CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- No product listedThe device metadata import interface /device/instance/{productId}/property-metadata/import of...9.1 Critical
- No product listeddisconf (Distributed Configuration Management Platform) 2.6.36 is vulnerable to Incorrect Access...9.8 Critical
- No product listedFuniture 1.0.0 is vulnerable to SQL Injection in the backend tool interfaces /sys/tool/select...9.8 Critical
- No product listedThe report module in the backend of smart-web2 v1.3.1 is vulnerable to arbitrary SQL execution....9.8 Critical
- No product listedyx-image-recognition v1.0 is vulnerable to Path Traversal. Parameters such as dir, filePath are...7.5 High
- No product listedZyplayer-Doc <=1.0.0 is vulnerable to Server-Side Request Forgery (SSRF) via WikiPageWebService...9.1 Critical
- No product listedtamguo 1.5.3 is vulnerable to Unrestricted File Upload Leading to Stored XSS. The /uploadFile and...4.6 Medium
- No product listedThe front-end interface /superdiamond/preview/{projectCode}/{module}/{type} of super-diamond...9.8 Critical
nettyUbuntuThe Netty configuration distribution service (port 8283) of super-diamond-server <= 1.3.3 has no...9.8 Critical- No product listedIn DocSys-master V2.02.85, the downloadDocEx interface in src/com/DocSystem/controller...7.5 High
- No product listedIn DocSys-master V2.02.85, the uploadMarkdownPic interface in src/com/DocSystem/controller...9.8 Critical
- No product listedDWSurvey v6.14.0 is is vulnerable to authentication bypass via the '/api/dwsurvey/none/' and '...9.8 Critical
- No product listedThe front-end interface /cms/category/list of MCMS <=6.2.0 is vulnerable to SQL injection. The...9.8 Critical
openexrAlpaquita,python-OpenEXRopenSUSE +1 morelibIex-3_4-33-3.4.14-1.1 on GA mediaNo score- calcprogrammer1 openrgbArbitrary file overwrite and deletion local and remote in OpenRGB8.8 High
- No product listedAn issue in Wgcloud 3.6.4 allows a remote attacker to escalate privileges via the content...4.3 Medium
- No product listedA zero-click remote code execution (RCE) vulnerability in the /Terminal/Notification.hs component...9.8 Critical
- No product listedAn issue in TokTok qTox v1.18.4 allows a local attacker to cause a denial of service via the src...9.3 Critical
cockpitUbuntuCross Site Scripting vulnerability in Cockpit CMS v.2.13.5 and before allows a remote attacker to...6.1 Medium- No product listedPath traversal vulnerability in UnPoller 2.33.0 password field allows arbitrary file read and...7.5 High
stomperUbuntuIn Stomper 5e2741e when a client sends a SEND frame missing the destination header field, the...7.5 HighstomperUbuntuStomper 5e2741e is vulnerable to Use-After-Free. When a client sends multiple CONNECT frames on...9.8 CriticalstomperUbuntuStomper 5e2741e is vulnerable to Use-After-Free. When a single client repeatedly issues SUBSCRIBE...7.5 HighstomperUbuntuStomper 5e2741e is vulnerable to Denial of Service. When a broker sends data to a client whose...7.5 HighstomperUbuntustomper 5e2741e is vulnerable to Denial of Service. A malicious client can send partial STOMP...7.5 High- No product listedA Broken Access Control vulnerability exists in ThingsBoard Professional Edition (PE) 4.21 and...6.5 Medium
u-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists...9.8 Criticalu-bootDebian,u-boot-nezhaUbuntu +1 moreAn issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the...9.8 Critical- No product listedAn issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a...7.5 High
- No product listedAn issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a...7.5 High
- No product listedAn issue in Vanderbilt Industries, Acre Security SPC5300.000 Main Board v.3.14.1 allows a...7.5 High
- No product listedAn arbitrary file upload vulnerability in the /v1/my_drive/batch_upload component of cohere North...9.8 Critical
- No product listedCohere North AI v1.1.5 was discovered to contain an information leak via the WebSocket Endpoint.7.5 High
- No product listedCohere North AI v1.1.5 was discovered to contain excessively permissive cross-domain policy with...9.8 Critical
- No product listedIncorrect access control in Cohere North AI v1.1.5 allows attackers to arbitrarily overwrite user...7.5 High
limeUbuntuCross-Site Request Forgery (CSRF) vulnerability in Lime Technology, Inc.'s Unraid OS version 6.12...8.8 High- No product listedAn issue was discovered in openRISC OR1200 commit 83ac6b. A mismatch between the RTL and netlist...9.1 Critical
- No product listedAn issue was discovered in openRISC OR1200 commit 83ac6b. An inaccurate update of program counter...7.5 High
- No product listedCTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.7.1 High
birdUbuntuBird Home Automation GmbH D1101V-F 000140 is vulnerable to Incorrect Access Control via the Key...9.8 Critical- No product listedAn issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges...8.8 High
- No product listedAn issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges...8.8 High
- No product listedAn issue was discovered in LibreNMS 1.65. A remote authenticated attacker with normal privileges...8.8 High
- oscal-compass compliance-trestleTrestle is vulnerable to arbitrary file write via path traversal in author generate commands (Incomplete fix of CVE-2026-46345)7.7 High
- kimaiKimai before 2.63.0 Team Membership Removal via API8.7 High
- kimaiKimai before 2.64.0 Missing Authorization via ProjectViewController export8.7 High
- kimaiKimai before 2.62.0 Authorization Bypass via QuickEntry8.7 High
- @better-auth ssobetter-auth SSO before 1.6.27 Domain Ownership Authentication Bypass8.6 High
- growi, inc. growiGROWI before 8.0.2 Missing Authorization on Attachment Retrieval for Unauthenticated Requests8.7 High
- perber leafwikiLeafWiki 0.10.0 through 0.12.0 Uncontrolled Resource Consumption via Unbounded ZIP Extraction7.1 High
- Show moreLoading…