. IVersions 8.63.0 and later, but prior to 2026.5.4, contai=
n a vulnerability that can cause the Misskey web client to slow down or cra=
sh when it applies a malformed theme. This issue has been fixed in version = 2026.5.4. 2026-08-03 not yet calculated CVE-2026-46714 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-46714 ] misskey-dev--misskey Misskey is an open s= ource, federated social media platform. Versions 12.37.0 and later, but pri=
or to 2026.5.4, are vulnerable to timing attacks during JSON-LD signature v= alidation and the compaction process. Because the JSON-LD parsing context i=
s not shared between signature verification and subsequent processing, the = application may trust information that should not be trusted, resulting in =
a time-of-check to time-of-use (TOCTOU) flaw. This allows an attacker to ha=
ve fraudulent activities accepted as valid, leading to a loss of integrity.=
This issue has been fixed in version 2026.5.4. 2026-08-03 not yet calculat=
ed CVE-2026-47746 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47746 ] mis= skey-dev--misskey Misskey is an open source, federated social media platfor=
m. All Misskey servers running versions 2024.5.0 and later, but prior to 20= 26.5.4, contain a vulnerability in the Server Announcements API where insuf= ficient permission checks allow attackers to access limited portions of dat=
a that they normally couldn't view. This vulnerability occurs whether or no=
t federation is enabled. This issue has been fixed in version 2026.5.4. 202= 6-08-03 not yet calculated CVE-2026-48115 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-48115 ] MLSImport: IDX Plugin & MLS Plugin for Real Estate Lis= tings--MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings The MLSI= mport: IDX Plugin & MLS Plugin for Real Estate Listings WordPress plugin be= fore 7.0.4 does not have authorisation and CSRF checks in one of its AJAX a= ctions, allowing any authenticated user, such as a subscriber, to read the = contents of the MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings=
WordPress plugin before 7.0.4's import log file as well as import-related = metadata belonging to arbitrary posts. 2026-08-05 not yet calculated CVE-20= 26-17515 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17515 ] MonsterInsig= hts--MonsterInsights The MonsterInsights WordPress plugin before 11.1.0 doe=
s not correctly validate the signature on one of its unauthenticated AJAX a= ctions: when the MonsterInsights WordPress plugin before 11.1.0 is not conn= ected to Google Analytics the HMAC signing key is empty, which lets unauthe= nticated attackers forge a valid signature and overwrite a MonsterInsights = WordPress plugin before 11.1.0 configuration value, disrupting the MonsterI= nsights WordPress plugin before 11.1.0's server-side analytics in Manual GA=
4 mode. 2026-08-04 not yet calculated CVE-2026-11366 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-11366 ] Mozilla--Firefox Information disclosure in = Firefox for Android and Firefox Focus for Android. This vulnerability was f= ixed in Firefox 153.0.3. 2026-08-04 not yet calculated CVE-2026-18809 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-18809 ] MStore API--MStore API The=
MStore API WordPress plugin before 4.21.0 does not correctly verify the cr= yptographic signature of the token used to authenticate its phone-based log= in, allowing unauthenticated attackers who know a registered user's phone n= umber to forge a token and take over that user's account, including adminis= trator accounts. 2026-08-07 not yet calculated CVE-2026-16030 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-16030 ] MStore API--MStore API The MStore = API WordPress plugin before 4.21.0 does not verify the payment with the pay= ment gateway before marking an order as paid on several of its payment-comp= letion endpoints, allowing an unauthenticated attacker to mark an arbitrary=
order fully paid without paying and obtain goods or services for free. 202= 6-08-07 not yet calculated CVE-2026-16038 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-16038 ] MStore API--MStore API The MStore API WordPress plugin=
before 4.21.0 does not restrict its vendor-orders endpoint to the caller's=
own orders, allowing any authenticated user, including Subscribers, to rea=
d every WooCommerce order in the store together with each customer's person=
al information. 2026-08-07 not yet calculated CVE-2026-16039 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-16039 ] MStore API--MStore API The MStore A=
PI WordPress plugin before 4.21.0 does not perform authorization or purchas= e-ownership checks on its REST product-review creation route, allowing an u= nauthenticated attacker to create WooCommerce product reviews with an attac= ker-chosen reviewer name, email and star rating on stores configured to acc= ept reviews only from verified owners. 2026-08-07 not yet calculated CVE-20= 26-16041 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16041 ] MultiVendorX= --MultiVendorX The MultiVendorX WordPress plugin before 5.0.11 does not ver= ify that the store targeted through its REST API belongs to the requesting = vendor, allowing an authenticated vendor (Store Owner and above) to view, t= ake over, permanently delete, or modify any other vendor's store on the mar= ketplace. 2026-08-05 not yet calculated CVE-2026-16605 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-16605 ] MultiVendorX--MultiVendorX The MultiVendo=
rX WordPress plugin before 5.0.11 does not verify that the requested store = belongs to the current user in one of its REST API endpoints, allowing any = vendor-level user to read other vendors' commission and financial data. 202= 6-08-05 not yet calculated CVE-2026-16746 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-16746 ] NASA cFS--NASA cFS v7.0.1 An issue in the HS_MonitorAp= plications() component of NASA cFS v7.0.1 allows attackers to force the pro= cessor to reset via supplying a crafted HS.AppMon_Tbl entry. 2026-08-03 not=
yet calculated CVE-2026-67969 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-67969 ] NASA cFS--NASA cFS v7.0.1 Incorrect access control in the DS_SetD= estPathCmd() component of NASA cFS v7.0.1 allows attackers to access sensit= ive components via a path traversal. 2026-08-03 not yet calculated CVE-2026= -67970 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67970 ] NASA cFS--NASA=
cFS v7.0.1 An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 a= llows attackers to contrl where received content and data is stored, possib=
ly leading to an information disclosure. 2026-08-03 not yet calculated CVE-= 2026-67972 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67972 ] NASA cFS--= NASA cFS v7.0.1 An issue in the CFDP receive path of NASA cFS v7.0.1 allows=
attackers to cause a Denial of Service (DoS) via replaying final CFDP PDUs=
. 2026-08-03 not yet calculated CVE-2026-67973 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-67973 ] NASA cFS--NASA cFS v7.0.1 A parser boundary flaw =
in the Software Bus Network (SBN) application's peer subscription message h= andling in NASA cFS v7.0.1 allows attackers to cause a Denial of Service (D= oS) via sending a crafted packet. 2026-08-03 not yet calculated CVE-2026-67= 974 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67974 ] NASA cFS--NASA cF=
S v7.0.1 Incorrect access control in NASA cFS v7.0.1 allows attackers to ar= bitrarily remove low-index subscriptions and add new streams via sending TO= _LAB add/remove subscription commands. 2026-08-03 not yet calculated CVE-20= 26-67975 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67975 ] NASA cFS--NA=
SA cFS v7.0.1 An issue in the SBN UDP interface of NASA cFS v7.0.1 allows a= ttackers to cause a Denial of Service (DoS) via transmitting a crafted SBN = frame. 2026-08-03 not yet calculated CVE-2026-67978 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-67978 ] NASA cFS--NASA cFS v7.0.1 Incorrect access c= ontrol in the Executive Services dynamic application start path component o=
f NASA cFS v7.0.1 allows attackers to execute arbitrary code via placing a = shared object on target storage. 2026-08-04 not yet calculated CVE-2026-679=
79 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67979 ] neo4j--Enterprise = Edition Neo4j's Bolt modern handshake decoder treats an overlong capability=
bit mask the same way it treats a truncated bit mask. When an unauthentica= ted client sends a selected protocol version followed by 32 continuation by= tes in the capability mask, the decoder resets the reader index and waits f=
or more bytes instead of rejecting the protocol message and closing the cha= nnel. Because the same unread bytes remain at the front of the decoder buff= er, appending a terminating byte later does not recover the connection. The=
decoder re-reads the same first 32 continuation bytes, returns without pro= ducing a handshake-finalization message, and leaves the channel open. This = can be triggered before authentication by any client that can reach the Bol=
t connector. 2026-08-05 not yet calculated CVE-2026-14587 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-14587 ] neo4j--graphql @neo4j/graphql=C2=A0lib= rary versions prior to 7.5.6 fail to verify the authenticity of a client-su= pplied, pre-decoded JWT object passed through GraphQL subscription=C2=A0con= nectionParams.=C2=A0As a result, any unauthenticated remote client that can=
open a GraphQL-over-WebSocket connection can forge arbitrary JWT claims (e= .g.=C2=A0sub,=C2=A0roles) in=C2=A0connectionParams.jwt=C2=A0and have them a= ccepted as authenticated identity for the purposes of=C2=A0@authentication= =C2=A0and=C2=A0@subscriptionsAuthorization=C2=A0directive evaluation. This = allows a fully unauthenticated attacker to receive subscription events that=
should be restricted to specific authenticated roles/users. Upgrade the li= brary to versions 7.5.6+ or 5.12.14+. v6 is end-of-life and will not receiv=
e a fix. 2026-08-06 not yet calculated CVE-2026-5423 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-5423 ] Nested Pages--Nested Pages The Nested Pages = WordPress plugin before 3.2.15 does not properly escape post titles before = outputting them into HTML attributes on an administrative listing screen, a= llowing users with the Editor role (or Contributor/Author when the Nested P= ages WordPress plugin before 3.2.15 is enabled for the post type) to inject=
arbitrary JavaScript that executes in the session of any higher-privileged=
user who views that screen. 2026-08-04 not yet calculated CVE-2026-15233 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-15233 ] Newsletters--Newslette=
rs The Newsletters WordPress plugin before 4.16 does not restrict the class=
es allowed when unserialising a value taken from a public form submission, = allowing unauthenticated attackers to inject arbitrary PHP objects. 2026-08= -08 not yet calculated CVE-2026-16267 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-16267 ] Newsletters--Newsletters The Newsletters WordPress plugin = before 4.16 does not authenticate or validate a bounce-processing request b= efore fetching a user-supplied URL on the server side, allowing unauthentic= ated attackers to make the site issue requests to arbitrary internal or ext= ernal hosts. 2026-08-06 not yet calculated CVE-2026-16268 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-16268 ] Newsletters--Newsletters The Newslette=
rs WordPress plugin before 4.16 does not strictly compare its API authentic= ation key, allowing unauthenticated attackers to bypass the API authenticat= ion via type juggling and perform privileged actions such as modifying subs= criber records and sending emails, when the optional API has been enabled. = 2026-08-08 not yet calculated CVE-2026-16269 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-16269 ] Nexter Blocks--Nexter Blocks The Nexter Blocks Word= Press plugin before 5.0.2 does not sanitize uploaded SVG files and allows S=
VG uploads for any user able to upload files (Author by default), allowing = them to upload a file containing malicious JavaScript that executes when th=
e file is accessed, leading to Stored Cross-Site Scripting. 2026-08-06 not = yet calculated CVE-2025-15678 [ https://www.cve.org/CVERecord?id=3DCVE-2025= -15678 ] Nexter Blocks--Nexter Blocks The Nexter Blocks WordPress plugin be= fore 5.0.2 does not restrict who can save global CSS through one of its RES=
T endpoints, allowing users with at least the Contributor role to store arb= itrary CSS that is rendered site-wide on the front end, enabling defacement=
, content hiding, and UI redressing. 2026-08-09 not yet calculated CVE-2026= -17011 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17011 ] nltk--nltk/nlt=
k In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package(=
)` function writes downloaded package bytes to disk and may extract them be= fore enforcing SHA-256 or MD5 checksum validation. This allows an attacker =
to tamper with the package response body for `info.url` through a compromis=
ed mirror, malicious proxy, or other source-substitution condition, leading=
to the installation of attacker-controlled package bytes. The vulnerabilit=
y can result in malicious corpus or model content being trusted by downstre=
am users or applications. 2026-08-03 not yet calculated CVE-2026-12259 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-12259 ] nltk--nltk/nltk A vulnera= bility in `nltk.downloader` in nltk/nltk versions <=3D 3.9.4 allows for cro= ss-package resource and model poisoning. The downloader extracts package ar= chives into shared namespaces such as `corpora/` and `taggers/` instead of = package-isolated roots, and validates package integrity only after the arch= ive has been written and extracted. This design flaw enables one package to=
overwrite another package's trusted resources within the same namespace, m= aking the changes immediately active through ordinary NLTK APIs. This issue=
persists across fresh interpreter restarts and can affect downstream workf= lows, including machine learning pipelines and reproducibility-sensitive en= vironments. 2026-08-07 not yet calculated CVE-2026-12261 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-12261 ] nltk--nltk/nltk A Server-Side Request F= orgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the curr= ent develop branch. The `nltk.pathsec.validate_network_url()` function, int= ended to prevent SSRF by rejecting internal network addresses, fails to rej= ect IPs in the RFC 6598 shared address space (`100.64.0.0/10`). This occurs=
because Python's `ipaddress` module does not classify such addresses as `i= s_private` or `is_global`, and the current guard only checks `is_private` a=
nd a few explicit categories. An attacker who can influence a URL passed to=
NLTK's network-loading helpers can exploit this vulnerability to make a st= rict-mode application send requests to shared-address-space hosts, potentia= lly exposing non-public infrastructure reachable from the application host.=
The impact is limited to SSRF-style confidentiality exposure, with no code=
execution claimed. 2026-08-09 not yet calculated CVE-2026-12372 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-12372 ] nodejs--node A flaw in Node.js = HTTP/2 handling can cause HTTP/2 retained header blocks evade maxSessionMem= ory and enable remote memory exhaustion. This vulnerability affects Node.js=
**24.x** and **22.x**. 2026-08-04 not yet calculated CVE-2026-56846 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-56846 ] nodejs--node A flaw in Node= .js HTTP/2 handling allows `nghttp2_session_mem_send()` to be called re-ent= rantly while `nghttp2_session_mem_recv()` is executing, resulting in a heap= -use-after-free. This vulnerability affects Node.js **26.x**, **24.x**, and=
**22.x**. 2026-08-04 not yet calculated CVE-2026-56848 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-56848 ] nodejs--node A flaw in Node.js node:sqli=
te allows a stale StatementSyncIterator created through DatabaseSync#create= TagStore() to continue executing a cached prepared statement after it has b= een reset and rebound with new parameters. SQLTagStore resets cached statem= ents using sqlite3_reset() directly, bypassing the iterator invalidation me= chanism introduced for StatementSync in recent releases This vulnerability = affects Node.js **22.x**, **24.x**, and **26.x**. 2026-08-04 not yet calcul= ated CVE-2026-58041 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58041 ] n= odejs--node A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js=
Process When a DNS Response Contains More Than 256 A Records. Repeated tri= ggering of this condition can lead to denial of service. This vulnerability=
affects Node.js **26.x**, **24.x**, and **22.x**. 2026-08-04 not yet calcu= lated CVE-2026-58042 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58042 ] = nodejs--node A flaw in Node.js HTTP client can cause a request desynchroniz= ation for Node.js-based forwarding proxies that rebuild outbound headers fr=
om the visible `IncomingMessage` headers while piping the original body to =
a reused backend connection. Node.js can omit headers beyond `maxHeadersCou= nt` / `maxHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.heade= rsDistinct`, while still using those omitted headers internally for HTTP me= ssage framing. In particular, `Content-Length` can be hidden from userland = while the request body is still delivered. This vulnerability affects all s= upported release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.=
2026-08-04 not yet calculated CVE-2026-58044 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-58044 ] nodejs--node A flaw in Node.js allows a spoofed `T= ypedArray` `byteLength` to trigger a reachable assertion in the synchronous=
`node:zlib` APIs, causing the entire process to crash. All 11 synchronous = zlib functions are affected. Repeated exploitation of this condition can re= sult in a denial of service. This vulnerability affects Node.js **22.x**, *= *24.x**, and **26.x**. 2026-08-04 not yet calculated CVE-2026-58045 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-58045 ] nrwl--nx Nx is a monorepo so= lution for TypeScript and polyglot codebases. From version 20.8.0 until 22.= 7.7 and 23.0.2, the Nx self-hosted HTTP remote cache extracts downloaded ca= che artifacts without constraining where files are written. A malicious or = on-path (MITM) remote cache server can return a crafted tar archive whose e= ntries escape the cache directory and write to arbitrary locations on the m= achine running Nx, which can be escalated to remote code execution. Nx's de= fault local cache and Nx Cloud are not affected; only workspaces configured=
to use a self-hosted remote cache are affected. This issue is fixed in ver= sions 22.7.7 and 23.0.2. 2026-08-06 not yet calculated CVE-2026-71476 [ htt= ps://www.cve.org/CVERecord?id=3DCVE-2026-71476 ] O2OA--O2OA v10 A reflected=
cross-site scripting (XSS) vulnerability in the Forum posting function of = O2OA v10 allows attackers to execute arbitrary Javascript in the context of=
the victim's browser via a crafted URL. 2026-08-04 not yet calculated CVE-= 2026-52370 [ https://www.cve.org/CVERecord?id=3DCVE-2026-52370 ] OMICRON el= ectronics GmbH--OMICRON StationScout OMICRON StationScout before version 3.=
05 contains a cryptographic timing side-channel vulnerability in the backen=
d authentication mechanism that may allow an unauthenticated attacker to fo= rge valid authentication credentials, bypass authentication and authorizati= on, and impersonate legitimate clients. An attacker can gain full access to=
the system configuration, allowing modification, reset, or unauthorized al= teration of system parameters or injecting network traffic into the connect=
ed network. 2026-08-06 not yet calculated CVE-2026-16731 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-16731 ] open62541--open62541 open62541 contains=
a heap use-after-free in the GDS PushManagement certificate update workflo=
w when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This allows a remote attack=
er to cause a denial of service. 2026-08-04 not yet calculated CVE-2026-678=
55 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67855 ] open62541--open625=
41 v1.5.5 An issue in open62541 v.1.5.5 and before allows a remote attacker=
to cause a denial of service via crafted CreateSubscription, CreateMonitor= edItems(Sampling), Publish, TransferSubscriptions, and DeleteSubscriptions = requests 2026-08-04 not yet calculated CVE-2026-67856 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-67856 ] open62541--open62541 v1.5.5 open62541 1.5.=
5 contains a heap-based buffer overflow in the default HistoryRead path whe=
n the default history database is used with the memory backend. 2026-08-04 = not yet calculated CVE-2026-67860 [ https://www.cve.org/CVERecord?id=3DCVE-= 2026-67860 ] open62541--open62541 v1.5.5 open62541 1.5.5 contains a buffer-= overflow in the high-level attribute reading logic in src/client/ua_client_= highlevel.c. This allows a remote attacker to cause a denial of service. 20= 26-08-04 not yet calculated CVE-2026-67862 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-67862 ] open62541--open62541 v1.5.5 An issue in open62541 v.1= .5.5 and before allows a remote attacker to cause a denial of service via t=
he NodeManagement type-instantiation logic component 2026-08-05 not yet cal= culated CVE-2026-67864 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67864 =
] open62541--open62541 v1.5.5 In open62541 v1.5.5, the server-side AddRefer= ences implementation contains an incomplete validation flaw for non-local E= xpandedNodeId targets. A remote attacker can send a crafted AddReferencesRe= quest with an empty targetServerUri and a non-zero targetNodeId.serverIndex=
, causing the target node pointer to remain NULL while execution continues.=
2026-08-05 not yet calculated CVE-2026-67870 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-67870 ] openbao--openbao OpenBao is an open source identit= y-based secrets management system. Prior to version 2.5.4, OpenBao's namesp= aces provide multi-tenant separation. A tenant who intentionally leaks leas=
e identifiers can have their lease and underlying credential revoked or ren= ewed by a user in another tenant via the legacy, undocumented `sys/revoke` = and `sys/renew` endpoints. This is fixed in OpenBao v2.5.4. 2026-08-07 not = yet calculated CVE-2026-45808 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -45808 ] openbao--openbao OpenBao is an open source identity-based secrets = management system. Prior to version 2.5.4, OpenBao's inline auth functional= ity incorrectly redacted audit log entries, resulting in non-auth headers b= eing removed and auth-related headers being retained in cleartext. This req= uires an attacker to compromise access to the audit device. Operators shoul=
d review leaked source authentication material and rotate it as appropriate=
. This is fixed in OpenBao v2.5.4. 2026-08-07 not yet calculated CVE-2026-4= 6358 [ https://www.cve.org/CVERecord?id=3DCVE-2026-46358 ] OPeNDAP Inc.--hy= rax-docker OPeNDAP Hyrax allows SSRF and credential disclosure via unvalida= ted HTTP redirects that bypass the AllowedHosts allowlist and leak Earthdat=
a headers (User-Id, Echo-Token) to attacker-controlled endpoints. 2026-08-0=
7 not yet calculated CVE-2026-16637 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-16637 ] OpenMediaVault--OpenMediaVault v8.0.4.-1 An OS command injec= tion vulnerability in the openmediavault-md plugin of OpenMediaVault v8.0.4=
-1 allows attackers to execute arbitrary commands as root via injecting she=
ll metacharacters. 2026-08-03 not yet calculated CVE-2026-52102 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-52102 ] openmeter--openmeter OpenMeter c= ontains a stored, or second-order, SQL injection vulnerability in the handl= ing of customer usage-attribution values. An attacker who can create or upd= ate a customer can store a malicious value in the usageAttribution.key or u= sageAttribution.subjectKeys fields. When that customer is subsequently used=
in a meter or event query, OpenMeter inserts the stored value into a Click= House WITH map(...) expression using string concatenation. OpenMeter versio=
ns from v1.0.0-beta.218 through v1.0.0-beta.231 are affected. 2026-08-04 no=
t yet calculated CVE-2026-18801 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-18801 ] OpenSIPS--opensips OpenSIPS is a Session Initiation Protocol (SI=
P) server implementation. Versions 3.4.0 through 3.6.5 contain a denial of = service vulnerability in the presence module. When the presence module's ha= ndle_publish() function processes a SIP PUBLISH request with an Event: pres= ence header and a message body while the configuration option enable_sphere= _check=3D1 is set, it invokes the get_content_type() macro without first ca= lling parse_content_type_hdr(), causing it to dereference uninitialized or = NULL Content-Type parsing state and crash. If a Content-Type header is pres= ent but unparsed, msg->content_type->parsed is NULL and is dereferenced as =
a content_t pointer; if the request lacks a Content-Type header entirely, m= sg->content_type itself is NULL, and both cases lead to a crash. A remote a= ttacker can therefore cause a denial of service against an affected instanc=
e with a single PUBLISH request over UDP or TCP, using either a valid Conte= nt-Type: application/pidf+xml request or one with the header removed, and t=
he vulnerable code path itself does not enforce authentication (though a de= ployment's routing configuration may require it before this route is reache= d). The issue has been fixed in version 3.6.6 and 4.0.0-rc1. 2026-08-04 not=
yet calculated CVE-2026-45084 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-45084 ] OpenSIPS--opensips OpenSIPS is a Session Initiation Protocol (SIP=
) server implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a de= nial of service vulnerability in the watcherinfo generation functionality. =
An attacker can create an oversized watcher entry by sending a SUBSCRIBE Ev= ent: presence request with a long From URI, and then trigger presence.winfo=
watcherinfo XML generation for the same presentity. OpenSIPS copies the st= ored watcher URI into a fixed-size stack buffer, overflowing it and crashin=
g the process. A remote attacker can crash an OpenSIPS worker in deployment=
s that expose handle_subscribe() and allow watcherinfo (presence.winfo) gen= eration. The issue is configuration-dependent because the presence and pres= ence_xml modules must be loaded and SUBSCRIBE routing must be reachable. Th=
is issue has been fixed in versions 3.6.6 and 4.0.0-rc1. 2026-08-04 not yet=
calculated CVE-2026-45809 [ https://www.cve.org/CVERecord?id=3DCVE-2026-45= 809 ] OpenSIPS--opensips OpenSIPS is a Session Initiation Protocol (SIP) se= rver implementation. Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial=
of service vulnerability in the SDP bandwidth-line parsing logic. A SIP re= quest with Content-Type: application/sdp and a malformed session-level SDP = bandwidth line missing the required colon delimiter can corrupt parsed SDP = bandwidth metadata. When a route or module subsequently clones the corrupte=
d SDP state, as occurs with dialog and QoS processing, the OpenSIPS worker = process crashes. An unauthenticated remote attacker can therefore trigger a=
crash in any configuration whose routing script parses attacker-controlled=
SDP and applies dialog/QoS processing. This issue has been fixed in versio=
ns 3.6.6 and 4.0.0-rc1. 2026-08-04 not yet calculated CVE-2026-46334 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-46334 ] OpenSSL--OpenSSL Issue summ= ary: A malicious TLS server can cause a memory leak in a TLS client that ha=
s enabled OCSP response checking by sending an OCSP response that contains =
no single response entries. Impact summary: An attacker can leak an attacke= r-tunable amount of memory per TLS handshake in a victim client application=
. A long-running client that repeatedly connects to a malicious server can = have its memory exhausted, resulting in a Denial of Service. CWE: CWE-401: = Missing Release of Memory after Effective Lifetime Description: The affecte=
d function is called during X.509 certificate chain verification when OCSP = response checking is enabled with the X509_V_FLAG_OCSP_RESP_CHECK or X509_V= _FLAG_OCSP_RESP_CHECK_ALL verification flags, for example when a TLS client=
verifies an OCSP response stapled into the TLS handshake by the server. Wh=
en the received BasicOCSPResponse contains an empty SEQUENCE OF SingleRespo= nse, which is permitted on the wire and accepted by the OpenSSL decoder, th=
e OCSP_BASICRESP structure allocated by OCSP_response_get1_basic() was not = freed because an early return bypassed the cleanup code at the end of the f= unction. The amount of memory leaked per handshake can be amplified by the = attacker by padding the certs field of the BasicOCSPResponse with bogus cer= tificates, which are parsed and stored in the leaked structure before the e= mpty response check triggers the early return. A long-running TLS client th=
at repeatedly connects to a malicious server can have its memory exhausted = over time. OCSP response checking is not enabled by default. Only client ap= plications that explicitly enable the OCSP response check verification flag=
s are affected. FIPS impact: no The FIPS modules in 4.0 and 3.6 are not aff= ected by this issue as the affected code is outside the OpenSSL FIPS module=
boundary. 2026-08-05 not yet calculated CVE-2026-54876 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-54876 ] OpenStack--Neutron In OpenStack Neutron = before 28.0.2, the subnetpool onboarding API does not verify ownership of t=
he target subnets. An authenticated user can onboard subnets from another p= roject's shared network into their own subnetpool, mutating the victim's su= bnet state and altering L3 routing and address scope behavior for victim ro= uters. 2026-08-05 not yet calculated CVE-2026-55707 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-55707 ] OpenStack--Swift In OpenStack Swift through = 2.38.0, the proxy server Accept header parser contains a regular expression=
vulnerable to catastrophic backtracking (ReDoS). The "qdtext" pattern (?:[= ^"]|\.)* allows an unauthenticated remote attacker to send a crafted Accept=
header that causes exponential CPU consumption in the proxy worker. A payl= oad of 32 backslash-character pairs exceeds 30 seconds of CPU time. No auth= entication is required. Repeated requests can exhaust all proxy worker thre= ads, resulting in a complete denial of service. 2026-08-05 not yet calculat=
ed CVE-2026-71190 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71190 ] Ope= nStack--Swift In OpenStack Swift through 2.38.0, S3API middleware does not = enforce that semantic x-amz-* headers are covered by the SigV4 signature on=
presigned URL requests. An attacker who obtains a presigned PUT URL can in= ject an unsigned X-Amz-Copy-Source header, causing Swift to perform a serve= r-side copy from an arbitrary source object using the signer's authorizatio=
n context. The attacker can read any object the signer has access to, provi= ded the target project_id, container name, and object name are known. This = affects all deployments using the default s3_acl=3Dfalse configuration. 202= 6-08-05 not yet calculated CVE-2026-71191 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-71191 ] OpenStack--Swift In OpenStack Swift through 2.38.0, th=
e S3API middleware does not sanitize Swift-native control headers (X-Copy-F= rom, X-Copy-From-Account) from S3 API requests when s3_acl=3Dtrue. An attac= ker can inject these headers into a signed PUT request targeting their own = bucket, causing Swift to perform a server-side copy from another tenant's p= rivate object. The source object authorization is bypassed because the S3AP=
I middleware has already authorized the request against the destination. Th=
e attacker can read any object whose project_id, container name, and object=
name are known, regardless of the source object's ACLs or ownership. This = requires the non-default s3_acl=3Dtrue configuration. 2026-08-05 not yet ca= lculated CVE-2026-71192 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71192=
] Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custo=
m Fonts & More--Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie = Notice, Custom Fonts & More The Orbit Fox: Duplicate Page, Menu Icons, SVG = Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.8 d= oes not sanitize uploaded SVG files when its SVG upload feature is enabled,=
allowing authenticated users with the upload capability (Author and above =
by default, without the unfiltered_html capability) to upload SVG files con= taining JavaScript that executes in the site context when the file is viewe=
d, leading to Stored Cross-Site Scripting. 2026-08-05 not yet calculated CV= E-2026-16583 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16583 ] OreSat--= OreSat Firmware v1.0 A stack-based buffer overflow vulnerability exists in = the cmd_edl function of OreSat Firmware v1.0. The vulnerability is triggere=
d when processing the edl fw_flash command, where the <filename> argument i=
s copied to a 64-byte stack buffer via memcpy without proper length validat= ion. An attacker with physical access to the UART3 serial interface can exp= loit this vulnerability by sending a maliciously crafted command with an ov= ersized filename parameter, 2026-08-03 not yet calculated CVE-2026-67673 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-67673 ] osTicket--osTicket 1.18=
.3 A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.1= 8.3 due to improper sanitization of the thread entry title field. User-cont= rolled input in the title is stored without adequate HTML escaping and late=
r rendered in multiple staff-facing templates without proper output encodin=
g. An attacker can inject arbitrary JavaScript by submitting a crafted tick=
et reply or email with a malicious subject line. 2026-08-03 not yet calcula= ted CVE-2026-38446 [ https://www.cve.org/CVERecord?id=3DCVE-2026-38446 ] os= Ticket--osTicket 1.18.3 osTicket 1.18.3 generates API keys using a predicta= ble construction based on MD5 hashing. The use of MD5, combined with predic= table inputs such as the current timestamp and client IP address, significa= ntly reduces entropy. An attacker can approximate the key generation time a=
nd brute-force the key space within a feasible time window. 2026-08-03 not = yet calculated CVE-2026-38447 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -38447 ] osTicket--osTicket v1.18.3 osTicket v1.18.3 is vulnerable to Store=
d Cross-Site Scripting (XSS) via the email From-header display name. The va= lue is extracted without sanitization in include/class.mailparse.php and st= ored raw in the poster field of ost_thread_entry. When an unauthenticated a= ttacker sends a reply email to an existing ticket from an unregistered addr= ess with an XSS payload in the From display name. 2026-08-03 not yet calcul= ated CVE-2026-38444 [ https://www.cve.org/CVERecord?id=3DCVE-2026-38444 ] O=
TP Login With Phone Number, OTP Verification--OTP Login With Phone Number, = OTP Verification The OTP Login With Phone Number, OTP Verification WordPres=
s plugin before 1.8.71 does not limit the number of OTP verification attemp=
ts or invalidate a one-time login code after a wrong guess, and an unauthen= ticated user can request a login code for any account. Because the code is =
a short numeric OTP, an attacker can brute-force it and take over any accou= nt, including an administrator's. 2026-08-05 not yet calculated CVE-2026-15= 210 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15210 ] Packetfence--Pack= etfence 13.2.0 In Packetfence 13.2.0, the WebGui interface setting allows a= uthenticated remote code execution. 2026-08-06 not yet calculated CVE-2024-= 39024 [ https://www.cve.org/CVERecord?id=3DCVE-2024-39024 ] Paid Membership=
Subscriptions--Paid Membership Subscriptions The Paid Membership Subscript= ions WordPress plugin before 3.0.8 does not verify that the subscription be= ing modified through its change-subscription checkout belongs to the curren=
t user, allowing any authenticated user with Subscriber-level access and ab= ove to take over another member's subscription and overwrite its plan, stat=
us and expiration. 2026-08-04 not yet calculated CVE-2026-14848 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-14848 ] PaperCut--PaperCut NG/MF PaperCu=
t NG/MF does not properly restrict excessive authentication attempts within=
its login component. An unauthenticated remote attacker can exploit this v= ulnerability to perform unrestricted brute-force or credential-stuffing att= acks without triggering account lockout or rate-limiting mechanisms in some=
configurations. 2026-08-03 not yet calculated CVE-2026-8793 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-8793 ] PaperCut--PaperCut NG/MF PaperCut NG= /MF contains an observable timing discrepancy in its authentication compone= nt. An unauthenticated remote attacker can exploit this vulnerability to pe= rform username enumeration by measuring response times during login attempt=
s. The system executes a password hash comparison only when a valid account=
is supplied, creating a measurable timing oracle that reveals account exis= tence. 2026-08-03 not yet calculated CVE-2026-8794 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-8794 ] parisneo--parisneo/lollms A path traversal vul= nerability exists in parisneo/lollms version 2.1.0, specifically in the SPA=
catch-all route implemented in `backend/routers/ui.py`. The vulnerability = arises from the improper handling of user-controlled path input, which is d= irectly joined into a filesystem path without sanitization or containment c= hecks. URL-encoded dot-dot sequences (`%2e%2e`) bypass Starlette's built-in=
path normalization and are resolved by Python's `pathlib`, allowing an una= uthenticated attacker to read arbitrary files on the server. This issue has=
been resolved in version 3. 2026-08-09 not yet calculated CVE-2026-10595 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-10595 ] Passster--Passster The=
Passster WordPress plugin before 4.3.6 does not perform a post-status chec=
k before returning post content from an unauthenticated REST endpoint, allo= wing unauthenticated users to disclose the content of non-public (draft, pr= ivate, and pending) posts on sites that have a captcha provider configured.=
2026-08-05 not yet calculated CVE-2026-16602 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-16602 ] Passster--Passster The Passster WordPress plugin b= efore 4.3.6 does not enforce its category-based content protection on the W= ordPress REST API, allowing unauthenticated users to read the full content,=
title, and excerpt of category-locked posts through the core REST API. 202= 6-08-05 not yet calculated CVE-2026-16603 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-16603 ] Passster--Passster The Passster WordPress plugin befor=
e 4.3.6 outputs password-protected block content in the public page respons=
e before verifying the password, allowing unauthenticated users to recover = the protected content without knowing the password. 2026-08-05 not yet calc= ulated CVE-2026-16604 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16604 ]=
Password Protected Lock Entire Site, Pages, Posts, Categories, and Partial=
Content--Password Protected Lock Entire Site, Pages, Posts, Categories, an=
d Partial Content The Password Protected - Lock Entire Site, Pages, Posts, = Categories, and Partial Content WordPress plugin before 2.8.4 does not rest= rict REST API access to authenticated users when a specific option is enabl= ed, allowing unauthenticated visitors to bypass the sitewide password gate = and read otherwise-protected content and account identifiers via the REST A= PI. This re-introduces a previously-fixed issue (CVE-2024-0437), which was = patched in 2.6.7 and regressed in 2.6.8. 2026-08-07 not yet calculated CVE-= 2026-14943 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14943 ] pdm-projec= t--pdm pdm is a Python package and dependency manager supporting the latest=
PEP standards. In versions prior to 2.27.0, pdm writes several project-loc=
al state or configuration files without symlink protection. If a malicious = repository places those files as symlinks, local PDM operations can overwri=
te the symlink targets. This creates an arbitrary file clobber primitive re= lative to the privileges of the invoking user. Config.__init__() resolves t=
he project-local pdm.toml path and _save_config() writes to the resolved ta= rget. If PROJECT_ROOT/pdm.toml is a symlink to another file, pdm config -l = ... updates the target file instead of refusing the write. The same general=
problem exists for other project-local persistence paths that are written = directly with no lstat / O_NOFOLLOW protection. For the pdm.toml PoC specif= ically, the target file must already contain parseable TOML. Otherwise the = load step fails before the write path is reached. That parser constraint do=
es not apply to the .pdm-python or .python-version sinks. This issue has be=
en fixed in version 2.27.0. 2026-08-04 not yet calculated CVE-2026-47763 [ = https://www.cve.org/CVERecord?id=3DCVE-2026-47763 ] pdm-project--pdm pdm is=
a Python package and dependency manager supporting the latest PEP standard=
s. Versions prior to 2.27.0 are vulnerable to path traversal through write_= to_fs. InstallDestination.write_to_fs() in src/pdm/installers/installers.py=
overrides the base class to add symlink/hardlink support but replaces the = safe _path_with_destdir() (which validates via Path.resolve() + is_relative= _to()) with a bare os.path.join() that performs no path validation. A malic= ious wheel with traversal entries can write arbitrary files. This issue has=
been fixed in version 2.27.0. 2026-08-04 not yet calculated CVE-2026-47764=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-47764 ] pdm-project--pdm PDM=
is a Python package and dependency manager. In versions up to and includin=
g 2.26.9, PDM automatically loads project-local plugins from a .pdm-plugins=
directory during initialization, allowing an attacker-controlled file in a=
n untrusted repository checkout to execute arbitrary Python code before any=
command is parsed. This happens because load_plugins() runs during Core.in= it() and adds .pdm-plugins via site.addsitedir(), which processes .pth file=
s and immediately executes any line beginning with import, so the code runs=
with the privileges of the user invoking pdm and even a benign command suc=
h as pdm --version triggers it (making the impact strongest in CI, automati= on, and privileged contexts). The issue is fixed in version 2.27.0. 2026-08= -04 not yet calculated CVE-2026-47781 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-47781 ] Pegasystems--Pega Infinity Pega Platform versions 23.1.0 t= hrough 25.1.3 are affected by an Stored Cross-site scripting (XSS) vulnerab= ility in a user interface component. Requires a high privileged user with a=
developer role. 2026-08-04 not yet calculated CVE-2026-14337 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-14337 ] Penpot--Penpot Penpot's ::import-b= infile RPC command lacks authorization on the optional file-id parameter, a= llowing any authenticated user to overwrite any files on the target server = and subscribe to WebSocket events, enabling full data exfiltration and data=
poisoning. 2026-08-05 not yet calculated CVE-2026-17613 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-17613 ] PeproDev WooCommerce Receipt Uploader--= PeproDev WooCommerce Receipt Uploader PeproDev WooCommerce Receipt Uploader=
(PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.0 slug=
: pepro-bacs-receipt-upload-for-woocommerce), all versions up to and includ= ing 2.8.0 (latest on wordpress.org; no fixed version available at the time =
of writing), is vulnerable to unauthenticated missing-authorization / IDOR = write. Requires WooCommerce. 2026-08-06 not yet calculated CVE-2026-14313 [=
https://www.cve.org/CVERecord?id=3DCVE-2026-14313 ] PeproDev WooCommerce R= eceipt Uploader--PeproDev WooCommerce Receipt Uploader The PeproDev WooComm= erce Receipt Uploader WordPress plugin through 2.8.0 does not verify that a=
requested attachment belongs to the order referenced by its access token, = allowing unauthenticated attackers to forge a token and disclose image atta= chments, including other customers' uploaded payment receipts, that they do=
not own. 2026-08-06 not yet calculated CVE-2026-14314 [ https://www.cve.or= g/CVERecord?id=3DCVE-2026-14314 ] Personal QR Message--Personal QR Message = The Personal QR Message WordPress plugin through 1.0 does not restrict the = file types that can be uploaded through an unauthenticated handler, allowin=
g unauthenticated users to upload arbitrary executable PHP files that are d= irectly reachable, leading to remote code execution. 2026-08-03 not yet cal= culated CVE-2026-16250 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16250 =
] phoca.cz--Phoca Commander extension for Joomla Joomla Extension - phoca.c=
z - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 - Improper limitatio=
n of paths in the getSource function lead to an arbitrary file read vulnera= bility. 2026-08-07 not yet calculated CVE-2026-66491 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-66491 ] phoca.cz--Phoca Commander extension for Joo= mla Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Com= mander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action=
lead to path a traversal vulnerability. 2026-08-07 not yet calculated CVE-= 2026-66492 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66492 ] phoca.cz--= Phoca Commander extension for Joomla Joomla Extension - phoca.cz - Path Tra= versal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper limitation o=
f paths for delete, copy and move actions lead to path traversal vulnerabil= ities. 2026-08-07 not yet calculated CVE-2026-66493 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-66493 ] PHPCSStandards--PHP_CodeSniffer PHP_CodeSnif= fer tokenizes PHP files and detects violations of a defined set of coding s= tandards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniffer contains a co= mmand injection vulnerability in the code that generates the Gitblame, Hgbl= ame, and Svnblame report formats. As a result, running PHP_CodeSniffer over=
untrusted files, for example in a continuous integration pipeline that sca=
ns pull requests, or on a developer machine reviewing third party code, cou=
ld result in attacker controlled shell commands being executed when the Git= blame, Hgblame, or Svnblame report processes a file whose name contains she=
ll metacharacters. Users using the default Full report, or any of the other=
non-blame reports, are not affected. Users on a runtime platform which doe=
s not allow filenames to contain shell metacharacters, such as " and ;, are=
not affected. This issue is fixed in versions 3.13.6 and 4.0.2. 2026-08-06=
not yet calculated CVE-2026-67434 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-67434 ] PiWeb Cancel order / Refund request for WooCommerce--PiWeb Ca= ncel order / Refund request for WooCommerce The PiWeb Cancel order / Refund=
request for WooCommerce WordPress plugin before 1.3.4.34 does not have aut= horization or ownership checks when adding the contents of a previous order=
to the cart, allowing unauthenticated users to disclose the contents of ot= her customers' orders, as well as to clear and repopulate a logged in user'=
s cart via a crafted link. 2026-08-09 not yet calculated CVE-2026-18603 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-18603 ] postcss--postcss PostCSS=
takes a CSS file and provides an API to analyze and modify its rules by tr= ansforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from=
is unset, an attacker can cause PreviousMap.loadFile() to read an unintend=
ed source-map file by supplying an absolute or directory-traversal sourceMa= ppingURL. The resulting map's sources and sourcesContent may then be expose=
d to the application. This issue is fixed in version 8.5.19. 2026-08-03 not=
yet calculated CVE-2026-69153 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-69153 ] PowerPress Podcasting plugin by Blubrry--PowerPress Podcasting pl= ugin by Blubrry The PowerPress Podcasting plugin by Blubrry WordPress plugi=
n before 11.16.11 does not sanitise and escape some of its Podcast Episode = settings, which could allow users with a role as low as Contributor to perf= orm Stored Cross-Site Scripting attacks even when the unfiltered_html capab= ility is disallowed. 2026-08-04 not yet calculated CVE-2026-16293 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-16293 ] ProfileGrid--ProfileGrid The P= rofileGrid WordPress plugin before 6.0.0.0 does not perform authorization c= hecks when listing a group's pending membership requests, allowing any auth= enticated user such as a Subscriber to disclose the names and request dates=
of the users awaiting approval to join any group, including private ones. = 2026-08-03 not yet calculated CVE-2026-16289 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-16289 ] ProfileGrid--ProfileGrid The ProfileGrid WordPress = plugin before 6.0.0.0 does not perform authorization checks before returnin=
g a group's member list, and registers the handler for unauthenticated user=
s, allowing any unauthenticated visitor to disclose the members and their i= dentifiers of any group, including private or closed ones, bypassing the Pr= ofileGrid WordPress plugin before 6.0.0.0's member-visibility setting. 2026= -08-06 not yet calculated CVE-2026-16290 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-16290 ] py-pdf--pypdf pypdf is a free and open-source pure-pyth=
on PDF library. Prior to 6.15.0, a crafted PDF can cause long runtimes and = large memory consumption when pypdf/_font.py function Font._collect_cid_cha= racter_widths expands unusually large CID font /W width ranges or excessive=
width entries during text extraction. This issue is fixed in 6.15.0. 2026-= 08-07 not yet calculated CVE-2026-71852 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-71852 ] py-pdf--pypdf pypdf is a free and open-source pure-pyth=
on PDF library. Prior to 6.15.0, a crafted PDF can cause large memory consu= mption when pypdf/_cmap.py function parse_bfrange parses unusually large so= urce-code or destination-string tokens in a font /ToUnicode CMap during tex=
t extraction. This issue is fixed in 6.15.0. 2026-08-07 not yet calculated = CVE-2026-71870 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71870 ] pyca--= cryptography cryptography is a package designed to expose cryptographic pri= mitives and recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_d= ecrypt_der, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome=
of decrypting a RecipientInfo's encryptedKey in several distinguishable wa= ys, one of which disclosed the exact length recovered from the RSA operatio=
n. The same distinction was also observable by timing. An application that = decrypts attacker-supplied EnvelopedData and reflects the outcome gives the=
attacker a Bleichenbacher oracle against the content-encryption key. Decry= ption ran as RSA PKCS#1 v1.5 decrypt of encryptedKey, build an AES cipher f= rom the result, then AES-CBC decrypt and PKCS#7 unpad. Invalid RSA padding,=
a valid padding with a bad key length, a correct length with a wrong key, = and the real key each failed or succeeded differently. Case 1 is reachable = only where the linked library lacks implicit rejection: OpenSSL 3.0 and 3.1=
, LibreSSL, and BoringSSL. Exploitation requires a service that auto-decryp=
ts untrusted EnvelopedData matching the victim certificate and answers adap= tively at high volume, such as an S/MIME gateway or mail filter. This issue=
is fixed in 50.0.0. 2026-08-03 not yet calculated CVE-2026-69247 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-69247 ] pyca--cryptography cryptograph=
y is a package designed to expose cryptographic primitives and recipes to P= ython developers. Prior to 49.0.0, if an intermediate constrained CA permit=
s the DNS name foo.example.com, and the leaf certificate has a wildcard in = its DNS SAN of *.example.com, python-cryptography's verifier accepts which = allows escaping outside of the permitted names. The core issue is in DNSCon= straint::matches, where a wildcard pattern was treated as matching a more-s= pecific permitted constraint even though *.example.com can expand to siblin=
g names such as bar.example.com outside foo.example.com. This allows accept= ance of an invalid certificate chain. This issue is fixed in 49.0.0. 2026-0= 8-03 not yet calculated CVE-2026-69248 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-69248 ] pyca--cryptography python-cryptography is a package des= igned to expose cryptographic primitives and recipes to Python developers. = Prior to 49.0.0, when resolving invalid certificate chains that include dup= licate copies of self-signed certificates, the processing recursively invok=
es the same candidate, leading to an exponential blowup. Although the limit= ation that the chain depth cannot exceed a specified maximum depth prevents=
unbounded recursion and guarantees termination, an attacker-controlled cer= tificate chain can lead the processing to easily take more than 5s to rejec=
t in testing. This amplification could form the basis for a resource exhaus= tion denial of service attack. The core issue arises in the recursive natur=
e of build_chain_inner, which does not de-duplicate against previously anal= yzed candidates. As the correctness of validation is not affected, the inte= grity of a system cannot be compromised through this vector, only its avail= ability. This issue is fixed in 49.0.0. 2026-08-03 not yet calculated CVE-2= 026-69249 [ https://www.cve.org/CVERecord?id=3DCVE-2026-69249 ] Q00--ourobo= ros Ouroboros is a local-first runtime for AI coding agents that records th= eir actions and applies user-defined policies to constrain behavior. In ver= sions prior to 0.39.0, if a user clones a malicious repository and runs Our= oboros commands within that directory, it can lead to arbitrary code execut= ion and potential system takeover. The vulnerability stems from Ouroboros l= oading the .env file from the current working directory. Execution-affectin=
g environment variables such as OUROBOROS_CLI_PATH, OPENCODE_CLI_PATH, and = other backend selectors are accepted directly from this local .env. An atta= cker can include a malicious script in the repository and point the CLI pat=
h variable to it (e.g., OUROBOROS_CLI_PATH=3D./malicious_script.sh). When t=
he user executes a command like ouroboros init or any command that instanti= ates the adapter, the malicious script is executed instead of the intended = CLI. This issue has been fixed in version 0.39.0. 2026-08-03 not yet calcul= ated CVE-2026-47211 [ https://www.cve.org/CVERecord?id=3DCVE-2026-47211 ] Q= 00--ouroboros Ouroboros is a local-first runtime for AI coding agents that = records their actions and applies user-defined policies to constrain behavi= or. Versions prior to 0.42.1 have an incomplete denylist. Several execution= -routing keys of the same RCE class were omitted, so a malicious cloned rep=
o can still reach arbitrary command execution by shipping a .env (auto-load=
ed at import, with no review step). The CVE-2026-47211 fix added _UNTRUSTED= _ENV_DENYLIST to stop an untrusted project-directory .env from redirecting = execution, but it did not account for all keys. The backend config-home and=
MCP/plugin roots bypass the approval gate by pointing the nested agent, MC=
P servers, and plugin roster at attacker config. Other variables re-enable = blocked local transports, replace sub-agent prompts, switch backends, and l= ower tool approval classes, further weakening the approval gate. This issue=
has been fixed in version 0.42.1. 2026-08-03 not yet calculated CVE-2026-6= 6065 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66065 ] Quiz and Survey = Master (QSM)--Quiz and Survey Master (QSM) The Quiz and Survey Master (QSM)=
WordPress plugin before 11.2.2 does not properly escape a question setting=
before outputting it into an unquoted HTML attribute, allowing users with = contributor-level access and above to inject arbitrary JavaScript that exec= utes in the browser of any user viewing the affected quiz. 2026-08-04 not y=
et calculated CVE-2026-14824 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 14824 ] rclone--rclone rclone is a command-line program to sync files and d= irectories to and from different cloud storage providers. From 1.40.0 until=
1.75.0, rclone serve restic does not correctly reject URL paths beginning = with ../ in cmd/serve/restic/restic.go WithRemote, which accepts a leading = parent path and passes it to GET, HEAD, POST, and DELETE handlers for confi= gured backends including WebDAV, FTP, HTTP, Memory, and SFTP. An attacker w=
ho can access the REST endpoint may read, create, overwrite, or delete obje= cts outside the path configured by the operator when the operator publishes=
a backend subdirectory and the backend credential can access parent or sib= ling objects. This issue is fixed in 1.75.0. 2026-08-05 not yet calculated = CVE-2026-71309 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71309 ] refiri= o--freo2 freo2 provided by refirio contains an unrestricted upload of file = with dangerous type vulnerability. A user with the highest-level administra= tive privileges for the product may upload an executable file and execute a= rbitrary OS commands. 2026-08-04 not yet calculated CVE-2026-67243 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-67243 ] REST API Log--REST API Log Th=
e REST API Log WordPress plugin before 1.7.1 does not bind the token protec= ting its log download feature to the log entry being requested, nor does it=
check the capability of the requester, allowing unauthenticated users in p= ossession of any such token to download the logged REST API requests and re= sponses of any entry, which may contain sensitive data such as credentials,=
authentication tokens or private content. 2026-08-04 not yet calculated CV= E-2026-16547 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16547 ] Rocket.C= hat--Rocket.Chat An unauthenticated path traversal (LFI) vulnerability exis=
ts under /custom-sounds/ when CustomSounds storage is configured to FileSys= tem. By including ../ sequences in the request path, an attacker can read a= rbitrary files outside the base directory. 2026-08-04 not yet calculated CV= E-2026-56845 [ https://www.cve.org/CVERecord?id=3DCVE-2026-56845 ] rrrene--= html_sanitize_ex URL Redirection to Untrusted Site ('Open Redirect') vulner= ability in the HTML5 scrubber in rrrene html_sanitize_ex allows an unauthen= ticated remote attacker to retarget a form already on the rendering page an=
d receive whatever the victim submits, including credentials, via the form = and formaction attributes on an <input> element in sanitized HTML. HTML's f= orm attribute associates an input with any form on the page by its id even = when the input sits outside that form, and formaction on a submit control o= verrides the owning form's action. Neither attribute receives a scheme chec=
k, so an absolute cross-origin URL survives sanitizing. No script executes.=
The scrubber allows neither form nor button, so the attacker cannot introd= uce a form of their own and the rendering page must already contain a form = carrying an id. This issue affects html_sanitize_ex: from 0.3.1 before 1.5.=
3. 2026-08-06 not yet calculated CVE-2026-66370 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-66370 ] rrrene--html_sanitize_ex URL Redirection to Untr= usted Site ('Open Redirect') vulnerability in the HTML5 scrubber in rrrene = html_sanitize_ex allows a remote attacker to force visitors of a page to na= vigate to a site of the attacker's choosing via a <meta http-equiv=3D"refre=
sh"> element in sanitized HTML. HtmlSanitizeEx.html5/1 keeps attacker-suppl=
ied <meta> elements in its output. A meta element acts on the whole documen=
t rather than on the fragment it was embedded in, so it can also declare do= cument-wide directives such as Content-Security-Policy. This is not cross-s= ite scripting. Browsers do not navigate a meta refresh to a javascript: URL=
, so the uppercase JAVASCRIPT: filter bypass yields no script execution and=
none was demonstrated. This issue affects html_sanitize_ex: from 0.3.1 bef= ore 1.5.3. 2026-08-06 not yet calculated CVE-2026-66829 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-66829 ] rrrene--html_sanitize_ex Inclusion of Fu= nctionality from Untrusted Control Sphere vulnerability in the HTML5 scrubb=
er in rrrene html_sanitize_ex allows a remote attacker to load a document o=
f their choosing into a trusted page via the data attribute of an <object> = element in sanitized HTML. object is the one URI-bearing element in lib/htm= l_sanitize_ex/scrubber/html5.ex never registered through allow_tag_with_uri= _attributes/3, and its only guard is a prefix match on lowercase "javascrip= t:", so mixed-case variants, data: URIs, protocol-relative URLs and same-or= igin paths all survive. This is not unconditional cross-site scripting. A j= avascript: URL does not execute through <object data> in current browsers, = data: documents load in an opaque origin, and host-origin script execution = additionally requires the application to serve attacker-controlled content = from a same-origin path. This issue affects html_sanitize_ex: from 0.3.1 be= fore 1.5.3. 2026-08-06 not yet calculated CVE-2026-66843 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-66843 ] rrrene--html_sanitize_ex Improper Neutr= alization of Special Elements in Output Used by a Downstream Component ('In= jection') vulnerability in the CSS scrubber in rrrene html_sanitize_ex allo=
ws an unauthenticated remote attacker to inject CSS at-rules, including an = import of a remote stylesheet, into a page served to other users. HtmlSanit= izeEx.Scrubber.CSS.scrub/1 applies its property and value allowlist through=
a Regex.replace over substrings matching a property: value declaration pat= tern, so input that does not match that pattern is never inspected and is c= opied to the output unchanged. @import url(//attacker.example/style.css); s= urvives, while the same URL inside a background: url(...) declaration is re= moved. Element boundaries are resolved before the scrubber runs, so injecte=
d content does not escape the <style> element and no script executes. This = issue affects html_sanitize_ex: from 0.3.1 before 1.5.4. 2026-08-06 not yet=
calculated CVE-2026-68747 [ https://www.cve.org/CVERecord?id=3DCVE-2026-68= 747 ] rrrene--html_sanitize_ex Inefficient Regular Expression Complexity vu= lnerability in the CSS scrubber in rrrene html_sanitize_ex allows an unauth= enticated remote attacker to exhaust server CPU via a long CSS declaration =
in sanitized HTML. The declaration regex in HtmlSanitizeEx.Scrubber.CSS.scr= ub/1 matches the property name with an unbounded greedy [-\w]+ followed by =
a mandatory :, so a long run of word characters not followed by a colon mak=
es the engine give back one character at a time and retry the colon at ever=
y start offset. The work is quadratic in the length of the run, and no leng=
th cap is applied to the CSS handed to the scrubber. An 80 KB <style> body = costs roughly 2.4 seconds of scheduler time, so a few concurrent requests s= aturate the BEAM scheduler pool and make the application unresponsive. The = impact is CPU exhaustion only. Nothing is read, modified or disclosed. This=
issue affects html_sanitize_ex: from 0.3.1 before 1.5.3. 2026-08-06 not ye=
t calculated CVE-2026-68749 [ https://www.cve.org/CVERecord?id=3DCVE-2026-6= 8749 ] rrrene--html_sanitize_ex Inefficient Algorithmic Complexity vulnerab= ility in the traversal engine in rrrene html_sanitize_ex allows an unauthen= ticated remote attacker to exhaust server CPU and memory via a flat run of = sibling elements in sanitized HTML. The list clause of HtmlSanitizeEx.Trave= rser.traverse/2 recurses on the tail of a sibling list and then evaluates L= ist.flatten([head] ++ tail) over the already flattened result, so every one=
of n siblings copies and re-walks the entire remaining tail. The flattenin=
g is only needed for the rare case where scrub returns several replacement = nodes for one node, but the cost is paid across the whole tail at every ste=
p, making traversal quadratic in sibling count. The traverser sits on every=
public entry point, so no particular scrubber or configuration is required=
and the payload needs only allowed tags. A 160 KB body of 20,000 sibling e= lements occupies a scheduler for roughly 1.7 seconds, and the cost grows fa= ster than the body does. This issue affects html_sanitize_ex: from 0.3.1 be= fore 1.5.3. 2026-08-06 not yet calculated CVE-2026-68750 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-68750 ] RRWO--File::Rotate::Simple File::Rotate= ::Simple versions before 0.4.0 for Perl create the target of dangling symli= nks when rotating files. When the file to be rotated is a symbolic link to =
a missing file, and the touch option is enabled, then the rotate method ass= umes that the file is absent (since the existence check is against the targ= et), and does not rotate it. But it touches the file, which creates the tar= get. An attacker that has the ability to create the symlink can use this to=
create an arbitrary file with permissions of the process rotating the file=
s (which may be different from the process that normally writes to the log = file that is being rotated). Note that the touch option is disabled by defa= ult. 2026-08-07 not yet calculated CVE-2026-17435 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-17435 ] ruby--json Ruby JSON is a JSON implementation = for Ruby. From 2.20.0 until 2.21.2, Ruby's JSON native C extension clears t=
he consumed JSON::ResumableParser input buffer but leaves state.start, stat= e.cursor, and state.end pointing into released storage. When partial_value = reconstructs an incomplete object containing duplicate keys, the duplicate-= key warning path calls cursor_position, which dereferences those stale poin= ters. This results in a heap-use-after-free and can terminate the Ruby proc= ess. An attacker who can supply JSON stream data to an application using JS= ON::ResumableParser may cause process termination when the application call=
s partial_value on incomplete attacker-controlled input containing duplicat=
e object keys. This issue has been fixed in version 2.21.2. 2026-08-07 not = yet calculated CVE-2026-71847 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -71847 ] Safetipin--Safetipin Android 5.2.1 My Safetipin Android Applicatio=
n 5.2.1 contains Hardcoded credentials in the authentication module, which = allows remote attackers to bypass authentication and gain unauthorized acce=
ss to user accounts via predictable OTP values. 2026-08-05 not yet calculat=
ed CVE-2025-63823 [ https://www.cve.org/CVERecord?id=3DCVE-2025-63823 ] Sea=
n Barrett (nothings)--nothings stb A heap-buffer-overflow vulnerability exi= sts in the nothings stb TrueType library, up to version 1.26, that is used = for parsing TrueType font files. The vulnerability exists in the stbtt__Get= GlyphShapeTT() function within the nothings stb_truetype.h library when par= sing malformed TTF (TrueType Font) files. The vulnerability resides in the = glyph data parsing path. An attacker can craft a malformed TTF file with an=
inflated endPtsOfContours value and truncate the remaining glyph data. Whe=
n an application utilizing stb_truetype.h (such as various game engines or = graphics software) attempts to load, bake, or render this malformed font vi=
a stbtt_GetGlyphShape(), the parser will attempt to read past the end of th=
e glyph data buffer, triggering the out-of-bounds read. 2026-08-07 not yet = calculated CVE-2026-18497 [ https://www.cve.org/CVERecord?id=3DCVE-2026-184=
97 ] seblod.com--SEBLOD extension for Joomla Joomla Extension - seblod.com =
- Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 - An = unauthenticated attacker could download files from both inside and outside = the webroot. 2026-08-07 not yet calculated CVE-2026-66914 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-66914 ] SEO Redirection Plugin--SEO Redirectio=
n Plugin The SEO Redirection Plugin WordPress plugin before 9.19 does not p= erform a capability check in one of its authenticated AJAX actions, allowin=
g any logged-in user such as a subscriber to read the site's configured 301=
redirect rules, including their source and destination URLs. 2026-08-06 no=
t yet calculated CVE-2026-13703 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-13703 ] Serverless-Devs--Serverless-Devs The "s init" command in Serverl= ess-Devs @serverless-devs/s <=3D 3.1.11 passes unsanitized user input to ch= ild_process.spawn() with shell: true. A URL ending in ".git" bypasses the o= nly input check, allowing OS command injection when a user runs "s init" wi=
th an attacker-controlled argument. 2026-08-03 not yet calculated CVE-2026-= 51190 [ https://www.cve.org/CVERecord?id=3DCVE-2026-51190 ] Shopify--ruby-l=
sp Ruby LSP is an implementation of the language server protocol for Ruby. = Several workspace-level settings in the Ruby LSP VS Code extension prior to=
version 0.10.4 could override the path to the Ruby executable, the version=
manager executables, or the Bundler `Gemfile` used at startup. A malicious=
repository containing a `.vscode/settings.json` could set these values to = attacker-controlled targets. Opening and trusting the repository would then=
execute code with the privileges of the developer. The Ruby LSP gem and cl= ients of the language server in other editors are not affected. Version 0.1= 0.4 of the Ruby LSP VS Code extension fixes the issue. 2026-08-07 not yet c= alculated CVE-2026-48122 [ https://www.cve.org/CVERecord?id=3DCVE-2026-4812=
2 ] Simple Google Calendar Outlook Events Widget--Simple Google Calendar Ou= tlook Events Widget The Simple Google Calendar Outlook Events Widget WordPr= ess plugin before 3.1.0 does not validate a user-supplied URL before perfor= ming a server-side request, allowing unauthenticated attackers to perform S= erver-Side Request Forgery attacks and, in some cases, read the response of=
the internal request. 2026-08-04 not yet calculated CVE-2026-16536 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-16536 ] Simple Membership--Simple Me= mbership The Simple Membership WordPress plugin before 4.7.8 does not verif=
y whether user creation failed during registration before using the returne=
d value as a user ID to update an account, allowing unauthenticated attacke=
rs to overwrite the primary administrator's account data (including the ema=
il address) and take over that account through the password reset flow. 202= 6-08-03 not yet calculated CVE-2026-15930 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-15930 ] Simple Membership--Simple Membership The Simple Member= ship WordPress plugin before 4.7.8 does not sanitise a subscriber name valu=
e received from an unauthenticated payment approval request, nor escape it = when displaying it in the administration dashboard, allowing unauthenticate=
d attackers to store arbitrary JavaScript that executes in an administrator=
's session. 2026-08-03 not yet calculated CVE-2026-15931 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-15931 ] Simply Schedule Appointments--Simply Sc= hedule Appointments The Simply Schedule Appointments WordPress plugin befor=
e 1.6.12.11 does not perform a capability check on an administrative appoin= tment-listing shortcode, and its per-user result scoping fails open for non= -staff users, allowing users with the Contributor role and above to disclos=
e all customers' appointment records, including names, email addresses, pho=
ne numbers and notes, across the whole site. 2026-08-03 not yet calculated = CVE-2026-15254 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15254 ] SirenG= PS--SirenGPS Android Application 2.19.44 SirenGPS Android Application 2.19.=
44 is vulnerable to Incorrect Access Control. An authenticated attacker can=
manipulate user identifier parameters to bypass authorization controls and=
gain unauthorized READ and WRITE access to other users' personal informati= on. The API fails to validate that the requesting user is authorized to acc= ess the target user's data. 2026-08-05 not yet calculated CVE-2025-63822 [ = https://www.cve.org/CVERecord?id=3DCVE-2025-63822 ] Slick Slider--Slick Sli= der The Slick Slider WordPress plugin before 0.5.3 does not sanitize and es= cape a shortcode attribute value before outputting it in an HTML attribute,=
allowing users with the Contributor role and above to perform Stored Cross= -Site Scripting attacks that execute when a user views the affected post. 2= 026-08-06 not yet calculated CVE-2026-16537 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-16537 ] Slim SEO--Slim SEO The Slim SEO WordPress plugin bef= ore 4.9.11 does not restrict a post-meta preview feature to posts the user =
is allowed to edit, verifying only read access, allowing users with the Con= tributor role to read arbitrary post meta, including protected and private = keys, of published posts they do not own, including password-protected post=
s and posts of non-public post types. 2026-08-09 not yet calculated CVE-202= 6-16957 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16957 ] sm page dupli= cator--sm page duplicator The sm page duplicator WordPress plugin through 1= .0.0 does not sanitise and escape a stored value before using it in a SQL s= tatement when duplicating a page, allowing users with the Editor role and a= bove to perform SQL Injection attacks. 2026-08-03 not yet calculated CVE-20= 26-16539 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16539 ] smarty-php--= smarty Smarty is a template engine for PHP, facilitating the separation of = presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 o=
n the 4.x line), Security::_checkDir() does not fully resolve symbolic link=
s before validating that a requested path lies within a configured secure d= irectory. An attacker able to place or reference a symlink within a directo=
ry Smarty treats as trusted (e.g., a template or config directory) could us=
e it to point outside the intended secure directory, bypassing the containm= ent check and reading arbitrary files accessible to the PHP process. This i= ssue is fixed in versions 5.8.2 and 4.5.7. 2026-08-07 not yet calculated CV= E-2026-62992 [ https://www.cve.org/CVERecord?id=3DCVE-2026-62992 ] smarty-p= hp--smarty Smarty is a template engine for PHP, facilitating the separation=
of presentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4,=
Smarty's stream: resource-name handling does not adequately restrict which=
PHP stream wrappers and filter chains can be referenced from a template, a= llowing a php://filter-wrapped resource name to be used to read the content=
s of arbitrary local files accessible to the PHP process. An attacker able =
to author or influence a template's resource reference could exploit this t=
o disclose sensitive file contents outside the intended template/config sco= pe. This issue is fixed in version 5.8.4. 2026-08-07 not yet calculated CVE= -2026-62996 [ https://www.cve.org/CVERecord?id=3DCVE-2026-62996 ] SoftMarke=
t Digital Marketplace--SoftMarket Digital Marketplace The SoftMarket - Digi= tal Marketplace WordPress plugin through 1.0.0 does not properly validate a=
n authentication token in one branch of its email-verification flow, allowi=
ng unauthenticated attackers to obtain a valid session as any verified user=
by supplying only that user's ID. 2026-08-03 not yet calculated CVE-2026-1= 4557 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14557 ] Sol--Sol In sol = commit 373d848 (2024-12-12), the broker does not fully release resources wh=
en handling malformed or duplicate CONNECT packets. When clients send inval=
id CONNECT packets - either due to repeated attempts or failed authenticati=
on - the server may silently drop the connection or send a CONNACK but fail=
to close the session or deallocate internal resources. This behavior allow=
s an attacker to create numerous half-open connections that consume memory = and file descriptors indefinitely, potentially triggering the Linux OOM kil= ler and causing a denial of service. 2026-08-07 not yet calculated CVE-2025= -63235 [ https://www.cve.org/CVERecord?id=3DCVE-2025-63235 ] Solace Extra--= Solace Extra The Solace Extra WordPress plugin before 1.6.1 does not perfor=
m capability checks in several of its AJAX actions and exposes the nonce th=
at protects them on admin pages reachable by low-privileged users, allowing=
users with a role as low as Subscriber to modify site-wide presentation se= ttings and delete imported site-builder content. 2026-08-08 not yet calcula= ted CVE-2026-16948 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16948 ] So= lace Extra--Solace Extra The Solace Extra WordPress plugin before 1.6.1 doe=
s not perform capability or nonce checks in one of its AJAX actions, allowi=
ng any authenticated user such as a subscriber (and, via CSRF, any logged-i=
n user) to update post meta on arbitrary posts and to deactivate the site's=
active templates. 2026-08-09 not yet calculated CVE-2026-16965 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-16965 ] Soliton Systems--MailZen Managem= ent Portal Cross Site Scripting vulnerability in Soliton Systems MailZen Ma= nagement Portal v.2.62, v.2.63 allows a remote attacker to execute arbitrar=
y code via the Role Name, First Name, Last Name, and Username fields. 2026-= 08-04 not yet calculated CVE-2026-51144 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-51144 ] Sonatype--Nexus Repository An account holding the nexus= :settings:update permission in Nexus Repository 3 (or the equivalent nexus:= settings permission in the legacy Nexus Repository 2) could submit arbitrar=
y values as realm identifiers through an internal configuration API that di=
d not validate them against the set of registered realms. Because unrecogni= zed entries were persisted and re-evaluated on every realm load via a legac=
y code path, this could result in unintended code executing inside the Nexu=
s Repository process, and in some cases a persistent authentication lockout=
that was not visible through the administrative UI. 2026-08-07 not yet cal= culated CVE-2026-17593 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17593 =
] Sonatype--Nexus Repository 3 Nexus Repository 3 contained a privilege esc= alation vulnerability in the REST privileges API. An authenticated user wit=
h permission to manage privileges could, under certain role configurations,=
escalate their own access to full administrator by exploiting a type-confu= sion flaw in the privilege update endpoint. 2026-08-07 not yet calculated C= VE-2026-14644 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14644 ] Sonatyp= e--Nexus Repository 3 Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94=
.x contain an incorrect authorization vulnerability (CWE-863) in the reposi= tory-creation user interface. An individual user account holding a delegate=
d repository-admin privilege scoped to a specific repository format could c= reate a repository of a different, unauthorized format, because authorizati=
on was checked against one request field while a separate, attacker-control= led field determined the repository format actually created. This does not = affect the anonymous user, which cannot hold this privilege by default. Fix=
ed in version 3.95.0. 2026-08-07 not yet calculated CVE-2026-17594 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-17594 ] Sonatype--Nexus Repository 3 = Nexus Repository 3 did not fully sandbox JEXL expressions used in Content S= electors. An account holding the nexus:selectors:create permission could co= nstruct an expression that read Java object properties not intended to be e= xposed to the expression engine, disclosing internal JVM class metadata suc=
h as class and classloader names. This issue does not permit method invocat= ion, object construction, or arbitrary code execution. This has been fixed =
by restricting property access in the JEXL sandbox to the intended data typ= es. 2026-08-07 not yet calculated CVE-2026-17595 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-17595 ] Sonatype--Nexus Repository 3 Nexus Repository 3=
was found to be vulnerable to stored cross-site scripting (XSS). A user wi=
th the nexus:blobstores:create or nexus:blobstores:update permission could = set a blob store name containing malicious script content, which would late=
r execute in the browser of another user viewing system health-check status=
. This issue has been fixed in version 3.95.0. 2026-08-07 not yet calculate=
d CVE-2026-17596 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17596 ] Sona= type--Nexus Repository 3 Nexus Repository 3 contains a Server-Side Request = Forgery (SSRF) vulnerability in the email configuration verification featur=
e. A user holding the nexus:settings:update permission could submit arbitra=
ry host and port values to the email test/verification endpoint, causing th=
e server to attempt outbound network connections to internal or otherwise r= estricted network addresses. Differences in the server's response could be = used to infer whether internal hosts and ports are reachable. This issue af= fects Nexus Repository 3 CE/Pro versions up to and including 3.94.1, and is=
fixed in version 3.95.0. 2026-08-07 not yet calculated CVE-2026-17597 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-17597 ] Sonatype--Nexus Repositor=
y 3 Sonatype Nexus Repository 3 did not properly filter internal configurat= ion keys from user-supplied task properties when creating or updating a sch= eduled task through the administrative UI. An account holding permission to=
create at least one scheduled task type could supply a crafted property va= lue that caused the system to overwrite the configuration of an unrelated, = existing task instead of creating a new one. 2026-08-07 not yet calculated = CVE-2026-17598 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17598 ] Sonaty= pe--Nexus Repository 3 Nexus Repository 3 contained an endpoint used to cha= nge the administrator account password during initial onboarding. This endp= oint did not verify that onboarding was still in progress before allowing t=
he password change, relying instead on the presence of a local onboarding a= rtifact. As a result, an account holding the nexus:* permission could invok=
e the endpoint outside the intended onboarding flow to replace the administ= rator password, and existing sessions were not invalidated after the change=
. 2026-08-07 not yet calculated CVE-2026-17599 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-17599 ] Sonatype--Nexus Repository 3 Sonatype Nexus Repos= itory 3 did not immediately terminate a user's active login session or revo=
ke their cached permissions when that user's account was deleted, deactivat= ed, or had its password changed. A user whose account was already logged in=
at the time of one of these actions could continue using their existing se= ssion to interact with the repository as though the account were still acti= ve, until that session independently expired. Depending on the permissions = previously held, this could allow continued unauthorized access to read, mo= dify, or delete repository content after access was intended to be revoked.=
2026-08-07 not yet calculated CVE-2026-17600 [ https://www.cve.org/CVEReco= rd?id=3DCVE-2026-17600 ] Sonatype--Nexus Repository 3 A user holding a perm= ission to update privilege definitions could modify a wildcard privilege al= ready assigned to their own role to grant broader permissions than they wer=
e authorized to hold, including full administrative access, without any add= itional authorization check or role reassignment. 2026-08-07 not yet calcul= ated CVE-2026-17601 [ https://www.cve.org/CVERecord?id=3DCVE-2026-17601 ] S= onatype--Nexus Repository 3 Nexus Repository 3 did not sufficiently restric=
t which HikariCP connection-pool properties could be set through the DataSt= ore configuration API. A user holding the nx-datastores-update permission c= ould set the connectionInitSql property to execute arbitrary SQL against th=
e configured database on every new connection. On the default H2 database b= ackend, this could be leveraged to achieve remote code execution as the Nex=
us process user. 2026-08-07 not yet calculated CVE-2026-17603 [ https://www= .cve.org/CVERecord?id=3DCVE-2026-17603 ] SonicWall--Global VPN Client Sonic= Wall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an = out-of-bounds kernel memory read in the SWIPsec.sys driver, which could all=
ow a local attacker to cause a system crash. 2026-08-07 not yet calculated = CVE-2026-66151 [ https://www.cve.org/CVERecord?id=3DCVE-2026-66151 ] SonicW= all--SonicOS A improper neutralization of HTTP Headers for Scripting Syntax=
vulnerability in SonicOS could allow a remote attacker to manipulate the H= ost header and redirect firewall management users to arbitrary web domains.=
2026-08-05 not yet calculated CVE-2026-0516 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-0516 ] Stripe Payment Forms by WP Full Pay--Stripe Payment = Forms by WP Full Pay The Stripe Payment Forms by WP Full Pay WordPress plug=
in before 8.5.2 does not verify that the caller owns the Stripe payment int= ent referenced by two unauthenticated payment-form AJAX actions, allowing a=
n unauthenticated visitor - using a nonce that is embedded in every public = page containing a payment form - to change the amount of a payment intent t= hat the Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 t= hen updates server-side through the Stripe API with the store's secret key.=
An ownership check added in 8.5.0 was applied to only one payment-intent h= andler, leaving the pricing-recalculation and payment-intent-update actions=
unprotected against amount manipulation. 2026-08-06 not yet calculated CVE= -2026-16734 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16734 ] Subscribe= 2--Subscribe2 The Subscribe2 WordPress plugin before 10.46 does not properl=
y escape a user-supplied value before reflecting it into a public subscript= ion form, leading to Reflected Cross-Site Scripting that executes in the br= owser of an unauthenticated visitor who interacts with the form through a c= rafted link. 2026-08-07 not yet calculated CVE-2026-14331 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-14331 ] Subscriptions for WooCommerce--Subscri= ptions for WooCommerce The Subscriptions for WooCommerce WordPress plugin b= efore 2.0.1 does not verify that the requester owns the subscription being = viewed before rendering its details, allowing any authenticated customer to=
read another customer's subscription information (the subscribed product, = status, and dates) by supplying that subscription's ID. 2026-08-07 not yet = calculated CVE-2026-15214 [ https://www.cve.org/CVERecord?id=3DCVE-2026-152=
14 ] Subscriptions for WooCommerce--Subscriptions for WooCommerce The Subsc= riptions for WooCommerce WordPress plugin before 2.0.1 does not verify the = user's capability before installing and activating a Subscriptions for WooC= ommerce WordPress plugin before 2.0.1 from a user-supplied slug through a n= once-protected AJAX action, allowing users with the Shop Manager role (who = lack Subscriptions for WooCommerce WordPress plugin before 2.0.1-management=
capabilities) to install and activate arbitrary Subscriptions for WooComme= rce WordPress plugin before 2.0.1, resulting in remote code execution. 2026= -08-07 not yet calculated CVE-2026-15215 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-15215 ] Sunshine Photo Cart--Sunshine Photo Cart The Sunshine P= hoto Cart WordPress plugin before 3.6.12 does not perform access control ch= ecks in one of its AJAX actions, allowing unauthenticated users to retrieve=
the comments of images belonging to private, password-protected or otherwi=
se access-restricted galleries. 2026-08-05 not yet calculated CVE-2026-1656=
1 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16561 ] Super Store Finder = WordPress--Super Store Finder WordPress The Super Store Finder WordPress pl= ugin through 7.8 does not sanitize a parameter of an unauthenticated AJAX a= ction before using it in a SQL query, allowing unauthenticated attackers to=
perform SQL injection and extract data from the database. 2026-08-03 not y=
et calculated CVE-2026-12965 [ https://www.cve.org/CVERecord?id=3DCVE-2026-= 12965 ] SVG Support--SVG Support The SVG Support WordPress plugin before 2.= 5.17 does not apply its SVG sanitisation to uploaded files using the .svgz = extension, even though it registers and serves them as SVG, allowing a user=
permitted to upload SVGs (such as an Author once granted upload access) to=
store a script-bearing file that executes in the browser of anyone who lat=
er views it, including an administrator. 2026-08-03 not yet calculated CVE-= 2026-13340 [ https://www.cve.org/CVERecord?id=3DCVE-2026-13340 ] Systerel--= S2OPC 1.7.3 S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse=
handling. This allows a remote attacker to cause a denial of service 2026-= 08-05 not yet calculated CVE-2026-67865 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-67865 ] Systerel--S2OPC 1.7.3 Buffer Overflow vulnerability in = Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of service = via the LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse and SOPC_StaMa= c_NewDeleteMonitoredItems in the client wrapper DeleteMonitoredItems path 2= 026-08-05 not yet calculated CVE-2026-67866 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-67866 ] Systerel--S2OPC 1.7.3 Buffer Overflow vulnerability =
in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial of servi=
ce via the Alarm/Conditions wrapper when processing PublishResponse EventNo= tificationList data 2026-08-05 not yet calculated CVE-2026-67867 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-67867 ] Systerel--S2OPC 1.7.3 Buffer Ov= erflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacker to ca= use a denial of service via the AddNodes, address_space_bs.c, sopc_node_mgt= _helper_internal.c, and toolkit_test_server 2026-08-05 not yet calculated C= VE-2026-67871 [ https://www.cve.org/CVERecord?id=3DCVE-2026-67871 ] Systere= l--S2OPC 1.7.3 An issue in Systerel S2OPC 1.7.3 allows a remote attacker to=
cause a denial of service via the event monitored-item queue resize handli=
ng 2026-08-05 not yet calculated CVE-2026-67872 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-67872 ] Tag, Category, and Taxonomy Manager--Tag, Catego= ry, and Taxonomy Manager The Tag, Category, and Taxonomy Manager WordPress = plugin before 3.51.0 does not verify that a user is authorized to access a = referenced post before processing it and returning derived data, allowing u= sers with contributor privileges to disclose data from private or draft pos=
ts they do not own. 2026-08-03 not yet calculated CVE-2026-15231 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-15231 ] TECNO Mobile--Hi Browser Path T= raversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Androi=
d allows arbitrary file write via directory traversal sequences in the file= name. 2026-08-05 not yet calculated CVE-2026-18907 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-18907 ] Templately--Templately The Templately WordPre=
ss plugin before 3.7.1 does not have an authorisation check on one of its r= equest handlers, allowing unauthenticated attackers to overwrite the admini= strator's stored cloud service connection with an account under their contr= ol, disconnecting the legitimate administrator and redirecting the site's c= loud template library to attacker-controlled content. 2026-08-07 not yet ca= lculated CVE-2026-15359 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15359=
] The GDPR Framework By Data443--The GDPR Framework By Data443 The GDPR Fr= amework By Data443 WordPress plugin before 2.4.0 does not properly verify a= uthorization or the identity of the data subject when recording cookie-cons= ent choices and privacy requests, allowing unauthenticated attackers to for=
ge consent records for arbitrary email addresses and to flood the site's pr= ivacy-request queue with arbitrary entries. 2026-08-04 not yet calculated C= VE-2026-14816 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14816 ] The HDF=
Group--HDF5 Untrusted pointer dereference in the render_bin_output functio=
n in the h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denia=
l of service via a variable-length string dataset with more than one elemen=
t dumped in binary mode, which corrupts the per-element stride calculation = and causes subsequent elements to be read from a misaligned offset and dere= ferenced as a pointer. 2026-08-05 not yet calculated CVE-2026-19023 [ https= ://www.cve.org/CVERecord?id=3DCVE-2026-19023 ] The HDF Group--HDF5 NULL poi= nter dereference in H5Pget_fill_value in HDF5 before 2.3.0 allows attackers=
to cause a denial of service via a dataset whose version 1 or 2 fill value=
message has the "defined" flag set together with a negative size field, wh= ich is not normalized to the library's "undefined" sentinel and reaches H5T= _path_find with a NULL datatype. 2026-08-05 not yet calculated CVE-2026-190=
24 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19024 ] The HDF Group--HDF=
5 H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not validate=
that a chunked dataset's stored chunk-layout dimensionality matches its da= taspace rank when an existing dataset is opened, whereas this check is perf= ormed only at dataset-creation time. This allows attackers to cause a denia=
l of service (divide-by-zero and application crash in H5S__hyper_iter_get_s= eq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/da= taspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by the=
h5repack tool. 2026-08-05 not yet calculated CVE-2026-19025 [ https://www.= cve.org/CVERecord?id=3DCVE-2026-19025 ] The HDF Group--HDF5 H5Z__filter_nbi=
t in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_values[0] through cd_v= alues[4] without validating that cd_values is non-NULL or that cd_nelmts is=
at least 5, the fixed size of the filter's header. This allows attackers t=
o cause a denial of service via a crafted HDF5 file that stores the N-Bit f= ilter pipeline message with zero client-data values, opened and read via H5= Dread, e.g. by the h5ls or h5repack tools. 2026-08-05 not yet calculated CV= E-2026-19026 [ https://www.cve.org/CVERecord?id=3DCVE-2026-19026 ] The HDF = Group--HDF5 The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_noo= ptype, and H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 t= hrough 2.3.0 advance a read index into the compressed chunk buffer without = bounding it against the buffer's actual size. This allows attackers to caus=
e an out-of-bounds heap read, and in constrained cases disclosure of adjace=
nt heap memory into decompressed dataset values, via a crafted HDF5 file wh= ose N-Bit filter parameters describe more decompressed data than the stored=
compressed chunk actually contains, triggered via H5Dread, e.g. by the h5l=
s or h5repack tools. 2026-08-05 not yet calculated CVE-2026-19027 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-19027 ] The HDF Group--HDF5 H5Z__filte= r_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 computes the data len= gth to checksum by subtracting the 4-byte trailing checksum size from the i= nput buffer size without checking that the buffer is at least 4 bytes, allo= wing a size_t underflow. This allows attackers to cause a denial of service=
(massively out-of-bounds read and application crash in H5_checksum_fletche= r32) via a crafted HDF5 file with a Fletcher32-filtered chunk smaller than =
4 bytes, triggered via H5Dread, e.g. by the h5ls or h5dump tools. 2026-08-0=
5 not yet calculated CVE-2026-19028 [ https://www.cve.org/CVERecord?id=3DCV= E-2026-19028 ] TIMLEGGE--Net::SAML2 Net::SAML2 versions before 0.86 for Per=
l allow SAML authentication bypass by verifying responses against the respo= nse-embedded certificate in verify_xml when no trust anchor is configured. = verify_xml in Net::SAML2::Role::VerifyXML runs "return if !$anchors && !$ca= cert;" as soon as the XML::Sig check succeeds, and that check uses the X.50=
9 certificate taken from the response's own dsig:KeyInfo/dsig:X509Certifica=
te element, so an unanchored response is checked only against the key it ca= rries. Binding::POST declares cacert as an optional Maybe[Str] with no defa= ult, so a POST binding built without one takes that path, and _verify_encry= pted_assertion returns early the same way with "return $xml unless $cacert;=
". Any caller that constructs Binding::POST or calls Assertion->new_from_xm=
l without a cacert, cert_text, or anchors argument accepts a response signe=
d by an attacker generated key whose self-signed certificate is embedded in=
that response, authenticating an arbitrary assertion. 2026-08-03 not yet c= alculated CVE-2026-18089 [ https://www.cve.org/CVERecord?id=3DCVE-2026-1808=
9 ] TIMLEGGE--Net::SAML2 Net::SAML2 versions before 0.86 for Perl allow SAM=
L authentication bypass via XML signature wrapping because new_from_xml rea=
ds assertion identity with document-wide XPath instead of the signed subtre=
e. new_from_xml reads the NameID, attribute values, SessionIndex, audience = and other identity fields with document-wide XPath, such as //saml:Assertio= n/saml:AttributeStatement/saml:Attribute and //saml:Subject/saml:NameID, wh= ich select the first matching element in document order rather than the ele= ment covered by the verified signature. handle_response confirms that a sig= nature is present and, when a cacert is configured, that it chains to the C=
A, but XML::Sig verifies only the element named by the signature's Referenc=
e URI, so unsigned sibling assertions in the same document are not covered.=
An attacker who holds any one IdP-signed assertion can add an unsigned att= acker-authored assertion earlier in document order; the signature still ver= ifies and the document-order XPath returns the attacker's NameID and attrib= utes. Any caller that passes an untrusted Response to new_from_xml can acce=
pt identity fields from an assertion the IdP never signed, even when a cace=
rt trust anchor is configured, so a party holding one valid IdP-signed asse= rtion can authenticate as an arbitrary user. 2026-08-03 not yet calculated = CVE-2026-18092 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18092 ] TIMLEG= GE--Net::SAML2 Net::SAML2 versions before 0.86 for Perl allow authenticatio=
n bypass because _verify_encrypted_assertion accepts an EncryptedAssertion = whose decrypted content carries no signature. _verify_encrypted_assertion d= ecrypts the EncryptedAssertion and returns it as verified when it carries n=
o signature, via "return $xml unless $xpath->exists('dsig:Signature', $asse= rt);". The signature check and the trust anchor check that follow run only = when a signature is present, so a decrypted assertion with no dsig:Signatur=
e element reaches new_from_xml unverified and its NameID and attributes are=
read into the assertion object. An SP's encryption certificate is publishe=
d in its SAML metadata so the IdP can encrypt to it, so any party can encry=
pt an unsigned assertion to that certificate, wrap it in a samlp:Response, = and post it to the assertion consumer service. Any caller that configures a=
decryption key_file, and so accepts EncryptedAssertions, takes identity fi= elds from an assertion that no trust anchor covers, and an unauthenticated = party can authenticate as an arbitrary user. Callers with no key_file confi= gured do not decrypt and are unaffected. 2026-08-03 not yet calculated CVE-= 2026-18108 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18108 ] TIMLEGGE--= XML::Sig XML::Sig versions from 0.29 before 0.72 for Perl allow signature v= erification bypass because verify returns true when every signature was ski= pped before any cryptographic check. verify in lib/XML/Sig.pm counts the `/= /dsig:Signature` elements into `$numsigs` and iterates over them, but two p= aths reach `next` before any digest or key check runs: a `SignedInfo/Refere= nce/@URI` that resolves to no element while `$numsigs` is greater than 1, a= nd, when `id_attr` is set, a reference that does not match the requested ID=
. The loop records nothing about what it checked, so when every signature t= akes one of those paths control reaches the unconditional `return 1` that e= nds verify. Two `Signature` elements whose Reference URI names an ID that n=
o element carries is enough, as is one such element combined with `id_attr`=
. Any caller that passes untrusted XML to verify can receive a true return = for a document in which no digest and no signature value was checked; a `ce= rt` or `cert_text` trust anchor does not change this, because no key check = runs. Versions up to 0.28 use an XML::XPath based verify that has no such s= kip and are not affected. 2026-08-03 not yet calculated CVE-2026-18568 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-18568 ] TIMLEGGE--XML::Sig XML::S=
ig versions before 0.71 for Perl allow XPath injection in ID lookup. verify=
() and _get_signed_xml() in lib/XML/Sig.pm build XPath expressions by conca= tenating the SignedInfo/Reference/@URI value read from the document being v= erified. The value is neither escaped nor checked against the NCName gramma=
r that XML requires of an ID, so a URI containing a single quote closes the=
string literal in the generated expression and appends arbitrary XPath ope= rators. A crafted URI can make the lookup match elements the reference does=
not name, or every element in the document, so which node is selected for = digest verification is decided by the injected expression rather than by th=
e reference. 2026-08-03 not yet calculated CVE-2026-9390 [ https://www.cve.= org/CVERecord?id=3DCVE-2026-9390 ] TIMLEGGE--XML::Sig XML::Sig versions bef= ore 0.71 for Perl allow signature wrapping via duplicate ID. _get_signed_xm= l() in lib/XML/Sig.pm, called from verify(), resolves the SignedInfo Refere= nce/@URI to a node with the XPath expression "//*[@ID=3D'$id']" and returns=
the first node of the resulting node set. A document in which two elements=
share that ID value is accepted: the digest and signature are checked agai= nst whichever element comes first in document order, and the duplicate is n=
ot detected. Such a document verifies successfully while an application tha=
t resolves the same ID independently can read the second, attacker supplied=
element; in a SAML2 context this places the contents of an Assertion under=
attacker control. 2026-08-03 not yet calculated CVE-2026-9487 [ https://ww= w.cve.org/CVERecord?id=3DCVE-2026-9487 ] Tobit Laboratories AG--TeamDavid T= obit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary file = deletion vulnerability in the send email, fax, SMS, etc. functionality. By = specifying an @@COMMENTFILE command in the form field scjob, any file on th=
e system can be deleted.=C2=A0This issue affects TeamDavid through Rollout = 524. 2026-08-07 not yet calculated CVE-2026-12070 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-12070 ] Tobit Laboratories AG--TeamDavid The Webbox of=
TeamDavid by=C2=A0Tobit Laboratories AG=C2=A0constructs redirect URLs usin=
g user-supplied input, which is appended to the redirect target in a 302 HT=
TP response. By using URL-encoded characters such as "%2e" (representing a = dot), an attacker can manipulate the portion of the URL following the top-l= evel domain (TLD). If a similar, registerable TLD exists (for example, if "= .com" is the application's domain, and ".company" is available for registra= tion), an attacker can craft a URL to redirect users to a malicious ".compa= ny" domain. By using URL-encoded line feeds, it becomes possible to insert = arbitrary response headers in the server's HTTP response. This issue affect=
s TeamDavid through Rollout 524. 2026-08-07 not yet calculated CVE-2026-120=
71 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12071 ] Tobit Laboratories=
AG--TeamDavid Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HT=
TP header injection through the request body in the application's link stor= ing functionality (//ServerClient_celink.htm), which is appended to the red= irect target in the 302 HTTP response. If a line feed is added, this will a= lso be added to the redirect link, resulting in the ability to control the = response headers.=C2=A0This issue affects TeamDavid through Rollout 524. 20= 26-08-07 not yet calculated CVE-2026-54199 [ https://www.cve.org/CVERecord?= id=3DCVE-2026-54199 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories A=
G TeamDavid's Webbox is vulnerable to a local file inclusion vulnerability =
in the send email, fax, SMS, etc. functionality. By specifying an '@@attach=
' command in the form field=C2=A0'scjob', files can be attached to a messag=
e, which can then be downloaded by an authenticated user. A filter is in pl= ace that restricts access to the David con-fig folder and the user folder. = However, this filter can be bypassed by specifying an alternate data stream=
, allowing the download of sensitive files such as other users' access file=
s containing their passwords or the server's private key.=C2=A0This issue a= ffects TeamDavid through Rollout 524. 2026-08-07 not yet calculated CVE-202= 6-54200 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54200 ] Tobit Laborat= ories AG--TeamDavid Tobit Laboratories AG TeamDavid's Webbox does not enfor=
ce authentication or authorization checks when serving these log files. As =
a result, attackers can obtain sensitive error information or internal appl= ication details, potentially aiding in further attacks.=C2=A0This issue aff= ects TeamDavid through Rollout 524. 2026-08-07 not yet calculated CVE-2026-= 54201 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54201 ] Tobit Laborator= ies AG--TeamDavid Tobit Laboratories AG TeamDavid's Webbox is vulnerable to=
a path traversal vulnerability in the archive creation functionality. Beca= use the archive path is user-controlled and insufficiently validated, an at= tacker can manipulate the input to traverse directories. This allows the cr= eation of folders in arbitrary locations, including sensitive directories s= uch as C:\Windows or for different users.=C2=A0This issue affects TeamDavid=
through Rollout 524. 2026-08-07 not yet calculated CVE-2026-54202 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-54202 ] Tobit Laboratories AG--TeamDa= vid Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratorie=
s AG TeamDavid's Webbox allows reading of sensitive information. When acces= sing the URL "/.well-known/mta-sts.", the application responds with memory.=
By repeatedly requesting this endpoint, an attacker can access sensitive i= nformation,=C2=A0including user passwords. Exploitation does not require au= thentication.=C2=A0This issue affects TeamDavid through Rollout 524. 2026-0= 8-07 not yet calculated CVE-2026-54203 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-54203 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG = TeamDavid's Webbox 's search functionality accepts a "pathnameroot" paramet= er, which can be set to network locations using UNC paths (e.g., "\Server\S= hare"). The server processes these paths without validation, resulting in o= utbound connection attempts to attacker-controlled SMB servers. This enable=
s unauthenticated attackers to trigger the server to authenticate to arbitr= ary SMB endpoints, potentially exposing NTLM authentication information (su=
ch as NTLM hashes). If outbound connections to port 445 (SMB) are permitted=
, attackers can use this to conduct SMB relay or credential theft attacks. = Exploitation of the "pathnameroot" parameter is possible without authentica= tion. This issue affects TeamDavid through Rollout 524. 2026-08-07 not yet = calculated CVE-2026-54204 [ https://www.cve.org/CVERecord?id=3DCVE-2026-542=
04 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG TeamDavid's Web= box 's link storing functionality (//ServerClient_celink.htm) accepts a "pa= thname" parameter, which can be set to network locations using UNC paths (e= .g., "\Server\Share"). The server processes these paths without validation,=
resulting in outbound connection attempts to attacker-controlled SMB serve= rs. This enables authenticated attackers to trigger the server to authentic= ate to arbitrary SMB endpoints, potentially exposing NTLM authentication in= formation (such as NTLM hashes). If outbound connections to port 445 (SMB) = are permitted, attackers can use this to conduct SMB relay or credential th= eft attacks. Exploitation of the "pathname" parameter is possible without a= uthentication.=C2=A0This issue affects TeamDavid through Rollout 524. 2026-= 08-07 not yet calculated CVE-2026-54205 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-54205 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG = TeamDavid's Webbox 's sending email, fax, SMS, etc. functionality accepts a=
@@INCLUDE command, which can be set to network locations using UNC paths (= e.g., "\Server\Share"). The server processes these paths without validation=
, resulting in outbound connection attempts to attacker-controlled SMB serv= ers. This enables authenticated attackers to trigger the server to authenti= cate to arbitrary SMB endpoints, potentially exposing NTLM authentication i= nformation (such as NTLM hashes). If outbound connections to port 445 (SMB)=
are permitted, attackers can use this to conduct SMB relay or credential t= heft attacks. Exploitation of the "pathname" parameter is possible without = authentication.=C2=A0This issue affects TeamDavid through Rollout 524. 2026= -08-07 not yet calculated CVE-2026-54206 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-54206 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG = TeamDavid's Webbox 's move archive functionality ("!ArcEntryMove") accepts =
an arbitrary path, which can be set to network locations using UNC paths (e= .g., "\Server\Share"). The server processes these paths without validation,=
resulting in outbound connection attempts to attacker-controlled SMB serve= rs. This enables au-thenticated attackers to trigger the server to authenti= cate to arbitrary SMB endpoints, potentially exposing NTLM authentication i= nformation (such as NTLM hashes). If outbound connections to port 445 (SMB)=
are permitted, attackers can use this to conduct SMB relay or credential t= heft attacks. Exploitation of the "pathname" parameter is possible without = authentication.=C2=A0This issue affects TeamDavid through Rollout 524. 2026= -08-07 not yet calculated CVE-2026-54207 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-54207 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG = TeamDavid's Webbox application is vulnerable to arbitrary file write, allow= ing an unauthenticated attacker to create or write into existing files on t=
he server with attacker-controlled content. This is possible because user i= nput is written directly to files without proper validation or restriction =
on file types. As a result, an attacker can create files (e.g., .htm), cont= aining malicious JavaScript code. When a user accesses a file created in th=
is way, stored cross-site scripting is triggered.=C2=A0This issue affects T= eamDavid through Rollout 524. 2026-08-07 not yet calculated CVE-2026-54208 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-54208 ] Tobit Laboratories AG= --TeamDavid Tobit Laboratories AG TeamDavid's Webbox application handles pa= ssword changes using a function triggered by including the string "(editini=
)" in the file path, writing the new password to the specified "Archive.ini=
" file. However, the application does not verify that the provided path act= ually refers to an "Archive.ini" file. If an attacker specifies a different=
file with excessive size, a buffer overflow occurs. This vulnerability all= ows an unauthenticated attacker to crash the server, resulting in denial of=
service.=C2=A0This issue affects TeamDavid through Rollout 524. 2026-08-07=
not yet calculated CVE-2026-54209 [ https://www.cve.org/CVERecord?id=3DCVE= -2026-54209 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG TeamDa= vid's Webbox application implements various file upload functionalities tha=
t are vulnerable to a buffer overflow condition. By specifying an excessive=
ly long filename in a file upload request, an unauthenticated attacker can = trigger a crash of the server, resulting in a denial of service. Depending =
on the stack state or if a stack canary can be disclosed through another vu= lnerability, this buffer overflow could potentially be exploited for remote=
code execution, leading to full compromise of the server.=C2=A0This issue = affects TeamDavid through Rollout 524. 2026-08-07 not yet calculated CVE-20= 26-54210 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54210 ] Tobit Labora= tories AG--TeamDavid Tobit Laboratories AG TeamDavid's Webbox application's=
endpoint "//serverClient_close.html" is vulnerable to a buffer overflow vu= lnerability in multiple form data parameters. By submitting excessively lon=
g values in these parameters, an authenticated attacker can trigger a serve=
r crash, resulting in denial of service. Depending on the stack state or if=
a stack canary can be disclosed through another vulnerability, this buffer=
overflow could potentially be exploited for remote code execution, leading=
to full compromise of the server.=C2=A0This issue affects TeamDavid throug=
h Rollout 524. 2026-08-07 not yet calculated CVE-2026-54211 [ https://www.c= ve.org/CVERecord?id=3DCVE-2026-54211 ] Tobit Laboratories AG--TeamDavid Tob=
it Laboratories AG TeamDavid's Webbox application implements an API endpoin=
t that is vulnerable to a buffer overflow condition. By submitting a specia= lly crafted JSON body, such as one that is at least 8 characters long and b= egins with a number, an unauthenticated attacker can cause the server to cr= ash, resulting in denial of service. Depending on the stack state or if a s= tack canary can be disclosed through another vulnerability, this buffer ove= rflow could potentially lead to remote code execution and full compromise o=
f the server.=C2=A0This issue affects TeamDavid through Rollout 524. 2026-0= 8-07 not yet calculated CVE-2026-54212 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-54212 ] Tobit Laboratories AG--TeamDavid Tobit Laboratories AG = TeamDavid's Webbox application exposes a functionality that allows the serv=
er to be shut down when a specific endpoint (/internalRestart) is accessed.=
This endpoint is accessible to unauthenticated users over the public Inter= net. Instead of "restarting", the server shuts completely down. As a result=
, a remote attacker can trigger a persistent denial of service by shutting = down the web server without requiring authentication. Recovery requires man= ual administrator intervention to restart the service.=C2=A0This issue affe= cts TeamDavid through Rollout 524. 2026-08-07 not yet calculated CVE-2026-5= 4213 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54213 ] Tobit Laboratori=
es AG--TeamDavid Tobit Laboratories AG TeamDavid's Webbox application is vu= lnerable to HTTP header injection through the "cType" URL parameter, which = allows arbitrary modification of the Content-Type header in HTTP responses.=
Because the parameter does not properly restrict control characters such a=
s URL-encoded newlines ("%0a") or colons, attackers can inject additional h= eaders including extra Location headers into the server's response. This re= sults e.g. in an open redirect vulnerability.=C2=A0This issue affects TeamD= avid through Rollout 524. 2026-08-07 not yet calculated CVE-2026-54214 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-54214 ] Tobit Laboratories AG--Te= amDavid Tobit Laboratories AG TeamDavid's Webbox contains an open redirect = vulnerability via the "replyUrl" parameter. An attacker can exploit this vu= lnerability to craft a URL within the application that, when visited, redir= ects the user's browser to an arbitrary third-party site. This can be abuse=
d for phishing attacks, where users receive a trusted domain link but are r= edirected to a phishing website.=C2=A0This issue affects TeamDavid through = Rollout 524. 2026-08-07 not yet calculated CVE-2026-54215 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-54215 ] Tobit Laboratories AG--TeamDavid Tobit=
Laboratories AG TeamDavid's Webbox application contains a reflected cross-= site scripting (XSS) vulnerability. By sending a specially crafted link inc= luding an arbitrary path, an XSS payload or the parameter "EntryInfo", and = the parameter "!templateName=3DentryMail", an attacker can cause the payloa=
d to execute in the victim's browser when they click the link.=C2=A0This is= sue affects TeamDavid through Rollout 524. 2026-08-07 not yet calculated CV= E-2026-54216 [ https://www.cve.org/CVERecord?id=3DCVE-2026-54216 ] Tobit La= boratories AG--TeamDavid Tobit Laboratories AG TeamDavid's Webbox applicati=
on is vulnerable to a stored XSS vulnerability. An attacker can send an ema=
il containing malicious JavaScript code. When a user accesses the email, th=
e stored cross-site scripting is triggered.=C2=A0This issue affects TeamDav=
id through Rollout 524. 2026-08-07 not yet calculated CVE-2026-54217 [ http= s://www.cve.org/CVERecord?id=3DCVE-2026-54217 ] Tobit Laboratories AG--Team= David Use of hard-coded cryptographic key vulnerability in Tobit Laboratori=
es AG TeamDavid's Webbox. For users created locally in David, passwords are=
stored in various files using only obfuscation. Any user with access to th=
e server's file system, or who can otherwise extract files from the server = (see vulnerability=C2=A0"Random File Read"), can potentially obtain affecte=
d users' passwords.=C2=A0This issue affects TeamDavid through Rollout 524. = 2026-08-07 not yet calculated CVE-2026-54218 [ https://www.cve.org/CVERecor= d?id=3DCVE-2026-54218 ] TONYC--Imager Imager versions from 0.45_02 before 1= .034 for Perl may expose adjacent heap bytes via strlen() over-read from ze= ro-count ASCII EXIF entries in copy_string_tags. copy_string_tags() compute=
s an ASCII EXIF tag's length as `entry->size - 1` to strip the trailing NUL=
. A zero-count ASCII entry sets `entry->size` to 0, and the derived length = reaches i_tags_add() as -1, which is interpreted as a request to call strle= n(), scanning past the entry to the next NUL and copying those bytes into t=
he tag. JPEG reaches this path via im_decode_exif(), as does the separate I= mager::File::WEBP distribution, which is fixed by upgrading Imager. Any cal= ler of Imager->read() on an attacker-supplied image with such an entry may = receive an exif_* tag holding adjacent heap bytes instead of an empty strin=
g. 2026-08-07 not yet calculated CVE-2026-19082 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-19082 ] tourmaster--tourmaster The tourmaster WordPress = plugin before 5.4.9 writes its order/booking export to a fixed, predictable=
file inside its publicly accessible directory with no access control, allo= wing unauthenticated users to download the exported customers' personal inf= ormation once an administrator has run an export. 2026-08-06 not yet calcul= ated CVE-2026-14240 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14240 ] T= P-Link Systems Inc.--Archer A6 v4 A denial-of-service vulnerability exists =
in httpd service on Archer A6 v4 where the asynchronous systool instruction=
handlng path in httpd does not properly synchronize or safely manage concu= rrent systool operations.=C2=A0 By sending crafted systool instructions thr= ough the asynchronous request path, successful exploitation may cause the h= ttpd process or device management service to crash and may result in tempor= ary loss of access to the web management interface or device reboot. 2026-0= 8-07 not yet calculated CVE-2026-9030 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-9030 ] TP-Link Systems Inc.--Archer A6 v4 An input validation vuln= erability exists in the HTTP-WRITEOEM handler due to insufficient validatio=
n of user-supplied data before it is processed by internal flash-write hand= ling logic. Successful exploitation may cause httpd process or device to cr= ash, resulting in loss of access to the web interface and a denial-of-servi=
ce condition. 2026-08-07 not yet calculated CVE-2026-9031 [ https://www.cve= .org/CVERecord?id=3DCVE-2026-9031 ] TP-Link Systems Inc.--Omada Gateways A = cryptographic weakness exists in the Omada device adoption process.=C2=A0 D= uring adoption, authentication credentials associated with site management = are transmitted using a weak hashing algorithm that does not provide suffic= ient protection. An attacker who successfully intercepts adoption-related a= uthentication traffic may be able to recover valid credentials and gain una= uthorized access to managed devices or controller-managed environments. 202= 6-08-03 not yet calculated CVE-2025-15544 [ https://www.cve.org/CVERecord?i= d=3DCVE-2025-15544 ] TP-Link Systems Inc.--Omada Gateways A cryptographic w= eakness exists in the Omada adoption protocol.=C2=A0 The protocol relies on=
hard-coded cryptographic keys to establish trust and protect authenticatio=
n exchanges between controllers and managed devices during device adoption.=
An attacker may be able to impersonate trusted controllers or managed devi= ces and gain access to sensitive adoption-related communications. 2026-08-0=
3 not yet calculated CVE-2025-15627 [ https://www.cve.org/CVERecord?id=3DCV= E-2025-15627 ] TP-Link Systems Inc.--Omada Gateways Affected Omada devices = rely on embedded certificates that are shared across deployments to establi=
sh trust between controllers and managed devices. An attacker who obtains t=
he embedded certificates may be able to impersonate trusted controllers or = devices and intercept affected communications. 2026-08-03 not yet calculate=
d CVE-2025-15628 [ https://www.cve.org/CVERecord?id=3DCVE-2025-15628 ] TP-L= ink Systems Inc.--Omada Gateways A cryptographic weakness exists in the Oma=
da adoption protocol where session encryption keys used to protect communic= ations between controllers and managed devices may be predictable due to in= sufficient entropy in session key generation. An attacker who successfully = intercepts adoption-related communications may be able to recover session e= ncryption keys and decrypt affected communications. 2026-08-03 not yet calc= ulated CVE-2025-15629 [ https://www.cve.org/CVERecord?id=3DCVE-2025-15629 ]=
TP-Link Systems Inc.--Omada Gateways A race condition exists in the cloud-= based Omada device adoption process when an attacker may be able to interac=
t with the adoption workflow before a legitimate device completes registrat= ion, resulting in provisioning information being delivered to an attacker. = Successful exploitation may allow disclosure of provisioning information in= tended for a legitimate device. 2026-08-03 not yet calculated CVE-2025-1563=
0 [ https://www.cve.org/CVERecord?id=3DCVE-2025-15630 ] TP-Link Systems Inc= .--Omada Gateways A cryptographic weakness exists in affected Omada devices=
where site credentials are protected using a legacy hashing algorithm that=
does not provide sufficient protection. An attacker who obtains access to = stored credential data may be able to recover valid credentials to gain una= uthorized access to affected devices or management environments. 2026-08-03=
not yet calculated CVE-2025-15631 [ https://www.cve.org/CVERecord?id=3DCVE= -2025-15631 ] TP-Link Systems Inc.--Omada Gateways A certification validati=
on weakness exists in communication between affected Omada devices and clou=
d controllers. Certificate identity verification does not adequately valida=
te that a presented certificate corresponds to the expected cloud controlle=
r hostname, which may allow certificate validation protections to be bypass=
ed under specific conditions. Successful exploitation may allow interceptio=
n or modification of communication between affected devices and cloud contr= ollers. 2026-08-03 not yet calculated CVE-2025-9291 [ https://www.cve.org/C= VERecord?id=3DCVE-2025-9291 ] TP-Link Systems Inc.--P110 v1 Tapo P110 v1 sm= art Wi-Fi Plug contains an improper boundary validation vulnerability in th=
e handling of authenticated HTTP request bodies due to insufficient input v= alidation before memory copy operations. This may lead to buffer overflow c= ondition, causing the web service process to crash. Successful exploitation=
may cause the web service process to stop responding or restart, resulting=
in a denial-of-service condition. 2026-08-04 not yet calculated CVE-2026-1= 5314 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15314 ] traefik--traefik=
Traefik is an open source HTTP reverse proxy and load balancer. Prior to 2= .11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards a = plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstream=
through a shared net/http.Transport. When the upstream answers the CONNECT=
with a keep-alive non-2xx response and does not drain the body, Traefik re= turns the desynchronized backend socket to its shared pool and reuses it fo=
r other clients. An unauthenticated attacker can use this behavior to make =
a different client read the attacker's smuggled response, which can include=
authenticated or private content from another request. The ForwardAuth mid= dleware with forwardBody true and preserveRequestMethod true can re-issue a=
CONNECT with the buffered body attached, exposing the auth-client pool to = the same desynchronization. This issue is fixed in 2.11.53, 3.6.24, and 3.7= .9. 2026-08-06 not yet calculated CVE-2026-71324 [ https://www.cve.org/CVER= ecord?id=3DCVE-2026-71324 ] traefik--traefik Traefik is an open-source edge=
router that makes publishing services a fun and easy experience. Prior to = 2.11.54, 3.6.25, and 3.7.10, cross-namespace @kubernetescrd references are = not rejected for TraefikService backend references resolved by the service = resolver. A tenant confined by RBAC to a single namespace can therefore bin=
d its own router to a TraefikService owned by another namespace and expose =
or reroute that namespace's backend, defeating the namespace isolation allo= wCrossNamespace=3Dfalse is meant to enforce. This issue is fixed in version=
2.11.54, 3.6.25, 3.7.10. 2026-08-06 not yet calculated CVE-2026-71325 [ ht= tps://www.cve.org/CVERecord?id=3DCVE-2026-71325 ] traefik--traefik Traefik =
is an open source HTTP reverse proxy and load balancer. From 3.6.11 until 3= .6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlewares/auth/ba= sic_auth.go deduplicates concurrent password checks with a singleflight key=
built from the delimiter-free concatenation of password and secret, allowi=
ng an attacker who has a valid credential and the stored hash to authentica=
te as an unconfigured username when headerField trusts the forwarded identi= ty. This issue is fixed in 3.6.25 and 3.7.10. 2026-08-06 not yet calculated=
CVE-2026-71326 [ https://www.cve.org/CVERecord?id=3DCVE-2026-71326 ] traef= ik--traefik Traefik is an open source HTTP reverse proxy and load balancer.=
From 3.0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provi= der in pkg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute= .go, and tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute ro= uter and service identities by hyphen-concatenating namespace, route name, = Gateway identity, entry point, and rule index, allowing colliding Routes to=
overwrite another namespace's backend. This issue is fixed in 3.6.25 and 3= .7.10. 2026-08-06 not yet calculated CVE-2026-71327 [ https://www.cve.org/C= VERecord?id=3DCVE-2026-71327 ] Tranquil IT Systems--WAPT Server A vulnerabi= lity in Wapt Server before version 2.6.1.17813 allows a=C2=A0 remote unauth= enticated attacker to bypass security restriction using a specially crafted=
packet and retrieve a valid session token for the targeted account. 2026-0= 8-03 not yet calculated CVE-2026-33591 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-33591 ] User Registration & Membership--User Registration & Mem= bership The User Registration & Membership WordPress plugin before 5.2.6 do=
es not enforce the site's registration-disabled setting when processing reg= istration-form submissions, allowing unauthenticated users to create new ac= counts even when the administrator has turned off open registration. 2026-0= 8-05 not yet calculated CVE-2026-16736 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-16736 ] Veeam--ONE A vulnerability allowing a high-privileged u= ser to execute arbitrary code on the server. 2026-08-04 not yet calculated = CVE-2026-58074 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58074 ] Veeam-= -ONE A vulnerability allowing an unauthenticated attacker to read arbitrary=
files from the host, which can be further leveraged toescalate privileges = locally. 2026-08-04 not yet calculated CVE-2026-58075 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-58075 ] Veeam--ONE A vulnerability allowing a low-= privileged user to retrieve report data outside the scope of a shared repor=
t link. 2026-08-04 not yet calculated CVE-2026-64630 [ https://www.cve.org/= CVERecord?id=3DCVE-2026-64630 ] Veeam--ONE A vulnerability allowing a low-p= rivileged user to inject SQL and extract database contents. 2026-08-04 not = yet calculated CVE-2026-64631 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -64631 ] Veeam--ONE A vulnerability allowing remote unauthenticated code ex= ecution on the agent host. 2026-08-04 not yet calculated CVE-2026-64633 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-64633 ] Veeam--ONE A vulnerabili=
ty allowing local privilege escalation to the Reporter service context. 202= 6-08-04 not yet calculated CVE-2026-64634 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-64634 ] Veeam--Service Provider Console A vulnerability in Vee=
am Service Provider Console allowing an unauthenticated attacker to exhaust=
host memory and cause adenial of service. 2026-08-04 not yet calculated CV= E-2026-58067 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58067 ] Veeam--S= ervice Provider Console A vulnerability in Veeam Service Provider Console a= llowing an unauthenticated attacker to access the proxied appliance API asP= ortal Administrator during a short window after an administrator session be= gins. 2026-08-04 not yet calculated CVE-2026-58071 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-58071 ] Veeam--Service Provider Console A vulnerabili=
ty in Veeam Service Provider Console allowing arbitrary file write on the m= anagement server, which can lead to remotecode execution. 2026-08-04 not ye=
t calculated CVE-2026-58072 [ https://www.cve.org/CVERecord?id=3DCVE-2026-5= 8072 ] Veeam--Service Provider Console A vulnerability in Veeam Service Pro= vider Console allowing an unauthenticated attacker to impersonate a managed=
agent andobtain that agent's credentials. 2026-08-04 not yet calculated CV= E-2026-58073 [ https://www.cve.org/CVERecord?id=3DCVE-2026-58073 ] Vestel--= Telefunken TE24553B45V2DZ Smart TV An improper restriction of URL schemes a=
nd destinations in the SmartCenter browserseturl command in the Telefunken = TE24553B45V2DZ Smart TV running on the Vestel MB181 / Voltron181 / TiVo OS = platform allows an attacker with access to the same local network to cause = the embedded browser to issue requests to unintended loopback/internal dest= inations, including 127.0.0.1 addresses. In demonstrated scenarios, request=
s initiated through the SmartCenter browserseturl mechanism could reach an = internal service and receive a successful response, although the same desti= nation was not reachable through normal browser navigation. The issue affec=
ts firmware version V2.78.0.0 and is fixed in firmware version V2.85.2.0. 2= 026-08-07 not yet calculated CVE-2026-15570 [ https://www.cve.org/CVERecord= ?id=3DCVE-2026-15570 ] Vim--Vim Project v9.2.0389 An issue in Vim Project v= 9.2.0389 and earlier allows a local attacker to execute arbitrary code via = the vms_fixfilename() function within file vim/src/os_vms.c 2026-08-04 not = yet calculated CVE-2026-51400 [ https://www.cve.org/CVERecord?id=3DCVE-2026= -51400 ] Vim--Vim Project v9.2.0389 An issue in Vim Project v9.2.0389 and e= arlier allows a local attacker to execute arbitrary code via the vms_fixfil= ename() function within file vim/src/os_vms.c 2026-08-04 not yet calculated=
CVE-2026-51401 [ https://www.cve.org/CVERecord?id=3DCVE-2026-51401 ] Visua= lizer--Visualizer The Visualizer WordPress plugin before 4.0.6 does not res= trict a user-supplied URL to safe address ranges before fetching it server-= side, allowing users with Contributor-level access and above to perform Ser= ver-Side Request Forgery against link-local instance-metadata endpoints. As=
the fetched response is returned in the reply, the attack is non-blind, en= abling retrieval of cloud instance metadata (including IAM credentials) on = cloud-hosted sites. 2026-08-04 not yet calculated CVE-2026-14939 [ https://= www.cve.org/CVERecord?id=3DCVE-2026-14939 ] VuFind--VuFind v11.0.3 Open Lib= rary Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect Access = Control. The application fails to stop processing an incoming request in Vu= Find\Controller\AbstractBase::validateAccessPermission after it has found t= hat controller level access permissions do not allow access to the requeste=
d function. The requester receives a response indicating that access was de= nied, but the actual function is executed regardless of that. 2026-08-05 no=
t yet calculated CVE-2026-52466 [ https://www.cve.org/CVERecord?id=3DCVE-20= 26-52466 ] Webinfos--Webinfos The Webinfos WordPress plugin through 1.2 doe=
s not validate the type or name of uploaded files, nor restrict the upload = action with any authentication, capability, or nonce check, allowing unauth= enticated attackers to upload arbitrary files (including PHP) to a web-acce= ssible directory, leading to remote code execution on servers that execute = PHP from the uploads path. 2026-08-03 not yet calculated CVE-2026-12872 [ h= ttps://www.cve.org/CVERecord?id=3DCVE-2026-12872 ] WebPros--Plesk Improper = privilege management in the XML-RPC API of Plesk before 18.0.80, allows an = authenticated reseller to obtain an administrative session for the root use=
r account. 2026-08-07 not yet calculated CVE-2026-64637 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-64637 ] Welcart e-Commerce--Welcart e-Commerce T=
he Welcart e-Commerce WordPress plugin before 2.11.32 does not properly san= itise a value taken from an imported CSV file before using it in a SQL stat= ement, allowing users with the Editor role and above (including its custom = shop-management roles) to perform SQL injection attacks. 2026-08-06 not yet=
calculated CVE-2026-16065 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16= 065 ] Wellbia--XIGNCODE3 Improper access control in the IRP_MJ_WRITE comman=
d interface in Wellbia XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows=
a local, unprivileged attacker to achieve local privilege escalation to NT=
AUTHORITY\SYSTEM, extract credentials from PPL-protected lsass.exe, and te= rminate PPL-protected security processes. 2026-08-03 not yet calculated CVE= -2026-15430 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15430 ] WGDashboa= rd--WGDashboard A Server-Side Request Forgery (SSFR) vulnerability exist in=
WGDashboard version 4.2.3 and earlier. The webhook functionality allows au= thenticated attackers to make arbitrary HTTP requests and retrieve response=
s. 2026-08-06 not yet calculated CVE-2026-15732 [ https://www.cve.org/CVERe= cord?id=3DCVE-2026-15732 ] WGDashboard--WGDashboard A Remote Code Execution=
(RCE) vulnerability exist in WGDashboard version 4.2.3 and earlier. Multip=
le OS command injection allows authenticated attackers to execute arbitrary=
commands as root. 2026-08-06 not yet calculated CVE-2026-15733 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-15733 ] WGDashboard--WGDashboard A Serve= r-Side Template Injection (SSTI) vulnerability in WGDashboard version 4.3.2=
and earlier, allows authenticated attackers to execute arbitrary code as r= oot. 2026-08-06 not yet calculated CVE-2026-15734 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-15734 ] WhiskeySockets--Baileys Baileys is a cocket-ba= sed TS/JavaScript API for WhatsApp Web. In versions prior to both 6.7.22 an=
d 7.0.0-rc12, any Baileys session can be sent a malicious payload via the p= laceholderResendMessage and trigger a fake messages.upsert event with a fak=
e message key and payload. This allows anyone to spoof messages. The same e= xploit also allows an attacker to corrupt the app state sync system by send= ing fake key shares, and also allows for history sync spoofing which also s= erves the same problem, injecting fake previous context or "on-demand" sync=
. This issue has been fixed in versions 6.7.22 and 7.0.0-rc12. 2026-08-03 n=
ot yet calculated CVE-2026-48063 [ https://www.cve.org/CVERecord?id=3DCVE-2= 026-48063 ] Wired Impact Volunteer Management--Wired Impact Volunteer Manag= ement The Wired Impact Volunteer Management WordPress plugin before 2.8.2 d= oes not have authorisation checks in one of its AJAX actions, and does not = verify that the RSVP being removed belongs to the requesting user, allowing=
users with a role as low as Subscriber to remove arbitrary users' RSVPs fr=
om any volunteer opportunity. 2026-08-04 not yet calculated CVE-2026-16546 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-16546 ] WordPress--WordPress = WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the lo= gin screen. Via a specially crafted malicious third-party website hosted by=
an attacker, it is possible for this to be escalated to an RCE vulnerabili=
ty with conditions outside of the attackers control. This requires successf=
ul social engineering of and explicit interaction by the target victim. Thi=
s issue affects all versions of WordPress. Version 7.0.3 has been released,=
containing a fix for the vulnerability, and as a courtesy to users on olde=
r branches the fix has been backported to all branches back to 4.7. Discove= red and responsibly disclosed by [the team at pwn.ai](https://pwn.ai/). 202= 6-08-07 not yet calculated CVE-2026-64638 [ https://www.cve.org/CVERecord?i= d=3DCVE-2026-64638 ] WP 2FA--WP 2FA The WP 2FA WordPress plugin before 4.1.=
0 does not validate the second authentication factor when one of its suppor= ted methods is selected at login, allowing an attacker who already knows a = user's password to bypass two-factor authentication and fully access the ac= count, including administrator accounts. 2026-08-05 not yet calculated CVE-= 2026-15372 [ https://www.cve.org/CVERecord?id=3DCVE-2026-15372 ] WP Custom = HTML Page--WP Custom HTML Page The WP Custom HTML Page WordPress plugin thr= ough 0.6.2 does not sanitise HTML stored through one of its custom page han= dlers, nor restrict it to users allowed to post unfiltered HTML, allowing u= sers with the Author role to store JavaScript that is served unescaped at a=
public URL and executes for any visitor, including administrators. 2026-08= -05 not yet calculated CVE-2026-16942 [ https://www.cve.org/CVERecord?id=3D= CVE-2026-16942 ] WP Data Access--WP Data Access The WP Data Access WordPres=
s plugin before 5.5.79 does not validate the column names it accepts on one=
of its unauthenticated AJAX actions, and the nonce guarding that action do=
es not cover them, allowing unauthenticated attackers to read arbitrary col= umns of the database table the affected front-end form is bound to, includi=
ng user password hashes where that table is the users table. 2026-08-09 not=
yet calculated CVE-2026-18032 [ https://www.cve.org/CVERecord?id=3DCVE-202= 6-18032 ] WP Directory Kit--WP Directory Kit The WP Directory Kit WordPress=
plugin before 1.5.5 does not sanitize and escape a parameter before using =
it in a SQL statement through one of its authenticated AJAX actions, which = lacks authorization and nonce checks, allowing any authenticated user such =
as a Subscriber to perform SQL injection attacks. 2026-08-08 not yet calcul= ated CVE-2026-16589 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16589 ] W=
P Directory Kit--WP Directory Kit The WP Directory Kit WordPress plugin bef= ore 1.5.5 does not perform authorization or nonce checks on one of its auth= enticated AJAX actions, allowing any authenticated user such as a Subscribe=
r to retrieve stored contact messages and associated user data belonging to=
other users. 2026-08-08 not yet calculated CVE-2026-16590 [ https://www.cv= e.org/CVERecord?id=3DCVE-2026-16590 ] WP Directory Kit--WP Directory Kit Th=
e WP Directory Kit WordPress plugin before 1.5.5 does not perform authoriza= tion or nonce checks on one of its authenticated AJAX actions, allowing any=
authenticated user such as a Subscriber to disclose the WP Directory Kit W= ordPress plugin before 1.5.5 settings including sensitive API keys and secr= ets. 2026-08-08 not yet calculated CVE-2026-16594 [ https://www.cve.org/CVE= Record?id=3DCVE-2026-16594 ] WP Directory Kit--WP Directory Kit The WP Dire= ctory Kit WordPress plugin before 1.5.5 does not perform authorization or n= once checks on one of its authenticated AJAX actions, allowing any authenti= cated user such as a Subscriber to disclose the site's user list and unpubl= ished listings belonging to other users. 2026-08-08 not yet calculated CVE-= 2026-16595 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16595 ] WP Directo=
ry Kit--WP Directory Kit The WP Directory Kit WordPress plugin before 1.5.5=
does not properly sanitise and escape a parameter before using it in a SQL=
statement, leading to a SQL injection exploitable by unauthenticated users=
. 2026-08-09 not yet calculated CVE-2026-18473 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-18473 ] WP Events Manager--WP Events Manager The WP Event=
s Manager WordPress plugin before 2.2.5 does not validate the requested qua= ntity when registering for a paid event and computes the price from the att= acker-controlled quantity, allowing any authenticated user to create a comp= leted booking for a paid event without making a payment. 2026-08-07 not yet=
calculated CVE-2026-14205 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14= 205 ] WP MAPS PRO--WP MAPS PRO The WP MAPS PRO WordPress plugin before 6.1.=
3 does not perform a capability check in one of its AJAX actions, which is = also available to unauthenticated users, and does not restrict the operatio=
n it dispatches, allowing unauthenticated attackers to trigger uncontrolled=
recursion that exhausts server resources, resulting in a Denial of Service=
. 2026-08-09 not yet calculated CVE-2026-18464 [ https://www.cve.org/CVERec= ord?id=3DCVE-2026-18464 ] WP MAPS PRO--WP MAPS PRO The WP MAPS PRO WordPres=
s plugin before 6.1.3 does not perform a capability check in one of its AJA=
X actions, which is also available to unauthenticated users, and does not p= roperly validate a user-controlled path before using it in a file inclusion=
, allowing unauthenticated attackers to include and execute arbitrary exist= ing local PHP files on the server. 2026-08-09 not yet calculated CVE-2026-1= 8465 [ https://www.cve.org/CVERecord?id=3DCVE-2026-18465 ] WP Maps--WP Maps=
The WP Maps WordPress plugin before 4.9.7 does not perform a capability ch= eck in one of its AJAX actions and does not properly validate a user-contro= lled path before using it in a file inclusion, allowing users with a Subscr= iber account to include and execute arbitrary existing local PHP files on t=
he server. 2026-08-07 not yet calculated CVE-2026-16263 [ https://www.cve.o= rg/CVERecord?id=3DCVE-2026-16263 ] WP Maps--WP Maps The WP Maps WordPress p= lugin before 4.9.7 does not perform a capability check in one of its AJAX a= ctions and does not restrict the operation it dispatches, allowing users wi=
th a Subscriber account to trigger uncontrolled recursion that exhausts ser= ver resources, resulting in a Denial of Service. 2026-08-07 not yet calcula= ted CVE-2026-16265 [ https://www.cve.org/CVERecord?id=3DCVE-2026-16265 ] WP=
Photo Album Plus--WP Photo Album Plus The WP Photo Album Plus WordPress pl= ugin before 9.2.07.002 does not perform any capability or nonce check on on=
e of its public REST endpoint actions, allowing unauthenticated users to de= lete the generated album export ZIP archives it stores. 2026-08-09 not yet = calculated CVE-2026-17014 [ https://www.cve.org/CVERecord?id=3DCVE-2026-170=
14 ] WP Statistics--WP Statistics The WP Statistics WordPress plugin before=
14.16.10 does not perform a capability check on a set of dashboard analyti=
cs AJAX handlers, relying only on a nonce that every authenticated user hol= ds, allowing users with Subscriber-level access and above to disclose the s= ite's visitor analytics data. 2026-08-08 not yet calculated CVE-2026-16562 =
[ https://www.cve.org/CVERecord?id=3DCVE-2026-16562 ] WPC Order Tip for Woo= Commerce--WPC Order Tip for WooCommerce The WPC Order Tip for WooCommerce W= ordPress plugin before 3.3.1 does not perform authorisation or nonce checks=
in one of its reporting features, allowing unauthenticated attackers to re= trieve sensitive order data belonging to any customer of the store, such as=
billing names, order IDs and statuses, fee amounts and order dates. 2026-0= 8-09 not yet calculated CVE-2026-18357 [ https://www.cve.org/CVERecord?id= =3DCVE-2026-18357 ] WPCargo Track & Trace--WPCargo Track & Trace The WPCarg=
o Track & Trace WordPress plugin before 8.0.4 does not properly sanitise an=
d escape a parameter before using it in a SQL statement, allowing unauthent= icated users to perform SQL injection attacks. This affects a code path dis= tinct from the one addressed by CVE-2024-44004. 2026-08-06 not yet calculat=
ed CVE-2026-12713 [ https://www.cve.org/CVERecord?id=3DCVE-2026-12713 ] wpF= oro Forum--wpForo Forum The wpForo Forum WordPress plugin before 3.1.3 does=
not restrict which profile fields a member may set when editing their own = account, allowing users with a subscriber-level account to write administra= tor-controlled account-state and reputation fields on their own profile, in= cluding self-activating a pending or banned account and forging their forum=
reputation score. 2026-08-04 not yet calculated CVE-2026-12698 [ https://w= ww.cve.org/CVERecord?id=3DCVE-2026-12698 ] xwiki--xwiki-platform XWiki Plat= form WebJars API is a package for XWiki, a generic wiki platform. Starting = with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9, and 17.10.3, =
a potential path traversal vulnerability allow an attacker who manages to g=
et a malicious WebJar extension installed on the wiki to write arbitrary fi= les. While the consequences could be severe like overriding configuration f= iles and setting the superadmin password, the attack first requires that th=
e attacker already has admin access to at least a subwiki to be able to ins= tall a malicious extension. Further, the attacker needs to publish a malici= ous extension in an extension repository that is configured in the instance=
. This vulnerability has been patched in XWiki 16.10.17, 17.4.9, 17.10.3, a=
nd 18.0.0RC1. XWiki is not aware of any workarounds except for being carefu=
l whom developers grant script and admin rights to. 2026-08-07 not yet calc= ulated CVE-2026-48047 [ https://www.cve.org/CVERecord?id=3DCVE-2026-48047 ]=
YayPricing--YayPricing The YayPricing WordPress plugin before 3.5.7 does n=
ot perform capability checks on several of its REST API routes, relying onl=
y on a shared nonce, allowing any authenticated user such as a subscriber t=
o overwrite the store's pricing configuration and to disclose private coupo=
n codes. 2026-08-05 not yet calculated CVE-2026-15230 [ https://www.cve.org= /CVERecord?id=3DCVE-2026-15230 ] YMC Filter--YMC Filter The YMC Filter Word= Press plugin before 3.12.8 does not sanitize and escape a layout builder se= tting before outputting it on a public endpoint, and does not verify object=
ownership when the setting is saved, allowing users with the Contributor r= ole and above to store JavaScript that executes in the browser of any visit=
or viewing an affected filter. 2026-08-08 not yet calculated CVE-2026-16558=
[ https://www.cve.org/CVERecord?id=3DCVE-2026-16558 ] YMC Filter--YMC Filt=
er The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG file=
s uploaded through one of its icon upload features and permits their upload=
by low-privileged users, allowing users with the Author role and above to = upload a file containing JavaScript that executes in the site's origin when=
the file is viewed. 2026-08-08 not yet calculated CVE-2026-16559 [ https:/= /www.cve.org/CVERecord?id=3DCVE-2026-16559 ] Z-Blog--Z-BlogPHP 1.7.5 A SQL = injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated attackers t=
o execute arbitrary SQL commands via the id parameter in the CommentBat fea= ture. 2026-08-03 not yet calculated CVE-2026-52521 [ https://www.cve.org/CV= ERecord?id=3DCVE-2026-52521 ] Zammad--Zammad Zammad 7.1.0 contains an authe= nticated improper authorization vulnerability in the ticket article attachm= ent cloning endpoint. 2026-08-04 not yet calculated CVE-2026-13229 [ https:= //www.cve.org/CVERecord?id=3DCVE-2026-13229 ] Zosi--Zosi C513M Zosi C519M V= 4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The applicatio=
n contains hardcoded credentials in the RTSP authentication mechanism. An a= ttacker with network access can use the unchangeable default credentials to=
access the RTSP video stream, resulting in unauthorized viewing of camera = footage. 2026-08-05 not yet calculated CVE-2025-70962 [ https://www.cve.org= /CVERecord?id=3DCVE-2025-70962 ] zportals--zportals The zportals WordPress = plugin before 6.3.4 does not properly validate uploaded files, trusting the=
client-supplied content type and preserving the original file extension, a= llowing any authenticated user (Subscriber or higher) to upload arbitrary P=
HP files and achieve remote code execution. 2026-08-05 not yet calculated C= VE-2026-14553 [ https://www.cve.org/CVERecord?id=3DCVE-2026-14553 ]=20

Back to top [ #top ]

body { font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight=
: normal; font-style: normal; color: #333333; }=20

Having trouble viewing this message?=C2=A0View it as a webpage [ https://co= ntent.govdelivery.com/accounts/USDHSCISA/bulletins/4244c2b ].=C2=A0 [ https= ://content.govdelivery.com/accounts/USDHS/bulletins/292141e ]

You are subscribed to updates from the Cybersecurity and Infrastructure Sec= urity Agency [ https://www.cisa.gov ] (CISA)
Manage Subscriptions [ https://public.govdelivery.com/accounts/USDHSCISA/su= bscriber/edit?preferences=3Dtrue#tab1 ]=C2=A0=C2=A0|=C2=A0=C2=A0Privacy Pol= icy [ https://www.cisa.gov/privacy-policy ]=C2=A0=C2=A0|=C2=A0 Help [ https= ://subscriberhelp.granicus.com/s/article/Subscriber-Help-Center ] [ https:/= /insights.govdelivery.com/Communications/Subscriber_Help_Center ]

Connect with CISA:=20
Facebook [ https://www.facebook.com/CISA ]=C2=A0 |=C2=A0 Twitter [ https://= twitter.com/CISAgov ]=C2=A0 |=C2=A0 Instagram [ https://Instagram.com/cisag=
ov ]=C2=A0 |=C2=A0 LinkedIn [ https://www.linkedin.com/company/cybersecurit= y-and-infrastructure-security-agency ]=C2=A0 |=C2=A0=C2=A0 YouTube [ https:= //www.youtube.com/channel/UCxyq9roe-npgzrVwbpoAy0A ]

________________________________________________________________________

This email was sent to cisa@toolazy.synchro.net using Granicus Communicatio=
ns Cloud, on behalf of: Cybersecurity and Infrastructure Security Agency = =C2=B7 707 17th St, Suite 4000 =C2=B7 Denver, CO 80202 GovDelivery logo [ h= ttps://granicus.com/solution/digital-communication-engagement/ ]=20
body .abe-column-block { min-height: 5px; } table.gd_combo_table img {margi= n-left:10px; margin-right:10px;} table.gd_combo_table div.govd_image_displa=
y img, table.gd_combo_table td.gd_combo_image_cell img {margin-left:0px; ma= rgin-right:0px;}

--===============0973038407628992069==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns=3D"http://www.w3.org/1999/xhtml" xml:lang=3D"en" lang=3D"en"> <head>
<title> Vulnerability Summary for the Week of August 3, 2026
</title>

</head>
<body style=3D"">

<table width=3D"700" border=3D"0" cellspacing=3D"0" cellpadding=3D"0"=
align=3D"center">
<tr>
<td>


<a name=3D"gd_top" id=3D"gd_top"></a>

=20

<p><img src=3D"https://content.govdelivery.com/attachments/fancy_images/U= SDHSCISA/2020/06/3486054/05152023-gov-delivery-banner-copy_original.png" al= t=3D"Cybersecurity and Infrastructure Security Agency (CISA)" title=3D"" wi= dth=3D"600" height=3D"100"></p>
<p>You are subscribed to Vulnerability Bulletins for Cybersecurity and In= frastructure Security Agency. This information has recently been updated an=
d is now available.</p>
<p>The CISA Vulnerability Bulletin provides a summary of new vulnerabilitie=
s that have been recorded in the past week. In some cases, the vulnerabilit= ies in the bulletin may not yet have assigned CVSS scores.</p> <p>Vulnerabilities are based on the=C2=A0<a href=3D"https://www.cve.org/" t= arget=3D"_blank" class=3D"ext" data-extlink=3D"" rel=3D"noopener">Common Vu= lnerabilities and Exposures</a>=C2=A0(CVE) vulnerability naming standard an=
d are organized according to severity, determined by the=C2=A0<a href=3D"ht= tps://www.cve.org/about/relatedefforts" target=3D"_blank" rel=3D"noopener">= Common Vulnerability Scoring System</a>=C2=A0(CVSS) standard. The division =
of high, medium, and low severities correspond to the following scores:</p>

<strong>High</strong>: vulnerabilities with a CVSS base score of 7.0=E2=80= =9310.0</li>

<strong>Medium</strong>: vulnerabilities with a CVSS base score of 4.0=E2= =80=936.9</li>

<strong>Low</strong>: vulnerabilities with a CVSS base score of 0.0=E2=80= =933.9</li>
</ul>
<p>Entries may include additional information provided by organizations and=
efforts sponsored by CISA. This information may include identifying inform= ation, values, definitions, and related links. Patch information is provide=
d when available. Please note that some of the information in the bulletin =
is compiled from external, open-source reports and is not a direct result o=
f CISA analysis.</p>
<div class=3D"rss_item" style=3D"margin-bottom: 2em;">
<div class=3D"rss_title" style=3D"font-weight: bold; font-size: 120%; margi=
n: 0 0 0.3em; padding: 0;"><a href=3D"https://www.cisa.gov/news-events/bull= etins/sb26-222" target=3D"_blank" title=3D"Vulnerability Summary for the We=
ek of August 3, 2026" rel=3D"noopener">Vulnerability Summary for the Week o=
f August 3, 2026</a></div>
<div class=3D"rss_pub_date" style=3D"font-size: 90%; font-style: italic; co= lor: #666666; margin: 0 0 0.3em; padding: 0;">08/10/2026 1:00PM EDT</div>

<div class=3D"rss_description" style=3D"margin: 0 0 0.3em; padding: 0;">

<div id=3D"high_v">
<h2 id=3D"high_v_title">High Vulnerabilities</h2>
<table class=3D"table no-tablesaw" style=3D"table-layout: fixed; width: 100= %;" border=3D"1" summary=3D"High Vulnerabilities">
<thead>

<th class=3D"vendor-product" style=3D"width: 24%;" scope=3D"col">
<span class=3D"primary-vendor">Primary</span><br><span class=3D"primary-ven= dor">Vendor</span> -- Product</th>
<th style=3D"width: 44%;" scope=3D"col">Description</th>
<th style=3D"width: 10%;" scope=3D"col">Published</th>
<th style=3D"width: 8%;" scope=3D"col">CVSS Score</th>
<th style=3D"width: 7%;" scope=3D"col">Source Info</th>
</tr>
</thead>
<tbody>

<td class=3D"vendor-product">@fastify/aws-lambda--@fastify/aws-lambda</td> <td>@fastify/aws-lambda version 6.4.0 decorates each Fastify request with r= equest.awsLambda.event and request.awsLambda.context, values that applicati= ons are documented to use for authorization decisions such as reading API G= ateway authorizer claims. In the default configuration, the getter that pop= ulates this decoration reads the client-controlled x-apigateway-event and x= -apigateway-context HTTP headers before falling back to the trusted interna=
l request token, and those reserved headers are not stripped from the incom= ing event. An unauthenticated attacker who can set a single HTTP header can=
therefore forge the entire Lambda proxy event, including the authorizer co= ntext, and override the genuine one. This results in a full authentication = and authorization bypass and privilege escalation for any application that = trusts request.awsLambda.event for identity or access control. Only version=
6.4.0 is affected. Patches: upgrade to @fastify/aws-lambda 6.4.1, which re= solves the decoration only through the internal per-invocation token and st= rips the reserved headers before the request is processed.</td> <td>2026-08-03</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18248" target=3D= "_blank" rel=3D"noopener">CVE-2026-18248</a></td>
</tr>

<td class=3D"vendor-product">@fastify/static--@fastify/static</td> <td>@fastify/static before version 10.1.3 contains an incomplete fix for a = previous route guard bypass. The static file handler rejected only parent d= irectory segments, but it did not canonicalize dot segments, duplicate slas= hes, encoded dots, or backslashes before route matching and before delegati=
ng to the send layer. As a result, an unauthenticated attacker could reques=
t a file protected by a route based guard using a non canonical path form t= hat misses the guarded route yet resolves back onto the protected file, dis= closing its contents. Applications that protect a subtree of the static roo=
t with a route based guard are affected, while applications relying on the = allowedPath option are not. This is fixed in @fastify/static 10.1.3, which = canonicalizes the pathname, including rejecting backslashes, on the path us=
ed for routing and serving.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18427" target=3D= "_blank" rel=3D"noopener">CVE-2026-18427</a></td>
</tr>

<td class=3D"vendor-product">@msykes--Events Manager</td>
<td>Unauthenticated Cross Site Scripting (XSS) in Events Manager <=3D 7.= 4.1 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66457" target=3D= "_blank" rel=3D"noopener">CVE-2026-66457</a></td>
</tr>

<td class=3D"vendor-product">absmach--magistrala</td>
<td>Magistrala's Rules Engine allows authenticated users to create rules wi=
th embedded Go or Lua scripts executed server-side when IoT messages arrive=
. The Go script engine (re/golang.go) runs scripts through the Yaegi interp= reter with stdlib.Symbols, exposing the full Go standard library (including=
os and net/http) with validation limited to a regex blocking goroutines an=
d panic() calls; dangerous functions such as os.ReadFile, os.WriteFile, os.= Remove, and os.Environ remain fully accessible. The Lua script engine (re/l= ua.go) performs no input validation at all and preloads dangerous libraries=
: db (arbitrary database access), ioutil (file I/O), an HTTP client (SSRF),=
and filepath (traversal). An authenticated low-privileged user can achieve=
arbitrary file read/write, environment variable leakage, database access, = and SSRF against internal microservices.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71235" target=3D= "_blank" rel=3D"noopener">CVE-2026-71235</a></td>
</tr>

<td class=3D"vendor-product">absmach--magistrala</td>
<td>Magistrala (formerly Mainflux)'s message-readers API reads a `format` v= alue from the HTTP query string (readers/api/http/transport.go) with no val= idation and interpolates it directly into raw SQL queries via fmt.Sprintf()=
in both the PostgreSQL reader (readers/postgres/messages.go: `fmt.Sprintf(= "SELECT * FROM %s WHERE %s ...", format, cond)`) and the TimescaleDB reader=
(readers/timescale/messages.go, same pattern), enabling SQL injection by a=
ny authenticated user able to query channel messages.</td>

<td>2026-08-05</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71276" target=3D= "_blank" rel=3D"noopener">CVE-2026-71276</a></td>
</tr>

<td class=3D"vendor-product">Acrisure--KARR BT</td>
<td>The KARR Security System and SWDS dealer-installed automotive anti-thef=
t systems use a shared Bluetooth authentication key across affected devices=
. An attacker within Bluetooth range can leverage this weakness to issue un= authorized commands to the vehicle, potentially allowing unauthorized acces=
s to vehicle functions, including door unlocking and engine immobilization.= </td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18411" target=3D= "_blank" rel=3D"noopener">CVE-2026-18411</a></td>
</tr>

<td class=3D"vendor-product">adafap--api-mcp</td>
<td>A security vulnerability has been detected in adafap api-mcp up to 92b9= a5d04acfec165c7d4ef852496593aa87be06. This affects the function customAxios=
of the file app/api/proxy/route.ts of the component Proxy API Endpoint. Th=
e manipulation of the argument url leads to server-side request forgery. Th=
e attack is possible to be carried out remotely. This product adopts a roll= ing release strategy to maintain continuous delivery. Therefore, version de= tails for affected or updated releases cannot be specified. The project was=
informed of the problem early through an issue report but has not responde=
d yet.</td>
<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19374" target=3D= "_blank" rel=3D"noopener">CVE-2026-19374</a></td>
</tr>

<td class=3D"vendor-product">adaltas--backmeup</td>
<td>The backmeup npm package assembles shell command strings by directly co= ncatenating its option values (name, source, destination, filter) - e.g. cm=
d =3D "mkdir -p " + path.join(info.destination, info.name) + "; " - and exe= cutes the resulting string through a shell via ssh2-exec (locally via child= _process, or remotely via SSH when an ssh handle is supplied), rather than = using execFile/spawn with an argument array. The only processing applied is=
path.normalize()/path.join(), which do not neutralize shell metacharacters=
(;, |, &, $(), backticks, newline). Any application that passes attack= er-influenced values into these options (e.g. a user-chosen backup name) is=
vulnerable to arbitrary OS command execution on the backup host, or on the=
remote SSH target when one is configured.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71243" target=3D= "_blank" rel=3D"noopener">CVE-2026-71243</a></td>
</tr>

<td class=3D"vendor-product">Admidio--admidio</td>
<td>Admidio before 5.0.11 contains an authentication bypass vulnerability i=
n the forum module when configured in login-only mode. The access control l= ogic in modules/forum.php fails to validate the login-only configuration st= ate, allowing unauthenticated attackers to read forum topics and posts by d= irectly accessing the module with read-only parameters.</td> <td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69091" target=3D= "_blank" rel=3D"noopener">CVE-2026-69091</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by an Improper Neutralization =
of Special Elements Used in a Template Engine vulnerability that could resu=
lt in arbitrary code execution in the context of the current user. An attac= ker could exploit this vulnerability to execute arbitrary code. Exploitatio=
n of this issue does not require user interaction. Scope is changed.</td> <td>2026-08-03</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48323" target=3D= "_blank" rel=3D"noopener">CVE-2026-48323</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by an Improper Neutralization =
of Special Elements used in an SQL Command ('SQL Injection') vulnerability = that could result in arbitrary code execution in the context of the current=
user. An attacker could exploit this vulnerability to execute arbitrary SQ=
L commands, potentially gaining elevated access or control over the applica= tion. Exploitation of this issue does not require user interaction. Scope i=
s changed.</td>
<td>2026-08-03</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48330" target=3D= "_blank" rel=3D"noopener">CVE-2026-48330</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forge=
ry (SSRF) vulnerability that could result in privilege escalation. Exploita= tion of this issue does not require user interaction. Scope is changed.</td=

<td>2026-08-03</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48331" target=3D= "_blank" rel=3D"noopener">CVE-2026-48331</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by an Improper Neutralization =
of Directives in Dynamically Evaluated Code ('Eval Injection') vulnerabilit=
y that could result in arbitrary code execution in the context of the curre=
nt user. A low-privileged attacker could exploit this vulnerability to exec= ute arbitrary code. Exploitation of this issue does not require user intera= ction. Scope is changed.</td>
<td>2026-08-03</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48317" target=3D= "_blank" rel=3D"noopener">CVE-2026-48317</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by an Improper Neutralization =
of Special Elements used in an SQL Command ('SQL Injection') vulnerability = that could result in arbitrary code execution in the context of the current=
user. A low-privileged attacker could exploit this vulnerability to execut=
e arbitrary code. Exploitation of this issue does not require user interact= ion. Scope is changed.</td>
<td>2026-08-03</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48326" target=3D= "_blank" rel=3D"noopener">CVE-2026-48326</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization = vulnerability that could result in privilege escalation. An attacker could = exploit this vulnerability to gain elevated privileges. Exploitation of thi=
s issue does not require user interaction.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48333" target=3D= "_blank" rel=3D"noopener">CVE-2026-48333</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Campaign Classic</td>
<td>Adobe Campaign Classic (ACC) is affected by a Violation of Secure Desig=
n Principles vulnerability that could result in a Security feature bypass. =
An attacker could leverage this vulnerability to bypass security measures a=
nd gain unauthorized read access. Exploitation of this issue does not requi=
re user interaction.</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48399" target=3D= "_blank" rel=3D"noopener">CVE-2026-48399</a></td>
</tr>

<td class=3D"vendor-product">advplyr--audiobookshelf</td>
<td>audiobookshelf's authentication-exemption check (server/routers/Auth.js=
) matches unauthenticated-allowed GET routes against req.path via a regex r= equiring a literal /items/:id/cover or /authors/:id/image shape, where req.= path retains %2F sequences URL-encoded. Express's router decodes the :id ro= ute parameter before handler code runs, so a %2F-encoded '../' sequence in = :id (e.g. ..%2f..%2f..%2ftmp%2fpwned) passes the literal-path auth-exemptio=
n check while resolving to a real path-traversal payload once decoded. Cach= eManager.handleCoverCache then joins this decoded value into a cache file p= ath and streams the result before any database-backed ownership check. This=
bypasses the fix applied for CVE-2025-25205 (which anchored the exemption = regex and switched it to req.path) and results in unauthenticated arbitrary=
file read of any file matching the pattern *_<width>[x<height>= ].<ext> that the service account can read.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71209" target=3D= "_blank" rel=3D"noopener">CVE-2026-71209</a></td>
</tr>

<td class=3D"vendor-product">AffiliateWP--AffiliateWP</td>
<td>Unauthenticated Cross Site Scripting (XSS) in AffiliateWP <=3D 2.35.=
0 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65515" target=3D= "_blank" rel=3D"noopener">CVE-2026-65515</a></td>
</tr>

<td class=3D"vendor-product">Aircoookie--WLED</td>
<td>WLED's GET /json/cfg endpoint (registered in wled00/wled_server.cpp) ca= lls serveJson() with no settings-PIN check, unlike the /edit endpoint which=
explicitly checks correctPIN, disclosing the device's general configuratio=
n (network, hardware, LED setup) to any unauthenticated client on the netwo= rk. Separately, the settings-PIN unlock state is tracked via a single globa=
l boolean `correctPIN` (wled00/wled.h), not per-session state: once any sin= gle client submits the correct 4-digit PIN via POST /json, correctPIN becom=
es true for every client, granting all subsequent unauthenticated clients f= ull configuration-write access (OTA firmware updates, WiFi reconfiguration,=
factory reset) until the device reboots.</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71264" target=3D= "_blank" rel=3D"noopener">CVE-2026-71264</a></td>
</tr>

<td class=3D"vendor-product">Amazon--Kiro CLI</td>
<td>An uncontrolled search path element in Kiro CLI before version 2.10.0 o=
n Windows might allow a remote unauthenticated actor to execute arbitrary c= ode via a maliciously crafted project directory containing an executable th=
at bypasses workspace trust protections when a local user starts Kiro CLI i=
n the directory. To remediate this issue, users should upgrade to version 2= .10.0 or higher.</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18657" target=3D= "_blank" rel=3D"noopener">CVE-2026-18657</a></td>
</tr>

<td class=3D"vendor-product">Amazon--Kiro IDE</td>
<td>An uncontrolled search path element in Kiro IDE before version 1.0.228 =
on Windows might allow a remote unauthenticated actor to execute arbitrary = code via a maliciously crafted project directory containing an executable t= hat bypasses workspace trust protections when a local user opens the direct= ory. To remediate this issue, users should upgrade to version 1.0.228 or hi= gher.</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18656" target=3D= "_blank" rel=3D"noopener">CVE-2026-18656</a></td>
</tr>

<td class=3D"vendor-product">Amir Helzer--WooCommerce Multilingual & Mu= lticurrency</td>
<td>Subscriber Cross Site Scripting (XSS) in WooCommerce Multilingual &=
Multicurrency <=3D 5.5.6 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66711" target=3D= "_blank" rel=3D"noopener">CVE-2026-66711</a></td>
</tr>

<td class=3D"vendor-product">AncoraThemes--Abogado</td>
<td>Unauthenticated PHP Object Injection in Abogado <=3D 1.18 versions.<=

<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65574" target=3D= "_blank" rel=3D"noopener">CVE-2026-65574</a></td>
</tr>

<td class=3D"vendor-product">AncoraThemes--Accalia</td>
<td>Unauthenticated PHP Object Injection in Accalia <=3D 1.5.3 versions.= </td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65575" target=3D= "_blank" rel=3D"noopener">CVE-2026-65575</a></td>
</tr>

<td class=3D"vendor-product">AncoraThemes--Adrena</td>
<td>Unauthenticated PHP Object Injection in Adrena <=3D 1.2.14 versions.= </td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65576" target=3D= "_blank" rel=3D"noopener">CVE-2026-65576</a></td>
</tr>

<td class=3D"vendor-product">AncoraThemes--Advice</td>
<td>Unauthenticated PHP Object Injection in Advice <=3D 1.18.0 versions.= </td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65577" target=3D= "_blank" rel=3D"noopener">CVE-2026-65577</a></td>
</tr>

<td class=3D"vendor-product">AncoraThemes--Agora</td>
<td>Unauthenticated PHP Object Injection in Agora <=3D 1.9 versions.</td=

<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65578" target=3D= "_blank" rel=3D"noopener">CVE-2026-65578</a></td>
</tr>

<td class=3D"vendor-product">approveme--Formidable Forms Signature Online C= ontract Automation</td>
<td>Unauthenticated Insecure Direct Object References (IDOR) in Formidable = Forms Signature Online Contract Automation <=3D 2.0.1 versions.</td> <td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65523" target=3D= "_blank" rel=3D"noopener">CVE-2026-65523</a></td>
</tr>

<td class=3D"vendor-product">art-template--art-template</td>
<td>art-template's sub-template resolution logic (src/compile/adapter/resol= ve-filename.js), used by both the include() and extend() template directive=
s, resolves the target file path via path.resolve(root, filename) with no c= heck afterward that the result remains inside root. Because path.resolve() = discards root entirely when filename is an absolute path, and does not bloc=
k '../' traversal sequences, and the resolved path is passed directly to fs= .readFileSync() in loader.js with its contents compiled and rendered, an ap= plication that lets a sub-template name be influenced by external input (e.=
g. a query parameter passed into {{include page}}) allows an attacker to re=
ad arbitrary files on disk that the Node process can access.</td> <td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71215" target=3D= "_blank" rel=3D"noopener">CVE-2026-71215</a></td>
</tr>

<td class=3D"vendor-product">ATN-B1--CPDLC</td>
<td>Lack of authentication for Very High Frequency Data Link messages allow=
s rogue ground stations to inject CPDLC messages leading to unexpected or m= isleading clearances and potential pilot confusion. This type of attack can=
be carried out remotely over radio frequency.</td>
<td>2026-08-07</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-71409" target=3D= "_blank" rel=3D"noopener">CVE-2025-71409</a></td>
</tr>

<td class=3D"vendor-product">ATN-B1--CPDLC</td>
<td>Injection of false emergency or status messages over CPDLC may lead to = misallocation of resources, operational confusion, and improper response ac= tions by flight crews, traffic controllers, and ground operations. This typ=
e of attack can be carried out remotely over radio frequency.</td>

<td>2026-08-07</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-71412" target=3D= "_blank" rel=3D"noopener">CVE-2025-71412</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--FBX SDK</td>
<td>A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, c=
an trigger a stack-based buffer overflow vulnerability in fbxsdk::FbxIO::Bi= naryReadSectionHeader. A malicious actor can leverage this vulnerability to=
execute arbitrary code in the context of the current process.</td> <td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10709" target=3D= "_blank" rel=3D"noopener">CVE-2026-10709</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--FBX SDK</td>
<td>A maliciously crafted FBX file, when parsed through Autodesk FBX SDK, c=
an trigger a stack-based buffer overflow vulnerability in fbxsdk::ExtractDr= ive. A malicious actor can leverage this vulnerability to execute arbitrary=
code in the context of the current process.</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10710" target=3D= "_blank" rel=3D"noopener">CVE-2026-10710</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--Revit</td>
<td>A maliciously crafted PDF file, when parsed through Autodesk Revit, can=
force an Out-of-Bounds Read vulnerability. A malicious actor can leverage = this vulnerability to cause a crash, read sensitive data, or execute arbitr= ary code in the context of the current process.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11803" target=3D= "_blank" rel=3D"noopener">CVE-2026-11803</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--Revit</td>
<td>A maliciously crafted PDF file, when parsed through Autodesk Revit, can=
force a Use-After-Free vulnerability. A malicious actor can leverage this = vulnerability to cause a crash, disclose sensitive data, or execute arbitra=
ry code in the context of the current process.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-1289" target=3D"= _blank" rel=3D"noopener">CVE-2026-1289</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--Revit</td>
<td>A maliciously crafted BMP file, when parsed through certain Autodesk pr= oducts, can force a Untrusted Pointer Dereference vulnerability. A maliciou=
s actor can leverage this vulnerability to execute arbitrary code in the co= ntext of the current process.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7406" target=3D"= _blank" rel=3D"noopener">CVE-2026-7406</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--Revit</td>
<td>A maliciously crafted PDF file, when parsed through Autodesk Revit, can=
force an Out-of-Bounds Write vulnerability. A malicious actor may leverage=
this vulnerability to cause a crash, cause data corruption, or execute arb= itrary code in the context of the current process.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8325" target=3D"= _blank" rel=3D"noopener">CVE-2026-8325</a></td>
</tr>

<td class=3D"vendor-product">AWS--Amazon Bedrock AgentCore harness</td>

<td>Insufficient input validation in Amazon Bedrock AgentCore harness might=
allow an authenticated remote user to execute configured tools bypassing m= odel invocation and security controls via crafted content blocks in convers= ation messages. AWS has addressed this issue. No customer action is require= d.</td>
<td>2026-08-04</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18830" target=3D= "_blank" rel=3D"noopener">CVE-2026-18830</a></td>
</tr>

<td class=3D"vendor-product">AWS--aws-transform-mcp-server</td>
<td>Improper limitation of a pathname to a restricted directory in the get_= resource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.=
4 might allow a context-dependent actor to write arbitrary files outside th=
e intended working directory via the savePath parameter. To remediate this = issue, users should upgrade to version 0.1.5 or later.</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18953" target=3D= "_blank" rel=3D"noopener">CVE-2026-18953</a></td>
</tr>

<td class=3D"vendor-product">AWS--strands-agents-tools</td>
<td>A prompt injection vulnerability in the shell tool in Amazon Strands Ag= ents Tools before 0.8.0 might allow remote actors to execute arbitrary oper= ating system commands on the agent's host via a crafted prompt that sets th=
e non_interactive parameter to true, bypassing the human consent gate. To r= emediate this issue, users should upgrade to version 0.8.0.</td>

<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18733" target=3D= "_blank" rel=3D"noopener">CVE-2026-18733</a></td>
</tr>

<td class=3D"vendor-product">AWS--strands-agents-tools</td>
<td>Insecure direct object reference in the mongodb_memory, elasticsearch_m= emory, and mem0_memory tools in Amazon Strands Agents Tools before 0.8.3 mi= ght allow remote authenticated users to access, modify, or delete memories = belonging to other tenants by influencing the LLM to emit tool calls with a=
forged namespace parameter. To remediate this issue, users should upgrade =
to version 0.8.3.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19111" target=3D= "_blank" rel=3D"noopener">CVE-2026-19111</a></td>
</tr>

<td class=3D"vendor-product">Axiomthemes--69 Clothing</td>
<td>Unauthenticated PHP Object Injection in 69 Clothing <=3D 1.2.11.1 ve= rsions.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65571" target=3D= "_blank" rel=3D"noopener">CVE-2026-65571</a></td>
</tr>

<td class=3D"vendor-product">Axiomthemes--A.Williams</td>
<td>Unauthenticated PHP Object Injection in A.Williams <=3D 1.3.1 versio= ns.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65572" target=3D= "_blank" rel=3D"noopener">CVE-2026-65572</a></td>
</tr>

<td class=3D"vendor-product">axiomthemes--Agricola</td>
<td>Unauthenticated PHP Object Injection in Agricola <=3D 1.21.0 version= s.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65579" target=3D= "_blank" rel=3D"noopener">CVE-2026-65579</a></td>
</tr>

<td class=3D"vendor-product">Axiomthemes--AI ANN</td>
<td>Unauthenticated PHP Object Injection in AI ANN <=3D 1.29.0 versions.= </td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65581" target=3D= "_blank" rel=3D"noopener">CVE-2026-65581</a></td>
</tr>

<td class=3D"vendor-product">Ays Pro--Survey Maker</td>
<td>Unauthenticated Cross Site Scripting (XSS) in Survey Maker <=3D 5.2.= 3.3 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65565" target=3D= "_blank" rel=3D"noopener">CVE-2026-65565</a></td>
</tr>

<td class=3D"vendor-product">baserCMS Users Community--BaserCMS</td> <td>BaserCMS provided by baserCMS Users Community contains a CSV file injec= tion vulnerability. If a user downloads and opens a CSV file containing mal= icious code injected by an attacker, the malicious code may be executed.</t=

<td>2026-08-03</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65875" target=3D= "_blank" rel=3D"noopener">CVE-2026-65875</a></td>
</tr>

<td class=3D"vendor-product">bensibley--Independent Analytics WordPress Ana= lytics Plugin</td>
<td>The Independent Analytics plugin for WordPress is vulnerable to Stored = Cross-Site Scripting via the 404 not_found_url tracking parameter in versio=
ns up to, and including, 2.15.0. This is due to the get_cell_content() func= tion applying urldecode() after esc_url() when rendering the URL column for=
404 entries - a sequence that allows percent-encoded HTML to pass URL vali= dation and then be reconstructed as raw markup, which wp_kses_post() does n=
ot strip because it retains img elements and data-* attributes, and because=
the public REST endpoint /iawp/search accepts unauthenticated requests as = long as they carry a signature that is itself embedded in public page HTML.=
This makes it possible for unauthenticated attackers to inject arbitrary w=
eb scripts in pages that will execute whenever a user accesses an injected = page.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17506" target=3D= "_blank" rel=3D"noopener">CVE-2026-17506</a></td>
</tr>

<td class=3D"vendor-product">BeRocket--Advanced AJAX Product Filters</td> <td>Unauthenticated Cross Site Scripting (XSS) in Advanced AJAX Product Fil= ters <=3D 3.2.0.3 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66439" target=3D= "_blank" rel=3D"noopener">CVE-2026-66439</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Unrestricted upload of file with dangerous type vulnerability in Bilin = Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources = allows Upload a Web Shell to a Web Server. This issue affects HUMANIST Digi= tal Human Resources: from 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14175" target=3D= "_blank" rel=3D"noopener">CVE-2026-14175</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Use of hard-coded cryptographic key vulnerability in Bilin Software and=
Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Read = Sensitive Constants Within an Executable. This issue affects HUMANIST Digit=
al Human Resources: from 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14804" target=3D= "_blank" rel=3D"noopener">CVE-2026-14804</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Cleartext storage of sensitive information vulnerability in Bilin Softw= are and Informatics Consultancy Inc. HUMANIST Digital Human Resources allow=
s SQL Injection. This issue affects HUMANIST Digital Human Resources: from = 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15721" target=3D= "_blank" rel=3D"noopener">CVE-2026-15721</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Use of GET request method with sensitive query strings vulnerability in=
Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Res= ources allows Session Hijacking. This issue affects HUMANIST Digital Human = Resources: from 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14838" target=3D= "_blank" rel=3D"noopener">CVE-2026-14838</a></td>
</tr>

<td class=3D"vendor-product">bitpressadmin--File Manager</td>
<td>The File Manager plugin for WordPress is vulnerable to arbitrary file d= eletion due to insufficient file path validation in the connector function =
in all versions from 6.0 - 6.9. This makes it possible for authenticated at= tackers, with subscriber-level access and above, to read and delete arbitra=
ry files on the server, which can lead to remote code execution when the ri= ght file is deleted (such as wp-config.php). The bypass is triggered by pas= sing cmd=3Drm or cmf=3Dfile in the URL query string of a POST request: elFi= nder's bind registration reads the command exclusively from $_POST and ther= efore never registers the rm.pre permission handler, while the dispatcher r= eads from the merged $_GET+$_POST superglobal and executes the rm or file c= ommand unchecked against a volume that defaults to ABSPATH.</td> <td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15991" target=3D= "_blank" rel=3D"noopener">CVE-2026-15991</a></td>
</tr>

<td class=3D"vendor-product">Bohdan Triapitsyn--OpenChamber</td> <td>OpenChamber 1.11.7 contains an unauthenticated remote code execution vu= lnerability that allows remote attackers to execute arbitrary shell command=
s by sending crafted POST requests to the /api/fs/exec endpoint, which pass=
es commands verbatim to Node.js spawn() without any allowlist, blocklist, o=
r argument validation. The authentication middleware becomes a no-op when U= I_PASSWORD is not configured, matching the default Docker deployment, enabl= ing attackers to execute arbitrary OS commands as the application user and = retrieve full command output including stdout, stderr, and exit code from t=
he server response.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53975" target=3D= "_blank" rel=3D"noopener">CVE-2026-53975</a></td>
</tr>

<td class=3D"vendor-product">Bohdan Triapitsyn--OpenChamber</td> <td>OpenChamber 1.11.7 contains a path traversal vulnerability in the file-= serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows u= nauthenticated remote attackers to read arbitrary files by supplying the al= lowOutsideWorkspace=3Dtrue query parameter alongside an absolute path, bypa= ssing the workspace boundary check in resolveReadPathFromContext. Attackers=
can exploit the vacuous isPathWithinRoot guard to read sensitive files suc=
h as the JWT signing secret, SSH private keys, API credentials, and environ= ment variables, enabling full authentication bypass by forging session cook= ies on password-protected deployments.</td>
<td>2026-08-06</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53976" target=3D= "_blank" rel=3D"noopener">CVE-2026-53976</a></td>
</tr>

<td class=3D"vendor-product">Bohdan Triapitsyn--OpenChamber</td> <td>OpenChamber 1.11.7 contains an authentication bypass vulnerability that=
allows unauthenticated remote attackers to terminate the server process by=
sending a POST request to the /api/system/shutdown endpoint, which is regi= stered before the authentication middleware in the Express route handler ch= ain. Attackers can exploit the route registration order in bootstrap-runtim= e.js to reach the shutdown handler before auth middleware executes, causing=
denial of service to all active AI coding sessions and locking out legitim= ate remote users regardless of whether UI_PASSWORD is configured.</td> <td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53977" target=3D= "_blank" rel=3D"noopener">CVE-2026-53977</a></td>
</tr>

<td class=3D"vendor-product">BoldGrid--Total Upkeep</td>
<td>Unauthenticated Broken Access Control in Total Upkeep <=3D 1.17.2 ve= rsions.</td>
<td>2026-08-06</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66708" target=3D= "_blank" rel=3D"noopener">CVE-2026-66708</a></td>
</tr>

<td class=3D"vendor-product">bolt--core</td>
<td>Bolt CMS renders content field values through Twig's full application-l= evel Environment with no SandboxExtension registered anywhere in the codeba= se. In src/Entity/Field.php, getTwigValue() calls shouldBeRenderedAsTwig(),=
which gates rendering only on the field definition's allow_twig flag and a=
regex checking for `{{`, `{%`, or `{#`; when true, the raw field value is = compiled and rendered via `self::getTwig()->createTemplate($value)->r= ender(['record' =3D> $this->getContent()])` with no sandboxing. Bolt'=
s own bundled config/bolt/contenttypes.yaml sets `allow_twig: true` on the = default "pages" contenttype's content field out of the box. Any user with e= dit access to that content type (a standard editor role, not just an admini= strator) can inject a Twig payload such as `{{ ['id']|map('passthru')|join = }}` that executes arbitrary OS commands when the content is saved and rende= red, achieving remote code execution as the web server user.</td> <td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71291" target=3D= "_blank" rel=3D"noopener">CVE-2026-71291</a></td>
</tr>

<td class=3D"vendor-product">boringproxy--boringproxy</td>
<td>boringproxy through 0.10.0 contains a newline injection vulnerability t= hat allows authenticated low-privileged users with tunnel-creation permissi=
on to inject arbitrary lines into the server account's SSH authorized_keys = file by supplying a percent-encoded newline character in the domain paramet=
er of the tunnel creation endpoint. Attackers can insert an unrestricted pu= blic key entry into authorized_keys to gain persistent shell access, and su= bsequently read cleartext credentials from the database file including all = user tokens, tunnel private keys, and TLS certificates.</td> <td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70615" target=3D= "_blank" rel=3D"noopener">CVE-2026-70615</a></td>
</tr>

<td class=3D"vendor-product">Brandexponents--Type Hub</td>
<td>Unauthenticated Arbitrary File Upload in Type Hub <=3D 2.0.6 version= s.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66665" target=3D= "_blank" rel=3D"noopener">CVE-2026-66665</a></td>
</tr>

<td class=3D"vendor-product">brix--crypto-js</td>
<td>crypto-js is a JavaScript library of crypto standards. Versions of cryp= to-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random()=
using a custom variation of the Multiply-With-Carry pseudorandom number ge= nerator, seeded from Math.random(), instead of a cryptographically secure s= ource. This generator was introduced in version 3.1.2-4 and remained presen=
t in nearly every 3.x release. Nominal requests for 128 or 256 bits of entr= opy through this function produce effective search spaces of approximately =
2 to the 39th and 2 to the 47th possibilities, small enough to enumerate on=
commodity hardware. Downstream wallet applications that used CryptoJS.lib.= WordArray.random() as the entropy source for BIP39 recovery phrases are aff= ected, and an attacker who enumerates the reduced output space can recover = the resulting private keys and control the associated funds. This issue is = fixed in version 4.0.0.</td>
<td>2026-08-07</td>
<td>9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71851" target=3D= "_blank" rel=3D"noopener">CVE-2026-71851</a></td>
</tr>

<td class=3D"vendor-product">Cacti--cacti</td>
<td>Cacti's sanitize_sql_column() (lib/functions.php) sanitizes user-suppli=
ed ORDER BY column names using the regex `preg_replace('/[^a-zA-Z0-9_().]/'=
, '', $column)`. Because this allowlist retains letters, digits, underscore=
, parentheses, and dot (intended to support expressions like COUNT(id) and = table.column), a payload such as `SLEEP(5)` passes through completely unmod= ified. The sanitized value is concatenated directly into raw SQL ORDER BY c= lauses (which cannot be parameterized) driven by a `sort_column` GET parame= ter in at least user_log.php, utilities.php, user_domains.php, and user_gro= up_admin.php, allowing any authenticated Cacti user, regardless of privileg=
e level, to perform time-based blind SQL injection against the Cacti databa= se.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71287" target=3D= "_blank" rel=3D"noopener">CVE-2026-71287</a></td>
</tr>

<td class=3D"vendor-product">CheckMAL--AppCheck Pro</td>
<td>A security flaw has been discovered in CheckMAL AppCheck Pro 3.1.43.10.=
Affected is an unknown function in the library AppCheckD.sys of the compon= ent Kernel Mini-Filter Driver. Performing a manipulation results in uncontr= olled search path. The attack requires a local approach. The complexity of =
an attack is rather high. The exploitability is told to be difficult. The e= xploit has been released to the public and may be used for attacks. The ven= dor was contacted early about this disclosure but did not respond in any wa= y.</td>
<td>2026-08-03</td>
<td>7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18605" target=3D= "_blank" rel=3D"noopener">CVE-2026-18605</a></td>
</tr>

<td class=3D"vendor-product">chiuwingyan--house</td>
<td>A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2= b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid= /selectall.action. The manipulation of the argument zuname leads to sql inj= ection. The attack can be initiated remotely. The exploit has been disclose=
d to the public and may be used. Continious delivery with rolling releases =
is used by this product. Therefore, no version details of affected nor upda= ted releases are available. The vendor was contacted early about this discl= osure but did not respond in any way.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19062" target=3D= "_blank" rel=3D"noopener">CVE-2026-19062</a></td>
</tr>

<td class=3D"vendor-product">Cinnamon--kotaemon</td>
<td>kotaemon through 0.12.0 contains an insecure deserialization vulnerabil= ity in the check_connection endpoint that allows unauthenticated attackers =
to instantiate arbitrary Python classes by supplying crafted YAML/JSON inpu=
t with a __type__ field. Attackers can exploit this to override the __type_=
_ field with subprocess.check_output and arbitrary arguments, achieving rem= ote code execution with application process privileges.</td>

<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69098" target=3D= "_blank" rel=3D"noopener">CVE-2026-69098</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Catalyst SD-WAN Controller</td> <td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco Catalyst SD-WAN engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20303 are related to improper input va= lidation issues that are grouped under the Common Weakness Enumeration (CWE=
) CWE-20.</td>
<td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20303" target=3D= "_blank" rel=3D"noopener">CVE-2026-20303</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Catalyst SD-WAN Controller</td> <td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco Catalyst SD-WAN engineering team has conducted a compre= hensive internal security review. This review resulted in a software harden= ing release that address multiple internally discovered vulnerabilities. Th=
e vulnerabilities tracked by CVE-2026-20304 are related to improper access = control issues that are grouped under the Common Weakness Enumeration (CWE)=
CWE-284.</td>
<td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20304" target=3D= "_blank" rel=3D"noopener">CVE-2026-20304</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Catalyst SD-WAN Controller</td> <td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco Catalyst SD-WAN engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20310 are related to improper link res= olution before file access issues that are grouped under the Common Weaknes=
s Enumeration (CWE) CWE-59.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20310" target=3D= "_blank" rel=3D"noopener">CVE-2026-20310</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Catalyst SD-WAN Controller</td> <td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco Catalyst SD-WAN engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20312 are related to Cleartext storage=
of sensitive information issues that are grouped under the Common Weakness=
Enumeration (CWE) CWE-312.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20312" target=3D= "_blank" rel=3D"noopener">CVE-2026-20312</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Catalyst SD-WAN Controller</td> <td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco Catalyst SD-WAN engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20313 are related to Improper link res= olution before file access issues that are grouped under the Common Weaknes=
s Enumeration (CWE) CWE-1284.</td>
<td>2026-08-05</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20313" target=3D= "_blank" rel=3D"noopener">CVE-2026-20313</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by&nbsp;CVE-2026-20267 are related to improper=
access control issues that are grouped under the Common Weakness Enumerati=
on (CWE) Pillar&nbsp;CWE-284.</td>
<td>2026-08-05</td>
<td>9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20267" target=3D= "_blank" rel=3D"noopener">CVE-2026-20267</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20272 are related to issues with impro= per neutralization of special elements that are grouped under the Common We= akness Enumeration (CWE) Pillar CWE-74.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20272" target=3D= "_blank" rel=3D"noopener">CVE-2026-20272</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) featu=
re of Cisco IOS XE Software could allow an unauthenticated, remote attacker=
to cause a denial of service (DoS) condition on an affected device. This v= ulnerability is due to improper handling when parsing a specific BEEP SOAP = request. An attacker could exploit this vulnerability by sending a specific=
BEEP SOAP request to an affected device. A successful exploit could allow = the attacker to cause the device to reload unexpectedly, resulting in a DoS=
condition.</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20263" target=3D= "_blank" rel=3D"noopener">CVE-2026-20263</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20268 are related to issues with impro= per restriction of operations within the bounds of a memory buffer that are=
grouped under the Common Weakness Enumeration (CWE) Pillar CWE-119.</td> <td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20268" target=3D= "_blank" rel=3D"noopener">CVE-2026-20268</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20269 are related to issues with impro= per control of a resource through its lifetime that are grouped under the C= ommon Weakness Enumeration (CWE) Pillar CWE-664.</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20269" target=3D= "_blank" rel=3D"noopener">CVE-2026-20269</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20270 are related to incorrect calcula= tion issues that are grouped under the Common Weakness Enumeration (CWE) Pi= llar CWE-682.</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20270" target=3D= "_blank" rel=3D"noopener">CVE-2026-20270</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in software hardenin=
g releases that address multiple internally discovered vulnerabilities. The=
vulnerabilities tracked by CVE-2026-20271 are related to insufficient cont= rol flow management issues that are grouped under the Common Weakness Enume= ration (CWE) Pillar CWE-691. &nbsp;</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20271" target=3D= "_blank" rel=3D"noopener">CVE-2026-20271</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>As part of Cisco's ongoing commitment to proactive security and product=
quality, the Cisco IOS XE Software engineering team has conducted a compre= hensive internal security review. This review resulted in a software harden= ing release that addresses multiple internally discovered vulnerabilities. = The vulnerabilities tracked by CVE-2026-20273 are related to improper input=
validation issues that are grouped under the Common Weakness Enumeration (= CWE) Pillar CWE-20.</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20273" target=3D= "_blank" rel=3D"noopener">CVE-2026-20273</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>A vulnerability in the Extensible Messaging Client Protocol (XMCP), als=
o referred to as the External Client protocol, of Cisco IOS Software and Ci= sco IOS XE Software could allow an unauthenticated, remote attacker to caus=
e a denial of service (DoS) condition on an affected device. This vulnerabi= lity is due to improper handling of malformed XMCP packets. An attacker cou=
ld exploit this vulnerability by sending a malformed XMCP packet to an affe= cted device. A successful exploit could allow the attacker to cause the aff= ected device to reload unexpectedly, resulting in a DoS condition. The atta= cker does not need the XMCP client username to exploit this vulnerability.<=

<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20301" target=3D= "_blank" rel=3D"noopener">CVE-2026-20301</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>A vulnerability in the Simple Network Management Protocol (SNMP) subsys= tem of Cisco IOS XE Software could allow an authenticated, remote attacker =
to cause an affected device to reload, resulting in a denial of service (Do=
S) condition. This vulnerability is due to improper error handling when par= sing SNMP requests. This vulnerability affects all versions of SNMP &md= ash; Versions 1, 2c, and 3. An attacker could exploit this vulnerability by=
sending a malformed SNMP request to an affected device. A successful explo=
it could allow the attacker to cause the device to reload unexpectedly. The=
attacker must have the SNMPv1 or v2c read-only or read-write community str= ing or valid SNMPv3 user credentials on the affected device.</td> <td>2026-08-05</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20124" target=3D= "_blank" rel=3D"noopener">CVE-2026-20124</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the zip archive parser of ClamAV could allow an unau= thenticated, remote attacker to cause a DoS condition on an affected device=
. This vulnerability is due to improper boundary checks for content in zip = files during scanning, which may result in an out-of-bounds write condition=
. An attacker could exploit this vulnerability by submitting a crafted zip = file for scanning. A successful exploit could allow the attacker to cause t=
he ClamAV scanning process to terminate, resulting in a DoS condition on th=
e affected software.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20337" target=3D= "_blank" rel=3D"noopener">CVE-2026-20337</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the zip archive parser of ClamAV could allow an unau= thenticated, remote attacker to cause a DoS condition on an affected device=
. This vulnerability is due to improper memory handling when processing con= tent in zip files during scanning. An attacker could exploit this vulnerabi= lity by submitting a crafted zip file for scanning. A successful exploit co= uld allow the attacker to cause the ClamAV scanning process to terminate as=
a result of a memory double-free, resulting in a DoS condition on the affe= cted software.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20338" target=3D= "_blank" rel=3D"noopener">CVE-2026-20338</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the PESpin file format parser of ClamAV could allow =
an unauthenticated, remote attacker to cause a DoS condition or possibly ot= her expanded impacts as a result of&nbsp;memory corruption on an affect=
ed device. This vulnerability is due to improper boundary checks for conten=
t in PESpin files during scanning, which may result in an integer overflow.=
An attacker could exploit this vulnerability by submitting a crafted file = that contains PESpin content to be scanned by ClamAV on an affected device.=
A successful exploit could allow the attacker to cause the ClamAV scanning=
process to terminate, resulting in a DoS condition on the affected softwar= e.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20339" target=3D= "_blank" rel=3D"noopener">CVE-2026-20339</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the GPT file format parser of ClamAV could allow an = unauthenticated, remote attacker to cause a DoS condition or possibly other=
expanded impacts as a result of&nbsp;memory corruption on an affected = device. This vulnerability is due to improper handling of an endian convers= ion operation, which may result in an out-of-bounds buffer write. An attack=
er could exploit this vulnerability by submitting a crafted GPT file to be = scanned by ClamAV on an affected device. A successful exploit could allow t=
he attacker to cause the ClamAV scanning process to terminate, resulting in=
a DoS condition on the affected software.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20345" target=3D= "_blank" rel=3D"noopener">CVE-2026-20345</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the PDF file format parser of ClamAV could allow an = unauthenticated, remote attacker to cause a DoS condition or possibly other=
expanded impacts as a result of&nbsp;memory corruption on an affected = device. This vulnerability is due to improper boundary checks for content i=
n PDF files during scanning, which may result in an out-of-bounds buffer re= ad. An attacker could exploit this vulnerability by submitting a crafted PD=
F file to be scanned by ClamAV on an affected device. A successful exploit = could allow the attacker to cause the ClamAV scanning process to terminate,=
resulting in a DoS condition on the affected software.</td> <td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20346" target=3D= "_blank" rel=3D"noopener">CVE-2026-20346</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the Mach-O file format parser of ClamAV could allow =
an unauthenticated, remote attacker to cause a DoS condition or possibly ot= her expanded impacts as a result of&nbsp;memory corruption on an affect=
ed device. This vulnerability is due to improper boundary checks for conten=
t in Mach-O files during scanning, which may result in an out-of-bounds buf= fer read. An attacker could exploit this vulnerability by submitting a craf= ted Mach-O file to be scanned by ClamAV on an affected device. A successful=
exploit could allow the attacker to cause the ClamAV scanning process to t= erminate, resulting in a DoS condition on the affected software.</td> <td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20347" target=3D= "_blank" rel=3D"noopener">CVE-2026-20347</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Secure Endpoint</td>
<td>A vulnerability in the XAR file format parser of ClamAV could allow an = unauthenticated, remote attacker to cause a DoS condition or possibly other=
expanded impacts as a result of&nbsp;memory corruption on an affected = device. This vulnerability is due to improper boundary checks for content i=
n XAR files during scanning. An attacker could exploit this vulnerability b=
y submitting a crafted file that contains XAR content to be scanned by Clam=
AV on an affected device. A successful exploit could allow the attacker to = cause the ClamAV scanning process to terminate, resulting in a DoS conditio=
n on the affected software.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20348" target=3D= "_blank" rel=3D"noopener">CVE-2026-20348</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Unified Computing System (Standal= one)</td>
<td>A vulnerability in the web-based management interface of Cisco IMC coul=
d allow an authenticated, remote attacker with low privileges to execute ar= bitrary commands on the underlying operating system of an affected system a=
nd elevate privileges to root.&nbsp; This vulnerability is due to impro= per validation of user-supplied input. An attacker could exploit this vulne= rability by entering crafted inputs to the web-based management interface o=
f the affected software. A successful exploit could allow the attacker to e= xecute arbitrary commands on the underlying operating system as the root us= er.&nbsp;</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20200" target=3D= "_blank" rel=3D"noopener">CVE-2026-20200</a></td>
</tr>

<td class=3D"vendor-product">ClearFoundation--ClearOS</td>
<td>ClearOS 7.9 contains an OS command injection vulnerability in the Log V= iewer component that allows authenticated attackers to execute arbitrary co= mmands by submitting unsanitized input through the filter parameter, which =
is interpolated directly into a shell command in File.php. Attackers can in= ject command substitution payloads into the filter parameter to execute arb= itrary commands as the webconfig user, and due to extensive NOPASSWD sudo p= rivileges granted to that user by default, immediately escalate to root.</t=

<td>2026-08-03</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67599" target=3D= "_blank" rel=3D"noopener">CVE-2026-67599</a></td>
</tr>

<td class=3D"vendor-product">CoCart--CoCart</td>
<td>The CoCart WordPress plugin before 4.9.0 does not validate a user-suppl= ied price value against the actual product price when items are added to th=
e cart through one of its public REST API endpoints, allowing unauthenticat=
ed users to set arbitrary product prices and complete WooCommerce orders at=
manipulated totals.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10524" target=3D= "_blank" rel=3D"noopener">CVE-2026-10524</a></td>
</tr>

<td class=3D"vendor-product">code-projects--Task Management System</td>

<td>A vulnerability was detected in code-projects Task Management System 1.=
0. Affected is an unknown function of the file /index.php of the component = Login. Performing a manipulation of the argument Password results in improp=
er authentication. The attack is possible to be carried out remotely. The e= xploit is now public and may be used.</td>
<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19342" target=3D= "_blank" rel=3D"noopener">CVE-2026-19342</a></td>
</tr>

<td class=3D"vendor-product">code-projects--Task Management System</td>

<td>A flaw has been found in code-projects Task Management System 1.0. Affe= cted by this vulnerability is an unknown functionality of the file /admin/A= dminLogin.php. Executing a manipulation of the argument email/password can = lead to sql injection. The attack may be performed from remote. The exploit=
has been published and may be used.</td>
<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19343" target=3D= "_blank" rel=3D"noopener">CVE-2026-19343</a></td>
</tr>

<td class=3D"vendor-product">code-projects--Task Management System</td>

<td>A vulnerability has been found in code-projects Task Management System = 1.0. Affected by this issue is some unknown functionality of the file /user= /comment_count_user.php. The manipulation of the argument task_id leads to = sql injection. It is possible to initiate the attack remotely. The exploit = has been disclosed to the public and may be used.</td>
<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19344" target=3D= "_blank" rel=3D"noopener">CVE-2026-19344</a></td>
</tr>

<td class=3D"vendor-product">Constant Contact--Creative Mail</td> <td>Subscriber SQL Injection in Creative Mail <=3D 1.6.9 versions.</td> <td>2026-08-06</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65547" target=3D= "_blank" rel=3D"noopener">CVE-2026-65547</a></td>
</tr>

<td class=3D"vendor-product">Contiki-NG--Contiki-NG</td>
<td>Contiki-NG's MQTT client parse_publish_vhdr() in os/net/app-layer/mqtt/= mqtt.c sets topic_len_received=3D1 before checking topic_len against the 64= -byte limit, so an over-length topic returns early but leaves the flag set.=
On the next TCP segment, tcp_input() re-invokes the parser with topic_rece= ived=3D=3D0, and the persisted topic_len_received=3D=3D1 skips the length-r= eading block containing the guard, falling through directly to a memcpy() t= hat uses the unvalidated 16-bit topic_len as the copy length. The 65-byte t= opic[] destination overruns into adjacent struct fields including the paylo= ad_chunk pointer, which subsequent MQTT code dereferences, giving a comprom= ised or attacker-controlled broker an arbitrary-pointer-write primitive. Co= ntiki-NG's MQTT implementation has no TLS support so the connection is plai= ntext. Impact ranges from information disclosure and denial of service to r= emote code execution on embedded targets without memory protection.</td> <td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5857" target=3D"= _blank" rel=3D"noopener">CVE-2026-5857</a></td>
</tr>

<td class=3D"vendor-product">Contiki-NG--Contiki-NG</td>
<td>Contiki-NG's LwM2M TLV parser lwm2m_tlv_read() in os/services/lwm2m/lwm= 2m-tlv.c ignores its caller-supplied buffer length argument and reads up to=
six bytes from the input buffer with no bounds check. The caller in lwm2m-= engine.c iterates while there is at least one byte remaining, so a crafted = CoAP WRITE to any LwM2M endpoint whose final TLV supplies exactly one byte = triggers up to five out-of-bounds reads of heap memory adjacent to the CoAP=
input buffer, disclosing memory contents (including key material and peer = addresses) through the parsed tlv->id, tlv->length, and tlv->value=
fields. Corrupted tlv_len derived from the out-of-bounds memory further co= rrupts the caller's parse offset. In LwM2M NoSec mode, the default for cons= trained devices, no authentication is required.</td>

<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5855" target=3D"= _blank" rel=3D"noopener">CVE-2026-5855</a></td>
</tr>

<td class=3D"vendor-product">Contiki-NG--Contiki-NG</td>
<td>Contiki-NG's DNS/mDNS resolver skip_name() in os/services/resolv/resolv=
.c walks DNS wire-format name labels with no packet-boundary check, and the=
caller in newdata() invokes it in a loop iterating nquestions times from t=
he attacker-controlled DNS header before validating the transaction ID. An = attacker who sets nquestions higher than the number of complete questions p= resent causes skip_name() to walk past the UDP packet buffer, and the retur= ned pointer is cast to struct dns_answer * for further memory reads. On bui= lds with RESOLV_CONF_SUPPORTS_MDNS enabled, any peer on the local segment c=
an trigger the read unauthenticated via a multicast UDP 5353 packet with no=
outstanding query required; on standard DNS builds an attacker who can inj= ect a UDP response from port 53 during an outstanding query can trigger the=
same read. Impact is out-of-bounds read of uip_buf and adjacent memory, di= sclosing memory contents or crashing the resolver.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5856" target=3D"= _blank" rel=3D"noopener">CVE-2026-5856</a></td>
</tr>

<td class=3D"vendor-product">cornelraiu-1--Search Analytics for WP</td>

<td>The Search Analytics for WP plugin for WordPress is vulnerable to Cross= -Site Request Forgery in all versions up to, and including, 1.4.16. This is=
due to missing or incorrect nonce validation on the `process_bulk_action()=
` function of `MWTSA_Stats_Table`. This makes it possible for unauthenticat=
ed attackers to delete arbitrary search-term records, including all associa= ted search-history rows, via a forged request granted they can trick a user=
with access to the plugin's "Search Analytics" dashboard page (Administrat=
or by default) into performing an action such as clicking on a link.</td> <td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7444" target=3D"= _blank" rel=3D"noopener">CVE-2026-7444</a></td>
</tr>

<td class=3D"vendor-product">Cotonti--Cotonti</td>
<td>Cotonti CMS's Comments plugin deserializes user-supplied data without r= estricting the classes that may be instantiated. In plugins/comments/contro= llers/actions/CreateAction.php, a `ci` POST parameter obtained via `cot_imp= ort('ci', 'P', 'TXT')` (trim-only sanitization) is passed to `unserialize(b= ase64_decode($ci))` with no `allowed_classes` restriction, reachable by any=
member with write access to comments (the default `Auth_members =3D> 'R= W'` setting in plugins/comments/comments.setup.php). In plugins/comments/co= ntrollers/actions/EditAction.php, a `cb` parameter is similarly deserialize=
d via `unserialize(base64_decode($this->comeback))` in prepareComeBack()=
, reachable by any member editing their own comment. Because unserialize() =
is called without allowed_classes, an attacker can construct a serialized P=
HP object of any class loaded by Cotonti (a PHP Object Injection primitive)=
. This was demonstrated in practice using Cotonti's own MySQL_cache class: =
a crafted serialized MySQL_cache object, once deserialized and later garbag= e-collected, triggers its __destruct()->flush() chain, causing an attack= er-controlled INSERT INTO cot_cache with attacker-chosen row values - confi= rming genuine POP-chain exploitation, with further impact (including potent= ial RCE) contingent on other gadget chains available in a given Cotonti ins= tallation's loaded classes. A third sink in DeleteAction.php contains the i= dentical unserialize() pattern but is gated behind an admin-only authorizat= ion check and is not reachable by ordinary members.</td>
<td>2026-08-05</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71294" target=3D= "_blank" rel=3D"noopener">CVE-2026-71294</a></td>
</tr>

<td class=3D"vendor-product">cozmoslabs--TranslatePress Translate Multiling= ual sites with AI Translation</td>
<td>The TranslatePress - Translate Multilingual sites with AI Translation p= lugin for WordPress is vulnerable to Stored Cross-Site Scripting via Commen=
t Content (URL-encoded gettext markers) in all versions up to, and includin=
g, 3.2.6 due to insufficient input sanitization and output escaping. This m= akes it possible for unauthenticated attackers to inject arbitrary web scri= pts in pages that will execute whenever a user accesses an injected page. C= omment moderation may delay exploitation for first-time commenters, but doe=
s not prevent it, as the payload uses only WordPress-permitted tags and att= ributes with percent-encoded characters that pass wp_kses URL validation un= modified.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18510" target=3D= "_blank" rel=3D"noopener">CVE-2026-18510</a></td>
</tr>

<td class=3D"vendor-product">crater-invoice--Crater</td>
<td>Crater isolates data per company_id, and its Invoice/Estimate/Payment/E= xpense policies enforce both a Bouncer ability check and $user->hasCompa= ny($model->company_id). CustomerPolicy's view/update/delete methods omit=
the company-ownership check entirely, checking only the blanket ability. R= oute-model-bound customer lookups and the bulk Customer::deleteCustomers() = method are similarly unscoped (self::find($id) with no company filter). Any=
authenticated user of one company can read, reassign (steal), or delete an= other company's customer records, with deletion cascading to that customer'=
s invoices and payments.</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55739" target=3D= "_blank" rel=3D"noopener">CVE-2026-55739</a></td>
</tr>

<td class=3D"vendor-product">crater-invoice--crater</td>
<td>Crater's NotePolicy checks only a blanket Bouncer ability (manage-all-n= otes / view-all-notes) with no company-ownership comparison, unlike Invoice= Policy and other sibling policies which additionally verify $user->hasCo= mpany($model->company_id). NotesController's show(), update(), and destr= oy() actions authorize via $this->authorize('view notes'/'manage notes')=
without passing the target Note model, and Note's company-scoping (scopeWh= ereCompany) is applied only in the list endpoint, not in show/update/destro=
y. Any authenticated user of one company can read, edit, or delete another = company's notes by ID. This is a distinct finding from the previously repor= ted CustomerPolicy company-ownership omission (a different policy class and=
controller).</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71242" target=3D= "_blank" rel=3D"noopener">CVE-2026-71242</a></td>
</tr>

<td class=3D"vendor-product">Creative Mail--Creative Mail</td>
<td>The Creative Mail WordPress plugin from 1.6.5 to 1.6.9 does not sanitiz=
e and escape a parameter before using in an SQL statement, leading to an un= authenticated SQL injection when the abandoned cart email is managed by cre= ative mail.</td>
<td>2026-08-06</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-3430" target=3D"= _blank" rel=3D"noopener">CVE-2026-3430</a></td>
</tr>

<td class=3D"vendor-product">Crocoblock. Jetimpex Inc.--JetEngine</td>

<td>Unauthenticated Cross Site Scripting (XSS) in JetEngine <=3D 3.8.13.=
1 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28082" target=3D= "_blank" rel=3D"noopener">CVE-2026-28082</a></td>
</tr>

<td class=3D"vendor-product">cwalter-at--FreeModbus</td>
<td>The LINUXTCP port of FreeModbus contains an off-by-one bounds check in = xMBPortTCPPool() (demo/LINUXTCP/port/porttcp.c). The check `if (usTCPFrameB= ytesLeft > MB_TCP_BUF_SIZE)` uses a strict greater-than comparison inste=
ad of greater-than-or-equal against the 263-byte MB_TCP_BUF_SIZE limit. An = MBAP frame with a Length field of 264 makes usTCPFrameBytesLeft equal to 26=
3, which passes the flawed check, and the subsequent recv() call writes up =
to 263 bytes starting at buffer offset 7 into the 263-byte static buffer au= cTCPBuf, overflowing it by 7 bytes into the adjacent static variable usTCPB= ufPos. A single crafted, unauthenticated Modbus TCP packet triggers the ove= rflow, since Modbus has no built-in authentication.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71263" target=3D= "_blank" rel=3D"noopener">CVE-2026-71263</a></td>
</tr>

<td class=3D"vendor-product">cyberlord92--Page and Post Restriction</td>

<td>The Page and Post Restriction plugin for WordPress is vulnerable to Sen= sitive Information Exposure in versions up to and including 1.4.0 via the W= ordPress core REST endpoints /wp-json/wp/v2/pages, /wp-json/wp/v2/pages/&lt= ;id>, /wp-json/wp/v2/posts, and /wp-json/wp/v2/posts/<id>. This is=
due to the plugin's REST guards - papr_restrict_page_post_rest_api() and t=
he the_posts filter registered by papr_filter_posts() - sourcing their rest= ricted-ID list exclusively from papr_get_restricted_posts_id(), which only = reads the per-page metabox options papr_allowed_redirect_for_pages and papr= _allowed_redirect_for_posts and never consults the two global toggles papr_= access_for_only_loggedin and papr_access_for_only_loggedin_posts that the p= lugin's own UI describes as 'Make all Pages Private' / 'Make all Posts Priv= ate'. This makes it possible for unauthenticated attackers to read the full=
rendered content of every published page and post on sites configured with=
the documented global toggles, bypassing the security boundary enforced on=
the frontend by papr_restrict_logged_in_users().</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12000" target=3D= "_blank" rel=3D"noopener">CVE-2026-12000</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formLtefotaUpgradeQuectel interface. A remote attacker can inject=
arbitrary malicious commands into the fota_url field, resulting in command=
execution with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71944" target=3D= "_blank" rel=3D"noopener">CVE-2026-71944</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formLtefotaUpgradeFibocom interface. A remote attacker can inject=
arbitrary malicious commands into the fota_url field, resulting in command=
execution with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71945" target=3D= "_blank" rel=3D"noopener">CVE-2026-71945</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formPingDiagnosticRun interface. A remote attacker can inject arb= itrary malicious commands into the host field, resulting in command executi=
on with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71946" target=3D= "_blank" rel=3D"noopener">CVE-2026-71946</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formTracerouteDiagnosticRun interface. A remote attacker can inje=
ct arbitrary malicious commands into the host and ipVer fields, resulting i=
n command execution with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71947" target=3D= "_blank" rel=3D"noopener">CVE-2026-71947</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject ar= bitrary malicious commands into the host field, resulting in command execut= ion with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71948" target=3D= "_blank" rel=3D"noopener">CVE-2026-71948</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formUSSDSetup interface. A remote attacker can inject arbitrary m= alicious commands into the ussdValue and selectMenuValue fields, resulting =
in command execution with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71949" target=3D= "_blank" rel=3D"noopener">CVE-2026-71949</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formSmsManage interface. A remote attacker can inject arbitrary m= alicious commands into the action_value field, resulting in command executi=
on with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71950" target=3D= "_blank" rel=3D"noopener">CVE-2026-71950</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formIMEISetup interface. A remote attacker can inject arbitrary m= alicious commands into the IMEI_value field, resulting in command execution=
with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71951" target=3D= "_blank" rel=3D"noopener">CVE-2026-71951</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formPinManageSetup interface. A remote attacker can inject arbitr= ary malicious commands into the oldPIn field, resulting in command executio=
n with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71952" target=3D= "_blank" rel=3D"noopener">CVE-2026-71952</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formNtp interface. A remote attacker can inject arbitrary malicio=
us commands into the ntpServerIp1 field, resulting in command execution wit=
h root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71953" target=3D= "_blank" rel=3D"noopener">CVE-2026-71953</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and firmware version b= efore 1.1.5_C1_202607071108 contain a command injection vulnerability in th=
e /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arb= itrary malicious commands into the tunnelid and sessionid fields, resulting=
in command execution with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71954" target=3D= "_blank" rel=3D"noopener">CVE-2026-71954</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and software version 1= .1.2_C1_202602110044 contain a command injection vulnerability in the /boaf= rm/formWsc interface. A remote attacker can inject arbitrary malicious comm= ands into the localPin, targetAPSsid, peerPin, and peerRptPin fields, resul= ting in command execution with root privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71955" target=3D= "_blank" rel=3D"noopener">CVE-2026-71955</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and software version 1= .1.2_C1_202602110044 contain a command injection vulnerability in the app.c=
gi interface. A remote attacker can inject arbitrary malicious commands int=
o the netDig.ping.dst field, resulting in command execution with root privi= leges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71956" target=3D= "_blank" rel=3D"noopener">CVE-2026-71956</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and software version 1= .1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi=
interface. A remote attacker can write an overly long string to the netAcc= .addlist[].name field and execute arbitrary commands by crafting a specific=
payload, or cause the device to crash.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71957" target=3D= "_blank" rel=3D"noopener">CVE-2026-71957</a></td>
</tr>

<td class=3D"vendor-product">D-Link Corporation--DWR-M961</td>
<td>D-Link DWR-M961 devices with hardware version C1 and software version 1= .1.2_C1_202602110044 contain a buffer overflow vulnerability in the quickse= tup.cgi interface. A remote attacker can write overly long strings to the t= est4, ssid2, and username fields and execute arbitrary commands by crafting=
a specific payload, or cause the device to crash.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71958" target=3D= "_blank" rel=3D"noopener">CVE-2026-71958</a></td>
</tr>

<td class=3D"vendor-product">Daniel Iser--Popup Maker</td>
<td>Unauthenticated Cross Site Scripting (XSS) in Popup Maker <=3D 1.23.=
0 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28177" target=3D= "_blank" rel=3D"noopener">CVE-2026-28177</a></td>
</tr>

<td class=3D"vendor-product">Data443 Risk Mitigation, Inc.--Tracking Code M= anager</td>
<td>Unauthenticated Cross Site Request Forgery (CSRF) in Tracking Code Mana= ger <=3D 2.6.0 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28172" target=3D= "_blank" rel=3D"noopener">CVE-2026-28172</a></td>
</tr>

<td class=3D"vendor-product">DataLinkDC--Dinky</td>
<td>Dinky's POST /download/uploadFromRsByLocal handler passes the caller-su= pplied path parameter directly to new File(path) and file.transferTo(dest) = with no path validation. The route is marked @SaIgnore and /download/** is = excluded from the Sa-Token interceptor, so the only guard is a header equal= ity check against a dinkyToken value whose default (efda1551-7958-4e0f-80a8= -dfd107df3e38) is hardcoded in source and shipped to every deployment. Anyo=
ne who can reach Dinky's HTTP port (8888 by default) and supplies the hardc= oded token can write arbitrary files as the Dinky service account. The defa= ult Docker image runs on 8888 with no proxy or authentication and chmod 777=
on /opt/dinky, so the application's own classpath, launch scripts, and sta= tic assets are writable. Demonstrated impact: overwriting /opt/dinky/config= /static/index.html served attacker JavaScript to admin browsers immediately=
, and writing /opt/dinky/org/dinky/Dinky.class executed attacker code as th=
e Dinky service account at the next JVM start via a classpath-shadow launch=
ed by script/bin/auto.sh. Writes are uid 9999 (flink), not root, so /etc, /= root, /home, and /usr are refused. Affects Dinky v1.2.5 (the current releas=
e) and the development branch, where the code is byte-identical.</td> <td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70558" target=3D= "_blank" rel=3D"noopener">CVE-2026-70558</a></td>
</tr>

<td class=3D"vendor-product">DataLinkDC--Dinky</td>
<td>Dinky's SysConfigController.getAll() handler for GET /api/sysConfig/get= All carries a method-level @SaIgnore annotation that short-circuits the cla= ss-level @SaCheckLogin, so the Sa-Token interceptor lets the request throug=
h with no session or role check. Any remote unauthenticated caller who can = reach the Dinky HTTP port (8888 by default) receives the full live system c= onfiguration (54 entries on a stock v1.2.5 install) with one parameterless = GET. Only one credential field (sys.maven.settings.repositoryPassword) has =
a desensitization handler wired; the other credential-bearing fields (sys.e= nv.settings.dinkyToken, sys.ldap.settings.userPassword, sys.resource.settin= gs.oss.accessKey and secretKey, and sys.dolphinscheduler.settings.token) re= turn in cleartext. A bare install leaks the shipped defaults, including the=
hardcoded dinkyToken efda1551-7958-4e0f-80a8-dfd107df3e38 and minioadmin/m= inioadmin OSS keys; once an operator configures LDAP, object storage, or Do= lphinScheduler through the Settings Center, those live third-party credenti= als leak from the same endpoint. Because dinkyToken is the sole gate on the=
sibling POST /download/uploadFromRsByLocal arbitrary file write, this disc= losure defeats token rotation as a mitigation for that vulnerability. Affec=
ts Dinky v1.2.5 (the current release, 2025-11-05) and the development branc=
h (dev HEAD 63b5a5a), where the affected code is byte-identical.</td> <td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70559" target=3D= "_blank" rel=3D"noopener">CVE-2026-70559</a></td>
</tr>

<td class=3D"vendor-product">David Lingren--Media LIbrary Assistant</td>

<td>Unauthenticated Cross Site Scripting (XSS) in Media LIbrary Assistant &= lt;=3D 3.38 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61963" target=3D= "_blank" rel=3D"noopener">CVE-2026-61963</a></td>
</tr>

<td class=3D"vendor-product">debevv--nanoMODBUS</td>
<td>nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbu=
s server-side handle_read_file_record() function (FC 0x14, Read File Record=
) in nanomodbus.c. The function validates that the total request size does = not exceed 245 bytes and that each sub-request's record_length is at most 1= 24, but it never validates the CUMULATIVE response size across all sub-requ= ests before processing them. The accumulator response_data_size is declared=
as uint8_t and is incremented by 2 + record_length*2 for each of up to 35 = sub-requests; with 35 sub-requests of record_length=3D124, the cumulative d= emand is 8750 bytes, which overflows the uint8_t accumulator. A subsequent = loop then calls get_n(), an internal function with no bounds checking, once=
per sub-request to obtain a pointer into the 260-byte msg.buf receive buff=
er and advances the internal buf_idx by up to 248 bytes per call; swap_regs=
() then writes to that pointer unconditionally. A single crafted FC 0x14 re= quest from an unauthenticated network client can cause up to ~8490 bytes to=
be written out of bounds past the 260-byte buffer, corrupting adjacent mem= ory in the server process and leading to denial of service or potential rem= ote code execution, particularly on embedded/bare-metal targets without mem= ory protection.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71254" target=3D= "_blank" rel=3D"noopener">CVE-2026-71254</a></td>
</tr>

<td class=3D"vendor-product">debevv--nanoMODBUS</td>
<td>nanoMODBUS through v1.23.0 contains an out-of-bounds stack read leading=
to a wild-pointer write in nmbs_read_device_identification_basic() / recv_= read_device_identification_res() in nanomodbus.c. A fixed 3-element stack a= rray order[3] =3D {0,1,2} maps object IDs to buffer indices. The server-sup= plied object_id field (0-255, read directly from the wire) is used without = any bounds check as buf_index =3D order[object_id]. When a malicious Modbus=
server sends a Read Device Identification response with object_id >=3D =
3, this reads an out-of-bounds/garbage byte from the stack adjacent to orde= r[], which is then used as an index into a 3-element buffers[] array of cha=
r* pointers. The resulting wild pointer is passed to strncpy() as the desti= nation, causing an arbitrary-address write with server-controlled data.</td=

<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71256" target=3D= "_blank" rel=3D"noopener">CVE-2026-71256</a></td>
</tr>

<td class=3D"vendor-product">debevv--nanoMODBUS</td>
<td>nanoMODBUS through v1.23.0 contains an out-of-bounds write in the Modbu=
s client-side recv_read_device_identification_res() function (FC 0x2B/MEI 0= x0E, Read Device Identification) in nanomodbus.c. The server-supplied objec= t_length field (0-246) is validated only against the remaining PDU size (re= s_size_left) and is never validated against the caller-supplied buffers_len= gth parameter. After copying data with strncpy(buffers_out[buf_index], str,=
buffers_length), the code unconditionally writes a NUL terminator at buffe= rs_out[buf_index][object_length]. When a malicious or compromised Modbus se= rver sends a response with object_length greater than or equal to the clien= t's buffers_length, this NUL write lands past the end of the caller-provide=
d buffer, corrupting adjacent stack or heap memory on the client.</td> <td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71255" target=3D= "_blank" rel=3D"noopener">CVE-2026-71255</a></td>
</tr>

<td class=3D"vendor-product">decidim--decidim</td>
<td>Decidim is a participatory democracy framework. Prior to 0.31.5 and in = 0.32.0.rc1 before 0.32.0.rc2, JWT-backed API authentication is not bound to=
the organization selected by the current host, allowing a JWT issued for o=
ne tenant to be replayed against another tenant's API to read participantDe= tails data and reach the proposal.answer mutation path. This issue is fixed=
in versions 0.31.5 and 0.32.0.rc2.</td>
<td>2026-08-06</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45414" target=3D= "_blank" rel=3D"noopener">CVE-2026-45414</a></td>
</tr>

<td class=3D"vendor-product">decidim--decidim</td>
<td>Decidim is a participatory democracy framework. Prior to 0.30.9, from 0= .31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the identity-docu= ment verification admin UI embeds verification_attachment blobs through reu= sable signed Active Storage disk URLs, allowing anyone who obtains a URL to=
download the scanned document without an authenticated Decidim session unt=
il the signature expires. Verification-document images are rendered with va= riant_url(...), which produces signed /rails/active_storage/disk/... links = instead of routing the file through an authorization-checking controller. B= ecause Decidim configures Active Storage service URLs to remain valid for s= even days, the URL itself becomes the credential for that period. The affec= ted files are verification_attachment blobs on Decidim::Authorization, and = the admin review pages embed those signed URLs directly into the HTML for p= ending and confirmation views. This issue is fixed in versions 0.30.9, 0.31= .5, and 0.32.0.rc2.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45378" target=3D= "_blank" rel=3D"noopener">CVE-2026-45378</a></td>
</tr>

<td class=3D"vendor-product">DeepCool--DisplayService</td>
<td>A vulnerability was detected in DeepCool DisplayService 1.2.12. This is= sue affects some unknown processing of the file C:\DeepCool\resources\servi= ce\x64\DeepCoolDisplayService.exe. Performing a manipulation results in imp= roper access controls. The attack must be initiated from a local position. = The exploit is now public and may be used.</td>
<td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19192" target=3D= "_blank" rel=3D"noopener">CVE-2026-19192</a></td>
</tr>

<td class=3D"vendor-product">Dell--Display and Peripheral Manager (DDPM Mac= )</td>
<td>Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0= .1005, contain an Improper Access Control vulnerability. A low privileged a= ttacker with local access could potentially exploit this vulnerability, lea= ding to Elevation of privileges and arbitrary code execution.</td>

<td>2026-08-03</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59912" target=3D= "_blank" rel=3D"noopener">CVE-2026-59912</a></td>
</tr>

<td class=3D"vendor-product">Dell--Display and Peripheral Manager (DDPM Mac= )</td>
<td>Dell Display and Peripheral Manager (DDPM Mac), versions prior to 2.3.0= .1005, contain a Missing Authentication for Critical Function vulnerability=
. A low privileged attacker with local access could potentially exploit thi=
s vulnerability, leading to Elevation of privileges.</td>
<td>2026-08-03</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59913" target=3D= "_blank" rel=3D"noopener">CVE-2026-59913</a></td>
</tr>

<td class=3D"vendor-product">Dell--OpenManage Server Administrator Managed = Node (Patch) for Windows</td>
<td>Dell OpenManage Server Administrator, versions prior to 11.1.0.2, conta= ins an Improper Authentication vulnerability. An unauthenticated attacker w= ith remote access could potentially exploit this vulnerability, leading to = Unauthorized access.</td>
<td>2026-08-07</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56793" target=3D= "_blank" rel=3D"noopener">CVE-2026-56793</a></td>
</tr>

<td class=3D"vendor-product">Dell--Virtual Storage Integrator for VMware vS= phere Client</td>
<td>Dell Virtual Storage Integrator for VMware vSphere Client, versions pri=
or to 10.11.1.0, contain(s) a Sensitive Information Disclosure vulnerabilit=
y. An unauthenticated remote attacker could potentially exploit this vulner= ability, leading to information disclosure and session hijacking. This vuln= erability is considered critical as it allows an unauthenticated attacker t=
o obtain active session credentials and fully impersonate authenticated use= rs, including administrators. Dell recommends customers to upgrade at the e= arliest opportunity.</td>
<td>2026-08-06</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54489" target=3D= "_blank" rel=3D"noopener">CVE-2026-54489</a></td>
</tr>

<td class=3D"vendor-product">Dell--Virtual Storage Integrator for VMware vS= phere Client</td>
<td>Dell Virtual Storage Integrator for VMware vSphere Client, versions pri=
or to 10.11.1.0, contain(s) an OS Command Injection vulnerability in the IA=
PI component. A remote unauthenticated attacker could potentially exploit t= his vulnerability, leading to the execution of arbitrary OS commands on the=
application's underlying operating system with root privileges. Exploitati=
on may lead to a complete system takeover by an attacker. This vulnerabilit=
y is considered critical as it allows an unauthenticated remote attacker to=
achieve arbitrary code execution as root, potentially compromising the ent= ire VSI deployment and underlying infrastructure. Dell recommends customers=
to upgrade at the earliest opportunity.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67261" target=3D= "_blank" rel=3D"noopener">CVE-2026-67261</a></td>
</tr>

<td class=3D"vendor-product">devitemsllc--ShopLentor All-in-One WooCommerce=
Growth & Store Enhancement Plugin</td>
<td>The ShopLentor plugin for WordPress is vulnerable to arbitrary function=
execution via the woolentoropt/v1/custom-action REST API endpoint in all v= ersions up to, and including, 3.3.7. This is due to the handle_action() met= hod passing user-supplied input directly to call_user_func() without an all= owlist of permitted callbacks. This makes it possible for authenticated att= ackers, with Administrator-level access and above, to execute arbitrary PHP=
callable functions via the 'callback' parameter.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6020" target=3D"= _blank" rel=3D"noopener">CVE-2026-6020</a></td>
</tr>

<td class=3D"vendor-product">dgraph-io--dgraph</td>
<td>Dgraph is an open source distributed GraphQL database. Prior to 25.3.8,=
maybeQuoteArg in graphql/resolve/query_rewriter.go passes regexp filter st= rings into generated DQL without quoting or validating the /pattern/flags f= orm, allowing crafted GraphQL query or mutation filters to inject DQL opera= tors, disclose unintended nodes, or expand modification and deletion target=
s. This issue is fixed in version 25.3.8.</td>
<td>2026-08-06</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63637" target=3D= "_blank" rel=3D"noopener">CVE-2026-63637</a></td>
</tr>

<td class=3D"vendor-product">dhax--go-base</td>
<td>go-base is a Go RESTful API Boilerplate template with JWT Authenticatio=
n, backed by PostgreSQL. In versions prior to 2026-05-18, the JWT signing s= ecret is hardcoded to the known string "random", letting any attacker who r= eads the public repository forge tokens for arbitrary users, including admi=
n roles, and completely bypass authentication on all protected endpoints. T= his value is set in two places: the dev.env template (line 10) and a progra= mmatic fallback in cmd/serve.go (line 35), so the application uses it even = when no .env file is present. The original mitigation in auth/jwt/tokenauth= .go (lines 22 to 25) only caught the exact string "random", letting other w= eak secrets through, and replaced it with an in-memory key that was not per= sisted, invalidating all tokens on every restart and effectively causing a = denial-of-service. This issue has been fixed in version 2026-05-18.</td> <td>2026-08-03</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48031" target=3D= "_blank" rel=3D"noopener">CVE-2026-48031</a></td>
</tr>

<td class=3D"vendor-product">DjangoCRM--django-crm</td>
<td>DjangoCRM ships with its Django SECRET_KEY hardcoded directly in the co= mmitted webcrm/settings.py rather than read from an environment variable. S= ince this key is used for session signing, CSRF token generation, and passw= ord reset tokens, anyone who reads the public repository can forge valid se= ssion cookies (including for the superadmin account), forge CSRF tokens, an=
d forge password reset tokens, achieving full account takeover. The reposit= ory also ships with DEBUG=3DTrue as the default, causing error pages to lea=
k database credentials, email credentials, OAuth data, and internal file pa= ths.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71238" target=3D= "_blank" rel=3D"noopener">CVE-2026-71238</a></td>
</tr>

<td class=3D"vendor-product">DjangoCRM--django-crm</td>
<td>DjangoCRM's massmail module renders user-controlled EmlMessage fields (= subject, content) through Django's Template() constructor with no sanitizat= ion, in at least three locations: message_previews.py builds an f-string em= bedding message.subject/message.content directly into a Template() call; em= ail_creators.py passes eml_message.subject directly as a template string to=
Template(); and helpers.py contains the same f-string interpolation patter=
n. An authenticated user with mass-mail message edit rights can inject Djan=
go template syntax ({{ }} / {% %}) that executes at render time, enabling d= isclosure of other users' data and password hashes via request context vari= ables, CSRF token forgery, and inclusion of arbitrary registered templates.= </td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71239" target=3D= "_blank" rel=3D"noopener">CVE-2026-71239</a></td>
</tr>

<td class=3D"vendor-product">djangoproject--Django</td>
<td>An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.=
8. GeoDjango spatial lookups optimistically parse the right-hand-side value=
as a raster by passing it to the `django.contrib.gis.gdal.GDALRaster` cons= tructor. Any value used in a spatial lookup against a `GeometryField` or `R= asterField` reaches this constructor, including untrusted input, for exampl=
e a spatial-field filter submitted through the Django admin changelist quer=
y string by a staff user with view permission. A `dict`, or a `str` holding=
its JSON representation, is opened in write mode regardless of the constru= ctor's `write=3DFalse` default, allowing a file with an attacker-chosen nam=
e and contents to be written through a file-backed GDAL driver. Any other `= str` is treated as a datasource, allowing an outbound network request throu=
gh a GDAL virtual filesystem handler. Writing a file to a location later im= ported by the application can result in remote code execution. Earlier, uns= upported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated=
and may also be affected. Django would like to thank Bence Nagy, localhost= -detect, and kimchunbok_ for reporting this issue.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15307" target=3D= "_blank" rel=3D"noopener">CVE-2026-15307</a></td>
</tr>

<td class=3D"vendor-product">documize--community</td>
<td>Documize Community's attachment download route (domain/attachment/endpo= int.go, Download function, registered via AddPublic with no auth middleware=
) accepts a `secure` query parameter and grants access whenever the paramet=
er is simply non-empty (len(secureToken) > 0), without comparing it to a=
ny server-stored value. Any non-empty string, such as ?secure=3Dx, bypasses=
authentication entirely and allows downloading any organization's attachme= nts. Sibling handlers in the same file (togglePublish, delete) correctly en= force session-based authorization, confirming this is an inconsistency rath=
er than intended design.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71234" target=3D= "_blank" rel=3D"noopener">CVE-2026-71234</a></td>
</tr>

<td class=3D"vendor-product">dokaninc--Dokan: AI Powered WooCommerce Multiv= endor Marketplace Solution Build Your Own Amazon, eBay, Etsy</td>
<td>The Dokan plugin for WordPress is vulnerable to Privilege Escalation in=
all versions up to, and including, 5.0.1. This is due to a missing authori= zation check in the `CustomersController` REST controller (`includes/REST/C= ustomersController.php`), which re-registers WooCommerce's customer CRUD ro= utes under the `/dokan/v1/customers/` namespace and replaces WooCommerce's = native `manage_woocommerce` capability check with a vendor-only check that = inspects the **requesting** user's role and never validates the **target** = user. This makes it possible for authenticated attackers with Vendor/Seller= -level access and above to read, modify, or delete any WordPress user - inc= luding administrators - via `GET`/`PUT`/`DELETE` requests against `/wp-json= /dokan/v1/customers/{id}`. Setting the `password` parameter on an administr= ator's record yields a full site takeover.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8761" target=3D"= _blank" rel=3D"noopener">CVE-2026-8761</a></td>
</tr>

<td class=3D"vendor-product">domoticz--domoticz</td>
<td>Domoticz's MochadTCP::MatchLine() handler for MOCHAD_RFSEC messages (ha= rdware/MochadTCP.cpp) copies network-received data from the up-to-1028-byte=
m_mochadbuffer into a fixed 50-byte stack buffer tempRFSECbuf using strcpy=
() with no length check, across three separate code branches (DS10A/KR10A/M= S10A device types). An attacker on the local network segment able to reach = the Mochad TCP bridge (default port 1099, no authentication) can send a cra= fted packet that overflows tempRFSECbuf by up to several hundred bytes, cor= rupting the Domoticz worker thread's stack.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71265" target=3D= "_blank" rel=3D"noopener">CVE-2026-71265</a></td>
</tr>

<td class=3D"vendor-product">dresende--node-sql-query</td>
<td>A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.= 27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/= SelectQuery.build in the library lib/Select.js of the component Request Par= ameter Handler. Performing a manipulation results in sql injection. It is p= ossible to initiate the attack remotely. The exploit has been made public a=
nd could be used. Upgrading to version 0.1.29 addresses this issue. The pat=
ch is named 3414c42f6de89826fa1f5f36f6139d1e6552778e. Upgrading the affecte=
d component is recommended.</td>
<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19351" target=3D= "_blank" rel=3D"noopener">CVE-2026-19351</a></td>
</tr>

<td class=3D"vendor-product">dromara--lamp-cloud</td>
<td>LAMP Rapid Development Platform through 5.6.2, fixed in commit 84b0c27,=
contains a remote code execution vulnerability in GlueFactory that execute=
s unsandboxed Groovy scripts from database template fields without compilat= ion restrictions or whitelisting. Attackers can write or influence the scri=
pt field via message template endpoints to execute arbitrary Groovy code an=
d OS commands on the backend server.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69100" target=3D= "_blank" rel=3D"noopener">CVE-2026-69100</a></td>
</tr>

<td class=3D"vendor-product">E2Pdf--e2pdf</td>
<td>Unauthenticated Local File Inclusion in e2pdf <=3D 1.32.40 versions.= </td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66710" target=3D= "_blank" rel=3D"noopener">CVE-2026-66710</a></td>
</tr>

<td class=3D"vendor-product">e4jvikwp--VikAppointments Services Booking Cal= endar</td>
<td>VikAppointments Service Booking Calendar wordpress plugin is vulnerable=
to unauthenticated SQL injection due to one of the parameters that control=
s how the public reviews list is sorted is taken from the incoming request = and used to build a database query without proper validation or sanitizatio=
n. Because this value is placed directly into the query, an attacker who is=
not logged in can inject arbitrary SQL through a normal booking page and r= ead data from the site's database - including sensitive information such as=
WordPress user credentials. No authentication or special privileges are re= quired</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15918" target=3D= "_blank" rel=3D"noopener">CVE-2026-15918</a></td>
</tr>

<td class=3D"vendor-product">e4jvikwp--VikRentItems Flexible Rental Managem= ent System</td>
<td>The VikRentItems - Flexible Rental Management System plugin for WordPre=
ss is vulnerable to Stored Cross-Site Scripting via the customer email fiel=
d of the booking checkout form in versions up to, and including, 1.2.1. Thi=
s is due to insufficient input sanitization and output escaping in the save= order() function, which stores the raw email value via VikRequest::getStrin= g() (applying only sanitize_text_field(), which does not neutralize HTML at= tribute-breaking characters such as double quotes), and in the editorder te= mplate which echoes the stored custmail value into an HTML input element's = value attribute without esc_attr(). This makes it possible for unauthentica= ted attackers to inject arbitrary web scripts in pages that will execute wh= enever a user accesses an injected page.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16143" target=3D= "_blank" rel=3D"noopener">CVE-2026-16143</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse GlassFish</td>

<td>In Eclipse GlassFish versions 8.0.x before 8.0.4, CSRF + SSRF in Downlo= adServlet ContentSources leaks the admin `gfresttoken` to attacker-controll=
ed host if the victim is authenticated into the Admin Console - gt; full un= authenticated takeover of Eclipse GlassFish domain until the token expires.= </td>
<td>2026-08-06</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12605" target=3D= "_blank" rel=3D"noopener">CVE-2026-12605</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Theia</td>
<td>In Eclipse Theia versions up to and including 1.73.1, the `@theia/files= ystem` backend binds `POST /file-upload` in every filesystem-enabled deploy= ment. The handler takes an attacker-supplied absolute path from the multipa=
rt `uri` field and calls `fs.move(tmp, target, { overwrite: true })` with n=
o workspace confinement and no authentication. In browser (non-Electron) de= ployments the connection token is enforced only on WebSocket upgrades; the = HTTP middleware in `@theia/core` re-issues the cookie and calls `next()` wi= thout rejecting tokenless HTTP requests. Because `multipart/form-data` is a=
CORS-safelisted request type, a cross-origin web page can trigger the writ=
e with no preflight and no credentials, resulting in an unauthenticated arb= itrary file write outside the workspace to any absolute path the backend pr= ocess can write. This can escalate to remote code execution, for example by=
overwriting a startup-executed file such as `~/.bashrc`. Electron mode use=
s a separate `ElectronSecurityToken` and is not affected via this path.</td=

<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-60009" target=3D= "_blank" rel=3D"noopener">CVE-2026-60009</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Theia</td>
<td>In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@t= heia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTT=
P endpoint, which resolves the requested file path with `path.resolve(local= Path, filePath)` without verifying that the resolved path stays within the = plugin's directory. An unauthenticated network attacker can send percent-en= coded `../` sequences (`%2e%2e%2f`) that decode into the path parameter and=
escape the plugin directory, allowing arbitrary files readable by the Thei=
a backend process to be retrieved. Plugin IDs are derived deterministically=
from a plugin's publisher and name, so built-in plugins serve as reliable = anchors that require no prior knowledge of the target system.</td> <td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12609" target=3D= "_blank" rel=3D"noopener">CVE-2026-12609</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Theia</td>
<td>In Eclipse Theia versions up to and including 1.73.1, the `@theia/files= ystem` backend exposes HTTP file-download endpoints (`GET /file`, `GET /fil= es/`, `PUT /files/`) that convert a client-supplied URI directly to a files= ystem path and stream the file, without confining it to the workspace or an=
y allow-listed root. In browser (non-Electron) deployments the connection t= oken is enforced only on WebSocket upgrades; the HTTP middleware in `@theia= /core` re-issues the cookie and calls `next()` without rejecting tokenless = HTTP requests, so these endpoints are reachable without a valid token. As a=
result an unauthenticated client can read any file readable by the backend=
process, including files outside the opened workspace (for example `/etc/h= osts`, SSH keys, or tokens). Electron mode uses a separate `ElectronSecurit= yToken` and is not affected via this path.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61891" target=3D= "_blank" rel=3D"noopener">CVE-2026-61891</a></td>
</tr>

<td class=3D"vendor-product">Efstratios Goudelis--Ground Station</td> <td>Ground Station prior to=C2=A00.6.0 contains an unauthenticated database= -destruction and arbitrary-data-injection vulnerability in the Socket.IO se= rver's database_backup event handler that allows any unauthenticated networ=
k peer to wipe or replace the entire SQLite database by sending a single fu= ll_restore command with a caller-supplied SQL blob. Attackers can connect t=
o the Socket.IO server on port 7000 without credentials due to disabled aut= hentication enforcement and a wildcard CORS policy, then emit the database_= backup event to drop every existing table and recreate the database from at= tacker-controlled CREATE TABLE and INSERT INTO statements executed via raw = exec_driver_sql, permanently destroying all satellite records, orbital sour= ces, hardware configurations, and observation schedules, or planting fabric= ated orbital-source URLs and observation entries that redirect the ground s= tation to attacker-controlled servers on the next scheduled sync.</td> <td>2026-08-06</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53984" target=3D= "_blank" rel=3D"noopener">CVE-2026-53984</a></td>
</tr>

<td class=3D"vendor-product">Efstratios Goudelis--Ground Station</td> <td>Ground Station prior to=C2=A00.6.0=C2=A0contains an unauthenticated bli=
nd server-side request forgery vulnerability in the orbital-source configur= ation path that allows any unauthenticated Socket.IO client to cause the gr= ound-station process to issue outbound HTTP requests to attacker-chosen des= tinations. Attackers can connect to the Socket.IO server on port 7000 witho=
ut credentials due to disabled authentication enforcement and a wildcard CO=
RS policy, then submit a data_submission event with submit-orbital-sources = action to persist an attacker-supplied URL in the database, then trigger an=
orbital sync via the equally unauthenticated background_task:start event. = The URL is stored with no scheme allowlist, no host validation, and no reje= ction of loopback, RFC1918, or link-local (cloud instance metadata at 169.2= 54.169.254) addresses, and is passed directly to requests.get in _fetch_htt= p_3le and _fetch_http_omm in backend/tlesync/source_adapters.py. HTTP statu=
s codes and error messages from the outbound request are emitted in the orb= ital_sync_state Socket.IO event to all connected clients, providing a servi= ceable oracle for interpreting internal-service and cloud-metadata response=
s even though the raw response body is not directly leaked. Because the mal= icious source persists in the database across restarts and re-fires every 2=
4 hours on the scheduled sync cycle, the primitive gives durable long-term = SSRF without the attacker needing to remain connected.</td>
<td>2026-08-06</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53983" target=3D= "_blank" rel=3D"noopener">CVE-2026-53983</a></td>
</tr>

<td class=3D"vendor-product">Efstratios Goudelis--Ground Station</td> <td>Ground Station prior to 0.6.0=C2=A0contains an unauthenticated denial-o= f-service vulnerability in the Socket.IO server's service_control event han= dler that allows any unauthenticated network peer to forcibly terminate the=
ground-station process by sending a single restart_service command. Attack= ers can connect to the Socket.IO server on port 7000 without credentials du=
e to disabled authentication enforcement and a wildcard CORS policy, then e= mit the service_control event to terminate all active satellite-tracking se= ssions, SDR recording pipelines, demodulators, decoders, and rotator contro= llers, with repeated triggering possible in Docker deployments to create a = persistent denial-of-service condition.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53985" target=3D= "_blank" rel=3D"noopener">CVE-2026-53985</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.= 0-beta.5, apps that expose Promise-returning functions to web content via c= ontextBridge may be vulnerable to a context isolation bypass. Untrusted web=
content could obtain access to the isolated preload world and, through it,=
every capability the preload script has. In renderers without a sandbox, o=
r with nodeIntegration enabled, this may escalate to Node.js access. Apps a=
re affected if they expose Promise-returning functions via contextBridge, t=
he standard pattern for wrapping ipcRenderer.invoke, in windows that load u= ntrusted content. This issue is fixed in versions 39.8.9, 40.9.2, 41.2.2, a=
nd 42.0.0-beta.5.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70601" target=3D= "_blank" rel=3D"noopener">CVE-2026-70601</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.3, 41.4.0, and 42.0= .0, a custom scheme registered with supportFetchAPI: true but without corsE= nabled: true was not subject to CORS enforcement. A page loaded from a remo=
te origin could therefore fetch() or XMLHttpRequest that scheme cross-origi=
n and read the full response body, rather than the read being blocked. Apps=
that serve sensitive data from such a scheme and load remote or untrusted = content in a renderer are affected. This issue is fixed in versions 39.8.10=
, 40.9.3, 41.4.0, and 42.0.0.</td>
<td>2026-08-05</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70604" target=3D= "_blank" rel=3D"noopener">CVE-2026-70604</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.10, 41.10.3, and 42.0.1, a s= andboxed iframe without the allow-popups keyword could still open a new win= dow or trigger setWindowOpenHandler with no user interaction because new-wi= ndow navigations taking the OpenURL path did not apply the iframe sandbox p= opup restriction. Apps that embed untrusted content in sandboxed iframes an=
d rely on the absence of allow-popups to prevent window creation are affect= ed, while apps that deny window creation in setWindowOpenHandler or do not = embed untrusted content in sandboxed iframes are not affected. This issue i=
s fixed in 39.8.10, 41.10.3, and 42.0.1.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70608" target=3D= "_blank" rel=3D"noopener">CVE-2026-70608</a></td>
</tr>

<td class=3D"vendor-product">emlog--emlog</td>
<td>Emlog Pro through 2.6.23 contains a disabled TLS certificate validation=
vulnerability in include/service/ai.php that allows network-adjacent attac= kers to intercept outbound HTTPS requests to configured LLM providers by pr= esenting arbitrary TLS certificates, as CURLOPT_SSL_VERIFYPEER and CURLOPT_= SSL_VERIFYHOST are unconditionally disabled across sendStream(), sendImageR= equest(), send(), and fetchSearchHtml() with no option to re-enable verific= ation. Attackers can perform man-in-the-middle interception to extract Auth= orization Bearer API keys from every AI request and inject crafted AI respo= nses that may be acted upon by the tool-call execution pipeline, including = the query_database and update_config tool handlers.</td>
<td>2026-08-03</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67598" target=3D= "_blank" rel=3D"noopener">CVE-2026-67598</a></td>
</tr>

<td class=3D"vendor-product">ESAFENET--CDG</td>
<td>A vulnerability was identified in ESAFENET CDG up to 20260615. Affected=
is an unknown function of the file /CDGServer3/ukey/usbkey;logindojojs. Su=
ch manipulation of the argument keyid leads to sql injection. The attack ma=
y be performed from remote. The exploit is publicly available and might be = used. The vendor was contacted early about this disclosure but did not resp= ond in any way.</td>
<td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18859" target=3D= "_blank" rel=3D"noopener">CVE-2026-18859</a></td>
</tr>

<td class=3D"vendor-product">esphome--esphome</td>
<td>ESPHome through 2026.7.0-dev contains an operator-precedence bug in the=
cv.url() validator in esphome/config_validation.py: `if parsed.scheme and = parsed.netloc or parsed.scheme =3D=3D "file": return parsed.geturl()`. Beca= use `and` binds tighter than `or`, any file: URI passes validation regardle=
ss of netloc. This validator gates the `url:` field of the external_compone= nts YAML directive's git source schema, which is passed to `git clone` (git=
supports file:// natively). A crafted `external_components` block with `ur=
l: "file:///attacker/repo"` clones an attacker-controlled local path, which=
is then added to Python's import machinery via ESPHome's component loader,=
executing arbitrary Python code when the YAML configuration is processed (= e.g. via `esphome config`/`esphome run`).</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71259" target=3D= "_blank" rel=3D"noopener">CVE-2026-71259</a></td>
</tr>

<td class=3D"vendor-product">Eukaryot--sonic3air</td>
<td>Sonic 3 A.I.R. before commit 2492d18 contains an unbounded memory alloc= ation vulnerability in ReceivedPacketCache::enqueuePacket() that allows una= uthenticated remote attackers to crash the server process by sending a craf= ted UDP packet with mUniquePacketID set to the maximum uint32 value. The mU= niquePacketID field is read directly from the UDP wire-format packet header=
without bounds checking, causing the server to allocate one CacheItem per = missing packet ID gap, exhausting available host memory and propagating an = uncaught std::bad_alloc exception to std::terminate().</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66733" target=3D= "_blank" rel=3D"noopener">CVE-2026-66733</a></td>
</tr>

<td class=3D"vendor-product">Facebook--Facebook for WooCommerce</td> <td>Unauthenticated Cross Site Scripting (XSS) in Facebook for WooCommerce = <=3D 3.7.5 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66707" target=3D= "_blank" rel=3D"noopener">CVE-2026-66707</a></td>
</tr>

<td class=3D"vendor-product">Facebook--Facebook for WordPress</td> <td>Unauthenticated Cross Site Scripting (XSS) in Facebook for WordPress &l= t;=3D 5.2.1 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66705" target=3D= "_blank" rel=3D"noopener">CVE-2026-66705</a></td>
</tr>

<td class=3D"vendor-product">facelessuser--pymdown-extensions</td> <td>pymdown-extensions is a collection of extensions for the Python Markdow=
n library. In versions up to and including 11.0, four inline processors (ca= ret, tilde, betterem, and magiclink) use regular expressions whose content = groups can partition a run of delimiter characters in exponentially many wa= ys, causing catastrophic backtracking. As a result, a single untrusted Mark= down line under 50 bytes rendered with markdown.markdown() in each extensio= n's default configuration drives the rendering thread into unbounded CPU us= age that grows exponentially with input length, enabling an unauthenticated=
remote attacker who can submit Markdown to cause denial of service. The ex= posure is concrete for web applications that render user-supplied Markdown = (comments, wikis, issue bodies, live preview), including any app using pymd= ownx.extra which bundles the vulnerable betterem default, as well as hosted=
docs/CI systems that build untrusted Markdown. The issue has been fixed in=
version 11.0.1.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67422" target=3D= "_blank" rel=3D"noopener">CVE-2026-67422</a></td>
</tr>

<td class=3D"vendor-product">FFmpeg--FFmpeg</td>
<td>FFmpeg versions from 0.5 up to, but not including, 9.0 contain a signed=
integer overflow vulnerability in the DVB subtitle parser in libavcodec/dv= bsub_parser.c that allows attackers to trigger a heap buffer overflow by su= pplying a crafted WTV file. The overflow causes the bounds-check guard expr= ession to wrap to INT_MIN, bypassing the PARSE_BUF_SIZE comparison and invo= king memcpy() with attacker-controlled data into a heap buffer, resulting i=
n an out-of-bounds heap write and potential memory corruption or code execu= tion.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70628" target=3D= "_blank" rel=3D"noopener">CVE-2026-70628</a></td>
</tr>

<td class=3D"vendor-product">FFmpeg--FFmpeg</td>
<td>FFmpeg versions from 4.4 up to, but not including, 9.0 contain an out-o= f-bounds heap write vulnerability in the native GoPro CineForm HD (CFHD) de= coder that allows remote attackers to corrupt heap memory by supplying a cr= afted AVI file during stream probing. The cfhd_decode() function fails to e= nforce the non-Bayer logical output-width invariant in the transform-type-2=
reconstruction path, causing horiz_filter_clip() to write oversized 16-bit=
sample rows far beyond the allocated output frame buffer, which can be esc= alated to arbitrary code execution via overwrite of a live cleanup callback=
pointer.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70632" target=3D= "_blank" rel=3D"noopener">CVE-2026-70632</a></td>
</tr>

<td class=3D"vendor-product">Flarum--Flarum Framework</td>
<td>Flarum before 1.8.16 contains a password reset token expiry bypass vuln= erability that allows unauthenticated attackers to reuse expired password r= eset tokens by submitting them directly to the reset processing endpoint. T=
he SavePasswordController::handle() method calls PasswordToken::findOrFail(=
) without performing any expiry validation, allowing attackers to bypass th=
e 24-hour token lifetime enforced only during form rendering and change any=
account's password to gain an authenticated session.</td>

<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-39923" target=3D= "_blank" rel=3D"noopener">CVE-2026-39923</a></td>
</tr>

<td class=3D"vendor-product">fledge-iot--fledge</td>
<td>Fledge's backup-restore upload handler, upload_backup() (python/fledge/= services/core/api/backup_restore.py), takes the first extracted tar member'=
s filename (tar_file_names[0]) and builds a shell command via string format= ting: `cmd =3D "cp {} {}".format(source, backup_path); ret_code =3D os.syst= em(cmd)`. The only pre-check on the filename is a prefix/suffix match (star= tswith(backup_prefix), endswith(valid_extensions)), which a name such as `f= ledge_backup_$(id>/tmp/pwn).db` satisfies while still injecting a shell = command substitution. Because os.system() invokes a shell and no quoting (s= hlex.quote, list-form subprocess) is applied, an admin uploading a crafted = backup archive achieves arbitrary OS command execution.</td> <td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71284" target=3D= "_blank" rel=3D"noopener">CVE-2026-71284</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise through 3.1.4 contains an insecure direct object reference vuln= erability in the OpenAI Assistants integration that allows authenticated at= tackers to access credentials belonging to other workspaces by supplying an=
arbitrary credential UUID to Assistants endpoints without workspace owners= hip verification. Attackers can enumerate cross-workspace assistant metadat=
a, retrieve file and vector store listings, and upload files into victim wo= rkspaces by exploiting the missing workspace-scoped authorization check in = the credential lookup logic.</td>
<td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67622" target=3D= "_blank" rel=3D"noopener">CVE-2026-67622</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise through 3.1.4 contains a server-side request forgery vulnerabil= ity in the SSRF guard implemented in httpSecurity.ts, where the DEFAULT_DEN= Y_LIST omits the Oracle Cloud Infrastructure metadata endpoint 192.0.0.192 = and the Alibaba Cloud metadata endpoint 100.100.100.200, allowing authentic= ated attackers to force the server to issue arbitrary GET requests to cloud=
instance metadata services. Attackers can send requests to the fetch-links=
API endpoint with a crafted URL parameter, bypassing deny-list validation = including redirect-based bypasses, to reach instance metadata services and = expose instance identity data and role credentials on Oracle Cloud Infrastr= ucture or Alibaba Cloud deployments, with unauthenticated access possible w= hen URL-fetching nodes exist in public chatflows.</td>
<td>2026-08-08</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67620" target=3D= "_blank" rel=3D"noopener">CVE-2026-67620</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise through 3.1.4 contains a missing authorization vulnerability th=
at allows authenticated workspace members to perform unauthorized document = store operations by accessing unprotected mutation endpoints. Attackers hol= ding only view-level permissions can send direct HTTP requests to the upser=
t and refresh document store routes to trigger document ingestion, refresh = vector database contents, consume embedding API credits, and modify knowled=
ge bases used by downstream chatflows.</td>
<td>2026-08-06</td>
<td>7.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67621" target=3D= "_blank" rel=3D"noopener">CVE-2026-67621</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise through 3.1.4 contains an authentication bypass vulnerability t= hat allows unauthenticated attackers to access the OAuth2 credential refres=
h endpoint by exploiting prefix-based whitelist matching in the authenticat= ion middleware defined in packages/server/src/utils/constants.ts. Attackers=
can send a POST request to the oauth2-credential refresh route with a trai= ling credential identifier to bypass all authentication and authorization c= hecks, triggering unauthorized OAuth token rotation against credentials bel= onging to any workspace and potentially disrupting dependent OAuth integrat= ions. This is a bypass of CVE-2026-41273.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70636" target=3D= "_blank" rel=3D"noopener">CVE-2026-70636</a></td>
</tr>

<td class=3D"vendor-product">Foxit Software Inc.--Foxit PDF Services API</t=

<td>The PDF creation feature of Foxit PDF Services API supports referencing=
external files. Although local file access is restricted, an attacker coul=
d trigger an SSRF vulnerability by using URL redirection to bypass validati= on, leading to information disclosure.</td>
<td>2026-08-06</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18597" target=3D= "_blank" rel=3D"noopener">CVE-2026-18597</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Versions 14.96.9 and = below, and 15.0.0 through 15.71.0 have an insecure endpoint parameter that =
is vulnerable to error-based SQL Injection through lack of validation. Sens= itive information such as versioning can be retrieved. This issue is fixed =
in versions 14.96.10 and 15.72.0.</td>
<td>2026-08-07</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-58375" target=3D= "_blank" rel=3D"noopener">CVE-2025-58375</a></td>
</tr>

<td class=3D"vendor-product">Gen Digital--CCleaner</td>
<td>Link following vulnerability in the Uninstaller component in CCleaner p= rior to 7.10.1464 on Windows allows a local, low-privileged attacker to esc= alate privileges to SYSTEM via a symlink/junction created during applicatio=
n uninstallation, which CCleaner follows when deleting the application's da=
ta folder with elevated integrity.</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12410" target=3D= "_blank" rel=3D"noopener">CVE-2026-12410</a></td>
</tr>

<td class=3D"vendor-product">GeoVision Inc.--GV-AS1620 (AS-Manager)</td>

<td>The product firmware contains an embedded, static RSA private key utili= zed by the Lighttpd web server for TLS termination. Exposure of this privat=
e key allows malicious actors to breach the confidentiality and integrity o=
f HTTPS communications, enabling traffic decryption and server spoofing.</t=

<td>2026-08-04</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18753" target=3D= "_blank" rel=3D"noopener">CVE-2026-18753</a></td>
</tr>

<td class=3D"vendor-product">GeoVision Inc.--GV-AS1620 (GV-Cloud)</td>

<td>The product firmware contains an embedded, static RSA private key utili= zed by the Lighttpd web server for TLS termination. Exposure of this privat=
e key allows malicious actors to breach the confidentiality and integrity o=
f HTTPS communications, enabling traffic decryption and server spoofing.</t=

<td>2026-08-04</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18754" target=3D= "_blank" rel=3D"noopener">CVE-2026-18754</a></td>
</tr>

<td class=3D"vendor-product">GeoVision Inc.--GV-ASManager</td>
<td>A DLL hijacking vulnerability in GeoVision GV-ASManager allows a local = attacker with write access to an unsafe search directory to execute arbitra=
ry code. By placing a crafted dynamic-link library (DLL) file into the appl= ication search path prior to the legitimate library, the malicious code is = loaded and executed under the security privileges of the GV-ASManager proce= ss.</td>
<td>2026-08-04</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18755" target=3D= "_blank" rel=3D"noopener">CVE-2026-18755</a></td>
</tr>

<td class=3D"vendor-product">getgrav--grav</td>
<td>Grav CMS versions 2.0.7 through 2.0.10 fail to validate fully-qualified=
static method calls (Class::method) in blueprint dynamic-field directives = because Blueprint::isSafeDynamicCall() only applies its dangerous-callable = denylist to strings that do not contain '::'. An account with only page-edi= ting rights (admin.pages, not super-admin or admin.pages_twig) can plant a = directive in a page's form-field frontmatter that invokes an arbitrary publ=
ic static PHP method with attacker-controlled arguments. Using built-in gad= get methods this allows reading of any server-readable file (disclosed to a= nonymous visitors of the crafted page) and arbitrary creation/copying of fi= les and directories under the web-server account. Fixed in 2.0.11.</td> <td>2026-08-03</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69088" target=3D= "_blank" rel=3D"noopener">CVE-2026-69088</a></td>
</tr>

<td class=3D"vendor-product">getgrav--grav</td>
<td>Grav CMS 2.0.10 contains a path traversal vulnerability in ImageMedium:= :watermark(), which passes its unsanitized $image argument to RocketTheme\T= oolbox\ResourceLocator\UniformResourceLocator::findResource(). Because the = file:// scheme branch only lexically collapses '..' segments without a real= path/containment check, an editor authoring Markdown image syntax with trav= ersal sequences can cause arbitrary image files outside Grav's media sandbo=
x to be composited into a carrier image, which is then cached and served fr=
om a public, unauthenticated URL - disclosing those files to anonymous visi= tors.</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69089" target=3D= "_blank" rel=3D"noopener">CVE-2026-69089</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b4882 through b9058 contain a heap buffer overflow vul= nerability in the KV cache state restore path where the state_read_data() f= unction computes write size without overflow checking, allowing attackers w= ith write access to the slot_save_path directory to corrupt heap memory. At= tackers can craft malicious state files where cell_count multiplication ove= rflows or exceeds tensor buffer allocation to write attacker-controlled byt=
es past buffer boundaries, potentially resulting in heap metadata corruptio=
n, model weight corruption, or arbitrary code execution via function pointe=
r overwrite.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43629" target=3D= "_blank" rel=3D"noopener">CVE-2026-43629</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b7492 through the latest b9060 contains a use-after-fr=
ee vulnerability in the vocab pointer of llama-server when the --sleep-idle= -seconds feature is enabled, allowing unauthenticated remote attackers to e= xecute arbitrary code. Attackers can trigger the vulnerability by sending r= equests to affected endpoints while the server transitions to sleep mode, c= ausing concurrent worker threads to dereference a freed vocab pointer that = can be reclaimed with attacker-controlled data to achieve remote code execu= tion.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43631" target=3D= "_blank" rel=3D"noopener">CVE-2026-43631</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b7492 through the latest b9060 contains a use-after-fr=
ee vulnerability in llama-server affecting six tokenization endpoints (/tok= enize, /detokenize, /infill, /apply-template, /rerank, and /anthropic/count= _tokens) that bypass the task queue and access ctx_server.vocab directly on=
HTTP worker threads. Attackers can exploit a time-of-check-time-of-use rac=
e condition where the main thread destroys and frees vocab after the synchr= onization lock is released but before the handler finishes using it, causin=
g a crash or potential code execution when --sleep-idle-seconds is configur= ed.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43632" target=3D= "_blank" rel=3D"noopener">CVE-2026-43632</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b1886 through b7445 contain a double free vulnerabilit=
y in the LLaMA-Android JNI wrapper where new_1batch() allocates memory usin=
g malloc() while free_1batch() deallocates it using the C++ delete operator=
, causing heap metadata corruption. Attackers can trigger this memory manag= ement mismatch to cause denial of service through process crashes or potent= ially achieve arbitrary code execution depending on allocator state.</td> <td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43622" target=3D= "_blank" rel=3D"noopener">CVE-2026-43622</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b1283 through b9058 contain an integer overflow vulner= ability in the llama_batch_init() function where unchecked multiplications =
in malloc() calls can wrap past INT32_MAX when computing allocation sizes. = Attackers can pass specially crafted parameters to trigger integer overflow=
, causing heap corruption and potentially achieving arbitrary code executio=
n through subsequent batch operations that write past allocated buffer boun= daries.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43627" target=3D= "_blank" rel=3D"noopener">CVE-2026-43627</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b3978 through b9058 contain an integer underflow and o= ut-of-bounds read vulnerability in the DRY sampler that allows unauthentica= ted attackers to trigger a heap buffer underflow by sending a crafted HTTP = request with dry_allowed_length set to INT32_MIN to the /v1/completions or = /v1/chat/completions endpoints. Attackers can exploit this vulnerability to=
crash the server with SIGSEGV causing denial of service for all connected = users, or corrupt token sampling probabilities by reading garbage values fr=
om memory before the allocated buffer.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43628" target=3D= "_blank" rel=3D"noopener">CVE-2026-43628</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b1886 through b7445 contain an integer overflow vulner= ability in the LLaMA-Android JNI wrapper where the new_1batch() function mu= ltiplies sizeof(llama_seq_id) by an attacker-controlled n_seq_max parameter=
without overflow validation, causing heap buffer allocation to wrap and al= locate insufficient memory. Attackers can exploit this by providing a craft=
ed n_seq_max value through a malicious model file or JNI call to trigger he=
ap corruption and achieve denial of service or arbitrary code execution on = Android applications using the LLaMA-Android binding.</td>

<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70638" target=3D= "_blank" rel=3D"noopener">CVE-2026-70638</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b1886 through b7445 contain a race condition use-after= -free vulnerability in the LLaMA-Android JNI wrapper where bench_1model() a=
nd free_1context() lack synchronization, allowing Thread A to operate on fr= eed memory while Thread B concurrently frees the llama_context. Attackers c=
an exploit this by performing heap spray with attacker-controlled data cont= aining a fake vtable to hijack the vtable pointer at offset +0x30, causing = llama_batch_allocr::clear() to dereference arbitrary memory and achieve rem= ote code execution.</td>
<td>2026-08-06</td>
<td>7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70640" target=3D= "_blank" rel=3D"noopener">CVE-2026-70640</a></td>
</tr>

<td class=3D"vendor-product">Gitea--Gitea</td>
<td>Gitea prior to 1.27.0 contains a server-side request forgery vulnerabil= ity that allows authenticated attackers to bypass SSRF protections by explo= iting HTTP fetch operations in migration and OAuth avatar code paths that u=
se Go's default http.Get without a custom DialContext. Attackers can supply=
arbitrary URLs through release asset download URLs, pull-request patch URL=
s, or OAuth avatar endpoints to reach internal services, cloud instance-met= adata endpoints, or read local files such as the application configuration = containing database credentials and signing secrets, with exfiltrated conte=
nt persisted as migration release assets for later retrieval.</td> <td>2026-08-05</td>
<td>7.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34966" target=3D= "_blank" rel=3D"noopener">CVE-2026-34966</a></td>
</tr>

<td class=3D"vendor-product">gitpython-developers--GitPython</td>
<td>GitPython before 3.1.53 fails to properly escape section names in git c= onfig files, allowing attackers to inject arbitrary configuration directive=
s through malicious submodule names. Attackers can inject core.sshCommand o=
r other dangerous config keys into the victim's .git/config via create_subm= odule or clone_from operations, achieving remote code execution when git pe= rforms ssh operations.</td>
<td>2026-08-03</td>
<td>7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69097" target=3D= "_blank" rel=3D"noopener">CVE-2026-69097</a></td>
</tr>

<td class=3D"vendor-product">gitroomhq--postiz-app</td>
<td>Postiz is an open-source social media scheduling tool. The route that s= erves locally stored media joins URL-supplied path segments onto the upload=
directory and streams the file without normalising the path or confining i=
t to that directory, and the route requires no authentication. Raw dot-segm= ents are collapsed before routing, but URL-encoded separators survive route=
matching and are decoded only once they reach the handler, restoring the t= raversal at the filesystem call. An unauthenticated remote attacker can the= refore read any file readable by the application process, including the pro= cess environment, which exposes the JWT signing secret, the database connec= tion string, and connected provider and billing secrets. Because session to= kens are signed with that secret and carry no expiry, this allows forging a=
non-expiring session as any user, including an administrator, without a pa= ssword.</td>
<td>2026-08-07</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19264" target=3D= "_blank" rel=3D"noopener">CVE-2026-19264</a></td>
</tr>

<td class=3D"vendor-product">GL-iNet--GL-MT3000</td>
<td>A flaw has been found in GL-iNet GL-MT3000 up to 4.4.5. This vulnerabil= ity affects the function plugins.remove_package/plugins.install_package of = the file /cgi-bin/glc of the component plugins.so Native Plugin. This manip= ulation causes command injection. The attack can be initiated remotely. The=
exploit has been published and may be used. The vendor was contacted early=
about this disclosure and confirmed the existence of the vulnerability.</t=

<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18612" target=3D= "_blank" rel=3D"noopener">CVE-2026-18612</a></td>
</tr>

<td class=3D"vendor-product">GL-iNet--GL-MT3000</td>
<td>A vulnerability has been found in GL-iNet GL-MT3000 up to 4.4.5. This i= ssue affects the function plugins.set_config of the file /cgi-bin/glc of th=
e component plugins.so Native Plugin. Such manipulation leads to injection.=
The attack can be launched remotely. The exploit has been disclosed to the=
public and may be used. The vendor was contacted early about this disclosu=
re and confirmed the existence of the vulnerability.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18613" target=3D= "_blank" rel=3D"noopener">CVE-2026-18613</a></td>
</tr>

<td class=3D"vendor-product">GL-iNet--GL-MT3000</td>
<td>A vulnerability was found in GL-iNet GL-MT3000 up to 4.4.5. Impacted is=
the function s2s.enable_echo_server of the file /cgi-bin/glc of the compon= ent s2s.so Native Plugin. Performing a manipulation of the argument port re= sults in command injection. The attack may be initiated remotely. The explo=
it has been made public and could be used. The vendor was contacted early a= bout this disclosure and confirmed the existence of the vulnerability.</td> <td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18614" target=3D= "_blank" rel=3D"noopener">CVE-2026-18614</a></td>
</tr>

<td class=3D"vendor-product">GL-iNet--GL-MT3000</td>
<td>A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The af= fected element is the function wg-server.generate_publickey of the file /cg= i-bin/glc of the component wg-server.so Native Plugin. Executing a manipula= tion of the argument private_key can lead to command injection. The attack = may be launched remotely. The exploit has been publicly disclosed and may b=
e utilized. The vendor was contacted early about this disclosure and confir= med the existence of the vulnerability.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18615" target=3D= "_blank" rel=3D"noopener">CVE-2026-18615</a></td>
</tr>

<td class=3D"vendor-product">GL-iNet--GL-MT3000</td>
<td>A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The im= pacted element is the function server.set_peer of the file /cgi-bin/glc of = the component wg-server.so Native Plugin. The manipulation of the argument = public_key leads to command injection. Remote exploitation of the attack is=
possible. The exploit is publicly available and might be used. The vendor = was contacted early about this disclosure and confirmed the existence of th=
e vulnerability.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18616" target=3D= "_blank" rel=3D"noopener">CVE-2026-18616</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--AX1800</td>
<td>A vulnerability was identified in GL.iNet AX1800 up to 4.8.3. The affec= ted element is the function remove_rule of the file /usr/share/gl-ngx/oui-r= pc.lua of the component RPC Endpoint. The manipulation of the argument args= .id leads to command injection. The attack is possible to be carried out re= motely. The exploit is publicly available and might be used. The vendor was=
contacted early about this disclosure.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18787" target=3D= "_blank" rel=3D"noopener">CVE-2026-18787</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A vulnerability was found in GL.iNet GL-MT3000 up to 4.4.5. This impact=
s the function ovpn-client.check_config of the file /cgi-bin/glc of the com= ponent ovpn-client.so Native Plugin. Performing a manipulation of the argum= ent filename results in command injection. Remote exploitation of the attac=
k is possible. The exploit has been made public and could be used. The vend=
or was contacted early about this disclosure and confirmed the existence of=
the vulnerability.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18601" target=3D= "_blank" rel=3D"noopener">CVE-2026-18601</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A vulnerability was determined in GL.iNet GL-MT3000 up to 4.4.5. Affect=
ed is the function ovpn-client.get_recommend_config of the file /cgi-bin/gl=
c of the component ovpn-client.so Native Plugin. Executing a manipulation o=
f the argument Hostname can lead to command injection. The attack can be ex= ecuted remotely. The exploit has been publicly disclosed and may be utilize=
d. The vendor was contacted early about this disclosure and confirmed the e= xistence of the vulnerability.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18602" target=3D= "_blank" rel=3D"noopener">CVE-2026-18602</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This i= ssue affects the function remove_profile of the file /cgi-bin/glc of the co= mponent modem.so. This manipulation causes command injection. It is possibl=
e to initiate the attack remotely. The exploit has been made available to t=
he public and could be used for attacks. The vendor was contacted early abo=
ut this disclosure and confirmed the existence of the vulnerability.</td> <td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18684" target=3D= "_blank" rel=3D"noopener">CVE-2026-18684</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4= .4.5. Impacted is the function set_upgrade of the file /cgi-bin/glc of the = component modem.so. Such manipulation leads to command injection. It is pos= sible to launch the attack remotely. The exploit has been disclosed publicl=
y and may be used. The vendor was contacted early about this disclosure and=
confirmed the existence of the vulnerability.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18685" target=3D= "_blank" rel=3D"noopener">CVE-2026-18685</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affe= cted element is the function nas-web.add_user of the file /cgi-bin/glc of t=
he component nas-web RPC Wrapper. Performing a manipulation results in comm= and injection. The attack can be initiated remotely. The exploit is now pub= lic and may be used. The vendor was contacted early about this disclosure a=
nd confirmed the existence of the vulnerability.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18686" target=3D= "_blank" rel=3D"noopener">CVE-2026-18686</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A vulnerability was detected in GL.iNet GL-MT3000 up to 4.4.5. The affe= cted element is the function logread.get_system_log of the file /usr/lib/ou= i-httpd/rpc/logread of the component Logread Lua RPC plugin. The manipulati=
on of the argument module results in command injection. The attack can be l= aunched remotely. The exploit is now public and may be used. The vendor was=
contacted early about this disclosure and confirmed the existence of the v= ulnerability.</td>
<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18598" target=3D= "_blank" rel=3D"noopener">CVE-2026-18598</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A flaw has been found in GL.iNet GL-MT3000 up to 4.4.5. The impacted el= ement is the function logread.set_config of the file /usr/lib/oui-httpd/rpc= /logread of the component Logread Lua RPC Plugin. This manipulation of the = argument record_size causes command injection. The exploit has been publish=
ed and may be used. The vendor was contacted early about this disclosure an=
d confirmed the existence of the vulnerability.</td>
<td>2026-08-03</td>
<td>8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18599" target=3D= "_blank" rel=3D"noopener">CVE-2026-18599</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--GL-MT3000</td>
<td>A vulnerability has been found in GL.iNet GL-MT3000 up to 4.4.5. This a= ffects the function network.switch_info/network.switch_status of the file /= usr/lib/oui-httpd/rpc/network of the component Network Lua RPC Plugin. Such=
manipulation of the argument switch leads to command injection. The attack=
may be launched remotely. The exploit has been disclosed to the public and=
may be used. The vendor was contacted early about this disclosure and conf= irmed the existence of the vulnerability.</td>
<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18600" target=3D= "_blank" rel=3D"noopener">CVE-2026-18600</a></td>
</tr>

<td class=3D"vendor-product">go-git--go-git</td>
<td>go-git is an extensible git implementation library written in pure Go. = Prior to 5.19.2 and 6.0.0-alpha.5, worktree operations (including checkout,=
status, and add) resolve symbolic links inside the working tree without co= nfining resolution to the worktree boundary, so a maliciously crafted repos= itory containing a symlink can cause go-git to read from or write to files = outside the intended working directory when the repository is cloned and it=
s worktree operations are used. Versions 5.19.2 and 6.0.0-alpha.5.</td> <td>2026-08-07</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71556" target=3D= "_blank" rel=3D"noopener">CVE-2026-71556</a></td>
</tr>

<td class=3D"vendor-product">go-shiori--shiori</td>
<td>Shiori's CheckToken function (internal/domains/auth.go) validates only = the JWT's HMAC signature and returns the embedded claims.Account object unm= odified, never re-fetching the account from the database. No session store =
or token-revocation mechanism exists in the codebase. Deleting an account o=
r demoting it from owner to a regular role has no effect on tokens already = issued to that account - a deleted or demoted owner's token continues authe= nticating with its original owner-level privileges until natural expiry, wh= ich can be up to 30 days with 'remember me' enabled.</td>

<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71206" target=3D= "_blank" rel=3D"noopener">CVE-2026-71206</a></td>
</tr>

<td class=3D"vendor-product">go-shiori--shiori</td>
<td>go-shiori's DownloadBookmark() (internal/core/download.go) fetches a ca= ller-supplied bookmark URL using a plain http.Client with no custom DialCon= text or destination-IP validation (no IsLoopback(), IsPrivate(), IsUnspecif= ied(), or IsLinkLocalUnicast() checks). An authenticated user creating or u= pdating a bookmark via POST /api/bookmark, PUT /api/v1/bookmarks/cache, or = POST /api/bookmarks/ext can supply a loopback (127.0.0.1) or 0.0.0.0 (which=
Linux redirects to loopback) URL, causing the server to make outbound requ= ests to internal-only services, cloud metadata endpoints, or other network-= restricted resources.</td>
<td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71280" target=3D= "_blank" rel=3D"noopener">CVE-2026-71280</a></td>
</tr>

<td class=3D"vendor-product">google-maps-easy-pro--google-maps-easy-pro</td=

<td>Multiple Supsystic Pro plugins were distributed with malicious code thr= ough the vendor's compromised update server, allowing unauthenticated attac= kers to deploy a second-stage payload that exfiltrates credentials and othe=
r sensitive data and grants full control of affected sites.</td>

<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17032" target=3D= "_blank" rel=3D"noopener">CVE-2026-17032</a></td>
</tr>

<td class=3D"vendor-product">gopacket--gopacket</td>
<td>gopacket provides packet processing capabilities for Go. Through versio=
n 1.7.0, multiple layer decoders use attacker-controlled lengths, counts, o=
r offsets before validating them against packet buffers, allowing a crafted=
packet decoded through DecodingLayerParser or DecodeFromBytes to trigger a=
n unrecovered panic and remotely deny service. A patch commit is available =
at 210f25f.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65819" target=3D= "_blank" rel=3D"noopener">CVE-2026-65819</a></td>
</tr>

<td class=3D"vendor-product">grocy--grocy</td>
<td>Grocy's API request-body parser (controllers/Api/BaseApiController.php,=
GetParsedAndFilteredRequestBody) purifies incoming field values with HTMLP= urifier, then manually reverses HTML-entity encoding of the resulting outpu=
t by replacing &amp;lt;, &amp;gt;, and &amp;amp; back to <, = >, and & immediately after purification. This double-decode reconstr= ucts live HTML/script tags from the entity-encoded form that HTMLPurifier p= roduced to neutralize them, re-introducing stored XSS across API-writable f= ields (products, recipes, stock, users, chores, and others) that are render=
ed elsewhere without re-sanitization.</td>
<td>2026-08-05</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71236" target=3D= "_blank" rel=3D"noopener">CVE-2026-71236</a></td>
</tr>

<td class=3D"vendor-product">guzzle--guzzle</td>
<td>Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Guz= zle gives a transport the request URI as text and supplies the Host header = separately. The cURL handlers set CURLOPT_URL to the URI exactly as written=
and push that Host into CURLOPT_HTTPHEADER; StreamHandler does the same th= rough fopen(). libcurl then parses the authority itself, percent-decoding i=
t and, on an IDN-capable build, applying IDNA mapping, and uses the result =
to resolve, connect, name the TLS peer and address a proxy CONNECT, while t=
he supplied Host suppresses the aligned one libcurl would have generated. F=
or a URI host written as 127.0.0.%31, filter_var() rejects the host as an I=
P literal, yet libcurl decodes it to 127.0.0.1 and reaches loopback with no=
DNS lookup while the server receives Host: 127.0.0.%31. An attacker who in= fluences a fetched URI can therefore reach a host the application's checks = excluded and read whatever the host exposes of the response. The same diver= gence moves Guzzle's own decisions onto a spelling the transport does not u= se: no_proxy selects proxy routing from the literal host, and RedirectMiddl= eware decides from it whether to strip Authorization and Cookie. Exploitati=
on requires the application to build a request URI from untrusted input and=
to make a host decision before handing it to Guzzle. This issue is fixed i=
n versions 7.15.2 and 8.0.1.</td>
<td>2026-08-03</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69246" target=3D= "_blank" rel=3D"noopener">CVE-2026-69246</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A security vulnerability has been detected in H3C NX15 V100R017. Impact=
ed is an unknown function of the file /api/wizard/networkSetup. Such manipu= lation leads to missing authentication. The attack may be performed from re= mote. The vendor was contacted early about this disclosure.</td>

<td>2026-08-04</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18810" target=3D= "_blank" rel=3D"noopener">CVE-2026-18810</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A vulnerability was detected in H3C NX15 V100R017. The affected element=
is the function Add of the file /api/esps. Performing a manipulation of th=
e argument esps.filter.url results in command injection. It is possible to = initiate the attack remotely. The exploit is now public and may be used. Th=
e vendor was contacted early about this disclosure.</td>
<td>2026-08-04</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18811" target=3D= "_blank" rel=3D"noopener">CVE-2026-18811</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A flaw has been found in H3C NX15 V100R017. The impacted element is the=
function esps.ipv6.wan of the file /api/esps. Executing a manipulation of = the argument workMode can lead to command injection. It is possible to laun=
ch the attack remotely. The exploit has been published and may be used. The=
vendor was contacted early about this disclosure.</td>
<td>2026-08-04</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18812" target=3D= "_blank" rel=3D"noopener">CVE-2026-18812</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A vulnerability has been found in H3C NX15 V100R017. This affects the f= unction delete of the file /api/esps. The manipulation of the argument esps= .apcm.version leads to command injection. The attack can be initiated remot= ely. The exploit has been disclosed to the public and may be used. The vend=
or was contacted early about this disclosure.</td>
<td>2026-08-04</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18813" target=3D= "_blank" rel=3D"noopener">CVE-2026-18813</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A vulnerability was found in H3C NX15 V100R017. This impacts the functi=
on reload.reload_config of the file /api/esps. The manipulation results in = command injection. The attack can be launched remotely. The exploit has bee=
n made public and could be used. The vendor was contacted early about this = disclosure.</td>
<td>2026-08-04</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18814" target=3D= "_blank" rel=3D"noopener">CVE-2026-18814</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A weakness has been identified in H3C NX15 V100R017. This impacts the f= unction file.exec of the file /api/esps of the component Backend RPC. This = manipulation of the argument File causes os command injection. The attack m=
ay be initiated remotely. The exploit has been made available to the public=
and could be used for attacks. The vendor was contacted early about this d= isclosure.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18900" target=3D= "_blank" rel=3D"noopener">CVE-2026-18900</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A security vulnerability has been detected in H3C NX15 V100R017. Affect=
ed is the function service.add of the file /api/esps of the component Web A= PI. Such manipulation leads to exposed dangerous routine. The attack may be=
launched remotely. The exploit has been disclosed publicly and may be used=
. The vendor was contacted early about this disclosure.</td> <td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18901" target=3D= "_blank" rel=3D"noopener">CVE-2026-18901</a></td>
</tr>

<td class=3D"vendor-product">H3C--NX15</td>
<td>A vulnerability was detected in H3C NX15 V100R017. Affected by this vul= nerability is the function esps.wan.repeater.set/repeaterproc of the file /= api/esps. Performing a manipulation of the argument my2P4key results in com= mand injection. Remote exploitation of the attack is possible. The exploit =
is now public and may be used. The vendor was contacted early about this di= sclosure.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18902" target=3D= "_blank" rel=3D"noopener">CVE-2026-18902</a></td>
</tr>

<td class=3D"vendor-product">Hamid Alinia--Login with phone number</td>

<td>Unauthenticated Bypass Vulnerability in Login with phone number <=3D=
1.8.70 versions.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65570" target=3D= "_blank" rel=3D"noopener">CVE-2026-65570</a></td>
</tr>

<td class=3D"vendor-product">hapifhir--org.hl7.fhir.core</td>
<td>HAPI FHIR is a complete implementation of the HL7 FHIR standard for hea= lthcare interoperability in Java. Prior to 6.9.11, the JSON utility parser =
in org.hl7.fhir.utilities.json.parser.JsonParser enforces no maximum nestin=
g depth for arrays or objects. As a result, a small but deeply nested, synt= actically valid FHIR JSON document can trigger unbounded readArray() or rea= dObject() recursion, raising a StackOverflowError before structural validat= ion runs. An attacker who can submit JSON resources for validation can thus=
crash the request thread, and services that do not isolate StackOverflowEr= ror safely may experience worker loss or process instability - a denial-of-= service condition. This issue is fixed in version 6.9.11.</td> <td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62295" target=3D= "_blank" rel=3D"noopener">CVE-2026-62295</a></td>
</tr>

<td class=3D"vendor-product">hapifhir--org.hl7.fhir.core</td>
<td>HAPI FHIR is a complete implementation of the HL7 FHIR standard for hea= lthcare interoperability in Java. Prior to 6.9.11, XhtmlParser.java imposes=
no maximum element nesting depth, so a deeply nested text.div narrative tr= iggers unbounded recursion between parseElementInner() and parseElement(), = raising a StackOverflowError. An attacker who can submit FHIR resources con= taining such narratives can thus crash a parsing or validation worker threa=
d, affecting validator services and any application that parses attacker-su= pplied FHIR JSON or XML. This issue is fixed in version 6.9.11.</td> <td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62296" target=3D= "_blank" rel=3D"noopener">CVE-2026-62296</a></td>
</tr>

<td class=3D"vendor-product">Harsh21Patel--Inventory-Management-System-PHP<=

<td>Inventory-Management-System-PHP's login.php constructs its authenticati=
on query via direct string concatenation of raw POST parameters: $sql =3D "= select * from user where email =3D '$email' and password =3D '$password'", = with no escaping or parameterization, allowing authentication bypass via a = payload such as email=3D' OR 1=3D1 LIMIT 1-- -. Separately, delete.php exec= utes mysqli_query($db, "DELETE FROM product WHERE product_id=3D" . $_GET['i= d']) with no authentication check and no validation of the id parameter, al= lowing an unauthenticated attacker to delete arbitrary product rows or perf= orm blind SQL injection via payloads such as id=3D0 OR SLEEP(5).</td> <td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71248" target=3D= "_blank" rel=3D"noopener">CVE-2026-71248</a></td>
</tr>

<td class=3D"vendor-product">HashBrownCMS--hashbrown-cms</td>
<td>HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerabil= ity (CWE-78) in the media upload thumbnail generation routine. Media.genera= teThumbnail() in src/Server/Entity/Resource/Media.js builds a temporary fil=
e path as 'thumbnail' + Path.extname(filename) and passes it, unescaped, in=
to a shell command executed via AppService.exec() ('convert ' + tempFile + = ...). The MIME-type filter in getMIMEType() (src/Common/utilities.js) trunc= ates the extracted extension at the first '?' character, while Path.extname=
() does not, allowing a filename such as 'x.jpg?$(command)' to pass the ima= ge-type check while still injecting a shell command substitution into the e= xec() call. An authenticated user holding the media resource scope can achi= eve arbitrary OS command execution in the context of the Node.js process vi=
a POST /api/{project}/{environment}/media/new.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70374" target=3D= "_blank" rel=3D"noopener">CVE-2026-70374</a></td>
</tr>

<td class=3D"vendor-product">HashBrownCMS--hashbrown-cms</td>
<td>HashBrown CMS through 1.4.6 contains an OS Command Injection vulnerabil= ity (CWE-78) in the Git deployer component. GitDeployer.pullRepo() in src/S= erver/Entity/Deployer/GitDeployer.js executes AppService.exec(`git checkout=
${this.branch || 'master'}`), interpolating the configured branch value di= rectly into a shell command with no escaping. GitDeployer.validate() only r= ejects a single-quote character in the repo, branch, username, and password=
fields; shell metacharacters such as ';', '&&', '|', backticks, an=
d '$()' are not filtered. A user able to configure a project's Git deployer=
settings can set a malicious branch value (e.g. 'master;<command>#')=
that executes automatically on every subsequent deployer operation (media = upload, content save, etc.), since pullRepo() is invoked unconditionally at=
the start of each such operation. This is related to CVE-2020-6948, which = addressed single-quote escaping of the repo, username, and password fields =
in the same file's git clone invocation; the branch field used in the unquo= ted git checkout command was not covered by that fix and remains injectable= .</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70375" target=3D= "_blank" rel=3D"noopener">CVE-2026-70375</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.13.0 through 2.0.2 are=
vulnerable to an unauthenticated denial of service through unbounded conne= ction acceptance on the external gRPC listeners. A remote attacker may exha= ust agent file descriptors, goroutines, and memory by opening many incomple=
te connections, potentially preventing legitimate clients from connecting. = This vulnerability, CVE-2026-15972, is fixed in Consul 2.0.3 and Consul Ent= erprise 1.21.17, 1.22.11, and 2.0.3.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15972" target=3D= "_blank" rel=3D"noopener">CVE-2026-15972</a></td>
</tr>

<td class=3D"vendor-product">HAVELSAN Inc.--Liman MYS</td>
<td>Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows A= ccessing Functionality Not Properly Constrained by ACLs. This issue affects=
Liman MYS: from 2.2.3 before 2.3.1.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17070" target=3D= "_blank" rel=3D"noopener">CVE-2026-17070</a></td>
</tr>

<td class=3D"vendor-product">HAVELSAN Inc.--Liman MYS</td>
<td>Missing Authorization vulnerability in HAVELSAN Inc. Liman MYS allows P= rivilege Escalation. This issue affects Liman MYS: from 2.2.3 before 2.3.1.= </td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18650" target=3D= "_blank" rel=3D"noopener">CVE-2026-18650</a></td>
</tr>

<td class=3D"vendor-product">heshengtao--super-agent-party</td>
<td>A vulnerability has been found in heshengtao super-agent-party up to 0.= 4.1. The impacted element is the function sanitize_proxy_url of the file se= rver.py of the component extension_proxy Route. The manipulation of the arg= ument url leads to server-side request forgery. The attack can be initiated=
remotely. The exploit has been disclosed to the public and may be used. Th=
e vendor was contacted early about this disclosure but did not respond in a=
ny way.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18973" target=3D= "_blank" rel=3D"noopener">CVE-2026-18973</a></td>
</tr>

<td class=3D"vendor-product">Hewlett Packard Enterprise (HPE)--EdgeConnect = SD-WAN Orchestrator</td>
<td>Multiple vulnerabilities in the REST API interface of HPE Networking SD= -WAN Orchestrator could allow an unauthenticated remote attacker to bypass = web authentication mechanisms and access system functions. Successful explo= itation could allow an attacker to view and modify potentially sensitive in= formation on the target system.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63455" target=3D= "_blank" rel=3D"noopener">CVE-2026-63455</a></td>
</tr>

<td class=3D"vendor-product">Hewlett Packard Enterprise (HPE)--EdgeConnect = SD-WAN Orchestrator</td>
<td>Multiple vulnerabilities in the REST API interface of HPE Networking SD= -WAN Orchestrator could allow an unauthenticated remote attacker to bypass = web authentication mechanisms and access system functions. Successful explo= itation could allow an attacker to view and modify potentially sensitive in= formation on the target system.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63456" target=3D= "_blank" rel=3D"noopener">CVE-2026-63456</a></td>
</tr>

<td class=3D"vendor-product">HKUDS--LightRAG</td>
<td>LightRAG provides simple and fast retrieval-augmented generation. Throu=
gh version 1.5.4, the LightRAG API server binds to all network interfaces w= ith authentication disabled by default, allowing an unauthenticated network=
attacker to read indexed document content, upload or delete documents, mod= ify the knowledge graph, cancel pipelines, clear caches, and consume LLM re= sources. This issue is mitigated in version 1.5.5rc1.</td>
<td>2026-08-07</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61808" target=3D= "_blank" rel=3D"noopener">CVE-2026-61808</a></td>
</tr>

<td class=3D"vendor-product">ho3einie--Material Dashboard</td>
<td>The Material Dashboard plugin for WordPress is vulnerable to unauthoriz=
ed access and modification of data due to missing capability checks on the = amd_ajax_target_task_manager() function in all versions up to, and includin=
g, 1.4.10. This makes it possible for unauthenticated attackers to enumerat=
e all scheduled tasks (potentially exposing PII), execute arbitrary tasks, = and delete any task via the public_amd_ajax_handler AJAX action.</td> <td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6079" target=3D"= _blank" rel=3D"noopener">CVE-2026-6079</a></td>
</tr>

<td class=3D"vendor-product">home-assistant--core</td>
<td>Home Assistant is open source home automation software focused on local=
control and privacy. Prior to 2026.5.3, the Companion app treats tag links=
(NFC or QR) delivered through an OS-level routing mechanism as if they wer=
e physically scanned, without validating the calling app or prompting the u= ser. As a result, any untrusted app on the device can forward an arbitrary = tag to Home Assistant, causing it to execute the associated automation as t= hough a legitimate user had scanned an authorized tag. This allows silent, = unattended automation execution by untrusted local callers. This issue is f= ixed in version 2026.8.1.</td>
<td>2026-08-07</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66060" target=3D= "_blank" rel=3D"noopener">CVE-2026-66060</a></td>
</tr>

<td class=3D"vendor-product">home-assistant--core</td>
<td>Home Assistant is open source home automation software focused on local=
control and privacy. Prior to 2026.5.0, the iOS Companion app treats tag l= inks (NFC or QR) delivered through an OS-level routing mechanism such as iO=
S universal links as if they were physically scanned, without validating th=
e calling app or prompting the user. As a result, any untrusted app on the = device can forward an arbitrary tag to Home Assistant, causing it to execut=
e the associated automation as though a legitimate user had scanned an auth= orized tag. This allows silent, unattended automation execution by untruste=
d local callers. This issue has been fixed in version 2026.5.0.</td> <td>2026-08-07</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66061" target=3D= "_blank" rel=3D"noopener">CVE-2026-66061</a></td>
</tr>

<td class=3D"vendor-product">huggingface--peft</td>
<td>Hugging Face peft's LoRA-GA and CorDA initialization modules (src/peft/= tuners/lora/corda.py lines ~102 and ~163, and src/peft/tuners/lora/loraga.p=
y line ~101) call torch.load() on config-specified cache/covariance files w= ithout weights_only=3DTrue, bypassing peft's own safe-loading wrapper used = elsewhere in the codebase. Because torch.load() without weights_only=3DTrue=
performs full pickle deserialization, loading a malicious cache or covaria= nce file (e.g. a shared/downloaded LoRA-GA or CorDA cache) results in arbit= rary code execution.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71281" target=3D= "_blank" rel=3D"noopener">CVE-2026-71281</a></td>
</tr>

<td class=3D"vendor-product">IBM--Application Gateway Operator</td>
<td>IBM Application Gateway Operator 22.2 through 26.06 is vulnerable to Se= rver-Side Request Forgery (SSRF) due to insufficient validation of URLs spe= cified in custom resources.</td>
<td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17617" target=3D= "_blank" rel=3D"noopener">CVE-2026-17617</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticate=
d attacker to execute arbitrary commands due to improper validation of the = command field in MCP server configurations.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17623" target=3D= "_blank" rel=3D"noopener">CVE-2026-17623</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 thro= ugh 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.=
3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to = execute arbitrary code due to improper validation of module imports.</td> <td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17624" target=3D= "_blank" rel=3D"noopener">CVE-2026-17624</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow an authentic= ated attacker to read, modify, or expose sensitive host files via Docker-ba= sed MCP servers due to incomplete filtering of dangerous Docker volume-moun=
t and device-mapping arguments.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17626" target=3D= "_blank" rel=3D"noopener">CVE-2026-17626</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticate=
d attacker to execute arbitrary code due to improper validation of Python c= ode during AST-based security scanning.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17632" target=3D= "_blank" rel=3D"noopener">CVE-2026-17632</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticate=
d attacker to execute arbitrary code due to code injection.</td> <td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17633" target=3D= "_blank" rel=3D"noopener">CVE-2026-17633</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 installations allow anyone on the=
internet to execute arbitrary code on the server without any credentials v=
ia 2 HTTP requests.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8182" target=3D"= _blank" rel=3D"noopener">CVE-2026-8182</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to = inject arbitrary code on the system, due to the improper control of user in= put code.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8478" target=3D"= _blank" rel=3D"noopener">CVE-2026-8478</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 Langflow allows remote authentica= ted attackers to bypass localhost-only restrictions and write arbitrary MCP=
server configurations to IDE configuration files on the host system.</td> <td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9077" target=3D"= _blank" rel=3D"noopener">CVE-2026-9077</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated atta= cker to execute unintended code during Agentic Assistant validation due to = improper handling of LLM-generated components. The application executes mod= el-generated Python code in the backend during validation prior to user app= roval, which may allow an attacker to trigger side effects such as outbound=
network access, file system interaction, or data exfiltration with the pri= vileges of the Langflow backend process.</td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9196" target=3D"= _blank" rel=3D"noopener">CVE-2026-9196</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow an authenticated atta= cker to execute arbitrary code due to a cryptographic weakness in the custo=
m component validation mechanism. When the optional hardening mode that res= tricts execution to trusted component templates is enabled, the application=
validates component code using a truncated SHA-256 hash. Because the hash = comparison relies on only a portion of the digest, an attacker can craft ma= licious component code that collides with a trusted template hash and bypas= ses validation. Successful exploitation allows the attacker to introduce an=
d execute unauthorized Python code within the Langflow process, defeating t=
he intended security control and potentially leading to full compromise of = the affected instance.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9201" target=3D"= _blank" rel=3D"noopener">CVE-2026-9201</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 thro= ugh 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.=
3, and 1.0.0 through 1.10.3 could allow a remote authenticated attacker to = execute arbitrary commands due to improper neutralization of special elemen=
ts used in an OS command.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17625" target=3D= "_blank" rel=3D"noopener">CVE-2026-17625</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote attacker to = execute arbitrary code due to improper validation of configuration paramete= rs.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17630" target=3D= "_blank" rel=3D"noopener">CVE-2026-17630</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 thro= ugh 1.10.3, 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, and 1.0.0 through 1= .10.3 could allow a remote attacker to traverse directories on the system. =
An attacker could send a specially crafted URL request containing "dot dot =
" sequences ( /.. /) to v i ew arbitrary files on the system.</td> <td>2026-08-05</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8183" target=3D"= _blank" rel=3D"noopener">CVE-2026-8183</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 contain an authentication bypass = vulnerability in the Model Context Protocol (MCP) composer endpoint when mc= p_composer_enabled=3Dtrue (default) and projects are configured with auth_t= ype=3Doauth .</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8446" target=3D"= _blank" rel=3D"noopener">CVE-2026-8446</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3, 1.0.0 through 1.10.3, 1.0.0 thro= ugh 1.10.3, and 1.0.0 through 1.10.3 use Python's non-cryptographic random = module for generating Fernet encryption keys from user secrets under 32 cha= racters. The deterministic Mersenne Twister PRNG produces identical keys fo=
r identical seeds, allowing attackers to reproduce encryption keys and decr= ypt stored API keys and authentication tokens.</td>
<td>2026-08-05</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8470" target=3D"= _blank" rel=3D"noopener">CVE-2026-8470</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3, and 1.0.0 through 1.10.3 contain=
s a Server-Side Request Forgery (SSRF) vulnerability in the validate_model_= provider_key() function for the Ollama provider. The function accepts a use= r-supplied OLLAMA_BASE_URL parameter and passes it directly to requests.get=
() without validation, scheme/host allowlisting, or filtering of private IP=
ranges (loopback, RFC1918, link-local addresses).</td>
<td>2026-08-05</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9081" target=3D"= _blank" rel=3D"noopener">CVE-2026-9081</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 contain an authorization bypass v= ulnerability in the MemoryComponent that allows authenticated users to acce=
ss chat history of other users via session_id collision. The MemoryComponen= t.retrieve_messages and store_message methods filter on session_id without = validating flow_id or user_id ownership, enabling cross-user information di= sclosure through multiple authenticated API endpoints including /api/v1/run= /*, /api/v1/responses, and /api/v2/workflow/*. This vulnerability only affe= cts multi-user deployments with LANGFLOW_AUTO_LOGIN=3DFalse.</td> <td>2026-08-05</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9130" target=3D"= _blank" rel=3D"noopener">CVE-2026-9130</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS contains a weak cryptographic key derivation vulnerabi= lity in the=C2=A0ensure_fernet_key() function.</td>
<td>2026-08-05</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9205" target=3D"= _blank" rel=3D"noopener">CVE-2026-9205</a></td>
</tr>

<td class=3D"vendor-product">IBM--QRadar</td>
<td>IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Inter=
im Fix 005 has an XML External Entity (XXE) injection vulnerability. The vu= lnerability resides in the parseXmlPayload() function within the event proc= essing pipeline ( q1labs_core.jar ). When at least one log source type is c= onfigured to use XML-format property autodetection, the system processes XM= L-formatted syslog events sent to port 514 (UDP/TCP) without authentication= .</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10025" target=3D= "_blank" rel=3D"noopener">CVE-2026-10025</a></td>
</tr>

<td class=3D"vendor-product">IBM--WebSphere Application Server</td>
<td>IBM WebSphere Application Server 8.5, and 9.0 and IBM WebSphere Applica= tion Server - Liberty Continuous delivery has a flaw in the ORB component i=
n IBM SDK, Java Technology Edition, may allow a malicious IIOP server to in= duce loading and instantation of arbitrary classes.</td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8400" target=3D"= _blank" rel=3D"noopener">CVE-2026-8400</a></td>
</tr>

<td class=3D"vendor-product">imranrisal-dev--Student-Management-System</td> <td>A vulnerability was detected in imranrisal-dev Student-Management-Syste=
m 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb4405= 7bcd7f8c. Affected by this vulnerability is an unknown functionality of the=
file loginCheckTest.php of the component Login. The manipulation of the ar= gument username/password results in sql injection. The attack can be launch=
ed remotely. The exploit is now public and may be used. This product does n=
ot use versioning. This is why information about affected and unaffected re= leases are unavailable. The vendor was contacted early about this disclosur=
e but did not respond in any way.</td>
<td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18958" target=3D= "_blank" rel=3D"noopener">CVE-2026-18958</a></td>
</tr>

<td class=3D"vendor-product">inisev--Backup Migration</td>
<td>The Backup Migration plugin for WordPress is vulnerable to OS Command I= njection in all versions up to, and including, 2.1.5.1 due to insufficient = sanitization of the `file` POST parameter on the `restoreBackup()` AJAX han= dler. The handler applies `esc_attr()` - an HTML-context sanitizer that doe=
s not strip shell metacharacters - and concatenates the result, unquoted, i= nto a `php-cli -f-=C3=82=C2=A6 bmi_restore <file> <remote>` com= mand passed to `exec()`. This makes it possible for authenticated attackers=
, with Administrator-level access (or any user granted the plugin's `do_bac= kups` capability) and above, to execute arbitrary OS commands as the web-se= rver user, bypassing WordPress hardening constants such as `DISALLOW_FILE_E= DIT` and `DISALLOW_FILE_MODS` that would otherwise prevent code execution f= rom the admin UI. This is an incomplete fix of CVE-2023-7002, which patched=
the same pattern only in the `$_POST['url']` path of `handleQuickMigration= ()`; the equivalent mitigations (`rawurlencode()` + explicit shell-metachar=
replacement + double-quoting in `exec()`) were never applied to `$backupNa= me`.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7693" target=3D"= _blank" rel=3D"noopener">CVE-2026-7693</a></td>
</tr>

<td class=3D"vendor-product">INQUIRELAB--mcp-bridge-api</td>
<td>A vulnerability was found in INQUIRELAB mcp-bridge-api up to b30a82aa1d= 1d1139e0de846c41c8aadee6e06114. The impacted element is an unknown function=
of the file mcp-bridge.js of the component Servers Endpoint. Performing a = manipulation of the argument command/args results in command injection. It =
is possible to initiate the attack remotely. This product is using a rollin=
g release to provide continious delivery. Therefore, no version details for=
affected nor updated releases are available. The pull request to fix this = issue awaits acceptance.</td>
<td>2026-08-08</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19263" target=3D= "_blank" rel=3D"noopener">CVE-2026-19263</a></td>
</tr>

<td class=3D"vendor-product">Integrate PhonePe with WooCommerce--Integrate = PhonePe with WooCommerce</td>
<td>The Integrate PhonePe with WooCommerce WordPress plugin through 1.2.1 d= oes not validate that a verified payment transaction belongs to the order b= eing marked as paid, nor does it verify the authenticity of its payment-com= pletion request, allowing unauthenticated attackers to reuse a single valid=
transaction to mark arbitrary orders as paid and bypass payment.</td> <td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10599" target=3D= "_blank" rel=3D"noopener">CVE-2026-10599</a></td>
</tr>

<td class=3D"vendor-product">intelliants--subrion</td>
<td>Subrion CMS's admin grid sorting helper, _gridGetSorting() in includes/= classes/ia.base.controller.admin.php, whitelists the `dir` (ASC/DESC) reque=
st parameter via in_array(), but falls back to the raw, attacker-supplied `= sort` GET parameter whenever the requested key is not present in the per-co= ntroller $_gridSorting whitelist array: `$column =3D isset($this->_gridS= orting[$params['sort']]) ? ... : $params['sort'];`, which is then placed in=
to `sprintf(' ORDER BY %s`%s` %s', $tableAlias, $column, $direction)` with = only backtick-quoting and no escaping. Because a backtick in the payload br= eaks out of the identifier context, an authenticated admin session can inje=
ct arbitrary SQL (error-based via EXTRACTVALUE, or time-based via SLEEP()) =
to extract database contents including administrator password hashes. Most =
of Subrion's ~29 admin grid controllers either define no $_gridSorting whit= elist at all (e.g. pages.php, transactions.php, languages.php) or an incomp= lete one covering only some of their sortable columns (e.g. members.php whi= telists only 1 of 7 sortable fields), making the vast majority of admin gri=
d endpoints exploitable.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71292" target=3D= "_blank" rel=3D"noopener">CVE-2026-71292</a></td>
</tr>

<td class=3D"vendor-product">invoiceninja--invoiceninja</td>
<td>InvoiceNinja v5-stable renders an invoice or quote's "terms" field in t=
he client portal using Laravel Blade's raw output directive {!! $entity-&gt= ;terms !!} (resources/views/portal/ninja2020/invoices/includes/terms.blade.= php) with no HTML sanitization. StoreInvoiceRequest.php only strips newline=
s from the field and does not purify HTML. An authenticated user with invoi=
ce creation access can set the terms field via the REST API (PUT /api/v1/in= voices/{id}) to an HTML/JavaScript payload that executes in the client's br= owser when they view the invoice, enabling session cookie theft and client = account takeover. This is a distinct code path from the previously publishe=
d invoice line-item description field XSS (GHSA-98wm-cxpw-847p / CVE-2026-3= 3628).</td>
<td>2026-08-05</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71233" target=3D= "_blank" rel=3D"noopener">CVE-2026-71233</a></td>
</tr>

<td class=3D"vendor-product">iot-ecology--rust-iot-platform</td> <td>rust-iot-platform's AuthToken request-guard implementation (api/src/mai= n.rs) only checks whether the Authorization HTTP header is present, and nev=
er validates its value against any session, token store, or signature. Any = request carrying an arbitrary non-empty Authorization header (e.g. `Authori= zation: fake`) satisfies the guard, granting access to every endpoint prote= cted only by this request guard.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71277" target=3D= "_blank" rel=3D"noopener">CVE-2026-71277</a></td>
</tr>

<td class=3D"vendor-product">iot-ecology--rust-iot-platform</td> <td>rust-iot-platform allows creating a "calc rule" via POST /calc-rule/cre= ate (api/src/controller/calc_rule_router.rs) containing an arbitrary `scrip=
t` field. This route does not take the AuthToken request guard used elsewhe=
re in the application, making it reachable without authentication. The stor=
ed script is subsequently executed via quick_js::Context::eval() in api/src= /biz/calc_run_biz.rs with no sandboxing, allowing an unauthenticated attack=
er to achieve arbitrary JavaScript execution in the server process by creat= ing and triggering a malicious calc rule.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71278" target=3D= "_blank" rel=3D"noopener">CVE-2026-71278</a></td>
</tr>

<td class=3D"vendor-product">IoTSharp--IoTSharp</td>
<td>IoTSharp BlobStorageController.cs lacks the [Authorize] attribute appli=
ed to every other controller in the application (DevicesController, Custome= rsController, TenantsController, etc.), and no global authorization Fallbac= kPolicy is configured in Startup.cs, leaving its Upload/Download/List/Modif= y/Delete endpoints reachable by unauthenticated remote attackers. The path/= filename parameters passed to these endpoints (e.g. `_blob.WriteFileAsync($= "{path}/{formFile.FileName}", ...)`) are used without sanitization, enablin=
g path traversal that allows writing, reading, modifying, and deleting arbi= trary files outside the intended blob storage directory, including web-acce= ssible paths that can be leveraged for remote code execution via webshell u= pload.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71262" target=3D= "_blank" rel=3D"noopener">CVE-2026-71262</a></td>
</tr>

<td class=3D"vendor-product">ivanbebek--BOX NOW Delivery Croatia</td> <td>Unauthenticated Broken Access Control in BOX NOW Delivery Croatia <=
=3D 3.3.0 versions.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65504" target=3D= "_blank" rel=3D"noopener">CVE-2026-65504</a></td>
</tr>

<td class=3D"vendor-product">JeecgBoot--JeecgBoot</td>
<td>A vulnerability was identified in JeecgBoot up to 3.9.2. The affected e= lement is an unknown function of the file /airag/chat/send of the component=
Anonymous Chat Attachment Parser. The manipulation leads to server-side re= quest forgery. The attack can be initiated remotely. The exploit is publicl=
y available and might be used. A fix is planned for the upcoming release.</=

<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19000" target=3D= "_blank" rel=3D"noopener">CVE-2026-19000</a></td>
</tr>

<td class=3D"vendor-product">jegtheme--Jeg Kit for Elementor</td>
<td>Author PHP Object Injection in Jeg Kit for Elementor <=3D 3.2.10 ver= sions.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65549" target=3D= "_blank" rel=3D"noopener">CVE-2026-65549</a></td>
</tr>

<td class=3D"vendor-product">jetmonsters--JetFormBuilder</td> <td>Unauthenticated Broken Access Control in JetFormBuilder <=3D 3.6.4.1=
versions.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28140" target=3D= "_blank" rel=3D"noopener">CVE-2026-28140</a></td>
</tr>

<td class=3D"vendor-product">Jiangmin--Antivirus</td>
<td>A flaw has been found in Jiangmin Antivirus 21. Impacted is the functio=
n MessageNotifyCallback in the library kvcore.sys of the component Minifilt=
er Port. Executing a manipulation can lead to improper access controls. The=
attack needs to be launched locally. The exploit has been published and ma=
y be used. The vendor was contacted early about this disclosure but did not=
respond in any way.</td>
<td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19193" target=3D= "_blank" rel=3D"noopener">CVE-2026-19193</a></td>
</tr>

<td class=3D"vendor-product">jina-ai--reader</td>
<td>A security vulnerability has been detected in jina-ai reader up to 1574= bfd380d249c86c82db4dace0d9c8fe17e2b1. This issue affects the function isVal= idTLD of the file /backend/functions/src/cloud-functions/crawler.ts of the = component Crawler/Puppeteer. The manipulation leads to server-side request = forgery. Remote exploitation of the attack is possible. The exploit has bee=
n disclosed publicly and may be used. This product follows a rolling releas=
e approach for continuous delivery, so version details for affected or upda= ted releases are not provided. The vendor was contacted early about this di= sclosure but did not respond in any way.</td>
<td>2026-08-03</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18647" target=3D= "_blank" rel=3D"noopener">CVE-2026-18647</a></td>
</tr>

<td class=3D"vendor-product">Jordy Meow--AI Engine</td>
<td>Unauthenticated Cross Site Scripting (XSS) in AI Engine <=3D 3.6.8 v= ersions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65545" target=3D= "_blank" rel=3D"noopener">CVE-2026-65545</a></td>
</tr>

<td class=3D"vendor-product">jp-secure--SiteGuard WP Plugin</td> <td>Unauthenticated Cross Site Scripting (XSS) in SiteGuard WP Plugin <=
=3D 1.8.6 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61982" target=3D= "_blank" rel=3D"noopener">CVE-2026-61982</a></td>
</tr>

<td class=3D"vendor-product">juliangruber--brace-expansion</td>
<td>The brace-expansion library generates arbitrary strings containing a co= mmon prefix and suffix. Prior to 1.1.18, 2.1.4, 3.0.6, and 5.0.9, expand() = does not apply maxLength while constructing comma-alternative intermediate = arrays or padded sequences, allowing attacker-controlled input to exhaust m= emory or block the event loop. The fix for CVE-2026-14257 is bypassed by th=
e vulnerability. This issue is fixed in versions 1.1.18, 2.1.4, 3.0.6, and = 5.0.9.</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69152" target=3D= "_blank" rel=3D"noopener">CVE-2026-69152</a></td>
</tr>

<td class=3D"vendor-product">kata-containers--kata-containers</td>
<td>Kata Containers is an open source project focusing on a standard implem= entation of lightweight Virtual Machines (VMs) that perform like containers=
. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution=
via an unvalidated configuration path annotation. The runtime accepts an a= rbitrary io.katacontainers.config_path pod annotation and loads the referen= ced host TOML file without restriction. As a result, a pod user who can pla=
ce a file at a host-visible path can supply a configuration that selects an=
attacker-controlled hypervisor or virtio-fs daemon binary, executing code =
as root on the host. This issue is fixed in version 4.0.0.</td> <td>2026-08-07</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-50540" target=3D= "_blank" rel=3D"noopener">CVE-2026-50540</a></td>
</tr>

<td class=3D"vendor-product">Keysight--Hawkeye</td>
<td>Keysight IxChariot Endpoint and associated products contain a stack-bas=
ed buffer overflow. An unauthenticated remote attacker can send a specially=
crafted packet and execute arbitrary code with administrative privileges.<=

<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49435" target=3D= "_blank" rel=3D"noopener">CVE-2026-49435</a></td>
</tr>

<td class=3D"vendor-product">Keysight--IxChariot</td>
<td>Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer=
overflow. An unauthenticated remote attacker can send a specially crafted = packet to crash the endpoint or potentially execute arbitrary code.</td> <td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2017-20241" target=3D= "_blank" rel=3D"noopener">CVE-2017-20241</a></td>
</tr>

<td class=3D"vendor-product">Keysight--IxChariot</td>
<td>Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffe=
r overflow. An unauthenticated remote attacker can send a specially crafted=
packet to crash the endpoint or potentially execute arbitrary code.</td> <td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2017-20242" target=3D= "_blank" rel=3D"noopener">CVE-2017-20242</a></td>
</tr>

<td class=3D"vendor-product">keywordrush--Content Egg Affiliate Product Imp= orter & Price Comparison</td>
<td>The Content Egg - Affiliate Product Importer & Price Comparison plu= gin for WordPress is vulnerable to Arbitrary File Deletion via Path Travers=
al in versions up to and including 11.3.0. This is due to insufficient vali= dation of the 'img_file' field within the cegg_data post metadata: the valu=
e passes only through wp_strip_all_tags() (which does not strip path traver= sal sequences), is stored directly in post meta, and is later concatenated = without normalization into a filesystem path in getFullImgPath() before bei=
ng passed to PHP's unlink(). This makes it possible for authenticated attac= kers, with author-level access and above, to delete arbitrary files on the = affected site's server which may make remote code execution possible.</td> <td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15979" target=3D= "_blank" rel=3D"noopener">CVE-2026-15979</a></td>
</tr>

<td class=3D"vendor-product">klever-io--klever-go</td>
<td>Klever-Go is the Go implementation of the Klever blockchain protocol. P= rior to 1.7.18, the P2P resolver request handling logic is vulnerable to ha= sh-array amplification. A connected peer can send a compressed RequestDataT= ype_HashArrayType direct request that is only 442 bytes on the wire but exp= ands into 200,000 decoded hash entries inside the resolver path. The resolv= er's antiflood logic counts only a single logical message and the compresse=
d wire size, and while Batch.Decompress() caps the decompressed byte size, =
it never limits the number of decoded repeated-field items. As a result, bo=
th TxResolver and TrieNodeResolver preallocate and iterate over the entire = unchecked set of decoded hashes, causing remote memory and CPU amplificatio=
n against any node that accepts P2P peer connections. This issue is fixed i=
n version 1.7.18.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47249" target=3D= "_blank" rel=3D"noopener">CVE-2026-47249</a></td>
</tr>

<td class=3D"vendor-product">klever-io--klever-go</td>
<td>Klever-Go is the Go implementation of the Klever blockchain protocol. V= ersions 1.7.14 through 1.7.17 are vulnerable to a nil-pointer panic trigger=
ed by a protobuf Transaction whose embedded RawData sub-message is omitted.=
This omission causes RawData to decode to nil. Every transaction gossiped =
on the Klever-Go P2P network is decoded and validated synchronously inside = the libp2p pubsub topic-validator callback, where txVersionChecker.CheckTxV= ersion dereferences tx.RawData.Version with no nil check. Because the libp2=
p pubsub callback, the underlying go-libp2p-pubsub validation worker, and K= lever's own network/p2p layer install no recover(), the panic propagates an=
d crashes the entire node process. The attacker payload is a 3-byte protobu=
f message; no validator key, stake, funds, or on-chain account is required,=
and delivery aimed at enough of the BLS validator set can halt block produ= ction, resulting in a chain halt. This issue has been fixed in version 1.7.= 18.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52878" target=3D= "_blank" rel=3D"noopener">CVE-2026-52878</a></td>
</tr>

<td class=3D"vendor-product">klever-io--klever-go</td>
<td>Klever-Go is the Go implementation of the Klever blockchain protocol. I=
n versions 1.7.14 through 1.7.17, the direct-message ingress handler spawns=
a new goroutine for every incoming direct message before the processor-lev=
el antiflood layer makes any admission decision, with no semaphore, throttl= er, or bound on the number of concurrent in-flight spawns. Because the anti= flood check runs inside the spawned goroutine rather than before it, a sing=
le connected peer can open a direct-send stream and send a stream of well-f= ormed messages to force unbounded goroutine creation, where each goroutine = allocates its own stack and holds a message reference until processing comp= letes, adding scheduler and garbage-collection pressure faster than the run= time can drain it. This lets one peer degrade the node's availability and i=
ts ability to process legitimate traffic, resulting in a remotely triggerab=
le denial of service. The issue is fixed in 1.7.18.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52879" target=3D= "_blank" rel=3D"noopener">CVE-2026-52879</a></td>
</tr>

<td class=3D"vendor-product">klever-io--klever-go</td>
<td>Klever-Go is the Go implementation of the Klever blockchain protocol. V= ersions from 1.7.14 through 1.7.17 are vulnerable to a remotely triggerable=
denial of service. Both REST APIs are started with the Gin Engine.Run conv= enience method, which serves requests through Go's default HTTP server with=
no ReadHeaderTimeout, ReadTimeout, or MaxHeaderBytes configured. As a resu= lt, incoming connections that never complete their request headers are held=
open indefinitely. When a REST listener is reachable beyond localhost thro= ugh the documented all-interface bind or a Docker port-publish deployment, =
a single unauthenticated client can open many slow-header connections and h= old them open until server file descriptors are exhausted, preventing the A=
PI from accepting new connections. This renders the REST API unavailable to=
legitimate clients. This issue is fixed in version 1.7.18.</td> <td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52880" target=3D= "_blank" rel=3D"noopener">CVE-2026-52880</a></td>
</tr>

<td class=3D"vendor-product">Koenkk--zigbee2mqtt</td>
<td>Zigbee2MQTT's ExternalJSExtension.getFilePath() (lib/extension/external= JS.ts) joins a `name` parameter received via an MQTT message (topic zigbee2= mqtt/bridge/request/extension/save) into the extensions base path using pat= h.join(basePath, name) with no sanitization. Because path.join() resolves `= ../` sequences, a name such as `../../tmp/evil.js` escapes the intended ext= ensions directory. The extension handler only validates that the name ends =
in .js/.mjs/.cjs, writes the file, and then dynamically imports it via Node= .js import(), achieving remote code execution. Requires the `enable_externa= l_js` config option (off by default, but commonly enabled in legacy install=
s) and MQTT broker access, which is frequently unauthenticated in real depl= oyments. The identical unsanitized getFilePath() is also used by the extens= ion-removal handler, enabling arbitrary file deletion.</td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71279" target=3D= "_blank" rel=3D"noopener">CVE-2026-71279</a></td>
</tr>

<td class=3D"vendor-product">Koha Community--Koha</td>
<td>Koha's reports/acquisitions_stats.pl builds its per-cell statistics que=
ry in sub calculate by interpolating the user-controlled Filter request par= ameters directly into WHERE fragments covering aqbasket.closedate, aqorders= .datereceived, aqbooksellers.name, items.homebranch, items.ccode, biblioite= ms.itemtype, aqbudgets.budget_code, aqorders.sort1, and aqorders.sort2. The=
statement is prepared and executed with no bound parameters. An authentica= ted staff user holding the reports module permission can inject arbitrary S=
QL and read any table reachable by the Koha database user, including borrow= ers (password hashes, two-factor secrets, personal data), borrower_password= _recovery, api_keys, and sessions.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70369" target=3D= "_blank" rel=3D"noopener">CVE-2026-70369</a></td>
</tr>

<td class=3D"vendor-product">Koha Community--Koha</td>
<td>Koha's reports/catalogue_stats.pl builds dynamic SQL in sub calculate b=
y interpolating the user-controlled Line and Column request parameters dire= ctly into identifier positions of the query (SELECT DISTINCTROW, GROUP BY, = ORDER BY) with no whitelist validation. When Line contains itemcallnumber a=
nd the cotedigits parameter is truthy, cotedigits is additionally concatena= ted raw as the numeric argument of a LEFT() call. An authenticated staff us=
er holding the reports module permission can inject arbitrary SQL and read = any table reachable by the Koha database user, including borrowers (passwor=
d hashes, two-factor secrets, personal data), api_keys, and sessions.</td> <td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70370" target=3D= "_blank" rel=3D"noopener">CVE-2026-70370</a></td>
</tr>

<td class=3D"vendor-product">Koha Community--Koha</td>
<td>Koha's reports/issues_avg_stats.pl builds dynamic SQL in sub calculate =
by concatenating several user-controlled request parameters directly into t=
he query string. The Line and Column parameters are not validated against a=
ny whitelist and land verbatim in identifier positions (SELECT DISTINCTROW,=
GROUP BY, ORDER BY), and each Filter slot is concatenated raw into single-= quoted LIKE, BETWEEN, and comparison fragments with no bound parameters. An=
authenticated staff user holding the reports module permission can inject = arbitrary SQL and read any table reachable by the Koha database user, inclu= ding borrowers (password hashes, two-factor secrets, personal data), api_ke= ys, and sessions.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70371" target=3D= "_blank" rel=3D"noopener">CVE-2026-70371</a></td>
</tr>

<td class=3D"vendor-product">Koha Community--Koha</td>
<td>Koha's reports/bor_issues_top.pl builds dynamic SQL in sub calculate by=
concatenating several user-controlled request parameters directly into the=
query string. The Criteria parameter is only normalized by a table-name pr= efix and is never whitelisted, landing verbatim in identifier positions (SE= LECT DISTINCTROW, GROUP BY, ORDER BY); Filter values are concatenated raw i= nto single-quoted LIKE, BETWEEN, and comparison fragments, and the Limit pa= rameter is appended raw to a LIMIT clause. An authenticated staff user hold= ing the reports module permission can inject arbitrary SQL and read any tab=
le reachable by the Koha database user, including borrowers (password hashe=
s, two-factor secrets, personal data), api_keys, and sessions.</td> <td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70372" target=3D= "_blank" rel=3D"noopener">CVE-2026-70372</a></td>
</tr>

<td class=3D"vendor-product">Koha Community--Koha</td>
<td>Koha's reports/issues_stats.pl (the circulation statistics report) buil=
ds its calculation query in sub calculate by concatenating several user-con= trolled request parameters directly into the SQL string. The PeriodTypeSel,=
PeriodDaySel, and PeriodMonthSel parameters are interpolated raw into sing= le-quoted equality and function-comparison fragments, and the Filter slots = plus the Line and Column identifiers are likewise interpolated with no whit= elist and no placeholder binding. An authenticated staff user holding the r= eports module permission can inject arbitrary SQL and read any table reacha= ble by the Koha database user, including borrowers (password hashes, two-fa= ctor secrets, personal data), api_keys, and sessions.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70373" target=3D= "_blank" rel=3D"noopener">CVE-2026-70373</a></td>
</tr>

<td class=3D"vendor-product">Koha Community--Koha</td>
<td>Koha's guided report builder (reports/guided_reports.pl) reads the `ord= er_by` CGI parameter and, for each value, a dynamically-named `{order}_oval= ue` parameter, and concatenates both directly into an SQL ORDER BY clause w= ith no allowlist or validation: `my @order_by =3D $input->multi_param('o= rder_by'); foreach my $order (@order_by) { my $value =3D $input->param($= order . "_ovalue"); $query_orderby =3D " ORDER BY $order $value"; }`. The r= esulting string is appended verbatim to the final query in C4::Reports::Gui= ded (`$query .=3D $orderby;`) with no escaping. Since ORDER BY columns cann=
ot be bound via prepared-statement placeholders, this requires an explicit = allowlist, which does not exist. Any staff account with the low-privilege c= reate_reports or execute_reports permission (commonly granted to non-admin = library staff) can perform time-based blind SQL injection against the Koha = database, which stores patron PII and staff/LDAP credentials.</td> <td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71288" target=3D= "_blank" rel=3D"noopener">CVE-2026-71288</a></td>
</tr>

<td class=3D"vendor-product">kosinix--raster</td>
<td>The raster Rust crate's crop() function (src/editor.rs) clamps the crop=
width/height against source dimensions but only clamps the offset_x/offset=
_y parameters against 0, never against the source width/height. When an off= set exceeds the corresponding source dimension, `width2 - offset_x` (or the=
height equivalent) underflows to a negative i32, which release builds do n=
ot trap; the negative value is then cast to usize inside Image::blank()'s V= ec::with_capacity() call, triggering a capacity-overflow panic and crashing=
the process on a single crafted crop request.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71202" target=3D= "_blank" rel=3D"noopener">CVE-2026-71202</a></td>
</tr>

<td class=3D"vendor-product">krayin--laravel-crm</td>
<td>Krayin CRM 2.2.4 contains a missing authentication vulnerability in the=
installer middleware that allows unauthenticated remote attackers to overw= rite the primary administrator account by sending a crafted HTTP POST reque=
st with the X-Requested-With: XMLHttpRequest header to bypass the CanInstal=
l middleware redirect check. Attackers can supply arbitrary name, email, an=
d password values to the admin-config-setup endpoint, which performs an una= uthenticated updateOrInsert targeting the hardcoded administrator user ID, = enabling full administrative access to all CRM data.</td>

<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-41452" target=3D= "_blank" rel=3D"noopener">CVE-2026-41452</a></td>
</tr>

<td class=3D"vendor-product">krayin--laravel-crm</td>
<td>Krayin CRM before 2.2.4 contains a blind SQL injection vulnerability in=
the leads DataGrid that allows authenticated users with leads access to in= ject arbitrary SQL into a HAVING clause by manipulating the rotten_lead[in]=
query parameter, which is concatenated without parameterized binding direc= tly into a havingRaw() call in LeadDataGrid.php. Attackers can exploit this=
flaw using time-based and boolean-based blind injection techniques to extr= act the entire database contents, including user credential hashes, CRM rec= ords, and application configuration data.</td>
<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-41453" target=3D= "_blank" rel=3D"noopener">CVE-2026-41453</a></td>
</tr>

<td class=3D"vendor-product">lattepress--AnsPress Question and answer</td> <td>Subscriber Broken Access Control in AnsPress - Question and answer 4.4.=
4 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65554" target=3D= "_blank" rel=3D"noopener">CVE-2026-65554</a></td>
</tr>

<td class=3D"vendor-product">Leantime--Leantime</td>
<td>Leantime through 3.6.2 exposes the JSON-RPC methods leantime.rpc.TwoFA.= TwoFA.getSetupData, saveSecret, verifyAndEnable, and disable2FA, which act =
on a caller-supplied userId parameter with no ownership check, session pinn= ing, or permission-attribute gate (unlike other RPC-exposed methods in the = same dispatcher). Any authenticated user can invoke getSetupData with an ar= bitrary userId to read that user's live TOTP secret, or disable2FA to strip=
another account's two-factor authentication entirely, fully defeating acco= unt-level 2FA protection. This is related to CVE-2026-15509, which covers a=
similar missing-authorization pattern in the JSON-RPC editUser/addUser rol= e-assignment path in the same application; the TwoFA service methods addres= sed here are a distinct, independently fixable set of RPC endpoints.</td> <td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54418" target=3D= "_blank" rel=3D"noopener">CVE-2026-54418</a></td>
</tr>

<td class=3D"vendor-product">Lenovo--XClarity Orchestrator</td>
<td>An improper neutralization of special elements used in an operating sys= tem command vulnerability was reported in Lenovo XClarity Orchestrator (LXC=
O) 2.2.0 that could allow an authenticated attacker to execute arbitrary op= erating system commands as a privileged user under a specific circumstance.= </td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16793" target=3D= "_blank" rel=3D"noopener">CVE-2026-16793</a></td>
</tr>

<td class=3D"vendor-product">letta-ai--LettaBot</td>
<td>A vulnerability was detected in letta-ai LettaBot 0.2.0. Impacted is an=
unknown function of the file src/api/server.ts of the component API Status=
Route. The manipulation results in missing authentication. The attack may =
be performed from remote. The exploit is now public and may be used. The ve= ndor was contacted early about this disclosure but did not respond in any w= ay.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18990" target=3D= "_blank" rel=3D"noopener">CVE-2026-18990</a></td>
</tr>

<td class=3D"vendor-product">lightsyncpro--LightSync Pro Connect & Sync=
Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock</td> <td>The LightSync Pro plugin for WordPress is vulnerable to arbitrary file = uploads due to missing file type validation in the rest_replace_media() fun= ction in all versions up to, and including, 2.1.6. This makes it possible f=
or authenticated attackers, with Author-level access and above, to upload a= rbitrary files on the affected site's server which may make remote code exe= cution possible.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6147" target=3D"= _blank" rel=3D"noopener">CVE-2026-6147</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: sct=
p: don't free the ASCONF's own transport in DEL-IP processing sctp_process_= asconf() caches the transport the ASCONF chunk is processed against in asco= nf->transport (=3D=3D chunk->transport, set once in sctp_rcv()). For =
an ASCONF located through its Address Parameter by __sctp_rcv_asconf_lookup= (), that cached transport corresponds to the Address Parameter, which need = not be the packet's source address. sctp_process_asconf_param() rejects a D= EL-IP for the packet source address (ADDIP D8, SCTP_ERROR_DEL_SRC_IP), but = nothing protects asconf->transport. A single ASCONF can therefore carry,=
in order: [Address Parameter L] [DEL-IP L] [DEL-IP 0.0.0.0] where L differ=
s from the source. The DEL-IP for L passes the D8 check and calls sctp_asso= c_rm_peer() on the transport that asconf->transport still points at, fre= eing it (RCU-deferred). The following wildcard DEL-IP then reuses the now-d= angling asconf->transport in sctp_assoc_set_primary() and sctp_assoc_del= _nonprimary_peers(): set_primary() dereferences the freed transport (->i= paddr, ->state) and plants the dangling pointer into asoc->peer.prima= ry_path / active_path, and del_nonprimary_peers(), keeping only the pointer=
that is no longer on the list, removes every real transport, leaving the a= ssociation with a transport_count of 0 and primary_path/active_path pointin=
g at freed memory. Reject a DEL-IP that targets the transport the ASCONF is=
being processed against, mirroring the existing source-address guard, so t=
he wildcard branch can never reuse a freed transport.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64564" target=3D= "_blank" rel=3D"noopener">CVE-2026-64564</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: xfr=
m: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() When iptfs_s= kb_add_frags() copies frag references from the source frag walk into a new = SKB, it increments the page reference count via __skb_frag_ref() but does n=
ot propagate SKBFL_SHARED_FRAG to the destination SKB's skb_shinfo->flag=
s. If the source SKB carries shared frags (e.g. from a page-pool backed rec= eive path), the new inner SKB will appear to ESP as having privately owned = frags. A subsequent esp_input() call for a nested transport-mode SA then ta= kes the no-COW fast path and decrypts in place, writing over pages that are=
still referenced by the outer IPTFS SKB. This causes kernel-visible memory=
corruption and can trigger a panic. All other frag-transfer helpers in the=
kernel (skb_try_coalesce, skb_gro_receive, __pskb_copy_fclone, skb_shift, = skb_segment) correctly propagate SKBFL_SHARED_FRAG; align iptfs_skb_add_fra= gs() with this convention by setting the flag inside the loop immediately a= fter __skb_frag_ref() and nr_frags++, so every exit path that attaches a fr=
ag unconditionally propagates SKBFL_SHARED_FRAG.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64566" target=3D= "_blank" rel=3D"noopener">CVE-2026-64566</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: smb=
: client: fix double-free in SMB2_close() replay A response-bearing attempt=
can return a replayable error and free its response buffer. If SMB2_close_= init() fails before the next send, cleanup retains the previous buffer type=
and frees that response again. Reset response bookkeeping before each atte= mpt to prevent the stale free.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64597" target=3D= "_blank" rel=3D"noopener">CVE-2026-64597</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: KVM=
: x86: Check for invalid/obsolete root *after* making MMU pages available C= heck for a "stale" page fault, i.e. for an invalid and/or obsolete root, af= ter making MMU pages available for the shadow MMU. If reclaiming shadow pag=
es zaps an in-use root, i.e. marks it invalid, then KVM will attempt to map=
memory into an invalid root. On its own, populating an invalid root is "fi= ne", but because child shadow pages inherit their parent's role, any childr=
en created during the map/fetch will be created as invalid pages, thus viol= ating KVM's invariant that invalid pages are never on the list of active MM=
U pages. Note, the underlying flaw has existed since KVM first started trac= king invalid roots in 2008 (commit 2e53d63acba7, "KVM: MMU: ignore zapped r= oot pagetables"), but the true badness only came along in 2020 (Linux 5.9) = with the invariant that invalid shadow pages can't be on the list of active=
pages. Note #2, inheriting role.invalid when creating child shadow pages i=
s also far from ideal; that flaw will be addressed separately.</td> <td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64561" target=3D= "_blank" rel=3D"noopener">CVE-2026-64561</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: KVM=
: nVMX: Hide shadow VMCS right after VMCLEAR free_nested() frees the shadow=
VMCS while vmcs01 still points to it. But because it is asynchronous with = respect to loaded_vmcs_clear(), the vCPU might migrate before the pointer i=
s cleared and __loaded_vmcs_clear() may then execute VMCLEAR. The VMCS need=
s to stay attached until its explicit VMCLEAR completes, but then it can be=
hidden and the page safely freed.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64562" target=3D= "_blank" rel=3D"noopener">CVE-2026-64562</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: ksm= bd: validate compound request size before reading StructureSize2 When ksmbd=
validates a compound (chained) SMB2 request, ksmbd_smb2_check_message() re= ads pdu->StructureSize2 without first checking that the compound element=
is large enough to contain it. StructureSize2 is a 2-byte field at offset =
64 (__SMB2_HEADER_STRUCTURE_SIZE) from the start of each element. The compo= und-walking logic only guarantees that a full 64-byte SMB2 header is presen=
t for the trailing element: when NextCommand is 0, len is reduced to the nu= mber of bytes remaining after next_smb2_rcv_hdr_off. A remote client can cr= aft a compound request whose last element has exactly 64 bytes, so the 2-by=
te StructureSize2 read at offset 64 extends one byte past the receive buffe=
r, producing a slab-out-of-bounds read. BUG: KASAN: slab-out-of-bounds in k= smbd_smb2_check_message (fs/smb/server/smb2misc.c:402) Read of size 2 at ad=
dr ffff888012ae31ac by task kworker/0:1/14 The buggy address is located 172=
bytes inside of allocated 173-byte region Workqueue: ksmbd-io handle_ksmbd= _work Call Trace: ... kasan_report (mm/kasan/report.c:595) ksmbd_smb2_check= _message (fs/smb/server/smb2misc.c:402) handle_ksmbd_work (fs/smb/server/se= rver.c:119) process_one_work (kernel/workqueue.c:3314) worker_thread (kerne= l/workqueue.c:3397) kthread (kernel/kthread.c:436) ret_from_fork (arch/x86/= kernel/process.c:158) ret_from_fork_asm (arch/x86/entry/entry_64.S:245) Rej= ect any compound element that is too small to hold StructureSize2 before de= referencing it.</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64578" target=3D= "_blank" rel=3D"noopener">CVE-2026-64578</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: wif=
i: brcmfmac: drain bus_reset work on device removal brcmf_fw_crashed() and = the debugfs "reset" entry both schedule drvr->bus_reset, whose callback = recovers drvr through container_of() and dereferences it. The removal path = frees drvr (brcmf_free -> wiphy_free) without draining the work, so a bu= s_reset callback pending or running during removal can outlive drvr. Cancel= lation cannot live in brcmf_detach() or brcmf_free(): the work callback rea= ches teardown through the bus .reset op (PCIe brcmf_pcie_reset -> brcmf_= detach; SDIO brcmf_sdio_bus_reset -> brcmf_sdiod_remove -> brcmf_free=
), so cancelling there would wait for the running work and deadlock. Add a = per-bus mutex (bus_reset_lock) and route all arming through brcmf_bus_sched= ule_reset(), which under the lock skips when the bus is marked removing. Ea=
ch bus remove entry calls brcmf_bus_cancel_reset_work(), which under the sa=
me lock sets removing and cancels the work. Holding the mutex across cancel= _work_sync() makes the set-removing + drain step atomic. Every producer rea= ches the arming path from process context -- the PCIe firmware-halt notific= ation runs in the threaded IRQ handler (brcmf_pcie_isr_thread) and the SDIO=
hostmail path runs from the data workqueue -- so the mutex is taken only i=
n sleepable contexts. Where applicable the remove entry first stops the fir= mware-crash producer: on PCIe mask the mailbox and synchronize_irq; on SDIO=
unregister the bus interrupt and cancel the data worker, which also report=
s firmware halts through brcmf_fw_crashed(). The mutex is initialized at bu=
s allocation. The SDIO suspend power-off path frees drvr through the same b= rcmf_sdiod_remove() and takes the same lock; resume re-allows the work only=
on a successful re-probe. Also guard brcmf_fw_crashed() against a NULL bus= _if/drvr: it can fire before brcmf_attach() wires up drvr, and it dereferen= ces drvr (bphy_err/brcmf_dev_coredump) before reaching the arming gate. The=
bus_reset work is shared across buses, so the drain is applied to every re= move path: PCIe (the .reset op introduced by the Fixes commit), SDIO (arms = the same work through brcmf_fw_crashed()), and USB (via the debugfs "reset"=
entry). cancel_work_sync() drains a running or pending bus_reset work item=
before removal frees drvr, and patch 1/2 makes the scratch-buffer release = safe when reset teardown has already released those DMA buffers. This patch=
fixes the lifetime of the bus_reset work item itself. It does not attempt =
to address the separate, pre-existing lifetime of the asynchronous firmware=
completion started by the PCIe reset path. That callback needs its own lif= etime/ownership protocol and is being tracked separately. This issue was fo= und by an in-house static analysis tool.</td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64586" target=3D= "_blank" rel=3D"noopener">CVE-2026-64586</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: smb= /client: Fix error code in smb2_aead_req_alloc() The "*num_sgs" variable is=
a u32 so "ERR_PTR(*num_sgs)" doesn't work. We would have to do something s= imilar to the previous line where it's cast to int and then long. However, = it's simpler to store the return in an int ret variable. This bug would eve= ntually result in a crash when dereference the invalid error pointer.</td> <td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64598" target=3D= "_blank" rel=3D"noopener">CVE-2026-64598</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: rha= shtable: clear stale iter->p on table restart rhashtable_walk_start_chec= k() has two restart paths when resuming a walk. When iter->walker.tbl is=
valid, it re-validates iter->p against the table and sets iter->p =
=3D NULL if the object is gone. When iter->walker.tbl is NULL (table was=
freed during resize), it resets slot and skip but forgets to clear iter-&g= t;p. rhashtable_walk_next() then dereferences the stale iter->p, reading=
freed memory. This is a use-after-free. Any caller that does multi-fragmen=
t rhashtable walks across walk_stop/walk_start boundaries is affected. Conc= rete cases include netlink_diag (__netlink_diag_dump in net/netlink/diag.c)=
and TIPC (tipc_nl_sk_walk in net/tipc/socket.c). Crash stack (netlink_diag=
): BUG: KASAN: slab-use-after-free in rhashtable_walk_next+0x365/0x3c0 Read=
of size 8 at addr ffff88801a9d2438 (freed kmalloc-2k, offset 1080) Call Tr= ace: rhashtable_walk_next+0x365/0x3c0 (lib/rhashtable.c:1016) __netlink_dia= g_dump+0x160/0x760 (net/netlink/diag.c:122) netlink_diag_dump+0xc2/0x240 ne= tlink_dump+0x5bc/0x1270 netlink_recvmsg+0x7a3/0x980 sock_recvmsg+0x1bc/0x20=
0 __sys_recvfrom+0x1d4/0x2c0</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64563" target=3D= "_blank" rel=3D"noopener">CVE-2026-64563</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: btr= fs: reject free space cache with more entries than pages When loading a v1 = free space cache, __load_free_space_cache() takes num_entries and num_bitma=
ps straight from the on-disk btrfs_free_space_header. That header is stored=
in the tree_root under a key with type 0, which the tree-checker has no ca=
se for, so neither count is validated before the load trusts it. The load l= oops num_entries times and maps the next page whenever the current one runs=
out, going through io_ctl_check_crc() -> io_ctl_map_page(), which does = io_ctl->pages[io_ctl->index++]. But pages[] is allocated in io_ctl_in= it() from the cache inode's i_size, not from num_entries: num_pages =3D DIV= _ROUND_UP(i_size_read(inode), PAGE_SIZE); io_ctl->pages =3D kcalloc(num_= pages, sizeof(struct page *), GFP_NOFS); So if num_entries claims more reco= rds than the pages can hold, io_ctl->index runs off the end of pages[]. = The write side never hits this because io_ctl_add_entry() and io_ctl_add_bi= tmap() both stop once io_ctl->index >=3D io_ctl->num_pages; the re=
ad side just never had the same check. To trigger it, take a clean cache (n= um_entries =3D <N> here), set num_entries in the header to 0x10000, a=
nd fix up the leaf checksum so it still passes the tree-checker. The cache = inode has i_size =3D 65536, so num_pages is 16 and pages[] is a 16-pointer = (kmalloc-128) array. The load now tries to read 65536 entries, io_ctl->i= ndex walks up to 16, and pages[16] is read past the array: BUG: KASAN: slab= -out-of-bounds in io_ctl_check_crc (fs/btrfs/free-space-cache.c:420 fs/btrf= s/free-space-cache.c:565) Read of size 8 at addr ffff88800c833a80 by task k= worker/u8:3/58 io_ctl_check_crc (fs/btrfs/free-space-cache.c:420 fs/btrfs/f= ree-space-cache.c:565) __load_free_space_cache (fs/btrfs/free-space-cache.c= :655 fs/btrfs/free-space-cache.c:820) load_free_space_cache (fs/btrfs/free-= space-cache.c:1017) caching_thread (fs/btrfs/block-group.c:880) btrfs_work_= helper (fs/btrfs/async-thread.c:312) process_one_work worker_thread kthread=
ret_from_fork free-space-cache.c:420 is io_ctl_map_page(), inlined into io= _ctl_check_crc() at line 565, which is why that is the frame KASAN names. T=
he out-of-bounds slot is then treated as a struct page and handed to crc32c= (), so the bad read turns into a GP fault. Add the missing check to io_ctl_= check_crc(), which is where both the entry loop and the bitmap loop end up.=
When num_entries is too large the load now fails like any corrupt cache: _= _load_free_space_cache() drops it and rebuilds the free space from the exte=
nt tree, so a valid cache is never rejected.</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64567" target=3D= "_blank" rel=3D"noopener">CVE-2026-64567</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: wif=
i: mac80211: fix unsol_bcast_probe_resp double free on alloc failure ieee80= 211_set_unsol_bcast_probe_resp() calls kfree_rcu() on the old template befo=
re allocating the replacement. If the kzalloc() then fails, it returns -ENO= MEM while link->u.ap.unsol_bcast_probe_resp still points at the object a= lready queued for freeing. A later update or AP teardown re-queues that sam=
e rcu_head; the second free is caught by KASAN when the RCU sheaf is proces= sed in softirq: BUG: KASAN: double-free in rcu_free_sheaf (mm/slub.c:5850) = Free of addr ffff88800d06f300 by task exploit/145 ... __rcu_free_sheaf_prep= are (mm/slub.c:2634 mm/slub.c:2940) rcu_free_sheaf (mm/slub.c:5850) rcu_cor=
e (kernel/rcu/tree.c:2617 kernel/rcu/tree.c:2869) handle_softirqs (kernel/s= oftirq.c:622) The buggy address belongs to the cache kmalloc-128 of size 12=
8 Queue the old object for kfree_rcu() only after the new one is published,=
matching ieee80211_set_probe_resp() and ieee80211_set_s1g_short_beacon().<=

<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64568" target=3D= "_blank" rel=3D"noopener">CVE-2026-64568</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: wif=
i: mac80211: fix fils_discovery double free on alloc failure ieee80211_set_= fils_discovery() calls kfree_rcu() on the old template before allocating th=
e replacement. If the kzalloc() then fails, it returns -ENOMEM while link-&= gt;u.ap.fils_discovery still points at the object already queued for freein=
g. A later update or AP teardown (ieee80211_stop_ap()) re-queues that same = rcu_head; the second free is caught by KASAN when the RCU sheaf is processe=
d in softirq: BUG: KASAN: double-free in rcu_free_sheaf (mm/slub.c:5850) Fr=
ee of addr ffff88800c065280 by task swapper/0/0 ... __rcu_free_sheaf_prepar=
e (mm/slub.c:2634 mm/slub.c:2940) rcu_free_sheaf (mm/slub.c:5850) rcu_core = (kernel/rcu/tree.c:2617 kernel/rcu/tree.c:2869) handle_softirqs (kernel/sof= tirq.c:622) The buggy address belongs to the cache kmalloc-96 of size 96 Qu= eue the old object for kfree_rcu() only after the new one is published, mat= ching ieee80211_set_probe_resp() and ieee80211_set_s1g_short_beacon().</td> <td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64570" target=3D= "_blank" rel=3D"noopener">CVE-2026-64570</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: wif=
i: mac80211: tear down new links on vif update error path When ieee80211_vi= f_update_links() adds new links it allocates a link container for each and = calls ieee80211_link_init() (which registers the per-link debugfs files wit=
h file->private_data pointing into the container) and ieee80211_link_set= up(). If the subsequent drv_change_vif_links() fails, the error path restor=
es the old pointers and jumps to 'free', which frees the new containers but=
never removes their debugfs entries or stops the links. The debugfs files = survive with file->private_data dangling at the freed container, so a la= ter open()+read() (e.g. link-1/txpower) dereferences freed memory in ieee80= 211_if_read_link(), a use-after-free. The removal path already dismantles l= inks correctly via ieee80211_tear_down_links(), which removes each link's k= eys and debugfs entries and calls ieee80211_link_stop(); the add path on th=
e error branch does not. Commit be1ba9ed221f ("wifi: mac80211: avoid weird = state in error path") hardened this same error path for the link-removal ca=
se (new_links =3D=3D 0) but left the newly-added links' teardown unaddresse=
d. drv_change_vif_links() can fail at runtime on MLO drivers (internal allo= cation / queue / firmware command failures). Remove the new links' debugfs = entries and stop them before freeing. BUG: KASAN: slab-use-after-free in ie= ee80211_if_read_link (net/mac80211/debugfs_netdev.c:127) Read of size 8 at = addr ffff888011290000 by task exploit/145 Call Trace: ... ieee80211_if_read= _link (net/mac80211/debugfs_netdev.c:127) short_proxy_read (fs/debugfs/file= .c:373) vfs_read (fs/read_write.c:572) ksys_read (fs/read_write.c:716) do_s= yscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_after_hwframe (= arch/x86/entry/entry_64.S:121) ... Oops: general protection fault, probably=
for non-canonical address 0xdffffc000000000a RIP: 0010:ieee80211_if_read_l= ink (net/mac80211/debugfs_netdev.c:127) Kernel panic - not syncing: Fatal e= xception</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64574" target=3D= "_blank" rel=3D"noopener">CVE-2026-64574</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: bpf=
: tcp: fix double sock release on batch realloc bpf_iter_tcp_batch() releas=
es the current batch via bpf_iter_tcp_put_batch(), which drops the socket r= efs and rewrites each slot with the socket cookie, then grows the batch. cu= r_sk/end_sk are kept for bpf_iter_tcp_resume(), but on realloc failure the = function returns ERR_PTR() before resume runs, leaving cur_sk < end_sk o= ver slots that now hold cookies rather than sock pointers. bpf_iter_tcp_seq= _stop() then calls bpf_iter_tcp_put_batch() again and dereferences a cookie=
as a struct sock. Empty the batch on the failure path so stop() does not r= elease it again. The sockets were already freed by the first bpf_iter_tcp_p= ut_batch(), so nothing leaks, and a later read() rescans the bucket from th=
e start instead of skipping it. The sibling GFP_NOWAIT failure path still h= olds real socket references and is left for stop() to release. BUG: KASAN: = null-ptr-deref in __sock_gen_cookie Read of size 8 at addr 0000000000000059=
by task exploit ... __sock_gen_cookie (net/core/sock_diag.c:28) bpf_iter_t= cp_put_batch (net/ipv4/tcp_ipv4.c:2918) bpf_iter_tcp_seq_stop (net/ipv4/tcp= _ipv4.c:3270) bpf_seq_read (kernel/bpf/bpf_iter.c:205) vfs_read (fs/read_wr= ite.c:572) ksys_read (fs/read_write.c:716) do_syscall_64 entry_SYSCALL_64_a= fter_hwframe Kernel panic - not syncing: Fatal exception</td> <td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64575" target=3D= "_blank" rel=3D"noopener">CVE-2026-64575</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: nex= thop: initialize extack in nh_res_bucket_migrate() nh_res_bucket_migrate() = passes an uninitialized netlink_ext_ack to call_nexthop_res_bucket_notifier= s(). When nh_notifier_res_bucket_info_init() fails (e.g. the kzalloc return=
s -ENOMEM), the error is propagated back before any notifier sets extack._m= sg, and the error path formats the stale pointer with pr_err_ratelimited("%= s\n", extack._msg). With CONFIG_INIT_STACK_NONE this dereferences uninitial= ized stack memory: Oops: general protection fault, probably for non-canonic=
al address ... KASAN: maybe wild-memory-access in range [...] RIP: 0010:str= ing (lib/vsprintf.c:730) vsnprintf (lib/vsprintf.c:2945) _printk (kernel/pr= intk/printk.c:2504) nh_res_bucket_migrate (net/ipv4/nexthop.c:1816) nh_res_= table_upkeep (net/ipv4/nexthop.c:1866) rtm_new_nexthop (net/ipv4/nexthop.c:= 3323) rtnetlink_rcv_msg (net/core/rtnetlink.c:7076) netlink_sendmsg (net/ne= tlink/af_netlink.c:1900) Kernel panic - not syncing: Fatal exception Zero-i= nitialize extack so _msg is NULL on error paths that never set it.</td> <td>2026-08-05</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64576" target=3D= "_blank" rel=3D"noopener">CVE-2026-64576</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: gtp=
: check skb_pull_data() return in gtp1u_send_echo_resp() gtp1u_send_echo_re= sp() ignores skb_pull_data()'s return value. Its caller gtp1u_udp_encap_rec= v() only guarantees 16 bytes (udphdr + gtp1_header), but the pull requests =
20 (gtp1_header_long + udphdr). For a 16-19 byte echo request the pull fail=
s and returns NULL without advancing skb->data; execution continues, and=
the following skb_push() plus the IP header pushed by iptunnel_xmit() move=
skb->data below skb->head, tripping skb_under_panic(). Fix it by dro= pping the packet when skb_pull_data() fails. skbuff: skb_under_panic: ... k= ernel BUG at net/core/skbuff.c:214! Call Trace: skb_push (net/core/skbuff.c= :2648) iptunnel_xmit (net/ipv4/ip_tunnel_core.c:82) gtp_encap_recv (drivers= /net/gtp.c:701 drivers/net/gtp.c:808 drivers/net/gtp.c:920) udp_queue_rcv_o= ne_skb (net/ipv4/udp.c:2388) ... Kernel panic - not syncing: Fatal exceptio=
n in interrupt</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64577" target=3D= "_blank" rel=3D"noopener">CVE-2026-64577</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: xfr= m6: clear dst.dev on error to avoid double netdev_put in xfrm6_fill_dst() O=
n the error path where in6_dev_get(dev) returns NULL, xfrm6_fill_dst() rele= ases the device reference with netdev_put() but leaves xdst->u.dst.dev s= et. dst_destroy() later calls netdev_put(dst->dev) again, so the same ne= t_device reference is released twice, underflowing its refcount (ref_tracke=
r WARNING + "unregister_netdevice: waiting for <dev> to become free")=
. Clear xdst->u.dst.dev after the netdev_put(), the same way the XFRM de= vice-offload paths xfrm_dev_state_add() and xfrm_dev_policy_add() in net/xf= rm/xfrm_device.c NULL ->dev when releasing the reference on error. ref_t= racker: reference already released. ref_tracker: allocated in: xfrm6_fill_d=
st (net/ipv6/xfrm6_policy.c:86) ... udpv6_sendmsg (net/ipv6/udp.c:1696) ...=
ref_tracker: freed in: xfrm6_fill_dst (net/ipv6/xfrm6_policy.c:90) ... WAR= NING: lib/ref_tracker.c:322 at ref_tracker_free+0x58b/0x780 dst_destroy (ne= t/core/dst.c:115) rcu_core handle_softirqs ...</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64580" target=3D= "_blank" rel=3D"noopener">CVE-2026-64580</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: xfr=
m: fix sk_dst_cache double-free in xfrm_user_policy() xfrm_user_policy() cl= ears the socket dst cache with __sk_dst_reset(), i.e. the non-atomic __sk_d= st_set(sk, NULL): it reads sk_dst_cache with rcu_dereference_protected(), s= tores NULL and dst_release()s the old dst. That is only safe if no other th= read modifies sk_dst_cache concurrently. For a connected UDP socket that do=
es not hold: the transmit fast path (udp_sendmsg -> sk_dst_check -> s= k_dst_reset) resets the cache locklessly with an atomic xchg(). A per-socke=
t policy change racing a send can make both sides observe the same old dst = and each dst_release() it, dropping the socket's single reference twice and=
freeing the xfrm_dst bundle while it is still referenced: BUG: KASAN: slab= -use-after-free in dst_release Write of size 4 at addr ffff88801897b6c0 by = task exploit/155 Call Trace: ... dst_release (... ./include/linux/rcuref.h:= 109) xfrm_user_policy (./include/net/sock.h:2239 ./include/net/sock.h:2256 = net/xfrm/xfrm_state.c:3053) do_ip_setsockopt (net/ipv4/ip_sockglue.c:1347) = ip_setsockopt (net/ipv4/ip_sockglue.c:1417) do_sock_setsockopt (net/socket.= c:2368) __sys_setsockopt (net/socket.c:2393) __x64_sys_setsockopt (net/sock= et.c:2396) do_syscall_64 (arch/x86/entry/syscall_64.c:94) entry_SYSCALL_64_= after_hwframe (arch/x86/entry/entry_64.S:121) Reachable by an unprivileged = user via a user+network namespace. Use the atomic sk_dst_reset() so the cac=
he is cleared and released with a single xchg(): whichever side wins releas=
es the dst once, the other sees NULL and does nothing. Behaviour is otherwi=
se unchanged.</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64581" target=3D= "_blank" rel=3D"noopener">CVE-2026-64581</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: RDM= A/rxe: Fix a use-after-free problem in rxe_mmap rxe_mmap() removes a rxe_mm= ap_info struct from the pending_mmaps list and releases pending_lock while = the struct's kref is still at 1: list_del_init(&ip->pending_mmaps); = spin_unlock_bh(&rxe->pending_lock); /* ref =3D=3D 1, no lock held */=
ret =3D remap_vmalloc_range(vma, ip->obj, 0); /* walks PTEs */ [...] rx= e_vma_open(vma); /* kref_get, ref =C3=83=C2=A2--=E2=84=A2 2 */ remap_vmallo= c_range_partial() walks PTEs without any lock. A concurrent DESTROY_CQ ioct=
l on another CPU calls: kref_put(&q->ip->ref, rxe_mmap_release) /=
* ref 1=C3=83=C2=A2-=C2=A0-=E2=84=A20 */ vfree(ip->obj) /* clears vmallo=
c PTEs mid-walk */ kfree(ip) /* frees rxe_mmap_info */ This yields: 1. Kern=
el crash, vmalloc_to_page() returns NULL when vfree wins the per-PTE race -= > vm_insert_page(NULL) =C3=83=C2=A2-=E2=84=A2 GPF in validate_page_befor= e_insert 2. Page UAF, vmalloc_to_page() reads a stale PTE before vfree clea=
rs it. User VMA holds a PTE to a free'd page which might eventually get rea= llocated later by vmalloc which allows the attacker to get a clean page-lev=
el UAF. It is worth noting that even though a page-level UAF is possible gi= ven the strong primitive, it is statistically very difficult to achieve giv=
en the very short time window (after the last insert_page and before the kr= ef_get). The call trace are as below: Oops: general protection fault, proba= bly for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN NOPTI=
KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] CPU=
: 0 UID: 1000 PID: 413 Comm: poc Not tainted 7.0.0-rc5-dirty #28 PREEMPT(la= zy) Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.15.0-1 04= /01/2014 RIP: 0010:validate_page_before_insert+0x32/0x300 Code: e5 41 57 41=
56 49 89 fe 41 55 41 54 53 48 89 f3 e8 93 b5 a3 ff 48 8d 7b 08 48 b8 00 00=
00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 7b 02 00 =
00 4c 8b 63 08 31 ff 4d 89 e5 41 83 e5 RSP: 0018:ffff88811b15f2f0 EFLAGS: 0= 0000202 RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 R= DX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000008 RBP: ffff8= 8811b15f318 R08: 0000000000000000 R09: 0000000000000000 R10: 00000000000000=
00 R11: 0000000000000000 R12: ffff8881181eee00 R13: 0000000000000000 R14: f= fff8881181eee00 R15: ffff8881181eee20 FS: 00007b1e000f76c0(0000) GS:ffff888= 4268e0000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000= 000080050033 CR2: 00007b1e00a24ac0 CR3: 0000000116eb3000 CR4: 0000000000000= 6f0 Call Trace: <TASK> insert_page+0x8f/0x190 ? __pfx_insert_page+0x1= 0/0x10 ? kasan_save_alloc_info+0x38/0x60 vm_insert_page+0x2e7/0x400 remap_v= malloc_range_partial+0x212/0x3e0 remap_vmalloc_range+0x6e/0xb0 ? __kasan_ch= eck_write+0x14/0x30 rxe_mmap+0x2e9/0x5d0 ib_uverbs_mmap+0x1ad/0x2c0 __mmap_= region+0x12c2/0x2ad0 ? __pfx___mmap_region+0x10/0x10 ? __sanitizer_cov_trac= e_switch+0x58/0xb0 ? mas_prev_slot+0x360/0x39c0 ? __sanitizer_cov_trace_swi= tch+0x58/0xb0 ? mas_next_slot+0x1e5b/0x2f40 ? __sanitizer_cov_trace_cmp8+0x= 18/0x30 ? unmapped_area_topdown+0x4dd/0x610 ? kfree+0x1b1/0x440 ? free_cpum= ask_var+0x16/0x30 ? __kasan_slab_free+0x7d/0xa0 ? __sanitizer_cov_trace_cmp= 8+0x18/0x30 mmap_region+0x2e6/0x3c0 do_mmap+0xa3e/0x12a0 ? __pfx_do_mmap+0x= 10/0x10 ? __kasan_check_write+0x14/0x30 ? down_write_killable+0xba/0x160 ? = __pfx_down_write_killable+0x10/0x10 ? __sanitizer_cov_trace_cmp4+0x16/0x30 = vm_mmap_pgoff+0x2d4/0x4a0 ? __pfx_vm_mmap_pgoff+0x10/0x10 ? fget+0x1bf/0x27=
0 ksys_mmap_pgoff+0x40c/0x690 ? __sanitizer_cov_trace_const_cmp4+0x16/0x30 =
? __pfx_ksys_mmap_pgoff+0x10/0x10 ? __kasan_check_write+0x14/0x30 ? _raw_sp= in_trylock+0xbb/0x130 ? __pfx__raw_spin_trylock+0x10/0x10 __x64_sys_mmap+0x= 135/0x1e0 x64_sys_c ---truncated---</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64582" target=3D= "_blank" rel=3D"noopener">CVE-2026-64582</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: usb=
: gadget: udc: bdc: free IRQ and drain func_wake_notify before teardown The=
Broadcom BDC UDC driver registers its IRQ handler with devm_request_irq() =
in bdc_udc_init(), so the IRQ is released by devm only after bdc_remove() r= eturns. devm releases resources in reverse LIFO order, but bdc_remove() run=
s bdc_udc_exit() and bdc_hw_exit() -> bdc_mem_free() manually before ret= urning: bdc_udc_exit() tears down individual endpoint objects via bdc_free_= ep(), while bdc_hw_exit() -> bdc_mem_free() frees and NULLs the DMA-cohe= rent status-report ring (bdc->srr.sr_bds) and kfree()s bdc->bdc_ep_ar= ray. Both happen while the IRQ handler (bdc_udc_interrupt, requested with I= RQF_SHARED) remains deliverable in the window up to the post-remove devm fr= ee_irq(). On receipt of a shared interrupt in that window, bdc_udc_interrup= t() dereferences bdc->srr.sr_bds[bdc->srr.dqp_index] (NULL or freed D= MA) and dispatches sr_handler callbacks that index into bdc_ep_array, causi=
ng a NULL-deref or use-after-free. The same window affects the delayed_work=
bdc->func_wake_notify, which is armed from the IRQ handler via bdc_sr_u= spc() -> handle_link_state_change() -> schedule_delayed_work() and ma=
y self-rearm from its own callback bdc_func_wake_timer(). No cancel exists = anywhere in the driver, so a queued work item that fires after bdc_remove()=
returns and the bdc structure is devm-freed dereferences freed memory. Rep= lace devm_request_irq() with request_irq() and add an explicit free_irq(bdc= ->irq, bdc) in bdc_remove(). Clear BDC_GIE before free_irq() to stop the=
device from asserting interrupts, then free_irq() drains any in-flight han= dler, then cancel_delayed_work_sync() drains the func_wake_notify delayed w= ork. This ordering ensures the IRQ handler and delayed work cannot interfer=
e with the subsequent endpoint and DMA teardown in bdc_udc_exit() and bdc_h= w_exit(). Wire the matching free_irq() into the bdc_udc_init() error path s=
o the IRQ is released on probe failure, and route the bdc_init_ep() failure=
through err0 instead of returning directly. This issue was found by an in-= house static analysis tool.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64583" target=3D= "_blank" rel=3D"noopener">CVE-2026-64583</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: usb=
: gadget: f_midi: cancel pending IN work before freeing the midi object The=
f_midi driver embeds a work item (midi->work) whose handler, f_midi_in_= work(), dereferences the enclosing struct f_midi through container_of(). Th=
is work is armed from two sites: f_midi_complete(), on a normal IN-endpoint=
completion, and f_midi_in_trigger(), on an ALSA rawmidi output-stream star=
t. Neither f_midi_disable() nor f_midi_unbind() cancels midi->work. f_mi= di_disable() only disables the endpoints and drains the in_req_fifo; it doe=
s not synchronize the work item, and the sound card is released asynchronou= sly to the final free of the midi object. The midi object is reference-coun= ted (midi->free_ref) and is freed in f_midi_free() only once both the us= b_function reference and the rawmidi private_data reference have been dropp= ed. In f_midi_unbind(), f_midi_disable() runs before the sound card is rele= ased, so while the USB endpoints are already disabled the rawmidi device is=
still usable by an open substream. A concurrent userspace write on such a = substream can reach f_midi_in_trigger() and queue midi->work again after=
f_midi_disable() has returned. A work item armed this way may still be pen= ding when the last reference drops and f_midi_free() proceeds to kfree(midi=
), letting f_midi_in_work() dereference the struct after it has been freed,=
a use-after-free. For this reason cancelling midi->work in f_midi_disab= le() would not be sufficient: the ALSA trigger path can rearm the work afte=
r disable() returns. Cancelling at the refcount-zero free site is the bound= ary after which neither arming source can survive, because by then both ref= erences that keep the midi object alive have been dropped: the USB endpoint=
s are already disabled and the rawmidi device has been released. Fix this b=
y calling cancel_work_sync(&midi->work) in the refcount-zero block o=
f f_midi_free(), before the embedded work_struct is freed along with the re=
st of the structure. opts->lock is a sleeping mutex, so calling cancel_w= ork_sync() under it is permitted, and the handler takes midi->transmit_l= ock rather than opts->lock, so no self-deadlock can occur while it waits=
for a running instance of the work to finish. This issue was found by an i= n-house static analysis tool.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64584" target=3D= "_blank" rel=3D"noopener">CVE-2026-64584</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: can=
: esd_usb: kill anchored URBs before freeing netdevs esd_usb_disconnect() f= rees each CAN netdev with free_candev() inside its per-netdev loop and only=
calls unlink_all_urbs(dev) afterwards. The per-netdev private data (struct=
esd_usb_net_priv) is embedded in the net_device allocation returned by all= oc_candev(), so once free_candev() has run, dev->nets[i] points to freed=
memory. unlink_all_urbs() then dereferences the freed dev->nets[i] to k= ill the per-netdev TX anchor (usb_kill_anchored_urbs(&priv->tx_submi= tted)), clear active_tx_jobs, and reset priv->tx_contexts[]. Reorder the=
teardown so the anchored URBs are killed before the netdevs are freed, mat= ching other CAN/USB drivers in the same directory such as ems_usb, usb_8dev=
and mcba_usb, which unregister, then unlink, then free: unregister the net= devs first (which stops their TX queues), call unlink_all_urbs(dev) once, t= hen free the netdevs. This issue was found by an in-house static analysis t= ool.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64585" target=3D= "_blank" rel=3D"noopener">CVE-2026-64585</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: net=
: ethernet: arc: emac: quiesce interrupts before requesting IRQ Normal RX/T=
X interrupts are enabled later, in arc_emac_open(), so probe should not see=
interrupt delivery in the usual case. However, hardware may still present = stale or latched interrupt status left by firmware or the bootloader. If pr= obe later unwinds after devm_request_irq() has installed the handler, such =
a stale interrupt can still reach arc_emac_intr() during teardown and race = with release of the associated net_device. Avoid that window by putting the=
device into a known quiescent state before requesting the IRQ: disable all=
EMAC interrupt sources and clear any pending EMAC interrupt status bits. T= his keeps the change hardware-focused and minimal, while preventing spuriou=
s IRQ delivery from leftover state.</td>
<td>2026-08-06</td>
<td>7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64587" target=3D= "_blank" rel=3D"noopener">CVE-2026-64587</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: fus= e-uring: fix data races on ring->ready On weakly-ordered architectures, = the store to fiq->ops can be reordered past the store to ring->ready,=
allowing a CPU that sees ring->ready =3D=3D true via fuse_uring_ready()=
to dispatch requests through a stale fiq->ops pointer. Upgrade the stor=
e to smp_store_release() and the load in fuse_uring_ready() to smp_load_acq= uire() so that the preceding WRITE_ONCE(fiq->ops, ...) is visible to any=
CPU that observes ring->ready =3D=3D true. Additionally, fuse_uring_do_= register() publishes ring->ready with WRITE_ONCE() but the fast-path che=
ck reads it with a plain load. This is a marked-vs-unmarked access that KCS=
AN will flag. Wrap it in READ_ONCE() to mark it without adding unnecessary = ordering. Also wrap the fc->ring load in fuse_uring_ready() in READ_ONCE=
() to prevent the compiler from reloading it between the NULL check and the=
dereference.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64588" target=3D= "_blank" rel=3D"noopener">CVE-2026-64588</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: cry= pto: amlogic - avoid double cleanup in meson_crypto_probe() When meson_allo= cate_chanlist() fails after a partial allocation, it already unwinds the al= located chanlist state through its local error path. meson_crypto_probe() t= hen jump to error_flow and calls meson_free_chanlist() again, causing the s= ame per-flow resources to be torn down twice. In the reproduced failure pat=
h, the second teardown re-entered crypto_engine_exit() on an already destro= yed worker and KASAN reported a slab-use-after-free in kthread_destroy_work= er(). Prevent double-free by handling partial allocation failures locally w= ithin meson_allocate_chanlist() and skipping the outer cleanup path. The bu=
g was first flagged by an experimental analysis tool we are developing for = kernel memory-management bugs while analyzing v6.13-rc1. The tool is still = under development and is not yet publicly available. The bug was reproduced=
in a QEMU x86_64 guest booted with KASAN on v7.1, using the reproducer und=
er tools/testing/meson_crypto_probe. The reproducer forces the second dma_a= lloc_attrs() call in the gxl-crypto probe path to return NULL, making meson= _allocate_chanlist() fail after partial initialization. On the unpatched ke= rnel this reliably triggered a slab-use-after-free. With this fix applied, = the same reproducer no longer emits any KASAN report and the probe fails cl= eanly with -ENOMEM. =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D BUG: = KASAN: slab-use-after-free in kthread_destroy_worker+0xb2/0xd0 Read of size=
8 at addr ff1100010c057a68 by task insmod/265 CPU: 1 UID: 0 PID: 265 Comm:=
insmod Tainted: G O 7.1.0-rc2-00376-g810af9adc907-dirty #10 PREEMPT(lazy) = Tainted: [O]=3DOOT_MODULE Hardware name: QEMU Standard PC (Q35 + ICH9, 2009=
), BIOS 1.15.0-1 04/01/2014 Call Trace: <TASK> dump_stack_lvl+0x68/0x=
a0 print_report+0xcb/0x5e0 ? __virt_addr_valid+0x21d/0x3f0 ? kthread_destro= y_worker+0xb2/0xd0 ? kthread_destroy_worker+0xb2/0xd0 kasan_report+0xca/0x1=
00 ? kthread_destroy_worker+0xb2/0xd0 kthread_destroy_worker+0xb2/0xd0 meso= n_crypto_probe+0x4d0/0xc10 [amlogic_gxl_crypto] platform_probe+0x99/0x140 r= eally_probe+0x1c6/0x6a0 ? __pfx___device_attach_driver+0x10/0x10 __driver_p= robe_device+0x248/0x310 ? acpi_driver_match_device+0xb0/0x100 driver_probe_= device+0x48/0x210 ? __pfx___device_attach_driver+0x10/0x10 __device_attach_= driver+0x160/0x320 bus_for_each_drv+0x104/0x190 ? __pfx_bus_for_each_drv+0x= 10/0x10 ? _raw_spin_unlock_irqrestore+0x2c/0x50 __device_attach+0x19d/0x3b0=
? __pfx___device_attach+0x10/0x10 ? do_raw_spin_unlock+0x53/0x220 device_i= nitial_probe+0x78/0xa0 bus_probe_device+0x5b/0x130 device_add+0xcfd/0x1430 =
? __pfx_device_add+0x10/0x10 ? insert_resource+0x34/0x50 ? lock_release+0xc= 9/0x290 platform_device_add+0x24e/0x590 ? __pfx_meson_crypto_probe_repro_in= it+0x10/0x10 [meson_crypto_probe_repro] meson_crypto_probe_repro_init+0x330= /0xff0 [meson_crypto_probe_repro] do_one_initcall+0xc0/0x450 ? __pfx_do_one= _initcall+0x10/0x10 ? _raw_spin_unlock_irqrestore+0x2c/0x50 ? __create_obje= ct+0x59/0x80 ? kasan_unpoison+0x27/0x60 do_init_module+0x27b/0x7d0 ? __pfx_= do_init_module+0x10/0x10 ? kasan_quarantine_put+0x84/0x1d0 ? kfree+0x32c/0x= 510 ? load_module+0x561e/0x5ff0 load_module+0x54fe/0x5ff0 ? __pfx_load_modu= le+0x10/0x10 ? security_file_permission+0x20/0x40 ? kernel_read_file+0x23d/= 0x6e0 ? mmap_region+0x235/0x4a0 ? __pfx_kernel_read_file+0x10/0x10 ? __file= _has_perm+0x2c0/0x3e0 init_module_from_file+0x158/0x180 ? __pfx_init_module= _from_file+0x10/0x10 ? __lock_acquire+0x45a/0x1ba0 ? idempotent_init_module= +0x315/0x610 ? lock_release+0xc9/0x290 ? lock ---truncated---</td> <td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64599" target=3D= "_blank" rel=3D"noopener">CVE-2026-64599</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: ALS=
A: us144mkii: capture_urb_complete: redundant usb_anchor_urb corrupts ancho=
r list on each resubmission In capture_urb_complete(), usb_anchor_urb() is = called on every completion callback, but the URB is already anchored from t=
he initial submission in tascam_trigger_start(). Each redundant call corrup=
ts the anchor's doubly-linked list and inflates the URB refcount. When usb_= kill_anchored_urbs() traverses the list during stream stop / suspend / disc= onnect, the corrupted list leads to use-after-free. Remove the redundant us= b_anchor_urb() from the resubmit path.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64601" target=3D= "_blank" rel=3D"noopener">CVE-2026-64601</a></td>
</tr>

<td class=3D"vendor-product">Loca Software Informatics Technology Ltd. Co.-= -CMS</td>
<td>Improper neutralization of special elements used in an SQL command ('SQ=
L injection') vulnerability in Loca Software Informatics Technology Ltd. Co=
. CMS allows SQL Injection. This issue affects CMS: through 06082026.=C2=A0= NOTE: The vendor was contacted early about this disclosure but did not resp= ond in any way.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5134" target=3D"= _blank" rel=3D"noopener">CVE-2026-5134</a></td>
</tr>

<td class=3D"vendor-product">louislam--uptime-kuma</td>
<td>Uptime Kuma's Matomo analytics integration (server/analytics/matomo-ana= lytics.js) injects the admin-configurable Matomo `siteId` value as a bare, = unquoted JavaScript expression inside a <script> block rendered on ev= ery public status page: `_paq.push(['setSiteId', ${escapedSiteIdHTMLAttribu= te}]);`. The escaping pipeline used (jsesc with isScriptContext:true, then = html-escaper.escape()) does not escape the characters `]`, `)`, `;`, `(`, w= hich are sufficient to break out of the array/push expression context. A si= teId value such as `1]);alert(document.cookie)//`, once saved by an editor/= admin, executes arbitrary JavaScript for every unauthenticated visitor of t=
he public /status/<slug> page, enabling session-cookie theft and full=
page takeover.</td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71285" target=3D= "_blank" rel=3D"noopener">CVE-2026-71285</a></td>
</tr>

<td class=3D"vendor-product">LUCID Vision Labs--Arena SDK</td>
<td>DLL Search Order Hijacking in LUCID Vision Labs Arena SDK 1.0.80.49 on = Windows allows a local attacker to execute arbitrary code with the privileg=
es of the application by placing a malicious DLL in a user-controlled direc= tory listed in the PATH environment variable, which the SDK traverses when =
a required dependency is not found locally.</td>
<td>2026-08-07</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9169" target=3D"= _blank" rel=3D"noopener">CVE-2026-9169</a></td>
</tr>

<td class=3D"vendor-product">lyric777--Book-Management-System</td> <td>Book-Management-System's Flask API endpoints /student, /record, /books,=
/find_stu_book, and /find_not_return_book are missing the @login_required = decorator that protects sibling routes (/search_student, /storage) in the s= ame file. This allows any unauthenticated remote user to retrieve student P=
II (name, gender, card validity, debt status) and full book-borrowing histo=
ry by supplying a card_id. Because card_id values are sequential integers, = the entire student database can be enumerated without authentication.</td> <td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71241" target=3D= "_blank" rel=3D"noopener">CVE-2026-71241</a></td>
</tr>

<td class=3D"vendor-product">mackron--dr_libs</td>
<td>dr_libs dr_wav.h (all versions through current master) contains an inte= ger overflow in W64 CUE chunk metadata parsing. In drwav__metadata_process_= chunk(), a stage-1 capacity estimate truncates the 64-bit W64 chunk sizeInB= ytes to size_t before dividing by DRWAV_CUE_POINT_BYTES; on 32-bit builds t= his truncation causes the pre-allocated extra metadata capacity to be compu= ted incorrectly. The subsequent read in drwav__read_cue_to_metadata_obj() c= omputes the actual cue point count and allocation size using the full-preci= sion, attacker-controlled cuePointCount field without cross-checking it aga= inst the stage-1 capacity estimate, and the only bounds enforcement on the = resulting memory region (drwav__metadata_get_memory()) is a DRWAV_ASSERT, w= hich compiles to a no-op under -DNDEBUG (the default for release builds). A=
crafted W64 WAV file can therefore cause a heap buffer overflow in any 32-= bit application parsing untrusted WAV metadata.</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71261" target=3D= "_blank" rel=3D"noopener">CVE-2026-71261</a></td>
</tr>

<td class=3D"vendor-product">magicblack--maccms10</td>
<td>MacCMS10's admin template editor (application/admin/controller/Template= .php) blocks dangerous PHP functions in template content via a blacklist re= gex, but the blacklist omitted exec, passthru, popen, show_source, create_f= unction, register_shutdown_function, register_tick_function, and error_log.=
Combined with ThinkPHP's {if} template tag, which embeds the condition att= ribute directly into raw PHP (<?php if(condition): ?>), an authentica= ted administrator could inject a payload such as {if condition=3D"exec('id = > /tmp/pwned.txt')"}{/if} to achieve remote code execution. Fixed in com= mit 71ad3bb29570e110d8e973acff68040a3050ddf0 (2026-06-22), which added the = missing functions to the filter.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71232" target=3D= "_blank" rel=3D"noopener">CVE-2026-71232</a></td>
</tr>

<td class=3D"vendor-product">mailmunch--Mailmunch Forms for Mailchimp</td> <td>The MailChimp Forms by MailMunch plugin for WordPress is vulnerable to = unauthorized modification of data due to a missing capability check on the = `sign_in()` and `sign_up()` AJAX handlers in all versions up to, and includ= ing, 3.2.7. This makes it possible for authenticated attackers, with Subscr= iber-level access and above, to relink the site's MailMunch integration to =
an attacker-controlled MailMunch account by submitting attacker-supplied cr= edentials. Once relinked, all subscriber data captured by the plugin's form=
s is delivered to the attacker, and the forms/landing pages rendered on the=
site are pulled from the attacker's MailMunch account.</td> <td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7520" target=3D"= _blank" rel=3D"noopener">CVE-2026-7520</a></td>
</tr>

<td class=3D"vendor-product">mautic--mautic</td>
<td>Mautic's getLeadIdsByFieldValueAction (LeadBundle/Controller/AjaxContro= ller.php) reads a field parameter from the request, sanitizes it only with = InputHelper::clean() (which HTML-entity-encodes quotes and angle brackets b=
ut does not restrict other characters), and passes it into LeadRepository::= buildQueryForGetLeadsByFieldValue() where it is concatenated directly as a = raw SQL column identifier ($col =3D 'l.'.$field) rather than being validate=
d against a whitelist of real column names or passed as a bound parameter. = Since Doctrine cannot parameterize identifiers, and the sanitizer does not = block spaces, parentheses, or other SQL-relevant characters, an attacker ca=
n inject SQL via the field name itself. The action requires only a valid se= ssion (any authenticated user), unlike sibling actions in the same controll=
er that carry additional permission checks.</td>

<td>2026-08-05</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71245" target=3D= "_blank" rel=3D"noopener">CVE-2026-71245</a></td>
</tr>

<td class=3D"vendor-product">mawww--kakoune</td>
<td>Kakoune is a code editor. Prior to version 2026.05.21, the bundled, ena= bled by default, `autorestore.kak` script can be exploited by malicious bac= kup files leading to arbitrary kakoune and shell commands being executed by=
simply opening a file. Kakoune 2026.05.21 fixes the issue. As a workaround=
, add `autorestore-disable` to the user kakrc will disable the autorestore = feature.</td>
<td>2026-08-07</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48120" target=3D= "_blank" rel=3D"noopener">CVE-2026-48120</a></td>
</tr>

<td class=3D"vendor-product">maximeAmini--Atals-Livre</td>
<td>Atlas-Livre contains an improper access control vulnerability in the ad= min controllers under Espace_admin/controleur/ that allows unauthenticated = attackers to bypass session-based authentication guards by sending raw HTTP=
requests that ignore redirects. Attackers can invoke destructive admin act= ions such as record deletion by requesting controller endpoints with GET pa= rameters like supp, because the PHP header() redirect is never followed by =
an exit or die call, allowing all subsequent code including database operat= ions to execute regardless of session state.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69703" target=3D= "_blank" rel=3D"noopener">CVE-2026-69703</a></td>
</tr>

<td class=3D"vendor-product">MaxSite--MaxSite CMS</td>
<td>MaxSite CMS 109.5 and earlier contains an authentication bypass vulnera= bility in the AJAX dispatcher that allows unauthenticated attackers to acce=
ss admin-gated endpoints by supplying any X-Requested-With header and reque= sting a base64-encoded path resolving to any *-ajax.php file in the codebas=
e. Attackers can exploit this dispatcher bypass to reach privileged plugin = endpoints without credentials, enabling actions such as manipulating poll s= tates and vote counts, and amplifying the impact of any dangerous operation=
performed by admin-only ajax files across the plugin tree.</td> <td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70552" target=3D= "_blank" rel=3D"noopener">CVE-2026-70552</a></td>
</tr>

<td class=3D"vendor-product">MaxSite--MaxSite CMS</td>
<td>MaxSite CMS contains a remote code execution vulnerability that allows = unauthenticated attackers to inject arbitrary PHP code into the application=
configuration file by submitting crafted POST requests to the install endp= oint after installation is complete. Attackers can supply a malicious db_db= prefix value containing a single quote to break out of a PHP string literal=
in application/config/database.php, appending attacker-controlled PHP stat= ements that are executed by the web server on every subsequent request, res= ulting in persistent unauthenticated remote code execution as the web-serve=
r process user.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70553" target=3D= "_blank" rel=3D"noopener">CVE-2026-70553</a></td>
</tr>

<td class=3D"vendor-product">MaxSite--MaxSite CMS</td>
<td>MaxSite CMS contains a PHP object injection vulnerability that allows u= nauthenticated attackers to execute arbitrary code by passing attacker-cont= rolled serialized data in the maxsite_comuser cookie directly to unserializ= e() without validation or class allowlisting. Attackers can craft a malicio=
us serialized PHP object payload delivered in a single HTTP request to trig= ger magic methods during object graph reconstruction, enabling property-ori= ented programming attacks or remote code execution via available gadget cha= ins such as those targeting SoapClient or Imagick extensions.</td> <td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70554" target=3D= "_blank" rel=3D"noopener">CVE-2026-70554</a></td>
</tr>

<td class=3D"vendor-product">Menulux Software Inc.--Mobile App</td> <td>Authorization bypass through User-Controlled key vulnerability in Menul=
ux Software Inc. Mobile App allows Software Integrity Attack. This issue af= fects Mobile App: through 12.05.2026.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-2346" target=3D"= _blank" rel=3D"noopener">CVE-2026-2346</a></td>
</tr>

<td class=3D"vendor-product">MervinPraison--PraisonAI</td>
<td>PraisonAI is a multi-agent teams system. In versions prior to 4.6.40, t=
he bundled Claude GitHub Actions workflow is vulnerable to command injectio=
n because it embeds an attacker-controlled pull request branch name into a = Bash run: block without quoting or validation. Additionally, the workflow a= llows any @claude comment to trigger the job regardless of whether the comm= enter is a trusted collaborator. An outside contributor can open a pull req= uest from a fork whose branch name contains shell metacharacters and commen=
t @claude, causing Bash to execute arbitrary shell code in the GitHub Actio=
ns runner. Because these commands run in a job holding a GitHub App token w= ith write permissions, OIDC access, and gh/git access, the injection can be=
chained through $GITHUB_PATH to compromise later privileged steps, enablin=
g repository writes, pull request and issue manipulation, or OIDC-token abu= se. This issue has been fixed in version 4.6.40.</td>
<td>2026-08-05</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48168" target=3D= "_blank" rel=3D"noopener">CVE-2026-48168</a></td>
</tr>

<td class=3D"vendor-product">MervinPraison--PraisonAI</td>
<td>PraisonAI is a multi-agent teams system. In versions 3.9.26 through 4.6= .57 of praiseonai and 0.12.12 through 1.6.57 of praiseonaiagents, the workf= low "include" feature is vulnerable to code execution. Workflow._execute_in= clude() implicitly imports and runs an included recipe's tools.py via a raw=
importlib.util.spec_from_file_location() and spec.loader.exec_module() cal=
l, without honoring the PRAISONAI_ALLOW_TEMPLATE_TOOLS/PRAISONAI_ALLOW_LOCA= L_TOOLS autoload opt-in gates or routing through the centralized safe loade=
r that protects the other tools.py autoload paths. As a result, a workflow = that includes an attacker-controlled local recipe directory executes arbitr= ary module-level Python code during include setup, before any child workflo=
w parsing or model call, and the same sink is reachable through the higher-= level praisonai.recipe.run() recipe API. An attacker who can cause a victim=
process to run a workflow or recipe that includes an untrusted local recip=
e achieves arbitrary Python code execution as the PraisonAI process user, a=
variant that bypasses the hardening applied to the previously disclosed au= tomatic tools.py RCE advisory family. This issue has been fixed in version = 4.6.58 of praisonai and 1.6.58 of praisonaiagents.</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55522" target=3D= "_blank" rel=3D"noopener">CVE-2026-55522</a></td>
</tr>

<td class=3D"vendor-product">MervinPraison--PraisonAI</td>
<td>PraisonAI is a multi-agent teams system. In versions prior to 1.6.58, t=
he web_crawl tool performs its SSRF check only on the initially supplied UR=
L, allowing the protection to be bypassed so the tool connects to attacker-= chosen internal destinations. The check resolves the hostname once with soc= ket.gethostbyname and rejects private/loopback/link-local results, but then=
passes the URL to a fetcher using httpx.Client(follow_redirects=3DTrue) (o=
r urllib.request.urlopen when httpx is absent, which also follows redirects=
) that re-resolves the hostname at connect time with no further validation.=
This validate-here/fetch-there gap is exploitable through both HTTP redire= cts and DNS rebinding. If an attacker can influence URLs passed to web_craw= l(), directly or through an agent/tool workflow, they can cause the Praison=
AI host to fetch loopback, private-network, or cloud metadata endpoints rea= chable from that host, with the response body returned in the web_crawl() r= esult. This issue has been fixed in version 1.6.58.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55524" target=3D= "_blank" rel=3D"noopener">CVE-2026-55524</a></td>
</tr>

<td class=3D"vendor-product">MervinPraison--praisonai-platform</td> <td>PraisonAI is a multi-agent teams system. Versions prior to 0.1.4 of the=
PraisonAI Platform API have two authorization failures that together break=
workspace isolation. The service layer for issues and projects performs gl= obal primary-key lookups without checking workspace ownership, so any authe= nticated user can read, modify, and delete resources in any workspace just =
by swapping UUIDs in their API requests. On top of that, every member manag= ement endpoint (add, update role, remove) only requires `min_role=3D"member= "`, which lets any workspace member promote themselves to owner and kick ou=
t the original owner. A low-privilege member of one workspace can steal dat=
a from every other workspace and take over any workspace they belong to. Bo=
th issues come from the same gap: the route layer pulls `workspace_id` from=
the URL and verifies membership, but the service layer ignores the workspa=
ce scope for resource lookups and ignores the caller's role level for membe=
r operations. The `require_workspace_member()` dependency does its job corr= ectly. The problem is that the service layer doesn't use the information it=
provides. Version 0.1.4 of the PraisonAI Platform API patch the issue.</td=

<td>2026-08-07</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48169" target=3D= "_blank" rel=3D"noopener">CVE-2026-48169</a></td>
</tr>

<td class=3D"vendor-product">Miantang--IoT-PHP</td>
<td>Miantang/IoT-PHP's index.php implements a POST /userlogin route that re= ads the password directly from $_POST['pwd'] with no sanitization and conca= tenates it into a raw SQL string: mysql_query("select * from userlists wher=
e username=3D'$username' and password=3D'$password' limit 1"). The username=
value is passed through htmlspecialchars(), which does not encode single q= uotes by default and therefore does not prevent SQL injection through the p= assword field. An unauthenticated attacker can submit a payload such as pwd= =3D' OR '1'=3D'1 to bypass authentication and, via UNION-based injection, e= xtract arbitrary data from the database.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71237" target=3D= "_blank" rel=3D"noopener">CVE-2026-71237</a></td>
</tr>

<td class=3D"vendor-product">Microck--opencode-studio</td>
<td>OpenCode Studio before 2.4.4 contains a missing authentication vulnerab= ility that allows unauthenticated remote attackers to read arbitrary files = within the temp and static/music directories by directly accessing the GET = /api/tmp/:tmpFile and GET /api/music/:fileName endpoints. Attackers can ret= rieve intermediate audio, video artifacts, and subtitles belonging to other=
users' jobs, and additionally delete any video by ID through the unauthent= icated DELETE /api/short-video/:videoId endpoint.</td>
<td>2026-08-04</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69110" target=3D= "_blank" rel=3D"noopener">CVE-2026-69110</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Application Insights Profiler</td> <td>Improper limitation of a pathname to a restricted directory ('path trav= ersal') in Application Insights Profiler allows an authorized attacker to e= levate privileges over a network.</td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49163" target=3D= "_blank" rel=3D"noopener">CVE-2026-49163</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure Active Directory</td> <td>Modification of assumed-immutable data (maid) in Azure Active Directory=
allows an authorized attacker to elevate privileges over a network.</td> <td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-50481" target=3D= "_blank" rel=3D"noopener">CVE-2026-50481</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure Confidential Ledger</td>

<td>Exposed dangerous method or function in Azure Confidential Ledger allow=
s an authorized attacker to execute code over a network.</td> <td>2026-08-06</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68823" target=3D= "_blank" rel=3D"noopener">CVE-2026-68823</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure Logic Apps</td>
<td>Improper access control in Azure Logic Apps allows an authorized attack=
er to disclose information over a network.</td>
<td>2026-08-06</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56161" target=3D= "_blank" rel=3D"noopener">CVE-2026-56161</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure Service Bus</td> <td>Deserialization of untrusted data in Azure Service Bus allows an author= ized attacker to execute code over a network.</td>
<td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-50515" target=3D= "_blank" rel=3D"noopener">CVE-2026-50515</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure SQL Database</td>
<td>Improper authentication in Azure SQL Database allows an unauthorized at= tacker to elevate privileges over a network.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56162" target=3D= "_blank" rel=3D"noopener">CVE-2026-56162</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure SQL Managed Instance</td>

<td>Improper restriction of communication channel to intended endpoints in = Azure SQL Managed Instance allows an unauthorized attacker to elevate privi= leges over a network.</td>
<td>2026-08-06</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62836" target=3D= "_blank" rel=3D"noopener">CVE-2026-62836</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Azure SRE Agent</td>
<td>Missing authorization in Azure SRE Agent allows an authorized attacker =
to elevate privileges over a network.</td>
<td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62830" target=3D= "_blank" rel=3D"noopener">CVE-2026-62830</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft 365 Admin Center</td>

<td>Improper verification of cryptographic signature in Microsoft 365 Admin=
Center allows an unauthorized attacker to elevate privileges over a networ= k.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62873" target=3D= "_blank" rel=3D"noopener">CVE-2026-62873</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft 365 Apps for Enterprise</=

<td>Use after free in Microsoft Office Excel allows an unauthorized attacke=
r to execute code over a network.</td>
<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62870" target=3D= "_blank" rel=3D"noopener">CVE-2026-62870</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Origin validation error in Microsoft Edge (Chromium-based) allows an un= authorized attacker to disclose information over a network.</td> <td>2026-08-03</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66318" target=3D= "_blank" rel=3D"noopener">CVE-2026-66318</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>External control of file name or path in Microsoft Edge for Android all= ows an unauthorized attacker to disclose information over a network.</td> <td>2026-08-03</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65802" target=3D= "_blank" rel=3D"noopener">CVE-2026-65802</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Use after free in Microsoft Edge (Chromium-based) allows an unauthorize=
d attacker to execute code over a network.</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66315" target=3D= "_blank" rel=3D"noopener">CVE-2026-66315</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Access of resource using incompatible type ('type confusion') in Micros= oft Edge (Chromium-based) allows an unauthorized attacker to execute code o= ver a network.</td>
<td>2026-08-03</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66321" target=3D= "_blank" rel=3D"noopener">CVE-2026-66321</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Origin validation error in Microsoft Edge (Chromium-based) allows an un= authorized attacker to perform spoofing over a network.</td> <td>2026-08-03</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66322" target=3D= "_blank" rel=3D"noopener">CVE-2026-66322</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge for Android</td>

<td>External control of file name or path in Microsoft Edge for Android all= ows an unauthorized attacker to disclose information locally.</td> <td>2026-08-03</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66310" target=3D= "_blank" rel=3D"noopener">CVE-2026-66310</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Entra Provisioning Servic= e</td>
<td>'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows=
an authorized attacker to elevate privileges over a network.</td> <td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59115" target=3D= "_blank" rel=3D"noopener">CVE-2026-59115</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Planetary Computer Pro (G= eoCatalog)</td>
<td>Missing authentication for critical function in Microsoft Planetary Com= puter Pro allows an unauthorized attacker to elevate privileges over a netw= ork.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63508" target=3D= "_blank" rel=3D"noopener">CVE-2026-63508</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Power Apps</td>
<td>Improper authorization in Microsoft Power Apps allows an unauthorized a= ttacker to elevate privileges over a network.</td>
<td>2026-08-06</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59118" target=3D= "_blank" rel=3D"noopener">CVE-2026-59118</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Purview eDiscovery</td> <td>Improper access control in Microsoft Purview eDiscovery allows an autho= rized attacker to elevate privileges over a network.</td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65668" target=3D= "_blank" rel=3D"noopener">CVE-2026-65668</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft SharePoint Online</td>

<td>Improper neutralization of input during web page generation ('cross-sit=
e scripting') in Microsoft Office SharePoint allows an unauthorized attacke=
r to perform spoofing over a network.</td>
<td>2026-08-06</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70332" target=3D= "_blank" rel=3D"noopener">CVE-2026-70332</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Teams</td>
<td>Missing authorization in Microsoft Teams allows an unauthorized attacke=
r to elevate privileges over a network.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65667" target=3D= "_blank" rel=3D"noopener">CVE-2026-65667</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Teams</td>
<td>Improper authentication in Microsoft Teams allows an authorized attacke=
r to elevate privileges over a network.</td>
<td>2026-08-06</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62896" target=3D= "_blank" rel=3D"noopener">CVE-2026-62896</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Teams</td>
<td>Improper verification of cryptographic signature in Microsoft Teams all= ows an unauthorized attacker to perform spoofing over a network.</td>

<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62918" target=3D= "_blank" rel=3D"noopener">CVE-2026-62918</a></td>
</tr>

<td class=3D"vendor-product">MihChe--WPBruiser {no- Captcha anti-Spam}</td> <td>Unauthenticated PHP Object Injection in WPBruiser {no- Captcha anti-Spa=
m} <=3D 3.1.43 versions.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65556" target=3D= "_blank" rel=3D"noopener">CVE-2026-65556</a></td>
</tr>

<td class=3D"vendor-product">milvus-io--milvus</td>
<td>Milvus through 2.6.22 and 3.0.0 contains an unauthenticated denial of s= ervice vulnerability that allows remote attackers to terminate service comp= onents by sending a crafted HTTP GET request to the management server on po=
rt 9091. Attackers can exploit the unprotected /management/stop endpoint, w= hich bypasses REST API authentication middleware, by supplying a 'role' par= ameter to shut down the proxy, datanode, or querynode components, resulting=
in denial of service.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69111" target=3D= "_blank" rel=3D"noopener">CVE-2026-69111</a></td>
</tr>

<td class=3D"vendor-product">MingSoft--MCMS</td>
<td>A vulnerability was determined in MingSoft MCMS up to 3.0.6. This affec=
ts the function ModelDataImpl.queryDiyFormData of the file /mdiy/form/data/= list.do of the component ms-mdiy. Executing a manipulation of the argument = formFields can lead to sql injection. The attack may be performed from remo= te. The exploit has been publicly disclosed and may be utilized. The vendor=
was contacted early about this disclosure but did not respond in any way.<=

<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19355" target=3D= "_blank" rel=3D"noopener">CVE-2026-19355</a></td>
</tr>

<td class=3D"vendor-product">miniOrange 2FA--miniOrange 2FA</td>
<td>The miniOrange 2FA WordPress plugin before 6.2.8 does not correctly lim=
it the number of second-factor verification attempts, tracking them against=
a client-supplied identifier that is reissued on every login, allowing an = attacker who already knows a user's password to guess the one-time code wit= hout limit and take over the account.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16619" target=3D= "_blank" rel=3D"noopener">CVE-2026-16619</a></td>
</tr>

<td class=3D"vendor-product">miniOrange--WP OAuth Server</td> <td>Unauthenticated SQL Injection in WP OAuth Server <=3D 6.2.0 versions= .</td>
<td>2026-08-06</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65520" target=3D= "_blank" rel=3D"noopener">CVE-2026-65520</a></td>
</tr>

<td class=3D"vendor-product">mistralai--mistral-vibe</td>
<td>Mistral Vibe before 2.23.3 contains a remote code execution vulnerabili=
ty that allows attackers to execute arbitrary commands by embedding a malic= ious core.fsmonitor hook in a repository's .git/config file, which is trigg= ered when vibe invokes git status --porcelain without suppressing hook exec= ution. Attackers can distribute or create a crafted repository containing a=
malicious fsmonitor entry to achieve arbitrary command execution with the = victim's full privileges when any vibe command is run inside that repositor= y.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67623" target=3D= "_blank" rel=3D"noopener">CVE-2026-67623</a></td>
</tr>

<td class=3D"vendor-product">mlflow--mlflow</td>
<td>MLflow's AI Gateway accepts an auth_config.api_base value when creating=
a gateway secret (mlflow/server/handlers.py, _create_gateway_secret) with =
no validation of scheme, host, or IP range; the value is stored verbatim. T=
he gateway proxy endpoint (mlflow/server/gateway_api.py, raw_proxy) subsequ= ently issues an HTTP request to that stored api_base plus a caller-supplied=
path and returns the full response body. MLflow's existing SSRF guard, _va= lidate_webhook_url (which blocks non-global and metadata IPs), is never inv= oked anywhere in this gateway secret/proxy code path. The CreateGatewaySecr=
et action additionally has no entry in the permission-validator map, so it = requires only basic authentication rather than any specific scope, meaning = any authenticated user - including read-only accounts - can create a secret=
pointing at an internal address and reach it via the proxy endpoint, poten= tially exposing cloud-instance IAM credentials via metadata services. This =
is related to CVE-2026-4035, which addresses a distinct mechanism in the sa=
me gateway-secret feature (server-side $ENV_VAR resolution inside the api_k=
ey field leaking credentials to the configured upstream); the finding here =
is an independent missing-validation gap in the api_base destination itself=
, unaffected by that fix.</td>
<td>2026-08-05</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71211" target=3D= "_blank" rel=3D"noopener">CVE-2026-71211</a></td>
</tr>

<td class=3D"vendor-product">MonsterInsights Pro--MonsterInsights Pro</td> <td>The official MonsterInsights Pro update distribution bucket (`monster-i= nsights.s3.amazonaws.com`) was compromised. Both the current release (10.2.=
2) and the version MonsterInsights rolled back to (10.2.0) contain a malici= ous file, `class-system-check.php`. Three distinct variants were observed o=
n 2026-06-11, all sharing the same AES-256-GCM key, confirming a single thr= eat actor. The attacker retains write access to the S3 bucket and has been = actively iterating on the payload throughout the day.</td>

<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11976" target=3D= "_blank" rel=3D"noopener">CVE-2026-11976</a></td>
</tr>

<td class=3D"vendor-product">mrswapnilsahu--Stock-Inventory-Management-Syst= em</td>
<td>The Stock-Inventory-Management-System application's login.php assigns r=
aw $_POST username/password values to $_SESSION and builds its authenticati=
on query by directly concatenating those session values into a SQL statemen=
t with no parameterization or escaping. An unauthenticated remote attacker = can submit a payload such as ' OR '1'=3D'1 in the login form to bypass auth= entication entirely. The same script additionally contains hardcoded admini= strative credentials (admin/neola) in a post-login conditional check, provi= ding a second, independent full-authentication-bypass path.</td> <td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71207" target=3D= "_blank" rel=3D"noopener">CVE-2026-71207</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the wps.cgi interface that allows remote attackers=
to execute arbitrary commands by injecting malicious input through the pin= 2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized par= ameters to execute arbitrary commands on the affected device and obtain roo=
t privileges.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71983" target=3D= "_blank" rel=3D"noopener">CVE-2026-71983</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the urlfilter function that allows remote attacker=
s to execute arbitrary commands on the affected device. Attackers can explo=
it the urlfilter function to inject malicious commands and obtain root priv= ileges on the underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71984" target=3D= "_blank" rel=3D"noopener">CVE-2026-71984</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the accesscontrol function that allows remote atta= ckers to execute arbitrary commands on the affected device. Attackers can e= xploit this vulnerability through the accesscontrol function to execute mal= icious commands and obtain root privileges on the underlying system.</td> <td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71985" target=3D= "_blank" rel=3D"noopener">CVE-2026-71985</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the dmz function that allows remote attackers to e= xecute arbitrary commands on the affected device. Attackers can exploit thi=
s vulnerability through the dmz function to execute malicious commands and = obtain root privileges on the underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71986" target=3D= "_blank" rel=3D"noopener">CVE-2026-71986</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the alg function that allows remote attackers to e= xecute arbitrary commands on the affected device. Attackers can exploit thi=
s vulnerability through the alg function to execute malicious commands and = obtain root privileges on the underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71987" target=3D= "_blank" rel=3D"noopener">CVE-2026-71987</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the portFw function that allows remote attackers t=
o execute arbitrary commands on the affected device. Attackers can exploit = this vulnerability through the alg function to execute malicious commands a=
nd obtain root privileges on the underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71988" target=3D= "_blank" rel=3D"noopener">CVE-2026-71988</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the porTrigger function that allows remote attacke=
rs to execute arbitrary commands on the affected device. Attackers can expl= oit this vulnerability through the alg function to execute malicious comman=
ds and obtain root privileges on the underlying system.</td> <td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71989" target=3D= "_blank" rel=3D"noopener">CVE-2026-71989</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the TelnetSSH function used for SSH configuration = that allows remote attackers to execute arbitrary commands on the affected = device. Attackers can exploit this vulnerability through the SSH configurat= ion interface to inject malicious commands and obtain root privileges on th=
e underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71990" target=3D= "_blank" rel=3D"noopener">CVE-2026-71990</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the TelnetSSH function used for Telnet configurati=
on that allows remote attackers to execute arbitrary commands on the affect=
ed device. Attackers can exploit this vulnerability through the Telnet conf= iguration interface to inject malicious commands and obtain root privileges=
on the underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71991" target=3D= "_blank" rel=3D"noopener">CVE-2026-71991</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the macfilter function that allows remote attacker=
s to execute arbitrary commands on the affected device. Attackers can explo=
it the macfilter function to inject malicious commands and obtain root priv= ileges on the underlying system.</td>
<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71992" target=3D= "_blank" rel=3D"noopener">CVE-2026-71992</a></td>
</tr>

<td class=3D"vendor-product">MSI--Radix AXE6600</td>
<td>MSI Radix AXE6600 router firmware version v781521 contains a command in= jection vulnerability in the openvpn function that allows remote attackers =
to execute arbitrary commands on the affected device. Attackers can exploit=
the macfilter function to inject malicious commands and obtain root privil= eges on the underlying system.</td>
<td>2026-08-09</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71993" target=3D= "_blank" rel=3D"noopener">CVE-2026-71993</a></td>
</tr>

<td class=3D"vendor-product">Muffingroup--Betheme</td>
<td>Contributor Remote Code Execution (RCE) in Betheme <=3D 28.4.2 versi= ons.</td>
<td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65548" target=3D= "_blank" rel=3D"noopener">CVE-2026-65548</a></td>
</tr>

<td class=3D"vendor-product">nanocoai--NanoClaw</td>
<td>A security vulnerability has been detected in nanocoai NanoClaw up to 2= .0.64. This affects an unknown part of the file container/agent-runner/src/= mcp-tools/core.ts of the component send_file. Such manipulation leads to pa=
th traversal. The attack can be executed remotely. The exploit has been dis= closed publicly and may be used. The project was informed of the problem ea= rly through an issue report but has not responded yet.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18991" target=3D= "_blank" rel=3D"noopener">CVE-2026-18991</a></td>
</tr>

<td class=3D"vendor-product">NASA-AMMOS--anms</td>
<td>The NASA-AMMOS Asynchronous Network Management System (ANMS) reference = implementation's default docker-compose.yml publishes the amp-manager servi= ce's REST API directly to the host network interface (port 8089, e.g. "${IO= N_MGR_PORT:-8089}:8089/tcp") with cap_add: NET_ADMIN, NET_RAW, SYS_NICE, by= passing the CAM (Configuration and Access Manager) gateway that is otherwis=
e the system's sole authentication boundary. The underlying REST server, im= plemented with CivetWeb in JHUAPL/dtnma-tools (src/refdm/nm_rest.c), is con= figured with enable_auth_domain_check set to "no" and registers every route=
, including the DTNMA agent command-dispatch endpoints (.../agents/{eid|idx= }/send, which accept and forward EXECSET-encoded command sets to a register=
ed DTNMA agent), with a null authentication callback. Any network-reachable=
client can therefore enumerate registered agents, submit arbitrary command=
sets to them, and clear stored reports, entirely without credentials. This=
affects NASA-AMMOS/anms and JHUAPL-DTNMA/dtnma-tools as published; both re= positories present this as a reference/ground DTN network-management implem= entation and testbed, and the affected components communicate with DTNMA ag= ents (which may represent simulated or real spacecraft/ground nodes dependi=
ng on deployment) rather than being flight software running onboard a space= craft.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71289" target=3D= "_blank" rel=3D"noopener">CVE-2026-71289</a></td>
</tr>

<td class=3D"vendor-product">NASA-AMMOS--plandev (sequencing-server)</td> <td>The Aerie/PlanDev sequencing-server's authorization middleware (sequenc= ing-server/src/app.ts) derives the caller's Hasura session role via getHasu= raSession(), which prefers a session_variables object taken directly from t=
he client-supplied JSON request body over the Authorization header's JWT cl= aims, with no verification that the request actually originated from Hasura=
. By setting {"session_variables":{"x-hasura-role":"aerie_admin"}} in the b= ody of a request to POST /command-expansion/put-expansion with no Authoriza= tion header, an unauthenticated attacker satisfies the role check and can i= nsert arbitrary expansion rules into sequencing.expansion_rule, which gover=
n how spacecraft activities are translated into commands. Separately, POST = /put-dictionary is explicitly listed in the ENDPOINTS_WHITELIST and is exem=
pt from any authentication, allowing unauthenticated writes of command dict= ionaries.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71214" target=3D= "_blank" rel=3D"noopener">CVE-2026-71214</a></td>
</tr>

<td class=3D"vendor-product">National Security Agency--Ghidra</td>
<td>Ghidra contains an arbitrary code execution vulnerability in the Swift = demangler analyzer that allows an attacker to execute arbitrary binaries by=
supplying a malicious Ghidra project with a crafted Swift tool directory p= ath. When a victim opens the attacker-supplied project, SwiftDemanglerAnaly= zer restores the persisted Swift binary directory from project state and Sw= iftNativeDemangler executes the resolved binary without integrity or signat= ure verification, causing attacker-controlled executables to run under the = Ghidra process user with no prompt or confirmation.</td>

<td>2026-08-03</td>
<td>7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18718" target=3D= "_blank" rel=3D"noopener">CVE-2026-18718</a></td>
</tr>

<td class=3D"vendor-product">Nexcess--GiveWP</td>
<td>Unauthenticated Cross Site Scripting (XSS) in GiveWP <=3D 4.16.5 ver= sions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66690" target=3D= "_blank" rel=3D"noopener">CVE-2026-66690</a></td>
</tr>

<td class=3D"vendor-product">Nexcess--Kadence WooCommerce Email Designer</t=

<td>Unauthenticated Privilege Escalation in Kadence WooCommerce Email Desig= ner <=3D 1.5.19 versions.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28005" target=3D= "_blank" rel=3D"noopener">CVE-2026-28005</a></td>
</tr>

<td class=3D"vendor-product">NexTor--NexTor IP Changer</td>
<td>NexTor IP Changer is a command-line tool that leverages the Tor network=
to periodically rotate a user's IP address. Versions prior to 2.0.0 have a=
command execution vulnerability due to unsafe use of `shell=3DTrue` with c= ommands that rely on executable resolution through the `PATH` environment v= ariable. An attacker controlling the execution environment can place malici= ous executables such as sudo earlier in the `PATH`, resulting in execution =
of attacker-controlled code. Version 2.0.0 fixes the issue.</td> <td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48097" target=3D= "_blank" rel=3D"noopener">CVE-2026-48097</a></td>
</tr>

<td class=3D"vendor-product">NexTor--NexTor IP Changer</td>
<td>NexTor IP Changer is a command-line tool that leverages the Tor network=
to periodically rotate a user's IP address. Versions prior to 2.0.0 execut=
e privileged system commands using `sudo` and `shell=3DTrue` directly insid=
e application logic. In environments where passwordless sudo (`NOPASSWD`) i=
s enabled, privileged commands may execute silently without explicit user c= onfirmation. Version 2.0.0 fixes the issue.</td>
<td>2026-08-07</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48098" target=3D= "_blank" rel=3D"noopener">CVE-2026-48098</a></td>
</tr>

<td class=3D"vendor-product">NI--NI-PAL</td>
<td>There is a local privilege escalation vulnerability recently discovered=
in the NI-PAL kernel driver.=C2=A0=C2=A0This may allow a local, authentica= ted user to escalate privileges and execute arbitrary code.=C2=A0=C2=A0This=
vulnerability affects NI-PAL 26.3.1 and prior versions running on Microsof=
t Windows.</td>
<td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18485" target=3D= "_blank" rel=3D"noopener">CVE-2026-18485</a></td>
</tr>

<td class=3D"vendor-product">nickboss--WordPress File Upload</td> <td>Unauthenticated SQL Injection in WordPress File Upload <=3D 5.1.7 ve= rsions.</td>
<td>2026-08-06</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66447" target=3D= "_blank" rel=3D"noopener">CVE-2026-66447</a></td>
</tr>

<td class=3D"vendor-product">node-red--node-red</td>
<td>Node-RED's local-filesystem library storage module (getLibraryEntry() a=
nd saveLibraryEntry() in packages/node_modules/@node-red/runtime/lib/storag= e/localfilesystem/library.js), reachable via GET/POST /library/:lib/:type/*= path, joins the user-supplied path parameter directly into the filesystem p= ath via fspath.join(libDir, type, path) with no traversal sanitization, con= tainment check, or path normalization/prefix verification. An authenticated=
user (including read-only-scoped tokens for the read path) can supply a pa=
th containing `../` sequences to read arbitrary files outside the library d= irectory; a user with write access can write arbitrary files, enabling remo=
te code execution via SSH authorized_keys or cron injection. This is a dist= inct, separately unpatched traversal from the previously fixed CVE-2021-212=
98 (Projects API).</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71269" target=3D= "_blank" rel=3D"noopener">CVE-2026-71269</a></td>
</tr>

<td class=3D"vendor-product">NSquared--Simply Schedule Appointments</td>

<td>Unauthenticated SQL Injection in Simply Schedule Appointments <=3D 1= .6.12.10 versions.</td>
<td>2026-08-06</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65508" target=3D= "_blank" rel=3D"noopener">CVE-2026-65508</a></td>
</tr>

<td class=3D"vendor-product">NSquared--Simply Schedule Appointments</td>

<td>Unauthenticated Cross Site Scripting (XSS) in Simply Schedule Appointme= nts <=3D 1.6.12.10 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65513" target=3D= "_blank" rel=3D"noopener">CVE-2026-65513</a></td>
</tr>

<td class=3D"vendor-product">nuxsmin--sysPass</td>
<td>sysPass's FileBackupService::doBackupFiles() in lib/SP/Services/Backup/= FileBackupService.php around line 388 builds a tar shell command by string-= concatenating the backup directory path $this->path directly into the co= mmand line ('tar czf ' . $backupFileApp . ' ' . BASE_PATH . ' --exclude \"'=
. $this->path . '\" 2>&1') and passes the result to PHP's exec()=
with no application of escapeshellarg() and no validation of the path agai= nst a safe character set. The $this->path value is read from the sysPass=
configuration, which is persisted in the database and writable through the=
admin settings API and the admin UI. An administrator (or an attacker who = has obtained an admin API token or admin session) can therefore store a bac= kup path containing shell metacharacters and trigger a backup operation to = execute arbitrary OS commands as the web server process user (typically www= -data or apache). Because sysPass is a password manager whose sole purpose =
is to hold credentials for other systems, code execution as the web-server = user permits reading sysPass's master password and encryption key from memo=
ry or configuration files, decrypting every stored credential in the databa= se, exporting the entire password vault, pivoting to internal systems using=
the disclosed credentials, and installing persistent backdoors on the pass= word-manager host.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63725" target=3D= "_blank" rel=3D"noopener">CVE-2026-63725</a></td>
</tr>

<td class=3D"vendor-product">nuxt--devtools</td>
<td>Nuxt is an open-source web development framework for Vue.js. Prior to 3= .3.1, Nuxt DevTools (development mode only) exposes a bidirectional RPC cha= nnel over the Vite HMR WebSocket via the nuxt:devtools:rpc plugin. On affec= ted versions the channel has no authentication: any client that can reach t=
he Vite HMR endpoint (ws://<host>:<port>/, subprotocol vite-hmr=
) can call RPC methods, with no token, handshake, or origin check before th=
e channel is established. The updateOptions(), clearOptions(), and openInEd= itor() methods do not enforce the ensureDevAuthToken check that the other m= utating methods use. openInEditor() reads the persisted behavior.openInEdit=
or value and passes it to the launch-editor package, which spawns it as a c= hild process. That value is settable through the equally unauthenticated up= dateOptions(). An attacker who can reach the HMR port can therefore chain u= pdateOptions('behavior', { openInEditor: '<command>' }) then openInEd= itor('<any-existing-file>') to execute an arbitrary program on the de= veloper's machine. This issue is fixed in 3.3.1.</td>
<td>2026-08-05</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71319" target=3D= "_blank" rel=3D"noopener">CVE-2026-71319</a></td>
</tr>

<td class=3D"vendor-product">nuxt--nuxt</td>
<td>Nuxt is an open-source web development framework for Vue.js. From 3.21.=
7 until 3.21.10 and 4.5.1, mixed-case routeRules keys can fail to match cas= e-folded lookups when router.options.sensitive is false and drop appMiddlew= are authorization gates. This is caused by an incomplete fix for CVE-2026-5= 3721. This issue is fixed in 3.21.10 and 4.5.1.</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71315" target=3D= "_blank" rel=3D"noopener">CVE-2026-71315</a></td>
</tr>

<td class=3D"vendor-product">nuxt--nuxt</td>
<td>Nuxt is an open-source web development framework for Vue.js. From 3.4.0=
until 3.21.10 and 4.5.1, an attacker can inject a template key through /__= nuxt_island/ props into a dynamic component when `vue.runtimeCompiler: true=
` is enabled, causing template execution in the Nitro process. This issue i=
s fixed in 3.21.10 and 4.5.1.</td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71320" target=3D= "_blank" rel=3D"noopener">CVE-2026-71320</a></td>
</tr>

<td class=3D"vendor-product">nuxt--nuxt</td>
<td>Nuxt is an open-source web development framework for Vue.js. From 3.1.0=
until 3.21.10 and 4.5.1, an unauthenticated attacker can use a server isla=
nd v-for prop, including vforToArray and , to trigger unbounded SSR memory = allocation until MAX_VFOR_LENGTH =3D 100000 and crash the Nuxt process. Thi=
s issue is fixed in 3.21.10 and 4.5.1.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71314" target=3D= "_blank" rel=3D"noopener">CVE-2026-71314</a></td>
</tr>

<td class=3D"vendor-product">nuxt--nuxt</td>
<td>Nuxt is an open-source web development framework for Vue.js. From 4.4.0=
until 4.5.1, runtime cache:nuxt:payload entries for /<page>/_payload= .json can be returned before route middleware and page guards because impor= t.meta.prerender is not enforced, disclosing another user's SSR data. This = issue is fixed in 4.5.1.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71316" target=3D= "_blank" rel=3D"noopener">CVE-2026-71316</a></td>
</tr>

<td class=3D"vendor-product">nuxt--nuxt</td>
<td>Nuxt is an open-source web development framework for Vue.js. From 3.1.0=
until 3.21.10 and 4.5.1, the internal island renderer endpoint `/__nuxt_is= land/...` decodes and hashes attacker-controlled JSON body input with destr=
and ohash before validating the URL-resident hash. An unauthenticated `POS=
T /__nuxt_island/_.json` with a large JSON body is fully read, parsed, hash= ed, and then rejected, which wastes CPU on Nitro single event loop and dela=
ys concurrent requests. No valid hash and no authentication are required. T= his issue is fixed in 3.21.10 and 4.5.1.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71321" target=3D= "_blank" rel=3D"noopener">CVE-2026-71321</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serv= ing topology, where an attacker could cause an out-of-bounds write. A succe= ssful exploit of this vulnerability might lead to code execution, escalatio=
n of privileges, data tampering, denial of service, and information disclos= ure.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24254" target=3D= "_blank" rel=3D"noopener">CVE-2026-24254</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker coul=
d cause an out-of-bounds write. A successful exploit of this vulnerability = might lead to denial of service and data tampering.</td>
<td>2026-08-04</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24253" target=3D= "_blank" rel=3D"noopener">CVE-2026-24253</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker coul=
d cause deserialization of untrusted data. A successful exploit of this vul= nerability might lead to denial of service and data tampering.</td>

<td>2026-08-04</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47623" target=3D= "_blank" rel=3D"noopener">CVE-2026-47623</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability in the multimodal embe= dding cache, where an attacker could cause a hash collision by submitting i= mages that share an identical pixel byte sequence but have different dimens= ions. A successful exploit of this vulnerability might lead to data tamperi= ng.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24255" target=3D= "_blank" rel=3D"noopener">CVE-2026-24255</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability in the image loading c= omponent where an attacker may cause improper limitation of a pathname to a=
restricted directory. A successful exploit of this vulnerability might lea=
d to information disclosure.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47612" target=3D= "_blank" rel=3D"noopener">CVE-2026-47612</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker may = cause improper limitation of a pathname to a restricted directory by supply= ing a crafted local path in a multimodal request. A successful exploit of t= his vulnerability might lead to information disclosure.</td> <td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47613" target=3D= "_blank" rel=3D"noopener">CVE-2026-47613</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker may = cause server-side request forgery. A successful exploit of this vulnerabili=
ty might lead to information disclosure.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47614" target=3D= "_blank" rel=3D"noopener">CVE-2026-47614</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker may = cause server-side request forgery by supplying a crafted URL in a multimoda=
l request. A successful exploit of this vulnerability might lead to informa= tion disclosure.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47615" target=3D= "_blank" rel=3D"noopener">CVE-2026-47615</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability in the multimodal medi=
a fetcher where an attacker may cause server-side request forgery. A succes= sful exploit of this vulnerability might lead to information disclosure.</t=

<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47616" target=3D= "_blank" rel=3D"noopener">CVE-2026-47616</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability in the multimodal medi=
a fetcher where an attacker may cause server-side request forgery via DNS r= ebinding. A successful exploit of this vulnerability might lead to informat= ion disclosure.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47617" target=3D= "_blank" rel=3D"noopener">CVE-2026-47617</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability in the Rust multimodal=
media fetcher where an attacker could cause server-side request forgery. A=
successful exploit of this vulnerability might lead to information disclos= ure.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47618" target=3D= "_blank" rel=3D"noopener">CVE-2026-47618</a></td>
</tr>

<td class=3D"vendor-product">odysseus-dev--odysseus</td>
<td>Odysseus before commit bf325f6 contains a missing authorization vulnera= bility that allows authenticated non-admin users to manage server-wide embe= dding backend configuration by invoking endpoint management routes that ver= ify session authentication but omit the admin authorization guard. Attacker=
s can supply an attacker-controlled URL to overwrite the embedding backend = persisted in the endpoint configuration file and process environment, causi=
ng all subsequent embedding operations including chat messages, RAG queries=
, memory entries, and vault text to be transmitted in plaintext to the atta= cker-controlled destination, or delete the endpoint configuration to deny e= mbedding service to all users.</td>
<td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70619" target=3D= "_blank" rel=3D"noopener">CVE-2026-70619</a></td>
</tr>

<td class=3D"vendor-product">OMICRON electronics GmbH--OMICRON StationGuard= </td>
<td>OMICRON StationGuard before version 4.10 contains a cryptographic timin=
g side-channel vulnerability in the backend authentication mechanism that m=
ay allow an unauthenticated attacker to forge valid authentication credenti= als, bypass authentication and authorization, and impersonate legitimate cl= ients. An attacker can gain full access to the system configuration, allowi=
ng modification, reset, or unauthorized alteration of system parameters.</t=

<td>2026-08-06</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16315" target=3D= "_blank" rel=3D"noopener">CVE-2026-16315</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.1, a fully provis= ioned OpenReception instance accepts unauthenticated POST requests to `/set= up/create-admin-account` and creates additional GLOBAL_ADMIN accounts witho=
ut verifying that an admin already exists. Any unauthenticated network atta= cker who can submit a same-origin form POST gains full platform-level admin= istrative control. The newly created account is `is_active=3Dtrue` with `co= nfirmation_state=3DACCESS_GRANTED` and does not require completing email co= nfirmation; the GLOBAL_ADMIN row is created active and immediately usable. = Login and tenant enumeration succeed without any further interaction. This =
is distinct from the deployment race condition already documented on the `C= laiming an instance` page. That documented race covers the window between d= eployment and first claim. The bug reported here works after the operator h=
as properly claimed and configured the instance: the layout-level guard tha=
t protects the setup page only redirects on GET, while the `default` form a= ction handler creates the user without rechecking `adminExists()`. Three GL= OBAL_ADMIN accounts were created in succession during testing, with no rate=
limiting observed. Audit-specific event logging beyond standard applicatio=
n logs was not assessed; the standard `[error]` line that surfaces only whe=
n a uniqueness conflict is hit is not the same as a security event for "add= itional admin created post-claim". The form post is rejected for browser dr= ive-by CSRF by SvelteKit's built-in same-origin check, but any tool that su= pplies a matching `Origin` header (curl, Burp, automated scanners, server-s= ide proxies) bypasses this trivially. No additional preconditions exist. Us= ers should upgrade to version 1.0.1 to receive a patch.</td> <td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48085" target=3D= "_blank" rel=3D"noopener">CVE-2026-48085</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN=
promotes themselves to platform-wide GLOBAL_ADMIN through a single PUT req= uest. The role-update handler accepts the `GLOBAL_ADMIN` enum value from an=
y tenant admin updating their own tenant's staff. No policy check enforces = that "only an existing GLOBAL_ADMIN may grant GLOBAL_ADMIN", so the schema = validation IS the authorization decision. After re-login, the JWT contains = the new role and the formerly-tenant-scoped admin reaches every other tenan=
t on the platform. On the hosted OpenReception service this is a scope-chan= ged escalation: a single customer-side tenant administrator gains full plat= form-wide administrative control over all other tenants' configuration, use= rs, staff records, operational metadata, and tenant lifecycle. Plaintext ap= pointment contents remain subject to the E2E model unless chained with the = staff-crypto poisoning issue (V-4) or with staff-passkey hijacking (V-1). O=
n a single-tenant self-hosted deployment it is still a privilege escalation=
because TENANT_ADMIN should not be able to create new tenants, modify glob=
al configuration, or manage other administrators. The same handler also acc= epts updates targeted at any colleague within the tenant. A tenant admin ca=
n promote a separate collaborator account instead of themselves, leaving th= eir own audit trail clean while the platform-wide breach happens through a = separate identity. Version 1.0.2 fixes the issue.</td>
<td>2026-08-06</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48086" target=3D= "_blank" rel=3D"noopener">CVE-2026-48086</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.2, the registrati=
on handler at `POST /api/auth/register/{userId}` validates the relationship=
between the WebAuthn challenge and the registration cookie's email but nev=
er validates that the `userId` in the URL belongs to that email. An unauthe= nticated attacker requests a challenge for their own email, generates a reg= istration response with their own authenticator, and submits it against any=
victim user's URL. The challenge-vs-cookie email match passes, the WebAuth=
n ceremony validates, and `addPasskey` writes the attacker's credential int=
o the victim's `user_passkey` rows. The next victim-email login accepts a p= asskey assertion from the attacker's authenticator and issues a session as = the victim. User IDs are not strictly secret on this platform, but the exac=
t set of exposure surfaces should be assessed by the maintainers. Staff-lis=
t endpoints return user IDs to authenticated tenant members per the route s= ignature; live verification of all exposure surfaces (whether user IDs leak=
through any unauthenticated route, through invite-confirmation URLs, or th= rough other administrative views) is part of the pending live PoC. Where th=
e attacker knows the victim's email and userId, the analysis below becomes = account takeover. Version 1.0.2 fixes the issue.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48087" target=3D= "_blank" rel=3D"noopener">CVE-2026-48087</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.4, the route `POS=
T /api/tenants/{tenantId}/staff/{staffId}/crypto` accepts and stores attack= er-controlled ML-KEM-768 public keys against any tenant on the platform wit= hout authentication. The handler logs an "Unauthorized crypto key storage a= ttempt" warning when neither a session nor a registration cookie is present=
, then proceeds to insert the row regardless. The platform's E2E claim that=
"even administrators cannot view sensitive information" is broken: any una= uthenticated network attacker can register themselves as an additional encr= yption recipient for any tenant's future patient appointments. A second var= iant of the bug suppresses the unauthorized-warning log entry. The Zod sche=
ma makes the `email` field optional. When the request body omits `email` an=
d the request carries no registration cookie, the comparison `registrationE= mail =3D=3D=3D email` becomes `undefined =3D=3D=3D undefined`, which evalua= tes to `true`. The handler treats the request as a legitimate registration = flow, skips the warning entirely, and stores the row. Successful storage is=
still recorded as an `[info]` log line, but the security-relevant warning = that operators are most likely to monitor or alert on is gone. The `staff_c= rypto` table has no unique constraint on `user_id`, so an arbitrary number =
of attacker rows can coexist for the same staff identifier and all return a=
s `is_active=3Dtrue`. The supplied `staffId` does not need to match any exi= sting user or pending invite. Schema validation on `passkeyId`, `publicKey`=
, and `privateKeyShare` is also weak: the literal string `<placeholder-b= ase64>` was accepted, indicating no length, format, or cryptographic-val= idity check beyond field presence. This weakness is independent of the auth=
bypass but compounds it: a poisoned directory can also be filled with malf= ormed entries that break legitimate booking flows. The injected key is cons= umed by the public booking flow. After completing the unauthenticated `boot= strap-challenge` and `bootstrap-verify` ceremony as a "patient", the result= ing `bookingAccessToken` is accepted by `GET /api/tenants/{id}/appointments= /staff-public-keys`, which returns the attacker-controlled keys alongside a=
ny legitimate ones. A new appointment encrypts its tunnel key with ML-KEM t=
o all listed recipients, so the attacker becomes a co-recipient of the encr= yption and can decapsulate the tunnel key with the matching secret. From th= ere, all appointment payloads for that booking are decryptable. Version 1.0=
.4 patches the issue.</td>
<td>2026-08-06</td>
<td>9.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48088" target=3D= "_blank" rel=3D"noopener">CVE-2026-48088</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.2, the `GET /api/= tenants/{id}` endpoint returns the full tenant record to any authenticated = `TENANT_ADMIN` of that tenant, including the `databaseUrl` field. This fiel=
d contains the live PostgreSQL connection string the application uses to co= nnect to that tenant's database. In the tested official `docker-compose.pro= d.yml` deployment, the connection string contained the user `postgres` with=
`rolsuper=3Dtrue` and the plaintext password from `secrets/postgres_passwo= rd.txt`. Operators who configure a non-superuser PostgreSQL user via `secre= ts/postgres_user.txt` would expose a less privileged credential, but the di= sclosure of the connection string itself is independent of that choice. The=
same credential applies to every database managed by that PostgreSQL insta= nce: the central `appointment_booking` database, every per-tenant database = (one per tenant), and the postgres administrative database. A `TENANT_ADMIN=
` of one tenant who can reach `postgres:5432` (directly via internal networ=
k, indirectly via any SSRF, RCE, or file-read in the application) can read = every other tenant's appointment ciphertexts, key shares, and metadata; rea=
d the central user table, including all `GLOBAL_ADMIN` accounts, password h= ashes, and session records; modify or delete any data in any tenant databas=
e; and/or i a superuser-scoped deployment: use PostgreSQL's `pg_read_server= _files`, `COPY ... FROM PROGRAM`, and `CREATE EXTENSION` for further escala= tion inside the database container. This breaks the per-tenant database iso= lation that is otherwise the primary cross-tenant control in the applicatio=
n. The application code carefully scopes most queries to the calling tenant=
's database, but those scopings are irrelevant once the attacker holds the = credentials that bypass the application entirely. Version 1.0.2 fixes the i= ssue.</td>
<td>2026-08-06</td>
<td>8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48080" target=3D= "_blank" rel=3D"noopener">CVE-2026-48080</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.2, a TENANT_ADMIN=
can store `javascript:` URLs in the tenant `links` configuration (`website=
`, `imprint`, `privacyStatement`). These values are returned to the patient= -facing landing page via `/api/public`, hydrated into the SvelteKit Button = component, and rendered as `<a href=3D"javascript:...">` elements wit= hout URL-scheme filtering. A patient who clicks any such link executes the = attacker's JavaScript inside the patient browser origin, where patient form=
data is read before client-side encryption is applied. This breaks the pro= ject's central trust claim that the server is an untrusted relay and that a= dministrators cannot read patient data. Patient-side encryption happens aft=
er form input, so JavaScript executing in the patient origin can read or al= ter the plaintext before encryption is performed. Version 1.0.2 fixes the i= ssue.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48081" target=3D= "_blank" rel=3D"noopener">CVE-2026-48081</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.2, when a user na= vigates to the `/logout` page, the page's server-side load handler deletes = the `access_token` cookie before calling `/api/auth/logout` via an internal=
`event.fetch()`. The internal fetch consequently runs without the auth coo= kie, so `apiAuthHandle` rejects it, the logout handler never executes, and = `SessionService.revokeSession()` is never called for the current session. T=
he DB session row remains valid until its natural expiry (one week by defau= lt). The user sees a successful logout (cookie gone, UI returns to login), = but any party still holding a copy of the now-deleted access token can cont= inue making authenticated API calls until the session naturally expires. Th=
e root cause is a simple ordering mistake. The same auth subsystem implemen=
ts the correct order in `/api/auth/logout`: revoke the current DB session f= irst, then delete the cookie. The page-level wrapper does the opposite. Ver= sion 1.0.2 initiates server-side logout before removing authentication cook= ies and first appears in version 1.0.2. Version 2.0.0 later replaces this w= ith a race-free client-side logout flow.</td>
<td>2026-08-06</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48079" target=3D= "_blank" rel=3D"noopener">CVE-2026-48079</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Versions prior to 1.0.2 don't throttle=
failed passphrase login attempts. An attacker can submit unlimited wrong p= assphrase guesses against any known email address, capped only by the Argon=
2 verification cost (about 100 milliseconds per attempt on the tested host,=
giving 10 attempts per second sustained). The same backend implements a wo= rking per-account throttle on the WebAuthn challenge endpoint, which return=
s HTTP 429 after roughly 19 attempts. The passphrase branch simply does not=
invoke that throttle, leaving a supported high-value login path unprotecte=
d against credential stuffing and dictionary attacks. The asymmetry confirm=
s this is an oversight rather than a design choice. The throttle infrastruc= ture exists, is wired into the same auth backend, and works on the WebAuthn=
path. The passphrase branch in `/api/auth/login` was not updated to record=
failed attempts. Combined with the application's minimum-passphrase policy=
(12 characters, no entropy or dictionary checks), accounts using common ba=
se patterns such as `Spring2026!XX` or words from a leak corpus are realist= ically reachable in days on a single CPU, hours on a small GPU farm. Versio=
n 1.0.2 patches the issue.</td>
<td>2026-08-06</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48084" target=3D= "_blank" rel=3D"noopener">CVE-2026-48084</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.8.0 until 0.11.0, when ENABLE_OAUTH_TOKEN_EXCHANGE=3D= True, /oauth/{provider}/token/exchange accepts a raw provider access token = and validates it by calling the provider userinfo endpoint without confirmi=
ng which OAuth client the token was issued to. Anyone holding an access tok=
en minted for any client registered with the same provider could exchange i=
t for an Open WebUI session as that token user, including applications the = operator does not control and has never authorized. This issue is fixed in = 0.11.0.</td>
<td>2026-08-04</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70482" target=3D= "_blank" rel=3D"noopener">CVE-2026-70482</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.0 until 0.11.0, the terminal file-preview serveUrl = iframe branch always granted allow-same-origin together with allow-scripts = for HTML files served from the application origin. Any authenticated user w= ith access to a configured terminal server could cause script in a previewe=
d file to run in the Open WebUI origin, read the victim's session token fro=
m localStorage, and take over the account, with possible server-side code e= xecution if the victim was an admin or held workspace.functions. This issue=
is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70486" target=3D= "_blank" rel=3D"noopener">CVE-2026-70486</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.10.0 until 0.11.0, src/lib/components/chat/Messages/M= arkdown/KatexRenderer.svelte could store and render a chat message whose ma=
th block makes KaTeX fail with a stack overflow instead of a parse error. T=
he catch branch fell back to inserting the original math source into the pa=
ge as HTML through {@html} rather than as text, so script in the message ru=
ns in the browser of whoever views it, including shared chats and channels.=
The viewer's session token in localStorage can be stolen, and an administr= ator viewer can have their account taken over. This issue is fixed in 0.11.= 0.</td>
<td>2026-08-04</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70492" target=3D= "_blank" rel=3D"noopener">CVE-2026-70492</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.10.0 until 0.11.0, the DELETE /api/v1/folders/{id} ha= ndler in backend/open_webui/routers/folders.py allowed a user granted write=
access to a shared chat folder to permanently delete chats and messages be= longing to the folder owner. The cascade following the authorization check =
is bound to the folder owner's id, but the subfolder check accepted any inh= erited write grant instead of requiring ownership or administrator status. =
A collaborator can destroy the owner's subtree or force-move chats out of i=
t when delete_contents=3Dfalse. This issue is fixed in 0.11.0.</td> <td>2026-08-04</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70494" target=3D= "_blank" rel=3D"noopener">CVE-2026-70494</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.6 until 0.11.0, with WEB_LOADER_ENGINE=3Dplaywright=
, the Playwright web loader validates only the top-level page request and l= ets sub-resource requests pass unvalidated. A page supplied by an authentic= ated user can use JavaScript to reach blocked internal addresses, and retur= ned DOM can include data read from those addresses in web-search or RAG out= put. This issue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70479" target=3D= "_blank" rel=3D"noopener">CVE-2026-70479</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.0 until 0.11.0, Open WebUI checked whether a user-s= upplied URL destination was globally routable by applying ipaddress.is_glob=
al to the literal IPv6 address without examining IPv4 addresses embedded in=
transition encodings. On a deployment with a NAT64 gateway, any verified u= ser could wrap an internal or cloud-metadata IPv4 address in the NAT64 well= -known prefix, pass the filter, and receive the internal response body thro= ugh RAG URL ingestion, URL-to-markdown conversion, or web-search content re= trieval. This issue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70485" target=3D= "_blank" rel=3D"noopener">CVE-2026-70485</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>open62541 1.5.5 contains an out-of-bounds read in the client-side funct= ion responseReadNamespacesArray() in src/client/ua_client_connect.c.</td> <td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67857" target=3D= "_blank" rel=3D"noopener">CVE-2026-67857</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>Buffer Overflow vulnerability exists in open62541 1.5.5 when the Local = Discovery Server (LDS) is built with multicast discovery enabled through th=
e MDNSD backend. An unauthenticated remote attacker can send a RegisterServ=
er or RegisterServer2 request containing many unique discoveryUrls. This al= lows remote attackers to cause a denial of service.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67858" target=3D= "_blank" rel=3D"noopener">CVE-2026-67858</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attac= ker to cause a denial of service via the Discovery/LDS handling.</td>

<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67859" target=3D= "_blank" rel=3D"noopener">CVE-2026-67859</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>An issue in open62541 v.1.5.5 and before allows a remote attacker to ca= use a denial of service via the UA_Client_getRemoteDataTypes component</td> <td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67861" target=3D= "_blank" rel=3D"noopener">CVE-2026-67861</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>In open62541 1.5.5, a server-side use-after-free exists in the local Mo= nitoredItem callback path. The issue occurs when UA_Subscription_localPubli=
sh continues to use the current UA_Notification after a callback invokes UA= _Server_deleteMonitoredItem for the current local MonitoredItem. This allow=
s a remote attacker to cause a denial of service.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67863" target=3D= "_blank" rel=3D"noopener">CVE-2026-67863</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attac= ker to cause a denial of service via the Service_Call validates input argum= ents against runtime-resolved InputArguments metadata</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67869" target=3D= "_blank" rel=3D"noopener">CVE-2026-67869</a></td>
</tr>

<td class=3D"vendor-product">openemr--openemr</td>
<td>OpenEMR through 8.2.0 contains a remote code execution vulnerability in=
the document category tree component (library/classes/Tree.class.php) that=
allows authenticated administrators to execute arbitrary operating system = commands by injecting PHP payloads into the categories database table. Atta= ckers can chain arbitrary SQL execution to alter the id column type to VARC= HAR and insert a malicious PHP payload, which is then executed via an unsan= itized eval() call whenever any page instantiates CategoryTree, including u= nauthenticated and low-privilege pages, resulting in command execution as t=
he web server user.</td>
<td>2026-08-03</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-39932" target=3D= "_blank" rel=3D"noopener">CVE-2026-39932</a></td>
</tr>

<td class=3D"vendor-product">openemr--openemr</td>
<td>OpenEMR through 8.2.0 contains an improper authentication vulnerability=
in the OAuth2 dynamic client registration endpoint that allows unauthentic= ated attackers to register a malicious client with system-level FHIR scopes=
by supplying a self-generated RSA keypair via the jwks field. Once an admi= nistrator approves the registered client, attackers can use the client_cred= entials grant with a self-signed JWT assertion to obtain access tokens gran= ting read access to all FHIR resources across all patients in the system.</=

<td>2026-08-03</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67610" target=3D= "_blank" rel=3D"noopener">CVE-2026-67610</a></td>
</tr>

<td class=3D"vendor-product">openemr--openemr</td>
<td>OpenEMR through 8.2.0 contains an authentication bypass vulnerability t= hat allows attackers with valid credentials to circumvent multi-factor auth= entication by exploiting the exposed OAuth2 password grant flow through an = unauthenticated client registration endpoint. Attackers can register an OAu= th2 client via the unauthenticated registration endpoint and use the passwo=
rd grant to exchange credentials for an API access token, bypassing the nor= mal web interface authentication and any enforced multi-factor authenticati=
on controls.</td>
<td>2026-08-03</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67611" target=3D= "_blank" rel=3D"noopener">CVE-2026-67611</a></td>
</tr>

<td class=3D"vendor-product">openemr--openemr</td>
<td>OpenEMR through 8.2.0 contains an authenticated SQL injection vulnerabi= lity in the backup configuration import feature that allows administrators = with admin or super ACL privileges to execute arbitrary DDL and DML stateme= nts against the application database by uploading a crafted SQL file at the=
form_step=3D202 parameter in backup.php. Attackers can exploit the unfilte= red shell_exec invocation of the mysql command-line client to extract crede= ntial hashes, modify access control tables, inject backdoor accounts, creat=
e persistent triggers or stored procedures, and write arbitrary files to th=
e filesystem where MySQL FILE privileges and permissive secure_file_priv se= ttings are configured.</td>
<td>2026-08-03</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-39931" target=3D= "_blank" rel=3D"noopener">CVE-2026-39931</a></td>
</tr>

<td class=3D"vendor-product">openshwprojects--OpenBK7231T_App</td> <td>OpenBK7231T's CHANNEL_SetLabel() (src/cmnds/cmd_channels.c) stores chan= nel labels received via the MQTT SetChannelLabel command using strdup() wit=
h no HTML sanitization. CHANNEL_GetLabel() returns these labels unsanitized=
, and they are rendered via hprintf255() at 15+ locations in src/httpserver= /http_fns.c with no HTML encoding. An attacker with MQTT broker access (com= monly unauthenticated in real deployments) can set a channel label containi=
ng a <script> payload that executes when any user views the device's = web panel.</td>
<td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71274" target=3D= "_blank" rel=3D"noopener">CVE-2026-71274</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. = Versions 3.4.0-beta through 3.6.5 and 4.0.0-beta contain a buffer overflow =
in the {s.b64encode}=C2=A0string transformation. The size check for {s.b64e= ncode} only verifies that the input fits within the 64 KB transformation bu= ffer, but base64 encoding expands the data by roughly a third, so an input = between about 49,153 and 65,535 bytes produces more output than the buffer = can hold and overflows it by up to 21,844 bytes. Because these transformati=
on buffers sit next to each other in memory and are reused for chained tran= sformations, the overflow writes attacker-controlled data into the adjacent=
buffer and corrupts values used by later transformations processing the sa=
me SIP message. A remote attacker can trigger this by sending a SIP message=
with a large header value (roughly 50,000 bytes or more) when the routing = script applies =C2=A0{s.b64encode}=C2=A0 to attacker-controlled input, maki=
ng exploitability dependent on the deployment's routing configuration. This=
issue has been fixed in versions 3.6.6 and 4.0.0-rc1.</td>
<td>2026-08-04</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45100" target=3D= "_blank" rel=3D"noopener">CVE-2026-45100</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. =
In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function conc= atenates multiple URI components (protocol, username, domain, port, params)=
into a fixed 1024-byte global BSS buffer without any bounds checking. When=
a routing script calls construct_uri() with an attacker-controlled usernam=
e, a combined component length exceeding 1024 bytes overflows the buffer, c= orrupting adjacent global data with attacker-controlled content. The overfl=
ow reaches disable_503_translation, a global flag controlling SIP 503 respo= nse handling, allowing an attacker to deterministically set the flag via th=
e URI username and alter the server's routing behavior for subsequent messa= ges. Because the same buffer is shared with contact_builder(), the overflow=
also corrupts that function's data, and without a memory sanitizer the adj= acent globals are silently overwritten on every request containing a long u= sername. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.</td> <td>2026-08-04</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45537" target=3D= "_blank" rel=3D"noopener">CVE-2026-45537</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. =
In versions 4.0.0 and prior, processing a SIP message with a header name lo= nger than 255 bytes causes a stack buffer overflow when sip_to_json() is ca= lled in the routing script. Function sip_to_json() (modules/sipmsgops/sipms= gops.c) copies SIP header names into a fixed 255-byte stack buffer without = bounds checking, performing a memcpy of the full header-name length even th= ough the SIP parser imposes no such limit (a header name can be roughly 650=
00 bytes). As a result, when a routing script calls sip_to_json(), a SIP me= ssage with a header name longer than 255 bytes triggers a stack buffer over= flow in which both the length and content of the overwrite are attacker-con= trolled, corrupting the saved frame pointer and return address. A single un= authenticated UDP packet to the SIP port (5060) can crash the process or, o=
n builds without stack protections, hijack the return address to achieve re= mote code execution. This affects deployments whose routing script invokes = sip_to_json(). This issue was not fixed at the time of publication.</td> <td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45538" target=3D= "_blank" rel=3D"noopener">CVE-2026-45538</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. =
In versions prior to 3.6.6 and 4.0.0-rc1, the TCP message framing layer par= ses the Content-Length header using unsigned int arithmetic with no overflo=
w check. When an attacker sends a Content-Length value that overflows unsig= ned int (e.g., 4294967296), the framing layer computes a wrapped-around val=
ue (e.g., 0) and splits the TCP stream at the wrong boundary, causing the b= ody of the first SIP message to be processed as a separate message and enab= ling SIP message smuggling. Because Content-Length is parsed in the transpo=
rt layer before authentication, an unauthenticated, network-based attacker = can smuggle arbitrary SIP messages over any TCP-based transport (proto_tcp,=
proto_tls, proto_ws, proto_wss) on any instance with TCP enabled, with no = routing-script preconditions. This allows smuggled messages to bypass front= -end SBC/proxy security policies, inherit the connection's authentication c= ontext, and evade rate limiting. This issue has been fixed in versions 3.6.=
6 and 4.0.0-rc1.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45103" target=3D= "_blank" rel=3D"noopener">CVE-2026-45103</a></td>
</tr>

<td class=3D"vendor-product">openwrt--luci</td>
<td>OpenWrt luci-app-dockerman (LuCI master and openwrt-25.12 snapshots con= taining the ucode docker_rpc.uc RPC backend after the JS/ucode conversion) = contains an OS command injection vulnerability. The package's read ACL gran=
ts broad ubus access to docker.* / docker.container.*, which exposes the do= cker.container.ttyd_start method even though it performs mutating operation=
s. The run_ttyd handler builds a shell command from the request-controlled = id, cmd, and uid fields and passes it to system() without quoting or argv-s= tyle execution in the rpcd root context. An authenticated attacker holding = only the luci-app-dockerman read ACL can inject shell metacharacters (e.g.,=
in id) to execute arbitrary commands as root via an HTTP POST to /ubus. op= enwrt-24.10 and openwrt-23.05 do not contain this backend and are not affec= ted; no patched version was known as of the advisory.</td>
<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69096" target=3D= "_blank" rel=3D"noopener">CVE-2026-69096</a></td>
</tr>

<td class=3D"vendor-product">openwrt--luci</td>
<td>OpenWrt luci-app-bmx7 before commit 5890760a454dad2cb00389dba2cdc5e779e= 0ffdd contains a path traversal vulnerability in the bmx7-info CGI script t= hat allows unauthenticated attackers to read files outside the configured r= untimeDir. Attackers can supply directory traversal sequences in the query = string to escape the intended directory and read sensitive files accessible=
to the CGI process.</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69095" target=3D= "_blank" rel=3D"noopener">CVE-2026-69095</a></td>
</tr>

<td class=3D"vendor-product">openyak--openyak</td>
<td>OpenYak is a local-first agent runtime for reliable tool-using models, = with a desktop workspace built on top. Prior to version 1.1.3, the OpenYak = desktop backend binds an HTTP API to `127.0.0.1:<random port>` (commo= nly 19141) without server-side Origin validation, loopback authentication, =
or Content-Type enforcement, and with a wildcard CORS policy. Any webpage a=
user visits while OpenYak is running can issue cross-origin requests to th=
is local server - the browser acts as a proxy into loopback, bypassing OS-l= evel network isolation. Chained, this lets a malicious page execute arbitra=
ry shell commands on the host (RCE) via the build agent with `permission_pr= esets.bash=3Dtrue`, shut down the service, and exfiltrate chat history and = account PII - with no user interaction beyond opening the page. Version 1.1=
.3 patches the issue.</td>
<td>2026-08-07</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46409" target=3D= "_blank" rel=3D"noopener">CVE-2026-46409</a></td>
</tr>

<td class=3D"vendor-product">OpenZeppelin--contracts-wizard</td> <td>OpenZeppelin Contracts Wizardis a web application to interactively buil=
d a contract out of components from OpenZeppelin Contracts. Versions prior =
to 0.10.9 generate a Hardhat test file (`test/test.ts`) by interpolating us= er-supplied `opts.name` (ERC20/ERC721) and `opts.uri` (ERC1155) directly in=
to TypeScript string literals at `zip-hardhat.ts:48` and `:50` without any = JavaScript string escaping. No authentication is required: an attacker craf=
ts a URL such as `https[:]//wizard[.]openzeppelin[.]com/#/erc20?name=3D");r= equire("child_process").execSync("...");("` and shares it with a developer.=
When the victim downloads the resulting zip archive and runs `npx hardhat = test`, the injected Node.js code executes with the developer's local OS pri= vileges. Version 0.10.9 fixes the issue.</td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48054" target=3D= "_blank" rel=3D"noopener">CVE-2026-48054</a></td>
</tr>

<td class=3D"vendor-product">Passionate Programmer Peter--WP Data Access</t=

<td>Unauthenticated Cross Site Scripting (XSS) in WP Data Access <=3D 5.= 5.79 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66663" target=3D= "_blank" rel=3D"noopener">CVE-2026-66663</a></td>
</tr>

<td class=3D"vendor-product">Payment Gateway for Redsys & WooCommerce L= ite--Payment Gateway for Redsys & WooCommerce Lite</td>
<td>The Payment Gateway for Redsys & WooCommerce Lite WordPress plugin = before 7.0.2 does not verify the authenticity of incoming payment-provider = notifications for one of its payment methods before marking orders as paid,=
allowing unauthenticated attackers to forge a payment-confirmation callbac=
k and complete their own orders without paying.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12584" target=3D= "_blank" rel=3D"noopener">CVE-2026-12584</a></td>
</tr>

<td class=3D"vendor-product">Payment Plugins for PayPal WooCommerce--Paymen=
t Plugins for PayPal WooCommerce</td>
<td>The Payment Plugins for PayPal WooCommerce WordPress plugin before 2.0.=
20 does not have proper authorization checks on a REST endpoint, allowing u= nauthenticated users to bypass payments</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13399" target=3D= "_blank" rel=3D"noopener">CVE-2026-13399</a></td>
</tr>

<td class=3D"vendor-product">perspective-dev--perspective</td>
<td>Perspective 5.0.0 contains a remote code execution vulnerability that a= llows unauthenticated attackers to execute arbitrary operating system comma= nds by submitting crafted expression strings to the PolarsVirtualServer bac= kend, which passes client-supplied input directly to Python's eval() with o= nly __builtins__=3D{} cleared. Attackers can exploit Python object attribut=
e traversal through the interpreter's loaded class list to reach subprocess= .Popen via a TableValidateExprReq or TableMakeViewReq protobuf message, ach= ieving arbitrary command execution in the Perspective host process.</td> <td>2026-08-04</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67195" target=3D= "_blank" rel=3D"noopener">CVE-2026-67195</a></td>
</tr>

<td class=3D"vendor-product">perspective-dev--perspective</td>
<td>Perspective 5.0.0 contains a denial-of-service vulnerability in the Vir= tualServer protocol dispatcher that allows unauthenticated remote attackers=
to crash the server process by sending malformed or incomplete protobuf me= ssages. Attackers can send well-formed requests such as ViewToArrowReq with=
no viewport set or MakeTableReq with no data field to trigger unwrap() cal=
ls on None values at nine distinct sites, causing the process to abort with=
SIGABRT.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67198" target=3D= "_blank" rel=3D"noopener">CVE-2026-67198</a></td>
</tr>

<td class=3D"vendor-product">perspective-dev--perspective</td>
<td>Perspective 5.0.0 contains a path traversal vulnerability that allows u= nauthenticated remote attackers to read arbitrary files from the server fil= esystem by including literal ../ segments in HTTP request URL paths. Attack= ers can bypass the insufficient query-string-stripping sanitization to trav= erse outside the configured asset root directory and retrieve sensitive fil=
es such as system credentials and application secrets, with results exposed=
cross-origin due to a wildcard Access-Control-Allow-Origin header set on a=
ll responses.</td>
<td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67200" target=3D= "_blank" rel=3D"noopener">CVE-2026-67200</a></td>
</tr>

<td class=3D"vendor-product">pipeboard-co--meta-ads-mcp</td>
<td>Meta Ads MCP is a Model Context Protocol (MCP) server that lets AI assi= stants run Meta Ads. Prior to version 1.0.109, `AuthInjectionMiddleware.dis= patch()` at `http_auth_integration.py:272` unconditionally forwards unauthe= nticated Streamable HTTP requests to downstream MCP tool handlers without i= ssuing a `401` response, allowing any network-reachable caller to invoke MC=
P tools without authentication. When no per-request credential is present, = tool handlers fall back to the `META_ACCESS_TOKEN` environment variable, an=
d when the downstream Meta Graph API call fails, `api.py:263-269` serialise=
s the raw `httpx` request URL-including the operator's `access_token` as a = query parameter-into the JSON-RPC response body, delivering the credential =
to the unauthenticated caller. Version 1.0.109 fixes the issue.</td> <td>2026-08-07</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48039" target=3D= "_blank" rel=3D"noopener">CVE-2026-48039</a></td>
</tr>

<td class=3D"vendor-product">pluck-cms--Pluck CMS</td>
<td>Pluck CMS's admin panel relies solely on a Referer-header comparison (r= equestedByTheSameDomain() in data/inc/functions.admin.php, gating every adm= in.php action) for CSRF protection, with no per-request anti-CSRF token any= where in the admin area. When a request carries no Referer/Host information=
, the function's elseif branch returns true, treating the request as same-o= rigin. Because a cross-site attacker page can suppress the Referer header (= e.g. via <meta name=3Dreferrer content=3Dno-referrer>), it can force =
an authenticated administrator's browser to submit forged admin actions wit=
h no valid Referer, including creating pages with raw HTML (stored XSS via = the rendered page) and installing PHP modules/themes (remote code execution= ).</td>
<td>2026-08-05</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70376" target=3D= "_blank" rel=3D"noopener">CVE-2026-70376</a></td>
</tr>

<td class=3D"vendor-product">pluck-cms--Pluck CMS</td>
<td>Pluck CMS through 4.7.21 restricts dangerous file uploads in its admin = file-management feature using a fixed blacklist in data/inc/files.php ('.ph= p','php3','php4','php5','php6','php7','phtml','.phtm','.pht','.ph3','.ph4',= '.ph5','.asp','.cgi','.phar'), checked against the last 4-5 characters of t=
he filename. The blacklist omits the '.php8' extension. An authenticated ad= ministrator can upload a file named e.g. shell.php8, which is stored unmodi= fied and, on servers running PHP 8.x, is executed as PHP by the web server,=
resulting in remote code execution.</td>
<td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54416" target=3D= "_blank" rel=3D"noopener">CVE-2026-54416</a></td>
</tr>

<td class=3D"vendor-product">Power Sofware--PowerISO</td>
<td>A security flaw has been discovered in Power Sofware PowerISO 9.3.0.0. = Affected by this issue is some unknown functionality in the library C:\Wind= ows\System32\drivers\scdemu.sys of the component Kernel Driver. The manipul= ation results in improper privilege management. The attack is only possible=
with local access. The exploit has been released to the public and may be = used for attacks. The vendor was contacted early about this disclosure but = did not respond in any way.</td>
<td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19189" target=3D= "_blank" rel=3D"noopener">CVE-2026-19189</a></td>
</tr>

<td class=3D"vendor-product">Premium SEO--Premium SEO</td>
<td>The Premium SEO WordPress plugin is malicious: it ships an unauthentica= ted backdoor that creates a hidden administrator account and, in some build=
s, also enables remote code execution, server-side request forgery and arbi= trary front-end script/content injection, giving an unauthenticated attacke=
r full control of the affected site.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14812" target=3D= "_blank" rel=3D"noopener">CVE-2026-14812</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An improper privilege management vulnerability in the SQL, SPARQL, and = Optic REST query interfaces of Progress MarkLogic Server before 11.3.6 and = 12.0.3 allows an authenticated user with a low-privileged REST role to esca= late privileges to administrator. This enables execution of privileged oper= ations and unauthorized data access.</td>
<td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7329" target=3D"= _blank" rel=3D"noopener">CVE-2026-7329</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An improper verification of cryptographic signature vulnerability in th=
e SAML authentication module of Progress MarkLogic Server before 11.3.6 and=
12.0.3 allows an unauthenticated remote attacker to bypass authentication = and impersonate any user, including administrators. This vulnerability affe= cts deployments with SAML single sign-on enabled.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7557" target=3D"= _blank" rel=3D"noopener">CVE-2026-7557</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An improper privilege management vulnerability in the REST API document=
patch operation of Progress MarkLogic Server before 11.3.6 and 12.0.3 allo=
ws an authenticated user with a low-privileged REST role to escalate privil= eges and execute privileged operations against the Security database.</td> <td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8709" target=3D"= _blank" rel=3D"noopener">CVE-2026-8709</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An HTTP request smuggling vulnerability in the HTTP App Server of Progr= ess MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker to b= ypass authentication and authorization checks, hijack a legitimate user's s= ession, or capture credentials. The vulnerability occurs when a crafted HTT=
P request containing both Content-Length and Transfer-Encoding headers caus=
es a reverse proxy and MarkLogic Server to interpret request boundaries dif= ferently.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9190" target=3D"= _blank" rel=3D"noopener">CVE-2026-9190</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An authentication bypass vulnerability in the ODBC App Server of Progre=
ss MarkLogic Server before 11.3.6 and 12.0.3 allows an unauthenticated remo=
te attacker to bypass password verification and execute queries with the pr= ivileges of any named user known to the server, including administrators.</=

<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9192" target=3D"= _blank" rel=3D"noopener">CVE-2026-9192</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An improper privilege management vulnerability in the Hadoop integratio=
n of Progress MarkLogic Server before 11.3.6 and 12.0.3 allows an authentic= ated user with a low-privileged Hadoop role to escalate privileges and exec= ute privileged operations against the Security database.</td> <td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9193" target=3D"= _blank" rel=3D"noopener">CVE-2026-9193</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>A cross-site scripting vulnerability in the Query Console of Progress M= arkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lures=
an authenticated administrator to a crafted URL to execute arbitrary JavaS= cript in the administrator's browser session, capture credentials, and perf= orm privileged actions on the administrator's behalf.</td>
<td>2026-08-05</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9195" target=3D"= _blank" rel=3D"noopener">CVE-2026-9195</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>An improper privilege management vulnerability in the REST API document=
processing pipeline of Progress MarkLogic Server before 11.3.6 and 12.0.3 = allows an authenticated user with an administrative REST role to escalate p= rivileges. This can result in unauthorized disclosure of sensitive server-s= ide data when it is accessed by a higher-privileged user.</td>

<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7327" target=3D"= _blank" rel=3D"noopener">CVE-2026-7327</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>A server-side request forgery vulnerability in Progress MarkLogic Serve=
r before 11.3.6 and 12.0.3 allows an authenticated user with low-privileged=
roles to bypass protections for cloud instance metadata endpoints. Success= ful exploitation can disclose cloud credentials and compromise cloud resour= ces accessible to the host instance.</td>
<td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9203" target=3D"= _blank" rel=3D"noopener">CVE-2026-9203</a></td>
</tr>

<td class=3D"vendor-product">Progress Software Corporation--MarkLogic Serve= r</td>
<td>A cross-site request forgery vulnerability in the Admin UI of Progress = MarkLogic Server before 11.3.6 and 12.0.3 allows a remote attacker who lure=
s an authenticated administrator to a malicious web page to perform adminis= trative actions on the administrator's behalf. This can result in unauthori= zed changes to security configuration.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7326" target=3D"= _blank" rel=3D"noopener">CVE-2026-7326</a></td>
</tr>

<td class=3D"vendor-product">Property Hive--Houzez Property Feed</td> <td>Unauthenticated Cross Site Scripting (XSS) in Houzez Property Feed <= =3D 2.5.48 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65560" target=3D= "_blank" rel=3D"noopener">CVE-2026-65560</a></td>
</tr>

<td class=3D"vendor-product">Puwell Technology Inc.--IP Camera</td>
<td>Puwell IP Camera firmware versions 2.x through 4.x contains an authenti= cation bypass vulnerability that allows unauthenticated attackers to access=
device functions by sending protocol-conforming packets over TCP port 2345=
6 without credentials. Attackers can exploit the unvalidated Session field =
in the proprietary control protocol header to access live video streams, co= ntrol pan and tilt motors, activate audio functions, and remotely restart t=
he device.</td>
<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61514" target=3D= "_blank" rel=3D"noopener">CVE-2026-61514</a></td>
</tr>

<td class=3D"vendor-product">Puwell Technology Inc.--IP Camera</td>
<td>Puwell IP Camera firmware versions 2.x through 4.x contains an unauthen= ticated command injection vulnerability that allows remote attackers to exe= cute arbitrary operating system commands by sending a crafted JSON payload =
to the DebugShell interface exposed on TCP port 34567. Attackers can exploi=
t the lack of authentication and input sanitization in the binary protocol = service to pass arbitrary commands directly to the underlying operating sys= tem, achieving root-level code execution and complete device compromise.</t=

<td>2026-08-04</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61515" target=3D= "_blank" rel=3D"noopener">CVE-2026-61515</a></td>
</tr>

<td class=3D"vendor-product">QODE--Qode Tours</td>
<td>Unauthenticated SQL Injection in Qode Tours <=3D 3.1.3.1 versions.</=

<td>2026-08-06</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65546" target=3D= "_blank" rel=3D"noopener">CVE-2026-65546</a></td>
</tr>

<td class=3D"vendor-product">qstudio--Export User Data</td>
<td>Subscriber PHP Object Injection in Export User Data <=3D 2.2.6 versi= ons.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65552" target=3D= "_blank" rel=3D"noopener">CVE-2026-65552</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Memory Corruption when processing Device Capability Extended attributes=
in certain NAN Service Discovery Frames with invalid length values.</td> <td>2026-08-04</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-25289" target=3D= "_blank" rel=3D"noopener">CVE-2026-25289</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Cryptographic Issue while processing registration requests with malform=
ed or missing authentication parameters.</td>
<td>2026-08-04</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24079" target=3D= "_blank" rel=3D"noopener">CVE-2026-24079</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Memory corruption while processing a packet with a size close to the ma= ximum allowed value.</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21366" target=3D= "_blank" rel=3D"noopener">CVE-2026-21366</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Memory Corruption when handling malformed request parameters in the fin= gerprint TA.</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24080" target=3D= "_blank" rel=3D"noopener">CVE-2026-24080</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Memory Corruption while processing IOCTL device driver requests with in= valid arguments.</td>
<td>2026-08-04</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24083" target=3D= "_blank" rel=3D"noopener">CVE-2026-24083</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Weak configuration when UE does not verify the consistency of its addit= ional security capabilities with the replayed capabilities.</td> <td>2026-08-04</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24084" target=3D= "_blank" rel=3D"noopener">CVE-2026-24084</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Transient DOS when processing a short target wake time channel usage re= sponse frame with insufficient packet size.</td>
<td>2026-08-04</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-25288" target=3D= "_blank" rel=3D"noopener">CVE-2026-25288</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Memory Corruption when processing untrusted user input in the fastboot = command handler for audio framework configuration.</td>
<td>2026-08-04</td>
<td>7.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-25292" target=3D= "_blank" rel=3D"noopener">CVE-2026-25292</a></td>
</tr>

<td class=3D"vendor-product">raghav993--toner-management</td> <td>toner-management's admin state-changing handlers (add.php, edit.php, de= lete.php under admin/toners, admin/toner-brands, admin/printers, and relate=
d admin subdirectories) executed INSERT/UPDATE/DELETE database operations w= ith no authentication or authorization check, while access control was enfo= rced only in listing views. An unauthenticated remote attacker could invoke=
these handlers directly to create, modify, or destroy application data. Th=
e vendor has since merged a fix requiring an authenticated admin session be= fore any such handler proceeds.</td>
<td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71252" target=3D= "_blank" rel=3D"noopener">CVE-2026-71252</a></td>
</tr>

<td class=3D"vendor-product">Rajat Varlani--Super Socializer</td> <td>Unauthenticated Broken Authentication in Super Socializer <=3D 7.14.=
5 versions.</td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65542" target=3D= "_blank" rel=3D"noopener">CVE-2026-65542</a></td>
</tr>

<td class=3D"vendor-product">Rajat Varlani--Super Socializer</td> <td>Unauthenticated Cross Site Scripting (XSS) in Super Socializer <=3D = 7.14.5 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65544" target=3D= "_blank" rel=3D"noopener">CVE-2026-65544</a></td>
</tr>

<td class=3D"vendor-product">rancher--rancher</td>
<td>Rancher issues long-lived registration tokens to authenticate nodes and=
agents joining a downstream cluster. These tokens were stored and exposed =
in plaintext with no expiration, so a malicious user could obtain one eithe=
r through the Rancher API, etcd, stored automation, or direct file access o=
n a node, and could use it at any time to register a rogue node into the cl= uster.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55997" target=3D= "_blank" rel=3D"noopener">CVE-2026-55997</a></td>
</tr>

<td class=3D"vendor-product">Rank Math SEO--Rank Math SEO</td> <td>Unauthenticated Cross Site Scripting (XSS) in Rank Math SEO <=3D 1.0= .274.1 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66702" target=3D= "_blank" rel=3D"noopener">CVE-2026-66702</a></td>
</tr>

<td class=3D"vendor-product">Razer--RzUpdateService</td>
<td>A weakness has been identified in Razer RzUpdateService 1.10.14.0. Affe= cted by this vulnerability is an unknown functionality of the file C:\Progr=
am Files (x86)\Razer\RzUpdateEngineService\RzUpdateService.exe of the compo= nent Named Pipe Handler. Executing a manipulation of the argument lpThreadP= arameter can lead to improper privilege management. The attack requires loc=
al access. The exploit has been made available to the public and could be u= sed for attacks. The vendor was contacted early about this disclosure.</td> <td>2026-08-03</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18606" target=3D= "_blank" rel=3D"noopener">CVE-2026-18606</a></td>
</tr>

<td class=3D"vendor-product">rclone--rclone</td>
<td>rclone is a command-line program to sync files and directories to and f= rom different cloud storage providers. Prior to v1.75.0, rclone interpolate=
s remote SFTP paths into PowerShell hash commands in backend/sftp/sftp.go, = and quoteOrEscapeShellPath escapes only ASCII apostrophe even though PowerS= hell treats U+2018, U+2019, U+201A, and U+201B as single-quote delimiters, = allowing an attacker-controlled filename to terminate the intended path lit= eral and append PowerShell statements that execute as the victim SSH accoun=
t when server-side hashing is invoked. This issue is fixed in v1.75.0.</td> <td>2026-08-05</td>
<td>8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71312" target=3D= "_blank" rel=3D"noopener">CVE-2026-71312</a></td>
</tr>

<td class=3D"vendor-product">realmag777--TableOn WordPress Posts Table Filt= erable</td>
<td>The TableOn - WordPress Posts Table Filterable plugin for WordPress is = vulnerable to blind SQL Injection via the `filter_data[comment_count]` para= meter of the public `tableon_get_table_data` AJAX action in all versions up=
to, and including, 1.0.5.1. This is due to insufficient escaping on the us= er-supplied parameter and lack of sufficient preparation on the existing SQ=
L query - the value is split on `:` and both halves are interpolated direct=
ly into a `posts_where` SQL clause without `intval()` casting or `$wpdb-&gt= ;prepare()`. This makes it possible for unauthenticated attackers to append=
additional SQL queries into the already-existing query that can be used to=
extract sensitive information from the database (researcher demonstrated e= xtraction of database(), wp_users.user_login, and wp_users.user_pass).</td> <td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18881" target=3D= "_blank" rel=3D"noopener">CVE-2026-18881</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Multicluster Engine for Kubernetes</t=

<td>A flaw was found in the Multicluster Engine for Kubernetes ClusterCurat=
or controller. A tenant administrator with namespace-scoped privileges can = exploit this vulnerability by creating a namespaced ClusterCurator. This ac= tion inadvertently grants the tenant administrator the ability to mint a to= ken for a ServiceAccount with cluster-wide administrative authority. This l= eads to a privilege escalation, allowing the tenant administrator to gain f= ull control over the cluster.</td>
<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10059" target=3D= "_blank" rel=3D"noopener">CVE-2026-10059</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Advanced Cluster Management f=
or Kubernetes 2</td>
<td>A flaw was found in the Application Subscription controller (multiclust= er-operators-subscription) of Red Hat Advanced Cluster Management for Kuber= netes (ACM). A user with namespace-scoped "edit" privileges in an ACM hub n= amespace can create a Channel resource pointing to a Helm repository they c= ontrol and a Subscription resource referencing it. The app-subscription con= troller fetches and applies the Helm chart contents with its own elevated a= uthority, without verifying whether the subscription creator holds the "ope= n-cluster-management:subscription-admin" role and without restricting appli=
ed resources to the subscription namespace. This allows the attacker to inc= lude cluster-scoped resources in the Helm chart, such as a ClusterRoleBindi=
ng granting the attacker's ServiceAccount the "cluster-admin" ClusterRole. = Successful exploitation results in full cluster-admin privilege escalation.=
This contradicts the ACM documentation which states that non-subscription-= admin users should have resources deployed into the subscription namespace = only.</td>
<td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10090" target=3D= "_blank" rel=3D"noopener">CVE-2026-10090</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.4</td>
<td>A flaw was found in Keycloak's Dynamic Client Registration (DCR) securi=
ty policy management. The "Allowed Protocol Mapper Types" policy, which res= tricts which types of data mappers a client can use, fails to re-validate t=
he mapper type during a client update if the mapper's configuration remains=
unchanged. An attacker with client registration privileges can exploit thi=
s by first registering an allowed mapper type with a malicious configuratio=
n and then swapping it for a restricted, high-privilege mapper type (such a=
s one that hardcodes administrative roles). This allows the attacker to gai=
n full administrative access to the Keycloak realm.</td>

<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15572" target=3D= "_blank" rel=3D"noopener">CVE-2026-15572</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.4</td>
<td>A flaw was found in Keycloak's Authorization Services. The component re= sponsible for matching request paths to security policies (PathMatcher) doe=
s not properly normalize URIs before comparison. By adding extra characters=
like a trailing slash or matrix parameters to a URL, an attacker can trick=
the system into applying a less restrictive security policy than intended.=
This allows an authenticated user to access administrative or restricted a= reas they should not have permission to see.</td>
<td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15573" target=3D= "_blank" rel=3D"noopener">CVE-2026-15573</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.4</td>
<td>A flaw was found in the Dynamic Client Registration (DCR) component of = Keycloak, an identity and access management solution. The default DCR polic=
y fails to properly validate the claim path for User Property mappers, allo= wing them to write values to sensitive internal claim locations. An attacke=
r with a standard user account and a limited Initial Access Token can explo=
it this to forge administrative roles in their access token. This allows th=
e attacker to take over other clients, steal confidential secrets, and pote= ntially gain full administrative control over the realm.</td> <td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16102" target=3D= "_blank" rel=3D"noopener">CVE-2026-16102</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.4</td>
<td>A flaw was found in the SAML broker component of Keycloak, which is use=
d to manage identity federation and user authentication. The issue occurs b= ecause the IdP-initiated Single Sign-On endpoint fails to check if a provid=
er is restricted to account linking only. This allows an attacker with cont= rol over a linked upstream identity to bypass login restrictions and gain f= ull access to a local user account.</td>
<td>2026-08-05</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16442" target=3D= "_blank" rel=3D"noopener">CVE-2026-16442</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.4</td>
<td>A flaw was found in the SAML metadata import functionality of the keycl= oak-services component, which is the core engine for identity brokering in = Red Hat Build of Keycloak. When importing identity provider metadata that l= acks specific usage attributes for keys, the system incorrectly disables si= gnature validation for SAML responses even if a signing certificate is prov= ided. This issue allows an unauthenticated attacker to forge a SAML respons=
e and gain unauthorized access to a user account by knowing their external = identifier.</td>
<td>2026-08-05</td>
<td>7.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16443" target=3D= "_blank" rel=3D"noopener">CVE-2026-16443</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in dracut. The die() error-handling function writes it=
s message into a shell script under the initramfs emergency-hook directory = without properly shell-quoting it. When the message contains data derived f= rom the DHCP ROOT_PATH option, an attacker on the adjacent network who cont= rols a rogue DHCP server can inject a command-substitution sequence that ex= ecutes as root the next time dracut sources its emergency hook scripts duri=
ng standard boot-failure handling.</td>
<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15816" target=3D= "_blank" rel=3D"noopener">CVE-2026-15816</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in the GStreamer gst-plugins-good package. The rtph264= depay and rtph265depay RTP depayloader elements do not enforce a maximum si=
ze limit on the reassembly buffer used during fragmented RTP packet process= ing. A remote, unauthenticated attacker can send a continuous stream of RTP=
fragments without ever transmitting an end-of-fragment marker, causing the=
reassembly buffer to grow without bound until process memory is exhausted.=
This results in a denial of service through process termination.</td> <td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18649" target=3D= "_blank" rel=3D"noopener">CVE-2026-18649</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in udisks2. A local attacker with an active console se= ssion can exploit insufficient authorization checking on the 'as-user' opti=
on in the org.freedesktop.UDisks2.Filesystem.Mount() D-Bus method. This all= ows the attacker to spoof the 'as-user' parameter, mounting filesystems on = behalf of arbitrary users, including privileged accounts. This can lead to = local privilege escalation through mount point injection and manipulation o=
f the mount namespace visible to privileged users.</td>
<td>2026-08-06</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7867" target=3D"= _blank" rel=3D"noopener">CVE-2026-7867</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 6</td>
<td>A heap-based buffer overflow vulnerability exists in the GIMP DDS (Dire= ctDraw Surface) file parser. When a crafted DDS file declares a D3D9 pixel = format but sets a lower bits-per-pixel (bpp) value in the header, the loade=
r allocates an undersized heap buffer. Subsequent pixel data consumption at=
the real format's stride causes a write past the heap buffer boundary, lea= ding to heap metadata corruption and potential code execution.</td> <td>2026-08-08</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42170" target=3D= "_blank" rel=3D"noopener">CVE-2026-42170</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 9</td>
<td>A heap-buffer-overflow vulnerability exists in the APNG (Animated PNG) = file loader of GIMP. This flaw occurs when the `fcTL` width exceeds the `IH= DR` width, leading to pixel data being written past the end of a heap alloc= ation. Additionally, a heap-based buffer overflow exists in the DDS plug-in=
due to a BPP mismatch in the `load_layer()` function. Both vulnerabilities=
can be triggered by opening a specially crafted image file, potentially le= ading to code execution.</td>
<td>2026-08-04</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-42169" target=3D= "_blank" rel=3D"noopener">CVE-2026-42169</a></td>
</tr>

<td class=3D"vendor-product">Rongzhitong--Visual Integrated Command and Dis= patch Platform</td>
<td>A vulnerability was detected in Rongzhitong Visual Integrated Command a=
nd Dispatch Platform up to 20260617. Impacted is an unknown function of the=
file /dm/dispatch/userinfo/upload. Performing a manipulation of the argume=
nt File results in unrestricted upload. It is possible to initiate the atta=
ck remotely. The exploit is now public and may be used. The vendor was cont= acted early about this disclosure but did not respond in any way.</td> <td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18969" target=3D= "_blank" rel=3D"noopener">CVE-2026-18969</a></td>
</tr>

<td class=3D"vendor-product">Rongzhitong--Visual Integrated Command and Dis= patch Platform</td>
<td>A flaw has been found in Rongzhitong Visual Integrated Command and Disp= atch Platform up to 20260617. The affected element is an unknown function o=
f the file /dm/dispatch/user/findAll. Executing a manipulation of the argum= ent Name can lead to sql injection. It is possible to launch the attack rem= otely. The exploit has been published and may be used. The vendor was conta= cted early about this disclosure but did not respond in any way.</td> <td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18970" target=3D= "_blank" rel=3D"noopener">CVE-2026-18970</a></td>
</tr>

<td class=3D"vendor-product">rxi--microtar</td>
<td>microtar's mtar_write_file_header() and mtar_write_dir_header() functio=
ns (src/microtar.c) copy a caller-supplied entry name into the 100-byte `na= me` field of a stack-allocated mtar_header_t via strcpy(h.name, name), with=
no check that strlen(name) is less than 100 before the copy. Any applicati=
on that calls these functions with an externally-influenced filename longer=
than 99 characters (e.g. when archiving user-supplied or attacker-controll=
ed filenames) triggers a stack buffer overflow.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71267" target=3D= "_blank" rel=3D"noopener">CVE-2026-71267</a></td>
</tr>

<td class=3D"vendor-product">saadiqbal--WPFormify Stripe Payments with Form=
and Checkout</td>
<td>The WPFormify - Stripe Payments with Form and Checkout plugin for WordP= ress is vulnerable to unauthorized modification and deletion of Stripe paym= ent credentials in all versions up to, and including, 1.1.1. This is due to=
missing capability checks and nonce verification on the `wpf_stripe_callba= ck_success()` and `wpf_stripe_disconnect()` functions, both hooked to `admi= n_init`. The `admin_init` hook fires on `admin-post.php` which is accessibl=
e without authentication. This makes it possible for unauthenticated attack= ers to overwrite the site's Stripe API credentials with attacker-controlled=
values (redirecting payments to the attacker's Stripe account) or disconne=
ct the Stripe integration entirely by deleting the stored credentials.</td> <td>2026-08-05</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6627" target=3D"= _blank" rel=3D"noopener">CVE-2026-6627</a></td>
</tr>

<td class=3D"vendor-product">Sangfor--Operation and Maintenance Security Ma= nagement System</td>
<td>A vulnerability was determined in Sangfor Operation and Maintenance Sec= urity Management System up to 3.0.13. Affected by this vulnerability is the=
function com.sbr.fort.foreignDP.DpLoginController of the file /fort/portal= _login of the component Login Endpoint. This manipulation causes os command=
injection. The attack can be initiated remotely. The exploit has been publ= icly disclosed and may be utilized. The vendor was contacted early about th=
is disclosure but did not respond in any way.</td>
<td>2026-08-03</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18641" target=3D= "_blank" rel=3D"noopener">CVE-2026-18641</a></td>
</tr>

<td class=3D"vendor-product">Scott Paterson--Easy PayPal Buy Now Button</td=

<td>Unauthenticated Cross Site Scripting (XSS) in Easy PayPal Buy Now Butto=
n <=3D 2.0.4 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65517" target=3D= "_blank" rel=3D"noopener">CVE-2026-65517</a></td>
</tr>

<td class=3D"vendor-product">Scripta--eScriptorium</td>
<td>Authorization bypass in the Line, LineTranscription, VirtualCollection,=
tag and process API endpoints in Scripta/eScriptorium through 26.04.1 allo=
ws a remote authenticated user to read, modify and delete other users' tran= scription content via primary keys supplied in the request body, which are = queried against the global model manager instead of the request-scoped quer= yset</td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18258" target=3D= "_blank" rel=3D"noopener">CVE-2026-18258</a></td>
</tr>

<td class=3D"vendor-product">Scripta--eScriptorium</td>
<td>Server-side request forgery in the METS and IIIF import URI handling in=
Scripta eScriptorium through 26.04.1 allows a remote authenticated user to=
make the server issue arbitrary HTTP requests to internal hosts, including=
the cloud instance metadata service, via the mets_uri or iiif_uri paramete=
r of POST /api/documents/{pk}/imports/, because the IMPORT_ALLOWED_DOMAINS = setting defaults to '*' and no address filtering, redirect cap or timeout i=
s applied</td>
<td>2026-08-06</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18359" target=3D= "_blank" rel=3D"noopener">CVE-2026-18359</a></td>
</tr>

<td class=3D"vendor-product">Scripta--eScriptorium</td>
<td>Missing authorization in the OcrModelRight create and delete views in S= cripta eScriptorium through 26.04.1 allows a remote authenticated user to g= rant themselves access to another user's private OCR model and to revoke an=
y user's OCR model access via a POST request, because the ownership check i=
s placed in get_context_data() and therefore runs only on the GET rendering=
path</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18277" target=3D= "_blank" rel=3D"noopener">CVE-2026-18277</a></td>
</tr>

<td class=3D"vendor-product">SecureAge--CatchPulse</td>
<td>An improper access control vulnerability in=C2=A0CatchPulse=C2=A0could = allow a non-administrative local-attacker to connect to an unrestricted ker= nel filter communication port and bypass=C2=A0CatchPulse's=C2=A0security po= licy enforcement.</td>
<td>2026-08-06</td>
<td>8.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55978" target=3D= "_blank" rel=3D"noopener">CVE-2026-55978</a></td>
</tr>

<td class=3D"vendor-product">SEO Squirrly--SEO Plugin by Squirrly SEO</td> <td>Unauthenticated Cross Site Scripting (XSS) in SEO Plugin by Squirrly SE=
O <=3D 14.2.0 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66664" target=3D= "_blank" rel=3D"noopener">CVE-2026-66664</a></td>
</tr>

<td class=3D"vendor-product">sequelize--sequelize</td>
<td>Sequelize is a Node.js ORM tool. Prior to 6.37.4, SQL injection is poss= ible with strings only if dialect is set to oracle. The escape function def= ined in sql-string.js does not escape quotes if the value starts with TO_TI= MESTAMP or TO_DATE. In the Oracle dialect, when val is a string and starts = with TO_TIMESTAMP or TO_DATE, escape returns val directly instead of replac= ing single quotes. An attacker can inject arbitrary SQL expressions through=
an application value that reaches this escape path. This issue is fixed in=
version 6.37.4.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69240" target=3D= "_blank" rel=3D"noopener">CVE-2026-69240</a></td>
</tr>

<td class=3D"vendor-product">Sergey--AIWU</td>
<td>Unauthenticated Privilege Escalation in AIWU <=3D 1.5.6 versions.</t=

<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65507" target=3D= "_blank" rel=3D"noopener">CVE-2026-65507</a></td>
</tr>

<td class=3D"vendor-product">sh1zen--Multi Uploader for Gravity Forms</td> <td>The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable=
to unauthorized arbitrary media deletion in all versions up to, and includ= ing, 1.1.8. This is due to missing capability checks in the `plupload_ajax_= delete_file()` function, which is registered via `wp_ajax_nopriv_gfmu_delet= e_file`. The nonce intended for CSRF protection is exposed on any public-fa= cing page containing a multi-uploader form field via the `GFMU_options` Jav= aScript object. This makes it possible for unauthenticated attackers to per= manently delete any WordPress media attachment by supplying its attachment = ID, potentially leading to complete media library destruction.</td> <td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5581" target=3D"= _blank" rel=3D"noopener">CVE-2026-5581</a></td>
</tr>

<td class=3D"vendor-product">Shabti Kaplan--Frontend Admin by DynamiApps</t=

<td>Unauthenticated Privilege Escalation in Frontend Admin by DynamiApps &l= t;=3D 3.29.10 versions.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66662" target=3D= "_blank" rel=3D"noopener">CVE-2026-66662</a></td>
</tr>

<td class=3D"vendor-product">Shabti Kaplan--Frontend Admin by DynamiApps</t=

<td>Subscriber Broken Access Control in Frontend Admin by DynamiApps <=
=3D 3.29.10 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66470" target=3D= "_blank" rel=3D"noopener">CVE-2026-66470</a></td>
</tr>

<td class=3D"vendor-product">Shandong Hoteam--PDM Product Data Management S= ystem</td>
<td>A vulnerability has been found in Shandong Hoteam PDM Product Data Mana= gement System up to 8.3.10. The impacted element is the function GetStoredC= lassByFilter of the file /Base/BaseService.asmx/DataService. The manipulati=
on of the argument FilterString leads to sql injection. Remote exploitation=
of the attack is possible. The exploit has been disclosed to the public an=
d may be used. The vendor was contacted early about this disclosure but did=
not respond in any way.</td>
<td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18854" target=3D= "_blank" rel=3D"noopener">CVE-2026-18854</a></td>
</tr>

<td class=3D"vendor-product">Shenzhen Aitemi--M300 Wi-Fi Repeater</td>

<td>A security flaw has been discovered in Shenzhen Aitemi M300 Wi-Fi Repea= ter r0-ea7890a. Impacted is the function sprintf of the file /protocol.csp?= fname=3Dnet&opt=3Dsmacfilter_conf&function=3Dset&act=3Dadd&= name=3Dtest&enable=3D1. Performing a manipulation of the argument enabl= e/name/mac results in command injection. The attack may be initiated remote= ly. The exploit has been released to the public and may be used for attacks= .</td>
<td>2026-08-09</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19348" target=3D= "_blank" rel=3D"noopener">CVE-2026-19348</a></td>
</tr>

<td class=3D"vendor-product">Shibby--Tomato</td>
<td>A vulnerability was determined in Shibby Tomato 1.28.0000. Affected by = this vulnerability is the function new_qoslimit_stop of the file /tmp/qosli= mittc_stop.sh. Executing a manipulation of the argument wan_iface can lead =
to os command injection. The attack can be launched remotely. The exploit h=
as been publicly disclosed and may be utilized. This project is superseded =
by FreshTomato.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19034" target=3D= "_blank" rel=3D"noopener">CVE-2026-19034</a></td>
</tr>

<td class=3D"vendor-product">Shibby--Tomato</td>
<td>A vulnerability was identified in Shibby Tomato 1.28.0000. Affected by = this issue is the function new_qoslimit_start of the file /etc/qoslimit. Th=
e manipulation of the argument new_qoslimit_enable leads to os command inje= ction. The attack may be initiated remotely. The exploit is publicly availa= ble and might be used. This project is superseded by FreshTomato.</td> <td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19035" target=3D= "_blank" rel=3D"noopener">CVE-2026-19035</a></td>
</tr>

<td class=3D"vendor-product">Shibby--Tomato</td>
<td>A security flaw has been discovered in Shibby Tomato 1.28.0000. This af= fects the function sub_40F88C of the file /tmp/ppp/wanoptions. The manipula= tion of the argument ppp_custom results in os command injection. The attack=
may be launched remotely. The exploit has been released to the public and = may be used for attacks. This project is superseded by FreshTomato.</td> <td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19036" target=3D= "_blank" rel=3D"noopener">CVE-2026-19036</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in = the fullTextSearchAssetContent endpoint reachable by unauthenticated users = and publish RoleReader tokens. Attackers can execute arbitrary SQL on the r= ead-write asset-content database via unescaped method parameters and REGEXP=
clauses to read, modify, or delete cross-notebook data.</td> <td>2026-08-03</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69083" target=3D= "_blank" rel=3D"noopener">CVE-2026-69083</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan versions <=3D v3.7.2 expose the /api/search/searchEmbedBlock = endpoint, which passes a client-supplied SQL statement verbatim to the main=
read-write siyuan.db handle with no single-statement, read-only, or admin = restrictions. The endpoint is gated only by CheckAuth, making it reachable =
by the publish RoleReader token and by anonymous users when publish authent= ication is disabled. Because the underlying driver executes stacked stateme= nts, an attacker can read and modify content across all opened cleartext no= tebooks (encrypted per-box notebooks are excluded). Fixed in v3.7.3.</td> <td>2026-08-03</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69084" target=3D= "_blank" rel=3D"noopener">CVE-2026-69084</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api= /filetree/searchDocs endpoint, where the caller-supplied keyword parameter =
is concatenated directly into SQL statements with no escaping or parameter = binding. The endpoint is reachable by a publish RoleReader token, or unauth= enticated when publish mode is enabled with Publish.Auth.Enable set to fals=
e. Because the statement executes on a read-write SQLite handle via a drive=
r that supports stacked (semicolon-separated) statements, an attacker can r= ead and modify database content across all cleartext (non-encrypted) notebo= oks on the instance.</td>
<td>2026-08-03</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69085" target=3D= "_blank" rel=3D"noopener">CVE-2026-69085</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan versions before v3.7.3 contain an authentication bypass vulnerab= ility in publish mode where content-returning endpoints getHeadingChildrenD= OM, getHeading*Transaction, and getBacklinkDoc perform no password check de= spite protecting the primary getDoc endpoint. Anonymous attackers can retri= eve full content of password-protected documents by obtaining internal bloc=
k IDs from reader-accessible endpoints and calling unprotected content endp= oints to bypass the password gate.</td>
<td>2026-08-03</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68584" target=3D= "_blank" rel=3D"noopener">CVE-2026-68584</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan before v3.7.3 fails to apply publish-access filters to the getBa= cklinkDoc and getBackmentionDoc content endpoints (/api/ref/getBacklinkDoc = and /api/ref/getBackmentionDoc). While the corresponding backlink list endp= oints filter publish-forbidden documents, the content endpoints (gated only=
by CheckAuth) do not. A publish-mode reader - including an anonymous reade=
r when publish Basic Auth is disabled - can call these endpoints directly w= ith a publish-forbidden document's ID to retrieve its rendered DOM content = and to determine whether the document references a given block (a reference= -existence oracle).</td>
<td>2026-08-03</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68586" target=3D= "_blank" rel=3D"noopener">CVE-2026-68586</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan versions before v3.7.3 contain an information disclosure vulnera= bility in the getHeadingDeleteTransaction, getHeadingLevelTransaction, and = getHeadingInsertTransaction endpoints that return rendered block DOM withou=
t publish-access checks. Anonymous readers or publish RoleReader tokens can=
supply a heading block ID to read full rendered content of publish-disable=
d documents that should be restricted.</td>
<td>2026-08-03</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68587" target=3D= "_blank" rel=3D"noopener">CVE-2026-68587</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan versions before v3.7.3 fail to validate the avID parameter on al=
l code branches in attribute-view read endpoints, allowing attackers to con= struct traversal paths that escape the storage directory. Authenticated use=
rs with RoleReader permissions or anonymous clients when publish authentica= tion is disabled can read JSON files outside the attribute-view directory t=
o disclose cross-scope database content.</td>
<td>2026-08-03</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69086" target=3D= "_blank" rel=3D"noopener">CVE-2026-69086</a></td>
</tr>

<td class=3D"vendor-product">socketio--socket.io</td>
<td>Socket.IO enables bidirectional and low-latency communication for every=
platform. Prior to 4.2.7, 3.4.5, and 3.3.6, a specially crafted Socket.IO = packet can make the server wait for a large number of binary attachments an=
d buffer them, which can be exploited to make the server run out of memory.=
This vulnerability is fixed in 4.2.7, 3.4.5, and 3.3.6.</td> <td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69185" target=3D= "_blank" rel=3D"noopener">CVE-2026-69185</a></td>
</tr>

<td class=3D"vendor-product">Soflyy--Breakdance</td>
<td>Missing Authorization vulnerability in Soflyy Breakdance allows Exploit= ing Incorrectly Configured Access Control Security Levels. This issue affec=
ts Breakdance: from n/a before 2.7.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65551" target=3D= "_blank" rel=3D"noopener">CVE-2026-65551</a></td>
</tr>

<td class=3D"vendor-product">solutioned--Staff Training</td> <td>Unauthenticated Broken Access Control in Staff Training <=3D 1.0.7 v= ersions.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65541" target=3D= "_blank" rel=3D"noopener">CVE-2026-65541</a></td>
</tr>

<td class=3D"vendor-product">Sophos--Sophos Endpoint for macOS</td>
<td>A privilege escalation vulnerability allows local users to execute arbi= trary code as root via Sophos Endpoint for macOS older than version 2026.1.=
1 and Sophos Home for macOS older than version 10.11.6.</td> <td>2026-08-06</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18367" target=3D= "_blank" rel=3D"noopener">CVE-2026-18367</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Computer Repair Shop Managemen=
t System</td>
<td>A security vulnerability has been detected in SourceCodester Computer R= epair Shop Management System 1.0. Affected by this issue is some unknown fu= nctionality of the file /classes/Master.php?f=3Ddelete_product. Such manipu= lation of the argument ID leads to sql injection. It is possible to launch = the attack remotely. The exploit has been disclosed publicly and may be use= d.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19021" target=3D= "_blank" rel=3D"noopener">CVE-2026-19021</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Photo Share Website</td>
<td>A vulnerability was found in SourceCodester Photo Share Website 1.0. Th=
e impacted element is an unknown function of the file /social/ajax.php?acti= on=3Dlogin. The manipulation of the argument email results in sql injection=
. The attack can be launched remotely. The exploit has been made public and=
could be used.</td>
<td>2026-08-07</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19196" target=3D= "_blank" rel=3D"noopener">CVE-2026-19196</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Photo Share Website</td>
<td>A vulnerability was found in SourceCodester Photo Share Website 1.0. Th=
is affects an unknown function of the file /social/ajax.php?action=3Dsignup=
. Performing a manipulation of the argument email results in sql injection.=
Remote exploitation of the attack is possible. The exploit has been made p= ublic and could be used.</td>
<td>2026-08-07</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19211" target=3D= "_blank" rel=3D"noopener">CVE-2026-19211</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Simple Doctors Appointment Sys= tem</td>
<td>A security flaw has been discovered in SourceCodester Simple Doctors Ap= pointment System 1.0. This vulnerability affects unknown code of the file /= admin/ajax.php?action=3Ddelete_appointment. The manipulation of the argumen=
t ID results in sql injection. The attack may be launched remotely. The exp= loit has been released to the public and may be used for attacks.</td> <td>2026-08-07</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19231" target=3D= "_blank" rel=3D"noopener">CVE-2026-19231</a></td>
</tr>

<td class=3D"vendor-product">Spacebar Server--Spacebar Server</td>
<td>Spacebar Server before commit dcfd910 contains a missing authorization = vulnerability that allows any authenticated attacker to add themselves to a= rbitrary group DM channels by sending a PUT request to the channels recipie=
nt endpoint without membership verification. Attackers can exploit the ungu= arded PUT /channels/{channel_id}/recipients/{user_id} handler to join priva=
te group DMs, read complete message history, post messages as a participant=
, and force-add third-party users without their consent.</td> <td>2026-08-05</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70617" target=3D= "_blank" rel=3D"noopener">CVE-2026-70617</a></td>
</tr>

<td class=3D"vendor-product">StableBit--DrivePool</td>
<td>A security vulnerability has been detected in StableBit DrivePool 2.3.1= 3.1687. This vulnerability affects unknown code of the file C:\Program File= s\StableBit\DrivePool\DrivePool.Service.exe of the component DrivePoolServi= ce. Such manipulation leads to permission issues. The attack must be carrie=
d out locally. The exploit has been disclosed publicly and may be used.</td=

<td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19191" target=3D= "_blank" rel=3D"noopener">CVE-2026-19191</a></td>
</tr>

<td class=3D"vendor-product">StableBit--Scanner</td>
<td>A weakness has been identified in StableBit Scanner 2.6.13.4088. This a= ffects an unknown part of the file C:\Program Files (x86)\StableBit\Scanner= \Service\Scanner.Service.exe of the component ScannerService. This manipula= tion causes permission issues. The attack is restricted to local execution.=
The exploit has been made available to the public and could be used for at= tacks.</td>
<td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19190" target=3D= "_blank" rel=3D"noopener">CVE-2026-19190</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic is a Laravel and Git powered content management system (CMS). = Prior to 5.74.1 and 6.24.0, when OAuth login was enabled with a provider th=
at does not guarantee verified email addresses, an unauthenticated attacker=
could sign in as an existing user, potentially including a super admin, wi= thout knowing that user's password, because the application matched OAuth i= dentities to accounts by email address alone. Exploitation requires OAuth t=
o be explicitly enabled with such a provider. This issue is fixed in versio=
ns 5.74.1 and 6.24.0.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64665" target=3D= "_blank" rel=3D"noopener">CVE-2026-64665</a></td>
</tr>

<td class=3D"vendor-product">stellarwp--Membership Plugin Kadence Membershi= ps</td>
<td>The Membership Plugin - Kadence Memberships plugin for WordPress (forme= rly Restrict Content) is vulnerable to password reset link poisoning leadin=
g to account takeover in all versions up to, and including, 4.0.0. This is = due to the legacy lost-password handler rc_process_lost_password_form() con= suming the attacker-controlled rc_redirect POST parameter into two unvalida= ted sinks in legacy/includes/forms.php: wp_redirect( esc_url( $_POST['rc_re= direct'] ) . ... ) at line 243, and add_query_arg( array( 'key' =3D> $ke=
y, 'login' =3D> ... ), $_POST['rc_redirect'] ) inside rc_send_password_r= eset_email() at line 306. The nonce required to reach the handler is broadc= ast by the public [login_form] shortcode at line 207 to any anonymous visit= or. This makes it possible for unauthenticated attackers to issue a passwor= d-reset request for any account (including administrators) whose reset emai=
l body points the victim at an attacker-controlled host carrying a valid re= set key/login. When the victim clicks the link, the reset key leaks to the = attacker, who can replay it against the legitimate site to complete account=
takeover.</td>
<td>2026-08-05</td>
<td>9.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9273" target=3D"= _blank" rel=3D"noopener">CVE-2026-9273</a></td>
</tr>

<td class=3D"vendor-product">Stephan Muelle--libkcapi</td>
<td>Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-= shot AIO path can return an error before all submitted IOCBs are drained, a= llowing later kernel writes into caller-owned output buffers.</td>

<td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71226" target=3D= "_blank" rel=3D"noopener">CVE-2026-71226</a></td>
</tr>

<td class=3D"vendor-product">Stirling-Tools--Stirling-PDF</td> <td>Stirling-PDF's POST /api/v1/convert/url/pdf endpoint (ConvertWebsiteToP= DF.java) was not updated with the CustomHtmlSanitizer/SsrfProtectionService=
SSRF protections that were added to three sibling conversion endpoints (ht= ml/pdf, file/pdf, markdown/pdf). The endpoint validates only that the initi=
al requested URL resolves to a public IP, then fetches the page's HTML serv= er-side and hands it, unsanitized, to a WeasyPrint subprocess. Embedded res= ource references in the fetched HTML (e.g. `<img src=3D"http://169.254.1= 69.254/...">`) are fetched by WeasyPrint with no per-resource SSRF filte= ring, allowing an attacker-controlled page to cause the server to retrieve = cloud metadata endpoints or internal network resources and leak their conte= nts back into the generated PDF.</td>
<td>2026-08-05</td>
<td>8.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71270" target=3D= "_blank" rel=3D"noopener">CVE-2026-71270</a></td>
</tr>

<td class=3D"vendor-product">supsysticcom--Smart Popup by Supsystic</td>

<td>The Smart Popup by Supsystic plugin for WordPress is vulnerable to Priv= ilege Escalation in all versions up to, and including, 1.12.0. This is due =
to a permission map collision in the `havePermissions()` function in `class= es/frame.php`, where `array_merge()` overwrites the popup module's administ= rator-restricted method list with the base controller's value, silently rem= oving `save` from protected actions; this is compounded by the subscription=
confirmation email embedding the same generic `pps_nonce` that the unauthe= nticated `wp_ajax_nopriv_save` endpoint accepts, and by the complete absenc=
e of any server-side role allowlist in `createWpSubscriber()`. This makes i=
t possible for unauthenticated attackers to submit a crafted POST request t=
o `admin-ajax.php` using a nonce obtained from a public subscription confir= mation email, setting `params[tpl][sub_wp_create_user_role]` to `administra= tor` via the exposed `popupControllerPps::save()` action, and then triggeri=
ng the stored confirmation flow to create a persistent WordPress Administra= tor account with attacker-chosen credentials.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18322" target=3D= "_blank" rel=3D"noopener">CVE-2026-18322</a></td>
</tr>

<td class=3D"vendor-product">SUSE--NeuVector</td>
<td>NeuVector through 5.4.9 is can potentially leak information from manage=
r /network/graph API=C2=A0due to missing authentication and cached data con= taining sensitive information.</td>
<td>2026-08-05</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-25703" target=3D= "_blank" rel=3D"noopener">CVE-2026-25703</a></td>
</tr>

<td class=3D"vendor-product">SUSE--Rancher</td>
<td>A privilege escalation vulnerability exists in Rancher's impersonation = middleware (pkg/auth/requests/impersonate.go). An authenticated Rancher use=
r with the default user global role can gain full administrative access to = the Rancher control plane and transitively to all downstream clusters it ma= nages. This issue affects Rancher: from 2.11.0 before 2.11.16, from 2.12.0 = before 2.12.12, from 2.13.0 before 2.13.8, and from 2.14.0 before 2.14.2.</=

<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-44945" target=3D= "_blank" rel=3D"noopener">CVE-2026-44945</a></td>
</tr>

<td class=3D"vendor-product">SUSE--Rancher</td>
<td>When API audit logging is enabled, the middleware reads the entire HTTP=
request body into memory without enforcing a size limit on login endpoints=
. Because the audit middleware is positioned earlier in the handler chain t= han Rancher's APIBodyLimitingHandler, the body-size cap (default 1 MiB) is = bypassed for requests that pass through the audit copyReqBody path. An unau= thenticated attacker can send arbitrarily large request bodies to the publi=
c login endpoints, causing the Rancher Manager server process to allocate m= emory proportional to the supplied body size. With just a few concurrent co= nnections, this can exhaust available memory and terminate the Rancher Mana= ger plane process, making the Rancher API and UI unavailable and interrupti=
ng management of all downstream clusters.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59675" target=3D= "_blank" rel=3D"noopener">CVE-2026-59675</a></td>
</tr>

<td class=3D"vendor-product">Swiss Federal Office of Information Technology=
, Systems and Telecommunication--@oblique/cli</td>
<td>@oblique/cli 15.4.0 contains an OS command injection vulnerability in t=
he project creation functionality. The CLI constructs shell commands throug=
h string concatenation and executes them with execSync(). A user-controlled=
project-name argument is inserted into the shell command without proper ne= utralization, allowing shell metacharacters to execute additional operating= -system commands when the CLI is invoked with a crafted project name.</td> <td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16022" target=3D= "_blank" rel=3D"noopener">CVE-2026-16022</a></td>
</tr>

<td class=3D"vendor-product">Syed Balkhi--NextGEN Gallery</td> <td>Unauthenticated Cross Site Scripting (XSS) in NextGEN Gallery <=3D 4= .2.3 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28141" target=3D= "_blank" rel=3D"noopener">CVE-2026-28141</a></td>
</tr>

<td class=3D"vendor-product">Synology--Synology Assistant</td>
<td>An incorrect default permissions vulnerability in Synology Assistant be= fore 7.0.7-50095 allows local users to read or write arbitrary files and co= nduct denial-of-service during installation.</td>
<td>2026-08-03</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-4793" target=3D"= _blank" rel=3D"noopener">CVE-2026-4793</a></td>
</tr>

<td class=3D"vendor-product">syoyo--tinyobjloader-c</td>
<td>tinyobjloader-c's tinyobj_parse_and_index_mtl_file() (tinyobj_loader_c.=
h) reads each line of a .mtl material file into a fixed 4096-byte stack buf= fer `linebuf` via memcpy(linebuf, p, p_len), guarded only by `assert(p_len = < 4095)`. Because assert() compiles to a no-op under -DNDEBUG (standard = for release builds), a crafted .mtl file containing a line (e.g. a "newmtl"=
material name) longer than 4096 bytes overflows linebuf into the adjacent = stack variable namebuf and beyond, corrupting the stack of any application = that loads attacker-supplied 3D model/material files. The identical vulnera= ble pattern is duplicated in a second function in the same file.</td> <td>2026-08-05</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71266" target=3D= "_blank" rel=3D"noopener">CVE-2026-71266</a></td>
</tr>

<td class=3D"vendor-product">TBTAK BLGEM Software Technologies Research Ins= titute--pardus-image-writer</td>
<td>External control of file name or path vulnerability in T=C3=83=C6=92=C3= =85=E2=80=9CB=C3=83=E2=80=9E=C3=82=C2=B0TAK B=C3=83=E2=80=9E=C3=82=C2=B0LGE=
M Software Technologies Research Institute pardus-image-writer allows Remov= ing Important Client Functionality. This issue affects pardus-image-writer:=
before 1.0.4.</td>
<td>2026-08-04</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18806" target=3D= "_blank" rel=3D"noopener">CVE-2026-18806</a></td>
</tr>

<td class=3D"vendor-product">Telenia Software--TVox</td>
<td>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and p= rior 24.x versions, contain an authentication bypass vulnerability in set_e= nv.php where the redirectToLoginAdminIRequestHaveAccessToken() function der= ives the current page name from PHP_SELF and skips authentication when the = value matches 'login_admin.php'. Attackers can append '/login_admin.php' to=
the path of any target PHP script to cause the authentication check to pas=
s and gain unauthenticated access to all PHP scripts under the manager HTML=
directory.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64827" target=3D= "_blank" rel=3D"noopener">CVE-2026-64827</a></td>
</tr>

<td class=3D"vendor-product">Telenia Software--TVox</td>
<td>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and p= rior 24.x versions, contain an OS command injection vulnerability in action= _audio.php that allows authenticated attackers to execute arbitrary operati=
ng system commands by passing an unsanitized pid parameter into an exec() c= all when the action parameter is set to checkProcess. Attackers can inject = malicious OS commands through the pid request parameter to execute arbitrar=
y commands with the privileges of the apache user.</td>
<td>2026-08-03</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67608" target=3D= "_blank" rel=3D"noopener">CVE-2026-67608</a></td>
</tr>

<td class=3D"vendor-product">Telenia Software--TVox</td>
<td>Telenia Software TVox 26.5.3 and prior 26.x versions, and 24.9.21 and p= rior 24.x versions, contain a privilege escalation vulnerability that allow=
s attackers with access to the apache account to execute arbitrary commands=
as root by exploiting an insecure sudoers configuration in /etc/sudoers.d/= telenia. The configuration grants the apache user NOPASSWD execution of /bi= n/nice, which can be leveraged to invoke arbitrary commands, enabling full = root-level command execution without supplying a password.</td> <td>2026-08-03</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67609" target=3D= "_blank" rel=3D"noopener">CVE-2026-67609</a></td>
</tr>

<td class=3D"vendor-product">Tenable, Inc.--Sensor Proxy</td>
<td>A vulnerability in Tenable Sensor Proxy allows a remote attacker to exe= cute code with elevated privileges by inducing an operator to connect the s= ensor to an attacker-controlled host.</td>
<td>2026-08-03</td>
<td>9.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18667" target=3D= "_blank" rel=3D"noopener">CVE-2026-18667</a></td>
</tr>

<td class=3D"vendor-product">Tenda--CH22</td>
<td>A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerabilit=
y affects the function formCertListInfo of the file /goform/CertListInfo. T= his manipulation of the argument Name causes command injection. The attack = can be initiated remotely. The exploit has been publicly disclosed and may =
be utilized.</td>
<td>2026-08-09</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19346" target=3D= "_blank" rel=3D"noopener">CVE-2026-19346</a></td>
</tr>

<td class=3D"vendor-product">thebradleysanders--IOTSmartHome</td> <td>IOTSmartHome's gui/login.php checkCookie() function builds an authentic= ation query as SELECT * FROM users WHERE ID=3D'<decoded lastLogin cookie= >' after base64-decoding the client-supplied lastLogin cookie via safe_d= ecode(), which performs URL-safe base64 decoding with no sanitization of th=
e decoded value before it is concatenated into the SQL string. An unauthent= icated attacker can set a lastLogin cookie containing a base64-encoded SQL = injection payload (e.g. base64("' OR '1'=3D'1")) to bypass authentication a= nd, via UNION-based injection, extract arbitrary data including user creden= tials.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71231" target=3D= "_blank" rel=3D"noopener">CVE-2026-71231</a></td>
</tr>

<td class=3D"vendor-product">ThemeREX--Abelle</td>
<td>Unauthenticated PHP Object Injection in Abelle <=3D 1.22 versions.</=

<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65573" target=3D= "_blank" rel=3D"noopener">CVE-2026-65573</a></td>
</tr>

<td class=3D"vendor-product">themeruby--Easy Post Submission Frontend Posti= ng, Guest Publishing & Submit Content for WordPress</td>
<td>The Easy Post Submission plugin for WordPress is vulnerable to unauthor= ized modification of data due to a missing capability check on the `create_= post()` function in all versions up to, and including, 2.3.0. This is due t=
o the `rbsm_submit_post` AJAX action being registered for unauthenticated u= sers via `wp_ajax_nopriv_rbsm_submit_post` without any authorization checks=
when a `postId` parameter is supplied. This makes it possible for unauthen= ticated attackers to modify the title, content, excerpt, categories, and ta=
gs of arbitrary posts, as well as change the post status to draft (effectiv= ely unpublishing them) via the 'postId' parameter.</td>

<td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-4431" target=3D"= _blank" rel=3D"noopener">CVE-2026-4431</a></td>
</tr>

<td class=3D"vendor-product">themetechmount--TrueBooker Appointment Booking=
and Scheduler System</td>
<td>The TrueBooker - Appointment Booking and Scheduler System plugin for Wo= rdPress is vulnerable to account takeover via improper password reset valid= ation in all versions up to, and including, 1.2.3. This is due to the plugi=
n not properly validating a user's identity before resetting their password=
. This makes it possible for unauthenticated attackers to reset the passwor=
d of arbitrary user accounts, including administrators, and gain access to = those accounts.</td>
<td>2026-08-07</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14364" target=3D= "_blank" rel=3D"noopener">CVE-2026-14364</a></td>
</tr>

<td class=3D"vendor-product">themetechmount--TrueBooker Appointment Booking=
and Scheduler System</td>
<td>The TrueBooker - Appointment Booking and Scheduler System plugin for Wo= rdPress is vulnerable to authorization bypass in all versions up to, and in= cluding, 1.2.3. This is due to the plugin not properly verifying that a use=
r is authorized to perform an action. This makes it possible for unauthenti= cated attackers to change the password of arbitrary user accounts, includin=
g administrators, which can be leveraged to gain access to those accounts.<=

<td>2026-08-07</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14365" target=3D= "_blank" rel=3D"noopener">CVE-2026-14365</a></td>
</tr>

<td class=3D"vendor-product">theotherphil--imagecli</td>
<td>imagecli's `scale <ratio>` pipeline operation (Scale::apply() in = src/image_ops.rs) computes output width/height as (dimension as f32 * ratio=
) as u32 with no upper-bound validation on the CLI-supplied ratio, which is=
parsed via nom::number::complete::float with no range check. A large ratio=
(e.g. 100000) causes an attempted allocation of hundreds of terabytes, abo= rting the process. Any application embedding imagecli as a library and acce= pting user-controlled pipeline strings is remotely crashable with a single = request.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70377" target=3D= "_blank" rel=3D"noopener">CVE-2026-70377</a></td>
</tr>

<td class=3D"vendor-product">theotherphil--imagecli</td>
<td>imagecli's `carve <ratio>` pipeline operation (Carve::apply() in = src/image_ops.rs) only asserts `ratio <=3D 1.0`, never validating that t=
he ratio is positive. A negative ratio (e.g. -5) causes the computed target=
width to saturate to 0 via Rust's defined float-to-uint cast, which is the=
n passed to imageproc::seam_carving::shrink_width - a function that panics = when given a width below 2, crashing the process. This shares the same miss= ing-input-validation root cause as the sibling `scale` finding in the same = file but is an independently fixable, distinct code path.</td> <td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70378" target=3D= "_blank" rel=3D"noopener">CVE-2026-70378</a></td>
</tr>

<td class=3D"vendor-product">thephpleague--commonmark</td> <td>league/commonmark is a PHP library for parsing and rendering CommonMark=
Markdown. From 0.6.0 until 2.9.0, specially crafted Markdown lines can cau=
se the parser to have quadratic time complexity when converting, because se= veral parsing paths repeatedly rescan growing portions of a line to transla=
te between character positions and byte positions, and the Autolink extensi=
on can also copy and validate the remaining line at every URL-like prefix, = allowing an attacker who can submit Markdown for conversion to consume disp= roportionate CPU time with a comparatively small request. This issue is fix=
ed in 2.9.0.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71488" target=3D= "_blank" rel=3D"noopener">CVE-2026-71488</a></td>
</tr>

<td class=3D"vendor-product">Thermo Fisher--Applied Biosystems 3500/3500xL = Series Data Collection Software</td>
<td>The affected Thermo Fisher Applied Biosystems Genetic Analyzers are=C2= =A0vulnerable because .fsa/.hid output files can be edited. An attacker cou=
ld tamper with these files, altering DNA data and resulting in inaccurate D=
NA test outcomes.</td>
<td>2026-08-05</td>
<td>8.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17583" target=3D= "_blank" rel=3D"noopener">CVE-2026-17583</a></td>
</tr>

<td class=3D"vendor-product">thiagoralves--OpenPLC_v3</td>
<td>OpenPLC Runtime v3's compile_program() function (webserver/openplc.py) = parses `(*FILE:path content*)` directives from uploaded Structured Text (.s=
t) program files and writes the referenced content to `os.path.join('./core=
', file_path)` with no validation that file_path stays within the ./core di= rectory. A crafted .st file containing a directive such as `(*FILE:../../..= /etc/cron.d/x * * * * root <command>*)` writes attacker-controlled co= ntent to an arbitrary filesystem path, enabling remote code execution (e.g.=
via cron or SSH authorized_keys). A path-validation function, validate_fil= e_path(), exists elsewhere in the codebase (webserver/credentials.py) but i=
s never invoked from compile_program(), leaving the sink unprotected. OpenP=
LC additionally ships with hardcoded default credentials (openplc:openplc),=
lowering the practical bar for exploitation.</td>

<td>2026-08-05</td>
<td>9.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71268" target=3D= "_blank" rel=3D"noopener">CVE-2026-71268</a></td>
</tr>

<td class=3D"vendor-product">thomaspoignant--scim-patch</td>
<td>`scim-patch`, a library to perform SCIM patch, prior to version 0.9.1 p= erforms prototype pollution when applying a SCIM PATCH operation whose `val= ue` object contains a key like `"__proto__.someProp"`. After one such patch=
, `Object.prototype.someProp` is set process-wide, affecting every plain ob= ject in the Node process. Any service that calls `scimPatch()` on attacker-= controlled JSON (i.e. any SCIM endpoint accepting `PATCH` from an external = IdP) is exploitable on a stock Node runtime. Version 0.9.1 contains a patch=
. A workaround is available. Calling `Object.freeze(Object.prototype)` (and=
the same on `Array.prototype`, `Function.prototype`) at process startup ne= utralizes this class of bug - assignment to a frozen prototype becomes a si= lent no-op in sloppy mode or a `TypeError` in strict mode. Node's `--frozen= -intrinsics` flag does this for built-ins automatically.</td> <td>2026-08-07</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48170" target=3D= "_blank" rel=3D"noopener">CVE-2026-48170</a></td>
</tr>

<td class=3D"vendor-product">Thrive Themes Coupon--Thrive Architect</td>

<td>Unauthenticated Cross Site Scripting (XSS) in Thrive Architect <=3D = 10.9.3.1 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66694" target=3D= "_blank" rel=3D"noopener">CVE-2026-66694</a></td>
</tr>

<td class=3D"vendor-product">timescale--timescaledb</td>
<td>TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of= -bounds read in the Dictionary compression reverse row iterator (tsl/src/co= mpression/algorithms/dictionary.c). The forward path validates the decoded = index; the reverse path uses an assertion compiled out of release builds, l= eaving the 64-bit Simple8b index unvalidated and the read offset attacker-c= ontrolled. Attackers with DML access to a physical compressed relation can = store a crafted datum and run a reverse-order scan. With a pass-by-value co= lumn type the out-of-bounds Datum is returned to the client as a normal col= umn value, disclosing backend memory including the shared buffer pool, whic=
h SQL access control does not cover.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70634" target=3D= "_blank" rel=3D"noopener">CVE-2026-70634</a></td>
</tr>

<td class=3D"vendor-product">timescale--timescaledb</td>
<td>TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of= -bounds read vulnerability that allows authenticated attackers to cause que= ry-result integrity failures or backend crashes by supplying a crafted Simp= le8b selector-11 value, which is stored in the signed int16 Arrow dictionar= y-index type and bypasses index validation checks in bulk text dictionary d= ecompression. Attackers with direct DML access to a non-frozen physical com= pressed hypertable relation can trigger an out-of-bounds read before the ba=
se of the live offsets array through the VectorAgg single-text hashing stra= tegy, resulting in incorrect aggregation output, backend SIGSEGV, or Postgr= eSQL crash recovery depending on build configuration.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70635" target=3D= "_blank" rel=3D"noopener">CVE-2026-70635</a></td>
</tr>

<td class=3D"vendor-product">TinyAGI--TinyAGI</td>
<td>A weakness has been identified in TinyAGI 0.0.20. This issue affects th=
e function collectFiles of the file packages/core/src/response.ts of the co= mponent Message API Endpoint. This manipulation causes file inclusion. The = attack can be initiated remotely. The exploit has been made available to th=
e public and could be used for attacks. The project was informed of the pro= blem early through an issue report but has not responded yet.</td> <td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19009" target=3D= "_blank" rel=3D"noopener">CVE-2026-19009</a></td>
</tr>

<td class=3D"vendor-product">TinyAGI--TinyAGI</td>
<td>A security vulnerability has been detected in TinyAGI 0.0.20. Impacted =
is the function processMessage of the file packages/main/src/index.ts of th=
e component Message API Endpoint. Such manipulation leads to missing author= ization. The attack can be launched remotely. The exploit has been disclose=
d publicly and may be used. The project was informed of the problem early t= hrough an issue report but has not responded yet.</td>
<td>2026-08-06</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19010" target=3D= "_blank" rel=3D"noopener">CVE-2026-19010</a></td>
</tr>

<td class=3D"vendor-product">treeverse--lakeFS</td>
<td>lakeFS is an open-source tool that transforms object storage into a Git= -like repositories. Prior to version 1.81.1 of the open source edition and = 1.84.0 of the enterprise edition, lakeFS Web UI renders markdown files from=
repository objects without sanitizing the resulting HTML. A user with writ=
e access to any repository branch can commit a `.md` object containing arbi= trary HTML/JavaScript. Any other user who opens that object, or who navigat=
es to a repository or directory containing a malicious `README.md`, execute=
s the attacker-supplied script in their own authenticated session. lakeFS f= ixes the issue in v1.81.1 and lakeFS Enterprise fixes the issue in in v1.84= .0. Enterprise customers using older versions can temporarily disable Markd= own rendering by adding YAML to their config. No workaround exists for OSS = release. Users are advised to upgrade to the latest version for both lakeFS=
and lakeFS-Enterprise.</td>
<td>2026-08-07</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48026" target=3D= "_blank" rel=3D"noopener">CVE-2026-48026</a></td>
</tr>

<td class=3D"vendor-product">Trilby Media--grav-plugin-scheduler-webhook</t=

<td>Grav CMS's scheduler-webhook plugin contains an authentication bypass i=
n the webhook token check. When the webhook feature is enabled but no webho= okToken is configured, a compound conditional short-circuits and skips toke=
n validation, so an unauthenticated remote attacker who can reach POST /sch= eduler/webhook can trigger the operator's already-configured scheduled jobs=
by sending a single request. The primitive is triggering-existing-jobs, no=
t attacker-chosen command execution: the attacker controls when the jobs ru=
n and which one runs (via ?job=3D), but does not control what the jobs do. = Code execution follows only when the operator has configured a job that she= lls out, and even then the attacker controls timing rather than payload. No=
t a default-install issue: reaching the endpoint requires the separate sche= duler-webhook GPM plugin to be installed, scheduler.modern.webhook.enabled =
to be true (default false), and no webhookToken to be configured; a stock G= rav or Grav-Admin install exposes nothing here.</td>
<td>2026-08-07</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11430" target=3D= "_blank" rel=3D"noopener">CVE-2026-11430</a></td>
</tr>

<td class=3D"vendor-product">Trippo--ResponsiveFilemanager</td>
<td>A security flaw has been discovered in Trippo ResponsiveFilemanager up =
to 9.14.0. The impacted element is an unknown function of the file filemana= ger/dialog.php. The manipulation results in unrestricted upload. The attack=
may be performed from remote. The exploit has been released to the public = and may be used for attacks. The vendor was contacted early about this disc= losure but did not respond in any way. This vulnerability only affects prod= ucts that are no longer supported by the maintainer.</td>
<td>2026-08-04</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18788" target=3D= "_blank" rel=3D"noopener">CVE-2026-18788</a></td>
</tr>

<td class=3D"vendor-product">TUBITAK BILGEM Software Technologies Research = Institute--eta-otp-lock</td>
<td>Deserialization of untrusted data vulnerability in TUBITAK BILGEM Softw= are Technologies Research Institute eta-otp-lock allows Object Injection. T= his issue affects eta-otp-lock: before 1.0.4.</td>
<td>2026-08-03</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18642" target=3D= "_blank" rel=3D"noopener">CVE-2026-18642</a></td>
</tr>

<td class=3D"vendor-product">tychesoftwares--Order Delivery Date for WooCom= merce</td>
<td>Shop manager Privilege Escalation in Order Delivery Date for WooCommerc=
e <=3D 4.6.0 versions.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65559" target=3D= "_blank" rel=3D"noopener">CVE-2026-65559</a></td>
</tr>

<td class=3D"vendor-product">typemill--typemill</td>
<td>Typemill's login endpoint (POST /tm/login, ControllerWebAuth::login()) = performs no rate-limiting, failed-attempt counting, or account lockout when=
captcha is disabled, which is the default configuration. An unauthenticate=
d attacker can send unlimited password-guessing requests against any accoun=
t, including administrators, with no throttling. The only attempt-counting/= lockout logic present in the same file protects an optional secondary email= -authcode step and does not apply to the primary password check.</td> <td>2026-08-05</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71213" target=3D= "_blank" rel=3D"noopener">CVE-2026-71213</a></td>
</tr>

<td class=3D"vendor-product">Uasoft--Badaso</td>
<td>A vulnerability has been found in Uasoft Badaso 3.0.0-alpha. This vulne= rability affects the function ApiRequest::class of the file src/Routes/api.= php of the component File API. The manipulation leads to permission issues.=
It is possible to initiate the attack remotely. The exploit has been discl= osed to the public and may be used. The project was informed of the problem=
early through an issue report but has not responded yet.</td>

<td>2026-08-09</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19376" target=3D= "_blank" rel=3D"noopener">CVE-2026-19376</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--T810= 0/T9100/T8200/T8300</td>
<td>In nr modem, there is a possible improper input validation. This could = lead to remote denial of service with System execution privileges needed.</=

<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21548" target=3D= "_blank" rel=3D"noopener">CVE-2026-21548</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--T810= 0/T9100/T8200/T8300</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21549" target=3D= "_blank" rel=3D"noopener">CVE-2026-21549</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--T810= 0/T9100/T8200/T8300</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21550" target=3D= "_blank" rel=3D"noopener">CVE-2026-21550</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--T810= 0/T9100/T8200/T8300</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21551" target=3D= "_blank" rel=3D"noopener">CVE-2026-21551</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--T810= 0/T9100/T8200/T8300</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21552" target=3D= "_blank" rel=3D"noopener">CVE-2026-21552</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--T810= 0/T9100/T8200/T8300</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21553" target=3D= "_blank" rel=3D"noopener">CVE-2026-21553</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--UDX7= 10</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21554" target=3D= "_blank" rel=3D"noopener">CVE-2026-21554</a></td>
</tr>

<td class=3D"vendor-product">Unisoc (Shanghai) Technologies Co., Ltd.--UDX7= 10</td>
<td>In modem, there is a possible improper input validation. This could lea=
d to remote denial of service with no additional execution privileges neede= d</td>
<td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21555" target=3D= "_blank" rel=3D"noopener">CVE-2026-21555</a></td>
</tr>

<td class=3D"vendor-product">usememos--memos</td>
<td>Memos' webhook URL validation, isReservedIP() (internal/webhook/validat= e.go), checks a candidate IP against a reservedCIDRs list that omits 0.0.0.= 0/8 and never calls ip.IsUnspecified() - unlike the correctly implemented s= ibling function isInternalIP() in internal/httpgetter/html_meta.go, which d= oes. Because Linux redirects connections to 0.0.0.0 to loopback (127.0.0.1)=
, an attacker registering a webhook URL of http://0.0.0.0:PORT/ bypasses th=
e reserved-IP check and causes the Memos server to make outbound HTTP reque= sts to its own loopback interface, exposing internal-only services.</td> <td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71271" target=3D= "_blank" rel=3D"noopener">CVE-2026-71271</a></td>
</tr>

<td class=3D"vendor-product">usememos--memos</td>
<td>Memos' webhook dispatch function safeDialContext() (internal/webhook/we= bhook.go) resolves the target hostname via net.DefaultResolver.LookupHost()=
and validates the resulting IPs against reserved ranges, but then dials ne= t.JoinHostPort(host, port) using the original hostname rather than the alre= ady-validated IP address. Because net.Dialer.DialContext() performs its own=
independent DNS resolution, an attacker controlling DNS for the webhook's = hostname (e.g. via a short TTL) can return a public, allowed IP during vali= dation and a different, internal IP at dial time - a classic time-of-check/= time-of-use DNS-rebinding bypass of the SSRF protection.</td> <td>2026-08-05</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71272" target=3D= "_blank" rel=3D"noopener">CVE-2026-71272</a></td>
</tr>

<td class=3D"vendor-product">UTT--HiPER 1200GW</td>
<td>A security flaw has been discovered in UTT HiPER 1200GW up to v2.5.3-17= 0306. This affects the function strcpy of the file /goform/ConfigAdvideo. T=
he manipulation of the argument timestart results in stack-based buffer ove= rflow. The attack can be launched remotely. The exploit has been released t=
o the public and may be used for attacks. The vendor was contacted early ab= out this disclosure but did not respond in any way.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18898" target=3D= "_blank" rel=3D"noopener">CVE-2026-18898</a></td>
</tr>

<td class=3D"vendor-product">UTT--HiPER 1200GW</td>
<td>A security vulnerability has been detected in UTT HiPER 1200GW up to 2.= 5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlo= balConfig. Such manipulation of the argument EncryptionMode leads to stack-= based buffer overflow. The attack can be executed remotely. The exploit has=
been disclosed publicly and may be used. The vendor was contacted early ab= out this disclosure but did not respond in any way.</td>
<td>2026-08-09</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19341" target=3D= "_blank" rel=3D"noopener">CVE-2026-19341</a></td>
</tr>

<td class=3D"vendor-product">UTT--HiPER 1250GW</td>
<td>A vulnerability was found in UTT HiPER 1250GW up to 3.2.7-210907-180535=
. Impacted is the function strcpy of the file /goform/APSecurity_5g. Perfor= ming a manipulation of the argument cipher results in stack-based buffer ov= erflow. It is possible to initiate the attack remotely. The exploit has bee=
n made public and could be used. The vendor was contacted early about this = disclosure but did not respond in any way.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18895" target=3D= "_blank" rel=3D"noopener">CVE-2026-18895</a></td>
</tr>

<td class=3D"vendor-product">UTT--HiPER 1250GW</td>
<td>A vulnerability was identified in UTT HiPER 1250GW up to v3.2.7-210907-= 180535. The impacted element is the function strcpy of the file /goform/get= OneApConfTempEntry. The manipulation of the argument tempName leads to stac= k-based buffer overflow. The attack can be initiated remotely. The exploit =
is publicly available and might be used. The vendor was contacted early abo=
ut this disclosure but did not respond in any way.</td>
<td>2026-08-05</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18897" target=3D= "_blank" rel=3D"noopener">CVE-2026-18897</a></td>
</tr>

<td class=3D"vendor-product">V-Secure--Jingyun Antivirus</td>
<td>A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. = The affected element is an unknown function in the library ZyArk.sys of the=
component Kernel Driver. The manipulation leads to improper access control=
s. The attack needs to be performed locally. The exploit has been disclosed=
to the public and may be used. The vendor was contacted early about this d= isclosure but did not respond in any way.</td>
<td>2026-08-07</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19195" target=3D= "_blank" rel=3D"noopener">CVE-2026-19195</a></td>
</tr>

<td class=3D"vendor-product">vibesurf-ai--VibeSurf</td>
<td>A vulnerability has been found in vibesurf-ai VibeSurf up to cd6e519d50= 7cdd4d63061300bf60fb176e1f57e0. Impacted is an unknown function of the file=
/code of the component Python Validation Handler. The manipulation leads t=
o code injection. Remote exploitation of the attack is possible. This produ=
ct follows a rolling release approach for continuous delivery, so version d= etails for affected or updated releases are not provided. The vendor was co= ntacted early about this disclosure but did not respond in any way.</td> <td>2026-08-04</td>
<td>7.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18770" target=3D= "_blank" rel=3D"noopener">CVE-2026-18770</a></td>
</tr>

<td class=3D"vendor-product">vimeodev--Vimeo</td>
<td>Subscriber Sensitive Data Exposure in Vimeo <=3D 1.2.2 versions.</td=

<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65543" target=3D= "_blank" rel=3D"noopener">CVE-2026-65543</a></td>
</tr>

<td class=3D"vendor-product">vovchic17--aiosend</td>
<td>aiosend is a synchronous and asynchronous Crypto Pay API client. Pror t=
o version 3.0.7, `WebhookHandler.feed_update()` deserializes the entire req= uest body before verifying the HMAC signature. This allows an unauthenticat=
ed attacker to force expensive parsing of arbitrary JSON payloads that will=
ultimately be rejected, leading to unnecessary CPU and memory consumption.=
Version 3.0.7 fixes the issue. Some workarounds are available. Restrict re= quest body size at the reverse proxy or web framework, rate-limit webhook e= ndpoints, and/or reject oversized requests before JSON parsing.</td> <td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70646" target=3D= "_blank" rel=3D"noopener">CVE-2026-70646</a></td>
</tr>

<td class=3D"vendor-product">Wavlink--WL-NU516U1</td>
<td>A vulnerability has been found in Wavlink WL-NU516U1 708c073-mt7628. Th=
is affects the function fgets of the file nas.cgi. The manipulation of the = argument CONTENT_LENGTH leads to stack-based buffer overflow. Remote exploi= tation of the attack is possible. You should upgrade the affected component=
. The vendor was contacted early, responded in a very professional manner a=
nd quickly released a fixed version of the affected product.</td> <td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18588" target=3D= "_blank" rel=3D"noopener">CVE-2026-18588</a></td>
</tr>

<td class=3D"vendor-product">Wavlink--WL-NU516U1</td>
<td>A vulnerability was found in Wavlink WL-NU516U1 708c073-mt7628. This im= pacts the function change_password of the file nas.cgi. The manipulation of=
the argument User1Passwd results in stack-based buffer overflow. The attac=
k can be executed remotely. The exploit has been made public and could be u= sed. The affected component should be upgraded. The vendor was contacted ea= rly, responded in a very professional manner and quickly released a fixed v= ersion of the affected product.</td>
<td>2026-08-03</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18589" target=3D= "_blank" rel=3D"noopener">CVE-2026-18589</a></td>
</tr>

<td class=3D"vendor-product">Wavlink--WL-NU516U1</td>
<td>A flaw has been found in Wavlink WL-NU516U1 708c073-mt7628. The impacte=
d element is an unknown function of the component Config Import. Executing =
a manipulation of the argument Password can lead to os command injection. T=
he attack may be launched remotely. This attack is characterized by high co= mplexity. The exploitability is regarded as difficult. The exploit has been=
published and may be used. It is advisable to upgrade the affected compone= nt. The vendor was contacted early, responded in a very professional manner=
and quickly released a fixed version of the affected product.</td> <td>2026-08-03</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18587" target=3D= "_blank" rel=3D"noopener">CVE-2026-18587</a></td>
</tr>

<td class=3D"vendor-product">Wavlink--WN572</td>
<td>A security vulnerability has been detected in Wavlink WN572, WN570H, WN= 573, WN529, WN530, WN531, WN535, etc. WN529, WN530, WN531, WN535, WN536, WN= 551, WN557 and NU516 up to 20260609. Affected by this issue is the function=
strcpy of the file upload.cgi of the component lighttpd. The manipulation =
of the argument HTTP_COOKIE leads to stack-based buffer overflow. It is pos= sible to initiate the attack remotely. The exploit has been disclosed publi= cly and may be used.</td>
<td>2026-08-03</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18607" target=3D= "_blank" rel=3D"noopener">CVE-2026-18607</a></td>
</tr>

<td class=3D"vendor-product">wbolt.com--Spider Analyser- WordPress</td>

<td>Unauthenticated Remote Code Execution (RCE) in Spider Analyser; WordPre= ss<=3D 2.1.3 versions.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65553" target=3D= "_blank" rel=3D"noopener">CVE-2026-65553</a></td>
</tr>

<td class=3D"vendor-product">Weaver Network Co., Ltd.--E-cology 9.0</td>

<td>Weaver (Fanwei) E-cology 9.0 versions prior to 10.52 contain a file upl= oad vulnerability that allows a remote, unauthenticated attacker to upload = arbitrary files, including JSP webshells, by submitting a multipart/form-da=
ta POST request to /workrelate/plan/util/uploaderOperate.jsp with arbitrary=
secId and plandetailid field values. Successful exploitation results in re= mote code execution under the privileges of the application server process.= =C2=A0Exploitation evidence was first observed by the Shadowserver Foundati=
on on 2023-10-14 (UTC).</td>
<td>2026-08-07</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2022-4995" target=3D"= _blank" rel=3D"noopener">CVE-2022-4995</a></td>
</tr>

<td class=3D"vendor-product">WebAppick--CTX Feed</td>
<td>Shop manager Remote Code Execution (RCE) in CTX Feed <=3D 6.6.42 ver= sions.</td>
<td>2026-08-06</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66709" target=3D= "_blank" rel=3D"noopener">CVE-2026-66709</a></td>
</tr>

<td class=3D"vendor-product">WebPros--Plesk</td>
<td>An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linu=
x and Windows allows an authenticated user to read arbitrary data from the = panel database.</td>
<td>2026-08-07</td>
<td>7.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64636" target=3D= "_blank" rel=3D"noopener">CVE-2026-64636</a></td>
</tr>

<td class=3D"vendor-product">WebsiteBaker Org e.V.--WebsiteBaker CMS</td> <td>WebsiteBaker CMS before 2.13.10 contains a code injection vulnerability=
in the Droplets editor that allows authenticated administrators to inject = arbitrary PHP code by submitting malicious content through the droplet Code=
field, which is written verbatim to a publicly accessible PHP file with no=
content sanitization. Attackers can save a PHP webshell via the save_dropl=
et handler to a predictable path inside the modules directory, enabling una= uthenticated users to achieve remote code execution by making direct HTTP r= equests to the written file.</td>
<td>2026-08-03</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61523" target=3D= "_blank" rel=3D"noopener">CVE-2026-61523</a></td>
</tr>

<td class=3D"vendor-product">WebsiteBaker Org e.V.--WebsiteBaker CMS</td> <td>WebsiteBaker CMS before 2.13.10 contains an unrestricted file upload vu= lnerability in the module installation feature that allows authenticated ad= ministrators to achieve remote code execution by uploading a crafted ZIP ar= chive containing a PHP webshell alongside a valid info.php metadata file. A= ttackers can place the malicious archive through the module installation in= terface, causing the application to extract the webshell into a web-accessi= ble modules/ subdirectory where it becomes immediately executable by any un= authenticated user via direct HTTP request.</td>
<td>2026-08-03</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61524" target=3D= "_blank" rel=3D"noopener">CVE-2026-61524</a></td>
</tr>

<td class=3D"vendor-product">wisemattic--wiseCampaign WooCommerce Conversio=
ns Made Easy</td>
<td>The wiseCampaign - WooCommerce Conversions Made Easy plugin for WordPre=
ss is vulnerable to unauthorized modification and disclosure of data due to=
every one of its REST API endpoints being registered with `permission_call= back =3D> '__return_true'` in all versions up to, and including, 1.1.16.=
This makes it possible for unauthenticated attackers to read and modify th=
e plugin's banner, stockbar, and core settings - including saving/updating = banner records, toggling stockbar/feature flags, changing the active banner=
, and uploading background-image files via wp_handle_upload() - without any=
nonce or capability check.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7529" target=3D"= _blank" rel=3D"noopener">CVE-2026-7529</a></td>
</tr>

<td class=3D"vendor-product">wp-downloadmanager--wp-downloadmanager</td>

<td>The wp-downloadmanager WordPress plugin, in version 1.68.11 (also affec= ting the 6.9.4 release line), allows an admin-privileged user (current_user= _can('manage_downloads')) to upload arbitrary files via download-add.php wi=
th no extension or MIME-type validation of any kind - no wp_check_filetype_= and_ext(), no validate_file(), and no extension blocklist exist anywhere in=
the upload handler. The destination path is additionally built by concaten= ating the raw, unsanitized $_POST['file_upload_to'] value with no traversal=
check (no ../ filtering, no basename()/realpath() applied). Since the base=
download path is required to live under WP_CONTENT_DIR (a web-accessible l= ocation), an uploaded PHP file lands in a web-servable path and can be dire= ctly executed, resulting in remote code execution. The plugin's own later c= hangelog confirms these protections were absent in this version: v1.69 adde=
d file-type validation via wp_check_filetype_and_ext(), and v1.69.1 added d= irectory-traversal protection - neither existed in 1.68.11.</td> <td>2026-08-05</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18933" target=3D= "_blank" rel=3D"noopener">CVE-2026-18933</a></td>
</tr>

<td class=3D"vendor-product">wp.insider--Simple Membership</td> <td>Unauthenticated Broken Access Control in Simple Membership <=3D 4.7.=
8 versions.</td>
<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66712" target=3D= "_blank" rel=3D"noopener">CVE-2026-66712</a></td>
</tr>

<td class=3D"vendor-product">WPC Name Your Price for WooCommerce--WPC Name = Your Price for WooCommerce</td>
<td>The WPC Name Your Price for WooCommerce WordPress plugin before 2.2.5 d= oes not enforce its server-side price allowlist for products configured in = "Select" price mode, allowing an unauthenticated visitor to add such a prod= uct to the cart at an arbitrary value below the merchant-defined allowed pr= ices and commit a real order at that price (revenue loss / underpriced orde= rs). This is a distinct, unfixed vector from CVE-2025-12115, whose 2.2.0 fi=
x only addressed applying a custom price to products where Name Your Price =
is disabled and left the Select-mode allowlist unenforced through 2.2.4.</t=

<td>2026-08-06</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16620" target=3D= "_blank" rel=3D"noopener">CVE-2026-16620</a></td>
</tr>

<td class=3D"vendor-product">wpDataTables--wpDataTables</td> <td>Unauthenticated Cross Site Scripting (XSS) in wpDataTables <=3D 7.5.=
1 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65509" target=3D= "_blank" rel=3D"noopener">CVE-2026-65509</a></td>
</tr>

<td class=3D"vendor-product">WPDeveloper--EmbedPress</td>
<td>Unauthenticated Cross Site Scripting (XSS) in EmbedPress <=3D 4.5.6 = versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61961" target=3D= "_blank" rel=3D"noopener">CVE-2026-61961</a></td>
</tr>

<td class=3D"vendor-product">wpdreams--Ajax Search Lite</td> <td>Unauthenticated PHP Object Injection in Ajax Search Lite <=3D 4.14.4=
versions.</td>
<td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28139" target=3D= "_blank" rel=3D"noopener">CVE-2026-28139</a></td>
</tr>

<td class=3D"vendor-product">wpjobportal--WP Job Portal</td>
<td>Subscriber SQL Injection in WP Job Portal <=3D 2.5.6 versions.</td> <td>2026-08-06</td>
<td>8.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65569" target=3D= "_blank" rel=3D"noopener">CVE-2026-65569</a></td>
</tr>

<td class=3D"vendor-product">wpmanageninja--FluentSMTP WP SMTP Plugin with = Amazon SES, SendGrid, Mailgun, Postmark, Cloudflare, toSend, Gmail and Any = SMTP</td>
<td>The FluentSMTP - WP SMTP Plugin with Amazon SES, SendGrid, MailGun, Pos= tmark, Google and Any SMTP Provider plugin for WordPress is vulnerable to S= tored Cross-Site Scripting via Recipient Display Name (to.name) in Email Lo=
gs in all versions up to, and including, 2.2.95 due to insufficient input s= anitization and output escaping. This makes it possible for unauthenticated=
attackers to inject arbitrary web scripts in pages that will execute whene= ver a user accesses an injected page. The payload is delivered via an attac= ker-controlled recipient display name (to.name) in a wp_mail() call and doe=
s not fire in the log list view - only in the detail view when an administr= ator uses the Prev/Next navigation controls, as that path bypasses the esca= peHtml pipeline used by the list view.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16636" target=3D= "_blank" rel=3D"noopener">CVE-2026-16636</a></td>
</tr>

<td class=3D"vendor-product">WPManageNinja--Ninja Tables</td> <td>Unauthenticated Cross Site Scripting (XSS) in Ninja Tables <=3D 5.2.=
9 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61964" target=3D= "_blank" rel=3D"noopener">CVE-2026-61964</a></td>
</tr>

<td class=3D"vendor-product">WPMU DEV--Forminator</td>
<td>Contributor Privilege Escalation in Forminator <=3D 1.56.0 versions.= </td>
<td>2026-08-06</td>
<td>8.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28111" target=3D= "_blank" rel=3D"noopener">CVE-2026-28111</a></td>
</tr>

<td class=3D"vendor-product">WPMU DEV--Forminator</td>
<td>Unauthenticated Cross Site Scripting (XSS) in Forminator <=3D 1.56.0=
versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28143" target=3D= "_blank" rel=3D"noopener">CVE-2026-28143</a></td>
</tr>

<td class=3D"vendor-product">wpmudev--Forminator Forms Contact Form, Paymen=
t Form & Custom Form Builder</td>
<td>The Forminator Forms - Contact Form, Payment Form & Custom Form Bui= lder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via = Forged Upload Record via Select Field in all versions up to, and including,=
1.56.1 due to insufficient input sanitization and output escaping. This ma= kes it possible for unauthenticated attackers to inject arbitrary web scrip=
ts in pages that will execute whenever a user accesses an injected page. Th=
e exploit is possible because Forminator_Core::sanitize_array() skips all f= iltering for keys prefixed with 'select-', and set_field_data() treats a su= bmitted 'return' member as a trusted internal flag - allowing an unauthenti= cated attacker to forge and persist a complete upload field record with an = arbitrary file_url value without any sanitization or validation.</td> <td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18325" target=3D= "_blank" rel=3D"noopener">CVE-2026-18325</a></td>
</tr>

<td class=3D"vendor-product">wpmudev--WPMU DEV Dashboard</td>
<td>The WPMU DEV Dashboard plugin for WordPress is vulnerable to Authentica= tion Bypass in all versions up to, and including, 5.0.0. On sites not yet c= onnected to the WPMU DEV Hub - the default state after installation - the s= ite API key that keys the WDP-AUTH request signature is empty, making the s= ignature verified by validate_hash() trivially forgeable; version 5.0.0 add= itionally removed the replay check in validate_nonce(), and the remote hand= ler is bound to the public init hook with no capability check. This makes i=
t possible for unauthenticated attackers to invoke privileged Hub actions -=
including installing and activating a plugin from an attacker-supplied URL=
(resulting in remote code execution), deleting plugins and themes, upgradi=
ng WordPress core, or logging in as an administrator via SSO. Sites connect=
ed to a WPMU DEV account, which have a non-empty 64-character API key, are = not affected.</td>
<td>2026-08-06</td>
<td>8.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15459" target=3D= "_blank" rel=3D"noopener">CVE-2026-15459</a></td>
</tr>

<td class=3D"vendor-product">wpwax--FormGent Next-Gen AI Form Builder for W= ordPress with Multi-Step, Quizzes, Payments & More</td>
<td>The FormGent - Next-Gen AI Form Builder for WordPress with Multi-Step, = Quizzes, Payments & More plugin for WordPress is vulnerable to Stored C= ross-Site Scripting via form submission fields in all versions up to, and i= ncluding, 1.9.2 due to insufficient input sanitization and output escaping.=
This makes it possible for unauthenticated attackers to inject arbitrary w=
eb scripts in pages that will execute whenever a user accesses an injected = page.</td>
<td>2026-08-06</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15028" target=3D= "_blank" rel=3D"noopener">CVE-2025-15028</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>In multi-tenant deployments, the Publisher REST APIs fail to enforce te= nant isolation correctly. This allows a user in one tenant, possessing suff= icient privileges to invoke these APIs, to perform operations that impact o= ther tenants. The vulnerability allows a privileged user to perform publish=
er operations such as exposing or modifying API Metadata in another tenant = environment. This impact is only realized in multi-tenant deployments.</td> <td>2026-08-06</td>
<td>9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-14561" target=3D= "_blank" rel=3D"noopener">CVE-2025-14561</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>Tokens issued to a low-privileged user are not sufficiently restricted,=
allowing them to be used to access product-level Admin REST APIs. Exploita= tion of this vulnerability allows a low-privileged user to invoke the Admin=
REST APIs of WSO2 products, potentially leading to full administrative acc= ount takeover. This requires the attacker to already possess a low-privileg=
ed user account and be able to obtain a valid token for it.</td> <td>2026-08-06</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-1728" target=3D"= _blank" rel=3D"noopener">CVE-2026-1728</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>The System REST API accepts user-supplied file uploads without enforcin=
g sufficient validation on the file type or destination, allowing files to =
be written to arbitrary server-accessible locations. Exploitation requires = authenticated administrative access with publisher privileges. Successful e= xploitation permits an authenticated publisher to upload files to server-ac= cessible locations. Depending on the deployment environment and how uploade=
d files are handled, this could lead to the execution of uploaded content, = potentially resulting in remote code execution.</td>
<td>2026-08-06</td>
<td>9.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-3418" target=3D"= _blank" rel=3D"noopener">CVE-2026-3418</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>The XML and schema validation functionalities within the SchemaValidato=
r Mediator process XML input as part of validation flows. Under certain con= ditions, the XML parser allows the resolution of external entities when han= dling user-supplied XML content during validation operations. This behavior=
can occur when an attacker supplies crafted XML payloads to the relevant m= ediator flows with sufficient privileges. Successful exploitation may allow=
a highly privileged actor to read files accessible within the server hosti=
ng the affected product. Additionally, it may be possible to trigger outbou=
nd requests to unintended internal or external locations, depending on the = server environment and network configuration. Specially crafted XML payload=
s can also lead to excessive resource consumption during parsing, impacting=
the availability of the product.</td>
<td>2026-08-06</td>
<td>8.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-3415" target=3D"= _blank" rel=3D"noopener">CVE-2026-3415</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server</td>
<td>The Conditional Authentication (Adaptive Authentication) script does no=
t correctly enforce the completion of all required authentication steps whe=
n a specific multi-step pattern involving certain authenticators is configu= red. This allows an attacker to bypass intermediate authentication challeng=
es by exploiting how the script handles callbacks and re-execution of authe= ntication steps. Successful exploitation allows a malicious actor to gain u= nauthorized access to a targeted user account. This vulnerability can only =
be exploited when all of the following conditions are met: the application = login flow contains a specific secondary authenticator, the Conditional Aut= hentication script is configured with particular event callbacks and re-exe= cutes an authentication step, the targeted user has one of the impacted aut= henticators enrolled, and the attacker successfully completes any preceding=
authentication steps.</td>
<td>2026-08-06</td>
<td>9.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15039" target=3D= "_blank" rel=3D"noopener">CVE-2025-15039</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Universal Gateway</td>
<td>The JWT authentication mechanism accepts tokens signed with algorithms = other than those explicitly configured or supported. This allows an attacke=
r to craft a JWT with an unsupported algorithm, which is then incorrectly v= alidated, leading to unauthorized access. Successful exploitation of this v= ulnerability may result in unauthorized access to the system, including the=
potential compromise of administrative accounts and full account takeover.=
The CVSS score is adjusted to 9.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:= H/A:H) in single-tenant deployments, reflecting that the impact is containe=
d within a single security authority boundary.</td>
<td>2026-08-06</td>
<td>10</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5430" target=3D"= _blank" rel=3D"noopener">CVE-2026-5430</a></td>
</tr>

<td class=3D"vendor-product">wupsales--AI Copilot Content Generator</td>

<td>The AI Copilot - Content Generator plugin for WordPress is vulnerable t=
o authorization bypass in all versions up to, and including, 1.5.6. This is=
due to the plugin not properly verifying that a user is authorized to perf= orm an action. This makes it possible for unauthenticated attackers to crea=
te a new administrator-level user account and achieve full site takeover by=
saving and executing a malicious workflow containing a wp_create_user acti=
on node specifying role=3Dadministrator. This vulnerability is exploitable =
by unauthenticated attackers on any site where the [aiwu-form] shortcode or=
public chatbot is rendered on a frontend page, as the waic-nonce value is = emitted into publicly accessible JavaScript (WAIC_DATA.waicNonce) on those = pages, rendering the nonce check a non-functional authorization barrier.</t=

<td>2026-08-08</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14526" target=3D= "_blank" rel=3D"noopener">CVE-2026-14526</a></td>
</tr>

<td class=3D"vendor-product">wupsales--AI Copilot Content Generator</td>

<td>The AI Chatbot & Workflow Automation by AIWU plugin for WordPress i=
s vulnerable to Sensitive Information Exposure in all versions up to, and i= ncluding, 1.4.6. This is due to the `getCurrentTaskResults()` method in `mo= dules/workspace/controller.php` being accessible without authentication or = authorization checks. The method is not included in the workspace controlle= r's `getNoncedMethods()` array, the base `getPermissions()` returns an empt=
y array, and all AJAX actions are registered with `wp_ajax_nopriv_` hooks (= `classes/frame.php:282`). When tasks are created via features like the Bulk=
Post Generator, the task parameters - including the OpenAI API key in plai= ntext, AI prompts, keywords, and full AI model configuration - are stored i=
n the database and returned in the JSON response. This makes it possible fo=
r unauthenticated attackers to enumerate sequential task IDs and retrieve s= ensitive configuration data including API keys.</td>
<td>2026-08-05</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6639" target=3D"= _blank" rel=3D"noopener">CVE-2026-6639</a></td>
</tr>

<td class=3D"vendor-product">XplodedThemes--WPIDE File Manager & Code E= ditor</td>
<td>Unauthenticated Cross Site Scripting (XSS) in WPIDE - File Manager &amp=
; Code Editor <=3D 3.5.7 versions.</td>
<td>2026-08-06</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66440" target=3D= "_blank" rel=3D"noopener">CVE-2026-66440</a></td>
</tr>

<td class=3D"vendor-product">Zbtlink--CPE2801 Firmware</td>
<td>Zbtlink router firmware ships an embedded remote-control implant, ENDLE= SSDOORS, present in every published build across the product line. It is th=
e open-source ycsunjane/rctl tool built in as an OpenWrt package (librctl.s= o), started at boot and run as root under the process name kworker to blend=
in with the kernel's [kworker/*] threads. It opens no listening port; it p= hones home over cleartext TCP to a hardcoded command-and-control server (co= mmand channel 7000, interactive-shell callback 7001) with no authentication=
and no transport encryption, re-attempting contact roughly every 35 second=
s. Its command handler passes any received string to popen() as uid=3D0, an=
d a reserved rctlbash command returns an interactive root shell. Because th=
e channel is unauthenticated and cleartext, control is not limited to whoev=
er planted it: any party that answers at the C2 address, occupies the netwo=
rk path (DNS or route hijack), or acquires the hardcoded fallback domain ob= tains unauthenticated remote code execution as root.</td>
<td>2026-08-05</td>
<td>9.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66747" target=3D= "_blank" rel=3D"noopener">CVE-2026-66747</a></td>
</tr>

<td class=3D"vendor-product">ZenML--ZenML</td>
<td>ZenML 0.94.6 contains a remote code execution vulnerability in the Clou= dpickleMaterializer component that allows attackers with write access to a = shared artifact store to execute arbitrary code by planting a malicious pic= kle file. Attackers can replace a stored artifact.pkl file with a crafted c= loudpickle payload containing a malicious __reduce__ method, which executes=
arbitrary system commands when any user or pipeline materializes the artif= act through the unsanitized cloudpickle.load() call in cloudpickle_material= izer.py.</td>
<td>2026-08-07</td>
<td>8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68772" target=3D= "_blank" rel=3D"noopener">CVE-2026-68772</a></td>
</tr>

<td class=3D"vendor-product">zephyrproject--zephyr</td>
<td>The hawkBit device management client in subsys/mgmt/hawkbit accumulates=
the body of an HTTP response from the update server into a heap buffer in = response_json_cb() (subsys/mgmt/hawkbit/hawkbit.c). The buffer is sized to = hold the received body bytes but reserves no space for a terminating NUL. W= hen the full response has arrived, the code writes response_data[downloaded= _size] =3D ' ' - and whenever the accumulated body length equals the alloca= tion, that terminator lands one byte past the end of the heap object (a hea= p-based out-of-bounds write, CWE-122 / CWE-787). The body length and fragme= ntation are taken directly from the parsed HTTP response (rsp->body_frag= _start / rsp->body_frag_len) and are fully controlled by the remote hawk= Bit server, which chooses its own response length. The precise trigger depe= nds on how the buffer grows, and both forms are remotely reachable. Since v= 4.0.0 the reallocation is sized to exactly downloaded_size + body_len, so a=
ny response body larger than the 1100-byte initial buffer makes the out-of-= bounds write deterministic; such response sizes are normal for hawkBit depl= oyment metadata. Before v4.0.0 the buffer grew by doubling and the growth c= heck ((downloaded_size + body_len) > response_buffer_size) is false at e= quality, so a response body whose length is exactly the current allocation =
- 1100 bytes with the default initial buffer - skips the reallocation entir= ely and writes the terminator at response_data[1100] of an 1100-byte object=
. The HTTP length-mismatch check does not catch this, because the declared = and received lengths genuinely agree. Either form is reachable by a malicio= us, compromised, or man-in-the-middle update server (TLS is optional and, w= hen enabled, does not protect against a hostile server), with no authentica= tion of response content and no client-side length cap protecting the write=
. The out-of-bounds write is a fixed single NUL byte immediately following = the allocation, corrupting adjacent allocator metadata or the next allocati= on. The practical impact is heap corruption leading to denial of service (f= ault on a subsequent allocation or free), with the bounded, allocator-depen= dent possibility of further corruption. The fix sizes the buffer to the bod=
y length plus one and copies with memcpy, ensuring the terminator always la= nds within the allocation.</td>
<td>2026-08-03</td>
<td>8.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10849" target=3D= "_blank" rel=3D"noopener">CVE-2026-10849</a></td>
</tr>

<td class=3D"vendor-product">zephyrproject--zephyr</td>
<td>The Bluetooth host ATT layer (subsys/bluetooth/host/att.c) associates e= ach in-flight ATT TX buffer with its owning channel via the static tx_meta_= data_storage[] array (data->att_chan =3D chan). When a buffer's last ref= erence is dropped, its net-buf destroy callback defers the completion handl= ing to the system workqueue (att_tx_destroy -> att_tx_destroy_work_handl=
er -> att_on_sent_cb -> bt_att_sent), where bt_att_sent dereferences = the channel and its ATT context (sys_slist_get(&att->reqs)). When a = peer disconnects while an ATT PDU (a server notification/indication or any = response) is still in flight in the controller TX path, L2CAP tears the cha= nnel down in l2cap_chan_del(): it runs the disconnected callback and then t=
he released callback (bt_att_released), which frees the channel slab slot. = Because the in-flight buffer is held by the connection TX path rather than = the channel's own queue, its deferred destroy work can run after the channe=
l has been freed. The att_on_sent_cb guard intended to drop the stale callb= ack itself dereferences meta->att_chan, which is now a dangling pointer = into a freed (and possibly reused) slab slot. A remote peer with an ATT con= nection can drive this by disconnecting during routine ATT traffic; no pair= ing or user interaction is required to reach the ATT bearer. The result is =
a use-after-free read/write of freed channel memory, reliably crashing the = Bluetooth host (denial of service) and, because the channel slab slot may b=
e reused, potentially corrupting live memory. The fix makes bt_att_released=
() NULL the att_chan field of every tx_meta_data_storage[] entry still refe= rencing the channel before freeing it, so the deferred guard observes a NUL=
L pointer and drops the callback. Teardown and the destroy work both run on=
the cooperative system workqueue, so the array update is serialized and ne= eds no lock.</td>
<td>2026-08-04</td>
<td>7.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11368" target=3D= "_blank" rel=3D"noopener">CVE-2026-11368</a></td>
</tr>

<td class=3D"vendor-product">ZTE--F689</td>
<td>By accessing unencrypted information in the device firmware, an attacke=
r can obtain the initial login credentials for the device's web interface.<=

<td>2026-08-07</td>
<td>7.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49007" target=3D= "_blank" rel=3D"noopener">CVE-2026-49007</a></td>
</tr>

<td class=3D"vendor-product">Zucchetti S.p.a.--FirmaCheck</td>
<td>FirmaCheck for Windows before 1.3.16 contains a DLL hijacking vulnerabi= lity that allows local attackers to execute arbitrary code by placing a cra= fted openssl.cnf file in the unvalidated C:\Program Files (x86)\Common File= s\SSL\ directory path. Attackers can write a malicious OpenSSL configuratio=
n file referencing an attacker-controlled DLL to achieve code execution at = startup process privilege level when FirmaCheck.exe runs automatically at s= ystem startup.</td>
<td>2026-08-03</td>
<td>7.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-41447" target=3D= "_blank" rel=3D"noopener">CVE-2026-41447</a></td>
</tr>

<td class=3D"vendor-product">Zyxel--ATP series firmware</td>
<td>A path traversal vulnerability in the CLI command used to execute confi= guration files in Zyxel ATP series firmware versions from V4.32 through V5.=
42 Patch 1, USG FLEX series firmware versions from V4.50 through V5.42 Patc=
h 1, USG FLEX 50(W) series firmware versions from V4.16 through V5.42 Patch=
1, and USG20(W)-VPN series firmware versions from V4.16 through V5.42 Patc=
h 1 could allow an authenticated attacker with administrator privileges to = execute a crafted malicious configuration file on an affected device.</td> <td>2026-08-04</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14818" target=3D= "_blank" rel=3D"noopener">CVE-2026-14818</a></td>
</tr>

<td class=3D"vendor-product">Zyxel--WAX650S firmware</td>
<td>A post-authentication command injection vulnerability in the "export-cg=
i" CGI program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 co= uld allow an authenticated attacker with administrator privileges to execut=
e OS commands on an affected device.</td>
<td>2026-08-04</td>
<td>7.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6837" target=3D"= _blank" rel=3D"noopener">CVE-2026-6837</a></td>
</tr>
</tbody>
</table>
<p><a href=3D"#top">Back to top</a></p>
</div>
<div id=3D"medium_v">
<h2 id=3D"medium_v_title">Medium Vulnerabilities</h2>
<table class=3D"table no-tablesaw" style=3D"table-layout: fixed; width: 100= %;" border=3D"1" summary=3D"Medium Vulnerabilities">
<thead>

<th class=3D"vendor-product" style=3D"width: 24%;" scope=3D"col">
<span class=3D"primary-vendor">Primary</span><br><span class=3D"primary-ven= dor">Vendor</span> -- Product</th>
<th style=3D"width: 44%;" scope=3D"col">Description</th>
<th style=3D"width: 10%;" scope=3D"col">Published</th>
<th style=3D"width: 8%;" scope=3D"col">CVSS Score</th>
<th style=3D"width: 7%;" scope=3D"col">Source Info</th>
</tr>
</thead>
<tbody>

<td class=3D"vendor-product">299ko--299Ko</td>
<td>299Ko's public contact form (plugin/contact/controllers/ContactControll= er.php, home()) sets raw POST field values (name, firstname, email, message=
) into the page template with no sanitization. The template engine's variab=
le output function (common/Template.php, _show_var()) echoes values with no=
htmlspecialchars() call, and the sink template (contact.tpl) outputs these=
values unescaped into an HTML attribute and a textarea. An unauthenticated=
attacker can submit a payload such as name=3D"><script>alert(docu= ment.domain)</script> to achieve reflected XSS against any visitor wh=
o submits or is tricked into auto-submitting the form, including a targeted=
administrator, enabling session token theft.</td>
<td>2026-08-05</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71249" target=3D= "_blank" rel=3D"noopener">CVE-2026-71249</a></td>
</tr>

<td class=3D"vendor-product">2wstechnologies--Askeet Talk to Your WooCommer=
ce Data</td>
<td>The Askeet plugin for WordPress is vulnerable to SQL Injection via the = 'sql_query' parameter in multiple AJAX actions (askeet_execute_sql_query, a= skeet_export_all_results) in all versions up to, and including, 3.0. This i=
s due to the askeet_is_safe_query() filter being bypassable using MySQL con= ditional comments (e.g., /*!UNION*/). The filter strips regular block comme= nts before checking for forbidden SQL keywords, but MySQL interprets condit= ional comments as executable code. This makes it possible for authenticated=
attackers, with Administrator-level access and above, to append additional=
SQL queries into already existing queries that can be used to extract sens= itive information from the database.</td>
<td>2026-08-05</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5651" target=3D"= _blank" rel=3D"noopener">CVE-2026-5651</a></td>
</tr>

<td class=3D"vendor-product">3CORESec--Trapdoor</td>
<td>A weakness has been identified in 3CORESec Trapdoor up to 1.2.2. Affect=
ed by this vulnerability is the function DefaultFunction. This manipulation=
causes improper access controls. The attack can be initiated remotely. The=
vendor was contacted early about this disclosure.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19358" target=3D= "_blank" rel=3D"noopener">CVE-2026-19358</a></td>
</tr>

<td class=3D"vendor-product">aaronsb--memory-graph</td>
<td>A vulnerability was detected in aaronsb memory-graph up to 5cfd23827788= 37b9f6399080956eee670d00452c. Affected by this vulnerability is the functio=
n JsonMemoryStorage.createDomain/JsonMemoryStorage.getMemories/JsonMemorySt= orage.saveMemories of the file src/tools/memoryTools.ts. The manipulation r= esults in path traversal. The attack must be initiated from a local positio=
n. This product operates on a rolling release basis, ensuring continuous de= livery. Consequently, there are no version details for either affected or u= pdated releases. The project was informed of the problem early through an i= ssue report but has not responded yet.</td>
<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19285" target=3D= "_blank" rel=3D"noopener">CVE-2026-19285</a></td>
</tr>

<td class=3D"vendor-product">abdullah1854--MCPGateway</td>
<td>A vulnerability was identified in abdullah1854 MCPGateway up to 549f494= a9e363f40530149de324b8097de424230. This impacts the function getUsageByDate= Range of the file src/services/claude-usage.ts of the component Claude Usag=
e Range Endpoint. The manipulation of the argument since leads to command i= njection. The attack can be initiated remotely. The exploit is publicly ava= ilable and might be used. Continious delivery with rolling releases is used=
by this product. Therefore, no version details of affected nor updated rel= eases are available. The project was informed of the problem early through =
an issue report but has not responded yet.</td>
<td>2026-08-08</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19268" target=3D= "_blank" rel=3D"noopener">CVE-2026-19268</a></td>
</tr>

<td class=3D"vendor-product">abracadabra50--claude-sesh</td>
<td>A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue af= fects the function getEnrichedData/enrichSession of the file src/services/e= nricher.ts. Executing a manipulation of the argument sessionId can lead to = path traversal. The attack needs to be launched locally. This patch is call=
ed 786c9d74800e6d0858b65778f31beb71b3983a50. Applying a patch is advised to=
resolve this issue.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19327" target=3D= "_blank" rel=3D"noopener">CVE-2026-19327</a></td>
</tr>

<td class=3D"vendor-product">abrinsmead--mindpilot-mcp</td>
<td>A flaw has been found in abrinsmead mindpilot-mcp 0.5.0. Affected by th=
is issue is some unknown functionality of the component HistoryService. Thi=
s manipulation of the argument ID causes path traversal. The attack needs t=
o be launched locally. The project was informed of the problem early throug=
h an issue report but has not responded yet.</td>
<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19287" target=3D= "_blank" rel=3D"noopener">CVE-2026-19287</a></td>
</tr>

<td class=3D"vendor-product">adenot--mcp-google-search</td>
<td>A vulnerability was determined in adenot mcp-google-search up to 0.3.1.=
Impacted is an unknown function of the file src/index.ts of the component = read_webpage. Executing a manipulation of the argument url can lead to serv= er-side request forgery. The attack is restricted to local execution. This = patch is called f071d491b685011ca04e8ab8d586fc65f86bcee1. It is advisable t=
o implement a patch to correct this issue.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19337" target=3D= "_blank" rel=3D"noopener">CVE-2026-19337</a></td>
</tr>

<td class=3D"vendor-product">Admidio--admidio</td>
<td>Admidio versions before 5.0.11 contain a reflected cross-site scripting=
vulnerability in the SSO/SAML endpoint that echoes unencoded exception mes= sages to the HTTP response. Unauthenticated attackers can inject arbitrary = JavaScript through SAML Issuer elements or LightSaml library parameters to = execute code in users' browsers and hijack sessions.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69092" target=3D= "_blank" rel=3D"noopener">CVE-2026-69092</a></td>
</tr>

<td class=3D"vendor-product">Admidio--admidio</td>
<td>Admidio before 5.0.11 fails to validate target organization membership =
in role handlers, allowing authenticated role administrators to delete, act= ivate, deactivate, or edit roles belonging to other organizations. Attacker=
s can supply a role UUID from another organization to groups_roles.php hand= lers to modify that organization's roles without authorization.</td> <td>2026-08-03</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69090" target=3D= "_blank" rel=3D"noopener">CVE-2026-69090</a></td>
</tr>

<td class=3D"vendor-product">Admidio--admidio</td>
<td>Admidio before 5.0.11 does not validate the adm_csrf_token in modules/c= ategory-report/preferences.php, which performs persistent Category Report c= onfiguration changes based on GET parameters (delete and copy). An attacker=
can trick an authenticated administrator into visiting a crafted URL to de= lete or duplicate Category Report configurations, affecting the integrity a=
nd availability of that module's configuration.</td>
<td>2026-08-03</td>
<td>4.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69093" target=3D= "_blank" rel=3D"noopener">CVE-2026-69093</a></td>
</tr>

<td class=3D"vendor-product">Admidio--admidio</td>
<td>Admidio before 5.0.11 contains an insecure direct object reference vuln= erability in the save_temporary mode of mylist_function.php that allows aut= henticated users to hijack list configurations. Attackers can enumerate glo= bal list UUIDs and overwrite admin-curated global lists or other users' pri= vate lists by supplying a list_uuid parameter, transferring ownership and d= emoting global lists to personal configurations.</td>
<td>2026-08-03</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69094" target=3D= "_blank" rel=3D"noopener">CVE-2026-69094</a></td>
</tr>

<td class=3D"vendor-product">Adobe--Adobe Genuine Software Integrity Servic= e</td>
<td>Adobe Genuine Software Integrity Service was affected by an Incorrect A= uthorization vulnerability that could result in a Security feature bypass. =
An attacker could have leveraged this vulnerability to bypass security meas= ures and gain unauthorized limited write access. Exploitation of this issue=
did not require user interaction, but required the attacker to have access=
to the local environment the application is installed on.</td> <td>2026-08-07</td>
<td>4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71381" target=3D= "_blank" rel=3D"noopener">CVE-2026-71381</a></td>
</tr>

<td class=3D"vendor-product">adolfosalasgomez3011--slidev-builder-mcp</td> <td>A security flaw has been discovered in adolfosalasgomez3011 slidev-buil= der-mcp 2.1.0. This affects the function generateChart of the file src/tool= s/generateAssets.ts of the component generateAssets Tool. Performing a mani= pulation of the argument outputDir results in command injection. The attack=
is only possible with local access. The project was informed of the proble=
m early through an issue report but has not responded yet.</td> <td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19281" target=3D= "_blank" rel=3D"noopener">CVE-2026-19281</a></td>
</tr>

<td class=3D"vendor-product">afthemes--WP Post Author Author Box, Multiple = Authors, Guest Authors & Custom Avatars</td>
<td>The WP Post Author - Author Box, Multiple Authors, Guest Authors & = Custom Avatars plugin for WordPress is vulnerable to generic SQL Injection = via the 'wpma_metabox_authors_list' parameter in all versions up to, and in= cluding, 3.9.1 due to insufficient escaping on the user supplied parameter = and lack of sufficient preparation on the existing SQL query. This makes it=
possible for authenticated attackers, with author-level access and above, =
to append additional SQL queries into already existing queries that can be = used to extract sensitive information from the database. Exploitation is a = two-step chain: an attacker first saves a crafted guest-author token via th=
e wpma_metabox_authors_list parameter during post creation or editing, then=
triggers the injection when any admin user loads the post list screen at /= wp-admin/edit.php, causing the injected SQL result to be rendered in the Au= thors column.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11977" target=3D= "_blank" rel=3D"noopener">CVE-2026-11977</a></td>
</tr>

<td class=3D"vendor-product">aizuda--SnailJob (snail-job)</td>
<td>SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUt= il.deserialize helper that allows authenticated attackers to crash the serv=
er by supplying a crafted Zstandard-compressed payload with an inflated fra= me_content_size field in the frame header. Attackers can store a base64-enc= oded Zstandard payload declaring an arbitrarily large decompressed size in =
a retry task argument, causing the JVM to attempt an unbounded array alloca= tion and triggering an unrecoverable java.lang.OutOfMemoryError when the ta=
sk is dispatched through the retry-task pipeline.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69702" target=3D= "_blank" rel=3D"noopener">CVE-2026-69702</a></td>
</tr>

<td class=3D"vendor-product">akaunting--akaunting</td>
<td>Akaunting's shared download route (app/Http/Controllers/Common/Uploads.= php::download(), reachable at uploads/{id}/download behind only generic aut=
h middleware) fetched the requested Media record by ID with no verification=
that it belonged to the requesting portal customer's own company, allowing=
any authenticated portal customer to download any other company's uploaded=
files by guessing or enumerating media IDs. Fixed in commit 80ef6d3 (2026-= 07-12), which added an explicit ownership check comparing the media's paren=
t record contact_id against the requesting user's own contact.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71251" target=3D= "_blank" rel=3D"noopener">CVE-2026-71251</a></td>
</tr>

<td class=3D"vendor-product">Akshay Menariya--Export Import Menus</td>

<td>Unauthenticated Sensitive Data Exposure in Export Import Menus <=3D = 1.9.2 versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66684" target=3D= "_blank" rel=3D"noopener">CVE-2026-66684</a></td>
</tr>

<td class=3D"vendor-product">aktsmm--skill-ninja-mcp-server</td>
<td>A vulnerability has been found in aktsmm skill-ninja-mcp-server 0.1.0. = Impacted is the function getInstalledSkills/installSkill/updateAgentsMd/uni= nstallSkill of the file src/installer.ts. The manipulation of the argument = workspacePath leads to path traversal. The attack needs to be performed loc= ally. Upgrading to version 0.1.1 is recommended to address this issue. The = identifier of the patch is 855b46739e0f6e8388f17f9d0066ac4298a3965d. Upgrad= ing the affected component is recommended.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19328" target=3D= "_blank" rel=3D"noopener">CVE-2026-19328</a></td>
</tr>

<td class=3D"vendor-product">Alex--Featured Video Plus</td>
<td>Unauthenticated Sensitive Data Exposure in Featured Video Plus <=3D = 2.3.3 versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66685" target=3D= "_blank" rel=3D"noopener">CVE-2026-66685</a></td>
</tr>

<td class=3D"vendor-product">aliyun--alibabacloud-dataworks-mcp-server</td> <td>A security flaw has been discovered in aliyun alibabacloud-dataworks-mc= p-server up to 1.0.43. The impacted element is the function ReadResourceReq= uestSchema of the file src/resources/initResources.ts. The manipulation of = the argument request.params.uri results in server-side request forgery. The=
attack may be launched remotely. The project was informed of the problem e= arly through an issue report but has not responded yet.</td>

<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19339" target=3D= "_blank" rel=3D"noopener">CVE-2026-19339</a></td>
</tr>

<td class=3D"vendor-product">alphawolf--Simple Yearly Archive</td>
<td>The Simple Yearly Archive plugin for WordPress is vulnerable to Stored = Cross-Site Scripting via the `posttype` attribute of the `SimpleYearlyArchi= ve` shortcode in all versions up to, and including, 2.2.4 due to insufficie=
nt input sanitization and output escaping on user supplied attributes. This=
makes it possible for authenticated attackers, with Contributor-level acce=
ss and above, to inject arbitrary web scripts in pages that will execute wh= enever a user accesses an injected page.</td>
<td>2026-08-05</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7441" target=3D"= _blank" rel=3D"noopener">CVE-2026-7441</a></td>
</tr>

<td class=3D"vendor-product">andreahaku--codex_mcp</td>
<td>A vulnerability was found in andreahaku codex_mcp up to 1ff521cc6cc57cf= e56ddef946c644b8534771390. The affected element is an unknown function of t=
he file src/codex-process-simple.ts of the component ask MCP Tool. The mani= pulation of the argument model results in command injection. The attack req= uires a local approach. This product does not use versioning. This is why i= nformation about affected and unaffected releases are unavailable. The proj= ect was informed of the problem early through an issue report but has not r= esponded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19329" target=3D= "_blank" rel=3D"noopener">CVE-2026-19329</a></td>
</tr>

<td class=3D"vendor-product">andreahaku--llm_memory_mcp</td>
<td>A weakness has been identified in andreahaku llm_memory_mcp up to f11dc= 8bcff3ff8cf943a2945f99ff3b0bdc8a6d0. This impacts the function auto.capture=
of the file src/autolearn/GitHooksManager.ts of the component llm_memory_m= cp. Executing a manipulation of the argument hash can lead to command injec= tion. The attack is restricted to local execution. This product does not us=
e versioning. This is why information about affected and unaffected release=
s are unavailable. The project was informed of the problem early through an=
issue report but has not responded yet.</td>
<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19282" target=3D= "_blank" rel=3D"noopener">CVE-2026-19282</a></td>
</tr>

<td class=3D"vendor-product">angrysky56--advanced-reasoning-mcp</td>
<td>A vulnerability was determined in angrysky56 advanced-reasoning-mcp 1.0= .0. The impacted element is the function create_system_json/create_library =
to get_system_json/switch_memory_library of the file src/index.ts. This man= ipulation causes path traversal. The attack requires local access. The proj= ect was informed of the problem early through an issue report but has not r= esponded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19330" target=3D= "_blank" rel=3D"noopener">CVE-2026-19330</a></td>
</tr>

<td class=3D"vendor-product">antoineh--Football Pool</td>
<td>The Football Pool plugin for WordPress is vulnerable to Reflected Cross= -Site Scripting via the `shouttext` POST parameter of the Shoutbox widget i=
n all versions up to, and including, 2.13.4 due to insufficient input sanit= ization and output escaping. When a shoutbox form submission fails the nonc=
e check (or `shouttext` is empty, or the user is unable to save), the raw P= OST value is echoed back into a `<textarea>` element using `printf('%= s', ...)` with no HTML escaping. This makes it possible for unauthenticated=
attackers to execute arbitrary web scripts in the browser of an authentica= ted victim (Subscriber-level or higher) who is tricked into submitting a cr= afted POST request to a page that contains the Shoutbox widget.</td> <td>2026-08-05</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8790" target=3D"= _blank" rel=3D"noopener">CVE-2026-8790</a></td>
</tr>

<td class=3D"vendor-product">anubissbe--ProjectHub-Mcp</td>
<td>A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0.=
This affects an unknown function of the file backend-fix/complete_backend.=
js of the component Webhooks API. This manipulation of the argument url cau= ses server-side request forgery. Remote exploitation of the attack is possi= ble. The project was informed of the problem early through an issue report = but has not responded yet.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19340" target=3D= "_blank" rel=3D"noopener">CVE-2026-19340</a></td>
</tr>

<td class=3D"vendor-product">Arraytics--WP Event SOlution</td> <td>Unauthenticated Broken Authentication in WP Event SOlution <=3D 4.1.=
9 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66451" target=3D= "_blank" rel=3D"noopener">CVE-2026-66451</a></td>
</tr>

<td class=3D"vendor-product">astralisone--rive-mcp-server-core</td>
<td>A vulnerability has been found in astralisone rive-mcp-server-core up t=
o db1d0cc4cd52589116360428b7504fd0ca748b3e. This affects an unknown part of=
the file packages/mcp-server/src/tools/importRiveFile.ts of the component = importRiveFile Flow. Such manipulation of the argument libraryId leads to p= ath traversal. The attack needs to be performed locally. This product imple= ments a rolling release for ongoing delivery, which means version informati=
on for affected or updated releases is unavailable. The project was informe=
d of the problem early through an issue report but has not responded yet.</=

<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19288" target=3D= "_blank" rel=3D"noopener">CVE-2026-19288</a></td>
</tr>

<td class=3D"vendor-product">ATN-B1--CPDLC</td>
<td>Unnumbered Disconnect (U DISC) and malformed Aviation Very High Frequen=
cy Link Control frames can terminate sessions and lead to a loss of CPDLC f= unctions requiring a reversion to voice communication and increased control= ler workload. This type of attack can be carried out remotely over radio fr= equency.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-71410" target=3D= "_blank" rel=3D"noopener">CVE-2025-71410</a></td>
</tr>

<td class=3D"vendor-product">ATN-B1--CPDLC</td>
<td>Broadcast control frames can disconnect multiple aircraft simultaneousl=
y leading to delayed clearances and air traffic controller overload. This t= ype of attack can be carried out remotely over radio frequency.</td>

<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-71411" target=3D= "_blank" rel=3D"noopener">CVE-2025-71411</a></td>
</tr>

<td class=3D"vendor-product">ATN-B1--CPDLC</td>
<td>Malformed or out-of-sequence frames at the Aviation Very High Frequency=
Link Control X.25 layers cause repeated resets which may result in increas=
ed workload and reduced situational awareness. This type of attack can be c= arried out remotely over radio frequency.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-71413" target=3D= "_blank" rel=3D"noopener">CVE-2025-71413</a></td>
</tr>

<td class=3D"vendor-product">Autodesk--Revit</td>
<td>A maliciously crafted TIF file, when parsed through certain Autodesk pr= oducts during image import, can cause an Out-of-Bounds Read in the image ha= ndling library. A malicious actor can leverage this vulnerability to cause =
a denial of service</td>
<td>2026-08-06</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7405" target=3D"= _blank" rel=3D"noopener">CVE-2026-7405</a></td>
</tr>

<td class=3D"vendor-product">automateyournetwork--MCPyATS</td>
<td>A vulnerability was identified in automateyournetwork MCPyATS up to 0.1= .4. The affected element is the function processGenerateRequest of the file=
mcp_servers/mermaid/index.ts of the component generate_mermaid_markdown. T=
he manipulation of the argument folder/name leads to path traversal. The at= tack must be carried out locally.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19338" target=3D= "_blank" rel=3D"noopener">CVE-2026-19338</a></td>
</tr>

<td class=3D"vendor-product">AWS--amazon-mq-mcp-server</td>
<td>Improper restriction of intended endpoints in the RabbitMQ broker conne= ction tools of the Amazon MQ MCP Server (awslabs.amazon-mq-mcp-server) befo=
re 2.0.24 may allow a remote unauthenticated actor (via prompt injection) t=
o obtain Amazon MQ for RabbitMQ broker credentials or OAuth access tokens s= ent to a crafted endpoint controlled through a broker hostname introduced i=
n the MCP client context. To remediate this issue, users should upgrade to = version 2.0.24.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18655" target=3D= "_blank" rel=3D"noopener">CVE-2026-18655</a></td>
</tr>

<td class=3D"vendor-product">AWS--aws-cli</td>
<td>Key exchange without entity authentication in the EMR SSH helper comman=
ds in Amazon AWS CLI before 1.45.28 and AWS CLI v2 before 2.35.3 might allo=
w man-in-the-middle attackers to intercept SSHsessions and file transfers v=
ia network positioning between the client and the EMR cluster endpoint. To = remediate this issue, users should upgrade to AWS CLI v1 1.45.28 or later, =
or AWS CLI v2 2.35.3 or later.</td>
<td>2026-08-03</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18654" target=3D= "_blank" rel=3D"noopener">CVE-2026-18654</a></td>
</tr>

<td class=3D"vendor-product">AWS--documentdb-mcp-server</td>
<td>Incorrect authorization in the aggregation pipeline tool in Amazon AWS = Labs DocumentDB MCP Server before 1.0.12 might allow an authenticated MCP c= lient to perform inappropriate write operations on the connected database v=
ia write-capable aggregation pipeline stages that bypass the read-only mode=
enforcement logic. To remediate this issue, users should upgrade to versio=
n 1.0.12 or later.</td>
<td>2026-08-05</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18954" target=3D= "_blank" rel=3D"noopener">CVE-2026-18954</a></td>
</tr>

<td class=3D"vendor-product">azer--react-analyzer-mcp</td>
<td>A security flaw has been discovered in azer react-analyzer-mcp up to 33= 5f2a3585f265e2e88352b59b10d3b478d678b0. Affected by this vulnerability is t=
he function generateProjectDocs of the file src/index.ts of the component a= nalyze-projec. The manipulation of the argument projectName results in path=
traversal. The attack is only possible with local access. This product imp= lements a rolling release for ongoing delivery, which means version informa= tion for affected or updated releases is unavailable. The project was infor= med of the problem early through an issue report but has not responded yet.= </td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19323" target=3D= "_blank" rel=3D"noopener">CVE-2026-19323</a></td>
</tr>

<td class=3D"vendor-product">bartekke8it56w2--new-mcp</td>
<td>A vulnerability was determined in bartekke8it56w2 new-mcp 0.1.0. This i= mpacts the function fs.writeFileSync/fs.existsSync/fs.readFileSync of the f= ile index.ts of the component geminithinking. This manipulation of the argu= ment sessionCommand/sessionPath causes path traversal. The attack requires = local access. The project was informed of the problem early through an issu=
e report but has not responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19370" target=3D= "_blank" rel=3D"noopener">CVE-2026-19370</a></td>
</tr>

<td class=3D"vendor-product">Baserow--Baserow</td>
<td>A vulnerability was identified in Baserow up to 2.3.2. Affected by this=
vulnerability is the function verify of the file backend/src/baserow/api/t= wo_factor_auth/views.py of the component 2FA Verify Endpoint. Such manipula= tion leads to improper authentication. The attack may be launched remotely.=
This attack is characterized by high complexity. The exploitation appears =
to be difficult. Upgrading to version 2.3.3 addresses this issue. You shoul=
d upgrade the affected component. The vendor was contacted early, responded=
in a very professional manner and quickly released a fixed version of the = affected product.</td>
<td>2026-08-04</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18816" target=3D= "_blank" rel=3D"noopener">CVE-2026-18816</a></td>
</tr>

<td class=3D"vendor-product">bazylhorsey--obsidian-mcp-server</td>
<td>A vulnerability was identified in bazylhorsey obsidian-mcp-server 1.0.0=
. This affects the function readCanvas/writeCanvas of the file src/services= /CanvasService.ts. Such manipulation leads to path traversal. An attack has=
to be approached locally. The project was informed of the problem early th= rough an issue report but has not responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19331" target=3D= "_blank" rel=3D"noopener">CVE-2026-19331</a></td>
</tr>

<td class=3D"vendor-product">bdthemes--Element Pack Addons for Elementor El= ementor Widgets, Elementor Templates, Elementor Addons</td>
<td>The Element Pack Addons for Elementor plugin for WordPress is vulnerabl=
e to Email Header Injection in all versions up to, and including, 8.3.15 vi=
a the `element_pack_contact_form` AJAX action. This is due to insufficient = sanitization of newline characters in user-supplied input that gets concate= nated into email headers. This makes it possible for unauthenticated attack= ers to inject arbitrary email headers into emails sent by the contact form.= </td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-0673" target=3D"= _blank" rel=3D"noopener">CVE-2026-0673</a></td>
</tr>

<td class=3D"vendor-product">bdthemes--Element Pack Elementor Addons</td> <td>Unauthenticated Bypass Vulnerability in Element Pack Elementor Addons &= lt;=3D 8.7.13 versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65502" target=3D= "_blank" rel=3D"noopener">CVE-2026-65502</a></td>
</tr>

<td class=3D"vendor-product">bdthemes--Ultimate Store Kit Elementor Addons<=

<td>Unauthenticated Broken Access Control in Ultimate Store Kit Elementor A= ddons <=3D 3.0.5 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-25403" target=3D= "_blank" rel=3D"noopener">CVE-2026-25403</a></td>
</tr>

<td class=3D"vendor-product">beardev--JoomSport for Sports: Team & Leag= ue, Football, Hockey & more</td>
<td>The JoomSport - for Sports: Team & League, Football, Hockey & m= ore plugin for WordPress is vulnerable to time-based SQL Injection via the = 'order' parameter in all versions up to, and including, 5.7.9 due to insuff= icient escaping on the user supplied parameter and lack of sufficient prepa= ration on the existing SQL query. This makes it possible for authenticated = attackers, with administrator-level access and above, to append additional = SQL queries into already existing queries that can be used to extract sensi= tive information from the database. The affected admin page lacks nonce or = CSRF protection on the GET request, meaning an unauthenticated attacker cou=
ld exploit this vulnerability by tricking an authenticated administrator in=
to issuing a crafted request. Additionally, the vulnerability is only trigg= ered when the 'orderby' parameter is also present and non-empty alongside t=
he 'order' parameter.</td>
<td>2026-08-05</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11920" target=3D= "_blank" rel=3D"noopener">CVE-2026-11920</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Improper Limitation of a Pathname to a Restricted Directory ('Path Trav= ersal') vulnerability in Bilin Software and Informatics Consultancy Inc. HU= MANIST Digital Human Resources allows Path Traversal. This issue affects HU= MANIST Digital Human Resources: from 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14194" target=3D= "_blank" rel=3D"noopener">CVE-2026-14194</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Insufficient session expiration vulnerability in Bilin Software and Inf= ormatics Consultancy Inc. HUMANIST Digital Human Resources allows Reusing S= ession IDs (aka Session Replay). This issue affects HUMANIST Digital Human = Resources: from 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14465" target=3D= "_blank" rel=3D"noopener">CVE-2026-14465</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Improper neutralization of input during web page generation ('cross-sit=
e scripting') vulnerability in Bilin Software and Informatics Consultancy I= nc. HUMANIST Digital Human Resources allows Stored XSS. This issue affects = HUMANIST Digital Human Resources: from 26.0 before 26.1.</td> <td>2026-08-04</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14192" target=3D= "_blank" rel=3D"noopener">CVE-2026-14192</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>Observable response discrepancy vulnerability in Bilin Software and Inf= ormatics Consultancy Inc. HUMANIST Digital Human Resources allows Account F= ootprinting. This issue affects HUMANIST Digital Human Resources: from 26.0=
before 26.1.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14202" target=3D= "_blank" rel=3D"noopener">CVE-2026-14202</a></td>
</tr>

<td class=3D"vendor-product">Bilin Software and Informatics Consultancy Inc= .--HUMANIST Digital Human Resources</td>
<td>URL redirection to untrusted site ('open redirect') vulnerability in Bi= lin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resour= ces allows Phishing. This issue affects HUMANIST Digital Human Resources: f= rom 26.0 before 26.1.</td>
<td>2026-08-04</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14219" target=3D= "_blank" rel=3D"noopener">CVE-2026-14219</a></td>
</tr>

<td class=3D"vendor-product">Blix--Email Blue Mail Calendar App</td>
<td>A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.3= 05. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getF= ileFromUri of the component react-native-receive-sharing-intent. The manipu= lation of the argument _display_name results in path traversal. The attack =
is only possible with local access. The exploit is now public and may be us= ed. The vendor was contacted early about this disclosure but did not respon=
d in any way.</td>
<td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18648" target=3D= "_blank" rel=3D"noopener">CVE-2026-18648</a></td>
</tr>

<td class=3D"vendor-product">BoldGrid--W3 Total Cache</td>
<td>Unauthenticated Path Traversal in W3 Total Cache <=3D 2.10.2 version= s.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66695" target=3D= "_blank" rel=3D"noopener">CVE-2026-66695</a></td>
</tr>

<td class=3D"vendor-product">boringproxy--boringproxy</td>
<td>boringproxy through 0.10.0 contains a resource exhaustion vulnerability=
that allows any authenticated user to permanently exhaust server file desc= riptors, goroutines, and memory by sending requests to the GET /loading end= point with attacker-supplied id query parameter values. Because the handler=
performs no map-lookup validity check and receives on a nil channel that b= locks forever, with no timeout, no context cancellation, and no server-side=
reclamation due to absent HTTP server timeouts, each malicious request per= manently holds one goroutine, one file descriptor, and approximately 50 kB =
of memory until the server's file descriptor limit is reached and listener = Accept calls fail, halting all tunnel traffic forwarding for all users.</td=

<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70616" target=3D= "_blank" rel=3D"noopener">CVE-2026-70616</a></td>
</tr>

<td class=3D"vendor-product">Brainstorm Force--Ultimate Addons for Elemento= r</td>
<td>Contributor Cross Site Scripting (XSS) in Ultimate Addons for Elementor=
<=3D 1.45.2 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66688" target=3D= "_blank" rel=3D"noopener">CVE-2026-66688</a></td>
</tr>

<td class=3D"vendor-product">cemtan--sar2html</td>
<td>A vulnerability was detected in cemtan sar2html 4.0.0. This affects an = unknown part of the file sar2html.py of the component Search. Performing a = manipulation of the argument Search results in sql injection. It is possibl=
e to initiate the attack remotely. The exploit is now public and may be use=
d. The vendor was contacted early about this disclosure but did not respond=
in any way.</td>
<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18719" target=3D= "_blank" rel=3D"noopener">CVE-2026-18719</a></td>
</tr>

<td class=3D"vendor-product">chetans9--core-php-admin-panel</td>
<td>A flaw has been found in chetans9 core-php-admin-panel up to 90d07ed5aa= c5e0f09b6a5828d7bb2eb83010763f. This issue affects some unknown processing =
of the file /Applications/MAMP/htdocs/core-php-admin-panel-master/customers= .php. Executing a manipulation of the argument filter_col can lead to sql i= njection. The attack may be launched remotely. The exploit has been publish=
ed and may be used. This product operates on a rolling release basis, ensur= ing continuous delivery. Consequently, there are no version details for eit= her affected or updated releases. The vendor was contacted early about this=
disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18766" target=3D= "_blank" rel=3D"noopener">CVE-2026-18766</a></td>
</tr>

<td class=3D"vendor-product">chirpstack--chirpstack</td>
<td>ChirpStack's SQLite-backend device tag filtering (chirpstack/src/storag= e/device.rs, in both get_count() and list()) interpolates the user-supplied=
tag KEY directly into a raw SQL fragment via Rust's format!() macro (`dsl:= :sql::<Bool>(&format!("device.tags->>'{}' =3D", k)).bind::&= lt;Text, _>(v)`), while only the tag VALUE is safely parameter-bound via=
Diesel's .bind(). An authenticated user with device-list access can inject=
SQL via a crafted tag key when the SQLite backend (chirpstack-sqlite packa= ge) is in use; the PostgreSQL backend is unaffected as it uses Diesel's nat= ive JSONB containment operator instead of raw SQL string formatting.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71282" target=3D= "_blank" rel=3D"noopener">CVE-2026-71282</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Catalyst SD-WAN Manager</td>

<td>A vulnerability in the web-based management interface of Cisco Catalyst=
SD-WAN Manager could allow an authenticated, remote attacker to view sensi= tive information in clear text on an affected system. This vulnerability is=
due to insufficient access control enforcement for specific template types=
that are not included in the encryption allowlist. A low-privileged attack=
er could exploit this vulnerability by viewing logs on the local system or =
on a remote logging server. A successful exploit could allow the attacker t=
o view sensitive authentication credentials, which could lead to further co= mpromise of network infrastructure and connected services.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20294" target=3D= "_blank" rel=3D"noopener">CVE-2026-20294</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Enterprise NFV Infrastructure Sof= tware</td>
<td>A vulnerability in the web-based management interface of Cisco Integrat=
ed Management Controller (IMC) could allow an authenticated, remote attacke=
r to conduct a cross-site scripting (XSS) attack against a user of the inte= rface. This vulnerability is due to insufficient validation of user input. =
An attacker could exploit this vulnerability by persuading a user of an aff= ected interface to click a crafted link. A successful exploit could allow t=
he attacker to execute arbitrary script code in the browser of the targeted=
user or access sensitive, browser-based information.</td>

<td>2026-08-05</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20198" target=3D= "_blank" rel=3D"noopener">CVE-2026-20198</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>A vulnerability in the web-based management interface of Cisco IOS XE S= oftware could allow an authenticated, remote attacker with low privileges t=
o cause a denial of service (DoS) condition on an affected device. This vul= nerability is due to insufficient error handling in the web-based managemen=
t interface. An attacker could exploit this vulnerability by authenticating=
with a malformed certificate. A successful exploit could allow the attacke=
r to cause the affected device to reload, resulting in a DoS condition.</td=

<td>2026-08-05</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20311" target=3D= "_blank" rel=3D"noopener">CVE-2026-20311</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco IOS XE Software</td>
<td>A vulnerability in the web-based management interface of Cisco IOS XE S= oftware could allow an authenticated, remote attacker with low privileges t=
o perform a denial of service (DoS) attack against an affected device. This=
vulnerability is due to insufficient input validation. An attacker could e= xploit this vulnerability by sending crafted input to the web-based managem= ent interface of an affected device. A successful exploit could allow the a= ttacker to cause the web-based management interface to become unresponsive.= </td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20308" target=3D= "_blank" rel=3D"noopener">CVE-2026-20308</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco RoomOS Software</td>
<td>A vulnerability in the logging subsystem of Cisco RoomOS could allow an=
authenticated, local attacker with low privileges to access sensitive info= rmation. This vulnerability is due to the logging of sensitive information.=
An attacker could exploit this vulnerability by enabling a specific loggin=
g level and then collecting the system logs. A successful exploit could all=
ow the attacker to view sensitive information like user login credentials.<=

<td>2026-08-05</td>
<td>5.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20289" target=3D= "_blank" rel=3D"noopener">CVE-2026-20289</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Terminal Services Agent</td>

<td>A vulnerability in the network driver of Cisco Terminal Service (TS) Ag= ent could allow an authenticated, remote attacker to bypass firewall rules = that are associated with the account of the attacker. This vulnerability is=
due to an incorrect mapping of network connections to user accounts. An at= tacker with at least user-level credentials could exploit this vulnerabilit=
y by sending crafted network traffic to an affected device. A successful ex= ploit could allow the attacker to inherit the firewall rules associated wit=
h a different user in the system.</td>
<td>2026-08-05</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20028" target=3D= "_blank" rel=3D"noopener">CVE-2026-20028</a></td>
</tr>

<td class=3D"vendor-product">Cisco--Cisco Unified Computing System (Standal= one)</td>
<td>A vulnerability in the web-based management interface of Cisco IMC coul=
d allow an authenticated, remote attacker with&nbsp;Admin privileges to=
execute arbitrary commands on the underlying operating system of an affect=
ed system and elevate privileges to root.&nbsp; This vulnerability is d=
ue to improper validation of user-supplied input. An attacker could exploit=
this vulnerability by entering crafted inputs to the web-based management = interface of the affected software. A successful exploit could allow the at= tacker to execute arbitrary commands on the underlying operating system as = the root user.&nbsp; Cisco has assigned this vulnerability a SIR of Hig=
h rather than Medium as the score indicates because additional security imp= lications could occur when the attacker becomes&nbsp;root.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20288" target=3D= "_blank" rel=3D"noopener">CVE-2026-20288</a></td>
</tr>

<td class=3D"vendor-product">CloudFoundry Foundation--BOSH</td>
<td>Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacke=
r to make the agent write a root-owned file with partially attacker-control= led body to any path ending in .network, and create any missing parent dire= ctories with mode 0777 via network Alias on Ubuntu. Affected versions: BOSH=
agent < v2.847.0 (jammy <=3D v1.1202, or noble <=3D v1.364). Lowe=
r bound unspecified in advisory ("All bosh agent versions").</td> <td>2026-08-06</td>
<td>4.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-41861" target=3D= "_blank" rel=3D"noopener">CVE-2026-41861</a></td>
</tr>

<td class=3D"vendor-product">code-projects--Task Management System</td>

<td>A vulnerability was found in code-projects Task Management System 1.0. = This affects an unknown part of the file /user/UpdateTaskStatus.php. The ma= nipulation of the argument task_id/val results in missing authorization. It=
is possible to launch the attack remotely. The exploit has been made publi=
c and could be used.</td>
<td>2026-08-09</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19345" target=3D= "_blank" rel=3D"noopener">CVE-2026-19345</a></td>
</tr>

<td class=3D"vendor-product">code-projects--Task Management System</td>

<td>A vulnerability was found in code-projects Task Management System 1.0. = This issue affects some unknown processing of the file /user/CommentSave.ph=
p. The manipulation of the argument comment/task_id/mineId/recId/myName/myI= mage results in cross site scripting. It is possible to launch the attack r= emotely. The exploit has been made public and could be used.</td> <td>2026-08-09</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19378" target=3D= "_blank" rel=3D"noopener">CVE-2026-19378</a></td>
</tr>

<td class=3D"vendor-product">codesupplyco--Powerkit</td>
<td>Contributor Cross Site Scripting (XSS) in Powerkit <=3D 3.1.0 versio= ns.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28178" target=3D= "_blank" rel=3D"noopener">CVE-2026-28178</a></td>
</tr>

<td class=3D"vendor-product">Colissimo--Colissimo Officiel : Mthodes de liv= raison pour WooCommerce</td>
<td>Customer Insecure Direct Object References (IDOR) in Colissimo Officiel=
: M=C3=83=C6=92=C3=82=C2=A9thodes de livraison pour WooCommerce <=3D 2.= 10.0 versions.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66692" target=3D= "_blank" rel=3D"noopener">CVE-2026-66692</a></td>
</tr>

<td class=3D"vendor-product">cosmicstack-labs--mercury-agent</td>
<td>A vulnerability has been found in cosmicstack-labs mercury-agent up to = 1.1.12. This vulnerability affects the function PermissionManager.checkShel= lCommand of the file src/capabilities/permissions.ts of the component run_c= ommand Handler. Such manipulation leads to incorrect privilege assignment. = The attack may be performed from remote. The exploit has been disclosed to = the public and may be used. The project was informed of the problem early t= hrough an issue report but has not responded yet.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18996" target=3D= "_blank" rel=3D"noopener">CVE-2026-18996</a></td>
</tr>

<td class=3D"vendor-product">cosmicstack-labs--mercury-agent</td>
<td>A vulnerability was found in cosmicstack-labs mercury-agent up to 1.1.1=
2. This issue affects the function Agent.handleBgCommand of the file src/co= re/agent.ts of the component bg Command Handler. Performing a manipulation = results in incorrect authorization. It is possible to initiate the attack r= emotely. The exploit has been made public and could be used. The project wa=
s informed of the problem early through an issue report but has not respond=
ed yet.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18997" target=3D= "_blank" rel=3D"noopener">CVE-2026-18997</a></td>
</tr>

<td class=3D"vendor-product">cosmicstack-labs--mercury-agent</td>
<td>A vulnerability was determined in cosmicstack-labs mercury-agent up to = 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agen= t.ts of the component delegate_task Tool. Executing a manipulation can lead=
to improper authorization. It is possible to launch the attack remotely. T=
he exploit has been publicly disclosed and may be utilized. The project was=
informed of the problem early through an issue report but has not responde=
d yet.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18998" target=3D= "_blank" rel=3D"noopener">CVE-2026-18998</a></td>
</tr>

<td class=3D"vendor-product">Cozmoslabs--Profile Builder</td> <td>Unauthenticated Broken Access Control in Profile Builder <=3D 3.16.5=
versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66701" target=3D= "_blank" rel=3D"noopener">CVE-2026-66701</a></td>
</tr>

<td class=3D"vendor-product">cozmoslabs--TranslatePress Translate Multiling= ual sites with AI Translation</td>
<td>The Translate Multilingual sites - TranslatePress plugin for WordPress =
is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in ve= rsions up to, and including, 3.2.5. This is due to the translate_page() fun= ction unconditionally replacing the plugin's internal #!trpst# and #!trpen#=
marker tokens with literal angle brackets across the entire HTML page outp=
ut after WordPress has already sanitized and escaped user input - allowing = the attacker to bypass WordPress's normal HTML escaping by using these toke= ns, which are not HTML special characters, in the search query. This makes =
it possible for unauthenticated attackers to inject arbitrary web scripts i=
n pages that execute if they can successfully trick a user into performing =
an action such as clicking on a specially crafted link.</td> <td>2026-08-05</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17505" target=3D= "_blank" rel=3D"noopener">CVE-2026-17505</a></td>
</tr>

<td class=3D"vendor-product">Damian Gra--FiboSearch</td>
<td>Shop manager Cross Site Scripting (XSS) in FiboSearch <=3D 1.33.0 ve= rsions.</td>
<td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28179" target=3D= "_blank" rel=3D"noopener">CVE-2026-28179</a></td>
</tr>

<td class=3D"vendor-product">danpros--HTMLy</td>
<td>A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected b=
y this issue is the function unlink of the file /system/htmly.php of the co= mponent Delete Username Endpoint. Such manipulation of the argument File le= ads to path traversal. The attack can be launched remotely. The exploit is = publicly available and might be used. The vendor was contacted early about = this disclosure but did not respond in any way.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18644" target=3D= "_blank" rel=3D"noopener">CVE-2026-18644</a></td>
</tr>

<td class=3D"vendor-product">danpros--HTMLy</td>
<td>A security flaw has been discovered in danpros HTMLy up to 3.1.1. This = affects the function add_content of the file /system/admin/admin.php of the=
component Admin Content Endpoint. Performing a manipulation of the argumen=
t oldfile results in path traversal. The attack may be initiated remotely. = The exploit has been released to the public and may be used for attacks. Th=
e vendor was contacted early about this disclosure but did not respond in a=
ny way.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18645" target=3D= "_blank" rel=3D"noopener">CVE-2026-18645</a></td>
</tr>

<td class=3D"vendor-product">danpros--HTMLy</td>
<td>A weakness has been identified in danpros HTMLy up to 3.1.1. This vulne= rability affects unknown code of the file /system/htmly.php of the componen=
t Author Name Handler. Executing a manipulation of the argument Name can le=
ad to path traversal. The attack may be launched remotely. The exploit has = been made available to the public and could be used for attacks. The vendor=
was contacted early about this disclosure but did not respond in any way.<=

<td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18646" target=3D= "_blank" rel=3D"noopener">CVE-2026-18646</a></td>
</tr>

<td class=3D"vendor-product">dartiss--code-embed</td>
<td>The Code Embed WordPress plugin prior to version 2.6.1 is vulnerable to=
stored Cross-Site Scripting (XSS) through the external URL embed feature i=
n post content. The vulnerable code scans rendered content for URL embed to= kens, fetches the remote URL, and inserts the remote response body into the=
page without output sanitization or an `unfiltered_html` capability check.=
This allows a Contributor attacker to submit a pending post containing an = inert-looking URL token that executes attacker-controlled JavaScript when a=
n Administrator or Editor previews or reviews the post. This is distinct fr=
om CVE-2026-2512, which affected custom field meta values up to version 2.5= .1. This vector affects version 2.6 and uses the documented external URL em= bed feature in post content. This particular issue is patched in version 2.= 6.1.</td>
<td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48093" target=3D= "_blank" rel=3D"noopener">CVE-2026-48093</a></td>
</tr>

<td class=3D"vendor-product">DataPress (Dataverse Integration)--DataPress (= Dataverse Integration)</td>
<td>The DataPress (Dataverse Integration) WordPress plugin before 2.91 does=
not properly restrict access to its template rendering feature and exposes=
the viewing user's data to it, allowing users with a role as low as Contri= butor to disclose sensitive information, such as the session cookies of hig= her privileged users who view the affected content.</td>
<td>2026-08-06</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5336" target=3D"= _blank" rel=3D"noopener">CVE-2026-5336</a></td>
</tr>

<td class=3D"vendor-product">decidim--decidim</td>
<td>Decidim is a participatory democracy framework. Prior to 0.30.9, from 0= .31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, the /admin/csv_ce= nsus/census_logs record-management endpoints do not enforce full administra= tor authorization before rendering or mutating Decidim::Verifications::CsvD= atum, allowing a participant manager to create, alter, or remove census rec= ords. This issue is fixed in versions 0.30.9, 0.31.5, and 0.32.0.rc2.</td> <td>2026-08-06</td>
<td>6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45415" target=3D= "_blank" rel=3D"noopener">CVE-2026-45415</a></td>
</tr>

<td class=3D"vendor-product">decidim--decidim</td>
<td>Decidim is a participatory democracy framework. Prior to 0.30.9, from 0= .31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, when VAPID delive=
ry is enabled, the notification subscription flow stores a client-supplied = push endpoint without validating that it belongs to an approved push servic=
e, and SendPushNotification later passes that endpoint to WebPush.payload_s= end, allowing an authenticated user to create stored, mostly blind server-s= ide requests to arbitrary reachable HTTPS endpoints. This issue is fixed in=
versions 0.30.9, 0.31.5, and 0.32.0.rc2.</td>
<td>2026-08-06</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45573" target=3D= "_blank" rel=3D"noopener">CVE-2026-45573</a></td>
</tr>

<td class=3D"vendor-product">decidim--decidim</td>
<td>Decidim is a participatory democracy framework. Prior to 0.30.9, from 0= .31.0 before 0.31.5, and in 0.32.0.rc1 before 0.32.0.rc2, an administrator = with landing-page editing privileges can store arbitrary HTML and JavaScrip=
t in an HTML content block, which Decidim::ContentBlocks::HtmlCell#html_con= tent renders without sanitization, causing the script to execute in visitor=
s' browsers. This issue is fixed in versions 0.30.9, 0.31.5, and 0.32.0.rc2= .</td>
<td>2026-08-06</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45572" target=3D= "_blank" rel=3D"noopener">CVE-2026-45572</a></td>
</tr>

<td class=3D"vendor-product">Deciso B.V.--OPNsense</td>
<td>OPNsense before 26.1.9 contains a stored cross-site scripting vulnerabi= lity that allows authenticated attackers with firewall rule management priv= ileges to inject arbitrary HTML or JavaScript by embedding payloads in the = firewall rule description field via the filter API endpoint. The unsanitize=
d description value is persisted and later rendered through the default cel=
l formatter in opnsense_bootgrid.js, which assigns raw cell content to inne= rHTML, causing injected scripts to execute in the browser of any authentica= ted user who views the Firewall Rules page, enabling session hijacking or c= redential theft.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49131" target=3D= "_blank" rel=3D"noopener">CVE-2026-49131</a></td>
</tr>

<td class=3D"vendor-product">Deciso B.V.--OPNsense</td>
<td>OPNsense before 26.1.9 contains a stored cross-site scripting vulnerabi= lity that allows authenticated attackers to inject arbitrary HTML or JavaSc= ript by embedding payloads in the certificate description field via the tru=
st certificate API. The unsanitized description value is persisted and late=
r rendered in the Dashboard Certificates widget through Certificates.js, wh= ich interpolates the raw value into HTML attribute and text content sinks w= ithout encoding, causing injected scripts to execute in the browser of any = authenticated user who views the Dashboard, enabling session hijacking or c= redential theft.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49132" target=3D= "_blank" rel=3D"noopener">CVE-2026-49132</a></td>
</tr>

<td class=3D"vendor-product">DedeCMS--DedeCMS</td>
<td>A vulnerability has been found in DedeCMS up to 5.7.118 UTF8SP2. The af= fected element is the function _4_Setup of the file install/index.php of th=
e component Installation Wizard. Such manipulation leads to file inclusion.=
The attack can be executed remotely. This attack is characterized by high = complexity. The exploitability is described as difficult. The exploit has b= een disclosed to the public and may be used.</td>
<td>2026-08-09</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19353" target=3D= "_blank" rel=3D"noopener">CVE-2026-19353</a></td>
</tr>

<td class=3D"vendor-product">Dell--Dell OpenManage Server Administrator Man= aged Node (Patch) for Windows</td>
<td>Dell OpenManage Server Administrator, versions prior to 11.1.0.2, conta= ins a Relative Path Traversal vulnerability. A low privileged attacker with=
remote access could potentially exploit this vulnerability, leading to Fil= esystem access for attacker.</td>
<td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56794" target=3D= "_blank" rel=3D"noopener">CVE-2026-56794</a></td>
</tr>

<td class=3D"vendor-product">Dell--Monitor driver</td>
<td>Dell Monitor driver, version 1.0.0.0, contains an Improper Link Resolut= ion Before File Access ('Link Following') vulnerability. A low privileged a= ttacker with local access could potentially exploit this vulnerability, lea= ding to Elevation of Privileges.</td>
<td>2026-08-03</td>
<td>6.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-40717" target=3D= "_blank" rel=3D"noopener">CVE-2026-40717</a></td>
</tr>

<td class=3D"vendor-product">Dell--RVTools</td>
<td>Dell RVTools versions prior to 4.8.1, contains an improper certificate = validation vulnerability in the collector. A remote unauthenticated attacke=
r could potentially exploit this vulnerability leading to loss of confident= iality and integrity.</td>
<td>2026-08-06</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64993" target=3D= "_blank" rel=3D"noopener">CVE-2026-64993</a></td>
</tr>

<td class=3D"vendor-product">dgtlmoon--changedetection.io</td> <td>changedetection.io's /settings save handler builds an update dict from = form.data['application'] and blind-merges it into the stored application se= ttings via .update(). Because WTForms represents an unchecked checkbox as F= alse rather than 'unchanged', and only the 'password' field is special-case=
d against this problem, a POST to /settings that omits the api_access_token= _enabled field (e.g. a minimal scripted request) silently disables API key = enforcement for the entire REST API, exposing the full watch list, history,=
and configuration to unauthenticated requests.</td>
<td>2026-08-05</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71204" target=3D= "_blank" rel=3D"noopener">CVE-2026-71204</a></td>
</tr>

<td class=3D"vendor-product">dgtlmoon--changedetection.io</td> <td>changedetection.io's /login route checks the submitted password against=
a single PBKDF2-HMAC-SHA256 hash with no per-IP or per-session rate limiti= ng, failed-attempt counter, or lockout (no rate-limiting library is present=
in requirements.txt). Because the entire application is protected by one s= hared password with no per-user accounts, a successful brute-force guess gr= ants full administrative access, including the ability to view/regenerate t=
he API token.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71205" target=3D= "_blank" rel=3D"noopener">CVE-2026-71205</a></td>
</tr>

<td class=3D"vendor-product">dgtlmoon--changedetection.io</td> <td>changedetection.io's REST API resources are protected by an @auth.check= _token decorator validating the caller's x-api-key header, except the Spec = resource registered at /api/v1/full-spec (changedetectionio/api/Spec.py), w= hose get() method carries neither @auth.check_token nor @validate_openapi_r= equest. An unauthenticated client can retrieve the full merged OpenAPI sche=
ma (all endpoint paths, parameters, and registered processor plugins) even = when API access control is enabled and every sibling /api/v1/* route correc= tly requires the key.</td>
<td>2026-08-05</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71203" target=3D= "_blank" rel=3D"noopener">CVE-2026-71203</a></td>
</tr>

<td class=3D"vendor-product">diaowen--DWSurvey</td>
<td>A vulnerability was found in diaowen DWSurvey up to 6.14.0. Impacted is=
the function in DwDeisgnSurveyController.devSurvey. of the file /api/dwsur= vey/app/v6/dw-design-survey/dev-survey.do of the component Survey Handler. = The manipulation results in authorization bypass. The attack can be launche=
d remotely. The exploit has been made public and could be used. The vendor = was contacted early about this disclosure but did not respond in any way.</=

<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18722" target=3D= "_blank" rel=3D"noopener">CVE-2026-18722</a></td>
</tr>

<td class=3D"vendor-product">diaowen--DWSurvey</td>
<td>A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The af= fected element is an unknown function of the file /api/dwsurvey/app/survey/= up-survey-status.do of the component Survey Status Handler. This manipulati=
on causes improper authorization. The attack may be initiated remotely. The=
exploit has been publicly disclosed and may be utilized. The vendor was co= ntacted early about this disclosure but did not respond in any way.</td> <td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18723" target=3D= "_blank" rel=3D"noopener">CVE-2026-18723</a></td>
</tr>

<td class=3D"vendor-product">diboot--diboot-core</td>
<td>diboot-core's POST /common/load-related-data endpoint resolves caller-s= upplied field names to any @TableField column of any entity and returns tho=
se values for all rows, with no field or entity allowlist. The only guard, = relatedDataSecurityCheck(), returns true unconditionally, so any authentica= ted user (including a zero-role account) can read @JsonIgnore-annotated sec= ret fields such as IamAccount.authSecret and IamAccount.secretSalt for ever=
y account, or arbitrary secret fields of any other entity. Shiro's two-iter= ation MD5 with an 8-character salt is trivially crackable offline, so the d= isclosed admin password hashes convert to full administrative takeover. The=
endpoint is not example code; the official diboot-admin-ui frontend requir=
es it, so deployments following the vendor's recommended integration expose=
it. The mechanism was renamed relatedData* to attachMore* on the developme=
nt branch, but attachMoreSecurityCheck() also returns true unconditionally.= </td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70557" target=3D= "_blank" rel=3D"noopener">CVE-2026-70557</a></td>
</tr>

<td class=3D"vendor-product">DjangoCRM--django-crm</td>
<td>DjangoCRM's toggle_default_sorting view is the only route in common/url= s.py that is not wrapped in login_required or staff_member_required, and it=
redirects to a caller-supplied next_url GET parameter after only checking = secure_url(next_url), which merely verifies the target host matches the cur= rent site's domain (blocking only cross-domain redirects) while allowing an=
y same-site path with no authentication required to reach the view. This en= ables unauthenticated phishing redirects and referrer-based token leakage v=
ia redirect chains.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71240" target=3D= "_blank" rel=3D"noopener">CVE-2026-71240</a></td>
</tr>

<td class=3D"vendor-product">djangoproject--Django</td>
<td>An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.=
8. `django.contrib.admin.utils.display_for_field()` renders `URLField` valu=
es as clickable links in the admin without validating the URL. A value stor=
ed with an unsafe scheme is displayed as a link on changelist and read-only=
admin pages, which allows cross-site scripting against staff users who cli=
ck the link. Exploitation requires the unsafe value to already be stored in=
the database. `URLField` validation through a `ModelForm` or the admin rej= ects unsafe schemes, so this affects applications that persist `URLField` d= ata without running model validation, for example through direct queryset w= rites, deserialization, or bulk import of untrusted input. Django would lik=
e to thank Egor Saltykov for reporting this issue.</td>
<td>2026-08-04</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15920" target=3D= "_blank" rel=3D"noopener">CVE-2026-15920</a></td>
</tr>

<td class=3D"vendor-product">djangoproject--Django</td>
<td>An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.=
8. `django.utils.translation.check_for_language()` is subject to a potentia=
l denial-of-service attack when given many distinct, very long language cod= es, which are retained as keys in an in-memory cache and consume process me= mory. Such codes reach the function through the `django.views.i18n.set_lang= uage()` view, which is not routed by default. The consumed memory is bounde=
d, since request data is limited by the `DATA_UPLOAD_MAX_MEMORY_SIZE` setti=
ng (default 2.5 MB) and the cache holds a fixed maximum number of entries. = Earlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were n=
ot evaluated and may also be affected. Django would like to thank Jaeyoung = Jang for reporting this issue.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15337" target=3D= "_blank" rel=3D"noopener">CVE-2026-15337</a></td>
</tr>

<td class=3D"vendor-product">djangoproject--Django</td>
<td>An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.=
8. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a poten= tial denial-of-service when parsing deeply nested `GEOMETRYCOLLECTION` obje= cts supplied as well-known text (WKT), well-known binary (WKB), or hex-enco= ded WKB, which triggers unbounded recursion and a segmentation fault in the=
underlying GEOS library. Spatial field lookups and the `django.contrib.gis= .forms.GeometryField` form field are also affected. Earlier, unsupported Dj= ango series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may al=
so be affected. Django would like to thank Andrew MacPherson and kimchunbok=
_ for reporting this issue.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15830" target=3D= "_blank" rel=3D"noopener">CVE-2026-15830</a></td>
</tr>

<td class=3D"vendor-product">dmitriiweb--article-scraper-mcp</td>
<td>A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. T= his vulnerability affects the function fetch_article of the file news_scrap= er_mcp/server.py. The manipulation of the argument url results in server-si=
de request forgery. The attack may be performed from remote. The exploit is=
now public and may be used. The project was informed of the problem early = through an issue report but has not responded yet.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19375" target=3D= "_blank" rel=3D"noopener">CVE-2026-19375</a></td>
</tr>

<td class=3D"vendor-product">documenso--documenso</td>
<td>Documenso's sign-field-with-token.ts, used by the live document-signing=
UI, allows a recipient with the ASSISTANT role to fetch and complete field=
s belonging to any later-or-equal-order, not-yet-signed recipient in the sa=
me envelope, with no restriction on field type. The handler upserts a Signa= ture record tied to the target field's recipientId with no check that field= .type is SIGNATURE and the acting recipient owns it. A newer V2 signing pat=
h (sign-envelope-field.ts) explicitly blocks assistants from completing SIG= NATURE fields, and the project's own test suite comments confirm this guard=
is absent from the V1 path used here. In a sequential-signing document, an=
assistant recipient can therefore forge another signer's signature field.<=

<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71247" target=3D= "_blank" rel=3D"noopener">CVE-2026-71247</a></td>
</tr>

<td class=3D"vendor-product">Dokan, Inc.--Dokan</td>
<td>Custom role Broken Access Control in Dokan <=3D 5.0.10 versions.</td=

<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66699" target=3D= "_blank" rel=3D"noopener">CVE-2026-66699</a></td>
</tr>

<td class=3D"vendor-product">Dolibarr--ERP</td>
<td>A vulnerability has been found in Dolibarr ERP up to 23.0.3. Affected i=
s the function fail of the file htdocs/takepos/invoice.php of the component=
TakePOS Module. Such manipulation leads to missing authorization. The atta=
ck may be performed from remote. The name of the patch is 8992ce8704da947b6= abe7b65a6fe59aed736bb81. It is advisable to implement a patch to correct th=
is issue.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19350" target=3D= "_blank" rel=3D"noopener">CVE-2026-19350</a></td>
</tr>

<td class=3D"vendor-product">Domoticz--Domoticz</td>
<td>Domoticz versions prior to 2026.3 contains a stored cross-site scriptin=
g vulnerability in the mobile dashboard that allows authenticated attackers=
to inject arbitrary HTML and JavaScript by updating Text or Alert subtype = device values through the API. The mobile dashboard renders device data via=
ng-bind-html with only an nl2br() transform that performs no HTML escaping=
, allowing attackers to store malicious payloads that execute in any admini= strator's browser upon viewing the mobile dashboard, enabling session cooki=
e theft and account takeover.</td>
<td>2026-08-07</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11425" target=3D= "_blank" rel=3D"noopener">CVE-2026-11425</a></td>
</tr>

<td class=3D"vendor-product">duckdb--duckdb-aws</td>
<td>The DuckDB AWS extension for DuckDB contains a security policy bypass v= ulnerability that allows any database user with SQL execution permissions t=
o extract plaintext AWS credentials by calling the load_aws_credentials fun= ction with the redact_secret parameter set to false, circumventing the data= base-wide allow_unredacted_secrets=3Dfalse policy. Attackers can invoke thi=
s single function to retrieve the underlying AWS credential chain including=
access_key_id, secret_access_key, session_token, and region in plaintext, = which are immediately valid against AWS APIs and particularly impactful in = managed environments where pg_duckdb is preloaded and an AWS credential cha=
in such as IMDSv2, IRSA, ECS task role, or EC2 instance role is reachable.<=

<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58139" target=3D= "_blank" rel=3D"noopener">CVE-2026-58139</a></td>
</tr>

<td class=3D"vendor-product">Easy Booking--Easy Booking</td>
<td>The Easy Booking WordPress plugin before 3.5.0 does not re-enforce a bo= okable product's configured minimum booking duration on the server side whe=
n adding to cart and calculating the booking price, allowing unauthenticate=
d users to place below-minimum bookings and complete underpriced orders.</t=

<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14831" target=3D= "_blank" rel=3D"noopener">CVE-2026-14831</a></td>
</tr>

<td class=3D"vendor-product">Ehco1996--django-sspanel</td>
<td>A weakness has been identified in Ehco1996 django-sspanel up to 2023.12= .26. This affects the function TicketDetailView of the file apps/sspanel/vi= ews.py of the component Support Ticket Handler. Executing a manipulation ca=
n lead to authorization bypass. The attack can be executed remotely. The ve= ndor was contacted early about this disclosure but did not respond in any w= ay. This vulnerability only affects products that are no longer supported b=
y the maintainer.</td>
<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18818" target=3D= "_blank" rel=3D"noopener">CVE-2026-18818</a></td>
</tr>

<td class=3D"vendor-product">ELAN Microelectronics Corp.--ELAN Smart-Pad</t=

<td>A stack-based buffer overflow vulnerability exists in ELAN Microelectro= nics Corp. ELAN Smart-Pad on Windows (ETD.sys and ETDSMBus.sys). During Int=
el SMBus recovery, ETDSMBus.sys does not enforce an upper-bound check on th=
e hardware-derived report count, allowing an out-of-range value to be forwa= rded to ETD.sys where it is used as a loop counter for a stack buffer copy = without destination size validation. A local attacker with standard user pr= ivileges can trigger a kernel bugcheck (BSOD 0xF7 DRIVER_OVERRAN_STACK_BUFF= ER), resulting in denial of service. This issue affects ELAN Smart-Pad thro= ugh ETD24.21.52.3.</td>
<td>2026-08-06</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18909" target=3D= "_blank" rel=3D"noopener">CVE-2026-18909</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.= 0-beta.3, the check Electron uses on macOS to confirm it was launched by a = same-signed parent process could be bypassed by a local process. Apps that = enable fuse-based hardening restricting ELECTRON_RUN_AS_NODE and NODE_OPTIO=
NS to same-signed parents rely on this check, and a local attacker could by= pass it and run code inside the signed app, inheriting its TCC permissions = and keychain access. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.= 0.0-beta.3.</td>
<td>2026-08-05</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70597" target=3D= "_blank" rel=3D"noopener">CVE-2026-70597</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.= 0-beta.3, extension tab and scripting APIs were not scoped to the extension=
's own session. A malicious or compromised extension loaded into one sessio=
n could navigate, script, and read from windows belonging to a different se= ssion. Apps are only affected if they load Chrome extensions via session.lo= adExtension and rely on separate sessions to isolate that extension from ot= her content. This issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42= .0.0-beta.3.</td>
<td>2026-08-05</td>
<td>6.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70602" target=3D= "_blank" rel=3D"noopener">CVE-2026-70602</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.6, 40.9.0, 41.1.1, and 42.0.= 0-beta.1, shell.openPath() did not reject paths containing embedded null by= tes. Apps that perform string-only validation of file paths, for example ch= ecking the file extension, before passing them to shell.openPath() could be=
bypassed, allowing an attacker-controlled path to open a different file th=
an the one that passed validation. Apps are only affected if they pass path=
s derived from untrusted input to shell.openPath() and rely on string-based=
validation without a filesystem check. This issue is fixed in versions 39.= 8.6, 40.9.0, 41.1.1, and 42.0.0-beta.1.</td>
<td>2026-08-05</td>
<td>6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70603" target=3D= "_blank" rel=3D"noopener">CVE-2026-70603</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.1, and 42.0.= 0-beta.3, the DevTools reveal in file manager action could launch the targe=
t file rather than reveal it. An attacker with a separate means of running = script inside the DevTools frontend, such as a malicious DevTools extension=
, could use showItemInFolder handling to execute native code outside the sa= ndbox when DevTools is opened for windows exposed to untrusted content or u= ntrusted DevTools extensions. This issue is fixed in 39.8.9, 40.9.2, 41.2.1=
, and 42.0.0-beta.3.</td>
<td>2026-08-05</td>
<td>6.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70611" target=3D= "_blank" rel=3D"noopener">CVE-2026-70611</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.= 0-beta.1, serial-port and media permission checks made from an iframe passe=
d the top-level frame origin to session.setPermissionCheckHandler instead o=
f the requesting iframe origin. Origin-based handler logic could grant a cr= oss-origin iframe device access intended only for the top-level origin. Thi=
s issue is fixed in 39.8.7, 40.9.0, 41.2.0, and 42.0.0-beta.1.</td> <td>2026-08-05</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70599" target=3D= "_blank" rel=3D"noopener">CVE-2026-70599</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.= 0-beta.3, when following HTTP redirects, net.fetch() and net.request() did = not restrict which schemes a redirect could target. A remote server could r= edirect a request to a local resource, and if the app returns or forwards t=
he response body, local file contents could be disclosed. Apps are only aff= ected if they make net requests to attacker-influenced URLs with redirects = followed and expose the response body. This issue is fixed in versions 39.8= .8, 40.9.0, 41.2.1, and 42.0.0-beta.3.</td>
<td>2026-08-05</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70605" target=3D= "_blank" rel=3D"noopener">CVE-2026-70605</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 40.10.6, 41.9.1, 42.5.1, and 43.0= .0, when a custom protocol handler returned a ProtocolResponse with a url a=
nd no session, Electron made the upstream request through defaultSession in= stead of the session that handled the protocol. A cached response could the=
n be reused across otherwise isolated session partitions. Apps that use Pro= tocolResponse.url, omit ProtocolResponse.session, and rely on separate sess= ions to isolate content are affected. This issue is fixed in versions 40.10= .6, 41.9.1, 42.5.1, and 43.0.0.</td>
<td>2026-08-05</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70606" target=3D= "_blank" rel=3D"noopener">CVE-2026-70606</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.= 0-beta.3, some window options supplied by web content in the window.open() = features string were applied to the new BrowserWindow without an allowlist.=
Untrusted content could set window options it should not control, includin=
g options that cause the main process to access attacker-chosen file or net= work paths, when untrusted content can call window.open() and the app does = not override child window options via setWindowOpenHandler or overrideBrows= erWindowOptions. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-= beta.3.</td>
<td>2026-08-05</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70607" target=3D= "_blank" rel=3D"noopener">CVE-2026-70607</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.7, 40.9.0, 41.2.0, and 42.0.= 0-beta.1, the mode option of webContents.openDevTools() was not sanitized b= efore use by the DevTools frontend. If an attacker can influence this value=
, script under their control may run in the DevTools context, which in unsa= ndboxed configurations has access to Node.js, including when untrusted inpu=
t reaches the mode argument of openDevTools() or untrusted content calls op= enDevTools() on a webview it embeds. This issue is fixed in 39.8.7, 40.9.0,=
41.2.0, and 42.0.0-beta.1.</td>
<td>2026-08-05</td>
<td>5.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70609" target=3D= "_blank" rel=3D"noopener">CVE-2026-70609</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.9, 40.9.2, 41.2.2, and 42.0.= 0-beta.4, objects copied across the contextBridge boundary from untrusted c= ontent could carry an attacker-influenced prototype, enabling prototype-pol= lution-style attacks against preload code despite context isolation being e= nabled. Apps are only affected if their preload code accepts object argumen=
ts from untrusted content and reads properties from them without own-proper=
ty checks, while apps that only accept primitive arguments or validate obje=
ct arguments are not affected. This issue is fixed in 39.8.9, 40.9.2, 41.2.=
2, and 42.0.0-beta.4.</td>
<td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70610" target=3D= "_blank" rel=3D"noopener">CVE-2026-70610</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.= 0-beta.3, requests to open external protocol URLs from web content did not = take iframe sandbox restrictions into account, so a sandboxed iframe could = cause an OS-registered external application to be launched. The frame sandb=
ox state was also not made available to the app permission handlers, affect= ing apps that render untrusted content in sandboxed iframes and grant the o= penExternal permission by default when no setPermissionRequestHandler is in= stalled. This issue is fixed in 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.<=

<td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70612" target=3D= "_blank" rel=3D"noopener">CVE-2026-70612</a></td>
</tr>

<td class=3D"vendor-product">Endress+Hauser--FDI Package library</td>
<td>A vulnerability in the iDTM FDI allows an attacker with elevated privil= eges and access to the host system to enable the debug interface by placing=
a crafted file in the application directory, potentially resulting in unau= thorized access to connected devices and exposure, modification, or disrupt= ion of device data or operation.</td>
<td>2026-08-03</td>
<td>6.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9593" target=3D"= _blank" rel=3D"noopener">CVE-2026-9593</a></td>
</tr>

<td class=3D"vendor-product">esphome--esphome</td>
<td>ESPHome through 2026.7.0-dev discloses plaintext passwords via its web_= server component. In WebServer::text_json_() (esphome/components/web_server= /web_server.cpp), a text entity configured with mode: password (TEXT_MODE_P= ASSWORD) has its JSON "state" field correctly masked as "********", but the=
same serialization path unconditionally writes the raw password into the J= SON "value" field via set_json_icon_state_value()/set_json_value(). Because=
web_server listens on port 80 with no authentication by default, any attac= ker on the local network can retrieve the plaintext password (e.g. WiFi cre= dentials, API tokens) via GET /text/<entity_id> or the /events EventS= ource stream.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71260" target=3D= "_blank" rel=3D"noopener">CVE-2026-71260</a></td>
</tr>

<td class=3D"vendor-product">Eugeny--russh</td>
<td>Russh is a Rust SSH client & server library. Prior to 0.62.5, russh=
dispatches channel-scoped Handler callbacks for recipient channel IDs that=
were never opened or confirmed in russh/src/server/encrypted.rs, server_re= ad_authenticated, and the exec_request callback. Version 0.62.5 fixes the i= ssue.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68930" target=3D= "_blank" rel=3D"noopener">CVE-2026-68930</a></td>
</tr>

<td class=3D"vendor-product">Eukaryot--sonic3air</td>
<td>Sonic 3 A.I.R. before commit 2492d18 contains a missing source address = validation vulnerability in ConnectionManager where established connections=
are resolved by a two-byte local connection handle alone without verifying=
that the datagram source address matches the registered remote address for=
the connection. An on-path attacker who can observe cleartext UDP traffic = can inject arbitrary packets into any established session by forging the tw= o-byte connection identifier, enabling session termination via TerminateCon= nectionPacket, arbitrary channel message forgery, and forged request respon= ses without requiring IP address spoofing.</td>
<td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66732" target=3D= "_blank" rel=3D"noopener">CVE-2026-66732</a></td>
</tr>

<td class=3D"vendor-product">Event Booking Manager for WooCommerce (Pro)--E= vent Booking Manager for WooCommerce (Pro)</td>
<td>The Event Booking Manager for WooCommerce (Pro) WordPress plugin before=
5.0.3 does not validate the ticket price on the server during its native (= non-WooCommerce) checkout, trusting the per-ticket price supplied by the cl= ient instead of re-deriving the event's configured price. This allows unaut= henticated users to book paid event tickets for free, obtaining completed b= ookings and valid tickets at no cost.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16067" target=3D= "_blank" rel=3D"noopener">CVE-2026-16067</a></td>
</tr>

<td class=3D"vendor-product">Events Made Easy--Events Made Easy</td>
<td>The Events Made Easy WordPress plugin before 3.1.2 does not bind the pa= yment authorization token to the payment record being charged, allowing una= uthenticated attackers to pay a low amount for a cheap booking and have a s= eparate, higher-priced booking marked as fully paid.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14842" target=3D= "_blank" rel=3D"noopener">CVE-2026-14842</a></td>
</tr>

<td class=3D"vendor-product">facelessuser--pymdown-extensions</td>
<td>PyMdown Extensions is a set of extensions for the Python-Markdown markd= own project. In versions up to and including 10.21.3, the b64 extension is = vulnerable to a path traversal that discloses arbitrary files: it inlines i= mages referenced by <img src=3D"..."> by joining the src onto the con= figured base_path with os.path.normpath and opening the result directly, wi= thout verifying that the resolved path stays inside base_path. As a result,=
an src containing ../ sequences or an absolute path reads a file outside b= ase_path as long as it has an allowed image extension (.png, .jpg, .jpeg, .= gif, .svg), and the file's contents are then base64-encoded into the render=
ed output, disclosing them. An application that renders untrusted Markdown = with pymdownx.b64 enabled can therefore leak the contents of image-extensio=
n files readable by the process to whoever controls the Markdown or views t=
he output, a targeted file-read bounded by the extension check. This issue = has been fixed in version 11.0.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61632" target=3D= "_blank" rel=3D"noopener">CVE-2026-61632</a></td>
</tr>

<td class=3D"vendor-product">FFmpeg--FFmpeg</td>
<td>FFmpeg versions from 3.0 up to, but not including, 9.0 contain an unini= tialized heap memory read vulnerability in the native RSCC decoder (libavco= dec/rscc.c) that allows attackers to disclose heap memory contents by suppl= ying a crafted video file with a compressed tile that decompresses fewer by= tes than the declared tile geometry requires. When rscc_decode_frame() call=
s av_image_copy_plane() without validating the decompressed byte count agai= nst the tile dimensions, the unwritten suffix of the persistent intermediat=
e buffer ctx->inflated_buf is copied into the decoded frame, potentially=
exposing data from prior heap allocations or previous decoded frames in pe= rsistent decoding services.</td>
<td>2026-08-06</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70629" target=3D= "_blank" rel=3D"noopener">CVE-2026-70629</a></td>
</tr>

<td class=3D"vendor-product">FFmpeg--FFmpeg</td>
<td>FFmpeg versions from 3.0 up to, but not including, 9.0 contain an unini= tialized heap memory read vulnerability in the native Screenpresso decoder = (libavcodec/screenpresso.c) that allows attackers to recover sensitive memo=
ry contents by supplying a crafted SPV1 packet with a valid zlib stream tha=
t decompresses fewer bytes than the full frame requires. The screenpresso_d= ecode_frame() function fails to validate the produced byte count before cal= ling av_image_copy_plane() to copy the complete frame dimensions from the p= ersistent ctx->inflated_buf buffer, causing unwritten heap memory from p= rior allocations or prior frames to be copied into decoded output and poten= tially exposing sensitive data such as userspace addresses from persistent = decoding services.</td>
<td>2026-08-06</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70630" target=3D= "_blank" rel=3D"noopener">CVE-2026-70630</a></td>
</tr>

<td class=3D"vendor-product">FFmpeg--FFmpeg</td>
<td>FFmpeg versions from 0.5 up to, but not including, 9.0 contain an unini= tialized heap memory disclosure vulnerability in the native TIFF decoder in=
libavcodec/tiff.c. An attacker who can cause FFmpeg to decode a crafted TI=
FF file can supply a valid Deflate-compressed strip that terminates success= fully after producing fewer bytes than the declared strip requires. The tif= f_unpack_zlib() function allocates a heap buffer sized for the full declare=
d strip but copies all declared rows via memcpy() regardless of how many by= tes zlib actually decompressed, causing unwritten bytes that can contain st= ale data from prior heap allocations to be incorporated into decoded image = output and potentially exposing sensitive data in persistent services.</td> <td>2026-08-06</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70631" target=3D= "_blank" rel=3D"noopener">CVE-2026-70631</a></td>
</tr>

<td class=3D"vendor-product">firefly-iii--firefly-iii</td>
<td>Firefly III's webhook URL validator (IsValidWebhookUrl.php) filters mos=
t private/reserved IPv4 ranges but contains an explicit early-return that a= llows any resolved address in 127.0.0.0/8, permitting an authenticated user=
(with webhooks enabled, which is off by default) to configure a webhook ta= rgeting loopback services on the server. Additionally, the validator resolv=
es the target hostname once via gethostbyname() at validation time, but the=
actual outbound request (StandardWebhookSender.php, via Guzzle) re-resolve=
s the hostname independently at send time, allowing a DNS-rebinding attacke=
r to pass validation against a public IP and have the real request delivere=
d to a private or internal address. The webhook response body is only writt=
en to a server-side debug log, not returned to the triggering user, so this=
is a blind SSRF primitive rather than one with direct response read-back.<=

<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71250" target=3D= "_blank" rel=3D"noopener">CVE-2026-71250</a></td>
</tr>

<td class=3D"vendor-product">Five Star Restaurant Reservations--Five Star R= estaurant Reservations</td>
<td>The Five Star Restaurant Reservations WordPress plugin before 2.7.23 do=
es not verify the authenticity of incoming payment notifications, failing t=
o validate the payment recipient, amount, and status or to bind the notific= ation to the intended booking, allowing unauthenticated attackers to mark a= rbitrary pending reservations as paid and confirmed.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15147" target=3D= "_blank" rel=3D"noopener">CVE-2026-15147</a></td>
</tr>

<td class=3D"vendor-product">Flarum--Flarum Framework</td>
<td>Flarum before 1.8.16 contains an improper session invalidation vulnerab= ility that allows attackers who hold a valid session token to retain full a= ccount access after a victim changes their password, because the access_tok= ens table is never cleared on password change events. The TokensClearer::cl= earPasswordTokens() function only removes rows from the password_tokens tab=
le while leaving all active session cookies and API bearer tokens intact, i= ncluding long-lived RememberAccessToken entries, and administrator-forced p= assword resets via the user update endpoint are equally ineffective at revo= king attacker-held sessions.</td>
<td>2026-08-05</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-39924" target=3D= "_blank" rel=3D"noopener">CVE-2026-39924</a></td>
</tr>

<td class=3D"vendor-product">fledge-iot--fledge</td>
<td>Fledge's backup-restore upload handler, upload_backup() (python/fledge/= services/core/api/backup_restore.py), calls tarfile.extractall(temp_path) o=
n an admin-uploaded tar archive with no filter argument and no per-member p= ath validation. A crafted tar archive containing member names with `../` pa=
th components extracts files outside the intended temporary directory, allo= wing arbitrary file writes anywhere on the filesystem reachable by the Fled=
ge process. Requires the admin role (@has_permission("admin")).</td> <td>2026-08-05</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71283" target=3D= "_blank" rel=3D"noopener">CVE-2026-71283</a></td>
</tr>

<td class=3D"vendor-product">Formidable Forms--Formidable Forms</td>
<td>The Formidable Forms WordPress plugin before 6.32.1 does not properly v= alidate the status of a PayPal subscription payment before marking it compl= ete, allowing unauthenticated users to bypass payment and trigger paid form=
actions - such as digital content access, license delivery, and membership=
activation - without being charged.</td>
<td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11361" target=3D= "_blank" rel=3D"noopener">CVE-2026-11361</a></td>
</tr>

<td class=3D"vendor-product">FoundationAgents--MetaGPT</td>
<td>A vulnerability was found in FoundationAgents MetaGPT up to 0.8.2. The = impacted element is the function DataInterpreter of the file metagpt/roles/= di/data_interpreter.py. The manipulation results in code injection. The att= ack must be initiated from a local position. The exploit has been made publ=
ic and could be used. The vendor was contacted early about this disclosure = but did not respond in any way.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19058" target=3D= "_blank" rel=3D"noopener">CVE-2026-19058</a></td>
</tr>

<td class=3D"vendor-product">FoundationAgents--MetaGPT</td>
<td>A vulnerability was identified in FoundationAgents MetaGPT up to 0.8.2.=
This impacts an unknown function. Such manipulation leads to code injectio=
n. The attack needs to be performed locally. The exploit is publicly availa= ble and might be used. The vendor was contacted early about this disclosure=
but did not respond in any way.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19060" target=3D= "_blank" rel=3D"noopener">CVE-2026-19060</a></td>
</tr>

<td class=3D"vendor-product">getgrav--grav-plugin-form</td>
<td>The Grav form plugin (getgrav/grav-plugin-form) before 9.1.13 contains =
an open redirect vulnerability. Since v9.1.11, the redirect process action = evaluates user-supplied form data inside Twig expressions, and Grav::redire= ct() accepts external URLs without origin validation. When a form blueprint=
defines a redirect target such as redirect: "{{ form.value('next') }}" usi=
ng an attacker-controllable field, an unauthenticated form submitter can su= pply a value like https://evil.com to cause a 302 redirect to an arbitrary = external site, enabling phishing.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69087" target=3D= "_blank" rel=3D"noopener">CVE-2026-69087</a></td>
</tr>

<td class=3D"vendor-product">GetPaid--GetPaid</td>
<td>The GetPaid WordPress plugin before 2.8.55 does not verify the authenti= city of incoming Worldpay payment notifications, allowing unauthenticated a= ttackers to forge a notification that marks a pending invoice as paid witho=
ut any payment being made.</td>
<td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12901" target=3D= "_blank" rel=3D"noopener">CVE-2026-12901</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b5702 through b7653 contain an out-of-bounds read vuln= erability in the recurrent memory state restore path that allows attackers = with write access to the slot save directory to read memory past the end of=
the allocated cells array. Attackers can craft a malicious slot file with =
an oversized seq_id value to trigger an out-of-bounds read that leaks heap = data including pointer values into server logs, defeating ASLR protections = and facilitating further exploitation.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-43630" target=3D= "_blank" rel=3D"noopener">CVE-2026-43630</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>llama.cpp builds b1886 through b7445 contain a null pointer dereference=
vulnerability in the LLaMA-Android JNI wrapper where the bench_1model() fu= nction fails to validate the model context pointer before dereferencing it.=
Attackers can supply a malicious, corrupt, or truncated model file to trig= ger a null context condition, causing a SIGSEGV crash that terminates the A= ndroid application process and results in denial of service.</td> <td>2026-08-06</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70639" target=3D= "_blank" rel=3D"noopener">CVE-2026-70639</a></td>
</tr>

<td class=3D"vendor-product">ghostfolio--ghostfolio</td>
<td>Ghostfolio is an open source wealth management software. Prior to versi=
on 3.4.0, Ghostfolio's Stripe checkout success-URL handler at `GET /api/v1/= subscription/stripe/callback?checkoutSessionId=3D<id>` retrieves the = Stripe Checkout Session by ID and unconditionally grants a Premium subscrip= tion to the session's `client_reference_id` - without ever checking `sessio= n.payment_status` or `session.status`. There is no separate Stripe webhook = endpoint with `stripe-signature` verification; this callback is the sole co=
de path that creates Stripe-driven subscriptions. Any authenticated user ca=
n self-grant a 1-year Premium subscription without ever paying. Version 3.4=
.0 rejects sessions unless `session.payment_status =3D=3D=3D 'paid'` AND `s= ession.status =3D=3D=3D 'complete'` (fails closed). Additionally, new uniqu=
e `stripeCheckoutSessionId` column a session can't be redeemed twice (race-= safe via DB unique constraint).</td>
<td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47127" target=3D= "_blank" rel=3D"noopener">CVE-2026-47127</a></td>
</tr>

<td class=3D"vendor-product">GitroomHQ--postiz-app</td>
<td>An issue in the billing and license activation subsystem allows remote = attackers to bypass payment authorization workflows. By exploiting insuffic= ient cryptographic validation or lack of server-side state verification on = promotional/lifetime-deal (LTD) redemption codes, an unauthenticated attack=
er can forge valid redemption tokens or replay existing single-use codes to=
activate permanent, tier-highest paid subscriptions without a financial tr= ansaction.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19127" target=3D= "_blank" rel=3D"noopener">CVE-2026-19127</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--E5800</td>
<td>A security vulnerability has been detected in GL.iNet E5800, E750, X200=
0, X3000, XE3000 and XE300 up to 20260707. Impacted is an unknown function =
of the file /sdk/v1 of the component eSIM LPA API. Such manipulation leads =
to improper authorization. The attack can only be initiated within the loca=
l network. The vendor was contacted early about this disclosure and confirm=
ed the existence of the vulnerability.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18584" target=3D= "_blank" rel=3D"noopener">CVE-2026-18584</a></td>
</tr>

<td class=3D"vendor-product">GL.iNet--MT3000</td>
<td>A vulnerability was detected in GL.iNet MT3000, MT6000, BE9300, BE3600,=
MT3600BE, E5800, BE6500, MT5000, X3000, XE3000 and MT2500 up to 20260707. = The affected element is the function nas-web.get_file_list of the component=
APPS-NAS Module. Performing a manipulation results in heap-based buffer ov= erflow. The attack may be initiated remotely. The vendor was contacted earl=
y about this disclosure and confirmed the existence of the vulnerability.</=

<td>2026-08-03</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18585" target=3D= "_blank" rel=3D"noopener">CVE-2026-18585</a></td>
</tr>

<td class=3D"vendor-product">gm_alex--User Access Manager</td>
<td>The User Access Manager plugin for WordPress is vulnerable to Second-Or= der SQL Injection via the 'id' parameter of the wp_ajax_save-attachment-com= pat AJAX action in versions up to, and including, 2.3.12. This is due to in= sufficient validation on the objectId value stored in the saveAjaxAttachmen= tData() function and subsequent unparameterized concatenation in the addQue= ryExcludedPostFilter() function - the stored value is later retrieved from = the database and used as an array key, then directly imploded into a SQL NO=
T IN() clause without integer casting or prepared statements. This makes it=
possible for authenticated attackers, with subscriber-level access and abo= ve, to append additional SQL queries into already existing queries that can=
be used to extract sensitive information from the database.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15281" target=3D= "_blank" rel=3D"noopener">CVE-2026-15281</a></td>
</tr>

<td class=3D"vendor-product">GNOME--Epiphany</td>
<td>A flaw was found in Epiphany. An issue in how the browser reads web add= resses allows attackers to fake the domain name shown in the address bar. I=
f a user clicks a specially crafted link containing a colon (for example, [= https://trusted.com:80@attacker.com/](https://trusted.com:80@attacker.com/)=
), the address bar and security menus will display the safe website (truste= d.com) but it will actually load the attacker website (attacker.com) on the=
screen. This allows attackers to create convincing phishing pages to trick=
users into trusting a malicious site.</td>
<td>2026-08-06</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18487" target=3D= "_blank" rel=3D"noopener">CVE-2026-18487</a></td>
</tr>

<td class=3D"vendor-product">go-git--go-git</td>
<td>go-git is an extensible git implementation library written in pure Go. = Prior to 5.19.2 and 6.0.0-alpha.5, reference names are not sanitized before=
being used to construct on-disk paths under the reference storage director=
y, so a maliciously crafted reference name (for example containing director= y-traversal sequences) can cause go-git to write files outside the intended=
reference storage directory. Versions 5.19.2 and 6.0.0-alpha.5 fix the iss= ue.</td>
<td>2026-08-07</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71557" target=3D= "_blank" rel=3D"noopener">CVE-2026-71557</a></td>
</tr>

<td class=3D"vendor-product">guzzle--guzzle</td>
<td>Guzzle is an extensible PHP HTTP client. Prior to 7.15.2 and 8.0.1, Set= Cookie::matchesDomain() gives every subdomain of a cookie Domain that cooki=
e unless SetCookie::matchesDomain() recognizes the Domain as an IP literal =
or a numeric host, and the decision comes from the domain's own text, so tw=
o spellings a transport reads as an address keep subdomain scope. Hexadecim=
al and mixed-base forms such as 0x7f000001 and 0177.0.0.0x1 go unrecognized=
while libcurl 8.21.0 reads both as 127.0.0.1. A percent-escaped Domain kee=
ps that scope on both branches because percent-decoding sits above numeric = parsing, so 192.168.0.%31 and 127.0.0.1%2e are registered names in the URI = grammar rather than address literals, and no numeric rule in any base class= ifies them, while libcurl decodes the host before resolving and reads them =
as 192.168.0.1 and 127.0.0.1. A cookie stored for Domain=3D0x7f000001 is pl= aced in the Cookie header of a request to evil.0x7f000001, disclosing a ses= sion identifier or token to a host that is not that address, and a response=
from evil.0x7f000001 setting Domain=3D0x7f000001 is accepted into the jar = and replayed to the address, so a server answering for the look-alike name = can fix a session or set application state. Exploitation requires the appli= cation to enable cookie support, address an origin by one of these spelling=
s, and contact a host whose name ends in that spelling. This issue is fixed=
in versions 7.15.2 and 8.0.1.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69245" target=3D= "_blank" rel=3D"noopener">CVE-2026-69245</a></td>
</tr>

<td class=3D"vendor-product">Handwriting-OCR--handwriting-ocr-mcp-server</t=

<td>A security flaw has been discovered in Handwriting-OCR handwriting-ocr-= mcp-server 0.1.0. Affected by this vulnerability is the function fs.readFil= eSync of the file src/index.ts of the component upload_document. Performing=
a manipulation of the argument File results in path traversal. Attacking l= ocally is a requirement. The project was informed of the problem early thro= ugh an issue report but has not responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19372" target=3D= "_blank" rel=3D"noopener">CVE-2026-19372</a></td>
</tr>

<td class=3D"vendor-product">hapifhir--org.hl7.fhir.core</td>
<td>HAPI FHIR is a complete implementation of the HL7 FHIR standard for hea= lthcare interoperability in Java. Prior to 6.9.11, the hidden scan command = concatenates attacker-controlled Implementation Guide titles, profile title=
s, and source references into scan.html without escaping in Scanner.java. A=
s a result, a user who scans an attacker-supplied IG/profile and then opens=
or publishes the generated local/CI HTML report can trigger stored cross-s= ite scripting, executing attacker-controlled JavaScript in the report's bro= wser context. This issue is fixed in version 6.9.11.</td>

<td>2026-08-07</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62293" target=3D= "_blank" rel=3D"noopener">CVE-2026-62293</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 ar=
e vulnerable to a partial arbitrary file read when configured to use the Va= ult Connect CA provider with JWT or AppRole authentication. A privileged at= tacker with `operator:write` permission may direct Consul to read and forwa=
rd credential files outside the intended scope, potentially leading to the = exfiltration of sensitive secrets from the Consul server host. This vulnera= bility, CVE-2026-19017, is fixed in Consul 2.0.3 and Consul Enterprise 1.21= .17, 1.22.11, and 2.0.3.</td>
<td>2026-08-07</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19017" target=3D= "_blank" rel=3D"noopener">CVE-2026-19017</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.18.0 through 2.0.2 are=
vulnerable to an authenticated denial of service in the Enterprise-to-Comm= unity Edition downgrade path that may allow an authorized caller to crash t=
he Consul server. A caller with config-entry write permission can submit a = service-router configuration entry that causes the agent to exit unexpected= ly. This vulnerability, CVE-2026-19012, is fixed in Consul 2.0.3 and Consul=
Enterprise 1.21.17, 1.22.11, and 2.0.3.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19012" target=3D= "_blank" rel=3D"noopener">CVE-2026-19012</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.2.0 through 2.0.2 are = vulnerable to an uncontrolled resource consumption issue in the Connect CA = roots endpoint that may allow a remote caller to grow the agent's Connect C=
A roots cache without bound, defeating the operator's cache-disable configu= ration. This vulnerability, CVE-2026-19015, is fixed in Consul 2.0.3 and Co= nsul Enterprise 1.21.17, 1.22.11, and 2.0.3.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19015" target=3D= "_blank" rel=3D"noopener">CVE-2026-19015</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.3.0 through 2.0.2 are = vulnerable to an unauthenticated denial of service in several agent HTTP AP=
I endpoints. A remote caller could cause the agent to consume substantial m= emory before the request was rejected. This vulnerability, CVE-2026-19113, =
is fixed in Consul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.0.3.= </td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19113" target=3D= "_blank" rel=3D"noopener">CVE-2026-19113</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.20.1 through 2.0.2 are=
vulnerable to an L7 intention authorization bypass when a service proxy is=
configured with a custom public listener. An authenticated mesh workload m=
ay reach HTTP paths that are blocked by a path-based deny intention. This v= ulnerability, CVE-2026-15970, is fixed in Consul 2.0.3 and Consul Enterpris=
e 1.21.17, 1.22.11, and 2.0.3.</td>
<td>2026-08-07</td>
<td>4.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15970" target=3D= "_blank" rel=3D"noopener">CVE-2026-15970</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.17.0 through 2.0.2 are=
vulnerable to an uncontrolled resource consumption issue in the Connect au= thorization endpoint that may allow a caller to grow the agent's intention-= match cache without bound, defeating the operator's cache-disable configura= tion. This vulnerability, CVE-2026-190124, is fixed in Consul 2.0.3 and Con= sul Enterprise 1.21.17, 1.22.11, and 2.0.3.</td>
<td>2026-08-07</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19014" target=3D= "_blank" rel=3D"noopener">CVE-2026-19014</a></td>
</tr>

<td class=3D"vendor-product">HashiCorp--Consul</td>
<td>Consul Community Edition and Consul Enterprise 1.19.1 through 2.0.2 did=
not enforce the {{session:write}} ACL permission for session deletion oper= ations submitted through the transaction API. An authenticated caller with = network access to the Consul server RPC port could delete arbitrary session=
s without holding the required permission. This vulnerability, CVE-2026-190= 16, is fixed in Consul 2.0.3 and Consul Enterprise 1.21.17, 1.22.11, and 2.= 0.3.</td>
<td>2026-08-07</td>
<td>4.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19016" target=3D= "_blank" rel=3D"noopener">CVE-2026-19016</a></td>
</tr>

<td class=3D"vendor-product">HCL Software--HCL iControl</td>
<td>HCL iControl is affected by Weak SSL/TLS Version Supported vulnerabilit=
y. It was observed that the application was using weak TLS versions such as=
TLS 1.0 and 1.1. These outdated protocols lack modern security features, m= aking them vulnerable to known attacks and exposing sensitive information d= uring data transmission.</td>
<td>2026-08-03</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56609" target=3D= "_blank" rel=3D"noopener">CVE-2026-56609</a></td>
</tr>

<td class=3D"vendor-product">HCLSoftware--HCL Digital Experience and Digita=
l Experience Compose</td>
<td>The default login portlet in HCL Digital Experience and Digital Experie= nce Compose insufficiently protects credentials. =C2=A0Under certain very s= pecific use cases and specific configurations, sensitive information may be=
written to web server logs.=C2=A0 This only affects applications using the=
default login portlet.</td>
<td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-21766" target=3D= "_blank" rel=3D"noopener">CVE-2026-21766</a></td>
</tr>

<td class=3D"vendor-product">heshengtao--super-agent-party</td>
<td>A vulnerability was found in heshengtao super-agent-party up to 0.4.1. = This affects the function get_file_content of the file server.py of the com= ponent execute_tool_manually Endpoint. The manipulation of the argument too= l_name/tool_params results in information disclosure. The attack can be lau= nched remotely. The exploit has been made public and could be used. The ven= dor was contacted early about this disclosure but did not respond in any wa= y.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18974" target=3D= "_blank" rel=3D"noopener">CVE-2026-18974</a></td>
</tr>

<td class=3D"vendor-product">Hewlett Packard Enterprise (HPE)--HPE Integrat=
ed Lights-Out 6 (iLO 6)</td>
<td>A potential denial of service vulnerability exists in HPE Integrated Li= ghts-Out 6 (iLO 6) prior to v1.78.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63457" target=3D= "_blank" rel=3D"noopener">CVE-2026-63457</a></td>
</tr>

<td class=3D"vendor-product">hfiref0x--LightFTP</td>
<td>LightFTP through 2.4 contains multiple data race vulnerabilities in ftp= serv.c that allow anonymous attackers to cause undefined behavior by issuin=
g LIST followed by ABOR commands without authentication. The control thread=
closes data_socket and file_fd descriptors while worker threads concurrent=
ly operate on the same fields in worker_thread_cleanup, allowing stale file=
descriptors to be reassigned by the OS and subsequently used by worker thr= eads on unrelated resources, resulting in potential denial of service.</td> <td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70637" target=3D= "_blank" rel=3D"noopener">CVE-2026-70637</a></td>
</tr>

<td class=3D"vendor-product">HKUDS--nanobot</td>
<td>A security vulnerability has been detected in HKUDS nanobot up to 0.2.1=
. Impacted is the function ExecTool._guard_command/ExecTool._spawn of the f= ile nanobot/agent/tools/shell.py of the component Shell Allowlist Handler. = Such manipulation leads to os command injection. The attack can be executed=
remotely. The exploit has been disclosed publicly and may be used. Upgradi=
ng to version 0.3.0 is recommended to address this issue. The name of the p= atch is 4562. It is advisable to upgrade the affected component. Multiple i= ssues were reported to the project. They reacted with a high level of profe= ssionalism and kindness: "These five reports are variants of the same root = cause: validation of shell commands containing multiple segments, wrappers,=
comments, or chained commands. The issue was fixed by validating every exe= cutable shell segment against the configured allowlist".</td> <td>2026-08-07</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19243" target=3D= "_blank" rel=3D"noopener">CVE-2026-19243</a></td>
</tr>

<td class=3D"vendor-product">HKUDS--nanobot</td>
<td>A vulnerability has been found in HKUDS nanobot up to 0.2.1. This affec=
ts the function _download_image_data_url of the file nanobot/providers/imag= e_generation.py of the component Provider-returned Image URL Handler. The m= anipulation leads to server-side request forgery. It is possible to initiat=
e the attack remotely. The exploit has been disclosed to the public and may=
be used. The identifier of the patch is 5095. It is recommended to apply a=
patch to fix this issue. The vendor explains: "We confirm that provider-re= turned image URLs required the same SSRF protections applied to other netwo=
rk retrieval paths. (...) The patch is currently available on main and is p= lanned for the next patch release, v0.3.1."</td>
<td>2026-08-07</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19246" target=3D= "_blank" rel=3D"noopener">CVE-2026-19246</a></td>
</tr>

<td class=3D"vendor-product">HKUDS--nanobot</td>
<td>A vulnerability was detected in HKUDS nanobot up to 0.2.1. The affected=
element is the function connect_mcp_servers of the file nanobot/agent/tool= s/mcp.py of the component MCP enabledTools Scope Handler. Performing a mani= pulation results in improper access controls. The attack is possible to be = carried out remotely. The exploit is now public and may be used. Upgrading =
to version 0.3.0 is sufficient to fix this issue. The patch is named 4436. = You should upgrade the affected component. Multiple issues were reported to=
the project. They reacted with a high level of professionalism and kindnes=
s: "Both reports describe the same root cause: MCP resource and prompt wrap= pers could be registered outside the intended enabledTools scope. The regis= tration boundary was corrected".</td>
<td>2026-08-07</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19244" target=3D= "_blank" rel=3D"noopener">CVE-2026-19244</a></td>
</tr>

<td class=3D"vendor-product">home-assistant--core</td>
<td>Home Assistant is open source home automation software focused on local=
control and privacy. Prior to 2026.6.1, the Android Companion app is vulne= rable to an open redirect. The app passes the URL fragment from a homeassis= tant://invite deep link into the onboarding flow without ever displaying th=
e destination hostname. Because no screen in the invitation or onboarding f= low shows the parsed server URL before onboarding commits to it, a victim h=
as no way to distinguish a legitimate invite from a malicious one. An attac= ker can craft an invite so that a single tap on the legitimate-looking "Con= nect to my Home Assistant server" button opens their /auth/authorize endpoi=
nt in the URL-less onboarding WebView, presenting a look-alike login page t= hat captures the victim's credentials. Since invitations are intended to on= board brand-new users, targets are especially unlikely to notice the substi= tution. This issue is fixed in version 2026.6.1.</td>
<td>2026-08-07</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59717" target=3D= "_blank" rel=3D"noopener">CVE-2026-59717</a></td>
</tr>

<td class=3D"vendor-product">honojs--hono</td>
<td>Hono is a Web application framework that provides support for any JavaS= cript runtime. Prior to 4.12.34, the built-in CORS middleware, hono/cors, i=
s vulnerable to a regular expression denial of service (ReDoS). During a pr= eflight OPTIONS request, the middleware parses the attacker-controlled Acce= ss-Control-Request-Headers header using a whitespace-tolerant regular expre= ssion whose backtracking makes its running time quadratic in the input leng= th. Because the header value is bounded only by the deployment's maximum HT=
TP header size, a single preflight carrying a long run of whitespace can co= nsume seconds of CPU and block request processing. On runtimes that share o=
ne execution thread across requests, this stalls concurrent requests as wel=
l, and repeated requests can render the service unresponsive. This affects = the default configuration, since the vulnerable path is reached whenever co= rs() is used with an unset or empty allowHeaders. Applications that set a n= on-empty allowHeaders are not affected. This issue is fixed in version 4.12= .34.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69207" target=3D= "_blank" rel=3D"noopener">CVE-2026-69207</a></td>
</tr>

<td class=3D"vendor-product">honojs--hono</td>
<td>Hono is a Web application framework that provides support for any JavaS= cript runtime. From 4.12.0 to 4.12.33, the languageDetector middleware is v= ulnerable to algorithmic complexity denial of service when processing a cra= fted language tag containing a large number of hyphen separated subtags. To=
implement progressive language tag truncation, normalizeLanguage() repeate= dly calls parts.slice(0, i).join('-') for every possible prefix, so the tot=
al amount of string processing grows quadratically with the number of subta= gs. Language values may come from a query parameter, cookie, Accept-Languag=
e header, or URL path, depending on the detector configuration, and the def= ault detector order enables query string, cookie, and header detection, so = applications using languageDetector() may expose this processing to unauthe= nticated requests. An attacker may repeatedly send requests containing long=
, hyphen separated language tags, causing excessive CPU consumption and pre= venting unrelated requests from being processed. This issue is fixed in ver= sion 4.12.34.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71848" target=3D= "_blank" rel=3D"noopener">CVE-2026-71848</a></td>
</tr>

<td class=3D"vendor-product">honojs--hono</td>
<td>Hono is a Web application framework that provides support for any JavaS= cript runtime. From 3.8.0 to 4.12.33, memo() from hono/jsx retains the resu=
lt of a server side render and reuses it for later renders with comparator = equal props, and request scoped values read inside the component take no pa=
rt in that comparison, so a response can contain HTML rendered for another = user's request. Components wrapped with memo() are compared by props alone;=
values read implicitly during rendering, such as JSX Context through creat= eContext() and useContext(), useRequestContext() from hono/jsx-renderer, an=
d getContext() from hono/context-storage, do not participate, and the retai= ned result lives as long as the wrapped component, so it outlives the reque=
st that produced it. A user may receive a response containing HTML rendered=
for another user when both render the same memoized component with compara= tor equal props on the same warm instance, which may disclose another user'=
s account or profile data, disclose request scoped secrets embedded in HTML=
such as CSRF tokens, or expose role specific content to users who should n=
ot receive it. This issue is fixed in version 4.12.34.</td>
<td>2026-08-07</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71850" target=3D= "_blank" rel=3D"noopener">CVE-2026-71850</a></td>
</tr>

<td class=3D"vendor-product">Hubzilla--Hubzilla</td>
<td>Hubzilla 11.2.1 contains a cross-site request forgery vulnerability in = the OAuth2 /authorize endpoint handled by Zotlabs\Module\Authorize::post() = that allows unauthenticated attackers to register arbitrary OAuth2 applicat= ions under an authenticated user's account by submitting a cross-origin POS=
T request without CSRF token or Origin/Referer validation. Attackers can cr= aft a malicious HTML form that autosubmits attacker-chosen OAuth2 parameter=
s including client_id, client_secret, redirect_uri, and scope to silently r= egister a persistent OAuth2 application, enabling interception of future OA= uth2 authorization codes when the victim later authenticates against the at= tacker-controlled client.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70556" target=3D= "_blank" rel=3D"noopener">CVE-2026-70556</a></td>
</tr>

<td class=3D"vendor-product">Hulupeep--mcp-ui-probe</td>
<td>A security flaw has been discovered in Hulupeep mcp-ui-probe up to 0.2.=
0. Affected is the function get_journey/delete_journey/analyze_journey/usag= e_stats of the file src/journey/JourneyStorage.ts of the component Journey/= Usage. The manipulation of the argument journeyId/filename results in path = traversal. The attack requires a local approach. The project was informed o=
f the problem early through an issue report but has not responded yet.</td> <td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19270" target=3D= "_blank" rel=3D"noopener">CVE-2026-19270</a></td>
</tr>

<td class=3D"vendor-product">IBM--Cloud Pak For Business Automation</td>

<td>IBM Cloud Pak For Business Automation 24.0.0, 24.0.1, 25.0.0, and 26.0.=
0 could allow a remote attacker to obtain sensitive information exposed in = manifest files.</td>
<td>2026-08-05</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12762" target=3D= "_blank" rel=3D"noopener">CVE-2026-12762</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 allows authenticated users can ex= ploit a built-in Langflow component to read arbitrary server environment va= riables, exposing sensitive secrets despite security controls intended to d= isable custom components.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10128" target=3D= "_blank" rel=3D"noopener">CVE-2026-10128</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary fi= les from the server filesystem, including other users' uploaded documents, = the JWT signing secret, the SQLite database, and process environment variab= les, by sending a crafted MCP `resources/read` request with a URL-encoded p= ath traversal sequence in the filename.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7646" target=3D"= _blank" rel=3D"noopener">CVE-2026-7646</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 Langflow could allow server-side = request forgery (SSRF) due to incomplete and ineffective SSRF protection en= forcement.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7657" target=3D"= _blank" rel=3D"noopener">CVE-2026-7657</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the us= ername field, allowing attackers to inject path traversal sequences and byp= ass containment checks. This enables multiple severe impacts, including arb= itrary directory deletion, cross-tenant data destruction, and JWT signing k=
ey deletion leading to session invalidation.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7658" target=3D"= _blank" rel=3D"noopener">CVE-2026-7658</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate owners= hip in the deprecated POST /api/v1/build/{flow_id}/vertices endpoint, allow= ing an authenticated user to inject arbitrary graph data into a shared cach=
e for any flow. This may result in cross-user cache pollution, unauthorized=
workflow execution, or denial of service.</td>
<td>2026-08-05</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10547" target=3D= "_blank" rel=3D"noopener">CVE-2026-10547</a></td>
</tr>

<td class=3D"vendor-product">IBM--Langflow OSS</td>
<td>IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal i=
n the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs bec= ause user-supplied knowledge base names are used directly to create file pa= ths without proper sanitization or containment checks. An authenticated att= acker can exploit this flaw to create directories and write files anywhere =
on the server's filesystem.</td>
<td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7869" target=3D"= _blank" rel=3D"noopener">CVE-2026-7869</a></td>
</tr>

<td class=3D"vendor-product">IBM--Maximo Application Suite</td>
<td>IBM Maximo Application Suite 9.2, 9.1, and 9.0 could allow a remote att= acker to tamper with session data due to the use of a weak HMAC session sig= ning secret.</td>
<td>2026-08-05</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18531" target=3D= "_blank" rel=3D"noopener">CVE-2026-18531</a></td>
</tr>

<td class=3D"vendor-product">IBM--Maximo Application Suite</td>
<td>IBM Maximo Application Suite 9.2, 9.1, and 9.0 does not set the secure = attribute on authorization tokens or session cookies. Attackers may be able=
to get the cookie values by sending a http:// link to a user or by plantin=
g this link in a site the user goes to. The cookie will be sent to the inse= cure link and the attacker can then obtain the cookie value by snooping the=
traffic.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15656" target=3D= "_blank" rel=3D"noopener">CVE-2026-15656</a></td>
</tr>

<td class=3D"vendor-product">IBM--QRadar</td>
<td>IBM QRadar 7.6.0.0 through 7.6.0.1, and 7.5.0 through 7.5.0 UP 15 Inter=
im Fix 005 could allow an authenticated privileged user to execute arbitrar=
y commands with normal user privileges on the system due to improper valida= tion of user supplied input.</td>
<td>2026-08-05</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13477" target=3D= "_blank" rel=3D"noopener">CVE-2026-13477</a></td>
</tr>

<td class=3D"vendor-product">Ichigo3766--image-gen-mcp</td>
<td>A vulnerability was identified in Ichigo3766 image-gen-mcp 0.1.0. The i= mpacted element is an unknown function of the file src/index.ts of the comp= onent upscale_images. Such manipulation of the argument output_path leads t=
o path traversal. The attack must be carried out locally. The project was i= nformed of the problem early through an issue report but has not responded = yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19365" target=3D= "_blank" rel=3D"noopener">CVE-2026-19365</a></td>
</tr>

<td class=3D"vendor-product">imple Membership--Simple Membership</td>
<td>The Simple Membership WordPress plugin before 4.7.7 does not verify tha=
t a PayPal payment notification was sent to the site's own configured merch= ant account before activating a membership, allowing unauthenticated users =
to activate or extend a membership using a payment made to an arbitrary Pay= Pal account they control.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14936" target=3D= "_blank" rel=3D"noopener">CVE-2026-14936</a></td>
</tr>

<td class=3D"vendor-product">imranrisal-dev--Student-Management-System</td> <td>A vulnerability was determined in imranrisal-dev Student-Management-Sys= tem 18ea7904c339e0c7b0234724a79c939ce6191def/a8d43a29aaf267e7ca97171d6dbb44= 057bcd7f8c. This affects the function storeProfileImage of the file student= _profile_pic.php of the component Shared Upload Helper. Executing a manipul= ation of the argument choose_file can lead to unrestricted upload. The atta=
ck can be executed remotely. The exploit has been publicly disclosed and ma=
y be utilized. This product implements a rolling release for ongoing delive= ry, which means version information for affected or updated releases is una= vailable. The vendor was contacted early about this disclosure but did not = respond in any way.</td>
<td>2026-08-05</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18927" target=3D= "_blank" rel=3D"noopener">CVE-2026-18927</a></td>
</tr>

<td class=3D"vendor-product">IncomeStreamSurfer--roo-code-memory-bank-mcp-s= erver</td>
<td>A security vulnerability has been detected in IncomeStreamSurfer roo-co= de-memory-bank-mcp-server up to 9dcb2fb5e6b65a35ac1983885a6d4e5621a0081e. T= his affects the function readMemoryBankFile/appendMemoryBankEntry of the fi=
le src/index.ts of the component read_memory_bank_file/append_memory_bank_e= ntry. Such manipulation of the argument file_name leads to path traversal. = The attack must be carried out locally. This product utilizes a rolling rel= ease system for continuous delivery, and as such, version information for a= ffected or updated releases is not disclosed. The project was informed of t=
he problem early through an issue report but has not responded yet.</td> <td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19325" target=3D= "_blank" rel=3D"noopener">CVE-2026-19325</a></td>
</tr>

<td class=3D"vendor-product">indravoyager--xidown</td>
<td>xidown (a yt-dlp/ffmpeg GUI wrapper) builds its yt-dlp command-line inv= ocation (xidown/core/scanner.py and downloader.py) by appending the user-pr= ovided or scanned URL as a bare trailing positional argument, with no '--' = end-of-options marker and no scheme validation anywhere in the codebase. Be= cause yt-dlp parses any argument beginning with '-' as a CLI option rather = than link text, a crafted 'URL' value such as -U (yt-dlp's self-update flag=
) or --exec=3D... is parsed as a real yt-dlp option instead of a URL, alter= ing the tool's control flow before its own URL validation runs. Full code e= xecution via --exec was not demonstrated in the single-URL flow tested, but=
the underlying argument-injection primitive is confirmed and unmitigated a= cross all call sites.</td>
<td>2026-08-05</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71212" target=3D= "_blank" rel=3D"noopener">CVE-2026-71212</a></td>
</tr>

<td class=3D"vendor-product">IT-Recht Kanzlei--Legal Text Connector of the = IT-Recht Kanzlei</td>
<td>Unauthenticated Broken Access Control in Legal Text Connector of the IT= -Recht Kanzlei <=3D 1.0.13 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66452" target=3D= "_blank" rel=3D"noopener">CVE-2026-66452</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A weakness has been identified in itsourcecode Hospital Management Syst=
em 1.0. Affected by this vulnerability is an unknown functionality of the f= ile /servicetype.php. This manipulation of the argument editid causes sql i= njection. It is possible to initiate the attack remotely. The exploit has b= een made available to the public and could be used for attacks.</td> <td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19020" target=3D= "_blank" rel=3D"noopener">CVE-2026-19020</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A security flaw has been discovered in itsourcecode Hospital Management=
System 1.0. The affected element is an unknown function of the file /treat= ment.php. Performing a manipulation of the argument editid results in sql i= njection. Remote exploitation of the attack is possible. The exploit has be=
en released to the public and may be used for attacks.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19067" target=3D= "_blank" rel=3D"noopener">CVE-2026-19067</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A weakness has been identified in itsourcecode Hospital Management Syst=
em 1.0. The impacted element is an unknown function of the file /treatmentd= etail.php. Executing a manipulation of the argument patientid can lead to s=
ql injection. The attack can be executed remotely. The exploit has been mad=
e available to the public and could be used for attacks.</td> <td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19068" target=3D= "_blank" rel=3D"noopener">CVE-2026-19068</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A security vulnerability has been detected in itsourcecode Hospital Man= agement System 1.0. This affects an unknown function of the file /treatment= record.php. The manipulation of the argument editid leads to sql injection.=
The attack is possible to be carried out remotely. The exploit has been di= sclosed publicly and may be used.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19069" target=3D= "_blank" rel=3D"noopener">CVE-2026-19069</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A vulnerability was detected in itsourcecode Hospital Management System=
1.0. This impacts an unknown function of the file /viewadmin.php. The mani= pulation of the argument delid results in sql injection. The attack may be = performed from remote. The exploit is now public and may be used.</td> <td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19070" target=3D= "_blank" rel=3D"noopener">CVE-2026-19070</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A flaw has been found in itsourcecode Hospital Management System 1.0. A= ffected is an unknown function of the file /viewappointment.php. This manip= ulation of the argument delid causes sql injection. It is possible to initi= ate the attack remotely. The exploit has been published and may be used.</t=

<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19071" target=3D= "_blank" rel=3D"noopener">CVE-2026-19071</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A vulnerability was identified in itsourcecode Hospital Management Syst=
em 1.0. This issue affects some unknown processing of the file /viewdoctor.= php. Such manipulation of the argument delid leads to sql injection. The at= tack can be launched remotely. The exploit is publicly available and might =
be used.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19347" target=3D= "_blank" rel=3D"noopener">CVE-2026-19347</a></td>
</tr>

<td class=3D"vendor-product">itsourcecode--Hospital Management System</td> <td>A vulnerability was determined in itsourcecode Hospital Management Syst=
em 1.0. The affected element is an unknown function of the file /viewdoctor= consultancycharge.php. This manipulation of the argument delid causes sql i= njection. The attack is possible to be carried out remotely. The exploit ha=
s been publicly disclosed and may be utilized.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19364" target=3D= "_blank" rel=3D"noopener">CVE-2026-19364</a></td>
</tr>

<td class=3D"vendor-product">Jane-xiaoer--skill-vision-control</td>
<td>A vulnerability has been found in Jane-xiaoer skill-vision-control up t=
o 1.3.0. This vulnerability affects the function getSkillVersionsDir of the=
file src/svc/utils/config.ts. Such manipulation of the argument skillName = leads to path traversal. The attack can only be performed from a local envi= ronment. The project was informed of the problem early through an issue rep= ort but has not responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19335" target=3D= "_blank" rel=3D"noopener">CVE-2026-19335</a></td>
</tr>

<td class=3D"vendor-product">jeequan--jeepay</td>
<td>A vulnerability was identified in jeequan jeepay up to 3.2.9. This vuln= erability affects the function WebSecurityConfig of the file jeepay-manager= /src/main/java/com/jeequan/jeepay/mgr/ctrl/sysuser/SysLogController.java of=
the component PreAuthorize Handler. The manipulation leads to authorizatio=
n bypass. The attack may be initiated remotely. The exploit is publicly ava= ilable and might be used. The vendor was contacted early about this disclos= ure but did not respond in any way.</td>
<td>2026-08-03</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18631" target=3D= "_blank" rel=3D"noopener">CVE-2026-18631</a></td>
</tr>

<td class=3D"vendor-product">Jeff Farthing--Theme My Login</td> <td>Unauthenticated Cross Site Request Forgery (CSRF) in Theme My Login &lt= ;=3D 7.1.14 versions.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66681" target=3D= "_blank" rel=3D"noopener">CVE-2026-66681</a></td>
</tr>

<td class=3D"vendor-product">Jevon-Zhong--Ai-doctor</td>
<td>A vulnerability was detected in Jevon-Zhong Ai-doctor 0.0.1. This vulne= rability affects the function deleteImage of the file ai-doctor-server/src/= filemanagement/filemanagement.service.ts. Performing a manipulation of the = argument imagePath results in path traversal. The attack must be initiated = from a local position. The project was informed of the problem early throug=
h an issue report but has not responded yet.</td>
<td>2026-08-09</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19326" target=3D= "_blank" rel=3D"noopener">CVE-2026-19326</a></td>
</tr>

<td class=3D"vendor-product">jgwhite33--WP TripAdvisor Review Slider</td> <td>The WP TripAdvisor Review Slider plugin for WordPress is vulnerable to = generic SQL Injection via 'curselrevs[]' Parameter in all versions up to, a=
nd including, 14.3 due to insufficient escaping on the user supplied parame= ter and lack of sufficient preparation on the existing SQL query. This make=
s it possible for authenticated attackers, with administrator-level access = and above, to append additional SQL queries into already existing queries t= hat can be used to extract sensitive information from the database.</td> <td>2026-08-05</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11969" target=3D= "_blank" rel=3D"noopener">CVE-2026-11969</a></td>
</tr>

<td class=3D"vendor-product">jhy--jsoup</td>
<td>jsoup is a Java library for working with real-world HTML. From 1.14.3 u= ntil 1.23.1, jsoup's HTML parser could incorrectly handle a malformed tag n= ame ending in a control character, causing the tag to acquire the parsing b= ehavior of a different element. When a custom Safelist permits certain raw-= text elements, this misparsing can cause content that should remain inert t= ext to be emitted as active markup after serialization, potentially resulti=
ng in cross-site scripting. jsoup's built-in Safelists are not affected. Th=
is issue is fixed in version 1.23.1.</td>
<td>2026-08-06</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71497" target=3D= "_blank" rel=3D"noopener">CVE-2026-71497</a></td>
</tr>

<td class=3D"vendor-product">jupyterhub--jupyterhub</td>
<td>JupyterHub is software that allows users to create a multi-user server = for Jupyter notebooks. Prior to 5.5.0, invalid input to form-based login au= thenticators can place an unbounded attacker-controlled username in failed-= login logs, allowing an unauthenticated attacker to consume logging and sto= rage resources. This issue is fixed in version 5.5.0.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54338" target=3D= "_blank" rel=3D"noopener">CVE-2026-54338</a></td>
</tr>

<td class=3D"vendor-product">Justin Kruit--Advanced Custom Fields: Font Awe= some Field</td>
<td>Contributor Broken Access Control in Advanced Custom Fields: Font Aweso=
me Field <=3D 6.1.1 versions.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66678" target=3D= "_blank" rel=3D"noopener">CVE-2026-66678</a></td>
</tr>

<td class=3D"vendor-product">kalcaddle--kodbox</td>
<td>A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerabi= lity affects unknown code of the file /index.php?plugin/msgWarning/action o=
f the component msgWarning Plugin. Executing a manipulation can lead to imp= roper authorization. It is possible to launch the attack remotely. The expl= oit has been published and may be used. The vendor was contacted early abou=
t this disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18720" target=3D= "_blank" rel=3D"noopener">CVE-2026-18720</a></td>
</tr>

<td class=3D"vendor-product">kalcaddle--kodbox</td>
<td>A vulnerability has been found in kalcaddle kodbox 1.67 Build 02. This = issue affects some unknown processing of the file /user/sso/apiLogin of the=
component SSO API Login. The manipulation of the argument callbackUrl lead=
s to open redirect. The attack can be initiated remotely. The exploit has b= een disclosed to the public and may be used. The vendor was contacted early=
about this disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18721" target=3D= "_blank" rel=3D"noopener">CVE-2026-18721</a></td>
</tr>

<td class=3D"vendor-product">kata-containers--kata-containers</td>
<td>Kata Containers is an open source implementation of lightweight Virtual=
Machines (VMs) that perform like containers. In versions prior to 4.0.0, t=
he kata-agent is vulnerable to an authorization bypass in confidential-gues=
t memory management. In Confidential Containers (CoCo) deployments, the kat= a-agent enforces an OPA/Rego-based AgentPolicy that must authorize every tt= RPC API call, forming the security boundary that prevents an untrusted host=
from directing the confidential guest. Two ttRPC methods introduced with t=
he mem-agent feature are missing this authorization check, so an untrusted = host can invoke them unconditionally regardless of the guest's policy confi= guration. When mem-agent is enabled (off by default), this lets the host ta= mper with in-guest memory management by forcing swap, aggressive eviction, =
or compaction, resulting in attacker-controlled availability and performanc=
e degradation of the confidential workload entirely outside the agent-polic=
y boundary. The impact does not include memory disclosure or code execution=
, and severity is bounded by the precondition that mem-agent must be explic= itly enabled. This issue is fixed in version 4.0.0.</td>
<td>2026-08-07</td>
<td>5.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64676" target=3D= "_blank" rel=3D"noopener">CVE-2026-64676</a></td>
</tr>

<td class=3D"vendor-product">Kino-Kafkaesque--ssh-mcp-server</td>
<td>A vulnerability was detected in Kino-Kafkaesque ssh-mcp-server up to 8e= bbbb99b26f80ff6162fe00957c6dec73fbc5a5. Impacted is the function ssh_exec o=
f the file src/index.ts of the component SSH Command Handler. Performing a = manipulation of the argument host/username results in command injection. Th=
e attack requires a local approach. The actual existence of this vulnerabil= ity is currently in question. This product adopts a rolling release strateg=
y to maintain continuous delivery. Therefore, version details for affected =
or updated releases cannot be specified. The project maintainer explains: "= The intended threat model is that this MCP server is a local/trusted tool f=
or an agent to execute commands over SSH, so callers already have meaningfu=
l execution capability through the exposed shell."</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19039" target=3D= "_blank" rel=3D"noopener">CVE-2026-19039</a></td>
</tr>

<td class=3D"vendor-product">Kirachon--context-engine</td>
<td>A vulnerability was determined in Kirachon context-engine up to 1.9.0. = This affects the function execGitCommand of the file src/mcp/utils/gitUtils= .ts of the component review-git-diff Endpoint. Executing a manipulation of = the argument args can lead to command injection. Upgrading to version 1.9.1=
mitigates this issue. This patch is called e0729dcfd3a2b1682a7bff86e717485= 2c03419ba. It is advisable to upgrade the affected component.</td> <td>2026-08-08</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19266" target=3D= "_blank" rel=3D"noopener">CVE-2026-19266</a></td>
</tr>

<td class=3D"vendor-product">klever-io--klever-go</td>
<td>Klever-Go is the Go implementation of the Klever blockchain protocol. I=
n versions prior to 1.7.18, the account-data trie syncers are vulnerable to=
a resource-exhaustion flaw that leaks bounded throttler slots on error pat= hs. In syncDataTrie() (in both userAccountsSyncer.go and kappAccountsSyncer= .go), StartProcessing() reserves a slot from the NumGoRoutinesThrottler, bu=
t the corresponding EndProcessing() is only called on the success path and =
on the duplicate-root early return. As a result, any error from trie.NewTri= e(), trie.NewTrieSyncer(), or trieSyncer.StartSyncing() (including the netw= ork-dependent timeout path) permanently consumes one slot for the lifetime =
of the throttler. An attacker who can repeatedly cause trie-node sync failu= res or timeouts during bootstrap can exhaust the bounded throttler, after w= hich further account-data trie syncs stop making progress and SyncAccounts(=
) returns a timeout. Because epoch bootstrap in syncUserAccountsState() and=
syncKappAccountsState() aborts on any such error, this causes bootstrap to=
fail, a core availability issue affecting fresh, restarting, or resyncing = nodes and validators. This issue is fixed in version 1.7.18.</td> <td>2026-08-07</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49343" target=3D= "_blank" rel=3D"noopener">CVE-2026-49343</a></td>
</tr>

<td class=3D"vendor-product">KS-GEN-AI--jira-mcp-server</td>
<td>A vulnerability was found in KS-GEN-AI jira-mcp-server 0.2.0. This affe= cts the function axios.get of the file src/index.ts of the component add_at= tachment_from_public_url. The manipulation of the argument imageUrl results=
in server-side request forgery. The attack requires a local approach. The = project was informed of the problem early through an issue report but has n=
ot responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19369" target=3D= "_blank" rel=3D"noopener">CVE-2026-19369</a></td>
</tr>

<td class=3D"vendor-product">kubesphere--KubeSphere</td>
<td>KubeSphere's cluster-controller reconciliation (pkg/utils/clusterclient= /clusterclient.go, addCluster) processes every Cluster custom resource's co= nnection configuration and immediately calls Discovery().ServerVersion() ag= ainst the CRD-specified Kubernetes API endpoint, which is parsed only for U=
RL syntax (url.Parse) with no allow/deny-list for loopback, RFC1918 private=
ranges, link-local, or cloud-metadata addresses (e.g. 169.254.169.254). A = user able to create or update a Cluster CRD can force the controller-manage=
r and apiserver pods to issue outbound requests to arbitrary internal or me= tadata endpoints.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71208" target=3D= "_blank" rel=3D"noopener">CVE-2026-71208</a></td>
</tr>

<td class=3D"vendor-product">langchain-ai--langgraph</td>
<td>LangGraph Checkpoint Postgres and SQLite Checkpoint are the Postgres an=
d SQLite implementations of LangGraph's checkpoint saver. Prior to 3.1.1, t=
he langgraph-checkpoint-postgres and langgraph-checkpoint-sqlite packages p= ersisted hierarchical namespaces as a dot joined string and scoped reads by=
matching that string as a simple prefix pattern, so a read scoped to one n= amespace could also match a sibling namespace whose flattened form shares t=
he same leading characters, or a namespace label containing unescaped patte=
rn metacharacters, allowing an authenticated caller to retrieve stored item=
s belonging to another tenant or user through an ordinary scoped search or = list namespaces call, with no crafted input required. This issue is fixed i=
n versions 3.1.1 of langgraph-checkpoint-postgres and langgraph-checkpoint-= sqlite.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71433" target=3D= "_blank" rel=3D"noopener">CVE-2026-71433</a></td>
</tr>

<td class=3D"vendor-product">langchain-ai--langgraphjs</td> <td>@langchain/langgraph-checkpoint-mongodb provides a LangGraph.js Checkpo= intSaver implementation that uses MongoDB for storage. Versions 1.3.0 and b= elow are vulnerable to NoSQL injection: checkpoint identifiers (thread_id, = checkpoint_ns, checkpoint_id) from config.configurable are passed into Mong= oDB find() queries in MongoDBSaver.getTuple() without type enforcement. If =
an attacker supplies an object payload (such as MongoDB operators $gt or $n=
e) instead of a string, it can be interpreted as a query operator, bypassin=
g thread scoping and leaking checkpoints, including pending writes, across = tenants. Applications are at risk if they forward untrusted input into conf= ig.configurable without coercing it to strings or validating it against a s= chema, particularly in multi-tenant or user-isolated setups. Apps that only=
use server-issued, string-typed identifiers with schema validation rejecti=
ng non-string fields are not affected. This issue has been fixed in version=
1.3.1.</td>
<td>2026-08-04</td>
<td>6.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48121" target=3D= "_blank" rel=3D"noopener">CVE-2026-48121</a></td>
</tr>

<td class=3D"vendor-product">langgenius--dify</td>
<td>A security flaw has been discovered in langgenius dify up to 1.14.2. Th=
is issue affects the function jinja2.Template of the file api/core/helper/c= ode_executor/jinja2/jinja2_transformer.py of the component Jinja2 Handler. = The manipulation results in improper neutralization of special elements use=
d in a template engine. The attack may be launched remotely. The exploit ha=
s been released to the public and may be used for attacks. The vendor was c= ontacted early about this disclosure but did not respond in any way.</td> <td>2026-08-03</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18632" target=3D= "_blank" rel=3D"noopener">CVE-2026-18632</a></td>
</tr>

<td class=3D"vendor-product">latepoint--Appointment Booking Plugin LatePoin=
t | Calendar & Scheduling for WordPress</td>
<td>The LatePoint plugin for WordPress is vulnerable to Stored Cross-Site S= cripting via the 'btn_wrapper_classes' attribute of the 'latepoint_resource=
s' shortcode in all versions up to, and including, 5.3.2. This is due to in= sufficient input sanitization and output escaping in the 'locations' branch=
of the 'shortcode_latepoint_resources' function. This makes it possible fo=
r authenticated attackers, with contributor level access and above, to inje=
ct arbitrary web scripts in pages that will execute whenever a user accesse=
s an injected page.</td>
<td>2026-08-06</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5391" target=3D"= _blank" rel=3D"noopener">CVE-2026-5391</a></td>
</tr>

<td class=3D"vendor-product">lavkush-maurya--Student-Registration-System</t=

<td>A vulnerability was determined in lavkush-maurya Student-Registration-S= ystem 1.0. The affected element is an unknown function of the file /student= /changepass.php. Executing a manipulation of the argument oldpass can lead =
to sql injection. It is possible to launch the attack remotely. The exploit=
has been publicly disclosed and may be utilized. The vendor was contacted = early about this disclosure but did not respond in any way.</td> <td>2026-08-05</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18896" target=3D= "_blank" rel=3D"noopener">CVE-2026-18896</a></td>
</tr>

<td class=3D"vendor-product">LeeSinLiang--godot-mcp</td>
<td>A flaw has been found in LeeSinLiang godot-mcp 0.1.0. Affected by this = vulnerability is the function executeOperation of the file src/index.ts of = the component create_scene/add_node. This manipulation of the argument proj= ectPath causes command injection. The attack needs to be launched locally. = The project was informed of the problem early through an issue report but h=
as not responded yet.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19044" target=3D= "_blank" rel=3D"noopener">CVE-2026-19044</a></td>
</tr>

<td class=3D"vendor-product">Lenovo--XClarity Orchestrator</td>
<td>An improper certificate validation vulnerability was reported in multip=
le Lenovo XClarity Orchestrator (LXCO) 2.2.0 microservices that could allow=
an adjacent network attacker to intercept sensitive communications by perf= orming a machine-in-the-middle attack against HTTPS connections during TLS = certificate validation under certain circumstances.</td>
<td>2026-08-04</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16792" target=3D= "_blank" rel=3D"noopener">CVE-2026-16792</a></td>
</tr>

<td class=3D"vendor-product">litestar-org--litestar</td>
<td>Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. =
In versions prior to 2.22.0, an attacker can bypass the allowed hosts valid= ation by omitting the Host header and supplying an X-Forwarded-Host header = set to a whitelisted domain. The AllowedHostsMiddleware trusts the X-Forwar= ded-Host header as a fallback when the Host header is absent. Since X-Forwa= rded-Host is a client-controllable header, this enables host header injecti=
on attacks such as password reset poisoning, cache poisoning, and server-si=
de request routing manipulation. Any application using AllowedHostsConfig i=
s affected when deployed without a reverse proxy that strips X-Forwarded-Ho= st, or when accepting HTTP/1.0 connections. This issue has been fixed in ve= rsion 2.22.0.</td>
<td>2026-08-03</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48061" target=3D= "_blank" rel=3D"noopener">CVE-2026-48061</a></td>
</tr>

<td class=3D"vendor-product">lmammino--oidc-authorizer</td>
<td>A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This = issue affects the function parse_token_from_header of the file src/parse_to= ken_from_header.rs of the component Authorization Header Parsing. The manip= ulation of the argument authorization_token leads to denial of service. Rem= ote exploitation of the attack is possible. The exploit has been disclosed =
to the public and may be used. The vendor was contacted early about this di= sclosure but did not respond in any way.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19362" target=3D= "_blank" rel=3D"noopener">CVE-2026-19362</a></td>
</tr>

<td class=3D"vendor-product">lmammino--oidc-authorizer</td>
<td>A vulnerability was found in lmammino oidc-authorizer up to 0.4.0. Impa= cted is an unknown function of the file src/handler.rs of the component Lam= bda Authorizer. The manipulation results in sensitive information in log fi= les. The attack can be executed remotely. `src/handler.rs` logs raw Authori= zation header values and complete bearer tokens/JWTs on authentication fail= ure paths, potentially exposing credentials through CloudWatch Logs. `src/m= odels.rs` serializes the complete validated JWT claims set with `serde_json= ::to_string(token_claims).unwrap()` and propagates it through `context["jwt= Claims"]` to downstream integrations. This code performs serialization, not=
deserialization, and does not process attacker-controlled `jwtClaims` inpu=
t. The exploit has been made public and could be used. The vendor was conta= cted early about this disclosure but did not respond in any way.</td> <td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19363" target=3D= "_blank" rel=3D"noopener">CVE-2026-19363</a></td>
</tr>

<td class=3D"vendor-product">lock-upme--OPMS</td>
<td>A vulnerability was found in lock-upme OPMS up to 831440f37a92c1568f2e0= 71d5233bc873a9d8b09. The impacted element is an unknown function of the fil=
e controllers/messages/message.go of the component IN Clause Handler. Perfo= rming a manipulation of the argument ids results in sql injection. The atta=
ck is possible to be carried out remotely. This product adopts a rolling re= lease strategy to maintain continuous delivery. Therefore, version details = for affected or updated releases cannot be specified. The vendor was contac= ted early about this disclosure but did not respond in any way.</td> <td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19354" target=3D= "_blank" rel=3D"noopener">CVE-2026-19354</a></td>
</tr>

<td class=3D"vendor-product">Logo Software Industry and Trade Inc.--e-Logo = Purchasing Portal</td>
<td>Improper neutralization of input during web page generation ('cross-sit=
e scripting') vulnerability in Logo Software Industry and Trade Inc. E-Logo=
Purchasing Portal allows Stored XSS. This issue affects e-Logo Purchasing = Portal: before 1.52.</td>
<td>2026-08-06</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8166" target=3D"= _blank" rel=3D"noopener">CVE-2026-8166</a></td>
</tr>

<td class=3D"vendor-product">Lspace-io--lspace-server</td>
<td>A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5a= a8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists= /readFile/writeFile/deleteFile of the file src/core/repository.ts of the co= mponent Repositories File API. Performing a manipulation of the argument fi= lePath results in path traversal. The attack is only possible with local ac= cess. Continious delivery with rolling releases is used by this product. Th= erefore, no version details of affected nor updated releases are available.=
The project was informed of the problem early through an issue report but = has not responded yet.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19054" target=3D= "_blank" rel=3D"noopener">CVE-2026-19054</a></td>
</tr>

<td class=3D"vendor-product">marimo-team--marimo</td>
<td>marimo before 0.23.15 contains a configuration injection vulnerability = that allows notebook authors to exfiltrate operator API keys by embedding a=
malicious base_url in PEP-723 inline script metadata, which is merged into=
session configuration with higher precedence than the operator's own setti= ngs due to insufficient sanitization in sanitize_pyproject_dict. When an op= erator opens the crafted notebook and makes an AI request, marimo resolves = the attacker-controlled base_url from the notebook config while falling bac=
k to the operator's OPENAI_API_KEY environment variable for authentication,=
transmitting the API key to the attacker-controlled endpoint without requi= ring any cell execution.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67618" target=3D= "_blank" rel=3D"noopener">CVE-2026-67618</a></td>
</tr>

<td class=3D"vendor-product">Mark Jaquith--Subscribe to Comments</td> <td>Author Cross Site Scripting (XSS) in Subscribe to Comments <=3D 2.3.=
1 versions.</td>
<td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66706" target=3D= "_blank" rel=3D"noopener">CVE-2026-66706</a></td>
</tr>

<td class=3D"vendor-product">MauricioMilano--coder-api</td>
<td>A security vulnerability has been detected in MauricioMilano coder-api =
up to 1.1.0. Affected is the function createProject of the file src/core/pr= ojects.ts of the component Projects Endpoint. The manipulation leads to com= mand injection. The attack must be carried out locally. The project was inf= ormed of the problem early through an issue report but has not responded ye= t.</td>
<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19284" target=3D= "_blank" rel=3D"noopener">CVE-2026-19284</a></td>
</tr>

<td class=3D"vendor-product">maximeAmini--Atals-Livre</td>
<td>Atals-Livre contains a SQL injection vulnerability that allows attacker=
s to manipulate database queries by passing unsanitized input through a GET=
parameter to the supp() deletion helper function. Attackers can inject mal= icious SQL syntax via the vulnerable GET parameter to perform unauthorized = database operations including data deletion and extraction.</td>

<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69704" target=3D= "_blank" rel=3D"noopener">CVE-2026-69704</a></td>
</tr>

<td class=3D"vendor-product">mealie-recipes--mealie</td>
<td>Mealie's AsyncSafeTransport SSRF guard (mealie/pkgs/safehttp/transport.= py) resolves a target hostname once, checks the resolved IP against private= -range rules, but then issues the actual outbound HTTP request using the or= iginal hostname, which the underlying async transport re-resolves independe= ntly. Because the validated IP is never pinned to the actual connection, a = DNS-rebinding attacker (returning a public IP to the validation lookup and =
a private/metadata IP to the real connection) defeats the guard. This is re= achable by any authenticated user via /api/recipes/create/url, /api/recipes= /test-scrape-url, and /api/recipes/{slug}/image, and the scraper reflects f= etched content back to the requester, allowing an authenticated user to rea=
d internal HTTP services and cloud-metadata endpoints.</td>
<td>2026-08-05</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71210" target=3D= "_blank" rel=3D"noopener">CVE-2026-71210</a></td>
</tr>

<td class=3D"vendor-product">Medixant--RadiAnt DICOM</td>
<td>Opening a crafted DICOM file containing malicious JPEG-compressed pixel=
data triggers an attacker-controlled heap out-of-bounds write, which may a= llow an attacker to remotely execute arbitrary code.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17264" target=3D= "_blank" rel=3D"noopener">CVE-2026-17264</a></td>
</tr>

<td class=3D"vendor-product">Mercado Pago--Mercado Pago payments for WooCom= merce</td>
<td>Unauthenticated Insecure Direct Object References (IDOR) in Mercado Pag=
o payments for WooCommerce <=3D 8.9.0 versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28180" target=3D= "_blank" rel=3D"noopener">CVE-2026-28180</a></td>
</tr>

<td class=3D"vendor-product">metaslider--Slider, Gallery, and Carousel by M= etaSlider Image Slider, Video Slider</td>
<td>The Slider, Gallery, and Carousel by MetaSlider - Image Slider, Video S= lider plugin for WordPress is vulnerable to Stored Cross-Site Scripting via=
'delay' Post Meta Setting in all versions up to, and including, 3.111.0 du=
e to insufficient input sanitization and output escaping. This makes it pos= sible for authenticated attackers, with custom-level access and above, to i= nject arbitrary web scripts in pages that will execute whenever a user acce= sses an injected page. The ml-slider custom post type is registered without=
custom capability restrictions and the ml-slider_settings meta key is unpr= otected, allowing Author-level users to set the malicious delay value via X= ML-RPC custom_fields when creating an ml-slider post.</td>
<td>2026-08-06</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18400" target=3D= "_blank" rel=3D"noopener">CVE-2026-18400</a></td>
</tr>

<td class=3D"vendor-product">mf-yang--openclaw-cn</td>
<td>A vulnerability was found in mf-yang openclaw-cn 2026.2.5. This affects=
an unknown part of the file src/agents/bash-tools.exec.ts of the component=
Ggateway Exec Approval Flow. The manipulation results in incorrect authori= zation. The attack may be performed from remote. The exploit has been made = public and could be used. The project was informed of the problem early thr= ough an issue report but has not responded yet.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19006" target=3D= "_blank" rel=3D"noopener">CVE-2026-19006</a></td>
</tr>

<td class=3D"vendor-product">mf-yang--openclaw-cn</td>
<td>A vulnerability was determined in mf-yang openclaw-cn up to 0.2.1. This=
vulnerability affects the function isApprovedElevatedSender of the file sr= c/auto-reply/reply/reply-elevated.ts. This manipulation causes improper pri= vilege management. It is possible to initiate the attack remotely. The expl= oit has been publicly disclosed and may be utilized. The project was inform=
ed of the problem early through an issue report but has not responded yet.<=

<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19007" target=3D= "_blank" rel=3D"noopener">CVE-2026-19007</a></td>
</tr>

<td class=3D"vendor-product">mf-yang--openclaw-cn</td>
<td>A vulnerability was identified in mf-yang openclaw-cn up to 0.2.1. This=
issue affects the function assertNoSymlinkEscape of the file src/agents/sa= ndbox-paths.ts of the component apply_patch Tool. Such manipulation leads t=
o link following. It is possible to launch the attack remotely. The exploit=
is publicly available and might be used. The project was informed of the p= roblem early through an issue report but has not responded yet.</td> <td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19008" target=3D= "_blank" rel=3D"noopener">CVE-2026-19008</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Improper control of generation of code ('code injection') in Microsoft = Edge (Chromium-based) allows an unauthorized attacker to perform spoofing o= ver a network.</td>
<td>2026-08-03</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65804" target=3D= "_blank" rel=3D"noopener">CVE-2026-65804</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Missing authorization in Microsoft Edge (Chromium-based) allows an unau= thorized attacker to perform tampering locally.</td>
<td>2026-08-03</td>
<td>6.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66311" target=3D= "_blank" rel=3D"noopener">CVE-2026-66311</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Buffer over-read in Microsoft Edge (Chromium-based) allows an authorize=
d attacker to execute code over a network.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66312" target=3D= "_blank" rel=3D"noopener">CVE-2026-66312</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Origin validation error in Microsoft Edge (Chromium-based) allows an un= authorized attacker to perform tampering locally.</td>
<td>2026-08-03</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66313" target=3D= "_blank" rel=3D"noopener">CVE-2026-66313</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Time-of-check time-of-use (toctou) race condition in Microsoft Edge (Ch= romium-based) allows an unauthorized attacker to disclose information over =
a network.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66314" target=3D= "_blank" rel=3D"noopener">CVE-2026-66314</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Server-side request forgery (ssrf) in Microsoft Edge (Chromium-based) a= llows an unauthorized attacker to perform spoofing over a network.</td> <td>2026-08-03</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66325" target=3D= "_blank" rel=3D"noopener">CVE-2026-66325</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Missing authorization in Microsoft Edge (Chromium-based) allows an unau= thorized attacker to execute code over a network.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66326" target=3D= "_blank" rel=3D"noopener">CVE-2026-66326</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Origin validation error in Microsoft Edge (Chromium-based) allows an un= authorized attacker to perform spoofing over a network.</td> <td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66316" target=3D= "_blank" rel=3D"noopener">CVE-2026-66316</a></td>
</tr>

<td class=3D"vendor-product">Microsoft--Microsoft Edge (Chromium-based)</td=

<td>Origin validation error in Microsoft Edge (Chromium-based) allows an un= authorized attacker to perform tampering over a network.</td> <td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66317" target=3D= "_blank" rel=3D"noopener">CVE-2026-66317</a></td>
</tr>

<td class=3D"vendor-product">microweber--microweber</td>
<td>Microweber CMS through 2.0.20 contains a stored cross-site scripting vu= lnerability in the content tagging system that allows admin-authenticated a= ttackers to inject arbitrary JavaScript by submitting malicious payloads vi=
a the tag_names parameter of the GET /api/save_content_admin endpoint, bypa= ssing three independent sanitization controls including XSS middleware that=
ignores GET requests, a strip_unsafe() function that only matches double-q= uoted onerror attributes, and a titlecase normalizer that passes HTML decim=
al entity-encoded payloads through unchanged. Attackers can store malicious=
scripts that execute without user interaction for every visitor to the pub= lic blog page and within the admin post editor, enabling session riding thr= ough same-origin fetch requests using the CSRF token embedded in the page.<=

<td>2026-08-03</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67617" target=3D= "_blank" rel=3D"noopener">CVE-2026-67617</a></td>
</tr>

<td class=3D"vendor-product">miguelcobain--ember-dynamic-render-template</t=

<td>The render-template component of ember-dynamic-render-template (addon/c= omponents/render-template.js) passes its `templateString` property directly=
into Ember/Glimmer's compileTemplate() (from @ember/template-compilation) = with no sanitization, allow-listing, or validation of the input. Because co= mpileTemplate() dynamically compiles and renders the supplied string as a l= ive Handlebars/Glimmer template, any application that renders attacker-infl= uenced data through this component's templateString property is exposed to = client-side template injection: an attacker-controlled Handlebars expressio=
n is compiled and executed in the context of the rendering component, which=
can be leveraged for cross-site scripting depending on what helpers/contex=
t are exposed to the compiled template.</td>
<td>2026-08-05</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71286" target=3D= "_blank" rel=3D"noopener">CVE-2026-71286</a></td>
</tr>

<td class=3D"vendor-product">MIMICLab--mcp-pdf-vision</td>
<td>A vulnerability was identified in MIMICLab mcp-pdf-vision 1.1.0. The im= pacted element is the function load_pdf of the file src/index.ts. Such mani= pulation of the argument pdfPath/sessionId leads to command injection. The = attack can only be performed from a local environment. The project was info= rmed of the problem early through an issue report but has not responded yet= .</td>
<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19279" target=3D= "_blank" rel=3D"noopener">CVE-2026-19279</a></td>
</tr>

<td class=3D"vendor-product">MingSoft--MCMS</td>
<td>A vulnerability was identified in MingSoft MCMS up to 3.0.6. This impac=
ts an unknown function of the file /mdiy/form/data/list of the component ms= -mdiy. The manipulation leads to information disclosure. It is possible to = initiate the attack remotely. The exploit is publicly available and might b=
e used. The vendor was contacted early about this disclosure but did not re= spond in any way.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19356" target=3D= "_blank" rel=3D"noopener">CVE-2026-19356</a></td>
</tr>

<td class=3D"vendor-product">MingSoft--MCMS</td>
<td>A security flaw has been discovered in MingSoft MCMS up to 3.0.6. Affec= ted is an unknown function of the file /mdiy/form/get of the component ms-m= diy. The manipulation results in information disclosure. It is possible to = launch the attack remotely. The exploit has been released to the public and=
may be used for attacks. The vendor was contacted early about this disclos= ure but did not respond in any way.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19357" target=3D= "_blank" rel=3D"noopener">CVE-2026-19357</a></td>
</tr>

<td class=3D"vendor-product">MissionSquad--mcp-api</td>
<td>A flaw has been found in MissionSquad mcp-api up to 1.11.9. The affecte=
d element is an unknown function of the file src/services/dcrClients.ts. Ex= ecuting a manipulation can lead to server-side request forgery. The attack = may be performed from remote. Upgrading to version 1.11.10 is sufficient to=
fix this issue. This patch is called f068ab4ad6f0907ac7001b995588c2673f11a= 755. You should upgrade the affected component.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19040" target=3D= "_blank" rel=3D"noopener">CVE-2026-19040</a></td>
</tr>

<td class=3D"vendor-product">MissionSquad--mcp-api</td>
<td>A vulnerability has been found in MissionSquad mcp-api up to 1.11.8. Th=
e impacted element is the function this.packageService.installPackage of th=
e file src/controllers/packages.ts of the component NPM Package Version Han= dler. The manipulation leads to command injection. It is possible to initia=
te the attack remotely. Upgrading to version 1.11.9 is sufficient to resolv=
e this issue. The identifier of the patch is a40f54d4533ba6618e1749383a2459= 00eeb024c1. The affected component should be upgraded.</td>

<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19041" target=3D= "_blank" rel=3D"noopener">CVE-2026-19041</a></td>
</tr>

<td class=3D"vendor-product">Mobi-Com Polska Sp. z o.o.--stunnel</td>
<td>A stack-based out-of-bounds read vulnerability exists in the "s_vlog" f= unction of stunnel, when handling oversized log messages via "vsnprintf". A=
remote attacker with network access to a stunnel service can send protocol=
inputs that trigger a log message longer than 1024 bytes, leading to an ou= t-of-bounds stack read and a potential crash. In certain corner cases, the = same vulnerability could be used to replace a series of trailing "\n" chara= cters with " ".</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70368" target=3D= "_blank" rel=3D"noopener">CVE-2026-70368</a></td>
</tr>

<td class=3D"vendor-product">Mobi-Com Polska Sp. z o.o.--stunnel</td>
<td>A Server-Side Request Forgery (SSRF) bypass vulnerability exists in "st= unnel" 5.79 and lower when configured in SOCKS proxy mode. This flaw allows=
a client to bypass intended localhost restrictions by using IPv4-mapped IP=
v6 addresses (e.g., "::ffff:127.0.0.1") or unspecified addresses ("0.0.0.0"=
, "::"), enabling access to loopback-only services on the "stunnel" host th=
at should not be network-reachable.</td>
<td>2026-08-04</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70367" target=3D= "_blank" rel=3D"noopener">CVE-2026-70367</a></td>
</tr>

<td class=3D"vendor-product">MonomythDevelopment--la-forge-mcp</td>
<td>A security vulnerability has been detected in MonomythDevelopment la-fo= rge-mcp 1.0.0. This issue affects the function screenshotElement of the fil=
e src/index.ts of the component screenshot_element Tool. Such manipulation =
of the argument output_name leads to path traversal. The attack can be exec= uted remotely. Upgrading to version 1.1.1 is capable of addressing this iss= ue. The name of the patch is 1102172c9adec4a619e241efd6bfb74f5b1f4332. Upgr= ading the affected component is advised. The vendor was contacted early, re= sponded in a very professional manner and quickly released a fixed version =
of the affected product.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19038" target=3D= "_blank" rel=3D"noopener">CVE-2026-19038</a></td>
</tr>

<td class=3D"vendor-product">MZ Automation--libiec61850</td>
<td>A vulnerability was found in MZ Automation libiec61850 up to 1.6.1. The=
affected element is the function deleteDataSetValuesShadowBuffer of the fi=
le src/iec61850/server/mms_mapping/reporting.c of the component URCB Revali= dation. The manipulation results in use after free. The attack needs to be = approached locally. The exploit has been made public and could be used. Upg= rading to version 1.6.2 is sufficient to fix this issue. The patch is ident= ified as 486fd57f3aed65bb9d636ff00f9ddce2e450b168. Upgrading the affected c= omponent is advised.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19108" target=3D= "_blank" rel=3D"noopener">CVE-2026-19108</a></td>
</tr>

<td class=3D"vendor-product">MZ Automation--libiec61850</td>
<td>A security flaw has been discovered in MZ Automation libiec61850 up to = 1.6.1. This affects the function SVReceiver_stopThreadless of the file src/= sampled_values/sv_subscriber.c of the component ASDU Element Handler. Perfo= rming a manipulation results in heap-based buffer overflow. The attack must=
be initiated from a local position. The exploit has been released to the p= ublic and may be used for attacks. Upgrading to version 1.6.2 is able to mi= tigate this issue. The patch is named a96bd674e0238276dd1387d31d52e55229d07= 71e. The affected component should be upgraded.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19206" target=3D= "_blank" rel=3D"noopener">CVE-2026-19206</a></td>
</tr>

<td class=3D"vendor-product">MZ Automation--libiec61850</td>
<td>A vulnerability has been found in MZ Automation libiec61850 up to 1.6.1=
. The affected element is the function MmsMapping_varAccessSpecToObjectRefe= rence of the file src/iec61850/common/iec61850_common.c of the component MM=
S Protocol Workflow. Such manipulation of the argument GetNamedVariableList= AttributesResponse.itemId leads to heap-based buffer overflow. The attack m= ust be carried out locally. The exploit has been disclosed to the public an=
d may be used. The project was informed of the problem early through an iss=
ue report but has not responded yet.</td>
<td>2026-08-08</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19259" target=3D= "_blank" rel=3D"noopener">CVE-2026-19259</a></td>
</tr>

<td class=3D"vendor-product">mz-automation--libiec61850</td>
<td>A security flaw has been discovered in mz-automation libiec61850 up to = 1.6.1. This vulnerability affects the function Reporting_RCBWriteAccessHand= ler of the file src/iec61850/server/mms_mapping/reporting.c of the componen=
t Report Sending Path Handler. The manipulation results in free of memory n=
ot on the heap. It is possible to launch the attack remotely. The exploit h=
as been released to the public and may be used for attacks. Upgrading to ve= rsion 1.6.2 is able to resolve this issue. The patch is identified as 5b2a6= 9f44256b8548927d8afdd7ac5f5381abe1e. It is suggested to upgrade the affecte=
d component. The vendor was contacted early about this disclosure.</td> <td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18582" target=3D= "_blank" rel=3D"noopener">CVE-2026-18582</a></td>
</tr>

<td class=3D"vendor-product">mz-automation--libiec61850</td>
<td>A weakness has been identified in mz-automation libiec61850 up to 1.6.1=
. This issue affects the function checkDataSetAccess of the file src/iec618= 50/server/mms_mapping/mms_mapping.c of the component MMS Request Handler. T= his manipulation causes out-of-bounds read. The attack can be initiated rem= otely. The exploit has been made available to the public and could be used = for attacks. Upgrading to version 1.6.2 is capable of addressing this issue=
. Patch name: 062062daf4cb50c7aa76e01d6fb4d58fc9278a7d. Upgrading the affec= ted component is recommended. The vendor was contacted early about this dis= closure.</td>
<td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18583" target=3D= "_blank" rel=3D"noopener">CVE-2026-18583</a></td>
</tr>

<td class=3D"vendor-product">nanocoai--NanoClaw</td>
<td>A vulnerability was detected in nanocoai NanoClaw up to 2.0.64. Affecte=
d is the function handleCreateAgent of the file src/modules/agent-to-agent/= create-agent.ts of the component Child-Agent Creation. Performing a manipul= ation results in improper privilege management. Remote exploitation of the = attack is possible. The exploit is now public and may be used. The project = was informed of the problem early through an issue report but has not respo= nded yet.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19005" target=3D= "_blank" rel=3D"noopener">CVE-2026-19005</a></td>
</tr>

<td class=3D"vendor-product">nearai--ironclaw</td>
<td>A vulnerability was identified in nearai ironclaw up to 0.29.1. Affecte=
d is the function classify_command_risk of the file src/tools/builtin/shell= .rs. Such manipulation leads to command injection. The attack may be launch=
ed remotely. The exploit is publicly available and might be used. The name =
of the patch is a1d7c3ba428ed575900469b207fb5668725f9a71. Applying a patch =
is advised to resolve this issue.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18980" target=3D= "_blank" rel=3D"noopener">CVE-2026-18980</a></td>
</tr>

<td class=3D"vendor-product">NellyW8--MCP4EDA</td>
<td>A security vulnerability has been detected in NellyW8 MCP4EDA 1.0.0. Af= fected by this vulnerability is an unknown functionality of the component r= un_openlane/view_waveform. The manipulation of the argument design_name/vcd= _file leads to command injection. Local access is required to approach this=
attack. The project was informed of the problem early through an issue rep= ort but has not responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19332" target=3D= "_blank" rel=3D"noopener">CVE-2026-19332</a></td>
</tr>

<td class=3D"vendor-product">netease-youdao--LobsterAI</td>
<td>A flaw has been found in netease-youdao LobsterAI 2026.6.10. This affec=
ts the function parseMediaTokensFromText of the file src/renderer/services/= artifactParser.ts of the component MEDIA Path Handler. This manipulation ca= uses information disclosure. The attack is possible to be carried out remot= ely. The exploit has been published and may be used. The project was inform=
ed of the problem early through an issue report but has not responded yet.<=

<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18995" target=3D= "_blank" rel=3D"noopener">CVE-2026-18995</a></td>
</tr>

<td class=3D"vendor-product">netty--netty</td>
<td>Netty is an asynchronous, event-driven network application framework. P= rior to 4.1.136.Final and 4.2.16.Final, the RedisArrayAggregator Redis code=
c clears retained partial aggregate state when the maxNestedArrayDepth limi=
t is exceeded, but it does not clear the same state when the sibling maxEle= ments limit is exceeded. A peer can start a valid RESP array, send a bulk s= tring child, then send a nested array header longer than the configured max= Elements. Netty throws a decoder exception in decodeRedisArrayHeader, but t=
he existing partial aggregate remains retained in the handler. If the appli= cation leaves the channel alive after the exception, later messages are sti=
ll consumed into the pre-error aggregate, allowing an unauthenticated peer =
to keep attacker-controlled aggregate state alive across a security-limit e= xception and pin retained pooled buffers. This issue is fixed in versions 4= .1.136.Final and 4.2.16.Final.</td>
<td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56818" target=3D= "_blank" rel=3D"noopener">CVE-2026-56818</a></td>
</tr>

<td class=3D"vendor-product">NewType--WebEIP</td>
<td>A vulnerability was detected in NewType WebEIP up to 3.0. This affects =
an unknown part of the file /EIP_Com_FileList.aspx. The manipulation result=
s in improper authentication. It is possible to launch the attack remotely.=
The exploit is now public and may be used. The vendor was contacted early = about this disclosure but did not respond in any way.</td>
<td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18610" target=3D= "_blank" rel=3D"noopener">CVE-2026-18610</a></td>
</tr>

<td class=3D"vendor-product">Nexcess--Gutenberg Blocks by Kadence Blocks</t=

<td>Contributor Sensitive Data Exposure in Gutenberg Blocks by Kadence Bloc=
ks <=3D 3.7.8 versions.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66696" target=3D= "_blank" rel=3D"noopener">CVE-2026-66696</a></td>
</tr>

<td class=3D"vendor-product">NightTrek--Ollama-mcp</td>
<td>A flaw has been found in NightTrek Ollama-mcp up to 80cf2e17cfc144963a4= 75b619093a2d13c13dbc9. This affects an unknown part of the file src/index.t=
s. This manipulation of the argument name/modelfile/source/destination caus=
es command injection. The attack can only be executed locally. This product=
is using a rolling release to provide continious delivery. Therefore, no v= ersion details for affected nor updated releases are available. The project=
was informed of the problem early through an issue report but has not resp= onded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19334" target=3D= "_blank" rel=3D"noopener">CVE-2026-19334</a></td>
</tr>

<td class=3D"vendor-product">NightTrek--Supabase-MCP</td>
<td>A vulnerability was detected in NightTrek Supabase-MCP cc994ab2d2a36b0a= f6ee7c7f3e6ce8e08cda2170/db03237d92f7dc2f0da0d70a87dba84ebcde5b66. Affected=
by this issue is some unknown functionality of the component generate_type=
s. The manipulation of the argument schema results in command injection. Th=
e attack needs to be approached locally. The project was informed of the pr= oblem early through an issue report but has not responded yet.</td> <td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19333" target=3D= "_blank" rel=3D"noopener">CVE-2026-19333</a></td>
</tr>

<td class=3D"vendor-product">Nikolaibibo--claude-comfyui-mcp</td>
<td>A vulnerability was identified in Nikolaibibo claude-comfyui-mcp 1.0.0.=
Affected is the function copyFileSync of the file src/tools/utils.ts of th=
e component comfy_upload_image. Such manipulation of the argument image_pat=
h leads to path traversal. An attack has to be approached locally. The proj= ect was informed of the problem early through an issue report but has not r= esponded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19371" target=3D= "_blank" rel=3D"noopener">CVE-2026-19371</a></td>
</tr>

<td class=3D"vendor-product">Ninja Forms--Ninja Forms</td>
<td>The Ninja Forms WordPress plugin before 3.14.10 does not prevent user-s= upplied query-string input, used to pre-populate a form field's default val= ue, from being processed as a shortcode, allowing unauthenticated attackers=
to execute arbitrary shortcodes registered on the site when a form so conf= igured is embedded on a public page.</td>
<td>2026-08-06</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15256" target=3D= "_blank" rel=3D"noopener">CVE-2026-15256</a></td>
</tr>

<td class=3D"vendor-product">NocteDefensor--LudusMCP</td>
<td>A vulnerability has been found in NocteDefensor LudusMCP 1.0.24. Affect=
ed by this vulnerability is an unknown functionality of the file src/tools/= rangeConfig.ts of the component read_range_config. The manipulation of the = argument Source leads to server-side request forgery. The attack may be ini= tiated remotely. The project was informed of the problem early through an i= ssue report but has not responded yet.</td>
<td>2026-08-09</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19367" target=3D= "_blank" rel=3D"noopener">CVE-2026-19367</a></td>
</tr>

<td class=3D"vendor-product">NocteDefensor--LudusMCP</td>
<td>A weakness has been identified in NocteDefensor LudusMCP up to 1.0.24. = The affected element is the function SecretDialog.showSecretDialog of the f= ile src/utils/secretDialog.ts of the component get_credential_from_user. Th=
is manipulation of the argument Description causes command injection. It is=
possible to launch the attack on the local host. The project was informed =
of the problem early through an issue report but has not responded yet.</td=

<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19045" target=3D= "_blank" rel=3D"noopener">CVE-2026-19045</a></td>
</tr>

<td class=3D"vendor-product">NocteDefensor--LudusMCP</td>
<td>A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. Th=
is affects the function executeArbitraryCommand/executeCommand of the file = src/ludusMCP/cliWrapper.ts of the component ludus_cli_execute. Performing a=
manipulation of the argument command/args results in command injection. Th=
e attack needs to be approached locally. The project was informed of the pr= oblem early through an issue report but has not responded yet.</td> <td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19047" target=3D= "_blank" rel=3D"noopener">CVE-2026-19047</a></td>
</tr>

<td class=3D"vendor-product">NocteDefensor--LudusMCP</td>
<td>A flaw has been found in NocteDefensor LudusMCP up to 1.0.24. Affected =
is an unknown function of the file src/tools/insertCredsRangeConfig.ts of t=
he component insert_creds_range_config. Executing a manipulation of the arg= ument configPath/outputPath can lead to path traversal. The attack is restr= icted to local execution. The project was informed of the problem early thr= ough an issue report but has not responded yet.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19366" target=3D= "_blank" rel=3D"noopener">CVE-2026-19366</a></td>
</tr>

<td class=3D"vendor-product">NousResearch--hermes-agent</td>
<td>A vulnerability was detected in NousResearch hermes-agent up to 2026.6.=
5. Affected by this issue is the function _check_slash_access of the file g= ateway/run.py of the component Quick Command Handler. The manipulation resu= lts in incorrect authorization. The attack can be launched remotely. The ex= ploit is now public and may be used. The vendor was contacted early about t= his disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18773" target=3D= "_blank" rel=3D"noopener">CVE-2026-18773</a></td>
</tr>

<td class=3D"vendor-product">NousResearch--hermes-agent</td>
<td>A flaw has been found in NousResearch hermes-agent up to 0.16.0. This a= ffects the function save_url_image of the file agent/image_gen_provider.py =
of the component xAI Image Generation Provider. This manipulation causes se= rver-side request forgery. The attack may be initiated remotely. The exploi=
t has been published and may be used. The vendor was contacted early about = this disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18774" target=3D= "_blank" rel=3D"noopener">CVE-2026-18774</a></td>
</tr>

<td class=3D"vendor-product">NousResearch--hermes-agent</td>
<td>A vulnerability has been found in NousResearch hermes-agent up to 0.16.=
0. This vulnerability affects the function browser_snapshot of the file too= ls/browser_tool.py of the component Browser Tooling. Such manipulation lead=
s to server-side request forgery. The attack may be launched remotely. The = exploit has been disclosed to the public and may be used. The vendor was co= ntacted early about this disclosure but did not respond in any way.</td> <td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18775" target=3D= "_blank" rel=3D"noopener">CVE-2026-18775</a></td>
</tr>

<td class=3D"vendor-product">NousResearch--hermes-agent</td>
<td>A vulnerability was determined in NousResearch hermes-agent up to 0.16.=
0. This impacts the function get_tool_definitions of the file agent/agent_i= nit.py of the component disabled_toolsets Handler. This manipulation causes=
incorrect privilege assignment. The attack may be initiated remotely. The = exploit has been publicly disclosed and may be utilized. The project was in= formed of the problem early through an issue report.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18976" target=3D= "_blank" rel=3D"noopener">CVE-2026-18976</a></td>
</tr>

<td class=3D"vendor-product">NousResearch--hermes-agent</td>
<td>A vulnerability was detected in NousResearch hermes-agent up to 0.16.0.=
Affected by this issue is some unknown functionality of the file hermes-ag= ent/model_tools.py of the component Memory Toolset. The manipulation result=
s in improper access controls. The attack can be executed remotely. The exp= loit is now public and may be used.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18993" target=3D= "_blank" rel=3D"noopener">CVE-2026-18993</a></td>
</tr>

<td class=3D"vendor-product">nuxt--nuxt</td>
<td>Nuxt is an open-source web development framework for Vue.js. From 3.1.0=
until 3.21.10 and 4.5.1, an attacker can supply a top-level `as` prop to t=
he /__nuxt_island/ endpoint and drive dynamic component resolution through = <component :is>, resolveDynamicComponent, or h(). This issue is fixed=
in 3.21.10 and 4.5.1.</td>
<td>2026-08-05</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71318" target=3D= "_blank" rel=3D"noopener">CVE-2026-71318</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux examples and recipes contain a vulnerability wh= ere an attacker could cause a system failure. A successful exploit of this = vulnerability might lead to code execution, data tampering, denial of servi= ce, and information disclosure.</td>
<td>2026-08-04</td>
<td>6.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47619" target=3D= "_blank" rel=3D"noopener">CVE-2026-47619</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker coul=
d cause a race condition in the LoRA manager singleton initialization. A su= ccessful exploit of this vulnerability might lead to data tampering and den= ial of service.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47620" target=3D= "_blank" rel=3D"noopener">CVE-2026-47620</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker coul=
d cause a race condition in the LoRA manager singleton initialization. A su= ccessful exploit of this vulnerability might lead to denial of service and = data tampering.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47621" target=3D= "_blank" rel=3D"noopener">CVE-2026-47621</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Dynamo</td>
<td>NVIDIA Dynamo for Linux contains a vulnerability where an attacker coul=
d cause the generation of error messages that contain sensitive information=
. A successful exploit of this vulnerability might lead to information disc= losure.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47622" target=3D= "_blank" rel=3D"noopener">CVE-2026-47622</a></td>
</tr>

<td class=3D"vendor-product">NVIDIA--Triton Inference Server</td>
<td>NVIDIA Triton Inference Server for Linux contains a vulnerability where=
a user could cause files outside the model repository to be read, written = to, or modified by providing a path in the model name to the Triton MLflow = plugin. A successful exploit of this vulnerability might lead to denial of = service and information disclosure.</td>
<td>2026-08-04</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47487" target=3D= "_blank" rel=3D"noopener">CVE-2026-47487</a></td>
</tr>

<td class=3D"vendor-product">nxp-auto-goldvip--gvip</td>
<td>A security vulnerability has been detected in nxp-auto-goldvip gvip up =
to 1.4.0. Affected by this issue is the function SitewiseCustomFunction of = the component Lambda Function Handler. Such manipulation leads to improper = access controls. The attack can be launched remotely. Upgrading to version = 1.15.0 can resolve this issue. Upgrading the affected component is advised.=
The project explains: "The reported IAM permission configuration is a know=
n historical issue that was already addressed in 2024, beginning with GoldV=
IP version 1.13.0. The permissions were updated in subsequent releases, inc= luding version 1.15.0. In addition, we also sent a request to either update=
or deprecate the older release in the AWS SAR application repository."</td=

<td>2026-08-09</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19359" target=3D= "_blank" rel=3D"noopener">CVE-2026-19359</a></td>
</tr>

<td class=3D"vendor-product">o6--open62541</td>
<td>A vulnerability was found in o6 open62541 up to 1.5.5. This issue affec=
ts the function UA_Client_readNodeClassAttribute of the file src/client/ua_= client_highlevel.c. Performing a manipulation results in heap-based buffer = overflow. Attacking locally is a requirement. The exploit has been made pub= lic and could be used. The project closed the issue report, stating that th=
is is not the official way to report a security vulnerability.</td> <td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18784" target=3D= "_blank" rel=3D"noopener">CVE-2026-18784</a></td>
</tr>

<td class=3D"vendor-product">o6--open62541</td>
<td>A vulnerability was determined in o6 open62541 ca356b088ada7dee824d1b4a= cd07c1ff07ce242b. Impacted is the function UA_Client_getRemoteDataTypes of = the file examples/custom_datatype/client_types_custom.c. Executing a manipu= lation can lead to use after free. It is possible to launch the attack on t=
he local host. The exploit has been publicly disclosed and may be utilized.=
The project closed the issue report, stating that this is not the official=
way to report a security vulnerability.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18785" target=3D= "_blank" rel=3D"noopener">CVE-2026-18785</a></td>
</tr>

<td class=3D"vendor-product">odysseus-dev--odysseus</td>
<td>Odysseus before commit 87babb5 contains a server-side request forgery v= ulnerability that allows admin-privileged attackers to direct the server to=
probe internal network resources by supplying arbitrary URLs to the embedd= ing endpoint configuration without scheme, host, IP range, or DNS rebind va= lidation. Attackers can submit loopback addresses, RFC 1918 ranges, or link= -local addresses through the embedding endpoint API to partially read respo= nses from cloud instance metadata services, internal APIs, and other hosts = reachable from the server.</td>
<td>2026-08-04</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70620" target=3D= "_blank" rel=3D"noopener">CVE-2026-70620</a></td>
</tr>

<td class=3D"vendor-product">OMICRON electronics GmbH--OMICRON StationGuard= </td>
<td>OMICRON StationGuard 4.00 contains an improper input validation vulnera= bility in its IEC 61850 Sampled Values (SV) frame processing. A specially c= rafted SV frame can cause the affected process to terminate, disrupting ale=
rt processing for Sampled Values traffic. The vulnerability does not affect=
overall system availability or the processing of other traffic types, and = the process is automatically restarted, and the failure is immediately repo= rted to the user.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16316" target=3D= "_blank" rel=3D"noopener">CVE-2026-16316</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.5, the `add-to-tu= nnel` endpoint creates a new appointment row in any client tunnel without a=
ny caller authentication. A request that supplies any valid `tunnelId` and = any valid `emailHash` (the two need not belong to the same tunnel) results =
in an inserted appointment with `status =3D "CONFIRMED"`, attacker-controll=
ed ciphertext fields, attacker-controlled date and duration, and an attacke= r-chosen agent. The endpoint validates only that some tunnel exists with th=
e given `emailHash`, then writes the appointment using the attacker-supplie=
d `tunnelId` directly. The `emailHash` lookup is effectively an existence c= heck on the tenant; it does not authenticate the caller as the owner of the=
supplied `tunnelId`. Combined with the absence of any session, Authorizati=
on header, booking access token, or PoW, this makes the endpoint accept arb= itrary appointment writes into arbitrary tunnels. By contrast, the sibling = endpoint `create-new-client` (used to bootstrap a brand-new client tunnel) = requires a Bearer bootstrap booking access token issued by the bootstrap-ch= allenge / bootstrap-verify flow. The `add-to-tunnel` endpoint, intended for=
return-clients booking additional appointments, has no equivalent gate. Th=
e application's own middleware confirms this is intentional: `add-to-tunnel=
` is explicitly listed in the apiAuthHandle public-route allowlist alongsid=
e the bootstrap and challenge endpoints (which legitimately have no session=
). Version 1.0.5 fixes the issue.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48075" target=3D= "_blank" rel=3D"noopener">CVE-2026-48075</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. The new-client booking flow in version=
s 1.0.1 and prior consists of three calls: `bootstrap-challenge` (returns a=
16-bit PoW challenge with `difficulty=3D4` leading hex zeroes), `bootstrap= -verify` (validates the PoW and issues a Bearer booking access token), and = `create-new-client` (consumes the token and creates the tunnel and first ap= pointment). The token correctly binds to `tenantId`, `tunnelId`, `clientPub= licKey`, and `emailHash`, but never to `channelId`. The `bootstrap-challeng=
e` request schema does not even accept a `channelId`, and the issued token'=
s payload contains no channel information. Independently, the service funct= ion `createNewClientWithAppointment` checks only `channel.archived =3D fals= e`. The `channel.isPublic` check that protects `addAppointmentToTunnel` is = missing in the new-client path. The combination means: an attacker complete=
s the bootstrap flow normally (16-bit PoW, completes in well under one seco=
nd on commodity hardware, no rate limiting beyond the throttle store), rece= ives a valid booking access token, and then submits the `create-new-client`=
payload with `channelId` pointing to a private (`isPublic =3D false`) chan= nel. The booking lands as `CONFIRMED` if the target channel has `requiresCo= nfirmation =3D false` (the default), otherwise as `NEW`. The patient-facing=
UI does not list private channels in its picker (`/api/public/channels` co= rrectly filters `isPublic =3D true`), so the channel ID must be obtained ou=
t of band. The companion finding V-10 (schedule endpoint discloses private = channels) provides exactly that: a single unauthenticated GET reveals every=
private channel ID for any tenant. V-10 plus V-11 together make private ch= annels fully reachable to anonymous attackers. As of time of publication, n=
o known patched versions are available.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48076" target=3D= "_blank" rel=3D"noopener">CVE-2026-48076</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.2, the `/api/log`=
endpoint accepts unauthenticated POST requests, applies no schema validati=
on to the message body, writes attacker-controlled content directly into th=
e application's stdout log, interprets newline characters as real line brea= ks, and enforces no size or rate limits. Three independent abuse modes foll= ow: log injection (forge log lines that look like legitimate system events)=
, log volume DoS (saturate the logging pipeline at sustained 100+ requests = per second of small messages), and oversized-payload submission (100 KB pay= loads accepted; larger sizes not tested). The most operationally damaging m= ode is log injection. An attacker can inject lines that an operator scannin=
g logs would mistake for real system errors, mask their own activity behind=
fake noise, or pollute SIEM alerting rules with crafted false positives. A=
line such as `[error]: injected admin error` injected from an unauthentica= ted source is indistinguishable from the application's own error output onc=
e written to disk. Version 1.0.2 fixes the issue.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48083" target=3D= "_blank" rel=3D"noopener">CVE-2026-48083</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.4, the PIN-type c= hallenge throttle uses `emailHash` as the only key. The throttle rows live =
in the central `challenge_throttle` table, which is shared across all tenan= ts. Every tenant's `/api/tenants/{id}/appointments/verify-challenge` endpoi=
nt increments the same row when a PIN response fails, and every tenant's `/= api/tenants/{id}/appointments/challenge` endpoint reads the same row when d= eciding whether to issue a new challenge. When the same `emailHash` exists =
in multiple tenants on the same OpenReception instance (the same patient ho= lding tunnels in two different clinics that share the platform), an attacke=
r who knows the patient's email can lock out that patient on tenant B by is= suing failed challenge responses against tenant A. The attacker needs no re= lationship to tenant B; the lockout propagates through the shared throttle = row. The lockout escalates with repeated failures. The first lockout trigge=
rs at 4 failed attempts and lasts approximately 60 seconds. Subsequent fail= ures escalate the lockout duration to 5 minutes, 30 minutes, and 60 minutes=
per the throttle service's escalation logic. Repeated bursts produce susta= ined denial of service against the targeted email. Version 1.0.4 patches th=
e issue.</td>
<td>2026-08-06</td>
<td>5.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48071" target=3D= "_blank" rel=3D"noopener">CVE-2026-48071</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.1.0, the GET handle=
r at `/api/tenants/{id}/appointments/{appointmentId}` performs no authoriza= tion check before returning the appointment record. Any party who knows or = obtains a valid appointment UUID receives the full row, including channel a=
nd agent IDs, time and timezone, status, and the AES-GCM ciphertext compone= nts (`encryptedPayload`, `iv`, `authTag`, `dataKey`). The same file's DELET=
E handler calls `checkPermission(locals, tenantId, true)` before allowing d= eletion. The intent is clear: appointment records are tenant-scoped and req= uire authentication to access. The GET handler is missing the equivalent ca= ll. The middleware chain (`apiAuthHandle`, `authGuard`) does not compensate=
: API paths bypass `authGuard` entirely, and `apiAuthHandle` does not block=
requests to non-admin paths when no token is present. Version 1.1.0 patche=
s the issue.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48077" target=3D= "_blank" rel=3D"noopener">CVE-2026-48077</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.5, the unauthenti= cated `/api/tenants/{id}/schedule` endpoint returns every non-archived chan= nel for a tenant regardless of the channel's `isPublic` flag. Channels mark=
ed `isPublic =3D false` are intended to be invisible to public callers; the=
dashboard creates them deliberately to hide internal-only services from th=
e patient booking UI. The schedule endpoint ignores the flag entirely and d= iscloses channel names, descriptions, IDs, agent associations, pause status=
, confirmation requirements, and computed slot availability for the request=
ed date range. The asymmetry between `addAppointmentToTunnel` (which enforc=
es `eq(channel.isPublic, true)`) and the schedule endpoint (which does not)=
confirms the design intent: private channels exist as a real access bounda=
ry in the booking flow, just not in the schedule disclosure. Version 1.0.5 = patches the issue.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48078" target=3D= "_blank" rel=3D"noopener">CVE-2026-48078</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. Prior to 0.11.0, Open WebUI resolved a hostname during URL v= alidation and rejected private, loopback, and link-local addresses, but the=
HTTP clients resolved the hostname again at connection time. An authentica= ted attacker who controlled authoritative DNS for a submitted hostname coul=
d answer with a public address during validation and an internal one during=
connection, reaching cloud metadata, loopback admin APIs, or internal serv= ices through URL ingest, chat image_url fetches, image editing, or OAuth pr= ofile-picture fetches, with most paths returning the response to the attack=
er and the OAuth path forwarding the OAuth access token. This issue is fixe=
d in 0.11.0.</td>
<td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54020" target=3D= "_blank" rel=3D"noopener">CVE-2026-54020</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.0 until 0.11.0, automation recurrence parsing in ba= ckend/open_webui/utils/automations.py anchored minutely and hourly rules at=
a fixed date of 2000-01-01 and then walked forward one interval at a time =
to find the next run. A single FREQ=3DMINUTELY rule enumerates roughly a qu= arter-century of occurrences synchronously on the event loop that also serv=
es scheduler, HTTP, and WebSocket traffic, and the scheduler recomputes the=
next run for every claimed row on each poll. This causes availability impa=
ct for every other user of the instance. This issue is fixed in 0.11.0.</td=

<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70489" target=3D= "_blank" rel=3D"noopener">CVE-2026-70489</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.8.8 until 0.11.0, the terminal WebSocket route in bac= kend/open_webui/routers/terminals.py authenticated its own first-message JW=
T and never applied the verified-user role gate that get_verified_user enfo= rces on HTTP terminal routes. An account whose role is pending, including a=
registered but unapproved account or an account deactivated back to pendin=
g, can open an interactive terminal session when at least one terminal serv=
er is configured and its access grants cover the account. This loses the ac= count-approval boundary for terminal access while the HTTP terminal routes = correctly reject the same account. This issue is fixed in 0.11.0.</td> <td>2026-08-04</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70490" target=3D= "_blank" rel=3D"noopener">CVE-2026-70490</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. In 0.10.2 and earlier, the GET /api/v1/tools/, GET /api/v1/t= ools/list, and GET /api/v1/tools/id/{id} endpoints in backend/open_webui/ro= uters/tools.py returned full Python tool source to authenticated non-admin = read-only users. ToolResponse deliberately omitted source and specs, but To= olUserResponse permitted extra fields and handlers spread a full tool model=
dump into the response, re-admitting omitted fields. A non-admin with a re=
ad grant can obtain another user's server-side tool source, which commonly = embeds hard-coded API keys, credentials, and internal service URLs. This is= sue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70491" target=3D= "_blank" rel=3D"noopener">CVE-2026-70491</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.6 until 0.11.0, the built-in knowledge search path =
in backend/open_webui/tools/knowledge_fs.py and backend/open_webui/tools/bu= iltin.py let a chat participant choose a pattern used to grep knowledge fil= es. Patterns containing regex metacharacters were compiled with Python's ba= cktracking re engine and run against every line of every reachable file wit=
h no time limit, so a crafted pattern such as (x|x)*y and one matching uplo= aded file line can pin one CPU core and block the event loop. This causes a= vailability impact for every other user of the affected worker. This issue =
is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70493" target=3D= "_blank" rel=3D"noopener">CVE-2026-70493</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.5.0 until 0.11.0, the standard channel message update=
and delete handlers accepted any caller holding write access on the channe=
l without checking that the caller wrote the message. Because write access =
is the same grant a member needs to post, any ordinary participant in a sha= red standard channel could rewrite or permanently delete another participan=
t message, while group and direct message handlers enforced authorship. Thi=
s issue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70481" target=3D= "_blank" rel=3D"noopener">CVE-2026-70481</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.8.8 until 0.11.0, inline direct model metadata accept=
ed client-supplied knowledge attachments without filtering them against the=
caller's read access. Any authenticated user who knew another user's file =
id could have the builtin knowledge tools return indexed chunks from that f= ile, causing a read-only cross-user confidentiality loss while leaving know= ledge-base permissions and saved workspace model validation unaffected. Thi=
s issue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70487" target=3D= "_blank" rel=3D"noopener">CVE-2026-70487</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.6.34 until 0.11.0, Open WebUI renders vega and vega-l= ite fenced code blocks in chat content by building a Vega view in the viewe=
r browser without a restricted resource loader. Any user who can place such=
a block where another user will see it can make that user browser issue at= tacker-chosen outbound GET requests and read responses from same-origin or = CORS-permissive targets into the rendered page. This issue is fixed in 0.11= .0.</td>
<td>2026-08-04</td>
<td>4.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70480" target=3D= "_blank" rel=3D"noopener">CVE-2026-70480</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.7.0 until 0.11.0, the legacy chat-completions feature=
s block trusted a client-supplied image_generation flag and did not re-chec=
k the features.image_generation permission that the direct image routes and=
native function-calling path enforce. An authenticated user whose image-ge= neration permission had been revoked could still consume the operator's con= figured image provider through chat completions, spending API credits and p= rovider quota and writing generated files to operator storage, without expo= sing provider credentials or other users' data. This issue is fixed in 0.11= .0.</td>
<td>2026-08-04</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70484" target=3D= "_blank" rel=3D"noopener">CVE-2026-70484</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.6 until 0.11.0, the sync cleanup endpoint authorize=
d write access to the knowledge base in the URL but then acted on directory=
and file ids supplied in the request body without checking that those obje= cts belonged to that knowledge base. A user with write access to one knowle= dge base could delete directories and remove file embeddings from another k= nowledge base, causing documents to drop out of retrieval results and break= ing chat-with-file for targeted documents without disclosing contents. This=
issue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70488" target=3D= "_blank" rel=3D"noopener">CVE-2026-70488</a></td>
</tr>

<td class=3D"vendor-product">openbao--openbao</td>
<td>OpenBao is an open source identity-based secrets management system. Pri=
or to version 2.5.4, in OpenBao's Kerberos auth method on the `GET` handler=
, or when an `Authorization: Negotiate` header is supplied, the response is=
includes a `logical.Auth` object in addition to an error message. This res= ults in tokens being created with only the default policy, default TTL, and=
no entity information, which are hidden by the returned error message. No = access to these tokens by the caller occurs and the authentication token is=
not ever made accessible outside of `sys/raw`. This is fixed in OpenBao v2= .5.4. As a workaround, users may set a rate limit quota to limit the creati=
on of these paths. As the path is unauthenticated, it isn't possible to den=
y access to it.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46405" target=3D= "_blank" rel=3D"noopener">CVE-2026-46405</a></td>
</tr>

<td class=3D"vendor-product">openemr--openemr</td>
<td>OpenEMR through 8.2.0 contains a stored cross-site scripting vulnerabil= ity in the patient portal template system that allows authenticated adminis= trators to inject arbitrary HTML and JavaScript by storing malicious payloa=
ds through the template save mode, which only filters literal PHP open tags=
. Attackers can exploit the lack of output encoding at the template retriev=
al endpoint combined with missing HttpOnly cookie attributes to exfiltrate = session tokens via document.cookie access, enabling full session hijacking =
of any admin, clinician, or portal patient who views a poisoned template.</=

<td>2026-08-03</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67612" target=3D= "_blank" rel=3D"noopener">CVE-2026-67612</a></td>
</tr>

<td class=3D"vendor-product">OpenHands--OpenHands</td>
<td>A vulnerability was determined in OpenHands up to 0.62.0. The affected = element is the function initialize_repo of the file OpenHands/resolver/send= _pull_request.py. This manipulation causes command injection. Remote exploi= tation of the attack is possible. The vendor deleted the original GitHub is= sue report. It appears that the affected path/file got removed in version 1= .7.0.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19022" target=3D= "_blank" rel=3D"noopener">CVE-2026-19022</a></td>
</tr>

<td class=3D"vendor-product">openshwprojects--OpenBK7231T_App</td> <td>OpenBK7231T's /cfg_wifi_set endpoint (src/httpserver/http_fns.c) accept=
s configuration changes via a plain GET request with no CSRF token. If the = `web_admin_password_enabled` parameter is absent from the request, an else-= branch silently clears the device's web admin password to an empty string. =
A one-click CSRF payload (e.g. an <img> tag pointing at /cfg_wifi_set=
with new SSID/password parameters and web_admin_password_enabled omitted) = visited by an authenticated admin's browser both hijacks the device's WiFi = configuration and disables its web password protection.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71273" target=3D= "_blank" rel=3D"noopener">CVE-2026-71273</a></td>
</tr>

<td class=3D"vendor-product">openshwprojects--OpenBK7231T_App</td> <td>OpenBK7231T's http_fn_ota_exec() (src/httpserver/http_fns.c) reflects t=
he `host` query parameter directly into an HTML response via hprintf255(req= uest, "<h3>OTA requested for %s!</h3>", tmpA) with no HTML enco= ding, allowing a crafted URL such as /ota_exec?host=3D<script>alert(1= )</script> to execute JavaScript in an authenticated admin's browser = when they click a malicious link.</td>
<td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71275" target=3D= "_blank" rel=3D"noopener">CVE-2026-71275</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. =
In versions prior to 3.6.6 and 4.0.0-rc1, the find_line_delimiter() functio=
n in the multipart body parser performs an out-of-bounds read via strncmp()=
when searching for MIME boundary delimiters. After finding a -- pattern ne=
ar the end of the body, the function compares delimiter.len bytes (typicall=
y 20-70) starting from a position at or past the logical end of the body bu= ffer, reading past the body boundary. The bug triggers when a SIP message h=
as Content-Type: multipart/mixed with a boundary parameter and its body con= tains -- within two to three bytes of the body's end without being followed=
by the actual boundary delimiter. This issue has been fixed in versions 3.= 6.6 and 4.0.0-rc1.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45705" target=3D= "_blank" rel=3D"noopener">CVE-2026-45705</a></td>
</tr>

<td class=3D"vendor-product">OpenStack--Ironic</td>
<td>In OpenStack Ironic through 38.0.0, a project reader that makes a craft=
ed request to Ironic can return Portgroups assigned to Nodes owned or lease=
d by another project.</td>
<td>2026-08-05</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71201" target=3D= "_blank" rel=3D"noopener">CVE-2026-71201</a></td>
</tr>

<td class=3D"vendor-product">osCommerce--osCommerce</td>
<td>A security flaw has been discovered in osCommerce 4.14.63493. Affected =
by this issue is the function EmailController of the file app/lib/backend/c= ontrollers/EmailController.php of the component Email Template Configuratio=
n. Performing a manipulation of the argument email_templates_key results in=
sql injection. It is possible to initiate the attack remotely. The exploit=
has been released to the public and may be used for attacks. The vendor wa=
s contacted early about this disclosure but did not respond in any way.</td=

<td>2026-08-03</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18592" target=3D= "_blank" rel=3D"noopener">CVE-2026-18592</a></td>
</tr>

<td class=3D"vendor-product">owen2345--camaleon-cms</td>
<td>Camaleon CMS through 2.9.2, fixed in commit 88ab703, contains a missing=
authorization vulnerability on the drafts endpoint that allows any authent= icated low-privileged user to create draft posts by bypassing role and perm= ission checks. Attackers can send requests to the drafts endpoint using onl=
y session authentication to create unauthorized drafts that appear in the a= dministrative drafts queue.</td>
<td>2026-08-03</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67616" target=3D= "_blank" rel=3D"noopener">CVE-2026-67616</a></td>
</tr>

<td class=3D"vendor-product">paperless-ngx--paperless-ngx</td> <td>Paperless-ngx's MailAccountViewSet.test() action, when called with an e= xisting account's ID and a masked password field, reuses the stored passwor=
d, account_type, refresh_token, and expiration from that existing account w= hile allowing the caller to supply a different imap_server, imap_port, and = imap_security in the same request. The test connection then authenticates t=
o the caller-specified server using the real stored credentials. A user hol= ding only object-level change_mailaccount permission on the target account = (not full admin) can redirect the test connection to an attacker-controlled=
IMAP host, causing the real stored IMAP password or OAuth token to be sent=
to that host.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71244" target=3D= "_blank" rel=3D"noopener">CVE-2026-71244</a></td>
</tr>

<td class=3D"vendor-product">perspective-dev--perspective</td>
<td>Perspective 5.0.0 contains a denial of service vulnerability that allow=
s remote attackers to block the server event loop indefinitely by submittin=
g a crafted expression containing unbounded for or while loop constructs in=
a TableMakeViewReq message. Attackers can embed an arbitrarily large itera= tion count in an expression column evaluated once per table row, causing th=
e Tornado IOLoop to block without any iteration cap, deadline, or cancellat= ion check, rendering the server unresponsive to all connected clients.</td> <td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67199" target=3D= "_blank" rel=3D"noopener">CVE-2026-67199</a></td>
</tr>

<td class=3D"vendor-product">perspective-dev--perspective</td>
<td>Perspective 5.0.0 contains a cross-site scripting vulnerability in the = built-in Debug plugin that allows attackers to inject arbitrary HTML and Ja= vaScript by writing table cell values containing unescaped HTML markup, whi=
ch are interpolated directly into innerHTML during CSV serialization render= ing. Attackers can craft table rows with payloads such as unquoted attribut=
e injections containing event handler attributes that bypass RFC 4180 quoti= ng, since angle brackets and event handler attributes are never escaped bef= ore assignment, causing malicious scripts to execute in the embedding page'=
s origin.</td>
<td>2026-08-04</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67196" target=3D= "_blank" rel=3D"noopener">CVE-2026-67196</a></td>
</tr>

<td class=3D"vendor-product">PhialsBasement--KoboldCPP-MCP-Server</td>

<td>A weakness has been identified in PhialsBasement KoboldCPP-MCP-Server 1= .0.0. Affected by this issue is the function makeRequest of the file src/in= dex.ts of the component BaseConfigSchema. Executing a manipulation of the a= rgument apiUrl can lead to server-side request forgery. It is possible to l= aunch the attack on the local host. The project was informed of the problem=
early through an issue report but has not responded yet.</td>

<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19373" target=3D= "_blank" rel=3D"noopener">CVE-2026-19373</a></td>
</tr>

<td class=3D"vendor-product">pilinux--gorest</td>
<td>GoRest is a Golang starter kit built with the Gin framework for prototy= ping and developing RESTful APIs. In versions prior to 1.12.2 nMemorySecret= 2FA contains a race condition due to an unsynchronized package-level map us=
ed to store 2FA secrets. Multiple HTTP handlers in handler/login.go and han= dler/twoFA.go read from and write to this map concurrently, and because Go'=
s runtime treats unsynchronized concurrent map access as an unrecoverable f= atal error, an attacker can repeatedly trigger this condition to crash the = process on demand. This results in high, repeatable availability impact wit=
h no confidentiality or integrity consequences. This issue has been fixed i=
n version 1.12.2.</td>
<td>2026-08-04</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48154" target=3D= "_blank" rel=3D"noopener">CVE-2026-48154</a></td>
</tr>

<td class=3D"vendor-product">Pimzino--spec-workflow-mcp</td>
<td>A vulnerability was found in Pimzino spec-workflow-mcp up to 2.2.6. Thi=
s issue affects the function ApprovalStorage.createApproval of the file src= /tools/approvals.ts. Performing a manipulation of the argument categoryName=
results in path traversal. The attack is only possible with local access. = Upgrading to version 2.2.7 is capable of addressing this issue. The patch i=
s named 9c7a7839e690bb4543f0e7481b5740d23808e5fe. It is advisable to upgrad=
e the affected component.</td>
<td>2026-08-09</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19336" target=3D= "_blank" rel=3D"noopener">CVE-2026-19336</a></td>
</tr>

<td class=3D"vendor-product">pixelfed--pixelfed</td>
<td>Pixelfed's SearchController (behind the auth middleware) accepts a URL = via its remote-search parameters and fetches it server-side through Activit= yPubFetchService, whose validateUrl() only blocks the literal hosts 127.0.0= .1, localhost, and ::1 and requires https, without checking the resolved IP=
against private, internal, or link-local ranges (e.g. 169.254.169.254). Op= tional DNS validation is disabled by default and, when enabled, only confir=
ms a DNS record exists without filtering by IP range. The fetch response bo=
dy is returned to the requester only when the Content-Type matches an Activ= ityPub content type, making this a semi-blind but authenticated SSRF primit= ive reachable by any logged-in user.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71246" target=3D= "_blank" rel=3D"noopener">CVE-2026-71246</a></td>
</tr>

<td class=3D"vendor-product">poco-ai--poco-agent</td>
<td>A security flaw has been discovered in poco-ai poco-agent up to 0.5.4. = Affected is the function WorkspaceManager._setup_session_persistence of the=
file executor/app/core/workspace.py of the component Claude File Handler. = The manipulation results in incomplete cleanup. The attack may be performed=
from remote. Attacks of this nature are highly complex. The exploitability=
is told to be difficult. The exploit has been released to the public and m=
ay be used for attacks.</td>
<td>2026-08-06</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19019" target=3D= "_blank" rel=3D"noopener">CVE-2026-19019</a></td>
</tr>

<td class=3D"vendor-product">Poesis--Rhymix CMS</td>
<td>A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This = impacts the function procImporterAdminCheckXmlFile of the file modules/impo= rter/importer.admin.controller.php of the component Data Import Module. Thi=
s manipulation of the argument filename causes server-side request forgery.=
The attack is possible to be carried out remotely. The exploit has been pu= blicly disclosed and may be utilized. Upgrading to version 2.1.34 will fix = this issue. It is recommended to upgrade the affected component.</td> <td>2026-08-05</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18856" target=3D= "_blank" rel=3D"noopener">CVE-2026-18856</a></td>
</tr>

<td class=3D"vendor-product">ProjectSend--ProjectSend</td>
<td>ProjectSend r2029 contains a reflected cross-site scripting vulnerabili=
ty in thumbnails-regenerate.php that allows remote attackers to inject arbi= trary HTML and JavaScript by supplying unsanitized values in the start_date=
and end_date GET parameters, which are echoed unescaped into HTML attribut=
e values. Attackers can craft a malicious URL that, when followed by an aut= henticated victim with edit_settings permissions, executes injected scripts=
in the application origin to steal session cookies or perform unauthorized=
actions including user management, file management, and application settin=
gs changes.</td>
<td>2026-08-05</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-53992" target=3D= "_blank" rel=3D"noopener">CVE-2026-53992</a></td>
</tr>

<td class=3D"vendor-product">properfraction--MailOptin</td>
<td>Contributor Cross Site Scripting (XSS) in MailOptin <=3D 1.2.78.0 ve= rsions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66703" target=3D= "_blank" rel=3D"noopener">CVE-2026-66703</a></td>
</tr>

<td class=3D"vendor-product">python-hyper--h2</td>
<td>h2 is a pure-Python implementation of a HTTP/2 protocol stack. Versions=
up to and including 4.4.0 accept request header blocks containing more tha=
n one Host header, and forward every Host header to the consuming applicati= on. Where the consumer downgrades HTTP/2 to HTTP/1.1, the resulting request=
carries two Host header lines, providing a request smuggling primitive. Th=
is issue is fixed in version 4.4.1.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71554" target=3D= "_blank" rel=3D"noopener">CVE-2026-71554</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Memory Corruption when processing registry values with incorrect types = using a direct query method.</td>
<td>2026-08-04</td>
<td>6.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24076" target=3D= "_blank" rel=3D"noopener">CVE-2026-24076</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Information Disclosure when processing wireless network channel switch = information with improperly formatted length fields.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24077" target=3D= "_blank" rel=3D"noopener">CVE-2026-24077</a></td>
</tr>

<td class=3D"vendor-product">Qualcomm, Inc.--Snapdragon</td>
<td>Information Disclosure when IPSec negotiation fails or is not establish=
ed properly during NG-eCall SIP signaling.</td>
<td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-24078" target=3D= "_blank" rel=3D"noopener">CVE-2026-24078</a></td>
</tr>

<td class=3D"vendor-product">RackTables--RackTables</td>
<td>A security vulnerability has been detected in RackTables up to 0.22.0/e= 5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown=
code. The manipulation leads to cross-site request forgery. The attack is = possible to be carried out remotely. The exploit has been disclosed publicl=
y and may be used. The project maintainer confirms: "[I]t seems plausible, =
in that RackTables does not at this time have any CSRF prevention. You may = assign a CVE ID to this, but there is no guarantee it will be handled in ur= gent, or even timely, manner, or at all."</td>
<td>2026-08-04</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18819" target=3D= "_blank" rel=3D"noopener">CVE-2026-18819</a></td>
</tr>

<td class=3D"vendor-product">rclone--rclone</td>
<td>rclone is a command-line program to sync files and directories to and f= rom different cloud storage providers. Prior to 1.75.0, a valid but nondefa= ult FTP filename encoding in backend/ftp/ftp.go can restore raw CR/LF immed= iately before an attacker-controlled path is interpolated into the line-ori= ented FTP control channel, and github.com/jlaffaye/ftp formats the argument=
through textproto.Conn.Cmd without rejecting CR or LF, allowing a filename=
such as victim CRLF DELE other-secret CRLF NOOP to inject an independent a= uthenticated FTP command when the victim copies or syncs to a more-privileg=
ed FTP destination. This issue is fixed in 1.75.0.</td>

<td>2026-08-05</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71311" target=3D= "_blank" rel=3D"noopener">CVE-2026-71311</a></td>
</tr>

<td class=3D"vendor-product">rclone--rclone</td>
<td>rclone is a command-line program to sync files and directories to and f= rom different cloud storage providers. From v1.51.0 until v1.75.0, the loca=
l backend in backend/local/local.go relies on the configurable filename enc= oder to prevent remote filename data from becoming operating-system path sy= ntax, so a local destination using Slash, None, Raw, or on Windows an encod= ing that preserves backslash can decode a standard-encoded fullwidth dot-do=
t component or native backslash form into an actual parent-directory compon= ent before filepath.Join resolves it outside the configured local root, all= owing an attacker-controlled source object to create or overwrite files out= side the selected destination directory as the rclone process. This issue i=
s fixed in v1.75.0.</td>
<td>2026-08-05</td>
<td>6.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71313" target=3D= "_blank" rel=3D"noopener">CVE-2026-71313</a></td>
</tr>

<td class=3D"vendor-product">rclone--rclone</td>
<td>rclone is a command-line program to sync files and directories to and f= rom different cloud storage providers. Prior to 1.75.0, the shared HTTP CON= NECT helper in lib/proxy/http.go parses proxy CONNECT responses with http.R= eadResponse over an unrestricted buffered reader, allowing a malicious or c= ompromised configured proxy, or an active on-path actor controlling a plain= text HTTP proxy hop, to send oversized headers that grow memory until the r= clone process fails. The affected helper is used by FTP and SFTP proxy conn= ections, and SFTP reaches the parser before SSH server authentication, so t= arget host key validation does not constrain a malicious proxy. This issue =
is fixed in 1.75.0.</td>
<td>2026-08-05</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71310" target=3D= "_blank" rel=3D"noopener">CVE-2026-71310</a></td>
</tr>

<td class=3D"vendor-product">RealHomes Memberships--RealHomes Memberships</=

<td>The RealHomes Memberships WordPress plugin before 3.1.0 does not verify=
that a membership payment actually completed, nor check a nonce or the use= r's capability, before granting a paid membership package, allowing any aut= henticated user such as a Subscriber to obtain paid membership packages wit= hout paying.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15246" target=3D= "_blank" rel=3D"noopener">CVE-2026-15246</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Build of Keycloak</td>
<td>A flaw was found in the SAML broker component of Keycloak, an identity = and access management solution. When configured as a SAML broker using the = IdP-Initiated flow, Keycloak fails to enforce the OneTimeUse condition in S= AML assertions. This allows an attacker who captures a valid, unused assert= ion to replay it multiple times. Successful exploitation could allow an att= acker to hijack a user's session and gain unauthorized access to the system=
as that user.</td>
<td>2026-08-06</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18967" target=3D= "_blank" rel=3D"noopener">CVE-2026-18967</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.4</td>
<td>A flaw was found in the LDAP storage provider of Keycloak, which is use=
d to federate user identities from external directories. The issue occurs w= hen a delegated administrator performs a search using a specific LDAP entry=
Distinguished Name (DN). Due to missing validation, the system allows look= ups for users located outside the configured search boundary, leading to th=
e disclosure of account information from unauthorized parts of the director=
y and unintended importing of those users into local storage.</td> <td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16071" target=3D= "_blank" rel=3D"noopener">CVE-2026-16071</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat build of Keycloak 26.6</td>
<td>A flaw was found in the user-event metrics recording of Keycloak. When = metrics are enabled, the system records raw error messages from failed acco= unt operations as Prometheus metric labels. Because these error messages ca=
n include user-supplied input like nonexistent client IDs, an authenticated=
user can create a massive number of unique metric entries, eventually exha= usting system memory and causing the service to crash or become unavailable= .</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16100" target=3D= "_blank" rel=3D"noopener">CVE-2026-16100</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Directory Server 11</td>

<td>A flaw was found in 389 Directory Server. During SASL PLAIN authenticat= ion, the server installs connection-level bind credentials before performin=
g the account-lock check. If the account is subsequently found to be locked=
, the bind is reported as failed to the client, but the already-installed a= uthenticated state on the connection is not reverted. A client that supplie=
s valid credentials for an account that has been administratively locked ca=
n continue to use the same connection with that account's privileges, defea= ting account lock as an access-revocation control.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18651" target=3D= "_blank" rel=3D"noopener">CVE-2026-18651</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in p11-kit. A local attacker, or one with equivalent a= ccess to a reachable RPC channel, could exploit an integer overflow vulnera= bility. By sending specially crafted messages, the attacker can cause the s= ystem to miscalculate memory allocation for nested attributes. This leads t=
o a memory corruption issue, specifically a heap out-of-bounds write, which=
can crash the p11-kit RPC parsing process, resulting in a Denial of Servic=
e (DoS). This vulnerability is only exploitable on 32 bit systems.</td> <td>2026-08-07</td>
<td>6.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18938" target=3D= "_blank" rel=3D"noopener">CVE-2026-18938</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in SSSD. The sss_nss_protocol_parse_addr() function in=
the NSS responder does not validate the addrlen field against the remainin=
g packet body size. A local attacker can exploit this via a crafted GETHOST= BYADDR request to the NSS responder socket, causing an out-of-bounds read a=
nd process crash, resulting in a denial of service.</td>
<td>2026-08-03</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68742" target=3D= "_blank" rel=3D"noopener">CVE-2026-68742</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in SSSD. The extract_authtok_v1() function in the PAM = responder does not validate the auth_token_length field against the remaini=
ng buffer size before processing. A local attacker can exploit this via a c= rafted protocol v1 request to the PAM responder socket, causing an out-of-b= ounds read and process crash, resulting in a denial of service.</td> <td>2026-08-04</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68743" target=3D= "_blank" rel=3D"noopener">CVE-2026-68743</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 6</td>
<td>A flaw was found in GIMP's file-png plugin. A remote attacker can explo=
it this by crafting a malicious Animated Portable Network Graphics (APNG) i= mage containing an oversized tRNS chunk. This can lead to a stack-based buf= fer overflow (CWE-121), causing the file-png plugin to crash and resulting =
in a Denial of Service (DoS) for the user.</td>
<td>2026-08-03</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6694" target=3D"= _blank" rel=3D"noopener">CVE-2026-6694</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 6</td>
<td>A flaw was found in GIMP. A remote attacker could exploit this by trick= ing a user into opening a specially crafted PAA (Paint Shop Pro Array) imag=
e file. This vulnerability, a heap-based out-of-bounds write in the decode_= lzss() function of the PAA file format plugin, allows data to be written be= yond the intended memory buffer. This could lead to heap metadata corruptio=
n and potentially enable the attacker to execute arbitrary code on the affe= cted system.</td>
<td>2026-08-03</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6695" target=3D"= _blank" rel=3D"noopener">CVE-2026-6695</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 6</td>
<td>A flaw was found in dhcp-server. A remote attacker with network access =
to the OMAPI (Open Management Application Programming Interface) port, espe= cially if not secured with TSIG (Transaction Signature) key authentication,=
could send a specially crafted lease creation request. This request, conta= ining an overly long InfiniBand MAC address, triggers a buffer overflow in = the `print_hw_addr()` function. Successful exploitation leads to a persiste=
nt denial of service (DoS), causing the `dhcpd` service to crash and preven= ting it from restarting without manual intervention.</td>

<td>2026-08-04</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18103" target=3D= "_blank" rel=3D"noopener">CVE-2026-18103</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Hardened Images</td>
<td>A flaw was found in the RPM Package Manager (RPM). A local user could b=
e affected by a heap buffer overflow vulnerability when processing a specia= lly crafted NDB database file. This issue arises from an error in how RPM h= andles certain calculations during file parsing, leading to an incorrect me= mory allocation. An attacker could leverage this to cause a denial of servi= ce, making the system unavailable.</td>
<td>2026-08-05</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-44605" target=3D= "_blank" rel=3D"noopener">CVE-2026-44605</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Hardened Images</td>
<td>A TOCTOU (Time-of-Check Time-of-Use) vulnerability in GNU tar's increme= ntal dumpdir 'X' rename handling allows a local attacker with write access =
to a directory being backed up to influence the restore process if the atta= cker has access to the system where the restore is being performed. During = restoration, files or directories may be created, renamed or overwritten ou= tside the intended extraction directory. This could lead to unauthorized fi=
le modification or, in some cases, privilege escalation. Exploitation does = not require the attacker to modify or craft the archive, and standard backu=
p and restore workflows-including extracting into a newly created directory=
without using the -P option do not mitigate the issue.</td> <td>2026-08-03</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18477" target=3D= "_blank" rel=3D"noopener">CVE-2026-18477</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Hardened Images</td>
<td>A flaw was found in GNU tar. When extracting an archive with the --one-= top-level option, hardlink targets are not confined to the designated top-l= evel directory and may resolve relative to the extraction working directory=
. A crafted archive can create hardlinks that escape the intended boundary = and, when combined with a preexisting symbolic link under the working direc= tory, may allow writing outside that boundary during a single extraction.</=

<td>2026-08-03</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18508" target=3D= "_blank" rel=3D"noopener">CVE-2026-18508</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Hardened Images</td>
<td>A TOCTOU (Time-of-Check-Time-of-Use) race condition vulnerability was f= ound in the fixfiles script in policycoreutils. When running fixfiles relab=
el or fixfiles restore, the script used find and chcon commands to locate a=
nd relabel unlabeled files under /tmp and other directories. A local attack=
er could exploit a race window between the file discovery and the label cha= nge operation by swapping directory components with symlinks, causing chcon=
to follow the symlink and modify SELinux labels on arbitrary system files.=
This could undermine SELinux mandatory access control protections on criti= cal files such as /etc/shadow.</td>
<td>2026-08-07</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19079" target=3D= "_blank" rel=3D"noopener">CVE-2026-19079</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat JBoss Enterprise Application = Platform 7</td>
<td>A path traversal flaw was found in WildFly's domain mode implementation=
. The LocalFileRepository.getFile() and getConfigurationFile() methods in w= ildfly-core/deployment-repository do not validate that the resolved file pa=
th remains within the configured repository or configuration root directori= es. A remote attacker who has obtained the slave host controller secret or = compromised a slave host controller can supply a crafted relative path cont= aining directory traversal sequences (e.g., ../../etc/passwd) via the slave= -DC wire protocol, causing the Domain Controller to resolve and serve arbit= rary files readable by the DC process. This leads to unauthorized disclosur=
e of sensitive information such as configuration files, keystores, and syst=
em credentials.</td>
<td>2026-08-04</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17614" target=3D= "_blank" rel=3D"noopener">CVE-2026-17614</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat OpenShift Container Platform = 4</td>
<td>A flaw was found in openshift/oauth-proxy. On paths configured to bypas=
s authentication (skip-auth-regex), the proxy forwards client-supplied iden= tity headers (X-Forwarded-User, X-Forwarded-Email, X-Forwarded-Access-Token=
) to the upstream application without stripping them. An unauthenticated at= tacker can inject forged identity headers on whitelisted paths.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49331" target=3D= "_blank" rel=3D"noopener">CVE-2026-49331</a></td>
</tr>

<td class=3D"vendor-product">RegistrationMagic--RegistrationMagic</td>

<td>The RegistrationMagic WordPress plugin before 6.0.9.5 does not compare = the verified PayPal capture's amount, currency, payee, or prior use against=
the registration it is finalising: its server-side check only confirms the=
capture status is COMPLETED. An unauthenticated attacker can therefore fin= alise an expensive paid registration with any genuinely-completed low-value=
capture, and replay a single capture across unlimited registrations becaus=
e captures are not de-duplicated.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15208" target=3D= "_blank" rel=3D"noopener">CVE-2026-15208</a></td>
</tr>

<td class=3D"vendor-product">Relevanssi--Relevanssi Premium A Better Search= </td>
<td>The plugin provides an Admin Search page that allows users with the `ed= it_posts` capability to run Relevanssi searches from the WordPress dashboar=
d. The AJAX handler accepts a URL-encoded `args` parameter, parses it into =
a `WP_Query`, and then passes user-controlled taxonomy query data into Rele= vanssi's taxonomy restriction builder. The taxonomy value is sanitized as t= ext but is not parameterized for SQL before being interpolated into a term = taxonomy lookup query. This allows an authenticated contributor-level attac= ker to inject SQL through the Admin Search AJAX request and execute time-ba= sed blind SQL injection against the WordPress database.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15941" target=3D= "_blank" rel=3D"noopener">CVE-2026-15941</a></td>
</tr>

<td class=3D"vendor-product">Revenue Administration--E-Signature</td> <td>Server-Side request forgery (SSRF) vulnerability in Revenue Administrat= ion Turkiye's E-Signature allows Server Side Request Forgery. This issue af= fects Turkiye's E-Signature: from 2.4.4.0 before 2.5.1.0.</td> <td>2026-08-07</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16027" target=3D= "_blank" rel=3D"noopener">CVE-2026-16027</a></td>
</tr>

<td class=3D"vendor-product">Saad Iqbal--Gutena Forms Contact Form, Survey = Form, Feedback Form, Booking Form, and Custom Form Builder</td> <td>Unauthenticated Broken Authentication in Gutena Forms - Contact Form, S= urvey Form, Feedback Form, Booking Form, and Custom Form Builder <=3D 1.= 9.0 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66425" target=3D= "_blank" rel=3D"noopener">CVE-2026-66425</a></td>
</tr>

<td class=3D"vendor-product">Samsung Open Source--rlottie</td>
<td>Improper input validation vulnerability in Samsung Open Source rlottie = allows Oversized Serialized Data Payloads.</td>
<td>2026-08-04</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18772" target=3D= "_blank" rel=3D"noopener">CVE-2026-18772</a></td>
</tr>

<td class=3D"vendor-product">Scripta--eScriptorium</td>
<td>Authorization bypass in the process and annotation taxonomy serializers=
in Scripta eScriptorium through 26.04.1 allows a remote authenticated user=
to run segmentation and transcription against other users' document parts,=
overwriting their content, via part primary keys supplied to a many=3DTrue=
related field whose queryset restriction was applied to the ManyRelatedFie=
ld instead of its child_relation and therefore had no effect</td> <td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18275" target=3D= "_blank" rel=3D"noopener">CVE-2026-18275</a></td>
</tr>

<td class=3D"vendor-product">Scripta--eScriptorium</td>
<td>Missing authorization in the websocket consumer in Scripta eScriptorium=
through 26.04.1 allows a remote authenticated user to subscribe to any doc= ument's event stream and observe another user's segmentation, transcription=
, import, export and training activity via the object_cls and object_pk val= ues of a join-room message, which are passed to group_add without an access=
check</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18276" target=3D= "_blank" rel=3D"noopener">CVE-2026-18276</a></td>
</tr>

<td class=3D"vendor-product">SecureAge--CatchPulse</td>
<td>An improper access control check in=C2=A0CatchPulse's=C2=A0named pipe c= ommunication interface could allow an attacker to invoke=C2=A0CatchPulse=C2= =A0functions.=C2=A0This=C2=A0is limited to operations that enforce more res= trictive security policies.</td>
<td>2026-08-06</td>
<td>5.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55979" target=3D= "_blank" rel=3D"noopener">CVE-2026-55979</a></td>
</tr>

<td class=3D"vendor-product">SecureAge--CatchPulse</td>
<td>A denial-of-service vulnerability in=C2=A0CatchPulse=C2=A0could allow a=
n attacker to conduct a stack buffer overrun attack, leading to a denial-of= -service condition.</td>
<td>2026-08-06</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55980" target=3D= "_blank" rel=3D"noopener">CVE-2026-55980</a></td>
</tr>

<td class=3D"vendor-product">Security Optimizer--Security Optimizer</td>

<td>The Security Optimizer WordPress plugin from 1.5.8 to 1.6.4 does not co= rrectly validate requests to its optional IP-based login restriction featur=
e, allowing the restriction to be bypassed so that unauthenticated requests=
from non-allowlisted IP addresses can reach and use the login form, defeat= ing the access control the administrator configured.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13342" target=3D= "_blank" rel=3D"noopener">CVE-2026-13342</a></td>
</tr>

<td class=3D"vendor-product">seraphinitesoft--Seraphinite Accelerator</td> <td>The Seraphinite Accelerator plugin for WordPress is vulnerable to Refle= cted Cross-Site Scripting via the 'seraph_accel_prep' parameter in versions=
up to, and including, 2.29.15. This is due to the CacheExtractPreparePageP= arams() function using PHP's loose inequality operator (!=3D) to compare th=
e expected HMAC string against the JSON-decoded 'nonce' value - supplying t=
he JSON boolean true causes any non-empty HMAC string to compare as loosely=
equal, bypassing the signature check - combined with insufficient output e= scaping in the _CbContentFinishSkip() function, which concatenates the atta= cker-controlled 'selfTest' field directly into the HTML response body. This=
makes it possible for unauthenticated attackers to inject arbitrary web sc= ripts in pages that execute if they can successfully trick a user into perf= orming an action such as clicking on a specially crafted link.</td> <td>2026-08-05</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17532" target=3D= "_blank" rel=3D"noopener">CVE-2026-17532</a></td>
</tr>

<td class=3D"vendor-product">sevenspark--DTX Dynamic Text Extension for Con= tact Form 7</td>
<td>The Contact Form 7 - Dynamic Text Extension plugin for WordPress is vul= nerable to Stored Cross-Site Scripting in all versions up to, and including=
, 5.0.5. This is due to insufficient output escaping on form shortcode keys=
displayed in the admin "Scan Forms for Post Meta and User Data Keys" page.=
This makes it possible for authenticated attackers, with Editor-level acce=
ss and above, to inject arbitrary web scripts that execute when an Administ= rator runs the scan feature.</td>
<td>2026-08-05</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5116" target=3D"= _blank" rel=3D"noopener">CVE-2026-5116</a></td>
</tr>

<td class=3D"vendor-product">shapedplugin--Easy Accordion AI-Powered FAQ &a= mp; Accordion Blocks, Product FAQ</td>
<td>The Easy Accordion plugin for WordPress is vulnerable to Stored Cross-S= ite Scripting via the 'accordionTitleTag' block attribute in versions up to=
, and including, 3.1.8. This is due to insufficient input sanitization and = output escaping in the accordion_header_renderer() function, which emits th=
e attacker-supplied tag name using esc_attr() in an HTML tag-name context i= nstead of tag_escape(). This makes it possible for authenticated attackers,=
with contributor-level access and above, to inject arbitrary web scripts i=
n pages that will execute whenever a user accesses an injected page.</td> <td>2026-08-08</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18988" target=3D= "_blank" rel=3D"noopener">CVE-2026-18988</a></td>
</tr>

<td class=3D"vendor-product">Sharp Corporation--Network Scanner Tool Lite</=

<td>Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Co= rporation, with the initial configuration, require no authentication and ac= cept files unlimitedly. When the affected products are used with the initia=
l configuration, anyone can connect to them without authentication and uplo=
ad files unlimitedly. This may cause a denial-of-service (DoS) condition on=
the PC. Furthermore, if a malicious file is uploaded, a PC user may be tri= cked to execute the file to attack other entities from that PC.</td> <td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62416" target=3D= "_blank" rel=3D"noopener">CVE-2026-62416</a></td>
</tr>

<td class=3D"vendor-product">Sharp Corporation--Sharp MFPs</td>
<td>Sharp and Toshiba Tec MFPs (multifunction printers) for a certain marke=
t have been shipped with the user authentication feature disabled in the in= itial configuration. When used with the initial configuration, the address = book editing and a range of features related to Document Filing can be acce= ssed without user authentication. Products intended for the Japanese market=
are not affected.</td>
<td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63563" target=3D= "_blank" rel=3D"noopener">CVE-2026-63563</a></td>
</tr>

<td class=3D"vendor-product">Sharp Corporation--Sharp MFPs</td>
<td>Sharp and Toshiba Tec MFPs (multifunction printers) fail to properly au= thorize requests to directly access certain image data stored to the affect=
ed product.</td>
<td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-60011" target=3D= "_blank" rel=3D"noopener">CVE-2026-60011</a></td>
</tr>

<td class=3D"vendor-product">shlinkio--Shlink</td>
<td>Shlink contains a blind SQL injection vulnerability that allows any aut= henticated API key holder to inject arbitrary SQL fragments by supplying an=
unvalidated direction value in the orderBy query parameter of the tag stat= istics endpoint. Attackers can craft a malicious direction string containin=
g SQL subqueries that flows unsanitized into a Doctrine QueryBuilder ORDER =
BY clause, enabling time-based, boolean-oracle, and error-based extraction =
of sensitive data including long URLs, visitor records, IP addresses, geolo= cation data, user agents, and hashed API key secrets from any tenant.</td> <td>2026-08-03</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18737" target=3D= "_blank" rel=3D"noopener">CVE-2026-18737</a></td>
</tr>

<td class=3D"vendor-product">shlinkio--Shlink</td>
<td>Shlink contains a server-side request forgery vulnerability that allows=
authenticated API key holders to cause the server to issue arbitrary HTTP = GET requests by supplying a crafted long URL during short URL creation with=
title auto-resolution enabled. Attackers can submit URLs pointing to publi=
c hosts that redirect to internal targets, including loopback addresses, li= nk-local ranges, and cloud metadata endpoints such as 169.254.169.254, to e= xfiltrate internal service information via the HTML title element returned =
in the short URL creation response.</td>
<td>2026-08-03</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18736" target=3D= "_blank" rel=3D"noopener">CVE-2026-18736</a></td>
</tr>

<td class=3D"vendor-product">shlinkio--Shlink</td>
<td>Shlink versions 5.0.0 through 5.1.5 contain a CSV formula injection vul= nerability that allows unauthenticated remote attackers to plant spreadshee=
t formulas into exported visit data by supplying malicious values in User-A= gent, Referer, or request path headers beginning with formula-triggering ch= aracters such as =3D, +, -, or @. Attackers can craft a single unauthentica= ted request against any short URL to embed DDE or WEBSERVICE formula payloa=
ds into CSV cells, which are then executed on an administrator's client mac= hine when the exported CSV file is opened in a spreadsheet application that=
evaluates formulas.</td>
<td>2026-08-03</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18738" target=3D= "_blank" rel=3D"noopener">CVE-2026-18738</a></td>
</tr>

<td class=3D"vendor-product">silverstripe--silverstripe-cms</td> <td>Silverstripe CMS is an open source content management system. Prior to = 6.2.1, page breadcrumbs in the CMS are vulnerable to cross-site scripting w= hen viewed using the page list view, because page titles are rendered into = the breadcrumb trail without being escaped. This issue is fixed in 6.2.1.</=

<td>2026-08-06</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54717" target=3D= "_blank" rel=3D"noopener">CVE-2026-54717</a></td>
</tr>

<td class=3D"vendor-product">Simple CAPTCHA with Cloudflare Turnstile--Simp=
le CAPTCHA with Cloudflare Turnstile</td>
<td>The Simple CAPTCHA with Cloudflare Turnstile WordPress plugin before 1.= 42.0 does not bind its Turnstile validation cache to the single-use challen=
ge token in its Forminator integration, instead keying it to an attacker-co= ntrolled, reusable request value, allowing unauthenticated attackers to sol=
ve one challenge and then replay token-less form submissions for a short wi= ndow, defeating the anti-abuse protection the plugin provides.</td> <td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15239" target=3D= "_blank" rel=3D"noopener">CVE-2026-15239</a></td>
</tr>

<td class=3D"vendor-product">siyuan-note--siyuan</td>
<td>SiYuan versions before v3.7.3 contain a metadata disclosure vulnerabili=
ty in the /api/block/getBlockInfo endpoint that returns document root metad= ata including title for publish-forbidden documents without publish-access = checks. Anonymous readers or publish RoleReader tokens can supply a block I=
D to retrieve the title, notebook, path, root ID, and icon of documents adm= inistrators marked as excluded from publishing.</td>
<td>2026-08-03</td>
<td>5.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68585" target=3D= "_blank" rel=3D"noopener">CVE-2026-68585</a></td>
</tr>

<td class=3D"vendor-product">smub--Smash Balloon Social Photo Feed Easy Soc= ial Feeds Plugin</td>
<td>The Smash Balloon Social Photo Feed - Easy Social Feeds Plugin plugin f=
or WordPress is vulnerable to Reflected Cross-Site Scripting via REQUEST_UR=
I Query String in all versions up to, and including, 6.11.3 due to insuffic= ient input sanitization and output escaping. This makes it possible for una= uthenticated attackers to inject arbitrary web scripts in pages that execut=
e if they can successfully trick a user into performing an action such as c= licking on a link.</td>
<td>2026-08-05</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15452" target=3D= "_blank" rel=3D"noopener">CVE-2026-15452</a></td>
</tr>

<td class=3D"vendor-product">SNOMED International--Snowstorm</td>
<td>SNOMED International Snowstorm contains a reflected XSS vulnerability w= ithin the "Web Route" redirection functionality. An attacker can inject arb= itrary JavaScript which will execute upon a target user navigating to a cra= fted, malicious link. Fixed in 10.12.2 and 10.9.3.</td>
<td>2026-08-04</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66300" target=3D= "_blank" rel=3D"noopener">CVE-2026-66300</a></td>
</tr>

<td class=3D"vendor-product">sonalsinha21--SKT Skill Bar</td>
<td>The SKT Skill Bar plugin for WordPress is vulnerable to Stored Cross-Si=
te Scripting via the `chart_size` attribute of the `skillwrapper` shortcode=
in all versions up to, and including, 2.6. This is due to insufficient inp=
ut sanitization and output escaping on the `chart_size` attribute, which is=
concatenated directly into an inline `<style>` block. This makes it = possible for authenticated attackers, with Contributor-level access and abo= ve, to inject arbitrary web scripts in pages that will execute whenever a u= ser accesses an injected page.</td>
<td>2026-08-05</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-6972" target=3D"= _blank" rel=3D"noopener">CVE-2026-6972</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Online Clothing Store</td>

<td>A vulnerability was determined in SourceCodester Online Clothing Store.=
Affected by this issue is some unknown functionality of the file /_notes/ =
of the component Dreamweaver Metadata Files. Executing a manipulation can l= ead to file and directory information exposure. The attack can be launched = remotely. The exploit has been publicly disclosed and may be utilized.</td> <td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19229" target=3D= "_blank" rel=3D"noopener">CVE-2026-19229</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Online Examination & Learn= ing Management System</td>
<td>A vulnerability was determined in SourceCodester Online Examination &am=
p; Learning Management System 1.0. This issue affects some unknown processi=
ng of the file upload_files.php. This manipulation causes unrestricted uplo= ad. The attack may be initiated remotely.</td>
<td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19065" target=3D= "_blank" rel=3D"noopener">CVE-2026-19065</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Online Examination & Learn= ing Management System</td>
<td>A vulnerability was found in SourceCodester Online Examination & Le= arning Management System 1.0. This vulnerability affects unknown code of th=
e file /view.php. The manipulation of the argument ID results in authorizat= ion bypass. The attack can be launched remotely.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19064" target=3D= "_blank" rel=3D"noopener">CVE-2026-19064</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Online Examination & Learn= ing Management System</td>
<td>A vulnerability was identified in SourceCodester Online Examination &am=
p; Learning Management System 1.0. Impacted is an unknown function of the f= ile view_students.php. Such manipulation of the argument class_group leads =
to authorization bypass. The attack may be launched remotely.</td>

<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19066" target=3D= "_blank" rel=3D"noopener">CVE-2026-19066</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Photo Share Website</td>
<td>A vulnerability has been found in SourceCodester Photo Share Website 1.=
0. The impacted element is an unknown function of the file /social/ajax.php= ?action=3Dsave_upload. Such manipulation of the argument img[]/imgName[] le= ads to unrestricted upload. The attack may be launched remotely. The exploi=
t has been disclosed to the public and may be used.</td>
<td>2026-08-07</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19210" target=3D= "_blank" rel=3D"noopener">CVE-2026-19210</a></td>
</tr>

<td class=3D"vendor-product">Spacebar Server--Spacebar Server</td>
<td>Spacebar Server before commit 51da17c contains a missing authorization = vulnerability that allows any authenticated user to enumerate complete guil=
d membership by querying the GET /guilds/{guild_id}/roles/{role_id}/member-= ids endpoint without guild membership verification. Attackers can exploit t=
he unprotected route handler in the roles member-ids endpoint, which lacks = permission checks present in sibling endpoints, to retrieve the full list o=
f member user IDs for any guild on the instance using only a valid bearer t= oken and a known guild ID.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70618" target=3D= "_blank" rel=3D"noopener">CVE-2026-70618</a></td>
</tr>

<td class=3D"vendor-product">spacetime--Ad Inserter Ad Manager & AdSens=
e Ads</td>
<td>The Ad Inserter - Ad Manager & AdSense Ads plugin for WordPress is = vulnerable to authorization bypass in all versions up to, and including, 2.= 8.16 due to a missing capability check in the `ai_ajax` function. This make=
s it possible for unauthenticated attackers to view the contents of ad bloc=
ks that an administrator has restricted to administrator-only visibility.</=

<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11983" target=3D= "_blank" rel=3D"noopener">CVE-2026-11983</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic is a Laravel and Git powered content management system (CMS). = Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could view = content from entries they did not have permission to view, including entry = content and custom field values, from any collection and including unpublis= hed entries, through the navigation endpoint, though no data could be modif= ied. This issue is fixed in versions 5.74.1 and 6.24.0.</td>

<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64662" target=3D= "_blank" rel=3D"noopener">CVE-2026-64662</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic is a Laravel and Git powered content management system (CMS). = Prior to 5.74.1 and 6.24.0, manipulating user-supplied input incorporated i= nto Antlers templates could result in the loss of content and assets, on si= tes whose templates pass untrusted input into affected areas, and exploitat= ion did not require authentication. This issue is fixed in versions 5.74.1 = and 6.24.0.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64663" target=3D= "_blank" rel=3D"noopener">CVE-2026-64663</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic CMS's user-augmentation resolver, AugmentedUser::get() in src/= Auth/AugmentedUser.php, contains an explicit case for the `two_factor_recov= ery_codes` handle that returns the user's raw two-factor recovery codes wit=
h no access restriction: `if ($handle =3D=3D=3D 'two_factor_recovery_codes'=
) { return new Value($this->data->get('two_factor_recovery_codes'), .= ..); }`. Unlike sensitive fields such as password/password_hash, which are = excluded from AugmentedUser entirely, two_factor_recovery_codes is neither = excluded from augmentation nor present in Statamic's Antlers variable guard=
lists (guardedVariablePatterns/guardedContentVariablePatterns in src/Provi= ders/ViewServiceProvider.php, and the runtime GlobalRuntimeState guard path= s), which by default only guard config.app.key. On any Antlers template fie=
ld where raw/dynamic template rendering is enabled for a given field (an ad= min/developer-configured, blueprint-level field option), a template such as=
`{{ current_user.two_factor_recovery_codes }}{{ value }}|{{ /current_user.= two_factor_recovery_codes }}` renders the viewing user's own 2FA recovery c= odes directly into the HTML response, allowing an attacker who can view or = capture that response (e.g. via a shared/observable page, or a crafted link=
causing a victim to render it) to obtain the codes and bypass 2FA. Exploit= ation requires that dynamic Antlers rendering already be enabled on a field=
the target user's data flows through, which is a blueprint-configuration p= rivilege rather than a standard content-editing permission.</td> <td>2026-08-05</td>
<td>6.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71293" target=3D= "_blank" rel=3D"noopener">CVE-2026-71293</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic is a Laravel and Git powered content management system (CMS). = Prior to 5.74.3 and 6.24.2, the default ("automagic") form notification ema=
il rendered user-submitted values without escaping, allowing an unauthentic= ated form submitter to inject HTML into the notification emails sent to the=
configured recipients. This issue is fixed in versions 5.74.3 and 6.24.2.<=

<td>2026-08-06</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71435" target=3D= "_blank" rel=3D"noopener">CVE-2026-71435</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic is a Laravel and Git powered content management system (CMS). = Prior to 5.74.3 and 6.24.2, public frontend forms did not enforce the file = upload restrictions that the Control Panel enforces, so an unauthenticated = visitor could upload file types an administrator had intended to disallow t= hrough a form's assets or files field, and for assets fields, files could b=
e stored on a public, web-accessible disk, though the application's global = upload allowlist still blocked executable types such as .php and .html. Thi=
s issue is fixed in versions 5.74.3 and 6.24.2.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71434" target=3D= "_blank" rel=3D"noopener">CVE-2026-71434</a></td>
</tr>

<td class=3D"vendor-product">statamic--cms</td>
<td>Statamic is a Laravel and Git powered content management system (CMS). = Prior to 5.74.1 and 6.24.0, an authenticated Control Panel user could use a=
n endpoint intended for the user creation wizard to determine if a given em= ail address belonged to an existing user, without having permission to view=
users, though the endpoint only exposed user existence and not any other u= ser data. This issue is fixed in versions 5.74.1 and 6.24.0.</td> <td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64664" target=3D= "_blank" rel=3D"noopener">CVE-2026-64664</a></td>
</tr>

<td class=3D"vendor-product">Stephan Muelle--libkcapi</td>
<td>A flaw was found in libkcapi. When performing one-shot symmetric cipher=
operations on large inputs (over 64 KiB) in stateful modes such as Counter=
(CTR) or Cipher Block Chaining (CBC), the library improperly reuses the In= itialization Vector (IV) for each internal data chunk. A remote attacker co= uld potentially exploit this by making an application that uses libkcapi pr= ocess specially crafted large inputs. This can lead to a significant weaken= ing of data confidentiality, as the repeated IV use can expose relationship=
s in encrypted plaintext, and may also affect data integrity by causing inc= orrect cryptographic processing.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71225" target=3D= "_blank" rel=3D"noopener">CVE-2026-71225</a></td>
</tr>

<td class=3D"vendor-product">Stephan Muelle--libkcapi</td>
<td>A flaw was found in libkcapi. A local attacker can influence an applica= tion that uses the Asynchronous Input/Output (AIO) interface. By reusing an=
AIO-enabled handle after a prior completion error, the _kcapi_aio_read_all=
() function can enter a non-terminating wait loop. This can lead to a persi= stent denial of service, making the affected application or thread unrespon= sive.</td>
<td>2026-08-05</td>
<td>5.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71227" target=3D= "_blank" rel=3D"noopener">CVE-2026-71227</a></td>
</tr>

<td class=3D"vendor-product">stiofansisland--UsersWP Front-end login form, = User Registration, User Profile & Members Directory plugin for WP</td> <td>The UsersWP - Front-end login form, User Registration, User Profile &am=
p; Members Directory plugin for WP plugin for WordPress is vulnerable to St= ored Cross-Site Scripting via Badge Widget Variable Substitution in all ver= sions up to, and including, 1.2.69 due to insufficient input sanitization a=
nd output escaping. This makes it possible for authenticated attackers, wit=
h subscriber-level access and above, to inject arbitrary web scripts in pag=
es that will execute whenever a user accesses an injected page.</td> <td>2026-08-06</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18501" target=3D= "_blank" rel=3D"noopener">CVE-2026-18501</a></td>
</tr>

<td class=3D"vendor-product">Strategy11 Team--Business Directory</td> <td>Subscriber Cross Site Scripting (XSS) in Business Directory <=3D 6.4= .24 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61959" target=3D= "_blank" rel=3D"noopener">CVE-2026-61959</a></td>
</tr>

<td class=3D"vendor-product">stylemix--Cost Calculator Builder</td>
<td>The Cost Calculator Builder plugin for WordPress is vulnerable to unaut= horized access of sensitive data due to a missing capability check on the `= cost-calculator-custom-export-run` AJAX action (handler `CCBExportImport::e= xport_calculators()`) in all versions up to, and including, 3.6.17. The han= dler only verifies a nonce, but the corresponding `ccb_export_nonce` is bro= adcast on every wp-admin page (including pages reachable to Subscribers, su=
ch as `/wp-admin/profile.php`) by the `ccb_add_admin_nonces` callback hooke=
d to `admin_head`. This makes it possible for authenticated attackers, with=
Subscriber-level access and above, to export every calculator's full confi= guration - including stored Stripe secret keys, PayPal client secrets, Razo= rpay secret keys, webhook secret keys, and reCAPTCHA secret keys.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7753" target=3D"= _blank" rel=3D"noopener">CVE-2026-7753</a></td>
</tr>

<td class=3D"vendor-product">Subscriptions for WooCommerce--Subscriptions f=
or WooCommerce</td>
<td>The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does no=
t validate the payment amount or bind the PayPal order token to the order b= eing completed on the WooCommerce order-received flow: it captures a client= -supplied token and marks the order paid whenever the capture status is COM= PLETED, without comparing the captured amount to the order total. This allo=
ws an attacker (unauthenticated where guest checkout is enabled) to substit= ute an approved, uncaptured PayPal order token and have an expensive order = marked paid without paying its price.</td>
<td>2026-08-07</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15211" target=3D= "_blank" rel=3D"noopener">CVE-2026-15211</a></td>
</tr>

<td class=3D"vendor-product">supercleanse--PrettyLinks Affiliate Link Manag= ement, URL Shortener, Link Cloaking, Tracking & Branded Short Links</td=

<td>The PrettyLinks - Affiliate Links, Link Branding, Link Tracking, Market= ing and Stripe Payments Plugin plugin for WordPress is vulnerable to SQL In= jection via the 's' (search) parameter on the Pretty Links listing page in = all versions up to, and including, 3.6.20. This is due to insufficient esca= ping on the user supplied parameter and lack of sufficient preparation on t=
he existing SQL query in the `search_links_table()` function. This makes it=
possible for authenticated attackers, with Administrator-level access and = above, to append additional SQL queries into already existing queries that = can be used to extract sensitive information from the database.</td> <td>2026-08-05</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5062" target=3D"= _blank" rel=3D"noopener">CVE-2026-5062</a></td>
</tr>

<td class=3D"vendor-product">superpwa--Super Progressive Web Apps</td>

<td>The Super Progressive Web Apps plugin for WordPress is vulnerable to St= ored Cross-Site Scripting via the `superpwa_settings[offline_message_txt]` = setting in all versions up to, and including, 2.2.43. This is due to insuff= icient input sanitization and output escaping. The offline message value is=
stored without sanitization, passed to the frontend via `wp_localize_scrip= t()` without escaping, and rendered using `innerHTML` in the JavaScript sna= ckbar component. This makes it possible for authenticated attackers, with A= dministrator-level access and above, to inject arbitrary web scripts in pag=
es that will execute whenever a user triggers the offline snackbar.</td> <td>2026-08-05</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5108" target=3D"= _blank" rel=3D"noopener">CVE-2026-5108</a></td>
</tr>

<td class=3D"vendor-product">SuperTokens Inc.--SuperTokens Core</td>
<td>A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0=
to v11.4.0 allows an authenticated party in one tenant to access sessions,=
data, and endpoints of another tenant.</td>
<td>2026-08-07</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-37171" target=3D= "_blank" rel=3D"noopener">CVE-2026-37171</a></td>
</tr>

<td class=3D"vendor-product">SureCart--SureCart</td>
<td>Unauthenticated Broken Access Control in SureCart <=3D 4.6.2 version= s.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-32548" target=3D= "_blank" rel=3D"noopener">CVE-2026-32548</a></td>
</tr>

<td class=3D"vendor-product">SUSE--Rancher</td>
<td>The endpoint /v3/import/{token}_{clusterId}.yaml retrieves the cluster = object before validating the token. When a valid cluster ID references a cl= uster that has private registry secrets configured, a nil pointer dereferen=
ce in pkg/systemtemplate/private_registry.go causes the request to return H= TTP 502 Bad Gateway. For cluster IDs that do not exist, the endpoint return=
s HTTP 200. This observable difference in response codes constitutes a reli= able enumeration oracle.</td>
<td>2026-08-05</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55998" target=3D= "_blank" rel=3D"noopener">CVE-2026-55998</a></td>
</tr>

<td class=3D"vendor-product">SUSE--Rancher</td>
<td>A denial-of-service vulnerability was identified in multiple TLS listen= ers in Rancher. Both the cattle-cluster-agent component running in downstre=
am clusters and the Rancher server itself use the dynamiclistener library t=
o serve TLS traffic. Without an effective CN filter configured, dynamiclist= ener automatically appended to each serving certificate any hostname presen= ted via Server Name Indication (SNI) in incoming TLS requests. An unauthent= icated attacker with network access within the affected cluster could send =
a large number of TLS requests with distinct hostnames, causing the serving=
certificate to accumulate an unbounded number of Subject Alternative Names=
(SANs). Eventually, the certificate grows large enough that TLS handshakes=
fail with an excessive message size error, causing a denial of service on = the affected listeners.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55996" target=3D= "_blank" rel=3D"noopener">CVE-2026-55996</a></td>
</tr>

<td class=3D"vendor-product">sveltejs--kit</td>
<td>SvelteKit is a framework for rapidly developing robust, performant web = applications using Svelte. Prior to 2.70.2, the content negotiation header = parser used by SvelteKit's request handling (for headers such as Accept) us=
es a regular expression vulnerable to quadratic backtracking, so a maliciou= sly crafted header value can cause excessive CPU consumption and degrade or=
deny service. Version 2.70.2 fixes the issue.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66062" target=3D= "_blank" rel=3D"noopener">CVE-2026-66062</a></td>
</tr>

<td class=3D"vendor-product">TBTAK BLGEM Software Technologies Research Ins= titute--eta-otp-lock</td>
<td>Invocation of process using visible sensitive information vulnerability=
in T=C3=83=C6=92=C3=85=E2=80=9CB=C3=83=E2=80=9E=C3=82=C2=B0TAK B=C3=83=E2= =80=9E=C3=82=C2=B0LGEM Software Technologies Research Institute eta-otp-loc=
k allows System Footprinting. This issue affects eta-otp-lock: before 1.0.4= .</td>
<td>2026-08-06</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18915" target=3D= "_blank" rel=3D"noopener">CVE-2026-18915</a></td>
</tr>

<td class=3D"vendor-product">techeshta--Layouts for WPBakery</td>
<td>The Layouts for WPBakery plugin for WordPress is vulnerable to unauthor= ized actions due to a missing capability check on the `Layouts_WPB_Remote::= template_sync()` callback registered via `wp_ajax_nopriv_handle_sync` in al=
l versions up to, and including, 1.1.3. This makes it possible for unauthen= ticated attackers to force the WordPress server to issue outbound HTTP requ= ests to the plugin vendor's external API (`https://www.layoutsforwpbakery.c= om/wp-json/layoutsforwpbakery/v1/{templates,categories}`) and to write the = JSON-decoded responses verbatim into the site's `wp_options` table via `set= _transient()` - at any rate the attacker chooses, with no nonce verificatio=
n, capability check, or rate limiting.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7726" target=3D"= _blank" rel=3D"noopener">CVE-2026-7726</a></td>
</tr>

<td class=3D"vendor-product">TestLinkOpenSourceTRMS--TestLink</td>
<td>TestLink 1.9.20 and prior contains an insecure direct object reference = vulnerability that allows any authenticated user, including low-privilege g= uest accounts, to read arbitrary attachments by supplying an integer attach= ment ID to the attachmentdownload.php handler without any project or role a= uthorization check. Attackers can enumerate sequential integer IDs through = the attachment download endpoint to retrieve file contents from private pro= jects they have no membership in, bypassing the per-project access control = model and exposing test specifications, requirements documents, execution e= vidence, and other sensitive uploaded files across the entire installation.= </td>
<td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70561" target=3D= "_blank" rel=3D"noopener">CVE-2026-70561</a></td>
</tr>

<td class=3D"vendor-product">textPlus--Text Message and Call App</td>
<td>A vulnerability was identified in textPlus Text Message and Call App up=
to 8.3.5 on Android. This impacts the function DialerActivity of the compo= nent com.gogii.textplus. Such manipulation leads to improper export of andr= oid application components. The attack needs to be performed locally. The e= xploit is publicly available and might be used. The vendor was contacted ea= rly about this disclosure.</td>
<td>2026-08-03</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18604" target=3D= "_blank" rel=3D"noopener">CVE-2026-18604</a></td>
</tr>

<td class=3D"vendor-product">The-Pocket--PocketFlow (pocketflow-coding-agen=
t cookbook example)</td>
<td>The pocketflow-coding-agent cookbook example in The-Pocket/PocketFlow i= mplements a `_path(workdir, p)` helper as a thin os.path.join(workdir, p) w= rapper with no canonicalization or containment check, used unguarded by the=
ReadFile, ListFiles, PatchRead, and PatchApply file-access tools. Because = os.path.join returns an absolute `p` unchanged (ignoring workdir) and does = not resolve '../' sequences, an agent invocation whose file-tool arguments = include an absolute path or a traversal sequence can read or write files ou= tside the configured working directory. Severity reflects that this affects=
an illustrative cookbook example rather than a core library API; applicati= ons that copy this pattern into production are affected.</td> <td>2026-08-05</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55747" target=3D= "_blank" rel=3D"noopener">CVE-2026-55747</a></td>
</tr>

<td class=3D"vendor-product">themefic--Ultra Addons for Contact Form 7</td> <td>The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable =
to Stored Cross-Site Scripting via the Range Slider 'data-label' and 'data-= separator' attributes in all versions up to, and including, 3.5.43 due to i= nsufficient input sanitization and output escaping. This makes it possible = for authenticated attackers, with contributor-level access and above, to in= ject arbitrary web scripts in pages that will execute whenever a user acces= ses an injected page.</td>
<td>2026-08-07</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12801" target=3D= "_blank" rel=3D"noopener">CVE-2026-12801</a></td>
</tr>

<td class=3D"vendor-product">themegrill--Accelerate</td>
<td>The Accelerate theme for WordPress is vulnerable to unauthorized modifi= cation of data due to a missing capability check on the enqueue_scripts() f= unction in all versions up to, and including, 1.5.3. This makes it possible=
for authenticated attackers, with Subscriber-level access and above, to in= stall and activate the ThemeGrill Demo Importer plugin.</td> <td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-9266" target=3D"= _blank" rel=3D"noopener">CVE-2025-9266</a></td>
</tr>

<td class=3D"vendor-product">thephpleague--commonmark</td> <td>league/commonmark is a PHP library for parsing and rendering CommonMark=
Markdown. From 1.5.0 until 2.9.0, the AttributesExtension's href and src u= nsafe-link filter can be bypassed by embedding control bytes, such as a tab=
, carriage return, line feed, or leading C0 control character, in a javascr= ipt: URL that browsers discard before parsing the scheme, causing the brows=
er to still execute the script even when the unsafe-link filter is enabled.=
This issue is fixed in 2.9.0.</td>
<td>2026-08-06</td>
<td>6.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71478" target=3D= "_blank" rel=3D"noopener">CVE-2026-71478</a></td>
</tr>

<td class=3D"vendor-product">THM-Health--PILOS</td>
<td>PILOS (Platform for Interactive Live-Online Seminars) is a frontend for=
BigBlueButton. From 2.1.0 until 4.14.1, PILOS does not send a Cross-Origin= -Opener-Policy response header, so pages opened by PILOS via a link that op= ens a new browsing context (e.g., target=3D"_blank") retain a window.opener=
reference back to the originating PILOS tab. A malicious destination page = reached this way can use window.opener to navigate or manipulate the origin=
al PILOS tab, a technique known as reverse tabnabbing, potentially redirect= ing an authenticated user to a phishing page that mimics PILOS. This issue =
is fixed in version 4.14.1.</td>
<td>2026-08-06</td>
<td>4.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71555" target=3D= "_blank" rel=3D"noopener">CVE-2026-71555</a></td>
</tr>

<td class=3D"vendor-product">timescale--timescaledb</td>
<td>TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of= -bounds read vulnerability in the Gorilla compression reverse row iterator = that allows authenticated attackers to cause a denial of service by storing=
a crafted compressed datum with an internally inconsistent BitArray. Attac= kers with DML access to a compressed hypertable can trigger an unsigned int= eger wraparound in the reverse iterator bucket index computation, causing a=
read beyond the end of the bucket array, resulting in a SIGSEGV crash that=
can be repeatedly triggered on each subsequent reverse-order scan.</td> <td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70633" target=3D= "_blank" rel=3D"noopener">CVE-2026-70633</a></td>
</tr>

<td class=3D"vendor-product">TinyAGI--TinyAGI</td>
<td>A vulnerability was detected in TinyAGI 0.0.20. The affected element is=
the function buildSystemPrompt of the file packages/server/src/routes/agen= ts.ts. Performing a manipulation results in file inclusion. The attack may =
be initiated remotely. The exploit is now public and may be used. The proje=
ct was informed of the problem early through an issue report but has not re= sponded yet.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19011" target=3D= "_blank" rel=3D"noopener">CVE-2026-19011</a></td>
</tr>

<td class=3D"vendor-product">trainingbusinesspros--Groundhogg CRM, Newslett= ers, and Marketing Automation</td>
<td>The Groundhogg - CRM, Newsletters, and Marketing Automation plugin for = WordPress is vulnerable to Insecure Direct Object Reference in all versions=
up to, and including, 4.5.2 via the GET /wp-json/gh/v4/contacts/<id>=
REST endpoint. The endpoint's permission callback checks only the role-lev=
el view_contacts capability and read_single() returns the full contact reco=
rd by sequential integer ID without the object-level view_contact ownership=
check applied elsewhere in the codebase. This makes it possible for authen= ticated attackers holding view_contacts but not view_others_contacts - nota= bly Groundhogg's built-in Sales Rep role, designed to see only its own cont= acts - to read any contact record on the site, including PII, contact meta,=
owner IDs, the admin edit URL, and (for contacts linked to a WordPress use=
r) that user's full capability set.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11454" target=3D= "_blank" rel=3D"noopener">CVE-2026-11454</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 0.10.0 until 6.54.1,=
a vulnerability in custom themes allowed a staff user to write files outsi=
de of the uploads directory. This could be used to alter the behavior of th=
e installation through custom theme upload path traversal in LocalStorageBa=
se and theme storage name handling. This issue is fixed in version 6.54.1.<=

<td>2026-08-04</td>
<td>6.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70593" target=3D= "_blank" rel=3D"noopener">CVE-2026-70593</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 2.2.0 until 6.54.1, = Ghost Admin did not invalidate existing sessions on login which could have = allowed for session fixation attacks. Successful exploitation would have re= quired another vulnerability on the same domain where Ghost Admin was hoste=
d. This issue is fixed in version 6.54.1.</td>
<td>2026-08-04</td>
<td>6.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70594" target=3D= "_blank" rel=3D"noopener">CVE-2026-70594</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 5.26.0 until 6.54.1,=
the Universal Import feature in Ghost Admin failed to properly sanitize im= ported content resulting in XSS in post content. This issue is fixed in ver= sion 6.54.1.</td>
<td>2026-08-04</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70588" target=3D= "_blank" rel=3D"noopener">CVE-2026-70588</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 1.20.1 until 6.54.1,=
an Administrator-level user could remotely overwrite certain files on the = filesystem through the database backup filename, leading to integrity and a= vailability issues. The database export endpoint failed to reject path sepa= rators in the caller-supplied filename. This issue is fixed in version 6.54= .1.</td>
<td>2026-08-04</td>
<td>5.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70592" target=3D= "_blank" rel=3D"noopener">CVE-2026-70592</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 4.22.0 until 6.54.1,=
a missing validation check allowed users to redeem subscription offers tha=
t were no longer active. This issue is fixed in version 6.54.1.</td>

<td>2026-08-04</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70589" target=3D= "_blank" rel=3D"noopener">CVE-2026-70589</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. Prior to 6.54.1, any staf= f-level user was able to leak the hashed passwords of other staff users thr= ough the Ghost Admin API. An offline password-guessing attack against the h= ashes could lead to account takeover if successful, but Device Verification=
should have prevented an attacker from logging in with a recovered passwor=
d. Depending on the database used, leaked hashes may not have had the corre=
ct casing for all characters, increasing the difficulty of a password-guess= ing attack. This issue is fixed in version 6.54.1.</td>
<td>2026-08-04</td>
<td>4.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70590" target=3D= "_blank" rel=3D"noopener">CVE-2026-70590</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 0.10.0 until 6.54.1,=
a Server-Side Request Forgery in Ghost Admin image fetching allowed any st= aff-level user to perform a blind HTTP GET request against internal hosts. =
No output was returned, but this could have been used to probe open ports o=
n internal hosts. This issue is fixed in version 6.54.1.</td> <td>2026-08-04</td>
<td>4.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70591" target=3D= "_blank" rel=3D"noopener">CVE-2026-70591</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 6.26.0 until 6.54.1,=
a validation issue allowed some functionality, such as Webmentions, to be = abused by an unauthenticated user to make limited HTTP requests to hosts in=
the Ghost server's internal network. A successful attack would not result =
in any response data being returned. This vulnerability is fixed in 6.54.1.= </td>
<td>2026-08-05</td>
<td>4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70595" target=3D= "_blank" rel=3D"noopener">CVE-2026-70595</a></td>
</tr>

<td class=3D"vendor-product">TryGhost--Ghost</td>
<td>Ghost is a Node.js content management system. From 4.9.0 until 6.54.1, =
an input validation issue allowed any staff user to create a post with cont= ent in feature_image_caption that could be used to hijack another staff use= r's Ghost Admin session, resulting in privilege escalation. This issue is f= ixed in 6.54.1.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70596" target=3D= "_blank" rel=3D"noopener">CVE-2026-70596</a></td>
</tr>

<td class=3D"vendor-product">ttttonyhe--OBlog</td>
<td>A security vulnerability has been detected in ttttonyhe OBlog up to 3ca= 6a45a2fcc81f6086751d8af124658720e8f8f. This issue affects some unknown proc= essing of the file /tags.php. Such manipulation of the argument day leads t=
o cross site scripting. The attack may be performed from remote. The exploi=
t has been disclosed publicly and may be used. This product utilizes a roll= ing release system for continuous delivery, and as such, version informatio=
n for affected or updated releases is not disclosed. The vendor was contact=
ed early about this disclosure but did not respond in any way.</td> <td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18968" target=3D= "_blank" rel=3D"noopener">CVE-2026-18968</a></td>
</tr>

<td class=3D"vendor-product">Tutor LMS--Tutor LMS</td>
<td>The Tutor LMS WordPress plugin before 3.9.14 does not properly verify e= nrollment when restricting access to protected course content, allowing aut= henticated users with subscriber-level access and above who are enrolled in=
at least one course to view paid lesson, quiz, and assignment content belo= nging to other courses.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14306" target=3D= "_blank" rel=3D"noopener">CVE-2026-14306</a></td>
</tr>

<td class=3D"vendor-product">uhop--node-re2</td>
<td>node-re2 provides RE2 regular expression bindings for Node.js. Prior to=
version 1.25.1, the WrappedRE2::Replace function built its replacement res= ult and passed it to V8 using ToLocalChecked without checking for the empty=
MaybeLocal that V8 returns when the resulting string or buffer exceeds V8'=
s maximum string length. When a global replace uses an output amplifying re= placement template, the result can grow quadratically with the input size, = and once the result exceeds V8's maximum string length, the unchecked ToLoc= alChecked call causes a fatal, uncatchable process abort instead of a catch= able exception. This issue is fixed in version 1.25.1.</td>
<td>2026-08-06</td>
<td>6.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71430" target=3D= "_blank" rel=3D"noopener">CVE-2026-71430</a></td>
</tr>

<td class=3D"vendor-product">uhop--node-re2</td>
<td>node-re2 provides RE2 regular expression bindings for Node.js. Prior to=
version 1.26.1, passing a Buffer whose final bytes form a truncated (incom= plete) multi-byte UTF-8 sequence could cause the native binding to read pas=
t the end of the allocated buffer while attempting to decode the final, inc= omplete code point. This could result in an out-of-bounds read and potentia=
l disclosure of adjacent memory contents. This issue is fixed in version 1.= 26.1.</td>
<td>2026-08-06</td>
<td>5.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71498" target=3D= "_blank" rel=3D"noopener">CVE-2026-71498</a></td>
</tr>

<td class=3D"vendor-product">Unlimited Elements--Unlimited Elements For Ele= mentor (Free Widgets, Addons, Templates)</td>
<td>Contributor Arbitrary File Download in Unlimited Elements For Elementor=
(Free Widgets, Addons, Templates) <=3D 2.0.14 versions.</td> <td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28146" target=3D= "_blank" rel=3D"noopener">CVE-2026-28146</a></td>
</tr>

<td class=3D"vendor-product">Unlimited Elements--Unlimited Elements For Ele= mentor (Free Widgets, Addons, Templates)</td>
<td>Missing Authorization vulnerability in Unlimited Elements Unlimited Ele= ments For Elementor (Free Widgets, Addons, Templates) allows Exploiting Inc= orrectly Configured Access Control Security Levels. This issue affects Unli= mited Elements For Elementor (Free Widgets, Addons, Templates): from n/a th= rough 2.0.15.</td>
<td>2026-08-03</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28147" target=3D= "_blank" rel=3D"noopener">CVE-2026-28147</a></td>
</tr>

<td class=3D"vendor-product">Vladimir Garagulya--Plugins Garbage Collector = (Database Cleanup)</td>
<td>Unauthenticated Cross Site Request Forgery (CSRF) in Plugins Garbage Co= llector (Database Cleanup) <=3D 0.14 versions.</td>
<td>2026-08-06</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66686" target=3D= "_blank" rel=3D"noopener">CVE-2026-66686</a></td>
</tr>

<td class=3D"vendor-product">vxcontrol--PentAGI</td>
<td>A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This a= ffects an unknown part of the file backend/pkg/templates/prompts/pentester.= tmpl of the component Tool Management Protocol Handler. Executing a manipul= ation can lead to sandbox issue. It is possible to launch the attack remote= ly. The attack requires a high level of complexity. It is indicated that th=
e exploitability is difficult. The exploit has been made available to the p= ublic and could be used for attacks. The vendor was contacted early about t= his disclosure but did not respond in any way.</td>
<td>2026-08-03</td>
<td>5.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18593" target=3D= "_blank" rel=3D"noopener">CVE-2026-18593</a></td>
</tr>

<td class=3D"vendor-product">Wavlink--WL-NU516U1</td>
<td>A vulnerability was determined in Wavlink WL-NU516U1 708c073-mt7628. Af= fected is the function set_sys_adm of the file adm.cgi of the component Adm=
in Password Handler. This manipulation causes os command injection. The att= ack is possible to be carried out remotely. The exploit has been publicly d= isclosed and may be utilized. It is suggested to upgrade the affected compo= nent. The vendor was contacted early, responded in a very professional mann=
er and quickly released a fixed version of the affected product.</td> <td>2026-08-03</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18590" target=3D= "_blank" rel=3D"noopener">CVE-2026-18590</a></td>
</tr>

<td class=3D"vendor-product">webocoders--Udimi Tools</td>
<td>The Udimi Tools plugin for WordPress is vulnerable to unauthorized modi= fication of data due to a missing capability check on the `ajax_disconnect(=
)` function in all versions up to, and including, 3.2. This makes it possib=
le for authenticated attackers, with Subscriber-level access and above, to = delete the plugin's six configuration options - including the API key, conn= ected Udimi user email, and tracking-script payload - effectively disconnec= ting the site from the configured Udimi account. The companion `ajax_connec= t()` handler is missing the same checks, allowing the same low-privilege at= tackers to overwrite those options with an attacker-supplied API key.</td> <td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7456" target=3D"= _blank" rel=3D"noopener">CVE-2026-7456</a></td>
</tr>

<td class=3D"vendor-product">wedevs--ERP: Complete HR, Accounting & CRM=
Suite Built for WooCommerce</td>
<td>The ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM S= upport plugin for WordPress is vulnerable to SQL Injection via the 'erpadva= ncefilter' parameter in all versions up to, and including, 1.17.4 due to in= sufficient escaping on the user supplied parameter and lack of sufficient p= reparation on the existing SQL query. The handler runs the value through sa= nitize_text_field, which preserves single quotes, and the downstream erp_cr= m_contact_advance_filter() function interpolates it directly into a single-= quoted SQL WHERE clause before execution via $wpdb->get_results(). This = makes it possible for authenticated attackers, with the plugin-supplied CRM=
Agent role (or higher CRM Manager / WordPress admin) and the erp_crm_list_= contact capability, to append additional SQL queries into already existing = queries that can be used to extract sensitive information from the database= .</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11421" target=3D= "_blank" rel=3D"noopener">CVE-2026-11421</a></td>
</tr>

<td class=3D"vendor-product">WonderTrader--WonderTrader</td>
<td>A weakness has been identified in WonderTrader up to 0.9.9. This vulner= ability affects the function MatchEngine::update_lob of the file src/WtBtCo= re/MatchEngine.cpp of the component Internal Limit Order Book Cache Handler=
. This manipulation causes enforcement of behavioral workflow. Remote explo= itation of the attack is possible. The exploit has been made available to t=
he public and could be used for attacks. The vendor was contacted early abo=
ut this disclosure but did not respond in any way.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19037" target=3D= "_blank" rel=3D"noopener">CVE-2026-19037</a></td>
</tr>

<td class=3D"vendor-product">WonderTrader--WonderTrader</td>
<td>A vulnerability was determined in WonderTrader up to 0.9.9. This impact=
s an unknown function of the file src/Includes/WTSTradeDef.hpp of the compo= nent TraderATP Cash Trade Conversion. Executing a manipulation of the argum= ent m_offsetType can lead to use of uninitialized variable. The attack can =
be executed remotely. The exploit has been publicly disclosed and may be ut= ilized. The vendor was contacted early about this disclosure but did not re= spond in any way.</td>
<td>2026-08-07</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19212" target=3D= "_blank" rel=3D"noopener">CVE-2026-19212</a></td>
</tr>

<td class=3D"vendor-product">WonderTrader--WonderTrader</td>
<td>A vulnerability was identified in WonderTrader up to 0.9.9. Affected is=
the function _undone_qty in the library src/WtCore/TraderAdapter.h of the = component Pending Order Handler. The manipulation of the argument getUndone= Qty leads to enforcement of behavioral workflow. The attack is possible to =
be carried out remotely. The exploit is publicly available and might be use=
d. The vendor was contacted early about this disclosure but did not respond=
in any way.</td>
<td>2026-08-07</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19213" target=3D= "_blank" rel=3D"noopener">CVE-2026-19213</a></td>
</tr>

<td class=3D"vendor-product">wongcyrus--ExcelLexBot</td>
<td>A vulnerability was detected in wongcyrus ExcelLexBot up to 0.0.3. This=
affects the function ExcelLexBotS3TriggerFunction of the component Lambda = Function Handler. Performing a manipulation results in improper privilege m= anagement. The attack may be initiated remotely. The vendor was contacted e= arly about this disclosure but did not respond in any way. This vulnerabili=
ty only affects products that are no longer supported by the maintainer.</t=

<td>2026-08-09</td>
<td>4.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19360" target=3D= "_blank" rel=3D"noopener">CVE-2026-19360</a></td>
</tr>

<td class=3D"vendor-product">WP Events Manager--WP Events Manager</td>

<td>The WP Events Manager WordPress plugin before 2.2.5 does not verify tha=
t an incoming payment notification originates from the site's configured me= rchant account, nor that the paid amount matches the booking total, allowin=
g unauthenticated users to mark any booking as paid without a legitimate pa= yment reaching the merchant, including other users' bookings.</td> <td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15148" target=3D= "_blank" rel=3D"noopener">CVE-2026-15148</a></td>
</tr>

<td class=3D"vendor-product">WP Hotel Booking--WP Hotel Booking</td>
<td>The WP Hotel Booking WordPress plugin before 2.3.3 does not ensure that=
room quantities and the resulting order total are non-negative when placin=
g a booking, and relies on client-controlled cart data, allowing unauthenti= cated users to create confirmed reservations for free or at an arbitrarily = reduced price.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15149" target=3D= "_blank" rel=3D"noopener">CVE-2026-15149</a></td>
</tr>

<td class=3D"vendor-product">WP Hotel Booking--WP Hotel Booking</td>
<td>The WP Hotel Booking WordPress plugin before 2.3.2 does not verify that=
a payment notification corresponds to a payment made to the site's own mer= chant account, nor that the paid amount matches the booking total, allowing=
unauthenticated users to have their bookings marked as fully paid without = any payment reaching the site owner.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15152" target=3D= "_blank" rel=3D"noopener">CVE-2026-15152</a></td>
</tr>

<td class=3D"vendor-product">WP Travel Engine--WP Travel Engine</td>
<td>The WP Travel Engine WordPress plugin before 6.8.2 does not verify that=
an incoming PayPal payment notification was sent to the site's configured = merchant account, nor that the paid amount matches the order total, before = marking a booking as paid, allowing unauthenticated attackers to mark booki= ngs as fully paid using a token payment made to an attacker-controlled acco= unt.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12501" target=3D= "_blank" rel=3D"noopener">CVE-2026-12501</a></td>
</tr>

<td class=3D"vendor-product">WP Zone--Custom CSS and JavaScript</td> <td>Unauthenticated Sensitive Data Exposure in Custom CSS and JavaScript &l= t;=3D 2.0.16 versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66683" target=3D= "_blank" rel=3D"noopener">CVE-2026-66683</a></td>
</tr>

<td class=3D"vendor-product">WPKube--CAPTCHA 4WP</td>
<td>Unauthenticated Bypass Vulnerability in CAPTCHA 4WP <=3D 7.6.0 versi= ons.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-32469" target=3D= "_blank" rel=3D"noopener">CVE-2026-32469</a></td>
</tr>

<td class=3D"vendor-product">wpxpo--Post Grid Gutenberg Blocks PostX</td> <td>The Post Grid Gutenberg Blocks for News, Magazines, Blog Websites - Pos=
tX plugin for WordPress is vulnerable to Stored Cross-Site Scripting via th=
e 'inputPlaceHolder' parameter in all versions up to, and including, 5.0.13=
due to insufficient input sanitization and output escaping. This makes it = possible for authenticated attackers, with Contributor-level access and abo= ve, to inject arbitrary web scripts in pages that will execute whenever a u= ser accesses an injected page.</td>
<td>2026-08-06</td>
<td>6.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5158" target=3D"= _blank" rel=3D"noopener">CVE-2026-5158</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Control Plane</td>
<td>The user self-signup flow in multiple WSO2 products fails to adequately=
validate user-supplied input. This weakness allows arbitrary unvalidated d= ata to be included within user claims, which are then used by downstream pr= ocesses. Allowing unvalidated input into user claims can lead to various se= curity risks. Malicious or malformed data injected during signup could be p= rocessed by other parts of the application, potentially enabling attacks su=
ch as content manipulation, redirection, user interface inconsistencies, un= authorized actions, and data exposure. The actual impact depends on how the=
compromised data is consumed and the privileges associated with the affect=
ed users.</td>
<td>2026-08-06</td>
<td>4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2024-10302" target=3D= "_blank" rel=3D"noopener">CVE-2024-10302</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>Unused authorization codes issued to deleted users are not being proper=
ly invalidated or removed from the system. This allows for the persistence =
of these codes, enabling them to be potentially reused. If an attacker poss= esses both the authorization code and the associated client credentials (cl= ient ID and client secret), they can leverage these unused codes to obtain = access tokens on behalf of users who have already been deleted. This may le=
ad to unauthorized access to sensitive resources and services, contingent o=
n the scopes originally authorized for the compromised authorization code.<=

<td>2026-08-06</td>
<td>4.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2024-8995" target=3D"= _blank" rel=3D"noopener">CVE-2024-8995</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>The Swagger UI Try-out console within the API Publisher documentation a= llows an external Swagger API definition URL to be loaded, overriding the e= xisting API definitions within the Publisher portal. By exploiting this vul= nerability, malicious actors can deceive users into interacting with these = overwritten API definitions. This could lead to the exposure of sensitive i= nformation or the initiation of unintended requests to backend services.</t=

<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-6508" target=3D"= _blank" rel=3D"noopener">CVE-2025-6508</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 API Manager</td>
<td>When an Event Publisher output adapter is configured with irrelevant pr= operties, the affected products log these properties. This logging occurs w= ithout sufficient validation or sanitization of the property values. A mali= cious actor with access to the 'wso2carbon' log files could retrieve sensit= ive information, such as user credentials or other confidential data, that = was inadvertently logged due to misconfiguration, potentially leading to un= authorized access.</td>
<td>2026-08-06</td>
<td>4.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-0637" target=3D"= _blank" rel=3D"noopener">CVE-2026-0637</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Enterprise Integrator</td>
<td>The account locking mechanism fails to trigger when secondary user stor=
es are inaccessible. The software does not maintain a consistent state for = account locking if it cannot reach all configured user stores, allowing an = attacker to repeatedly attempt authentication with invalid credentials with= out triggering the lockout mechanism for users within active stores. When t=
he account locking mechanism is bypassed due to the inaccessibility of seco= ndary user stores, users in accessible user stores are left vulnerable to b= rute force attacks. A malicious actor can exploit this by attempting numero=
us invalid password combinations against a user account without the expecte=
d account lockout consequence.</td>
<td>2026-08-06</td>
<td>5.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2024-6832" target=3D"= _blank" rel=3D"noopener">CVE-2024-6832</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Enterprise Integrator</td>
<td>When internal roles are removed from a user within the WSO2 product, th=
e system fails to invalidate any previously issued authentication tokens as= sociated with that user. This vulnerability could allow users to retain the=
ir previous access privileges even after their roles have been revoked. As =
a result, a user can continue to perform unauthorized actions or access res= tricted resources until the expired tokens naturally expire.</td> <td>2026-08-06</td>
<td>5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-12317" target=3D= "_blank" rel=3D"noopener">CVE-2025-12317</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server</td>
<td>The Ajax processor within the Carbon console fails to adequately protec=
t state-changing operations from Cross-Site Request Forgery (CSRF) attacks.=
Specifically, it utilizes the HTTP GET method for these operations, and wh= ile the SameSite=3DLax cookie attribute is employed for mitigation, this me= chanism is bypassed as it permits cookies to be sent with cross-origin top-= level navigation requests, including GET requests. This allows an attacker =
to trick an authenticated user's browser into unknowingly executing uninten= ded actions. An attacker can exploit this vulnerability to perform unauthor= ized state-altering requests on behalf of authenticated users. This could l= ead to consequences such as data modification, account changes, or other ac= tions that could result in data compromise or loss of user control over the=
ir account. However, this attack is only feasible if the Carbon console and=
related services are exposed to the public internet, which is not recommen= ded according to WSO2's security guidelines.</td>
<td>2026-08-06</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-13394" target=3D= "_blank" rel=3D"noopener">CVE-2025-13394</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server</td>
<td>When secondary user stores are configured, the implicit-association res= olver incorrectly initializes from a secondary user store and bypasses the = primary user store during search and uniqueness checks. This allows a subje=
ct to be associated with an unintended local account if the same lookup cla=
im (e.g., username or email) exists in both the primary and a secondary sto= re. If duplicate claim values exist across user stores, this issue can lead=
to identity confusion due to incorrect implicit associations when using an=
external Identity Provider (IDP). Legitimate user accounts in the primary = user store may fail to associate correctly with their corresponding externa=
l IDP accounts, potentially restricting access if the secondary account has=
fewer privileges. Deployments are not affected if no secondary user stores=
are configured, implicit association is disabled, or claim values are glob= ally unique.</td>
<td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-11850" target=3D= "_blank" rel=3D"noopener">CVE-2025-11850</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server</td>
<td>The system accepts authentication requests without sufficient validatio=
n to enforce tenant isolation when using Email OTP, SMS OTP, or Magic Link =
as first-factor authenticators. This failure to adequately separate user da=
ta between tenants can lead to the exposure of personally identifiable info= rmation. Successful exploitation allows an attacker to disclose personally = identifiable information of users in different tenants, resulting in privac=
y violations and potential regulatory non-compliance. This may include unau= thorized access to user details such as mobile numbers.</td> <td>2026-08-06</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-13909" target=3D= "_blank" rel=3D"noopener">CVE-2025-13909</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Micro Integrator</td>
<td>The Class Mediator fails to correctly validate or sanitize `messageCont= ext` properties when they are used to populate dynamic values. This allows = authenticated users to potentially access or modify data across different s= ystem invocations that should be isolated. This weakness can lead to the di= sclosure of sensitive information belonging to other users or the unintende=
d modification of system data by authenticated users. The exact impact depe= nds on how `messageContext` properties are utilized within the affected WSO=
2 products.</td>
<td>2026-08-06</td>
<td>6.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2024-6541" target=3D"= _blank" rel=3D"noopener">CVE-2024-6541</a></td>
</tr>

<td class=3D"vendor-product">xpro--Xpro Addons 140+ Widgets for Elementor</=

<td>The Xpro Addons plugin for WordPress is vulnerable to unauthorized crea= tion of data due to a missing capability check on the `get_menu_content_edi= tor()` function in all versions up to, and including, 1.5.1. This makes it = possible for authenticated attackers, with Subscriber-level access and abov=
e, to create arbitrary published posts of the `xpro_content` custom post ty=
pe with attacker-controlled titles. The created posts are publicly queryabl=
e on the front-end, enabling content injection, SEO spam, and database poll= ution.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-7105" target=3D"= _blank" rel=3D"noopener">CVE-2026-7105</a></td>
</tr>

<td class=3D"vendor-product">xwp--Stream Activity Log & Audit Trail</td=

<td>The Stream plugin for WordPress is vulnerable to authorization bypass i=
n all versions up to, and including, 4.2.0. This is due to the plugin not p= roperly verifying that a user is authorized to perform an action. This make=
s it possible for authenticated attackers, with subscriber-level access and=
above, to access all Stream activity records via the Heartbeat API.</td> <td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11907" target=3D= "_blank" rel=3D"noopener">CVE-2026-11907</a></td>
</tr>

<td class=3D"vendor-product">yeqifu--warehouse</td>
<td>A vulnerability was determined in yeqifu warehouse up to aaf29962ba407d= 22d991781de28796ee7b4670e4. This issue affects some unknown processing of t=
he file src/main/java/com/yeqifu/sys/controller/FileController.java. This m= anipulation of the argument path causes path traversal. It is possible to i= nitiate the attack remotely. The exploit has been publicly disclosed and ma=
y be utilized. This product is using a rolling release to provide continiou=
s delivery. Therefore, no version details for affected nor updated releases=
are available. The vendor was contacted early about this disclosure but di=
d not respond in any way.</td>
<td>2026-08-05</td>
<td>4.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18903" target=3D= "_blank" rel=3D"noopener">CVE-2026-18903</a></td>
</tr>

<td class=3D"vendor-product">YITHEMES--YITH WooCommerce Zoom Magnifier</td> <td>Unauthenticated Sensitive Data Exposure in YITH WooCommerce Zoom Magnif= ier <=3D 2.52.0 versions.</td>
<td>2026-08-06</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-28169" target=3D= "_blank" rel=3D"noopener">CVE-2026-28169</a></td>
</tr>

<td class=3D"vendor-product">yushine--InnoShop</td>
<td>A flaw has been found in yushine InnoShop up to 0.8.2. Affected by this=
issue is the function FileManagerController::destroyFiles of the file inno= packs/restapi/routes/panel-api.php of the component Files Endpoint. This ma= nipulation causes path traversal. The attack may be initiated remotely. The=
exploit has been published and may be used. The vendor was contacted early=
about this disclosure but did not respond in any way.</td>
<td>2026-08-05</td>
<td>5.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18959" target=3D= "_blank" rel=3D"noopener">CVE-2026-18959</a></td>
</tr>

<td class=3D"vendor-product">zephyrproject--zephyr</td>
<td>The SF32LB MPI QSPI NOR flash driver (drivers/flash/flash_sf32lb_mpi_qs= pi_nor.c) validated the flash offset and length on its read and write paths=
with the test (offset + size) > data->size. Because offset is a sign=
ed off_t while size is unsigned, a negative offset is converted to a large = unsigned value and the addition can wrap to a small result that passes the = check. The read path then performs memcpy(dst, (void *)(data->base + off= set), size) and the write path programs flash at offset and cache-invalidat=
es data->base + offset, in both cases accessing memory outside the mappe=
d flash window. The driver's erase path already rejected negative offsets, = but read and write did not. In builds with CONFIG_USERSPACE, flash_read and=
flash_write are syscalls whose verifiers validate the device object and th=
e caller's buffer but deliberately delegate offset bounds checking to the d= river. An unprivileged thread that has been granted access to this flash de= vice can therefore call the syscall with a crafted negative offset and a bu= ffer valid in its own memory domain, and reach the unchecked access. The mo=
st direct impact is on the read path: by choosing a negative offset and mat= ching size, an attacker slides the memcpy source below the flash base and c= opies arbitrary CPU-addressable memory into its own buffer, disclosing memo=
ry it is not authorized to read. The write path additionally allows program= ming flash at an out-of-range address and invalidating an attacker-chosen c= ache range, affecting integrity and availability. Reachability requires use= rspace to be enabled and the raw flash device object to be granted to an un= trusted thread. The fix replaces the check with qspi_nor_range_is_valid(), = which rejects negative offsets and performs the bound comparison in overflo= w-safe 64-bit arithmetic on both paths, and additionally adds an SRAM DMA b= ounce buffer plus source/destination overlap rejection to prevent a separat=
e DMA bus-hang condition.</td>
<td>2026-08-07</td>
<td>6.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11743" target=3D= "_blank" rel=3D"noopener">CVE-2026-11743</a></td>
</tr>

<td class=3D"vendor-product">zhayujie--CowAgent</td>
<td>A vulnerability was detected in zhayujie CowAgent up to 2.1.1. This vul= nerability affects the function _select_tools of the file agent/evolution/e= xecutor.py of the component Self-Evolution Review Agent. Performing a manip= ulation results in incorrect authorization. The attack is possible to be ca= rried out remotely. The exploit is now public and may be used.</td> <td>2026-08-06</td>
<td>6.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18992" target=3D= "_blank" rel=3D"noopener">CVE-2026-18992</a></td>
</tr>

<td class=3D"vendor-product">ZomboDroid--Meme Generator App</td>
<td>A security vulnerability has been detected in ZomboDroid Meme Generator=
App 4.6830 on Android. This issue affects the function t5.l.c of the compo= nent com.zombodroid.MemeGenerator. Such manipulation leads to path traversa=
l. Local access is required to approach this attack. The exploit has been d= isclosed publicly and may be used. The vendor was contacted early about thi=
s disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18853" target=3D= "_blank" rel=3D"noopener">CVE-2026-18853</a></td>
</tr>

<td class=3D"vendor-product">ZTE--F689</td>
<td>By accessing unencrypted information in the device firmware, an attacke=
r can obtain credentials related to the integrity verification of a specifi=
c application function on the device.</td>
<td>2026-08-07</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49008" target=3D= "_blank" rel=3D"noopener">CVE-2026-49008</a></td>
</tr>

<td class=3D"vendor-product">ZTE--F689</td>
<td>By accessing unencrypted information in the device firmware, an attacke=
r can obtain credentials related to TLS transmission.</td>
<td>2026-08-07</td>
<td>5.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49006" target=3D= "_blank" rel=3D"noopener">CVE-2026-49006</a></td>
</tr>

<td class=3D"vendor-product">ZTE--NX799J (Red Magic 11 Air)</td>
<td>The built-in PostgreSQL service on the mobile device suffers from misco= nfiguration flaws and command injection vulnerabilities. This service liste=
ns on a specific port, runs with root privileges, and is protected by weak = credentials. The database supports the COPY FROM PROGRAM syntax, allowing l= ocal attackers to bypass Android's permission sandbox and gain full root ac= cess.</td>
<td>2026-08-05</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49004" target=3D= "_blank" rel=3D"noopener">CVE-2026-49004</a></td>
</tr>

<td class=3D"vendor-product">Zyxel--WAX650S firmware</td>
<td>An improper authentication vulnerability in the "social_login.cgi" CGI = program in Zyxel WAX650S firmware versions through 7.10(ABRM.4)C0 could all=
ow an attacker on the WLAN to bypass captive portal authentication.</td> <td>2026-08-04</td>
<td>6.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8508" target=3D"= _blank" rel=3D"noopener">CVE-2026-8508</a></td>
</tr>
</tbody>
</table>
<p><a href=3D"#top">Back to top</a></p>
</div>
<div id=3D"low_v">
<h2 id=3D"low_v_title">Low Vulnerabilities</h2>
<table class=3D"table no-tablesaw" style=3D"table-layout: fixed; width: 100= %;" border=3D"1" summary=3D"Low Vulnerabilities">
<thead>

<th class=3D"vendor-product" style=3D"width: 24%;" scope=3D"col">
<span class=3D"primary-vendor">Primary</span><br><span class=3D"primary-ven= dor">Vendor</span> -- Product</th>
<th style=3D"width: 44%;" scope=3D"col">Description</th>
<th style=3D"width: 10%;" scope=3D"col">Published</th>
<th style=3D"width: 8%;" scope=3D"col">CVSS Score</th>
<th style=3D"width: 7%;" scope=3D"col">Source Info</th>
</tr>
</thead>
<tbody>

<td class=3D"vendor-product">Baserow--Baserow</td>
<td>A security flaw has been discovered in Baserow up to 2.3.2. Affected by=
this issue is the function BaserowImpersonateAuthTokenSerializer of the fi=
le backend/src/baserow/api/admin/users/serializers.py of the component Inac= tive Non-Staff User Handler. Performing a manipulation results in improper = authorization. Remote exploitation of the attack is possible. The complexit=
y of an attack is rather high. The exploitation is known to be difficult. T=
he presence of this vulnerability remains uncertain at this time. Upgrading=
to version 2.3.3 can resolve this issue. The affected component should be = upgraded. The project maintainer explains: "While the problem exists, I'm n=
ot really sure if it's a vulnerability. (....) Even though the back gives a=
token for a deactivate user, none of the endpoints actually work. That sai=
d, we will fix it, but so far it seems more like a bug instead of a vulnera= bility."</td>
<td>2026-08-04</td>
<td>2.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18817" target=3D= "_blank" rel=3D"noopener">CVE-2026-18817</a></td>
</tr>

<td class=3D"vendor-product">cli--cli</td>
<td>GitHub CLI (gh) is GitHub's official command line tool. Prior to versio=
n 2.97.0, gh auth status masked only the characters after the last undersco=
re in certain fine-grained personal access tokens and GitHub App tokens. As=
a result, part of an affected token could appear in terminal or CI output = that is captured or shared. Authenticated users are affected if they ran gh=
auth status (without the --show-token flag) with a token type whose format=
contains an underscore after the prefix. This includes fine-grained person=
al access tokens (github_pat_*) and GitHub App installation and user access=
tokens (ghs_*, ghu_*; for example, ghs_<APPID>_<JWT>), as well=
as the Actions GITHUB_TOKEN. Classic tokens such as gho_* and ghp_* have a=
n underscore-free body and are not affected. This issue is fixed in version=
2.97.0.</td>
<td>2026-08-06</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64652" target=3D= "_blank" rel=3D"noopener">CVE-2026-64652</a></td>
</tr>

<td class=3D"vendor-product">DataGear--DataGear</td>
<td>A vulnerability was determined in DataGear up to 5.0.0. The impacted el= ement is the function HtmlTplDashboardWidgetHtmlRenderer of the file HtmlTp= lDashboardWidgetHtmlRenderer.java of the component Chart Name Handler. This=
manipulation of the argument Title causes cross site scripting. It is poss= ible to initiate the attack remotely. The exploit has been publicly disclos=
ed and may be utilized. The vendor was contacted early about this disclosur=
e but did not respond in any way.</td>
<td>2026-08-06</td>
<td>2.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19110" target=3D= "_blank" rel=3D"noopener">CVE-2026-19110</a></td>
</tr>

<td class=3D"vendor-product">Easy Appointments--Easy Appointments</td>

<td>The Easy Appointments WordPress plugin through 3.12.26 does not correct=
ly validate shortcode input in one of its block-rendering actions, checking=
only the first tag of the supplied string against an allowlist while rende= ring the entire string, allowing users with contributor-level access to exe= cute arbitrary registered shortcodes.</td>
<td>2026-08-06</td>
<td>2.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14225" target=3D= "_blank" rel=3D"noopener">CVE-2026-14225</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.10, 40.9.0, 41.2.1, and 42.0= .0-beta.3, offscreen rendering frame data received from the GPU process was=
not fully validated by the main process. A compromised GPU process could c= ause the main process to read out-of-bounds memory while producing paint ev= ent images, disclosing memory or crashing the app. This issue is fixed in 3= 9.8.10, 40.9.0, 41.2.1, and 42.0.0-beta.3.</td>
<td>2026-08-05</td>
<td>3.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70598" target=3D= "_blank" rel=3D"noopener">CVE-2026-70598</a></td>
</tr>

<td class=3D"vendor-product">electron--electron</td>
<td>Electron is a framework for writing cross-platform desktop applications=
using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.= 0-beta.3, the native autofill popup could be positioned by a cross-origin i= frame outside that iframe's bounds, over the embedding page's UI, enabling = clickjacking or spoofing of trusted UI. Apps are only affected if they embe=
d untrusted content in iframes within windows that also display trusted UI.=
Apps that do not embed untrusted third-party content are not affected. Thi=
s issue is fixed in versions 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3.</td=

<td>2026-08-05</td>
<td>3.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70600" target=3D= "_blank" rel=3D"noopener">CVE-2026-70600</a></td>
</tr>

<td class=3D"vendor-product">epsilla-cloud--vectordb</td>
<td>A vulnerability has been found in epsilla-cloud vectordb up to 0.3.18/d= f5a5f5afb85a2376a0f2f316c79dea9b2c6ac7a. This impacts the function SplitTok= ens/ShuntingYard of the file engine/query/expr/expr.cpp of the component Fi= lter Parser. Such manipulation leads to improper check for unusual conditio= ns. The attack needs to be performed locally. The exploit has been disclose=
d to the public and may be used. The vendor was contacted early about this = disclosure but did not respond in any way.</td>
<td>2026-08-04</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18852" target=3D= "_blank" rel=3D"noopener">CVE-2026-18852</a></td>
</tr>

<td class=3D"vendor-product">FoundationAgents--MetaGPT</td>
<td>A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2.=
This affects the function read of the file metagpt/tools/libs/editor.py. T= his manipulation causes path traversal. The attack needs to be launched loc= ally. The exploit has been publicly disclosed and may be utilized. The vend=
or was contacted early about this disclosure but did not respond in any way= .</td>
<td>2026-08-06</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19059" target=3D= "_blank" rel=3D"noopener">CVE-2026-19059</a></td>
</tr>

<td class=3D"vendor-product">ggml-org--llama.cpp</td>
<td>A vulnerability was determined in ggml-org llama.cpp e15efe0. Affected =
by this issue is some unknown functionality of the file common/jinja/parser= .cpp of the component Jinja Minja Template Parser. Executing a manipulation=
with the input {{9|9|{ can lead to reachable assertion. The attack require=
s local access. The exploit has been publicly disclosed and may be utilized=
. The project was informed of the problem early through an issue report but=
has not responded yet.</td>
<td>2026-08-03</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18581" target=3D= "_blank" rel=3D"noopener">CVE-2026-18581</a></td>
</tr>

<td class=3D"vendor-product">HCL Software--HCL iControl</td>
<td>HCL iControl is affected by Missing Access Control vulnerability. The a= pplication failed to enforce proper granular access controls, allowing user=
s to access or view administrator-level functionalities without appropriate=
authorization.</td>
<td>2026-08-03</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56608" target=3D= "_blank" rel=3D"noopener">CVE-2026-56608</a></td>
</tr>

<td class=3D"vendor-product">HelloGGX--shadcn-vue-mcp</td>
<td>A weakness has been identified in HelloGGX shadcn-vue-mcp up to e170e27= 7b94235cde627803277fc8c41103a4d38. Affected by this issue is the function f= s.promises.readFile of the file src/server/callback-server.ts. This manipul= ation of the argument filepath causes path traversal. The attack is restric= ted to local execution. This product adopts a rolling release strategy to m= aintain continuous delivery. Therefore, version details for affected or upd= ated releases cannot be specified. The project was informed of the problem = early through an issue report but has not responded yet.</td> <td>2026-08-09</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19324" target=3D= "_blank" rel=3D"noopener">CVE-2026-19324</a></td>
</tr>

<td class=3D"vendor-product">HKUDS--nanobot</td>
<td>A flaw has been found in HKUDS nanobot up to 0.2.1. The impacted elemen=
t is the function ExecTool._prepare_command of the file nanobot/agent/tools= /shell.py of the component Login-shell Environment Handler. Executing a man= ipulation can lead to information disclosure. The attack requires local acc= ess. The exploit has been published and may be used. Upgrading to version 0= .3.0 is sufficient to resolve this issue. This patch is called 4525. The af= fected component should be upgraded. Multiple issues were reported to the p= roject. They reacted with a high level of professionalism and kindness: "Th=
e report concerns shell startup files reintroducing environment variables w= hen command execution defaults to a login shell. The default was changed so=
exec does not use a login shell unless explicitly requested".</td> <td>2026-08-07</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19245" target=3D= "_blank" rel=3D"noopener">CVE-2026-19245</a></td>
</tr>

<td class=3D"vendor-product">honojs--hono</td>
<td>Hono is a Web application framework that provides support for any JavaS= cript runtime. From 4.7.0 to 4.12.33, the Proxy Helper proxy() function in = hono/proxy does not remove response headers named by the origin's Connectio=
n header. Per RFC 9110 Section 7.6.1, an intermediary must remove the heade=
r fields listed in a message's Connection header field before forwarding th=
e message, in addition to the well known hop by hop headers, but the proxy(=
) function only removed the well known hop by hop headers, including Connec= tion itself, from origin responses. A client may therefore receive response=
headers that the origin intended only for its immediate peer, disclosing c= onnection scoped or internal metadata contained in such headers, when an ap= plication proxies responses from an origin that declares additional, non st= andard headers as hop by hop via the Connection response header. This issue=
is fixed in version 4.12.34.</td>
<td>2026-08-07</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71849" target=3D= "_blank" rel=3D"noopener">CVE-2026-71849</a></td>
</tr>

<td class=3D"vendor-product">IBM--Business Automation Workflow containers a=
nd traditional</td>
<td>IBM Business Automation Workflow containers and traditional 26.0.0, 25.= 0.0 through 25.0.0 Interim Fix 005, 24.0.1 through 24.0.1 Interim Fix 007, = and 24.0.0 through 24.0.0 Interim Fix 009 IBM Business Automation Workflow = fails to properly verify that the hostname matches the server certificate p= otentially allowing connections to an attacker-controlled server.</td> <td>2026-08-05</td>
<td>3.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12730" target=3D= "_blank" rel=3D"noopener">CVE-2026-12730</a></td>
</tr>

<td class=3D"vendor-product">Insta--InstaKNXServiceApp</td>
<td>A flaw has been found in Insta InstaKNXServiceApp 1.2.3.1469. Affected =
by this issue is the function CreateWebClientAndDownloadFileList of the com= ponent Firmware Update Handler. Executing a manipulation can lead to insuff= icient verification of data authenticity. It is possible to launch the atta=
ck remotely. Attacks of this nature are highly complex. The exploitation is=
known to be difficult. The vendor was contacted early about this disclosur=
e but did not respond in any way.</td>
<td>2026-08-06</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19061" target=3D= "_blank" rel=3D"noopener">CVE-2026-19061</a></td>
</tr>

<td class=3D"vendor-product">Lenovo--XClarity Essentials OneCLI</td>
<td>A temporary file creation vulnerability in the Linux version of Lenovo = XClarity Essentials OneCLI 5.5.0 and below could allow a local low-privileg=
ed attacker to overwrite or truncate arbitrary local files with program-gen= erated data when OneCLI is executed with elevated privileges.</td>

<td>2026-08-04</td>
<td>3.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16791" target=3D= "_blank" rel=3D"noopener">CVE-2026-16791</a></td>
</tr>

<td class=3D"vendor-product">macrozheng--mall</td>
<td>A flaw has been found in macrozheng mall 0504e86. This vulnerability af= fects unknown code of the file /sso/getAuthCode of the component mall-porta=
l Module. Executing a manipulation can lead to weak password recovery. The = attack may be launched remotely. This attack is characterized by high compl= exity. It is stated that the exploitability is difficult. The exploit has b= een published and may be used. The vendor deleted the GitHub issue for this=
vulnerability without any explanation. Afterwards the vendor was contacted=
early about this disclosure via email but did not respond in any way.</td> <td>2026-08-09</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19361" target=3D= "_blank" rel=3D"noopener">CVE-2026-19361</a></td>
</tr>

<td class=3D"vendor-product">Meesho--Online Shopping App</td>
<td>A vulnerability was identified in Meesho Online Shopping App up to 2026= 0607 on Android. Affected by this vulnerability is an unknown functionality=
of the component com.meesho.supply. Such manipulation of the argument user= _id/phone number/email address/name leads to cleartext storage of sensitive=
information. The attack can be executed directly on the physical device. T=
he exploit is publicly available and might be used. The vendor was contacte=
d early about this disclosure.</td>
<td>2026-08-03</td>
<td>2.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18591" target=3D= "_blank" rel=3D"noopener">CVE-2026-18591</a></td>
</tr>

<td class=3D"vendor-product">mifi--lossless-cut</td>
<td>A vulnerability was determined in mifi lossless-cut up to 3.69.0. Affec= ted by this issue is some unknown functionality of the file src/main/httpSe= rver.ts of the component Built-in HTTP API Service. Executing a manipulatio=
n can lead to server-side request forgery. The attack requires access to th=
e local network. This attack is characterized by high complexity. The explo= itation is known to be difficult. The exploit has been publicly disclosed a=
nd may be utilized. This patch is called 260802348955231442c4bae6c2d9d8ede9= 47af0a. It is best practice to apply a patch to resolve this issue. The pro= ject maintainer provides this view: "I'm not sure that this is a critical v= ulnerability, because it is behind an experimental CLI flag and the NTLM be= havior isn't really a LosslessCut bug." The CVSS vector reflects the high l= evel of pre-requisites.</td>
<td>2026-08-09</td>
<td>3.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19352" target=3D= "_blank" rel=3D"noopener">CVE-2026-19352</a></td>
</tr>

<td class=3D"vendor-product">NocteDefensor--LudusMCP</td>
<td>A security vulnerability has been detected in NocteDefensor LudusMCP up=
to 1.0.24. The impacted element is an unknown function of the file src/too= ls/ludusEnvironmentGuidesSearch.ts of the component ludus_environment_guide= s_search. Such manipulation of the argument guide_name leads to path traver= sal. Local access is required to approach this attack. The project was info= rmed of the problem early through an issue report but has not responded yet= .</td>
<td>2026-08-06</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19046" target=3D= "_blank" rel=3D"noopener">CVE-2026-19046</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.6, the bootstrap = challenge endpoint at `/api/tenants/{id}/appointments/bootstrap-challenge` = issues a SHA-256 proof-of-work with `difficulty=3D4` hex zeros, equivalent =
to 16 bits of work. Modern hardware solves this in under 200 milliseconds, = providing essentially no friction against automated abuse of the patient bo= oking flow. Proof-of-work is used in the booking flow as a rate-limiter for=
unauthenticated clients establishing tunnels and submitting appointments. =
At 16 bits of difficulty, the construct is decorative rather than effective=
. An attacker can solve PoW challenges as fast as the server can issue them=
, defeating the rate-limiting purpose. The handler also calls `challengeThr= ottleService.checkThrottle(binding, "passkey")`, but the binding includes a= ttacker-controlled values (`tunnelId`, `clientPublicKey`, and optional `ema= ilHash`). For each fresh attempt, the attacker can supply new values, produ= cing a new throttle key and bypassing the per-binding accumulation. Practic=
al abuse friction is therefore the PoW difficulty itself, not a stable per-=
IP or per-email server-side throttle. Version 1.0.6 fixes the issue.</td> <td>2026-08-06</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48082" target=3D= "_blank" rel=3D"noopener">CVE-2026-48082</a></td>
</tr>

<td class=3D"vendor-product">open-reception--appointment-booking-software</=

<td>OpenReception's appointment booking software provides an end-to-end enc= rypted appointment booking platform. Prior to version 1.0.6, when a TENANT_= ADMIN deletes an existing staff user, the underlying `StaffService.deleteSt= affMember()` runs an additional invite cleanup that deletes from the centra=
l `user_invite` table by email. The `email` clause has no `tenantId` predic= ate. Any pending invite in any tenant that shares the deleted staff's email=
is removed. A TENANT_ADMIN of tenant A who deletes a staff record with ema=
il `victim[@]example[.]com` also deletes the pending invite for `victim[@]e= xample[.]com` in tenant B, even though they have no relationship to tenant =
B. The user-side delete is correctly scoped (`eq(user.id, staffId), eq(user= .tenantId, tenantId)`), and the pending-invite-only delete path (when `staf= fId` is itself an invite ID) is also tenant-scoped. The bug is specifically=
in the invite cleanup that runs as a side effect of deleting an existing s= taff user. Version 1.0.6 patches the issue.</td>
<td>2026-08-06</td>
<td>2.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48074" target=3D= "_blank" rel=3D"noopener">CVE-2026-48074</a></td>
</tr>

<td class=3D"vendor-product">open-webui--open-webui</td>
<td>Open WebUI is an extensible, feature-rich, and user-friendly self-hoste=
d AI platform. From 0.9.6 until 0.11.0, DELETE /api/v1/chats/{id} cancelled=
a chat's in-flight tasks before checking whether the caller could delete t= hat chat. Any authenticated user who knew another user's chat id could abor=
t that user's running model response, title generation, or tag generation, = even though the delete was refused and no chat data was deleted, modified, =
or disclosed. This issue is fixed in 0.11.0.</td>
<td>2026-08-04</td>
<td>3.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70483" target=3D= "_blank" rel=3D"noopener">CVE-2026-70483</a></td>
</tr>

<td class=3D"vendor-product">OpenAkita--OpenAkita</td>
<td>A security flaw has been discovered in OpenAkita up to 1.27.12. This vu= lnerability affects unknown code of the file /api/upload of the component F= ile Upload API. The manipulation of the argument File results in cross site=
scripting. The attack may be performed from remote. A high complexity leve=
l is associated with this attack. It is stated that the exploitability is d= ifficult. The exploit has been released to the public and may be used for a= ttacks. The vendor was contacted early about this disclosure but did not re= spond in any way.</td>
<td>2026-08-03</td>
<td>3.1</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18682" target=3D= "_blank" rel=3D"noopener">CVE-2026-18682</a></td>
</tr>

<td class=3D"vendor-product">Passster--Passster</td>
<td>The Passster WordPress plugin before 4.3.7 does not restrict low-privil= ege users holding the edit_posts capability from reading globally password-= protected content through the WordPress core REST API when global protectio=
n is enabled, allowing any Contributor or higher to read the content of pro= tected pages and posts without knowing the password.</td>
<td>2026-08-06</td>
<td>2.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15674" target=3D= "_blank" rel=3D"noopener">CVE-2025-15674</a></td>
</tr>

<td class=3D"vendor-product">PHPGurukul--Company Visitor Management System<=

<td>A security vulnerability has been detected in PHPGurukul Company Visito=
r Management System 1.0. This issue affects some unknown processing of the = file /manage-newvisitors.php. The manipulation of the argument fullname lea=
ds to cross site scripting. The attack can be initiated remotely. The explo=
it has been disclosed publicly and may be used.</td>
<td>2026-08-07</td>
<td>2.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19207" target=3D= "_blank" rel=3D"noopener">CVE-2026-19207</a></td>
</tr>

<td class=3D"vendor-product">PV-Bhat--gemsuite-mcp</td>
<td>A vulnerability was found in PV-Bhat gemsuite-mcp 1.0.0. Affected by th=
is issue is some unknown functionality of the file src/handlers/unified-gem= ini.ts of the component gemini_search/gemini_reason/gemini_process/gemini_a= nalyze. The manipulation of the argument file_path/file_paths results in pa=
th traversal. The attack must be initiated from a local position. The proje=
ct was informed of the problem early through an issue report but has not re= sponded yet.</td>
<td>2026-08-09</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19368" target=3D= "_blank" rel=3D"noopener">CVE-2026-19368</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Build of Keycloak</td>
<td>A flaw was found in the backchannel logout endpoint of the keycloak-ser= vices component, which is part of the Red Hat Build of Keycloak. This compo= nent handles authentication and session management for applications. The is= sue occurs when an OIDC identity provider is configured to skip signature v= alidation. In this specific setup, the system incorrectly accepts logout re= quests that have no cryptographic signature. An attacker who knows certain = technical details about a user's session can use this flaw to force that us=
er to be logged out, potentially disrupting their work.</td> <td>2026-08-04</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18569" target=3D= "_blank" rel=3D"noopener">CVE-2026-18569</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>A flaw was found in SSSD. The sss_nss_protocol_fill_initgr() function i=
n the NSS responder pre-allocates reply space for all group entries but doe=
s not shrink the packet when groups are skipped, causing uninitialized heap=
bytes to be transmitted to the client. A local attacker can exploit this t=
o disclose cached directory data and heap layout information from the sssd_= nss process.</td>
<td>2026-08-04</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68744" target=3D= "_blank" rel=3D"noopener">CVE-2026-68744</a></td>
</tr>

<td class=3D"vendor-product">Red Hat--Red Hat Enterprise Linux 10</td>

<td>An injection vulnerability was found in libvirt's virtual network drive=
r. The network XML parser does not strip newline characters from DNS TXT re= cord value attributes and SRV record domain/target attributes. These values=
are written verbatim into the dnsmasq configuration file generated by the = network driver, allowing a user with permission to define virtual networks =
to inject arbitrary dnsmasq configuration directives such as dhcp-script, l= eading to arbitrary command execution as root.</td>
<td>2026-08-07</td>
<td>2.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61477" target=3D= "_blank" rel=3D"noopener">CVE-2026-61477</a></td>
</tr>

<td class=3D"vendor-product">rpm-software-management--popt</td>
<td>A flaw was found in popt, a command-line option parsing library. An off= -by-one error in the poptStuffArgs function, when repeatedly called by a ho=
st application or through deep alias nesting, can lead to corruption of int= ernal program data. This corruption could potentially enable a local attack=
er to execute arbitrary code if the host application then unsafely processe=
s the altered data.</td>
<td>2026-08-04</td>
<td>2.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18739" target=3D= "_blank" rel=3D"noopener">CVE-2026-18739</a></td>
</tr>

<td class=3D"vendor-product">rpm-software-management--popt</td>
<td>An integer underflow was found in the popt library when formatting help=
text for option tables that exceed the terminal width. A local user who ca=
n cause an application to print help under those conditions may cause that = application to crash or fail to display help, resulting in a denial of serv= ice of the affected application.</td>
<td>2026-08-05</td>
<td>2.2</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18839" target=3D= "_blank" rel=3D"noopener">CVE-2026-18839</a></td>
</tr>

<td class=3D"vendor-product">Sharp Corporation--Sharp MFPs</td>
<td>Sharp and Toshiba Tec MFPs (multifunction printers) caches data interna= lly when printing, and leave them uncleared. They may be accessed later by = other users.</td>
<td>2026-08-03</td>
<td>2.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63545" target=3D= "_blank" rel=3D"noopener">CVE-2026-63545</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Photo Share Website</td>
<td>A flaw has been found in SourceCodester Photo Share Website 1.0. The af= fected element is an unknown function of the file /social/index.php?page=3D= home. This manipulation of the argument Comment causes cross site scripting=
. The attack may be initiated remotely. The exploit has been published and = may be used.</td>
<td>2026-08-07</td>
<td>3.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19209" target=3D= "_blank" rel=3D"noopener">CVE-2026-19209</a></td>
</tr>

<td class=3D"vendor-product">SourceCodester--Photo Share Website</td>
<td>A vulnerability was identified in SourceCodester Photo Share Website 1.=
0. This affects an unknown part of the file /social/ajax.php?action=3Dsave_= upload of the component Comment Input Box. The manipulation of the argument=
content leads to cross site scripting. The attack may be initiated remotel=
y. The exploit is publicly available and might be used.</td> <td>2026-08-07</td>
<td>3.5</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19230" target=3D= "_blank" rel=3D"noopener">CVE-2026-19230</a></td>
</tr>

<td class=3D"vendor-product">Systerel--S2OPC</td>
<td>A weakness has been identified in Systerel S2OPC up to 1.7.3. This affe= cts the function LockedStaMac_ProcessMsg_DeleteMonitoredItemsResponse of th=
e file src/ClientServer/frontend/client_wrapper/internal/state_machine.c of=
the component DeleteMonitoredItemsRequest Handler. This manipulation cause=
s out-of-bounds read. The attack can only be executed locally. The exploit = has been made available to the public and could be used for attacks. The ve= ndor was contacted early about this disclosure but did not respond in any w= ay.</td>
<td>2026-08-04</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18790" target=3D= "_blank" rel=3D"noopener">CVE-2026-18790</a></td>
</tr>

<td class=3D"vendor-product">TBTAK BLGEM Software Technologies Research Ins= titute--pardus-domain-joiner</td>
<td>Unverified ownership vulnerability in T=C3=83=C6=92=C3=85=E2=80=9CB=C3= =83=E2=80=9E=C3=82=C2=B0TAK B=C3=83=E2=80=9E=C3=82=C2=B0LGEM Software Techn= ologies Research Institute pardus-domain-joiner allows Privilege Abuse. Thi=
s issue affects pardus-domain-joiner: before 0.5.5.</td>
<td>2026-08-06</td>
<td>3.3</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15599" target=3D= "_blank" rel=3D"noopener">CVE-2026-15599</a></td>
</tr>

<td class=3D"vendor-product">WonderTrader--WonderTrader</td>
<td>A vulnerability was detected in WonderTrader up to 0.9.9. Impacted is t=
he function TraderDD::queryTrades of the file src/TraderDD/TraderDD.cpp. Th=
e manipulation of the argument FID_JYLB results in enforcement of behaviora=
l workflow. The attack can be launched remotely. A high complexity level is=
associated with this attack. The exploitability is considered difficult. T=
he exploit is now public and may be used. The vendor was contacted early ab= out this disclosure but did not respond in any way.</td>
<td>2026-08-07</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19208" target=3D= "_blank" rel=3D"noopener">CVE-2026-19208</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server</td>
<td>The Secret Type Management REST API does not correctly isolate access c= ontrols when deleting a secret type. The on-delete cascade logic, when trig= gered, fails to enforce organizational boundaries, leading to the removal o=
f secrets associated with that type across all organizations. Exploitation =
of this vulnerability can result in the unintended deletion of secrets acro=
ss the entire deployment, potentially causing configuration failures, servi=
ce interruptions, and a denial-of-service condition. This vulnerability req= uires delete permissions for the Secret Type Management REST API, which are=
by default only granted to administrators.</td>
<td>2026-08-06</td>
<td>3.8</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-14779" target=3D= "_blank" rel=3D"noopener">CVE-2025-14779</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server</td>
<td>The user impersonation flow in WSO2 Identity Server fails to properly m= anage refresh tokens associated with impersonated sessions. This allows an = attacker who has obtained an access token for an impersonated user to lever= age the refresh token grant to obtain new access tokens, extending their ab= ility to act as the legitimate user. An attacker who gains access to an imp= ersonated user's access token can exploit this weakness to renew their auth= orization. This results in the continued ability to perform actions on beha=
lf of the actual user, compromising log integrity and traceability by maski=
ng the true actor.</td>
<td>2026-08-06</td>
<td>2.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-12627" target=3D= "_blank" rel=3D"noopener">CVE-2025-12627</a></td>
</tr>

<td class=3D"vendor-product">WSO2--WSO2 Identity Server as Key Manager</td> <td>When Multi-Attribute Login is enabled, the login interface fails to con= sistently mask the existence of user accounts. For valid users, the server = resolves and displays their canonical username, while for non-existent user=
s, it echoes the original input. This occurs regardless of the validate_use= rname configuration. The discovery of valid usernames can increase the risk=
of brute force attacks, social engineering attacks, and targeted informati=
on leakage. Attackers can leverage this information to craft more effective=
phishing campaigns or social engineering tactics to compromise user accoun=
ts or extract sensitive data.</td>
<td>2026-08-06</td>
<td>3.7</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-13736" target=3D= "_blank" rel=3D"noopener">CVE-2025-13736</a></td>
</tr>

<td class=3D"vendor-product">zephyrproject--zephyr</td>
<td>The kernel queue helper z_queue_node_peek() in kernel/queue.c dereferen= ces a node taken from a queue's data_q list, reading the node's flag byte a= nd, for items enqueued via k_queue_alloc_append/alloc_prepend, the data poi= nter of an internally allocated alloc_node struct. The implementations of z= _impl_k_queue_peek_head() and z_impl_k_queue_peek_tail() performed this rea= d-and-dereference without holding the queue's spinlock, while every other a= ccessor of the same list - including k_queue_get(), which unlinks a node an=
d k_free()s its backing alloc_node - operates under that lock. Because peek=
was unsynchronized, a concurrent k_queue_get() on the same queue (on an SM=
P build, or under preemption/ISR concurrency) can free the node between the=
moment peek obtains the node pointer and the moment it dereferences it. Th=
e peek then reads flag bits and a data pointer out of freed, potentially re= -allocated heap memory and returns a stale or dangling pointer to its calle=
r. k_fifo and k_lifo are thin wrappers over k_queue, so this affects buffer=
queues used throughout the net_buf, Bluetooth, USB, and networking subsyst= ems; the peek operations are also system calls reachable from CONFIG_USERSP= ACE threads. The consequences are a use-after-free read that can leak stale=
heap contents (one pointer word) and, when the returned dangling pointer i=
s subsequently consumed as a live buffer, a dereference that can crash the = system or corrupt memory. Exploitation requires winning a small race window=
with local access (e.g. a userspace process racing k_queue_peek_* against = k_queue_get on a shared queue, or two CPUs), so practical impact is bounded=
and of low severity. The fix wraps both peek implementations with k_spin_l= ock/k_spin_unlock on the queue lock, making the read-and-dereference atomic=
with respect to the concurrent unlink-and-free and bringing peek into line=
with the rest of the queue's locking discipline.</td>
<td>2026-08-07</td>
<td>3.6</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11742" target=3D= "_blank" rel=3D"noopener">CVE-2026-11742</a></td>
</tr>

<td class=3D"vendor-product">ZTE--F689</td>
<td>The root password hash of the device can be obtained through unencrypte=
d information in the firmware.</td>
<td>2026-08-07</td>
<td>2.4</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49005" target=3D= "_blank" rel=3D"noopener">CVE-2026-49005</a></td>
</tr>

<td class=3D"vendor-product">ZTE--SmartLife</td>
<td>The ZTE Smart Life app contains an SQL injection vulnerability that all= ows attackers to execute UNION SELECT statements to query sensitive data in=
the feedback.db database across tables, including user accounts, phone num= bers, feedback content, and local debug log paths, thereby enabling the the=
ft of local privacy data.</td>
<td>2026-08-05</td>
<td>3.9</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8029" target=3D"= _blank" rel=3D"noopener">CVE-2026-8029</a></td>
</tr>
</tbody>
</table>
<p><a href=3D"#top">Back to top</a></p>
</div>
<div id=3D"snya_v">
<h2 id=3D"snya_v_title">Severity Not Yet Assigned</h2>
<table id=3D"table_severity_not_yet_assigned" class=3D"table no-tablesaw" s= tyle=3D"table-layout: fixed; width: 100%;" border=3D"1" summary=3D"Severity=
Not Yet Assigned">
<thead>

<th class=3D"vendor-product" style=3D"width: 24%;" scope=3D"col">
<span class=3D"primary-vendor">Primary</span><br><span class=3D"primary-ven= dor">Vendor</span> -- Product</th>
<th style=3D"width: 44%;" scope=3D"col">Description</th>
<th style=3D"width: 10%;" scope=3D"col">Published</th>
<th style=3D"width: 8%;" scope=3D"col">CVSS Score</th>
<th style=3D"width: 7%;" scope=3D"col">Source Info</th>
</tr>
</thead>
<tbody>

<td class=3D"vendor-product">Academy LMS--Academy LMS</td>
<td>The Academy LMS WordPress plugin before 3.8.3 does not verify course en= rollment or lesson publication status when returning a single lesson throug=
h its REST API, allowing users with a self-service student (Subscriber-leve=
l) account to disclose the content of arbitrary lessons, including lessons =
of paid courses they are not enrolled in and unpublished (draft, pending, p= rivate) lessons.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16563" target=3D= "_blank" rel=3D"noopener">CVE-2026-16563</a></td>
</tr>

<td class=3D"vendor-product">Admin Safety Guard Login Security, Limit Login=
s, 2FA & Brute Force Protection--Admin Safety Guard Login Security, Lim=
it Logins, 2FA & Brute Force Protection</td>
<td>The Admin Safety Guard - Login Security, Limit Logins, 2FA & Brute = Force Protection WordPress plugin before 1.4.0 does not perform any capabil= ity check on one of its REST API endpoints, allowing unauthenticated attack= ers to retrieve the full list of registered users including their usernames=
, email addresses, roles, and two-factor authentication enrollment status.<=

<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16578" target=3D= "_blank" rel=3D"noopener">CVE-2026-16578</a></td>
</tr>

<td class=3D"vendor-product">aehrc--pathling</td>
<td>Pathling is a set of tools that make it easier to use FHIR and clinical=
terminology within health data analytics. Prior to version 2.0.0 of Pathli=
ng Server, Pathling's `/$result` endpoint allows a caller who can obtain an=
y valid async export job ID to supply `file` parameter values containing pa=
th traversal sequences. The handler verifies only the supplied `job` and ne= ver normalises or confines the requested `file` path to that job's `jobs/&l= t;jobId>` directory before opening it as a filesystem resource. Because = async export scratch space lives under the same warehouse database root as = persisted resource tables, an attacker can use their own export job to read=
other files from the warehouse. This is fixed in Pathling Server 2.0.0. Th=
e `$result` handler now resolves and canonicalizes the requested file path = and rejects any request that escapes the job's `jobs/<jobId>` directo= ry. As an interim mitigation, disable the async export operations (`pathlin= g.operations.exportEnabled`, `patientExportEnabled`, `groupExportEnabled`, = `bulkSubmitEnabled`) or enable authentication and restrict export capabilit=
y to trusted callers.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47659" target=3D= "_blank" rel=3D"noopener">CVE-2026-47659</a></td>
</tr>

<td class=3D"vendor-product">aehrc--pathling</td>
<td>Pathling is a set of tools that make it easier to use FHIR and clinical=
terminology within health data analytics. Prior to version 2.0.0 of Pathli=
ng Server, Pathling's bulk-submit operation allows an allowed submitter to = supply an explicit `oauthMetadataUrl` parameter that is not validated again=
st `pathling.bulkSubmit.allowableSources`. When present, the bulk-submit OA= uth flow trusts metadata and the returned `token_endpoint` from the caller-= chosen location, then builds outbound OAuth client authentication directly = from the submitter's stored credentials. This is fixed in Pathling Server 2= .0.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47660" target=3D= "_blank" rel=3D"noopener">CVE-2026-47660</a></td>
</tr>

<td class=3D"vendor-product">aehrc--pathling</td>
<td>Pathling is a set of tools that make it easier to use FHIR and clinical=
terminology within health data analytics. Prior to version 2.0.0 of Pathli=
ng Server, Pathling's `/$result` endpoint allows a caller who can obtain an=
y valid async export job ID to supply `file` parameter values containing pa=
th traversal sequences. The handler verifies only the supplied `job` and ne= ver normalises or confines the requested `file` path to that job's `jobs/&l= t;jobId>` directory before opening it as a filesystem resource. Because = async export scratch space lives under the same warehouse database root as = persisted resource tables, an attacker can use their own export job to read=
other files from the warehouse. This is fixed in Pathling Server 2.0.0. As=
an interim mitigation, disable the async export operations (`pathling.oper= ations.exportEnabled`, `patientExportEnabled`, `groupExportEnabled`, `bulkS= ubmitEnabled`) or enable authentication and restrict export capability to t= rusted callers.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47661" target=3D= "_blank" rel=3D"noopener">CVE-2026-47661</a></td>
</tr>

<td class=3D"vendor-product">aehrc--pathling</td>
<td>Pathling is a set of tools that make it easier to use FHIR and clinical=
terminology within health data analytics. Prior to version 2.0.0 of Pathli=
ng Server, Pathling's typed CRUD/search/batch FHIR surface allows an authen= ticated caller with only coarse operation authorities to act on attacker-ch= osen resource families because those entrypoints do not consistently enforc=
e the documented per-resource `read` and `write` authorities. The documente=
d authorization model requires an operation authority (e.g. `pathling:searc= h`) to be paired with the matching per-resource `read` or `write` authority=
(e.g. `pathling:read:Patient`). Delete and batch are documented to require=
write authority for all referenced resource types. However, typed search, = update, and related handlers are annotated only with `@OperationAccess(...)=
` and act on the provider-selected resource type without checking the corre= sponding per-resource authority. This is fixed in Pathling Server 2.0.0.</t=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47662" target=3D= "_blank" rel=3D"noopener">CVE-2026-47662</a></td>
</tr>

<td class=3D"vendor-product">aehrc--pathling</td>
<td>Pathling is a set of tools that make it easier to use FHIR and clinical=
terminology within health data analytics. Prior to version 2.0.0 of Pathli=
ng Server, Pathling's typed CRUD/search/batch FHIR surface allows an authen= ticated caller with only coarse operation authorities to act on attacker-ch= osen resource families because those entrypoints do not consistently enforc=
e the documented per-resource `read` and `write` authorities. The documente=
d authorization model requires an operation authority (e.g. `pathling:searc= h`) to be paired with the matching per-resource `read` or `write` authority=
(e.g. `pathling:read:Patient`). Delete and batch are documented to require=
write authority for all referenced resource types. However, typed search, = update, and related handlers are annotated only with `@OperationAccess(...)=
` and act on the provider-selected resource type without checking the corre= sponding per-resource authority. This is fixed in Pathling Server 2.0.0.</t=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47663" target=3D= "_blank" rel=3D"noopener">CVE-2026-47663</a></td>
</tr>

<td class=3D"vendor-product">aehrc--pathling</td>
<td>Pathling is a set of tools that make it easier to use FHIR and clinical=
terminology within health data analytics. Prior to version 2.0.0 of Pathli=
ng Server, the `$import-pnp` operation in Pathling Server accepts a caller-= supplied `exportUrl` and uses it as the remote FHIR Bulk Export endpoint wi= thout constraining it to a trusted source. When PNP credentials are configu= red, Pathling builds a credentialed bulk-export client targeting the caller= -chosen host, downloads manifest-selected files, and then reclassifies thos=
e staged files as trusted local `file://` imports - bypassing the configure=
d `allowableSources` allowlist that protects the ordinary `$import` operati= on. This is fixed in Pathling Server 2.0.0. As a workaround, disable the `$= import-pnp` operation (`pathling.operations.importPnpEnabled=3Dfalse`) or d=
o not configure PNP credentials.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47664" target=3D= "_blank" rel=3D"noopener">CVE-2026-47664</a></td>
</tr>

<td class=3D"vendor-product">agentfront--frontmcp</td>
<td>FrontMCP is a TypeScript-first framework for the Model Context Protocol=
(MCP). Prior to 1.5.7, the sandboxed codecall:execute=C2=A0tool exposes li=
ve host Zod=C2=A0schema instances to the script via=C2=A0getTool(), and bec= ause Zod v4 defines=C2=A0_zod as a non-configurable, non-writable own prope= rty, the ECMAScript Proxy invariants force the security membrane to hand ba=
ck the raw host object, letting a script reach=C2=A0_zod.constr.constructor= =C2=A0(the host Function=C2=A0constructor) and execute arbitrary code in th=
e server process. A single tools/call is sufficient to escape the sandbox a=
nd achieve remote code execution as the server user, exposing everything th=
e process holds such as OAuth client secrets, JWT_SECRET, session keys, dat= abase credentials, and cloud instance metadata. Because the framework's=C2= =A0DEFAULT_AUTH_OPTIONS=C2=A0is public mode, an unconfigured server serves = this to unauthenticated callers, and on authenticated servers an indirect p= rompt injection in tool output or fetched content can trigger it without a = human attackerThis issue is fixed in version 1.5.7.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67531" target=3D= "_blank" rel=3D"noopener">CVE-2026-67531</a></td>
</tr>

<td class=3D"vendor-product">AI Engine--AI Engine</td>
<td>The AI Engine WordPress plugin before 3.6.4 does not verify ownership o=
f a guest's uploaded chatbot files before deletion, authorising the action = solely by a client-supplied session cookie value, so an unauthenticated att= acker who obtains a victim's session identifier and file reference can dele=
te that victim's uploaded files.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16953" target=3D= "_blank" rel=3D"noopener">CVE-2026-16953</a></td>
</tr>

<td class=3D"vendor-product">AI Engine--AI Engine</td>
<td>The AI Engine WordPress plugin before 3.6.4 does not redact secret conf= iguration values before exposing them in an admin page's inline script data=
, allowing users with the Editor role to read the site's stored third-party=
API key and authentication tokens in cleartext, despite those secrets bein=
g restricted to administrators everywhere else.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16954" target=3D= "_blank" rel=3D"noopener">CVE-2026-16954</a></td>
</tr>

<td class=3D"vendor-product">AI Engine--AI Engine</td>
<td>The AI Engine WordPress plugin before 3.6.6 does not confine a caller-s= upplied file path before reading it and forwarding the contents to an exter= nal service, allowing users with a subscriber-level account to read arbitra=
ry files from the server and exfiltrate them off-host. Reaching the issue a=
t subscriber level requires a non-default public API feature to be enabled;=
otherwise the same issue is reachable by an administrator, which on multis= ite allows a non-super subsite administrator to read the network-shared con= figuration and its secrets.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16955" target=3D= "_blank" rel=3D"noopener">CVE-2026-16955</a></td>
</tr>

<td class=3D"vendor-product">ail-project--ail-framework</td>
<td>AIL Framework contained a reflected cross-site scripting vulnerability =
in the /tag/add_tags endpoint. When an error occurred while processing a ta=
g operation, the application returned the error value directly as an HTML r= esponse using str(res[0]). If attacker-controlled input was included in the=
generated error message, a crafted request could cause arbitrary HTML or J= avaScript to be reflected in the response without appropriate output encodi= ng. An attacker could exploit the vulnerability by convincing an authentica= ted AIL Framework user to open a specially crafted link. Successful exploit= ation could allow JavaScript to execute in the victim's browser within the = security context of the AIL Framework application. Depending on the victim'=
s privileges and the application's protections, the attacker could perform = actions using the victim's session, access information available to the vic= tim, or modify data through authenticated application requests. The vulnera= bility requires user interaction because the authenticated victim must foll=
ow or open the crafted request. The attacker does not necessarily require a=
n AIL Framework account, provided that the crafted request can be delivered=
to an already authenticated user.</td>

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71445" target=3D= "_blank" rel=3D"noopener">CVE-2026-71445</a></td>
</tr>

<td class=3D"vendor-product">ail-project--ail-framework</td>
<td>AIL Framework contains a stored cross-site scripting vulnerability in t=
he crawler domain view. Crawled URLs were embedded directly into the JavaSc= ript onclick handler used to display a stored screenshot, without context-a= ppropriate encoding. An attacker who can cause a specially crafted URL to b=
e recorded in the crawler history can inject JavaScript syntax into the sto= red URL value. The payload remains stored by AIL and is subsequently includ=
ed in the domain view. When an authenticated analyst clicks the screenshot = icon associated with the malicious URL, the injected JavaScript executes in=
the analyst's browser within the security context of the AIL Framework app= lication. Successful exploitation could allow an attacker to access informa= tion available to the analyst's session, modify displayed content, or perfo=
rm application actions using the analyst's privileges. Exploitation require=
s the victim to interact with the affected screenshot entry. The vulnerabil= ity was corrected by serializing the crawled URL with Jinja's tojson filter=
before inserting it into the JavaScript handler. This safely escapes chara= cters that could otherwise terminate the JavaScript string and introduce ex= ecutable code.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71446" target=3D= "_blank" rel=3D"noopener">CVE-2026-71446</a></td>
</tr>

<td class=3D"vendor-product">ail-project--ail-framework</td>
<td>AIL Project contains a stored cross-site scripting vulnerability in the=
translation controls displayed for chat messages and forum posts. The affe= cted templates inserted message and post identifiers directly into inline J= avaScript onclick handlers: onclick=3D"translateMessageToPreferredLanguage(= '{{ message['id'] }}', '{{ mess_id_escape }}', this)" and: onclick=3D"trans= latePostToPreferredLanguage('{{ post['id'] }}', '{{ post_id_escape }}', thi= s)" These values were HTML-template escaped but were not safely encoded for=
use as JavaScript string literals inside an HTML attribute. A specially cr= afted identifier containing quotation marks, escape characters, or other Ja= vaScript syntax could therefore terminate the expected string argument and = inject arbitrary JavaScript into the event handler. Because the affected va= lues are associated with indexed chat messages or forum posts, a malicious = value may remain stored by AIL and be rendered whenever an analyst accesses=
the corresponding chat or forum explorer view. Successful exploitation req= uires the victim to click the affected Translate to preferred language butt= on. The injected code would then execute in the victim's browser under the = security origin of the AIL instance.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71447" target=3D= "_blank" rel=3D"noopener">CVE-2026-71447</a></td>
</tr>

<td class=3D"vendor-product">aio-libs--aiohttp</td>
<td>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and=
Python. Prior to 3.14.2, the HTTP parsers were vulnerable to a request smu= ggling attack relating to WebSocket upgrades. If using the server-side comp= onent, an attacker may be able to execute a request smuggling vulnerability=
using an edge case in the WebSocket upgrade procedure. A WebSocket upgrade=
request with a body could cause the parser to switch protocols before the = complete request body was received, leaving trailing bytes to be handled as=
upgraded-protocol or pipelined data rather than normal HTTP body data. Thi=
s issue is fixed in version 3.14.2.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69243" target=3D= "_blank" rel=3D"noopener">CVE-2026-69243</a></td>
</tr>

<td class=3D"vendor-product">aio-libs--aiohttp</td>
<td>AIOHTTP is an asynchronous HTTP client/server framework for asyncio and=
Python. Prior to 3.14.3, an out-of-bounds heap read could occur in the C r= esponse parser while building an error message for a malformed response. An=
attacker controlled server, or possibly an accidental response, could trig= ger a DoS in the client. The vulnerable path was error message construction=
in aiohttp/_http_parser.pyx, where an llhttp error-position pointer was us=
ed to build a snippet for malformed chunked responses and malformed request=
or response bytes at the buffer end. This issue is fixed in version 3.14.3= .</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69244" target=3D= "_blank" rel=3D"noopener">CVE-2026-69244</a></td>
</tr>

<td class=3D"vendor-product">Ajax Load More--Ajax Load More</td>
<td>The Ajax Load More WordPress plugin before 8.0.1 does not properly sani= tise and escape a parameter before using it in a SQL query, allowing unauth= enticated attackers to perform time-based blind SQL injection and extract s= ensitive data from the database.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15360" target=3D= "_blank" rel=3D"noopener">CVE-2026-15360</a></td>
</tr>

<td class=3D"vendor-product">Ajax Search Lite--Ajax Search Lite</td>
<td>The Ajax Search Lite WordPress plugin before 4.14.5 does not prevent th=
e deserialization of untrusted input, allowing unauthenticated attackers to=
perform PHP Object Injection. When a suitable POP chain is present via ano= ther installed Ajax Search Lite WordPress plugin before 4.14.5 or , this ca=
n be leveraged to achieve Remote Code Execution.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16258" target=3D= "_blank" rel=3D"noopener">CVE-2026-16258</a></td>
</tr>

<td class=3D"vendor-product">angular--angular</td>
<td>Angular is a development platform for building mobile and desktop web a= pplications using TypeScript/JavaScript and other languages. Prior to 20.3.= 27, 21.2.19, and 22.0.2, HttpTransferCache comma-joins repeated request par= ameters, allowing semantically distinct HttpClient requests to use the same=
transfer-cache key and reuse a wrong backend response. This issue is fixed=
in versions 20.3.27, 21.2.19, and 22.0.2.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68945" target=3D= "_blank" rel=3D"noopener">CVE-2026-68945</a></td>
</tr>

<td class=3D"vendor-product">angular--angular</td>
<td>Angular is a development platform for building mobile and desktop web a= pplications using TypeScript/JavaScript and other languages. Prior to 20.3.= 27, 21.2.19, and 22.0.7, a Cross-Site Scripting (XSS) vulnerability exists =
in @angular/platform-server's DOM emulation dependency (domino) when serial= izing the content of fallback raw-content elements (<iframe>, <noe= mbed>, <noframes>, and <noscript>). This issue is fixed in v= ersions 20.3.27, 21.2.19, and 22.0.7.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69149" target=3D= "_blank" rel=3D"noopener">CVE-2026-69149</a></td>
</tr>

<td class=3D"vendor-product">angular--angular</td>
<td>Angular is a development platform for building mobile and desktop web a= pplications using TypeScript/JavaScript and other languages. Prior to 20.3.= 27, 21.2.19, and 22.0.1, the Angular compiler i18n pipeline permits i18n-on= error and other i18n-on event-handler attributes, allowing a lower-trust tr= anslation file to replace a static handler with executable JavaScript. This=
issue is fixed in versions 20.3.27, 21.2.19, and 22.0.1.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69151" target=3D= "_blank" rel=3D"noopener">CVE-2026-69151</a></td>
</tr>

<td class=3D"vendor-product">ankitects--anki</td>
<td>Anki is a program for creating and reviewing flashcards. Prior to 25.09= .3, endpoints in Anki's local HTTP server do not adequately constrain reque= sted media and built-in data paths, allowing scripts served from shared dec= ks, or malicious websites combined with an origin-check bypass, to read loc=
al files through directory traversal. This issue is fixed in version 25.09.= 3.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64677" target=3D= "_blank" rel=3D"noopener">CVE-2026-64677</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Answer</td> <td>Improper Handling of Length Parameter Inconsistency vulnerability in Ap= ache Answer. This issue affects Apache Answer: through 2.0.1. Unauthenticat=
ed attackers can cause a denial of service via a specially crafted Accept-L= anguage header that triggers excessive CPU consumption during parsing. User=
s are recommended to upgrade to version 2.0.2, which fixes the issue.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48834" target=3D= "_blank" rel=3D"noopener">CVE-2026-48834</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Answer</td> <td>Insufficient Verification of Data Authenticity vulnerability in Apache = Answer. This issue affects Apache Answer: through 2.0.1. A missing authoriz= ation check in the external-login email binding flow allows unauthenticated=
attackers to take over arbitrary user accounts by tricking victims into cl= icking a crafted confirmation link. Users are recommended to upgrade to ver= sion 2.0.2, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48911" target=3D= "_blank" rel=3D"noopener">CVE-2026-48911</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Answer</td> <td>Improper Input Validation vulnerability in Apache Answer. This issue af= fects Apache Answer: through 2.0.1. A missing ownership check in the avatar= -cleanup logic allows any authenticated user to delete other users' uploade=
d files by supplying their file URLs. Users are recommended to upgrade to v= ersion 2.0.2, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48912" target=3D= "_blank" rel=3D"noopener">CVE-2026-48912</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Answer</td> <td>Improper Authorization vulnerability in Apache Answer. This issue affec=
ts Apache Answer: through 2.0.1. Any authenticated user can reject arbitrar=
y pending edit-revisions without review permission due to a missing authori= zation check on the reject operation. Users are recommended to upgrade to v= ersion 2.0.2, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-50749" target=3D= "_blank" rel=3D"noopener">CVE-2026-50749</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Answer</td> <td>Exposure of Sensitive Information to an Unauthorized Actor vulnerabilit=
y in Apache Answer. This issue affects Apache Answer: through 2.0.1. Delete=
d or pending answers could be retrieved by unauthorized users through the s= ingle-answer read path when the parent question remained visible, exposing = answer content that should not have been accessible. Users are recommended =
to upgrade to version 2.0.2, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-60023" target=3D= "_blank" rel=3D"noopener">CVE-2026-60023</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Answer</td> <td>Insufficient Session Expiration vulnerability in Apache Answer. This is= sue affects Apache Answer: through 2.0.1. Administrative API keys remained = usable after the owning administrator was demoted or the account was marked=
inactive, suspended, or deleted, allowing continued access until the keys = were explicitly removed. Users are recommended to upgrade to version 2.0.2,=
which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-60053" target=3D= "_blank" rel=3D"noopener">CVE-2026-60053</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>Apache CXF allows to control the maximum attachment size via the=C2=A0"= attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there=
was no default placed on this size, meaning that a denial of service attac=
k is possible if the user doesn't explicitly set the limit. Users should up= date to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which fixes this problem by imp= osing a default attachment size limit of 50mb.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54225" target=3D= "_blank" rel=3D"noopener">CVE-2026-54225</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>The OpenID Connect Core 1.0 specification mandates that the RP MUST val= idate the `c_hash` parameter when operating in the Hybrid Flow.=C2=A0If an = Apache CXF RP is integrated with a non-compliant or misconfigured Identity = Provider (IdP) that omits the `c_hash`, the RP becomes vulnerable to Author= ization Code Substitution/Injection attacks.=C2=A0Users are recommended to = upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-57817" target=3D= "_blank" rel=3D"noopener">CVE-2026-57817</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>A race condition in JCacheCodeDataProvider allows an attacker to redeem=
a single authorization code multiple times via concurrent requests, result= ing in the issuance of multiple distinct, valid access tokens. Users are re= commended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this iss= ue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-57818" target=3D= "_blank" rel=3D"noopener">CVE-2026-57818</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>Apache CXF allows to set a limit on the number of form parameters in a = JAX-RS message via the "maxFormParameterCount" configuration option. Howeve=
r, no default limit is set which may lead to denial of service attacks when=
processing=C2=A0 requests with very large numbers of form parameters. User=
s are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fi=
x this issue by using a default limit of 500 parameters.</td>

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-57819" target=3D= "_blank" rel=3D"noopener">CVE-2026-57819</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the author= ization server accepts and stores the `scope` value supplied in the client = registration request verbatim, without validating it against an AS-defined = allowlist. This could lead to a client self-assigning privileged scopes at = registration time. Users are recommended to upgrade to versions 4.2.3 or 4.= 1.8 or 3.6.12, which fix this issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61466" target=3D= "_blank" rel=3D"noopener">CVE-2026-61466</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>Apache CXF's JwtRequestCodeFilter copies all claims from a signed reque=
st JWT into the authorization parameter map without excluding security-sens= itive parameters. A client that can produce a validly-signed request JWT (e= .g., one whose client_secret is known or compromised) can thereby substitut=
e the code_challenge, code_challenge_method, nonce, and state values that w= ere set in the outer HTTP request, undermining PKCE integrity and OpenID Co= nnect replay protection. Users are recommended to upgrade to versions 4.2.3=
or 4.1.8 or 3.6.12, which fix this issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63687" target=3D= "_blank" rel=3D"noopener">CVE-2026-63687</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>An incomplete fix for=C2=A0CVE-2026-50645 means that it is still possib=
le to perform a denial of service attack on Apache CXF by sending a message=
with many attachment headers. Users are recommended to upgrade to versions=
4.2.3 or 4.1.8 or 3.6.12, which fix this issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64958" target=3D= "_blank" rel=3D"noopener">CVE-2026-64958</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>Apache CXF reads a top-level WSDL through its hardened StaxUtils=C2=A0p= ath, which disables XML DTDs and external entities. However, any <wsdl:i= mport>=C2=A0or <xsd:import>=C2=A0referenced from that top-level WS=
DL is handed off to WSDL4J, which does not=C2=A0disable DOCTYPE declaration=
s or external entities. As a result, the protections applied to the top-lev=
el document do not extend to imported documents, leaving imported WSDL/XSD = content vulnerable to XML External Entity (XXE) attacks.=C2=A0Users are rec= ommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this is= sue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65432" target=3D= "_blank" rel=3D"noopener">CVE-2026-65432</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>Apache CXF's OIDC relying-party token validation could accept self-issu=
ed ID tokens without enforcing required claim checks (issuer/subject/audien= ce/time and sub_jwk binding), enabling authentication bypass with crafted t= okens. However, note that self-issued ID tokens are not accepted by default=
in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.= 1.8 or 3.6.12, which fixes this issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65583" target=3D= "_blank" rel=3D"noopener">CVE-2026-65583</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>Apache CXF's JMS transport deserializes the body of any inbound JMS Obj= ectMessage=C2=A0using native Java deserialization, with no type restriction=
s in place. Any attacker able to place a message on the service's JMS desti= nation can submit a malicious serialized object, leading to denial of servi=
ce or, if a suitable gadget class is on the classpath, remote code executio=
n. The fix disables ObjectMessage=C2=A0deserialization by default, with a c= onfiguration switch to re-enable it if needed.=C2=A0Users are recommended t=
o upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66909" target=3D= "_blank" rel=3D"noopener">CVE-2026-66909</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>In Apache CXF's DefaultEncryptingCodeDataProvider,=C2=A0a captured auth= orization code can be redeemed an unlimited number of times due to a flaw i=
n the implementation of the=C2=A0removeCodeGrant functionality. This violat=
es the RFC requirement that=C2=A0"The authorization code MUST NOT be used m= ore than once." Users are recommended to upgrade to versions 4.2.3 or 4.1.8=
or 3.6.12, which fix this issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68079" target=3D= "_blank" rel=3D"noopener">CVE-2026-68079</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache CXF</td>

<td>In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access toke=
ns still decrypt successfully, and TokenIntrospectionService reports active= :true. The same applies to refresh tokens. This violates the RFC stipulatio=
ns that 'The authorization server MUST invalidate the token.' and 'introspe= ction of a revoked token MUST return {"active":false}'. Users are recommend=
ed to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.</=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68481" target=3D= "_blank" rel=3D"noopener">CVE-2026-68481</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Fory</td> <td>Heap type confusion vulnerability in Apache Fory C++ deserialization. T= his issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A craf= ted input payload can bypass type compatibility checks during polymorphic s= mart-pointer deserialization, causing an object of an incompatible type to =
be treated as the declared base type. This may result in undefined behavior=
and potentially lead to denial of service or arbitrary code execution. Use=
rs are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue.=
Applications not using Apache Fory C++ polymorphic smart-pointer deseriali= zation are not affected.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71558" target=3D= "_blank" rel=3D"noopener">CVE-2026-71558</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Fory</td> <td>Deserialization of Untrusted Data vulnerability in the Go implementatio=
n of Apache Fory allows an attacker to cause a denial of service by supplyi=
ng crafted data containing malformed type metadata, which triggers an uncau= ght panic. This issue affects Apache Fory: from 0.16.0 before 1.5.0.=C2=A0 = Users of other language implementations are not affected. Users are recomme= nded to upgrade to version 1.5.0, which fixes the issue.</td>

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71559" target=3D= "_blank" rel=3D"noopener">CVE-2026-71559</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Fory</td> <td>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization. Th=
is issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when des= erializing structs containing tagged integer fields. A crafted input payloa=
d may trigger an out-of-bounds heap read in the tagged integer fast-path de= serializer, potentially causing information disclosure or denial of service=
. Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this i= ssue. Applications that do not use Apache Fory C++ or do not use tagged int= eger fields are not affected.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71560" target=3D= "_blank" rel=3D"noopener">CVE-2026-71560</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Jena Fuseki= </td>
<td>Improper Limitation of a Pathname to a Restricted Directory ('Path Trav= ersal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena=
Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, = which fixes the issue.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61372" target=3D= "_blank" rel=3D"noopener">CVE-2026-61372</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache NiFi</td> <td>Authorization handling for Parameter Context validation requests in Apa= che NiFi 1.10.0 through 2.10.0 allows clients with read access to submit pr= oposed Parameter values. The proposed values override current configuration=
, enabling users with read access to invoke predefined component validation=
methods with alternative settings. Apache NiFi installations that do not i= mplement different levels of authorization for viewing and modifying Parame= ter Context configuration are not subject to this vulnerability. Upgrading =
to Apache NiFi 2.11.0 is the recommended mitigation, requiring write access=
to submit Parameter Context validation requests.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62354" target=3D= "_blank" rel=3D"noopener">CVE-2026-62354</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache NiFi</td> <td>Apache NiFI 1.10.0 through 2.10.0 provide a Parameter Context update RE=
ST API method that does not enforce authorization checking on components re= ferencing Parameter values. Updating a Parameter Context can change paramet=
er values that affect referencing components, but framework authorization w=
as limited to read and write privileges on the Parameter Context itself. As=
a result of the missing authorization, an authenticated user authorized to=
modify a Parameter Context, but not authorized on referencing components, = could alter Parameter values affecting those components. In deployments whe=
re a Parameter value contains executable scripting content, updating a Para= meter can result in code execution during automatic component validation, w= ithout starting the referencing component. The impact was limited to stoppe=
d components by existing verification checks, and the issue applies only to=
deployments that use component-level authorization policies. Upgrading to = Apache NiFi 2.11.0 is the recommended mitigation, which aligns the Paramete=
r Context update method authorization with other methods, adding authorizat= ion checking on affected components.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68979" target=3D= "_blank" rel=3D"noopener">CVE-2026-68979</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache NiFi</td> <td>Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deletin=
g Assets associated with Parameter Contexts through the REST API. The frame= work authorizes asset deletion against the owning Parameter Context using t=
he supplied Parameter Context Identifier and Asset Identifier. The framewor=
k performed authorized based on the supplied Parameter Context Identifier w= ithout verifying the requested Identifier against the stored Identifier. Ap= ache NiFi installations that do not implement different levels of authoriza= tion across Parameter Contexts are not subject to this vulnerability, becau=
se the framework enforces write permissions as the security boundary. Upgra= ding to Apache NiFi 2.11.0 is the recommended mitigation, which verifies Pa= rameter Context ownership of the requested Asset before deletion using the = same strategy applied to Asset read operations.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68980" target=3D= "_blank" rel=3D"noopener">CVE-2026-68980</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache NiFi</td> <td>Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for=
the application REST API using a Jersey encoding filter. The framework enf= orced a configurable maximum request size on the compressed payload rather = than the decompressed output, allowing a malicious client to send crafted r= equests that could consume excessive amounts of memory. Upgrading to Apache=
NiFi 2.11.0 is the recommended mitigation, which relocates response compre= ssion to Jetty Server and disables decompression of gzip-encoded HTTP reque= sts.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68981" target=3D= "_blank" rel=3D"noopener">CVE-2026-68981</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Polaris</td=

<td>Apache Polaris did not consistently validate storage locations supplied=
during table and view registration. An authenticated principal with permis= sion to register a table or view could, depending on the affected release a=
nd registration path, cause Polaris to use the catalog's storage credential=
s to read a caller-selected Iceberg metadata file before verifying that the=
file was within the catalog's allowed storage locations. If the catalog's = underlying credentials could read an object outside=C2=A0that boundary, thi=
s could disclose limited information from the object. Polaris could also ac= cept registration metadata located within an allowed location that containe=
d references to storage locations outside the allowed boundary. This second=
condition did not itself cause Polaris to read the=C2=A0referenced externa=
l locations during registration. The demonstrated impact is limited to conf= identiality. No unauthorized data=C2=A0modification or availability impact = has been demonstrated. The server-side read requires a deployment using S3 = credential vending and an object outside the allowed locations that the cat= alog's underlying storage credentials can read. Exploitation requires an au= thenticated principal with=C2=A0table- or view-registration privileges.</td=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64640" target=3D= "_blank" rel=3D"noopener">CVE-2026-64640</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Portable Ru= ntime Utility</td>
<td>APR-util versions 1.6.3 (and earlier) function apr_password_validate() = was not constant-time with regards to hashes or passwords comparisons, pote= ntially leaking their content via a side channel timing attack particularly=
on platforms without crypt() such as=C2=A0=C2=A0Windows, BeOS, NetWare, or=
Android. Users are recommended to upgrade to version 1.6.4, which fixes th=
is issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-49506" target=3D= "_blank" rel=3D"noopener">CVE-2025-49506</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Portable Ru= ntime Utility</td>
<td>A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion = attack against any library consumer which parses XML from untrusted sources=
and uses the=C2=A0apr_xml_quote_elem() function. Users are recommended to = upgrade to version 1.6.4, which fixes this issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-32327" target=3D= "_blank" rel=3D"noopener">CVE-2026-32327</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Portable Ru= ntime Utility</td>
<td>Improper Neutralization of Special Elements used in an SQL Command ('SQ=
L Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_= oracle provider. This issue affects Apache Portable Runtime Utility: from 1= .6.0 through 1.6.3</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34191" target=3D= "_blank" rel=3D"noopener">CVE-2026-34191</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Portable Ru= ntime Utility</td>
<td>Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Uti= lity redis client. This issue affects Apache Portable Runtime Utility: from=
1.6.0 through 1.6.3. Users are recommended to upgrade to version 1.6.4, wh= ich fixes the issue.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34501" target=3D= "_blank" rel=3D"noopener">CVE-2026-34501</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Portable Ru= ntime Utility</td>
<td>Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Uti= lity memcached client This issue affects Apache Portable Runtime Utility: f= rom 1.3.0 through 1.6.3.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-34502" target=3D= "_blank" rel=3D"noopener">CVE-2026-34502</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>A pre-authentication attacker could leverage type size/count handling t=
o cause excessive allocation leading to potential denial of service. This i= ssue affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to=
upgrade to version 10.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68060" target=3D= "_blank" rel=3D"noopener">CVE-2026-68060</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>A pre-authentication attacker could leverage type nesting to cause a St= ackOverflowError potentially leading to denial of service. This issue affec=
ts Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgrade t=
o version 10.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68073" target=3D= "_blank" rel=3D"noopener">CVE-2026-68073</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>A pre-authentication attacker could leverage unbounded symbol value cac= hing to cause resource exhaustion leading to denial of service. This issue = affects Apache Qpid Broker-J: through 10.0.1. Users are recommended to upgr= ade to version 10.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68074" target=3D= "_blank" rel=3D"noopener">CVE-2026-68074</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>An authenticated attacker could exceed the session flow control incomin=
g window potentially leading to denial of service. This issue affects Apach=
e Qpid Broker-J: through 10.0.1. Users are recommended to upgrade to versio=
n 10.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68075" target=3D= "_blank" rel=3D"noopener">CVE-2026-68075</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>An authenticated attacker can craft a disposition frame with large or i= llegal ranges causing excessive CPU usage due to naive range handling, lead= ing to denial of service. This issue affects Apache Qpid Broker-J: through = 10.0.1. Users are recommended to upgrade to version 10.1.0, which fixes the=
issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68077" target=3D= "_blank" rel=3D"noopener">CVE-2026-68077</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>It was not possible to govern the maximum number of transfer frames per=
incoming delivery, enabling an authenticated attacker to cause excessive r= esource usage and potential denial of service. This issue affects Apache Qp=
id Broker-J: through 10.0.1. Users are recommended to upgrade to version 10= .1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68078" target=3D= "_blank" rel=3D"noopener">CVE-2026-68078</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Broker= -J</td>
<td>It was not possible to govern the rate at which the broker would respon=
d to an echo flow, enabling an authenticated attacker to cause excessive re= source usage and potential denial of service. This issue affects Apache Qpi=
d Broker-J: through 10.0.1. Users are recommended to upgrade to version 10.= 1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68080" target=3D= "_blank" rel=3D"noopener">CVE-2026-68080</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton=
Dotnet</td>
<td>A pre-authentication attacker could leverage unbounded symbol value cac= hing to cause resource exhaustion leading to denial of service. This issue = affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended to = upgrade to version 1.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67465" target=3D= "_blank" rel=3D"noopener">CVE-2026-67465</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton=
Dotnet</td>
<td>pre-authentication attacker could leverage type size/count handling to = cause excessive allocation leading to potential denial of service. This iss=
ue affects Apache Qpid Proton-Dotnet: through 1.0.0. Users are recommended =
to upgrade to version 1.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67551" target=3D= "_blank" rel=3D"noopener">CVE-2026-67551</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton=
Dotnet</td>
<td>A pre-authentication attacker could leverage type nesting to cause a St= ackOverflowError potentially leading to denial of service. This issue affec=
ts Apache Qpid Proton-Dotnet through 1.0.0. Users are recommended to upgrad=
e to version 1.1.0, which fixes the issue</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67552" target=3D= "_blank" rel=3D"noopener">CVE-2026-67552</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton=
Dotnet</td>
<td>An authenticated attacker could exceed the session flow control incomin=
g window potentially leading to denial of service. This issue affects Apach=
e Qpid Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to ve= rsion 1.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67553" target=3D= "_blank" rel=3D"noopener">CVE-2026-67553</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton=
Dotnet</td>
<td>An authenticated attacker can craft a disposition frame with large or i= llegal ranges causing excessive CPU usage due to naive range handling, lead= ing to denial of service. This issue affects Apache Qpid Proton-Dotnet: thr= ough 1.0.0. Users are recommended to upgrade to version 1.1.0, which fixes = the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67554" target=3D= "_blank" rel=3D"noopener">CVE-2026-67554</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton=
Dotnet</td>
<td>It was not possible to govern the maximum number of transfer frames per=
incoming delivery, enabling an authenticated attacker to cause excessive r= esource usage and potential denial of service This issue affects Apache Qpi=
d Proton-Dotnet: through 1.0.0. Users are recommended to upgrade to version=
1.1.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67555" target=3D= "_blank" rel=3D"noopener">CVE-2026-67555</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= -J</td>
<td>A pre-authentication attacker could leverage unbounded symbol value cac= hing to cause resource exhaustion leading to denial of service. This issue = affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgr= ade to version 0.35.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66257" target=3D= "_blank" rel=3D"noopener">CVE-2026-66257</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= -J</td>
<td>A pre-authentication attacker could leverage type size/count handling t=
o cause excessive allocation leading to potential denial of service. This i= ssue affects Apache Qpid Proton-J: through 0.34.1. Users are recommended to=
upgrade to version 0.35.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66273" target=3D= "_blank" rel=3D"noopener">CVE-2026-66273</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= -J</td>
<td>A pre-authentication attacker could leverage type nesting to cause a St= ackOverflowError potentially leading to denial of service. This issue affec=
ts Apache Qpid Proton-J: through 0.34.1. Users are recommended to upgrade t=
o version 0.35.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66274" target=3D= "_blank" rel=3D"noopener">CVE-2026-66274</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= -J</td>
<td>An authenticated attacker could exceed the session flow control incomin=
g window potentially leading to denial of service. This issue affects Apach=
e Qpid Proton-J: through 0.34.1. Users are recommended to upgrade to versio=
n 0.35.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66275" target=3D= "_blank" rel=3D"noopener">CVE-2026-66275</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= -J</td>
<td>An authenticated attacker can craft a disposition frame with large or i= llegal ranges causing excessive CPU usage due to naive range handling, lead= ing to denial of service. This issue affects Apache Qpid Proton-J: through = 0.34.1. Users are recommended to upgrade to version 0.35.0, which fixes the=
issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66276" target=3D= "_blank" rel=3D"noopener">CVE-2026-66276</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= -J</td>
<td>It was not possible to govern the maximum number of transfer frames per=
incoming delivery, enabling an authenticated attacker to cause excessive r= esource usage and potential denial of service. This issue affects Apache Qp=
id Proton-J: through 0.34.1. Users are recommended to upgrade to version 0.= 35.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66277" target=3D= "_blank" rel=3D"noopener">CVE-2026-66277</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= J2</td>
<td>A pre-authentication attacker could leverage unbounded symbol value cac= hing to cause resource exhaustion leading to denial of service. This issue = affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgra=
de to version 1.2.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67588" target=3D= "_blank" rel=3D"noopener">CVE-2026-67588</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= J2</td>
<td>A pre-authentication attacker could leverage type size/count handling t=
o cause excessive allocation leading to potential denial of service. This i= ssue affects Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to = upgrade to version 1.2.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67589" target=3D= "_blank" rel=3D"noopener">CVE-2026-67589</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= J2</td>
<td>A pre-authentication attacker could leverage type nesting to cause a St= ackOverflowError potentially leading to denial of service. This issue affec=
ts Apache Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to=
version 1.2.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67590" target=3D= "_blank" rel=3D"noopener">CVE-2026-67590</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= J2</td>
<td>An authenticated attacker could exceed the session flow control incomin=
g window potentially leading to denial of service. This issue affects Apach=
e Qpid ProtonJ2: through 1.1.0. Users are recommended to upgrade to version=
1.2.0, which fixes the issue.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67591" target=3D= "_blank" rel=3D"noopener">CVE-2026-67591</a></td>
</tr>

<td class=3D"vendor-product">Apache Software Foundation--Apache Qpid Proton= J2</td>
<td>It was not possible to govern the maximum number of transfer frames per=
incoming delivery, enabling an authenticated attacker to cause excessive r= esource usage and potential denial of service. This issue affects Apache Qp=
id ProtonJ2: through 1.1.0. Users are recommended to upgrade to version 1.2= .0, which fixes the issue</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67592" target=3D= "_blank" rel=3D"noopener">CVE-2026-67592</a></td>
</tr>

<td class=3D"vendor-product">Apple--macOS</td>
<td>An authentication issue was addressed with improved state management. T= his issue is fixed in macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Taho=
e 26.6.1. An attacker on the network may be able to authenticate to Screen = Sharing without valid credentials.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65400" target=3D= "_blank" rel=3D"noopener">CVE-2026-65400</a></td>
</tr>

<td class=3D"vendor-product">Appointment Hour Booking--Appointment Hour Boo= king</td>
<td>The Appointment Hour Booking WordPress plugin before 1.5.88 does not va= lidate a client-supplied booking price against the server-side configured s= ervice price, allowing unauthenticated users to submit an arbitrary final p= rice (including zero or negative) that is stored as the authoritative booki=
ng price, corrupting booking and payment records.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16282" target=3D= "_blank" rel=3D"noopener">CVE-2026-16282</a></td>
</tr>

<td class=3D"vendor-product">ash-project--ash</td>
<td>Uncontrolled Resource Consumption vulnerability in ash-project ash allo=
ws an attacker to exhaust the memory of the node via a crafted keyset pagin= ation cursor. Read actions with keyset pagination deserialize the client-su= pplied page[:after] or page[:before] cursor in decode_values/2 in lib/ash/p= age/keyset.ex, which base64-decodes the value and passes it to :erlang.bina= ry_to_term/2 without bounding its size. The Erlang external term format sup= ports zlib-compressed payloads, which the decoder inflates transparently, s=
o a cursor of a few kilobytes can allocate tens of megabytes of heap in a s= ingle call. Ash itself only ever encodes cursors uncompressed, so the decod=
er accepts a term shape its encoder never produces. Concurrent requests agg= regate these allocations and can terminate the node. This issue affects ash=
: from 1.17.0 before 3.31.1.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69659" target=3D= "_blank" rel=3D"noopener">CVE-2026-69659</a></td>
</tr>

<td class=3D"vendor-product">ash-project--ash</td>
<td>Improper Neutralization of Special Elements in Data Query Logic vulnera= bility in ash-project ash allows an attacker to forge a relationship to a r= ecord they cannot name, and to recover the secret value used to look it up.=
When manage_relationship is used with on_lookup: :relate on a belongs_to r= elationship, the client-supplied lookup value is passed to Ash.Query.filter=
/2 without being cast to the attribute type. A nested map submitted where a=
scalar is expected is therefore interpreted as a filter predicate rather t= han a literal, so a lookup for a specific record becomes a query for any re= cord matching a condition. The same path omits Ash.Query.limit(1), leaving = Ash.read_one/2 able to distinguish no match from one match from several, wh= ich turns comparison predicates into an oracle for the lookup value. Author= ization is unaffected; the destination read policy still applies. This issu=
e affects ash: from 1.52.0-rc.11 before 3.31.1.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70395" target=3D= "_blank" rel=3D"noopener">CVE-2026-70395</a></td>
</tr>

<td class=3D"vendor-product">ASUSTOR Inc.--ABP</td>
<td>The background service of ABP or AES runs as NT AUTHORITY\SYSTEM and im= plements a file-based inter-process communication (IPC) mechanism protected=
by AES encryption. Because the encryption key file is readable by standard=
users and protected using DPAPI. Any authenticated local user can recover = the key and forge valid IPC requests. Furthermore, the service does not che=
ck the identity of the requesting process and validates destination paths u= sing an insufficient substring check. A local attacker can submit crafted e= ncrypted requests containing directory traversal sequences to perform arbit= rary file reads and arbitrary file writes as NT AUTHORITY\SYSTEM, leading t=
o full local privilege escalation. Affected products and versions include: = ABP (ASUSTOR Backup Plan) 2.0.7.10171 and earlier as well as AES (ASUSTOR E= ZSync) 1.1.1.3113 and earlier.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18759" target=3D= "_blank" rel=3D"noopener">CVE-2026-18759</a></td>
</tr>

<td class=3D"vendor-product">beaugunderson--ip-address</td>
<td>ip-address is a library for parsing and manipulating IPv4 and IPv6 addr= esses in JavaScript. Prior to 10.3.1, Address4 accepts an octet written wit=
h a leading zero and decodes it as decimal, while the WHATWG URL host parse=
r, inet_aton, and getaddrinfo all decode a leading zero as octal. The libra=
ry and the network stack therefore disagree about which host a string names=
. new Address4('012.0.0.1') reports correctForm() of 12.0.0.1 and isPrivate=
() of false, but fetch('http://012.0.0.1/') connects to 10.0.0.1. An applic= ation that builds a network trust-boundary decision on these checks, for ex= ample a filter intended to block Server-Side Request Forgery, or SSRF, will=
classify an internal target as external and allow the request. The defect =
is in the parse gate rather than in any one classifier, so every consumer o=
f Address4 inherits it: isPrivate(), isLoopback(), isLinkLocal(), isCGNAT()=
, isInSubnet(), isHostInSubnet(), and correctForm() are all computed from t=
he mis-decoded octets. This issue is fixed in version 10.3.1.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69192" target=3D= "_blank" rel=3D"noopener">CVE-2026-69192</a></td>
</tr>

<td class=3D"vendor-product">beaugunderson--ip-address</td>
<td>ip-address is a library for parsing and manipulating IPv4 and IPv6 addr= esses in JavaScript. From 10.1.1 until 10.2.2, every special-use classifica= tion method is built on isInSubnet, which short-circuits to false whenever = the address's own subnet mask is shorter than the reference range's mask. T= hat mask comes verbatim from the CIDR suffix on the parsed input, so append= ing a suffix such as /0 suppresses classification entirely: isLoopback(), i= sPrivate(), isLinkLocal(), isCGNAT(), isMulticast(), isUnspecified(), isBro= adcast(), isULA(), and getType() all report an internal address as unremark= able, while correctForm() and address still return the real internal target=
. An application that builds a network trust-boundary decision on these che= cks, for example a filter intended to block Server-Side Request Forgery, or=
SSRF, may therefore treat an internal target as external and allow the req= uest. The underlying bit comparison is correct, and mask(n) already returns=
the first n bits of the full parsed address independently of subnetMask; t=
he defect is solely that the containment guard sits in the classification p= ath. This issue is fixed in version 10.2.2.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69198" target=3D= "_blank" rel=3D"noopener">CVE-2026-69198</a></td>
</tr>

<td class=3D"vendor-product">Bit Form--Bit Form</td>
<td>The Bit Form WordPress plugin before 3.2.0 does not sanitize an uploade=
d signature image before storing it, allowing unauthenticated attackers to = upload a crafted SVG file containing JavaScript that executes when the file=
is viewed, leading to Stored Cross-Site Scripting.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16573" target=3D= "_blank" rel=3D"noopener">CVE-2026-16573</a></td>
</tr>

<td class=3D"vendor-product">Blog Floating Button--Blog Floating Button</td=

<td>The Blog Floating Button WordPress plugin through 1.4.20 does not sanit= ize or escape the visitor User-Agent header, which it stores through an una= uthenticated tracking REST endpoint and later renders unescaped in an admin= istrator report page. This allows an unauthenticated attacker to store a ma= licious script that executes in the session of any administrator who views = the access report, leading to site takeover.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15383" target=3D= "_blank" rel=3D"noopener">CVE-2026-15383</a></td>
</tr>

<td class=3D"vendor-product">BNE Testimonials--BNE Testimonials</td>
<td>The BNE Testimonials WordPress plugin before 2.0.8.2 does not properly = escape a shortcode attribute for a JavaScript context before echoing it int=
o an inline script, allowing users with the contributor role and above to i= nject arbitrary JavaScript that executes in the browser of anyone viewing t=
he affected content.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15245" target=3D= "_blank" rel=3D"noopener">CVE-2026-15245</a></td>
</tr>

<td class=3D"vendor-product">Brizy--Brizy</td>
<td>The Brizy WordPress plugin before 2.8.19 does not properly restrict who=
can modify its site-global design data and does not sanitise part of that = data before outputting it, allowing authenticated users with Author-level a= ccess and above to store arbitrary JavaScript that is then served unsanitis=
ed on the site's front-end pages and executes in the browser of every visit= or, including administrators.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16068" target=3D= "_blank" rel=3D"noopener">CVE-2026-16068</a></td>
</tr>

<td class=3D"vendor-product">Brizy--Brizy</td>
<td>The Brizy WordPress plugin before 2.8.19 does not sanitize or escape fe= atured-image focal-point coordinates submitted through one of its AJAX acti= ons before storing them and later echoing them into HTML attributes in the = post editor's Featured Image meta box, allowing users with the Contributor = role or above to inject arbitrary web scripts that execute in the session o=
f a higher-privileged user who opens the post for review.</td>

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16069" target=3D= "_blank" rel=3D"noopener">CVE-2026-16069</a></td>
</tr>

<td class=3D"vendor-product">Brizy--Brizy</td>
<td>The Brizy WordPress plugin before 2.8.19 does not properly verify autho= rization on the object being modified before updating a template's type met=
a, validating a request parameter that is different from the one used in th=
e write operation, allowing users with Contributor-level access and above t=
o change the template-type assignment of templates owned by other users.</t=

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16070" target=3D= "_blank" rel=3D"noopener">CVE-2026-16070</a></td>
</tr>

<td class=3D"vendor-product">Caliptra--Core ROM</td>
<td>Time-of-check time-of-use (TOCTOU) vulnerability combined with missing = input validation in Caliptra Core ROM (UpdateResetFlow::run()) in subsystem=
mode allows a compromised local attacker to silently bypass secure boot by=
supplying an AXI staging address that is not validated against the strap-c= onfigured SS_EXTERNAL_STAGING_AREA_BASE_ADDR, enabling firmware to be modif= ied between verification and loading into ICCM. Attestation continues to re= port the originally verified image digest, masking the compromise. Exploita= tion requires a compromised MCU firmware with AXI manager access to unprote= cted SRAM reachable by Caliptra. This issue affects Core ROM: 2.1.0 through=
2.1.1.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11835" target=3D= "_blank" rel=3D"noopener">CVE-2026-11835</a></td>
</tr>

<td class=3D"vendor-product">Caliptra--Core ROM</td>
<td>Insufficient verification of data authenticity in Caliptra Core ROM and=
Core Firmware (validate_debug_unlock_token()) in subsystem mode allows an = attacker with access to the integrator's debug unlock signing service to un= lock production debug on an unintended device by presenting a valid token i= ssued for a different device sharing the same debug unlock key hash. The 38= 4-bit challenge nonce continues to prevent replay of previously issued toke= ns. Practical impact is limited to loss of per-device scope enforcement wit= hin a set of devices that share the same unlock authority by design; it doe=
s not enable debug unlock on devices outside that set. This issue affects C= ore ROM: 2.0.0 through 2.0.2, 2.1.0 through 2.1.1; Core Firmware: 2.0.0 thr= ough 2.0.1, 2.1.0.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11836" target=3D= "_blank" rel=3D"noopener">CVE-2026-11836</a></td>
</tr>

<td class=3D"vendor-product">ChamaWP--ChamaWP</td>
<td>The ChamaWP WordPress plugin before 1.0.13 does not properly validate u= ser input before passing it to a PHP deserialization function, allowing una= uthenticated attackers to inject arbitrary PHP objects, which could lead to=
remote code execution when a suitable gadget chain is present via other in= stalled code.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15672" target=3D= "_blank" rel=3D"noopener">CVE-2025-15672</a></td>
</tr>

<td class=3D"vendor-product">ChamaWP--ChamaWP</td>
<td>The ChamaWP WordPress plugin before 1.0.13 does not properly validate a=
password reset request, allowing unauthenticated attackers to reset the pa= ssword of arbitrary users, including administrators, which could lead to a = full site takeover.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16300" target=3D= "_blank" rel=3D"noopener">CVE-2026-16300</a></td>
</tr>

<td class=3D"vendor-product">Chat Widget: Floating Customer Support Button = for 30+ Channels, Supporting SMS, Calls, and Chat--Chat Widget: Floating Cu= stomer Support Button for 30+ Channels, Supporting SMS, Calls, and Chat</td=

<td>The Chat Widget: Floating Customer Support Button for 30+ Channels, Sup= porting SMS, Calls, and Chat WordPress plugin before 1.8.2 does not validat=
e the type, extension, content, or size of files submitted to its public re= sponse endpoint and stores them under the uploads directory, so an unauthen= ticated user can upload arbitrary files. The original extension is discarde=
d (files are stored under a bare UUID), so this does not yield code executi=
on or stored XSS; impact is bounded to disk consumption and content hosting=
. The storing path requires the channel's response storage or mail-forwardi=
ng to be configured.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16548" target=3D= "_blank" rel=3D"noopener">CVE-2026-16548</a></td>
</tr>

<td class=3D"vendor-product">Checkimate WooCommerce Checkout, Abandoned Car=
t Recovery & Order Bumps--Checkimate WooCommerce Checkout, Abandoned Ca=
rt Recovery & Order Bumps</td>
<td>The Checkimate - WooCommerce Checkout, Abandoned Cart Recovery & Or= der Bumps WordPress plugin through 1.0.13 does not properly restrict access=
to its license-management functionality, relying on a shared secret comput=
ed entirely from publicly available information, allowing unauthenticated a= ttackers to deactivate the Checkimate - WooCommerce Checkout, Abandoned Car=
t Recovery & Order Bumps WordPress plugin through 1.0.13's premium lice= nsing state and erase the stored license key.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14829" target=3D= "_blank" rel=3D"noopener">CVE-2026-14829</a></td>
</tr>

<td class=3D"vendor-product">checkpoint--Security Management Server</td>

<td>An authentication bypass vulnerability in Check Point Security Manageme=
nt Server and Multi-Domain Security Management Server (MDS) could allow an = unauthenticated remote attacker with network access to Management services =
to execute arbitrary commands on the Security Management Server. Successful=
exploitation could result in full compromise of the Security Management sy= stem. Check Point discovered this issue internally and has no indication of=
active exploitation.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18574" target=3D= "_blank" rel=3D"noopener">CVE-2026-18574</a></td>
</tr>

<td class=3D"vendor-product">Child Pages Card--Child Pages Card</td>
<td>The Child Pages Card WordPress plugin before 1.09 does not sanitise and=
escape some of its shortcode attributes before outputting them back in a p= age, allowing users with the contributor role and above to perform Stored C= ross-Site Scripting attacks.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18395" target=3D= "_blank" rel=3D"noopener">CVE-2026-18395</a></td>
</tr>

<td class=3D"vendor-product">CJCOLLIER--Google::Auth</td>
<td>Google::Auth versions before 0.09 for Perl allow server side request fo= rgery and credential exfiltration via unvalidated URLs taken from the crede= ntials JSON. The URLs the library requests are read from the credentials JS= ON, and their hosts were not checked against the universe domain before the=
request. For an external_account configuration, retrieve_subject_token fet= ched credential_source.url with headers from the same JSON, and fetch_acces= s_token posted the subject token to token_url, then sent the STS access tok=
en it received to service_account_impersonation_url in an Authorization: Be= arer header. The authorized_user, impersonated_service_account and service_= account configurations posted the client secret and refresh token, the sour=
ce access token, and a signed JWT assertion to their own JSON-supplied toke= n_uri or impersonation URL. Any caller that builds credentials from a confi= guration it does not fully control issues those requests from the applicati= on's network position, reaching hosts the configuration names, including in= ternal services and link-local metadata endpoints, and hands them the crede= ntials each request carries. The service_account assertion is bound to aud,=
so it is not replayable against Google. Version 0.06 added a _validate_url=
host check to the external_account class, keyed on a universe_domain read = from the same credentials JSON. Version 0.07 gated a JSON-supplied universe=
domain behind GOOGLE_EXTERNAL_ACCOUNT_ALLOW_CUSTOM_UNIVERSES=3D1, deriving=
the pin flag from arguments that an earlier BUILDARGS pass had already mer= ged on the make_creds path. Version 0.08 passed the pin decision through as=
an explicit constructor argument and moved _validate_url to Google::Auth::= Credentials, adding the call to UserRefreshCredentials and ImpersonatedServ= iceAccountCredentials, and 0.09 added it to ServiceAccountCredentials.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66901" target=3D= "_blank" rel=3D"noopener">CVE-2026-66901</a></td>
</tr>

<td class=3D"vendor-product">CJCOLLIER--Google::Auth</td>
<td>Google::Auth versions before 0.06 for Perl run a command named in an ex= ternal_account credentials JSON via an ungated system call. The Pluggable s= ubclass reads credential_source.executable.command from the credentials JSO=
N and runs it as `system($command)`, a single argument call that passes the=
whole string to /bin/sh -c. The executable's environment_variables map fro=
m the same JSON is copied into %ENV first. No opt-in gate guards the call. = make_creds selects the Pluggable subclass whenever credential_source.execut= able is present, so the path is reached from the standard Application Defau=
lt Credentials flow, including a "type": "external_account" configuration r= ead from the file named by GOOGLE_APPLICATION_CREDENTIALS. Configurations w= ithout credential_source.executable do not select this subclass and do not = reach the call. Any caller that builds credentials from a configuration it = does not fully control runs the embedded command with the privileges of the=
application process.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66902" target=3D= "_blank" rel=3D"noopener">CVE-2026-66902</a></td>
</tr>

<td class=3D"vendor-product">Classified Listing--Classified Listing</td>

<td>The Classified Listing WordPress plugin before 5.4.4 does not perform a=
capability or ownership check on an AJAX action that returns a post's cont= ent, allowing users with contributor-level access and above to read the con= tent of any post, page, or custom post type on the site - including drafts,=
pending, and private posts owned by other users - regardless of ownership.= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16274" target=3D= "_blank" rel=3D"noopener">CVE-2026-16274</a></td>
</tr>

<td class=3D"vendor-product">Classified Listing--Classified Listing</td>

<td>The Classified Listing WordPress plugin before 5.4.4 does not perform a=
capability check on an AJAX action that returns aggregated store revenue t= otals, allowing users with contributor-level access and above to read daily=
revenue figures normally restricted to administrators and report managers.= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16276" target=3D= "_blank" rel=3D"noopener">CVE-2026-16276</a></td>
</tr>

<td class=3D"vendor-product">Clearfy Cache--Clearfy Cache</td>
<td>The Clearfy Cache WordPress plugin before 2.4.3 does not perform a capa= bility check in one of its admin-page dispatch paths, allowing any authenti= cated user such as a Subscriber to render admin-only settings pages and dis= close their contents, including administrative nonces, while the canonical = page URL correctly restricts access.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16295" target=3D= "_blank" rel=3D"noopener">CVE-2026-16295</a></td>
</tr>

<td class=3D"vendor-product">Clearfy Cache--Clearfy Cache</td>
<td>The Clearfy Cache WordPress plugin before 2.4.3 does not validate the r= edirect target in its Cyrlitera old-URL redirect handler, passing a decoded=
request URI to an unsafe redirect function, which allows unauthenticated a= ttackers to redirect visitors to an arbitrary external URL when a non-defau=
lt option is enabled.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16296" target=3D= "_blank" rel=3D"noopener">CVE-2026-16296</a></td>
</tr>

<td class=3D"vendor-product">Clearfy Cache--Clearfy Cache</td>
<td>The Clearfy Cache WordPress plugin before 2.4.3 does not restrict the c= lasses allowed when unserializing settings-import data, allowing users with=
administrator access to perform PHP Object Injection attacks, which may le=
ad to remote code execution when a suitable gadget chain is present in the = environment.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16297" target=3D= "_blank" rel=3D"noopener">CVE-2026-16297</a></td>
</tr>

<td class=3D"vendor-product">cli--cli</td>
<td>GitHub CLI (gh) is GitHub's official command line tool. Prior to 2.97.0=
, some HTTP request URLs interpolate variable path components without perce=
nt encoding, allowing URL path metacharacters in attacker-controlled reposi= tory or resource values to make gh address a different API endpoint or reso= urce than the user intended. This issue is fixed in version 2.97.0.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64653" target=3D= "_blank" rel=3D"noopener">CVE-2026-64653</a></td>
</tr>

<td class=3D"vendor-product">cli--cli</td>
<td>GitHub CLI (gh) is GitHub's official command line tool. Prior to versio=
n 2.97.0, multiple GitHub CLI commands printed externally controlled gist, = API, pull request, release, codespace, skill, or agent-task content without=
neutralizing terminal escape sequences. An attacker who can influence that=
content can embed escape sequences that are interpreted by the terminal of=
a user who runs an affected command, with impact ranging from cosmetic man= ipulation of the title or on-screen content to, on some terminal emulators,=
command execution. This extends the same class of issue as CVE-2026-45803-= which addressed only gh run view --log-to the other affected command paths.=
This issue is fixed in version 2.97.0.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64654" target=3D= "_blank" rel=3D"noopener">CVE-2026-64654</a></td>
</tr>

<td class=3D"vendor-product">cli--cli</td>
<td>GitHub CLI (gh) is GitHub's official command line tool. Prior to 2.97.0=
, gh attestation verify=C2=A0 builds the certificate Subject Alternative Na=
me matcher from the --signer-repo and --signer-workflow=C2=A0 flag values w= ithout escaping regex metacharacters, so a user-supplied repository or work= flow name is treated as a regular expression rather than a literal string. = Because GitHub permits characters such as =C2=A0`.`=C2=A0 in organization, = repository, and workflow path names and =C2=A0`.`=C2=A0 is a regex wildcard=
, an attacker can register a lookalike name (for example=C2=A0github/artifa= ct.attestations-workflows) that satisfies a matcher intended for a differen=
t trusted signer (github/artifact-attestations-workflows), bypassing the in= tended Sigstore attestation verification. Exploitation requires the attacke=
r to create a plausible lookalike repository and produce valid attestations=
from it, which could undermine supply chain verification for CI/CD pipelin=
es or policy gates that pin trust to a specific signing workflow. This issu=
e is fixed in version 2.97.0.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64655" target=3D= "_blank" rel=3D"noopener">CVE-2026-64655</a></td>
</tr>

<td class=3D"vendor-product">Comments--Comments</td>
<td>The Comments WordPress plugin before 7.6.60 does not properly escape a = user-supplied URL before outputting it inside an HTML attribute, allowing u= nauthenticated users to store a Cross-Site Scripting payload that executes =
in the browser of any user, including administrators, who views the affecte=
d content.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15032" target=3D= "_blank" rel=3D"noopener">CVE-2026-15032</a></td>
</tr>

<td class=3D"vendor-product">Content Views--Content Views</td>
<td>The Content Views WordPress plugin before 4.5 does not perform a capabi= lity check on one of its AJAX actions and does not properly sanitise attack= er-supplied data before using it in a SQL query, allowing any authenticated=
user, including Subscribers, to perform SQL injection attacks.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15361" target=3D= "_blank" rel=3D"noopener">CVE-2026-15361</a></td>
</tr>

<td class=3D"vendor-product">Contest Gallery--Contest Gallery</td>
<td>The Contest Gallery WordPress plugin before 30.0.7 does not route its f= ront-end login through the standard WordPress authentication flow, issuing =
an authentication cookie directly after the password check, which bypasses = installed brute-force-protection and two-factor-authentication Contest Gall= ery WordPress plugin before 30.0.7 and enables unlimited, unthrottled passw= ord guessing against any account (including administrators) up to full acco= unt takeover.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16055" target=3D= "_blank" rel=3D"noopener">CVE-2026-16055</a></td>
</tr>

<td class=3D"vendor-product">Contest Gallery--Contest Gallery</td>
<td>The Contest Gallery WordPress plugin before 30.0.7 does not perform any=
capability or nonce check in one of its handlers, allowing any authenticat=
ed user down to Subscriber to read the site's entire stored OpenAI prompt h= istory.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16056" target=3D= "_blank" rel=3D"noopener">CVE-2026-16056</a></td>
</tr>

<td class=3D"vendor-product">Contest Gallery--Contest Gallery</td>
<td>The Contest Gallery WordPress plugin before 30.0.7 does not perform per= -object capability or nonce checks in one of its post-deletion handlers, ga= ting it only by a coarse role-membership test, which allows any Author-leve=
l or higher user to permanently delete arbitrary posts, pages, and other co= ntent they do not own.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16057" target=3D= "_blank" rel=3D"noopener">CVE-2026-16057</a></td>
</tr>

<td class=3D"vendor-product">Create Block Theme--Create Block Theme</td>

<td>The Create Block WordPress plugin before 2.10.0 does not correctly esca=
pe user-supplied text before writing it into a generated PHP pattern file, = allowing a multisite subsite administrator (who holds the capability gating=
this action but is denied the capability that normally gates PHP file edit= ing) to inject and execute arbitrary PHP code on the server.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16623" target=3D= "_blank" rel=3D"noopener">CVE-2026-16623</a></td>
</tr>

<td class=3D"vendor-product">Create--Create</td>
<td>The Create WordPress plugin before 2.5.4 does not perform an authorizat= ion check before returning content over one of its REST API routes, and tha=
t route additionally publishes the requested content as a side effect, allo= wing unauthenticated attackers to read unpublished content and to make it p= ublicly available.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16992" target=3D= "_blank" rel=3D"noopener">CVE-2026-16992</a></td>
</tr>

<td class=3D"vendor-product">Create--Create</td>
<td>The Create WordPress plugin before 2.5.4 does not perform an authorizat= ion check before rendering content over one of its public REST API routes, = and that route additionally publishes the requested content as a side effec=
t, allowing unauthenticated attackers to read unpublished content and to ma=
ke it publicly available.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18037" target=3D= "_blank" rel=3D"noopener">CVE-2026-18037</a></td>
</tr>

<td class=3D"vendor-product">CubeWP Framework--CubeWP Framework</td>
<td>The CubeWP Framework WordPress plugin before 1.1.31 does not properly s= anitize and escape a parameter before using it in a SQL statement through a=
n AJAX action, and does not include a capability check on that action, allo= wing users with Subscriber-level access and above to perform SQL injection = attacks.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17017" target=3D= "_blank" rel=3D"noopener">CVE-2026-17017</a></td>
</tr>

<td class=3D"vendor-product">Custom Fields--Custom Fields</td>
<td>The Custom Fields WordPress plugin before 1.5.1 does not validate a use= r-supplied file path before deletion, allowing unauthenticated users to del= ete arbitrary files on the server (such as wp-config.php), which can lead t=
o a full site takeover.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16940" target=3D= "_blank" rel=3D"noopener">CVE-2026-16940</a></td>
</tr>

<td class=3D"vendor-product">cvat-ai--cvat</td>
<td>CVAT is an open source interactive video and image annotation tool for = computer vision. In versions 1.6.0 through 2.64.0, an attacker with write a= ccess to a cloud storage that's been added to a CVAT instance, or ability t=
o add new cloud storages, is able to overwrite arbitrary files on the serve= r's filesystem. This issue has been fixed in version 2.65.0.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47682" target=3D= "_blank" rel=3D"noopener">CVE-2026-47682</a></td>
</tr>

<td class=3D"vendor-product">cvat-ai--cvat</td>
<td>CVAT is an open source interactive video and image annotation tool for = computer vision. Versions 2.5.0 through 2.66.0 contain a XSS vulnerability = that can be accessed through annotation guide assets. When CVAT serves the = files attached to an annotation guide, it labels them with a media type (= =C2=A0Content-Type=C2=A0) that the attacker can influence, so instead of tr= eating an uploaded file as plain data, the victim's browser can be told to = treat it as an HTML page and run any JavaScript inside it. This issue has b= een fixed in version 2.67.0.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-65986" target=3D= "_blank" rel=3D"noopener">CVE-2026-65986</a></td>
</tr>

<td class=3D"vendor-product">dartiss--shareopenly</td>
<td>The ShareOpenly WordPress plugin prior to version 1.2.1 contains a Cros= s-Site Scripting vulnerability caused by the absence of WordPress's `esc_ur= l()` escaping function on the `$url` variable before it is rendered into HT=
ML content. This variable is constructed from `home_url( add_query_arg( arr= ay(), $wp->request ) )` and is concatenated directly into an HTML `href`=
attribute on every singular post or page where the plugin's sharing link i=
s displayed. WordPress's security handbook mandates that every URL placed i=
n HTML output must be passed through `esc_url()`, which both HTML-encodes s= pecial characters (converting `"`, `<`, `>` into their safe HTML enti=
ty equivalents) and strips dangerous URI schemes such as `javascript:` and = `data:`. The omission of this function means that if the `$url` value ever = contains HTML-special characters or a dangerous URI scheme - through a `hom= e_url` WordPress filter applied by another plugin or theme, through certain=
web server or hosting configurations, or through future code changes - the=
unescaped content will be injected verbatim into the rendered HTML of ever=
y post or page on the site. Version 1.2.1 contains a patch for the issue.</=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48094" target=3D= "_blank" rel=3D"noopener">CVE-2026-48094</a></td>
</tr>

<td class=3D"vendor-product">Database for Contact Form 7, WPforms, Elemento=
r forms--Database for Contact Form 7, WPforms, Elementor forms</td>
<td>The Database for Contact Form 7, WPforms, Elementor forms WordPress plu= gin before 1.5.5 does not properly sanitise and escape a parameter before u= sing it in a SQL statement, leading to a SQL Injection exploitable by users=
granted a specific capability which is limited to administrators by defaul=
t but can be delegated to lower privileged roles.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14872" target=3D= "_blank" rel=3D"noopener">CVE-2026-14872</a></td>
</tr>

<td class=3D"vendor-product">Datadog--Android App</td>
<td>In versions of the Datadog Android application prior to v545-5.9.2, OnC= allNotificationActivity is declared exported with no permission guard. A co= -installed application can launch it with attacker-controlled Intent extras=
, including a full-screen lock-screen message, an arbitrary on-call page ID=
, and an arbitrary Intent to run inside the Datadog process. This requires:=
A malicious application co-installed on the victim's device. An active Dat= adog session in the Android app. Impact: After a single tap on the Acknowle= dge button, the app sends a forged on-call acknowledgement to the backend u= nder the victim's session, launches the attacker-supplied Intent from withi=
n the Datadog process (reaching otherwise non-exported components), and tur=
ns on the screen while dismissing the keyguard.</td>

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-44964" target=3D= "_blank" rel=3D"noopener">CVE-2026-44964</a></td>
</tr>

<td class=3D"vendor-product">Datadog--Android App</td>
<td>In versions of the Datadog Android application prior to v545-5.9.2, six=
App Widget configuration activities (IncidentWidgetActivity, MonitorSavedV= iewWidgetActivity, OnCallShiftsWidgetActivity, OnCallPagesWidgetActivity, S= loWidgetActivity, DashboardWidgetActivity) are exported with no permission = guard. Each accepts a caller-supplied AppWidgetManager.EXTRA_APPWIDGET_ID a= nd, when no deep-link destination is resolved, uses it to load the matching=
widget's stored session and automatically log in as that user. Because And= roid widget IDs are small sequential integers, a co-installed application c=
an brute-force this value to find one that matches a widget configured on t=
he victim's device. This requires: A malicious application co-installed on = the victim's device. At least one of the six widgets configured on the vict= im's home screen. An active Datadog session cached locally. Impact: The mat= ching configuration activity opens in the foreground under the victim's ses= sion and renders live infrastructure data. Exposure is limited to a visual = side channel (e.g., screen recording or accessibility services); the callin=
g application cannot programmatically read the rendered data.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-44965" target=3D= "_blank" rel=3D"noopener">CVE-2026-44965</a></td>
</tr>

<td class=3D"vendor-product">Datadog--Android App</td>
<td>In versions of the Datadog Android application prior to v541-5.9.2, Bub= bleChatActivity is exported with no permission guard and accepts a SEND int= ent with a caller-supplied conversation_id. When the activity closes and no=
in-process session matches that ID, it unconditionally cancels notificatio=
n ID 9201 (the Bits AI chat notification), with no check on the caller's id= entity or ownership of the conversation. This requires a malicious applicat= ion co-installed on the victim's device. Impact: A co-installed application=
can silently dismiss the victim's Bits AI chat notification. No chat conte=
nt is exposed; conversation data remains server-authentication gated and is=
never returned to the caller.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47361" target=3D= "_blank" rel=3D"noopener">CVE-2026-47361</a></td>
</tr>

<td class=3D"vendor-product">Datadog--Android App</td>
<td>In versions of the Datadog Android application prior to v554-5.9.4, two=
Room-backed SQLite databases store sensitive content in plaintext: LocalNo= tificationDatabase (notification title, message, recipient, service, tags, = and on-call/incident deep links) and SearchRecentDatabase (the user's full = in-app search history). Impact: Any actor able to bypass the app sandbox ca=
n read these databases in plaintext.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47362" target=3D= "_blank" rel=3D"noopener">CVE-2026-47362</a></td>
</tr>

<td class=3D"vendor-product">Datadog--Android App</td>
<td>In versions of the Datadog Android application prior to v541-5.9.2, the=
exported launcher activity AppActivity accepts an attacker-supplied sessio=
n (including OAuth tokens) from Intent extras with no permission guard, and=
signs the app into that session without validating it against the backend.=
This requires a malicious application co-installed on a device with the Da= tadog app installed, and an OAuth token the attacker is willing to load int=
o the victim's app. Impact: A co-installed application can switch the victi= m's Datadog app to a session the attacker controls. This is an account-conf= usion issue; it does not by itself expose the victim's existing session or = data.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47363" target=3D= "_blank" rel=3D"noopener">CVE-2026-47363</a></td>
</tr>

<td class=3D"vendor-product">Datadog--Android App</td>
<td>In versions of the Datadog Android application prior to v545-5.9.2, the=
app tags Crashlytics data with the user's Datadog UUID, with no user-facin=
g opt-out. Impact: The Datadog user UUID and crash data are visible within = Firebase Crashlytics. This UUID is not identifying outside Datadog's own sy= stems.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47364" target=3D= "_blank" rel=3D"noopener">CVE-2026-47364</a></td>
</tr>

<td class=3D"vendor-product">DHL Shipping Germany for WooCommerce--DHL Ship= ping Germany for WooCommerce</td>
<td>The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 = does not perform any authorization check (no capability, nonce, login, or o= wnership check) on one of its shipping-label download endpoints, so an unau= thenticated attacker can enumerate sequential ids and download every stored=
shipping label, each containing the customer's full name, complete postal = address, and order reference.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16981" target=3D= "_blank" rel=3D"noopener">CVE-2026-16981</a></td>
</tr>

<td class=3D"vendor-product">DHL Shipping Germany for WooCommerce--DHL Ship= ping Germany for WooCommerce</td>
<td>The DHL Shipping Germany for WooCommerce WordPress plugin before 4.0.1 = does not protect its shipping-label storage directory with server-independe=
nt access control, relying only on an Apache .htaccess file, so on a web se= rver that does not honor .htaccess (such as nginx) an unauthenticated visit=
or can download stored shipping labels (each containing a customer's name a=
nd postal address) by requesting predictable filenames.</td>

<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16993" target=3D= "_blank" rel=3D"noopener">CVE-2026-16993</a></td>
</tr>

<td class=3D"vendor-product">Directus--Directus</td>
<td>Directus contains an authenticated SQL injection vulnerability in the c= ollection creation flow when the instance uses PostgreSQL with PostGIS enab= led. An administrator can create a collection with a geometry field whose f= ields[].type value starts with geometry but contains attacker-controlled SQ=
L syntax after the geometry subtype.This issue affects Directus: before 12.= 1.0.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10716" target=3D= "_blank" rel=3D"noopener">CVE-2026-10716</a></td>
</tr>

<td class=3D"vendor-product">DivvyPayHQ--absinthe_federation</td> <td>Allocation of Resources Without Limits or Throttling vulnerability in D= ivvyPayHQ absinthe_federation allows an unauthenticated remote attacker to = abort the Erlang VM via crafted _entities representation keys. Every key of=
every object in the representations argument of the federation-mandated _e= ntities field is converted with String.to_atom/1 by convert_key/2 in lib/ab= sinthe/federation/schema/entities_field.ex. representations is typed as the=
open-ended _Any scalar, so its keys bypass schema coercion and the attacke=
r names them freely. Atoms are never garbage collected and the BEAM atom ta= ble is hard-capped (about 1,048,576 entries by default), so one request car= rying tens of thousands of unique keys creates that many permanent atoms an=
d a handful of such requests exhausts the table and aborts the node. The im= pact is confined to availability: no data is read or altered, and recovery = requires restarting the application. This issue affects absinthe_federation=
: from 0.1.0 before 0.9.3.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67585" target=3D= "_blank" rel=3D"noopener">CVE-2026-67585</a></td>
</tr>

<td class=3D"vendor-product">Dokan: AI Powered WooCommerce Multivendor Mark= etplace Solution--Dokan: AI Powered WooCommerce Multivendor Marketplace Sol= ution</td>
<td>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution Word= Press plugin before 5.0.9 does not verify order ownership on a REST endpoin=
t that performs bulk order-status changes, allowing users with a Dokan vend=
or account to modify the status of any WooCommerce order on the marketplace=
, including orders belonging to other vendors and the store's own customers= .</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16564" target=3D= "_blank" rel=3D"noopener">CVE-2026-16564</a></td>
</tr>

<td class=3D"vendor-product">Dokan: AI Powered WooCommerce Multivendor Mark= etplace Solution--Dokan: AI Powered WooCommerce Multivendor Marketplace Sol= ution</td>
<td>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution Word= Press plugin before 5.0.9 does not verify product ownership on its product-= attribute REST write endpoints, allowing users with a Dokan vendor account =
to modify the product attributes and default attributes of any other vendor=
's products on the marketplace.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16565" target=3D= "_blank" rel=3D"noopener">CVE-2026-16565</a></td>
</tr>

<td class=3D"vendor-product">Dokan: AI Powered WooCommerce Multivendor Mark= etplace Solution--Dokan: AI Powered WooCommerce Multivendor Marketplace Sol= ution</td>
<td>The Dokan: AI Powered WooCommerce Multivendor Marketplace Solution Word= Press plugin before 5.0.11 does not verify that a downloadable product belo= ngs to the requesting vendor before granting download permissions through o=
ne of its order REST endpoints, allowing an authenticated vendor to grant t= heir own customer free download access to another vendor's paid downloadabl=
e files.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16574" target=3D= "_blank" rel=3D"noopener">CVE-2026-16574</a></td>
</tr>

<td class=3D"vendor-product">Download Monitor--Download Monitor</td>
<td>The Download Monitor WordPress plugin before 5.2.6 does not perform aut= horization checks on one of its download-logging AJAX actions, and exposes = the nonce protecting it to unauthenticated visitors, allowing unauthenticat=
ed users to inject arbitrary download log entries and inflate a site's down= load statistics.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16608" target=3D= "_blank" rel=3D"noopener">CVE-2026-16608</a></td>
</tr>

<td class=3D"vendor-product">Drag and Drop Multiple File Upload for WooComm= erce--Drag and Drop Multiple File Upload for WooCommerce</td>
<td>The Drag and Drop Multiple File Upload for WooCommerce WordPress plugin=
before 1.1.8 does not prevent unauthenticated users from obtaining a valid=
nonce that is the only control gating its file-deletion routine, allowing = anonymous attackers to delete files staged in its upload directory and irre= versibly destroy customers' pending order attachments.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16054" target=3D= "_blank" rel=3D"noopener">CVE-2026-16054</a></td>
</tr>

<td class=3D"vendor-product">Easy Integration for Dropbox--Easy Integration=
for Dropbox</td>
<td>The Easy Integration for Dropbox WordPress plugin before 2.2.0 does not=
perform authorization checks on several of its file-management AJAX action=
s that it also registers for unauthenticated users, allowing an unauthentic= ated attacker to list, download and upload arbitrary files across the conne= cted Dropbox account and to read the connected account and administrator em= ail addresses.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15958" target=3D= "_blank" rel=3D"noopener">CVE-2026-15958</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Accessibility Tool=
s Framework (ACTF)</td>
<td>In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (i= ncluding source code versions up to v20260630 and ACTF based application mi= Checker versions up to 3.1.0), it has been identified that an XML External = Entity (XXE) vulnerability exists. If this vulnerability is exploited, a ma= licious third party could gain access to local resources or internal networ=
k resources via computer running applications that use Eclipse ACTF, includ= ing miChecker.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14304" target=3D= "_blank" rel=3D"noopener">CVE-2026-14304</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Jetty - EE8</td> <td>In Eclipse Jetty, the Digest authentication server-side component uses = ISO-8859-1 to encode the password as bytes. This was done because the initi=
al specification for HTTP did not specify explicitly a charset, and it was = assumed to be ISO-8859-1 for historical reasons. If the password contains c= haracters that cannot be represented in ISO-8859-1, they are silently repla= ced by `?`. This happens with passwords that contain Chinese, Cyrillic or G= reek characters, for example: `=C3=83=C5=BD=C3=82=C2=B1=C3=83=C5=BD=C3=82= =C2=B2123` converts to `??123`. An attacker can send a request with a diges=
t `Authorization` header crafted with a password made of only `?` character=
s; the server would match any password of the same length that contains non= -ISO-8859-1 characters. Recent HTTP Digest [RFC-7616](https://datatracker.i= etf.org/doc/html/rfc7616) supports a `charset` parameters that defaults to = UTF-8 that allows for correct encoding/decoding of passwords.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10050" target=3D= "_blank" rel=3D"noopener">CVE-2026-10050</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Milo</td>
<td>In Eclipse Milo versions 1.0.0 through 1.1.4, `OpcUaServerConfig.copy()=
` fails to preserve a configured `RoleMapper`. On servers that rely on role=
permissions and construct the running configuration through `copy()`, sess= ions receive no role IDs and the default access controller skips role-permi= ssion checks, allowing an anonymous client where anonymous sessions are per= mitted to read role-permission metadata, invoke protected methods, or delet=
e protected nodes.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58080" target=3D= "_blank" rel=3D"noopener">CVE-2026-58080</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Milo</td>
<td>In Eclipse Milo versions 0.6.0 through 1.1.4, username-token processing=
returns distinguishable errors for invalid RSA PKCS#1 v1.5 padding and oth=
er authentication failures, allowing an on-path attacker who captures a vic= tim's `Basic128Rsa15`-encrypted username token to use repeated unauthentica= ted `ActivateSession` requests as a padding oracle, recover the victim's pa= ssword, and authenticate with the recovered credentials.</td>

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-60007" target=3D= "_blank" rel=3D"noopener">CVE-2026-60007</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Milo</td>
<td>In Eclipse Milo versions 1.0.0 through 1.1.4, monitored-item quota acco= unting is not exception-safe: if item creation fails with an unchecked erro=
r, the server-global reservation is not restored. Deeply nested PubSub Exte= nsionObjects in a `CreateMonitoredItems` event filter can trigger a `StackO= verflowError` during decoding, allowing an unauthenticated remote client to=
exhaust a finite global monitored-item quota and prevent all clients from = creating new monitored items until restart. Existing monitored items and ot= her server functions remain unaffected.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-61387" target=3D= "_blank" rel=3D"noopener">CVE-2026-61387</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Milo</td>
<td>In Eclipse Milo versions 1.0.0 through 1.1.4, the Call service dispatch=
es the original mixed batch to address-space handlers after calculating aut= horization, allowing an anonymous or otherwise low-privileged client to exe= cute a denied method by batching it with an allowed method.</td>

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62927" target=3D= "_blank" rel=3D"noopener">CVE-2026-62927</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Milo</td>
<td>In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics=
nodes do not enforce access authorization. An anonymous client can enable = diagnostics over a None/None endpoint without a certificate; with a trusted=
client application certificate over SignAndEncrypt, it can read security d= iagnostics for other active sessions, exposing usernames, login history, au= thentication mechanisms, security modes and policies, and public client cer= tificates.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63248" target=3D= "_blank" rel=3D"noopener">CVE-2026-63248</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Milo</td>
<td>In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport han= dlers fail to release retained partial message chunks when a channel discon= nects, allowing a remote unauthenticated client to exhaust pooled direct me= mory by repeatedly sending incomplete chunks and disconnecting, potentially=
terminating the server.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-63252" target=3D= "_blank" rel=3D"noopener">CVE-2026-63252</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Mojarra</td>
<td>In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultF= aceletFactory` does not properly sanitize and/or block remote URLs, allowin=
g an attacker to specify a URL to a remote Facelet which will be included a=
nd processed as part of the normal request, with the privileges of the targ=
et server. This could allow access to restricted files such as `WEB-INF/web= .xml` or `/etc/passwd`.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46581" target=3D= "_blank" rel=3D"noopener">CVE-2026-46581</a></td>
</tr>

<td class=3D"vendor-product">Eclipse Foundation--Eclipse Theia</td>
<td>In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `Pre= ferenceUtils.merge` function in `@theia/core` recursively merges preference=
values without rejecting prototype-related keys (`__proto__`, `constructor=
`, `prototype`). Because this function is invoked by `PreferenceServiceImpl= .doResolve` for every preference resolution across scopes (default, user, w= orkspace, folder), a crafted preference value in a workspace settings file = (`.theia/settings.json` or `.vscode/settings.json`) can pollute `Object.pro= totype` when the user opens the workspace, potentially altering application=
logic across the Theia process.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14574" target=3D= "_blank" rel=3D"noopener">CVE-2026-14574</a></td>
</tr>

<td class=3D"vendor-product">element-hq--element-call</td>
<td>Element Call is a native Matrix video conferencing application. Version=
s 0.5.17 through 0.19.3 report analytics data to a PostHog server, when con= figured to by a `posthog` key in config.json or by the `posthogApiHost` and=
`posthogApiKey` URL parameters. Several fields of this data (`$initial_per= son_info`, `$session_entry_url`, and `$current_url`) were found to contain = the full URL of the user's visited page, including the fragment. Users of a=
standalone Element Call 'SPA' instance such as https://call.element.io may=
therefore have reported the full URLs of certain calls, including encrypti=
on passwords, to the configured PostHog server, potentially compromising th=
e confidentiality of the calls to actors who could access both the PostHog = analytics data and the encrypted media streams. The same issue is present i=
n Element Call's embedded package, but in practice it does not impact appli= cations using this package (including Element Web, Element Desktop, Element=
X iOS, and Element X Android) because they distribute encryption keys over=
Matrix rather than encoding a password in the URL. The issue is patched in=
Element Call 0.19.4. Some workarounds are available. Users may opt out of = analytics in the 'Feedback' tab of Element Call's settings and create new l= inks for future calls. Admins who host Element Call as a standalone applica= tion may disable PostHog analytics entirely by removing the `posthog` key f= rom their deployment's config.json file.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48007" target=3D= "_blank" rel=3D"noopener">CVE-2026-48007</a></td>
</tr>

<td class=3D"vendor-product">elixir-ecto--postgrex</td>
<td>Improper Neutralization of Special Elements used in an SQL Command ('SQ=
L Injection') vulnerability in elixir-ecto postgrex allows SQL Injection vi=
a the :comment option of Postgrex.stream/4. An attacker who can influence t= hat value can close the comment delimiter with */ and extend the streamed s= tatement with their own clauses, which execute under the connection's role.=
Ecto exposes the same option through Ecto.Repo.stream/2. Postgrex appends = the comment by concatenating it into the statement text sent in the Parse m= essage, without escaping or rejecting */. The option is validated by commen= t_not_present!/1 at every other execution point; stream/4 never calls it. B= ecause Parse accepts a single command, the injection is confined to the str= eamed statement and further statements cannot be chained. This issue affect=
s postgrex: from 0.19.3 before 0.22.4.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66838" target=3D= "_blank" rel=3D"noopener">CVE-2026-66838</a></td>
</tr>

<td class=3D"vendor-product">EmbedPress--EmbedPress</td>
<td>The EmbedPress WordPress plugin before 4.6.1 does not validate user-sup= plied URLs before making server-side requests through unauthenticated endpo= ints, allowing unauthenticated attackers to induce the site to send HTTP re= quests to internal hosts and services that WordPress core URL validation do=
es not cover (a blind Server-Side Request Forgery).</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10526" target=3D= "_blank" rel=3D"noopener">CVE-2026-10526</a></td>
</tr>

<td class=3D"vendor-product">Emlog--Emlog CMS</td>
<td>Emlog CMS <=3D 2.6.14 contains a stored cross-site scripting (XSS) v= ulnerability in the article publishing module (/admin/article.php). A remot=
e authenticated attacker can inject arbitrary JavaScript code via the artic=
le content. When an administrator reviews or previews the submitted article=
in the backend, the malicious script executes in the admin's browser sessi= on, allowing the attacker to perform administrative actions such as creatin=
g a backdoor administrator account.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52520" target=3D= "_blank" rel=3D"noopener">CVE-2026-52520</a></td>
</tr>

<td class=3D"vendor-product">EONSR AEO Agent--EONSR AEO Agent</td>
<td>The EONSR AEO Agent WordPress plugin through 3.7.9 does not perform any=
authorisation check on one of its REST API routes and disables HTML saniti= sation before saving the post, allowing unauthenticated attackers to create=
administrator-attributed published posts containing arbitrary web scripts = that execute in the browser of any visitor, including administrators (Store=
d XSS).</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11588" target=3D= "_blank" rel=3D"noopener">CVE-2026-11588</a></td>
</tr>

<td class=3D"vendor-product">Erlang Ecosystem Foundation--oidcc_plug</td> <td>Improper Handling of Case Sensitivity vulnerability in Erlang Ecosystem=
Foundation oidcc_plug (Oidcc.Plug.Authorize module) renders the user agent=
session binding inert, removing a defense in depth control against replay =
of a stolen session. This vulnerability is associated with program files li= b/oidcc/plug/authorize.ex and lib/oidcc/plug/authorization_callback.ex, and=
program routines Oidcc.Plug.Authorize.call/2 and Oidcc.Plug.AuthorizationC= allback.call/2. Oidcc.Plug.Authorize.call/2 reads the initiating client's u= ser agent with get_req_header(conn, "User-Agent"). Plug lowercases incoming=
header names, but get_req_header/2 matches the supplied key exactly and pe= rforms no normalization of its own, so the mixed-case lookup always returns=
an empty list and nil is written into the session. On the callback side, O= idcc.Plug.AuthorizationCallback treats a stored nil user agent as nothing t=
o compare and returns :ok without inspecting the request. The two behaviour=
s combine so that the check passes unconditionally on every request, includ= ing for deployments that explicitly opted in with check_useragent: true, an=
d an authorization callback can be completed from a different user agent th=
an the one that initiated the flow without detection. The check fails open = silently, with no error and no log entry, so a deployment cannot tell the b= inding is absent. The impact is limited to defense in depth. The inert chec=
k does not by itself allow an attacker to complete an authorization flow; i=
t removes one layer that would otherwise hinder use of a stolen or leaked s= ession, such as an exfiltrated session cookie replayed from a different cli= ent. The CSRF/state, nonce, and PKCE checks are unaffected and continue to = function. Deployments that never enabled check_useragent are not affected i=
n practice, since they never expected the binding. The corresponding lookup=
in Oidcc.Plug.AuthorizationCallback correctly uses the lowercase key and i=
s not affected. This issue affects oidcc_plug: from 0.1.0-alpha.3 before 0.= 5.0.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66883" target=3D= "_blank" rel=3D"noopener">CVE-2026-66883</a></td>
</tr>

<td class=3D"vendor-product">Erlang Ecosystem Foundation--oidcc_plug</td> <td>Cross-Site Request Forgery vulnerability in Erlang Ecosystem Foundation=
oidcc_plug (Oidcc.Plug.AuthorizationCallback module) allows an attacker to=
make a victim's browser complete an authorization flow the victim never in= itiated. This vulnerability is associated with program file lib/oidcc/plug/= authorization_callback.ex and program routine Oidcc.Plug.AuthorizationCallb= ack.call/2. A callback request that carries no Oidcc.Plug.Authorize session=
is processed with every security check disabled rather than being rejected=
. call/2 substitutes permissive defaults for the absent session, and each d= ownstream check treats its value as nothing to compare and returns :ok, so = the nonce, state, PKCE, peer IP and user agent checks are all skipped. A se= parate clause of check_state/2 also accepts a state-less request when a ver= ifier is present. An attacker obtains an authorization code for their own p= rovider account, then induces the victim to visit the callback endpoint wit=
h that code and no state parameter. The application signs the victim in as = the attacker, so the victim's subsequent actions occur in the attacker's ac= count where the attacker can read them. Applications reusing one callback f=
or both signing in and linking a provider account are further exposed to ac= count takeover, the attacker's account becoming linked to the victim's. The=
permissive fallback serves no conforming flow. Third-party-initiated login=
reaches a relying party at a separate login initiation endpoint and causes=
it to send a fresh authentication request, and this library implements no = such endpoint. Oidcc.Plug.Authorize always sends a state parameter, which a=
n authorization server must echo, so no legitimate callback lacks one. This=
issue affects oidcc_plug: from 0.2.0-beta.1 before 0.5.0.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66884" target=3D= "_blank" rel=3D"noopener">CVE-2026-66884</a></td>
</tr>

<td class=3D"vendor-product">Estatik Real Estate Plugin--Estatik Real Estat=
e Plugin</td>
<td>The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not p= roperly enforce its anti-spam check or restrict the recipient routing of it=
s property request form, allowing unauthenticated users to send emails to a= rbitrary recipients with arbitrary subject, body and Reply-To, effectively = using the site as a mail relay for spam or phishing.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14547" target=3D= "_blank" rel=3D"noopener">CVE-2026-14547</a></td>
</tr>

<td class=3D"vendor-product">Estatik Real Estate Plugin--Estatik Real Estat=
e Plugin</td>
<td>The Estatik Real Estate Plugin WordPress plugin before 4.3.3 does not b= ind its OAuth social login flow to the initiating user session, allowing an=
unauthenticated attacker to log a victim into an attacker-controlled accou=
nt (login CSRF), so that the victim's subsequent activity is stored under a=
nd readable by the attacker.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16262" target=3D= "_blank" rel=3D"noopener">CVE-2026-16262</a></td>
</tr>

<td class=3D"vendor-product">Events Manager--Events Manager</td>
<td>The Events Manager WordPress plugin before 7.4 does not perform any aut= horization check on a REST route that serves temporarily stored file upload=
s, allowing unauthenticated users to retrieve another user's in-progress up= load when its temporary identifier is known. The identifier is high-entropy=
, is disclosed only to the uploader, and the file is removed on submission =
or by a scheduled cleanup, so a cross-user read is not achievable by guessi=
ng alone.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18050" target=3D= "_blank" rel=3D"noopener">CVE-2026-18050</a></td>
</tr>

<td class=3D"vendor-product">Fastadmin--Fastadmin v1.6.1.20250430</td>

<td>SQL injection vulnerability in Fastadmin v.1.6.1.20250430 allows an att= acker to exectue arbitrary code via the application/common/controller/Backe= nd.php component</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-51775" target=3D= "_blank" rel=3D"noopener">CVE-2026-51775</a></td>
</tr>

<td class=3D"vendor-product">FasterXML--jackson-core</td>
<td>The non-blocking (asynchronous) JSON parser in jackson-core does not en= force the maxNumberLength constraint defined in StreamReadConstraints (defa= ult: 1000 characters). An attacker able to submit JSON to an application th=
at uses the async parser API can supply a number token of arbitrary length,=
leading to excessive memory allocation and potential CPU exhaustion, resul= ting in a denial of service. The synchronous parser enforces this limit cor= rectly, so the constraint is applied inconsistently depending on which pars= ing API the application uses. Root cause: the async parsing path in NonBloc= kingUtf8JsonParserBase and related classes never invokes the number length = validation methods. Number parsing methods such as _finishNumberIntegralPar= t() accumulate digits into the TextBuffer without any length check, then ca=
ll _valueComplete() to finalize the token. _valueComplete() does not call r= esetInt() or resetFloat(), which are the methods in ParserBase where valida= teIntegerLength() and validateFPLength() are performed. Because that valida= tion step is skipped, maxNumberLength is never enforced on the async code p= ath. Impact: an attacker sending a JSON document containing an arbitrarily = long number to an application using the async parser (for example a Spring = WebFlux or other reactive application) can cause unbounded allocation in th=
e TextBuffer and an OutOfMemoryError. If the application subsequently calls=
getBigIntegerValue() or getDecimalValue(), the JVM may additionally be tie=
d up in O(n^2) BigInteger parsing, causing CPU-based denial of service. No = privileges or user interaction beyond the ability to submit data for parsin=
g are required. This issue affects com.fasterxml.jackson.core:jackson-core = from version 2.15.0 through 2.18.5 and from 2.19.0 through 2.21.0, and tool= s.jackson.core:jackson-core from 3.0.0 through 3.0.x. Versions prior to 2.1= 5.0 are not affected, because StreamReadConstraints -- which defines the ma= xNumberLength setting -- was first introduced in jackson-core 2.15.0, so no=
such constraint exists to be bypassed in earlier releases. Note that GHSA-= 72hv-8253-57qq records the lower bound of the affected 2.x range as 2.0.0.<=

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18401" target=3D= "_blank" rel=3D"noopener">CVE-2026-18401</a></td>
</tr>

<td class=3D"vendor-product">FasterXML--jackson-core</td>
<td>The fix released in jackson-core 2.18.6 and 2.21.1 for CVE-2026-18401 (= GHSA-72hv-8253-57qq, number length constraint bypass in the non-blocking pa= rser) is incomplete. This record covers the remaining bypass. The earlier f=
ix wired validateIntegerLength() into a new _setIntLength() helper and invo= ked it wherever the integer portion of a number is decided: a terminator by=
te arrives, a '.' or 'e'/'E' is seen, or input ends inside a fully buffered=
value. It was not invoked on the attacker-relevant path where the parser r= uns out of input while still inside the MINOR_NUMBER_INTEGER_DIGITS minor s= tate and returns NOT_AVAILABLE to the caller. As a result, an attacker who = streams JSON to a non-blocking parser in many small chunks, without ever se= nding a terminator byte, keeps the parser inside MINOR_NUMBER_INTEGER_DIGIT=
S indefinitely. _textBuffer.expandCurrentSegment() grows the accumulator on=
every chunk while validateIntegerLength() is never called. The accumulator=
is bounded only by maxStringLength (20 MiB by default) rather than by maxN= umberLength (1000 by default), an amplification of roughly 20,000x over the=
documented limit. Because Java char values occupy two bytes, a single conn= ection can be driven to approximately 40 MiB of heap before the validator f= inally fires when the value completes. The equivalent fraction-path code is=
correct: _finishFloatFraction() calls _setFractLength() before its NOT_AVA= ILABLE return. The missing call affects the integer-digit paths in _startPo= sitiveNumber(), _startNegativeNumber() and _finishNumberIntegralPart() in N= onBlockingUtf8JsonParserBase. Impact: reactive frameworks such as Spring We= bFlux/Reactor, Quarkus, Helidon and Vert.x feed inbound HTTP or gRPC bytes =
to the async parser as they arrive, which is precisely the chunked-feed sha=
pe required. Operators who set StreamReadConstraints.maxNumberLength expect= ing it to cap memory per number value do not get that guarantee; memory acc= umulates per concurrent connection and attacker-controlled concurrency can = exhaust the JVM heap. The synchronous parsers (UTF8StreamJsonParser, Reader= BasedJsonParser) and the async parser operating on complete input are not a= ffected. Exploitation requires only the ability to stream data to a parsing=
endpoint; no privileges or user interaction are needed. This issue affects=
com.fasterxml.jackson.core:jackson-core from version 2.15.0 through 2.18.7=
, and from 2.19.0 through 2.21.3, and tools.jackson.core:jackson-core from = 3.0.0 through 3.1.3. Versions prior to 2.15.0 are not affected, because Str= eamReadConstraints -- which defines the maxNumberLength setting -- was firs=
t introduced in jackson-core 2.15.0, so no such constraint exists to be byp= assed in earlier releases. Note that GHSA-r7wm-3cxj-wff9 states the affecte=
d 2.x range without a lower bound. The 2.22.x and 3.2.x release lines are n=
ot affected: those branches were created after the fix commit landed on 202= 6-05-21 and therefore contain it from their initial releases (2.22.0, tagge=
d 2026-06-03, and 3.2.0, tagged 2026-06-08).</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68494" target=3D= "_blank" rel=3D"noopener">CVE-2026-68494</a></td>
</tr>

<td class=3D"vendor-product">fedify-dev--fedify</td>
<td>Fedify is a TypeScript library for building federated server apps power=
ed by ActivityPub. From version 1.2.0 through the affected 1.9, 1.10, 2.0, = 2.1, 2.2, and 2.3 maintenance lines, getNodeInfo() follows an attacker-cont= rolled links[].href value from /.well-known/nodeinfo without scheme, redire= ct, or private-address validation, allowing requests to loopback, link-loca=
l, cloud metadata, and private-network services and returning their respons=
e bodies. This issue is fixed in versions 1.9.13, 1.10.12, 2.0.22, 2.1.18, = 2.2.7, and 2.3.2.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62857" target=3D= "_blank" rel=3D"noopener">CVE-2026-62857</a></td>
</tr>

<td class=3D"vendor-product">FineAdmin--FineAdmin V1.0</td>
<td>SQL Injection vulnerability in FineAdmin V1.0 allows a remote attacker =
to execute arbitrary code via the `field` and `order` parameters in paginat=
ed list endpoints</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67689" target=3D= "_blank" rel=3D"noopener">CVE-2026-67689</a></td>
</tr>

<td class=3D"vendor-product">flowintel--flowintel</td>
<td>FlowIntel is affected by a stored cross-site scripting vulnerability th= rough multiple user-controlled or administrator-controlled fields. Persiste=
d values-including case titles, ticket identifiers, recurring-case informat= ion, user profile attributes, organisation names, and role names-were rende= red inside DOM elements subsequently compiled by Vue. Although normal HTML = escaping could neutralize direct HTML markup, it did not prevent an attacke=
r from injecting Vue interpolation expressions using the configured [[ ... =
]] delimiters. An authenticated attacker able to modify one of the affected=
fields could store a malicious Vue expression. When another user viewed an=
affected case, report, profile, recurring-case page, or navigation compone= nt, Vue could evaluate the injected expression in the context of the FlowIn= tel application. Successful exploitation could allow arbitrary JavaScript e= xecution in the victim's browser under the FlowIntel origin. This could exp= ose information available to the victim, perform actions using the victim's=
authenticated session, or modify application data within the victim's priv= ileges. The patch introduces a dedicated vue_escape filter that escapes HTM= L-sensitive characters and breaks Vue interpolation delimiters before the v= alues are rendered. The filter is applied to the affected case, account, or= ganisation, role, configuration, and navigation fields.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69075" target=3D= "_blank" rel=3D"noopener">CVE-2026-69075</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the OAuth2 token refresh endpoint POS=
T /api/v1/oauth2-credential/refresh/:credentialId is unauthenticated by des= ign and performs a server-side HTTP request to the credential-controlled ac= cessTokenUrl without SSRF protections. Runtime validation confirmed that th=
e endpoint was reachable without authentication, triggered outbound POST re= quests to an attacker-controlled server, reflected the full remote response=
body to the caller through tokenInfo, and sent client_id, client_secret, g= rant_type=3Drefresh_token, and refresh_token in the request body. This issu=
e is fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69250" target=3D= "_blank" rel=3D"noopener">CVE-2026-69250</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, Flowise record manager and agent memo=
ry nodes allowed users to set arbitrary TypeORM DataSource options through = the additionalConfig input in packages/components/nodes/recordmanager/MySQL= RecordManager/MySQLrecordManager.ts, packages/components/nodes/recordmanage= r/PostgresRecordManager/PostgresRecordManager.ts, packages/components/nodes= /recordmanager/SQLiteRecordManager/SQLiteRecordManager.ts, packages/compone= nts/nodes/memory/AgentMemory/MySQLAgentMemory/MySQLAgentMemory.ts, and pack= ages/components/nodes/memory/AgentMemory/AgentMemory.ts. TypeORM DataSource=
options such as entities, subscribers, and migrations can load local JavaS= cript files, allowing an authenticated user to execute arbitrary code on th=
e server by uploading a JavaScript payload and referencing it from addition= alConfig.entities. This issue is fixed in version 3.1.3.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69251" target=3D= "_blank" rel=3D"noopener">CVE-2026-69251</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the /api/v1/files route was protected=
only by the feat:files feature gate and did not enforce checkPermission on=
GET or DELETE. A low-privileged authenticated API key with unrelated permi= ssions could call GET /api/v1/files to list files under the organization st= orage root and DELETE /api/v1/files?path=3D... to delete files belonging to=
other workspaces in the same organization because getAllFiles and deleteFi=
le used activeOrganizationId and a user-controlled path without restricting=
access by permissions or activeWorkspaceId. This issue is fixed in version=
3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69252" target=3D= "_blank" rel=3D"noopener">CVE-2026-69252</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag-and-drop user interface for building customized large=
language model (LLM) flows. Prior to version 3.1.3, several custom-tool co= mponents - AgentAsTool, ChatflowTool, and ExecuteFlow - ran code in the in-= process =C2=A0vm2=C2=A0 sandbox. To build that code, they inserted a user-c= ontrolled =C2=A0baseURL=C2=A0 value straight into the JavaScript source, fo=
r example =C2=A0const url =3D "${baseURL}/...";=C2=A0. The only check on = =C2=A0baseURL=C2=A0 was =C2=A0isValidURL=C2=A0, but a valid-looking URL can=
still contain characters that break out of a code string. An authenticated=
user could craft a =C2=A0baseURL=C2=A0 that passed this check, closed the = surrounding string, and injected their own JavaScript into the sandboxed sc= ript (code injection, CWE-94). The =C2=A0vm2=C2=A0 sandbox runs in the same=
Node.js process as Flowise and exposes risky dependencies. As a result, th=
e injected code could escape the sandbox and run arbitrary code on the Flow= ise server as the Flowise process user. Exploitation only requires an authe= nticated session. The issue is fixed in version 3.1.3, which passes the URL=
to the sandbox as data instead of inserting it into code and adds stricter=
URL validation.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69253" target=3D= "_blank" rel=3D"noopener">CVE-2026-69253</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, executeJavaScriptCode() accepted call= er-provided nodeVMOptions and merged them over the default NodeVM security = settings in packages/components/src/utils.ts. An authenticated attacker rea= ching packages/server/src/routes/node-custom-functions/index.ts could run a=
custom function that imported flowise-components/dist/src/utils.js, called=
executeJavaScriptCode() again with nodeVMOptions.require.builtin set to al= low all built-in modules, and then required child_process to execute arbitr= ary system commands as root on the Flowise server. This issue is fixed in v= ersion 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69254" target=3D= "_blank" rel=3D"noopener">CVE-2026-69254</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the CSVAgent in packages/components/n= odes/agents/CSVAgent/CSVAgent.ts extracted attacker-controlled CSV data wit=
h file.split(',').pop() and interpolated it directly into executable Python=
as base64_string =3D "${base64String}" before calling Pyodide. The validat= ePythonCodeForDataFrame() denylist only checked later LLM-generated code an=
d did not validate this initial code block. An authenticated attacker could=
inject a closing quote followed by Python code, use Pyodide's js bridge to=
load Node.js child_process, and execute arbitrary operating system command=
s as root in the Flowise container. This issue is fixed in version 3.1.3.</=

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69255" target=3D= "_blank" rel=3D"noopener">CVE-2026-69255</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the CSVAgent node allowed users to pr= ovide Python code that is executed through pyodide; although a denylist blo= cked dangerous Python constructs, pandas.read_pickle() could deserialize a = pickled payload and achieve code execution without matching the denied word=
s. The affected file is flowise-components/nodes/agents/CSVAgent/CSVAgent.t=
s, where user-supplied customReadCSVFunc is evaluated as pd.${customReadCSV= Func}. An authenticated user who can create or modify a chatflow can add a = CSV Agent, place a malicious read_pickle payload in the Additional Paramete= rs, save the chatflow, and trigger /api/v1/prediction/<UUID> to execu=
te commands. This issue is fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69256" target=3D= "_blank" rel=3D"noopener">CVE-2026-69256</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, Flowise's HTTP security module httpSe= curity.ts did not normalize IPv4-mapped IPv6 addresses such as ::ffff:127.0= .0.1 and ::ffff:169.254.169.254 before checking them against the deny list.=
Because ipaddr.js reports these addresses as ipv6 while IPv4 CIDR deny-lis=
t entries are ipv4, isDeniedIP() skipped the IPv4 CIDR checks. An attacker = who controls DNS resolution for a hostname used by the HTTP Node, API Chain=
, Document Loader, MCP tool, or other paths using secureAxiosRequest(), sec= ureFetch(), or checkDenyList() could return a AAAA record for an IPv4-mappe=
d target and cause requests to reach localhost, internal services, or cloud=
metadata endpoints. This issue is fixed in version 3.1.3.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69257" target=3D= "_blank" rel=3D"noopener">CVE-2026-69257</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the unauthenticated POST /api/v1/pred= iction/:id endpoint accepted an overrideConfig object and unconditionally s= pread it into internal flowConfig and flowData objects in packages/server/s= rc/utils/buildChatflow.ts and packages/server/src/utils/index.ts without ch= ecking apiOverrideStatus. This allowed unauthenticated attackers to inject = arbitrary properties into the flow execution context of any public chatflow=
, overwrite values such as chatId, sessionId, and chatHistory, and control = values resolved through $flow.* template variables consumed by flow nodes. = This issue is fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69258" target=3D= "_blank" rel=3D"noopener">CVE-2026-69258</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the SQLite Record Manager node in pac= kages/components/nodes/recordmanager/SQLiteRecordManager/SQLiteRecordManage= r.ts accepted user-controlled additionalConfig and spread it after the inte= nded database setting, allowing additionalConfig.database to overwrite the = SQLite database path. An authenticated attacker using the published Docker = image, which ran as root, could write a SQLite database to paths such as /e= tc/chromium/exploit.conf; by controlling the table name and namespace value=
, the attacker could place shell syntax into the database file and trigger = execution when Puppeteer launched Chromium and sourced /etc/chromium/*.conf=
. This issue is fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69259" target=3D= "_blank" rel=3D"noopener">CVE-2026-69259</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, `DELETE /api/v1/chatflows/:id` author= ized requests with checkAnyPermission('chatflows:delete,agentflows:delete')=
, so possession of either permission was sufficient to reach the delete pat=
h. The delete logic then resolved the target record only by id and workspac= eId and did not validate the target resource type, allowing a caller with o= nly agentflows:delete to delete a CHATFLOW and a caller with only chatflows= :delete to delete an AGENTFLOW in the same workspace. This issue is fixed i=
n version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69262" target=3D= "_blank" rel=3D"noopener">CVE-2026-69262</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the mitigation for CVE-2025-8943 bloc= ked -y and --yes flags on npx, but packages/components/nodes/tools/MCP/core= .ts denied only PATH, LD_LIBRARY_PATH, DYLD_LIBRARY_PATH, and NODE_OPTIONS =
by exact environment-variable name. Because npm reads configuration from np= m_config_* variables, setting npm_config_yes=3Dtrue reproduced --yes behavi=
or without using a blocked flag, causing npx to auto-install and execute th=
e named package when a Custom MCP server launched. This issue is fixed in v= ersion 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69263" target=3D= "_blank" rel=3D"noopener">CVE-2026-69263</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Prior to 3.1.3, Flowise CSVAgent interpolates an attacker-controlled se= gment of the csvFile data URI directly into a Python source-code template t= hat is then executed by Pyodide. Because Pyodide is loaded with the default=
js bridge to globalThis, which on Node.js exposes eval and dynamic import,=
the attacker can break out of the Python string literal, hand a JavaScript=
string to js.eval, dynamically import Node built-in modules such as fs and=
child_process, and execute arbitrary file I/O or OS commands as the Flowis=
e process. The two validator paths around this code, validatePythonCodeForD= ataFrame and validateCustomReadCSVFunction, are never applied to the bootst= rap template. A workspace user with chatflows:create or agentflows/chatflow=
s update permission can plant a CSV Agent node with a crafted csvFile; once=
the chatflow is exposed via POST /api/v1/prediction/:id, any unauthenticat=
ed request triggers host remote code execution. This issue is fixed in vers= ion 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69264" target=3D= "_blank" rel=3D"noopener">CVE-2026-69264</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, Flowise validatePythonCodeForDataFram=
e in packages/components/src/pythonCodeValidator.ts can be bypassed with Un= icode homoglyph identifiers, allowing arbitrary Python execution inside Pyo= dide and full OS command execution on the Flowise host via Pyodide js modul=
e interop. The validator gates pyodide.runPythonAsync in packages/component= s/nodes/agents/CSVAgent/CSVAgent.ts and packages/components/nodes/agents/Ai= rtableAgent/AirtableAgent.ts with an ASCII word-boundary blacklist. JavaScr= ipt regex word boundaries are ASCII-only, while Python 3 NFKC-normalizes id= entifiers at parse time, so homoglyph forms such as __cl=C3=83=C2=B0=C3=82= =C2=9D=C3=82=C2=90=C3=85=C2=A1ss__, __subcl=C3=83=C2=B0=C3=82=C2=9D=C3=82= =C2=90=C3=85=C2=A1sses__, __b=C3=83=C2=B0=C3=82=C2=9D=C3=82=C2=90=C3=85=C2= =A1se__, and __b=C3=83=C2=B0=C3=82=C2=9D=C3=82=C2=90=C3=82=C2=AEiltins__ by= pass the blacklist and are parsed as their ASCII equivalents. This issue is=
fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70470" target=3D= "_blank" rel=3D"noopener">CVE-2026-70470</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag-and-drop user interface for building customized large=
language model (LLM) flows. Prior to 3.1.3, Flowise injects $vars into the=
code execution sandbox without requiring variables:view, bypassing the per= mission-protected Variables API. Variables for the active workspace are fet= ched at packages/components/src/utils.ts and runtime variables are resolved=
from server environment variables, while the official variables route enfo= rces variables:view. A user or API key that is denied variables:view can ca=
ll /api/v1/node-custom-function and receive $vars pre-populated with all va= riables for the workspace, including Variable.name to Variable.value static=
variables and Variable.name to process.env[Variable.name] runtime variable=
s. This can expose secrets such as database passwords, JWT secrets, SMTP pa= sswords, and cloud keys, depending on the workspace Variables configuration=
. This issue is fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70471" target=3D= "_blank" rel=3D"noopener">CVE-2026-70471</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, Flowise openai-assistants-vector-stor=
e endpoints accept a client-controlled credential parameter and load creden= tials by id without checking whether that credential belongs to the caller = workspace. Route permissions assistants:* only check feature access. The co= ntroller passes req.query.credential straight to the service, and the servi=
ce uses findOneBy({ id: credentialId }), decrypts the credential, and calls=
OpenAI APIs without a workspaceId check. If an attacker knows another work= space credentialId, the attacker can use that workspace OpenAI key, read, m= odify, or delete victim vector stores and files, cause billing impact on th=
e victim OpenAI account, and violate multi-tenant boundaries. This issue is=
fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70472" target=3D= "_blank" rel=3D"noopener">CVE-2026-70472</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag-and-drop user interface for building customized large=
language model (LLM) flows. Prior to 3.1.3, Flowise GET /api/v1/upsert-his= tory returns the entire server-wide upsert history instead of being scoped =
to the requesting user, tenant, or workspace. The response can exceed 100MB=
and includes sensitive configuration data, including Vector Store settings=
such as Qdrant Server URL and collection name. The observed behavior indic= ates missing or insufficient authorization checks, workspace/project/tenant=
isolation, and pagination or limits, exposing integration parameters and i= nfrastructure details that may enable further targeted attacks. This issue =
is fixed in version 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70473" target=3D= "_blank" rel=3D"noopener">CVE-2026-70473</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag-and-drop user interface for building customized large=
language model (LLM) flows. Prior to 3.1.3, Flowise has three OAuth2 crede= ntial endpoints that look up credentials by id alone with no workspaceId fi= lter. The authorize, callback, and refresh handlers query the Credential ta= ble by id only; callback and refresh are whitelisted from authentication. T= his allows any authenticated user to initiate OAuth2 flows against credenti= als belonging to other workspaces, allows an unauthenticated attacker to fo= rge OAuth2 callbacks to overwrite tokens in any credential, and allows an u= nauthenticated attacker to refresh tokens for any credential. The affected = routes include /api/v1/oauth2-credential/authorize/<VICTIM_CREDENTIAL_UU= ID>, /api/v1/oauth2-credential/callback?code=3DATTACKER_AUTH_CODE&st= ate=3D<VICTIM_CREDENTIAL_UUID>, and /api/v1/oauth2-credential/refresh= /<VICTIM_CREDENTIAL_UUID>. This issue is fixed in version 3.1.3.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70474" target=3D= "_blank" rel=3D"noopener">CVE-2026-70474</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the PUT /api/v1/executions/:id endpoi=
nt in packages/server/src/routes/executions/index.ts lacks the checkAnyPerm= ission() middleware that protects other execution endpoints. Any authentica= ted user, regardless of assigned permissions, can modify execution state, d= ata, and metadata of any execution in their workspace, enabling privilege e= scalation and manipulation of workflow execution results. This issue is fix=
ed in 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70475" target=3D= "_blank" rel=3D"noopener">CVE-2026-70475</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, several organization billing endpoint=
s in packages/server/src/enterprise/routes/organization.route.ts and packag= es/server/src/enterprise/controllers/organization.controller.ts accept atta= cker-controlled Stripe subscriptionId values without verifying that the ide= ntifier belongs to the authenticated user's organization. An authenticated = attacker can perform unauthorized Stripe subscription operations on other t= enants, including changing subscription plans or modifying seat quantities,=
resulting in financial impact and service disruption. This issue is fixed =
in 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70476" target=3D= "_blank" rel=3D"noopener">CVE-2026-70476</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, a prompt injection sent to a chatflow=
using a CSV Agent node can cause the LLM to respond with a malicious Pytho=
n script that bypasses the blocklist validator and executes in an unsandbox=
ed Pyodide environment. The specific flaw exists within the run method of t=
he CSV_Agents class, where untrusted data is used to construct an LLM promp=
t and the resulting pythonCode is validated by validatePythonCodeForDataFra=
me before execution. An attacker can leverage this to execute arbitrary cod=
e in the context of the service account. This issue is fixed in 3.1.3.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70477" target=3D= "_blank" rel=3D"noopener">CVE-2026-70477</a></td>
</tr>

<td class=3D"vendor-product">FlowiseAI--Flowise</td>
<td>Flowise is a drag & drop user interface to build a customized large=
language model flow. Prior to 3.1.3, the POST /api/v1/oauth2-credential/re= fresh/:credentialId endpoint is included in WHITELIST_URLS and requires no = authentication. The endpoint decrypts the stored credential, sends a refres=
h request to the configured OAuth provider with the client secret and refre=
sh token, and returns the refreshed access_token in the response body. An a= ttacker with a credential ID can use the token to access the victim's conne= cted service and can also exhaust refresh-token quota. This issue is fixed =
in 3.1.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70478" target=3D= "_blank" rel=3D"noopener">CVE-2026-70478</a></td>
</tr>

<td class=3D"vendor-product">fprime--framework v4.2.2</td>
<td>The Ref::SignalGen component of fprime framework v4.2.2 does not valida=
te the safety of user-controlled parameters, allowing attackers to cause a = Denial of Service (DoS) via inputting unsafe parameters.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67976" target=3D= "_blank" rel=3D"noopener">CVE-2026-67976</a></td>
</tr>

<td class=3D"vendor-product">fprime--framework v4.2.2</td>
<td>An integer overflow in the Svc::FileDownlink::SendPartial component of = fprime framework v4.2.2 allows attackers to cause a Denial of Service (DoS)=
via a crafted input.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67977" target=3D= "_blank" rel=3D"noopener">CVE-2026-67977</a></td>
</tr>

<td class=3D"vendor-product">Frappe--ERPNext</td>
<td>An Improper Authorization vulnerability exists in ERPNext version <v= 16.25.0 and <15.115.0 due to insufficient access control in the whitelis= ted API method erpnext.crm.doctype.prospect.prospect.get_opportunities. Thi=
s issue affects ERPNext: before 15.115.0, before 16.26.0.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13227" target=3D= "_blank" rel=3D"noopener">CVE-2026-13227</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 16.18.0, the=
Workspace Save API accepts a controlled workspace identifier from any auth= enticated user without enforcing workspace ownership, allowing modification=
of another user's private workspace and persistent script injection. This = issue is fixed in version 16.18.0.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47185" target=3D= "_blank" rel=3D"noopener">CVE-2026-47185</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 15.108.0 and=
16.18.3, temporary magic login link generation can use an attacker-control= led request Host header, allowing a remote attacker to cause emailed login = links to point to an attacker-controlled domain and capture the login token=
when a recipient follows the link. This issue is fixed in versions 15.108.=
0 and 16.18.3.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47194" target=3D= "_blank" rel=3D"noopener">CVE-2026-47194</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 15.110.0 and=
16.20.0, the restore and bulk_restore endpoints do not apply the appropria=
te document permission checks, allowing an authenticated user to restore de= leted documents without the required authorization. This issue is fixed in = versions 15.110.0 and 16.20.0.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47765" target=3D= "_blank" rel=3D"noopener">CVE-2026-47765</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 16.19.0 and = 15.109.0, Data Import does not escape imported column headers before render= ing previews and results, allowing an authenticated importer to persist scr= ipt content that executes when another user views the import interface. Thi=
s issue is fixed in versions 16.19.0 and 15.109.0.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49391" target=3D= "_blank" rel=3D"noopener">CVE-2026-49391</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 16.23.0 and = 15.112.0, Document Follow notification generation does not re-evaluate the = recipient's current document permissions, allowing users whose access was r= evoked or reduced to continue receiving document data by email. This issue =
is fixed in versions 16.23.0 and 15.112.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66000" target=3D= "_blank" rel=3D"noopener">CVE-2026-66000</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 16.20.0 and = 15.112.0, unrestricted access to a Document Follow API (update_follow) is p= ossible for an authenticated user. This issue is fixed in versions 16.20.0 = and 15.112.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66058" target=3D= "_blank" rel=3D"noopener">CVE-2026-66058</a></td>
</tr>

<td class=3D"vendor-product">frappe--frappe</td>
<td>Frappe is a full-stack web application framework. Prior to 16.20.0 and = 15.112.0, a field-level permissions bypass exposes restricted DocType field=
s. This issue is fixed in versions 16.23.0 and 15.112.0.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66059" target=3D= "_blank" rel=3D"noopener">CVE-2026-66059</a></td>
</tr>

<td class=3D"vendor-product">GDPR Cookie Compliance--GDPR Cookie Compliance= </td>
<td>The GDPR Cookie Compliance WordPress plugin before 5.1.0 expires the vi= sitor's cookies from an action that is reachable without authentication and=
performs no request-origin check, allowing an attacker to log any user out=
and delete the site's cookies by luring them to a crafted link.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16613" target=3D= "_blank" rel=3D"noopener">CVE-2026-16613</a></td>
</tr>

<td class=3D"vendor-product">GEO my WP--GEO my WP</td>
<td>The GEO my WP WordPress plugin before 4.5.5.3 does not perform any owne= rship or capability check on two of its logged-in AJAX actions, allowing us= ers with subscriber-level access or above to modify or permanently delete o= ther users' and posts' geolocation records by supplying arbitrary record ID= s.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15260" target=3D= "_blank" rel=3D"noopener">CVE-2026-15260</a></td>
</tr>

<td class=3D"vendor-product">GeoDirectory--GeoDirectory</td>
<td>The GeoDirectory WordPress plugin before 2.8.110 does not sanitise and = escape a place-category setting before outputting it back in an admin page,=
allowing high-privilege users such as editors and above to perform Stored = Cross-Site Scripting attacks even when the unfiltered_html capability is di= sallowed (for example in a multisite setup).</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15677" target=3D= "_blank" rel=3D"noopener">CVE-2025-15677</a></td>
</tr>

<td class=3D"vendor-product">GeoDirectory--GeoDirectory</td>
<td>The GeoDirectory WordPress plugin before 2.8.168 does not restrict a us= er-search handler to users allowed to list users, allowing any authenticate=
d user with Contributor-level access or higher to retrieve the email addres= ses of all registered users, including administrators.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16968" target=3D= "_blank" rel=3D"noopener">CVE-2026-16968</a></td>
</tr>

<td class=3D"vendor-product">GeoDirectory--GeoDirectory</td>
<td>The GeoDirectory WordPress plugin before 2.8.169 does not perform any a= uthorization check when returning map marker data for a single requested li= sting, allowing unauthenticated users to disclose the title and exact geogr= aphic coordinates of non-public (pending or draft) listings.</td>

<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16988" target=3D= "_blank" rel=3D"noopener">CVE-2026-16988</a></td>
</tr>

<td class=3D"vendor-product">getkirby--kirby</td>
<td>Kirby is an open-source content management system. Prior to 4.9.5 and f= rom 5.0.0 through 5.5.1, the REST API error handler can return unsanitized = PHP error messages that expose the full filesystem path of the Kirby instal= lation to unauthenticated API users. This vulnerability affects all Kirby s= ites that have not disabled the REST API with the 'api' =3D> false optio=
n. This issue is fixed in versions 4.9.5 and 5.5.2.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69127" target=3D= "_blank" rel=3D"noopener">CVE-2026-69127</a></td>
</tr>

<td class=3D"vendor-product">GitHub--Enterprise Server</td>
<td>A denial of service vulnerability was identified in GitHub Enterprise S= erver that allowed an unauthenticated attacker to cause excessive CPU consu= mption and exhaust the pool of request-handling worker processes by sending=
a crafted form-encoded HTTP POST request containing deeply nested paramete= rs. Because request parameters were parsed before routing and authenticatio=
n, any POST endpoint could be used to trigger the condition, which could re= nder the instance unresponsive. This vulnerability affected all versions of=
GitHub Enterprise Server prior to 3.21 and was fixed in versions 3.20.3, 3= .19.7, 3.18.10, and 3.17.16.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15996" target=3D= "_blank" rel=3D"noopener">CVE-2026-15996</a></td>
</tr>

<td class=3D"vendor-product">GitHub--Enterprise Server</td>
<td>A path traversal vulnerability was identified in GitHub Enterprise Serv=
er that allowed an unauthenticated attacker to delete arbitrary files and d= irectories on the instance, including the entire user storage directory con= taining Git LFS objects, release assets, attachments, and avatars. The X-Gi= tHub-Request-Id request header was used without sanitization as a filesyste=
m path segment for the upload buffer directory, so a traversal value pointe=
d the buffer at an arbitrary path and the deferred cleanup routine recursiv= ely removed the traversed target. Exploitation required only network reacha= bility to the instance and no authentication, and it worked even when priva=
te mode was enabled. This vulnerability affected all versions of GitHub Ent= erprise Server prior to 3.22 and was fixed in versions 3.21.4, 3.20.6, 3.19= .10, 3.18.13 and 3.17.19. This vulnerability was reported via the GitHub Bu=
g Bounty program.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17556" target=3D= "_blank" rel=3D"noopener">CVE-2026-17556</a></td>
</tr>

<td class=3D"vendor-product">Google Authenticator--Google Authenticator</td=

<td>The Google Authenticator WordPress plugin before 0.56 does not verify a=
CSRF nonce when saving its two-factor setup, allowing attackers to trick a=
logged-in user into overwriting their own 2FA secret with an attacker-cont= rolled value, which enables two-factor authentication and locks the victim = out of their account.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14204" target=3D= "_blank" rel=3D"noopener">CVE-2026-14204</a></td>
</tr>

<td class=3D"vendor-product">Google Cloud--Google SecOps (Chronicle SOAR)</=

<td>Improper Privilege Management in Google SecOps (Chronicle SOAR) version=
s prior to 6.3.85 on Google Cloud Platform allows an authenticated attacker=
to escalate privileges to system-level administrative access using a craft=
ed internal authentication header. This vulnerability was patched with vers= ion 6.3.85, and no customer action is needed.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15587" target=3D= "_blank" rel=3D"noopener">CVE-2026-15587</a></td>
</tr>

<td class=3D"vendor-product">Google--@a2ui/web_core</td>
<td>The openUrl function in @a2ui/web_core passes an agent-controlled URL d= irectly to window.open() without validating the URI scheme. A malicious age=
nt can supply a javascript: URI as the url argument of a Button component's=
functionCall action. When the user clicks the rendered button, arbitrary J= avaScript executes in the victim application's browser origin, constituting=
a stored/reflected XSS with Critical severity. No non-default configuratio=
n is required; the Basic Catalog is enabled by default.</td>

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10032" target=3D= "_blank" rel=3D"noopener">CVE-2026-10032</a></td>
</tr>

<td class=3D"vendor-product">Google--Android</td>
<td>In multiple functions of vpu_ioctl.c, there is a possible use after fre=
e due to a use after free. This could lead to remote escalation of privileg=
e with no additional execution privileges needed. User interaction is not n= eeded for exploitation.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-0163" target=3D"= _blank" rel=3D"noopener">CVE-2026-0163</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in WebGL in Google Chrome on Android prior to 151.0.7922= .109 allowed a remote attacker who had compromised the renderer process to = potentially perform a sandbox escape via a crafted HTML page. (Chromium sec= urity severity: Critical)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19137" target=3D= "_blank" rel=3D"noopener">CVE-2026-19137</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Heap buffer overflow in CrashReporting in Google Chrome prior to 151.0.= 7922.109 allowed a remote attacker who had compromised the renderer process=
to potentially perform a sandbox escape via a crafted HTML page. (Chromium=
security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19138" target=3D= "_blank" rel=3D"noopener">CVE-2026-19138</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Race in CredentialProvider in Google Chrome on Windows prior to 151.0.7= 922.109 allowed a local attacker to perform OS-level privilege escalation v=
ia a malicious file. (Chromium security severity: High)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19139" target=3D= "_blank" rel=3D"noopener">CVE-2026-19139</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in GPU in Google Chrome prior to 151.0.7922.109 allowed =
a remote attacker who had compromised the renderer process to potentially p= erform a sandbox escape via a crafted HTML page. (Chromium security severit=
y: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19140" target=3D= "_blank" rel=3D"noopener">CVE-2026-19140</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Resources in Google Chrome on Android prior to 151.0.= 7922.109 allowed a remote attacker who had compromised the renderer process=
to potentially perform a sandbox escape via a crafted HTML page. (Chromium=
security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19141" target=3D= "_blank" rel=3D"noopener">CVE-2026-19141</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Views in Google Chrome prior to 151.0.7922.109 allowe=
d a remote attacker who convinced a user to engage in specific UI gestures =
to potentially exploit heap corruption via a crafted HTML page. (Chromium s= ecurity severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19142" target=3D= "_blank" rel=3D"noopener">CVE-2026-19142</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Insufficient validation of untrusted input in WebAPKs in Google Chrome =
on Android prior to 151.0.7922.109 allowed a local attacker to potentially = perform a sandbox escape via a malicious file. (Chromium security severity:=
High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19143" target=3D= "_blank" rel=3D"noopener">CVE-2026-19143</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in HTML in Google Chrome prior to 151.0.7922.109 allowed=
a remote attacker to potentially exploit heap corruption via a crafted HTM=
L page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19144" target=3D= "_blank" rel=3D"noopener">CVE-2026-19144</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Translate in Google Chrome prior to 151.0.7922.109 al= lowed a remote attacker to execute arbitrary code inside a sandbox via a cr= afted HTML page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19145" target=3D= "_blank" rel=3D"noopener">CVE-2026-19145</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Uninitialized Use in GPU in Google Chrome on Android prior to 151.0.792= 2.109 allowed a remote attacker who had compromised the renderer process to=
obtain potentially sensitive information from process memory via a crafted=
HTML page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19146" target=3D= "_blank" rel=3D"noopener">CVE-2026-19146</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.10=
9 allowed a remote attacker who had compromised the renderer process to pot= entially perform a sandbox escape via a crafted HTML page. (Chromium securi=
ty severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19147" target=3D= "_blank" rel=3D"noopener">CVE-2026-19147</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Out of bounds write in GPU in Google Chrome on Linux prior to 151.0.792= 2.109 allowed a remote attacker who had compromised the renderer process to=
potentially perform a sandbox escape via a crafted HTML page. (Chromium se= curity severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19148" target=3D= "_blank" rel=3D"noopener">CVE-2026-19148</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Aura in Google Chrome on Linux prior to 151.0.7922.10=
9 allowed a remote attacker to potentially perform a sandbox escape via a c= rafted HTML page. (Chromium security severity: Critical)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19149" target=3D= "_blank" rel=3D"noopener">CVE-2026-19149</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922= .109 allowed a remote attacker to execute arbitrary code inside a sandbox v=
ia a crafted HTML page. (Chromium security severity: High)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19150" target=3D= "_blank" rel=3D"noopener">CVE-2026-19150</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in V8 in Google Chrome prior to 151.0.7922.109 allowed a=
remote attacker to execute arbitrary code inside a sandbox via a crafted H= TML page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19151" target=3D= "_blank" rel=3D"noopener">CVE-2026-19151</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Insufficient policy enforcement in Navigation in Google Chrome prior to=
151.0.7922.109 allowed a remote attacker who had compromised the renderer = process to potentially perform a sandbox escape via a crafted HTML page. (C= hromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19152" target=3D= "_blank" rel=3D"noopener">CVE-2026-19152</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Insufficient validation of untrusted input in Workers in Google Chrome = prior to 151.0.7922.109 allowed a remote attacker who had compromised the r= enderer process to bypass site isolation via a crafted HTML page. (Chromium=
security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19153" target=3D= "_blank" rel=3D"noopener">CVE-2026-19153</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Skia in Google Chrome on Android prior to 151.0.7922.= 109 allowed a remote attacker who had compromised the renderer process to p= otentially perform a sandbox escape via a crafted HTML page. (Chromium secu= rity severity: Critical)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19154" target=3D= "_blank" rel=3D"noopener">CVE-2026-19154</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Payments in Google Chrome prior to 151.0.7922.109 all= owed a remote attacker who had compromised the renderer process to potentia= lly perform a sandbox escape via a crafted HTML page. (Chromium security se= verity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19155" target=3D= "_blank" rel=3D"noopener">CVE-2026-19155</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Heap buffer overflow in Base in Google Chrome prior to 151.0.7922.109 a= llowed an attacker who convinced a user to install a malicious extension to=
potentially exploit heap corruption via a crafted Chrome Extension. (Chrom= ium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19156" target=3D= "_blank" rel=3D"noopener">CVE-2026-19156</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Out of bounds write in ANGLE in Google Chrome on Android prior to 151.0= .7922.109 allowed a remote attacker to potentially perform a sandbox escape=
via a crafted HTML page. (Chromium security severity: Critical)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19157" target=3D= "_blank" rel=3D"noopener">CVE-2026-19157</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Views in Google Chrome on Windows prior to 151.0.7922= .109 allowed a remote attacker who convinced a user to engage in specific U=
I gestures to potentially exploit heap corruption via a crafted HTML page. = (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19158" target=3D= "_blank" rel=3D"noopener">CVE-2026-19158</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Views in Google Chrome prior to 151.0.7922.109 allowe=
d a remote attacker who convinced a user to engage in specific UI gestures =
to potentially exploit heap corruption via a crafted HTML page. (Chromium s= ecurity severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19159" target=3D= "_blank" rel=3D"noopener">CVE-2026-19159</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allo= wed a remote attacker who had compromised the renderer process to leak cros= s-origin data via a crafted HTML page. (Chromium security severity: High)</=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19160" target=3D= "_blank" rel=3D"noopener">CVE-2026-19160</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Uninitialized Use in Skia in Google Chrome prior to 151.0.7922.109 allo= wed a remote attacker who had compromised the renderer process to leak cros= s-origin data via a crafted HTML page. (Chromium security severity: High)</=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19161" target=3D= "_blank" rel=3D"noopener">CVE-2026-19161</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Out of bounds write in V8 in Google Chrome prior to 151.0.7922.109 allo= wed a remote attacker to execute arbitrary code inside a sandbox via a craf= ted HTML page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19162" target=3D= "_blank" rel=3D"noopener">CVE-2026-19162</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Media in Google Chrome on Windows prior to 151.0.7922= .109 allowed a remote attacker who had compromised the renderer process to = potentially perform a sandbox escape via a crafted HTML page. (Chromium sec= urity severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19163" target=3D= "_blank" rel=3D"noopener">CVE-2026-19163</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Insufficient validation of untrusted input in Codecs in Google Chrome p= rior to 151.0.7922.109 allowed a remote attacker to potentially perform a s= andbox escape via a crafted HTML page. (Chromium security severity: High)</=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19164" target=3D= "_blank" rel=3D"noopener">CVE-2026-19164</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Extensions in Google Chrome prior to 151.0.7922.109 a= llowed an attacker who convinced a user to install a malicious extension to=
execute arbitrary code inside a sandbox via a crafted Chrome Extension. (C= hromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19165" target=3D= "_blank" rel=3D"noopener">CVE-2026-19165</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Web Authentication in Google Chrome prior to 151.0.79= 22.109 allowed a remote attacker to potentially perform a sandbox escape vi=
a a crafted HTML page. (Chromium security severity: High)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19166" target=3D= "_blank" rel=3D"noopener">CVE-2026-19166</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Integer overflow in GPU in Google Chrome prior to 151.0.7922.109 allowe=
d a remote attacker who had compromised the renderer process to leak cross-= origin data via a crafted HTML page. (Chromium security severity: High)</td=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19167" target=3D= "_blank" rel=3D"noopener">CVE-2026-19167</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Inappropriate implementation in V8 in Google Chrome prior to 151.0.7922= .109 allowed a remote attacker to execute arbitrary code inside a sandbox v=
ia a crafted HTML page. (Chromium security severity: High)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19168" target=3D= "_blank" rel=3D"noopener">CVE-2026-19168</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Insufficient validation of untrusted input in Contextual Tasks in Googl=
e Chrome prior to 151.0.7922.109 allowed a remote attacker to perform privi= lege escalation via a crafted HTML page. (Chromium security severity: High)= </td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19169" target=3D= "_blank" rel=3D"noopener">CVE-2026-19169</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in WebGL in Google Chrome on Android prior to 151.0.7922= .109 allowed a remote attacker to potentially perform a sandbox escape via =
a crafted HTML page. (Chromium security severity: Critical)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19170" target=3D= "_blank" rel=3D"noopener">CVE-2026-19170</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Media in Google Chrome on Windows prior to 151.0.7922= .109 allowed a remote attacker to potentially perform a sandbox escape via =
a crafted HTML page. (Chromium security severity: High)</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19171" target=3D= "_blank" rel=3D"noopener">CVE-2026-19171</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Views in Google Chrome prior to 151.0.7922.109 allowe=
d a remote attacker who had compromised the renderer process to potentially=
perform a sandbox escape via a crafted HTML page. (Chromium security sever= ity: Critical)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19172" target=3D= "_blank" rel=3D"noopener">CVE-2026-19172</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Out of bounds write in Skia in Google Chrome prior to 151.0.7922.109 al= lowed a remote attacker who had compromised the renderer process to potenti= ally perform a sandbox escape via a crafted HTML page. (Chromium security s= everity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19173" target=3D= "_blank" rel=3D"noopener">CVE-2026-19173</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Integer overflow in V8 in Google Chrome prior to 151.0.7922.109 allowed=
a remote attacker to execute arbitrary code inside a sandbox via a crafted=
HTML page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19174" target=3D= "_blank" rel=3D"noopener">CVE-2026-19174</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Payments in Google Chrome prior to 151.0.7922.109 all= owed a remote attacker to potentially perform a sandbox escape via a crafte=
d HTML page. (Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19175" target=3D= "_blank" rel=3D"noopener">CVE-2026-19175</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Use after free in Skia in Google Chrome prior to 151.0.7922.109 allowed=
a remote attacker who had compromised the renderer process to execute arbi= trary code inside a sandbox via a crafted HTML page. (Chromium security sev= erity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19176" target=3D= "_blank" rel=3D"noopener">CVE-2026-19176</a></td>
</tr>

<td class=3D"vendor-product">Google--Chrome</td>
<td>Insufficient validation of untrusted input in UI in Google Chrome prior=
to 151.0.7922.109 allowed a remote attacker who had compromised the render=
er process to potentially perform a sandbox escape via a crafted HTML page.=
(Chromium security severity: High)</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19177" target=3D= "_blank" rel=3D"noopener">CVE-2026-19177</a></td>
</tr>

<td class=3D"vendor-product">Gutenberg Essential Blocks--Gutenberg Essentia=
l Blocks</td>
<td>The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not r= estrict access to one of its public REST routes and over-fetches a non-publ=
ic WooCommerce per-product sales metric into the response, allowing unauthe= nticated users to read the lifetime number of units sold for any published = product.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13153" target=3D= "_blank" rel=3D"noopener">CVE-2026-13153</a></td>
</tr>

<td class=3D"vendor-product">Gutenberg Essential Blocks--Gutenberg Essentia=
l Blocks</td>
<td>The Gutenberg Essential Blocks WordPress plugin before 6.4.0 does not v= erify that an attacker-supplied post type is publicly viewable before query= ing it in one of its public REST routes, allowing unauthenticated users to = read published entries of custom post types that the site registered as non= -public.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13154" target=3D= "_blank" rel=3D"noopener">CVE-2026-13154</a></td>
</tr>

<td class=3D"vendor-product">H3C--H3C Magic</td>
<td>H3C Magic BE18000 V200R007, H3C NX400 V100R015, H3C Magic NX30 Pro V100= R0011, H3C Magic R3010 V100R009, H3C Magic NX15 V100R017, H3C Magic R1510 V= 100R016, H3C NE36 Pro V100R002 and H3C MC102G HM1A0V200R010 contain multipl=
e command injection vulnerabilities in the /api/esps request handler. The a= ffected object interfaces and methods are esps.dhcpd.vlan (getlist, delete)=
, esps.filter.url (add, modify), esps.apcm.version (delete, H3C Magic NX15 = only), esps.swcm.version (delete, upgrade, all affected models except H3C M= agic NX15), and esps.system.ntp (set, all affected models except H3C Magic = NX15). Attacker-controlled request parameters are incorporated into shell e= xpressions executed by eval without adequate validation, allowing a remote = attacker to execute arbitrary commands as root and gain complete control of=
the affected device.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-29296" target=3D= "_blank" rel=3D"noopener">CVE-2025-29296</a></td>
</tr>

<td class=3D"vendor-product">HP Inc--HP DesignJet T3500</td>
<td>Certain HP DesignJet products may be potentially vulnerable to cross-si=
te scripting (XSS), which may allow unauthenticated HTTP requests to view p= rint job previews.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18243" target=3D= "_blank" rel=3D"noopener">CVE-2026-18243</a></td>
</tr>

<td class=3D"vendor-product">ics-park--ics-park v2.0</td>
<td>Insecure Permissions vulnerability in ics-park v.2.0 allows a remote at= tacker to escalate privileges via the /system/role/save endpoint in RoleCon= troller.java and system/user/update endpoint in UserController.java</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67687" target=3D= "_blank" rel=3D"noopener">CVE-2026-67687</a></td>
</tr>

<td class=3D"vendor-product">ICS-Park--Smart Park Management System V2.0</t=

<td>ICS-Park Smart Park Management System v2.0 contains an unrestricted fil=
e upload vulnerability in the file upload module. This allows a remote atta= cker to execute arbitrary code.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67688" target=3D= "_blank" rel=3D"noopener">CVE-2026-67688</a></td>
</tr>

<td class=3D"vendor-product">Imagination Technologies--Graphics DDK</td>

<td>Kernel software from a non-secure operating system on a platform with T= rusted Execution Environment support, may cause GPU Firmware to boot up usi=
ng data from non-secure memory. The GPU thread of control (Firmware) uses a=
pointer from non-secure memory belonging to the Rich Execution Environment=
(REE) when saving or retrieving internal data between the tightly coupled = private memory to main memory. An attacker with control over the REE kernel=
may modify the pointer value, corrupting the data used by the GPU Firmware= .</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45198" target=3D= "_blank" rel=3D"noopener">CVE-2026-45198</a></td>
</tr>

<td class=3D"vendor-product">Imagination Technologies--Graphics DDK</td>

<td>Software installed and run as a non-privileged user may conduct imprope=
r GPU system calls to trigger OOB access and kernel null pointer dereferenc=
e in an error path. Null pointer dereference occurs in an error path of a f= unction running in kernel thread of execution leading to kernel exceptions,=
platform instability and denial of service.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45204" target=3D= "_blank" rel=3D"noopener">CVE-2026-45204</a></td>
</tr>

<td class=3D"vendor-product">Imagination Technologies--Graphics DDK</td>

<td>Software installed and run as a non-privileged user may conduct imprope=
r GPU system calls to cause OOB read kernel memory access and in certain ca= ses cause GPU UAF of arbitrary pages. Incorrect validation of array index c=
an lead to OOB read and potentially to GPU UAF of arbitrary pages.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-49746" target=3D= "_blank" rel=3D"noopener">CVE-2026-49746</a></td>
</tr>

<td class=3D"vendor-product">Import and export users and customers--Import = and export users and customers</td>
<td>The Import and export users and customers WordPress plugin before 2.4.3=
does not restrict the path of a file it reads and displays during a CSV im= port, allowing high-privileged users to read arbitrary files on the server.= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15673" target=3D= "_blank" rel=3D"noopener">CVE-2025-15673</a></td>
</tr>

<td class=3D"vendor-product">Import and export users and customers--Import = and export users and customers</td>
<td>The Import and export users and customers WordPress plugin before 2.4.2=
does not enforce WordPress's role-assignment and per-user edit permissions=
during CSV import, allowing a user holding only the user-creation capabili=
ty to create an administrator account and to overwrite an existing administ= rator's password or email.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16534" target=3D= "_blank" rel=3D"noopener">CVE-2026-16534</a></td>
</tr>

<td class=3D"vendor-product">Improve SEO--Improve SEO</td>
<td>The Improve SEO WordPress plugin through 2.0.11 does not properly valid= ate uploaded files, checking only the file content type while writing the f= ile with the attacker-supplied extension into a publicly accessible directo= ry, allowing unauthenticated users to upload executable PHP files and achie=
ve remote code execution.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16618" target=3D= "_blank" rel=3D"noopener">CVE-2026-16618</a></td>
</tr>

<td class=3D"vendor-product">InfiniteWP Client--InfiniteWP Client</td>

<td>The InfiniteWP Client WordPress plugin before 1.13.6 does not properly = verify the site-connection state and the authenticity of requests to its re= mote-management endpoint on WordPress Multisite installations, allowing una= uthenticated attackers to bind their own key, hijack an administrator sessi= on, and take over the entire network, leading to remote code execution.</td=

<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15038" target=3D= "_blank" rel=3D"noopener">CVE-2026-15038</a></td>
</tr>

<td class=3D"vendor-product">Insert or Embed Articulate Content into WordPr= ess--Insert or Embed Articulate Content into WordPress</td>
<td>The Insert or Embed Articulate Content into WordPress plugin through 4.= 3000000027 does not correctly validate the contents of an uploaded archive,=
relying on a bypassable check that lets an Editor-level user upload a serv= er-executable file into a public directory, resulting in remote code execut= ion on servers configured to execute it.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16060" target=3D= "_blank" rel=3D"noopener">CVE-2026-16060</a></td>
</tr>

<td class=3D"vendor-product">Integrated Systems Technologies, Inc.--NetKids=
iMark</td>
<td>NetKids iMark, provided by Integrated Systems Technologies, Inc., conta= ins an Uncontrolled Search Path Element vulnerability (CWE-427). An authent= icated attacker may exploit this vulnerability to execute arbitrary code wi=
th SYSTEM privileges.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66344" target=3D= "_blank" rel=3D"noopener">CVE-2026-66344</a></td>
</tr>

<td class=3D"vendor-product">Integrated Systems Technologies, Inc.--NetKids=
iMark</td>
<td>NetKids iMark, provided by Integrated Systems Technologies, Inc., conta= ins an Unquoted Search Path or Element vulnerability (CWE-428). An authenti= cated attacker may exploit this vulnerability to execute arbitrary code wit=
h SYSTEM privileges.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66839" target=3D= "_blank" rel=3D"noopener">CVE-2026-66839</a></td>
</tr>

<td class=3D"vendor-product">Iptanus File Upload--Iptanus File Upload</td> <td>The Iptanus File Upload WordPress plugin before 5.1.8 does not properly=
sanitise and escape a parameter before using it in a SQL statement, leadin=
g to an SQL injection exploitable by unauthenticated users.</td> <td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17044" target=3D= "_blank" rel=3D"noopener">CVE-2026-17044</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins</td>
<td>In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992= 987, included in Jenkins 2.575 and earlier, LTS 2.568.1 and earlier, the JE= P-200 class filter is not applied to classes resolved via a fallback path i=
n the Remoting deserialization implementation, allowing agent processes, co=
de running on agents, and attackers with Agent/Connect permission to bypass=
the JEP-200 deserialization filter for classes on the Jenkins core classpa= th.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70426" target=3D= "_blank" rel=3D"noopener">CVE-2026-70426</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins</td>
<td>Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely hand=
le symbolic links with effectively empty names during the extraction of `.t= ar` and `.tar.gz` archives, allowing attackers able to control agent proces= ses to provide crafted archives to the controller to write files to arbitra=
ry locations on the file system, restricted only by file system access perm= issions of the user running Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70427" target=3D= "_blank" rel=3D"noopener">CVE-2026-70427</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins</td>
<td>Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifie=
s file paths attempting path traversal in file parameter names, allowing at= tackers with Item/Configure and Item/Build permission to write files to arb= itrary locations on the controller file system.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70428" target=3D= "_blank" rel=3D"noopener">CVE-2026-70428</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins</td>
<td>Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensi= tivity in user names and group names inconsistently, allowing attackers abl=
e to create new users or groups with names that case-insensitively match ot= her characters to impersonate other users or be granted their permissions i=
n some circumstances.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70429" target=3D= "_blank" rel=3D"noopener">CVE-2026-70429</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins</td>
<td>Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict th=
e types of objects that can be instantiated as part of the project naming s= trategy configuration, allowing attackers with Overall/Manage permission to=
instantiate arbitrary types related to configuration, including those inte= nded for configuration only by administrators.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70430" target=3D= "_blank" rel=3D"noopener">CVE-2026-70430</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins AWS CodeBuild Plugin<=

<td>Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earl= ier allow attackers with Overall/Read permission to enumerate credentials I=
Ds of credentials stored in Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70447" target=3D= "_blank" rel=3D"noopener">CVE-2026-70447</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins CodeSonar Plugin</td> <td>Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier=
allow attackers with Overall/Read permission to enumerate credentials IDs =
of credentials stored in Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70446" target=3D= "_blank" rel=3D"noopener">CVE-2026-70446</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins External Workspace Ma= nager Plugin</td>
<td>Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not pe= rform a permission check (1.4.0 and earlier) or performs an improper permis= sion check (1.4.1) when providing access to externally-managed workspaces t= hrough the workspace browser, allowing attackers with Overall/Read permissi=
on to read files in workspaces they are not authorized to access.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70436" target=3D= "_blank" rel=3D"noopener">CVE-2026-70436</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Google Chat Notificat= ion Plugin</td>
<td>Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier = does not set the appropriate context for credentials lookup, allowing attac= kers with Item/Configure permission to access and capture credentials they = are not entitled to use.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70442" target=3D= "_blank" rel=3D"noopener">CVE-2026-70442</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins HCL AppScan Plugin</t=

<td>Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earli=
er allow attackers with Overall/Read permission to enumerate credentials ID=
s of credentials stored in Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70433" target=3D= "_blank" rel=3D"noopener">CVE-2026-70433</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Horreum Plugin</td> <td>Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not = set the appropriate context for credentials lookup, allowing attackers with=
Item/Configure permission to have Jenkins send credentials they are not en= titled to use to the administrator-configured Horreum URL.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70443" target=3D= "_blank" rel=3D"noopener">CVE-2026-70443</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Ivy Report Plugin</td=

<td>Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML pa= rser to prevent XML external entity (XXE) attacks when processing Ivy repor=
t files.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70448" target=3D= "_blank" rel=3D"noopener">CVE-2026-70448</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Multijob Plugin</td> <td>Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy=
scripting features that do not integrate with Script Security Plugin, allo= wing attackers with Item/Create or Item/Configure permission to execute arb= itrary code in the context of the Jenkins controller JVM.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70431" target=3D= "_blank" rel=3D"noopener">CVE-2026-70431</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Multijob Plugin</td> <td>A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob P= lugin 669.v9d96a_d9c71b_0 and earlier allows attackers to execute arbitrary=
code in the context of the Jenkins controller JVM.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70432" target=3D= "_blank" rel=3D"noopener">CVE-2026-70432</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Parameterized Remote = Trigger Plugin</td>
<td>A missing permission check in Jenkins Parameterized Remote Trigger Plug=
in 3.2.2 and earlier allows attackers with Overall/Read permission to enume= rate credentials IDs of credentials stored in Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70438" target=3D= "_blank" rel=3D"noopener">CVE-2026-70438</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Qualys Container Scan= ning Connector Plugin</td>
<td>Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier = does not escape user-controlled field values in a JavaScript context, resul= ting in a stored cross-site scripting (XSS) vulnerability exploitable by at= tackers with Item/Configure permission.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70440" target=3D= "_blank" rel=3D"noopener">CVE-2026-70440</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Sauce OnDemand Plugin= </td>
<td>Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and ea= rlier allow attackers with Overall/Read permission to enumerate credentials=
IDs of credentials stored in Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70445" target=3D= "_blank" rel=3D"noopener">CVE-2026-70445</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins SCM-Manager Plugin</t=

<td>A cross-site request forgery (CSRF) vulnerability in Jenkins SCM-Manage=
r Plugin 1.11.1 and earlier allows attackers to connect to an attacker-spec= ified URL using attacker-specified credentials IDs obtained through another=
method, capturing credentials stored in Jenkins.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70434" target=3D= "_blank" rel=3D"noopener">CVE-2026-70434</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins SCM-Manager Plugin</t=

<td>A missing permission check in Jenkins SCM-Manager Plugin 1.11.1 and ear= lier allows attackers with Overall/Read permission to connect to an attacke= r-specified URL using attacker-specified credentials IDs obtained through a= nother method, capturing credentials stored in Jenkins.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70435" target=3D= "_blank" rel=3D"noopener">CVE-2026-70435</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Summary Display Plugi= n</td>
<td>Jenkins Summary Display Plugin 1.15 and earlier does not escape the job=
name in a JavaScript context in build report pages, resulting in a stored = cross-site scripting (XSS) vulnerability exploitable by attackers with Item= /Create or Item/Configure permission.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70441" target=3D= "_blank" rel=3D"noopener">CVE-2026-70441</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Violation Comments to=
GitLab Plugin</td>
<td>A missing permission check in Jenkins Violation Comments to GitLab Plug=
in 2.62.0 and earlier allows attackers with Overall/Read permission to enum= erate credentials IDs of credentials stored in Jenkins.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70444" target=3D= "_blank" rel=3D"noopener">CVE-2026-70444</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins Webhook Secret Creden= tials Provider Plugin</td>
<td>Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 an=
d earlier does not use a constant-time comparison function when checking wh= ether the provided and expected webhook bearer token are equal, potentially=
allowing attackers to use statistical methods to obtain a valid webhook be= arer token.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70437" target=3D= "_blank" rel=3D"noopener">CVE-2026-70437</a></td>
</tr>

<td class=3D"vendor-product">Jenkins Project--Jenkins XML Job to Job DSL Pl= ugin</td>
<td>Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform p= ermission checks, allowing attackers lacking appropriate permissions to inv= oke the conversion functionality.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-70439" target=3D= "_blank" rel=3D"noopener">CVE-2026-70439</a></td>
</tr>

<td class=3D"vendor-product">JONASBN--Crypt::OpenSSL::PKCS12</td> <td>Crypt::OpenSSL::PKCS12 versions before 1.98 for Perl allow a NULL point=
er dereference in print_attribute via a zero length BMPSTRING attribute. pr= int_attribute() sizes the destination buffer for a BMPSTRING attribute from=
its declared byte length with `Renew(*attribute, length, char)`. A zero le= ngth attribute makes that a zero size reallocation, which Perl implements a=
s a free returning NULL, so the buffer pointer becomes NULL, the following = `strncpy` copies nothing, and the caller dereferences NULL in the `strlen()=
` it passes to `newSVpvn()`. A zero length BMPSTRING is even length, so the=
ASN.1 decoder accepts it and the value reaches this code. The UTF8STRING, = OCTET STRING and BIT STRING arms size on `length + 1` or `length * 4 + 1` a=
nd are unaffected. Any caller that passes an untrusted PKCS#12 file to info= _as_hash() can crash the process. info() prints attribute values directly w= ithout sizing a buffer and is unaffected.</td>

<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17510" target=3D= "_blank" rel=3D"noopener">CVE-2026-17510</a></td>
</tr>

<td class=3D"vendor-product">joomshaper.com--SP Page Builder extension for = Joomla</td>
<td>Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shape=
s API endpoint SP Page Builder < 6.7.0 - An unauthenticated attacker can=
store malicious JavaScript in a Joomla site's database via a single HTTP r= equest. When an administrator opens the SP Page Builder editor, the JavaScr= ipt executes in their browser automatically..</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66494" target=3D= "_blank" rel=3D"noopener">CVE-2026-66494</a></td>
</tr>

<td class=3D"vendor-product">jpillora--chisel</td>
<td>Chisel is a TCP/UDP tunnel, transported over HTTP and secured via SSH. =
In versions prior to 1.11.5, authenticated clients can bypass --authfile AC=
L restrictions and tunnel traffic to arbitrary destinations reachable from = the server. The ACL is enforced only during the initial handshake against d= eclared remotes, but never on subsequent SSH channels that carry actual tra= ffic. A malicious client can authenticate with a permitted remote, then ope=
n channels to any host:port it wants. This issue has been fixed in version = 1.11.5.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48113" target=3D= "_blank" rel=3D"noopener">CVE-2026-48113</a></td>
</tr>

<td class=3D"vendor-product">kata-containers--kata-containers</td>
<td>Kata Containers is an open source project focusing on a standard implem= entation of lightweight Virtual Machines (VMs) that perform like containers=
. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable t=
o a guest-root to host-root escape. In this configuration, Kata runs the ho=
st virtiofsd as root with --sandbox none --seccomp none, so an attacker wit=
h root-equivalent access inside the guest can bypass the guest virtio-fs cl= ient entirely by taking over the virtio-fs PCI device and building a virtqu= eue in userspace to submit raw FUSE requests directly to the host virtiofsd=
. A crafted FUSE_SYMLINK request whose new symlink name is an absolute host=
path is honored outside the configured shared directory, allowing guest ro=
ot to create root-owned symlinks in sensitive host locations such as /etc/c= ron.d. By pointing such a symlink at a guest-controlled crontab payload rea= chable through a live runtime process's mount namespace, the attacker cause=
s the host cron daemon to execute that payload as host root, crossing the K= ata isolation boundary. This issue is fixed in version 3.31.0.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47243" target=3D= "_blank" rel=3D"noopener">CVE-2026-47243</a></td>
</tr>

<td class=3D"vendor-product">klever-io--klever-go</td>
<td>Klever-Go is the Go implementation of the Klever blockchain protocol. P= rior to 1.7.20, header signature verification counts the unused padding bit=
s of the PubKeysBitmap toward the two-thirds validator quorum. These paddin=
g bits do not correspond to any validator and are ignored by the actual BLS=
aggregate-signature check, so a malicious or compromised block producer ca=
n set them to reach the required quorum while gathering fewer genuine valid= ator signatures than the protocol demands. As a result, nodes that import o=
r intercept the header accept it as correctly signed without a real two-thi= rds quorum, weakening consensus safety and undermining finality. This issue=
is fixed in version 1.7.20.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58262" target=3D= "_blank" rel=3D"noopener">CVE-2026-58262</a></td>
</tr>

<td class=3D"vendor-product">Kong--Kong Event Gateway</td>
<td>Kong Event Gateway versions 1.0.0 through 1.1.1 and 1.2.0 do not enforc=
e key rotation before reaching NIST SP 800-38D recommended usage limit for = AES-GCM encryption keys with random nonces when the AWS IAM encryption feat= ure is enabled. If a producer sends messages at a sustained high rate witho=
ut key rotation, which only occurs on reboot of the Kong Event Gateway inst= ance, the probability of a nonce collision becomes non-negligible. An autho= rized consumer who detects a nonce collision can recover parts of plaintext=
from the affected messages. New versions 1.1.2 and 1.2.1 enforce automatic=
key rotation before the recommended usage limit is reached.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17578" target=3D= "_blank" rel=3D"noopener">CVE-2026-17578</a></td>
</tr>

<td class=3D"vendor-product">Latvijas Valsts radio un televzijas centrs (LV= RTC)--eParaksttjs 3.0</td> <td>eParakst=C3=83=E2=80=9E=C3=82=C2=ABt=C3=83=E2=80=9E=C3=82=C2=81js 3.0 f=
or Windows before version 1.10.0 retrieves and executes its automatic updat=
es over a channel that is not authenticated or integrity-protected. On each=
launch the application fetches an update descriptor (XML) over TLS but acc= epts any TLS certificate (a permissive TrustManager and a HostnameVerifier = that always returns true), does not verify any digital signature on the upd= ate descriptor, and does not verify the Authenticode signature or a checksu=
m of the downloaded installer before running it. A man-in-the-middle attack=
er able to redirect www.eparaksts.lv can serve a crafted update descriptor = pointing to an attacker-controlled executable, which the client downloads a=
nd executes, resulting in arbitrary code execution on the victim host.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-0392" target=3D"= _blank" rel=3D"noopener">CVE-2026-0392</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-FJA</td> <td>In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0.2.7 (1.0.X s= eries), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series), sensitive key materi=
al held by the AES and DESede engines, the SP 800-90A DRBGs, SymmetricSecre= tKey and the PBKD and scrypt parameter classes was zeroised on garbage coll= ection by overriding Object.finalize. Finalization runs at an unspecified t= ime and in an unspecified order and is serviced by a single finalizer threa=
d, so where objects carrying a finalizer are allocated faster than that thr= ead retires them the pending-finalization queue grows without bound: dispos=
al falls arbitrarily far behind, which can contribute to an OutOfMemoryErro=
r under load, and the key material those objects hold stays resident in the=
heap for as long as they are queued, defeating the purpose of the zeroisat= ion. The behaviour was not a problem on Java 8 or Java 11; it is later JVMs=
, on which finalization has been deprecated and progressively de-emphasised=
, where it becomes one. Disposal of these classes now runs from a java.lang= .ref.Cleaner registered in the multi-release jdk1.9 overlay, so on Java 9 a=
nd later it no longer depends on the finalizer being scheduled. Bouncy Cast=
le for Java (bcprov) and Bouncy Castle for Java LTS are not affected, as ne= ither implements the finalizer-based zeroisation scheme.</td> <td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13505" target=3D= "_blank" rel=3D"noopener">CVE-2026-13505</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-FJA</td> <td>In Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 2.1.3, the nativ=
e entropy source used on Intel platforms retried the CPU entropy instructio=
ns without any bound. RDSEED and RDRAND report failure through their carry = flag, and the JNI seeding routine spun re-issuing the instruction for as lo=
ng as that flag stayed clear, so a persistent failure of the on-chip entrop=
y source - whether from a hardware fault, from the underlying DRBG being ex= hausted by contention across many cores, or from a hypervisor that does not=
provide the instruction - left the calling thread looping indefinitely ins= ide the JNI call, where it could be neither interrupted nor timed out. Any = operation drawing from the native entropy source could therefore hang, deny= ing service to the application. The retry loops are now bounded (200 attemp=
ts for RDSEED and 20 for RDRAND, twice the baselines given in Intel's Digit=
al Random Number Generator software implementation guide), pausing between = attempts and, on exhaustion, clearing any partially written buffer and thro= wing rather than continuing to spin. The clear is performed by an un-elidab=
le memzero, which uses a volatile pointer and an assembly memory barrier so=
that a compiler cannot optimise the erase away as a dead store. Bouncy Cas= tle for Java (bcprov) is not affected, as it has no native entropy source; = the 1.0.X and 2.0.X FIPS series are not affected.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8798" target=3D"= _blank" rel=3D"noopener">CVE-2026-8798</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, BKS/UBER keystore allocates from=
untrusted lengths before integrity check. This issue also affects Bouncy C= astle for Java LTS before 2.73.12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12185" target=3D= "_blank" rel=3D"noopener">CVE-2026-12185</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, CMS AuthEnvelopedData fails to e= nforce tag-length on decryption. This issue also affects Bouncy Castle for = Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc= pkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X se= ries).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12802" target=3D= "_blank" rel=3D"noopener">CVE-2026-12802</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, KCCMBlockCipher MAC does not bin=
d nonce when AAD is absent (cross-nonce AEAD forgery). This issue also affe= cts Bouncy Castle for Java LTS before 2.73.12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12803" target=3D= "_blank" rel=3D"noopener">CVE-2026-12803</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, IESEngine stream-mode MAC forger=
y via length-dependent KDF split. This issue also affects Bouncy Castle for=
Java LTS before 2.73.12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12816" target=3D= "_blank" rel=3D"noopener">CVE-2026-12816</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, OpenPGP AEAD decryption skips fi= nal tag on chunk-aligned data. This issue also affects Bouncy Castle for Ja=
va LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg= -fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series= ).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12817" target=3D= "_blank" rel=3D"noopener">CVE-2026-12817</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, MLS wire decoder allocates attac= ker-declared opaque length before bounds check.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12852" target=3D= "_blank" rel=3D"noopener">CVE-2026-12852</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, RSA PKCS#1 verification skips la=
st two hash bytes in NULL-omitted path. This issue also affects Bouncy Cast=
le for Java LTS before 2.73.12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12860" target=3D= "_blank" rel=3D"noopener">CVE-2026-12860</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, Lazy ASN.1 sequence forcing rese=
ts nesting-depth guard. This issue also affects Bouncy Castle for Java LTS = before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-fips 1.0= .2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13506" target=3D= "_blank" rel=3D"noopener">CVE-2026-13506</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, PKCS#12 MAC and bag-decryption K=
DF iteration-count bound (DoS). This issue also affects Bouncy Castle for J= ava LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-= fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13586" target=3D= "_blank" rel=3D"noopener">CVE-2026-13586</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, Possible OOM from unbounded up-f= ront allocation on a definite-length read. This issue also affects Bouncy C= astle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA)=
before bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1=
.X series), and before bctls-fips 1.0.24.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14682" target=3D= "_blank" rel=3D"noopener">CVE-2026-14682</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, PKCS#8 / PBES2 decryptors honour=
unbounded KDF cost from input. This issue also affects Bouncy Castle for J= ava LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcp= kix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X ser= ies).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15055" target=3D= "_blank" rel=3D"noopener">CVE-2026-15055</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, Quadratic-time escaping when str= ingifying X.500 distinguished names. This issue also affects Bouncy Castle = for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) befor=
e bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X ser= ies).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58059" target=3D= "_blank" rel=3D"noopener">CVE-2026-58059</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, HSS public-key level count unbou= nded, enabling huge allocation on verify. This issue also affects Bouncy Ca= stle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) = before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58060" target=3D= "_blank" rel=3D"noopener">CVE-2026-58060</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, CCM-family modes write plaintext=
to caller buffer before tag check. This issue also affects Bouncy Castle f=
or Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before=
bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X seri= es).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58061" target=3D= "_blank" rel=3D"noopener">CVE-2026-58061</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, Stapled OCSP response accepted w= ithout binding to the checked certificate. This issue also affects Bouncy C= astle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA)=
before bc-fips 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58062" target=3D= "_blank" rel=3D"noopener">CVE-2026-58062</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, BCFKS keystore load honours unbo= unded KDF cost from untrusted file. This issue also affects Bouncy Castle f=
or Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before=
bc-fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X seri= es).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58063" target=3D= "_blank" rel=3D"noopener">CVE-2026-58063</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, JSSE hostname verifier CN-fallba=
ck enabled by default despite documented opt-in. This issue also affects Bo= uncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (B= C-FJA) before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2= .1.24 (2.1.X series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59638" target=3D= "_blank" rel=3D"noopener">CVE-2026-59638</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, CMS verifySignatures returns tru=
e for SignedData with zero signers. This issue also affects Bouncy Castle f=
or Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before=
bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X=
series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59639" target=3D= "_blank" rel=3D"noopener">CVE-2026-59639</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, OpenPGP CFB quick-check oracle a= ctive on symmetric/session-key paths. This issue also affects Bouncy Castle=
for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) befo=
re bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X=
series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59640" target=3D= "_blank" rel=3D"noopener">CVE-2026-59640</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, S/MIME validator trusts signer-a= sserted signingTime for path validation. This issue also affects Bouncy Cas= tle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) b= efore bcmail-fips and bcjmail-fips 1.0.7 (1.0.X series), 2.0.7 (2.0.X serie=
s) and 2.1.7 (2.1.X series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59641" target=3D= "_blank" rel=3D"noopener">CVE-2026-59641</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, CMS AuthenticatedData content no=
t bound to MAC when authAttrs present. This issue also affects Bouncy Castl=
e for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) bef= ore bcpkix-fips 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.= 1.X series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59642" target=3D= "_blank" rel=3D"noopener">CVE-2026-59642</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, OpenPGP inline-signature policy = failures silently ignored. This issue also affects Bouncy Castle for Java F= IPS (BC-FJA) before bcpg-fips 2.0.13.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59643" target=3D= "_blank" rel=3D"noopener">CVE-2026-59643</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, MLS hash-ratchet honours arbitra=
ry 32-bit generation counter from sender.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59644" target=3D= "_blank" rel=3D"noopener">CVE-2026-59644</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, OER parser recurses without dept=
h limit on self-referential IEEE 1609.2 schema. This issue also affects Bou= ncy Castle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC= -FJA) before bcutil-fips 2.0.7 (2.0.X series) and 2.1.7 (2.1.X series).</td=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59645" target=3D= "_blank" rel=3D"noopener">CVE-2026-59645</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, DTLS handshake reassembler alloc= ates buffer from unchecked 24-bit length. This issue also affects Bouncy Ca= stle for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) = before bctls-fips 1.0.24 (1.0.X series), 2.0.24 (2.0.X series) and 2.1.24 (= 2.1.X series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59646" target=3D= "_blank" rel=3D"noopener">CVE-2026-59646</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, CRMF/CMP password-MAC honours un= bounded iteration count. This issue also affects Bouncy Castle for Java LTS=
before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpkix-fip=
s 1.0.12 (1.0.X series), 2.0.12 (2.0.X series) and 2.1.12 (2.1.X series).</=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59647" target=3D= "_blank" rel=3D"noopener">CVE-2026-59647</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, OpenPGP Argon2 S2K honours attac= ker-chosen memory and passes. This issue also affects Bouncy Castle for Jav=
a LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bcpg-= fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1.X series)= .</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59648" target=3D= "_blank" rel=3D"noopener">CVE-2026-59648</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, OpenPGP user-attribute subpacket=
length bounded only by JVM max memory. This issue also affects Bouncy Cast=
le for Java LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) be= fore bcpg-fips 1.0.13 (1.0.X series), 2.0.13 (2.0.X series) and 2.1.13 (2.1=
.X series).</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59649" target=3D= "_blank" rel=3D"noopener">CVE-2026-59649</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, MTI/A0 DH agreement exponentiate=
s unvalidated peer value. This issue also affects Bouncy Castle for Java LT=
S before 2.73.12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59650" target=3D= "_blank" rel=3D"noopener">CVE-2026-59650</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, BKS keystore accepts legacy vers= ion with 16-bit integrity MAC key. This issue also affects Bouncy Castle fo=
r Java LTS before 2.73.12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59651" target=3D= "_blank" rel=3D"noopener">CVE-2026-59651</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, LDAP filter injection in legacy = jdk1.4 LDAPStoreHelper.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-59652" target=3D= "_blank" rel=3D"noopener">CVE-2026-59652</a></td>
</tr>

<td class=3D"vendor-product">Legion of the Bouncy Castle Inc.--BC-JAVA</td> <td>In Bouncy Castle for Java before 1.85, Name Constraints bypass via trai= ling dot in rfc822Name and URI. This issue also affects Bouncy Castle for J= ava LTS before 2.73.12, and Bouncy Castle for Java FIPS (BC-FJA) before bc-= fips 1.0.2.7 (1.0.X series), 2.0.2 (2.0.X series) and 2.1.3 (2.1.X series).= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8763" target=3D"= _blank" rel=3D"noopener">CVE-2026-8763</a></td>
</tr>

<td class=3D"vendor-product">LEONT--perl</td>
<td>Perl versions through 5.45.1 have out-of-bounds heap reads and writes d= uring regular expression matching via an undersized superlinear cache in S_= regmatch. The regex engine's superlinear cache holds one bit per subject po= sition for each participating WHILEM node, so the bit count is the subject = length plus one times the number of nodes. Nothing checks that product for = positive overflow of the signed 32-bit count: a 286331153 byte subject matc= hed against a pattern with 15 participating nodes stores the count as 14, l= eaving a two byte cache. The cache is then indexed from the real match posi= tion and node number, so reads go past the end of the allocation, and on fa= ilure CACHEsayNO sets a bit past it. A caller that matches an attacker cont= rolled subject of this size against a pattern of this shape can crash the p= rocess or corrupt heap memory.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15534" target=3D= "_blank" rel=3D"noopener">CVE-2026-15534</a></td>
</tr>

<td class=3D"vendor-product">lib60870-C--lib60870-C 2.4.0</td>
<td>A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-s= ide FileSegment ASDU encoding path. The issue occurs because FileSegment_en= code() validates only the standalone segment length via FileSegment_GetMaxD= ataSize() and does not verify the residual capacity of the current ASDU fra=
me before encoding object fields and segment data</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67873" target=3D= "_blank" rel=3D"noopener">CVE-2026-67873</a></td>
</tr>

<td class=3D"vendor-product">Link Library--Link Library</td>
<td>The Link Library WordPress plugin before 7.9.3 does not properly saniti=
se and escape a user-supplied value before using it in a SQL query, allowin=
g unauthenticated users to perform SQL injection attacks.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16532" target=3D= "_blank" rel=3D"noopener">CVE-2026-16532</a></td>
</tr>

<td class=3D"vendor-product">Link Library--Link Library</td>
<td>The Link Library WordPress plugin before 7.9.4 does not sanitise and es= cape a parameter before reflecting it back in a response, allowing unauthen= ticated attackers to perform Reflected Cross-Site Scripting attacks against=
users who can be tricked into performing an action.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16535" target=3D= "_blank" rel=3D"noopener">CVE-2026-16535</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: Inp= ut: ims-pcu - fix heap-buffer-overflow in ims_pcu_process_data() The `ims_p= cu_process_data()` processes incoming URB data byte by byte. However, it fa= ils to check if the `read_pos` index exceeds IMS_PCU_BUF_SIZE. If a malicio=
us USB device sends a packet larger than IMS_PCU_BUF_SIZE, `read_pos` will = increment indefinitely. Moreover, since `read_pos` is located immediately a= fter `read_buf`, the attacker can overwrite `read_pos` itself to arbitraril=
y control the index. This manipulated `read_pos` is subsequently used in `i= ms_pcu_handle_response()` to copy data into `cmd_buf`, leading to a heap bu= ffer overflow. Specifically, an attacker can overwrite the `cmd_done.wait.h= ead` located at offset 136 relative to `cmd_buf` in the `ims_pcu_handle_res= ponse()`. Consequently, when the driver calls `complete(&pcu->cmd_do= ne)`, it triggers a control flow hijack by using the manipulated pointer. F=
ix this by adding a bounds check for `read_pos` before writing to `read_buf=
`. If the packet is too long, discard it, log a warning, and reset the pars=
er state. [dtor: factor out resetting packet state, reset checksum as well]= </td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64565" target=3D= "_blank" rel=3D"noopener">CVE-2026-64565</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: mpl=
s: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=3Dn On CONFIG= _INET=3Dn builds, mpls_valid_fib_dump_req() walks the parsed attribute tabl=
e itself instead of calling ip_valid_fib_dump_req(). The RTA_OIF arm passes=
tb[RTA_OIF] to nla_get_u32() without checking it is present, so an RTM_GET= ROUTE dump for AF_MPLS with strict checking and no RTA_OIF hits a NULL dere= ference. RTM_GETROUTE is RTNL_KIND_GET, which rtnetlink_rcv_msg() permits w= ithout CAP_NET_ADMIN, so an unprivileged user can trigger it. Oops: general=
protection fault, probably for non-canonical address 0xdffffc0000000000: 0= 000 [#1] SMP KASAN NOPTI KASAN: null-ptr-deref in range [0x0000000000000000= -0x0000000000000007] RIP: 0010:mpls_valid_fib_dump_req (net/mpls/af_mpls.c:= 2189) Call Trace: mpls_dump_routes (net/mpls/af_mpls.c:2236) netlink_dump (= net/netlink/af_netlink.c:2331) __netlink_dump_start (net/netlink/af_netlink= .c:2446) rtnetlink_rcv_msg (net/core/rtnetlink.c:7033) netlink_rcv_skb (net= /netlink/af_netlink.c:2556) netlink_unicast (net/netlink/af_netlink.c:1345)=
netlink_sendmsg (net/netlink/af_netlink.c:1900) __sock_sendmsg (net/socket= .c:790) ____sys_sendmsg (net/socket.c:2684) ___sys_sendmsg (net/socket.c:27= 38) __sys_sendmsg (net/socket.c:2770) do_syscall_64 (arch/x86/entry/syscall= _64.c:94) entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:121) Sk=
ip unset attributes, as ip_valid_fib_dump_req() does.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64569" target=3D= "_blank" rel=3D"noopener">CVE-2026-64569</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: wif=
i: p54: validate RX frame length in p54_rx_eeprom_readback() p54_rx_eeprom_= readback() copies the requested EEPROM slice out of a device-supplied readb= ack frame without checking that the skb actually holds that many bytes. Com= mit da1b9a55ff11 ("wifi: p54: prevent buffer-overflow in p54_rx_eeprom_read= back()") closed the destination overflow by copying a fixed priv->eeprom= _slice_size (and rejecting a mismatched advertised len), but the source sid=
e is still unbounded: nothing verifies the frame is long enough to supply t= hat many bytes. A malicious USB device can send a short frame whose adverti= sed len matches priv->eeprom_slice_size while the payload is truncated. = The equality check passes and memcpy() reads past the end of the skb, leaki=
ng adjacent heap: BUG: KASAN: slab-out-of-bounds in p54_rx (drivers/net/wir= eless/intersil/p54/txrx.c:507) Read of size 1016 at addr ffff88800f077114 b=
y task swapper/0/0 Call Trace: <IRQ> ... __asan_memcpy (mm/kasan/shad= ow.c:105) p54_rx (drivers/net/wireless/intersil/p54/txrx.c:507) p54u_rx_cb = (drivers/net/wireless/intersil/p54/p54usb.c:163) __usb_hcd_giveback_urb (dr= ivers/usb/core/hcd.c:1657) dummy_timer (drivers/usb/gadget/udc/dummy_hcd.c:= 2005) ... </IRQ> The buggy address belongs to the object at ffff88800= f0770c0 which belongs to the cache skbuff_small_head of size 704 The buggy = address is located 84 bytes inside of allocated 704-byte region [ffff88800f= 0770c0, ffff88800f077380) Check that the slice fits in the skb before copyi= ng.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64571" target=3D= "_blank" rel=3D"noopener">CVE-2026-64571</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: ipv=
4: fib: free fib_alias with kfree_rcu() on insert error path fib_table_inse= rt() publishes new_fa into the leaf's fa_list with fib_insert_alias() befor=
e calling the fib entry notifiers. When a notifier fails, the error path re= moves new_fa with fib_remove_alias() (hlist_del_rcu) and frees it right awa=
y with kmem_cache_free(). fib_table_lookup() walks that list under rcu_read= _lock() only, so a concurrent lookup that already reached new_fa keeps read= ing it after the free: BUG: KASAN: slab-use-after-free in fib_table_lookup = (net/ipv4/fib_trie.c:1601) Read of size 1 at addr ffff88810676d4eb by task = exploit/297 Call Trace: fib_table_lookup (net/ipv4/fib_trie.c:1601) ip_rout= e_output_key_hash_rcu (net/ipv4/route.c:2814) ip_route_output_key_hash (net= /ipv4/route.c:2705) __ip4_datagram_connect (net/ipv4/datagram.c:49) udp_con= nect (net/ipv4/udp.c:2144) __sys_connect (net/socket.c:2167) __x64_sys_conn= ect (net/socket.c:2173) do_syscall_64 entry_SYSCALL_64_after_hwframe which = belongs to the cache ip_fib_alias of size 56 Triggering the error path need=
s CAP_NET_ADMIN and a registered fib notifier that can reject a route; a ne= tdevsim device whose IPv4 FIB resource is exhausted is enough. Free new_fa = with alias_free_mem_rcu(), as fib_table_delete() already does for a fib_ali=
as removed from the trie.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64572" target=3D= "_blank" rel=3D"noopener">CVE-2026-64572</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: Blu= etooth: qca: fix NVM tag length underflow in TLV parser In the TLV_TYPE_NVM=
branch of qca_tlv_check_data() the tag loop bound is "while (idx < leng=
th - sizeof(struct tlv_type_nvm))". "length" is a signed int from the firmw= are TLV header and sizeof(struct tlv_type_nvm) is a size_t (12), so "length=
" is converted to size_t and any firmware-supplied "length" < 12 makes t=
he subtraction wrap to a huge value. The loop body then reads a 12-byte str= uct tlv_type_nvm past the end of the short vmalloc'd firmware buffer (and t=
he EDL_TAG_ID_* handlers can write past it). Rewrite the bound as "idx + si= zeof(struct tlv_type_nvm) <=3D length"; both operands are non-negative, =
so it no longer underflows and a "length" too small for one record correctl=
y skips the loop. BUG: KASAN: vmalloc-out-of-bounds in qca_download_firmwar= e.isra.0 (drivers/bluetooth/btqca.c:421) Read of size 2 at addr ffffc900000= e5004 by task kworker/u9:0/52 Workqueue: hci0 hci_power_on Call Trace: ... = kasan_report (mm/kasan/report.c:595) qca_download_firmware.isra.0 (drivers/= bluetooth/btqca.c:421 drivers/bluetooth/btqca.c:617) qca_uart_setup (driver= s/bluetooth/btqca.c:948) qca_setup (drivers/bluetooth/hci_qca.c:2029) hci_u= art_setup (drivers/bluetooth/hci_ldisc.c:438) hci_dev_open_sync (net/blueto= oth/hci_sync.c:5227) hci_power_on (net/bluetooth/hci_core.c:920) process_on= e_work (kernel/workqueue.c:3322) worker_thread (kernel/workqueue.c:3486) kt= hread (kernel/kthread.c:436) ret_from_fork (arch/x86/kernel/process.c:158) = ret_from_fork_asm (arch/x86/entry/entry_64.S:245)</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64573" target=3D= "_blank" rel=3D"noopener">CVE-2026-64573</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: xfr=
m: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert xfrm_= hash_rebuild()'s first loop preallocates the bins/chains the reinsert loop = needs, so the reinsert (after hlist_del_rcu()) cannot allocate or fail. But=
its guard is inverted: it skips policies with prefixlen < threshold and=
preallocates for the rest. prefixlen < threshold is exactly when policy= _hash_bysel() returns NULL and the reinsert takes the allocating xfrm_polic= y_inexact_insert() path. So the loop preallocates for the exact policies (w= hich never allocate) and skips the inexact ones, whose bin/node is then all= ocated GFP_ATOMIC during reinsert. On failure the error path only WARN_ONCE= ()s and continues, leaving a poisoned bydst node; the next rebuild's hlist_= del_rcu() dereferences LIST_POISON2 and takes a GPF. Reachable under memory=
pressure, deterministic via failslab. Invert the guard so preallocation co= vers exactly the reinserted policies; the reinsert then allocates nothing a=
nd cannot fail. Crash: Oops: general protection fault, probably for non-can= onical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI KASAN: maybe w= ild-memory-access in range [0xdead...] ... Workqueue: events xfrm_hash_rebu= ild RIP: 0010:xfrm_hash_rebuild+0x5b3/0x1190 RAX: dead000000000122 (LIST_PO= ISON2 + offset) ... Call Trace: hlist_del_rcu (include/linux/rculist.h:599)=
xfrm_hash_rebuild (net/xfrm/xfrm_policy.c:1365) process_one_work (kernel/w= orkqueue.c:3322) worker_thread (kernel/workqueue.c:3486) kthread (kernel/kt= hread.c:436) ret_from_fork (arch/x86/kernel/process.c:158) ret_from_fork_as=
m (arch/x86/entry/entry_64.S:245) ... Kernel panic - not syncing: Fatal exc= eption in interrupt</td>

<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64579" target=3D= "_blank" rel=3D"noopener">CVE-2026-64579</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: i2c=
: core: fix NULL-deref on adapter registration failure If adapter registrat= ion ever fails the release callback would trigger a NULL-pointer dereferenc=
e as the completion struct has not been initialised. Note that before the o= ffending commit this would instead have resulted in a minor memory leak of = the adapter name.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64589" target=3D= "_blank" rel=3D"noopener">CVE-2026-64589</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: dma= -buf/udmabuf: skip redundant cpu sync to fix cacheline EEXIST warning When = CONFIG_DMA_API_DEBUG_SG is enabled, importing a udmabuf into a DRM driver (= e.g. amdgpu for video playback in GNOME Videos / Showtime) triggers a spuri= ous warning: DMA-API: amdgpu 0000:03:00.0: cacheline tracking EEXIST, \ ove= rlapping mappings aren't supported WARNING: kernel/dma/debug.c:619 at add_d= ma_entry+0x473/0x5f0 The call chain is: amdgpu_cs_ioctl -> amdgpu_ttm_ba= ckend_bind -> dma_buf_map_attachment -> [udmabuf] map_udmabuf -> g= et_sg_table -> dma_map_sgtable(dev, sg, direction, 0) // attrs=3D0 ->=
debug_dma_map_sg -> add_dma_entry -> EEXIST This happens because udm= abuf builds a per-page scatter-gather list via sg_set_folio(). When begin_c= pu_udmabuf() has already created an sg table mapped for the misc device, an=
d an importer such as amdgpu maps the same pages for its own device via map= _udmabuf(), the DMA debug infrastructure sees two active mappings whose phy= sical addresses share cacheline boundaries and warns about the overlap. The=
DMA_ATTR_SKIP_CPU_SYNC flag suppresses this check in add_dma_entry() becau=
se it signals that no CPU cache maintenance is performed at map/unmap time,=
making the cacheline overlap harmless. All other major dma-buf exporters a= lready pass this flag: - drm_gem_map_dma_buf() passes DMA_ATTR_SKIP_CPU_SYN=
C - amdgpu_dma_buf_map() passes DMA_ATTR_SKIP_CPU_SYNC The CPU sync at map/= unmap time is also redundant for udmabuf: begin_cpu_udmabuf() and end_cpu_u= dmabuf() already perform explicit cache synchronization via dma_sync_sgtabl= e_for_cpu/device() when CPU access is requested through the dma-buf interfa= ce. Pass DMA_ATTR_SKIP_CPU_SYNC to dma_map_sgtable() and dma_unmap_sgtable(=
) in udmabuf to suppress the spurious warning and skip the redundant sync.<=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64590" target=3D= "_blank" rel=3D"noopener">CVE-2026-64590</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: iom= mu/vt-d: Avoid WARNING in sva unbind path The Intel IOMMU driver allows SVA=
on devices even if they do not support PCI/PRI. Commit 39c20c4e83b9 ("iomm= u/vt-d: Only handle IOPF for SVA when PRI is supported") modified the SVA b= ind path to allow this configuration by skipping IOPF enablement when PRI i=
s missing. However, it failed to update the unbind path. This creates an im= balance: the unbind path attempts to disable IOPF for a device that never h=
ad it enabled, triggering a WARNING in intel_iommu_disable_iopf(): WARNING:=
drivers/iommu/intel/iommu.c:3475 at intel_iommu_disable_iopf+0x4f/0x90d Ca=
ll Trace: <TASK> blocking_domain_set_dev_pasid+0x50/0x70 iommu_detach= _device_pasid+0x89/0xc0 iommu_sva_unbind_device+0x73/0x150 xe_vm_close_and_= put+0x4d2/0x1200 [xe] Fix this by bypassing IOPF operations for SVA domains=
on non-PRI hardware in both the bind and unbind paths.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64591" target=3D= "_blank" rel=3D"noopener">CVE-2026-64591</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: ris= cv: mm: Unconditionally sfence.vma for spurious fault Svvptc does not guara= ntee that it's safe to just return here. Since we have already cleared our = bit, if, theoretically, the bounded timeframe for the accessed page to beco=
me valid still hasn't happened after sret, we could fault again and actuall=
y crash. Hopefully, these spurious faults should be rare enough that this i=
s an acceptable slowdown.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64592" target=3D= "_blank" rel=3D"noopener">CVE-2026-64592</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: btr= fs: do not trim a device which is not writeable [BUG] There is a bug report=
that btrfs/242 can randomly fail with the following NULL pointer dereferen= ce: run fstests btrfs/242 at 2026-06-01 10:25:08 BTRFS: device fsid d4d7f23= 4-487c-4787-88e4-47a8b68c9874 devid 1 transid 9 /dev/sdc (8:32) scanned by = mount (122609) BTRFS info (device sdc): first mount of filesystem d4d7f234-= 487c-4787-88e4-47a8b68c9874 BTRFS info (device sdc): using crc32c checksum = algorithm BTRFS warning (device sdc): devid 2 uuid fbe72d72-3272-482d-80fb-= ab88ed398192 is missing BTRFS warning (device sdc): devid 2 uuid fbe72d72-3= 272-482d-80fb-ab88ed398192 is missing BTRFS info (device sdc): allowing deg= raded mounts BTRFS info (device sdc): turning on async discard BTRFS info (= device sdc): enabling free space tree Unable to handle kernel NULL pointer = dereference at virtual address 0000000000000018 user pgtable: 4k pages, 48-= bit VAs, pgdp=3D000000013fd6b000 CPU: 4 UID: 0 PID: 122625 Comm: fstrim Not=
tainted 7.0.10-2-default #1 PREEMPT(full) openSUSE Tumbleweed e9a5f6b24978= fba3bf015a992f865837fdfff3dd Hardware name: QEMU KVM Virtual Machine, BIOS = edk2-20250812-19.fc42 08/12/2025 pstate: 01400005 (nzcv daif +PAN -UAO -TCO=
+DIT -SSBS BTYPE=3D--) pc : btrfs_trim_fs+0x34c/0xa00 [btrfs] lr : btrfs_t= rim_fs+0x1f0/0xa00 [btrfs] Call trace: btrfs_trim_fs+0x34c/0xa00 [btrfs f02= c1d570ceea621c69d302ba75dd61868083840] (P) btrfs_ioctl_fitrim+0xe8/0x178 [b= trfs f02c1d570ceea621c69d302ba75dd61868083840] btrfs_ioctl+0xdd4/0x2bd8 [bt= rfs f02c1d570ceea621c69d302ba75dd61868083840] __arm64_sys_ioctl+0xac/0x108 = invoke_syscall.constprop.0+0x5c/0xd0 el0_svc_common.constprop.0+0x40/0xf0 d= o_el0_svc+0x24/0x40 el0_svc+0x40/0x1d0 el0t_64_sync_handler+0xa0/0xe8 el0t_= 64_sync+0x1b0/0x1b8 Code: 17ffff83 f94017e0 f9002be0 f9402ea0 (f9400c00) --=
-[ end trace 0000000000000000 ]--- Also the reporter is very kind to test t=
he following ASSERT() added to btrfs_trim_free_extents_throttle(): ASSERT(d= evice->bdev, "devid=3D%llu path=3D%s dev_state=3D0x%lx\n", device->de= vid, btrfs_dev_name(device), device->dev_state); And it shows the follow= ing output: assertion failed: device->bdev, in extent-tree.c:6630 (devid= =3D2 path=3D/dev/sdd dev_state=3D0x82) Which means the device->bdev is N= ULL, and the dev_state is BTRFS_DEV_STATE_IN_FS_METADATA | BTRFS_DEV_STATE_= ITEM_FOUND, without BTRFS_DEV_STATE_WRITEABLE flag set. [CAUSE] The pc poin=
ts to the following call chain: btrfs_trim_fs() |- btrfs_trim_free_extents(=
) |- btrfs_trim_free_extents_throttle() |- bdev_max_discard_sectors(device-= >bdev) So the NULL pointer dereference is caused by device->bdev bein=
g NULL. This looks impossible by a quick glance, as just before calling btr= fs_trim_free_extents_throttle(), we have skipped any device that has BTRFS_= DEV_STATE_MISSING flag set. However in this particular case, there is a win= dow where the missing device is later re-scanned, causing btrfs to remove t=
he BTRFS_DEV_STATE_MISSING flag: btrfs_control_ioctl() |- btrfs_scan_one_de= vice() |- device_list_add() |- rcu_assign_pointer(device->name, name); |=
This updates the missing device's path to the new good path. | |- clear_bi= t(BTRFS_DEV_STATE_MISSING, &device->dev_state) This removes the BTRF= S_DEV_STATE_MISSING flag. This allows the missing device to re-appear and c= lear the BTRFS_DEV_STATE_MISSING flag. However the device still does not ha=
ve the BTRFS_DEV_STATE_WRITEABLE flag set, nor is its bdev pointer updated.=
The bdev pointer remains NULL, triggering the crash later. [FIX] This is a=
big de-synchronization between BTRFS_DEV_STATE_MISSING and device->bdev=
pointer, and shows a gap in btrfs's re-appearing-device handling. The prop=
er handling of re-appearing device will need quite some extra work, which i=
s out of the context of this small ---truncated---</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64593" target=3D= "_blank" rel=3D"noopener">CVE-2026-64593</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: usb=
: gadget: f_fs: initialize reset_work at allocation time ffs_fs_kill_sb() u= nconditionally calls cancel_work_sync() on ffs->reset_work when a functi= onfs instance is unmounted: ffs_data_reset(ffs); cancel_work_sync(&ffs-= >reset_work); However ffs->reset_work is only ever initialized via IN= IT_WORK() in ffs_func_set_alt() and ffs_func_disable(), and only on the FFS= _DEACTIVATED path. That state is reached solely by ffs_data_closed() when t=
he instance is mounted with the "no_disconnect" option, so for the common c= ase (no "no_disconnect", or mounted and unmounted without ever being deacti= vated) reset_work is never initialized. ffs_data_new() allocates the ffs_da=
ta with kzalloc_obj() and does not initialize reset_work, and ffs_data_rese= t()/ffs_data_clear() do not touch it either, so reset_work.func is left NUL=
L. cancel_work_sync() on such a work then trips the WARN_ON(!work->func)=
guard in __flush_work(): WARNING: kernel/workqueue.c:4301 at __flush_work+= 0x330/0x360, CPU#3: umount Call trace: __flush_work cancel_work_sync ffs_fs= _kill_sb [usb_f_fs] deactivate_locked_super deactivate_super cleanup_mnt __= cleanup_mnt task_work_run exit_to_user_mode_loop el0_svc On older kernels c= ancel_work_sync() on a zero-initialized work struct was a silent no-op, whi=
ch hid the missing initialization. Initialize reset_work once in ffs_data_n= ew() so it is always valid for the lifetime of the ffs_data, and drop the n= ow-redundant INIT_WORK() calls from the two deactivation paths.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64594" target=3D= "_blank" rel=3D"noopener">CVE-2026-64594</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: HID=
: hid-lenovo-go: cancel cfg_setup work in hid_go_cfg_remove() hid_go_cfg_pr= obe() initialises drvdata.go_cfg_setup and schedules it to run 2 ms later: = INIT_DELAYED_WORK(&drvdata.go_cfg_setup, &cfg_setup); schedule_dela= yed_work(&drvdata.go_cfg_setup, msecs_to_jiffies(2)); cfg_setup() deref= erences drvdata.hdev to issue MCU command requests. hid_go_cfg_remove() tea=
rs down sysfs and stops the HID device, but never drains the delayed work. =
If the device is unbound within the 2 ms scheduling delay (a probe failure = rolling back via remove, or a fast rmmod after probe), the work fires after=
hid_destroy_device() has dropped its reference and released the underlying=
hdev struct, leaving cfg_setup() with a stale drvdata.hdev pointer. Mirror=
the sibling driver hid-lenovo-go-s.c, whose hid_gos_cfg_remove() already c= alls cancel_delayed_work_sync() on its analogous work, and drain go_cfg_set=
up at the top of hid_go_cfg_remove(). The cancel must come before guard(mut= ex)(&drvdata.cfg_mutex) because cfg_setup() acquires that mutex; revers= ing the order would deadlock.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64595" target=3D= "_blank" rel=3D"noopener">CVE-2026-64595</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: lib= fs: set SB_I_NOEXEC and SB_I_NODEV by default in init_pseudo() Since commit=
1e7ab6f67824 ("anon_inode: rework assertions"), path_noexec() warns when a=
n anonymous-inode file is mmap'd from a superblock that has not set SB_I_NO= EXEC. dma-buf backs its files this way and never set the flag, so mmap of a=
ny exported buffer trips the warning on a CONFIG_DEBUG_VFS=3Dy kernel: WARN= ING: CPU: 11 PID: 121813 at fs/exec.c:118 path_noexec+0x47/0x50 do_mmap+0x2= b5/0x680 vm_mmap_pgoff+0x129/0x210 ksys_mmap_pgoff+0x177/0x240 __x64_sys_mm= ap+0x33/0x70 init_pseudo() sets up internal SB_NOUSER mounts that are never=
path-reachable. Set both flags here so every pseudo filesystem gets them b=
y default instead of each caller setting them. SB_I_NODEV is inert for unre= achable mounts. SB_I_NOEXEC has one visible effect: an executable mapping o=
f a pseudo-fs fd, such as a dma-buf, now fails with -EPERM, which is the in= variant the assertion enforces. No in-tree caller maps these executable. Re= produce on CONFIG_DEBUG_VFS=3Dy: make -C tools/testing/selftests/dmabuf-hea=
ps sudo ./tools/testing/selftests/dmabuf-heaps/dmabuf-heap -t system</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64596" target=3D= "_blank" rel=3D"noopener">CVE-2026-64596</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: iio=
: adc: spear: Initialize completion before requesting IRQ In the report fro=
m Jaeyoung Chung: "spear_adc_probe() in drivers/iio/adc/spear_adc.c registe=
rs its interrupt handler with devm_request_irq() before it initializes st-&= gt;completion with init_completion(). If an interrupt arrives after devm_re= quest_irq() and before init_completion(), the handler calls complete() on a=
n uninitialized completion, causing a kernel panic. The probe path, in spea= r_adc_probe(): iodev =3D devm_iio_device_alloc(&pdev->dev, sizeof(*s= t)); /* st kzalloc-zeroed */ ... retval =3D devm_request_irq(&pdev->= dev, irq, spear_adc_isr, 0, LPC32XXAD_NAME, st); /* register handler */ ...=
init_completion(&st->completion); /* initialize completion */ spear= _adc_isr() calls complete(): complete(&st->completion); If the devic=
e raises an interrupt before init_completion() runs, complete() acquires th=
e uninitialized wait.lock and walks the zeroed task_list in swake_up_locked= (). The zeroed task_list makes list_empty() return false, so swake_up_locke= d() dereferences a NULL list entry, triggering a KASAN wild-memory-access."=
Fix the chance of a spurious IRQ causing an uninitialized pointer derefere= nce by moving init_completion() above devm_request_irq().</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64602" target=3D= "_blank" rel=3D"noopener">CVE-2026-64602</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: pla= tform/x86: intel-hid: Protect ACPI notify handler against recursion Since c= ommit e2ffcda16290 ("ACPI: OSL: Allow Notify () handlers to run on all CPUs=
") ACPI notify handlers like the intel-hid notify_handler() may run on mult= iple CPU cores racing with themselves. On convertibles and detachables (mat= ched by DMI chassis-type 31 and 32 in dmi_auto_add_switch[]) the SW_TABLET_= MODE input device is registered lazily from notify_handler() on the first t= ablet-mode event, via intel_hid_switches_setup(). When two such events race=
on different CPUs both can pass the !priv->switches check and register = the priv->switches input device twice, resulting in a duplicate sysfs en= try and a subsequent NULL pointer dereference. This is the same class of bu=
g fixed by commit e075c3b13a0a ("platform/x86: intel-vbtn: Protect ACPI not= ify handler against recursion") for the sibling intel-vbtn driver. Protect = intel-hid notify_handler() from racing with itself with a mutex to fix this= .</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64603" target=3D= "_blank" rel=3D"noopener">CVE-2026-64603</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: KVM=
: VMX: Grab vmcs12 on CR8 interception update iff vCPU is in guest mode Whe=
n updating CR8 intercepts, get vmcs12 if and only if the vCPU is in guest m= ode so that a future change can have update CR8 intercepts during vCPU crea= tion, without running afoul of get_vmcs12()'s lockdep assertion. ----------= --[ cut here ]------------ debug_locks && !(lock_is_held(&(&amp= ;vcpu->mutex)->dep_map) || !refcount_read(&vcpu->kvm->users= _count)) WARNING: arch/x86/kvm/vmx/nested.h:61 at get_vmcs12 arch/x86/kvm/v= mx/nested.h:60 [inline], CPU#0: syz.2.19/5879 WARNING: arch/x86/kvm/vmx/nes= ted.h:61 at vmx_update_cr8_intercept+0x3de/0x4e0 arch/x86/kvm/vmx/vmx.c:687=
9, CPU#0: syz.2.19/5879 Modules linked in: CPU: 0 UID: 0 PID: 5879 Comm: sy= z.2.19 Not tainted syzkaller #0 PREEMPT(full) Hardware name: QEMU Standard =
PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014 RIP: 0010:get= _vmcs12 arch/x86/kvm/vmx/nested.h:60 [inline] RIP: 0010:vmx_update_cr8_inte= rcept+0x3de/0x4e0 arch/x86/kvm/vmx/vmx.c:6879 Call Trace: <TASK> apic= _update_ppr arch/x86/kvm/lapic.c:984 [inline] kvm_lapic_reset+0x1c24/0x2980=
arch/x86/kvm/lapic.c:3023 kvm_vcpu_reset+0x44c/0x1bf0 arch/x86/kvm/x86.c:1= 2986 kvm_arch_vcpu_create+0x746/0x8b0 arch/x86/kvm/x86.c:12847 kvm_vm_ioctl= _create_vcpu+0x428/0x930 virt/kvm/kvm_main.c:4201 kvm_vm_ioctl+0x893/0xd50 = virt/kvm/kvm_main.c:5159 vfs_ioctl fs/ioctl.c:51 [inline] __do_sys_ioctl fs= /ioctl.c:597 [inline] __se_sys_ioctl+0xfc/0x170 fs/ioctl.c:583 do_syscall_x=
64 arch/x86/entry/syscall_64.c:63 [inline] do_syscall_64+0x174/0x580 arch/x= 86/entry/syscall_64.c:94 entry_SYSCALL_64_after_hwframe+0x77/0x7f </TASK= > No functional change intended.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64604" target=3D= "_blank" rel=3D"noopener">CVE-2026-64604</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: KVM=
: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest stat=
e Put all vmcs12 pages if KVM synthesizes a nested VM-Exit due to invalid g= uest while emulating VMLAUNCH or VMRESUME. The invalid guest state path doe= sn't use nested_vmx_vmexit() as that API is intended to be used if and only=
if L2 is active, and the open coded equivalent neglects to put the vmcs12 = pages. Failure to put the vmcs12 pages leaks any pinned pages (and/or mappi= ngs) if L1 retries VMLAUNCH/VMRESUME. Note, the !from_vmenter scenario does= n't suffer the same problem, as vmx_get_nested_state_pages() only gets/pins= /maps the vmcs12 pages if L2 is active, i.e. if a "full" VM-Exit is guarant= eed before KVM will retry getting vmcs12 pages.</td>

<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68081" target=3D= "_blank" rel=3D"noopener">CVE-2026-68081</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: lib= ceph: fix two unsafe bare decodes in decode_lockers() decode_lockers() in c= ls_lock_client.c contains two bare decode operations that allow a malicious=
or compromised OSD to trigger slab-out-of-bounds reads: 1. ceph_decode_32(=
p) at the num_lockers field has no preceding bounds check. ceph_start_decod= ing() accepts struct_len=3D0 as valid -- the internal ceph_decode_need(p, e= nd, 0, bad) always passes -- so when an OSD sends struct_len=3D0, ceph_star= t_decoding() returns success with p =3D=3D end. The immediately following b= are ceph_decode_32(p) then reads 4 bytes past the validated buffer boundary=
. The garbage value is passed directly to kzalloc_objs() as the locker coun=
t. The sibling function decode_watchers() in osd_client.c already uses ceph= _decode_32_safe() after its own ceph_start_decoding() call. decode_lockers(=
) was the only site using the bare variant. 2. ceph_decode_8(p) after the d= ecode_locker() loop has no preceding bounds check. If an OSD crafts num_loc= kers such that the loop advances p exactly to end, the subsequent bare ceph= _decode_8(p) reads one byte past the validated buffer boundary. The result =
is passed directly into *type, which is used as a lock type discriminator b=
y callers, giving an OSD-controlled one-byte OOB read with direct influence=
over the lock type field. Fix both by replacing bare operations with their=
safe variants: ceph_decode_32(p) -> ceph_decode_32_safe(p, end, *num_lo= ckers, err_inval) ceph_decode_8(p) -> ceph_decode_8_safe(p, end, *type, = err_free_lockers) The goto targets differ intentionally: err_inval: is a ne=
w label returning -EINVAL directly. It is used for the pre-allocation failu=
re path where *lockers is not yet allocated and must not be passed to ceph_= free_lockers(). err_free_lockers: is the existing label. It is used for the=
post-allocation failure path where *lockers is allocated and must be freed=
. ret is set to -EINVAL before ceph_decode_8_safe() so that err_free_locker=
s returns the correct error code on bounds violation. Without this, err_fre= e_lockers would return a stale ret value (0 from the successful decode_lock= er() loop), silently swallowing the error. -EINVAL is correct for both fail= ure paths. The data received from the OSD is structurally malformed. -ENOME=
M would misrepresent the failure class to callers and to stable@ backporter=
s triaging error paths. Attacker model: a malicious or compromised OSD in a=
multi-tenant Ceph deployment can trigger this against any kernel client th=
at issues the lock.get_info class method (e.g. during RBD exclusive lock ac= quisition). [ idryomov: trim changelog, formatting ]</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68082" target=3D= "_blank" rel=3D"noopener">CVE-2026-68082</a></td>
</tr>

<td class=3D"vendor-product">Linux--Linux</td>
<td>In the Linux kernel, the following vulnerability has been resolved: x86= /bugs: Make Safe-RET robust against interrupt injection An attacker injecti=
ng interrupts while the Safe-RET mitigation executes on machines affected b=
y SRSO can neutralize the safe return sequence, potentially leading to data=
leakage through speculative execution. Fixup register state as if the Safe= -RET sequence executed successfully by "emulating" it, in a manner of speak= ing, and avoid executing a RET instruction after returning from the interru= pt.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68480" target=3D= "_blank" rel=3D"noopener">CVE-2026-68480</a></td>
</tr>

<td class=3D"vendor-product">livebook-dev--livebook</td>
<td>Improper Neutralization of Special Elements used in an OS Command (OS C= ommand Injection) vulnerability in livebook-dev livebook allows command inj= ection into generated deployment setup commands. LivebookWeb.Hub.Teams.Depl= oymentGroupAgentComponent.docker_instructions/2 and LivebookWeb.Hub.Teams.D= eploymentGroupAgentComponent.fly_instructions/4 in lib/livebook_web/live/hu= b/teams/deployment_group_agent_component.ex interpolate deployment group en= vironment variable values into the generated Docker and Fly.io setup comman=
ds without shell escaping. The values originate from the deployment group c= onfiguration and reach the sinks through Livebook.Hubs.Dockerfile.online_do= cker_info/3. Both sinks place the value inside a double-quoted shell word, =
so a value containing a command substitution such as $(...) or backticks is=
evaluated by the shell without any need to break out of the quoting, and a=
literal double quote terminates the quoted word and allows arbitrary furth=
er tokens. The generated command is displayed in the Livebook web interface=
with a copy button, so a user who copies it and runs it without reviewing =
it first executes the injected commands on their own machine, under their o=
wn account. An attacker requires privileges sufficient to set deployment gr= oup environment variables, while the resulting code execution occurs on the=
machine of whoever runs the generated command. The Kubernetes instructions=
are not affected, because they render the same values into a YAML manifest=
with escaping rather than into a shell command. This issue affects liveboo=
k: from 0.13.0 before 0.18.7 and from 0.19.0 before 0.19.9.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66297" target=3D= "_blank" rel=3D"noopener">CVE-2026-66297</a></td>
</tr>

<td class=3D"vendor-product">livebook-dev--livebook</td>
<td>Origin Validation Error vulnerability in livebook-dev livebook allows u= ntrusted notebook output JavaScript to trigger session-wide keyboard shortc= uts, including forced evaluation of all cells and runtime restart. Livebook=
's JS-view feature renders notebook-defined JavaScript inside a sandboxed, = cross-origin iframe specifically because that JavaScript is untrusted. The = trusted iframe shell in iframe/priv/static/iframe/v5.html forwards every ke= ydown event fired in its own window to the parent page without consulting E= vent.isTrusted, so an event synthesized by the untrusted script through win= dow.dispatchEvent is forwarded exactly as a genuine keystroke would be. The=
parent-side relay in assets/js/hooks/js_view.js reconstructs and re-dispat= ches it on the live page with no further validation, and because assets/js/= hooks/session.js registers the global shortcut handler on the document in t=
he capture phase, that handler acts on the replicated event regardless of h=
ow it was produced. Sandboxed output JavaScript can therefore drive Liveboo= k's session-wide keyboard shortcuts. Two of them reach LivebookWeb.SessionL= ive and execute immediately with no confirmation: the shortcut for queueing=
full evaluation runs every cell in the notebook, and the shortcut for reco= nnecting the runtime disconnects and reconnects it, discarding in-memory st= ate. A third shortcut deletes the focused cell behind a confirmation dialog=
that the user can permanently dismiss, after which it too executes silentl=
y. Forced full evaluation is the significant consequence, because it causes=
the notebook's own Elixir code to run without the user choosing to evaluat=
e anything. A user who merely opens a notebook obtained from a third party,=
or reached from published documentation, can have its code executed on the=
ir runtime. Livebook also mirrors cell outputs to every connected client, s=
o a malicious output triggers in a collaborator's browser as soon as it ren= ders. This issue affects livebook: from 0.5.0 before 0.18.7 and from 0.19.0=
before 0.19.9.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66298" target=3D= "_blank" rel=3D"noopener">CVE-2026-66298</a></td>
</tr>

<td class=3D"vendor-product">livebook-dev--livebook</td>
<td>Relative Path Traversal vulnerability in livebook-dev livebook allows a=
n attacker-authored notebook to write a file with attacker-controlled conte=
nt to an arbitrary path. A .livemd notebook can declare file_entries metada= ta, each entry carrying a name. Every path that creates a file entry throug=
h the user interface validates that name with Livebook.Notebook.validate_fi= le_entry_name/2, which requires a flat filename of alphanumerics, dashes, u= nderscores and dots, ending in an extension. The import path does not: Live= book.LiveMarkdown.Import.file_entry_metadata_to_attrs/1 in lib/livebook/liv= e_markdown/import.ex takes the name verbatim from the notebook source. For =
a URL-type file entry, Livebook.Session.file_entry_cache_file/2 in lib/live= book/session.ex resolves that name beneath the session's temporary director=
y without checking that the result stays inside it, and Livebook.FileSystem= .Utils.resolve_unix_like_path/2 collapses parent-directory segments while c= lamping only at the filesystem root. When the entry's content is requested = and no cached copy exists, Livebook fetches the entry's URL and writes the = response body to the resolved path, creating parent directories as needed. = The attacker therefore controls both the destination and the contents of th=
e written file, which may land anywhere the Livebook process can write. The=
same missing containment check is present in Livebook.Session.to_attachmen= t_file_entry/2. A victim who opens an attacker-supplied notebook and causes=
the entry to be fetched triggers the write within their own authenticated = session; the attacker needs no account on the target instance. URL-type ent= ries are also not placed under notebook stamping quarantine on import, so n=
o warning is shown. This issue affects livebook: from 0.11.0 before 0.18.7 = and from 0.19.0 before 0.19.9.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66881" target=3D= "_blank" rel=3D"noopener">CVE-2026-66881</a></td>
</tr>

<td class=3D"vendor-product">livebook-dev--livebook</td>
<td>Cross-Site Request Forgery (CSRF) vulnerability in livebook-dev liveboo=
k allows an attacker to authenticate a victim's browser session under the a= ttacker's own Livebook Teams identity. When Livebook is configured to use L= ivebook Teams for identity, Livebook.ZTA.LivebookTeams.handle_request/4 in = lib/livebook/zta/livebook_teams.ex handles the OAuth-style callback carryin=
g a teams_identity marker and a code parameter. The clause exchanges that c= ode for an access token and writes the token into the browser session witho=
ut verifying any value that ties the callback to the browser session that s= tarted the login. No state or nonce is generated when the flow is initiated=
: Livebook.Teams.Requests.create_auth_request/1 in lib/livebook/teams/reque= sts.ex sends an empty request body, so no per-attempt value is ever registe= red, and the callback clause has nothing to compare against. An attacker wh=
o holds membership in the same Livebook Teams organisation as the target in= stance can therefore begin the login flow themselves, retain the resulting = authorization code without redeeming it, and induce a victim to open a craf= ted URL carrying that code. The victim's browser completes the exchange and=
the resulting session is bound to the attacker's identity rather than the = victim's. The victim is not required to hold any particular privilege, and =
no credential belonging to the victim is involved. The vulnerability does n=
ot allow the attacker to authenticate as the victim. The consequence is tha=
t a user believes they are working in their own authenticated session while=
they are in fact operating as another identity. Work performed in that ses= sion is attributed to the attacker's account, and secrets, uploaded data, o=
r notebook results the victim produces are exposed to the attacker rather t= han kept in the victim's own account. The authorization code must be redeem=
ed within a short window after the login flow begins, which constrains the = timing of the attack but not its feasibility. This issue affects livebook: = from 0.15.0 before 0.18.7 and from 0.19.0 before 0.19.9.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66885" target=3D= "_blank" rel=3D"noopener">CVE-2026-66885</a></td>
</tr>

<td class=3D"vendor-product">livebook-dev--livebook</td>
<td>Not Failing Securely ('Failing Open') vulnerability in livebook-dev liv= ebook allows an unauthenticated network client to obtain full access to a L= ivebook server that enforces identity through Livebook Teams. A Livebook Ag= ent or App Server connected to Livebook Teams caches the identifier of the = deployment group it belongs to, and resolves that identifier against a loca= lly cached list of deployment groups on every request in order to decide wh= ether Teams identity enforcement is active. Livebook.Hubs.TeamClient.handle= _call/3 in lib/livebook/hubs/team_client.ex does not distinguish a deployme=
nt group that could not be resolved from one that was resolved with identit=
y enforcement switched off: the clause matches only the case where a group = was found with enforcement enabled, and falls through to a catch-all that r= eports enforcement as switched off for everything else. The two neighbourin=
g functions that decide user and application access resolve the same identi= fier and treat the same unresolved result as a denial. When the identity st= atus is reported as switched off, Livebook.ZTA.LivebookTeams.authenticate/3=
in lib/livebook/zta/livebook_teams.ex returns empty identity metadata and = allows the request to continue instead of halting it. LivebookWeb.UserPlug.= build_current_user/3 merges that empty metadata into a newly built user, wh= ose access type defaults to full access, and LivebookWeb.AuthPlug.authorize= d?/1 grants access to any user holding full access. The cached identifier b= ecomes unresolvable when the deployment group it refers to is deleted while=
the agent is not connected to receive the change, most concretely when a d= eployment group is deleted during the window in which an agent is disconnec= ted or reconnecting. The client removes the group from its cached list with= out clearing the identifier that refers to it. Any client able to reach the=
affected server over the network is then granted the same access as a full=
y privileged member of the organisation, including the ability to read note= books and configured secrets, execute code on the server's runtime, and dis= rupt its operation. This issue affects livebook: from 0.19.7 before 0.19.9.= </td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68746" target=3D= "_blank" rel=3D"noopener">CVE-2026-68746</a></td>
</tr>

<td class=3D"vendor-product">LogMyTrip--LogMyTrip</td>
<td>The LogMyTrip WordPress plugin through 1.9 does not sanitize and escape=
a value taken from a cookie before using it in a SQL query, allowing unaut= henticated users to perform SQL injection attacks on any page that renders = one of the LogMyTrip WordPress plugin through 1.9's shortcodes.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16572" target=3D= "_blank" rel=3D"noopener">CVE-2026-16572</a></td>
</tr>

<td class=3D"vendor-product">lud--oaskit</td>
<td>Improper Neutralization of Input During Web Page Generation (XSS) vulne= rability in lud oaskit allows reflected cross-site scripting via the defaul=
t HTML error handler. Oaskit.ErrorHandler.Default.format_reason/4 and Oaski= t.ErrorHandler.Default.reason_to_html/1 in lib/oaskit/error_handler/default= .ex render request-validation failures as an HTML page whenever the request=
's Accept header contains html, interpolating request-controlled strings in=
to that page without HTML escaping. The unescaped values are object keys ta= ken from a request body or from an object or deepObject query parameter, wh= ich appear in the JSON Schema error's instance path when a schema rejects t= hem (for example under additionalProperties: false), and the raw Content-Ty=
pe header, reflected in unsupported-media-type errors when it fails to pars=
e. Because browsers send Accept: text/html on ordinary top-level navigation=
, a crafted GET link is sufficient to trigger the error page; no form submi= ssion, custom Content-Type, or attacker-controlled script on the victim's s= ide is required. A payload such as filter[</code></h2><scrip= t>alert(document.domain)</script>]=3Dx terminates the enclosing ma= rkup and the injected script executes in the origin of the application usin=
g oaskit, giving it access to that origin's cookies, session, and same-orig=
in responses. Both HTML error rendering and the vulnerable handler are enab= led by default: Oaskit.Plugs.ValidateRequest defaults :html_errors to true = and :error_handler to Oaskit.ErrorHandler.Default, so applications followin=
g the documented usage are affected without any opt-in. This issue affects = oaskit: from 0.1.0 before 0.14.1.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66296" target=3D= "_blank" rel=3D"noopener">CVE-2026-66296</a></td>
</tr>

<td class=3D"vendor-product">LWS Optimize--LWS Optimize</td>
<td>The LWS Optimize WordPress plugin before 4.1.2 does not properly escape=
a value submitted through an unauthenticated analytics endpoint before sto= ring it and rendering it in an administrative dashboard, allowing unauthent= icated attackers to inject arbitrary web scripts that execute when an admin= istrator views the affected dashboard page.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16032" target=3D= "_blank" rel=3D"noopener">CVE-2026-16032</a></td>
</tr>

<td class=3D"vendor-product">LY Corporation--LINE client for Android</td>
<td>A code injection vulnerability exists in the LINE Android app prior to = version 26.7.2. The profile rendering component does not adequately validat=
e or sandbox externally supplied script content embedded in profile templat= es. As a result, an attacker who is able to place crafted content in a prof= ile could cause unintended code to execute with the application's privilege=
s when a victim views that profile. A server-side mitigation has been deplo= yed that also protects existing Android clients that have not been updated =
to version 26.7.2.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16881" target=3D= "_blank" rel=3D"noopener">CVE-2026-16881</a></td>
</tr>

<td class=3D"vendor-product">M-Files Corporation--M-Files Server</td> <td>Denial-of-service vulnerability in M-Files Server versions before=C2=A0= 26.5.16015.3 allows an authenticated admin user to cause the M-Files Server=
process to crash and fail to restart.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-0931" target=3D"= _blank" rel=3D"noopener">CVE-2026-0931</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In hevc decoder, there is a possible out of bounds write due to an inte= ger overflow. This could lead to remote escalation of privilege if a malici= ous actor has already obtained the System privilege. User interaction is no=
t needed for exploitation. Patch ID: ALPS11104718; Issue ID: MSV-8297.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20464" target=3D= "_blank" rel=3D"noopener">CVE-2026-20464</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In wlan AP driver, there is a possible out of bounds write due to a mis= sing bounds check. This could lead to remote (proximal/adjacent) escalation=
of privilege with no additional execution privileges needed. User interact= ion is not needed for exploitation. Patch ID: WCNCR00489200; Issue ID: MSV-= 7834.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20465" target=3D= "_blank" rel=3D"noopener">CVE-2026-20465</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In sec boot, there is a possible escalation of privilege due to a heap = buffer overflow. This could lead to local escalation of privilege, if an at= tacker has physical access to the device, with no additional execution priv= ileges needed. User interaction is not needed for exploitation. Patch ID: A= UTO00845351 (Note: For MT2737) / ALPS11072643 (Note: For MT6880, MT6890, MT= 6990); Issue ID: MSV-6929.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20466" target=3D= "_blank" rel=3D"noopener">CVE-2026-20466</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In apusys, there is a possible escalation of privilege due to a missing=
bounds check. This could lead to local escalation of privilege if a malici= ous actor has already obtained the System privilege. User interaction is no=
t needed for exploitation. Patch ID: AUTO00837766; Issue ID: MSV-6767.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20467" target=3D= "_blank" rel=3D"noopener">CVE-2026-20467</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In apusys, there is a possible escalation of privilege due to a confuse=
d deputy. This could lead to local escalation of privilege if a malicious a= ctor has already obtained the System privilege. User interaction is not nee= ded for exploitation. Patch ID: AUTO00833804; Issue ID: MSV-6741.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20468" target=3D= "_blank" rel=3D"noopener">CVE-2026-20468</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In trusted_mem, there is a possible escalation of privilege due to impr= oper input validation. This could lead to local escalation of privilege if =
a malicious actor has already obtained the System privilege. User interacti=
on is needed for exploitation. Patch ID: AUTO00834868; Issue ID: MSV-6533.<=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20469" target=3D= "_blank" rel=3D"noopener">CVE-2026-20469</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Telephony, there is a possible information disclosure due to a missi=
ng permission check. This could lead to local information disclosure with n=
o additional execution privileges needed. User interaction is not needed fo=
r exploitation. Patch ID: ALPS11086431; Issue ID: MSV-8189.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20470" target=3D= "_blank" rel=3D"noopener">CVE-2026-20470</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In DA, there is a possible out of bounds write due to a missing bounds = check. This could lead to local denial of service, if an attacker has physi= cal access to the device, with no additional execution privileges needed. U= ser interaction is not needed for exploitation. Patch ID: ALPS10991588 (Not=
e: For MT6880, MT6890, MT6990, MT6988, MT6986, MT6813) / AUTO00851171 (Note=
: For MT2735, MT2737); Issue ID: MSV-7790.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20471" target=3D= "_blank" rel=3D"noopener">CVE-2026-20471</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In TFA, there is a possible out of bounds write due to a missing bounds=
check. This could lead to local denial of service if a malicious actor has=
already obtained the System privilege. User interaction is not needed for = exploitation. Patch ID: ALPS10991467; Issue ID: MSV-7764.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20472" target=3D= "_blank" rel=3D"noopener">CVE-2026-20472</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In display, there is a possible memory corruption due to use after free=
. This could lead to local escalation of privilege if a malicious actor has=
already obtained the System privilege. User interaction is not needed for = exploitation. Patch ID: ALPS11019722; Issue ID: MSV-7759.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20473" target=3D= "_blank" rel=3D"noopener">CVE-2026-20473</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In display, there is a possible escalation of privilege due to a race c= ondition. This could lead to local escalation of privilege if a malicious a= ctor has already obtained the System privilege. User interaction is not nee= ded for exploitation. Patch ID: ALPS11019183; Issue ID: MSV-7758.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20474" target=3D= "_blank" rel=3D"noopener">CVE-2026-20474</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In display, there is a possible out of bounds write due to a missing bo= unds check. This could lead to local escalation of privilege if a malicious=
actor has already obtained the System privilege. User interaction is not n= eeded for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7748.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20475" target=3D= "_blank" rel=3D"noopener">CVE-2026-20475</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In ccci, there is a possible out of bounds read due to a missing bounds=
check. This could lead to local denial of service with User execution priv= ileges needed. User interaction is not needed for exploitation. Patch ID: A= LPS10981532; Issue ID: MSV-7660.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20476" target=3D= "_blank" rel=3D"noopener">CVE-2026-20476</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In display, there is a possible out of bounds write due to a missing bo= unds check. This could lead to local escalation of privilege if a malicious=
actor has already obtained the System privilege. User interaction is not n= eeded for exploitation. Patch ID: ALPS11009963; Issue ID: MSV-7658.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20477" target=3D= "_blank" rel=3D"noopener">CVE-2026-20477</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Audio HAL, there is a possible out of bounds write due to a heap buf= fer overflow. This could lead to local denial of service with User executio=
n privileges needed. User interaction is not needed for exploitation. Patch=
ID: ALPS10981454 (Note: For MT6880, MT6890, MT6988, MT6990) / AUTO00851293=
(Note: For MT2735, MT2737); Issue ID: MSV-7638.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20478" target=3D= "_blank" rel=3D"noopener">CVE-2026-20478</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Modem, there is a possible out of bounds read due to a missing bound=
s check. This could lead to remote denial of service, if a UE has connected=
to a rogue base station controlled by the attacker, with no additional exe= cution privileges needed. User interaction is not needed for exploitation. = Patch ID: MOLY00741071; Issue ID: MSV-7620.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20479" target=3D= "_blank" rel=3D"noopener">CVE-2026-20479</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Audio HAL, there is a possible out of bounds write due to a heap buf= fer overflow. This could lead to local denial of service with User executio=
n privileges needed. User interaction is not needed for exploitation. Patch=
ID: ALPS10960023 (Note: For MT6880, MT6890, MT6980D, MT6988, MT6990) / AUT= O00851189 (Note: For MT2735, MT3737); Issue ID: MSV-7586.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20480" target=3D= "_blank" rel=3D"noopener">CVE-2026-20480</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In geniezone, there is a possible out of bounds write due to a missing = bounds check. This could lead to local escalation of privilege if a malicio=
us actor has already obtained the System privilege. User interaction is not=
needed for exploitation. Patch ID: ALPS10965373; Issue ID: MSV-6935.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20481" target=3D= "_blank" rel=3D"noopener">CVE-2026-20481</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In wlan STA FW, there is a possible system becoming unresponsive due to=
logging. This could lead to remote (proximal/adjacent) denial of service w= ith no additional execution privileges needed. User interaction is not need=
ed for exploitation. Patch ID: WCNCR00486814; Issue ID: MSV-6824.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20482" target=3D= "_blank" rel=3D"noopener">CVE-2026-20482</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Telephony, there is a possible escalation of privilege due to a miss= ing permission check. This could lead to local escalation of privilege with=
no additional execution privileges needed. User interaction is not needed = for exploitation. Patch ID: ALPS11087526; Issue ID: MSV-8243.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20483" target=3D= "_blank" rel=3D"noopener">CVE-2026-20483</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In TFA, there is a possible information disclosure due to a missing per= mission check. This could lead to local information disclosure if a malicio=
us actor has already obtained the System privilege. User interaction is not=
needed for exploitation. Patch ID: ALPS11053160; Issue ID: MSV-8004.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20484" target=3D= "_blank" rel=3D"noopener">CVE-2026-20484</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In HFRP, there is a possible out of bounds write due to a missing bound=
s check. This could lead to local escalation of privilege if a malicious ac= tor has already obtained the System privilege. User interaction is not need=
ed for exploitation. Patch ID: ALPS11049569; Issue ID: MSV-7931.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20485" target=3D= "_blank" rel=3D"noopener">CVE-2026-20485</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In imgsensor, there is a possible application crash due to incorrect er= ror handling. This could lead to local escalation of privilege if a malicio=
us actor has already obtained the System privilege. User interaction is not=
needed for exploitation. Patch ID: ALPS11012302; Issue ID: MSV-7833.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20486" target=3D= "_blank" rel=3D"noopener">CVE-2026-20486</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In display, there is a possible information disclosure due to a missing=
bounds check. This could lead to local information disclosure if a malicio=
us actor has already obtained the System privilege. User interaction is not=
needed for exploitation. Patch ID: ALPS11004276; Issue ID: MSV-7757.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20488" target=3D= "_blank" rel=3D"noopener">CVE-2026-20488</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In display, there is a possible information disclosure due to an intege=
r overflow. This could lead to local information disclosure if a malicious = actor has already obtained the System privilege. User interaction is not ne= eded for exploitation. Patch ID: ALPS11004274; Issue ID: MSV-7749.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20489" target=3D= "_blank" rel=3D"noopener">CVE-2026-20489</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In ccci, there is a possible out of bounds read due to a missing bounds=
check. This could lead to local denial of service if a malicious actor has=
already obtained the System privilege. User interaction is not needed for = exploitation. Patch ID: ALPS10981501; Issue ID: MSV-7669.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20490" target=3D= "_blank" rel=3D"noopener">CVE-2026-20490</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In med, there is a possible out of bounds write due to an incorrect bou= nds check. This could lead to local denial of service with User execution p= rivileges needed. User interaction is not needed for exploitation. Patch ID=
: ALPS10981478 (Note: For MT6890, MT6990, MT6988) / AUTO00851173 (Note: For=
MT2735, MT2737); Issue ID: MSV-7652.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20491" target=3D= "_blank" rel=3D"noopener">CVE-2026-20491</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Audio HAL, there is a possible system becoming unresponsive due to a=
race condition. This could lead to local denial of service with User execu= tion privileges needed. User interaction is not needed for exploitation. Pa= tch ID: ALPS10960026 (Note: For MT6880, MT6890, MT6990, MT6988) / AUTO00851= 250 (Note: For MT2735, MT2737); Issue ID: MSV-7583.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20492" target=3D= "_blank" rel=3D"noopener">CVE-2026-20492</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In wifi, there is a possible out of bounds write due to a missing bound=
s check. This could lead to local denial of service if a malicious actor ha=
s already obtained the System privilege. User interaction is not needed for=
exploitation. Patch ID: BORA00154903; Issue ID: MSV-7575.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20493" target=3D= "_blank" rel=3D"noopener">CVE-2026-20493</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In wifi, there is a possible out of bounds read due to a missing bounds=
check. This could lead to local information disclosure if a malicious acto=
r has already obtained the System privilege. User interaction is not needed=
for exploitation. Patch ID: ALPS10960006 / BORA00155314, BORA00155001, BOR= A00154907; Issue ID: MSV-7570.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20494" target=3D= "_blank" rel=3D"noopener">CVE-2026-20494</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In Bluetooth driver, there is a possible permission bypass due to a mis= sing permission check. This could lead to local escalation of privilege wit=
h User execution privileges needed. User interaction is not needed for expl= oitation. Patch ID: WCNCR00488300; Issue ID: MSV-7296.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20495" target=3D= "_blank" rel=3D"noopener">CVE-2026-20495</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In geniezone, there is a possible out of bounds read due to a missing b= ounds check. This could lead to local information disclosure if a malicious=
actor has already obtained the System privilege. User interaction is not n= eeded for exploitation. Patch ID: ALPS11036877; Issue ID: MSV-7132.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20496" target=3D= "_blank" rel=3D"noopener">CVE-2026-20496</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In geniezone, there is a possible out of bounds write due to a missing = bounds check. This could lead to local escalation of privilege if a malicio=
us actor has already obtained the System privilege. User interaction is not=
needed for exploitation. Patch ID: ALPS10965550 / ALPS11393405; Issue ID: = MSV-6941.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20497" target=3D= "_blank" rel=3D"noopener">CVE-2026-20497</a></td>
</tr>

<td class=3D"vendor-product">MediaTek, Inc.--MediaTek chipset</td>
<td>In geniezone, there is a possible escalation of privilege due to a miss= ing permission check. This could lead to local escalation of privilege if a=
malicious actor has already obtained the System privilege. User interactio=
n is not needed for exploitation. Patch ID: ALPS10900493; Issue ID: MSV-676= 5.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-20498" target=3D= "_blank" rel=3D"noopener">CVE-2026-20498</a></td>
</tr>

<td class=3D"vendor-product">Meow Gallery--Meow Gallery</td>
<td>The Meow Gallery WordPress plugin before 5.5.2 does not escape an attac= hment's alt text before outputting it into an attribute of the link it buil=
ds for linked galleries, allowing users with the Author role or above to st= ore a JavaScript payload that executes in the browser of any visitor (inclu= ding administrators) who views a post containing such a gallery.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15386" target=3D= "_blank" rel=3D"noopener">CVE-2026-15386</a></td>
</tr>

<td class=3D"vendor-product">mermaid-js--mermaid</td>
<td>Mermaid is a JavaScript tool that uses Markdown-inspired text to create=
and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid is vu= lnerable to CSS injection via sibling combinator selectors generated from d= iagram-supplied class or id names. An attacker who can supply diagram text = can inject arbitrary CSS into the rendered page, potentially altering the a= ppearance or behavior of unrelated page elements. This issue is fixed in ve= rsions 10.9.8 and 11.16.1.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-50159" target=3D= "_blank" rel=3D"noopener">CVE-2026-50159</a></td>
</tr>

<td class=3D"vendor-product">mermaid-js--mermaid</td>
<td>Mermaid is a JavaScript tool that uses Markdown-inspired text to create=
and modify diagrams and charts. From version 10.6.0 until 10.9.8 and 11.16= .1, Mermaid XY Charts are vulnerable to an infinite loop denial of service =
in the setXAxisRangeData function when configuring an X-Axis with invalid p= arameters. Because each loop iteration appends an element to an array, this=
generally causes a RangeError to appear after a few seconds, but it may in= stead cause the page or JavaScript process to crash from memory exhaustion,=
depending on the environment. This issue is fixed in versions 10.9.8 and 1= 1.16.1.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71436" target=3D= "_blank" rel=3D"noopener">CVE-2026-71436</a></td>
</tr>

<td class=3D"vendor-product">mermaid-js--mermaid</td>
<td>Mermaid is a JavaScript tool that uses Markdown-inspired text to create=
and modify diagrams and charts. From version 11.5.0 until 11.16.1, Mermaid=
Architecture Diagrams are vulnerable to prototype pollution when a diagram=
defines a group with an id of __proto__. Because the group id is used dire= ctly as an object property key without validation, an attacker who can supp=
ly diagram text can pollute Object.prototype, potentially affecting the beh= avior of the embedding application. This issue is fixed in version 11.16.1.= </td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71437" target=3D= "_blank" rel=3D"noopener">CVE-2026-71437</a></td>
</tr>

<td class=3D"vendor-product">mermaid-js--mermaid</td>
<td>Mermaid is a JavaScript tool that uses Markdown-inspired text to create=
and modify diagrams and charts. Prior to 10.9.8 and 11.16.1, Mermaid's con= figuration setters (mermaid.initialize, mermaidAPI.setConfig, and mermaidAP= I.updateSiteConfig) merge caller-supplied configuration into Mermaid's inte= rnal config using the assignWithDepth deep-merge helper, which is vulnerabl=
e to prototype pollution. This is only exploitable if an application forwar=
ds untrusted data directly into one of these configuration entry points, wh= ich is outside their documented usage; diagram-supplied configuration (e.g.=
%%{init: {}}%% or YAML frontmatter) is not affected. This issue is fixed i=
n versions 10.9.8 and 11.16.1.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71438" target=3D= "_blank" rel=3D"noopener">CVE-2026-71438</a></td>
</tr>

<td class=3D"vendor-product">mermaid-js--mermaid</td>
<td>Mermaid is a JavaScript tool that uses Markdown-inspired text to create=
and modify diagrams and charts. From version 11.6.0 until 11.16.1, Mermaid=
Radar Diagrams allow arbitrary large values for the ticks parameter, which=
can cause high CPU usage and freeze the rendering webpage or JavaScript pr= ocess for long periods of time, potentially until the process is killed fro=
m memory exhaustion. This issue is fixed in version 11.16.1.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71439" target=3D= "_blank" rel=3D"noopener">CVE-2026-71439</a></td>
</tr>

<td class=3D"vendor-product">MervinPraison--PraisonAI</td>
<td>PraisonAI is a multi-agent teams system. In versions 1.5.128 through 1.= 6.57, the praisonaiagents.tools.web_crawl_tools.web_crawl() function is vul= nerable to server-side request forgery. While it validates the initially su= pplied URL and blocks direct loopback and private destinations, its default=
httpx fallback uses httpx.Client(follow_redirects=3DTrue) and does not rev= alidate intermediate or final redirect targets. An attacker who can influen=
ce a URL passed to web_crawl(), directly or through an agent or tool workfl= ow, can supply an attacker-controlled public URL that passes the initial ho=
st check and then redirects to loopback, private-network, or cloud metadata=
endpoints reachable from the host, with the redirected response body retur= ned in the web_crawl() result. This constitutes an incomplete fix and patch=
bypass for the previously disclosed web_crawl SSRF class (GHSA-qq9r-63f6-v= 542 / CVE-2026-40160 and GHSA-8f4v-xfm9-3244), since the guard validates on=
ly the requested URL and not the destination actually fetched after redirec= tion. This issue has been fixed in version 1.6.58.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55523" target=3D= "_blank" rel=3D"noopener">CVE-2026-55523</a></td>
</tr>

<td class=3D"vendor-product">miniOrange 2FA--miniOrange 2FA</td>
<td>The miniOrange 2FA WordPress plugin before 6.2.7 does not restrict who = can trigger its second-factor configuration OTP send, nor bind the OTP reci= pient to the enrolling user's own address, allowing a low-privileged user t=
o send one-time-passcode emails to arbitrary recipients and to exhaust the = site's metered OTP allowance, preventing legitimate users from receiving th= eir second-factor codes.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16035" target=3D= "_blank" rel=3D"noopener">CVE-2026-16035</a></td>
</tr>

<td class=3D"vendor-product">miniOrange 2FA--miniOrange 2FA</td>
<td>The miniOrange 2FA WordPress plugin before 6.2.7 does not bind the seco=
nd factor being configured during the pre-login two-factor challenge to the=
target account's existing factor, allowing an attacker who knows a user's = password to rebind that user's second factor to an attacker-controlled dest= ination, complete the challenge, and take over the account, including admin= istrator accounts.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16036" target=3D= "_blank" rel=3D"noopener">CVE-2026-16036</a></td>
</tr>

<td class=3D"vendor-product">misp--cti-transmute</td>
<td>CTI-Transmute is affected by a server-side request forgery vulnerabilit=
y in the evaluation report PDF-generation functionality. User-controlled CT=
I content, including conversion names, descriptions, and comments, is conve= rted from Markdown to HTML and rendered as a PDF using WeasyPrint. Before t=
he patch, the renderer used WeasyPrint's default URL-fetching behavior with= out restricting the protocols or destinations that could be referenced by t=
he generated HTML. An attacker able to supply content included in an evalua= tion report could inject crafted resource references using schemes such as = http://, https://, or file://. When the report was rendered, CTI-Transmute = could fetch these resources using the application server's network connecti= vity and filesystem privileges. Successful exploitation could allow an atta= cker to: * access services available only from the CTI-Transmute server or = its internal network; * probe internal hosts and service endpoints; * retri= eve local files readable by the application process; and * expose fetched c= ontent through the generated PDF, depending on the referenced resource type=
and rendering context. The vulnerability is corrected by providing WeasyPr= int with a restrictive URL fetcher that permits only self-contained data: U= RIs. The externally hosted Google Fonts stylesheet was also removed so that=
PDF generation performs no intentional network or filesystem fetches.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69078" target=3D= "_blank" rel=3D"noopener">CVE-2026-69078</a></td>
</tr>

<td class=3D"vendor-product">misp--cti-transmute</td>
<td>CTI-Transmute contains an uncontrolled resource-consumption vulnerabili=
ty in the unauthenticated /activity_timeline endpoint. The endpoint accepts=
a user-controlled days query parameter that was not restricted to a reason= able range. A remote, unauthenticated attacker could submit an excessively = large value for this parameter, causing the application to retrieve and pro= cess activity data over an arbitrarily large period. This could consume exc= essive database, CPU, or memory resources, delay the processing of concurre=
nt requests, or trigger an internal server error. Repeated requests could f= urther degrade the availability of the CTI-Transmute website. The vulnerabi= lity is corrected by clamping the requested timeline range to a minimum of = one day and a maximum of 1,095 days.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69079" target=3D= "_blank" rel=3D"noopener">CVE-2026-69079</a></td>
</tr>

<td class=3D"vendor-product">misp--cti-transmute</td>
<td>CTI-Transmute contained a cross-site request forgery vulnerability in t=
he administrative user deletion functionality. The /account/delete/<id&g=
t; endpoint accepted HTTP GET requests for an operation that modified appli= cation state. An unauthenticated remote attacker could construct a maliciou=
s link or embed a request targeting this endpoint and induce an authenticat=
ed CTI-Transmute administrator to visit the attacker-controlled content. If=
the administrator had an active session, the browser would automatically i= nclude the administrator's session credentials, causing the selected user a= ccount to be deleted without the administrator intentionally confirming the=
operation. Successful exploitation requires interaction from a currently a= uthenticated administrator who has permission to delete users. The attacker=
does not need a CTI-Transmute account or administrative privileges because=
the forged request executes using the victim administrator's session. The = vulnerability could allow an attacker to delete arbitrary user accounts, re= sulting in unauthorized modification of application state and denial of acc= ess for affected users. Depending on whether administrators can delete othe=
r administrators or the final administrative account, exploitation could al=
so disrupt administration of the CTI-Transmute instance. The patch resolves=
the issue by restricting the deletion endpoint to HTTP POST requests and s= ubmitting the deletion through a form containing a CSRF token.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69082" target=3D= "_blank" rel=3D"noopener">CVE-2026-69082</a></td>
</tr>

<td class=3D"vendor-product">misp--cti-transmute</td>
<td>CTI-Transmute contains a stored cross-site scripting vulnerability caus=
ed by insufficient neutralization of Vue template expression delimiters in = server-rendered user-controlled data. An unauthenticated attacker can creat=
e a public conversion whose name or description contains a malicious Vue ex= pression using the application's configured [[ ... ]] delimiters. User prof= ile names may provide an additional injection vector. Although Jinja HTML e= scaping is applied, the resulting value is subsequently included in a DOM r= egion compiled by Vue. Vue interprets the attacker-controlled value as a te= mplate expression rather than ordinary text. By accessing the JavaScript Fu= nction constructor from within the expression, an attacker can execute arbi= trary JavaScript in the security context of the CTI-Transmute origin. The a= pplication's nonce-based Content Security Policy does not prevent exploitat= ion because the Vue runtime compiler requires the unsafe-eval policy except= ion. The malicious payload is stored by the application and executed whenev=
er another user opens an affected page, such as the public conversion detai=
l page. The victim may be a normal user or an administrator. Successful exp= loitation could allow the attacker to: * Access data available to the victi=
m through the application. * Extract API keys, tokens, or other sensitive i= nformation exposed to the page. * Perform authenticated actions using the v= ictim's session. * Modify conversions or other application data. * Escalate=
the impact by targeting an administrator. A demonstrated payload can use [= ].constructor.constructor(...) to obtain the JavaScript Function constructo=
r and execute arbitrary code. The regression tests also show that a short f= irst-stage payload could retrieve an uncapped conversion description and ev= aluate a larger second-stage payload. The patch addresses the vulnerability=
by registering a global Jinja finalize hook that inserts a zero-width Unic= ode word joiner inside every Vue delimiter found in server-rendered values.=
This prevents Vue from recognizing the values as template expressions whil=
e preserving their visible representation.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71502" target=3D= "_blank" rel=3D"noopener">CVE-2026-71502</a></td>
</tr>

<td class=3D"vendor-product">misskey-dev--misskey</td>
<td>Misskey is an open source, federated social media platform. Versions 20= 25.3.2 and later, but prior to 2026.5.4, contain a vulnerability where a la=
ck of proper permission checks allows access to certain data points from th=
e Direct Messages (formerly Chat) feature, regardless of account permission=
s. This vulnerability occurs whether or not federation is enabled. Notes cr= eated with "specified" visibility (formerly "direct" visibility) are not af= fected. This issue has been fixed in version 2026.5.4.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46712" target=3D= "_blank" rel=3D"noopener">CVE-2026-46712</a></td>
</tr>

<td class=3D"vendor-product">misskey-dev--misskey</td>
<td>Misskey is an open source, federated social media platform. Versions 12= .37.0 and later, but prior to 2026.5.4, contain a vulnerability in the JSON= -LD signature validation and compaction process that allows spoofed activit= ies to be accepted as valid. This issue has been fixed in version 2026.5.4.= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46713" target=3D= "_blank" rel=3D"noopener">CVE-2026-46713</a></td>
</tr>

<td class=3D"vendor-product">misskey-dev--misskey</td>
<td>Misskey is an open source, federated social media platform. IVersions 8= .63.0 and later, but prior to 2026.5.4, contain a vulnerability that can ca= use the Misskey web client to slow down or crash when it applies a malforme=
d theme. This issue has been fixed in version 2026.5.4.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46714" target=3D= "_blank" rel=3D"noopener">CVE-2026-46714</a></td>
</tr>

<td class=3D"vendor-product">misskey-dev--misskey</td>
<td>Misskey is an open source, federated social media platform. Versions 12= .37.0 and later, but prior to 2026.5.4, are vulnerable to timing attacks du= ring JSON-LD signature validation and the compaction process. Because the J= SON-LD parsing context is not shared between signature verification and sub= sequent processing, the application may trust information that should not b=
e trusted, resulting in a time-of-check to time-of-use (TOCTOU) flaw. This = allows an attacker to have fraudulent activities accepted as valid, leading=
to a loss of integrity. This issue has been fixed in version 2026.5.4.</td=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47746" target=3D= "_blank" rel=3D"noopener">CVE-2026-47746</a></td>
</tr>

<td class=3D"vendor-product">misskey-dev--misskey</td>
<td>Misskey is an open source, federated social media platform. All Misskey=
servers running versions 2024.5.0 and later, but prior to 2026.5.4, contai=
n a vulnerability in the Server Announcements API where insufficient permis= sion checks allow attackers to access limited portions of data that they no= rmally couldn't view. This vulnerability occurs whether or not federation i=
s enabled. This issue has been fixed in version 2026.5.4.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48115" target=3D= "_blank" rel=3D"noopener">CVE-2026-48115</a></td>
</tr>

<td class=3D"vendor-product">MLSImport: IDX Plugin & MLS Plugin for Rea=
l Estate Listings--MLSImport: IDX Plugin & MLS Plugin for Real Estate L= istings</td>
<td>The MLSImport: IDX Plugin & MLS Plugin for Real Estate Listings Wor= dPress plugin before 7.0.4 does not have authorisation and CSRF checks in o=
ne of its AJAX actions, allowing any authenticated user, such as a subscrib= er, to read the contents of the MLSImport: IDX Plugin & MLS Plugin for = Real Estate Listings WordPress plugin before 7.0.4's import log file as wel=
l as import-related metadata belonging to arbitrary posts.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17515" target=3D= "_blank" rel=3D"noopener">CVE-2026-17515</a></td>
</tr>

<td class=3D"vendor-product">MonsterInsights--MonsterInsights</td>
<td>The MonsterInsights WordPress plugin before 11.1.0 does not correctly v= alidate the signature on one of its unauthenticated AJAX actions: when the = MonsterInsights WordPress plugin before 11.1.0 is not connected to Google A= nalytics the HMAC signing key is empty, which lets unauthenticated attacker=
s forge a valid signature and overwrite a MonsterInsights WordPress plugin = before 11.1.0 configuration value, disrupting the MonsterInsights WordPress=
plugin before 11.1.0's server-side analytics in Manual GA4 mode.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-11366" target=3D= "_blank" rel=3D"noopener">CVE-2026-11366</a></td>
</tr>

<td class=3D"vendor-product">Mozilla--Firefox</td>
<td>Information disclosure in Firefox for Android and Firefox Focus for And= roid. This vulnerability was fixed in Firefox 153.0.3.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18809" target=3D= "_blank" rel=3D"noopener">CVE-2026-18809</a></td>
</tr>

<td class=3D"vendor-product">MStore API--MStore API</td>
<td>The MStore API WordPress plugin before 4.21.0 does not correctly verify=
the cryptographic signature of the token used to authenticate its phone-ba= sed login, allowing unauthenticated attackers who know a registered user's = phone number to forge a token and take over that user's account, including = administrator accounts.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16030" target=3D= "_blank" rel=3D"noopener">CVE-2026-16030</a></td>
</tr>

<td class=3D"vendor-product">MStore API--MStore API</td>
<td>The MStore API WordPress plugin before 4.21.0 does not verify the payme=
nt with the payment gateway before marking an order as paid on several of i=
ts payment-completion endpoints, allowing an unauthenticated attacker to ma=
rk an arbitrary order fully paid without paying and obtain goods or service=
s for free.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16038" target=3D= "_blank" rel=3D"noopener">CVE-2026-16038</a></td>
</tr>

<td class=3D"vendor-product">MStore API--MStore API</td>
<td>The MStore API WordPress plugin before 4.21.0 does not restrict its ven= dor-orders endpoint to the caller's own orders, allowing any authenticated = user, including Subscribers, to read every WooCommerce order in the store t= ogether with each customer's personal information.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16039" target=3D= "_blank" rel=3D"noopener">CVE-2026-16039</a></td>
</tr>

<td class=3D"vendor-product">MStore API--MStore API</td>
<td>The MStore API WordPress plugin before 4.21.0 does not perform authoriz= ation or purchase-ownership checks on its REST product-review creation rout=
e, allowing an unauthenticated attacker to create WooCommerce product revie=
ws with an attacker-chosen reviewer name, email and star rating on stores c= onfigured to accept reviews only from verified owners.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16041" target=3D= "_blank" rel=3D"noopener">CVE-2026-16041</a></td>
</tr>

<td class=3D"vendor-product">MultiVendorX--MultiVendorX</td>
<td>The MultiVendorX WordPress plugin before 5.0.11 does not verify that th=
e store targeted through its REST API belongs to the requesting vendor, all= owing an authenticated vendor (Store Owner and above) to view, take over, p= ermanently delete, or modify any other vendor's store on the marketplace.</=

<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16605" target=3D= "_blank" rel=3D"noopener">CVE-2026-16605</a></td>
</tr>

<td class=3D"vendor-product">MultiVendorX--MultiVendorX</td>
<td>The MultiVendorX WordPress plugin before 5.0.11 does not verify that th=
e requested store belongs to the current user in one of its REST API endpoi= nts, allowing any vendor-level user to read other vendors' commission and f= inancial data.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16746" target=3D= "_blank" rel=3D"noopener">CVE-2026-16746</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>An issue in the HS_MonitorApplications() component of NASA cFS v7.0.1 a= llows attackers to force the processor to reset via supplying a crafted HS.= AppMon_Tbl entry.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67969" target=3D= "_blank" rel=3D"noopener">CVE-2026-67969</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>Incorrect access control in the DS_SetDestPathCmd() component of NASA c=
FS v7.0.1 allows attackers to access sensitive components via a path traver= sal.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67970" target=3D= "_blank" rel=3D"noopener">CVE-2026-67970</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>An issue in the CF_CFDP_RecvMd() component of NASA cFS v7.0.1 allows at= tackers to contrl where received content and data is stored, possibly leadi=
ng to an information disclosure.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67972" target=3D= "_blank" rel=3D"noopener">CVE-2026-67972</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>An issue in the CFDP receive path of NASA cFS v7.0.1 allows attackers t=
o cause a Denial of Service (DoS) via replaying final CFDP PDUs.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67973" target=3D= "_blank" rel=3D"noopener">CVE-2026-67973</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>A parser boundary flaw in the Software Bus Network (SBN) application's = peer subscription message handling in NASA cFS v7.0.1 allows attackers to c= ause a Denial of Service (DoS) via sending a crafted packet.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67974" target=3D= "_blank" rel=3D"noopener">CVE-2026-67974</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>Incorrect access control in NASA cFS v7.0.1 allows attackers to arbitra= rily remove low-index subscriptions and add new streams via sending TO_LAB = add/remove subscription commands.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67975" target=3D= "_blank" rel=3D"noopener">CVE-2026-67975</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>An issue in the SBN UDP interface of NASA cFS v7.0.1 allows attackers t=
o cause a Denial of Service (DoS) via transmitting a crafted SBN frame.</td=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67978" target=3D= "_blank" rel=3D"noopener">CVE-2026-67978</a></td>
</tr>

<td class=3D"vendor-product">NASA cFS--NASA cFS v7.0.1</td>
<td>Incorrect access control in the Executive Services dynamic application = start path component of NASA cFS v7.0.1 allows attackers to execute arbitra=
ry code via placing a shared object on target storage.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67979" target=3D= "_blank" rel=3D"noopener">CVE-2026-67979</a></td>
</tr>

<td class=3D"vendor-product">neo4j--Enterprise Edition</td>
<td>Neo4j's Bolt modern handshake decoder treats an overlong capability bit=
mask the same way it treats a truncated bit mask. When an unauthenticated = client sends a selected protocol version followed by 32 continuation bytes =
in the capability mask, the decoder resets the reader index and waits for m= ore bytes instead of rejecting the protocol message and closing the channel=
. Because the same unread bytes remain at the front of the decoder buffer, = appending a terminating byte later does not recover the connection. The dec= oder re-reads the same first 32 continuation bytes, returns without produci=
ng a handshake-finalization message, and leaves the channel open. This can =
be triggered before authentication by any client that can reach the Bolt co= nnector.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14587" target=3D= "_blank" rel=3D"noopener">CVE-2026-14587</a></td>
</tr>

<td class=3D"vendor-product">neo4j--graphql</td> <td>@neo4j/graphql=C2=A0library versions prior to 7.5.6 fail to verify the = authenticity of a client-supplied, pre-decoded JWT object passed through Gr= aphQL subscription=C2=A0connectionParams.=C2=A0As a result, any unauthentic= ated remote client that can open a GraphQL-over-WebSocket connection can fo= rge arbitrary JWT claims (e.g.=C2=A0sub,=C2=A0roles) in=C2=A0connectionPara= ms.jwt=C2=A0and have them accepted as authenticated identity for the purpos=
es of=C2=A0@authentication=C2=A0and=C2=A0@subscriptionsAuthorization=C2=A0d= irective evaluation. This allows a fully unauthenticated attacker to receiv=
e subscription events that should be restricted to specific authenticated r= oles/users. Upgrade the library to versions 7.5.6+ or 5.12.14+. v6 is end-o= f-life and will not receive a fix.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-5423" target=3D"= _blank" rel=3D"noopener">CVE-2026-5423</a></td>
</tr>

<td class=3D"vendor-product">Nested Pages--Nested Pages</td>
<td>The Nested Pages WordPress plugin before 3.2.15 does not properly escap=
e post titles before outputting them into HTML attributes on an administrat= ive listing screen, allowing users with the Editor role (or Contributor/Aut= hor when the Nested Pages WordPress plugin before 3.2.15 is enabled for the=
post type) to inject arbitrary JavaScript that executes in the session of = any higher-privileged user who views that screen.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15233" target=3D= "_blank" rel=3D"noopener">CVE-2026-15233</a></td>
</tr>

<td class=3D"vendor-product">Newsletters--Newsletters</td>
<td>The Newsletters WordPress plugin before 4.16 does not restrict the clas= ses allowed when unserialising a value taken from a public form submission,=
allowing unauthenticated attackers to inject arbitrary PHP objects.</td> <td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16267" target=3D= "_blank" rel=3D"noopener">CVE-2026-16267</a></td>
</tr>

<td class=3D"vendor-product">Newsletters--Newsletters</td>
<td>The Newsletters WordPress plugin before 4.16 does not authenticate or v= alidate a bounce-processing request before fetching a user-supplied URL on = the server side, allowing unauthenticated attackers to make the site issue = requests to arbitrary internal or external hosts.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16268" target=3D= "_blank" rel=3D"noopener">CVE-2026-16268</a></td>
</tr>

<td class=3D"vendor-product">Newsletters--Newsletters</td>
<td>The Newsletters WordPress plugin before 4.16 does not strictly compare = its API authentication key, allowing unauthenticated attackers to bypass th=
e API authentication via type juggling and perform privileged actions such =
as modifying subscriber records and sending emails, when the optional API h=
as been enabled.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16269" target=3D= "_blank" rel=3D"noopener">CVE-2026-16269</a></td>
</tr>

<td class=3D"vendor-product">Nexter Blocks--Nexter Blocks</td>
<td>The Nexter Blocks WordPress plugin before 5.0.2 does not sanitize uploa= ded SVG files and allows SVG uploads for any user able to upload files (Aut= hor by default), allowing them to upload a file containing malicious JavaSc= ript that executes when the file is accessed, leading to Stored Cross-Site = Scripting.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15678" target=3D= "_blank" rel=3D"noopener">CVE-2025-15678</a></td>
</tr>

<td class=3D"vendor-product">Nexter Blocks--Nexter Blocks</td>
<td>The Nexter Blocks WordPress plugin before 5.0.2 does not restrict who c=
an save global CSS through one of its REST endpoints, allowing users with a=
t least the Contributor role to store arbitrary CSS that is rendered site-w= ide on the front end, enabling defacement, content hiding, and UI redressin= g.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17011" target=3D= "_blank" rel=3D"noopener">CVE-2026-17011</a></td>
</tr>

<td class=3D"vendor-product">nltk--nltk/nltk</td>
<td>In nltk version 3.9.4, the `nltk.downloader.Downloader._download_packag= e()` function writes downloaded package bytes to disk and may extract them = before enforcing SHA-256 or MD5 checksum validation. This allows an attacke=
r to tamper with the package response body for `info.url` through a comprom= ised mirror, malicious proxy, or other source-substitution condition, leadi=
ng to the installation of attacker-controlled package bytes. The vulnerabil= ity can result in malicious corpus or model content being trusted by downst= ream users or applications.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12259" target=3D= "_blank" rel=3D"noopener">CVE-2026-12259</a></td>
</tr>

<td class=3D"vendor-product">nltk--nltk/nltk</td>
<td>A vulnerability in `nltk.downloader` in nltk/nltk versions <=3D 3.9.=
4 allows for cross-package resource and model poisoning. The downloader ext= racts package archives into shared namespaces such as `corpora/` and `tagge= rs/` instead of package-isolated roots, and validates package integrity onl=
y after the archive has been written and extracted. This design flaw enable=
s one package to overwrite another package's trusted resources within the s= ame namespace, making the changes immediately active through ordinary NLTK = APIs. This issue persists across fresh interpreter restarts and can affect = downstream workflows, including machine learning pipelines and reproducibil= ity-sensitive environments.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12261" target=3D= "_blank" rel=3D"noopener">CVE-2026-12261</a></td>
</tr>

<td class=3D"vendor-product">nltk--nltk/nltk</td>
<td>A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk = versions 3.9.4 and the current develop branch. The `nltk.pathsec.validate_n= etwork_url()` function, intended to prevent SSRF by rejecting internal netw= ork addresses, fails to reject IPs in the RFC 6598 shared address space (`1= 00.64.0.0/10`). This occurs because Python's `ipaddress` module does not cl= assify such addresses as `is_private` or `is_global`, and the current guard=
only checks `is_private` and a few explicit categories. An attacker who ca=
n influence a URL passed to NLTK's network-loading helpers can exploit this=
vulnerability to make a strict-mode application send requests to shared-ad= dress-space hosts, potentially exposing non-public infrastructure reachable=
from the application host. The impact is limited to SSRF-style confidentia= lity exposure, with no code execution claimed.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12372" target=3D= "_blank" rel=3D"noopener">CVE-2026-12372</a></td>
</tr>

<td class=3D"vendor-product">nodejs--node</td>
<td>A flaw in Node.js HTTP/2 handling can cause HTTP/2 retained header bloc=
ks evade maxSessionMemory and enable remote memory exhaustion. This vulnera= bility affects Node.js **24.x** and **22.x**.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56846" target=3D= "_blank" rel=3D"noopener">CVE-2026-56846</a></td>
</tr>

<td class=3D"vendor-product">nodejs--node</td>
<td>A flaw in Node.js HTTP/2 handling allows `nghttp2_session_mem_send()` t=
o be called re-entrantly while `nghttp2_session_mem_recv()` is executing, r= esulting in a heap-use-after-free. This vulnerability affects Node.js **26.= x**, **24.x**, and **22.x**.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56848" target=3D= "_blank" rel=3D"noopener">CVE-2026-56848</a></td>
</tr>

<td class=3D"vendor-product">nodejs--node</td>
<td>A flaw in Node.js node:sqlite allows a stale StatementSyncIterator crea= ted through DatabaseSync#createTagStore() to continue executing a cached pr= epared statement after it has been reset and rebound with new parameters. S= QLTagStore resets cached statements using sqlite3_reset() directly, bypassi=
ng the iterator invalidation mechanism introduced for StatementSync in rece=
nt releases This vulnerability affects Node.js **22.x**, **24.x**, and **26= .x**.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58041" target=3D= "_blank" rel=3D"noopener">CVE-2026-58041</a></td>
</tr>

<td class=3D"vendor-product">nodejs--node</td>
<td>A flaw in Node.js can cause dns.resolveAny() Aborts the Node.js Process=
When a DNS Response Contains More Than 256 A Records. Repeated triggering =
of this condition can lead to denial of service. This vulnerability affects=
Node.js **26.x**, **24.x**, and **22.x**.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58042" target=3D= "_blank" rel=3D"noopener">CVE-2026-58042</a></td>
</tr>

<td class=3D"vendor-product">nodejs--node</td>
<td>A flaw in Node.js HTTP client can cause a request desynchronization for=
Node.js-based forwarding proxies that rebuild outbound headers from the vi= sible `IncomingMessage` headers while piping the original body to a reused = backend connection. Node.js can omit headers beyond `maxHeadersCount` / `ma= xHeaderPairs` from `req.headers`, `req.rawHeaders`, and `req.headersDistinc= t`, while still using those omitted headers internally for HTTP message fra= ming. In particular, `Content-Length` can be hidden from userland while the=
request body is still delivered. This vulnerability affects all supported = release lines: **Node.js 22**, **Node.js 24**, and **Node.js 26**.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58044" target=3D= "_blank" rel=3D"noopener">CVE-2026-58044</a></td>
</tr>

<td class=3D"vendor-product">nodejs--node</td>
<td>A flaw in Node.js allows a spoofed `TypedArray` `byteLength` to trigger=
a reachable assertion in the synchronous `node:zlib` APIs, causing the ent= ire process to crash. All 11 synchronous zlib functions are affected. Repea= ted exploitation of this condition can result in a denial of service. This = vulnerability affects Node.js **22.x**, **24.x**, and **26.x**.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58045" target=3D= "_blank" rel=3D"noopener">CVE-2026-58045</a></td>
</tr>

<td class=3D"vendor-product">nrwl--nx</td>
<td>Nx is a monorepo solution for TypeScript and polyglot codebases. From v= ersion 20.8.0 until 22.7.7 and 23.0.2, the Nx self-hosted HTTP remote cache=
extracts downloaded cache artifacts without constraining where files are w= ritten. A malicious or on-path (MITM) remote cache server can return a craf= ted tar archive whose entries escape the cache directory and write to arbit= rary locations on the machine running Nx, which can be escalated to remote = code execution. Nx's default local cache and Nx Cloud are not affected; onl=
y workspaces configured to use a self-hosted remote cache are affected. Thi=
s issue is fixed in versions 22.7.7 and 23.0.2.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71476" target=3D= "_blank" rel=3D"noopener">CVE-2026-71476</a></td>
</tr>

<td class=3D"vendor-product">O2OA--O2OA v10</td>
<td>A reflected cross-site scripting (XSS) vulnerability in the Forum posti=
ng function of O2OA v10 allows attackers to execute arbitrary Javascript in=
the context of the victim's browser via a crafted URL.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52370" target=3D= "_blank" rel=3D"noopener">CVE-2026-52370</a></td>
</tr>

<td class=3D"vendor-product">OMICRON electronics GmbH--OMICRON StationScout= </td>
<td>OMICRON StationScout before version 3.05 contains a cryptographic timin=
g side-channel vulnerability in the backend authentication mechanism that m=
ay allow an unauthenticated attacker to forge valid authentication credenti= als, bypass authentication and authorization, and impersonate legitimate cl= ients. An attacker can gain full access to the system configuration, allowi=
ng modification, reset, or unauthorized alteration of system parameters or = injecting network traffic into the connected network.</td>

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16731" target=3D= "_blank" rel=3D"noopener">CVE-2026-16731</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541</td>
<td>open62541 contains a heap use-after-free in the GDS PushManagement cert= ificate update workflow when UA_ENABLE_GDS_PUSHMANAGEMENT is enabled. This = allows a remote attacker to cause a denial of service.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67855" target=3D= "_blank" rel=3D"noopener">CVE-2026-67855</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>An issue in open62541 v.1.5.5 and before allows a remote attacker to ca= use a denial of service via crafted CreateSubscription, CreateMonitoredItem= s(Sampling), Publish, TransferSubscriptions, and DeleteSubscriptions reques= ts</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67856" target=3D= "_blank" rel=3D"noopener">CVE-2026-67856</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>open62541 1.5.5 contains a heap-based buffer overflow in the default Hi= storyRead path when the default history database is used with the memory ba= ckend.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67860" target=3D= "_blank" rel=3D"noopener">CVE-2026-67860</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>open62541 1.5.5 contains a buffer-overflow in the high-level attribute = reading logic in src/client/ua_client_highlevel.c. This allows a remote att= acker to cause a denial of service.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67862" target=3D= "_blank" rel=3D"noopener">CVE-2026-67862</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>An issue in open62541 v.1.5.5 and before allows a remote attacker to ca= use a denial of service via the NodeManagement type-instantiation logic com= ponent</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67864" target=3D= "_blank" rel=3D"noopener">CVE-2026-67864</a></td>
</tr>

<td class=3D"vendor-product">open62541--open62541 v1.5.5</td>
<td>In open62541 v1.5.5, the server-side AddReferences implementation conta= ins an incomplete validation flaw for non-local ExpandedNodeId targets. A r= emote attacker can send a crafted AddReferencesRequest with an empty target= ServerUri and a non-zero targetNodeId.serverIndex, causing the target node = pointer to remain NULL while execution continues.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67870" target=3D= "_blank" rel=3D"noopener">CVE-2026-67870</a></td>
</tr>

<td class=3D"vendor-product">openbao--openbao</td>
<td>OpenBao is an open source identity-based secrets management system. Pri=
or to version 2.5.4, OpenBao's namespaces provide multi-tenant separation. =
A tenant who intentionally leaks lease identifiers can have their lease and=
underlying credential revoked or renewed by a user in another tenant via t=
he legacy, undocumented `sys/revoke` and `sys/renew` endpoints. This is fix=
ed in OpenBao v2.5.4.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45808" target=3D= "_blank" rel=3D"noopener">CVE-2026-45808</a></td>
</tr>

<td class=3D"vendor-product">openbao--openbao</td>
<td>OpenBao is an open source identity-based secrets management system. Pri=
or to version 2.5.4, OpenBao's inline auth functionality incorrectly redact=
ed audit log entries, resulting in non-auth headers being removed and auth-= related headers being retained in cleartext. This requires an attacker to c= ompromise access to the audit device. Operators should review leaked source=
authentication material and rotate it as appropriate. This is fixed in Ope= nBao v2.5.4.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46358" target=3D= "_blank" rel=3D"noopener">CVE-2026-46358</a></td>
</tr>

<td class=3D"vendor-product">OPeNDAP Inc.--hyrax-docker</td>
<td>OPeNDAP Hyrax allows SSRF and credential disclosure via unvalidated HTT=
P redirects that bypass the AllowedHosts allowlist and leak Earthdata heade=
rs (User-Id, Echo-Token) to attacker-controlled endpoints.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16637" target=3D= "_blank" rel=3D"noopener">CVE-2026-16637</a></td>
</tr>

<td class=3D"vendor-product">OpenMediaVault--OpenMediaVault v8.0.4.-1</td> <td>An OS command injection vulnerability in the openmediavault-md plugin o=
f OpenMediaVault v8.0.4-1 allows attackers to execute arbitrary commands as=
root via injecting shell metacharacters.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52102" target=3D= "_blank" rel=3D"noopener">CVE-2026-52102</a></td>
</tr>

<td class=3D"vendor-product">openmeter--openmeter</td>
<td>OpenMeter contains a stored, or second-order, SQL injection vulnerabili=
ty in the handling of customer usage-attribution values. An attacker who ca=
n create or update a customer can store a malicious value in the usageAttri= bution.key or usageAttribution.subjectKeys fields. When that customer is su= bsequently used in a meter or event query, OpenMeter inserts the stored val=
ue into a ClickHouse WITH map(...) expression using string concatenation. O= penMeter versions from v1.0.0-beta.218 through v1.0.0-beta.231 are affected= .</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18801" target=3D= "_blank" rel=3D"noopener">CVE-2026-18801</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. = Versions 3.4.0 through 3.6.5 contain a denial of service vulnerability in t=
he presence module. When the presence module's handle_publish() function pr= ocesses a SIP PUBLISH request with an Event: presence header and a message = body while the configuration option enable_sphere_check=3D1 is set, it invo= kes the get_content_type() macro without first calling parse_content_type_h= dr(), causing it to dereference uninitialized or NULL Content-Type parsing = state and crash. If a Content-Type header is present but unparsed, msg->= content_type->parsed is NULL and is dereferenced as a content_t pointer;=
if the request lacks a Content-Type header entirely, msg->content_type = itself is NULL, and both cases lead to a crash. A remote attacker can there= fore cause a denial of service against an affected instance with a single P= UBLISH request over UDP or TCP, using either a valid Content-Type: applicat= ion/pidf+xml request or one with the header removed, and the vulnerable cod=
e path itself does not enforce authentication (though a deployment's routin=
g configuration may require it before this route is reached). The issue has=
been fixed in version 3.6.6 and 4.0.0-rc1.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45084" target=3D= "_blank" rel=3D"noopener">CVE-2026-45084</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. = Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerabi= lity in the watcherinfo generation functionality. An attacker can create an=
oversized watcher entry by sending a SUBSCRIBE Event: presence request wit=
h a long From URI, and then trigger presence.winfo watcherinfo XML generati=
on for the same presentity. OpenSIPS copies the stored watcher URI into a f= ixed-size stack buffer, overflowing it and crashing the process. A remote a= ttacker can crash an OpenSIPS worker in deployments that expose handle_subs= cribe() and allow watcherinfo (presence.winfo) generation. The issue is con= figuration-dependent because the presence and presence_xml modules must be = loaded and SUBSCRIBE routing must be reachable. This issue has been fixed i=
n versions 3.6.6 and 4.0.0-rc1.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-45809" target=3D= "_blank" rel=3D"noopener">CVE-2026-45809</a></td>
</tr>

<td class=3D"vendor-product">OpenSIPS--opensips</td>
<td>OpenSIPS is a Session Initiation Protocol (SIP) server implementation. = Versions prior to 3.6.6 and 4.0.0-rc1 contain a denial of service vulnerabi= lity in the SDP bandwidth-line parsing logic. A SIP request with Content-Ty= pe: application/sdp and a malformed session-level SDP bandwidth line missin=
g the required colon delimiter can corrupt parsed SDP bandwidth metadata. W= hen a route or module subsequently clones the corrupted SDP state, as occur=
s with dialog and QoS processing, the OpenSIPS worker process crashes. An u= nauthenticated remote attacker can therefore trigger a crash in any configu= ration whose routing script parses attacker-controlled SDP and applies dial= og/QoS processing. This issue has been fixed in versions 3.6.6 and 4.0.0-rc= 1.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-46334" target=3D= "_blank" rel=3D"noopener">CVE-2026-46334</a></td>
</tr>

<td class=3D"vendor-product">OpenSSL--OpenSSL</td>
<td>Issue summary: A malicious TLS server can cause a memory leak in a TLS = client that has enabled OCSP response checking by sending an OCSP response = that contains no single response entries. Impact summary: An attacker can l= eak an attacker-tunable amount of memory per TLS handshake in a victim clie=
nt application. A long-running client that repeatedly connects to a malicio=
us server can have its memory exhausted, resulting in a Denial of Service. = CWE: CWE-401: Missing Release of Memory after Effective Lifetime Descriptio=
n: The affected function is called during X.509 certificate chain verificat= ion when OCSP response checking is enabled with the X509_V_FLAG_OCSP_RESP_C= HECK or X509_V_FLAG_OCSP_RESP_CHECK_ALL verification flags, for example whe=
n a TLS client verifies an OCSP response stapled into the TLS handshake by = the server. When the received BasicOCSPResponse contains an empty SEQUENCE =
OF SingleResponse, which is permitted on the wire and accepted by the OpenS=
SL decoder, the OCSP_BASICRESP structure allocated by OCSP_response_get1_ba= sic() was not freed because an early return bypassed the cleanup code at th=
e end of the function. The amount of memory leaked per handshake can be amp= lified by the attacker by padding the certs field of the BasicOCSPResponse = with bogus certificates, which are parsed and stored in the leaked structur=
e before the empty response check triggers the early return. A long-running=
TLS client that repeatedly connects to a malicious server can have its mem= ory exhausted over time. OCSP response checking is not enabled by default. = Only client applications that explicitly enable the OCSP response check ver= ification flags are affected. FIPS impact: no The FIPS modules in 4.0 and 3=
.6 are not affected by this issue as the affected code is outside the OpenS=
SL FIPS module boundary.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54876" target=3D= "_blank" rel=3D"noopener">CVE-2026-54876</a></td>
</tr>

<td class=3D"vendor-product">OpenStack--Neutron</td>
<td>In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does = not verify ownership of the target subnets. An authenticated user can onboa=
rd subnets from another project's shared network into their own subnetpool,=
mutating the victim's subnet state and altering L3 routing and address sco=
pe behavior for victim routers.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-55707" target=3D= "_blank" rel=3D"noopener">CVE-2026-55707</a></td>
</tr>

<td class=3D"vendor-product">OpenStack--Swift</td>
<td>In OpenStack Swift through 2.38.0, the proxy server Accept header parse=
r contains a regular expression vulnerable to catastrophic backtracking (Re= DoS). The "qdtext" pattern (?:[^"]|\.)* allows an unauthenticated remote at= tacker to send a crafted Accept header that causes exponential CPU consumpt= ion in the proxy worker. A payload of 32 backslash-character pairs exceeds =
30 seconds of CPU time. No authentication is required. Repeated requests ca=
n exhaust all proxy worker threads, resulting in a complete denial of servi= ce.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71190" target=3D= "_blank" rel=3D"noopener">CVE-2026-71190</a></td>
</tr>

<td class=3D"vendor-product">OpenStack--Swift</td>
<td>In OpenStack Swift through 2.38.0, S3API middleware does not enforce th=
at semantic x-amz-* headers are covered by the SigV4 signature on presigned=
URL requests. An attacker who obtains a presigned PUT URL can inject an un= signed X-Amz-Copy-Source header, causing Swift to perform a server-side cop=
y from an arbitrary source object using the signer's authorization context.=
The attacker can read any object the signer has access to, provided the ta= rget project_id, container name, and object name are known. This affects al=
l deployments using the default s3_acl=3Dfalse configuration.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71191" target=3D= "_blank" rel=3D"noopener">CVE-2026-71191</a></td>
</tr>

<td class=3D"vendor-product">OpenStack--Swift</td>
<td>In OpenStack Swift through 2.38.0, the S3API middleware does not saniti=
ze Swift-native control headers (X-Copy-From, X-Copy-From-Account) from S3 = API requests when s3_acl=3Dtrue. An attacker can inject these headers into =
a signed PUT request targeting their own bucket, causing Swift to perform a=
server-side copy from another tenant's private object. The source object a= uthorization is bypassed because the S3API middleware has already authorize=
d the request against the destination. The attacker can read any object who=
se project_id, container name, and object name are known, regardless of the=
source object's ACLs or ownership. This requires the non-default s3_acl=3D= true configuration.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71192" target=3D= "_blank" rel=3D"noopener">CVE-2026-71192</a></td>
</tr>

<td class=3D"vendor-product">Orbit Fox: Duplicate Page, Menu Icons, SVG Sup= port, Cookie Notice, Custom Fonts & More--Orbit Fox: Duplicate Page, Me=
nu Icons, SVG Support, Cookie Notice, Custom Fonts & More</td>

<td>The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, = Custom Fonts & More WordPress plugin before 3.0.8 does not sanitize upl= oaded SVG files when its SVG upload feature is enabled, allowing authentica= ted users with the upload capability (Author and above by default, without = the unfiltered_html capability) to upload SVG files containing JavaScript t= hat executes in the site context when the file is viewed, leading to Stored=
Cross-Site Scripting.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16583" target=3D= "_blank" rel=3D"noopener">CVE-2026-16583</a></td>
</tr>

<td class=3D"vendor-product">OreSat--OreSat Firmware v1.0</td>
<td>A stack-based buffer overflow vulnerability exists in the cmd_edl funct= ion of OreSat Firmware v1.0. The vulnerability is triggered when processing=
the edl fw_flash command, where the <filename> argument is copied to=
a 64-byte stack buffer via memcpy without proper length validation. An att= acker with physical access to the UART3 serial interface can exploit this v= ulnerability by sending a maliciously crafted command with an oversized fil= ename parameter,</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67673" target=3D= "_blank" rel=3D"noopener">CVE-2026-67673</a></td>
</tr>

<td class=3D"vendor-product">osTicket--osTicket 1.18.3</td>
<td>A stored cross-site scripting (XSS) vulnerability exists in osTicket 1.= 18.3 due to improper sanitization of the thread entry title field. User-con= trolled input in the title is stored without adequate HTML escaping and lat=
er rendered in multiple staff-facing templates without proper output encodi= ng. An attacker can inject arbitrary JavaScript by submitting a crafted tic= ket reply or email with a malicious subject line.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-38446" target=3D= "_blank" rel=3D"noopener">CVE-2026-38446</a></td>
</tr>

<td class=3D"vendor-product">osTicket--osTicket 1.18.3</td>
<td>osTicket 1.18.3 generates API keys using a predictable construction bas=
ed on MD5 hashing. The use of MD5, combined with predictable inputs such as=
the current timestamp and client IP address, significantly reduces entropy=
. An attacker can approximate the key generation time and brute-force the k=
ey space within a feasible time window.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-38447" target=3D= "_blank" rel=3D"noopener">CVE-2026-38447</a></td>
</tr>

<td class=3D"vendor-product">osTicket--osTicket v1.18.3</td>
<td>osTicket v1.18.3 is vulnerable to Stored Cross-Site Scripting (XSS) via=
the email From-header display name. The value is extracted without sanitiz= ation in include/class.mailparse.php and stored raw in the poster field of = ost_thread_entry. When an unauthenticated attacker sends a reply email to a=
n existing ticket from an unregistered address with an XSS payload in the F= rom display name.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-38444" target=3D= "_blank" rel=3D"noopener">CVE-2026-38444</a></td>
</tr>

<td class=3D"vendor-product">OTP Login With Phone Number, OTP Verification-= -OTP Login With Phone Number, OTP Verification</td>
<td>The OTP Login With Phone Number, OTP Verification WordPress plugin befo=
re 1.8.71 does not limit the number of OTP verification attempts or invalid= ate a one-time login code after a wrong guess, and an unauthenticated user = can request a login code for any account. Because the code is a short numer=
ic OTP, an attacker can brute-force it and take over any account, including=
an administrator's.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15210" target=3D= "_blank" rel=3D"noopener">CVE-2026-15210</a></td>
</tr>

<td class=3D"vendor-product">Packetfence--Packetfence 13.2.0</td>
<td>In Packetfence 13.2.0, the WebGui interface setting allows authenticate=
d remote code execution.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2024-39024" target=3D= "_blank" rel=3D"noopener">CVE-2024-39024</a></td>
</tr>

<td class=3D"vendor-product">Paid Membership Subscriptions--Paid Membership=
Subscriptions</td>
<td>The Paid Membership Subscriptions WordPress plugin before 3.0.8 does no=
t verify that the subscription being modified through its change-subscripti=
on checkout belongs to the current user, allowing any authenticated user wi=
th Subscriber-level access and above to take over another member's subscrip= tion and overwrite its plan, status and expiration.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14848" target=3D= "_blank" rel=3D"noopener">CVE-2026-14848</a></td>
</tr>

<td class=3D"vendor-product">PaperCut--PaperCut NG/MF</td>
<td>PaperCut NG/MF does not properly restrict excessive authentication atte= mpts within its login component. An unauthenticated remote attacker can exp= loit this vulnerability to perform unrestricted brute-force or credential-s= tuffing attacks without triggering account lockout or rate-limiting mechani= sms in some configurations.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8793" target=3D"= _blank" rel=3D"noopener">CVE-2026-8793</a></td>
</tr>

<td class=3D"vendor-product">PaperCut--PaperCut NG/MF</td>
<td>PaperCut NG/MF contains an observable timing discrepancy in its authent= ication component. An unauthenticated remote attacker can exploit this vuln= erability to perform username enumeration by measuring response times durin=
g login attempts. The system executes a password hash comparison only when =
a valid account is supplied, creating a measurable timing oracle that revea=
ls account existence.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-8794" target=3D"= _blank" rel=3D"noopener">CVE-2026-8794</a></td>
</tr>

<td class=3D"vendor-product">parisneo--parisneo/lollms</td>
<td>A path traversal vulnerability exists in parisneo/lollms version 2.1.0,=
specifically in the SPA catch-all route implemented in `backend/routers/ui= .py`. The vulnerability arises from the improper handling of user-controlle=
d path input, which is directly joined into a filesystem path without sanit= ization or containment checks. URL-encoded dot-dot sequences (`%2e%2e`) byp= ass Starlette's built-in path normalization and are resolved by Python's `p= athlib`, allowing an unauthenticated attacker to read arbitrary files on th=
e server. This issue has been resolved in version 3.</td>

<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-10595" target=3D= "_blank" rel=3D"noopener">CVE-2026-10595</a></td>
</tr>

<td class=3D"vendor-product">Passster--Passster</td>
<td>The Passster WordPress plugin before 4.3.6 does not perform a post-stat=
us check before returning post content from an unauthenticated REST endpoin=
t, allowing unauthenticated users to disclose the content of non-public (dr= aft, private, and pending) posts on sites that have a captcha provider conf= igured.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16602" target=3D= "_blank" rel=3D"noopener">CVE-2026-16602</a></td>
</tr>

<td class=3D"vendor-product">Passster--Passster</td>
<td>The Passster WordPress plugin before 4.3.6 does not enforce its categor= y-based content protection on the WordPress REST API, allowing unauthentica= ted users to read the full content, title, and excerpt of category-locked p= osts through the core REST API.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16603" target=3D= "_blank" rel=3D"noopener">CVE-2026-16603</a></td>
</tr>

<td class=3D"vendor-product">Passster--Passster</td>
<td>The Passster WordPress plugin before 4.3.6 outputs password-protected b= lock content in the public page response before verifying the password, all= owing unauthenticated users to recover the protected content without knowin=
g the password.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16604" target=3D= "_blank" rel=3D"noopener">CVE-2026-16604</a></td>
</tr>

<td class=3D"vendor-product">Password Protected Lock Entire Site, Pages, Po= sts, Categories, and Partial Content--Password Protected Lock Entire Site, = Pages, Posts, Categories, and Partial Content</td>
<td>The Password Protected - Lock Entire Site, Pages, Posts, Categories, an=
d Partial Content WordPress plugin before 2.8.4 does not restrict REST API = access to authenticated users when a specific option is enabled, allowing u= nauthenticated visitors to bypass the sitewide password gate and read other= wise-protected content and account identifiers via the REST API. This re-in= troduces a previously-fixed issue (CVE-2024-0437), which was patched in 2.6=
.7 and regressed in 2.6.8.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14943" target=3D= "_blank" rel=3D"noopener">CVE-2026-14943</a></td>
</tr>

<td class=3D"vendor-product">pdm-project--pdm</td>
<td>pdm is a Python package and dependency manager supporting the latest PE=
P standards. In versions prior to 2.27.0, pdm writes several project-local = state or configuration files without symlink protection. If a malicious rep= ository places those files as symlinks, local PDM operations can overwrite = the symlink targets. This creates an arbitrary file clobber primitive relat= ive to the privileges of the invoking user. Config.__init__() resolves the = project-local pdm.toml path and _save_config() writes to the resolved targe=
t. If PROJECT_ROOT/pdm.toml is a symlink to another file, pdm config -l ...=
updates the target file instead of refusing the write. The same general pr= oblem exists for other project-local persistence paths that are written dir= ectly with no lstat / O_NOFOLLOW protection. For the pdm.toml PoC specifica= lly, the target file must already contain parseable TOML. Otherwise the loa=
d step fails before the write path is reached. That parser constraint does = not apply to the .pdm-python or .python-version sinks. This issue has been = fixed in version 2.27.0.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47763" target=3D= "_blank" rel=3D"noopener">CVE-2026-47763</a></td>
</tr>

<td class=3D"vendor-product">pdm-project--pdm</td>
<td>pdm is a Python package and dependency manager supporting the latest PE=
P standards. Versions prior to 2.27.0 are vulnerable to path traversal thro= ugh write_to_fs. InstallDestination.write_to_fs() in src/pdm/installers/ins= tallers.py overrides the base class to add symlink/hardlink support but rep= laces the safe _path_with_destdir() (which validates via Path.resolve() + i= s_relative_to()) with a bare os.path.join() that performs no path validatio=
n. A malicious wheel with traversal entries can write arbitrary files. This=
issue has been fixed in version 2.27.0.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47764" target=3D= "_blank" rel=3D"noopener">CVE-2026-47764</a></td>
</tr>

<td class=3D"vendor-product">pdm-project--pdm</td>
<td>PDM is a Python package and dependency manager. In versions up to and i= ncluding 2.26.9, PDM automatically loads project-local plugins from a .pdm-= plugins directory during initialization, allowing an attacker-controlled fi=
le in an untrusted repository checkout to execute arbitrary Python code bef= ore any command is parsed. This happens because load_plugins() runs during = Core.init() and adds .pdm-plugins via site.addsitedir(), which processes .p=
th files and immediately executes any line beginning with import, so the co=
de runs with the privileges of the user invoking pdm and even a benign comm= and such as pdm --version triggers it (making the impact strongest in CI, a= utomation, and privileged contexts). The issue is fixed in version 2.27.0.<=

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47781" target=3D= "_blank" rel=3D"noopener">CVE-2026-47781</a></td>
</tr>

<td class=3D"vendor-product">Pegasystems--Pega Infinity</td>
<td>Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored = Cross-site scripting (XSS) vulnerability in a user interface component. Req= uires a high privileged user with a developer role.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14337" target=3D= "_blank" rel=3D"noopener">CVE-2026-14337</a></td>
</tr>

<td class=3D"vendor-product">Penpot--Penpot</td>
<td>Penpot's ::import-binfile RPC command lacks authorization on the option=
al file-id parameter, allowing any authenticated user to overwrite any file=
s on the target server and subscribe to WebSocket events, enabling full dat=
a exfiltration and data poisoning.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17613" target=3D= "_blank" rel=3D"noopener">CVE-2026-17613</a></td>
</tr>

<td class=3D"vendor-product">PeproDev WooCommerce Receipt Uploader--PeproDe=
v WooCommerce Receipt Uploader</td>
<td>PeproDev WooCommerce Receipt Uploader (PeproDev WooCommerce Receipt Upl= oader WordPress plugin through 2.8.0 slug: pepro-bacs-receipt-upload-for-wo= ocommerce), all versions up to and including 2.8.0 (latest on wordpress.org=
; no fixed version available at the time of writing), is vulnerable to unau= thenticated missing-authorization / IDOR write. Requires WooCommerce.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14313" target=3D= "_blank" rel=3D"noopener">CVE-2026-14313</a></td>
</tr>

<td class=3D"vendor-product">PeproDev WooCommerce Receipt Uploader--PeproDe=
v WooCommerce Receipt Uploader</td>
<td>The PeproDev WooCommerce Receipt Uploader WordPress plugin through 2.8.=
0 does not verify that a requested attachment belongs to the order referenc=
ed by its access token, allowing unauthenticated attackers to forge a token=
and disclose image attachments, including other customers' uploaded paymen=
t receipts, that they do not own.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14314" target=3D= "_blank" rel=3D"noopener">CVE-2026-14314</a></td>
</tr>

<td class=3D"vendor-product">Personal QR Message--Personal QR Message</td> <td>The Personal QR Message WordPress plugin through 1.0 does not restrict = the file types that can be uploaded through an unauthenticated handler, all= owing unauthenticated users to upload arbitrary executable PHP files that a=
re directly reachable, leading to remote code execution.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16250" target=3D= "_blank" rel=3D"noopener">CVE-2026-16250</a></td>
</tr>

<td class=3D"vendor-product">phoca.cz--Phoca Commander extension for Joomla= </td>
<td>Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.= 0.0-6.1.3 - Improper limitation of paths in the getSource function lead to =
an arbitrary file read vulnerability.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66491" target=3D= "_blank" rel=3D"noopener">CVE-2026-66491</a></td>
</tr>

<td class=3D"vendor-product">phoca.cz--Phoca Commander extension for Joomla= </td>
<td>Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Com= mander 1.0.0-6.1.3 - Improper limitation of paths in the file upload action=
lead to path a traversal vulnerability.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66492" target=3D= "_blank" rel=3D"noopener">CVE-2026-66492</a></td>
</tr>

<td class=3D"vendor-product">phoca.cz--Phoca Commander extension for Joomla= </td>
<td>Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Com= mander 1.0.0-6.1.3 - Improper limitation of paths for delete, copy and move=
actions lead to path traversal vulnerabilities.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66493" target=3D= "_blank" rel=3D"noopener">CVE-2026-66493</a></td>
</tr>

<td class=3D"vendor-product">PHPCSStandards--PHP_CodeSniffer</td> <td>PHP_CodeSniffer tokenizes PHP files and detects violations of a defined=
set of coding standards. Prior to versions 3.13.6 and 4.0.2, PHP_CodeSniff=
er contains a command injection vulnerability in the code that generates th=
e Gitblame, Hgblame, and Svnblame report formats. As a result, running PHP_= CodeSniffer over untrusted files, for example in a continuous integration p= ipeline that scans pull requests, or on a developer machine reviewing third=
party code, could result in attacker controlled shell commands being execu= ted when the Gitblame, Hgblame, or Svnblame report processes a file whose n= ame contains shell metacharacters. Users using the default Full report, or = any of the other non-blame reports, are not affected. Users on a runtime pl= atform which does not allow filenames to contain shell metacharacters, such=
as " and ;, are not affected. This issue is fixed in versions 3.13.6 and 4= .0.2.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67434" target=3D= "_blank" rel=3D"noopener">CVE-2026-67434</a></td>
</tr>

<td class=3D"vendor-product">PiWeb Cancel order / Refund request for WooCom= merce--PiWeb Cancel order / Refund request for WooCommerce</td>
<td>The PiWeb Cancel order / Refund request for WooCommerce WordPress plugi=
n before 1.3.4.34 does not have authorization or ownership checks when addi=
ng the contents of a previous order to the cart, allowing unauthenticated u= sers to disclose the contents of other customers' orders, as well as to cle=
ar and repopulate a logged in user's cart via a crafted link.</td> <td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18603" target=3D= "_blank" rel=3D"noopener">CVE-2026-18603</a></td>
</tr>

<td class=3D"vendor-product">postcss--postcss</td>
<td>PostCSS takes a CSS file and provides an API to analyze and modify its = rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.= 19, if from is unset, an attacker can cause PreviousMap.loadFile() to read =
an unintended source-map file by supplying an absolute or directory-travers=
al sourceMappingURL. The resulting map's sources and sourcesContent may the=
n be exposed to the application. This issue is fixed in version 8.5.19.</td=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69153" target=3D= "_blank" rel=3D"noopener">CVE-2026-69153</a></td>
</tr>

<td class=3D"vendor-product">PowerPress Podcasting plugin by Blubrry--Power= Press Podcasting plugin by Blubrry</td>
<td>The PowerPress Podcasting plugin by Blubrry WordPress plugin before 11.= 16.11 does not sanitise and escape some of its Podcast Episode settings, wh= ich could allow users with a role as low as Contributor to perform Stored C= ross-Site Scripting attacks even when the unfiltered_html capability is dis= allowed.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16293" target=3D= "_blank" rel=3D"noopener">CVE-2026-16293</a></td>
</tr>

<td class=3D"vendor-product">ProfileGrid--ProfileGrid</td>
<td>The ProfileGrid WordPress plugin before 6.0.0.0 does not perform author= ization checks when listing a group's pending membership requests, allowing=
any authenticated user such as a Subscriber to disclose the names and requ= est dates of the users awaiting approval to join any group, including priva=
te ones.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16289" target=3D= "_blank" rel=3D"noopener">CVE-2026-16289</a></td>
</tr>

<td class=3D"vendor-product">ProfileGrid--ProfileGrid</td>
<td>The ProfileGrid WordPress plugin before 6.0.0.0 does not perform author= ization checks before returning a group's member list, and registers the ha= ndler for unauthenticated users, allowing any unauthenticated visitor to di= sclose the members and their identifiers of any group, including private or=
closed ones, bypassing the ProfileGrid WordPress plugin before 6.0.0.0's m= ember-visibility setting.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16290" target=3D= "_blank" rel=3D"noopener">CVE-2026-16290</a></td>
</tr>

<td class=3D"vendor-product">py-pdf--pypdf</td>
<td>pypdf is a free and open-source pure-python PDF library. Prior to 6.15.=
0, a crafted PDF can cause long runtimes and large memory consumption when = pypdf/_font.py function Font._collect_cid_character_widths expands unusuall=
y large CID font /W width ranges or excessive width entries during text ext= raction. This issue is fixed in 6.15.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71852" target=3D= "_blank" rel=3D"noopener">CVE-2026-71852</a></td>
</tr>

<td class=3D"vendor-product">py-pdf--pypdf</td>
<td>pypdf is a free and open-source pure-python PDF library. Prior to 6.15.=
0, a crafted PDF can cause large memory consumption when pypdf/_cmap.py fun= ction parse_bfrange parses unusually large source-code or destination-strin=
g tokens in a font /ToUnicode CMap during text extraction. This issue is fi= xed in 6.15.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71870" target=3D= "_blank" rel=3D"noopener">CVE-2026-71870</a></td>
</tr>

<td class=3D"vendor-product">pyca--cryptography</td>
<td>cryptography is a package designed to expose cryptographic primitives a=
nd recipes to Python developers. From 44.0.0 until 50.0.0, pkcs7_decrypt_de=
r, pkcs7_decrypt_pem, and pkcs7_decrypt_smime reported the outcome of decry= pting a RecipientInfo's encryptedKey in several distinguishable ways, one o=
f which disclosed the exact length recovered from the RSA operation. The sa=
me distinction was also observable by timing. An application that decrypts = attacker-supplied EnvelopedData and reflects the outcome gives the attacker=
a Bleichenbacher oracle against the content-encryption key. Decryption ran=
as RSA PKCS#1 v1.5 decrypt of encryptedKey, build an AES cipher from the r= esult, then AES-CBC decrypt and PKCS#7 unpad. Invalid RSA padding, a valid = padding with a bad key length, a correct length with a wrong key, and the r= eal key each failed or succeeded differently. Case 1 is reachable only wher=
e the linked library lacks implicit rejection: OpenSSL 3.0 and 3.1, LibreSS=
L, and BoringSSL. Exploitation requires a service that auto-decrypts untrus= ted EnvelopedData matching the victim certificate and answers adaptively at=
high volume, such as an S/MIME gateway or mail filter. This issue is fixed=
in 50.0.0.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69247" target=3D= "_blank" rel=3D"noopener">CVE-2026-69247</a></td>
</tr>

<td class=3D"vendor-product">pyca--cryptography</td>
<td>cryptography is a package designed to expose cryptographic primitives a=
nd recipes to Python developers. Prior to 49.0.0, if an intermediate constr= ained CA permits the DNS name foo.example.com, and the leaf certificate has=
a wildcard in its DNS SAN of *.example.com, python-cryptography's verifier=
accepts which allows escaping outside of the permitted names. The core iss=
ue is in DNSConstraint::matches, where a wildcard pattern was treated as ma= tching a more-specific permitted constraint even though *.example.com can e= xpand to sibling names such as bar.example.com outside foo.example.com. Thi=
s allows acceptance of an invalid certificate chain. This issue is fixed in=
49.0.0.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69248" target=3D= "_blank" rel=3D"noopener">CVE-2026-69248</a></td>
</tr>

<td class=3D"vendor-product">pyca--cryptography</td>
<td>python-cryptography is a package designed to expose cryptographic primi= tives and recipes to Python developers. Prior to 49.0.0, when resolving inv= alid certificate chains that include duplicate copies of self-signed certif= icates, the processing recursively invokes the same candidate, leading to a=
n exponential blowup. Although the limitation that the chain depth cannot e= xceed a specified maximum depth prevents unbounded recursion and guarantees=
termination, an attacker-controlled certificate chain can lead the process= ing to easily take more than 5s to reject in testing. This amplification co= uld form the basis for a resource exhaustion denial of service attack. The = core issue arises in the recursive nature of build_chain_inner, which does = not de-duplicate against previously analyzed candidates. As the correctness=
of validation is not affected, the integrity of a system cannot be comprom= ised through this vector, only its availability. This issue is fixed in 49.= 0.0.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-69249" target=3D= "_blank" rel=3D"noopener">CVE-2026-69249</a></td>
</tr>

<td class=3D"vendor-product">Q00--ouroboros</td>
<td>Ouroboros is a local-first runtime for AI coding agents that records th= eir actions and applies user-defined policies to constrain behavior. In ver= sions prior to 0.39.0, if a user clones a malicious repository and runs Our= oboros commands within that directory, it can lead to arbitrary code execut= ion and potential system takeover. The vulnerability stems from Ouroboros l= oading the .env file from the current working directory. Execution-affectin=
g environment variables such as OUROBOROS_CLI_PATH, OPENCODE_CLI_PATH, and = other backend selectors are accepted directly from this local .env. An atta= cker can include a malicious script in the repository and point the CLI pat=
h variable to it (e.g., OUROBOROS_CLI_PATH=3D./malicious_script.sh). When t=
he user executes a command like ouroboros init or any command that instanti= ates the adapter, the malicious script is executed instead of the intended = CLI. This issue has been fixed in version 0.39.0.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-47211" target=3D= "_blank" rel=3D"noopener">CVE-2026-47211</a></td>
</tr>

<td class=3D"vendor-product">Q00--ouroboros</td>
<td>Ouroboros is a local-first runtime for AI coding agents that records th= eir actions and applies user-defined policies to constrain behavior. Versio=
ns prior to 0.42.1 have an incomplete denylist. Several execution-routing k= eys of the same RCE class were omitted, so a malicious cloned repo can stil=
l reach arbitrary command execution by shipping a .env (auto-loaded at impo= rt, with no review step). The CVE-2026-47211 fix added _UNTRUSTED_ENV_DENYL= IST to stop an untrusted project-directory .env from redirecting execution,=
but it did not account for all keys. The backend config-home and MCP/plugi=
n roots bypass the approval gate by pointing the nested agent, MCP servers,=
and plugin roster at attacker config. Other variables re-enable blocked lo= cal transports, replace sub-agent prompts, switch backends, and lower tool = approval classes, further weakening the approval gate. This issue has been = fixed in version 0.42.1.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66065" target=3D= "_blank" rel=3D"noopener">CVE-2026-66065</a></td>
</tr>

<td class=3D"vendor-product">Quiz and Survey Master (QSM)--Quiz and Survey = Master (QSM)</td>
<td>The Quiz and Survey Master (QSM) WordPress plugin before 11.2.2 does no=
t properly escape a question setting before outputting it into an unquoted = HTML attribute, allowing users with contributor-level access and above to i= nject arbitrary JavaScript that executes in the browser of any user viewing=
the affected quiz.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14824" target=3D= "_blank" rel=3D"noopener">CVE-2026-14824</a></td>
</tr>

<td class=3D"vendor-product">rclone--rclone</td>
<td>rclone is a command-line program to sync files and directories to and f= rom different cloud storage providers. From 1.40.0 until 1.75.0, rclone ser=
ve restic does not correctly reject URL paths beginning with ../ in cmd/ser= ve/restic/restic.go WithRemote, which accepts a leading parent path and pas= ses it to GET, HEAD, POST, and DELETE handlers for configured backends incl= uding WebDAV, FTP, HTTP, Memory, and SFTP. An attacker who can access the R= EST endpoint may read, create, overwrite, or delete objects outside the pat=
h configured by the operator when the operator publishes a backend subdirec= tory and the backend credential can access parent or sibling objects. This = issue is fixed in 1.75.0.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71309" target=3D= "_blank" rel=3D"noopener">CVE-2026-71309</a></td>
</tr>

<td class=3D"vendor-product">refirio--freo2</td>
<td>freo2 provided by refirio contains an unrestricted upload of file with = dangerous type vulnerability. A user with the highest-level administrative = privileges for the product may upload an executable file and execute arbitr= ary OS commands.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67243" target=3D= "_blank" rel=3D"noopener">CVE-2026-67243</a></td>
</tr>

<td class=3D"vendor-product">REST API Log--REST API Log</td>
<td>The REST API Log WordPress plugin before 1.7.1 does not bind the token = protecting its log download feature to the log entry being requested, nor d= oes it check the capability of the requester, allowing unauthenticated user=
s in possession of any such token to download the logged REST API requests = and responses of any entry, which may contain sensitive data such as creden= tials, authentication tokens or private content.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16547" target=3D= "_blank" rel=3D"noopener">CVE-2026-16547</a></td>
</tr>

<td class=3D"vendor-product">Rocket.Chat--Rocket.Chat</td>
<td>An unauthenticated path traversal (LFI) vulnerability exists under /cus= tom-sounds/ when CustomSounds storage is configured to FileSystem. By inclu= ding ../ sequences in the request path, an attacker can read arbitrary file=
s outside the base directory.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-56845" target=3D= "_blank" rel=3D"noopener">CVE-2026-56845</a></td>
</tr>

<td class=3D"vendor-product">rrrene--html_sanitize_ex</td>
<td>URL Redirection to Untrusted Site ('Open Redirect') vulnerability in th=
e HTML5 scrubber in rrrene html_sanitize_ex allows an unauthenticated remot=
e attacker to retarget a form already on the rendering page and receive wha= tever the victim submits, including credentials, via the form and formactio=
n attributes on an <input> element in sanitized HTML. HTML's form att= ribute associates an input with any form on the page by its id even when th=
e input sits outside that form, and formaction on a submit control override=
s the owning form's action. Neither attribute receives a scheme check, so a=
n absolute cross-origin URL survives sanitizing. No script executes. The sc= rubber allows neither form nor button, so the attacker cannot introduce a f= orm of their own and the rendering page must already contain a form carryin=
g an id. This issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66370" target=3D= "_blank" rel=3D"noopener">CVE-2026-66370</a></td>
</tr>

<td class=3D"vendor-product">rrrene--html_sanitize_ex</td>
<td>URL Redirection to Untrusted Site ('Open Redirect') vulnerability in th=
e HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker to for=
ce visitors of a page to navigate to a site of the attacker's choosing via =
a <meta http-equiv=3D"refresh"> element in sanitized HTML. HtmlSaniti= zeEx.html5/1 keeps attacker-supplied <meta> elements in its output. A=
meta element acts on the whole document rather than on the fragment it was=
embedded in, so it can also declare document-wide directives such as Conte= nt-Security-Policy. This is not cross-site scripting. Browsers do not navig= ate a meta refresh to a javascript: URL, so the uppercase JAVASCRIPT: filte=
r bypass yields no script execution and none was demonstrated. This issue a= ffects html_sanitize_ex: from 0.3.1 before 1.5.3.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66829" target=3D= "_blank" rel=3D"noopener">CVE-2026-66829</a></td>
</tr>

<td class=3D"vendor-product">rrrene--html_sanitize_ex</td>
<td>Inclusion of Functionality from Untrusted Control Sphere vulnerability =
in the HTML5 scrubber in rrrene html_sanitize_ex allows a remote attacker t=
o load a document of their choosing into a trusted page via the data attrib= ute of an <object> element in sanitized HTML. object is the one URI-b= earing element in lib/html_sanitize_ex/scrubber/html5.ex never registered t= hrough allow_tag_with_uri_attributes/3, and its only guard is a prefix matc=
h on lowercase "javascript:", so mixed-case variants, data: URIs, protocol-= relative URLs and same-origin paths all survive. This is not unconditional = cross-site scripting. A javascript: URL does not execute through <object=
data> in current browsers, data: documents load in an opaque origin, an=
d host-origin script execution additionally requires the application to ser=
ve attacker-controlled content from a same-origin path. This issue affects = html_sanitize_ex: from 0.3.1 before 1.5.3.</td>

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66843" target=3D= "_blank" rel=3D"noopener">CVE-2026-66843</a></td>
</tr>

<td class=3D"vendor-product">rrrene--html_sanitize_ex</td>
<td>Improper Neutralization of Special Elements in Output Used by a Downstr= eam Component ('Injection') vulnerability in the CSS scrubber in rrrene htm= l_sanitize_ex allows an unauthenticated remote attacker to inject CSS at-ru= les, including an import of a remote stylesheet, into a page served to othe=
r users. HtmlSanitizeEx.Scrubber.CSS.scrub/1 applies its property and value=
allowlist through a Regex.replace over substrings matching a property: val=
ue declaration pattern, so input that does not match that pattern is never = inspected and is copied to the output unchanged. @import url(//attacker.exa= mple/style.css); survives, while the same URL inside a background: url(...)=
declaration is removed. Element boundaries are resolved before the scrubbe=
r runs, so injected content does not escape the <style> element and n=
o script executes. This issue affects html_sanitize_ex: from 0.3.1 before 1= .5.4.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68747" target=3D= "_blank" rel=3D"noopener">CVE-2026-68747</a></td>
</tr>

<td class=3D"vendor-product">rrrene--html_sanitize_ex</td>
<td>Inefficient Regular Expression Complexity vulnerability in the CSS scru= bber in rrrene html_sanitize_ex allows an unauthenticated remote attacker t=
o exhaust server CPU via a long CSS declaration in sanitized HTML. The decl= aration regex in HtmlSanitizeEx.Scrubber.CSS.scrub/1 matches the property n= ame with an unbounded greedy [-\w]+ followed by a mandatory :, so a long ru=
n of word characters not followed by a colon makes the engine give back one=
character at a time and retry the colon at every start offset. The work is=
quadratic in the length of the run, and no length cap is applied to the CS=
S handed to the scrubber. An 80 KB <style> body costs roughly 2.4 sec= onds of scheduler time, so a few concurrent requests saturate the BEAM sche= duler pool and make the application unresponsive. The impact is CPU exhaust= ion only. Nothing is read, modified or disclosed. This issue affects html_s= anitize_ex: from 0.3.1 before 1.5.3.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68749" target=3D= "_blank" rel=3D"noopener">CVE-2026-68749</a></td>
</tr>

<td class=3D"vendor-product">rrrene--html_sanitize_ex</td>
<td>Inefficient Algorithmic Complexity vulnerability in the traversal engin=
e in rrrene html_sanitize_ex allows an unauthenticated remote attacker to e= xhaust server CPU and memory via a flat run of sibling elements in sanitize=
d HTML. The list clause of HtmlSanitizeEx.Traverser.traverse/2 recurses on = the tail of a sibling list and then evaluates List.flatten([head] ++ tail) = over the already flattened result, so every one of n siblings copies and re= -walks the entire remaining tail. The flattening is only needed for the rar=
e case where scrub returns several replacement nodes for one node, but the = cost is paid across the whole tail at every step, making traversal quadrati=
c in sibling count. The traverser sits on every public entry point, so no p= articular scrubber or configuration is required and the payload needs only = allowed tags. A 160 KB body of 20,000 sibling elements occupies a scheduler=
for roughly 1.7 seconds, and the cost grows faster than the body does. Thi=
s issue affects html_sanitize_ex: from 0.3.1 before 1.5.3.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-68750" target=3D= "_blank" rel=3D"noopener">CVE-2026-68750</a></td>
</tr>

<td class=3D"vendor-product">RRWO--File::Rotate::Simple</td> <td>File::Rotate::Simple versions before 0.4.0 for Perl create the target o=
f dangling symlinks when rotating files. When the file to be rotated is a s= ymbolic link to a missing file, and the touch option is enabled, then the r= otate method assumes that the file is absent (since the existence check is = against the target), and does not rotate it. But it touches the file, which=
creates the target. An attacker that has the ability to create the symlink=
can use this to create an arbitrary file with permissions of the process r= otating the files (which may be different from the process that normally wr= ites to the log file that is being rotated). Note that the touch option is = disabled by default.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17435" target=3D= "_blank" rel=3D"noopener">CVE-2026-17435</a></td>
</tr>

<td class=3D"vendor-product">ruby--json</td>
<td>Ruby JSON is a JSON implementation for Ruby. From 2.20.0 until 2.21.2, = Ruby's JSON native C extension clears the consumed JSON::ResumableParser in= put buffer but leaves state.start, state.cursor, and state.end pointing int=
o released storage. When partial_value reconstructs an incomplete object co= ntaining duplicate keys, the duplicate-key warning path calls cursor_positi= on, which dereferences those stale pointers. This results in a heap-use-aft= er-free and can terminate the Ruby process. An attacker who can supply JSON=
stream data to an application using JSON::ResumableParser may cause proces=
s termination when the application calls partial_value on incomplete attack= er-controlled input containing duplicate object keys. This issue has been f= ixed in version 2.21.2.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71847" target=3D= "_blank" rel=3D"noopener">CVE-2026-71847</a></td>
</tr>

<td class=3D"vendor-product">Safetipin--Safetipin Android 5.2.1</td>
<td>My Safetipin Android Application 5.2.1 contains Hardcoded credentials i=
n the authentication module, which allows remote attackers to bypass authen= tication and gain unauthorized access to user accounts via predictable OTP = values.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-63823" target=3D= "_blank" rel=3D"noopener">CVE-2025-63823</a></td>
</tr>

<td class=3D"vendor-product">Sean Barrett (nothings)--nothings stb</td>

<td>A heap-buffer-overflow vulnerability exists in the nothings stb TrueTyp=
e library, up to version 1.26, that is used for parsing TrueType font files=
. The vulnerability exists in the stbtt__GetGlyphShapeTT() function within = the nothings stb_truetype.h library when parsing malformed TTF (TrueType Fo= nt) files. The vulnerability resides in the glyph data parsing path. An att= acker can craft a malformed TTF file with an inflated endPtsOfContours valu=
e and truncate the remaining glyph data. When an application utilizing stb_= truetype.h (such as various game engines or graphics software) attempts to = load, bake, or render this malformed font via stbtt_GetGlyphShape(), the pa= rser will attempt to read past the end of the glyph data buffer, triggering=
the out-of-bounds read.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18497" target=3D= "_blank" rel=3D"noopener">CVE-2026-18497</a></td>
</tr>

<td class=3D"vendor-product">seblod.com--SEBLOD extension for Joomla</td> <td>Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLO=
D < 3.30.0, < 4.7.0, < 6.0.1 - An unauthenticated attacker could d= ownload files from both inside and outside the webroot.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66914" target=3D= "_blank" rel=3D"noopener">CVE-2026-66914</a></td>
</tr>

<td class=3D"vendor-product">SEO Redirection Plugin--SEO Redirection Plugin= </td>
<td>The SEO Redirection Plugin WordPress plugin before 9.19 does not perfor=
m a capability check in one of its authenticated AJAX actions, allowing any=
logged-in user such as a subscriber to read the site's configured 301 redi= rect rules, including their source and destination URLs.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13703" target=3D= "_blank" rel=3D"noopener">CVE-2026-13703</a></td>
</tr>

<td class=3D"vendor-product">Serverless-Devs--Serverless-Devs</td>
<td>The "s init" command in Serverless-Devs @serverless-devs/s <=3D 3.1.=
11 passes unsanitized user input to child_process.spawn() with shell: true.=
A URL ending in ".git" bypasses the only input check, allowing OS command = injection when a user runs "s init" with an attacker-controlled argument.</=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-51190" target=3D= "_blank" rel=3D"noopener">CVE-2026-51190</a></td>
</tr>

<td class=3D"vendor-product">Shopify--ruby-lsp</td>
<td>Ruby LSP is an implementation of the language server protocol for Ruby.=
Several workspace-level settings in the Ruby LSP VS Code extension prior t=
o version 0.10.4 could override the path to the Ruby executable, the versio=
n manager executables, or the Bundler `Gemfile` used at startup. A maliciou=
s repository containing a `.vscode/settings.json` could set these values to=
attacker-controlled targets. Opening and trusting the repository would the=
n execute code with the privileges of the developer. The Ruby LSP gem and c= lients of the language server in other editors are not affected. Version 0.= 10.4 of the Ruby LSP VS Code extension fixes the issue.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48122" target=3D= "_blank" rel=3D"noopener">CVE-2026-48122</a></td>
</tr>

<td class=3D"vendor-product">Simple Google Calendar Outlook Events Widget--= Simple Google Calendar Outlook Events Widget</td>
<td>The Simple Google Calendar Outlook Events Widget WordPress plugin befor=
e 3.1.0 does not validate a user-supplied URL before performing a server-si=
de request, allowing unauthenticated attackers to perform Server-Side Reque=
st Forgery attacks and, in some cases, read the response of the internal re= quest.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16536" target=3D= "_blank" rel=3D"noopener">CVE-2026-16536</a></td>
</tr>

<td class=3D"vendor-product">Simple Membership--Simple Membership</td>

<td>The Simple Membership WordPress plugin before 4.7.8 does not verify whe= ther user creation failed during registration before using the returned val=
ue as a user ID to update an account, allowing unauthenticated attackers to=
overwrite the primary administrator's account data (including the email ad= dress) and take over that account through the password reset flow.</td> <td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15930" target=3D= "_blank" rel=3D"noopener">CVE-2026-15930</a></td>
</tr>

<td class=3D"vendor-product">Simple Membership--Simple Membership</td>

<td>The Simple Membership WordPress plugin before 4.7.8 does not sanitise a=
subscriber name value received from an unauthenticated payment approval re= quest, nor escape it when displaying it in the administration dashboard, al= lowing unauthenticated attackers to store arbitrary JavaScript that execute=
s in an administrator's session.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15931" target=3D= "_blank" rel=3D"noopener">CVE-2026-15931</a></td>
</tr>

<td class=3D"vendor-product">Simply Schedule Appointments--Simply Schedule = Appointments</td>
<td>The Simply Schedule Appointments WordPress plugin before 1.6.12.11 does=
not perform a capability check on an administrative appointment-listing sh= ortcode, and its per-user result scoping fails open for non-staff users, al= lowing users with the Contributor role and above to disclose all customers'=
appointment records, including names, email addresses, phone numbers and n= otes, across the whole site.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15254" target=3D= "_blank" rel=3D"noopener">CVE-2026-15254</a></td>
</tr>

<td class=3D"vendor-product">SirenGPS--SirenGPS Android Application 2.19.44= </td>
<td>SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access = Control. An authenticated attacker can manipulate user identifier parameter=
s to bypass authorization controls and gain unauthorized READ and WRITE acc= ess to other users' personal information. The API fails to validate that th=
e requesting user is authorized to access the target user's data.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-63822" target=3D= "_blank" rel=3D"noopener">CVE-2025-63822</a></td>
</tr>

<td class=3D"vendor-product">Slick Slider--Slick Slider</td>
<td>The Slick Slider WordPress plugin before 0.5.3 does not sanitize and es= cape a shortcode attribute value before outputting it in an HTML attribute,=
allowing users with the Contributor role and above to perform Stored Cross= -Site Scripting attacks that execute when a user views the affected post.</=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16537" target=3D= "_blank" rel=3D"noopener">CVE-2026-16537</a></td>
</tr>

<td class=3D"vendor-product">Slim SEO--Slim SEO</td>
<td>The Slim SEO WordPress plugin before 4.9.11 does not restrict a post-me=
ta preview feature to posts the user is allowed to edit, verifying only rea=
d access, allowing users with the Contributor role to read arbitrary post m= eta, including protected and private keys, of published posts they do not o= wn, including password-protected posts and posts of non-public post types.<=

<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16957" target=3D= "_blank" rel=3D"noopener">CVE-2026-16957</a></td>
</tr>

<td class=3D"vendor-product">sm page duplicator--sm page duplicator</td>

<td>The sm page duplicator WordPress plugin through 1.0.0 does not sanitise=
and escape a stored value before using it in a SQL statement when duplicat= ing a page, allowing users with the Editor role and above to perform SQL In= jection attacks.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16539" target=3D= "_blank" rel=3D"noopener">CVE-2026-16539</a></td>
</tr>

<td class=3D"vendor-product">smarty-php--smarty</td>
<td>Smarty is a template engine for PHP, facilitating the separation of pre= sentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on t=
he 4.x line), Security::_checkDir() does not fully resolve symbolic links b= efore validating that a requested path lies within a configured secure dire= ctory. An attacker able to place or reference a symlink within a directory = Smarty treats as trusted (e.g., a template or config directory) could use i=
t to point outside the intended secure directory, bypassing the containment=
check and reading arbitrary files accessible to the PHP process. This issu=
e is fixed in versions 5.8.2 and 4.5.7.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62992" target=3D= "_blank" rel=3D"noopener">CVE-2026-62992</a></td>
</tr>

<td class=3D"vendor-product">smarty-php--smarty</td>
<td>Smarty is a template engine for PHP, facilitating the separation of pre= sentation (HTML/CSS) from application logic. From 5.0.0 until 5.8.4, Smarty=
's stream: resource-name handling does not adequately restrict which PHP st= ream wrappers and filter chains can be referenced from a template, allowing=
a php://filter-wrapped resource name to be used to read the contents of ar= bitrary local files accessible to the PHP process. An attacker able to auth=
or or influence a template's resource reference could exploit this to discl= ose sensitive file contents outside the intended template/config scope. Thi=
s issue is fixed in version 5.8.4.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-62996" target=3D= "_blank" rel=3D"noopener">CVE-2026-62996</a></td>
</tr>

<td class=3D"vendor-product">SoftMarket Digital Marketplace--SoftMarket Dig= ital Marketplace</td>
<td>The SoftMarket - Digital Marketplace WordPress plugin through 1.0.0 doe=
s not properly validate an authentication token in one branch of its email-= verification flow, allowing unauthenticated attackers to obtain a valid ses= sion as any verified user by supplying only that user's ID.</td>

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14557" target=3D= "_blank" rel=3D"noopener">CVE-2026-14557</a></td>
</tr>

<td class=3D"vendor-product">Sol--Sol</td>
<td>In sol commit 373d848 (2024-12-12), the broker does not fully release r= esources when handling malformed or duplicate CONNECT packets. When clients=
send invalid CONNECT packets - either due to repeated attempts or failed a= uthentication - the server may silently drop the connection or send a CONNA=
CK but fail to close the session or deallocate internal resources. This beh= avior allows an attacker to create numerous half-open connections that cons= ume memory and file descriptors indefinitely, potentially triggering the Li= nux OOM killer and causing a denial of service.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-63235" target=3D= "_blank" rel=3D"noopener">CVE-2025-63235</a></td>
</tr>

<td class=3D"vendor-product">Solace Extra--Solace Extra</td>
<td>The Solace Extra WordPress plugin before 1.6.1 does not perform capabil= ity checks in several of its AJAX actions and exposes the nonce that protec=
ts them on admin pages reachable by low-privileged users, allowing users wi=
th a role as low as Subscriber to modify site-wide presentation settings an=
d delete imported site-builder content.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16948" target=3D= "_blank" rel=3D"noopener">CVE-2026-16948</a></td>
</tr>

<td class=3D"vendor-product">Solace Extra--Solace Extra</td>
<td>The Solace Extra WordPress plugin before 1.6.1 does not perform capabil= ity or nonce checks in one of its AJAX actions, allowing any authenticated = user such as a subscriber (and, via CSRF, any logged-in user) to update pos=
t meta on arbitrary posts and to deactivate the site's active templates.</t=

<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16965" target=3D= "_blank" rel=3D"noopener">CVE-2026-16965</a></td>
</tr>

<td class=3D"vendor-product">Soliton Systems--MailZen Management Portal</td=

<td>Cross Site Scripting vulnerability in Soliton Systems MailZen Managemen=
t Portal v.2.62, v.2.63 allows a remote attacker to execute arbitrary code = via the Role Name, First Name, Last Name, and Username fields.</td>

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-51144" target=3D= "_blank" rel=3D"noopener">CVE-2026-51144</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository</td>
<td>An account holding the nexus:settings:update permission in Nexus Reposi= tory 3 (or the equivalent nexus:settings permission in the legacy Nexus Rep= ository 2) could submit arbitrary values as realm identifiers through an in= ternal configuration API that did not validate them against the set of regi= stered realms. Because unrecognized entries were persisted and re-evaluated=
on every realm load via a legacy code path, this could result in unintende=
d code executing inside the Nexus Repository process, and in some cases a p= ersistent authentication lockout that was not visible through the administr= ative UI.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17593" target=3D= "_blank" rel=3D"noopener">CVE-2026-17593</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 contained a privilege escalation vulnerability in th=
e REST privileges API. An authenticated user with permission to manage priv= ileges could, under certain role configurations, escalate their own access =
to full administrator by exploiting a type-confusion flaw in the privilege = update endpoint.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14644" target=3D= "_blank" rel=3D"noopener">CVE-2026-14644</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an inco= rrect authorization vulnerability (CWE-863) in the repository-creation user=
interface. An individual user account holding a delegated repository-admin=
privilege scoped to a specific repository format could create a repository=
of a different, unauthorized format, because authorization was checked aga= inst one request field while a separate, attacker-controlled field determin=
ed the repository format actually created. This does not affect the anonymo=
us user, which cannot hold this privilege by default. Fixed in version 3.95= .0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17594" target=3D= "_blank" rel=3D"noopener">CVE-2026-17594</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 did not fully sandbox JEXL expressions used in Conte=
nt Selectors. An account holding the nexus:selectors:create permission coul=
d construct an expression that read Java object properties not intended to =
be exposed to the expression engine, disclosing internal JVM class metadata=
such as class and classloader names. This issue does not permit method inv= ocation, object construction, or arbitrary code execution. This has been fi= xed by restricting property access in the JEXL sandbox to the intended data=
types.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17595" target=3D= "_blank" rel=3D"noopener">CVE-2026-17595</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 was found to be vulnerable to stored cross-site scri= pting (XSS). A user with the nexus:blobstores:create or nexus:blobstores:up= date permission could set a blob store name containing malicious script con= tent, which would later execute in the browser of another user viewing syst=
em health-check status. This issue has been fixed in version 3.95.0.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17596" target=3D= "_blank" rel=3D"noopener">CVE-2026-17596</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulner= ability in the email configuration verification feature. A user holding the=
nexus:settings:update permission could submit arbitrary host and port valu=
es to the email test/verification endpoint, causing the server to attempt o= utbound network connections to internal or otherwise restricted network add= resses. Differences in the server's response could be used to infer whether=
internal hosts and ports are reachable. This issue affects Nexus Repositor=
y 3 CE/Pro versions up to and including 3.94.1, and is fixed in version 3.9= 5.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17597" target=3D= "_blank" rel=3D"noopener">CVE-2026-17597</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Sonatype Nexus Repository 3 did not properly filter internal configurat= ion keys from user-supplied task properties when creating or updating a sch= eduled task through the administrative UI. An account holding permission to=
create at least one scheduled task type could supply a crafted property va= lue that caused the system to overwrite the configuration of an unrelated, = existing task instead of creating a new one.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17598" target=3D= "_blank" rel=3D"noopener">CVE-2026-17598</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 contained an endpoint used to change the administrat=
or account password during initial onboarding. This endpoint did not verify=
that onboarding was still in progress before allowing the password change,=
relying instead on the presence of a local onboarding artifact. As a resul=
t, an account holding the nexus:* permission could invoke the endpoint outs= ide the intended onboarding flow to replace the administrator password, and=
existing sessions were not invalidated after the change.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17599" target=3D= "_blank" rel=3D"noopener">CVE-2026-17599</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Sonatype Nexus Repository 3 did not immediately terminate a user's acti=
ve login session or revoke their cached permissions when that user's accoun=
t was deleted, deactivated, or had its password changed. A user whose accou=
nt was already logged in at the time of one of these actions could continue=
using their existing session to interact with the repository as though the=
account were still active, until that session independently expired. Depen= ding on the permissions previously held, this could allow continued unautho= rized access to read, modify, or delete repository content after access was=
intended to be revoked.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17600" target=3D= "_blank" rel=3D"noopener">CVE-2026-17600</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>A user holding a permission to update privilege definitions could modif=
y a wildcard privilege already assigned to their own role to grant broader = permissions than they were authorized to hold, including full administrativ=
e access, without any additional authorization check or role reassignment.<=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17601" target=3D= "_blank" rel=3D"noopener">CVE-2026-17601</a></td>
</tr>

<td class=3D"vendor-product">Sonatype--Nexus Repository 3</td>
<td>Nexus Repository 3 did not sufficiently restrict which HikariCP connect= ion-pool properties could be set through the DataStore configuration API. A=
user holding the nx-datastores-update permission could set the connectionI= nitSql property to execute arbitrary SQL against the configured database on=
every new connection. On the default H2 database backend, this could be le= veraged to achieve remote code execution as the Nexus process user.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17603" target=3D= "_blank" rel=3D"noopener">CVE-2026-17603</a></td>
</tr>

<td class=3D"vendor-product">SonicWall--Global VPN Client</td>
<td>SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerab=
le to an out-of-bounds kernel memory read in the SWIPsec.sys driver, which = could allow a local attacker to cause a system crash.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-66151" target=3D= "_blank" rel=3D"noopener">CVE-2026-66151</a></td>
</tr>

<td class=3D"vendor-product">SonicWall--SonicOS</td>
<td>A improper neutralization of HTTP Headers for Scripting Syntax vulnerab= ility in SonicOS could allow a remote attacker to manipulate the Host heade=
r and redirect firewall management users to arbitrary web domains.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-0516" target=3D"= _blank" rel=3D"noopener">CVE-2026-0516</a></td>
</tr>

<td class=3D"vendor-product">Stripe Payment Forms by WP Full Pay--Stripe Pa= yment Forms by WP Full Pay</td>
<td>The Stripe Payment Forms by WP Full Pay WordPress plugin before 8.5.2 d= oes not verify that the caller owns the Stripe payment intent referenced by=
two unauthenticated payment-form AJAX actions, allowing an unauthenticated=
visitor - using a nonce that is embedded in every public page containing a=
payment form - to change the amount of a payment intent that the Stripe Pa= yment Forms by WP Full Pay WordPress plugin before 8.5.2 then updates serve= r-side through the Stripe API with the store's secret key. An ownership che=
ck added in 8.5.0 was applied to only one payment-intent handler, leaving t=
he pricing-recalculation and payment-intent-update actions unprotected agai= nst amount manipulation.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16734" target=3D= "_blank" rel=3D"noopener">CVE-2026-16734</a></td>
</tr>

<td class=3D"vendor-product">Subscribe2--Subscribe2</td>
<td>The Subscribe2 WordPress plugin before 10.46 does not properly escape a=
user-supplied value before reflecting it into a public subscription form, = leading to Reflected Cross-Site Scripting that executes in the browser of a=
n unauthenticated visitor who interacts with the form through a crafted lin= k.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14331" target=3D= "_blank" rel=3D"noopener">CVE-2026-14331</a></td>
</tr>

<td class=3D"vendor-product">Subscriptions for WooCommerce--Subscriptions f=
or WooCommerce</td>
<td>The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does no=
t verify that the requester owns the subscription being viewed before rende= ring its details, allowing any authenticated customer to read another custo= mer's subscription information (the subscribed product, status, and dates) =
by supplying that subscription's ID.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15214" target=3D= "_blank" rel=3D"noopener">CVE-2026-15214</a></td>
</tr>

<td class=3D"vendor-product">Subscriptions for WooCommerce--Subscriptions f=
or WooCommerce</td>
<td>The Subscriptions for WooCommerce WordPress plugin before 2.0.1 does no=
t verify the user's capability before installing and activating a Subscript= ions for WooCommerce WordPress plugin before 2.0.1 from a user-supplied slu=
g through a nonce-protected AJAX action, allowing users with the Shop Manag=
er role (who lack Subscriptions for WooCommerce WordPress plugin before 2.0= .1-management capabilities) to install and activate arbitrary Subscriptions=
for WooCommerce WordPress plugin before 2.0.1, resulting in remote code ex= ecution.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15215" target=3D= "_blank" rel=3D"noopener">CVE-2026-15215</a></td>
</tr>

<td class=3D"vendor-product">Sunshine Photo Cart--Sunshine Photo Cart</td> <td>The Sunshine Photo Cart WordPress plugin before 3.6.12 does not perform=
access control checks in one of its AJAX actions, allowing unauthenticated=
users to retrieve the comments of images belonging to private, password-pr= otected or otherwise access-restricted galleries.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16561" target=3D= "_blank" rel=3D"noopener">CVE-2026-16561</a></td>
</tr>

<td class=3D"vendor-product">Super Store Finder WordPress--Super Store Find=
er WordPress</td>
<td>The Super Store Finder WordPress plugin through 7.8 does not sanitize a=
parameter of an unauthenticated AJAX action before using it in a SQL query=
, allowing unauthenticated attackers to perform SQL injection and extract d= ata from the database.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12965" target=3D= "_blank" rel=3D"noopener">CVE-2026-12965</a></td>
</tr>

<td class=3D"vendor-product">SVG Support--SVG Support</td>
<td>The SVG Support WordPress plugin before 2.5.17 does not apply its SVG s= anitisation to uploaded files using the .svgz extension, even though it reg= isters and serves them as SVG, allowing a user permitted to upload SVGs (su=
ch as an Author once granted upload access) to store a script-bearing file = that executes in the browser of anyone who later views it, including an adm= inistrator.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13340" target=3D= "_blank" rel=3D"noopener">CVE-2026-13340</a></td>
</tr>

<td class=3D"vendor-product">Systerel--S2OPC 1.7.3</td>
<td>S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handlin=
g. This allows a remote attacker to cause a denial of service</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67865" target=3D= "_blank" rel=3D"noopener">CVE-2026-67865</a></td>
</tr>

<td class=3D"vendor-product">Systerel--S2OPC 1.7.3</td>
<td>Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote a= ttacker to cause a denial of service via the LockedStaMac_ProcessMsg_Delete= MonitoredItemsResponse and SOPC_StaMac_NewDeleteMonitoredItems in the clien=
t wrapper DeleteMonitoredItems path</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67866" target=3D= "_blank" rel=3D"noopener">CVE-2026-67866</a></td>
</tr>

<td class=3D"vendor-product">Systerel--S2OPC 1.7.3</td>
<td>Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote a= ttacker to cause a denial of service via the Alarm/Conditions wrapper when = processing PublishResponse EventNotificationList data</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67867" target=3D= "_blank" rel=3D"noopener">CVE-2026-67867</a></td>
</tr>

<td class=3D"vendor-product">Systerel--S2OPC 1.7.3</td>
<td>Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote a= ttacker to cause a denial of service via the AddNodes, address_space_bs.c, = sopc_node_mgt_helper_internal.c, and toolkit_test_server</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67871" target=3D= "_blank" rel=3D"noopener">CVE-2026-67871</a></td>
</tr>

<td class=3D"vendor-product">Systerel--S2OPC 1.7.3</td>
<td>An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a de= nial of service via the event monitored-item queue resize handling</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-67872" target=3D= "_blank" rel=3D"noopener">CVE-2026-67872</a></td>
</tr>

<td class=3D"vendor-product">Tag, Category, and Taxonomy Manager--Tag, Cate= gory, and Taxonomy Manager</td>
<td>The Tag, Category, and Taxonomy Manager WordPress plugin before 3.51.0 = does not verify that a user is authorized to access a referenced post befor=
e processing it and returning derived data, allowing users with contributor=
privileges to disclose data from private or draft posts they do not own.</=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15231" target=3D= "_blank" rel=3D"noopener">CVE-2026-15231</a></td>
</tr>

<td class=3D"vendor-product">TECNO Mobile--Hi Browser</td>
<td>Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1=
on Android allows arbitrary file write via directory traversal sequences i=
n the filename.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18907" target=3D= "_blank" rel=3D"noopener">CVE-2026-18907</a></td>
</tr>

<td class=3D"vendor-product">Templately--Templately</td>
<td>The Templately WordPress plugin before 3.7.1 does not have an authorisa= tion check on one of its request handlers, allowing unauthenticated attacke=
rs to overwrite the administrator's stored cloud service connection with an=
account under their control, disconnecting the legitimate administrator an=
d redirecting the site's cloud template library to attacker-controlled cont= ent.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15359" target=3D= "_blank" rel=3D"noopener">CVE-2026-15359</a></td>
</tr>

<td class=3D"vendor-product">The GDPR Framework By Data443--The GDPR Framew= ork By Data443</td>
<td>The GDPR Framework By Data443 WordPress plugin before 2.4.0 does not pr= operly verify authorization or the identity of the data subject when record= ing cookie-consent choices and privacy requests, allowing unauthenticated a= ttackers to forge consent records for arbitrary email addresses and to floo=
d the site's privacy-request queue with arbitrary entries.</td>

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14816" target=3D= "_blank" rel=3D"noopener">CVE-2026-14816</a></td>
</tr>

<td class=3D"vendor-product">The HDF Group--HDF5</td>
<td>Untrusted pointer dereference in the render_bin_output function in the = h5dump tool in HDF5 before 2.3.0 allows attackers to cause a denial of serv= ice via a variable-length string dataset with more than one element dumped =
in binary mode, which corrupts the per-element stride calculation and cause=
s subsequent elements to be read from a misaligned offset and dereferenced =
as a pointer.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19023" target=3D= "_blank" rel=3D"noopener">CVE-2026-19023</a></td>
</tr>

<td class=3D"vendor-product">The HDF Group--HDF5</td>
<td>NULL pointer dereference in H5Pget_fill_value in HDF5 before 2.3.0 allo=
ws attackers to cause a denial of service via a dataset whose version 1 or =
2 fill value message has the "defined" flag set together with a negative si=
ze field, which is not normalized to the library's "undefined" sentinel and=
reaches H5T_path_find with a NULL datatype.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19024" target=3D= "_blank" rel=3D"noopener">CVE-2026-19024</a></td>
</tr>

<td class=3D"vendor-product">The HDF Group--HDF5</td>
<td>H5O__layout_decode in H5Olayout.c in HDF5 through 2.3.0 does not valida=
te that a chunked dataset's stored chunk-layout dimensionality matches its = dataspace rank when an existing dataset is opened, whereas this check is pe= rformed only at dataset-creation time. This allows attackers to cause a den= ial of service (divide-by-zero and application crash in H5S__hyper_iter_get= _seq_list in src/H5Shyper.c) via a crafted HDF5 file with mismatched chunk/= dataspace ranks that is opened and read via H5Dopen2 and H5Dread, e.g. by t=
he h5repack tool.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19025" target=3D= "_blank" rel=3D"noopener">CVE-2026-19025</a></td>
</tr>

<td class=3D"vendor-product">The HDF Group--HDF5</td>
<td>H5Z__filter_nbit in H5Znbit.c in HDF5 through 2.3.0 dereferences cd_val= ues[0] through cd_values[4] without validating that cd_values is non-NULL o=
r that cd_nelmts is at least 5, the fixed size of the filter's header. This=
allows attackers to cause a denial of service via a crafted HDF5 file that=
stores the N-Bit filter pipeline message with zero client-data values, ope= ned and read via H5Dread, e.g. by the h5ls or h5repack tools.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19026" target=3D= "_blank" rel=3D"noopener">CVE-2026-19026</a></td>
</tr>

<td class=3D"vendor-product">The HDF Group--HDF5</td>
<td>The H5Z__nbit_decompress_one_byte, H5Z__nbit_decompress_one_nooptype, a=
nd H5Z__nbit_decompress_one_atomic functions in H5Znbit.c in HDF5 through 2= .3.0 advance a read index into the compressed chunk buffer without bounding=
it against the buffer's actual size. This allows attackers to cause an out= -of-bounds heap read, and in constrained cases disclosure of adjacent heap = memory into decompressed dataset values, via a crafted HDF5 file whose N-Bi=
t filter parameters describe more decompressed data than the stored compres= sed chunk actually contains, triggered via H5Dread, e.g. by the h5ls or h5r= epack tools.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19027" target=3D= "_blank" rel=3D"noopener">CVE-2026-19027</a></td>
</tr>

<td class=3D"vendor-product">The HDF Group--HDF5</td> <td>H5Z__filter_fletcher32 in H5Zfletcher32.c in HDF5 through 2.3.0 compute=
s the data length to checksum by subtracting the 4-byte trailing checksum s= ize from the input buffer size without checking that the buffer is at least=
4 bytes, allowing a size_t underflow. This allows attackers to cause a den= ial of service (massively out-of-bounds read and application crash in H5_ch= ecksum_fletcher32) via a crafted HDF5 file with a Fletcher32-filtered chunk=
smaller than 4 bytes, triggered via H5Dread, e.g. by the h5ls or h5dump to= ols.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19028" target=3D= "_blank" rel=3D"noopener">CVE-2026-19028</a></td>
</tr>

<td class=3D"vendor-product">TIMLEGGE--Net::SAML2</td>
<td>Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypa=
ss by verifying responses against the response-embedded certificate in veri= fy_xml when no trust anchor is configured. verify_xml in Net::SAML2::Role::= VerifyXML runs "return if !$anchors && !$cacert;" as soon as the XM= L::Sig check succeeds, and that check uses the X.509 certificate taken from=
the response's own dsig:KeyInfo/dsig:X509Certificate element, so an unanch= ored response is checked only against the key it carries. Binding::POST dec= lares cacert as an optional Maybe[Str] with no default, so a POST binding b= uilt without one takes that path, and _verify_encrypted_assertion returns e= arly the same way with "return $xml unless $cacert;". Any caller that const= ructs Binding::POST or calls Assertion->new_from_xml without a cacert, c= ert_text, or anchors argument accepts a response signed by an attacker gene= rated key whose self-signed certificate is embedded in that response, authe= nticating an arbitrary assertion.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18089" target=3D= "_blank" rel=3D"noopener">CVE-2026-18089</a></td>
</tr>

<td class=3D"vendor-product">TIMLEGGE--Net::SAML2</td>
<td>Net::SAML2 versions before 0.86 for Perl allow SAML authentication bypa=
ss via XML signature wrapping because new_from_xml reads assertion identity=
with document-wide XPath instead of the signed subtree. new_from_xml reads=
the NameID, attribute values, SessionIndex, audience and other identity fi= elds with document-wide XPath, such as //saml:Assertion/saml:AttributeState= ment/saml:Attribute and //saml:Subject/saml:NameID, which select the first = matching element in document order rather than the element covered by the v= erified signature. handle_response confirms that a signature is present and=
, when a cacert is configured, that it chains to the CA, but XML::Sig verif= ies only the element named by the signature's Reference URI, so unsigned si= bling assertions in the same document are not covered. An attacker who hold=
s any one IdP-signed assertion can add an unsigned attacker-authored assert= ion earlier in document order; the signature still verifies and the documen= t-order XPath returns the attacker's NameID and attributes. Any caller that=
passes an untrusted Response to new_from_xml can accept identity fields fr=
om an assertion the IdP never signed, even when a cacert trust anchor is co= nfigured, so a party holding one valid IdP-signed assertion can authenticat=
e as an arbitrary user.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18092" target=3D= "_blank" rel=3D"noopener">CVE-2026-18092</a></td>
</tr>

<td class=3D"vendor-product">TIMLEGGE--Net::SAML2</td>
<td>Net::SAML2 versions before 0.86 for Perl allow authentication bypass be= cause _verify_encrypted_assertion accepts an EncryptedAssertion whose decry= pted content carries no signature. _verify_encrypted_assertion decrypts the=
EncryptedAssertion and returns it as verified when it carries no signature=
, via "return $xml unless $xpath->exists('dsig:Signature', $assert);". T=
he signature check and the trust anchor check that follow run only when a s= ignature is present, so a decrypted assertion with no dsig:Signature elemen=
t reaches new_from_xml unverified and its NameID and attributes are read in=
to the assertion object. An SP's encryption certificate is published in its=
SAML metadata so the IdP can encrypt to it, so any party can encrypt an un= signed assertion to that certificate, wrap it in a samlp:Response, and post=
it to the assertion consumer service. Any caller that configures a decrypt= ion key_file, and so accepts EncryptedAssertions, takes identity fields fro=
m an assertion that no trust anchor covers, and an unauthenticated party ca=
n authenticate as an arbitrary user. Callers with no key_file configured do=
not decrypt and are unaffected.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18108" target=3D= "_blank" rel=3D"noopener">CVE-2026-18108</a></td>
</tr>

<td class=3D"vendor-product">TIMLEGGE--XML::Sig</td>
<td>XML::Sig versions from 0.29 before 0.72 for Perl allow signature verifi= cation bypass because verify returns true when every signature was skipped = before any cryptographic check. verify in lib/XML/Sig.pm counts the `//dsig= :Signature` elements into `$numsigs` and iterates over them, but two paths = reach `next` before any digest or key check runs: a `SignedInfo/Reference/@= URI` that resolves to no element while `$numsigs` is greater than 1, and, w= hen `id_attr` is set, a reference that does not match the requested ID. The=
loop records nothing about what it checked, so when every signature takes = one of those paths control reaches the unconditional `return 1` that ends v= erify. Two `Signature` elements whose Reference URI names an ID that no ele= ment carries is enough, as is one such element combined with `id_attr`. Any=
caller that passes untrusted XML to verify can receive a true return for a=
document in which no digest and no signature value was checked; a `cert` o=
r `cert_text` trust anchor does not change this, because no key check runs.=
Versions up to 0.28 use an XML::XPath based verify that has no such skip a=
nd are not affected.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18568" target=3D= "_blank" rel=3D"noopener">CVE-2026-18568</a></td>
</tr>

<td class=3D"vendor-product">TIMLEGGE--XML::Sig</td>
<td>XML::Sig versions before 0.71 for Perl allow XPath injection in ID look= up. verify() and _get_signed_xml() in lib/XML/Sig.pm build XPath expression=
s by concatenating the SignedInfo/Reference/@URI value read from the docume=
nt being verified. The value is neither escaped nor checked against the NCN= ame grammar that XML requires of an ID, so a URI containing a single quote = closes the string literal in the generated expression and appends arbitrary=
XPath operators. A crafted URI can make the lookup match elements the refe= rence does not name, or every element in the document, so which node is sel= ected for digest verification is decided by the injected expression rather = than by the reference.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9390" target=3D"= _blank" rel=3D"noopener">CVE-2026-9390</a></td>
</tr>

<td class=3D"vendor-product">TIMLEGGE--XML::Sig</td>
<td>XML::Sig versions before 0.71 for Perl allow signature wrapping via dup= licate ID. _get_signed_xml() in lib/XML/Sig.pm, called from verify(), resol= ves the SignedInfo Reference/@URI to a node with the XPath expression "//*[= @ID=3D'$id']" and returns the first node of the resulting node set. A docum= ent in which two elements share that ID value is accepted: the digest and s= ignature are checked against whichever element comes first in document orde=
r, and the duplicate is not detected. Such a document verifies successfully=
while an application that resolves the same ID independently can read the = second, attacker supplied element; in a SAML2 context this places the conte= nts of an Assertion under attacker control.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9487" target=3D"= _blank" rel=3D"noopener">CVE-2026-9487</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox is vulnerable to an arbitrary = file deletion vulnerability in the send email, fax, SMS, etc. functionality=
. By specifying an @@COMMENTFILE command in the form field scjob, any file =
on the system can be deleted.=C2=A0This issue affects TeamDavid through Rol= lout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12070" target=3D= "_blank" rel=3D"noopener">CVE-2026-12070</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>The Webbox of TeamDavid by=C2=A0Tobit Laboratories AG=C2=A0constructs r= edirect URLs using user-supplied input, which is appended to the redirect t= arget in a 302 HTTP response. By using URL-encoded characters such as "%2e"=
(representing a dot), an attacker can manipulate the portion of the URL fo= llowing the top-level domain (TLD). If a similar, registerable TLD exists (= for example, if ".com" is the application's domain, and ".company" is avail= able for registration), an attacker can craft a URL to redirect users to a = malicious ".company" domain. By using URL-encoded line feeds, it becomes po= ssible to insert arbitrary response headers in the server's HTTP response. = This issue affects TeamDavid through Rollout 524.</td>

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12071" target=3D= "_blank" rel=3D"noopener">CVE-2026-12071</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox is vulnerable to HTTP header i= njection through the request body in the application's link storing functio= nality (//ServerClient_celink.htm), which is appended to the redirect targe=
t in the 302 HTTP response. If a line feed is added, this will also be adde=
d to the redirect link, resulting in the ability to control the response he= aders.=C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54199" target=3D= "_blank" rel=3D"noopener">CVE-2026-54199</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a local file = inclusion vulnerability in the send email, fax, SMS, etc. functionality. By=
specifying an '@@attach' command in the form field=C2=A0'scjob', files can=
be attached to a message, which can then be downloaded by an authenticated=
user. A filter is in place that restricts access to the David con-fig fold=
er and the user folder. However, this filter can be bypassed by specifying =
an alternate data stream, allowing the download of sensitive files such as = other users' access files containing their passwords or the server's privat=
e key.=C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54200" target=3D= "_blank" rel=3D"noopener">CVE-2026-54200</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox does not enforce authenticatio=
n or authorization checks when serving these log files. As a result, attack= ers can obtain sensitive error information or internal application details,=
potentially aiding in further attacks.=C2=A0This issue affects TeamDavid t= hrough Rollout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54201" target=3D= "_blank" rel=3D"noopener">CVE-2026-54201</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox is vulnerable to a path traver= sal vulnerability in the archive creation functionality. Because the archiv=
e path is user-controlled and insufficiently validated, an attacker can man= ipulate the input to traverse directories. This allows the creation of fold= ers in arbitrary locations, including sensitive directories such as C:\Wind= ows or for different users.=C2=A0This issue affects TeamDavid through Rollo=
ut 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54202" target=3D= "_blank" rel=3D"noopener">CVE-2026-54202</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Memory Leak to an Unauthorized Actor vulnerability in Tobit Laboratorie=
s AG TeamDavid's Webbox allows reading of sensitive information. When acces= sing the URL "/.well-known/mta-sts.", the application responds with memory.=
By repeatedly requesting this endpoint, an attacker can access sensitive i= nformation,=C2=A0including user passwords. Exploitation does not require au= thentication.=C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54203" target=3D= "_blank" rel=3D"noopener">CVE-2026-54203</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox 's search functionality accept=
s a "pathnameroot" parameter, which can be set to network locations using U=
NC paths (e.g., "\Server\Share"). The server processes these paths without = validation, resulting in outbound connection attempts to attacker-controlle=
d SMB servers. This enables unauthenticated attackers to trigger the server=
to authenticate to arbitrary SMB endpoints, potentially exposing NTLM auth= entication information (such as NTLM hashes). If outbound connections to po=
rt 445 (SMB) are permitted, attackers can use this to conduct SMB relay or = credential theft attacks. Exploitation of the "pathnameroot" parameter is p= ossible without authentication. This issue affects TeamDavid through Rollou=
t 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54204" target=3D= "_blank" rel=3D"noopener">CVE-2026-54204</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox 's link storing functionality = (//ServerClient_celink.htm) accepts a "pathname" parameter, which can be se=
t to network locations using UNC paths (e.g., "\Server\Share"). The server = processes these paths without validation, resulting in outbound connection = attempts to attacker-controlled SMB servers. This enables authenticated att= ackers to trigger the server to authenticate to arbitrary SMB endpoints, po= tentially exposing NTLM authentication information (such as NTLM hashes). I=
f outbound connections to port 445 (SMB) are permitted, attackers can use t= his to conduct SMB relay or credential theft attacks. Exploitation of the "= pathname" parameter is possible without authentication.=C2=A0This issue aff= ects TeamDavid through Rollout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54205" target=3D= "_blank" rel=3D"noopener">CVE-2026-54205</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox 's sending email, fax, SMS, et=
c. functionality accepts a @@INCLUDE command, which can be set to network l= ocations using UNC paths (e.g., "\Server\Share"). The server processes thes=
e paths without validation, resulting in outbound connection attempts to at= tacker-controlled SMB servers. This enables authenticated attackers to trig= ger the server to authenticate to arbitrary SMB endpoints, potentially expo= sing NTLM authentication information (such as NTLM hashes). If outbound con= nections to port 445 (SMB) are permitted, attackers can use this to conduct=
SMB relay or credential theft attacks. Exploitation of the "pathname" para= meter is possible without authentication.=C2=A0This issue affects TeamDavid=
through Rollout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54206" target=3D= "_blank" rel=3D"noopener">CVE-2026-54206</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox 's move archive functionality = ("!ArcEntryMove") accepts an arbitrary path, which can be set to network lo= cations using UNC paths (e.g., "\Server\Share"). The server processes these=
paths without validation, resulting in outbound connection attempts to att= acker-controlled SMB servers. This enables au-thenticated attackers to trig= ger the server to authenticate to arbitrary SMB endpoints, potentially expo= sing NTLM authentication information (such as NTLM hashes). If outbound con= nections to port 445 (SMB) are permitted, attackers can use this to conduct=
SMB relay or credential theft attacks. Exploitation of the "pathname" para= meter is possible without authentication.=C2=A0This issue affects TeamDavid=
through Rollout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54207" target=3D= "_blank" rel=3D"noopener">CVE-2026-54207</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a= rbitrary file write, allowing an unauthenticated attacker to create or writ=
e into existing files on the server with attacker-controlled content. This =
is possible because user input is written directly to files without proper = validation or restriction on file types. As a result, an attacker can creat=
e files (e.g., .htm), containing malicious JavaScript code. When a user acc= esses a file created in this way, stored cross-site scripting is triggered.= =C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54208" target=3D= "_blank" rel=3D"noopener">CVE-2026-54208</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application handles password c= hanges using a function triggered by including the string "(editini)" in th=
e file path, writing the new password to the specified "Archive.ini" file. = However, the application does not verify that the provided path actually re= fers to an "Archive.ini" file. If an attacker specifies a different file wi=
th excessive size, a buffer overflow occurs. This vulnerability allows an u= nauthenticated attacker to crash the server, resulting in denial of service= .=C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54209" target=3D= "_blank" rel=3D"noopener">CVE-2026-54209</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application implements various=
file upload functionalities that are vulnerable to a buffer overflow condi= tion. By specifying an excessively long filename in a file upload request, =
an unauthenticated attacker can trigger a crash of the server, resulting in=
a denial of service. Depending on the stack state or if a stack canary can=
be disclosed through another vulnerability, this buffer overflow could pot= entially be exploited for remote code execution, leading to full compromise=
of the server.=C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54210" target=3D= "_blank" rel=3D"noopener">CVE-2026-54210</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application's endpoint "//serv= erClient_close.html" is vulnerable to a buffer overflow vulnerability in mu= ltiple form data parameters. By submitting excessively long values in these=
parameters, an authenticated attacker can trigger a server crash, resultin=
g in denial of service. Depending on the stack state or if a stack canary c=
an be disclosed through another vulnerability, this buffer overflow could p= otentially be exploited for remote code execution, leading to full compromi=
se of the server.=C2=A0This issue affects TeamDavid through Rollout 524.</t=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54211" target=3D= "_blank" rel=3D"noopener">CVE-2026-54211</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application implements an API = endpoint that is vulnerable to a buffer overflow condition. By submitting a=
specially crafted JSON body, such as one that is at least 8 characters lon=
g and begins with a number, an unauthenticated attacker can cause the serve=
r to crash, resulting in denial of service. Depending on the stack state or=
if a stack canary can be disclosed through another vulnerability, this buf= fer overflow could potentially lead to remote code execution and full compr= omise of the server.=C2=A0This issue affects TeamDavid through Rollout 524.= </td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54212" target=3D= "_blank" rel=3D"noopener">CVE-2026-54212</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application exposes a function= ality that allows the server to be shut down when a specific endpoint (/int= ernalRestart) is accessed. This endpoint is accessible to unauthenticated u= sers over the public Internet. Instead of "restarting", the server shuts co= mpletely down. As a result, a remote attacker can trigger a persistent deni=
al of service by shutting down the web server without requiring authenticat= ion. Recovery requires manual administrator intervention to restart the ser= vice.=C2=A0This issue affects TeamDavid through Rollout 524.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54213" target=3D= "_blank" rel=3D"noopener">CVE-2026-54213</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to H= TTP header injection through the "cType" URL parameter, which allows arbitr= ary modification of the Content-Type header in HTTP responses. Because the = parameter does not properly restrict control characters such as URL-encoded=
newlines ("%0a") or colons, attackers can inject additional headers includ= ing extra Location headers into the server's response. This results e.g. in=
an open redirect vulnerability.=C2=A0This issue affects TeamDavid through = Rollout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54214" target=3D= "_blank" rel=3D"noopener">CVE-2026-54214</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox contains an open redirect vuln= erability via the "replyUrl" parameter. An attacker can exploit this vulner= ability to craft a URL within the application that, when visited, redirects=
the user's browser to an arbitrary third-party site. This can be abused fo=
r phishing attacks, where users receive a trusted domain link but are redir= ected to a phishing website.=C2=A0This issue affects TeamDavid through Roll= out 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54215" target=3D= "_blank" rel=3D"noopener">CVE-2026-54215</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application contains a reflect=
ed cross-site scripting (XSS) vulnerability. By sending a specially crafted=
link including an arbitrary path, an XSS payload or the parameter "EntryIn= fo", and the parameter "!templateName=3DentryMail", an attacker can cause t=
he payload to execute in the victim's browser when they click the link.=C2= =A0This issue affects TeamDavid through Rollout 524.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54216" target=3D= "_blank" rel=3D"noopener">CVE-2026-54216</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Tobit Laboratories AG TeamDavid's Webbox application is vulnerable to a=
stored XSS vulnerability. An attacker can send an email containing malicio=
us JavaScript code. When a user accesses the email, the stored cross-site s= cripting is triggered.=C2=A0This issue affects TeamDavid through Rollout 52= 4.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54217" target=3D= "_blank" rel=3D"noopener">CVE-2026-54217</a></td>
</tr>

<td class=3D"vendor-product">Tobit Laboratories AG--TeamDavid</td>
<td>Use of hard-coded cryptographic key vulnerability in Tobit Laboratories=
AG TeamDavid's Webbox. For users created locally in David, passwords are s= tored in various files using only obfuscation. Any user with access to the = server's file system, or who can otherwise extract files from the server (s=
ee vulnerability=C2=A0"Random File Read"), can potentially obtain affected = users' passwords.=C2=A0This issue affects TeamDavid through Rollout 524.</t=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-54218" target=3D= "_blank" rel=3D"noopener">CVE-2026-54218</a></td>
</tr>

<td class=3D"vendor-product">TONYC--Imager</td>
<td>Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent = heap bytes via strlen() over-read from zero-count ASCII EXIF entries in cop= y_string_tags. copy_string_tags() computes an ASCII EXIF tag's length as `e= ntry->size - 1` to strip the trailing NUL. A zero-count ASCII entry sets=
`entry->size` to 0, and the derived length reaches i_tags_add() as -1, = which is interpreted as a request to call strlen(), scanning past the entry=
to the next NUL and copying those bytes into the tag. JPEG reaches this pa=
th via im_decode_exif(), as does the separate Imager::File::WEBP distributi= on, which is fixed by upgrading Imager. Any caller of Imager->read() on =
an attacker-supplied image with such an entry may receive an exif_* tag hol= ding adjacent heap bytes instead of an empty string.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-19082" target=3D= "_blank" rel=3D"noopener">CVE-2026-19082</a></td>
</tr>

<td class=3D"vendor-product">tourmaster--tourmaster</td>
<td>The tourmaster WordPress plugin before 5.4.9 writes its order/booking e= xport to a fixed, predictable file inside its publicly accessible directory=
with no access control, allowing unauthenticated users to download the exp= orted customers' personal information once an administrator has run an expo= rt.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14240" target=3D= "_blank" rel=3D"noopener">CVE-2026-14240</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Archer A6 v4</td>
<td>A denial-of-service vulnerability exists in httpd service on Archer A6 =
v4 where the asynchronous systool instruction handlng path in httpd does no=
t properly synchronize or safely manage concurrent systool operations.=C2=
=A0 By sending crafted systool instructions through the asynchronous reques=
t path, successful exploitation may cause the httpd process or device manag= ement service to crash and may result in temporary loss of access to the we=
b management interface or device reboot.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9030" target=3D"= _blank" rel=3D"noopener">CVE-2026-9030</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Archer A6 v4</td>
<td>An input validation vulnerability exists in the HTTP-WRITEOEM handler d=
ue to insufficient validation of user-supplied data before it is processed =
by internal flash-write handling logic. Successful exploitation may cause h= ttpd process or device to crash, resulting in loss of access to the web int= erface and a denial-of-service condition.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-9031" target=3D"= _blank" rel=3D"noopener">CVE-2026-9031</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>A cryptographic weakness exists in the Omada device adoption process.= =C2=A0 During adoption, authentication credentials associated with site man= agement are transmitted using a weak hashing algorithm that does not provid=
e sufficient protection. An attacker who successfully intercepts adoption-r= elated authentication traffic may be able to recover valid credentials and = gain unauthorized access to managed devices or controller-managed environme= nts.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15544" target=3D= "_blank" rel=3D"noopener">CVE-2025-15544</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>A cryptographic weakness exists in the Omada adoption protocol.=C2=A0 T=
he protocol relies on hard-coded cryptographic keys to establish trust and = protect authentication exchanges between controllers and managed devices du= ring device adoption. An attacker may be able to impersonate trusted contro= llers or managed devices and gain access to sensitive adoption-related comm= unications.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15627" target=3D= "_blank" rel=3D"noopener">CVE-2025-15627</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>Affected Omada devices rely on embedded certificates that are shared ac= ross deployments to establish trust between controllers and managed devices=
. An attacker who obtains the embedded certificates may be able to imperson= ate trusted controllers or devices and intercept affected communications.</=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15628" target=3D= "_blank" rel=3D"noopener">CVE-2025-15628</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>A cryptographic weakness exists in the Omada adoption protocol where se= ssion encryption keys used to protect communications between controllers an=
d managed devices may be predictable due to insufficient entropy in session=
key generation. An attacker who successfully intercepts adoption-related c= ommunications may be able to recover session encryption keys and decrypt af= fected communications.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15629" target=3D= "_blank" rel=3D"noopener">CVE-2025-15629</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>A race condition exists in the cloud-based Omada device adoption proces=
s when an attacker may be able to interact with the adoption workflow befor=
e a legitimate device completes registration, resulting in provisioning inf= ormation being delivered to an attacker. Successful exploitation may allow = disclosure of provisioning information intended for a legitimate device.</t=

<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15630" target=3D= "_blank" rel=3D"noopener">CVE-2025-15630</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>A cryptographic weakness exists in affected Omada devices where site cr= edentials are protected using a legacy hashing algorithm that does not prov= ide sufficient protection. An attacker who obtains access to stored credent= ial data may be able to recover valid credentials to gain unauthorized acce=
ss to affected devices or management environments.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-15631" target=3D= "_blank" rel=3D"noopener">CVE-2025-15631</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--Omada Gateways</td>

<td>A certification validation weakness exists in communication between aff= ected Omada devices and cloud controllers. Certificate identity verificatio=
n does not adequately validate that a presented certificate corresponds to = the expected cloud controller hostname, which may allow certificate validat= ion protections to be bypassed under specific conditions. Successful exploi= tation may allow interception or modification of communication between affe= cted devices and cloud controllers.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-9291" target=3D"= _blank" rel=3D"noopener">CVE-2025-9291</a></td>
</tr>

<td class=3D"vendor-product">TP-Link Systems Inc.--P110 v1</td>
<td>Tapo P110 v1 smart Wi-Fi Plug contains an improper boundary validation = vulnerability in the handling of authenticated HTTP request bodies due to i= nsufficient input validation before memory copy operations. This may lead t=
o buffer overflow condition, causing the web service process to crash. Succ= essful exploitation may cause the web service process to stop responding or=
restart, resulting in a denial-of-service condition.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15314" target=3D= "_blank" rel=3D"noopener">CVE-2026-15314</a></td>
</tr>

<td class=3D"vendor-product">traefik--traefik</td>
<td>Traefik is an open source HTTP reverse proxy and load balancer. Prior t=
o 2.11.53, 3.6.24, and 3.7.9, Traefik's default HTTP reverse proxy forwards=
a plain HTTP/2 or HTTP/3 CONNECT request and its body to an HTTP/1.1 upstr= eam through a shared net/http.Transport. When the upstream answers the CONN= ECT with a keep-alive non-2xx response and does not drain the body, Traefik=
returns the desynchronized backend socket to its shared pool and reuses it=
for other clients. An unauthenticated attacker can use this behavior to ma=
ke a different client read the attacker's smuggled response, which can incl= ude authenticated or private content from another request. The ForwardAuth = middleware with forwardBody true and preserveRequestMethod true can re-issu=
e a CONNECT with the buffered body attached, exposing the auth-client pool =
to the same desynchronization. This issue is fixed in 2.11.53, 3.6.24, and = 3.7.9.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71324" target=3D= "_blank" rel=3D"noopener">CVE-2026-71324</a></td>
</tr>

<td class=3D"vendor-product">traefik--traefik</td>
<td>Traefik is an open-source edge router that makes publishing services a = fun and easy experience. Prior to 2.11.54, 3.6.25, and 3.7.10, cross-namesp= ace @kubernetescrd references are not rejected for TraefikService backend r= eferences resolved by the service resolver. A tenant confined by RBAC to a = single namespace can therefore bind its own router to a TraefikService owne=
d by another namespace and expose or reroute that namespace's backend, defe= ating the namespace isolation allowCrossNamespace=3Dfalse is meant to enfor= ce. This issue is fixed in version 2.11.54, 3.6.25, 3.7.10.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71325" target=3D= "_blank" rel=3D"noopener">CVE-2026-71325</a></td>
</tr>

<td class=3D"vendor-product">traefik--traefik</td>
<td>Traefik is an open source HTTP reverse proxy and load balancer. From 3.= 6.11 until 3.6.25 and 3.7.10, Traefik's BasicAuth middleware in pkg/middlew= ares/auth/basic_auth.go deduplicates concurrent password checks with a sing= leflight key built from the delimiter-free concatenation of password and se= cret, allowing an attacker who has a valid credential and the stored hash t=
o authenticate as an unconfigured username when headerField trusts the forw= arded identity. This issue is fixed in 3.6.25 and 3.7.10.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71326" target=3D= "_blank" rel=3D"noopener">CVE-2026-71326</a></td>
</tr>

<td class=3D"vendor-product">traefik--traefik</td>
<td>Traefik is an open source HTTP reverse proxy and load balancer. From 3.= 0.0 until 3.6.25 and 3.7.10, Traefik's Kubernetes Gateway API provider in p= kg/provider/kubernetes/gateway/httproute.go, grpcroute.go, tcproute.go, and=
tlsroute.go builds HTTPRoute, GRPCRoute, TCPRoute, and TLSRoute router and=
service identities by hyphen-concatenating namespace, route name, Gateway = identity, entry point, and rule index, allowing colliding Routes to overwri=
te another namespace's backend. This issue is fixed in 3.6.25 and 3.7.10.</=

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-71327" target=3D= "_blank" rel=3D"noopener">CVE-2026-71327</a></td>
</tr>

<td class=3D"vendor-product">Tranquil IT Systems--WAPT Server</td>
<td>A vulnerability in Wapt Server before version 2.6.1.17813 allows a=C2=
=A0 remote unauthenticated attacker to bypass security restriction using a = specially crafted packet and retrieve a valid session token for the targete=
d account.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-33591" target=3D= "_blank" rel=3D"noopener">CVE-2026-33591</a></td>
</tr>

<td class=3D"vendor-product">User Registration & Membership--User Regis= tration & Membership</td>
<td>The User Registration & Membership WordPress plugin before 5.2.6 do=
es not enforce the site's registration-disabled setting when processing reg= istration-form submissions, allowing unauthenticated users to create new ac= counts even when the administrator has turned off open registration.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16736" target=3D= "_blank" rel=3D"noopener">CVE-2026-16736</a></td>
</tr>

<td class=3D"vendor-product">Veeam--ONE</td>
<td>A vulnerability allowing a high-privileged user to execute arbitrary co=
de on the server.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58074" target=3D= "_blank" rel=3D"noopener">CVE-2026-58074</a></td>
</tr>

<td class=3D"vendor-product">Veeam--ONE</td>
<td>A vulnerability allowing an unauthenticated attacker to read arbitrary = files from the host, which can be further leveraged toescalate privileges l= ocally.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58075" target=3D= "_blank" rel=3D"noopener">CVE-2026-58075</a></td>
</tr>

<td class=3D"vendor-product">Veeam--ONE</td>
<td>A vulnerability allowing a low-privileged user to retrieve report data = outside the scope of a shared report link.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64630" target=3D= "_blank" rel=3D"noopener">CVE-2026-64630</a></td>
</tr>

<td class=3D"vendor-product">Veeam--ONE</td>
<td>A vulnerability allowing a low-privileged user to inject SQL and extrac=
t database contents.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64631" target=3D= "_blank" rel=3D"noopener">CVE-2026-64631</a></td>
</tr>

<td class=3D"vendor-product">Veeam--ONE</td>
<td>A vulnerability allowing remote unauthenticated code execution on the a= gent host.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64633" target=3D= "_blank" rel=3D"noopener">CVE-2026-64633</a></td>
</tr>

<td class=3D"vendor-product">Veeam--ONE</td>
<td>A vulnerability allowing local privilege escalation to the Reporter ser= vice context.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64634" target=3D= "_blank" rel=3D"noopener">CVE-2026-64634</a></td>
</tr>

<td class=3D"vendor-product">Veeam--Service Provider Console</td>
<td>A vulnerability in Veeam Service Provider Console allowing an unauthent= icated attacker to exhaust host memory and cause adenial of service.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58067" target=3D= "_blank" rel=3D"noopener">CVE-2026-58067</a></td>
</tr>

<td class=3D"vendor-product">Veeam--Service Provider Console</td>
<td>A vulnerability in Veeam Service Provider Console allowing an unauthent= icated attacker to access the proxied appliance API asPortal Administrator = during a short window after an administrator session begins.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58071" target=3D= "_blank" rel=3D"noopener">CVE-2026-58071</a></td>
</tr>

<td class=3D"vendor-product">Veeam--Service Provider Console</td>
<td>A vulnerability in Veeam Service Provider Console allowing arbitrary fi=
le write on the management server, which can lead to remotecode execution.<=

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58072" target=3D= "_blank" rel=3D"noopener">CVE-2026-58072</a></td>
</tr>

<td class=3D"vendor-product">Veeam--Service Provider Console</td>
<td>A vulnerability in Veeam Service Provider Console allowing an unauthent= icated attacker to impersonate a managed agent andobtain that agent's crede= ntials.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-58073" target=3D= "_blank" rel=3D"noopener">CVE-2026-58073</a></td>
</tr>

<td class=3D"vendor-product">Vestel--Telefunken TE24553B45V2DZ Smart TV</td=

<td>An improper restriction of URL schemes and destinations in the SmartCen= ter browserseturl command in the Telefunken TE24553B45V2DZ Smart TV running=
on the Vestel MB181 / Voltron181 / TiVo OS platform allows an attacker wit=
h access to the same local network to cause the embedded browser to issue r= equests to unintended loopback/internal destinations, including 127.0.0.1 a= ddresses. In demonstrated scenarios, requests initiated through the SmartCe= nter browserseturl mechanism could reach an internal service and receive a = successful response, although the same destination was not reachable throug=
h normal browser navigation. The issue affects firmware version V2.78.0.0 a=
nd is fixed in firmware version V2.85.2.0.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15570" target=3D= "_blank" rel=3D"noopener">CVE-2026-15570</a></td>
</tr>

<td class=3D"vendor-product">Vim--Vim Project v9.2.0389</td>
<td>An issue in Vim Project v9.2.0389 and earlier allows a local attacker t=
o execute arbitrary code via the vms_fixfilename() function within file vim= /src/os_vms.c</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-51400" target=3D= "_blank" rel=3D"noopener">CVE-2026-51400</a></td>
</tr>

<td class=3D"vendor-product">Vim--Vim Project v9.2.0389</td>
<td>An issue in Vim Project v9.2.0389 and earlier allows a local attacker t=
o execute arbitrary code via the vms_fixfilename() function within file vim= /src/os_vms.c</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-51401" target=3D= "_blank" rel=3D"noopener">CVE-2026-51401</a></td>
</tr>

<td class=3D"vendor-product">Visualizer--Visualizer</td>
<td>The Visualizer WordPress plugin before 4.0.6 does not restrict a user-s= upplied URL to safe address ranges before fetching it server-side, allowing=
users with Contributor-level access and above to perform Server-Side Reque=
st Forgery against link-local instance-metadata endpoints. As the fetched r= esponse is returned in the reply, the attack is non-blind, enabling retriev=
al of cloud instance metadata (including IAM credentials) on cloud-hosted s= ites.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14939" target=3D= "_blank" rel=3D"noopener">CVE-2026-14939</a></td>
</tr>

<td class=3D"vendor-product">VuFind--VuFind v11.0.3</td>
<td>Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInor= rect Access Control. The application fails to stop processing an incoming r= equest in VuFind\Controller\AbstractBase::validateAccessPermission after it=
has found that controller level access permissions do not allow access to = the requested function. The requester receives a response indicating that a= ccess was denied, but the actual function is executed regardless of that.</=

<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52466" target=3D= "_blank" rel=3D"noopener">CVE-2026-52466</a></td>
</tr>

<td class=3D"vendor-product">Webinfos--Webinfos</td>
<td>The Webinfos WordPress plugin through 1.2 does not validate the type or=
name of uploaded files, nor restrict the upload action with any authentica= tion, capability, or nonce check, allowing unauthenticated attackers to upl= oad arbitrary files (including PHP) to a web-accessible directory, leading =
to remote code execution on servers that execute PHP from the uploads path.= </td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12872" target=3D= "_blank" rel=3D"noopener">CVE-2026-12872</a></td>
</tr>

<td class=3D"vendor-product">WebPros--Plesk</td>
<td>Improper privilege management in the XML-RPC API of Plesk before 18.0.8=
0, allows an authenticated reseller to obtain an administrative session for=
the root user account.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64637" target=3D= "_blank" rel=3D"noopener">CVE-2026-64637</a></td>
</tr>

<td class=3D"vendor-product">Welcart e-Commerce--Welcart e-Commerce</td>

<td>The Welcart e-Commerce WordPress plugin before 2.11.32 does not properl=
y sanitise a value taken from an imported CSV file before using it in a SQL=
statement, allowing users with the Editor role and above (including its cu= stom shop-management roles) to perform SQL injection attacks.</td>

<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16065" target=3D= "_blank" rel=3D"noopener">CVE-2026-16065</a></td>
</tr>

<td class=3D"vendor-product">Wellbia--XIGNCODE3</td>
<td>Improper access control in the IRP_MJ_WRITE command interface in Wellbi=
a XIGNCODE3 xhunter2.sys, version 2026.6.1.192, allows a local, unprivilege=
d attacker to achieve local privilege escalation to NT AUTHORITY\SYSTEM, ex= tract credentials from PPL-protected lsass.exe, and terminate PPL-protected=
security processes.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15430" target=3D= "_blank" rel=3D"noopener">CVE-2026-15430</a></td>
</tr>

<td class=3D"vendor-product">WGDashboard--WGDashboard</td>
<td>A Server-Side Request Forgery (SSFR) vulnerability exist in WGDashboard=
version 4.2.3 and earlier. The webhook functionality allows authenticated = attackers to make arbitrary HTTP requests and retrieve responses.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15732" target=3D= "_blank" rel=3D"noopener">CVE-2026-15732</a></td>
</tr>

<td class=3D"vendor-product">WGDashboard--WGDashboard</td>
<td>A Remote Code Execution (RCE) vulnerability exist in WGDashboard versio=
n 4.2.3 and earlier. Multiple OS command injection allows authenticated att= ackers to execute arbitrary commands as root.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15733" target=3D= "_blank" rel=3D"noopener">CVE-2026-15733</a></td>
</tr>

<td class=3D"vendor-product">WGDashboard--WGDashboard</td>
<td>A Server-Side Template Injection (SSTI) vulnerability in WGDashboard ve= rsion 4.3.2 and earlier, allows authenticated attackers to execute arbitrar=
y code as root.</td>
<td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15734" target=3D= "_blank" rel=3D"noopener">CVE-2026-15734</a></td>
</tr>

<td class=3D"vendor-product">WhiskeySockets--Baileys</td>
<td>Baileys is a cocket-based TS/JavaScript API for WhatsApp Web. In versio=
ns prior to both 6.7.22 and 7.0.0-rc12, any Baileys session can be sent a m= alicious payload via the placeholderResendMessage and trigger a fake messag= es.upsert event with a fake message key and payload. This allows anyone to = spoof messages. The same exploit also allows an attacker to corrupt the app=
state sync system by sending fake key shares, and also allows for history = sync spoofing which also serves the same problem, injecting fake previous c= ontext or "on-demand" sync. This issue has been fixed in versions 6.7.22 an=
d 7.0.0-rc12.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48063" target=3D= "_blank" rel=3D"noopener">CVE-2026-48063</a></td>
</tr>

<td class=3D"vendor-product">Wired Impact Volunteer Management--Wired Impac=
t Volunteer Management</td>
<td>The Wired Impact Volunteer Management WordPress plugin before 2.8.2 doe=
s not have authorisation checks in one of its AJAX actions, and does not ve= rify that the RSVP being removed belongs to the requesting user, allowing u= sers with a role as low as Subscriber to remove arbitrary users' RSVPs from=
any volunteer opportunity.</td>
<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16546" target=3D= "_blank" rel=3D"noopener">CVE-2026-16546</a></td>
</tr>

<td class=3D"vendor-product">WordPress--WordPress</td>
<td>WordPress is vulnerable to a pre-auth reflected XSS vulnerability on th=
e login screen. Via a specially crafted malicious third-party website hoste=
d by an attacker, it is possible for this to be escalated to an RCE vulnera= bility with conditions outside of the attackers control. This requires succ= essful social engineering of and explicit interaction by the target victim.=
This issue affects all versions of WordPress. Version 7.0.3 has been relea= sed, containing a fix for the vulnerability, and as a courtesy to users on = older branches the fix has been backported to all branches back to 4.7. Dis= covered and responsibly disclosed by [the team at pwn.ai](https://pwn.ai/).= </td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-64638" target=3D= "_blank" rel=3D"noopener">CVE-2026-64638</a></td>
</tr>

<td class=3D"vendor-product">WP 2FA--WP 2FA</td>
<td>The WP 2FA WordPress plugin before 4.1.0 does not validate the second a= uthentication factor when one of its supported methods is selected at login=
, allowing an attacker who already knows a user's password to bypass two-fa= ctor authentication and fully access the account, including administrator a= ccounts.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15372" target=3D= "_blank" rel=3D"noopener">CVE-2026-15372</a></td>
</tr>

<td class=3D"vendor-product">WP Custom HTML Page--WP Custom HTML Page</td> <td>The WP Custom HTML Page WordPress plugin through 0.6.2 does not sanitis=
e HTML stored through one of its custom page handlers, nor restrict it to u= sers allowed to post unfiltered HTML, allowing users with the Author role t=
o store JavaScript that is served unescaped at a public URL and executes fo=
r any visitor, including administrators.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16942" target=3D= "_blank" rel=3D"noopener">CVE-2026-16942</a></td>
</tr>

<td class=3D"vendor-product">WP Data Access--WP Data Access</td>
<td>The WP Data Access WordPress plugin before 5.5.79 does not validate the=
column names it accepts on one of its unauthenticated AJAX actions, and th=
e nonce guarding that action does not cover them, allowing unauthenticated = attackers to read arbitrary columns of the database table the affected fron= t-end form is bound to, including user password hashes where that table is = the users table.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18032" target=3D= "_blank" rel=3D"noopener">CVE-2026-18032</a></td>
</tr>

<td class=3D"vendor-product">WP Directory Kit--WP Directory Kit</td>
<td>The WP Directory Kit WordPress plugin before 1.5.5 does not sanitize an=
d escape a parameter before using it in a SQL statement through one of its = authenticated AJAX actions, which lacks authorization and nonce checks, all= owing any authenticated user such as a Subscriber to perform SQL injection = attacks.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16589" target=3D= "_blank" rel=3D"noopener">CVE-2026-16589</a></td>
</tr>

<td class=3D"vendor-product">WP Directory Kit--WP Directory Kit</td>
<td>The WP Directory Kit WordPress plugin before 1.5.5 does not perform aut= horization or nonce checks on one of its authenticated AJAX actions, allowi=
ng any authenticated user such as a Subscriber to retrieve stored contact m= essages and associated user data belonging to other users.</td> <td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16590" target=3D= "_blank" rel=3D"noopener">CVE-2026-16590</a></td>
</tr>

<td class=3D"vendor-product">WP Directory Kit--WP Directory Kit</td>
<td>The WP Directory Kit WordPress plugin before 1.5.5 does not perform aut= horization or nonce checks on one of its authenticated AJAX actions, allowi=
ng any authenticated user such as a Subscriber to disclose the WP Directory=
Kit WordPress plugin before 1.5.5 settings including sensitive API keys an=
d secrets.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16594" target=3D= "_blank" rel=3D"noopener">CVE-2026-16594</a></td>
</tr>

<td class=3D"vendor-product">WP Directory Kit--WP Directory Kit</td>
<td>The WP Directory Kit WordPress plugin before 1.5.5 does not perform aut= horization or nonce checks on one of its authenticated AJAX actions, allowi=
ng any authenticated user such as a Subscriber to disclose the site's user = list and unpublished listings belonging to other users.</td> <td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16595" target=3D= "_blank" rel=3D"noopener">CVE-2026-16595</a></td>
</tr>

<td class=3D"vendor-product">WP Directory Kit--WP Directory Kit</td>
<td>The WP Directory Kit WordPress plugin before 1.5.5 does not properly sa= nitise and escape a parameter before using it in a SQL statement, leading t=
o a SQL injection exploitable by unauthenticated users.</td> <td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18473" target=3D= "_blank" rel=3D"noopener">CVE-2026-18473</a></td>
</tr>

<td class=3D"vendor-product">WP Events Manager--WP Events Manager</td>

<td>The WP Events Manager WordPress plugin before 2.2.5 does not validate t=
he requested quantity when registering for a paid event and computes the pr= ice from the attacker-controlled quantity, allowing any authenticated user =
to create a completed booking for a paid event without making a payment.</t=

<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14205" target=3D= "_blank" rel=3D"noopener">CVE-2026-14205</a></td>
</tr>

<td class=3D"vendor-product">WP MAPS PRO--WP MAPS PRO</td>
<td>The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capabi= lity check in one of its AJAX actions, which is also available to unauthent= icated users, and does not restrict the operation it dispatches, allowing u= nauthenticated attackers to trigger uncontrolled recursion that exhausts se= rver resources, resulting in a Denial of Service.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18464" target=3D= "_blank" rel=3D"noopener">CVE-2026-18464</a></td>
</tr>

<td class=3D"vendor-product">WP MAPS PRO--WP MAPS PRO</td>
<td>The WP MAPS PRO WordPress plugin before 6.1.3 does not perform a capabi= lity check in one of its AJAX actions, which is also available to unauthent= icated users, and does not properly validate a user-controlled path before = using it in a file inclusion, allowing unauthenticated attackers to include=
and execute arbitrary existing local PHP files on the server.</td> <td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18465" target=3D= "_blank" rel=3D"noopener">CVE-2026-18465</a></td>
</tr>

<td class=3D"vendor-product">WP Maps--WP Maps</td>
<td>The WP Maps WordPress plugin before 4.9.7 does not perform a capability=
check in one of its AJAX actions and does not properly validate a user-con= trolled path before using it in a file inclusion, allowing users with a Sub= scriber account to include and execute arbitrary existing local PHP files o=
n the server.</td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16263" target=3D= "_blank" rel=3D"noopener">CVE-2026-16263</a></td>
</tr>

<td class=3D"vendor-product">WP Maps--WP Maps</td>
<td>The WP Maps WordPress plugin before 4.9.7 does not perform a capability=
check in one of its AJAX actions and does not restrict the operation it di= spatches, allowing users with a Subscriber account to trigger uncontrolled = recursion that exhausts server resources, resulting in a Denial of Service.= </td>
<td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16265" target=3D= "_blank" rel=3D"noopener">CVE-2026-16265</a></td>
</tr>

<td class=3D"vendor-product">WP Photo Album Plus--WP Photo Album Plus</td> <td>The WP Photo Album Plus WordPress plugin before 9.2.07.002 does not per= form any capability or nonce check on one of its public REST endpoint actio= ns, allowing unauthenticated users to delete the generated album export ZIP=
archives it stores.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-17014" target=3D= "_blank" rel=3D"noopener">CVE-2026-17014</a></td>
</tr>

<td class=3D"vendor-product">WP Statistics--WP Statistics</td>
<td>The WP Statistics WordPress plugin before 14.16.10 does not perform a c= apability check on a set of dashboard analytics AJAX handlers, relying only=
on a nonce that every authenticated user holds, allowing users with Subscr= iber-level access and above to disclose the site's visitor analytics data.<=

<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16562" target=3D= "_blank" rel=3D"noopener">CVE-2026-16562</a></td>
</tr>

<td class=3D"vendor-product">WPC Order Tip for WooCommerce--WPC Order Tip f=
or WooCommerce</td>
<td>The WPC Order Tip for WooCommerce WordPress plugin before 3.3.1 does no=
t perform authorisation or nonce checks in one of its reporting features, a= llowing unauthenticated attackers to retrieve sensitive order data belongin=
g to any customer of the store, such as billing names, order IDs and status= es, fee amounts and order dates.</td>
<td>2026-08-09</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-18357" target=3D= "_blank" rel=3D"noopener">CVE-2026-18357</a></td>
</tr>

<td class=3D"vendor-product">WPCargo Track & Trace--WPCargo Track &=
Trace</td>
<td>The WPCargo Track & Trace WordPress plugin before 8.0.4 does not pr= operly sanitise and escape a parameter before using it in a SQL statement, = allowing unauthenticated users to perform SQL injection attacks. This affec=
ts a code path distinct from the one addressed by CVE-2024-44004.</td> <td>2026-08-06</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12713" target=3D= "_blank" rel=3D"noopener">CVE-2026-12713</a></td>
</tr>

<td class=3D"vendor-product">wpForo Forum--wpForo Forum</td>
<td>The wpForo Forum WordPress plugin before 3.1.3 does not restrict which = profile fields a member may set when editing their own account, allowing us= ers with a subscriber-level account to write administrator-controlled accou= nt-state and reputation fields on their own profile, including self-activat= ing a pending or banned account and forging their forum reputation score.</=

<td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-12698" target=3D= "_blank" rel=3D"noopener">CVE-2026-12698</a></td>
</tr>

<td class=3D"vendor-product">xwiki--xwiki-platform</td>
<td>XWiki Platform WebJars API is a package for XWiki, a generic wiki platf= orm. Starting with version 9.6-rc-1 and prior to versions 16.10.17, 17.4.9,=
and 17.10.3, a potential path traversal vulnerability allow an attacker wh=
o manages to get a malicious WebJar extension installed on the wiki to writ=
e arbitrary files. While the consequences could be severe like overriding c= onfiguration files and setting the superadmin password, the attack first re= quires that the attacker already has admin access to at least a subwiki to =
be able to install a malicious extension. Further, the attacker needs to pu= blish a malicious extension in an extension repository that is configured i=
n the instance. This vulnerability has been patched in XWiki 16.10.17, 17.4= .9, 17.10.3, and 18.0.0RC1. XWiki is not aware of any workarounds except fo=
r being careful whom developers grant script and admin rights to.</td> <td>2026-08-07</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-48047" target=3D= "_blank" rel=3D"noopener">CVE-2026-48047</a></td>
</tr>

<td class=3D"vendor-product">YayPricing--YayPricing</td>
<td>The YayPricing WordPress plugin before 3.5.7 does not perform capabilit=
y checks on several of its REST API routes, relying only on a shared nonce,=
allowing any authenticated user such as a subscriber to overwrite the stor= e's pricing configuration and to disclose private coupon codes.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-15230" target=3D= "_blank" rel=3D"noopener">CVE-2026-15230</a></td>
</tr>

<td class=3D"vendor-product">YMC Filter--YMC Filter</td>
<td>The YMC Filter WordPress plugin before 3.12.8 does not sanitize and esc= ape a layout builder setting before outputting it on a public endpoint, and=
does not verify object ownership when the setting is saved, allowing users=
with the Contributor role and above to store JavaScript that executes in t=
he browser of any visitor viewing an affected filter.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16558" target=3D= "_blank" rel=3D"noopener">CVE-2026-16558</a></td>
</tr>

<td class=3D"vendor-product">YMC Filter--YMC Filter</td>
<td>The YMC Filter WordPress plugin before 3.12.9 does not sanitize SVG fil=
es uploaded through one of its icon upload features and permits their uploa=
d by low-privileged users, allowing users with the Author role and above to=
upload a file containing JavaScript that executes in the site's origin whe=
n the file is viewed.</td>
<td>2026-08-08</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-16559" target=3D= "_blank" rel=3D"noopener">CVE-2026-16559</a></td>
</tr>

<td class=3D"vendor-product">Z-Blog--Z-BlogPHP 1.7.5</td>
<td>A SQL injection vulnerability in Z-BlogPHP 1.7.5 allows authenticated a= ttackers to execute arbitrary SQL commands via the id parameter in the Comm= entBat feature.</td>
<td>2026-08-03</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-52521" target=3D= "_blank" rel=3D"noopener">CVE-2026-52521</a></td>
</tr>

<td class=3D"vendor-product">Zammad--Zammad</td>
<td>Zammad 7.1.0 contains an authenticated improper authorization vulnerabi= lity in the ticket article attachment cloning endpoint.</td> <td>2026-08-04</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-13229" target=3D= "_blank" rel=3D"noopener">CVE-2026-13229</a></td>
</tr>

<td class=3D"vendor-product">Zosi--Zosi C513M</td>
<td>Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control=
. The application contains hardcoded credentials in the RTSP authentication=
mechanism. An attacker with network access can use the unchangeable defaul=
t credentials to access the RTSP video stream, resulting in unauthorized vi= ewing of camera footage.</td>
<td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2025-70962" target=3D= "_blank" rel=3D"noopener">CVE-2025-70962</a></td>
</tr>

<td class=3D"vendor-product">zportals--zportals</td>
<td>The zportals WordPress plugin before 6.3.4 does not properly validate u= ploaded files, trusting the client-supplied content type and preserving the=
original file extension, allowing any authenticated user (Subscriber or hi= gher) to upload arbitrary PHP files and achieve remote code execution.</td> <td>2026-08-05</td>
<td>not yet calculated</td>
<td><a href=3D"https://www.cve.org/CVERecord?id=3DCVE-2026-14553" target=3D= "_blank" rel=3D"noopener">CVE-2026-14553</a></td>
</tr>
</tbody>
</table>
<p><a href=3D"#top">Back to top</a></p>
</div>
</div>
</div>
<style>body {
font-size: 1em; font-family: Arial, Verdana, sans-serif; font-weight: norma=
l; font-style: normal; color: #333333;
}
</style>
=20

<div id=3D"mail_footer">
<p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; colo=
r: #757575;">Having trouble viewing this message?=C2=A0</span><a href=3D"ht= tps://content.govdelivery.com/accounts/USDHSCISA/bulletins/4244c2b" target= =3D"_blank" rel=3D"noopener">View it as a webpage</a>.=C2=A0<a href=3D"http= s://content.govdelivery.com/accounts/USDHS/bulletins/292141e" target=3D"_bl= ank" rel=3D"noopener"></a><span style=3D"font-size: 10.0pt; color: #757575;= "></span></p>
<p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; color: #= 757575;">You are subscribed to updates from the </span><a href=3D"https://w= ww.cisa.gov"><span style=3D"font-size: 10.0pt;">Cybersecurity and Infrastru= cture Security Agency</span></a><span style=3D"font-size: 10.0pt; color: #7= 57575;"> (CISA)<br></span><a href=3D"https://public.govdelivery.com/account= s/USDHSCISA/subscriber/edit?preferences=3Dtrue#tab1" target=3D"_blank" rel= =3D"noopener"><span style=3D"font-size: 10.0pt; color: #00568c;">Manage Sub= scriptions</span></a>=C2=A0=C2=A0<span style=3D"font-size: 10.0pt; color: #= 757575;">|=C2=A0=C2=A0</span><a href=3D"https://www.cisa.gov/privacy-policy=
" target=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; colo=
r: #00568c;">Privacy Policy</span></a><span style=3D"font-size: 10.0pt; col= or: #757575;">=C2=A0=C2=A0|=C2=A0 <a href=3D"https://subscriberhelp.granicu= s.com/s/article/Subscriber-Help-Center" target=3D"_blank" rel=3D"noopener">= Help</a><a href=3D"https://insights.govdelivery.com/Communications/Subscrib= er_Help_Center" target=3D"_blank" rel=3D"noopener"></a></span><span style= =3D"font-size: 10.0pt; color: #757575;"></span></p>
<p style=3D"text-align: center;"><span style=3D"font-size: 10.0pt; color: #= 757575;">Connect with CISA: <br></span><a href=3D"https://www.facebook.com/= CISA" target=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; = color: #00568c;">Facebook</span></a><span style=3D"font-size: 10.0pt; color=
: #757575;">=C2=A0 |=C2=A0 </span><a href=3D"https://twitter.com/CISAgov" t= arget=3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; color: = #00568c;">Twitter</span></a><span style=3D"font-size: 10.0pt; color: #75757= 5;">=C2=A0 |=C2=A0 </span><a href=3D"https://Instagram.com/cisagov" target= =3D"_blank" rel=3D"noopener"><span style=3D"font-size: 10.0pt; color: #0056= 8c;">Instagram</span></a><span style=3D"font-size: 10.0pt; color: #757575;"= >=C2=A0 |=C2=A0 </span><a href=3D"https://www.linkedin.com/company/cybersec= urity-and-infrastructure-security-agency" target=3D"_blank" rel=3D"noopener= "><span style=3D"font-size: 10.0pt; color: #00568c;">LinkedIn</span></a><sp=
an style=3D"font-size: 10.0pt; color: #757575;">=C2=A0 |=C2=A0=C2=A0 </span= ><a href=3D"https://www.youtube.com/channel/UCxyq9roe-npgzrVwbpoAy0A" targe= t=3D"_self"><span style=3D"font-size: 10.0pt; color: #00568c;">YouTube</spa= n></a><span style=3D"font-size: 10.0pt; color: #757575;"></span></p>

</div>
<div id=3D"tagline">
<hr>
<table style=3D"width: 100%;" border=3D"0" cellspacing=3D"0" cellpadding=3D=

<tbody>

<td style=3D"color: #757575; font-size: 10px; font-family: Arial;" width=3D= "89%">This email was sent to cisa@toolazy.synchro.net using Granicus Commun= ications Cloud, on behalf of: Cybersecurity and Infrastructure Security Age= ncy =C2=B7 707 17th St, Suite 4000 =C2=B7 Denver, CO 80202</td>
<td align=3D"right" width=3D"11%"><a href=3D"https://granicus.com/solution/= digital-communication-engagement/" target=3D"_blank" rel=3D"noopener"><img = src=3D"https://content.govdelivery.com/images/govd-logo-dark.png" border=3D= "0" alt=3D"GovDelivery logo" width=3D"115"></a></td>
</tr>
</tbody>
</table>
<style type=3D"text/css">body .abe-column-block { min-height: 5px; } table.= gd_combo_table img {margin-left:10px; margin-right:10px;} table.gd_combo_ta= ble div.govd_image_display img, table.gd_combo_table td.gd_combo_image_cell=
img {margin-left:0px; margin-right:0px;}</style>

</div>
</td>
</tr>
</table>

<img alt=3D"" src=3D"https://links-2.govdelivery.com/CI0/0101019fecc2ca74-7= 1050f17-947a-472b-b1cc-710e773bbb94-000000/ZcKZMOSqrTv1AKkc1AgJf3suCqlTl-te= wxKlYcbLk1s=3D452" style=3D"display: none; width: 1px; height: 1px;">
</body>
</html>

--===============0973038407628992069==--

--===============3798854877406425428==--

Who's Online

System Info

Sysop:	Amessyroom
Location:	Fayetteville, NC
Users:	74
Nodes:	6 (0 / 6)
Uptime:	20:53:14
Calls:	1,190
Files:	1,350
D/L today:	1 files (10K bytes)
Messages:	285,795

Vulnerability Summary for the Week of August 3, 2026

Who's Online

System Info