CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- mongodb php driver, php extension, php library +2 moreCross-tenant database retargeting via dot/NUL injection in namespace strings in the PHP Driver8.6 High
- mongodb c driverCross-tenant database retargeting via dot/NUL injection in namespace strings in the C Driver5.3 Medium
- mongodb libmongocryptCross-tenant database retargeting via dot/NUL injection in namespace strings in libmongocrypt2.0 Low
- mongodb c++ driver, c\+\+ driver +1 moreCross-tenant database retargeting via dot/NUL injection in namespace strings in the C++ Driver8.6 High
- mongodb go driverCross-database write retargeting via unvalidated dotted database name in Client.BulkWrite in the MongoDB Go Driver7.1 High
- spring integration, vmware spring integration +1 morefluxTransform shared RequestMessageHolder causes cross-message header leakage under async fluxFunction8.2 High
- spring integration, vmware spring integration +1 moreEmbeddedHeadersJsonMessageMapper default gives wire peer full control of MessageHeaders6.3 Medium
- spring integration, vmware spring integration +1 moreShared JSR-223 ScriptEngine evaluated concurrently without THREADING check4.2 Medium
- spring amqp, vmware spring advanced message queuing protocol +1 moreIn Spring AMQP the link credit never replenished on listener exception path6.5 Medium
- spring ai, vmware spring ai +1 moreRediSearch Tag Injection in RedisChatMemoryRepository Allows Cross-Conversation Data Exposure4.3 Medium
- spring for apache kafka, vmware spring for apache kafka +1 moreIn Spring for Apache Kafka, missing header validation in DeadLetterPublishingRecovererFactory enables denial of service via a poison-pill loop6.5 Medium
- broadcom spring authorization server, spring authorization server +1 moreSpring Authorization Server Default Consent Page is vulnerable to Cross-Site Scripting (XSS)8.2 High
- spring cloud config, vmware spring cloud config +1 moreSpring Cloud Config Monitor Denial of Service5.3 Medium
- spring framework, vmware spring framework +1 moreSpring Framework response splitting in ContentDisposition3.7 Low
- spring integration, vmware spring integration +1 moreFixed predictable /tmp/ziptransformer work directory enables symlink pre-creation6.8 Medium
- spring cloud stream, vmware spring cloud stream +1 morePotential for deserialization of untrusted types in Spring Cloud Stream3.1 Low
- spring framework, vmware spring framework +1 moreServer Sent Event stream corruption in Spring MVC functional web framework9.8 Critical
- spring integration, vmware spring integration +1 moreDeserialization allow-list silently bypassed: setBeanClassLoader replaces deserializer but mapper keeps stale reference8.0 High
- spring cloud stream, vmware spring cloud stream +1 morePartition interceptor may be improperly added while sending message3.1 Low
- spring cloud stream, vmware spring cloud stream +1 moreImproper caching of the original content type in Spring Cloud Stream Avro3.1 Low
- spring cloud stream, vmware spring cloud stream +1 moreDynamic destination cache size is not properly bound in Spring Cloud Stream3.1 Low
- spring cloud stream, vmware spring cloud function +1 morePotential for logging sensitive data in Spring Cloud Stream3.1 Low
- spring cloud function, vmware spring cloud function +1 morePotential for logging sensitive data in Spring Cloud Function Azure3.1 Low
- spring cloud function, vmware spring cloud function +1 morePotential for logging sensitive data in Spring Cloud Function AWS3.1 Low
- spring cloud function, vmware spring cloud function +1 moreComposition lookup can potentially poison base function in Spring Cloud Function3.1 Low
- spring cloud function, vmware spring cloud function +1 morePotential for improper filtering of HTTP headers in Spring Cloud Function3.1 Low
- spring cloud function, vmware spring cloud function +1 moreSpring Cloud Function can incorrectly determine if URI is secure3.1 Low
- spring ai, vmware spring ai +1 moreArbitrary File Write via Path Traversal in ResourceCacheService5.9 Medium
- spring integration, vmware spring integration +1 moreSMB minimum protocol dialect defaults to SMB16.6 Medium
- spring integration, vmware spring integration +1 moreWorld-readable metadata file in PropertiesPersistingMetadataStore (insecure temp-file permissions)3.2 Low
- spring cloud function, vmware spring cloud function +1 morePotential arbitrary file read and SSRF vulnerability in Spring Cloud Function2.0 Low
- spring for graphql, vmware spring for graphql +1 moreSpring for GraphQL WebSocket Client Denial of Service5.9 Medium
- spring for graphql, vmware spring for graphql +1 moreSpring for GraphQL Unsafe Deserialization in pagination support8.1 High
- broadcom spring cloud commons, spring cloud commons +1 moreSpring Cloud Commons no allow list for writable env actuator endpoint6.6 Medium
- spring framework, vmware spring framework +1 moreSpring Framework Safety Guard Bypass via SpEL Expression Compilation9.1 Critical
- spring framework, vmware spring framework +1 moreSpring Framework Denial of Service via Unbounded List Growth in Data Binding7.5 High
- spring security, vmware spring security +1 moreSpring Security InetAddressMatchers Incomplete Internal Network Classification3.7 Low
- spring security, vmware spring security +1 moreTiming Attack via Non-Constant-Time Comparison of Sensitive Values5.9 Medium
- unitree robotics g1 eduUnitree G1 EDU 1.5.2 BLE GATT RCE via WiFi Provisioning Stack7.7 High
- unitree robotics g1 eduUnitree G1 EDU 1.5.2 Unauthenticated RCE via DDS Bridge and Path Traversal8.7 High
- limesurveyLimeSurvey Community Edition 7.0.5 - Improper authorization in survey menu entry creation endpoint5.1 Medium
- triliumnext triliumTrilium: Malicious import with GeoMap marker title XSS leads to RCE on the desktop client9.3 Critical
- crossplane crossplane-runtimecrossplane crossplane-runtime ImageConfig client.go Get toctou6.9 Medium
- grafana alloyCVE-2026-75889 CVE Record7.7 High
- elwerene libreoffice-convertlibreoffice-convert: path traversal / arbitrary file write6.5 Medium
- silverstripe silverstripe-advancedworkflowSilverstripe Advanced Workflow: Remote code execution via advanced workflow email template7.2 High
- cc-tweakedCC: Tweaked: Incomplete fix for GHSA-5jh9-2h63-pw4q: RFC 8215 NAT64 prefix (64:ff9b:1::/96) bypasses SSRF protection6.9 Medium
- dangerblack n8n-node-sqlite3n8n-nodes-sqlite3: Path traversal via user-controlled database file path (db_path parameter)6.1 Medium
- themeum tutor lmsTutor LMS < 4.0.6 - Unauthenticated Arbitrary Zero-Argument Function Invocation via Template Variable Shadowing9.8 Critical
- cakephp queueCakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisions3.7 Low
- Show moreLoading…