CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- spring data jpa, vmware spring data jpa +1 moreSpring Data JPA Sort expression validation bypass4.8 Medium
- gnome diaDia: dia: heap buffer overflow in wpg colormap parser via out-of-bounds palette index7.8 High
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...8.8 High
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Authorization Bypass Through User...6.5 Medium
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Certificate Validation...5.9 Medium
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently...5.3 Medium
- hclsoftware travelerAn input reflection vulnerability affects HCL Traveler3.5 Low
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain an Improper Neutralization of Special...8.8 High
- dell powerprotect oneDell PowerProtect One, versions 20.1.0.0 and below, contain a Stack-based Buffer Overflow...7.5 High
- dell cloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain a Server-Side Request Forgery ...4.3 Medium
- dell cloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of...7.2 High
- dell cloud disaster recoveryDell Cloud Disaster Recovery, versions 20.2 and prior, contain an Improper Neutralization of...9.1 Critical
- dell idrac9Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains...5.9 Medium
devcode-it/openstamanagerPackagistOpenSTAManager has HTML Injection in modules/utenti/edit.php3.5 Low- google cloud vertex ai search for commerceBucket Squatting in Vertex AI Search for Commerce9.3 Critical
- librenmsLibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data7.1 High
- andyyyy64 whichllmwhichllm < 0.5.16 Code Injection via run and snippet commands8.6 High
- tp-link systems inc. ep10, ep25 v2, ep40a +17 more +19 moreInsufficient Cryptographic Protections in Local Device Communication Protocol on Multiple TP-Link Kasa Smart Home Devices8.7 High
- drupal slick carousel, slick carousel project carousel +1 moreSlick Carousel - Moderately critical - Cross Site Scripting - SA-CONTRIB-2026-1176.1 Medium
- drupal monster menus, monster menus project menus +1 moreMonster Menus - Moderately critical - Cross-site Scripting - SA-CONTRIB-2026-1166.1 Medium
- drupal ldap / active directory integration, miniorange ldap \/ active directory integration +1 moreLDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-1155.3 Medium
- drupal entity pdf, entity pdf project pdf +1 moreEntity PDF - Moderately critical - Access bypass - SA-CONTRIB-2026-1145.4 Medium
- drupal entity api, entity api project api +1 moreEntity API - Moderately critical - Information disclosure - SA-CONTRIB-2026-1135.3 Medium
- drupal dxpr builder: the best editing (ai) experience for drupal, dxpr builder project builder +1 moreDXPR Builder: The AI Visual Page Builder for Drupal - Moderately critical - Information Disclosure - SA-CONTRIB-2026-1125.3 Medium
- drupal disable login pageDisable Login Page - Moderately critical - Access bypass - SA-CONTRIB-2026-1114.1 Medium
- drupal digital signage frameworkDigital Signage Framework - Moderately critical - Access bypass - SA-CONTRIB-2026-1095.3 Medium
- data field project field, drupal data field +1 moreData field - Moderately critical - Information disclosure - SA-CONTRIB-2026-1085.3 Medium
- content moderation notifications project moderation notifications, drupal content moderation notifications +1 moreContent Moderation Notifications - Moderately critical - Access bypass - SA-CONTRIB-2026-1073.3 Low
- centarro commerce cybersourceCommerce CyberSource - Moderately critical - Insufficient input validation - SA-CONTRIB-2026-1063.7 Low
- captcha protected page project protected page, drupal captcha protected page +1 moreCAPTCHA Protected Page - Moderately critical - Cookie Forgery - SA-CONTRIB-2026-1053.7 Low
- blazy project blazyBlazy - Less critical - Access bypass - SA-CONTRIB-2026-1045.3 Medium
- address suggestion project suggestion, drupal address suggestion +1 moreAddress Suggestion - Moderately critical - Cross-site scripting - SA-CONTRIB-2026-1034.8 Medium
- spring security, vmware spring security +1 moreWebAuthn User Verification Bypass via Session Serialization7.4 High
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Monitor Endpoint Does Not Validate Webhook Requests6.8 Medium
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Server Susceptible To TOCTOU Attack When Using SVN7.2 High
- stalwartlabs stalwartStalwart Mail Server through 0.16.19 Authorization Code Disclosure via Unvalidated OAuth redirect_uri8.5 High
- midday-ai middayMidday Missing Owner Check on Team Deletion7.2 High
- gravitl netmakerNetmaker through 1.6.0 Improper Certificate Validation in SMTP Client8.3 High
- automatischAutomatisch through 0.15.0 User Enumeration via Forgot-Password Response Discrepancy6.9 Medium
- slackhq nebulaNebulaGraph through 3.8.0 Unauthenticated Read and Modification of Runtime Configuration9.3 Critical
- idurar idurar-erp-crmIDURAR ERP CRM through 4.1.1 Account Takeover via Unverified Identifier on Password Update8.6 High
- mage-aiMage AI through 0.9.79 Arbitrary File Read via Unvalidated Path in browser_items Endpoint7.1 High
- open-metadata openmetadataOpenMetadata before 2.0.0 JWT Disclosure via Unvalidated SAML and OIDC Redirect URI8.5 High
- zlmediakitZLMediaKit downloadFile Root-Directory Confinement Bypass via Prefix Collision6.9 Medium
- songquanpeng one-apione-api through 0.6.10 Missing Authorization on URL-Parameter Channel Pinning8.4 High
- ilias-elearning e.v. iliasILIAS PHP Object Injection via Shibboleth Logout9.3 Critical
- nfriedly bestzipbestzip before 2.2.6 and 3.0.x before 3.0.2 Argument Injection via Missing Option Delimiter8.6 High
- voxel51 fiftyoneFiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description7.0 High
- nagios enterprises xi, nagios enterprises, llc. core, open source nagios core +2 moreNagios Core / XI CSRF via cmd.cgi Double-Submit Cookie6.9 Medium
- nagios enterprises, llc. core, open source nagios core +1 moreNagios Core CSRF via cmd.cgi6.9 Medium
- Show moreLoading…