Security Box Score — August 7, 2026

215 CVEs published, led by Tobit Laboratories AG (22).

215 CVEs published August 7, 2026: 25 critical, 79 high, 92 medium, 19 low; 1 in the KEV catalog at press time; 3 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 190 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	1908	24072	—	—
KEV catalog size	1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

1290 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	44	2359	210	1254	637	1	11	2	0.1	7.8	.0016	+7 ▲
google	43	1804	222	743	783	56	77	6	0.3	7.5	.0025	-9 ▼
microsoft	33	1455	121	991	329	14	286	24	1.6	7.8	.0047	-17 ▼
red hat	41	427	20	165	212	30	2	0	0.0	6.5	.0029	+14 ▲
apple	1	272	58	78	133	3	88	7	2.6	6.8	.0027	+1 ▲
canonical	0	27	3	8	11	5	0	0	0.0	5.6	.0014	0
suse	5	26	5	14	6	1	0	0	0.0	8.1	.0039	-1 ▼
freebsd	0	16	0	12	4	0	0	0	0.0	7.8	.0016	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	30	68	13	36	19	0	56	12	17.6	7.5	.0046	+22 ▲
ubiquiti	0	36	14	21	1	0	3	3	8.3	8.8	.0049	-25 ▼
palo alto networks	0	25	1	3	14	7	13	2	8.0	4.7	.0028	0
fortinet	0	23	6	6	11	0	28	6	26.1	7.2	.0040	0
netgear	0	23	0	0	22	1	0	0	0.0	4.6	.0024	0
vmware	0	17	4	9	2	2	7	1	5.9	8.3	.0040	0
f5	0	16	5	8	3	0	4	1	6.3	8.6	.0057	0
checkpoint	1	13	4	6	3	0	3	2	15.4	7.8	.0436	+1 ▲

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	61	397	77	176	131	12	33	2	0.5	7.5	.0050	+11 ▲
mozilla	1	128	51	42	35	0	9	0	0.0	8.1	.0031	-2 ▼
drupal	0	51	6	5	35	5	4	1	2.0	5.9	.0026	0
gitlab	0	51	0	7	37	7	4	2	3.9	4.9	.0029	0
github	2	14	1	4	9	0	0	0	0.0	6.2	.0043	+1 ▲
docker	0	7	0	5	2	0	0	0	0.0	8.2	.0016	0
wordpress	1	4	1	2	1	0	2	2	50.0	8.8	.5550	+1 ▲
kubernetes	0	1	0	0	0	1	0	0	0.0	2.4	.0035	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	0	1379	343	653	322	61	27	3	0.2	8.1	.0036	0
ibm	32	261	72	104	84	1	6	1	0.4	7.5	.0031	+32 ▲
adobe	8	260	33	117	106	4	19	3	1.2	7.8	.0026	+5 ▲
progress	11	53	14	32	7	0	6	1	1.9	8.1	.0037	+9 ▲
solarwinds	0	23	17	3	3	0	10	4	17.4	9.1	.0058	0
veeam	10	16	5	9	2	0	1	0	0.0	8.6	.0034	+10 ▲
zohocorp	0	6	2	2	2	0	0	0	0.0	7.8	.0146	0
atlassian	0	3	0	3	0	0	13	0	0.0	8.0	.0026	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
synology	1	24	2	6	13	3	0	5.6	.0025	+1 ▲
rockwell automation	0	24	4	18	2	0	0	8.7	.0029	0
d-link	0	20	0	5	9	6	3	5.5	.0105	0
siemens	0	16	1	8	7	0	0	7.6	.0024	0
schneider electric	0	9	1	6	2	0	0	8.6	.0037	0
abb	0	7	0	4	3	0	0	7.2	.0018	0
hikvision	0	6	0	4	2	0	0	7.2	.0040	0
moxa	0	5	0	3	2	0	0	7.0	.0029	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
sourcecodester	11	131	0	0	70	61	0	0	0.0	5.5	.0033	-16 ▼
openclaw	0	111	0	58	39	14	0	0	0.0	7.0	.0026	0
dell	8	107	9	50	45	3	2	1	0.9	7.2	.0021	-15 ▼
nvidia	16	98	13	66	19	0	0	0	0.0	7.7	.0034	-1 ▼
capgo	0	83	2	42	38	1	0	0	0.0	7.1	.0037	0
spring	0	79	2	34	41	2	0	0	0.0	6.5	.0022	0
imagemagick	0	78	1	5	60	12	0	0	0.0	5.3	.0018	-8 ▼
itsourcecode	6	77	0	0	19	58	0	0	0.0	2.1	.0033	-4 ▼

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-8037	.9957	99.9	9.8
CVE-2026-34486	.9862	99.9	7.5
CVE-2026-63030	.9779	99.9	9.8
CVE-2026-16232	.8912	99.8	9.3
CVE-2026-63077	.8473	99.7	9.8
CVE-2026-50522	.8461	99.7	9.8
CVE-2026-15409	.8366	99.7	10.0
CVE-2026-60137	.7979	99.6	5.9
CVE-2026-6875	.7758	99.5	9.5
CVE-2026-25089	.7611	99.5	9.8

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-15409	10.0	.8366	KEV
CVE-2026-48939	10.0	.1973	KEV
CVE-2026-56291	10.0	.1459	KEV
CVE-2026-59726	10.0	.0688
CVE-2026-8985	10.0	.0660
CVE-2026-6516	10.0	.0486
CVE-2026-47668	10.0	.0388
CVE-2026-46339	10.0	.0335
CVE-2026-61447	10.0	.0249
CVE-2026-57827	10.0	.0233

Most disclosures (vendor)
Vendor	CVEs
oracle	1109
linux	842
microsoft	646
google	460
apache	191
red hat	174
apple	168
ibm	135
adobe	113
mozilla	69

Most KEV additions (YTD)
Vendor	KEV
microsoft	24
cisco	12
apple	7
fortinet	6
google	6
ivanti	5
solarwinds	4
adobe	3
berriai	3
oracle	3

Most-affected ecosystems
Ecosystem	Advisories
Maven	67
PyPI	5
Go	3
npm	3
Packagist	2
crates.io	2
NuGet	1

Fastest to KEV
CVE	Vendor	Days
CVE-2021-27137	DD-WRT	0
CVE-2025-68686	Fortinet	0
CVE-2026-0770	Langflow	0
CVE-2026-15409	SonicWall	0
CVE-2026-15410	SonicWall	0
CVE-2026-16232	checkpoint	0
CVE-2026-16812	Arista Networks	0
CVE-2026-18556	N-able	0
CVE-2026-18577	N-able	0
CVE-2026-20316	Cisco	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	n/a	2021-11-17	1724
CVE-2021-27102	n/a	2021-11-17	1724
CVE-2021-27101	n/a	2021-11-17	1724
CVE-2021-27103	n/a	2021-11-17	1724
CVE-2021-21017	Adobe	2021-11-17	1724
CVE-2021-28550	Adobe	2021-11-17	1724
CVE-2021-42013	Apache Software Foundation	2021-11-17	1724
CVE-2021-41773	Apache Software Foundation	2021-11-17	1724
CVE-2021-30858	Apple	2021-11-17	1724
CVE-2021-30860	Apple	2021-11-17	1724

Transactions

EXPLOIT PUBLISHED — itsourcecode Hospital Management System: 5 CVEs (CVE-2026-19067, CVE-2026-19068, CVE-2026-19069, CVE-2026-19070, CVE-2026-19071). Public exploit references added.

EXPLOIT PUBLISHED — fogproject: 4 CVEs (CVE-2026-47685, CVE-2026-47687, CVE-2026-47688, CVE-2026-47689). Public exploit references added.

EXPLOIT PUBLISHED — FlowiseAI Flowise: 3 CVEs (CVE-2026-67621, CVE-2026-67622, CVE-2026-70636). Public exploit references added.

EXPLOIT PUBLISHED — FoundationAgents MetaGPT: 3 CVEs (CVE-2026-19058, CVE-2026-19059, CVE-2026-19060). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2019-18184. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-24682. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-1086 (Linux Kernel). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-15674 (Unknown Passster). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-56005. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-10524 (Unknown CoCart). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-10599 (Unknown Integrate PhonePe with WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-10773 (zephyrproject zephyr). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-11361 (Unknown Formidable Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-11976 (Unknown MonsterInsights Pro). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12501 (Unknown WP Travel Engine). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12584 (Unknown Payment Gateway for Redsys & WooCommerce Lite). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12901 (Unknown GetPaid). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13342 (Unknown Security Optimizer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13399 (Unknown Payment Plugins for PayPal WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14225 (Unknown Easy Appointments). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14306 (Unknown Tutor LMS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14812 (Unknown Premium SEO). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14831 (Unknown Easy Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14842 (Unknown Events Made Easy). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14936 (Unknown Simple Membership). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15147 (Unknown Five Star Restaurant Reservations). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15149 (Unknown WP Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15152 (Unknown WP Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15208 (Unknown RegistrationMagic). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15256 (Unknown Ninja Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16067 (Unknown Event Booking Manager for WooCommerce (Pro)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16619 (Unknown miniOrange 2FA). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16620 (Unknown WPC Name Your Price for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17032 (Unknown google-maps-easy-pro). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19062 (chiuwingyan house). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19108 (MZ Automation libiec61850). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19110 (DataGear). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-2411 (zephyrproject zephyr). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-24486 (Kludex python-multipart). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-5336 (Unknown DataPress (Dataverse Integration)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-56816 (netty). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-56821 (netty). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66041 (FFmpeg). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66758 (GNOME GIMP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66759 (GNOME GIMP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66838 (elixir-ecto postgrex). Public exploit reference added.

DUE DATE PASSED — CVE-2026-18577 (N-able N-central). CISA remediation deadline was August 6, 2026; still in catalog.

RESCORED — CVE-2022-2196 (Linux Kernel). CVSS 5.8 → 8.8 (NVD).

RESCORED — CVE-2023-46847 (squid). CVSS 8.6 → 7.5 (NVD).

RESCORED — CVE-2024-9675 (buildah). CVSS 7.8 → 4.4 (NVD).

RESCORED — CVE-2025-23366 (hal-console). CVSS 6.5 → 4.8 (NVD).

RESCORED — CVE-2026-24486 (Kludex python-multipart). CVSS 8.6 → 7.5 (NVD).

RESCORED — CVE-2026-43964 (Postfix). CVSS 3.7 → 7.5 (NVD).

RESCORED — CVE-2026-49875 (Apache Software Foundation Apache CXF). CVSS 6.5 → 9.8 (NVD).

RESCORED — CVE-2026-62836 (Microsoft Azure SQL Managed Instance). CVSS 8.7 → 10 (NVD).

ENRICHED — CVE-2019-18184. Received CVSS 9.8 and CPE data from NVD.

Yesterday's Results

How to read these box scores · glossary

215 CVEs published. 25 box scores, 190 table rows — nothing truncated.

CVE-2026-8037CRITICAL

Progress Software LoadMaster — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .9957   99.9   YES

AFFECTED
  Product                          Versions     Fixed
  LoadMaster                       V7.2.60.0 –  —
  ECS Connections Manager          V7.2.60.0 –  —
  Object Scale Connection Manager  V7.2.60.0 –  —
  MOVEit WAF                       V7.2.60.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Aug 6   Public exploit reference published
  Aug 7   Added to CISA KEV, due Aug 10
  Aug 7   Published (CNA: ProgressSoftware)

CWE-77 · CNA: ProgressSoftware · CVSS v3.1 · 4 references · NVD status: Analyzed · KEV due August 10, 2026

CVE-2026-64638HIGH

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially craf…

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   A   H   H   H    8.9   .3120   98.1     —

AFFECTED
  Product    Versions     Fixed
  WordPress  unspecified  —

TIMELINE
  Jul 20  Reserved by CNA
  Aug 7   Published (CNA: hackerone)

CWE-79 · CNA: hackerone · CVSS v4.0 · 2 references · NVD status: Received

CVE-2026-19243LOW

HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0161   74.1     —

AFFECTED
  Product  Versions  Fixed
  nanobot  0.2.0 –   0.3.0

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · CVSS v4.0 · 13 references · NVD status: Deferred

CVE-2026-61808CRITICAL

HKUDS LightRAG — LightRAG: Missing Authentication for Critical API Functions in Default Configuration

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0138   70.0     —

AFFECTED
  Product   Versions      Fixed
  LightRAG  < 1.5.5rc1 –  —

TIMELINE
  Jul 10  Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-306 · CNA: GitHub_M · CVSS v3.1 · 2 references · NVD status: Received

CVE-2026-19264CRITICAL

gitroomhq postiz-app — Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0077   52.9     —

AFFECTED
  Product     Versions     Fixed
  postiz-app  unspecified  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: postiz)

CWE-22 · CNA: postiz · CVSS v4.0 · 3 references · NVD status: Received

CVE-2022-4995CRITICAL

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0069   49.9     —

AFFECTED
  Product       Versions     Fixed
  E-cology 9.0  unspecified  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: VulnCheck)

CWE-434 · CNA: VulnCheck · CVSS v4.0 · 6 references · NVD status: Received

CVE-2026-17594HIGH

Sonatype Nexus Repository 3 — Nexus Repository 3 - Authorization Bypass in Repository Creation

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   N   H   N    8.2   .0061   46.7     —

AFFECTED
  Product             Versions  Fixed
  Nexus Repository 3  3.0.0 –   —

TIMELINE
  Jul 27  Reserved by CNA
  Aug 7   Published (CNA: Sonatype)

CWE-863 · CNA: Sonatype · CVSS v4.0 · 2 references · NVD status: Received

CVE-2026-71558CRITICAL

Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0053   42.3     —

AFFECTED
  Product      Versions  Fixed
  Apache Fory  0.14.0 –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: apache)

CWE-843, CWE-502 · CNA: apache · CVSS v3.1 · 2 references · NVD status: Analyzed

CVE-2026-20337HIGH

Cisco Cisco Secure Endpoint — ClamAV ZIP File Format Processing Memory Corruption Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0051   41.0     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  7.0.5 –   —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-120 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-11430MEDIUM

Trilby Media grav-plugin-scheduler-webhook — Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    6.9   .0051   40.9     —

AFFECTED
  Product                        Versions     Fixed
  grav-plugin-scheduler-webhook  unspecified  —
  getgrav/grav                   unspecified  —

TIMELINE
  Jun 5   Reserved by CNA
  Aug 7   Published (CNA: VulnCheck)

CWE-303 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Received

CVE-2026-69207MEDIUM

honojs hono — Hono: ReDoS in CORS middleware via Access-Control-Request-Headers

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  L    5.3   .0049   39.8     —

AFFECTED
  Product  Versions     Fixed
  hono     < 4.12.34 –  —

TIMELINE
  Aug 3   Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-1333 · CNA: GitHub_M · CVSS v3.1 · 3 references · NVD status: Received

CVE-2026-16258CRITICAL

Unknown Ajax Search Lite — Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0047   38.7     —

AFFECTED
  Product           Versions     Fixed
  Ajax Search Lite  unspecified  —

TIMELINE
  Jul 20  Reserved by CNA
  Aug 7   Published (CNA: WPScan)

CWE-502 · CNA: WPScan · CVSS v3.1 · 1 reference · NVD status: Received

CVE-2026-20338HIGH

Cisco Cisco Secure Endpoint — ClamAV ZIP File Format Processing Memory Corruption Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0047   38.6     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  7.0.5 –   —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-415 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-54210CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Buffer Overflow in file names of file upload functionalities

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   H   H   H    9.5   .0047   38.2     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-787 · CNA: NCSC.ch · CVSS v4.0 · 2 references · NVD status: Received

CVE-2026-54212CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Buffer Overflow in JSON-parsing

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   H   H   H    9.5   .0047   38.2     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-787 · CNA: NCSC.ch · CVSS v4.0 · 2 references · NVD status: Received

CVE-2026-20339HIGH

Cisco Cisco Secure Endpoint — ClamAV PESpin File Format Processing Integer Overflow Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0046   38.0     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  7.0.5 –   —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-190 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-20345HIGH

Cisco Cisco Secure Endpoint — ClamAV GPT File Format Processing Memory Corruption Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0046   38.0     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  1.12.3 –  —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-121 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-20347HIGH

Cisco Cisco Secure Endpoint — ClamAV Mach-O File Format Processing Memory Corruption Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0046   38.0     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  7.0.5 –   —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-125 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-20348HIGH

Cisco Cisco Secure Endpoint — ClamAV XAR File Format Processing Memory Corruption Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0046   38.0     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  7.0.5 –   —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-120 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Analyzed

CVE-2026-66492MEDIUM

phoca.cz Phoca Commander extension for Joomla — Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   H   N   N   N   N    6.1   .0045   37.1     —

AFFECTED
  Product                               Versions       Fixed
  Phoca Commander extension for Joomla  1.0.0-6.1.3 –  —

TIMELINE
  Jul 27  Reserved by CNA
  Aug 7   Published (CNA: Joomla)

CWE-22 · CNA: Joomla · CVSS v4.0 · 1 reference · NVD status: Received

CVE-2026-54213CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Denial of Service via endpoint 'internalRestart'

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   H    9.2   .0045   36.9     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-284 · CNA: NCSC.ch · CVSS v4.0 · 2 references · NVD status: Received

CVE-2026-20346HIGH

Cisco Cisco Secure Endpoint — ClamAV PDF File Format Processing Memory Corruption Vulnerability

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0044   36.9     —

AFFECTED
  Product                Versions  Fixed
  Cisco Secure Endpoint  7.0.5 –   —

TIMELINE
  Oct 8   Reserved by CNA
  Aug 7   Published (CNA: cisco)

CWE-125 · CNA: cisco · CVSS v3.1 · 1 reference · NVD status: Awaiting Analysis

CVE-2026-71559HIGH

Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0044   36.2     —

AFFECTED
  Product      Versions  Fixed
  Apache Fory  0.16.0 –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: apache)

CWE-502 · CNA: apache · CVSS v3.1 · 2 references · NVD status: Analyzed

CVE-2026-71560CRITICAL

Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  H  H    9.1   .0042   34.4     —

AFFECTED
  Product      Versions  Fixed
  Apache Fory  0.14.0 –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: apache)

CWE-125, CWE-502 · CNA: apache · CVSS v3.1 · 2 references · NVD status: Analyzed

CVE-2026-71557MEDIUM

go-git: Malicious reference names may modify files outside the reference storage

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   R  U  N  H  L    6.3   .0041   34.1     —

AFFECTED
  Product  Versions    Fixed
  go-git   < 5.19.2 –  —

TIMELINE
  Aug 6   Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-22 · CNA: GitHub_M · CVSS v3.1 · 7 references · NVD status: Received

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-54211	9.5	33.8	Tobit Laboratories AG	TeamDavid	CWE-787	TeamDavid: Buffer Overflow in multiple form data parameters
CVE-2026-67585	8.7	33.5	DivvyPayHQ	absinthe_federation	CWE-770	Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_fede…
CVE-2026-50540	9.6	33.1	kata-containers	kata-containers	CWE-20	Kata Containers: Config Path Annotation Arbitrary File Loading
CVE-2026-47659	8.7	33.2	aehrc	pathling	CWE-22	Pathling has path traversal in $import-pnp manifest that enables read-capable…
CVE-2026-47661	8.7	33.2	aehrc	pathling	CWE-22	Pathling has path traversal in $result endpoint that allows arbitrary warehou…
CVE-2026-68772	8.5	33.0	ZenML	ZenML	CWE-502	ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer
CVE-2026-16637	6.5	32.5	OPeNDAP Inc.	hyrax-docker	CWE-201	OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects
CVE-2026-66494	8.7	31.7	joomshaper.com	SP Page Builder extension for Joomla	CWE-284	Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API …
CVE-2026-17603	8.7	31.5	Sonatype	Nexus Repository 3	CWE-94	Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore C…
CVE-2026-15972	7.5	31.4	HashiCorp	Consul	CWE-770	Unauthenticated denial of service via unbounded external gRPC connection acce…
CVE-2026-54208	8.5	30.8	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Arbitrary File Write leading to Stored XSS
CVE-2026-66914	9.2	30.6	seblod.com	SEBLOD extension for Joomla	CWE-22	Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.…
CVE-2026-66491	8.2	30.4	phoca.cz	Phoca Commander extension for Joomla	CWE-22	Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
CVE-2026-66493	6.4	30.4	phoca.cz	Phoca Commander extension for Joomla	CWE-22	Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander…
CVE-2026-62992	6.9	29.1	smarty-php	smarty	CWE-22	Smarty: Symlink path traversal out of trusted directories
CVE-2026-46405	5.3	29.0	openbao	openbao	CWE-770	OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens
CVE-2026-46409	9.6	28.9	openyak	openyak	CWE-94	OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution
CVE-2026-65819	7.5	28.8	gopacket	gopacket	CWE-125	gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/und…
CVE-2026-71556	7.1	28.4	go-git	go-git	CWE-59	go-git: Worktree operations may follow symlinks
CVE-2026-15215	8.8	28.0	Unknown	Subscriptions for WooCommerce	CWE-269	Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Instal…
CVE-2026-62996	6.9	27.4	smarty-php	smarty	CWE-22	Smarty Security stream restriction bypass through stream: resource
CVE-2026-49007	7.5	27.1	ZTE	F689	CWE-798	Information leakage vulnerability in ZTE F689 product
CVE-2026-48039	9.1	26.9	pipeboard-co	meta-ads-mcp	CWE-287	Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Acc…
CVE-2025-58375	8.1	26.7	frappe	frappe	CWE-89	Frappe has potential SQL Injection due to missing validation
CVE-2026-71851	9.0	25.9	brix	crypto-js	CWE-331	crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulner…
CVE-2026-48047	5.9	26.0	xwiki	xwiki-platform	CWE-24	XWiki Platform vulnerable to potential arbitrary file writing using path trav…
CVE-2026-12071	5.3	25.9	Tobit Laboratories AG	TeamDavid	CWE-601	TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters
CVE-2026-54214	5.3	25.9	Tobit Laboratories AG	TeamDavid	CWE-601	TeamDavid: Header Injection through the 'cType' URL parameter
CVE-2026-71847	8.7	25.3	ruby	json	CWE-416	Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buf…
CVE-2026-19017	6.8	25.2	HashiCorp	Consul	CWE-862	Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
CVE-2026-19229	5.5	25.2	SourceCodester	Online Clothing Store	CWE-200	SourceCodester Online Clothing Store Dreamweaver Metadata Files _notes file i…
CVE-2026-16263	8.8	25.0	Unknown	WP Maps	CWE-22	WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
CVE-2026-54204	7.7	24.8	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in…
CVE-2026-54201	6.9	24.7	Tobit Laboratories AG	TeamDavid	CWE-862	TeamDavid: Missing Authorization
CVE-2026-54203	9.2	24.2	Tobit Laboratories AG	TeamDavid	CWE-200	TeamDavid: Memory Leak leaking sensitive information
CVE-2025-63235	7.5	23.9	n/a	n/a	CWE-400	In sol commit 373d848 (2024-12-12), the broker does not fully release resourc…
CVE-2026-56793	9.8	23.4	Dell	OpenManage Server Administrator Managed Node (Patch) for Windows	CWE-287	Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an…
CVE-2026-14365	9.8	23.3	themetechmount	TrueBooker – Appointment Booking and Scheduler System	CWE-862	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Pass…
CVE-2026-47660	8.7	23.2	aehrc	pathling	CWE-522	Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client creden…
CVE-2026-17593	7.2	22.9	Sonatype	Nexus Repository	CWE-470	Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
CVE-2026-45808	7.1	22.9	openbao	openbao	CWE-863	OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasse…
CVE-2026-48094	5.3	22.5	dartiss	shareopenly	CWE-79	ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared UR…
CVE-2026-54202	8.5	22.4	Tobit Laboratories AG	TeamDavid	CWE-36	TeamDavid: Path Traversal in the archive creation functionality
CVE-2026-56794	6.5	22.2	Dell	Dell OpenManage Server Administrator Managed Node (Patch) for Windows	CWE-23	Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a …
CVE-2026-52879	7.5	21.4	klever-io	klever-go	CWE-400	Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-d…
CVE-2026-52880	7.5	21.4	klever-io	klever-go	CWE-400	Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Run
CVE-2026-17599	6.9	21.3	Sonatype	Nexus Repository 3	CWE-620	Nexus Repository 3 - Unverified Onboarding State on change-admin-password End…
CVE-2026-17597	5.1	21.3	Sonatype	Nexus Repository 3	CWE-918	Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Veri…
CVE-2026-19015	5.3	21.3	HashiCorp	Consul	CWE-770	Uncontrolled resource consumption in the Consul Connect CA roots endpoint
CVE-2026-19113	5.3	21.3	HashiCorp	Consul	CWE-400	Unauthenticated denial of service via unbounded request body processing
CVE-2026-15816	7.5	21.2	Red Hat	Red Hat Enterprise Linux 10	CWE-78	Dracut: dracut: root code execution via unescaped error message written to so…
CVE-2026-19082	7.5	21.2	TONYC	Imager	CWE-125	Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap b…
CVE-2026-70561	7.1	21.2	TestLinkOpenSourceTRMS	TestLink	CWE-639	TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
CVE-2026-69127	6.9	21.1	getkirby	kirby	CWE-497	Kirby: System path exposure from error messages in the REST API
CVE-2026-66062	5.3	21.1	sveltejs	kit	CWE-1333	SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via th…
CVE-2026-71848	5.3	21.1	honojs	hono	CWE-407	Hono: Algorithmic Complexity DoS in Language Middleware
CVE-2026-54209	8.9	20.6	Tobit Laboratories AG	TeamDavid	CWE-125	TeamDavid: Buffer Overflow in 'editini' function
CVE-2026-17595	5.3	20.6	Sonatype	Nexus Repository 3	CWE-497	Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass
CVE-2026-14364	9.8	20.5	themetechmount	TrueBooker – Appointment Booking and Scheduler System	CWE-640	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Pass…
CVE-2026-66838	5.9	20.4	elixir-ecto	postgrex	CWE-89	SQL injection via the :comment option in Postgrex.stream/4
CVE-2026-56818	6.5	20.3	netty	netty	CWE-401	Netty: RedisArrayAggregator max-elements failure leaves retained partial aggr…
CVE-2026-54216	5.3	20.3	Tobit Laboratories AG	TeamDavid	CWE-79	TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter
CVE-2026-54338	5.3	20.1	jupyterhub	jupyterhub	CWE-400	JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging …
CVE-2026-19210	2.1	20.1	SourceCodester	Photo Share Website	CWE-284	SourceCodester Photo Share Website ajax.php save_upload unrestricted upload
CVE-2026-54205	6.3	20.0	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in lin…
CVE-2026-54206	6.3	20.0	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sen…
CVE-2026-54207	6.3	20.0	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in mov…
CVE-2026-52878	7.5	19.8	klever-io	klever-go	CWE-476	Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can …
CVE-2026-47249	7.5	19.7	klever-io	klever-go	CWE-400	Klever-Go KVM: Hash-array amplification in P2P resolver request handling
CVE-2026-62295	7.5	19.7	hapifhir	org.hl7.fhir.core	CWE-20	HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denia…
CVE-2026-62296	7.5	19.7	hapifhir	org.hl7.fhir.core	CWE-20	HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow de…
CVE-2026-66059	5.3	19.3	frappe	frappe	CWE-863	Frappe: Field-level permission bypass via Document Follow
CVE-2026-48097	7.8	19.2	0x5t4l1n	NexTOR_IP_CHANGER	CWE-78	NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution
CVE-2026-19208	2.9	19.1	n/a	WonderTrader	CWE-840	WonderTrader TraderDD.cpp queryTrades behavioral workflow
CVE-2026-19244	2.0	19.0	HKUDS	nanobot	CWE-266	HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
CVE-2026-54218	8.8	18.8	Tobit Laboratories AG	TeamDavid	CWE-321	TeamDavid: Weak Cryptography and Insecure Password Storage
CVE-2026-54215	5.3	18.8	Tobit Laboratories AG	TeamDavid	CWE-601	TeamDavid: Open Redirect via the 'replyUrl' parameter
CVE-2026-19212	2.1	18.8	n/a	WonderTrader	CWE-453	WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized va…
CVE-2026-14205	9.8	18.5	Unknown	WP Events Manager	CWE-287	WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter
CVE-2026-49343	5.9	17.8	klever-io	klever-go	CWE-400	Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch boo…
CVE-2026-19196	5.5	17.7	SourceCodester	Photo Share Website	CWE-74	SourceCodester Photo Share Website ajax.php login sql injection
CVE-2026-19211	5.5	17.7	SourceCodester	Photo Share Website	CWE-74	SourceCodester Photo Share Website ajax.php signup sql injection
CVE-2026-19231	5.5	17.7	SourceCodester	Simple Doctors Appointment System	CWE-74	SourceCodester Simple Doctors Appointment System ajax.php delete_appointment …
CVE-2026-54199	5.3	17.6	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Header Injection through request body in link storing functionality
CVE-2026-64637	9.9	17.6	WebPros	Plesk	CWE-269	Improper privilege management in the XML-RPC API of Plesk before 18.0.80, all…
CVE-2026-19014	4.3	17.5	HashiCorp	Consul	CWE-770	Uncontrolled resource consumption in the Consul Connect authorization endpoint
CVE-2026-48169	8.8	17.3	MervinPraison	praisonai-platform	CWE-639	PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
CVE-2026-14943	7.5	17.3	Unknown	Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content	CWE-200	Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure v…
CVE-2026-66000	2.3	17.2	frappe	frappe	CWE-863	Frappe: Unrestricted access to Document Follow APIs
CVE-2026-54217	5.3	17.1	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Stored XSS in web application
CVE-2026-17598	5.3	16.5	Sonatype	Nexus Repository 3	CWE-915	Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration
CVE-2026-64636	7.7	16.4	WebPros	Plesk	CWE-89	An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and …
CVE-2026-47364	6.5	16.3	Datadog	Android App	CWE-200	In versions of the Datadog Android application prior to v545-5.9.2, the app t…
CVE-2026-48170	9.1	16.1	thomaspoignant	scim-patch	CWE-1321	scimPatch vulnerable to prototype pollution via unfiltered keys in patch
CVE-2026-19012	5.3	15.5	HashiCorp	Consul	CWE-476	Authenticated denial of service in Consul Enterprise-to-Community Edition dow…
CVE-2026-47127	6.5	15.3	ghostfolio	ghostfolio	CWE-862	Ghostfolio has a Stripe subscription bypass
CVE-2026-54200	8.4	15.2	Tobit Laboratories AG	TeamDavid	CWE-73	TeamDavid: Local File Inclusion via the form field 'scjob'
CVE-2026-16038	9.1	14.8	Unknown	MStore API	CWE-862	MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gat…
CVE-2026-47662	8.7	14.8	aehrc	pathling	CWE-20	Pathling $bulk-submit allows bearer-token exfiltration and persistent warehou…
CVE-2026-47663	8.7	14.8	aehrc	pathling	CWE-285	Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfil…
CVE-2026-17596	6.3	14.7	Sonatype	Nexus Repository 3	CWE-79	Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name
CVE-2026-71849	3.7	14.3	honojs	hono	CWE-200	Hono: Proxy Helper does not remove response headers listed in the `Connection…
CVE-2026-14644	8.6	14.1	Sonatype	Nexus Repository 3	CWE-843	Nexus Repository 3 - Privilege Escalation
CVE-2026-12070	8.4	14.1	Tobit Laboratories AG	TeamDavid	CWE-73	TeamDavid: Arbitrary File Deletion via form field 'scjob'
CVE-2026-16265	6.5	13.3	Unknown	WP Maps	CWE-400	WP Maps < 4.9.7 - Subscriber+ Denial of Service
CVE-2026-11907	6.5	13.2	xwp	Stream – Activity Log & Audit Trail	CWE-862	Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensit…
CVE-2026-16030	8.1	13.1	Unknown	MStore API	CWE-287	MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Aut…
CVE-2026-66058	5.3	13.0	frappe	frappe	CWE-639	Frappe: Unrestricted access to a Document Follow API
CVE-2026-19246	2.1	12.5	HKUDS	nanobot	CWE-918	HKUDS nanobot Provider-returned Image URL image_generation.py _download_image…
CVE-2026-48026	8.7	12.1	treeverse	lakeFS	CWE-79	lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML
CVE-2026-59717	4.3	12.0	home-assistant	core	CWE-601	Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing
CVE-2026-19213	2.1	11.8	n/a	WonderTrader	CWE-840	WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow
CVE-2026-17601	8.9	11.7	Sonatype	Nexus Repository 3	CWE-862	Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
CVE-2026-17600	8.7	11.7	Sonatype	Nexus Repository 3	CWE-613	Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deac…
CVE-2026-15361	8.1	11.7	Unknown	Content Views	CWE-89	Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
CVE-2026-19016	4.2	11.4	HashiCorp	Consul	CWE-22	Authorization bypass for session deletion in the transaction API
CVE-2026-19207	1.9	11.1	PHPGurukul	Company Visitor Management System	CWE-79	PHPGurukul Company Visitor Management System manage-newvisitors.php cross sit…
CVE-2026-16041	7.5	10.8	Unknown	MStore API	CWE-862	MStore API < 4.21.0 - Unauthenticated Product Review Creation
CVE-2026-15570	7.1	10.7	Vestel	Telefunken TE24553B45V2DZ Smart TV	CWE-918	Improper URL Scheme and Destination Validation in SmartCenter browserseturl C…
CVE-2026-15359	6.5	10.1	Unknown	Templately	CWE-862	Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connectio…
CVE-2026-16039	6.5	9.9	Unknown	MStore API	CWE-639	MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR
CVE-2025-71409	7.1	9.8	ATN-B1	CPDLC	CWE-306	No Authentication for Very High Frequency Data Link messages used in CPDLC
CVE-2026-19209	2.0	9.6	SourceCodester	Photo Share Website	CWE-79	SourceCodester Photo Share Website index.php home cross site scripting
CVE-2026-19230	2.0	9.6	SourceCodester	Photo Share Website	CWE-79	SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cro…
CVE-2025-71410	6.0	9.6	ATN-B1	CPDLC	CWE-770	Malicious Link Control Frames Can Cause Loss of CPDLC Functions
CVE-2025-71411	6.0	9.6	ATN-B1	CPDLC	CWE-770	In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultane…
CVE-2025-71413	6.0	9.6	ATN-B1	CPDLC	CWE-754	In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets
CVE-2026-12261	5.3	8.8	nltk	nltk/nltk	CWE-284	Improper Access Control in nltk/nltk
CVE-2026-44964	6.5	8.7	Datadog	Android App	CWE-441	In versions of the Datadog Android application prior to v545-5.9.2, OnCallNot…
CVE-2025-71412	7.1	8.0	ATN-B1	CPDLC	CWE-754	In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate
CVE-2026-16027	5.4	7.9	Revenue Administration	E-Signature	CWE-918	Unauthenticated WebSocket-to-XAdES SSRF in Revenue Administration's E-Signature
CVE-2026-47243	9.2	7.7	kata-containers	kata-containers	CWE-22	Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
CVE-2026-49008	6.5	6.9	ZTE	F689	CWE-321	Integrity‑check credential leakage vulnerability in an application function o…
CVE-2026-47361	6.4	6.9	Datadog	Android App	CWE-926	In versions of the Datadog Android application prior to v541-5.9.2, BubbleCha…
CVE-2026-47362	4.6	6.6	Datadog	Android App	CWE-922	In versions of the Datadog Android application prior to v554-5.9.4, two Room-…
CVE-2026-19193	7.1	6.2	Jiangmin	Antivirus	CWE-266	Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access co…
CVE-2026-19195	7.1	6.2	V-Secure	Jingyun Antivirus	CWE-266	V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control
CVE-2026-48007	8.6	5.9	element-hq	element-call	CWE-200	Element Call reports full URLs of visited pages to analytics server
CVE-2026-71850	4.8	5.8	honojs	hono	CWE-488	Hono: `memo()` retains SSR output across requests, leading to cross-user data…
CVE-2026-9031	6.8	5.7	TP-Link Systems Inc.	Archer A6 v4	CWE-20	Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6
CVE-2026-61477	2.3	5.7	Red Hat	Red Hat Enterprise Linux 10	CWE-93	Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows …
CVE-2026-48093	6.5	5.6	dartiss	code-embed	CWE-79	Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed
CVE-2026-15032	6.1	5.6	Unknown	Comments	CWE-79	wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion
CVE-2026-15214	4.3	5.5	Unknown	Subscriptions for WooCommerce	CWE-639	Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Discl…
CVE-2026-37171	5.9	5.3	n/a	n/a	CWE-863	A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v1…
CVE-2026-15970	4.2	5.3	HashiCorp	Consul	CWE-647	L7 intention authorization bypass via custom public listener
CVE-2026-16262	7.5	5.2	Unknown	Estatik Real Estate Plugin	CWE-352	Estatik < 4.3.3 - Login CSRF
CVE-2026-71381	4.0	5.2	Adobe	Adobe Genuine Software Integrity Service	CWE-863	Adobe Genuine Software Integrity Service \| CWE-863 Incorrect Authorization
CVE-2026-11425	2.0	4.9	Domoticz	Domoticz	CWE-79	Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert …
CVE-2026-12801	6.4	4.5	themefic	Ultra Addons for Contact Form 7	CWE-79	Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stor…
CVE-2026-49006	5.3	4.2	ZTE	F689	CWE-321	TLS credential leakage vulnerability in ZTE F689 product
CVE-2026-46358	5.4	4.1	openbao	openbao	CWE-532	OpenBao's Inline Auth Incorrectly Redacted Headers
CVE-2026-47664	8.6	4.0	aehrc	pathling	CWE-20	Pathling: $import-pnp operation enables authenticated SSRF, credential leakag…
CVE-2026-9169	8.8	3.9	LUCID Vision Labs	Arena SDK	CWE-427	LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows
CVE-2026-14331	6.1	3.9	Unknown	Subscribe2	CWE-79	Subscribe2 < 10.46 - Reflected XSS via email Parameter
CVE-2026-47363	6.3	3.7	Datadog	Android App	CWE-926	In versions of the Datadog Android application prior to v541-5.9.2, the expor…
CVE-2026-19190	7.1	3.4	StableBit	Scanner	CWE-266	StableBit Scanner ScannerService Scanner.Service.exe permission
CVE-2026-48120	8.6	3.3	mawww	kakoune	CWE-74	Kakoune has a Critical RCE via Autorestore Backup Filename Injection
CVE-2026-48098	7.3	2.9	0x5t4l1n	NexTOR_IP_CHANGER	CWE-78	NexTOR IP Changer Unsafely Uses sudo and shell=True
CVE-2026-9030	6.8	2.9	TP-Link Systems Inc.	Archer A6 v4	CWE-362	Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6
CVE-2026-15245	5.4	2.8	Unknown	BNE Testimonials	CWE-79	BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode
CVE-2026-15386	5.4	2.8	Unknown	Meow Gallery	CWE-79	Meow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-Text
CVE-2026-71852	4.8	2.6	py-pdf	pypdf	CWE-834	pypdf: Possible long runtimes/large memory usage for large CID font width ranges
CVE-2026-71870	4.8	2.6	py-pdf	pypdf	CWE-400	pypdf: Possible large memory usage for large /ToUnicode streams
CVE-2026-48122	5.4	2.5	Shopify	ruby-lsp	CWE-78	Workspace settings can override executable and Gemfile paths used by the Ruby…
CVE-2026-18497	7.1	2.4	Sean Barrett (nothings)	nothings stb	CWE-122	The nothings stb TrueType library contains a heap buffer overflow vulnerability
CVE-2026-19206	1.9	2.4	MZ Automation	libiec61850	CWE-119	MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadl…
CVE-2026-64676	5.7	2.2	kata-containers	kata-containers	CWE-862	Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host t…
CVE-2026-19245	1.9	2.1	HKUDS	nanobot	CWE-200	HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command info…
CVE-2026-45198	7.8	2.0	Imagination Technologies	Graphics DDK	CWE-822	GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
CVE-2026-58262	7.1	1.9	klever-io	klever-go	CWE-345	Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum
CVE-2026-17435	2.5	1.9	RRWO	File::Rotate::Simple	CWE-59	File::Rotate::Simple versions before 0.4.0 for Perl create the target of dang…
CVE-2026-62293	5.0	1.8	hapifhir	org.hl7.fhir.core	CWE-20	HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles
CVE-2026-49005	2.4	1.7	ZTE	F689	CWE-916	Root password hash exposure vulnerability in ZTE F689 product
CVE-2026-15148	5.3	1.7	Unknown	WP Events Manager	CWE-345	WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status…
CVE-2026-66060	7.1	1.6	home-assistant	core	CWE-862	Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation executio…
CVE-2026-66061	7.1	1.6	home-assistant	core	CWE-862	Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmat…
CVE-2026-44965	5.5	1.6	Datadog	Android App	CWE-926	In versions of the Datadog Android application prior to v545-5.9.2, six App W…
CVE-2026-19189	7.1	1.4	Power Sofware	PowerISO	CWE-266	Power Sofware PowerISO Kernel Driver scdemu.sys privileges management
CVE-2026-15211	5.9	1.5	Unknown	Subscriptions for WooCommerce	CWE-345	Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied …
CVE-2026-15239	5.3	1.5	Unknown	Simple CAPTCHA with Cloudflare Turnstile	CWE-345	Simple CAPTCHA with Cloudflare Turnstile < 1.42.0 - Unauthenticated Turnstile…
CVE-2026-66151	5.5	1.4	SonicWall	Global VPN Client	CWE-125	SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to …
CVE-2026-19191	7.1	1.3	StableBit	DrivePool	CWE-266	StableBit DrivePool DrivePoolService DrivePool.Service.exe permission
CVE-2026-19192	7.1	1.3	DeepCool	DisplayService	CWE-266	DeepCool DisplayService DeepCoolDisplayService.exe access control
CVE-2026-49746	7.1	1.2	Imagination Technologies	Graphics DDK	CWE-823	GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
CVE-2026-18938	6.2	1.2	Red Hat	Red Hat Enterprise Linux 10	CWE-122	P11-kit: integer overflow in rpc attribute-array length calculation can under…
CVE-2026-45204	5.5	1.3	Imagination Technologies	Graphics DDK	CWE-476	GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in …
CVE-2026-11743	6.6	1.2	zephyrproject	zephyr	CWE-125	Missing negative-offset/overflow check in SF32LB MPI QSPI NOR flash driver al…
CVE-2026-11742	3.6	0.6	zephyrproject	zephyr	CWE-416	Use-after-free race in kernel `k_queue_peek_head/tail` due to missing spinlock
CVE-2026-19079	4.4	0.3	Red Hat	Red Hat Hardened Images	CWE-367	Policycoreutils: policycoreutils: toctou race condition in fixfiles allows ar…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-08-07 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.