Security Box Score — Friday, August 7, 2026

Friday, August 7, 2026 · all times UTC← 2026-08-06 · archive · 2026-08-08 →

215 CVEs published August 7, 2026: 25 critical, 79 high, 92 medium, 19 low; 1 in KEV; 3 with a public exploit reference; 0 awaiting enrichment. Elevated volume. 25 rendered as box scores below; the remaining 190 in the results table.

Standings

League
	MTD	YTD	2025 same span	2025 full
CVEs published	1908	10713	1398	2563
KEV catalog size	1670

571 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; medians are over each vendor's YTD disclosures.

Operating Systems & Platforms
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
linux	44	1629	210	1150	98	0	27	3	0.2	7.8	.0016	+32
microsoft	33	1394	120	939	310	8	378	32	2.3	7.8	.0040	-17
google	43	455	72	134	228	18	73	5	1.1	6.5	.0023	+43
red hat	41	263	13	120	113	17	4	0	0.0	7.0	.0024	+31
apple	1	245	57	67	112	2	93	7	2.9	7.1	.0028	+1
suse	5	5	1	2	2	0	0	0	0.0	7.3	.0022	+5
canonical	0	3	0	2	1	0	0	0	0.0	7.8	.0013	0
android	0	1	0	1	0	0	16	1	100.0	8.4	.0171	0

Network & Infrastructure
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
cisco	30	50	9	24	9	0	96	13	26.0	7.8	.0033	+30
fortinet	0	18	2	4	9	0	28	6	33.3	6.1	.0054	0
palo alto networks	0	15	0	1	7	5	14	2	13.3	4.7	.0028	0
vmware	0	12	4	7	0	1	21	0	0.0	8.7	.0044	0
checkpoint	1	5	4	1	0	0	3	2	40.0	9.3	.2062	+1
f5	0	5	4	0	0	0	7	1	20.0	9.2	.0402	0
ivanti	0	5	1	0	0	0	33	5	100.0	10.0	.8152	0
zyxel	3	4	0	3	1	0	11	0	0.0	7.2	.0075	+3

Open Source Ecosystems
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
apache	61	198	36	107	54	1	40	2	1.0	7.5	.0048	+61
mozilla	1	73	42	26	5	0	13	0	0.0	9.1	.0031	+1
gitlab	0	15	0	2	10	1	4	2	13.3	4.9	.0029	0
github	2	4	0	2	2	0	0	0	0.0	7.0	.0040	+2
wordpress	1	4	1	2	1	0	5	2	50.0	8.8	.3700	+1
docker	0	3	0	1	2	0	1	0	0.0	5.7	.0015	0
drupal	0	1	1	0	0	0	5	1	100.0	9.8	.8832	0
kubernetes	0	1	0	0	0	1	0	0	0.0	2.4	.0024	0

Enterprise Applications
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
oracle	0	1113	212	539	304	57	40	3	0.3	7.6	.0031	0
ibm	32	140	36	61	42	1	7	1	0.7	7.5	.0027	+32
adobe	8	48	16	23	5	0	75	4	8.3	8.6	.0047	+7
progress	11	34	11	18	5	0	9	1	2.9	8.1	.0030	+11
solarwinds	0	20	16	1	1	0	11	4	20.0	9.1	.0050	0
veeam	10	12	3	7	2	0	4	0	0.0	8.6	.0027	+10
atlassian	0	3	0	3	0	0	13	0	0.0	8.0	.0026	0
zohocorp	0	3	1	1	1	0	0	0	0.0	7.1	.0048	0

Industrial & Embedded
Vendor	MTD	YTD	C	H	M	L	KEV	KEV YTD	KEV/100	Med CVSS	Med EPSS	Δ
d-link	0	8	0	0	6	1	26	1	12.5	5.5	.0073	0
hikvision	0	7	0	4	2	0	2	1	14.3	7.2	.0025	0
bosch	0	3	0	3	0	0	0	0	0.0	8.1	.0028	0
schneider electric	0	3	1	2	0	0	1	0	0.0	8.7	.0020	0
synology	1	1	0	1	0	0	0	0	0.0	7.3	.0013	+1
honeywell	0	1	0	0	1	0	0	0	0.0	6.9	.0031	0
mitsubishi electric	0	1	0	1	0	0	0	0	0.0	7.1	.0013	0
rockwell automation	0	1	1	0	0	0	0	0	0.0	9.2	.0030	0

Other
Vendor	MTD	YTD	C	H	M	L	KEV	Med CVSS	Med EPSS	Δ
surrealdb	0	57	3	26	25	3	0	7.1	.0025	0
netty	1	42	6	27	8	1	0	7.5	.0046	+1
grafana	0	41	2	14	22	3	0	6.5	.0033	-1
legion of the bouncy castle	32	39	5	25	9	0	0	8.7	.0026	+32
open ises	0	37	2	14	21	0	0	6.9	.0021	0
mediatek	34	34	0	4	30	0	1	6.0	.0011	+34
erlang	0	32	1	14	14	3	1	6.9	.0033	-6
freerdp	23	31	8	18	4	1	0	8.7	.0034	+23

Leaders (trailing 30 days unless noted)

Highest EPSS
CVE	EPSS	%ile	CVSS
CVE-2026-8037	.9931	99.9	9.8
CVE-2026-63030	.9560	99.9	9.8
CVE-2026-39808	.9121	99.8	—
CVE-2026-34486	.8293	99.6	7.5
CVE-2026-48939	.8250	99.6	10.0
CVE-2026-50522	.7698	99.5	9.8
CVE-2026-15410	.7635	99.5	7.2
CVE-2026-56291	.7607	99.5	10.0
CVE-2026-15409	.7422	99.4	10.0
CVE-2026-25089	.7360	99.4	9.8

Highest CVSS
CVE	CVSS	EPSS	Note
CVE-2026-48939	10.0	.8250	KEV
CVE-2026-56291	10.0	.7607	KEV
CVE-2026-15409	10.0	.7422	KEV
CVE-2026-8985	10.0	.0660
CVE-2026-6516	10.0	.0473
CVE-2026-47668	10.0	.0434
CVE-2026-44359	10.0	.0100
CVE-2025-71389	10.0	.0093
CVE-2026-48168	10.0	.0091
CVE-2026-56163	10.0	.0090

Most disclosures (vendor)
Vendor	CVEs
oracle	1109
linux	699
microsoft	639
google	446
apple	168
apache	166
red hat	153
ibm	132
mozilla	68
surrealdb	57

Most KEV additions (YTD)
Vendor	KEV
microsoft	32
cisco	13
apple	7
fortinet	6
google	5
ivanti	5
adobe	4
langflow	4
solarwinds	4
synacor	4

Most-affected ecosystems
Ecosystem	Advisories
Maven	62
PyPI	5
Go	3
npm	3
crates.io	2
NuGet	1
Packagist	1

Fastest to KEV
CVE	Vendor	Days
CVE-2008-4128	Cisco	0
CVE-2021-27137	DD-WRT	0
CVE-2023-4346	KNX Association	0
CVE-2025-68686	Fortinet	0
CVE-2026-0770	Langflow	0
CVE-2026-15409	SonicWall	0
CVE-2026-15410	SonicWall	0
CVE-2026-16232	checkpoint	0
CVE-2026-16812	Arista Networks	0
CVE-2026-18556	N-able	0

Longest unpatched (KEV due date passed)
CVE	Vendor	Due	Days over
CVE-2021-27104	Accellion	2021-11-17	1724
CVE-2021-27102	Accellion	2021-11-17	1724
CVE-2021-27101	Accellion	2021-11-17	1724
CVE-2021-27103	Accellion	2021-11-17	1724
CVE-2021-21017	Adobe	2021-11-17	1724
CVE-2021-28550	Adobe	2021-11-17	1724
CVE-2021-42013	Apache	2021-11-17	1724
CVE-2021-41773	Apache	2021-11-17	1724
CVE-2021-30858	Apple	2021-11-17	1724
CVE-2021-30860	Apple	2021-11-17	1724

Transactions

EXPLOIT PUBLISHED — CVE-2019-18184. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2022-24682. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2024-1086 (Linux Kernel). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-15674 (Unknown Passster). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2025-56005. Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-10524 (Unknown CoCart). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-10599 (Unknown Integrate PhonePe with WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-10773 (zephyrproject zephyr). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-11361 (Unknown Formidable Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-11976 (Unknown MonsterInsights Pro). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12501 (Unknown WP Travel Engine). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12584 (Unknown Payment Gateway for Redsys & WooCommerce Lite). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-12901 (Unknown GetPaid). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13342 (Unknown Security Optimizer). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-13399 (Unknown Payment Plugins for PayPal WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14225 (Unknown Easy Appointments). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14306 (Unknown Tutor LMS). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14812 (Unknown Premium SEO). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14831 (Unknown Easy Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14842 (Unknown Events Made Easy). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-14936 (Unknown Simple Membership). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15147 (Unknown Five Star Restaurant Reservations). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15149 (Unknown WP Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15152 (Unknown WP Hotel Booking). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15208 (Unknown RegistrationMagic). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-15256 (Unknown Ninja Forms). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16067 (Unknown Event Booking Manager for WooCommerce (Pro)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16619 (Unknown miniOrange 2FA). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-16620 (Unknown WPC Name Your Price for WooCommerce). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-17032 (Unknown google-maps-easy-pro). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19058 (FoundationAgents MetaGPT). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19059 (FoundationAgents MetaGPT). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19060 (FoundationAgents MetaGPT). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19062 (chiuwingyan house). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19067 (itsourcecode Hospital Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19068 (itsourcecode Hospital Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19069 (itsourcecode Hospital Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19070 (itsourcecode Hospital Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19071 (itsourcecode Hospital Management System). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19108 (MZ Automation libiec61850). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-19110 (DataGear). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-2411 (zephyrproject zephyr). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-24486 (Kludex python-multipart). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-47685 (fogproject). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-47687 (fogproject). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-47688 (fogproject). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-47689 (fogproject). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-5336 (Unknown DataPress (Dataverse Integration)). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-56816 (netty). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-56821 (netty). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66041 (FFmpeg). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66758 (GNOME GIMP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66759 (GNOME GIMP). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-66838 (elixir-ecto postgrex). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-67621 (FlowiseAI Flowise). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-67622 (FlowiseAI Flowise). Public exploit reference added.

EXPLOIT PUBLISHED — CVE-2026-70636 (FlowiseAI Flowise). Public exploit reference added.

DUE DATE PASSED — CVE-2026-18577 (N-able N-central). CISA remediation deadline was August 6, 2026; still in catalog.

RESCORED — CVE-2022-2196 (Linux Kernel). CVSS 5.8 → 8.8 (NVD).

RESCORED — CVE-2023-46847 (squid). CVSS 8.6 → 7.5 (NVD).

RESCORED — CVE-2024-9675 (buildah). CVSS 7.8 → 4.4 (NVD).

RESCORED — CVE-2025-23366 (hal-console). CVSS 6.5 → 4.8 (NVD).

RESCORED — CVE-2026-24486 (Kludex python-multipart). CVSS 8.6 → 7.5 (NVD).

RESCORED — CVE-2026-43964 (Postfix). CVSS 3.7 → 7.5 (NVD).

RESCORED — CVE-2026-49875 (Apache Software Foundation Apache CXF). CVSS 6.5 → 9.8 (NVD).

RESCORED — CVE-2026-62836 (Microsoft Azure SQL Managed Instance). CVSS 8.7 → 10 (NVD).

ENRICHED — CVE-2019-18184. Received CVSS 9.8 and CPE data from NVD.

Yesterday's Results

215 CVEs published. 25 box scores, 190 table rows — nothing truncated.

CVE-2026-8037CRITICAL

Progress Software LoadMaster — OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAF

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .9931   99.9   YES

AFFECTED
  Product                          Versions     Fixed
  LoadMaster                       V7.2.60.0 –  —
  ECS Connections Manager          V7.2.60.0 –  —
  Object Scale Connection Manager  V7.2.60.0 –  —
  MOVEit WAF                       V7.2.60.0 –  —

TIMELINE
  May 6   Reserved by CNA
  Aug 6   Public exploit reference published
  Aug 7   Added to CISA KEV, due Aug 10
  Aug 7   Published (CNA: ProgressSoftware)

CWE-77 · CNA: ProgressSoftware · 4 references · NVD status: Analyzed · KEV due August 10, 2026

CVE-2026-19243LOW

HKUDS nanobot Shell Allowlist shell.py ExecTool._spawn os command injection

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0161   73.9     —

AFFECTED
  Product  Versions  Fixed
  nanobot  0.2.0 –   0.3.0

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: VulDB)

CWE-77, CWE-78 · CNA: VulDB · 13 references · NVD status: Deferred

CVE-2026-61808CRITICAL

HKUDS LightRAG — LightRAG: Missing Authentication for Critical API Functions in Default Configuration

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0138   69.8     —

AFFECTED
  Product   Versions      Fixed
  LightRAG  < 1.5.5rc1 –  —

TIMELINE
  Jul 10  Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-306 · CNA: GitHub_M · 2 references · NVD status: Received

CVE-2026-64638HIGH

WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. Via a specially craf…

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   A   H   H   H    8.9   .0089   56.5     —

AFFECTED
  Product    Versions     Fixed
  WordPress  unspecified  —

TIMELINE
  Jul 20  Reserved by CNA
  Aug 7   Published (CNA: hackerone)

CWE-79 · CNA: hackerone · 2 references · NVD status: Received

CVE-2026-71558CRITICAL

Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0072   50.7     —

AFFECTED
  Product      Versions  Fixed
  Apache Fory  0.14.0 –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: apache)

CWE-843, CWE-502 · CNA: apache · 2 references · NVD status: Analyzed

CVE-2022-4995CRITICAL

Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0069   49.7     —

AFFECTED
  Product       Versions     Fixed
  E-cology 9.0  unspecified  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: VulnCheck)

CWE-434 · CNA: VulnCheck · 6 references · NVD status: Received

CVE-2026-69207MEDIUM

honojs hono — Hono: ReDoS in CORS middleware via Access-Control-Request-Headers

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  L    5.3   .0065   48.3     —

AFFECTED
  Product  Versions     Fixed
  hono     < 4.12.34 –  —

TIMELINE
  Aug 3   Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-1333 · CNA: GitHub_M · 3 references · NVD status: Received

CVE-2026-19264CRITICAL

gitroomhq postiz-app — Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0063   47.3     —

AFFECTED
  Product     Versions     Fixed
  postiz-app  unspecified  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: postiz)

CWE-22 · CNA: postiz · 3 references · NVD status: Received

CVE-2026-71559HIGH

Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0059   45.6     —

AFFECTED
  Product      Versions  Fixed
  Apache Fory  0.16.0 –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: apache)

CWE-502 · CNA: apache · 2 references · NVD status: Analyzed

CVE-2026-71560CRITICAL

Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  H  H    9.1   .0055   43.6     —

AFFECTED
  Product      Versions  Fixed
  Apache Fory  0.14.0 –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: apache)

CWE-125, CWE-502 · CNA: apache · 2 references · NVD status: Analyzed

CVE-2026-11430MEDIUM

Trilby Media grav-plugin-scheduler-webhook — Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    6.9   .0051   40.9     —

AFFECTED
  Product                        Versions     Fixed
  grav-plugin-scheduler-webhook  unspecified  —
  getgrav/grav                   unspecified  —

TIMELINE
  Jun 5   Reserved by CNA
  Aug 7   Published (CNA: VulnCheck)

CWE-303 · CNA: VulnCheck · 4 references · NVD status: Received

CVE-2026-16258CRITICAL

Unknown Ajax Search Lite — Ajax Search Lite < 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  H  H  H    9.8   .0047   38.8     —

AFFECTED
  Product           Versions     Fixed
  Ajax Search Lite  unspecified  —

TIMELINE
  Jul 20  Reserved by CNA
  Aug 7   Published (CNA: WPScan)

CWE-502 · CNA: WPScan · 1 reference · NVD status: Received

CVE-2026-54210CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Buffer Overflow in file names of file upload functionalities

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   H   H   H    9.5   .0047   38.4     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-787 · CNA: NCSC.ch · 2 references · NVD status: Received

CVE-2026-54212CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Buffer Overflow in JSON-parsing

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   H   H   H    9.5   .0047   38.4     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-787 · CNA: NCSC.ch · 2 references · NVD status: Received

CVE-2026-56818MEDIUM

Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  L  L    6.5   .0046   38.4     —

AFFECTED
  Product  Versions           Fixed
  netty    < 4.1.136.Final –  —

TIMELINE
  Jun 23  Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-401, CWE-703 · CNA: GitHub_M · 4 references · NVD status: Received

CVE-2026-16637MEDIUM

OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   R  U  H  N  N    6.5   .0046   37.8     —

AFFECTED
  Product       Versions  Fixed
  hyrax-docker  1.18.0 –  —

TIMELINE
  Jul 22  Reserved by CNA
  Aug 7   Published (CNA: certcc)

CWE-201, CWE-918 · CNA: certcc · 3 references · NVD status: Received

CVE-2026-54213CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Denial of Service via endpoint 'internalRestart'

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   H    9.2   .0045   37.1     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-284 · CNA: NCSC.ch · 2 references · NVD status: Received

CVE-2026-54211CRITICAL

Tobit Laboratories AG TeamDavid — TeamDavid: Buffer Overflow in multiple form data parameters

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   H   H   H    9.5   .0041   34.1     —

AFFECTED
  Product    Versions     Fixed
  TeamDavid  unspecified  —

TIMELINE
  Jun 12  Reserved by CNA
  Aug 7   Published (CNA: NCSC.ch)

CWE-787 · CNA: NCSC.ch · 2 references · NVD status: Received

CVE-2026-67585HIGH

DivvyPayHQ absinthe_federation — Atom Exhaustion via _entities Representation Keys in DivvyPayHQ absinthe_federation

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   N   N   H    8.7   .0041   33.9     —

AFFECTED
  Product              Versions                                    Fixed
  absinthe_federation  0.1.0 –                                     —
  absinthe_federation  640a234a26b2d6fe5d9d21e00e5f4fce5645c0bf –  —

TIMELINE
  Aug 7   Reserved by CNA
  Aug 7   Published (CNA: EEF)

CWE-770 · CNA: EEF · 4 references · NVD status: Awaiting Analysis

CVE-2026-47659HIGH

aehrc pathling — Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename}

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0040   33.6     —

AFFECTED
  Product   Versions   Fixed
  pathling  < 2.0.0 –  —

TIMELINE
  May 19  Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-22, CWE-918 · CNA: GitHub_M · 1 reference · NVD status: Received

CVE-2026-47661HIGH

aehrc pathling — Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0040   33.6     —

AFFECTED
  Product   Versions   Fixed
  pathling  < 2.0.0 –  —

TIMELINE
  May 19  Reserved by CNA
  Aug 7   Published (CNA: GitHub_M)

CWE-22 · CNA: GitHub_M · 1 reference · NVD status: Received

CVE-2026-68772HIGH

ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   A   H   H   H    8.5   .0040   33.4     —

AFFECTED
  Product  Versions     Fixed
  ZenML    unspecified  —

TIMELINE
  Jul 31  Reserved by CNA
  Aug 7   Published (CNA: VulnCheck)

CWE-502 · CNA: VulnCheck · 4 references · NVD status: Received

CVE-2026-66494HIGH

joomshaper.com SP Page Builder extension for Joomla — Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder < 6.7.0

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   H   H   H    8.7   .0039   32.1     —

AFFECTED
  Product                               Versions       Fixed
  SP Page Builder extension for Joomla  1.0.0-6.6.2 –  —

TIMELINE
  Jul 27  Reserved by CNA
  Aug 7   Published (CNA: Joomla)

CWE-284, CWE-79 · CNA: Joomla · 1 reference · NVD status: Received

CVE-2026-17603HIGH

Sonatype Nexus Repository 3 — Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    8.7   .0039   31.9     —

AFFECTED
  Product             Versions  Fixed
  Nexus Repository 3  3.20.0 –  —

TIMELINE
  Jul 27  Reserved by CNA
  Aug 7   Published (CNA: Sonatype)

CWE-94 · CNA: Sonatype · 2 references · NVD status: Received

CVE-2026-15972HIGH

HashiCorp Consul — Unauthenticated denial of service via unbounded external gRPC connection acceptance

  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   L   N   N  U  N  N  H    7.5   .0039   31.8     —

AFFECTED
  Product            Versions  Fixed
  Consul             1.13.0 –  —
  Consul Enterprise  1.13.0 –  1.21.17

TIMELINE
  Jul 16  Reserved by CNA
  Aug 7   Published (CNA: HashiCorp)

CWE-770 · CNA: HashiCorp · 1 reference · NVD status: Received

Remainder (ranked, continued)
CVE	CVSS	EPSS %ile	Vendor	Product	CWE	Title
CVE-2026-54208	8.5	31.2	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Arbitrary File Write leading to Stored XSS
CVE-2026-66914	9.2	31.0	seblod.com	SEBLOD extension for Joomla	CWE-22	Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.…
CVE-2026-50540	9.6	30.9	kata-containers	kata-containers	CWE-20	Kata Containers: Config Path Annotation Arbitrary File Loading
CVE-2026-66492	6.1	30.3	phoca.cz	Phoca Commander extension for Joomla	CWE-22	Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander…
CVE-2026-65819	7.5	29.7	gopacket	gopacket	CWE-125	gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/und…
CVE-2026-62992	6.9	29.5	smarty-php	smarty	CWE-22	Smarty: Symlink path traversal out of trusted directories
CVE-2026-46405	5.3	29.5	openbao	openbao	CWE-770	OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens
CVE-2026-46409	9.6	29.4	openyak	openyak	CWE-94	OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution
CVE-2026-20337	7.5	29.3	Cisco	Cisco Secure Endpoint	CWE-120	ClamAV ZIP File Format Processing Memory Corruption Vulnerability
CVE-2026-15215	8.8	28.4	Unknown	Subscriptions for WooCommerce	CWE-269	Subscriptions for WooCommerce < 2.0.1 - Shop Manager+ Arbitrary Plugin Instal…
CVE-2026-71557	6.3	28.0	go-git	go-git	CWE-22	go-git: Malicious reference names may modify files outside the reference storage
CVE-2026-62996	6.9	27.8	smarty-php	smarty	CWE-22	Smarty Security stream restriction bypass through stream: resource
CVE-2026-49007	7.5	27.5	ZTE	F689	CWE-798	Information leakage vulnerability in ZTE F689 product
CVE-2026-48039	9.1	27.4	pipeboard-co	meta-ads-mcp	CWE-287	Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Acc…
CVE-2025-58375	8.1	27.2	frappe	frappe	CWE-89	Frappe has potential SQL Injection due to missing validation
CVE-2026-16263	8.8	26.5	Unknown	WP Maps	CWE-22	WP Maps < 4.9.7 - Subscriber+ Local File Inclusion
CVE-2026-48047	5.9	26.4	xwiki	xwiki-platform	CWE-24	XWiki Platform vulnerable to potential arbitrary file writing using path trav…
CVE-2026-12071	5.3	26.4	Tobit Laboratories AG	TeamDavid	CWE-601	TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters
CVE-2026-54214	5.3	26.4	Tobit Laboratories AG	TeamDavid	CWE-601	TeamDavid: Header Injection through the 'cType' URL parameter
CVE-2026-19229	5.5	25.7	SourceCodester	Online Clothing Store	CWE-200	SourceCodester Online Clothing Store Dreamweaver Metadata Files _notes file i…
CVE-2026-19017	6.8	25.7	HashiCorp	Consul	CWE-862	Consul vulnerable to partial arbitrary file read via Vault Connect CA provider
CVE-2026-20338	7.5	25.6	Cisco	Cisco Secure Endpoint	CWE-415	ClamAV ZIP File Format Processing Memory Corruption Vulnerability
CVE-2026-20339	7.5	25.6	Cisco	Cisco Secure Endpoint	CWE-190	ClamAV PESpin File Format Processing Integer Overflow Vulnerability
CVE-2026-20345	7.5	25.6	Cisco	Cisco Secure Endpoint	CWE-121	ClamAV GPT File Format Processing Memory Corruption Vulnerability
CVE-2026-20346	7.5	25.6	Cisco	Cisco Secure Endpoint	CWE-125	ClamAV PDF File Format Processing Memory Corruption Vulnerability
CVE-2026-20347	7.5	25.6	Cisco	Cisco Secure Endpoint	CWE-125	ClamAV Mach-O File Format Processing Memory Corruption Vulnerability
CVE-2026-20348	7.5	25.6	Cisco	Cisco Secure Endpoint	CWE-120	ClamAV XAR File Format Processing Memory Corruption Vulnerability
CVE-2026-54204	7.7	25.3	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in…
CVE-2026-54201	6.9	25.3	Tobit Laboratories AG	TeamDavid	CWE-862	TeamDavid: Missing Authorization
CVE-2026-54203	9.2	24.7	Tobit Laboratories AG	TeamDavid	CWE-200	TeamDavid: Memory Leak leaking sensitive information
CVE-2025-63235	7.5	24.5	n/a	n/a	CWE-400	In sol commit 373d848 (2024-12-12), the broker does not fully release resourc…
CVE-2026-71851	9.0	24.4	brix	crypto-js	CWE-331	crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulner…
CVE-2026-56793	9.8	24.0	Dell	OpenManage Server Administrator Managed Node (Patch) for Windows	CWE-287	Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an…
CVE-2026-66491	8.2	24.0	phoca.cz	Phoca Commander extension for Joomla	CWE-22	Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3
CVE-2026-66493	6.4	24.0	phoca.cz	Phoca Commander extension for Joomla	CWE-22	Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander…
CVE-2026-14365	9.8	23.9	themetechmount	TrueBooker – Appointment Booking and Scheduler System	CWE-862	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Pass…
CVE-2026-47660	8.7	23.7	aehrc	pathling	CWE-522	Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client creden…
CVE-2026-17593	7.2	23.4	Sonatype	Nexus Repository	CWE-470	Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration
CVE-2026-45808	7.1	23.5	openbao	openbao	CWE-863	OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasse…
CVE-2026-48094	5.3	23.1	dartiss	shareopenly	CWE-79	ShareOpenly has Cross-Site Scripting (XSS) via Missing esc_url() on Shared UR…
CVE-2026-54202	8.5	22.9	Tobit Laboratories AG	TeamDavid	CWE-36	TeamDavid: Path Traversal in the archive creation functionality
CVE-2026-56794	6.5	22.8	Dell	Dell OpenManage Server Administrator Managed Node (Patch) for Windows	CWE-23	Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a …
CVE-2026-52879	7.5	22.0	klever-io	klever-go	CWE-400	Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-d…
CVE-2026-52880	7.5	22.0	klever-io	klever-go	CWE-400	Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Run
CVE-2026-17599	6.9	21.9	Sonatype	Nexus Repository 3	CWE-620	Nexus Repository 3 - Unverified Onboarding State on change-admin-password End…
CVE-2026-17597	5.1	21.9	Sonatype	Nexus Repository 3	CWE-918	Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Veri…
CVE-2026-19015	5.3	21.8	HashiCorp	Consul	CWE-770	Uncontrolled resource consumption in the Consul Connect CA roots endpoint
CVE-2026-19113	5.3	21.8	HashiCorp	Consul	CWE-400	Unauthenticated denial of service via unbounded request body processing
CVE-2026-19082	7.5	21.7	TONYC	Imager	CWE-125	Imager versions from 0.45_02 before 1.034 for Perl may expose adjacent heap b…
CVE-2026-70561	7.1	21.7	TestLinkOpenSourceTRMS	TestLink	CWE-639	TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php
CVE-2026-71556	7.1	21.8	go-git	go-git	CWE-59	go-git: Worktree operations may follow symlinks
CVE-2026-69127	6.9	21.6	getkirby	kirby	CWE-497	Kirby: System path exposure from error messages in the REST API
CVE-2026-66062	5.3	21.7	sveltejs	kit	CWE-1333	SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via th…
CVE-2026-71848	5.3	21.6	honojs	hono	CWE-407	Hono: Algorithmic Complexity DoS in Language Middleware
CVE-2026-54209	8.9	21.2	Tobit Laboratories AG	TeamDavid	CWE-125	TeamDavid: Buffer Overflow in 'editini' function
CVE-2026-17595	5.3	21.2	Sonatype	Nexus Repository 3	CWE-497	Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass
CVE-2026-14364	9.8	21.0	themetechmount	TrueBooker – Appointment Booking and Scheduler System	CWE-640	TrueBooker <= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Pass…
CVE-2026-54216	5.3	20.8	Tobit Laboratories AG	TeamDavid	CWE-79	TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter
CVE-2026-54338	5.3	20.7	jupyterhub	jupyterhub	CWE-400	JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging …
CVE-2026-19210	2.1	20.7	SourceCodester	Photo Share Website	CWE-284	SourceCodester Photo Share Website ajax.php save_upload unrestricted upload
CVE-2026-54205	6.3	20.5	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in lin…
CVE-2026-54206	6.3	20.5	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sen…
CVE-2026-54207	6.3	20.5	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in mov…
CVE-2026-47249	7.5	20.3	klever-io	klever-go	CWE-400	Klever-Go KVM: Hash-array amplification in P2P resolver request handling
CVE-2026-52878	7.5	20.3	klever-io	klever-go	CWE-476	Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can …
CVE-2026-62295	7.5	20.3	hapifhir	org.hl7.fhir.core	CWE-20	HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denia…
CVE-2026-62296	7.5	20.3	hapifhir	org.hl7.fhir.core	CWE-20	HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow de…
CVE-2026-66059	5.3	19.9	frappe	frappe	CWE-863	Frappe: Field-level permission bypass via Document Follow
CVE-2026-48097	7.8	19.7	0x5t4l1n	NexTOR_IP_CHANGER	CWE-78	NexTOR_IP_CHANGER has PATH Injection Leading to Arbitrary Command Execution
CVE-2026-19208	2.9	19.7	n/a	WonderTrader	CWE-840	WonderTrader TraderDD.cpp queryTrades behavioral workflow
CVE-2026-19244	2.0	19.6	HKUDS	nanobot	CWE-266	HKUDS nanobot MCP enabledTools Scope mcp.py connect_mcp_servers access control
CVE-2026-54218	8.8	19.3	Tobit Laboratories AG	TeamDavid	CWE-321	TeamDavid: Weak Cryptography and Insecure Password Storage
CVE-2026-54215	5.3	19.3	Tobit Laboratories AG	TeamDavid	CWE-601	TeamDavid: Open Redirect via the 'replyUrl' parameter
CVE-2026-19212	2.1	19.3	n/a	WonderTrader	CWE-453	WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized va…
CVE-2026-14205	9.8	19.0	Unknown	WP Events Manager	CWE-287	WP Events Manager < 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter
CVE-2026-49343	5.9	18.4	klever-io	klever-go	CWE-400	Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch boo…
CVE-2026-19196	5.5	18.2	SourceCodester	Photo Share Website	CWE-74	SourceCodester Photo Share Website ajax.php login sql injection
CVE-2026-19211	5.5	18.2	SourceCodester	Photo Share Website	CWE-74	SourceCodester Photo Share Website ajax.php signup sql injection
CVE-2026-19231	5.5	18.2	SourceCodester	Simple Doctors Appointment System	CWE-74	SourceCodester Simple Doctors Appointment System ajax.php delete_appointment …
CVE-2026-54199	5.3	18.2	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Header Injection through request body in link storing functionality
CVE-2026-64637	9.9	18.1	WebPros	Plesk	CWE-269	Improper privilege management in the XML-RPC API of Plesk before 18.0.80, all…
CVE-2026-19014	4.3	18.0	HashiCorp	Consul	CWE-770	Uncontrolled resource consumption in the Consul Connect authorization endpoint
CVE-2026-48169	8.8	17.8	MervinPraison	praisonai-platform	CWE-639	PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API
CVE-2026-14943	7.5	17.8	Unknown	Password Protected — Lock Entire Site, Pages, Posts, Categories, and Partial Content	CWE-200	Password Protected < 2.8.4 - Unauthenticated Sensitive Information Exposure v…
CVE-2026-15816	7.5	17.7	Red Hat	Red Hat Enterprise Linux 10	CWE-78	Dracut: dracut: root code execution via unescaped error message written to so…
CVE-2026-66000	2.3	17.7	frappe	frappe	CWE-863	Frappe: Unrestricted access to Document Follow APIs
CVE-2026-54217	5.3	17.6	Tobit Laboratories AG	TeamDavid	CWE-20	TeamDavid: Stored XSS in web application
CVE-2026-71847	8.7	17.0	ruby	json	CWE-416	Ruby JSON: JSON::ResumableParser#partial_value dereferences a freed input buf…
CVE-2026-17598	5.3	17.0	Sonatype	Nexus Repository 3	CWE-915	Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration
CVE-2026-47364	6.5	16.8	Datadog	Android App	CWE-200	In versions of the Datadog Android application prior to v545-5.9.2, the app t…
CVE-2026-48170	9.1	16.6	thomaspoignant	scim-patch	CWE-1321	scimPatch vulnerable to prototype pollution via unfiltered keys in patch
CVE-2026-19012	5.3	15.9	HashiCorp	Consul	CWE-476	Authenticated denial of service in Consul Enterprise-to-Community Edition dow…
CVE-2026-47127	6.5	15.9	ghostfolio	ghostfolio	CWE-862	Ghostfolio has a Stripe subscription bypass
CVE-2026-54200	8.4	15.7	Tobit Laboratories AG	TeamDavid	CWE-73	TeamDavid: Local File Inclusion via the form field 'scjob'
CVE-2026-16038	9.1	15.3	Unknown	MStore API	CWE-862	MStore API < 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gat…
CVE-2026-66838	5.9	15.3	elixir-ecto	postgrex	CWE-89	SQL injection via the :comment option in Postgrex.stream/4
CVE-2026-61477	2.3	15.3	Red Hat	Red Hat Enterprise Linux 10	CWE-93	Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows …
CVE-2026-47662	8.7	15.3	aehrc	pathling	CWE-20	Pathling $bulk-submit allows bearer-token exfiltration and persistent warehou…
CVE-2026-47663	8.7	15.3	aehrc	pathling	CWE-285	Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfil…
CVE-2026-17596	6.3	15.2	Sonatype	Nexus Repository 3	CWE-79	Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name
CVE-2026-17594	8.2	15.1	Sonatype	Nexus Repository 3	CWE-863	Nexus Repository 3 - Authorization Bypass in Repository Creation
CVE-2026-64636	7.7	15.0	WebPros	Plesk	CWE-89	An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and …
CVE-2026-71849	3.7	14.8	honojs	hono	CWE-200	Hono: Proxy Helper does not remove response headers listed in the `Connection…
CVE-2026-14644	8.6	14.6	Sonatype	Nexus Repository 3	CWE-843	Nexus Repository 3 - Privilege Escalation
CVE-2026-12070	8.4	14.6	Tobit Laboratories AG	TeamDavid	CWE-73	TeamDavid: Arbitrary File Deletion via form field 'scjob'
CVE-2026-16265	6.5	14.6	Unknown	WP Maps	CWE-400	WP Maps < 4.9.7 - Subscriber+ Denial of Service
CVE-2026-11907	6.5	14.5	xwp	Stream – Activity Log & Audit Trail	CWE-862	Stream <= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensit…
CVE-2026-16030	8.1	13.6	Unknown	MStore API	CWE-287	MStore API < 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Aut…
CVE-2026-66058	5.3	13.4	frappe	frappe	CWE-639	Frappe: Unrestricted access to a Document Follow API
CVE-2026-15361	8.1	12.9	Unknown	Content Views	CWE-89	Content Views < 4.5 - Subscriber+ SQL Injection via preview_request
CVE-2026-19246	2.1	12.9	HKUDS	nanobot	CWE-918	HKUDS nanobot Provider-returned Image URL image_generation.py _download_image…
CVE-2026-48026	8.7	12.6	treeverse	lakeFS	CWE-79	lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML
CVE-2026-59717	4.3	12.4	home-assistant	core	CWE-601	Home Assistant Companion: `homeassistant://invite` Deep Link Credential Phishing
CVE-2026-19213	2.1	12.3	n/a	WonderTrader	CWE-840	WonderTrader Pending Order TraderAdapter.h _undone_qty behavioral workflow
CVE-2026-17601	8.9	12.2	Sonatype	Nexus Repository 3	CWE-862	Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator
CVE-2026-17600	8.7	12.2	Sonatype	Nexus Repository 3	CWE-613	Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deac…
CVE-2026-19016	4.2	11.8	HashiCorp	Consul	CWE-22	Authorization bypass for session deletion in the transaction API
CVE-2026-19207	1.9	11.5	PHPGurukul	Company Visitor Management System	CWE-79	PHPGurukul Company Visitor Management System manage-newvisitors.php cross sit…
CVE-2026-16041	7.5	11.2	Unknown	MStore API	CWE-862	MStore API < 4.21.0 - Unauthenticated Product Review Creation
CVE-2026-15570	7.1	11.1	Vestel	Telefunken TE24553B45V2DZ Smart TV	CWE-918	Improper URL Scheme and Destination Validation in SmartCenter browserseturl C…
CVE-2026-15359	6.5	10.5	Unknown	Templately	CWE-862	Templately < 3.7.1 - Unauthenticated Administrator Templately Cloud Connectio…
CVE-2026-16039	6.5	10.3	Unknown	MStore API	CWE-639	MStore API < 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR
CVE-2025-71409	7.1	10.2	ATN-B1	CPDLC	CWE-306	No Authentication for Very High Frequency Data Link messages used in CPDLC
CVE-2026-19209	2.0	10.0	SourceCodester	Photo Share Website	CWE-79	SourceCodester Photo Share Website index.php home cross site scripting
CVE-2026-19230	2.0	10.0	SourceCodester	Photo Share Website	CWE-79	SourceCodester Photo Share Website Comment Input Box ajax.php save_upload cro…
CVE-2025-71410	6.0	10.0	ATN-B1	CPDLC	CWE-770	Malicious Link Control Frames Can Cause Loss of CPDLC Functions
CVE-2025-71411	6.0	10.0	ATN-B1	CPDLC	CWE-770	In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultane…
CVE-2025-71413	6.0	10.0	ATN-B1	CPDLC	CWE-754	In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets
CVE-2026-12261	5.3	9.2	nltk	nltk/nltk	CWE-284	Improper Access Control in nltk/nltk
CVE-2026-44964	6.5	9.0	Datadog	Android App	CWE-441	In versions of the Datadog Android application prior to v545-5.9.2, OnCallNot…
CVE-2025-71412	7.1	8.3	ATN-B1	CPDLC	CWE-754	In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate
CVE-2026-16027	5.4	8.2	Revenue Administration	E-Signature	CWE-918	Unauthenticated WebSocket-to-XAdES SSRF in Revenue Administration's E-Signature
CVE-2026-47243	9.2	7.9	kata-containers	kata-containers	CWE-22	Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
CVE-2026-49008	6.5	7.2	ZTE	F689	CWE-321	Integrity‑check credential leakage vulnerability in an application function o…
CVE-2026-47361	6.4	7.1	Datadog	Android App	CWE-926	In versions of the Datadog Android application prior to v541-5.9.2, BubbleCha…
CVE-2026-47362	4.6	6.9	Datadog	Android App	CWE-922	In versions of the Datadog Android application prior to v554-5.9.4, two Room-…
CVE-2026-48007	8.6	6.2	element-hq	element-call	CWE-200	Element Call reports full URLs of visited pages to analytics server
CVE-2026-71850	4.8	6.1	honojs	hono	CWE-488	Hono: `memo()` retains SSR output across requests, leading to cross-user data…
CVE-2026-19206	1.9	6.1	MZ Automation	libiec61850	CWE-119	MZ Automation libiec61850 ASDU Element sv_subscriber.c SVReceiver_stopThreadl…
CVE-2026-9031	6.8	6.0	TP-Link Systems Inc.	Archer A6 v4	CWE-20	Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6
CVE-2026-48093	6.5	5.9	dartiss	code-embed	CWE-79	Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed
CVE-2026-15032	6.1	5.9	Unknown	Comments	CWE-79	wpDiscuz < 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion
CVE-2026-15214	4.3	5.9	Unknown	Subscriptions for WooCommerce	CWE-639	Subscriptions for WooCommerce < 2.0.1 - Subscriber+ Subscription Detail Discl…
CVE-2026-37171	5.9	5.7	n/a	n/a	CWE-863	A lack of tenant separation in SuperTokens Inc. SuperTokens Core v6.0.0 to v1…
CVE-2026-15970	4.2	5.6	HashiCorp	Consul	CWE-647	L7 intention authorization bypass via custom public listener
CVE-2026-16262	7.5	5.5	Unknown	Estatik Real Estate Plugin	CWE-352	Estatik < 4.3.3 - Login CSRF
CVE-2026-71381	4.0	5.5	Adobe	Adobe Genuine Software Integrity Service	CWE-863	Adobe Genuine Software Integrity Service \| CWE-863 Incorrect Authorization
CVE-2026-12801	6.4	5.3	themefic	Ultra Addons for Contact Form 7	CWE-79	Ultra Addons for Contact Form 7 <= 3.5.43 - Authenticated (Contributor+) Stor…
CVE-2026-11425	2.0	5.3	Domoticz	Domoticz	CWE-79	Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert …
CVE-2026-14331	6.1	4.6	Unknown	Subscribe2	CWE-79	Subscribe2 < 10.46 - Reflected XSS via email Parameter
CVE-2026-49006	5.3	4.5	ZTE	F689	CWE-321	TLS credential leakage vulnerability in ZTE F689 product
CVE-2026-46358	5.4	4.4	openbao	openbao	CWE-532	OpenBao's Inline Auth Incorrectly Redacted Headers
CVE-2026-47664	8.6	4.2	aehrc	pathling	CWE-20	Pathling: $import-pnp operation enables authenticated SSRF, credential leakag…
CVE-2026-9169	8.8	4.2	LUCID Vision Labs	Arena SDK	CWE-427	LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows
CVE-2026-47363	6.3	4.0	Datadog	Android App	CWE-926	In versions of the Datadog Android application prior to v541-5.9.2, the expor…
CVE-2026-19190	7.1	3.6	StableBit	Scanner	CWE-266	StableBit Scanner ScannerService Scanner.Service.exe permission
CVE-2026-48120	8.6	3.6	mawww	kakoune	CWE-74	Kakoune has a Critical RCE via Autorestore Backup Filename Injection
CVE-2026-15245	5.4	3.3	Unknown	BNE Testimonials	CWE-79	BNE Testimonials < 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode
CVE-2026-15386	5.4	3.3	Unknown	Meow Gallery	CWE-79	Meow Gallery < 5.5.2 - Author+ Stored XSS via Attachment Alt-Text
CVE-2026-48098	7.3	3.1	0x5t4l1n	NexTOR_IP_CHANGER	CWE-78	NexTOR IP Changer Unsafely Uses sudo and shell=True
CVE-2026-9030	6.8	3.1	TP-Link Systems Inc.	Archer A6 v4	CWE-362	Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6
CVE-2026-71870	4.8	2.9	py-pdf	pypdf	CWE-400	pypdf: Possible large memory usage for large /ToUnicode streams
CVE-2026-71852	4.8	2.8	py-pdf	pypdf	CWE-834	pypdf: Possible long runtimes/large memory usage for large CID font width ranges
CVE-2026-48122	5.4	2.6	Shopify	ruby-lsp	CWE-78	Workspace settings can override executable and Gemfile paths used by the Ruby…
CVE-2026-18497	7.1	2.6	Sean Barrett (nothings)	nothings stb	CWE-122	The nothings stb TrueType library contains a heap buffer overflow vulnerability
CVE-2026-64676	5.7	2.4	kata-containers	kata-containers	CWE-862	Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host t…
CVE-2026-19245	1.9	2.3	HKUDS	nanobot	CWE-200	HKUDS nanobot Login-shell Environment shell.py ExecTool._prepare_command info…
CVE-2026-45198	7.8	2.1	Imagination Technologies	Graphics DDK	CWE-822	GPU DDK - RGXFWIF_SYSINIT::sCorememDataStore is untrusted
CVE-2026-58262	7.1	2.0	klever-io	klever-go	CWE-345	Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum
CVE-2026-17435	2.5	2.0	RRWO	File::Rotate::Simple	CWE-59	File::Rotate::Simple versions before 0.4.0 for Perl create the target of dang…
CVE-2026-62293	5.0	1.9	hapifhir	org.hl7.fhir.core	CWE-20	HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles
CVE-2026-49005	2.4	1.8	ZTE	F689	CWE-916	Root password hash exposure vulnerability in ZTE F689 product
CVE-2026-15148	5.3	1.8	Unknown	WP Events Manager	CWE-345	WP Events Manager < 2.2.5 - Unauthenticated Payment Bypass and Booking Status…
CVE-2026-66060	7.1	1.7	home-assistant	core	CWE-862	Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation executio…
CVE-2026-66061	7.1	1.7	home-assistant	core	CWE-862	Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmat…
CVE-2026-44965	5.5	1.7	Datadog	Android App	CWE-926	In versions of the Datadog Android application prior to v545-5.9.2, six App W…
CVE-2026-19189	7.1	1.5	Power Sofware	PowerISO	CWE-266	Power Sofware PowerISO Kernel Driver scdemu.sys privileges management
CVE-2026-19193	7.1	1.5	Jiangmin	Antivirus	CWE-266	Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access co…
CVE-2026-19195	7.1	1.5	V-Secure	Jingyun Antivirus	CWE-266	V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control
CVE-2026-15211	5.9	1.5	Unknown	Subscriptions for WooCommerce	CWE-345	Subscriptions for WooCommerce < 2.0.1 - Payment Bypass via Attacker-Supplied …
CVE-2026-15239	5.3	1.5	Unknown	Simple CAPTCHA with Cloudflare Turnstile	CWE-345	Simple CAPTCHA with Cloudflare Turnstile < 1.42.0 - Unauthenticated Turnstile…
CVE-2026-66151	5.5	1.5	SonicWall	Global VPN Client	CWE-125	SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to …
CVE-2026-19191	7.1	1.4	StableBit	DrivePool	CWE-266	StableBit DrivePool DrivePoolService DrivePool.Service.exe permission
CVE-2026-19192	7.1	1.4	DeepCool	DisplayService	CWE-266	DeepCool DisplayService DeepCoolDisplayService.exe access control
CVE-2026-49746	7.1	1.3	Imagination Technologies	Graphics DDK	CWE-823	GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem
CVE-2026-18938	6.2	1.3	Red Hat	Red Hat Enterprise Linux 10	CWE-122	P11-kit: integer overflow in rpc attribute-array length calculation can under…
CVE-2026-45204	5.5	1.3	Imagination Technologies	Graphics DDK	CWE-476	GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in …
CVE-2026-11743	6.6	1.2	zephyrproject	zephyr	CWE-125	Missing negative-offset/overflow check in SF32LB MPI QSPI NOR flash driver al…
CVE-2026-11742	3.6	0.7	zephyrproject	zephyr	CWE-416	Use-after-free race in kernel `k_queue_peek_head/tail` due to missing spinlock
CVE-2026-19079	4.4	0.3	Red Hat	Red Hat Hardened Images	CWE-367	Policycoreutils: policycoreutils: toctou race condition in fixfiles allows ar…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-08-07 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.