CVEs published in August 2026

CVE-2026-62827High

Microsoft SharePoint Server Elevation of Privilege Vulnerability

CVE-2026-62829Medium

Microsoft SharePoint Server Spoofing Vulnerability

CVE-2026-57105High

Microsoft Office SharePoint Spoofing Vulnerability

CVE-2026-56174High

Windows Narrator Braille Elevation of Privilege Vulnerability

CVE-2026-50472High

Windows LUA File Virtualization Filter Driver Elevation of Privilege Vulnerability

CVE-2026-69223Critical

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF)

CVE-2026-73088High

Prototype pollution leading to denial of service

CVE-2026-73086High

Predictable ID generation due to integer overflow

CVE-2026-20349HighCISA KEV

Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Heap Inspection Vulnerability

CVE-2026-9214Medium

Insufficient input validation vulnerability in the NETGEAR R7000 models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality

CVE-2026-11736Low

stack-based buffer overflow vulnerability affects certain NETGEAR models allowing an authenticated admin user to make unauthorized modification to router software and functionality

CVE-2026-11735Low

stack-based buffer overflow vulnerability affects the listed NETGEAR models allowing an authenticated admin user to make unauthorized modification to the router's software and functionality

CVE-2026-11738Medium

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to router software and functionality

CVE-2026-11739Medium

command injection vulnerability in certain affected NETGEAR Nighthawk devices allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker in the middle) to compromise the confidentiality and integrity of the affected device

CVE-2026-11734Low

buffer overflow vulnerability in the listed NETGEAR models allows an authenticated admin user to cause the affected device to become temporarily unavailable

CVE-2026-11733Low

buffer overflow vulnerability in the listed NETGEAR models allows a device administrator to temporarily interrupt the normal operation of the affected device

CVE-2026-11737Medium

Insufficient input validation vulnerability in the listed NETGEAR models allows authenticated administrators connected to the local network to make unauthorized modification to the device software and functionality

CVE-2026-11814Medium

command injection vulnerability in the listed NETGEAR models allows a network-adjacent attacker with the ability to intercept and modify local network traffic (attacker-in-the-middle) to compromise the confidentiality and integrity of the affected device

CVE-2026-18129High

Cleartext transmission of sensitive information in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker in a MITM position to leak credentials for external SQL connections

CVE-2026-18127High

External control of a filename in the Core of Ivanti Endpoint Manager before version 2024 SU7 allows a remote authenticated attacker full write control over an S3 bucket configured for session recording storage

CVE-2026-18125High

out-of-bounds read in the Agent of Ivanti Endpoint Manager before version 2024 SU7 allows a remote unauthenticated attacker to crash an agent service

CVE-2026-13738Critical

Improper Authorization Validation

CVE-2026-13737Critical

Command Restriction Bypass

CVE-2026-13739High

Server-Side Request Forgery (SSRF)

CVE-2026-70354High

.NET Core Remote Code Execution Vulnerability

CVE-2026-6727High

MITRE: CVE-2026-6727 TPM 2.0 RSA OAEP Timing Side-Channel Vulnerability

CVE-2026-6726High

MITRE: CVE-2026-6726 TPM 2.0 Improper Object Slot Reuse

CVE-2026-65810High

.NET Framework Elevation of Privilege Vulnerability

CVE-2026-62886High

.NET Elevation of Privilege Vulnerability

CVE-2026-62872High

.NET Framework Elevation of Privilege Vulnerability

CVE-2026-62727High

Windows Telephony Service Elevation of Privilege Vulnerability

CVE-2026-66799High

Windows Key Guard Elevation of Privilege Vulnerability

CVE-2026-66797High

Velero Restore includes cluster-scoped RBAC resources with no exclusion — tampered backup yields hub cluster-admin

CVE-2026-66805High

stored DOM XSS via unescaped pod logs in document.write

CVE-2026-68872Medium

Apache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or Variable

CVE-2026-68871Medium

Apache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or Variable

CVE-2026-68870Medium

Apache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or Variable

CVE-2026-6374High

Use of Hard-coded Credentials vulnerability in Zyxel Networks WAH7601 allows Read Sensitive Constants Within an Executable

CVE-2026-6373Medium

Exposure of sensitive system information to an unauthorized control sphere vulnerability in Zyxel Networks WAH7601 allows Web Application Fingerprinting

CVE-2026-13206Critical

Improper neutralization of special elements used in an OS command ('OS command injection') vulnerability in Zyxel Networks WAH7601 allows OS Command Injection

CVE-2026-12984High

Insufficiently Protected Credentials vulnerability in Zyxel Networks WAH7601 allows Retrieve Embedded Sensitive Data

CVE-2026-61899High

Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs

CVE-2026-28672Critical

Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger

CVE-2026-32227Critical

SQL Injection vulnerability vulnerability in Apache Ranger

CVE-2026-40920Critical

Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0

CVE-2026-42537Critical

Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue

CVE-2026-44416Critical

Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0

CVE-2026-55799Critical

Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue

CVE-2026-55814High

Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0

CVE-2026-65942High

TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0

CVE-2026-65945Medium

Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0 Users are recommended to upgrade to version 2.9.0, which fixes this issue

CVE-2026-65948High

UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0

CVE-2026-44630High

Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service

CVE-2026-72522Medium

Denial of Service due to incorrect Unicode surrogate handling

CVE-2026-66151Medium

Global VPN Client: SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec…

CVE-2026-20348High

CVE-2026-20347High

CVE-2026-20346High

CVE-2026-20345High

CVE-2026-20339High

CVE-2026-20338High

CVE-2026-20337High

CVE-2026-71559High

Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic

CVE-2026-71558Critical

Heap type confusion vulnerability in Apache Fory C++ deserialization

CVE-2026-71560Critical

Out-of-bounds Read vulnerability in Apache Fory C++ deserialization

CVE-2026-63263Medium

Elasticsearch Vulnerability in NetApp Products

CVE-2026-63144Medium

Elasticsearch Vulnerability in NetApp Products

CVE-2026-63140Medium

Elasticsearch Vulnerability in NetApp Products

CVE-2026-63136Medium

Elasticsearch Vulnerability in NetApp Products

CVE-2026-56145Medium

Elasticsearch Vulnerability in NetApp Products

CVE-2026-56144Medium

Elasticsearch Vulnerability in NetApp Products

CVE-2026-70332Critical

Microsoft Office SharePoint Spoofing Vulnerability

CVE-2026-50481Critical

Azure Active Directory Elevation of Privilege Vulnerability

CVE-2026-41861Medium

BOSH: Path Traversal in BOSH-Ecosystem / BOSH allows an IaaS-metadata attacker to make the agent write a root-owned file wi…

CVE-2026-18367Critical

privilege escalation vulnerability allows local users to execute arbitrary code as root via Sophos Endpoint for macOS older than version 2026.1.1 and Sophos Home for macOS older than version 10.11.6

CVE-2026-66808High

unsanitized hub ConfigMap data passed as CLI arguments to privileged install Job (argument injection)

CVE-2025-49506High

Information disclosure via timing attack in password validation

CVE-2026-32327Critical

bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem function

CVE-2026-34191Critical

SQL Injection via apr_dbd_oracle

CVE-2026-34501High

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client

CVE-2026-34502High

Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3

CVE-2026-57818High

race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens

CVE-2026-61466Critical

In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist

CVE-2026-63687Critical

Security bypass due to improper handling of authorization parameters

CVE-2026-65583Critical

Apache CXF Vulnerability in NetApp Products

CVE-2026-68079Critical

In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality

CVE-2026-68481High

Revocation bypass allows unauthorized access

CVE-2026-65432High

Apache CXF Vulnerability in NetApp Products

CVE-2026-57817High

Apache CXF Vulnerability in NetApp Products

CVE-2026-66909Critical

Remote Code Execution via unsafe deserialization of JMS ObjectMessage

CVE-2026-64958High

Apache CXF Vulnerability in NetApp Products

CVE-2026-57819High

Apache CXF Vulnerability in NetApp Products

CVE-2026-54225High

Apache CXF Vulnerability in NetApp Products

CVE-2026-64640Medium

Apache Polaris did not consistently validate storage locations supplied during table and view registration

CVE-2026-20308Medium

Cisco IOS XE Software Web-Based Management Interface Denial of Service Vulnerability

CVE-2026-60053Critical

Insufficient Session Expiration vulnerability in Apache Answer

CVE-2026-60023High

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer

CVE-2026-50749Medium

Improper Authorization vulnerability in Apache Answer

CVE-2026-48912Medium

Improper Input Validation vulnerability in Apache Answer

CVE-2026-48911High

Insufficient Verification of Data Authenticity vulnerability in Apache Answer