CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise7.3 High
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) in Splunk Web Tours in Splunk Enterprise5.7 Medium
- splunk, splunk enterprise +1 moreSPL Risky Command Safeguards Bypass through the Job Details Dashboard in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Dashboard Studio Search Query Options in Splunk Enterprise6.7 Medium
- splunk, splunk enterprise +1 moreSPL Injection through Nearby Event Searches in Splunk Enterprise7.3 High
- splunk, splunk enterprise +1 moreSPL Injection through Cross-Site Request Forgery (CSRF) in the Event Type Builder in Splunk Web for Splunk Enterprise5.9 Medium
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through Federated Search in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreStored Cross-Site Scripting (XSS) through Splunk Web in Splunk Enterprise5.7 Medium
- splunk, splunk enterprise +1 morePath Traversal through the Lookup Configuration REST API in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreStored SPL Injection through Deployment Server Broker Registration in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreCode Injection through Splunk Web Manager Configuration in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through Splunk Web Manager Configuration in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreRemote Code Execution (RCE) through the REST API in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreImproper Access Control through Embedded Reports in Splunk Enterprise9.4 Critical
- splunk, splunk enterprise +1 moreImproper Access Control in Embedded Report Dispatch Archives in Splunk Enterprise9.4 Critical
- splunk, splunk enterprise +1 moreImproper Access Control through Embedded Report REST API Requests in Splunk Enterprise9.4 Critical
- splunk, splunk enterprise +1 moreStructured Query Language (SQL) Injection through the REST API in Splunk Enterprise4.3 Medium
- splunk, splunk enterprise +1 moreImproper Access Control through the REST API in Splunk Enterprise5.4 Medium
- splunk, splunk enterprise +1 moreExposure of Sensitive Information to an Unauthorized Actor through the REST API in Splunk Enterprise7.5 High
- splunk, splunk enterprise, secure gateway +2 moreInsecure Default Access Control List through the REST API in Splunk Secure Gateway5.3 Medium
- splunk, splunk enterprise +1 moreIncorrect Permission Assignment for Critical Resource through the REST API in Splunk Enterprise6.5 Medium
- splunk, splunk enterprise +1 moreImproper Privilege Management on the Management Port in Splunk Enterprise for Windows8.8 High
- splunk, splunk enterprise, secure gateway +2 moreUse of Hard-coded Cryptographic Key through Companion App Registration in Splunk Secure Gateway6.5 Medium
- splunk, splunk enterprise, secure gateway +2 moreMissing Authorization through REST API Endpoints in Splunk Secure Gateway6.5 Medium
- splunk, splunk enterprise, secure gateway +2 moreInformation Exposure through REST API Endpoints in Splunk Secure Gateway4.3 Medium
- splunk, splunk enterprise +1 moreRisky Command Safeguards Bypass through Splunk Web in Splunk Enterprise6.4 Medium
- splunk, splunk enterprise +1 moreSPL Command Safeguards Bypass through Splunk Web in Splunk Enterprise7.5 High
- splunk, splunk enterprise +1 morePrivilege Escalation through Scheduled Search Alert Action Configuration in Splunk Enterprise8.8 High
- splunk, splunk enterprise +1 moreCross-Site Scripting (XSS) through Splunk Web Message Validation in Splunk Enterprise6.8 Medium
- splunk, splunk enterprise +1 moreMissing Authorization through REST API Endpoints in the Splunk App for Splunk Observability Cloud7.1 High
- tinacms next-tinacms-azure, next-tinacms-cloudinary, next-tinacms-dos +2 more +4 moreTina: Broken Access Control: arbitrary bucket-key write/delete in `next-tinacms-s3` (and sibling production media adapters)5.4 Medium
- trendnet tew-755apTRENDnet TEW-755AP mycli FUN_401000 stack-based overflow9.4 Critical
- ibm ds8900f (r9.4), ds8900f firmware, ds8a00 (r10.0 - r10.1) +1 more +3 moreDS8900F and DS8A00 Authentication Bypass7.4 High
- ibm ds8900f ( r9.4), ds8900f firmware, ds8a00( r10.0 - r10.1 ) +1 more +3 moreDS8900F and DS8A00 Privilege Escalation7.5 High
- ibm ds8900f (r9.4), ds8900f firmware, ds8a00 (r10.0 - r10.1) +1 more +3 moreDS8900F and DS8A00 Information Disclosure5.4 Medium
- microsoft windows app for mac, windows app +1 moreWindows App for Mac Information Disclosure Vulnerability6.5 Medium
- hashicorp go-slugUnicode normalization mismatch in go-slug ignore pattern matching may bypass intended file exclusions5.5 Medium
- tanium findingsTanium addressed a compression bomb vulnerability in Findings.3.1 Low
- tanium threat responseTanium addressed a compression bomb vulnerability in Threat Response.3.1 Low
- ibm reliable scalable cluster technology (rsct), reliable scalable cluster technology +1 moreReliable Scalable Cluster Technology Denial-of-Service6.5 Medium
- nettyNetty: SNI Routing Bypass via Fragmented TLS ClientHello Causing Fallback to Default SslContext9.1 Critical
- trendnet tv-ip751wicTRENDnet TV-IP751WIC alphapd set_time.cgi stack-based overflow9.4 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Telephony Service Elevation of Privilege Vulnerability7.0 High
- nettyNetty: Fragmented ClientHello records trigger quadratic pre-handshake reassembly in default SNI parsing8.7 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreSearch-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)6.8 Medium
- harttle liquidjsLiquidJS: Uncontrolled Resource Consumption in `join` filter allows template authors to bypass `memoryLimit` and crash the process7.5 High
- harttle liquidjsLiquidJS: An infinite loop vulnerability in `strip_html` filter8.7 High
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreAcm-operator-bundle: acm-operator-bundle: bundle build execs unpinned stolostron/release@master with full build credentials8.0 High
- red hat multicluster engine for kubernetes 2.10, multicluster engine for kubernetes 2.11, multicluster engine for kubernetes 2.17 +3 more +5 moreMce-operator-bundle: all github actions pinned by mutable tag, not commit sha7.7 High
- trendnet tv-ip751wicTRENDnet TV-IP751WIC alphapd set_time.cgi command injection5.3 Medium
- Show moreLoading…