CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- microsoft azure sql databaseAzure SQL Database Elevation of Privilege Vulnerability10.0 Critical
- zanllp infinite-image-browsingInfinite Image Browsing Resolves Paths With normpath, Allowing Symlink Escape From Scanned Directories8.7 High
- zanllp infinite-image-browsingInfinite Image Browsing is_path_trusted Prefix Comparison Omits the Trailing Path Separator8.7 High
- paperclipai paperclipPaperclip before 0.3.1 Remote Code Execution via DNS Rebinding9.4 Critical
- internationalcolorconsortium iccdeviccDEV: CIccEmbedIO::Read8() size_t underflow6.5 Medium
- lxc incusArbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root9.9 Critical
- lxc incusIncus vulnerable to root RCE via image backup.yaml symlink9.9 Critical
- lxc incusIncus: Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge9.9 Critical
- lxc incusIncus has a project restriction bypass via instance migration config override9.9 Critical
- lxc incusIncus has an argument injection in storage volume block.create_options that leads to arbitrary command execution9.9 Critical
- lxc incusIncus: Project restriction `restricted.containers.privilege=isolated` bypassable by omitting `security.idmap.isolated`4.3 Medium
- lxc incusIncus has a project restriction bypass in instance copy across projects7.7 High
- lxc incusIncus has a project restriction bypass for custom volume copy across projects7.7 High
- dji air 3, air 3s, avata 2 +13 more +15 moreCleartext Exposure of DJI Drone Wi-Fi Credentials via BLE9.4 Critical
- n-able passportalPassPortal browser extension: vault token disclosure via unvalidated postMessage6.9 Medium
- hp inc omen gaming hubOMEN Gaming Hub – Potential Escalation of Privilege & Information Disclosure8.2 High
- spipSPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as...9.8 Critical
- apache cloudstackApache CloudStack: DoS caused by database connections leak6.8 Medium
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Unauthenticated stored XSS via user-controlled fields in Zoo < 4.1.668.6 High
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Unauthenticated arbitrary directory listing via the Gallery element in Zoo < 4.1.666.9 Medium
- yootheme.com yootheme pro extension for joomlaJoomla Extension - yootheme.com - Authenticated, privileged arbitrary file read in YOOtheme Pro 2.3.0-5.0.407.0 High
- yootheme.com yootheme pro extension for joomlaJoomla Extension - yootheme.com - Authenticated, privileged SQL injection in YOOtheme Pro 1.0.0-5.0.408.6 High
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Reflected XSS and open redirect via the submission redirect parameter in Zoo < 4.1.665.3 Medium
- roskus prospero flow crmUnvalidated bank account and card foreign keys in the Prospero Flow CRM transaction save endpoint allow cross-tenant disclosure of banking identifiers5.3 Medium
- yootheme.com zoo extension for joomlaJoomla Extension - yootheme.com - Missing CSRF tokens on front-end state changes in Zoo < 4.1.664.6 Medium
- spring ai, vmware spring ai +1 moreDefaultToolCallingManager Global Resolver Fallback Allows Unadvertised Tool Dispatch via Prompt Injection6.5 Medium
- spring ai, vmware spring ai +1 moreSemantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation4.2 Medium
- spring ai, vmware spring ai +1 moreUnbounded persistent session allocation via repeated initialize requests7.5 High
- profilepress membership team profilepressProfilePress < 4.17.1 - Unauthenticated Arbitrary Shortcode Execution via Display Name6.5 Medium
- unknown limit login attempts securityLimit Login Attempts Reloaded < 3.3.5 - Username Denylist Bypass via Case Variant and Account Email3.7 Low
- unknown passsterContent Protector (Passster) < 4.3.9 - Unauthenticated Protected Content Disclosure via REST Path Allowlist Bypass5.3 Medium
- syed balkhi charitableCharitable < 1.8.12 - Unauthenticated Donation Payment-Status Manipulation via Square Webhook Signature Bypass5.3 Medium
- saad iqbal mycredmyCred < 3.2.5 - Unauthenticated Payment Bypass via Missing PayPal IPN Receiver Verification in buyCRED5.3 Medium
- unknown litextensionLitExtension: Store to WooCommerce Migration <= 1.2.5 - Connector Token Takeover via CSRF4.2 Medium
- arraytics eventinEventin < 4.1.21 - Contributor+ Server-Side Request Forgery2.7 Low
- roskus prospero flow crmIDOR and missing authorization in the Prospero Flow CRM transaction API allow cross-tenant reading of financial records8.7 High
- headroom labs headroomHeadroom Proxy Treats the Client-Supplied x-headroom-user-id Header as an Authenticated Identity9.3 Critical
- headroom labs headroomHeadroom Proxy Sends Upstream Requests to a Client-Supplied Base URL Without Address Validation7.7 High
- checkmk gmbh checkmkAgent receiver accepts mTLS requests without a client certificate6.9 Medium
- openpanel-dev openpanelOpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries7.1 High
- openpanel-dev openpanelOpenPanel report.get Returns Any Report by Identifier Without Checking Project Access7.1 High
- reconmapReconmap Report Preview Endpoint Is Marked AllowAnonymous, Exposing Every Project and Client Organisation Without Authentication8.7 High
- juicedata juicefsJuiceFS Local Filestore Backend Joins Object Keys onto the Storage Root Without a Containment Check, Allowing Writes Outside the Configured Directory7.1 High
- siyuan-note siyuanSiYuan before v3.7.4 Path Traversal via packageName9.4 Critical
- dolibarrDolibarr Account card.php improper authorization5.3 Medium
- remote utilities pte. ltd. utilities hostLocal Privilege Escalation via Insecure DLL Permissions in Remote Utilities Host <=7.7.3.07.3 High
- spring micrometerMicrometer StatsD and Logging meter registries line-protocol and log injection vulnerability5.9 Medium
- comfast cf-n1-sComfast CF-N1-S mbox-config system command injection9.4 Critical
- ruby resolvAn issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder...4.0 Medium
- ruby resolvAn issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,...7.5 High
- Show moreLoading…