CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- linuxsched/psi: Shut down rtpoll_timer in psi_cgroup_free()7.8 High
- linuxsched_ext: Take cgroup_lock() first in scx_cgroup_lock()5.6 Medium
- linuxima: Instantiate file_truncate and path_truncate hooks8.1 High
- linuxmm/filemap: __filemap_add_folio() restore index before retrying9.8 Critical
- linuxfsverity: Fix bpf_get_fsverity_digest() dynptr assumptions7.8 High
- linuxbpf, sockmap: Fix sk_redir use-after-free in send verdict8.4 High
- linuxsctp: keep chunk->transport in step with the list it is queued on9.8 Critical
- linuxsctp: fix use-after-free of cached ASCONF chunk9.8 Critical
- linuxsctp: clear new_transport when removing a peer9.8 Critical
- linuxthunderbolt: Bound the DROM dual link port number before indexing sw->ports7.0 High
- westguard ws form lite – drag & drop contact form builderWS Form LITE <= 1.10.80 - Unauthenticated PHP Object Injection via Form Submission9.8 Critical
epiphanyopenSUSE,epiphany-browserDebian +1 moreepiphany-51.1-1.1 on GA mediaNo score- linuxRDMA/bnxt_re: zero shared page before exposing to userspace7.1 High
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated stored XSS in Fabrik < 4.7.28.6 High
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated SQL injection in ORDER BY in Fabrik < 4.7.29.3 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated row disclosure via form.inlineedit in Fabrik < 4.7.26.9 Medium
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated SQL injection in list filter condition parameter in Fabrik < 4.7.29.3 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated arbitrary file upload to web root via list email plugin in Fabrik < 4.7.28.7 High
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated arbitrary directory listing via onAjax_getFolders in Fabrik < 4.7.28.7 High
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated table truncation via list.doempty in Fabrik < 4.7.28.7 High
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - heredoc terminator breakout in the calc element in Fabrik < 4.7.29.5 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated deletion of any comment in Fabrik < 4.7.26.9 Medium
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.210.0 Critical
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated modification of any comment in Fabrik < 4.7.26.9 Medium
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated disclosure of any commenter's email address in Fabrik < 4.7.26.9 Medium
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated database table list and table-prefix disclosure in Fabrik < 4.7.28.7 High
- fabrikar.com fabrik extension for joomlaJoomla Extension - fabrikar.com - Unauthenticated row reordering in Fabrik < 4.7.26.9 Medium
- nltkNLTK before 3.9.4 Symlink Escape via CorpusReader8.6 High
- hashcathashcat through 7.1.2 Heap Buffer Overflow in outfile_write() via Oversized Username6.9 Medium
- hashcathashcat through 7.1.2 Off-by-One Out-of-Bounds Heap Write in fgetl()6.9 Medium
- hashcathashcat through 7.1.2 Arbitrary File Write via Restore File Option Injection8.5 High
- nltkNLTK before 3.10.0 Arbitrary File Read via FileSystemPathPointer7.1 High
- nltkNLTK StreamBackedCorpusView Bypasses pathsec.ENFORCE Arbitrary File Read8.7 High
- nltkNLTK before 3.10.0 SSRF via DNS Resolution Failure6.9 Medium
- nltkNLTK before 3.10.0 Insecure Default Configuration in pathsec.py8.7 High
- nltkNLTK 3.9.4 Path Traversal via FrameNet and NKJP Readers8.2 High
- nltkNLTK FramenetCorpusReader Symlink Sandbox Bypass before 3.10.28.7 High
- nltknltk IPIPANCorpusReader Symlink Arbitrary File Read6.8 Medium
- No product listedPunk::OAuth2::Server versions through 0.03 for Perl issue access tokens outside a client's registered scopes and grant types because no authorization path reads them9.1 Critical
- No product listedPunk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret9.1 Critical
- nltkNLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass2.0 Low
- nltkNLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass8.7 High
- wp chill image photo gallery final tiles gridImage Photo Gallery Final Tiles Grid <= 3.6.12 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'delay' Shortcode Attribute6.4 Medium
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.9 - Authenticated (Contributor+) Theme Settings Modification via 'gspb_update_global_wp_settings'4.3 Medium
- dvankooten mc4wp: mailchimp for wordpressMC4WP: Mailchimp for WordPress <= 4.12.0 - Authenticated (Author+) Stored Cross-Site Scripting via Form Response Messages6.4 Medium
- maartenbelmans advanced product fields (product addons) for woocommerceAdvanced Product Fields (Product Addons) for WooCommerce <= 1.6.21 - Unauthenticated Improper Input Validation to Price Bypass via Add-to-Cart POST Request7.5 High
- metaphor creations post duplicatorPost Duplicator <= 3.0.11 - Missing Authorization to Authenticated (Contributor+) Post Duplication with Arbitrary Author Attribution4.3 Medium
- Show moreLoading…