boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Tuesday, August 11, 2026 · all times UTC← 2026-08-10 · archive · 2026-08-12 →

Security Box Score — August 11, 2026

933 CVEs published, led by Microsoft (402).

933 CVEs published August 11, 2026: 60 critical, 526 high, 324 medium, 23 low; 3 in the KEV catalog at press time; 3 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; 375 more in the results table on this page; the remaining 533 on continuation pages.

Standings

League
MTDYTD2025 same span2025 full
CVEs published365125815——
KEV catalog size1675

Publication counts reflect the record since May 20, 2026 (archive start); KEV figures are catalog-wide.

Prior-year comparisons begin when the archive covers a full year; archive begins May 20, 2026.

1450 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
linux3902705233138963711120.17.8.0016+352 ▲
microsoft4351857130126744614286251.37.8.0044+382 ▲
google491810222749783567760.37.5.0025-30 ▼
red hat1044902420423131200.06.5.0029+68 ▲
apple1272587813338872.66.8.0027+1 ▲
canonical02738115000.05.6.0014-1 ▼
suse52651461000.08.1.0039-1 ▼
freebsd01601240000.07.8.00160
Network & Infrastructure
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
cisco31691337190561318.87.5.0046+23 ▲
ubiquiti036142110338.38.8.0049-25 ▼
netgear93200275000.04.3.0025+9 ▲
palo alto networks025131471328.04.7.0028-14 ▼
fortinet0236611028626.17.2.00400
vmware0174922715.98.3.0040-1 ▼
f50165830416.38.6.00570
ivanti314482025535.78.3.0754+3 ▲
Open Source Ecosystems
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
apache7841485181135123320.57.5.0050+17 ▲
mozilla11285142350900.08.1.0031-2 ▼
drupal05165355412.05.9.0026-46 ▼
gitlab05107377423.94.9.0029-7 ▼
github2141490000.06.2.0043+1 ▲
docker070520000.08.2.00160
wordpress1412102250.08.8.5550+1 ▲
kubernetes010001000.02.4.00350
Enterprise Applications
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
oracle01379343653322612730.28.1.00360
adobe603123914512351931.07.8.0026+57 ▲
ibm3226172104841610.47.5.0031+30 ▲
progress1153143270611.98.1.0037+1 ▲
solarwinds0231733010417.49.1.00580
veeam10165920100.08.6.0034+10 ▲
zohocorp283320000.08.4.0142+2 ▲
atlassian0303001300.08.0.00260
Industrial & Embedded
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
d-link153515596300.07.4.0157+14 ▲
siemens173322380000.07.3.0016+13 ▲
synology12426133000.05.6.0025+1 ▲
rockwell automation02441820000.08.7.00290
schneider electric091620000.08.6.00370
abb070430000.07.2.00180
hikvision060420000.07.2.00400
moxa050320000.07.0.00290
Other
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
sourcecodester12132007161000.05.5.0033-16 ▼
openclaw01110583914000.07.0.0026-1 ▼
dell8107950453210.97.2.0021-25 ▼
nvidia16981366190000.07.7.0034-1 ▼
capgo083242381000.07.1.0037-15 ▼
itsourcecode879001960000.02.1.0033-2 ▼
spring079234412000.06.5.00220
imagemagick078156012000.05.3.0018-18 ▼

Leaders (trailing 30 days unless noted)

Highest EPSS
CVEEPSS%ileCVSS
CVE-2026-8037.995799.99.8
CVE-2026-34486.986299.97.5
CVE-2026-63030.977999.99.8
CVE-2026-16232.891299.89.3
CVE-2026-63077.847399.79.8
CVE-2026-50522.846199.79.8
CVE-2026-15409.836699.710.0
CVE-2026-60137.797999.65.9
CVE-2026-72898.792299.610.0
CVE-2026-6875.775899.59.5
Highest CVSS
CVECVSSEPSSNote
CVE-2026-1540910.0.8366KEV
CVE-2026-7289810.0.7922KEV
CVE-2026-898510.0.0660
CVE-2026-651610.0.0486
CVE-2026-4836210.0.0431
CVE-2026-4766810.0.0388
CVE-2026-4633910.0.0335
CVE-2026-4435910.0.0180
CVE-2026-5823110.0.0171
CVE-2026-1681210.0.0157KEV
Most disclosures (vendor)
VendorCVEs
linux1187
oracle1109
microsoft1046
google466
red hat232
apache198
apple168
adobe165
ibm135
mozilla69
Most KEV additions (YTD)
VendorKEV
microsoft25
cisco13
apple7
fortinet6
google6
ivanti5
solarwinds4
adobe3
berriai3
oracle3
Most-affected ecosystems
EcosystemAdvisories
Maven67
PyPI5
Go3
Packagist3
npm3
crates.io2
NuGet1
Fastest to KEV
CVEVendorDays
CVE-2021-27137DD-WRT0
CVE-2025-68686Fortinet0
CVE-2026-0770Langflow0
CVE-2026-15409SonicWall0
CVE-2026-15410SonicWall0
CVE-2026-16232checkpoint0
CVE-2026-16812Arista Networks0
CVE-2026-18556N-able0
CVE-2026-18577N-able0
CVE-2026-20316Cisco0
Longest unpatched (KEV due date passed)
CVEVendorDueDays over
CVE-2021-27104n/a2021-11-171728
CVE-2021-27102n/a2021-11-171728
CVE-2021-27101n/a2021-11-171728
CVE-2021-27103n/a2021-11-171728
CVE-2021-21017Adobe2021-11-171728
CVE-2021-28550Adobe2021-11-171728
CVE-2021-42013Apache Software Foundation2021-11-171728
CVE-2021-41773Apache Software Foundation2021-11-171728
CVE-2021-30858Apple2021-11-171728
CVE-2021-30860Apple2021-11-171728

Transactions

EXPLOIT PUBLISHED — Unknown Salon Booking System: 3 CVEs (CVE-2026-17020, CVE-2026-17021, CVE-2026-17023). Public exploit references added.

EXPLOIT PUBLISHED — CVE-2018-0296 (Cisco Adaptive Security Appliance (ASA)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2019-2725 (Oracle Corporation Tape Library ACSLS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2020-3452 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2021-44228 (Apache Log4j2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2023-44487 (IETF HTTP/2). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-20353 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-20359 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-23692 (Rejetto HTTP File Server). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-42999 (SAP_SE SAP NetWeaver (Visual Composer development server)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12971 (Unknown LearnPress). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13170 (Unknown Eventin). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13600 (Unknown AutoNetTV Relay). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13716 (Arcadia Technology, LLC Crafty Controller). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14211 (Unknown Booking for Appointments and Events Calendar). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14237 (Unknown vitepos). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14238 (Unknown vitepos). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14293 (Unknown Autopay). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14315 (Unknown Pixel Tag Manager for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14860 (Unknown Podcast Player). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14941 (Unknown Customer Reviews for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15047 (Unknown s2Member). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15229 (Unknown Pinpoint Booking System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15237 (Unknown MotoPress Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15238 (Unknown MotoPress Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16257 (Unknown Arvow AI SEO Writer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16298 (Unknown FoodBoxBooker). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16299 (Unknown Single Sign On For TNG). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16949 (Unknown Term Pages). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16985 (Unknown Squeeze). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17012 (Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17016 (Unknown Accept PayPal & Stripe with Subscriptions for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17018 (Unknown CubeWP Framework). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17540 (Unknown File Manager). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18030 (Unknown BricksForge). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18200 (Unknown FoodBoxBooker). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18468 (Unknown Login & Register Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18469 (Unknown Login & Register Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18666 (Unknown Library Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18786 (Unknown CheckView). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18934 (Unknown RSS Aggregator by Feedzy). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-18960 (Unknown Block User Account). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19049 (Unknown ProSolution WP Client). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19074 (Unknown Advanced Classifieds & Directory Pro). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19075 (Unknown All-in-One Video Gallery). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19077 (Unknown Duplicate Post). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19089 (Unknown Product Input Fields for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19379 (EFM ipTIME AX8004M). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19384 (SourceCodester Simple Doctors Appointment System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-25646 (pnggroup libpng). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48864 (Red Hat Enterprise Linux 10). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-48939 (icagenda.com iCagenda extension for Joomla). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-58016 (GNOME GLib). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69112 (huggingface accelerate). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69114 (Spacebar Server). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69116 (xpf0000 FlyEnv). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-69118 (cachethq cachet). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-70622 (composefs tar-rs). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71225 (Stephan Muelle libkcapi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71227 (Stephan Muelle libkcapi). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71964 (usmannasir cyberpanel). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-71965 (usmannasir cyberpanel). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-73030 (frostming unearth). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-73033 (sucuri-wordpress-plugin). Public exploit reference added.

DUE DATE PASSED — CVE-2025-68686 (Fortinet FortiOS). CISA remediation deadline was August 10, 2026; still in catalog.

DUE DATE PASSED — CVE-2026-8037 (Progress Software LoadMaster). CISA remediation deadline was August 10, 2026; still in catalog.

RESCORED — Fortinet FortiOS: 3 CVEs (CVE-2025-43892, CVE-2025-62675, CVE-2026-59840). CVSS rescored — before/after on each CVE page.

RESCORED — CVE-2022-21198 (Intel(R) Processors). CVSS 7.9 → 6.4 (NVD).

RESCORED — CVE-2023-20269 (Cisco Adaptive Security Appliance (ASA) Software). CVSS 5 → 9.1 (NVD).

RESCORED — CVE-2024-9341 (github.com/containers/common). CVSS 5.4 → 8.2 (NVD).

RESCORED — CVE-2025-62826 (Fortinet FortiPAM). CVSS 3.1 → 4.3 (NVD).

RESCORED — CVE-2026-13473 (IBM Storage Protect Client). CVSS 8.1 → 9.8 (NVD).

RESCORED — CVE-2026-14501 (IBM Db2 Genius Hub). CVSS 4.3 → 9.8 (NVD).

RESCORED — CVE-2026-14615 (Red Hat build of Keycloak 26.4). CVSS 4.3 → 2.7 (NVD).

RESCORED — CVE-2026-14971 (IBM PowerVM Novalink). CVSS 3.9 → 7 (NVD).

RESCORED — CVE-2026-14979 (IBM Engineering Lifecycle Management). CVSS 5.3 → 7.5 (NVD).

RESCORED — CVE-2026-15995 (IBM Cognos Analytics). CVSS 5.4 → 4.2 (NVD).

RESCORED — CVE-2026-43003 (OpenStack ironic-python-agent). CVSS 8 → 7.5 (NVD).

RESCORED — CVE-2026-58016 (GNOME GLib). CVSS 7.5 → 9.1 (NVD).

RESCORED — CVE-2026-59837 (Fortinet FortiPAM). CVSS 5.9 → 6.6 (NVD).

RESCORED — CVE-2026-59839 (Fortinet FortiProxy). CVSS 5 → 5.5 (NVD).

RESCORED — CVE-2026-9698 (HMBRAND DBI). CVSS 7.5 → 9.8 (NVD).

ENRICHED — Linux: 7 CVEs (CVE-2021-47210, CVE-2021-47253, CVE-2021-47335, CVE-2021-47410, CVE-2021-47431, CVE-2021-47610, CVE-2022-48628). Received CVSS/CPE analysis.

ENRICHED — CVE-2018-0296 (Cisco Adaptive Security Appliance (ASA)). Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2020-27339. Received CVSS 6.7 and CPE data from NVD.

ENRICHED — CVE-2020-3452 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2020-3580 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 6.1 and CPE data from NVD.

ENRICHED — CVE-2020-5953. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2021-33625. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2021-33626. Received CVSS 7.8 and CPE data from NVD.

ENRICHED — CVE-2021-33627. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41837. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41838. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41839. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41840. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-41841. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-42059. Received CVSS 6.7 and CPE data from NVD.

ENRICHED — CVE-2021-42060. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-42113. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-42554. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-43323. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-43522. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2021-43615. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-44228 (Apache Log4j2). Received CVSS 10.0 and CPE data from NVD.

ENRICHED — CVE-2021-45969. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-45970. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2021-45971. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2022-24030. Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2022-24031. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2022-24069. Received CVSS 8.2 and CPE data from NVD.

ENRICHED — CVE-2023-44487 (IETF HTTP/2). Received CVSS 7.5 and CPE data from NVD.

ENRICHED — CVE-2024-20353 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 8.6 and CPE data from NVD.

ENRICHED — CVE-2024-20359 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 6.0 and CPE data from NVD.

ENRICHED — CVE-2024-20481 (Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)). Received CVSS 5.8 and CPE data from NVD.

ENRICHED — CVE-2025-20333 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense). Received CVSS 9.9 and CPE data from NVD.

ENRICHED — CVE-2025-20362 (Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense). Received CVSS 8.6 and CPE data from NVD.

Yesterday's Results

How to read these box scores · glossary

933 CVEs published. 25 box scores and 375 table rows below; the remaining 533 continue on page 2 — every CVE is listed, nothing truncated.

CVE-2026-72898CRITICAL
Metabase SQL injection via password reset endpoint
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H   10.0   .7922   99.6   YES
AFFECTED
  Product   Versions  Fixed
  Metabase  x.58.0 –  x.58.24
TIMELINE
  Aug 9   Patch available
  Aug 10  Reserved by CNA
  Aug 11  Added to CISA KEV, due Aug 14
  Aug 11  Published (CNA: cisa-cg)
CWE-89 · CNA: cisa-cg · CVSS v4.0 · 5 references · NVD status: Analyzed · KEV due August 14, 2026
CVE-2026-68820HIGH
Microsoft Windows 10 Version 1607 — Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   H   L   N  U  H  H  H    7.0   .0618   92.9   YES
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 31  Reserved by CNA
  Aug 11  Added to CISA KEV, due Aug 25
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due August 25, 2026
CVE-2026-20349HIGH
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  N  N  H    8.6   .0221   81.3   YES
AFFECTED
  Product                                                           Versions  Fixed
  Cisco Secure Firewall Adaptive Security Appliance (ASA) Software  9.16.1 –  —
  Cisco Secure Firewall Threat Defense (FTD) Software               7.0.0 –   —
TIMELINE
  Oct 8   Reserved by CNA
  Aug 11  Added to CISA KEV, due Aug 14
  Aug 11  Published (CNA: cisco)
CWE-244 · CNA: cisco · CVSS v3.1 · 2 references · NVD status: Analyzed · KEV due August 14, 2026
CVE-2026-71362CRITICAL
Adobe Commerce | Incorrect Authorization (CWE-863)
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  N    9.1   .2514   97.8     —
AFFECTED
  Product              Versions     Fixed
  Adobe Commerce       unspecified  2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug, 2.4.5-2026-aug, 2.4.4-2026-aug
  Adobe Commerce B2B   unspecified  1.5.3-2026-aug, 1.5.2-2026-aug, 1.4.2-2026-aug, 1.3.4-2026-aug, 1.3.3-2026-aug
  Magento Open Source  unspecified  2.4.9-2026-aug, 2.4.8-2026-aug, 2.4.7-2026-aug, 2.4.6-2026-aug
TIMELINE
  Aug 5   Reserved by CNA
  Aug 11  Published (CNA: adobe)
CWE-863 · CNA: adobe · CVSS v3.1 · 1 reference · NVD status: Undergoing Analysis
CVE-2026-48376MEDIUM
Adobe ColdFusion 2025 — ColdFusion | Improper Encoding or Escaping of Output (CWE-116)
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  N  L  L    5.4   .1392   96.2     —
AFFECTED
  Product          Versions     Fixed
  ColdFusion 2025  unspecified  2025.0.12
  ColdFusion 2023  unspecified  2023.0.23
TIMELINE
  May 21  Reserved by CNA
  Aug 11  Published (CNA: adobe)
CWE-116 · CNA: adobe · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-71386HIGH
Adobe ColdFusion 2025 — ColdFusion | Cross-site Scripting (XSS) (CWE-79)
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   A   L   N   R  C  H  H  H    8.8   .0661   93.3     —
AFFECTED
  Product          Versions     Fixed
  ColdFusion 2025  unspecified  2025.0.12
  ColdFusion 2023  unspecified  2023.0.23
TIMELINE
  Aug 6   Reserved by CNA
  Aug 11  Published (CNA: adobe)
CWE-79 · CNA: adobe · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-18972CRITICAL
Rapid7 Velociraptor — Velociraptor authenticated identity-spoofing vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  H  N    9.6   .0606   92.8     —
AFFECTED
  Product       Versions     Fixed
  Velociraptor  unspecified  —
TIMELINE
  Aug 5   Reserved by CNA
  Aug 11  Published (CNA: rapid7)
CWE-290 · CNA: rapid7 · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-53413HIGH
Zoom Clients - Buffer Over-write
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   R  C  H  H  H    8.3   .0560   92.3     —
AFFECTED
  Product       Versions          Fixed
  Zoom Clients  see references –  —
TIMELINE
  Jun 9   Reserved by CNA
  Aug 11  Published (CNA: Zoom)
CWE-787 · CNA: Zoom · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-66804HIGH
Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0531   92.0     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
TIMELINE
  Jul 27  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-284 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-48362CRITICAL
Adobe ColdFusion 2025 — ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  C  H  H  H   10.0   .0431   90.4     —
AFFECTED
  Product          Versions     Fixed
  ColdFusion 2025  unspecified  2025.0.12
  ColdFusion 2023  unspecified  2023.0.23
TIMELINE
  May 21  Reserved by CNA
  Aug 11  Published (CNA: adobe)
CWE-78 · CNA: adobe · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-61358HIGH
Microsoft Windows 10 Version 1809 — Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0368   88.8     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 8   Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-59 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62696HIGH
Microsoft Windows 10 Version 1607 — Windows Program Compatibility Assistant Service Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0340   87.9     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2016      10.0.14393.0 –  —
  + 6 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-191 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62832HIGH
Microsoft Windows 10 Version 21H2 — Windows User Profile Service Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0330   87.5     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2022                             10.0.20348.0 –  —
  Windows Server 2025                             10.0.26100.0 –  —
  Windows Server 2025 (Server Core installation)  10.0.26100.0 –  —
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-59 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-63520HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  H  H  H    8.1   .0293   86.0     —
AFFECTED
  Product                                           Versions  Fixed
  Microsoft SharePoint Enterprise Server 2016       16.0.0 –  —
  Microsoft SharePoint Server 2019                  16.0.0 –  —
  Microsoft SharePoint Server Subscription Edition  16.0.0 –  —
TIMELINE
  Jul 16  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-20 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62737HIGH
Microsoft Windows 11 Version 24H2 — Windows Kernel Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0284   85.6     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2025                             10.0.26100.0 –  —
  Windows Server 2025 (Server Core installation)  10.0.26100.0 –  —
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-822 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-65665HIGH
Microsoft SharePoint Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  U  H  H  H    8.8   .0277   85.2     —
AFFECTED
  Product                                           Versions  Fixed
  Microsoft SharePoint Server 2019                  16.0.0 –  —
  Microsoft SharePoint Server Subscription Edition  16.0.0 –  —
TIMELINE
  Jul 22  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-502 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62893CRITICAL
Microsoft Windows 10 Version 1607 — Windows Deployment Services TFTP Server Remote Code Execution Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0273   85.0     —
AFFECTED
  Product                                            Versions        Fixed
  Windows 10 Version 1607                            10.0.14393.0 –  —
  Windows 10 Version 1809                            10.0.17763.0 –  —
  Windows Server 2012                                6.2.9200.0 –    —
  Windows Server 2012 (Server Core installation)     6.2.9200.0 –    —
  Windows Server 2012 R2                             6.3.9600.0 –    —
  Windows Server 2012 R2 (Server Core installation)  6.3.9600.0 –    —
  Windows Server 2016                                10.0.14393.0 –  —
  Windows Server 2016 (Server Core installation)     10.0.14393.0 –  —
  Windows Server 2019                                10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)     10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-65775HIGH
Microsoft Windows 10 Version 1607 — Windows Win32k Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0261   84.2     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 22  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-72603CRITICAL
wg-easy wg-easy - OS Command Injection
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   L   N  C  H  H  H    9.9   .0213   80.5     —
AFFECTED
  Product  Versions     Fixed
  wg-easy  unspecified  —
TIMELINE
  Aug 10  Reserved by CNA
  Aug 11  Published (CNA: TuranSec)
CWE-78 · CNA: TuranSec · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-61930HIGH
Microsoft Windows 10 Version 1607 — Windows Kernel Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0209   80.2     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2016      10.0.14393.0 –  —
  + 6 more
TIMELINE
  Jul 13  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62741HIGH
Microsoft Windows 10 Version 1607 — Windows HTTP.sys Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0209   80.2     —
AFFECTED
  Product                  Versions        Fixed
  Windows 10 Version 1607  10.0.14393.0 –  —
  Windows 10 Version 1809  10.0.17763.0 –  —
  Windows 10 Version 21H2  10.0.19044.0 –  —
  Windows 10 Version 22H2  10.0.19045.0 –  —
  Windows 11 version 23H2  10.0.22631.0 –  —
  Windows 11 Version 23H2  10.0.22631.0 –  —
  Windows 11 Version 24H2  10.0.26100.0 –  —
  Windows 11 Version 25H2  10.0.26200.0 –  —
  Windows 11 version 26H1  10.0.28000.0 –  —
  Windows Server 2012      6.2.9200.0 –    —
  + 10 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-191, CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-66147CRITICAL
SonicWall GMS — An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.…
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  L  H  H    9.4   .0200   79.2     —
AFFECTED
  Product  Versions                      Fixed
  GMS      9.5.1 and earlier versions –  —
TIMELINE
  Jul 24  Reserved by CNA
  Aug 11  Published (CNA: sonicwall)
CWE-94 · CNA: sonicwall · CVSS v3.1 · 1 reference · NVD status: Received
CVE-2026-62783HIGH
Microsoft Windows 10 Version 1809 — Windows Remote Access Connection Manager Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0195   78.7     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62888HIGH
Microsoft Windows 10 Version 21H2 — Windows DWM Core Library Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0195   78.7     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2022                             10.0.20348.0 –  —
  Windows Server 2025                             10.0.26100.0 –  —
  Windows Server 2025 (Server Core installation)  10.0.26100.0 –  —
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-416 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
CVE-2026-62713HIGH
Microsoft Windows 10 Version 1809 — Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   L   L   L   N  U  H  H  H    7.8   .0195   78.7     —
AFFECTED
  Product                                         Versions        Fixed
  Windows 10 Version 1809                         10.0.17763.0 –  —
  Windows 10 Version 21H2                         10.0.19044.0 –  —
  Windows 10 Version 22H2                         10.0.19045.0 –  —
  Windows 11 version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 23H2                         10.0.22631.0 –  —
  Windows 11 Version 24H2                         10.0.26100.0 –  —
  Windows 11 Version 25H2                         10.0.26200.0 –  —
  Windows 11 version 26H1                         10.0.28000.0 –  —
  Windows Server 2019                             10.0.17763.0 –  —
  Windows Server 2019 (Server Core installation)  10.0.17763.0 –  —
  + 3 more
TIMELINE
  Jul 14  Reserved by CNA
  Aug 11  Published (CNA: microsoft)
CWE-122 · CNA: microsoft · CVSS v3.1 · 1 reference · NVD status: Analyzed
Remainder (ranked, continued)
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-649018.878.2MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-5823110.075.6SAP_SESAP Commerce Cloud (Data Hub Adapter)CWE-94Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)
CVE-2026-591327.575.2MicrosoftWindows 10 Version 1607CWE-476Windows TCP/IP Denial of Service Vulnerability
CVE-2026-591249.875.2MicrosoftMicrosoft HPC Pack 2019CWE-502Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnera…
CVE-2026-619297.075.1MicrosoftWindows 11 version 23H2CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-657887.075.1MicrosoftWindows 11 version 23H2CWE-416Desktop Window Manager Elevation of Privilege Vulnerability
CVE-2026-466709.874.7YesWikiyeswikiCWE-89YesWiki: Unauthenticated SQL Injection
CVE-2026-148638.774.7FileRunFileRunCWE-78FileRun 2026.2.0 RCE via Thumbnail Generation Command Injection
CVE-2026-125719.874.4zohocorpmanageengine_ddi_centralCWE-287Authentication Bypass Leading to Account Takeover
CVE-2026-613487.073.8MicrosoftWindows 10 Version 1607CWE-416Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerab…
CVE-2026-668058.873.1MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-627667.072.7MicrosoftWindows 11 Version 24H2CWE-415Windows Kerberos Elevation of Privilege Vulnerability
CVE-2026-635148.872.6MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-730349.372.5eosphoros-aiDB-GPTCWE-22DB-GPT v0.8.1 Path Traversal Arbitrary File Write via user_id Header
CVE-2026-656588.870.1MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-656638.870.1MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-635166.569.3MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-629126.568.5MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-502Microsoft Exchange Server Denial of Service Vulnerability
CVE-2026-703218.867.8MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-502Microsoft SharePoint Remote Code Execution Vulnerability
CVE-2026-628789.867.3MicrosoftWindows 10 Version 1607CWE-121Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-483857.765.0AdobeColdFusion 2025CWE-78ColdFusion | Improper Neutralization of Special Elements used in an OS Comman…
CVE-2026-661486.365.0SonicWallGMSCWE-94An authenticated command injection vulnerability was identified in GMS Comman…
CVE-2026-541137.563.8MicrosoftWindows 10 Version 1607CWE-770Remote Procedure Call Denial of Service Vulnerability
CVE-2026-628987.563.5Microsoft.NET 10.0CWE-416Microsoft QUIC Information Disclosure Vulnerability
CVE-2026-668088.863.1MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-502Microsoft SharePoint Server Remote Code Execution Vulnerability
CVE-2026-629017.561.9Microsoft.NET 10.0CWE-606.NET Denial of Service Vulnerability
CVE-2026-117394.961.8NETGEARMR60CWE-78Command injection vulnerability in some NETGEAR Nighthawk devices
CVE-2026-591386.561.5MicrosoftWindows 10 Version 1607CWE-476Microsoft Remote Registry Service Denial of Service Vulnerability
CVE-2026-613456.561.5MicrosoftWindows 10 Version 1607CWE-476Microsoft Remote Registry Service Denial of Service Vulnerability
CVE-2026-649218.860.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-306Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-160538.559.9ZohocorpManageEngine M365 Manager PlusCWE-23Path Traversal
CVE-2026-628159.859.6MicrosoftWindows 11 version 23H2CWE-416Microsoft QUIC Remote Code Execution Vulnerability
CVE-2026-628188.859.3MicrosoftWindows 10 Version 1607CWE-416Windows Active Directory Certificate Services (AD CS) Remote Code Execution V…
CVE-2026-629118.058.6MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-294Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-627028.658.3MicrosoftWindows 10 Version 21H2CWE-476Windows Graphics Kernel Denial of Service Vulnerability
CVE-2026-591338.858.3MicrosoftWindows App Client for Windows DesktopCWE-250Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulner…
CVE-2026-472997.258.2MicrosoftAzure Monitor Agent Linux ExtensionCWE-77Azure Monitor Agent Elevation of Privilege Vulnerability
CVE-2026-627848.858.1MicrosoftWindows 10 Version 1607CWE-122Microsoft Local Security Authority Server (lsasrv) Remote Code Execution Vuln…
CVE-2026-628008.858.1MicrosoftWindows 10 Version 1607CWE-122Windows SMBv3 Server Remote Code Execution Vulnerability
CVE-2026-658158.857.9MicrosoftMicrosoft Dynamics 365 (on-premises) version 9.1CWE-502Microsoft Dynamics 365 On-Premises Remote Code Execution Vulnerability
CVE-2026-4561810.057.7harttleliquidjsCWE-94LiquidJS is Vulnerable to Remote Code Execution
CVE-2026-181298.156.7IvantiEndpoint ManagerCWE-295Cleartext transmission of sensitive information in the Core of Ivanti Endpoin…
CVE-2026-656817.556.5MicrosoftWindows 10 Version 1607CWE-476Windows iSCSI Target Service Denial of Service Vulnerability
CVE-2026-59179.456.5libgit2libgit2CWE-78libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libssh2 Backend
CVE-2026-619187.556.0MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-472856.556.0MicrosoftVisual Studio CodeCWE-77Visual Studio Code Information Disclosure Vulnerability
CVE-2026-627827.556.0MicrosoftWindows 10 Version 1607CWE-125Windows SMB Client Information Disclosure Vulnerability
CVE-2026-628376.555.8MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-23Microsoft SharePoint Server Information Disclosure Vulnerability
CVE-2026-703276.555.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-703286.555.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-505169.455.0MicrosoftAzure Kubernetes ServiceCWE-306Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
CVE-2026-627858.855.0MicrosoftWindows 10 Version 1607CWE-122Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vu…
CVE-2026-586396.554.9MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-918Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-491798.854.8MicrosoftWindows 10 Version 1607CWE-77Windows Active Directory Domain Services Remote Code Execution Vulnerability
CVE-2026-619247.554.8MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-619216.554.8MicrosoftWindows 10 Version 1607CWE-125Windows Remote Desktop Client Information Disclosure Vulnerability
CVE-2026-118144.954.6NETGEARBE9300CWE-295Command injection vulnerability in certain NETGEAR Nighthawk and Orbi routers
CVE-2026-181257.554.5IvantiEndpoint ManagerCWE-125An out-of-bounds read in the Agent of Ivanti Endpoint Manager before version …
CVE-2026-732187.754.4cursorcursorCWE-269Cursor: Sandbox escape via launching privileged containers
CVE-2026-628698.854.3MicrosoftMicrosoft EntraCWE-345Azure Entra ID Spoofing Vulnerability
CVE-2026-571049.654.1MicrosoftAzure Storage ExplorerCWE-79Azure Storage Explorer Elevation of Privilege Vulnerability
CVE-2026-586127.554.1MicrosoftPowerShell 7.4CWE-918PowerShell Information Disclosure Vulnerability
CVE-2026-190918.154.0paoltaiaGeoDirectory – WP Business Directory Plugin and Classified Listings DirectoryCWE-22GeoDirectory <= 2.8.169 - Authenticated (Subscriber+) Arbitrary File Deletion…
CVE-2026-703378.853.7MicrosoftPowerShell 7.4CWE-23Microsoft PowerShell Remote Code Execution Vulnerability
CVE-2026-7139810.053.6AdobeAdobe Campaign ClassicCWE-863Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CVE-2026-629026.553.1Microsoft.NET 8.0CWE-829.NET Information Disclosure Vulnerability
CVE-2026-484116.552.9AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-403756.552.8MicrosoftMicrosoft Dynamics 365 Business Central 2024 Release Wave 2CWE-862Microsoft Dynamics Business Central Information Disclosure Vulnerability
CVE-2026-703069.352.1MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-656606.551.9MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-94Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-483867.551.6AdobeColdFusion 2025CWE-327ColdFusion | Use of a Broken or Risky Cryptographic Algorithm (CWE-327)
CVE-2026-137169.151.5Arcadia Technology, LLCCrafty ControllerCWE-35Path Traversal: '.../...//' in Crafty Controller
CVE-2026-628278.851.5MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-287Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-692239.151.4Apache Software FoundationApache AlluraCWE-918Apache Allura: Server-side request forgery
CVE-2026-2730210.050.8AdobeAdobe Campaign ClassicCWE-863Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CVE-2026-627928.150.7MicrosoftWindows 10 Version 1607CWE-121Windows TCP/IP Remote Code Execution Vulnerability
CVE-2026-628995.950.6Microsoft.NET 10.0CWE-444.NET Security Feature Bypass Vulnerability
CVE-2026-727138.750.5OpenBMBXAgentCWE-22XAgent Path Traversal Arbitrary File Read via /workspace/file
CVE-2026-703248.850.2MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-918Microsoft SharePoint Elevation of Privilege Vulnerability
CVE-2026-591138.850.2MicrosoftVisual Studio CodeCWE-862Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-725388.850.1PrefectHQPrefectCWE-88PrefectHQ Prefect - Argument Injection
CVE-2026-688197.549.8MicrosoftWindows 10 Version 1607CWE-126Windows Network File System Denial of Service Vulnerability
CVE-2026-663016.549.8MicrosoftMicrosoft Dynamics 365 (on-premises) version 9.1CWE-200Microsoft Dynamics 365 (On-Premises) Information Disclosure Vulnerability
CVE-2026-629108.849.6MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-99Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-447589.149.2SAP_SESAP Manufacturing Integration and IntelligenceCWE-94Code Injection vulnerability in Manufacturing Integration and Intelligence
CVE-2026-703298.849.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Outlook Remote Code Execution Vulnerability
CVE-2026-725568.849.2ZoneMinderZoneMinderCWE-78ZoneMinder ZoneMinder - Remote Code Execution
CVE-2026-628178.849.1MicrosoftWindows 10 Version 1809CWE-787Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-725518.849.1ApiooFusioCWE-78Apioo Fusio - Remote Code Execution
CVE-2026-627908.849.0MicrosoftWindows 10 Version 1607CWE-122Windows SMBv3 Server Remote Code Execution Vulnerability
CVE-2026-628238.848.9MicrosoftWindows 10 Version 1607CWE-122Windows DHCP Server Remote Code Execution Vulnerability
CVE-2026-657697.548.9MicrosoftMicrosoft Teams for iOSCWE-200Microsoft Teams iOS Information Disclosure Vulnerability
CVE-2026-727486.948.9WWBNAVideoCWE-306AVideo Unauthenticated Arbitrary File Write via aVideoEncoderChunk.json.php
CVE-2026-5811510.048.5SiemensSIMATIC IoT2050 AdvancedCWE-306A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA0…
CVE-2026-629138.848.5MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-122Microsoft Exchange Server Remote Code Execution Vulnerability
CVE-2026-657946.548.4MicrosoftWindows 10 Version 1607CWE-126Windows SMB Client Information Disclosure Vulnerability
CVE-2026-658138.848.4MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-918Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2026-628228.847.6MicrosoftWindows 10 Version 1607CWE-190Windows GDI+ Remote Code Execution Vulnerability
CVE-2026-484138.747.4AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-628396.547.3MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-522Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-657689.847.3MicrosoftMicrosoft Teams for AndroidCWE-22Microsoft Teams Remote Code Execution Vulnerability
CVE-2026-628248.847.3MicrosoftWindows 10 Version 1607CWE-121Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-613638.147.2MicrosoftWindows 10 Version 1607CWE-122Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-591348.147.2MicrosoftWindows 10 Version 1607CWE-122Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-134577.547.2instawpInstaWP Connect – 1-click WP Staging & MigrationCWE-434InstaWP Connect <= 0.1.3.6 - Unauthenticated Cryptographic Key Disclosure
CVE-2026-483844.946.9AdobeColdFusion 2025CWE-20ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-628824.346.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-522Microsoft Outlook Spoofing Vulnerability
CVE-2026-627958.846.4MicrosoftWindows 10 Version 1607CWE-416Windows LDAP - Lightweight Directory Access Protocol Remote Code Execution Vu…
CVE-2026-703368.846.4MicrosoftVisual Studio CodeCWE-94Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-703408.846.2MicrosoftAzure CycleCloud 8.9.1CWE-862Azure CycleCloud Elevation of Privilege Vulnerability
CVE-2026-657919.846.1MicrosoftWindows 10 Version 1607CWE-122Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-549847.846.0MicrosoftWindows 10 Version 1607CWE-122Windows Imaging Component Remote Code Execution Vulnerability
CVE-2026-703268.845.5MicrosoftMicrosoft SharePoint Server Subscription EditionCWE-918Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-483819.045.2AdobeAdobe Campaign ClassicCWE-89Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements us…
CVE-2026-571055.445.1MicrosoftMicrosoft SharePoint Server 2019CWE-79Microsoft Office SharePoint Spoofing Vulnerability
CVE-2026-628198.145.0MicrosoftWindows 10 Version 1607CWE-416Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulner…
CVE-2026-658066.544.9MicrosoftAzure CycleCloud 8.9.2CWE-862Azure CycleCloud Information Disclosure Vulnerability
CVE-2026-627506.544.8MicrosoftWindows 10 Version 1607CWE-187Windows HTTP Protocol Stack Tampering Vulnerability
CVE-2026-342659.844.6SAP_SESAP NetWeaver and ABAP PlatformCWE-787Memory Corruption vulnerability in Application Server ABAP for SAP NetWeaver …
CVE-2026-656798.144.4MicrosoftWindows 10 Version 1607CWE-122Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-628898.144.0MicrosoftWindows 10 Version 1607CWE-415Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnera…
CVE-2026-1706110.043.9Dassault SystèmesSIMULIA Execution EngineCWE-502Deserialization of Untrusted Data Vulnerability in SIMULIA Execution Engine f…
CVE-2026-661459.143.9SonicWallGMSCWE-94An unauthenticated remote code execution vulnerability was identified in GMS …
CVE-2026-484408.143.8AdobeColdFusion 2025CWE-122ColdFusion | Heap-based Buffer Overflow (CWE-122)
CVE-2026-534158.343.5Zoom CommunicationsZoom ClientsCWE-416Zoom Clients - Use After Free
CVE-2026-137389.243.4CommvaultCommvault CloudCWE-863Improper Authorization Validation
CVE-2026-483978.643.4AdobeLightroom ClassicCWE-502Lightroom Classic | Deserialization of Untrusted Data (CWE-502)
CVE-2026-629005.943.3Microsoft.NET 10.0CWE-212.NET Information Disclosure Vulnerability
CVE-2026-635126.543.2MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-863Microsoft SharePoint Server Tampering Vulnerability
CVE-2026-657898.143.2MicrosoftWindows 10 Version 1607CWE-416Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-628208.143.1MicrosoftWindows 10 Version 1607CWE-362Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-727818.742.9craftcmscmsCWE-693Craft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape
CVE-2026-628728.842.9MicrosoftMicrosoft .NET Framework 3.5CWE-863.NET Framework Elevation of Privilege Vulnerability
CVE-2026-628146.542.8MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-477047.142.7baptisteArnotypebot.ioCWE-639TypeBot vulnerable to cross-typebot webhook resume via unchecked `resultId` l…
CVE-2026-484147.742.6AdobeAdobe CommerceCWE-79Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
CVE-2026-627877.542.4MicrosoftWindows 10 Version 1607CWE-416Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-657968.142.3MicrosoftWindows 10 Version 1607CWE-122Windows iSCSI Target Service Remote Code Execution Vulnerability
CVE-2026-658118.842.1MicrosoftPower BI Report ServerCWE-20Power BI Remote Code Execution Vulnerability
CVE-2026-627818.141.7MicrosoftWindows 10 Version 1607CWE-122RPC Runtime Library Remote Code Execution Vulnerability
CVE-2026-483756.541.6AdobeColdFusion 2025CWE-863ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-212738.741.3AdobeColdFusion 2025CWE-20ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-484387.541.0AdobeContent Credentials Rust SDKCWE-476CAI Content Credentials | NULL Pointer Dereference (CWE-476)
CVE-2026-484397.541.0AdobeContent Credentials Rust SDKCWE-400CAI Content Credentials | Uncontrolled Resource Consumption (CWE-400)
CVE-2026-627788.140.9MicrosoftWindows 10 Version 1607CWE-416Windows DNS Elevation of Privilege Vulnerability
CVE-2025-311149.340.7lllyasvielFooocusCWE-95Fooocus webui vulnerable to Remote Code Execution
CVE-2026-725509.840.7FriendicaFriendicaCWE-89Friendica Friendica - SQL Injection
CVE-2026-656756.540.4MicrosoftMicrosoft Visual Studio Code CoPilot Chat ExtensionCWE-862CoPilot Chat Security Feature Bypass Vulnerability
CVE-2026-162309.840.3Strategy11Formidable Digital SignaturesCWE-23Formidable Digital Signatures <= 3.0.6 - Unauthenticated Arbitrary File Delet…
CVE-2026-484167.540.2AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-726027.539.9AsyncFuncAIdeepwiki-openCWE-22AsyncFuncAI deepwiki-open - Path Traversal
CVE-2026-619206.639.5MicrosoftWindows 10 Version 1607CWE-362Windows DNS Server Remote Code Execution Vulnerability
CVE-2026-629156.539.5MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-862Microsoft Exchange Server Security Feature Bypass Vulnerability
CVE-2026-627156.539.3MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627186.539.3MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627426.539.3MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627357.839.0MicrosoftWindows 10 Version 1607CWE-122Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-212798.238.9AdobeColdFusion 2025CWE-20ColdFusion | Improper Input Validation (CWE-20)
CVE-2026-194259.338.8Win Men IntermationalTravel Agency Management SystemCWE-89Win Men Intermational｜Travel Agency Management System - SQL Injection
CVE-2026-729715.538.8MicrosoftWindows 11 version 26H1CWE-59Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerab…
CVE-2026-691098.738.7SiemensSiemens License Server (SLS)CWE-35A vulnerability has been identified in Siemens License Server (SLS) (All vers…
CVE-2026-727707.138.7n8n-ion8nCWE-22n8n before 1.123.67 Path Traversal via Git Node Operations
CVE-2016-200978.738.6Weaver Network Co., Ltd.E-cology 8.0CWE-89Weaver E-cology 8.0 SQL Injection File Read via SignatureDownLoad
CVE-2026-155657.538.5Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-120Undertow: undertow-websockets: undertow: pre-auth dos on websocket endpoint w…
CVE-2026-627146.538.4MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627166.538.4MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-627206.538.4MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-290358.338.3civetwebcivetwebCWE-787CivetWeb Heap/Stack Buffer Overflow via WebSocket permessage-deflate Decompre…
CVE-2026-703145.538.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Information Disclosure Vulnerability
CVE-2022-509978.738.1Weaver Network Co., Ltd.E-cology 9.0CWE-89Weaver E-cology 8.0 / 9.0 SQL Injection via HrmCareerApplyPerView.jsp
CVE-2026-703558.738.1MicrosoftMicrosoft SharePoint Server 2019CWE-79Microsoft SharePoint Server Elevation of Privilege Vulnerability
CVE-2026-635305.537.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-693208.837.6MicrosoftVisual Studio CodeCWE-78Visual Studio Code Remote Code Execution Vulnerability
CVE-2026-137379.237.6CommvaultCommvault CloudCWE-863Command Restriction Bypass
CVE-2026-713318.137.5MicrosoftWindows 10 Version 1809CWE-190Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-657677.637.5MicrosoftMicrosoft Teams for AndroidCWE-79Microsoft Teams for Android Spoofing Vulnerability
CVE-2026-725487.537.5OpenSignLabsOpenSignCWE-200OpenSignLabs OpenSign - Information Disclosure
CVE-2026-725437.537.3OpenSignLabsOpenSignCWE-639OpenSignLabs OpenSign - Insecure Direct Object Reference
CVE-2026-613504.637.1MicrosoftWindows 10 Version 1607CWE-126Windows NTFS Information Disclosure Vulnerability
CVE-2026-727788.737.0craftcmscmsCWE-915Craft CMS 5.0.0-RC1 before 5.10.6 Authenticated RCE via condition.config
CVE-2026-687975.537.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-649005.437.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-691029.336.6dromaraMaxKeyCWE-798MaxKey Hard-coded JWT Secret Unauthorized Access via /login/jwt/trust
CVE-2026-658078.836.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-843Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-732327.536.5ffufffufCWE-409ffuf denial of service (OOM) via HTTP response decompression bomb
CVE-2026-479224.736.5AdobeContent Credentials Rust SDKCWE-918CAI Content Credentials | Server-Side Request Forgery (SSRF) (CWE-918)
CVE-2026-656577.836.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-416Microsoft Office Remote Code Execution Vulnerability
CVE-2026-541235.536.3MicrosoftMicrosoft Defender for Endpoint for MacCWE-200Microsoft Defender for Endpoint for Mac Information Disclosure Vulnerability
CVE-2026-629174.636.3MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-20Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-730329.436.3papersgptpapersgpt-for-zoteroCWE-94PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()
CVE-2026-155677.536.1Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-789Wildfly: wildfly-iiop: wildfly-jacorb: wildfly: pre-auth denial of service on…
CVE-2026-155627.536.1Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-190Jboss-remoting: jboss-remoting: integer overflow in messagereader leads to pr…
CVE-2026-155608.135.9Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-829Openjdk-orb: unauthed class loading via iiop in eap
CVE-2026-186927.735.8MongoDBMongoDB ServerCWE-416Use-After-Free in MongoDB Timeseries Bucket Handling Leads to Denial of Servi…
CVE-2026-725527.535.7DubDubCWE-918Dub Dub - Server-Side Request Forgery
CVE-2026-613528.135.4MicrosoftWindows 10 Version 1607CWE-362Remote Desktop Client Remote Code Execution Vulnerability
CVE-2026-394526.335.4n/aIntel(R) Transfer Learning ToolCWE-693Protection mechanism failure for some Intel(R) Transfer Learning Tool before …
CVE-2026-703485.535.2MicrosoftWindows 11 Version 24H2CWE-59Windows Management Services Denial of Service Vulnerability
CVE-2026-725358.635.1ChaskiqChaskiqCWE-306Chaskiq Chaskiq - Missing Authentication
CVE-2026-725368.635.1ChaskiqChaskiqCWE-306Chaskiq Chaskiq - Missing Authentication
CVE-2026-732148.235.0coturncoturnCWE-400coturn allocates a full per-peer SSL/session before verifying the DTLS cookie…
CVE-2026-732105.135.0LookylooPlaywrightCaptureCWE-918Server-Side Request Forgery via Favicon Retrieval in Lookyloo PlaywrightCapture
CVE-2026-687987.834.9MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-703357.834.8MicrosoftVisual Studio CodeCWE-78GitHub Copilot and Visual Studio Code Elevation of Privilege Vulnerability
CVE-2026-515849.834.6n/an/aCWE-287An issue in usememos v0.27.1 allows a remote attacker to achieve account take…
CVE-2026-727126.934.5Nmap ProjectNmapCWE-835Nmap 7.99 Denial of Service via Zero-Length TCP Option Packet
CVE-2026-182475.334.5BlackBerryBlackBerry AtHoc IWSCWE-79DOM-Based Cross-Site Scripting in BlackBerry AtHoc Web Portals
CVE-2026-181277.734.3IvantiEndpoint ManagerCWE-73External control of a filename in the Core of Ivanti Endpoint Manager before …
CVE-2026-141805.334.1Red HatRed Hat build of Apache Camel for Spring Boot 4CWE-444Undertow-core: undertow:http request smuggling via oversized chunk-size bit o…
CVE-2026-693068.234.0MicrosoftVisual Studio CodeCWE-636Visual Studio Code Security Feature Bypass Vulnerability
CVE-2026-712177.534.0Red HatRed Hat Enterprise Linux 10CWE-20Iperf3: iperf3 server accepts unbounded peer-controlled json parameters enabl…
CVE-2026-648975.434.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-649025.434.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-649165.434.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-649225.434.0MicrosoftMicrosoft SharePoint Enterprise Server 2016CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-194248.733.8Inventec AppliancesChiline CloudCWE-639Inventec Appliances｜Chiline Cloud - Insecure Direct Object Reference
CVE-2026-714677.533.8Red HatRed Hat Advanced Cluster Management for Kubernetes 2CWE-287Acm-search-v2-api-rhel9: search-v2-api: authentication bypass on /federated v…
CVE-2026-626996.833.7MicrosoftWindows 10 Version 1607CWE-122Windows Universal Disk Format File System Driver (UDFS) Remote Code Execution…
CVE-2026-729209.833.7seaweedfsseaweedfsCWE-306SeaweedFS: Unauthenticated filer IAM gRPC service grants S3 administrative co…
CVE-2026-732166.533.3coturncoturnCWE-400coturn: mobility disconnects bypass allocation quotas and exhaust relay capacity
CVE-2026-586417.833.2Microsoft.NET 10.0CWE-190.NET Elevation of Privilege Vulnerability
CVE-2026-586517.833.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Word Remote Code Execution Vulnerability
CVE-2026-628867.833.3Microsoft.NET 10.0CWE-190.NET Elevation of Privilege Vulnerability
CVE-2026-649147.833.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Access Remote Code Execution Vulnerability
CVE-2026-688127.833.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688147.833.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688177.833.2MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-725338.832.6PortainerPortainer CECWE-287Portainer Portainer CE - Authentication Bypass
CVE-2026-725457.532.5OpenSignLabsOpenSignCWE-639OpenSignLabs OpenSign - Insecure Direct Object Reference
CVE-2026-628717.832.4Microsoft.NET 8.0CWE-787.NET Elevation of Privilege Vulnerability
CVE-2026-484122.732.2AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-732119.832.1ChocobozzzPeerTubeCWE-89PeerTube: Unauthenticated remote SQL injection in ActorFollowModel.updateScore()
CVE-2026-628168.832.1MicrosoftWindows 10 Version 1607CWE-122Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vu…
CVE-2026-549817.832.1MicrosoftPython extension for Visual Studio CodeCWE-829Visual Studio Code Python Extension Security Feature Bypass Vulnerability
CVE-2026-688067.832.1MicrosoftMicrosoft 365 Apps for EnterpriseCWE-787Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-47577.231.8Axis Communications ABAXIS OSCWE-732A VAPIX API parameter had improper input validation which could allow code ex…
CVE-2026-484366.531.7AdobeContent Credentials Rust SDKCWE-20CAI Content Credentials | Improper Input Validation (CWE-20)
CVE-2026-534146.531.6Zoom CommunicationsZoom ClientsCWE-126Zoom Clients - Buffer Over-read
CVE-2026-195568.831.5GoogleChromeCWE-416Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remot…
CVE-2026-195598.831.5GoogleChromeCWE-416Use after free in HTML in Google Chrome prior to 151.0.7922.137 allowed a rem…
CVE-2026-195608.831.5GoogleChromeCWE-416Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a re…
CVE-2026-727678.731.5n8n-ion8nCWE-78n8n before 1.123.67 Remote Code Execution via Git node
CVE-2026-591285.531.5MicrosoftWindows 10 Version 1607CWE-125Windows Encrypting File System (EFS) Information Disclosure Vulnerability
CVE-2026-591375.531.5MicrosoftWindows 10 Version 1607CWE-908Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-613475.531.5MicrosoftWindows 10 Version 1607CWE-126Windows Event Logging Service Information Disclosure Vulnerability
CVE-2026-613605.531.5MicrosoftWindows 10 Version 1607CWE-822Windows GDI Information Disclosure Vulnerability
CVE-2026-619335.531.5MicrosoftWindows 11 Version 24H2CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-627035.531.5MicrosoftWindows 10 Version 1809CWE-125Windows DWM Core Library Information Disclosure Vulnerability
CVE-2026-627095.531.5MicrosoftWindows 10 Version 1607CWE-908Windows GDI+ Information Disclosure Vulnerability
CVE-2026-627305.531.5MicrosoftWindows 10 Version 1607CWE-126Windows Wired AutoConfig Service Information Disclosure Vulnerability
CVE-2026-627385.531.5MicrosoftWindows 10 Version 1607CWE-125Windows Management Instrumentation Information Disclosure Vulnerability
CVE-2026-627405.531.5MicrosoftWindows 10 Version 1607CWE-908Windows Imaging Component Information Disclosure Vulnerability
CVE-2026-627435.531.5MicrosoftWindows 10 Version 1607CWE-125Win32k Information Disclosure Vulnerability
CVE-2026-627465.531.5MicrosoftWindows 10 Version 1607CWE-126Win32k Information Disclosure Vulnerability
CVE-2026-477059.631.4baptisteArnotypebot.ioCWE-1236TypeBot vulnerable to CSV injection in result export
CVE-2026-732268.831.3electermelectermCWE-913Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/fu…
CVE-2026-730809.331.2seaweedfsseaweedfsCWE-918SeaweedFS: Unauthenticated SSRF with response read-back via VolumeServer.Fetc…
CVE-2026-712185.331.1Red HatRed Hat Enterprise Linux 10CWE-789Iperf3: unbounded peer-controlled allocation in iperf3 json_read() allows una…
CVE-2026-732418.330.9FreeRDPFreeRDPCWE-287FreeRDP: RDSTLS server authentication bypass: a credential-less Capabilities …
CVE-2026-619257.830.8MicrosoftWindows 10 Version 1607CWE-863Windows Installer Elevation of Privilege Vulnerability
CVE-2026-727734.930.9n8n-ion8nCWE-22n8n before 2.32.1 Path Traversal via computer-use search_files
CVE-2026-627127.830.7MicrosoftWindows 10 Version 1607CWE-122Windows Win32k Elevation of Privilege Vulnerability
CVE-2026-627217.830.8MicrosoftWindows 10 Version 1607CWE-1220Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability
CVE-2024-140422.130.7n/aOpen5GSCWE-119Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow
CVE-2026-4805610.030.7truelockmcstreambertCWE-20Streambert Vulnerable to Arbitrary Binary Execution via Downloader IPC Handler
CVE-2026-657856.530.5MicrosoftWindows 11 Version 24H2CWE-400Windows DHCP Client Denial of Service Vulnerability
CVE-2026-635257.830.4MicrosoftMicrosoft 365 Apps for EnterpriseCWE-197Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-582365.530.4SAP_SESAP NetWeaver Application Server ABAP and ABAP PlatformCWE-78OS Command Injection vulnerability in Application Server ABAP of SAP NetWeave…
CVE-2026-703155.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-703165.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-703195.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-703205.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-703225.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-703235.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Office Information Disclosure Vulnerability
CVE-2026-703255.530.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Powerpoint Information Disclosure Vulnerability
CVE-2026-727645.830.1n8n-ion8nCWE-668n8n before 1.123.67 Module Cache Poisoning via Code Node
CVE-2026-727429.230.0Stanford NLPDSPyCWE-73DSPy 3.3.0b1 Local File Read via Image/Audio Output Field Parsing
CVE-2026-613685.530.0MicrosoftWindows 10 Version 1607CWE-122Windows Hyper-V Information Disclosure Vulnerability
CVE-2026-727658.729.8n8n-ion8nCWE-94n8n before 2.32.1 Remote Code Execution via Expression Sandbox Escape
CVE-2026-628037.829.8MicrosoftWindows 10 Version 1607CWE-59Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-628077.829.8MicrosoftWindows 10 Version 1607CWE-59Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-591365.529.7MicrosoftWindows 10 Version 1607CWE-908Microsoft COM for Windows Information Disclosure Vulnerability
CVE-2026-713849.629.4AdobeColdFusion 2025CWE-863ColdFusion | Incorrect Authorization (CWE-863)
CVE-2026-730318.229.1GramSearchtelegram-searchCWE-79telegram-search Stored XSS via v-html in MessageList.vue
CVE-2026-567218.728.8owen2345CamaleonCMSCWE-639CamaleonCMS 2.9.2 Privilege Escalation via Parameter Confusion in UsersContro…
CVE-2026-626887.828.7MicrosoftWindows 11 Version 24H2CWE-122Windows MIDI Service Module Elevation of Privileges Vulnerability
CVE-2026-626987.828.7MicrosoftWindows 10 Version 1607CWE-197Microsoft Digest Authentication Elevation of Privilege Vulnerability
CVE-2026-730887.528.8browserslistbrowserslistCWE-248Browserslist: Uncaught crash / prototype write via untrusted browserslist-sta…
CVE-2026-627456.528.7MicrosoftWindows 10 Version 1607CWE-191Windows DHCP Server Information Disclosure Vulnerability
CVE-2026-668028.128.6MicrosoftWindows 10 Version 1809CWE-362Windows Device Health Attestation (DHA) Remote Code Execution Vulnerability
CVE-2026-730897.528.7browserslistbrowserslistCWE-770Browserslist: Unbounded memory growth (no cache eviction) via distinct query …
CVE-2026-628425.528.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2026-635175.528.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2026-703185.528.7MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft Excel Information Disclosure Vulnerability
CVE-2026-703175.528.6MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Office Information Disclosure Vulnerability
CVE-2026-656567.828.3MicrosoftMicrosoft 365 Apps for EnterpriseCWE-77Microsoft Office Remote Code Execution Vulnerability
CVE-2026-628295.428.3MicrosoftMicrosoft SharePoint Server 2019CWE-79Microsoft SharePoint Server Spoofing Vulnerability
CVE-2026-730699.128.1twentyhqtwentyCWE-89Twenty: SQL Injection in the `searchVector` Field Settings Allows Arbitrary P…
CVE-2026-627617.828.1MicrosoftWindows 10 Version 1607CWE-59Windows DHCP Server Elevation of Privilege Vulnerability
CVE-2026-726007.528.1IdurarIDURAR ERP CRMCWE-284Idurar IDURAR ERP CRM - Broken Access Control
CVE-2026-726017.528.1CSZ CMSCSZ CMSCWE-284CSZ CMS CSZ CMS - Broken Access Control
CVE-2026-725495.328.1OpenSignLabsOpenSignCWE-200OpenSignLabs OpenSign - Information Disclosure
CVE-2026-635137.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-635157.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Remote Code Execution Vulnerability
CVE-2026-635187.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-635197.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-656647.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-668077.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-687947.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688047.827.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-197Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-401305.327.7SAP_SESAPSPrint ServiceCWE-121Memory Corruption vulnerability in SAPSPrint Service
CVE-2026-732428.327.6FreeRDPFreeRDPCWE-122FreeRDP: Kerberos GSS Wrap-token `EC` field is unbounded, causing an out-of-b…
CVE-2026-484157.627.5AdobeAdobe CommerceCWE-863Adobe Commerce | Incorrect Authorization (CWE-863)
CVE-2026-732467.527.3kestra-iokestraCWE-200Kestra: Unauthenticated management `/worker` endpoint exposes live task confi…
CVE-2026-186978.727.2MongoDBMongoDB ServerCWE-617Improper Input Validation in MongoDB Aggregation Framework Allows Unauthentic…
CVE-2026-155617.527.1Red HatRed Hat JBoss Enterprise Application Platform 7.4.25CWE-770Undertow-core: oom via missing limits in chunked trailer in eap's undertow
CVE-2026-635245.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-635285.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-635295.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-635315.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-648995.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Information Disclosure Vulnerability
CVE-2026-649175.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Office Word Information Disclosure Vulnerability
CVE-2026-687995.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-908Microsoft Excel Information Disclosure Vulnerability
CVE-2026-688025.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-688085.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-688135.527.0MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Information Disclosure Vulnerability
CVE-2026-243294.926.9Red HatRed Hat Fuse 7CWE-91Wildfly-core: wildfly core: denial of service via malformed payload injection…
CVE-2026-194345.126.8maalferPentestifyCWE-79Stored Cross-site Scripting in Pentestify finding severity field
CVE-2026-154268.826.8acybaAcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPressCWE-269AcyMailing <= 10.11.1 - Authenticated (Subscriber+) Missing Authorization to …
CVE-2026-187067.526.8MongoDBMongoDB ServerCWE-416Use-After-Free in MongoDB $graphLookup Aggregation Stage Leads to Denial of S…
CVE-2026-484947.126.6baptisteArnotypebot.ioCWE-639TypeBot vulnerable to cross-typebot WhatsApp preview webhook resume via globa…
CVE-2026-732195.326.7cvat-aicvatCWE-1288CVAT: Denial of service with regards to automatic annotation
CVE-2026-732445.326.6kekingcnkkFileViewCWE-22kkFileView: Unauthenticated path traversal in POST /listFiles allows arbitrar…
CVE-2026-635267.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Office Graphics Component Remote Code Execution Vulnerability
CVE-2026-635327.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Remote Code Execution Vulnerability
CVE-2026-648987.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649037.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649077.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Office Word Remote Code Execution Vulnerability
CVE-2026-649097.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-191Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649107.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-822Microsoft Office Remote Code Execution Vulnerability
CVE-2026-649117.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-190Microsoft Office Remote Code Execution Vulnerability
CVE-2026-688167.826.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-137398.826.3CommvaultCommvault CloudCWE-918Server-Side Request Forgery (SSRF)
CVE-2026-732248.826.3electermelectermCWE-78Electerm check folder size function may get attacked by unsafe folder name
CVE-2026-117341.126.3NETGEARMR70CWE-121Device administrator can interrupt the normal operation of some NETGEAR Night…
CVE-2026-725999.826.2e107e107CWE-89e107 e107 - SQL Injection
CVE-2026-591305.626.1MicrosoftWindows 10 Version 1607CWE-200AMD Zen Information Disclosure Vulnerability
CVE-2026-730788.626.0vimvimCWE-77Vim: Arbitrary Code Execution via Netrw Menu Construction
CVE-2026-628977.026.0Microsoft.NET 10.0CWE-190.NET Framework Remote Code Execution Vulnerability
CVE-2026-629145.425.9MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 23CWE-79Microsoft Exchange Server Spoofing Vulnerability
CVE-2026-613597.825.8MicrosoftWindows 11 version 23H2CWE-122Windows Storage Elevation of Privilege Vulnerability
CVE-2026-627977.825.8MicrosoftWindows 10 Version 1607CWE-122Windows NTFS Elevation of Privilege Vulnerability
CVE-2026-628117.825.8MicrosoftWindows 11 version 23H2CWE-122Windows HTTP.sys Elevation of Privilege Vulnerability
CVE-2026-725546.525.8Ladybird Web SolutionFaveo HelpdeskCWE-284Ladybird Web Solution Faveo Helpdesk - Broken Access Control
CVE-2026-627887.025.6MicrosoftWindows 11 version 23H2CWE-416Windows Kernel Elevation of Privilege Vulnerability
CVE-2026-582438.825.4SAP_SESAP ABAP Developer ToolsCWE-862Privilege Escalation vulnerability in SAP ABAP Developer Tools
CVE-2026-732157.125.4coturncoturnCWE-400The coturn server can end in a state where it does not accept more requests w…
CVE-2026-484835.425.4baptisteArnotypebot.ioCWE-918TypeBot's WhatsApp status forwarding uses unvalidated user-controlled URLs, a…
CVE-2026-731565.325.3MISPcti-transmuteCWE-79cti-transmute Sunburst and Treemap Tooltips Allow Cross-Site Scripting via Cr…
CVE-2026-725578.825.2Cockpit CMSCockpit CMSCWE-434Cockpit CMS Cockpit CMS - Unrestricted File Upload
CVE-2026-488138.724.9david-a-wheelerflawfinderCWE-74Flawfinder output manipulation via untrusted filenames and source text
CVE-2026-117331.124.9NETGEARRAX41CWE-121Buffer overflow vulnerability in some NETGEAR Nighthawk routers
CVE-2026-207028.924.8n/aIntel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivileged software adversary with an unauthenticated user combined with a low complexity attack may enable data exposure. This result may potentially occur via network access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (high) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.CWE-693Protection mechanism failure for some Intel(R) Data Center Attestation Primit…
CVE-2026-656617.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability
CVE-2026-687937.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-125Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-687957.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-121Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-687967.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688007.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688017.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-688057.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Excel Remote Code Execution Vulnerability
CVE-2026-703137.824.8MicrosoftMicrosoft 365 Apps for EnterpriseCWE-20Microsoft PowerPoint Remote Code Execution Vulnerability
CVE-2026-627696.724.8MicrosoftWindows 10 Version 1607CWE-197Windows DNS Elevation of Privilege Vulnerability
CVE-2026-628816.724.8MicrosoftWindows 10 Version 1607CWE-197Windows DNS Elevation of Privilege Vulnerability
CVE-2026-726046.524.8IntelliantsSubrion CMSCWE-22Intelliants Subrion CMS - Path Traversal
CVE-2026-701307.824.5MicrosoftMicrosoft 365 Apps for EnterpriseCWE-122Microsoft Office Remote Code Execution Vulnerability

Results continue: ranks 401–933.

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-08-11 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion. Frozen at publication; later changes appear as transactions on later editions.