CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- eazsolution eazyfixEAZ EazyFix 12.9 allows a Security Feature Bypass related to a "Missing Cryptographic Step"...6.0 Medium
- silverstripe silverstripe-userformsSilverstripe UserForms: Remote code execution via userforms email subject8.8 High
- triliumnext triliumTrilium: RCE via `shareTemplate` relation missing `isDangerous` flag — Safe import bypass leading to EJS SSTI (Incomplete Fix of CVE-2026-45668)8.6 High
- woylie doggoDoggo vulnerable to cross-site scripting via unescaped date field values5.3 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreLog4j2 AmqpAppender disables TLS hostname verification by default6.8 Medium
- lutzroeder netronReflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names...6.8 Medium
- lutzroeder netronReflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names...6.8 Medium
- lutzroeder netronReflected XSS in Netron versions <=9.1.2 on desktop application through unsanitized node names...6.8 Medium
- grafana clickhouse datasourceCVE-2026-19854 CVE Record6.1 Medium
- gitlab, gitlab ai gateway +1 moreServer-Side Request Forgery (SSRF) in GitLab AI Gateway8.2 High
- gitlab ai gatewayServer-Side Request Forgery (SSRF) in GitLab AI Gateway8.2 High
els-os-releaseTuxCareUpdate of els-os-releaseNo score- red hat build of apache camel - hawtio 4, build of apache camel for spring boot 4, data grid 8 +13 more +15 moreUndertow-core: undertow: denial of service via websocket permessage-deflate processing7.5 High
- red hat enterprise linux 10, enterprise linux 10.0 extended update support, enterprise linux 6 +13 more +15 moreRsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function7.5 High
- mongodb bi connectorMongoDB Connector for BI mongodrdl Logs TLS Private-Key Password When Duplicate Options Are Supplied4.1 Medium
- mongodb bi connectorMongoDB BI Connector Improper Memory Handling During Failed Kerberos Authentication May Cause Process Termination8.2 High
- adobe substance 3d sampler, substance 3d painter +1 moreSubstance3D - Sampler | Heap-based Buffer Overflow (CWE-122)7.8 High
- craftcms cmsAuthenticated RCE through Twig sandbox escape8.7 High
- bytedance ui-tars-desktopUI-TARS-desktop @agent-infra MCP Servers Bind Every Interface Without Authentication, Exposing Arbitrary Command Execution10.0 Critical
- nltkNLTK before 3.10.3 Hardlink File Overwrite via downloader6.9 Medium
- nltkNLTK through 3.10.3 Path Traversal via Model-Artifact APIs8.3 High
- nltkNLTK before 3.10.3 Regular Expression Denial of Service via Pl196xCorpusReader6.3 Medium
- nltkNLTK before 3.10.3 Denial of Service via Uncontrolled Recursion6.9 Medium
- nltkNLTK before 3.10.3 Quadratic CPU Exhaustion via XMLCorpusView6.3 Medium
- nltknltk PorterStemmer before 3.10.3 Quadratic-time DoS8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via KDF8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via Unbounded Argon26.9 Medium
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Remote Code Execution via Plugin9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Weak Cryptographic Parameters8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Integrity Bypass via Added Files9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Plugin Sandbox Path Traversal8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Credential Exposure via Debug Output8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Plugin Signing Trust Anchor Enrollment Bypass9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Key Substitution via Identity Shadowing9.3 Critical
- jahlives openssl encryptopenssl-encrypt before 1.4.9 Password Cleartext Leak via Debug8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Weak Key Derivation via D-Bus8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Authentication Bypass via Unencrypted PQC Key8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Key Substitution via Identity Load9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Arbitrary Code Execution via unsigned plugin9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 GPG Signature Verification Bypass9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via unbounded KDF cost8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Shell Injection via info command9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 KDF Downgrade via CWD-relative Configuration8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Terminal Injection via info Command9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Terminal Injection via key_id9.3 Critical
- jahlives openssl encryptopenssl-encrypt before 1.4.9 Output Injection via Unsanitized Filenames in verify-usb Command9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via QR total field8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Denial of Service via STREAMINFO8.7 High
- jahlives openssl encryptopenssl_encrypt before 1.4.9 Credential Leakage via Unvalidated Server URLs8.7 High
- Show moreLoading…