boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, August 11, 2026 · all times UTC← 2026-08-10 · archive · 2026-08-12 →

933 CVEs published, led by Microsoft (402).

933 CVEs published August 11, 2026: 60 critical, 525 high, 325 medium, 23 low; 3 in the KEV catalog at press time; 2 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; 375 more in the results table on this page; the remaining 533 on continuation pages.

Standings

League
MTDYTD2025 same span2025 full
CVEs published36512579814032564
KEV catalog size1671

1446 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
linux3902707233138963512730.17.8.0014+352 ▲
microsoft4351866128126944614380331.87.8.0039+382 ▲
google491809222745783567460.37.5.0023-30 ▼
red hat1044602319521626400.06.7.0025+68 ▲
apple1267577312739472.66.8.0024+1 ▲
canonical02738115000.05.6.0011-1 ▼
suse52651461000.08.1.0030-1 ▼
freebsd01601240000.07.8.00150
Network & Infrastructure
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
cisco31711135170961419.77.5.0034+23 ▲
ubiquiti036142110438.38.8.0036-25 ▼
netgear93200275800.04.3.0023+9 ▲
palo alto networks025021471428.04.7.0021-14 ▼
fortinet0233611028626.16.7.00390
f50175830715.98.6.00570
vmware01648222200.08.2.0039-1 ▼
ivanti314262033535.77.9.0754+3 ▲
Open Source Ecosystems
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
apache7841285181133124020.57.5.0048+17 ▲
mozilla112851423501300.08.1.0029-2 ▼
gitlab05307377423.84.9.0025-7 ▼
drupal05165355512.05.9.0018-46 ▼
github2141490000.06.2.0032+1 ▲
docker070520100.08.2.00160
wordpress1412105250.08.8.3700+1 ▲
kubernetes010001000.02.4.00240
Enterprise Applications
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
oracle01379342653322614030.28.1.00320
adobe603143914412357541.37.8.0021+57 ▲
ibm3226172104841710.47.5.0026+30 ▲
progress1153143270911.98.1.0032+1 ▲
solarwinds0231623011417.49.1.00440
veeam10165920400.08.6.0028+10 ▲
zohocorp283320000.08.4.0131+2 ▲
atlassian0303001300.08.0.00260
Industrial & Embedded
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
d-link1536155962612.87.4.0105+14 ▲
siemens173322380100.07.3.0012+13 ▲
synology12426133000.05.6.0025+1 ▲
rockwell automation02441820000.08.7.00250
schneider electric091620100.08.6.00240
abb070430000.07.2.00180
hikvision0704202114.37.2.00250
moxa050320000.07.0.00290
Other
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
sourcecodester12132007161000.05.5.0026-16 ▼
openclaw01110583914000.07.0.0022-1 ▼
dell8107850453210.97.2.0020-25 ▼
nvidia16981366190000.07.7.0025-1 ▼
capgo083242381000.07.1.0028-15 ▼
itsourcecode879001960000.02.1.0020-2 ▼
spring079234412000.06.5.00220
imagemagick078156012300.05.3.0017-18 ▼

Leaders (trailing 30 days unless noted)

Highest EPSS
CVEEPSS%ileCVSS
CVE-2026-8037.993199.99.8
CVE-2026-63030.956099.99.8
CVE-2026-39808.912199.8—
CVE-2026-34486.829399.67.5
CVE-2026-50522.769899.59.8
CVE-2026-15410.763599.57.2
CVE-2026-15409.742299.410.0
CVE-2026-25089.736099.49.8
CVE-2026-16232.733099.49.3
CVE-2026-60137.731099.45.9
Highest CVSS
CVECVSSEPSSNote
CVE-2026-1540910.0.7422KEV
CVE-2026-7289810.0.1040KEV
CVE-2026-898510.0.0660
CVE-2026-651610.0.0473
CVE-2026-4766810.0.0434
CVE-2026-4633910.0.0239
CVE-2026-4836210.0.0207
CVE-2026-4435910.0.0100
CVE-2026-4561810.0.0095
CVE-2025-7138910.0.0093
Most disclosures (vendor)
VendorCVEs
linux1187
oracle1109
microsoft1046
google466
red hat232
apache198
apple168
adobe165
ibm135
mozilla69
Most KEV additions (YTD)
VendorKEV
microsoft33
cisco14
apple7
fortinet6
google6
ivanti5
adobe4
solarwinds4
synacor4
langflow3
Most-affected ecosystems
EcosystemAdvisories
Maven67
PyPI5
Go3
Packagist3
npm3
crates.io2
NuGet1
Fastest to KEV
CVEVendorDays
CVE-2008-4128Cisco0
CVE-2021-27137DD-WRT0
CVE-2023-4346KNX Association0
CVE-2025-68686Fortinet0
CVE-2026-0770Langflow0
CVE-2026-15409SonicWall0
CVE-2026-15410SonicWall0
CVE-2026-16232checkpoint0
CVE-2026-16812Arista Networks0
CVE-2026-18556N-able0
Longest unpatched (KEV due date passed)
CVEVendorDueDays over
CVE-2021-27104Accellion2021-11-171728
CVE-2021-27102Accellion2021-11-171728
CVE-2021-27101Accellion2021-11-171728
CVE-2021-27103Accellion2021-11-171728
CVE-2021-21017Adobe2021-11-171728
CVE-2021-28550Adobe2021-11-171728
CVE-2021-42013Apache2021-11-171728
CVE-2021-41773Apache2021-11-171728
CVE-2021-30858Apple2021-11-171728
CVE-2021-30860Apple2021-11-171728

Transactions

EXPLOIT PUBLISHED — Unknown Salon Booking System: 3 CVEs (CVE-2026-17020, CVE-2026-17021, CVE-2026-17023). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2018-0296 (Cisco Adaptive Security Appliance (ASA)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-2725 (Oracle Corporation Tape Library ACSLS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-3452 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-44228 (Apache Log4j2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-44487 (IETF HTTP/2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-20353 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-20359 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-23692 (Rejetto HTTP File Server). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-42999 (SAP_SE SAP NetWeaver (Visual Composer development server)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12971 (Unknown LearnPress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13170 (Unknown Eventin). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13600 (Unknown AutoNetTV Relay). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13716 (Arcadia Technology, LLC Crafty Controller). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14211 (Unknown Booking for Appointments and Events Calendar). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14237 (Unknown vitepos). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14238 (Unknown vitepos). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14293 (Unknown Autopay). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14315 (Unknown Pixel Tag Manager for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14860 (Unknown Podcast Player). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14941 (Unknown Customer Reviews for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15047 (Unknown s2Member). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15229 (Unknown Pinpoint Booking System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15237 (Unknown MotoPress Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15238 (Unknown MotoPress Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16257 (Unknown Arvow AI SEO Writer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16298 (Unknown FoodBoxBooker). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16299 (Unknown Single Sign On For TNG). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16949 (Unknown Term Pages). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16985 (Unknown Squeeze). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17012 (Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17016 (Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17018 (Unknown CubeWP Framework). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17540 (Unknown File Manager). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18030 (Unknown BricksForge). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18200 (Unknown FoodBoxBooker). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18468 (Unknown Login & Register Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18469 (Unknown Login & Register Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18666 (Unknown Library Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18786 (Unknown CheckView). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18934 (Unknown RSS Aggregator by Feedzy). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18960 (Unknown Block User Account). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19049 (Unknown ProSolution WP Client). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19074 (Unknown Advanced Classifieds & Directory Pro). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19075 (Unknown All-in-One Video Gallery). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19077 (Unknown Duplicate Post). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19089 (Unknown Product Input Fields for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19379 (EFM ipTIME AX8004M). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19384 (SourceCodester Simple Doctors Appointment System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-25646 (pnggroup libpng). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48864 (Red Hat Enterprise Linux 10). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48939 (icagenda.com iCagenda extension for Joomla). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-58016 (GNOME GLib). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69112 (huggingface accelerate). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69114 (Spacebar Server). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69116 (xpf0000 FlyEnv). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69118 (cachethq cachet). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-70622 (composefs tar-rs). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71225 (Stephan Muelle libkcapi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71227 (Stephan Muelle libkcapi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71964 (usmannasir cyberpanel). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71965 (usmannasir cyberpanel). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-73030 (frostming unearth). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-73033 (sucuri-wordpress-plugin). Public exploit reference added.

DUE DATE PASSED — CVE-2025-68686 (Fortinet FortiOS). CISA remediation deadline was August 10, 2026; still in catalog.

DUE DATE PASSED — CVE-2026-8037 (Progress Software LoadMaster). CISA remediation deadline was August 10, 2026; still in catalog.

RESCORED — Fortinet FortiOS: 3 CVEs (CVE-2025-43892, CVE-2025-62675, CVE-2026-59840). CVSS rescored — before/after on each CVE page.

RESCORED — CVE-2022-21198 (Intel(R) Processors). CVSS 7.9 → 6.4 (NVD).

RESCORED — CVE-2023-20269 (Cisco Adaptive Security Appliance (ASA) Software). CVSS 5 → 9.1 (NVD).

RESCORED — CVE-2024-9341 (github.com/containers/common). CVSS 5.4 → 8.2 (NVD).

RESCORED — CVE-2025-62826 (Fortinet FortiPAM). CVSS 3.1 → 4.3 (NVD).

RESCORED — CVE-2026-13473 (IBM Storage Protect Client). CVSS 8.1 → 9.8 (NVD).

RESCORED — CVE-2026-14501 (IBM Db2 Genius Hub). CVSS 4.3 → 9.8 (NVD).

RESCORED — CVE-2026-14615 (Red Hat build of Keycloak 26.4). CVSS 4.3 → 2.7 (NVD).

RESCORED — CVE-2026-14971 (IBM PowerVM Novalink). CVSS 3.9 → 7 (NVD).

RESCORED — CVE-2026-14979 (IBM Engineering Lifecycle Management). CVSS 5.3 → 7.5 (NVD).

RESCORED — CVE-2026-15995 (IBM Cognos Analytics). CVSS 5.4 → 4.2 (NVD).

RESCORED — CVE-2026-43003 (OpenStack ironic-python-agent). CVSS 8 → 7.5 (NVD).

RESCORED — CVE-2026-58016 (GNOME GLib). CVSS 7.5 → 9.1 (NVD).

RESCORED — CVE-2026-59837 (Fortinet FortiPAM). CVSS 5.9 → 6.6 (NVD).

RESCORED — CVE-2026-59839 (Fortinet FortiProxy). CVSS 5 → 5.5 (NVD).

RESCORED — CVE-2026-9698 (HMBRAND DBI). CVSS 7.5 → 9.8 (NVD).

ENRICHED — Linux: 7 CVEs (CVE-2021-47210, CVE-2021-47253, CVE-2021-47335, CVE-2021-47410, CVE-2021-47431, CVE-2021-47610, CVE-2022-48628). Received CVSS/CPE analysis.

ENRICHED — CVE-2018-0296 (Cisco Adaptive Security Appliance (ASA)). Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2020-27339. Received CVSS 6.7 and CPE data from NVD.

ENRICHED — CVE-2020-3452 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2020-3580 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 6.1 and CPE data from NVD.

ENRICHED — CVE-2020-5953. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2021-33625. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2021-33626. Received CVSS 7.8 and CPE data from NVD.

ENRICHED — CVE-2021-33627. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41837. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41838. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41839. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41840. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41841. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-42059. Received CVSS 6.7 and CPE data from NVD.

ENRICHED — CVE-2021-42060. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-42113. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-42554. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-43323. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-43522. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2021-43615. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-44228 (Apache Log4j2). Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2021-45969. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-45970. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-45971. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2022-24030. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2022-24031. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2022-24069. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2023-44487 (IETF HTTP/2). Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2024-20353 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 8.6 and CPE data from NVD.

ENRICHED — CVE-2024-20359 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 6.0 and CPE data from NVD.

ENRICHED — CVE-2024-20481 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 5.8 and CPE data from NVD.

ENRICHED — CVE-2025-20333 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense). Received CVSS 9.9 and CPE data from NVD.

ENRICHED — CVE-2025-20362 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense). Received CVSS 8.6 and CPE data from NVD.

Yesterday's Results

How to read these box scores · glossary

933 CVEs published. 25 box scores and 375 table rows below; the remaining 533 continue on page 2 — every CVE is listed, nothing truncated.

CVE-2026-72898CRITICAL
Metabase SQL injection via password reset endpoint
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H   10.0   .1040   95.4   YES
AFFECTED
  Product   Versions  Fixed
  Metabase  x.58.0 –  x.58.24
TIMELINE
  Aug 9   Patch available
  Aug 10  Reserved by CNA
  Aug 11  Added to CISA KEV, due Aug 14
  Aug 11  Published (CNA: cisa-cg)
CWE-89 · CNA: cisa-cg · CVSS v4.0 · 5 references · NVD status: Analyzed · KEV due August 14, 2026
CVE-2026-20349HIGH
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  N  N  H    8.6   .0087   56.1   YES
AFFECTED
  Product                                                           Versions  Fixed
  Cisco Secure Firewall Adaptive Security Appliance (ASA) Software  9.16.1 –  —
  Cisco Secure Firewall Threat Defense (FTD) Software               7.0.0 –   —
TIMELINE
  Oct 8   Reserved by CNA
  Aug 11  Added to CISA KEV, due Aug 14
  Aug 11  Published (CNA: cisco)
CWE-244 · CNA: cisco · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due August 14, 2026
CVE-2026-68820HIGH
Microsoft Windows 10 Version 1607 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   H   L   N  U  H  H  H    7.0   .0033   26.2   YES
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 31  Reserved by CNA
  Aug 11  Added to CISA KEV, due Aug 25
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due August 25, 2026
CVE-2026-61358HIGH
Microsoft Windows 10 Version 1809 — Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0368   88.8     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 8   Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-59 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-66804HIGH
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0342   87.9     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
TIMELINE
  Jul 27  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-284 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62696HIGH
Microsoft Windows 10 Version 1607 — Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0318   87.0     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2016      10.0.14393.0 –  —
  + 6 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-191 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-65775HIGH
Microsoft Windows 10 Version 1607 — Windows Win32k Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0245   83.0     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 22  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62832HIGH
Microsoft Windows 10 Version 21H2 — Windows User Profile Service Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0237   82.4     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2022                             10.0.20348.0 –  —
  Windows Server 2025                             10.0.26100.0 –  —
  Windows Server 2025 (Server Core installation)  10.0.26100.0 –  —
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-59 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-72603CRITICAL
wg-easy wg-easy - OS Command Injection
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  H  H    9.9   .0213   80.5     —
AFFECTED
  Product  Versions     Fixed
  wg-easy  unspecified  —
TIMELINE
  Aug 10  Reserved by CNA
  Aug 11  Published (CNA: TuranSec)
CWE-78 · CNA: TuranSec · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-48362CRITICAL
Adobe ColdFusion 2025 — ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .0207   79.9     —
AFFECTED
  Product          Versions     Fixed
  ColdFusion 2025  unspecified  2025.0.12
  ColdFusion 2023  unspecified  2023.0.23
TIMELINE
  May 21  Reserved by CNA
  Aug 11  Published (CNA: adobe)
CWE-78 · CNA: adobe · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-61930HIGH
Microsoft Windows 10 Version 1607 — Windows Kernel Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0195   78.6     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2016      10.0.14393.0 –  —
  + 6 more
TIMELINE
  Jul 13  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62741HIGH
Microsoft Windows 10 Version 1607 — Windows HTTP.sys Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0195   78.6     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-191, CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62713HIGH
Microsoft Windows 10 Version 1809 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0195   78.6     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-64901HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0191   78.1     —
AFFECTED
  Product                                           Versions  Fixed
  Microsoft SharePoint Enterprise Server 2016       16.0.0 –  —
  Microsoft SharePoint Server 2019                  16.0.0 –  —
  Microsoft SharePoint Server Subscription Edition  16.0.0 –  —
TIMELINE
  Jul 20  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-502 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-66805HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0191   78.1     —
AFFECTED
  Product                                           Versions  Fixed
  Microsoft SharePoint Enterprise Server 2016       16.0.0 –  —
  Microsoft SharePoint Server 2019                  16.0.0 –  —
  Microsoft SharePoint Server Subscription Edition  16.0.0 –  —
TIMELINE
  Jul 27  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-502 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-66808HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0191   78.1     —
AFFECTED
  Product                                           Versions  Fixed
  Microsoft SharePoint Enterprise Server 2016       16.0.0 –  —
  Microsoft SharePoint Server 2019                  16.0.0 –  —
  Microsoft SharePoint Server Subscription Edition  16.0.0 –  —
TIMELINE
  Jul 27  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-502 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62783HIGH
Microsoft Windows 10 Version 1809 — Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0183   77.1     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62888HIGH
Microsoft Windows 10 Version 21H2 — Windows DWM Core Library Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0183   77.1     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2022                             10.0.20348.0 –  —
  Windows Server 2025                             10.0.26100.0 –  —
  Windows Server 2025 (Server Core installation)  10.0.26100.0 –  —
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62893CRITICAL
Microsoft Windows 10 Version 1607 — Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0178   76.5     —
AFFECTED
  Product                                            Versions        Fixed
  Windows 10 Version 1607                            10.0.14393.0 –  —
  Windows 10 Version 1809                            10.0.17763.0 –  —
  Windows Server 2012                                6.2.9200.0 –    —
  Windows Server 2012 (Server Core installation)     6.2.9200.0 –    —
  Windows Server 2012 R2                             6.3.9600.0 –    —
  Windows Server 2012 R2 (Server Core installation)  6.3.9600.0 –    —
  Windows Server 2016                                10.0.14393.0 –  —
  Windows Server 2016 (Server Core installation)     10.0.14393.0 –  —
  Windows Server 2019                                10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)     10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-65665HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0171   75.4     —
AFFECTED
  Product                                           Versions  Fixed
  Microsoft SharePoint Server 2019                  16.0.0 –  —
  Microsoft SharePoint Server Subscription Edition  16.0.0 –  —
TIMELINE
  Jul 22  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-502 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-59124CRITICAL
Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0168   75.1     —
AFFECTED
  Product                  Versions  Fixed
  Microsoft HPC Pack 2019  1.0.0 –   —
TIMELINE
  Jul 2   Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-502 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-14863HIGH
FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0167   74.9     —
AFFECTED
  Product  Versions     Fixed
  FileRun  unspecified  2026.2.1
TIMELINE
  Jul 6   Reserved by CNA
  Aug 11  Published (CNA: VulnCheck)
CWE-78 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Received
CVE-2026-46670CRITICAL
YesWiki: Unauthenticated SQL Injection
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0165   74.6     —
AFFECTED
  Product  Versions   Fixed
  yeswiki  < 4.6.4 –  —
TIMELINE
  May 15  Reserved by CNA
  Aug 11  Published (CNA: GitHub_M)
CWE-89 · CNA: GitHub_M · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-12571CRITICAL
zohocorp manageengine_ddi_central — Authentication Bypass Leading to Account Takeover
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0163   74.3     —
AFFECTED
  Product                   Versions     Fixed
  manageengine_ddi_central  unspecified  —
TIMELINE
  Jun 18  Reserved by CNA
  Aug 11  Published (CNA: Zohocorp)
CWE-287, CWE-640 · CNA: Zohocorp · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-61348HIGH
Microsoft Windows 10 Version 1607 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   H   L   N  U  H  H  H    7.0   .0159   73.7     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 8   Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
Remainder (ranked, continued)
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-619297.073.0MicrosoftWindows 11 version 23H2CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-657887.073.0MicrosoftWindows 11 version 23H2CWE-416Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-627667.072.6MicrosoftWindows 11 Version 24H2CWE-415Windows Kerberos Elevation of Privilege Vulnerability
CVE-2026-635148.872.5MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-656588.870.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-656638.870.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-635166.569.2MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-730349.368.9eosphoros-aiDB-GPTCWE-22DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
CVE-2026-629126.568.4MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-502Microsoft Exchange Server Denial of Service Vulnerability
CVE-2026-591327.568.4MicrosoftWindows 10 Version 1607CWE-476Windows TCP/IP Denial of Service Vulnerability
CVE-2026-635208.168.2MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-20Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-713629.168.2AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-703218.867.1MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-502Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-661486.364.9SonicWallGMSCWE-94An authenticated command injection vulnerability was identified in GMS Comman…
CVE-2026-541137.563.7MicrosoftWindows 10 Version 1607CWE-770Remote Procedure Call Denial of Service Vulnerability
CVE-2026-628987.563.4Microsoft.NET 10.0CWE-416Microsoft QUIC Information Disclosure Vulnerability
CVE-2026-629017.561.8Microsoft.NET 10.0CWE-606.NET Denial of Service Vulnerability
CVE-2026-117394.961.7NETGEARMR60CWE-78Command injection vulnerability in some NETGEAR Nighthawk devices
CVE-2026-661479.461.6SonicWallGMSCWE-94An unauthenticated command injection vulnerability was identified in the GMS …
CVE-2026-591386.561.4MicrosoftWindows 10 Version 1607CWE-476Microsoft Remote Registry Service Denial of Service Vulnerability
CVE-2026-613456.561.4MicrosoftWindows 10 Version 1607CWE-476Microsoft Remote Registry Service Denial of Service Vulnerability
CVE-2026-160538.559.8ZohocorpManageEngine M365 Manager PlusCWE-23Path Traversal
CVE-2026-649218.859.3MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-306Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-4561810.058.6harttleliquidjsCWE-94LiquidJS is Vulnerable to Remote Code Execution
CVE-2026-628188.858.6MicrosoftWindows 10 Version 1607CWE-416Windows Active Directory Certificate Services (AD CS) Remote Code Execution V…
CVE-2026-627028.658.3MicrosoftWindows 10 Version 21H2CWE-476Windows Graphics Kernel Denial of Service Vulnerability
CVE-2026-472997.258.2MicrosoftAzure Monitor Agent Linux ExtensionCWE-77Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2026-591338.857.5MicrosoftWindows App Client for Windows DesktopCWE-250Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulner…
CVE-2026-628159.857.4MicrosoftWindows 11 version 23H2CWE-416Microsoft QUIC Remote Code Execution Vulnerability
CVE-2026-627848.857.4MicrosoftWindows 10 Version 1607CWE-122Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vuln…
CVE-2026-628008.857.4MicrosoftWindows 10 Version 1607CWE-122Windows SMBv3 Server Remote Code Execution Vulnerability
CVE-2026-658158.857.2MicrosoftMicrosoft Dynamics 365 (on-premises) version 9.1CWE-502Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-628789.856.5MicrosoftWindows 10 Version 1607CWE-121Windows DNS Server Remote Code Execution Vulnerability
CVE-2025-311149.356.2lllyasvielFooocusCWE-95Fooocus webui vulnerable to Remote Code Execution
CVE-2026-181298.156.0IvantiEndpoint ManagerCWE-295Cleartext transmission of sensitive information in the Core of Ivanti Endpoin…
CVE-2026-619187.556.0MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-627827.555.9MicrosoftWindows 10 Version 1607CWE-125Windows SMB Client Information Disclosure Vulnerability
CVE-2026-472856.555.9MicrosoftVisual Studio CodeCWE-77Visual Studio Code Information Disclosure Vulnerability
CVE-2026-628376.555.7MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-23Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2026-59179.455.7libgit2libgit2CWE-78libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libssh2 Backend
CVE-2026-656817.555.4MicrosoftWindows 10 Version 1607CWE-476Windows iSCSI Target Service Denial of Service Vulnerability
CVE-2026-703276.555.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-703286.555.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-586396.554.9MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-918Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-190918.154.7paoltaiaGeoDirectory – WP Business Directory Plugin and Classified Listings DirectoryCWE-22GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion…
CVE-2026-619247.554.7MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-619216.554.7MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-118144.954.6NETGEARBE9300CWE-295Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
CVE-2026-627858.854.4MicrosoftWindows 10 Version 1607CWE-122Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vu…
CVE-2026-732187.754.3cursorcursorCWE-269Cursor: Sandbox escape via launching privileged containers
CVE-2026-491798.854.2MicrosoftWindows 10 Version 1607CWE-77Windows Active Directory Domain Services Remote Code Execution Vulnerability
CVE-2026-483857.753.7AdobeColdFusion 2025CWE-78ColdFusion | Improper Neutralization of Special Elements used in an OS Comman…
CVE-2026-571049.653.5MicrosoftAzure Storage ExplorerCWE-79Azure Storage Explorer Elevation of Privilege Vulnerability
CVE-2026-586127.553.3MicrosoftPowerShell 7.4CWE-918PowerShell Information Disclosure Vulnerability
CVE-2026-181257.552.9IvantiEndpoint ManagerCWE-125An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version …
CVE-2026-505169.452.9MicrosoftAzure Kubernetes ServiceCWE-306Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVE-2026-403756.552.7MicrosoftMicrosoft Dynamics 365 Business Central 2024 Release Wave 2CWE-862Microsoft Dynamics Business Central Information Disclosure Vulnerability
CVE-2026-629026.552.5Microsoft.NET 8.0CWE-829.NET Information Disclosure Vulnerability
CVE-2026-703378.852.4MicrosoftPowerShell 7.4CWE-23Microsoft PowerShell Remote Code Execution Vulnerability
CVE-2026-656606.551.8MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-94Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-703069.351.6MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-628278.851.4MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-287Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-692239.151.4Apache Software FoundationApache AlluraCWE-918Apache Allura: Server-side request forgery
CVE-2026-5823110.051.3SAP_SESAP Commerce Cloud (Data Hub Adapter)CWE-94Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
CVE-2026-629118.050.9MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-294Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-627928.150.7MicrosoftWindows 10 Version 1607CWE-121Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-628995.950.6Microsoft.NET 10.0CWE-444.NET Security Feature Bypass Vulnerability
CVE-2026-727138.750.4OpenBMBXAgentCWE-22XAgent Path Traversal Arbitrary File Read via /workspace/file
CVE-2026-703248.850.2MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-918Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2026-483867.550.2AdobeColdFusion 2025CWE-327ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
CVE-2026-591138.850.1MicrosoftVisual Studio CodeCWE-862Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-725388.850.1PrefectHQPrefectCWE-88PrefectHQ Prefect - Argument Injection
CVE-2026-483844.950.0AdobeColdFusion 2025CWE-20ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-688197.549.8MicrosoftWindows 10 Version 1607CWE-126Windows Network File System Denial of Service Vulnerability
CVE-2026-663016.549.7MicrosoftMicrosoft Dynamics 365 (on-premises) version 9.1CWE-200Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2026-629108.849.5MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-99Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-725518.849.1ApiooFusioCWE-78Apioo Fusio - Remote Code Execution
CVE-2026-725568.849.1ZoneMinderZoneMinderCWE-78ZoneMinder ZoneMinder - Remote Code Execution
CVE-2026-627908.849.0MicrosoftWindows 10 Version 1607CWE-122Windows SMBv3 Server Remote Code Execution Vulnerability
CVE-2026-657697.548.9MicrosoftMicrosoft Teams for iOSCWE-200Microsoft Teams iOS Information Disclosure Vulnerability
CVE-2026-727486.948.9WWBNAVideoCWE-306AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php
CVE-2026-5811510.048.6SiemensSIMATIC IoT2050 AdvancedCWE-306A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA0…
CVE-2026-657946.548.5MicrosoftWindows 10 Version 1607CWE-126Windows SMB Client Information Disclosure Vulnerability
CVE-2026-658138.848.4MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-918Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-7139810.047.9AdobeAdobe Campaign ClassicCWE-863Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CVE-2026-703298.847.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Outlook Remote Code Execution Vulnerability
CVE-2026-484138.747.4AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-628396.547.3MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-522Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-613638.147.3MicrosoftWindows 10 Version 1607CWE-122Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-591348.147.2MicrosoftWindows 10 Version 1607CWE-122Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-134577.547.2instawpInstaWP Connect – 1-click WP Staging & MigrationCWE-434InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure
CVE-2026-628228.847.0MicrosoftWindows 10 Version 1607CWE-190Windows GDI+ Remote Code Execution Vulnerability
CVE-2026-629138.847.0MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-122Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-484408.146.9AdobeColdFusion 2025CWE-122ColdFusion | Heap-based Buffer Overflow (CWE-122)
CVE-2026-628248.846.7MicrosoftWindows 10 Version 1607CWE-121Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-657689.846.6MicrosoftMicrosoft Teams for AndroidCWE-22Microsoft Teams Remote Code Execution Vulnerability
CVE-2026-628824.346.1MicrosoftMicrosoft 365 Apps for EnterpriseCWE-522Microsoft Outlook Spoofing Vulnerability
CVE-2026-627958.845.8MicrosoftWindows 10 Version 1607CWE-416Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vu…
CVE-2026-703368.845.8MicrosoftVisual Studio CodeCWE-94Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-703408.845.7MicrosoftAzure CycleCloud 8.9.1CWE-862Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2026-657919.845.5MicrosoftWindows 10 Version 1607CWE-122Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-212738.745.3AdobeColdFusion 2025CWE-20ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-571055.445.2MicrosoftMicrosoft SharePoint Server 2019CWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-137169.145.1Arcadia Technology, LLCCrafty ControllerCWE-35Path Traversal: '.../...//' in Crafty Controller
CVE-2026-628198.145.1MicrosoftWindows 10 Version 1607CWE-416Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulner…
CVE-2026-658066.545.0MicrosoftAzure CycleCloud 8.9.2CWE-862Azure CycleCloud Information Disclosure Vulnerability
CVE-2026-703268.845.0MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-918Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-483756.545.0AdobeColdFusion 2025CWE-863ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-627506.544.9MicrosoftWindows 10 Version 1607CWE-187Windows HTTP Protocol Stack Tampering Vulnerability
CVE-2026-2730210.044.8AdobeAdobe Campaign ClassicCWE-863Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CVE-2026-628898.144.2MicrosoftWindows 10 Version 1607CWE-415Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnera…
CVE-2026-1706110.044.0Dassault SystèmesSIMULIA Execution EngineCWE-502Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine f…
CVE-2026-628178.844.0MicrosoftWindows 10 Version 1809CWE-787Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-629005.943.5Microsoft.NET 10.0CWE-212.NET Information Disclosure Vulnerability
CVE-2026-656798.143.4MicrosoftWindows 10 Version 1607CWE-122Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-635126.543.4MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-863Microsoft SharePoint Server Tampering Vulnerability
CVE-2026-628238.843.3MicrosoftWindows 10 Version 1607CWE-122Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-727818.743.1craftcmscmsCWE-693Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape
CVE-2026-628146.543.0MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-483978.642.9AdobeLightroom ClassicCWE-502Lightroom Classic | Deserialization of Untrusted Data (CWE-502)
CVE-2026-477047.142.9baptisteArnotypebot.ioCWE-639TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` l…
CVE-2026-484147.742.8AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-628728.842.4MicrosoftMicrosoft .NET Framework 3.5CWE-863.NET Framework Elevation of Privilege Vulnerability
CVE-2026-137389.242.3CommvaultCommvault CloudCWE-863Improper Authorization Validation
CVE-2026-658118.841.6MicrosoftPower BI Report ServerCWE-20Power BI Remote Code Execution Vulnerability
CVE-2026-627877.541.4MicrosoftWindows 10 Version 1607CWE-416Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-627818.141.3MicrosoftWindows 10 Version 1607CWE-122RPC Runtime Library Remote Code Execution Vulnerability
CVE-2026-657968.141.3MicrosoftWindows 10 Version 1607CWE-122Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-484387.541.2AdobeContent Credentials Rust SDKCWE-476CAI Content Credentials | NULL Pointer Dereference (CWE-476)
CVE-2026-484397.541.2AdobeContent Credentials Rust SDKCWE-400CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-447589.141.2SAP_SESAP Manufacturing Integration and IntelligenceCWE-94Code Injection vulnerability in Manufacturing Integration and Intelligence
CVE-2026-627788.141.1MicrosoftWindows 10 Version 1607CWE-416Windows DNS Elevation of Privilege Vulnerability
CVE-2026-483765.441.0AdobeColdFusion 2025CWE-116ColdFusion | Improper Encoding or Escaping of Output (CWE-116)
CVE-2026-162309.840.5Strategy11Formidable Digital SignaturesCWE-23Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Delet…
CVE-2026-484167.540.5AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-484116.540.4AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-726027.540.1AsyncFuncAIdeepwiki-openCWE-22AsyncFuncAI deepwiki-open - Path Traversal
CVE-2026-619206.639.8MicrosoftWindows 10 Version 1607CWE-362Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-629156.539.8MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-862Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2024-140422.139.7n/aOpen5GSCWE-119Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
CVE-2024-140432.139.7n/aOpen5GSCWE-119Open5GS Diameter S6a mme-fd-path.c mme_s6a_subscription_data_from_avp heap-ba…
CVE-2026-627156.539.6MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627186.539.6MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627426.539.6MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-656756.539.4MicrosoftMicrosoft Visual Studio Code CoPilot Chat ExtensionCWE-862CoPilot Chat Security Feature Bypass Vulnerability
CVE-2026-483819.039.3AdobeAdobe Campaign ClassicCWE-89Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements us…
CVE-2026-155657.539.3Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-120Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint w…
CVE-2026-194259.339.2Win Men IntermationalTravel Agency Management SystemCWE-89Win Men Intermational｜Travel Agency Management System - SQL Injection
CVE-2026-727707.139.0n8n-ion8nCWE-22n8n before 1.123.67 Path Traversal via Git Node Operations
CVE-2016-200978.738.9Weaver Network Co., Ltd.E-cology 8.0CWE-89Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad
CVE-2026-627146.538.7MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627166.538.7MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627206.538.7MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-290358.338.7civetwebcivetwebCWE-787CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompre…
CVE-2026-703145.538.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Information Disclosure Vulnerability
CVE-2026-703357.838.6MicrosoftVisual Studio CodeCWE-78GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
CVE-2022-509978.738.4Weaver Network Co., Ltd.E-cology 9.0CWE-89Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
CVE-2026-691098.738.4SiemensSiemens License Server (SLS)CWE-35A vulnerability has been identified in Siemens License Server (SLS) (All vers…
CVE-2026-703558.738.4MicrosoftMicrosoft SharePoint Server 2019CWE-79Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-635305.538.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-693208.837.9MicrosoftVisual Studio CodeCWE-78Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-725487.537.9OpenSignLabsOpenSignCWE-200OpenSignLabs OpenSign - Information Disclosure
CVE-2026-725437.537.6OpenSignLabsOpenSignCWE-639OpenSignLabs OpenSign - Insecure Direct Object Reference
CVE-2026-613504.637.5MicrosoftWindows 10 Version 1607CWE-126Windows NTFS Information Disclosure Vulnerability
CVE-2026-727788.737.3craftcmscmsCWE-915Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config
CVE-2026-687975.537.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-732327.537.3ffufffufCWE-409ffuf denial of service (OOM) via HTTP response decompression bomb
CVE-2026-649005.437.3MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-657898.137.2MicrosoftWindows 10 Version 1607CWE-416Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-713318.137.2MicrosoftWindows 10 Version 1809CWE-190Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-628208.137.1MicrosoftWindows 10 Version 1607CWE-362Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-657677.637.1MicrosoftMicrosoft Teams for AndroidCWE-79Microsoft Teams for Android Spoofing Vulnerability
CVE-2026-691029.337.0dromaraMaxKeyCWE-798MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
CVE-2026-155627.536.9Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-190Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pr…
CVE-2026-479224.736.9AdobeContent Credentials Rust SDKCWE-918CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-342659.836.8SAP_SESAP NetWeaver and ABAP PlatformCWE-787Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver …
CVE-2026-155608.136.7Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-829Openjdk-orb: unauthed class loading via iiop in eap
CVE-2026-656577.836.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Office Remote Code Execution Vulnerability
CVE-2026-541235.536.6MicrosoftMicrosoft Defender for Endpoint for MacCWE-200Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
CVE-2026-629174.636.6MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-20Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-730329.436.6papersgptpapersgpt-for-zoteroCWE-94PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()
CVE-2026-155677.536.5Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-789Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on…
CVE-2026-549817.836.4MicrosoftPython extension for Visual Studio CodeCWE-829Visual Studio Code Python Extension Security Feature Bypass Vulnerability
CVE-2026-661459.136.3SonicWallGMSCWE-94An unauthenticated remote code execution vulnerability was identified in GMS …
CVE-2026-658078.836.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-725527.536.1DubDubCWE-918Dub Dub - Server-Side Request Forgery
CVE-2026-613528.135.9MicrosoftWindows 10 Version 1607CWE-362Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-394526.335.9n/aIntel(R) Transfer Learning ToolCWE-693Protection mechanism failure for some Intel(R) Transfer Learning Tool before …
CVE-2026-137379.235.6CommvaultCommvault CloudCWE-863Command Restriction Bypass
CVE-2026-703485.535.6MicrosoftWindows 11 Version 24H2CWE-59Windows Management Services Denial of Service Vulnerability
CVE-2026-725358.635.5ChaskiqChaskiqCWE-306Chaskiq Chaskiq - Missing Authentication
CVE-2026-725368.635.5ChaskiqChaskiqCWE-306Chaskiq Chaskiq - Missing Authentication
CVE-2026-732148.235.5coturncoturnCWE-400coturn allocates a full per-peer SSL/session before verifying the DTLS cookie…
CVE-2026-727126.935.5Nmap ProjectNmapCWE-835Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet
CVE-2026-732105.135.4LookylooPlaywrightCaptureCWE-918Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCapture
CVE-2026-687987.835.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-515849.835.0n/an/aCWE-287An issue in usememos v0.27.1 allows a remote attacker to achieve account take…
CVE-2026-212798.235.0AdobeColdFusion 2025CWE-20ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-549847.835.0MicrosoftWindows 10 Version 1607CWE-122Windows Imaging Component Remote Code Execution Vulnerability
CVE-2026-182475.335.0BlackBerryBlackBerry AtHoc IWSCWE-79DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals
CVE-2026-725509.834.9FriendicaFriendicaCWE-89Friendica Friendica - SQL Injection
CVE-2026-712177.535.0Red HatRed Hat Enterprise Linux 10CWE-20Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabl…
CVE-2026-668065.534.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-193Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-628698.834.6MicrosoftMicrosoft EntraCWE-345Azure Entra ID Spoofing Vulnerability
CVE-2026-141805.334.6Red HatRed Hat build of Apache Camel for Spring Boot 4CWE-444Undertow-core: undertow:http request smuggling via oversized chunk-size bit o…
CVE-2026-648975.434.5MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-649025.434.5MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-649165.434.5MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-649225.434.5MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-194248.734.3Inventec AppliancesChiline CloudCWE-639Inventec Appliances｜Chiline Cloud - Insecure Direct Object Reference
CVE-2026-714677.534.3Red HatRed Hat Advanced Cluster Management for Kubernetes 2CWE-287Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated v…
CVE-2026-534138.334.2Zoom CommunicationsZoom ClientsCWE-787Zoom Clients - Buffer Over-write
CVE-2026-626996.834.2MicrosoftWindows 10 Version 1607CWE-122Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution…
CVE-2026-729209.834.2seaweedfsseaweedfsCWE-306SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative co…
CVE-2026-186927.733.9MongoDBMongoDB ServerCWE-416Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Servi…
CVE-2026-732166.533.9coturncoturnCWE-400coturn: mobility disconnects bypass allocation quotas and exhaust relay capacity
CVE-2026-693068.233.8MicrosoftVisual Studio CodeCWE-636Visual Studio Code Security Feature Bypass Vulnerability
CVE-2026-688127.833.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688147.833.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688177.833.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-195568.833.8GoogleChromeCWE-416Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remot…
CVE-2026-195598.833.8GoogleChromeCWE-416Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a rem…
CVE-2026-195608.833.8GoogleChromeCWE-416Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a re…
CVE-2026-725338.833.1PortainerPortainer CECWE-287Portainer Portainer CE - Authentication Bypass
CVE-2026-725457.533.0OpenSignLabsOpenSignCWE-639OpenSignLabs OpenSign - Insecure Direct Object Reference
CVE-2026-628717.833.0Microsoft.NET 8.0CWE-787.NET Elevation of Privilege Vulnerability
CVE-2026-628867.833.0Microsoft.NET 10.0CWE-190.NET Elevation of Privilege Vulnerability
CVE-2026-732119.832.6ChocobozzzPeerTubeCWE-89PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()
CVE-2026-628168.832.6MicrosoftWindows 10 Version 1607CWE-122Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vu…
CVE-2026-586417.832.6Microsoft.NET 10.0CWE-190.NET Elevation of Privilege Vulnerability
CVE-2026-586517.832.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Word Remote Code Execution Vulnerability
CVE-2026-649147.832.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Access Remote Code Execution Vulnerability
CVE-2026-688067.832.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-787Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-181277.732.5IvantiEndpoint ManagerCWE-73External control of a filename in the Core of Ivanti Endpoint Manager before …
CVE-2026-47577.232.3Axis Communications ABAXIS OSCWE-732A VAPIX API parameter had improper input validation which could allow code ex…
CVE-2026-484366.532.3AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-534158.332.1Zoom CommunicationsZoom ClientsCWE-416Zoom Clients - Use After Free
CVE-2026-727678.732.1n8n-ion8nCWE-78n8n before 1.123.67 Remote Code Execution via Git node
CVE-2026-591285.532.1MicrosoftWindows 10 Version 1607CWE-125Windows Encrypting File System (EFS) Information Disclosure Vulnerability
CVE-2026-591375.532.1MicrosoftWindows 10 Version 1607CWE-908Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-613475.532.1MicrosoftWindows 10 Version 1607CWE-126Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-613605.532.1MicrosoftWindows 10 Version 1607CWE-822Windows GDI Information Disclosure Vulnerability
CVE-2026-619335.532.1MicrosoftWindows 11 Version 24H2CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-627035.532.1MicrosoftWindows 10 Version 1809CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-627095.532.0MicrosoftWindows 10 Version 1607CWE-908Windows GDI+ Information Disclosure Vulnerability
CVE-2026-627305.532.1MicrosoftWindows 10 Version 1607CWE-126Windows Wired AutoConfig Service Information Disclosure Vulnerability
CVE-2026-627385.532.1MicrosoftWindows 10 Version 1607CWE-125Windows Management Instrumentation Information Disclosure Vulnerability
CVE-2026-627405.532.0MicrosoftWindows 10 Version 1607CWE-908Windows Imaging Component Information Disclosure Vulnerability
CVE-2026-627435.532.1MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-627465.532.1MicrosoftWindows 10 Version 1607CWE-126Win32k Information Disclosure Vulnerability
CVE-2026-732268.831.9electermelectermCWE-913Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/fu…
CVE-2026-730809.331.7seaweedfsseaweedfsCWE-918SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.Fetc…
CVE-2026-712185.331.6Red HatRed Hat Enterprise Linux 10CWE-789Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows una…
CVE-2026-732418.331.5FreeRDPFreeRDPCWE-287FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities …
CVE-2026-727734.931.4n8n-ion8nCWE-22n8n before 2.32.1 Path Traversal via computer-use search_files
CVE-2026-627127.831.3MicrosoftWindows 10 Version 1607CWE-122Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-627357.831.3MicrosoftWindows 10 Version 1607CWE-122Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-4805610.031.2truelockmcstreambertCWE-20Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler
CVE-2026-477059.631.1baptisteArnotypebot.ioCWE-1236TypeBot vulnerable to CSV injection in result export
CVE-2026-657856.531.1MicrosoftWindows 11 Version 24H2CWE-400Windows DHCP Client Denial of Service Vulnerability
CVE-2026-635257.831.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-197Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-582365.530.9SAP_SESAP NetWeaver Application Server ABAP and ABAP PlatformCWE-78OS Command Injection vulnerability in Application Server ABAP of SAP NetWeave…
CVE-2026-703155.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-703165.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-703195.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-703205.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-703225.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-703235.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Information Disclosure Vulnerability
CVE-2026-703255.530.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-727645.830.7n8n-ion8nCWE-668n8n before 1.123.67 Module Cache Poisoning via Code Node
CVE-2026-727429.230.5Stanford NLPDSPyCWE-73DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing
CVE-2026-613685.530.5MicrosoftWindows 10 Version 1607CWE-122Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-727658.730.4n8n-ion8nCWE-94n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape
CVE-2026-628037.830.3MicrosoftWindows 10 Version 1607CWE-59Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-628077.830.3MicrosoftWindows 10 Version 1607CWE-59Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-591365.530.3MicrosoftWindows 10 Version 1607CWE-908Microsoft COM for Windows Information Disclosure Vulnerability
CVE-2026-730318.229.6GramSearchtelegram-searchCWE-79telegram-search Stored XSS via v-html in MessageList.vue
CVE-2026-567218.729.3owen2345CamaleonCMSCWE-639CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersContro…
CVE-2026-626887.829.3MicrosoftWindows 11 Version 24H2CWE-122Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-626987.829.3MicrosoftWindows 10 Version 1607CWE-197Microsoft Digest Authentication Elevation of Privilege Vulnerability
CVE-2026-730887.529.4browserslistbrowserslistCWE-248Browserslist: Uncaught crash / prototype write via untrusted browserslist-sta…
CVE-2026-627456.529.3MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-730897.529.2browserslistbrowserslistCWE-770Browserslist: Unbounded memory growth (no cache eviction) via distinct query …
CVE-2026-628425.529.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2026-635175.529.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2026-703185.529.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Excel Information Disclosure Vulnerability
CVE-2026-703175.529.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Office Information Disclosure Vulnerability
CVE-2026-729715.528.9MicrosoftWindows 11 version 26H1CWE-59Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerab…
CVE-2026-656567.828.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-77Microsoft Office Remote Code Execution Vulnerability
CVE-2026-591197.328.8MicrosoftPowerShell 7.4CWE-276PowerShell Elevation of Privilege Vulnerability
CVE-2026-628295.428.9MicrosoftMicrosoft SharePoint Server 2019CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-730699.128.7twentyhqtwentyCWE-89Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary P…
CVE-2026-627617.828.7MicrosoftWindows 10 Version 1607CWE-59Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-726007.528.7IdurarIDURAR ERP CRMCWE-284Idurar IDURAR ERP CRM - Broken Access Control
CVE-2026-726017.528.7CSZ CMSCSZ CMSCWE-284CSZ CMS CSZ CMS - Broken Access Control
CVE-2026-725495.328.7OpenSignLabsOpenSignCWE-200OpenSignLabs OpenSign - Information Disclosure
CVE-2026-154268.828.5acybaAcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPressCWE-269AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to …
CVE-2026-668028.128.4MicrosoftWindows 10 Version 1809CWE-362Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-635137.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-635157.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Remote Code Execution Vulnerability
CVE-2026-635187.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-635197.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-656647.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-668077.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-687947.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688047.828.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-197Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-401305.328.3SAP_SESAPSPrint ServiceCWE-121Memory Corruption vulnerability in SAPSPrint Service
CVE-2026-732428.328.2FreeRDPFreeRDPCWE-122FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-b…
CVE-2026-155617.528.2Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-770Undertow-core: oom via missing limits in chunked trailer in eap's undertow
CVE-2026-484157.628.1AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-732467.527.9kestra-iokestraCWE-200Kestra: Unauthenticated management `/worker` endpoint exposes live task confi…
CVE-2026-635245.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-635285.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-635295.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-635315.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-648995.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-649175.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-687995.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Excel Information Disclosure Vulnerability
CVE-2026-688025.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-688085.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-688135.527.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-243294.927.5Red HatRed Hat Fuse 7CWE-91Wildfly-core: wildfly core: denial of service via malformed payload injection…
CVE-2026-194345.127.4maalferPentestifyCWE-79Stored Cross-site Scripting in Pentestify finding severity field
CVE-2026-187067.527.4MongoDBMongoDB ServerCWE-416Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of S…
CVE-2026-484947.127.2baptisteArnotypebot.ioCWE-639TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via globa…
CVE-2026-732195.327.3cvat-aicvatCWE-1288CVAT: Denial of service with regards to automatic annotation
CVE-2026-732445.327.3kekingcnkkFileViewCWE-22kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrar…
CVE-2026-635267.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-635327.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Remote Code Execution Vulnerability
CVE-2026-648987.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649037.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649077.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-649097.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-191Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649107.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649117.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Remote Code Execution Vulnerability
CVE-2026-688167.827.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-732248.826.9electermelectermCWE-78Electerm check folder size function may get attacked by unsafe folder name
CVE-2026-117341.126.9NETGEARMR70CWE-121Device administrator can interrupt the normal operation of some NETGEAR Night…
CVE-2026-725999.826.8e107e107CWE-89e107 e107 - SQL Injection
CVE-2026-591305.626.7MicrosoftWindows 10 Version 1607CWE-200AMD Zen Information Disclosure Vulnerability
CVE-2026-730788.626.6vimvimCWE-77Vim: Arbitrary Code Execution via Netrw Menu Construction
CVE-2026-703387.826.5MicrosoftPowerShell 7.4CWE-94Microsoft PowerShell Security Feature Bypass Vulnerability
CVE-2026-629145.426.5MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-79Microsoft Exchange Server Spoofing Vulnerability
CVE-2026-613597.826.4MicrosoftWindows 11 version 23H2CWE-122Windows Storage Elevation of Privilege Vulnerability
CVE-2026-627977.826.4MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-628117.826.4MicrosoftWindows 11 version 23H2CWE-122Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-725546.526.4Ladybird Web SolutionFaveo HelpdeskCWE-284Ladybird Web Solution Faveo Helpdesk - Broken Access Control
CVE-2026-627377.826.3MicrosoftWindows 11 Version 24H2CWE-822Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-732157.126.1coturncoturnCWE-400The coturn server can end in a state where it does not accept more requests w…
CVE-2026-484835.426.1baptisteArnotypebot.ioCWE-918TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, a…
CVE-2026-731565.326.0MISPcti-transmuteCWE-79cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Cr…
CVE-2026-628977.025.9Microsoft.NET 10.0CWE-190.NET Framework Remote Code Execution Vulnerability
CVE-2026-725578.825.8Cockpit CMSCockpit CMSCWE-434Cockpit CMS Cockpit CMS - Unrestricted File Upload
CVE-2026-586507.825.7MicrosoftVisual Studio CodeCWE-639Visual Studio Code Security Feature Bypass Vulnerability
CVE-2026-692787.825.7MicrosoftVisual Studio CodeCWE-863Visual Studio Code Security Feature Bypass Vulnerability
CVE-2026-488138.725.6david-a-wheelerflawfinderCWE-74Flawfinder output manipulation via untrusted filenames and source text
CVE-2026-117331.125.6NETGEARRAX41CWE-121Buffer overflow vulnerability in some NETGEAR Nighthawk routers
CVE-2026-189729.625.4Rapid7VelociraptorCWE-290Velociraptor authenticated identity-spoofing vulnerability
CVE-2026-207028.925.5n/aIntel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.CWE-693Protection mechanism failure for some Intel(R) Data Center Attestation Primit…
CVE-2026-656617.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-687937.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-687957.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-687967.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688007.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688017.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688057.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-703137.825.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-627696.725.5MicrosoftWindows 10 Version 1607CWE-197Windows DNS Elevation of Privilege Vulnerability
CVE-2026-628816.725.5MicrosoftWindows 10 Version 1607CWE-197Windows DNS Elevation of Privilege Vulnerability
CVE-2026-726046.525.5IntelliantsSubrion CMSCWE-22Intelliants Subrion CMS - Path Traversal
CVE-2026-186978.725.3MongoDBMongoDB ServerCWE-617Improper Input Validation in MongoDB Aggregation Framework Allows Unauthentic…
CVE-2026-619257.825.2MicrosoftWindows 10 Version 1607CWE-863Windows Installer Elevation of Privilege Vulnerability
CVE-2026-195398.625.1RoskusProspero Flow CRMCWE-862IDOR in Prospero Flow CRM allows cross-tenant ticket read, hijacking, and del…
CVE-2026-627217.825.1MicrosoftWindows 10 Version 1607CWE-1220Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
CVE-2026-656737.825.1MicrosoftMicrosoft Entra ConnectCWE-89Microsoft Entra Connect Elevation of Privilege Vulnerability

Results continue: ranks 401–933.

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-08-11 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion.