CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- unknown user registration & membershipUser Registration & Membership < 5.2.6 - Authenticated Privilege Escalation via Login Settings7.2 High
- unknown user registration & membershipUser Registration & Membership < 5.2.5 - Subscriber+ Pending Email Change Cancellation via IDOR4.3 Medium
- cloudways breeze cacheBreeze Cache < 2.5.13 - Unauthenticated File Creation via Cache Path Traversal5.3 Medium
- unknown quiz and survey master (qsm)Quiz And Survey Master < 11.2.4 - Contributor+ Cross-Quiz Question Bank and Answer Key Disclosure via IDOR2.7 Low
- unknown wcfm marketplaceWCFM Marketplace < 3.8.2 - Unauthenticated Refund Request Creation on Guest Orders5.3 Medium
- ultimate member member, unknown ultimate member +1 moreUltimate Member 2.6.7 - 2.12.1 - Unauthenticated Privilege Escalation via Role Field on Profile Forms8.1 High
- unknown shared-files-proShared Files < 1.7.70 - Unauthenticated Arbitrary File Read7.5 High
- unknown user frontendWP User Frontend < 4.3.10 - Unauthenticated User Email and Phone Disclosure via User Directory5.3 Medium
- unknown user frontendWP User Frontend < 4.3.10 - Editor+ PHP Object Injection via AI Form Builder7.2 High
- unknown shared files, shared-files-pro +1 moreShared Files < 1.7.70 - Unauthenticated Limited File Upload5.3 Medium
- unknown shared files, shared-files-pro +1 moreShared Files < 1.7.68 - Unauthenticated Arbitrary File Deletion via Path Traversal6.8 Medium
incusDebian[GHSA-6v6x-387m-rj4w: Project restriction bypass on network address sets]No scoreincusDebian[GHSA-7fj9-65v4-rp7h: Arbitrary file write on host via image-planted symlinks and oci.dns.* newline injection]No scoreincusDebianincus-7.4-1.1 on GA mediaNo scoreincusDebianincus-7.4-1.1 on GA mediaNo scoreincusDebiansecurity updateNo scoreincusDebiansecurity updateNo scoreincusDebiansecurity updateNo scoreincusDebiansecurity updateNo scoreincusDebiansecurity updateNo score- wpmet elementskit proElementsKit Pro <= 4.10.1 - Unauthenticated Stored Cross-Site Scripting via 's' Parameter6.1 Medium
- eclipse foundation jettyA client may send a WebSocket frame with an unknown opcode and a very large declared payload...8.7 High
- themefusion avada (fusion) builderAvada (Fusion) Builder <= 3.15.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'size' Shortcode Attribute6.4 Medium
- litespeedtech litespeed cacheLiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes6.4 Medium
- onedesigns one user avatar | user profile pictureOne User Avatar | User Profile Picture <= 2.5.4 - Authenticated (Subscriber+) Stored Cross-Site Scripting via wpua-file Parameter7.5 High
- themeum tutor lms – elearning and online course solutionTutor LMS <= 4.0.5 - Unauthenticated Remote Code Execution via 'template' and 'data' POST Parameters6.5 Medium
- litespeedtech litespeed cacheLiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content7.2 High
- wpmudev forminator forms – contact form, payment form & custom form builderForminator Forms <= 1.57.0.1 - Unauthenticated Stored Cross-Site Scripting via Rich-Text Textarea Field7.2 High
- getpocket pocketPocket through 8.33.0.0 allows XSS because "Save to Pocket" injects external HTML into the DOM. ...9.2 Critical
- green-computing numailGreen-Computing｜NUMail - OS Command Injection9.3 Critical
- wallabag android-appThe wallabag (aka fr.gaulupeau.apps.InThePoche) application through 2.6.0 for Android allows XSS...8.8 High
- wallabagwallabag 2 through 2.6.14 allows SSRF because a crafted title or content field is mishandled...6.4 Medium
- nextendweb smart slider 3Smart Slider 3 <= 3.5.1.38 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slider' Block Attribute6.4 Medium
- optimole – optimize images | convert webp & avif | cdn & lazy load | image optimizationOptimole <= 4.2.10 - Unauthenticated Stored Cross-Site Scripting via 'a' (above_fold_images) Parameter7.2 High
- cozmoslabs translatepress – translate multilingual sites with ai translationTranslatePress <= 3.3.3 - Unauthenticated Stored Cross-Site Scripting via Comment Noise-Key Injection into HTML Parser7.2 High
nsmdOSS-FuzzHeap-buffer-overflow in decode_get_histogram_format_respNo scorensmdOSS-FuzzHeap-buffer-overflow in decode_get_fpga_diagnostics_settings_respNo score- openndsIn openNDS before 11.0.0, the client_params.sh script, invoked by the openNDS daemon to serve the...7.6 High
- openndsA heap-based buffer overflow vulnerability exists in openNDS before 11.0.0 that allows an...7.1 High
- openndsopenNDS before 11.0.0 is susceptible to unauthenticated OS command execution via shell command...8.3 High
- openndsMultiple memory leaks in openNDS before 11.0.0 allow an unauthenticated attacker on the captive...5.3 Medium
- envoyproxy envoyEnvoy: RBAC Authorization Bypass via Path Parameters7.5 High
- envoyproxy envoyEnvoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values7.5 High
- envoyproxy envoyEnvoy: Path normalization does not handle dot and dotdot segments with parameters5.3 Medium
- envoyproxy envoyEnvoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy7.5 High
- envoyproxy envoyEnvoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL_DST clusters5.3 Medium
- envoyproxy envoyEnvoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool7.5 High
- envoyproxy envoyEnvoy ext_authz: request `:path` pseudoheader dereferenced w/o null check7.5 High
- envoyproxy envoyEnvoy: Stored XSS in Admin Stats Interface (/stats?format=html)7.4 High
- envoyproxy envoyEnvoy: oghttp2 upstream trailers incorrect handling7.5 High
- Show moreLoading…