CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- kyvernoKyverno: NamespacedGeneratingPolicy generator.apply() namespace argument unvalidated -- background controller creates RoleBindings in any namespace including kube-system9.6 Critical
- siemens kaskas: Persistent SSH Host Key Checking Disablement3.3 Low
- jowilf starlette-adminStarlette-Admin: Unvalidated `order_by` parameter allows ordering by hidden columns (info-exposure oracle) and HTTP 500 DoS5.4 Medium
- http4s, org.http4s http4s-ember-core 2.12, http4s-ember-core 2.13 +1 more +3 moreHttp4s: HTTP/2 Denial of Service with Ember Backend8.2 High
- zephyrproject zephyrOut-of-bounds read in PTP management TLV TIME parsing in Zephyr net PTP5.4 Medium
- zephyrproject zephyrOut-of-bounds read in LoRaWAN fragmented data block transport (FUOTA) downlink handler3.1 Low
- zephyrproject zephyrOut-of-bounds read in LoRaWAN clock-sync AppTimeAns downlink handler3.1 Low
- tubitak bilgem software technologies research institute liderahenkBlind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk7.5 High
- gitlabLoop with Unreachable Exit Condition ('Infinite Loop') in GitLab6.5 Medium
- gitlabAuthentication Bypass Using an Alternate Path or Channel in GitLab5.5 Medium
- gitlabAccess Control Check Implemented After Asset is Accessed in GitLab3.5 Low
- gitlabAcceptance of Extraneous Untrusted Data With Trusted Data in GitLab4.3 Medium
- gitlabInclusion of Functionality from Untrusted Control Sphere in GitLab7.3 High
- gitlabAllocation of Resources Without Limits or Throttling in GitLab6.5 Medium
- tubitak bilgem software technologies research institute liderahenkUse of Hard-coded LDAP Credentials in TÜBİTAK BİLGEM's Liderahenk9.1 Critical
- gimp, red hat enterprise linux 6, enterprise linux 7 +2 more +4 moreGimp: stack vla size underflow denial of service in seattle5.5 Medium
- strategy11 formidable chartsFormidable Charts <= 2.0.1 - Unauthenticated Arbitrary File Read via 'frm_graph' Parameter7.5 High
- rently smart homeInsufficiently Protected Credentials in Rently Smart Home8.7 High
- rustdeskRustDesk < 1.4.7 Uncontrolled Memory Allocation DoS via BytesCodec8.7 High
- rustdeskRustDesk Path Traversal via macOS Clipboard File-Paste6.9 Medium
- google cloud bigquery data transfer serviceRemote Code Execution in BigQuery Data Transfer Service via JDBC Connection String Injection9.4 Critical
- openzfsOpenZFS: user-namespace capability check allows unprivileged local authorization bypass7.3 High
- resamania virtuagymEmbedded credentials in Virtuagym8.6 High
- gnome diaDia: dia: stack buffer overflow in bus object via unvalidated handle count in project files7.8 High
lockfreecrates.ioDouble free in `Map::into_iter` and an uninitialized `Arc` in `SharedIncin::clear`No scoreapimockcrates.io,apimock-servercrates.io +1 morePath traversal in apimock's file-serving fallback8.2 High- radiustheme classified listing - mobile number verificationClassified Listing - Mobile Number Verification <= 1.6.0 - Unauthenticated Authentication Bypass via Firebase OTP Login8.1 High
- apache apisixApache APISIX: attach-consumer-label does not strip client-supplied consumer-label headers5.3 Medium
kubernetesSUSESecurity update for kubernetesNo scorekubernetes-oldSUSESecurity update for kubernetes-oldNo scorerootlesskitSUSESecurity update for rootlesskitNo score- peterschulznl wp data access – app builder for tables, forms, charts, maps & dashboardsWP Data Access – No-Code App Builder with Tables, Forms, Charts & Maps <= 5.5.68 - Unauthenticated Insecure Direct Object Reference to Data Access5.3 Medium
- wedevs erp: complete hr, accounting & crm suite built for woocommerceERP: Complete HR, Accounting & CRM Suite Built for WooCommerce <= 1.17.8 - Unauthenticated Arbitrary File Upload via CRM Email Connect IMAP Attachment9.8 Critical
- wpsoul greenshift – animation and page builder blocksGreenshift <= 12.8.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Data URI6.4 Medium
dockerSUSESecurity update for dockerNo scorebuildahSUSESecurity update for buildahNo score- ubiquiti inc edgemax edgeswitchA malicious actor with access to an adjacent network could exploit a Buffer Overflow...8.8 High
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network could exploit an Improper Access Control...9.8 Critical
- ubiquiti inc unifi talk applicationA malicious actor with access to the network could exploit an Improper Input Validation...10.0 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Access...9.9 Critical
- ubiquiti inc unifi enterprise audio/video bridgeA malicious actor with access to the network could exploit an Improper Input Validation...9.8 Critical
- ubiquiti inc unifi connect display cast proA malicious actor with access to the network and under certain conditions could exploit an...9.0 Critical
- @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 moreA malicious actor with access to the network could exploit an Improper Neutralization of CRLF...10.0 Critical
- @clerk express, ubiquiti inc cloud gateways, cloud keys +11 more +13 moreA malicious actor with access to the network and under certain conditions could exploit an...9.0 Critical
- nltkNLTK 3.10.2 Regular Expression Denial of Service via tgrep8.2 High
- nltkNLTK before 3.10.0 ReDoS via Text.findall() unvalidated regex8.7 High
- getgrav gravGrav before 1.0.18 Authentication Bypass via Scoped API Key9.3 Critical
- getgrav gravGrav before 1.0.18 Authentication Bypass via Scoped API Key9.3 Critical
- ubiquiti inc unifi protect applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- ubiquiti inc unifi access applicationA malicious actor with access to the network and low privileges could exploit an Improper Input...9.9 Critical
- Show moreLoading…