CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- cinnamon kotaemonKotaemon Missing Ownership Check in Conversation Functions9.1 Critical
- quivrhq quivrQuivr Prompt Endpoints Missing Ownership Validation7.1 High
- hyperdxio hyperdxHyperDX Team Management Operations Missing Role-Based Access Control7.2 High
- dataelement bishengBISHENG Authenticated Arbitrary Python Code Execution via Workflow run_once8.7 High
- argoproj argo-rolloutsArgo Rollouts Dashboard Unauthenticated Mutating Operations9.3 Critical
- starrocksStarRocks Frontend REST Handlers Bypass the Base Class Authentication Gate5.3 Medium
- qwenlm qwen-agentQwen-Agent Arbitrary File Read via Caller-Supplied Document Path8.7 High
- twentyhq twentyTwenty Open Redirect via OAuth Propagator Callback5.3 Medium
- mastra-ai mastraMastra Memory API Thread Ownership Check Is a No-op When mapUserToResourceId Is Unset7.1 High
- immich-app immichImmich Locked Assets Remain Readable Through Albums and Shared Links7.1 High
- sciphi-ai r2rR2R Missing Ownership Check Allows Modifying Other Users' Conversations7.1 High
- netscaler gatewayPortkey AI Gateway Server-Side Request Forgery via /v1/proxy/*8.7 High
- gophishGophish Account Lockout and Forced Password Change Bypassable via API Key8.6 High
- qwenlm qwen-agentQwen-Agent Server-Side Request Forgery via Caller-Supplied Document URL8.7 High
- moghtech komodoKomodo Resource Identifier Disclosure and Audit Log Pollution Before Permission Check5.3 Medium
- redpanda-data redpandaRedpanda Admin API Unauthenticated Superuser Access via Default Configuration9.3 Critical
- open zipkin zipkinZipkin Unauthenticated Spring Boot Actuator Endpoints Exposure6.9 Medium
- gilbertchen duplicacyDuplicacy Path Traversal during Restore via Unsanitized Snapshot Paths6.1 Medium
- logto-io logtoLogto Server-Side Request Forgery via OIDC SSO Connector Issuer URL8.2 High
- logto-io logtoLogto Server-Side Request Forgery via webhook test endpoint8.2 High
- kubevelaKubeVela Terraform remote loader DoS via unbounded file read8.5 High
- hatchet-dev hatchetHatchet: Cross-tenant write/DoS to other tenants' workers via Dispatcher gRPC UpsertWorkerLabels and Unsubscribe6.4 Medium
- kubeflow pipelinesKubeflow Pipelines: Unauthenticated SSRF and HTTP smuggling in Kubeflow Pipelines frontend /_proxy/ route, bypasses ENABLE_AUTHZ=true10.0 Critical
- snyk sweater-combSynk Sweater Comb < 3.8.8 Command Injection via .vervet.yaml Branch Name8.5 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Stack Buffer Overflow via dispatcher.cgi Credential Handlers6.9 Medium
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Stack Buffer Overflow and NULL Pointer Dereference via dispatcher.cgi RADIUS Handlers6.9 Medium
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Stack Buffer Overflow via dispatcher.cgi Standard Handlers6.9 Medium
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post6.9 Medium
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Memory Corruption via dispatcher.cgi _readHttpParam8.7 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_post8.6 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Command Injection via httpuploadcert.cgi8.6 High
- planet technology corp. gs-4210-16p2s v3PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_post8.6 High
- akilli ticaret software technologies ltd. e-commerce packStored XSS in Akıllı Ticaret's E-Commerce Pack5.4 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in pvr vq (compressed) decoder due to missing bounds check6.1 Medium
- golang.org/x/crypto golang.org/x/crypto/sshSource-address critical option not enforced for non-public-key auth callbacks in golang.org/x/crypto/ssh7.5 High
- wolfssl wolfenginewolfEngine reuses the AES-CCM nonce on TLS 1.2 / DTLS 1.2 records6.5 Medium
- wolfssl wolfenginewolfEngine reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record7.4 High
- wolfssl wolfproviderwolfProvider reuses the AES-GCM nonce on every TLS 1.2 / DTLS 1.2 record7.4 High
- wpmu dev forminatorWordPress Forminator plugin <= 1.57.1 - Other vulnerability Type vulnerability5.3 Medium
- ido kobelkowsky simple paymentWordPress Simple Payment plugin <= 2.5.2 - Broken Access Control vulnerability7.5 High
- magepeople inc. wpeventlyWordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability4.3 Medium
- crocoblock jetengineWordPress JetEngine plugin <= 3.8.14.2 - Cross Site Scripting (XSS) vulnerability7.1 High
- magepeople inc. wpeventlyWordPress WpEvently plugin <= 5.5.0 - Broken Access Control vulnerability5.4 Medium
- rank math seo math seoWordPress Rank Math SEO plugin <= 1.0.276 - Remote Code Execution (RCE) vulnerability7.2 High
- ahmad wp job portalWordPress WP Job Portal plugin <= 2.5.9 - Insecure Direct Object References (IDOR) vulnerability4.3 Medium
- wpmu dev smush image compression and optimizationWordPress Smush Image Compression and Optimization plugin <= 4.2.0 - Denial of Service Attack vulnerability7.5 High
- villatheme wpbulkyWordPress WPBulky plugin <= 1.2.2 - SQL Injection vulnerability8.5 High
- acf extended extendedWordPress ACF Extended plugin <= 0.9.2.6 - Broken Access Control vulnerability4.3 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read in ico loader via unvalidated used_clrs palette count6.1 Medium
- red hat enterprise linux 10, enterprise linux 7, enterprise linux 8 +7 more +9 moreLibsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data5.5 Medium
- Show moreLoading…