CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting5.3 Medium
- chirpmyradio chirpchirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. This occurs in...7.8 High
- sourcecodester class and exam timetabling systemSourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting5.3 Medium
mod-auth-openidcOSS-FuzzGlobal-buffer-overflow in oidc_cfg_redirect_urls_allowed_getNo score- alexta69 metubealexta69 MeTube Cookie File cookies.txt file access6.9 Medium
- webtoffee woocommerce pdf invoices, packing slips, delivery notes & shipping labelsWebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels <= 4.9.8 - Authenticated (Subscriber+) Arbitrary File Read via 'customer_note' Parameter6.5 Medium
- buildwps ppwp – password protect pagesPPWP – Password Protect Pages <= 1.9.18 - Authenticated (Contributor+) PHP Object Injection via post_protection_roles8.8 High
- marc4 security hardenerSecurity Hardener <= 2.4.4 - Authenticated (Subscriber+) Privilege Escalation via REST API '/wp/v2/users' permission_callback Overwrite8.8 High
- comfast cf-n1-sComfast CF-N1-S Web Management mbox-config sub_41AD7C stack-based overflow9.4 Critical
- tecnativa docker-socket-proxydocker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems8.3 High
- systerel s2opcSysterel S2OPC AddNodes Service sopc_node_mgt_helper_internal.c out-of-bounds6.3 Medium
- zephyrproject zephyrInfineon Airoc Wi-Fi driver leaks TX buffers on send failure, leading to permanent pool exhaustion5.3 Medium
- linuxgpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock7.8 High
- linuxsched_ext: Skip sub-disable teardown for never-linked sub-schedulers7.8 High
- linuxNFS: Pin the 'struct nfs_server' during a FREE_STATEID call9.8 Critical
- linuxsoc: aspeed: lpc-snoop: Fix usercopy overflow in snoop_file_readNo score
- linuxxfs: handle NULL b_addr in xfs_buf_freeNo score
- linuxovpn: skip rehash for peers already removed from by_id9.8 Critical
- linuxbonding: alb: re-check primary_is_promisc under RTNL in bond_alb_monitor7.3 High
- linuxenic: fix tx_hang_reset use-after-free on device removal7.8 High
- linuxipvs: avoid out-of-bounds write in ip_vs_nat_icmp7.8 High
- linuxbtrfs: lzo: reject inline extents without valid headers9.8 Critical
- linuxbtrfs: fix memory leak in btrfs_do_encoded_write()No score
- linuxaccel/amxdna: Fix page-insertion errors in amdxdna_insert_pages()7.8 High
- linuxbpf: Preserve pointer state for commuted arithmetic7.8 High
- linuxnet/smc: fix qentry overwrite for CONFIRM_LINK and ADD_LINK_CONT in smc_llc_event_handler()8.2 High
- linuxdevlink: fix net namespace reference leak in reload6.7 Medium
- linuxnet/mlx5: fw_tracer, return NULL on create error7.5 High
- linuxaccel/amdxdna: Fix locally exploitable BUG_ON in amdxdna_insert_pages()6.8 Medium
- linuxbpf: Fix netns reference imbalance in conntrack kfuncs7.8 High
- linuxbpf: tcp: Fix use-after-free in bpf_iter_tcp_established_batch()7.8 High
- linuxvhost_iotlb: bound map allocation in add_range7.1 High
- linuxvdpa/mlx5: Fix buffer length in create_direct_keys()9.3 Critical
- linuxhwmon: (pmbus) Fix type confusion in notification logic8.4 High
- linuxxsk: require at least 16 bytes of TX metadata7.8 High
- linuxxsk: clear metadata pointer when no timestamp is requested2.0 Low
- linuxxsk: validate launch-time metadata size7.8 High
- linuxxsk: validate metadata when processing requests7.8 High
- linuxbnge: Fix NULL pointer dereference in aux device releaseNo score
- linuxudp: fix potential use-after-free in tunnel segmentation10.0 Critical
- linuxnet/sched: sch_cake: drop WARN_ON(1) for malformed packets in ACK filter8.2 High
- linuxvhost-scsi: Validate T10 PI scatterlist counts7.1 High
- linuxvhost-scsi: reject feature changes after endpoint8.8 High
- linuxnet/openvswitch: check Ethernet header length in key_extract()7.8 High
- linuxnet/sched: cls_api: Always acquire rtnl_lock when destroying locked classifiers7.8 High
- linuxdrm/xe: Fix memory leak in exec_queue_set_hang_replay_state()6.8 Medium
- linuxnet/mlx5e: fix BQL reset on SQ re-activation6.7 Medium
- linuxbnxt_en: Disable EOP for TPA on all chips to prevent data corruption8.2 High
- linuxtcp: fix TFO max_qlen accounting across reuseport migration7.5 High
- linuxnetfilter: nf_flow_table: drop existing skb dst before skb_dst_set_noref()7.5 High
- Show moreLoading…