A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?
432 CVEs published, led by Apache Software Foundation (34).
432 CVEs published August 5, 2026: 61 critical, 203 high, 146 medium, 17 low; 1 in the KEV catalog at press time; 7 with a public exploit reference; 5 awaiting enrichment. Elevated volume. 25 rendered as box scores below; 375 more in the results table on this page; the remaining 32 on continuation pages.
| MTD | YTD | 2025 same span | 2025 full | |
|---|---|---|---|---|
| CVEs published | 1211 | 23375 | — | — |
| KEV catalog size | 1675 | |||
Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.
Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.
1204 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux | 22 | 2337 | 209 | 1245 | 637 | 1 | 11 | 2 | 0.1 | 7.8 | .0016 | -15 ▼ |
| 2 | 1763 | 215 | 713 | 782 | 53 | 77 | 6 | 0.3 | 7.5 | .0025 | -50 ▼ | |
| microsoft | 16 | 1438 | 107 | 988 | 329 | 14 | 286 | 24 | 1.7 | 7.8 | .0047 | -34 ▼ |
| red hat | 34 | 420 | 20 | 161 | 210 | 29 | 2 | 0 | 0.0 | 6.5 | .0029 | +18 ▲ |
| apple | 0 | 271 | 57 | 78 | 133 | 3 | 88 | 7 | 2.6 | 6.5 | .0027 | 0 |
| canonical | 0 | 27 | 3 | 8 | 11 | 5 | 0 | 0 | 0.0 | 5.6 | .0014 | 0 |
| suse | 5 | 26 | 5 | 14 | 6 | 1 | 0 | 0 | 0.0 | 8.1 | .0039 | +3 ▲ |
| freebsd | 0 | 16 | 0 | 12 | 4 | 0 | 0 | 0 | 0.0 | 7.8 | .0016 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cisco | 23 | 61 | 13 | 29 | 19 | 0 | 56 | 12 | 19.7 | 7.5 | .0042 | +15 ▲ |
| ubiquiti | 0 | 36 | 14 | 21 | 1 | 0 | 3 | 3 | 8.3 | 8.8 | .0049 | -25 ▼ |
| palo alto networks | 0 | 25 | 1 | 3 | 14 | 7 | 13 | 2 | 8.0 | 4.7 | .0028 | 0 |
| fortinet | 0 | 23 | 6 | 6 | 11 | 0 | 28 | 6 | 26.1 | 7.2 | .0040 | 0 |
| netgear | 0 | 23 | 0 | 0 | 22 | 1 | 0 | 0 | 0.0 | 4.6 | .0024 | 0 |
| vmware | 0 | 17 | 4 | 9 | 2 | 2 | 7 | 1 | 5.9 | 8.3 | .0040 | 0 |
| f5 | 0 | 16 | 5 | 8 | 3 | 0 | 4 | 1 | 6.3 | 8.6 | .0057 | 0 |
| checkpoint | 1 | 13 | 4 | 6 | 3 | 0 | 3 | 2 | 15.4 | 7.8 | .0436 | +1 ▲ |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache | 40 | 376 | 68 | 165 | 130 | 12 | 33 | 2 | 0.5 | 7.5 | .0052 | +35 ▲ |
| mozilla | 1 | 128 | 51 | 42 | 35 | 0 | 9 | 0 | 0.0 | 8.1 | .0031 | -1 ▼ |
| drupal | 0 | 51 | 6 | 5 | 35 | 5 | 4 | 1 | 2.0 | 5.9 | .0026 | 0 |
| gitlab | 0 | 51 | 0 | 7 | 37 | 7 | 4 | 2 | 3.9 | 4.9 | .0029 | 0 |
| github | 2 | 14 | 1 | 4 | 9 | 0 | 0 | 0 | 0.0 | 6.2 | .0043 | +1 ▲ |
| docker | 0 | 7 | 0 | 5 | 2 | 0 | 0 | 0 | 0.0 | 8.2 | .0016 | 0 |
| wordpress | 0 | 3 | 1 | 1 | 1 | 0 | 2 | 2 | 66.7 | 8.6 | .7979 | 0 |
| kubernetes | 0 | 1 | 0 | 0 | 0 | 1 | 0 | 0 | 0.0 | 2.4 | .0035 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| oracle | 0 | 1379 | 343 | 653 | 322 | 61 | 27 | 3 | 0.2 | 8.1 | .0036 | 0 |
| ibm | 32 | 261 | 72 | 104 | 84 | 1 | 6 | 1 | 0.4 | 7.5 | .0031 | +32 ▲ |
| adobe | 7 | 259 | 33 | 117 | 105 | 4 | 19 | 3 | 1.2 | 7.8 | .0026 | +7 ▲ |
| progress | 10 | 52 | 13 | 32 | 7 | 0 | 6 | 0 | 0.0 | 8.1 | .0037 | +8 ▲ |
| solarwinds | 0 | 23 | 17 | 3 | 3 | 0 | 10 | 4 | 17.4 | 9.1 | .0058 | 0 |
| veeam | 10 | 16 | 5 | 9 | 2 | 0 | 1 | 0 | 0.0 | 8.6 | .0034 | +10 ▲ |
| zohocorp | 0 | 6 | 2 | 2 | 2 | 0 | 0 | 0 | 0.0 | 7.8 | .0146 | 0 |
| atlassian | 0 | 3 | 0 | 3 | 0 | 0 | 13 | 0 | 0.0 | 8.0 | .0026 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| synology | 1 | 24 | 2 | 6 | 13 | 3 | 0 | 0 | 0.0 | 5.6 | .0025 | +1 ▲ |
| rockwell automation | 0 | 24 | 4 | 18 | 2 | 0 | 0 | 0 | 0.0 | 8.7 | .0029 | 0 |
| d-link | 0 | 20 | 0 | 5 | 9 | 6 | 3 | 0 | 0.0 | 5.5 | .0105 | 0 |
| siemens | 0 | 16 | 1 | 8 | 7 | 0 | 0 | 0 | 0.0 | 7.6 | .0024 | 0 |
| schneider electric | 0 | 9 | 1 | 6 | 2 | 0 | 0 | 0 | 0.0 | 8.6 | .0037 | 0 |
| abb | 0 | 7 | 0 | 4 | 3 | 0 | 0 | 0 | 0.0 | 7.2 | .0018 | 0 |
| hikvision | 0 | 6 | 0 | 4 | 2 | 0 | 0 | 0 | 0.0 | 7.2 | .0040 | 0 |
| moxa | 0 | 5 | 0 | 3 | 2 | 0 | 0 | 0 | 0.0 | 7.0 | .0029 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| sourcecodester | 0 | 120 | 0 | 0 | 62 | 58 | 0 | 0 | 0.0 | 5.5 | .0034 | -27 ▼ |
| openclaw | 0 | 111 | 0 | 58 | 39 | 14 | 0 | 0 | 0.0 | 7.0 | .0026 | 0 |
| dell | 3 | 102 | 5 | 50 | 44 | 3 | 2 | 1 | 1.0 | 7.2 | .0021 | -17 ▼ |
| nvidia | 16 | 98 | 13 | 66 | 19 | 0 | 0 | 0 | 0.0 | 7.7 | .0034 | -1 ▼ |
| capgo | 0 | 83 | 2 | 42 | 38 | 1 | 0 | 0 | 0.0 | 7.1 | .0037 | 0 |
| spring | 0 | 79 | 2 | 34 | 41 | 2 | 0 | 0 | 0.0 | 6.5 | .0022 | 0 |
| imagemagick | 0 | 78 | 1 | 5 | 60 | 12 | 0 | 0 | 0.0 | 5.3 | .0018 | -8 ▼ |
| jenkins project | 23 | 72 | 1 | 13 | 55 | 3 | 3 | 0 | 0.0 | 4.3 | .0023 | +23 ▲ |
| CVE | EPSS | %ile | CVSS |
|---|---|---|---|
| CVE-2026-34486 | .9862 | 99.9 | 7.5 |
| CVE-2026-63030 | .9779 | 99.9 | 9.8 |
| CVE-2026-16232 | .8912 | 99.8 | 9.3 |
| CVE-2026-63077 | .8473 | 99.7 | 9.8 |
| CVE-2026-50522 | .8461 | 99.7 | 9.8 |
| CVE-2026-15409 | .8366 | 99.7 | 10.0 |
| CVE-2026-60137 | .7979 | 99.6 | 5.9 |
| CVE-2026-6875 | .7758 | 99.5 | 9.5 |
| CVE-2026-25089 | .7611 | 99.5 | 9.8 |
| CVE-2026-0770 | .6342 | 99.1 | 9.8 |
| CVE | CVSS | EPSS | Note |
|---|---|---|---|
| CVE-2026-15409 | 10.0 | .8366 | KEV |
| CVE-2026-48282 | 10.0 | .4239 | KEV |
| CVE-2026-56290 | 10.0 | .3038 | KEV |
| CVE-2026-48939 | 10.0 | .1973 | KEV |
| CVE-2026-48908 | 10.0 | .1482 | KEV |
| CVE-2026-56291 | 10.0 | .1459 | KEV |
| CVE-2026-59726 | 10.0 | .0688 | |
| CVE-2026-8985 | 10.0 | .0660 | |
| CVE-2026-6516 | 10.0 | .0486 | |
| CVE-2026-47668 | 10.0 | .0388 |
| Vendor | CVEs |
|---|---|
| oracle | 1109 |
| linux | 820 |
| microsoft | 631 |
| 446 | |
| red hat | 179 |
| apache | 177 |
| apple | 167 |
| ibm | 137 |
| adobe | 113 |
| mozilla | 69 |
| Vendor | KEV |
|---|---|
| microsoft | 24 |
| cisco | 12 |
| apple | 7 |
| fortinet | 6 |
| 6 | |
| ivanti | 5 |
| solarwinds | 4 |
| adobe | 3 |
| berriai | 3 |
| oracle | 3 |
| Ecosystem | Advisories |
|---|---|
| Maven | 55 |
| PyPI | 8 |
| Go | 3 |
| npm | 3 |
| Packagist | 2 |
| crates.io | 2 |
| NuGet | 1 |
| CVE | Vendor | Days |
|---|---|---|
| CVE-2021-27137 | DD-WRT | 0 |
| CVE-2025-68686 | Fortinet | 0 |
| CVE-2026-0770 | Langflow | 0 |
| CVE-2026-15409 | SonicWall | 0 |
| CVE-2026-15410 | SonicWall | 0 |
| CVE-2026-16232 | checkpoint | 0 |
| CVE-2026-16812 | Arista Networks | 0 |
| CVE-2026-18556 | N-able | 0 |
| CVE-2026-18577 | N-able | 0 |
| CVE-2026-20316 | Cisco | 0 |
| CVE | Vendor | Due | Days over |
|---|---|---|---|
| CVE-2021-27104 | n/a | 2021-11-17 | 1722 |
| CVE-2021-27102 | n/a | 2021-11-17 | 1722 |
| CVE-2021-27101 | n/a | 2021-11-17 | 1722 |
| CVE-2021-27103 | n/a | 2021-11-17 | 1722 |
| CVE-2021-21017 | Adobe | 2021-11-17 | 1722 |
| CVE-2021-28550 | Adobe | 2021-11-17 | 1722 |
| CVE-2021-42013 | Apache Software Foundation | 2021-11-17 | 1722 |
| CVE-2021-41773 | Apache Software Foundation | 2021-11-17 | 1722 |
| CVE-2021-30858 | Apple | 2021-11-17 | 1722 |
| CVE-2021-30860 | Apple | 2021-11-17 | 1722 |
EXPLOIT PUBLISHED — H3C NX15: 4 CVEs (CVE-2026-18811, CVE-2026-18812, CVE-2026-18813, CVE-2026-18814). Public exploit references added.
EXPLOIT PUBLISHED — CVE-2023-0669 (Fortra Goanywhere MFT). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-35078 (Ivanti Endpoint Manager Mobile). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-3519 (Citrix NetScaler ADC). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2023-38831. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-51378. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2024-55956. Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2025-26633 (Microsoft Windows 10 Version 1507). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2025-66024 (xwiki-contrib application-blog-ui). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-18766 (chetans9 core-php-admin-panel). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-18774 (NousResearch hermes-agent). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-18784 (o6 open62541). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-18788 (Trippo ResponsiveFilemanager). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-18819 (RackTables). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-3609 (Wellbia XIGNCODE3). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-4629 (Red Hat build of Keycloak 26.4). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-46581 (Eclipse Foundation Eclipse Mojarra). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-54904 (ruby-concurrency concurrent-ruby). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-55554 (dompdf). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-61515 (Puwell Technology Inc. IP Camera). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-66297 (livebook-dev livebook). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-66881 (livebook-dev livebook). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-67196 (perspective-dev perspective). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-67200 (perspective-dev perspective). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-69098 (Cinnamon kotaemon). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-70619 (odysseus-dev odysseus). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-70620 (odysseus-dev odysseus). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-71225 (Stephan Muelle libkcapi). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-71227 (Stephan Muelle libkcapi). Public exploit reference added.
DUE DATE PASSED — CVE-2026-60137 (WordPress). CISA remediation deadline was August 4, 2026; still in catalog.
RESCORED — CVE-2023-35078 (Ivanti Endpoint Manager Mobile). CVSS 10 → 9.8 (NVD).
RESCORED — CVE-2023-41265. CVSS 9.6 → 9.9 (NVD).
RESCORED — CVE-2023-41266. CVSS 8.2 → 6.5 (NVD).
RESCORED — CVE-2024-11667 (Zyxel ATP series firmware). CVSS 7.5 → 9.8 (NVD).
RESCORED — CVE-2024-51378. CVSS 10 → 9.8 (NVD).
RESCORED — CVE-2024-55591 (Fortinet FortiOS). CVSS 9.6 → 9.8 (NVD).
RESCORED — CVE-2026-16158 (@fastify/reply-from). CVSS 8.7 → 10 (NVD).
RESCORED — CVE-2026-18852 (epsilla-cloud vectordb). CVSS 4.8 → 1.9 (NVD).
RESCORED — CVE-2026-18853 (ZomboDroid Meme Generator App). CVSS 4.8 → 1.9 (NVD).
RESCORED — CVE-2026-24457 (Eclipse Foundation Eclipse OpenMQ). CVSS 9.1 → 9.8 (NVD).
RESCORED — CVE-2026-3609 (Wellbia XIGNCODE3). CVSS 5.3 → 7.8 (NVD).
RESCORED — CVE-2026-9793 (Red Hat build of Keycloak 26.4). CVSS 5.9 → 7.5 (NVD).
ENRICHED — Linux kernel: 3 CVEs (CVE-2021-3483, CVE-2021-3501, CVE-2022-1353). Received CVSS/CPE analysis.
How to read these box scores · glossary
432 CVEs published. 25 box scores and 375 table rows below; the remaining 32 continue on page 2 — every CVE is listed, nothing truncated.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H H 9.8 .8473 99.7 YES
AFFECTED Product Versions Fixed TeamCity unspecified —
TIMELINE Jul 15 Reserved by CNA Aug 5 Added to CISA KEV, due Aug 8 Aug 5 Published (CNA: JetBrains)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0515 91.8 —
AFFECTED Product Versions Fixed Cisco Unified Computing System (Standalone) 4.3(1.230097) – —
TIMELINE Oct 8 Reserved by CNA Aug 5 Published (CNA: cisco)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N H N H H H 7.3 .0238 82.6 —
AFFECTED Product Versions Fixed NX15 V100R017 – —
TIMELINE Aug 4 Reserved by CNA Aug 5 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N H N H H H 7.3 .0238 82.6 —
AFFECTED Product Versions Fixed NX15 V100R017 – —
TIMELINE Aug 4 Reserved by CNA Aug 5 Published (CNA: VulDB)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L H N U H H H 7.2 .0217 80.9 —
AFFECTED Product Versions Fixed Backup Migration unspecified —
TIMELINE May 2 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H N N 7.5 .0200 79.3 —
AFFECTED Product Versions Fixed audiobookshelf 2.19.1 – —
TIMELINE Aug 5 Reserved by CNA Aug 5 Published (CNA: TuranSec)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L P H A N N N 4.9 .0188 77.8 —
AFFECTED Product Versions Fixed livebook 0.13.0 – — livebook 0.13.0 – — livebook 7cf4af5c10ec645f55a10f30e5661c54f6a6b319 – b2a8416d149043132fe5a14ed611e0fefc9dc9cd
TIMELINE Jul 24 Reserved by CNA Aug 5 Public exploit reference published Aug 5 Published (CNA: EEF)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0098 59.6 —
AFFECTED Product Versions Fixed hashbrown-cms unspecified —
TIMELINE Aug 4 Reserved by CNA Aug 5 Published (CNA: TuranSec)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0097 59.2 —
AFFECTED Product Versions Fixed hashbrown-cms unspecified —
TIMELINE Aug 4 Reserved by CNA Aug 5 Published (CNA: TuranSec)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0096 59.0 —
AFFECTED Product Versions Fixed Langflow OSS 1.0.0 – —
TIMELINE Jul 27 Reserved by CNA Aug 5 Published (CNA: ibm)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N C H H H 10.0 .0091 57.1 —
AFFECTED Product Versions Fixed PraisonAI < 4.6.40 – —
TIMELINE May 20 Reserved by CNA Aug 5 Published (CNA: GitHub_M)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N R C L L N 6.1 .0082 54.4 —
AFFECTED Product Versions Fixed Seraphinite Accelerator unspecified —
TIMELINE Jul 27 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N R C L L N 6.1 .0080 54.0 —
AFFECTED Product Versions Fixed TranslatePress – Translate Multilingual sites with AI Translation unspecified —
TIMELINE Jul 26 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0078 53.2 —
AFFECTED Product Versions Fixed Langflow OSS 1.0.0 – —
TIMELINE Jul 27 Reserved by CNA Aug 5 Published (CNA: ibm)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U N H H 8.1 .0075 52.2 —
AFFECTED Product Versions Fixed Content Egg – Affiliate Product Importer & Price Comparison unspecified —
TIMELINE Jul 16 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H N N 7.5 .0066 48.9 —
AFFECTED Product Versions Fixed Page and Post Restriction unspecified —
TIMELINE Jun 11 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U N N H 7.5 .0066 48.9 —
AFFECTED Product Versions Fixed Hi Browser 2.23.1.1 – —
TIMELINE Aug 5 Reserved by CNA Aug 5 Published (CNA: TECNOMobile)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L L N U H H H 8.8 .0064 47.8 —
AFFECTED Product Versions Fixed LightSync Pro – Connect & Sync Cloud Assets | Lightroom, Canva, Figma, Dropbox & Shutterstock unspecified —
TIMELINE Apr 12 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H H 9.8 .0063 47.6 —
AFFECTED Product Versions Fixed Apache Lucy unspecified —
TIMELINE Jul 10 Reserved by CNA Aug 5 Published (CNA: apache)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H H H 9.8 .0062 47.0 —
AFFECTED Product Versions Fixed Apache Lucy unspecified —
TIMELINE Jul 10 Reserved by CNA Aug 5 Published (CNA: apache)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0062 46.9 —
AFFECTED Product Versions Fixed CPE2801 Firmware 22.10.09 – — WE1026-5G-WD Firmware 21.04.07 – — WE1326 Firmware 22.02.18_1 – — WE2007 Firmware 23.08.12 – — WE2008-DSIM Firmware 23.08.11 – — WE2416 Firmware 21.03.22_1 – — WE3326 Firmware 20.09.30 – — WE5927 Firmware 22.08.10 – — WE5931 Firmware 22.05.31 – — WE5931AC Firmware 22.05.31 – — + 10 more
TIMELINE Jul 27 Reserved by CNA Aug 5 Published (CNA: VulnCheck)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U N N H 7.5 .0062 46.9 —
AFFECTED Product Versions Fixed Apache Lucy unspecified —
TIMELINE Jul 10 Reserved by CNA Aug 5 Published (CNA: apache)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U N N H 7.5 .0062 46.9 —
AFFECTED Product Versions Fixed Apache Lucy unspecified —
TIMELINE Jul 10 Reserved by CNA Aug 5 Published (CNA: apache)
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U N H L 8.2 .0062 46.8 —
AFFECTED Product Versions Fixed WPFormify – Stripe Payments with Form and Checkout unspecified —
TIMELINE Apr 19 Reserved by CNA Aug 5 Published (CNA: Wordfence)
AV AC PR UI S C I A CVSS EPSS %ile KEV P L L N C H L L 6.5 .0061 46.6 —
AFFECTED Product Versions Fixed NX799J (Red Magic 11 Air) GEN_CN_NX799JV1.0.0B15 – —
TIMELINE May 27 Reserved by CNA Aug 5 Published (CNA: zte)
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-64577 | 7.5 | 44.9 | Linux | Linux | — | gtp: check skb_pull_data() return in gtp1u_send_echo_resp() |
| CVE-2026-67870 | 9.8 | 44.5 | n/a | n/a | CWE-476 | In open62541 v1.5.5, the server-side AddReferences implementation contains an… |
| CVE-2026-69111 | 8.7 | 44.5 | milvus-io | milvus | CWE-306 | Milvus 2.6.22, 3.0.0 Unauthenticated Denial of Service via /management/stop |
| CVE-2026-18895 | 7.4 | 44.4 | UTT | HiPER 1250GW | CWE-119 | UTT HiPER 1250GW APSecurity_5g strcpy stack-based overflow |
| CVE-2026-18897 | 7.4 | 44.4 | UTT | HiPER 1250GW | CWE-119 | UTT HiPER 1250GW getOneApConfTempEntry strcpy stack-based overflow |
| CVE-2026-9192 | 9.8 | 43.6 | Progress Software Corporation | MarkLogic Server | CWE-287 | Authentication bypass in Progress MarkLogic Server ODBC App Server |
| CVE-2026-71190 | 8.7 | 42.9 | OpenStack | Swift | CWE-1333 | In OpenStack Swift through 2.38.0, the proxy server Accept header parser cont… |
| CVE-2026-71207 | 9.8 | 42.5 | mrswapnilsahu | Stock-Inventory-Management-System | CWE-89 | Stock-Inventory-Management-System - Unauthenticated SQL Injection and Hardcod… |
| CVE-2026-67623 | 8.6 | 42.3 | mistralai | mistral-vibe | CWE-829 | Mistral Vibe < 2.23.3 Arbitrary Command Execution via git fsmonitor Hook |
| CVE-2026-6020 | 7.2 | 42.0 | devitemsllc | ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin | CWE-470 | ShopLentor <= 3.3.7 - Authenticated (Administrator+) Arbitrary Function Execu… |
| CVE-2026-17556 | 8.8 | 40.6 | GitHub | Enterprise Server | CWE-22 | Path traversal in GitHub Enterprise Server allowed unauthenticated deletion o… |
| CVE-2026-48834 | 7.5 | 40.1 | Apache Software Foundation | Apache Answer | CWE-400 | Apache Answer: Denial of service via crafted Accept-Language header parsing |
| CVE-2026-67589 | 7.5 | 40.1 | Apache Software Foundation | Apache Qpid ProtonJ2 | CWE-789 | Apache Qpid ProtonJ2: Type size/count handling can lead to excessive allocati… |
| CVE-2026-67590 | 7.5 | 40.1 | Apache Software Foundation | Apache Qpid ProtonJ2 | CWE-674 | Apache Qpid ProtonJ2: Unbounded type nesting can lead to pre-authentication s… |
| CVE-2026-66274 | 7.5 | 40.1 | Apache Software Foundation | Apache Qpid Proton-J | CWE-674 | Apache Qpid Proton-J: Unbounded type nesting can lead to pre-authentication s… |
| CVE-2026-67465 | 7.5 | 40.1 | Apache Software Foundation | Apache Qpid Proton Dotnet | CWE-770 | Apache Qpid Proton Dotnet: Unbounded symbol value caching can lead to pre-aut… |
| CVE-2026-67551 | 7.5 | 40.1 | Apache Software Foundation | Apache Qpid Proton Dotnet | CWE-789 | Apache Qpid Proton Dotnet: Type size/count handling can lead to excessive all… |
| CVE-2026-68074 | 7.5 | 40.1 | Apache Software Foundation | Apache Qpid Broker-J | CWE-770 | Apache Qpid Broker-J: Unbounded symbol value caching can lead to pre-authenti… |
| CVE-2026-67588 | 7.5 | 39.5 | Apache Software Foundation | Apache Qpid ProtonJ2 | CWE-770 | Apache Qpid ProtonJ2: Unbounded symbol value caching can lead to pre-authenti… |
| CVE-2026-67552 | 7.5 | 39.4 | Apache Software Foundation | Apache Qpid Proton Dotnet | CWE-674 | Apache Qpid Proton Dotnet: Unbounded type nesting can lead to pre-authenticat… |
| CVE-2026-68060 | 7.5 | 39.4 | Apache Software Foundation | Apache Qpid Broker-J | CWE-770 | Apache Qpid Broker-J: Type size/count handling can lead to excessive allocati… |
| CVE-2026-68073 | 7.5 | 39.4 | Apache Software Foundation | Apache Qpid Broker-J | CWE-674 | Apache Qpid Broker-J: Unbounded type nesting can lead to pre-authentication s… |
| CVE-2026-16022 | 7.8 | 39.3 | Swiss Federal Office of Information Technology, Systems and Telecommunication | @oblique/cli | CWE-78 | Command Injection in @oblique/cli |
| CVE-2026-70610 | 5.4 | 39.2 | electron | electron | CWE-1321 | Electron: contextBridge object copy honors prototype setters |
| CVE-2026-67592 | 7.5 | 39.1 | Apache Software Foundation | Apache Qpid ProtonJ2 | CWE-770 | Apache Qpid ProtonJ2: Unable to govern the maximum number of transfer frames … |
| CVE-2026-18898 | 7.4 | 38.6 | UTT | HiPER 1200GW | CWE-119 | UTT HiPER 1200GW ConfigAdvideo strcpy stack-based overflow |
| CVE-2026-67866 | 7.5 | 38.3 | n/a | n/a | CWE-121 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacke… |
| CVE-2026-67867 | 7.5 | 38.3 | n/a | n/a | CWE-122 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacke… |
| CVE-2026-67871 | 7.5 | 38.3 | n/a | n/a | CWE-120 | Buffer Overflow vulnerability in Systerel S2OPC 1.7.3 allows a remote attacke… |
| CVE-2026-71269 | 7.2 | 38.2 | node-red | node-red | CWE-22 | Node-RED Library API Path Traversal Leading to Arbitrary File Read/Write |
| CVE-2026-71284 | 7.2 | 38.1 | fledge-iot | fledge | CWE-78 | Fledge IoT Gateway Backup Restore OS Command Injection via Tar Member Filename |
| CVE-2026-67869 | 7.5 | 37.9 | n/a | n/a | CWE-120 | Buffer Overflow vulnerability in open62541 v1.5.5 allows a remote attacker to… |
| CVE-2026-5581 | 9.1 | 37.6 | sh1zen | Multi Uploader for Gravity Forms | CWE-862 | Multi Uploader for Gravity Forms <= 1.1.8 - Missing Authorization to Unauthen… |
| CVE-2026-18901 | 7.3 | 37.5 | H3C | NX15 | CWE-749 | H3C NX15 Web API esps service.add routine |
| CVE-2026-70612 | 5.4 | 37.3 | electron | electron | CWE-284 | Electron: Sandboxed iframes can launch external protocol handlers |
| CVE-2026-61891 | 7.5 | 37.3 | Eclipse Foundation | Eclipse Theia | CWE-22 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem`… |
| CVE-2026-17632 | 8.8 | 37.1 | IBM | Langflow OSS | CWE-94 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2026-71289 | 9.8 | 37.0 | NASA-AMMOS | anms | CWE-306 | NASA-AMMOS ANMS / JHUAPL dtnma-tools Unauthenticated Remote Command Execution… |
| CVE-2026-9190 | 9.1 | 37.1 | Progress Software Corporation | MarkLogic Server | CWE-444 | HTTP request smuggling in Progress MarkLogic Server |
| CVE-2026-68746 | 7.7 | 37.0 | livebook-dev | livebook | CWE-636 | Livebook Teams identity check fails open when the deployment group is unresol… |
| CVE-2026-70607 | 5.3 | 36.5 | electron | electron | CWE-20 | Electron: window.open features string controls some window options considered… |
| CVE-2026-71320 | 8.1 | 36.3 | nuxt | nuxt | CWE-74 | Nuxt: Server-Side Remote Code Execution via Runtime Template Injection in Nux… |
| CVE-2025-63823 | 9.8 | 36.3 | n/a | n/a | CWE-798 | My Safetipin Android Application 5.2.1 contains Hardcoded credentials in the … |
| CVE-2026-46581 | 7.5 | 36.2 | Eclipse Foundation | Eclipse Mojarra | CWE-22 | In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFacelet… |
| CVE-2026-15996 | 6.6 | 36.1 | GitHub | Enterprise Server | CWE-674 | Denial of service vulnerability in GitHub Enterprise Server allowed unauthent… |
| CVE-2026-67531 | 9.3 | 36.0 | agentfront | frontmcp | CWE-94 | FrontMCP: CodeCall sandbox escape -> host RCE via live Zod schema exposure by… |
| CVE-2026-59675 | 7.5 | 35.8 | SUSE | Rancher | CWE-770 | Rancher Audit-Log Middleware Unauthenticated Memory Exhaustion Denial of Service |
| CVE-2026-66257 | 7.5 | 35.3 | Apache Software Foundation | Apache Qpid Proton-J | CWE-770 | Apache Qpid Proton-J: Unbounded symbol value caching can lead to pre-authenti… |
| CVE-2026-66273 | 7.5 | 35.3 | Apache Software Foundation | Apache Qpid Proton-J | CWE-789 | Apache Qpid Proton-J: Type size/count handling can lead to excessive allocati… |
| CVE-2026-17613 | 7.5 | 35.0 | Penpot | Penpot | CWE-862 | CVE-2026-17613 |
| CVE-2026-67865 | 7.5 | 35.0 | n/a | n/a | CWE-125 | S2OPC 1.7.3 contains an out-of-bounds read in RepublishResponse handling. Thi… |
| CVE-2026-67872 | 7.5 | 35.0 | n/a | n/a | CWE-400 | An issue in Systerel S2OPC 1.7.3 allows a remote attacker to cause a denial o… |
| CVE-2026-71321 | 7.5 | 35.0 | nuxt | nuxt | CWE-407 | Nuxt: Unauthenticated CPU exhaustion parsing and hashing the Nuxt island endp… |
| CVE-2026-67591 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid ProtonJ2 | CWE-770 | Apache Qpid ProtonJ2: Incoming session flow control window can be exceeded |
| CVE-2026-17630 | 8.8 | 34.9 | IBM | Langflow OSS | CWE-184 | Langflow is affected by security vulnerabilities in Model Context Protocol fe… |
| CVE-2026-66275 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid Proton-J | CWE-770 | Apache Qpid Proton-J: Incoming session flow control window can be exceeded |
| CVE-2026-66276 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid Proton-J | CWE-606 | Apache Qpid Proton-J: Unbounded disposition range handling can lead to denial… |
| CVE-2026-66277 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid Proton-J | CWE-770 | Apache Qpid Proton-J: Unable to govern the maximum number of transfer frames … |
| CVE-2026-68075 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid Broker-J | CWE-770 | Apache Qpid Broker-J: Incoming session flow control window can be exceeded |
| CVE-2026-68077 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid Broker-J | CWE-606 | Apache Qpid Broker-J: Unbounded disposition range handling can lead to denial… |
| CVE-2026-68080 | 6.5 | 34.9 | Apache Software Foundation | Apache Qpid Broker-J | CWE-406 | Apache Qpid Broker-J: Unbounded echo flow responses can lead to denial of ser… |
| CVE-2026-71237 | 9.8 | 34.8 | Miantang | IoT-PHP | CWE-89 | Miantang IoT-PHP - Unauthenticated SQL Injection in /userlogin |
| CVE-2026-14553 | 8.1 | 34.7 | Unknown | zportals | CWE-434 | Zportals < 6.3.4 - Subscriber+ Arbitrary File Upload |
| CVE-2026-66881 | 7.0 | 34.6 | livebook-dev | livebook | CWE-23 | Path traversal in imported file_entries name allows arbitrary file write via … |
| CVE-2026-67864 | 7.5 | 34.4 | n/a | n/a | CWE-400 | An issue in open62541 v.1.5.5 and before allows a remote attacker to cause a … |
| CVE-2026-9195 | 9.3 | 34.1 | Progress Software Corporation | MarkLogic Server | CWE-22 | Cross-site scripting in Progress MarkLogic Server Query Console |
| CVE-2026-67553 | 6.5 | 34.1 | Apache Software Foundation | Apache Qpid Proton Dotnet | CWE-770 | Apache Qpid Proton Dotnet: Incoming session flow control window can be exceeded |
| CVE-2026-67554 | 6.5 | 34.1 | Apache Software Foundation | Apache Qpid Proton Dotnet | CWE-606 | Apache Qpid Proton Dotnet: Unbounded disposition range handling can lead to d… |
| CVE-2026-67555 | 6.5 | 34.1 | Apache Software Foundation | Apache Qpid Proton Dotnet | CWE-770 | Apache Qpid Proton Dotnet: Unable to govern the maximum number of transfer fr… |
| CVE-2026-68078 | 6.5 | 34.1 | Apache Software Foundation | Apache Qpid Broker-J | CWE-770 | Apache Qpid Broker-J: Unable to govern the maximum number of transfer frames … |
| CVE-2026-12609 | 7.5 | 33.7 | Eclipse Foundation | Eclipse Theia | CWE-22 | In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/p… |
| CVE-2026-20272 | 9.8 | 33.6 | Cisco | Cisco IOS XE Software | CWE-74 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20310 | 9.1 | 33.5 | Cisco | Cisco Catalyst SD-WAN Controller | CWE-59 | Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution B… |
| CVE-2026-71238 | 9.1 | 33.6 | DjangoCRM | django-crm | CWE-798 | DjangoCRM - Hardcoded Django SECRET_KEY Enables Session and CSRF Token Forgery |
| CVE-2026-67863 | 7.5 | 33.4 | n/a | n/a | CWE-416 | In open62541 1.5.5, a server-side use-after-free exists in the local Monitore… |
| CVE-2026-16100 | 6.5 | 33.3 | Red Hat | Red Hat build of Keycloak 26.6 | CWE-770 | Keycloak-services: keycloak-services: unbounded metric cardinality in user ev… |
| CVE-2026-70609 | 5.7 | 33.2 | electron | electron | CWE-94 | Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter |
| CVE-2026-71248 | 9.8 | 33.1 | Harsh21Patel | Inventory-Management-System-PHP | CWE-89 | Inventory-Management-System-PHP - Unauthenticated SQL Injection in Login and … |
| CVE-2026-67873 | 9.8 | 33.0 | n/a | n/a | CWE-122 | A heap-based buffer overflow exists in lib60870-C 2.4.0 in the server-side Fi… |
| CVE-2026-71314 | 7.5 | 32.9 | nuxt | nuxt | CWE-400 | Nuxt: Unauthenticated out-of-memory crash via unbounded v-for expansion in is… |
| CVE-2026-16940 | 10.0 | 32.8 | Unknown | Custom Fields | CWE-22 | Custom Fields for WooCommerce < 1.5.1 - Unauthenticated Arbitrary File Deleti… |
| CVE-2026-17633 | 8.8 | 32.5 | IBM | Langflow OSS | CWE-94 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2026-60023 | 7.5 | 32.2 | Apache Software Foundation | Apache Answer | CWE-200 | Apache Answer: Unauthorized disclosure of deleted or pending answer content |
| CVE-2026-6079 | 7.3 | 32.3 | ho3einie | Material Dashboard | CWE-862 | Material Dashboard <= 1.4.10 - Missing Authorization to Unauthenticated Task … |
| CVE-2026-11454 | 6.5 | 31.2 | trainingbusinesspros | Groundhogg — CRM, Newsletters, and Marketing Automation | CWE-639 | Groundhogg — CRM, Newsletters, and Marketing Automation <= 4.5.2 - Insecure D… |
| CVE-2026-8182 | 8.8 | 31.1 | IBM | Langflow OSS | CWE-94 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2026-17624 | 8.8 | 31.1 | IBM | Langflow OSS | CWE-94 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2025-70962 | 7.5 | 30.9 | n/a | n/a | CWE-284 | Zosi C519M V4.2.8.823C01450BA is vulnerable to Incorrect Access Control. The … |
| CVE-2026-20288 | 6.5 | 31.0 | Cisco | Cisco Unified Computing System (Standalone) | CWE-146 | Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerabi… |
| CVE-2026-8478 | 8.8 | 30.6 | IBM | Langflow OSS | CWE-94 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2026-44945 | 9.1 | 30.4 | SUSE | Rancher | CWE-441 | Cross-Cluster Impersonation Confused-Deputy Privilege Escalation |
| CVE-2026-15918 | 7.5 | 30.4 | e4jvikwp | VikAppointments Services Booking Calendar | CWE-89 | VikAppointments – Services Booking Calendar <= 1.2.19 - Unauthenticated SQL I… |
| CVE-2026-18881 | 7.5 | 30.3 | realmag777 | TableOn – WordPress Posts Table Filterable | CWE-89 | TableOn <= 1.0.5.1 - Unauthenticated Blind SQL Injection via 'comment_count' … |
| CVE-2026-70431 | 8.8 | 30.1 | Jenkins Project | Jenkins Multijob Plugin | CWE-94 | Jenkins Multijob Plugin 669.v9d96a_d9c71b_0 and earlier provides Groovy scrip… |
| CVE-2026-8183 | 7.7 | 30.1 | IBM | Langflow OSS | CWE-22 | Langflow OSS is affected by arbitrary code execution in custom component vali… |
| CVE-2026-7329 | 9.9 | 30.0 | Progress Software Corporation | MarkLogic Server | CWE-269 | Privilege escalation in Progress MarkLogic Server REST query interfaces |
| CVE-2026-48911 | 7.5 | 30.1 | Apache Software Foundation | Apache Answer | CWE-306 | Apache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Exist… |
| CVE-2026-71215 | 7.5 | 30.0 | art-template | art-template | CWE-22 | art-template - Path Traversal in Sub-Template Resolution via include()/extend() |
| CVE-2026-14587 | 5.5 | 29.9 | neo4j | Enterprise Edition | CWE-130 | Unathenticated connection can hold Bolt channel open |
| CVE-2026-18959 | 2.1 | 29.9 | yushine | InnoShop | CWE-22 | yushine InnoShop Files Endpoint panel-api.php destroyFiles path traversal |
| CVE-2026-60009 | 8.8 | 29.4 | Eclipse Foundation | Eclipse Theia | CWE-22 | In Eclipse Theia versions up to and including 1.73.1, the `@theia/filesystem`… |
| CVE-2026-71310 | 5.9 | 29.5 | rclone | rclone | CWE-400 | rclone: Unbounded HTTP CONNECT Response Headers Can Exhaust rclone Memory |
| CVE-2026-6639 | 7.5 | 29.4 | wupsales | AI Copilot – Content Generator | CWE-862 | AI Chatbot & Workflow Automation by AIWU <= 1.4.6 - Missing Authorization to … |
| CVE-2026-5651 | 4.9 | 29.3 | 2wstechnologies | Askeet — Talk to Your WooCommerce Data | CWE-89 | Askeet <= 3.0 - Authenticated (Administrator+) SQL Injection via 'sql_query' … |
| CVE-2026-71268 | 9.9 | 29.2 | thiagoralves | OpenPLC_v3 | CWE-22 | OpenPLC Runtime v3 Path Traversal in Structured Text FILE Directive Leading t… |
| CVE-2026-15573 | 8.1 | 29.1 | Red Hat | Red Hat build of Keycloak 26.4 | CWE-178 | Keycloak-services: keycloak-services: authorization bypass via unnormalized u… |
| CVE-2026-15372 | 7.5 | 29.1 | Unknown | WP 2FA | CWE-287 | WP 2FA < 4.1.0 - Two-Factor Authentication Bypass via Passkeys Provider |
| CVE-2026-71279 | 8.0 | 29.0 | Koenkk | zigbee2mqtt | CWE-22 | Zigbee2MQTT External JS Extension Path Traversal Leading to Remote Code Execu… |
| CVE-2026-55523 | 7.7 | 28.9 | MervinPraison | PraisonAI | CWE-918 | PraisonAI has a`web_crawl` SSRF protection bypass via unchecked redirect targets |
| CVE-2026-71231 | 9.8 | 28.4 | thebradleysanders | IOTSmartHome | CWE-89 | IOTSmartHome - Unauthenticated SQL Injection via lastLogin Cookie |
| CVE-2026-71278 | 9.8 | 28.4 | iot-ecology | rust-iot-platform | CWE-94 | rust-iot-platform Unauthenticated Remote Code Execution via Unsandboxed Calc-… |
| CVE-2026-8761 | 8.8 | 28.5 | dokaninc | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution – Build Your Own Amazon, eBay, Etsy | CWE-862 | Dokan <= 5.0.2 - Missing Authorization to Authenticated (Vendor+) Privilege E… |
| CVE-2026-70377 | 7.5 | 28.4 | theotherphil | imagecli | CWE-789 | imagecli - Uncontrolled Memory Allocation via Unbounded scale Ratio Causes De… |
| CVE-2026-18903 | 2.1 | 28.4 | yeqifu | warehouse | CWE-22 | yeqifu warehouse FileController.java path traversal |
| CVE-2026-71319 | 9.6 | 28.2 | nuxt | devtools | CWE-94 | Nuxt.js Unauthenticated WebSocket RPC Call Leading to Remote Code Execution |
| CVE-2026-15572 | 8.8 | 28.3 | Red Hat | Red Hat build of Keycloak 26.4 | CWE-843 | Keycloak-services: keycloak-services: dcr protocol mapper type-swap policy by… |
| CVE-2026-64566 | 9.8 | 27.8 | Linux | Linux | — | xfrm: iptfs: propagate SKBFL_SHARED_FRAG in iptfs_skb_add_frags() |
| CVE-2026-7529 | 7.5 | 27.7 | wisemattic | wiseCampaign – WooCommerce Conversions Made Easy | CWE-862 | wiseCampaign <= 1.1.16 - Missing Authorization to Unauthenticated Plugin Conf… |
| CVE-2026-71262 | 9.8 | 27.6 | IoTSharp | IoTSharp | CWE-306 | IoTSharp BlobStorageController Missing Authentication and Path Traversal |
| CVE-2026-60053 | 9.1 | 27.5 | Apache Software Foundation | Apache Answer | CWE-613 | Apache Answer: Residual Administrative API Key Access After Role or Account R… |
| CVE-2026-10025 | 9.8 | 27.3 | IBM | QRadar | CWE-611 | IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability |
| CVE-2026-20124 | 7.7 | 27.1 | Cisco | Cisco IOS XE Software | CWE-772 | Cisco IOS XE Software SNMP Denial of Service Vulnerability |
| CVE-2026-7753 | 6.5 | 27.0 | stylemix | Cost Calculator Builder | CWE-862 | Cost Calculator Builder <= 3.6.17 - Missing Authorization to Authenticated (S… |
| CVE-2026-54416 | 7.2 | 26.8 | pluck-cms | Pluck CMS | CWE-434 | Pluck CMS - Unrestricted File Upload via Missing .php8 Extension in Upload Bl… |
| CVE-2026-64578 | 8.2 | 26.0 | Linux | Linux | — | ksmbd: validate compound request size before reading StructureSize2 |
| CVE-2026-7658 | 6.5 | 25.9 | IBM | Langflow OSS | CWE-22 | Langflow OSS is affected by arbitrary code execution in custom component vali… |
| CVE-2026-4431 | 9.1 | 25.9 | themeruby | Easy Post Submission – Frontend Posting, Guest Publishing & Submit Content for WordPress | CWE-862 | Easy Post Submission <= 2.3.0 - Missing Authorization |
| CVE-2026-20263 | 8.6 | 25.1 | Cisco | Cisco IOS XE Software | CWE-388 | Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service V… |
| CVE-2026-20301 | 8.6 | 25.0 | Cisco | Cisco IOS XE Software | CWE-606 | Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol D… |
| CVE-2026-15281 | 6.5 | 24.9 | gm_alex | User Access Manager | CWE-89 | User Access Manager <= 2.3.12 - Authenticated (Subscriber+) SQL Injection |
| CVE-2026-15360 | 9.1 | 24.7 | Unknown | Ajax Load More | CWE-89 | Ajax Load More < 8.0.1 - Unauthenticated SQL Injection via custom_args |
| CVE-2026-16102 | 8.1 | 24.7 | Red Hat | Red Hat build of Keycloak 26.4 | CWE-284 | Keycloak-services: keycloak-services: default dcr policy allows role forgery … |
| CVE-2026-70608 | 7.2 | 24.7 | electron | electron | CWE-693 | Electron: Sandboxed iframe can bypass the allow-popups restriction via the Op… |
| CVE-2026-71213 | 9.1 | 24.5 | typemill | typemill | CWE-307 | typemill - No Rate Limiting on Login Endpoint Enables Unlimited Password Brut… |
| CVE-2026-20303 | 9.9 | 24.3 | Cisco | Cisco Catalyst SD-WAN Controller | CWE-20 | Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabi… |
| CVE-2026-34966 | 8.3 | 24.3 | Gitea | Gitea | CWE-918 | Gitea prior to 1.27.0 SSRF via Migration URI Fetch Bypass |
| CVE-2026-20308 | 4.3 | 24.1 | Cisco | Cisco IOS XE Software | CWE-269 | Cisco IOS XE Software Web-Based Management Interface Vulnerability |
| CVE-2026-71292 | 7.2 | 24.0 | intelliants | subrion | CWE-89 | Subrion CMS Admin Grid SQL Injection via Unwhitelisted ORDER BY sort Parameter |
| CVE-2026-11421 | 6.5 | 24.0 | wedevs | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | CWE-89 | ERP: Complete HR, Accounting & CRM Suite with WooCommerce CRM Support <= 1.17… |
| CVE-2026-71225 | 6.5 | 24.0 | Stephan Muelle | libkcapi | CWE-330 | Libkcapi: iv reuse in libkcapi one-shot symmetric cipher chunking causes ciph… |
| CVE-2026-9077 | 8.5 | 23.8 | IBM | Langflow OSS | CWE-807 | Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model … |
| CVE-2026-16602 | 7.5 | 23.8 | Unknown | Passster | CWE-200 | Content Protector (Passster) < 4.3.6 - Unauthenticated Non-Public Post Conten… |
| CVE-2026-16603 | 7.5 | 23.8 | Unknown | Passster | CWE-200 | Content Protector (Passster) < 4.3.6 - Unauthenticated Category-Locked Conten… |
| CVE-2026-16604 | 7.5 | 23.8 | Unknown | Passster | CWE-200 | Content Protector (Passster) < 4.3.6 - Unauthenticated Protected Content Disc… |
| CVE-2026-16605 | 7.2 | 23.8 | Unknown | MultiVendorX | CWE-862 | MultiVendorX < 5.0.11 - Store Owner+ Cross-Vendor Store Takeover and Deletion… |
| CVE-2026-18322 | 8.8 | 23.6 | supsysticcom | Smart Popup by Supsystic | CWE-269 | Smart Popup by Supsystic <= 1.12.0 - Unauthenticated Privilege Escalation to … |
| CVE-2026-71309 | 8.6 | 23.6 | rclone | rclone | CWE-22 | rclone: Incomplete path validation allows backend root escape in serve restic |
| CVE-2026-70426 | 9.0 | 23.5 | Jenkins Project | Jenkins | CWE-502 | In Remoting 3384.v60d89463d9e0 and earlier, except 3355.3357.v931d3c992987, i… |
| CVE-2026-71270 | 8.6 | 23.4 | Stirling-Tools | Stirling-PDF | CWE-918 | Stirling-PDF Server-Side Request Forgery via /api/v1/convert/url/pdf WeasyPri… |
| CVE-2026-8709 | 9.9 | 23.3 | Progress Software Corporation | MarkLogic Server | CWE-269 | Privilege escalation in Progress MarkLogic Server REST document patch operation |
| CVE-2026-9193 | 9.9 | 23.3 | Progress Software Corporation | MarkLogic Server | CWE-269 | Privilege escalation in Progress MarkLogic Server Hadoop integration |
| CVE-2026-7557 | 9.1 | 23.2 | Progress Software Corporation | MarkLogic Server | CWE-347 | SAML authentication bypass in Progress MarkLogic Server |
| CVE-2026-10716 | 7.5 | 23.2 | Directus | Directus | CWE-89 | Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostG… |
| CVE-2026-71214 | 9.8 | 22.7 | NASA-AMMOS | plandev (sequencing-server) | CWE-306 | NASA-AMMOS plandev - Client-Supplied session_variables Bypass Hasura-Origin A… |
| CVE-2026-71254 | 9.8 | 22.8 | debevv | nanoMODBUS | CWE-787 | nanoMODBUS Server-Side Out-of-Bounds Write in handle_read_file_record() |
| CVE-2026-71256 | 9.8 | 22.8 | debevv | nanoMODBUS | CWE-125 | nanoMODBUS Client-Side Out-of-Bounds Read Leading to Wild-Pointer Write via o… |
| CVE-2026-71267 | 9.8 | 22.8 | rxi | microtar | CWE-121 | microtar Stack Buffer Overflow in mtar_write_file_header() and mtar_write_dir… |
| CVE-2026-71287 | 8.8 | 22.6 | Cacti | cacti | CWE-89 | Cacti sanitize_sql_column() Regex Allowlist Permits SQL Time-Delay Functions … |
| CVE-2026-71288 | 8.8 | 22.6 | Koha Community | Koha | CWE-89 | Koha SQL Injection via order_by and {order}_ovalue Parameters in guided_repor… |
| CVE-2026-71291 | 8.8 | 22.6 | bolt | core | CWE-1336 | Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rend… |
| CVE-2026-48912 | 6.5 | 22.6 | Apache Software Foundation | Apache Answer | CWE-639 | Apache Answer: Improper authorization in avatar update cleanup allows authent… |
| CVE-2026-50749 | 6.5 | 22.6 | Apache Software Foundation | Apache Answer | CWE-863 | Apache Answer: Missing authorization in revision audit reject allows authenti… |
| CVE-2026-16055 | 7.5 | 22.5 | Unknown | Contest Gallery | CWE-287 | Contest Gallery < 30.0.7 - Unauthenticated Login-Protection and 2FA Bypass vi… |
| CVE-2026-14574 | 5.7 | 22.4 | Eclipse Foundation | Eclipse Theia | CWE-1321 | In Eclipse Theia versions 0.7.0 and up until including 1.73.1, the `Preferenc… |
| CVE-2026-7646 | 6.5 | 22.2 | IBM | Langflow OSS | CWE-22 | Langflow is affected by security vulnerabilities in Model Context Protocol fe… |
| CVE-2026-16036 | 7.5 | 22.0 | Unknown | miniOrange 2FA | CWE-287 | miniOrange 2FA < 6.2.7 - 2FA Bypass via Password-Only Second-Factor Rebinding |
| CVE-2026-71232 | 7.2 | 22.0 | magicblack | maccms10 | CWE-94 | MacCMS10 - Incomplete Function Blacklist in Template Editor Enables Authentic… |
| CVE-2026-9196 | 8.8 | 21.9 | IBM | Langflow OSS | CWE-94 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2026-71316 | 7.5 | 21.7 | nuxt | nuxt | CWE-524 | Nuxt runtime payload cache discloses another user's SSR data across users and… |
| CVE-2026-15210 | 9.1 | 21.6 | Unknown | OTP Login With Phone Number, OTP Verification | CWE-287 | Login/Signup with Phone Number, OTP Verification < 1.8.71 - Unauthenticated A… |
| CVE-2026-16561 | 7.5 | 21.6 | Unknown | Sunshine Photo Cart | CWE-862 | Sunshine Photo Cart < 3.6.12 - Unauthenticated Private Gallery Comment Disclo… |
| CVE-2026-16736 | 7.5 | 21.6 | Unknown | User Registration & Membership | CWE-284 | User Registration & Membership < 5.2.6 - Unauthenticated Account Creation Whi… |
| CVE-2026-11969 | 4.9 | 21.2 | jgwhite33 | WP TripAdvisor Review Slider | CWE-89 | WP TripAdvisor Review Slider <= 14.3 - Authenticated (Administrator+) SQL Inj… |
| CVE-2026-71192 | 6.0 | 21.1 | OpenStack | Swift | CWE-863 | In OpenStack Swift through 2.38.0, the S3API middleware does not sanitize Swi… |
| CVE-2026-11920 | 4.9 | 20.9 | beardev | JoomSport – for Sports: Team & League, Football, Hockey & more | CWE-89 | JoomSport <= 5.7.9 - Authenticated (Administrator+) SQL Injection via 'order'… |
| CVE-2026-5116 | 4.4 | 20.8 | sevenspark | DTX – Dynamic Text Extension for Contact Form 7 | CWE-79 | Contact Form 7 – Dynamic Text Extension <= 5.0.5 - Authenticated (Editor+) St… |
| CVE-2026-71235 | 8.8 | 20.8 | absmach | magistrala | CWE-94 | Magistrala IoT Platform - Unrestricted Go/Lua Script Execution in Rules Engine |
| CVE-2026-71243 | 8.8 | 20.7 | adaltas | backmeup | CWE-78 | backmeup (npm) - OS Command Injection via Backup Option Values |
| CVE-2026-17626 | 8.8 | 20.5 | IBM | Langflow OSS | CWE-266 | Langflow is affected by security vulnerabilities in Model Context Protocol fe… |
| CVE-2026-71283 | 4.9 | 20.5 | fledge-iot | fledge | CWE-22 | Fledge IoT Gateway Backup Restore Tar Path Traversal |
| CVE-2026-71252 | 8.2 | 20.3 | raghav993 | toner-management | CWE-862 | toner-management - Unauthenticated State-Changing Admin Actions |
| CVE-2026-8446 | 7.5 | 20.4 | IBM | Langflow OSS | CWE-306 | Langflow is affected by security vulnerabilities in Model Context Protocol fe… |
| CVE-2026-55707 | 7.1 | 20.3 | OpenStack | Neutron | CWE-863 | In OpenStack Neutron before 28.0.2, the subnetpool onboarding API does not ve… |
| CVE-2026-71191 | 6.0 | 20.4 | OpenStack | Swift | CWE-863 | In OpenStack Swift through 2.38.0, S3API middleware does not enforce that sem… |
| CVE-2026-20268 | 8.6 | 20.2 | Cisco | Cisco IOS XE Software | CWE-119 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20269 | 8.6 | 20.2 | Cisco | Cisco IOS XE Software | CWE-664 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20270 | 8.6 | 20.2 | Cisco | Cisco IOS XE Software | CWE-682 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-10090 | 9.0 | 20.1 | Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 | CWE-267 | Multicluster-operators-subscription: multicluster-operators-subscription: nam… |
| CVE-2026-71241 | 7.5 | 20.1 | lyric777 | Book-Management-System | CWE-306 | Book-Management-System - Unauthenticated Disclosure of Student PII and Borrow… |
| CVE-2026-70604 | 7.4 | 20.0 | electron | electron | CWE-942 | Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cro… |
| CVE-2026-20304 | 9.9 | 19.9 | Cisco | Cisco Catalyst SD-WAN Controller | CWE-284 | Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabili… |
| CVE-2026-71206 | 8.3 | 19.9 | go-shiori | shiori | CWE-613 | shiori - JWT CheckToken Never Re-Validates Account State, Allowing Stale-Priv… |
| CVE-2026-71263 | 9.1 | 19.7 | cwalter-at | FreeModbus | CWE-787 | FreeModbus LINUXTCP Port Off-by-One Global Buffer Overflow in xMBPortTCPPool() |
| CVE-2026-70378 | 7.5 | 19.7 | theotherphil | imagecli | CWE-1284 | imagecli - Negative carve Ratio Bypasses Bounds Check and Crashes Process via… |
| CVE-2026-18933 | 7.2 | 19.6 | wp-downloadmanager | wp-downloadmanager | CWE-434 | wp-downloadmanager - Unrestricted File Upload via Missing Extension/MIME Vali… |
| CVE-2026-18969 | 5.5 | 19.7 | Rongzhitong | Visual Integrated Command and Dispatch Platform | CWE-284 | Rongzhitong Visual Integrated Command and Dispatch Platform upload unrestrict… |
| CVE-2026-20271 | 8.6 | 19.6 | Cisco | Cisco IOS XE Software | CWE-691 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-20273 | 8.6 | 19.6 | Cisco | Cisco IOS XE Software | CWE-20 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-9273 | 9.3 | 19.5 | stellarwp | Membership Plugin – Kadence Memberships | CWE-640 | Membership Plugin – Kadence Memberships <= 4.0.0 - Unauthenticated Password R… |
| CVE-2026-71312 | 8.0 | 19.5 | rclone | rclone | CWE-78 | rclone: PowerShell Smart-Quote Filename Injection Enables SFTP Server-Side Co… |
| CVE-2026-8400 | 9.8 | 19.2 | IBM | WebSphere Application Server | CWE-470 | Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Se… |
| CVE-2026-20313 | 7.7 | 19.2 | Cisco | Cisco Catalyst SD-WAN Controller | CWE-1284 | Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerab… |
| CVE-2026-10059 | 9.1 | 19.0 | Red Hat | Multicluster Engine for Kubernetes | CWE-266 | Cluster-curator-controller: cluster-curator-controller: namespace admin can e… |
| CVE-2026-71281 | 8.8 | 19.0 | huggingface | peft | CWE-502 | peft Unsafe Deserialization via torch.load() Without weights_only in LoRA-GA … |
| CVE-2026-70605 | 5.9 | 18.6 | electron | electron | CWE-918 | Electron: HTTP redirect followed into local file loader |
| CVE-2026-52466 | 9.8 | 18.5 | n/a | n/a | CWE-863 | Open Library Foundation VuFind v11.0.3 and v4.1 is vulnerable to toInorrect A… |
| CVE-2026-71315 | 8.2 | 18.4 | nuxt | nuxt | CWE-178 | Nuxt route rules silently dropped for mixed-case paths, bypassing appMiddlewa… |
| CVE-2026-16573 | 7.5 | 18.3 | Unknown | Bit Form | CWE-79 | Bit Form < 3.2.0 - Unauthenticated Stored XSS via SVG Signature Upload |
| CVE-2026-7726 | 6.5 | 18.4 | techeshta | Layouts for WPBakery | CWE-862 | Layouts for WPBakery <= 1.1.3 - Missing Authorization to Unauthenticated Temp… |
| CVE-2026-55739 | 8.3 | 17.9 | crater-invoice | Crater | CWE-639 | Crater - Missing Tenant-Ownership Check in CustomerPolicy Allows Cross-Compan… |
| CVE-2026-20312 | 8.8 | 17.7 | Cisco | Cisco Catalyst SD-WAN Controller | CWE-312 | Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vul… |
| CVE-2026-71202 | 7.5 | 17.6 | kosinix | raster | CWE-191 | raster - Integer Underflow in crop() Offset Handling Causes Capacity-Overflow… |
| CVE-2026-18968 | 2.1 | 17.8 | ttttonyhe | OBlog | CWE-79 | ttttonyhe OBlog tags.php cross site scripting |
| CVE-2026-7520 | 8.1 | 17.5 | mailmunch | Mailmunch Forms for Mailchimp | CWE-862 | MailChimp Forms by MailMunch <= 3.2.7 - Missing Authorization to Authenticate… |
| CVE-2026-54876 | 7.5 | 17.5 | OpenSSL | OpenSSL | CWE-401 | Client-Side Memory Leak in OCSP Response Checking |
| CVE-2026-39923 | 9.2 | 17.4 | Flarum | Flarum Framework | CWE-324 | Flarum < 1.8.16 Password Reset Token Expiry Bypass via POST /reset |
| CVE-2026-20267 | 9.0 | 17.3 | Cisco | Cisco IOS XE Software | CWE-284 | Cisco IOS XE Software Security Hardening Release |
| CVE-2026-13477 | 8.8 | 17.2 | IBM | QRadar | CWE-78 | IBM QRadar SIEM is vulnerable to remote code execution by privileged users |
| CVE-2026-5062 | 4.9 | 17.2 | supercleanse | PrettyLinks – Affiliate Link Management, URL Shortener, Link Cloaking, Tracking & Branded Short Links | CWE-89 | PrettyLinks <= 3.6.20 - Authenticated (Administrator+) SQL Injection via 's' … |
| CVE-2026-55747 | 6.8 | 17.1 | The-Pocket | PocketFlow (pocketflow-coding-agent cookbook example) | CWE-22 | PocketFlow - Path Traversal in pocketflow-coding-agent Cookbook Example File … |
| CVE-2026-71203 | 5.3 | 16.8 | dgtlmoon | changedetection.io | CWE-306 | changedetection.io - Missing Authentication on /api/v1/full-spec Discloses Fu… |
| CVE-2026-71211 | 7.1 | 16.6 | mlflow | mlflow | CWE-918 | mlflow - Unvalidated Gateway Secret api_base Enables SSRF via Gateway Proxy E… |
| CVE-2026-71204 | 6.2 | 16.6 | dgtlmoon | changedetection.io | CWE-284 | changedetection.io - Omitted Checkbox in /settings Save Silently Disables API… |
| CVE-2026-18854 | 5.5 | 16.6 | Shandong Hoteam | PDM Product Data Management System | CWE-74 | Shandong Hoteam PDM Product Data Management System DataService GetStoredClass… |
| CVE-2026-18859 | 5.5 | 16.6 | ESAFENET | CDG | CWE-74 | ESAFENET CDG usbkey;logindojojs sql injection |
| CVE-2026-18958 | 5.5 | 16.6 | imranrisal-dev | Student-Management-System | CWE-74 | imranrisal-dev Student-Management-System Login loginCheckTest.php sql injection |
| CVE-2026-18970 | 5.5 | 16.6 | Rongzhitong | Visual Integrated Command and Dispatch Platform | CWE-74 | Rongzhitong Visual Integrated Command and Dispatch Platform findAll sql injec… |
| CVE-2026-20028 | 5.0 | 16.3 | Cisco | Cisco Terminal Services Agent | CWE-266 | Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability |
| CVE-2026-71313 | 6.9 | 16.1 | rclone | rclone | CWE-22 | rclone: Local Encoding Path Traversal |
| CVE-2026-15230 | 8.1 | 15.8 | Unknown | YayPricing | CWE-284 | YayPricing < 3.5.7 - Subscriber+ Pricing Configuration Modification and Coupo… |
| CVE-2026-54418 | 8.1 | 15.8 | Leantime | Leantime | CWE-862 | Leantime - Missing Authorization on TwoFA JSON-RPC Methods Allows Cross-Accou… |
| CVE-2026-70427 | 4.3 | 15.9 | Jenkins Project | Jenkins | CWE-59 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not safely handle sym… |
| CVE-2026-70601 | 7.5 | 15.4 | electron | electron | CWE-693 | Electron: Context isolation bypass via Function.prototype.bind hijack |
| CVE-2026-71234 | 7.5 | 15.5 | documize | community | CWE-863 | Documize Community - Attachment Download Authorization Bypass via Non-Validat… |
| CVE-2026-5108 | 4.4 | 15.5 | superpwa | Super Progressive Web Apps | CWE-79 | Super Progressive Web Apps <= 2.2.43 - Authenticated (Administrator+) Stored … |
| CVE-2026-70428 | 4.3 | 15.4 | Jenkins Project | Jenkins | CWE-22 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file… |
| CVE-2026-0931 | 6.9 | 15.1 | M-Files Corporation | M-Files Server | CWE-1286 | Denial-of-service vulnerability in M-Files Server |
| CVE-2026-11977 | 6.5 | 15.0 | afthemes | WP Post Author – Author Box, Multiple Authors, Guest Authors & Custom Avatars | CWE-89 | WP Post Author <= 3.9.1 - Authenticated (Author+) SQL Injection |
| CVE-2026-15941 | 6.5 | 15.0 | Relevanssi | Relevanssi Premium – A Better Search | CWE-89 | Relevanssi <= 4.27.1 and Relevanssi Premium <= 2.30.2 - Authenticated (Contri… |
| CVE-2026-71277 | 9.1 | 15.0 | iot-ecology | rust-iot-platform | CWE-287 | rust-iot-platform Authentication Bypass via Non-Validated Authorization Header |
| CVE-2026-70429 | 8.1 | 15.0 | Jenkins Project | Jenkins | CWE-178 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier handles case-insensitivity… |
| CVE-2026-12762 | 5.3 | 14.9 | IBM | Cloud Pak For Business Automation | CWE-538 | Insertion of Sensitive Information into Externally-Accessible File in IBM Bus… |
| CVE-2026-71271 | 8.5 | 14.8 | usememos | memos | CWE-918 | Memos Webhook SSRF via 0.0.0.0 Reserved-IP Bypass |
| CVE-2026-7456 | 6.5 | 14.8 | webocoders | Udimi Tools | CWE-862 | Udimi Tools <= 3.2 - Missing Authorization to Authenticated (Subscriber+) Plu… |
| CVE-2026-15452 | 4.7 | 14.8 | smub | Smash Balloon Social Photo Feed – Easy Social Feeds Plugin | CWE-79 | Smash Balloon Social Photo Feed <= 6.11.3 - Reflected Cross-Site Scripting vi… |
| CVE-2026-71311 | 6.4 | 14.5 | rclone | rclone | CWE-93 | rclone: FTP Command Arguments Permit CRLF Injection When Custom Encoding Pres… |
| CVE-2026-7327 | 8.1 | 14.3 | Progress Software Corporation | MarkLogic Server | CWE-269 | Privilege escalation in Progress MarkLogic Server REST API document processing |
| CVE-2026-16143 | 7.2 | 14.4 | e4jvikwp | VikRentItems Flexible Rental Management System | CWE-79 | VikRentItems Flexible Rental Management System <= 1.2.1 - Unauthenticated Sto… |
| CVE-2026-9201 | 8.8 | 13.9 | IBM | Langflow OSS | CWE-326 | Langflow OSS is affected by arbitrary code execution in component generation,… |
| CVE-2026-71260 | 6.5 | 13.9 | esphome | esphome | CWE-522 | ESPHome web_server Plaintext Password Disclosure via JSON "value" Field |
| CVE-2026-9205 | 9.8 | 13.8 | IBM | Langflow OSS | CWE-338 | Langflow is affected by weaknesses in secret handling and sensitive configura… |
| CVE-2026-70617 | 8.6 | 13.7 | Spacebar Server | Spacebar Server | CWE-862 | Spacebar Server Missing Authorization via Group DM Recipient Endpoint |
| CVE-2026-53992 | 5.1 | 13.7 | ProjectSend | ProjectSend | CWE-79 | Reflected XSS in ProjectSend thumbnails-regenerate.php via start_date / end_d… |
| CVE-2026-17617 | 9.8 | 13.6 | IBM | Application Gateway Operator | CWE-918 | Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator |
| CVE-2026-17506 | 7.2 | 13.6 | bensibley | Independent Analytics – WordPress Analytics Plugin | CWE-79 | Independent Analytics <= 2.15.0 - Unauthenticated Stored Cross-Site Scripting |
| CVE-2026-71285 | 8.1 | 13.3 | louislam | uptime-kuma | CWE-79 | Uptime Kuma Stored XSS via Matomo Analytics Site ID on Public Status Pages |
| CVE-2026-71282 | 6.5 | 13.2 | chirpstack | chirpstack | CWE-89 | ChirpStack SQLite Backend SQL Injection via Device Tag Key in ListDevices Filter |
| CVE-2026-16071 | 5.4 | 13.2 | Red Hat | Red Hat build of Keycloak 26.4 | CWE-269 | Keycloak-services: keycloak-services: ldap entry-dn user search bypasses conf… |
| CVE-2026-18856 | 2.0 | 13.2 | Poesis | Rhymix CMS | CWE-918 | Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdmin… |
| CVE-2026-18531 | 5.3 | 13.1 | IBM | Maximo Application Suite | CWE-330 | IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerab… |
| CVE-2026-9203 | 8.5 | 13.0 | Progress Software Corporation | MarkLogic Server | CWE-918 | Server-side request forgery in Progress MarkLogic Server |
| CVE-2026-10547 | 8.1 | 13.0 | IBM | Langflow OSS | CWE-284 | Langflow OSS is affected by arbitrary code execution in custom component vali… |
| CVE-2026-71239 | 8.1 | 12.9 | DjangoCRM | django-crm | CWE-1336 | DjangoCRM - Server-Side Template Injection in Mass Mail Message Rendering |
| CVE-2026-39924 | 7.6 | 12.9 | Flarum | Flarum Framework | CWE-613 | Flarum < 1.8.16 Session Persistence via Improper Access Token Revocation |
| CVE-2026-71294 | 7.6 | 12.8 | Cotonti | Cotonti | CWE-502 | Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize… |
| CVE-2026-25703 | 7.3 | 12.9 | SUSE | NeuVector | CWE-202 | Potential information leakage from manager /network/graph API in NeuVector |
| CVE-2026-10128 | 6.5 | 12.8 | IBM | Langflow OSS | CWE-200 | Langflow is affected by weaknesses in secret handling and sensitive configura… |
| CVE-2025-63822 | 8.1 | 12.5 | n/a | n/a | CWE-284 | SirenGPS Android Application 2.19.44 is vulnerable to Incorrect Access Contro… |
| CVE-2026-70436 | 4.3 | 12.4 | Jenkins Project | Jenkins External Workspace Manager Plugin | CWE-862 | Jenkins External Workspace Manager Plugin 1.4.1 and earlier does not perform … |
| CVE-2026-71255 | 8.6 | 12.3 | debevv | nanoMODBUS | CWE-787 | nanoMODBUS Client-Side Out-of-Bounds Write via object_length in recv_read_dev… |
| CVE-2026-17583 | 8.3 | 12.3 | Thermo Fisher | Applied Biosystems 3500/3500xL Series Data Collection Software | CWE-353 | Thermo Fisher Applied Biosystems Genetic Analyzers Missing Support for Integr… |
| CVE-2026-8790 | 6.1 | 12.3 | antoineh | Football Pool | CWE-79 | Football Pool <= 2.13.4 - Authenticated (Subscriber+) Reflected Cross-Site Sc… |
| CVE-2026-16968 | 6.5 | 12.2 | Unknown | GeoDirectory | CWE-200 | GeoDirectory < 2.8.168 - Contributor+ User Email Disclosure via geodir_json_s… |
| CVE-2026-16746 | 2.7 | 12.0 | Unknown | MultiVendorX | CWE-639 | MultiVendorX < 5.0.11 - Store Owner+ Cross-Store Commission Data Disclosure v… |
| CVE-2026-71250 | 4.3 | 11.9 | firefly-iii | firefly-iii | CWE-918 | Firefly III - Webhook URL Validation Explicitly Allows Loopback and Is Bypass… |
| CVE-2026-7869 | 5.4 | 11.8 | IBM | Langflow OSS | CWE-22 | Langflow OSS is affected by arbitrary code execution in custom component vali… |
| CVE-2026-70615 | 8.5 | 11.7 | boringproxy | boringproxy | CWE-93 | boringproxy 0.10.0 SSH authorized_keys Injection via Tunnel Creation |
| CVE-2026-71242 | 8.3 | 11.7 | crater-invoice | crater | CWE-639 | Crater - Cross-Company IDOR on Notes via Missing Company-Ownership Check in N… |
| CVE-2026-71293 | 6.2 | 11.8 | statamic | cms | CWE-200 | Statamic CMS Unguarded Exposure of 2FA Recovery Codes via Antlers current_use… |
| CVE-2026-18411 | 7.2 | 10.9 | Acrisure | KARR BT | CWE-321 | Use of hard-coded cryptographic key in Acrisure KARR BT and DR-100 |
| CVE-2026-70602 | 6.6 | 10.9 | electron | electron | CWE-284 | Electron: Extension tab APIs operate across session boundaries |
| CVE-2026-71208 | 6.5 | 10.9 | kubesphere | KubeSphere | CWE-918 | KubeSphere - SSRF via Unvalidated Cluster CRD Connection Endpoint in Cluster … |
| CVE-2026-18953 | 6.3 | 10.9 | AWS | aws-transform-mcp-server | CWE-22 | Improper limitation of a pathname to a restricted directory in aws-transform-… |
| CVE-2026-71318 | 4.8 | 11.0 | nuxt | nuxt | CWE-20 | Nuxt: Unauthorized Component Instantiation via Server Island Props |
| CVE-2026-70432 | 8.8 | 10.6 | Jenkins Project | Jenkins Multijob Plugin | CWE-352 | A cross-site request forgery (CSRF) vulnerability in Jenkins Multijob Plugin … |
| CVE-2026-71205 | 6.5 | 10.7 | dgtlmoon | changedetection.io | CWE-307 | changedetection.io - No Rate Limiting on /login Enables Unlimited Password Br… |
| CVE-2026-20198 | 4.8 | 10.6 | Cisco | Cisco Enterprise NFV Infrastructure Software | CWE-79 | Cisco Integrated Management Controller Cross-Site Scripting Vulnerability |
| CVE-2026-0516 | 6.5 | 10.4 | SonicWall | SonicOS | CWE-644 | A improper neutralization of HTTP Headers for Scripting Syntax vulnerability … |
| CVE-2026-55998 | 5.3 | 10.4 | SUSE | Rancher | CWE-204 | Cluster Existence Oracle via Unauthenticated Import Endpoint |
| CVE-2026-7105 | 4.3 | 10.2 | xpro | Xpro Addons — 140+ Widgets for Elementor | CWE-862 | Xpro Addons <= 1.5.1 - Missing Authorization to Authenticated (Subscriber+) A… |
| CVE-2026-16442 | 9.8 | 10.0 | Red Hat | Red Hat build of Keycloak 26.4 | CWE-346 | Keycloak-services: keycloak-services: saml idp-initiated broker login bypasse… |
| CVE-2026-7657 | 6.5 | 9.9 | IBM | Langflow OSS | CWE-918 | Langflow OSS is affected by server-side request forgery in provider validatio… |
| CVE-2026-71244 | 6.5 | 9.9 | paperless-ngx | paperless-ngx | CWE-918 | Paperless-ngx - Mail Account Test Connection Leaks Stored IMAP/OAuth Credenti… |
| CVE-2026-71251 | 6.5 | 9.9 | akaunting | akaunting | CWE-639 | Akaunting - Cross-Company Media IDOR in Customer Portal Download Endpoint |
| CVE-2026-18927 | 2.1 | 9.9 | imranrisal-dev | Student-Management-System | CWE-284 | imranrisal-dev Student-Management-System Shared Upload Helper student_profile… |
| CVE-2026-64572 | await | 10.0 | Linux | Linux | — | ipv4: fib: free fib_alias with kfree_rcu() on insert error path |
| CVE-2026-71233 | 8.7 | 9.7 | invoiceninja | invoiceninja | CWE-79 | InvoiceNinja - Stored XSS via Invoice/Quote Terms Field |
| CVE-2026-71236 | 8.7 | 9.7 | grocy | grocy | CWE-79 | Grocy - Stored XSS via HTMLPurifier Output Double-Decode |
| CVE-2026-70616 | 7.1 | 9.6 | boringproxy | boringproxy | CWE-833 | boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading endpoint |
| CVE-2026-6972 | 6.4 | 9.2 | sonalsinha21 | SKT Skill Bar | CWE-79 | SKT Skill Bar <= 2.6 - Authenticated (Contributor+) Stored Cross-Site Scripting |
| CVE-2026-7441 | 6.4 | 9.2 | alphawolf | Simple Yearly Archive | CWE-79 | Simple Yearly Archive <= 2.2.4 - Authenticated (Contributor+) Stored Cross-Si… |
| CVE-2026-71264 | 8.2 | 9.1 | Aircoookie | WLED | CWE-862 | WLED Unauthenticated Configuration Disclosure via /json/cfg and Global Settin… |
| CVE-2026-55524 | 7.5 | 9.1 | MervinPraison | PraisonAI | CWE-367 | PraisonAI: SSRF in web_crawl tool via redirect-following and DNS rebinding (v… |
| CVE-2026-70448 | 7.1 | 9.0 | Jenkins Project | Jenkins Ivy Report Plugin | CWE-611 | Jenkins Ivy Report Plugin 1.2 and earlier does not configure its XML parser t… |
| CVE-2026-71265 | 7.5 | 8.9 | domoticz | domoticz | CWE-121 | Domoticz MochadTCP Stack Buffer Overflow via MOCHAD_RFSEC strcpy() |
| CVE-2026-16981 | 5.3 | 9.0 | Unknown | DHL Shipping Germany for WooCommerce | CWE-639 | DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Download via IDOR |
| CVE-2026-70618 | 5.3 | 9.0 | Spacebar Server | Spacebar Server | CWE-862 | Spacebar Server Missing Authorization via member-ids Endpoint |
| CVE-2026-20289 | 6.5 | 8.8 | Cisco | Cisco RoomOS Software | CWE-532 | Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability |
| CVE-2026-18896 | 2.1 | 8.9 | lavkush-maurya | Student-Registration-System | CWE-74 | lavkush-maurya Student-Registration-System changepass.php sql injection |
| CVE-2026-71276 | 7.1 | 8.7 | absmach | magistrala | CWE-89 | Magistrala (formerly Mainflux) IoT Platform SQL Injection via format Query Pa… |
| CVE-2026-71240 | 4.3 | 8.5 | DjangoCRM | django-crm | CWE-601 | DjangoCRM - Unauthenticated Open Redirect via toggle_default_sorting next_url… |
| CVE-2026-71201 | 5.0 | 8.5 | OpenStack | Ironic | CWE-863 | In OpenStack Ironic through 38.0.0, a project reader that makes a crafted req… |
| CVE-2026-70599 | 5.9 | 7.8 | electron | electron | CWE-346 | Electron: Permission Check Handler Receives Main Frame Origin Instead of Requ… |
| CVE-2026-21766 | 5.4 | 7.7 | HCLSoftware | HCL Digital Experience and Digital Experience Compose | CWE-522 | HCL Digital Experience and Digital Experience Compose insufficiently protects… |
| CVE-2026-16443 | 9.1 | 7.5 | Red Hat | Red Hat build of Keycloak 26.4 | CWE-347 | Keycloak-services: keycloak-services: saml broker metadata import disables re… |
| CVE-2026-70596 | 4.3 | 7.5 | TryGhost | Ghost | CWE-79 | Ghost: Cross-Site Scripting in Feature Image Captions |
| CVE-2026-70430 | 2.7 | 7.5 | Jenkins Project | Jenkins | CWE-284 | Jenkins 2.575 and earlier, LTS 2.568.1 and earlier does not restrict the type… |
| CVE-2026-70444 | 4.3 | 7.4 | Jenkins Project | Jenkins Violation Comments to GitLab Plugin | CWE-693 | A missing permission check in Jenkins Violation Comments to GitLab Plugin 2.6… |
| CVE-2026-71280 | 8.5 | 7.3 | go-shiori | shiori | CWE-918 | go-shiori Server-Side Request Forgery via Unrestricted Bookmark URL Fetch |
| CVE-2026-70600 | 3.1 | 7.3 | electron | electron | CWE-1021 | Electron: Cross-origin iframe can position native autofill popup |
| CVE-2026-16583 | 6.1 | 7.1 | Unknown | Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More | CWE-79 | Orbit Fox by ThemeIsle < 3.0.8 - Author+ Stored XSS via SVG Upload |
| CVE-2026-70595 | 4.0 | 7.1 | TryGhost | Ghost | CWE-918 | Ghost: Server-Side Request Forgery Mitigation Issue |
| CVE-2026-9130 | 7.1 | 7.0 | IBM | Langflow OSS | CWE-639 | Langflow OSS is affected by arbitrary code execution in custom component vali… |
| CVE-2026-71247 | 6.5 | 6.9 | documenso | documenso | CWE-863 | Documenso - Assistant Recipient Can Forge Another Signer's Signature in Seque… |
| CVE-2026-71274 | 8.5 | 6.8 | openshwprojects | OpenBK7231T_App | CWE-79 | OpenBK7231T Stored XSS via Unsanitized MQTT-Set Channel Labels |
| CVE-2026-70611 | 6.9 | 6.8 | electron | electron | CWE-78 | Electron: DevTools embedder handler executes arbitrary files via shell open |
| CVE-2026-70437 | 3.7 | 6.8 | Jenkins Project | Jenkins Webhook Secret Credentials Provider Plugin | CWE-208 | Jenkins Webhook Secret Credentials Provider Plugin 16.v0cfa_f0215cf5 and earl… |
| CVE-2025-15677 | 3.5 | 6.8 | Unknown | GeoDirectory | CWE-79 | GeoDirectory < 2.8.110 - Editor+ Stored XSS via Place Categories |
| CVE-2026-14304 | 4.6 | 6.7 | Eclipse Foundation | Eclipse Accessibility Tools Framework (ACTF) | CWE-611 | In Eclipse Accessibility Tools Framework (ACTF) versions up to 1.6.0 (includi… |
| CVE-2026-9081 | 7.1 | 6.5 | IBM | Langflow OSS | CWE-918 | Langflow OSS is affected by server-side request forgery in provider validatio… |
| CVE-2026-64569 | await | 6.5 | Linux | Linux | — | mpls: fix NULL deref in mpls_valid_fib_dump_req() on CONFIG_INET=n |
| CVE-2026-64571 | await | 6.5 | Linux | Linux | — | wifi: p54: validate RX frame length in p54_rx_eeprom_readback() |
| CVE-2026-64579 | await | 6.5 | Linux | Linux | — | xfrm: policy: preallocate inexact bins before xfrm_hash_rebuild reinsert |
| CVE-2026-66298 | 8.6 | 6.5 | livebook-dev | livebook | CWE-346 | JS-view sandboxed output can synthesize keyboard events to trigger unconfirme… |
| CVE-2026-70433 | 4.3 | 6.5 | Jenkins Project | Jenkins HCL AppScan Plugin | CWE-862 | Missing permission checks in Jenkins HCL AppScan Plugin 1.8.3 and earlier all… |
| CVE-2026-70438 | 4.3 | 6.5 | Jenkins Project | Jenkins Parameterized Remote Trigger Plugin | CWE-862 | A missing permission check in Jenkins Parameterized Remote Trigger Plugin 3.2… |
| CVE-2026-70442 | 4.3 | 6.5 | Jenkins Project | Jenkins Google Chat Notification Plugin | CWE-285 | Jenkins Google Chat Notification Plugin 166.ve6b_de280f2e8 and earlier does n… |
| CVE-2026-70445 | 4.3 | 6.5 | Jenkins Project | Jenkins Sauce OnDemand Plugin | CWE-862 | Missing permission checks in Jenkins Sauce OnDemand Plugin 2.2.0 and earlier … |
| CVE-2026-70446 | 4.3 | 6.5 | Jenkins Project | Jenkins CodeSonar Plugin | CWE-862 | Missing permission checks in Jenkins CodeSonar Plugin 3.6.0 and earlier allow… |
| CVE-2026-70376 | 9.6 | 6.4 | pluck-cms | Pluck CMS | CWE-352 | Pluck CMS - CSRF via Spoofable Missing-Referer Bypass Leads to Stored XSS and… |
| CVE-2026-7444 | 8.1 | 6.3 | cornelraiu-1 | Search Analytics for WP | CWE-352 | Search Analytics for WP <= 1.4.16 - Cross-Site Request Forgery |
| CVE-2026-16993 | 3.7 | 6.0 | Unknown | DHL Shipping Germany for WooCommerce | CWE-200 | DHL for WooCommerce < 4.0.1 - Unauthenticated Shipping Label Disclosure via U… |
| CVE-2026-71272 | 8.5 | 5.9 | usememos | memos | CWE-367 | Memos Webhook DNS Rebinding TOCTOU SSRF in safeDialContext() |
| CVE-2026-63457 | 6.5 | 5.9 | Hewlett Packard Enterprise (HPE) | HPE Integrated Lights-Out 6 (iLO 6) | CWE-400 | A potential denial of service vulnerability exists in HPE Integrated Lights-O… |
| CVE-2026-71227 | 5.1 | 5.7 | Stephan Muelle | libkcapi | CWE-835 | Libkcapi: infinite loop denial of service in libkcapi _kcapi_aio_read_all() d… |
| CVE-2026-70443 | 4.3 | 5.7 | Jenkins Project | Jenkins Horreum Plugin | CWE-269 | Jenkins Horreum Plugin 0.16.162.v33b_4a_a_b_5f828 and earlier does not set th… |
| CVE-2026-70447 | 4.3 | 5.7 | Jenkins Project | Jenkins AWS CodeBuild Plugin | CWE-862 | Missing permission checks in Jenkins AWS CodeBuild Plugin 0.59 and earlier al… |
| CVE-2026-71246 | 4.3 | 5.5 | pixelfed | pixelfed | CWE-918 | Pixelfed - Authenticated SSRF via Remote URL Search |
| CVE-2026-15587 | 9.4 | 5.5 | Google Cloud | Google SecOps (Chronicle SOAR) | CWE-346 | Privilege Escalation in Google SecOps (Chronicle SOAR) via Crafted Authentica… |
| CVE-2026-70439 | 6.5 | 5.5 | Jenkins Project | Jenkins XML Job to Job DSL Plugin | CWE-862 | Jenkins XML Job to Job DSL Plugin 0.1.13 and earlier does not perform permiss… |
| CVE-2026-64573 | await | 5.5 | Linux | Linux | — | Bluetooth: qca: fix NVM tag length underflow in TLV parser |
| CVE-2026-66885 | 6.8 | 5.3 | livebook-dev | livebook | CWE-352 | Livebook Teams identity callback lacks state binding, allowing login CSRF |
| CVE-2026-20311 | 6.3 | 5.1 | Cisco | Cisco IOS XE Software | CWE-126 | Cisco IOS XE Software Web UI Denial of Service Vulnerability |
| CVE-2026-64570 | 7.8 | 5.0 | Linux | Linux | — | wifi: mac80211: fix fils_discovery double free on alloc failure |
| CVE-2026-70606 | 5.9 | 5.0 | electron | electron | CWE-668 | Electron: ProtocolResponse.url reuses the default session cache instead of th… |
| CVE-2026-71210 | 5.3 | 5.0 | mealie-recipes | mealie | CWE-367 | mealie - DNS-Rebinding TOCTOU in SSRF Guard Allows Internal Network and Cloud… |
| CVE-2026-71286 | 6.1 | 4.8 | miguelcobain | ember-dynamic-render-template | CWE-1336 | ember-dynamic-render-template Client-Side Template Injection via Unsanitized … |
| CVE-2026-55522 | 7.8 | 4.6 | MervinPraison | PraisonAI | CWE-94 | PraisonAI workflow include bypasses tools.py autoload opt-in and executes inc… |
| CVE-2026-55996 | 4.3 | 4.4 | SUSE | Rancher | CWE-770 | Unauthenticated Denial-of-Service via TLS SAN Stuffing in Rancher and cattle-… |
| CVE-2026-17578 | 2.3 | 4.4 | Kong | Kong Event Gateway | CWE-323 | Kong Event Gateway AES-GCM nonce reuse due to missing key rotation enforcement |
| CVE-2026-71249 | 6.1 | 4.3 | 299ko | 299Ko | CWE-79 | 299Ko - Unauthenticated Reflected XSS in Public Contact Form |
| CVE-2026-7326 | 7.5 | 4.0 | Progress Software Corporation | MarkLogic Server | CWE-352 | Cross-site request forgery in Progress MarkLogic Server Admin UI |
| CVE-2026-70440 | 5.4 | 3.6 | Jenkins Project | Jenkins Qualys Container Scanning Connector Plugin | CWE-79 | Jenkins Qualys Container Scanning Connector Plugin 1.8.0.5 and earlier does n… |
| CVE-2026-70441 | 5.4 | 3.6 | Jenkins Project | Jenkins Summary Display Plugin | CWE-79 | Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name … |
| CVE-2026-12410 | 7.8 | 3.3 | Gen Digital | CCleaner | CWE-59 | CCleaner local privilege escalation via link following on uninstall |
| CVE-2026-70598 | 3.9 | 3.3 | electron | electron | CWE-125 | Electron: Off-screen rendering trusts GPU-supplied geometry over shared-memor… |
| CVE-2026-66839 | 8.4 | 3.2 | Integrated Systems Technologies, Inc. | NetKids iMark | CWE-428 | NetKids iMark, provided by Integrated Systems Technologies, Inc., contains an… |
| CVE-2026-44605 | 5.5 | 3.2 | Red Hat | Red Hat Hardened Images | CWE-190 | Rpm: heap buffer overflow in ndb slot table parsing |
| CVE-2026-20294 | 6.5 | 3.1 | Cisco | Cisco Catalyst SD-WAN Manager | CWE-319 | Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability |
| CVE-2026-8029 | 3.9 | 3.1 | ZTE | SmartLife | CWE-89 | SQL Injection Vulnerability in ZTE SmartLife App |
| CVE-2026-71275 | 5.4 | 3.0 | openshwprojects | OpenBK7231T_App | CWE-79 | OpenBK7231T - Reflected XSS via OTA host Parameter |
| CVE-2026-64582 | 7.8 | 2.8 | Linux | Linux | — | RDMA/rxe: Fix a use-after-free problem in rxe_mmap |
| CVE-2026-71226 | 7.3 | 2.8 | Stephan Muelle | libkcapi | CWE-416 | Libkcapi: memory corruption via uncanceled aio requests on error in libkcapi'… |
| CVE-2026-49331 | 6.5 | 2.9 | Red Hat | Red Hat OpenShift Container Platform 4 | CWE-345 | Openshift/oauth-proxy: openshift/oauth-proxy: unauthenticated identity header… |
| CVE-2026-16942 | 5.4 | 2.8 | Unknown | WP Custom HTML Page | CWE-79 | WP Custom HTML Pages <= 0.6.2 - Author+ Stored XSS |
Results continue: ranks 401–432.
Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.
Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.
Day boundary. A day is a UTC calendar day. This page covers 2026-08-05 00:00:00–23:59:59 UTC. All times shown are UTC.
Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.
Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.
Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.
