CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- brokercap bifrostBifrost: SSRF deny-list incomplete: isPublicIP permits CGNAT, IPv6 6to4/NAT64, and site-local in FetchAndEncodeURL8.7 High
- shriyanss js-reconJS Recon: Command injection in PR Branch Checker workflow via untrusted pull request context values9.3 Critical
- piccolo-orm piccolo adminPiccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.8.8 High
- mar10 wsgidavWsgiDAV: Blind SQL injection in the MySQL provider8.8 High
- graylog2 graylog2-serverGraylog: System Catalog titles endpoint can be used to retrieve values of protected database fields5.0 Medium
- amazon amazon-ssm-agentPath traversal in the aws:downloadContent plugin in amazon-ssm-agent8.7 High
- chillzhuang springbladeSpringBlade 2.7.3 < 5.0.0 Privilege Escalation via Exposed Feign Endpoint8.6 High
python312SUSE,python312-coreSUSE +1 moreSecurity update for python312No score- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability8.8 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Security Feature Bypass Vulnerability5.4 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability4.3 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Spoofing Vulnerability6.5 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability5.4 Medium
- microsoft edge (chromium-based), edge chromium, edge for android +4 more +6 moreMicrosoft Edge (Chromium-based) Information Disclosure Vulnerability5.4 Medium
- microsoft edge chromium, edge (chromium-based), edge for android +4 more +6 moreCopilot Chat (Microsoft Edge) Information Disclosure Vulnerability4.4 Medium
- microsoft edge, edge for ios, edge chromium +1 more +3 moreMicrosoft Edge for iOS Spoofing Vulnerability5.4 Medium
- yamcsYamcs: DOM XSS in Extension Routing4.3 Medium
rsyslogSUSESecurity update for rsyslogNo score- yamcsYamcs: Authenticated remote code execution via unescaped StreamSQL `LIKE` pattern compiled by Janino (`LikeExpression`)9.9 Critical
- yamcsYamcs: Remote Code Execution via instance-template argument YAML injection (createInstance)9.8 Critical
- yamcsYamcs: Unauthenticated Directory Traversal7.5 High
- yamcsYamcs: Reflected XSS in the URL of the Authorize Endpoint6.5 Medium
- yamcsYamcs: Missing Authorization on Role and Privilege Enumeration Endpoints Allows Any Authenticated User to Disclose Full Security Configuration4.3 Medium
- yamcsYamcs: WebSocket subscription handlers omit the privilege checks their REST siblings enforce6.5 Medium
- yamcsYamcs : Multiple Missing Function Level Access Control vulnerabilities in Yamcs Core API8.8 High
- flextypeFlextype CMS 1.0.0-dev RCE via POST /api/v1/query Endpoint7.1 High
- yamcsYamcs: Authenticated RCE via StreamSQL aggregate-compiler column-name injection in Yamcs `executeSql`9.1 Critical
- free5gcfree5GC: NRF nnrf-nfm lacks NF Profile input validation — enables NF Registration Poisoning with arbitrary service endpoints9.3 Critical
- go-vikunja vikunjaVikunja: Authenticated cross-tenant kanban-bucket relocation via `project_view_id` mass-assignment5.0 Medium
- go-vikunja vikunjaVikunja: Cross-tenant IDOR in kanban move-task endpoint via unauthorized body task_id7.1 High
- go-vikunja vikunjaVikunja: Improper Authorization and Authorization Bypass Through User-Controlled Key in code.vikunja.io/api8.1 High
- go-vikunja vikunjaVikunja incomplete fix for CVE-2026-35595: Write-only user can detach shared project from parent hierarchy via parent_project_id=04.3 Medium
- go-vikunja vikunjaVikunja: Project duplication bypasses write-permission check on the target parent project5.3 Medium
- datadog dd-trace-rsdd-trace-rs: Unbounded W3C tracestate parsing may lead to DoS7.5 High
- pocket-idPocket ID: Open Redirect on the OIDC /authorize page via unvalidated redirect_uri with prompt=none4.3 Medium
- aquaproj aquaaqua: Archive extraction in aqua follows attacker-planted symlinks, allowing writes outside the install directory6.6 Medium
- gimp, red hat enterprise linux 6, enterprise linux 7 +3 more +5 moreGimp: heap out-of-bounds read and stack out-of-bounds access in psd loader from channel-count handling6.1 Medium
- klever-io klever-goKlever-Go: Integer overflow in split-royalty validation enables unbounded minting of KLV (native token)9.6 Critical
- klever-io klever-goKlever-Go: Marketplace settlement mints KLV when referral % + royalty % exceed the bid (negative seller share silently skipped)9.6 Critical
- starrocksStarRocks Query Detail Endpoint Returns Every User's Query History6.5 Medium
- heyformHeyForm Reflects Any Origin in CORS Responses While Allowing Credentials8.1 High
- chainlitChainlit Feedback Endpoints Missing Ownership Validation6.0 Medium
- coderamp-labs gitingestGitingest Prefix-Based Git Host Check Enables Request Forgery and Token Disclosure8.3 High
- automatic1111 stable-diffusion-webuiStable Diffusion WebUI Credential Disclosure via /sdapi/v1/cmd-flags8.7 High
- rybbit-io rybbitRybbit Reflects Any Origin in CORS Responses While Allowing Credentials8.6 High
- builderio gpt-crawlergpt-crawler Arbitrary File Write via outputFileName Parameter8.8 High
- dataelement bishengBISHENG Unauthenticated Server-Side Request Forgery via Workflow Report Callback8.8 High
- quivrhq quivrQuivr Chat Endpoints Missing Ownership Validation8.6 High
- voltagentVoltAgent Memory API Handlers Missing Ownership Checks8.6 High
- runatlantis atlantisAtlantis GitHub App Setup Endpoint Returns App Credentials to Unauthenticated Callers8.8 High
- Show moreLoading…