CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- adobe dimensionWatchGuard Dimension Web UI Authentication Brute-Force Due to Missing Rate Limiting6.3 Medium
- adobe dimensionDimension Stored XSS via Trusted CA Certificate Configuration4.8 Medium
- adobe dimensionWatchGuard Dimension Reflected DOM-Based XSS in Report Detail Page4.6 Medium
- adobe dimensionDimension SQL Injection in Log Viewer8.6 High
- adobe dimensionDimension SQL Injection in Scheduled Report8.6 High
- adobe dimensionDimension CSRF Vulnerability in Administrator Passphrase Change Endpoint8.4 High
- adobe dimensionDimension Server-Side Request Forgery via Email Server Test Settings5.1 Medium
- adobe dimensionDimension Server-Side Request Forgery via Remote Backup Connection Test5.3 Medium
- adobe dimensionDimension Log Server Configuration Lock Bypass Vulnerability5.1 Medium
- adobe dimensionDimension Stored XSS in Scheduled Report Task5.1 Medium
- adobe dimensionDimension Business Logic Flaw Allows Chained Backend Object Operations6.9 Medium
- adobe dimensionDimension SQL Injection in Audit Report8.6 High
- adobe dimensionDimension Blind SSRF via Database Test Connection Feature5.1 Medium
- adobe dimensionDimension SSRF via FTP Server Test Connection5.1 Medium
- adobe dimensionWatchGuard Dimension Session Hijack via Exposed Session Tokens in Diagnostic Logs9.3 Critical
- adobe dimensionDimension Denial-of-Service8.7 High
- wazuhWazuh cluster worker file sync allows arbitrary file write under /var/ossec (incomplete fix for CVE-2026-30893)9.1 Critical
- watchguard fireware osFireware OS Integer Underflow in Iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Pre-Authentication Out-of-Bounds Read in iked Allows Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Pre-Authentication Type Confusion in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Integer Underflow in iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Stack-Based Buffer Overflow in iked Allows Unauthenticated Denial of Service8.7 High
- watchguard fireware osFireware OS Out-of-Bounds Read in iked Allows Unauthenticated Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Authenticated Buffer Overflow in wgagent8.6 High
- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Pre-Authentication Double Free in iked Allows Denial of Service (DoS)8.7 High
- watchguard fireware osFireware OS Pre-Authentication Heap Buffer Overflow in iked Allows Remote Code Execution9.3 Critical
- watchguard fireware osFireware OS Stack-Based Buffer Overflow in Mobile Security epm Endpoint9.3 Critical
- wazuhWazuh: RBAC permission-effect check in mask_sensitive_config allows low-privilege users to read cluster.key7.0 High
- wazuhWazuh agent enrollment NULL pointer dereference via malformed manager response5.3 Medium
- google chromeOut of bounds read in V8 in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...8.8 High
- watchguard fireware osFireware OS Heap-Based Buffer Overflow in iked Allows Denial of Service6.9 Medium
- wazuhWazuh: Missing input validation in multiple active response scripts allows argument injection7.1 High
- wazuhWazuh: Path traversal in ip-customblock active response allows arbitrary file creation and deletion8.1 High
- yhirose cpp-httplibcpp-httplib: Use-after-free of TLS session in WebSocketClient::shutdown_and_close()8.2 High
- cyberchitta scrapling-fetch-mcpcyberchitta scrapling-fetch-mcp _fetcher.py s_fetch_pattern server-side request forgery5.1 Medium
- silabs.com sisdkRAIL 802.15.4 Mux missing ACK can lead to DoS6.0 Medium
- yhirose cpp-httplibcpp-httplib: CRLF injection via unvalidated HTTP trailer headers in chunked response writing5.3 Medium
- maa-ai maamcpMAA-AI MaaMCP pipeline_tools.py load_pipeline path traversal5.1 Medium
- silicon labs bt mesh sdkBuffer overflow in Bluetooth Mesh SDK when handling extended advertisements8.9 High
- genetec inc. synergis softwireImproper access control to the Synergis Softwire installation folder. This vulnerability affects...7.9 High
- ebyte na111-m firmwareEbyte NA111-M Missing Authentication for Critical Function7.2 High
- xiiaozet lk100wXiiaozet LK100W Authentication Bypass Using an Alternate Path or Channel9.3 Critical
- xiiaozet lk100wXiiaozet LK100W Missing Authentication for Critical Function9.3 Critical
- xiiaozet lk100wXiiaozet LK100W OS Command Injection8.7 High
- arben-adm mcp-sequential-thinkingarben-adm mcp-sequential-thinking Import Session/Export Session server.py export_session path traversal5.3 Medium
- ebyte na111-m firmwareEbyte NA111-M Cleartext Transmission of Sensitive Information9.3 Critical
- ebyte ne2-d11 firmwareEbyte NE2-D11 Use of Client-Side Authentication8.7 High
- ebyte ne2-d11 firmwareEbyte NE2-D11 Missing Authorization8.7 High
- ebyte na111-m firmwareEbyte NA111-M Improper Restriction of Rendered UI Layers or Frames5.3 Medium
- Show moreLoading…