CVEs published in August 2026
12,182 vulnerabilities, 1,770 critical, 24 exploited.
- seacmsSeaCMS ass.php authorization6.9 Medium
- seacmsSeaCMS err.php cross site scripting5.3 Medium
- ash-project ash aiAshAi vectorize change leaks raw embedding-provider errors, including credentials, in a user-facing error7.1 High
- ash-project ash aiAshAi echoes raw tool exception messages into the conversation, disclosing internal details5.3 Medium
- ash-project ash aiAshAi tool loop never terminates when all tool calls are filtered out, enabling denial of service6.0 Medium
- ash-project ash aiIdentity tool filter in AshAi accepts operator maps, allowing update or destroy of unidentified records7.1 High
- seacmsSeaCMS zyapi.php sql injection6.9 Medium
- ash-project ash aiMCP DNS-rebinding origin check in AshAi is bypassed by a spoofed X-Forwarded-Proto header7.4 High
- ash-project ash aiEEx template evaluation of prompt content in AshAi enables remote code execution8.9 High
- seacmsSeaCMS Avatar Upload member.php unlink path traversal5.3 Medium
- seacmsSeaCMS Template search.php parseIf code injection6.9 Medium
- totolink nr1800xTOTOLINK NR1800X cstecgi.cgi setUssd command injection5.3 Medium
mrubyOSS-FuzzUse-of-uninitialized-value in str_escapeNo score- No product listedLatencyUtils PauseDetector LatencyStats.java LatencyStats.recordDetectedPause memory corruption4.8 Medium
- No product listedFastGPT Community Edition 4.10.0 through 4.14.0 are vulnerable to a NoSQL injection in the POST ...5.3 Medium
- No product listedAn OS command injection vulnerability in MetaGPT 0.8.1 allows an attacker to execute arbitrary...9.8 Critical
- No product listedA path traversal vulnerability in the SPO extension of MetaGPT 0.8.1 allows an attacker to read...7.5 High
- No product listedXueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher...6.5 Medium
- No product listedThe teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System ...8.1 High
- No product listedIncorrect access control in the killProcess function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.8 Critical
- No product listedIncorrect access control in the CloudSrvVersionCheck function of TOTOLINK T6 4.1.5cu...5.9 Medium
- No product listedIncorrect access control in the LoadDefSettings function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the clearTracerouteLog function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the clearSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the showSyslog function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...7.5 High
- No product listedIncorrect access control in the informSlaveUpdate function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the FirmwareUpgrade function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the delWiFiScheduleCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the delVlanCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the delWiFiAclRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the delDevice function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the UploadFirmwareFile function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the SystemSettings function of TOTOLINK T6 4.1.5cu.748_B20211015...5.3 Medium
- No product listedIncorrect access control in the delParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the NTPSyncWithHost function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the delSmartQosCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the UploadCustomModule function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setWiFiRepeaterCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the delIpPortFilterRules function of TOTOLINK T6 4.1.5cu...9.1 Critical
- No product listedIncorrect access control in the delUrlFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the delStaticDhcpRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the setOpModeCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows...9.1 Critical
- No product listedIncorrect access control in the delPortForwardRules function of TOTOLINK T6 4.1.5cu.748_B20211015...7.5 High
- No product listedIncorrect access control in the delMacFilterRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.8 Critical
- No product listedIncorrect access control in the setRoamingCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...5.9 Medium
- No product listedIncorrect access control in the setManualDialCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setApWiFiSchCfg function of TOTOLINK T6 4.1.5cu.748_B20211015...5.9 Medium
- No product listedIncorrect access control in the setWiFiWpsStart function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- No product listedIncorrect access control in the setParentalRules function of TOTOLINK T6 4.1.5cu.748_B20211015...9.1 Critical
- Show moreLoading…