CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- elated-themes frappeFrappe Framework Development Branch Incorrect Authorization via Jinja Template Preview Endpoint7.1 High
- dolibarrDolibarr 10.0.0 before 24.0.0 Missing Authorization on REST Users Groups Endpoint5.3 Medium
- tenda hg10Tenda HG10 Boa Web Server formIPv6Routing buffer overflow10.0 Critical
- faberon pakePake arbitrary file write via unsanitized download_file filename8.8 High
- ash-project ash sqlexists/2 predicate silently dropped on limited relationships with a parent() filter in AshSql5.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System sup_edit.php sql injection5.3 Medium
- ash-project ash sqlSame-named aggregates with differing filters are conflated in AshSql2.1 Low
- ash-project ash sqlDistinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSql2.1 Low
- ash-project ash sqlUnescaped backslash allows LIKE wildcard injection in AshSql string search2.1 Low
- ash-project ash sqlSQL string_trim removes only spaces, diverging from in-memory trimming in AshSql2.1 Low
- ash-project ash obanUnbounded handle_error recursion enables denial of service in AshOban triggers5.9 Medium
- ash-project ash obanJob argument injection via :args overrides primary_key and tenant in AshOban5.9 Medium
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System cust_searchfrm.php sql injection5.3 Medium
- totolink a720rTOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruption9.4 Critical
- beetel 450tc3Beetel 450TC3 User Management cross site scripting5.1 Medium
- beetel 450tc3Beetel 450TC3 password recovery5.3 Medium
- siteserver sscmsSiteServer SSCMS Agent Installation Workflow access control2.3 Low
- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System pro_edit.php sql injection5.3 Medium
qemuAlpaquita,qemu-hweUbuntu +1 morehw/uefi: add post_load checksNo scoreqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 morehw/display/vga: text and graphics renderers cache geometry in different units, causing a heap out-of-bounds write in panning_bufNo scoreqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreSetupMode guest-writable in uefi-vars allows Secure Boot bypassNo scoreqemuAlpaquita,qemu-hweUbuntu +1 morehw/uefi: non-NUL variable policy name causes heap-buffer-overflow in print_policy_entry()No scoreqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 morehw/uefi: short VarCheckPolicy REGISTER request causes heap-buffer-overflow in uefi-varsNo scoreqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 morehw/uefi: check lower limit for signature list sizeNo scoreqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 moreqemu security update8.8 HighqemuAlpaquita,qemu-hweUbuntu +1 morehw/uefi: account variable policy entries against storage sizeNo score- itsourcecode sales and inventory systemitsourcecode Sales and Inventory System emp_searchfrm.php sql injection5.3 Medium
- coppermine photo gallery photo gallery, coppermine-gallery coppermine photo gallery +1 morecoppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scripting5.1 Medium
- coppermine photo gallery photo gallery, coppermine-gallery coppermine photo gallery +1 morecoppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scripting5.1 Medium
- unknown really simple securityReally Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_plugin6.6 Medium
- trainingbusinesspros groundhogg — crm, newsletters, and marketing automationGroundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio Field8.8 High
- unknown mw wp formMW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data List3.5 Low
- ivole customer reviews for woocommerceCustomer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' Parameter8.8 High
- unknown wpvivid — backup, migration & stagingWPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup Restore6.6 Medium
- unknown geotargetingwpGeotargeting WP < 3.5.6.2 - Reflected XSS7.1 High
- unknown sogo add script to individual pages header footerSOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post Metabox6.8 Medium
- nasa cfsNASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflow5.3 Medium
- Show moreLoading…