CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- microsoft azure managed instance for apache cassandraAzure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability10.0 Critical
- microsoft fabricMicrosoft Fabric Elevation of Privilege Vulnerability9.9 Critical
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.1 High
- microsoft office, word, 365 apps for enterprise +10 more +12 moreMicrosoft Word Information Disclosure Vulnerability6.5 Medium
- mauriceboe trekTREK: Blind SSRF via unvalidated redirect-following in Google/Naver list import and Maps URL resolution5.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.3 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.5 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS5.5 Medium
- microsoft remote help, windows remote help +1 moreMicrosoft Remote Help Denial of Service Vulnerability5.5 Medium
- microsoft remote help, windows remote help +1 moreWindows Remote Help Defense Spoofing Vulnerability7.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.7 Medium
- mauriceboe trekTREK: Stored cross-user HTML injection via trip title in the Journey suggestion banner2.0 Low
- microsoft entra id, entra +1 moreMicrosoft Entra ID Elevation of Privilege Vulnerability9.9 Critical
- microsoft entra id, entra +1 moreMicrosoft Entra ID Remote Code Execution Vulnerability10.0 Critical
- microsoft azure stack hciAzure Stack HCI Information Disclosure Vulnerability8.6 High
- microsoft azure sql databaseAzure SQL Database Elevation of Privilege Vulnerability9.9 Critical
- microsoft exchange online, microsoft exchange online +1 moreMicrosoft Exchange Online Elevation of Privilege Vulnerability10.0 Critical
- microsoft azure data factoryAzure Data Factory Elevation of Privilege Vulnerability9.3 Critical
- kovah linkaceLinkAce vulnerable to stored XSS via 'javascript:' URI in Bulk Link API7.3 High
- bigbluebuttonBigBlueButton: IDOR on BBB through /api/graphql via POST parameter "presentationId" leads to Authentication Bypass4.9 Medium
- bigbluebuttonBigBlueButton: Stored XSS in Screenshare Recording Playback via Unescaped Meeting Name5.4 Medium
- decolua 9router9router Server-Side Request Forgery via /api/provider-nodes/validate Because the IPv4-Mapped IPv6 Denylist Check Is Unreachable6.3 Medium
- bigbluebuttonBigBlueButton: Unauthenticated Session Hijack via Exposed /bigbluebutton/api/handleJoinExistingUser7.1 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.8 High
- bigbluebuttonBigBlueButton: Blind SQL Injection AUTH (Moderator)8.5 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS6.7 Medium
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.2 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.8 High
- capstone-engine capstoneCapstone SH disassembler `set_reg_n` heap buffer overflow via crafted SH2A FPU bytecode7.3 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS7.8 High
- ibm aix, powervm vios, vios +2 moreVulnerabilities in IBM AIX and PowerVM VIOS8.8 High
- capstone-engine capstoneCapstone SH disassembler `sh_disassemble` out-of-bounds read via crafted SH2A bytecode6.8 Medium
- axllent mailpitMailpit: WebSocket origin check bypass via percent-encoded path (regression of CVE-2026-22689)6.5 Medium
- xapian xapian-coreA cross-site scripting vulnerability in queryparser/termgenerator_internal.cc in Xapian xapian...4.4 Medium
- apple containerAn attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend…7.5 High
- torproject tortor before 0.4.9.9 was prone to an out-of-bounds write when parsing a consensus or detached...7.5 High
- axllent mailpitMailpit: SMTP DATA line reader buffers over-limit input before size enforcement5.3 Medium
- axllent mailpitMailpit: SMTP command parser buffers unbounded command lines before syntax rejection5.3 Medium
- centuran consulting otrs community editionOTRS Community Edition OS Command Injection via PGP Configuration8.6 High
- mtrudel banditHTTP/2 header field values containing CR, LF or NUL are passed to the application unvalidated in Bandit6.9 Medium
- mtrudel banditHTTP/2 connection-window starvation pins Plug processes indefinitely in Bandit8.7 High
- axllent mailpitMailpit: Thumbnail generation decodes unbounded image dimensions before scaling5.3 Medium
- torproject tortor before 0.4.9.9 was prone to a NULL write after free when sending a CONFLUX_SWITCH cell fails....6.5 Medium
- dicebearDiceBear: SVG injection via the unescaped rotate option in @dicebear/core (and fontSize/fontWeight in @dicebear/initials)4.7 Medium
- libvipslibvips: A well-crafted PPM image processed via a custom source could lead to possible heap buffer write overflow5.8 Medium
- Show moreLoading…