62 CVEs published August 8, 2026: 27 critical, 8 high, 16 medium, 10 low; 0 in KEV; 1 with a public exploit reference; 1 awaiting enrichment. 25 rendered as box scores below; the remaining 37 in the results table.
| MTD | YTD | 2025 same span | 2025 full | |
|---|---|---|---|---|
| CVEs published | 1970 | 10775 | 1399 | 2563 |
| KEV catalog size | 1670 | |||
588 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; medians are over each vendor's YTD disclosures.
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| linux | 46 | 1631 | 211 | 1150 | 98 | 0 | 27 | 3 | 0.2 | 7.8 | .0016 | +34 |
| microsoft | 33 | 1394 | 120 | 939 | 310 | 8 | 378 | 32 | 2.3 | 7.8 | .0040 | -19 |
| 43 | 455 | 72 | 134 | 228 | 18 | 73 | 5 | 1.1 | 6.5 | .0023 | +43 | |
| red hat | 42 | 264 | 13 | 121 | 113 | 17 | 4 | 0 | 0.0 | 7.0 | .0024 | +31 |
| apple | 1 | 245 | 57 | 67 | 112 | 2 | 93 | 7 | 2.9 | 7.1 | .0028 | +1 |
| suse | 5 | 5 | 1 | 2 | 2 | 0 | 0 | 0 | 0.0 | 7.3 | .0022 | +5 |
| canonical | 0 | 3 | 0 | 2 | 1 | 0 | 0 | 0 | 0.0 | 7.8 | .0013 | 0 |
| android | 0 | 1 | 0 | 1 | 0 | 0 | 16 | 1 | 100.0 | 8.4 | .0171 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| cisco | 30 | 50 | 9 | 24 | 9 | 0 | 96 | 13 | 26.0 | 7.8 | .0033 | +30 |
| fortinet | 0 | 18 | 2 | 4 | 9 | 0 | 28 | 6 | 33.3 | 6.1 | .0054 | 0 |
| palo alto networks | 0 | 15 | 0 | 1 | 7 | 5 | 14 | 2 | 13.3 | 4.7 | .0028 | -1 |
| vmware | 0 | 12 | 4 | 7 | 0 | 1 | 21 | 0 | 0.0 | 8.7 | .0044 | 0 |
| checkpoint | 1 | 5 | 4 | 1 | 0 | 0 | 3 | 2 | 40.0 | 9.3 | .2062 | +1 |
| f5 | 0 | 5 | 4 | 0 | 0 | 0 | 7 | 1 | 20.0 | 9.2 | .0402 | 0 |
| ivanti | 0 | 5 | 1 | 0 | 0 | 0 | 33 | 5 | 100.0 | 10.0 | .8152 | 0 |
| zyxel | 3 | 4 | 0 | 3 | 1 | 0 | 11 | 0 | 0.0 | 7.2 | .0075 | +3 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| apache | 61 | 198 | 36 | 107 | 54 | 1 | 40 | 2 | 1.0 | 7.5 | .0048 | +61 |
| mozilla | 1 | 73 | 42 | 26 | 5 | 0 | 13 | 0 | 0.0 | 9.1 | .0031 | +1 |
| gitlab | 0 | 15 | 0 | 2 | 10 | 1 | 4 | 2 | 13.3 | 4.9 | .0029 | 0 |
| github | 2 | 4 | 0 | 2 | 2 | 0 | 0 | 0 | 0.0 | 7.0 | .0040 | +2 |
| wordpress | 1 | 4 | 1 | 2 | 1 | 0 | 5 | 2 | 50.0 | 8.8 | .3700 | +1 |
| docker | 0 | 3 | 0 | 1 | 2 | 0 | 1 | 0 | 0.0 | 5.7 | .0015 | 0 |
| drupal | 0 | 1 | 1 | 0 | 0 | 0 | 5 | 1 | 100.0 | 9.8 | .8832 | 0 |
| kubernetes | 0 | 1 | 0 | 0 | 0 | 1 | 0 | 0 | 0.0 | 2.4 | .0024 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| oracle | 0 | 1113 | 212 | 539 | 304 | 57 | 40 | 3 | 0.3 | 7.6 | .0031 | 0 |
| ibm | 32 | 140 | 36 | 61 | 42 | 1 | 7 | 1 | 0.7 | 7.5 | .0027 | +32 |
| adobe | 8 | 48 | 16 | 23 | 5 | 0 | 75 | 4 | 8.3 | 8.6 | .0047 | +7 |
| progress | 11 | 34 | 11 | 18 | 5 | 0 | 9 | 1 | 2.9 | 8.1 | .0030 | +11 |
| solarwinds | 0 | 20 | 16 | 1 | 1 | 0 | 11 | 4 | 20.0 | 9.1 | .0050 | 0 |
| veeam | 10 | 12 | 3 | 7 | 2 | 0 | 4 | 0 | 0.0 | 8.6 | .0027 | +10 |
| atlassian | 0 | 3 | 0 | 3 | 0 | 0 | 13 | 0 | 0.0 | 8.0 | .0026 | 0 |
| zohocorp | 0 | 3 | 1 | 1 | 1 | 0 | 0 | 0 | 0.0 | 7.1 | .0048 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| d-link | 15 | 23 | 15 | 0 | 6 | 1 | 26 | 1 | 4.3 | 9.3 | .0209 | +15 |
| hikvision | 0 | 7 | 0 | 4 | 2 | 0 | 2 | 1 | 14.3 | 7.2 | .0025 | 0 |
| bosch | 0 | 3 | 0 | 3 | 0 | 0 | 0 | 0 | 0.0 | 8.1 | .0028 | 0 |
| schneider electric | 0 | 3 | 1 | 2 | 0 | 0 | 1 | 0 | 0.0 | 8.7 | .0020 | 0 |
| synology | 1 | 1 | 0 | 1 | 0 | 0 | 0 | 0 | 0.0 | 7.3 | .0013 | +1 |
| honeywell | 0 | 1 | 0 | 0 | 1 | 0 | 0 | 0 | 0.0 | 6.9 | .0031 | 0 |
| mitsubishi electric | 0 | 1 | 0 | 1 | 0 | 0 | 0 | 0 | 0.0 | 7.1 | .0013 | 0 |
| rockwell automation | 0 | 1 | 1 | 0 | 0 | 0 | 0 | 0 | 0.0 | 9.2 | .0030 | 0 |
| Vendor | MTD | YTD | C | H | M | L | KEV | KEV YTD | KEV/100 | Med CVSS | Med EPSS | Δ |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| surrealdb | 0 | 57 | 3 | 26 | 25 | 3 | 0 | 0 | 0.0 | 7.1 | .0025 | 0 |
| netty | 1 | 42 | 6 | 27 | 8 | 1 | 0 | 0 | 0.0 | 7.5 | .0046 | +1 |
| legion of the bouncy castle | 34 | 41 | 5 | 27 | 9 | 0 | 0 | 0 | 0.0 | 8.7 | .0026 | +34 |
| grafana | 0 | 41 | 2 | 14 | 22 | 3 | 0 | 0 | 0.0 | 6.5 | .0033 | -1 |
| open ises | 0 | 37 | 2 | 14 | 21 | 0 | 0 | 0 | 0.0 | 6.9 | .0021 | 0 |
| mediatek | 34 | 34 | 0 | 4 | 30 | 0 | 1 | 0 | 0.0 | 6.0 | .0011 | +34 |
| erlang | 0 | 32 | 1 | 14 | 14 | 3 | 1 | 0 | 0.0 | 6.9 | .0033 | -6 |
| freerdp | 23 | 31 | 8 | 18 | 4 | 1 | 0 | 0 | 0.0 | 8.7 | .0034 | +23 |
| CVE | EPSS | %ile | CVSS |
|---|---|---|---|
| CVE-2026-8037 | .9931 | 99.9 | 9.8 |
| CVE-2026-63030 | .9560 | 99.9 | 9.8 |
| CVE-2026-39808 | .9121 | 99.8 | — |
| CVE-2026-34486 | .8293 | 99.6 | 7.5 |
| CVE-2026-48939 | .8250 | 99.6 | 10.0 |
| CVE-2026-50522 | .7698 | 99.5 | 9.8 |
| CVE-2026-15410 | .7635 | 99.5 | 7.2 |
| CVE-2026-56291 | .7607 | 99.5 | 10.0 |
| CVE-2026-15409 | .7422 | 99.4 | 10.0 |
| CVE-2026-25089 | .7360 | 99.4 | 9.8 |
| CVE | CVSS | EPSS | Note |
|---|---|---|---|
| CVE-2026-48939 | 10.0 | .8250 | KEV |
| CVE-2026-56291 | 10.0 | .7607 | KEV |
| CVE-2026-15409 | 10.0 | .7422 | KEV |
| CVE-2026-8985 | 10.0 | .0660 | |
| CVE-2026-6516 | 10.0 | .0473 | |
| CVE-2026-47668 | 10.0 | .0434 | |
| CVE-2026-44359 | 10.0 | .0100 | |
| CVE-2025-71389 | 10.0 | .0093 | |
| CVE-2026-48168 | 10.0 | .0091 | |
| CVE-2026-56163 | 10.0 | .0090 |
| Vendor | CVEs |
|---|---|
| oracle | 1109 |
| linux | 701 |
| microsoft | 639 |
| 446 | |
| apple | 168 |
| apache | 166 |
| red hat | 152 |
| ibm | 132 |
| mozilla | 68 |
| surrealdb | 57 |
| Vendor | KEV |
|---|---|
| microsoft | 32 |
| cisco | 13 |
| apple | 7 |
| fortinet | 6 |
| 5 | |
| ivanti | 5 |
| adobe | 4 |
| langflow | 4 |
| solarwinds | 4 |
| synacor | 4 |
| Ecosystem | Advisories |
|---|---|
| Maven | 62 |
| PyPI | 5 |
| Go | 3 |
| npm | 3 |
| crates.io | 2 |
| NuGet | 1 |
| Packagist | 1 |
| CVE | Vendor | Days |
|---|---|---|
| CVE-2008-4128 | Cisco | 0 |
| CVE-2021-27137 | DD-WRT | 0 |
| CVE-2023-4346 | KNX Association | 0 |
| CVE-2025-68686 | Fortinet | 0 |
| CVE-2026-0770 | Langflow | 0 |
| CVE-2026-15409 | SonicWall | 0 |
| CVE-2026-15410 | SonicWall | 0 |
| CVE-2026-16232 | checkpoint | 0 |
| CVE-2026-16812 | Arista Networks | 0 |
| CVE-2026-18556 | N-able | 0 |
| CVE | Vendor | Due | Days over |
|---|---|---|---|
| CVE-2021-27104 | Accellion | 2021-11-17 | 1725 |
| CVE-2021-27102 | Accellion | 2021-11-17 | 1725 |
| CVE-2021-27101 | Accellion | 2021-11-17 | 1725 |
| CVE-2021-27103 | Accellion | 2021-11-17 | 1725 |
| CVE-2021-21017 | Adobe | 2021-11-17 | 1725 |
| CVE-2021-28550 | Adobe | 2021-11-17 | 1725 |
| CVE-2021-42013 | Apache | 2021-11-17 | 1725 |
| CVE-2021-41773 | Apache | 2021-11-17 | 1725 |
| CVE-2021-30858 | Apple | 2021-11-17 | 1725 |
| CVE-2021-30860 | Apple | 2021-11-17 | 1725 |
EXPLOIT PUBLISHED — CVE-2026-19192 (DeepCool DisplayService). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-19193 (Jiangmin Antivirus). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-19195 (V-Secure Jingyun Antivirus). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-19207 (PHPGurukul Company Visitor Management System). Public exploit reference added.
EXPLOIT PUBLISHED — CVE-2026-19212 (WonderTrader). Public exploit reference added.
DUE DATE PASSED — CVE-2026-18556 (N-able N-central). CISA remediation deadline was August 7, 2026; still in catalog.
DUE DATE PASSED — CVE-2026-34486 (Apache Software Foundation Apache Tomcat). CISA remediation deadline was August 7, 2026; still in catalog.
DUE DATE PASSED — CVE-2026-9198 (IBM Langflow OSS). CISA remediation deadline was August 7, 2026; still in catalog.
62 CVEs published. 25 box scores, 37 table rows — nothing truncated.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0213 80.4 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0213 80.4 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0209 80.0 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0174 75.8 —
AFFECTED Product Versions Fixed DWR-M961 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0162 74.1 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV A L N L N L L L 5.1 .0152 72.4 —
AFFECTED Product Versions Fixed context-engine 1.0 – 1.9.1
TIMELINE Aug 7 Reserved by CNA Aug 8 Published (CNA: VulDB)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N H H H 9.3 .0135 69.2 —
AFFECTED Product Versions Fixed Radix AXE6600 unspecified —
TIMELINE Aug 8 Reserved by CNA Aug 8 Published (CNA: VulnCheck)
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 6.9 .0134 68.8 —
AFFECTED Product Versions Fixed mcp-bridge-api b30a82aa1d1d1139e0de846c41c8aadee6e06114 – —
TIMELINE Aug 7 Reserved by CNA Aug 8 Published (CNA: VulDB)
| CVE | CVSS | EPSS %ile | Vendor | Product | CWE | Title |
|---|---|---|---|---|---|---|
| CVE-2026-19268 | 2.1 | 62.0 | abdullah1854 | MCPGateway | CWE-74 | abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageB… |
| CVE-2026-19279 | 1.9 | 51.3 | MIMICLab | mcp-pdf-vision | CWE-74 | MIMICLab mcp-pdf-vision index.ts load_pdf command injection |
| CVE-2026-19281 | 1.9 | 47.0 | adolfosalasgomez3011 | slidev-builder-mcp | CWE-74 | adolfosalasgomez3011 slidev-builder-mcp generateAssets Tool generateAssets.ts… |
| CVE-2026-19284 | 1.9 | 46.9 | MauricioMilano | coder-api | CWE-74 | MauricioMilano coder-api Projects Endpoint projects.ts createProject command … |
| CVE-2026-19282 | 1.9 | 46.5 | andreahaku | llm_memory_mcp | CWE-74 | andreahaku llm_memory_mcp GitHooksManager.ts auto.capture command injection |
| CVE-2026-14526 | 9.8 | 46.4 | wupsales | AI Copilot – Content Generator | CWE-269 | AI Copilot – Content Generator <= 1.5.6 - Unauthenticated Privilege Escalatio… |
| CVE-2026-71957 | 9.3 | 45.6 | D-Link Corporation | DWR-M961 | CWE-120 | D-Link DWR-M961 Buffer Overflow via app.cgi |
| CVE-2026-71958 | 9.3 | 44.1 | D-Link Corporation | DWR-M961 | CWE-120 | D-Link DWR-M961 Buffer Overflow via quicksetup.cgi |
| CVE-2026-67620 | 6.3 | 35.6 | FlowiseAI | Flowise | CWE-918 | Flowise 3.1.4 SSRF via fetch-links Endpoint Incomplete Deny-List |
| CVE-2026-8798 | 8.7 | 25.8 | Legion of the Bouncy Castle Inc. | BC-FJA | CWE-835 | Native entropy source retries the CPU entropy instructions without limit |
| CVE-2026-68082 | 9.8 | 23.4 | Linux | Linux | — | libceph: fix two unsafe bare decodes in decode_lockers() |
| CVE-2026-16578 | 7.5 | 21.3 | Unknown | Admin Safety Guard — Login Security, Limit Logins, 2FA & Brute Force Protection | CWE-200 | Admin Safety Guard < 1.4.0 - Unauthenticated User Data Disclosure via 2fa/app… |
| CVE-2026-16267 | 8.1 | 18.9 | Unknown | Newsletters | CWE-502 | Newsletters < 4.16 - Unauthenticated PHP Object Injection via Date Form Field |
| CVE-2026-18988 | 6.4 | 18.6 | shapedplugin | Easy Accordion – AI-Powered FAQ & Accordion Blocks, Product FAQ | CWE-79 | Easy Accordion <= 3.1.8 - Authenticated (Contributor+) Stored Cross-Site Scri… |
| CVE-2026-13505 | 8.7 | 16.9 | Legion of the Bouncy Castle Inc. | BC-FJA | CWE-772 | Zeroisation of sensitive key material on garbage collection relies on finaliz… |
| CVE-2026-16594 | 7.5 | 16.0 | Unknown | WP Directory Kit | CWE-200 | WP Directory Kit < 1.5.5 - Subscriber+ Plugin Settings and API Key Disclosure |
| CVE-2026-16559 | 6.8 | 14.7 | Unknown | YMC Filter | CWE-79 | YMC Filter < 3.12.9 - Author+ Stored XSS via SVG Icon Upload |
| CVE-2026-16955 | 5.0 | 14.2 | Unknown | AI Engine | CWE-22 | AI Engine < 3.6.6 - Subscriber+ Arbitrary File Read via Audio Transcription |
| CVE-2026-16269 | 4.8 | 13.6 | Unknown | Newsletters | CWE-287 | Newsletters < 4.16 - Unauthenticated API Authentication Bypass via Type Juggling |
| CVE-2026-16562 | 6.5 | 12.6 | Unknown | WP Statistics | CWE-200 | WP Statistics < 14.16.10 - Subscriber+ Sensitive Data Disclosure via Metabox … |
| CVE-2026-16590 | 6.5 | 12.6 | Unknown | WP Directory Kit | CWE-200 | WP Directory Kit < 1.5.5 - Subscriber+ Contact Message and User Data Disclosure |
| CVE-2026-16595 | 6.5 | 12.6 | Unknown | WP Directory Kit | CWE-200 | WP Directory Kit < 1.5.5 - Subscriber+ User and Unpublished Listing Disclosure |
| CVE-2026-16589 | 7.7 | 12.2 | Unknown | WP Directory Kit | CWE-89 | WP Directory Kit < 1.5.5 - Subscriber+ SQL Injection via data_fields_list Par… |
| CVE-2026-16948 | 8.1 | 11.5 | Unknown | Solace Extra | CWE-284 | Solace Extra < 1.6.1 - Subscriber+ Multiple Missing Authorization via Site-Wi… |
| CVE-2026-42170 | 7.8 | 8.7 | Red Hat | Red Hat Enterprise Linux 6 | CWE-131 | Gimp: gimp dds plug-in heap-based buffer overflow via bpp mismatch in load_la… |
| CVE-2026-16282 | 5.3 | 8.0 | Unknown | Appointment Hour Booking | CWE-287 | Appointment Hour Booking < 1.5.88 - Unauthenticated Booking Price Manipulatio… |
| CVE-2026-16608 | 5.3 | 8.0 | Unknown | Download Monitor | CWE-862 | Download Monitor < 5.2.6 - Unauthenticated Download Log Injection |
| CVE-2026-16953 | 4.8 | 6.8 | Unknown | AI Engine | CWE-639 | AI Engine < 3.6.4 - Unauthenticated Cross-Session Chatbot File Deletion via F… |
| CVE-2026-16535 | 6.1 | 5.9 | Unknown | Link Library | CWE-79 | Link Library < 7.9.4 - Reflected XSS via Thumbs-Rating likelabel |
| CVE-2026-68081 | await | 5.2 | Linux | Linux | — | KVM: nVMX: Put vmcs12 pages if nested VM-Enter fails due to invalid guest state |
| CVE-2026-16574 | 5.4 | 3.6 | Unknown | Dokan: AI Powered WooCommerce Multivendor Marketplace Solution | CWE-639 | Dokan < 5.0.11 - Vendor+ Cross-Vendor Downloadable Product Access Grant via O… |
| CVE-2026-19287 | 1.9 | 3.6 | abrinsmead | mindpilot-mcp | CWE-22 | abrinsmead mindpilot-mcp HistoryService path traversal |
| CVE-2026-19270 | 1.9 | 3.6 | Hulupeep | mcp-ui-probe | CWE-22 | Hulupeep mcp-ui-probe Journey/Usage JourneyStorage.ts usage_stats path traversal |
| CVE-2026-19285 | 1.9 | 3.6 | aaronsb | memory-graph | CWE-22 | aaronsb memory-graph memoryTools.ts JsonMemoryStorage.saveMemories path trave… |
| CVE-2026-19288 | 1.9 | 3.6 | astralisone | rive-mcp-server-core | CWE-22 | astralisone rive-mcp-server-core importRiveFile Flow importRiveFile.ts path t… |
| CVE-2026-16558 | 5.4 | 3.3 | Unknown | YMC Filter | CWE-79 | YMC Filter < 3.12.8 - Contributor+ Stored XSS via Layout Builder Schema |
| CVE-2026-19259 | 1.9 | 2.5 | MZ Automation | libiec61850 | CWE-119 | MZ Automation libiec61850 MMS Protocol Workflow iec61850_common.c MmsMapping_… |
Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.
Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.
Day boundary. A day is a UTC calendar day. This page covers 2026-08-08 00:00:00–23:59:59 UTC. All times shown are UTC.
Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.
Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.