CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- hcl software iemHCL IntelliOps Event Management is affected by multiple security vulnerabilities.6.4 Medium
- flowintelFlowintel Missing Task-to-Case Authorization Allows Cross-Case Task Modification7.2 High
- flowintelFlowintel Stored XSS in Calendar via Malicious Case Title5.1 Medium
- suse wickedwicked: out-of-bounds read in the DHCPv4 option parser due to payload length taken from the IP total length5.3 Medium
- suse wickedwicked: integer underflow of the UDP length in ni_capture_inspect_udp_header() leads to an out-of-bounds read5.3 Medium
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad8.8 High
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad8.8 High
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- flowintelFlowintel Stored XSS in Case Notes via Malicious Mermaid Diagram Content5.1 Medium
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
stack_dstcrates.ioPanic-safety unsoundness in `Stack::pop`, `Fifo::pop_front` and `Value::replace_stable` (use-after-free / double-free)No score- flowintelFlowintel Arbitrary Log File Path Allows Remote Code Execution via Template Injection7.5 High
- siemens element maps-ng v47, element maps-ng v48, element maps-ng v49 +2 moreA vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component…7.0 High
- toools isquadMultiple Vulnerabilities in TOOOLS' iSquad9.3 Critical
- alexgladkov claude-in-mobileAlexGladkov claude-in-mobile client.ts execSync os command injection4.8 Medium
- red hat satellite 6, satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreRubygem-katello: cross-tenant content view filter rule access and modification via unauthorized parent filter lookup5.4 Medium
- softtr informatics technology trading limited company e-commerce packHTML Injection in Softtr's E-Commerce Pack4.3 Medium
- summit security systems adisyonproIDOR in Zirve Security's AdisyonPro6.5 Medium
- unknown ctn720-w1, lf-1541, mt7620n +13 more +15 moreZbtlink MQWrt infosrvd Command Injection9.3 Critical
- morequick mqac-7620, mqac-7620a, mqap-7620 +12 more +14 moreZbtlink MQWrt yunmgrd Cloud C2 Implant9.3 Critical
- blackms aistackblackms aistack Static File server.ts path traversal6.9 Medium
- flowintelFlowintel Alert Settings Configuration Allows Remote Code Execution via Arbitrary Configuration Keys8.6 High
- theforeman foreman, red hat satellite 6.16 for rhel 8, satellite 6.16 for rhel 9 +3 more +5 moreForeman: cross-tenant disclosure of template revisions via unauthorized audit lookup6.5 Medium
- opensslUse-After-Free in X.509 Extension Cache Under Concurrent Use7.5 High
- red hat ceph storage 4, ceph storage 6, ceph storage 7 +8 more +10 moreLibtiff: libtiff: heap-buffer overflow via numeric truncation in the jpeg raw passthrough6.1 Medium
- flowintelFlowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing7.1 High
- apache apisixApache APISIX: Cross-user response poisoning in serverless plugins7.0 High
- apache apisixApache APISIX: Unauthenticated CPU-exhaustion DoS8.7 High
- apache apisixApache APISIX: ldap-auth plugin cross-subtree identity impersonation7.0 High
- greenbone os, openvas-scanner +1 moreStack buffer overflow in Greenbone OS and openvas-scanner8.7 High
- villatheme suggestion engine for woocommerceWordPress Suggestion Engine for WooCommerce plugin <= 2.0.11 - SQL Injection vulnerability8.5 High
- wp chill kali formsWordPress Kali Forms plugin <= 2.4.23 - Broken Access Control vulnerability5.3 Medium
- metaphorcreations dittyWordPress Ditty plugin <= 3.1.67 - Broken Access Control vulnerability5.3 Medium
- wp manage ninja fluentbooking proWordPress FluentBooking Pro plugin <= 2.2.4 - Cross Site Request Forgery (CSRF) vulnerability8.1 High
- wp manage ninja fluentplayer proWordPress FluentPlayer Pro plugin <= 1.3.2 - Broken Access Control vulnerability4.9 Medium
- paolo geodirectoryWordPress GeoDirectory plugin <= 2.8.176 - Cross Site Request Forgery (CSRF) vulnerability8.8 High
- brainstorm force surefeedback client siteWordPress SureFeedback Client Site plugin <= 1.2.12 - Sensitive Data Exposure vulnerability7.5 High
- axew3 wp w3all phpbbWordPress WP w3all phpBB plugin <= 3.0.6 - Cross Site Scripting (XSS) vulnerability7.1 High
- hashthemes hash formWordPress Hash Form plugin <= 1.4.1 - PHP Object Injection vulnerability9.8 Critical
- loftocean cozystayWordPress CozyStay theme <= 1.10.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- jonathan de jong beautiful taxonomy filtersWordPress Beautiful Taxonomy Filters plugin <= 2.4.6 - SQL Injection vulnerability9.3 Critical
- infinitum form geo controllerWordPress Geo Controller plugin <= 8.9.8 - PHP Object Injection vulnerability9.8 Critical
- likebtn like button ratingWordPress Like Button Rating plugin <= 2.6.61 - SQL Injection vulnerability8.5 High
- codepeople music player for woocommerceWordPress Music Player for WooCommerce plugin <= 1.8.9 - Cross Site Scripting (XSS) vulnerability7.1 High
- codepeople cp media playerWordPress CP Media Player plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability7.1 High
- wp manage ninja fluent boards proWordPress Fluent Boards Pro plugin <= 2.0.11 - PHP Object Injection vulnerability7.2 High
- wp manage ninja fluent boards proWordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Deletion vulnerability6.8 Medium
- wp manage ninja fluent boards proWordPress Fluent Boards Pro plugin <= 2.0.11 - Arbitrary File Upload vulnerability9.1 Critical
- wp manage ninja fluent boards proWordPress Fluent Boards Pro plugin <= 2.0.11 - Cross Site Scripting (XSS) vulnerability6.5 Medium
- Show moreLoading…