CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- git-for-windows gitGit for Windows: Server-advertised bundle-uri can trigger outbound SMB callbacks via UNC and file:// paths on Windows7.4 High
- combodo itopCombodo iTop: Weak secret generation for inline image7.5 High
- combodo itopCombodo iTop: Version disclosure via login page logo5.3 Medium
- combodo itopCombodo iTop: User enumeration via password reset7.5 High
- puemos craftplanCraftplan < 0.5.1 Broken Access Control Information Disclosure via Settings API8.2 High
- aws athena federated query neptune connectorCode Injection via Gremlin Query Passthrough in Amazon Athena Neptune Connector9.4 Critical
- combodo itopCombodo iTop: Insecured access to uploaded images via sniffed url7.5 High
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Unauthenticated file upload with missing directory protection in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.56.9 Medium
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Stored XSS in Guest checkout in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.58.6 High
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Download quota manipulation in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.55.3 Medium
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Open redirect in cart controller in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.55.1 Medium
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Order content disclosure J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.58.7 High
- j2commerce.com j2store extension for joomlaJoomla Extension - j2commerce.com - Cross-customer order replication in J2Store 1.0.0-3.3.20, 4.0.0-4.0.20, 4.1.0-4.1.56.3 Medium
- getgrav gravGrav before 2.0.20 Cross-Site Scripting via Assets Sandbox5.1 Medium
- veracryptVeraCrypt: Hidden volume quick format weakens plausible deniability4.6 Medium
- veracryptVeraCryp: wolfCrypt backend bypasses VeraCrypt PBKDF2 iteration count (non-default WOLFCRYPT=1 builds)6.2 Medium
- tyrrrz discordchatexporterDiscordChatExporter: HTML attribute injection via unescaped emoji name in HTML export4.1 Medium
- tyrrrz discordchatexporterDiscordChatExporter: Stored XSS in HTML export when markdown formatting is disabled8.2 High
- element-hq element-webElement Web: A malicious homeserver can inject HTML in Element Web using its homepage5.3 Medium
- dromara ruoyi-vue-plusDromara RuoYi-Vue-Plus Workflow Endpoint TestLeaveController improper authorization5.3 Medium
- unleashUnleash: Global Mustache.escape override disables HTML escaping process-wide, enabling Slack/Teams link-injection via unrestricted username4.1 Medium
- unleashUnleash: Unauthenticated single-request DoS via OpenAPI validation error formatter7.5 High
- unleashUnleash: Addon webhook URL is dialed server-side with no internal-address filtering, enabling SSRF to internal services / cloud metadata and exfiltration of configured request headers5.5 Medium
- bluewave-labs checkmateCheckmate: Sensitive Bearer Token Exposure via Public Status Pages When showURL Setting is Enabled7.5 High
- bluewave-labs checkmateCheckmate: Regular Expression Denial of Service (ReDoS) via User-Controlled Regex in Monitor Advanced Matching4.9 Medium
- bluewave-labs checkmateCheckmate: Pre-auth Denial of Service via File Upload on Registration7.5 High
- johnson controls simplex incident manager / autocall fire administratorSimplex Incident Manager Clear Test6.9 Medium
- infracostInfracost: Arbitrary file read via config-template readFile symlink traversal5.9 Medium
- amazon freertos, freertos freertos-kernel +1 moreMissing type validation in xQueueAddToSet in FreeRTOS-Kernel8.2 High
- infracostInfracost: Terraform Cloud and registry token disclosure via unvalidated hostname5.9 Medium
- omnigent-ai omnigentOmnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools8.8 High
- amazon freertos, freertos freertos-kernel +1 moreMissing size validation in SecureContext_AllocateContext in FreeRTOS-Kernel8.3 High
- omnigent-ai omnigentOmnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE9.0 Critical
- omnigent-ai omnigentOmnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE8.8 High
- omnigent-ai omnigentOmnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py7.1 High
- amazon freertos, freertos freertos-kernel +1 moreMissing privilege check in SecureContext_FreeContext in FreeRTOS-Kernel8.3 High
- amazon freertos, freertos freertos-kernel +1 moreImproper input validation in FreeRTOS-Kernel timer command handling9.3 Critical
- tclahr uacUAC < 3.3.0 Command Injection via User Substitution in parse_artifact.sh8.5 High
- tclahr uacUAC < 3.3.0 Command Injection via command_collector.sh8.5 High
- tclahr uacUAC < 3.3.0 Command Injection via run_command.sh8.5 High
- tp-link systems inc. tl-mr6400 v7.0Unauthenticated Denial of Service via Composed HTTP Parsing and Stack-Based Out-of-Bounds Write Vulnerability in TL-MR6400 Web Management Interface7.1 High
- tp-link systems inc. tl-mr6400 v7.0Unauthenticated Denial of Service via Null Pointer Dereference in HTTP Request Parsing7.1 High
- tp-link systems inc. tl-mr6400 v7.0Authenticated Remote Code Execution via Stack-Based Buffer Overflow in Firmware Update Handling8.5 High
- linuxnet/sched: cls_route: fix fastmap use-after-free on filter7.8 High
- linuxpacket: use consistent hard_header_len in non-ring send paths7.8 High
- linuxnet: ipv6: clear suppressed fib6 rule result9.8 Critical
- volcengine openvikingOpenViking < 0.3.4 SSRF via /api/v1/resources8.3 High
- jet admin adminJet Admin Stored XSS8.5 High
- jet admin adminJet Admin tenant isolation failure9.2 Critical
- brushfire online experienceBrushfire unauthenticated information disclosure6.9 Medium
- Show moreLoading…