CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via switch_lan_gvrp8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via poe_schedule_profile8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via sysreboot8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via webBackupAction8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Buffer Overflow via pingtrace8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Missing Authorization in Syslog Functions8.8 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Path Traversal via getSyslogFile6.9 Medium
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via tftp_upgrade8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via setTime8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via setDevProto8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via fdftDevice8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via rebDevice8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via setDevice8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via getDetail8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via getVid8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via auth_set8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Pre-Authentication NULL Pointer Dereference via setget.cgi8.7 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models Pre-Authentication OS Command Injection via setget.cgi9.3 Critical
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models NULL Pointer Dereference via formlogout6.9 Medium
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via sysreboot8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via webBackupAction8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via pingtrace8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via commandTable8.6 High
- draytek corporation vigorswitch fx2120, vigorswitch g1280, vigorswitch g1282 +25 more +27 moreDrayTek VigorSwitch Multiple Models OS Command Injection via jsonstatus8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models Pre-Authentication OS Command Injection via dray_apm9.3 Critical
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via upload_settings.cgi8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models Buffer Overflow via apautotest8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models Buffer Overflow via setLan8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via apautotest8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via InquierTime8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via mesh_start_speed_test8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via setcamset8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via setLan8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via ExportSettings8.6 High
- draytek corporation vigorap 1060c, vigorap 903, vigorap 906 +3 more +5 moreDrayTek VigorAP Multiple Models OS Command Injection via tr069TestInform8.6 High
- apache alluraApache Allura: Unauthenticated REST disclosure5.3 Medium
- google nest, nest wifi point firmware, nest wifi pro firmware +1 more +3 moreMultiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker...10.0 Critical
- google androidUse-After-Free vulnerability in a zircon kernel pager proxy (Fuchsia), which could lead to a...8.8 High
- tp-link systems inc. deco xe75 v3 / xe5300 v3.6/ we10800 v3.6Hard-coded Mesh Group Private Key in TP-Link Deco XE75, XE5300, and WE108007.7 High
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: integer overflow in pcx loader (planes=4) leads to heap overflow on 32-bit7.0 High
- apache camelApache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes9.8 Critical
- apache camelApache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injection9.8 Critical
- apache camelApache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy5.3 Medium
- apache camelApache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by…7.5 High
- apache camelApache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreNetworkmanager: networkmanager: 802-1x ca-path and phase2-ca-path bypass private_user restriction, allowing wpa-enterprise server validation bypass (incomplete fix for cve-2025-9615)7.1 High
- apache camelApache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir9.1 Critical
- rconfigrConfig Core 8.0.0 < 8.2.10 Unauthorized Admin Registration via web.php9.3 Critical
- apache camelApache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir5.5 Medium
- apache camelApache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled6.5 Medium
- Show moreLoading…