CVEs published in August 2026

CVE-2026-20355Medium

CVE-2026-20354Medium

CVE-2026-20281High

Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability

CVE-2026-20280Critical

CVE-2026-20279Critical

CVE-2026-20278Critical

CVE-2026-20277Critical

CVE-2026-20276Critical

CVE-2026-20275Critical

CVE-2026-20274Critical

CVE-2026-20212Critical

Cisco Nexus 9000 Series Switches Silicon One Remote Code Execution Vulnerability

CVE-2025-10903Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 11.10 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user could have caused denial of service, due to an unbounded loop triggered by specially crafted input in the SCIM user provisioning feature

CVE-2026-3035Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 11.3 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with project Maintainer permissions could have accessed the terminal of a protected environment they were not authorized to use due to improper authorization checks

CVE-2026-7487Low

GitLab has remediated an issue in GitLab EE affecting all versions from 13.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with reporter-role permissions who authored a merge request could have reset merge request approval rules due to improper authorization checks

CVE-2026-15387Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have influenced the execution environment of Pipeline Execution Policy enforcement jobs, due to improper handling of job dependencies

CVE-2026-18252High

GitLab has remediated an issue in GitLab EE affecting all versions from 18.9 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, an authenticated user with developer-role permissions could have executed arbitrary commands in a CI context, due to the Claude agent processing configuration from a user-controlled source

CVE-2026-77801Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 12.8 before 19.1.7, 19.2 before 19.2.5, and 19.3 before 19.3.1 that, under certain conditions, could have allowed an authenticated user to cause a denial of service affecting background job processing, due to missing object count limits

CVE-2026-63041Medium

Reliance on Untrusted Inputs in a Security Decision vulnerability in Apache APISIX

CVE-2026-77532High

malicious actor with access to an adjacent network could exploit a Buffer Overflow vulnerability found in a DHCPv6-enabled EdgeMAX EdgeSwitch to initiate a Remote Code Execution on such device

CVE-2026-77557Critical

malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Protect AI Key to escalate privileges on the device

CVE-2026-77554Critical

malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Talk Application to execute a Command Injection on the host device

CVE-2026-77553Critical

malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in UniFi Access Application to escalate privileges on the host device

CVE-2026-77552Critical

malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Enterprise Audio/Video Bridge to execute a Command Injection on the device

CVE-2026-77551Critical

malicious actor with access to the network and under certain conditions could exploit an Improper Access Control vulnerability found in UniFi Connect Display Cast Pro to escalate privileges on the device

CVE-2026-77550Critical

malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances

CVE-2026-77549Critical

malicious actor with access to the network and under certain conditions could exploit an Improper Neutralization of CRLF Sequences vulnerability found in certain devices running UniFi OS to bypass authentication to such UniFi OS devices or instances

CVE-2026-77548Critical

malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device

CVE-2026-77547Critical

malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device

CVE-2026-77546Critical

malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device

CVE-2026-77545Critical

malicious actor with access to the network, low privileges and under certain conditions could exploit an Active Debug Code vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances

CVE-2026-77543Critical

malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Access Application to execute a Command Injection on the host device

CVE-2026-77542Critical

Ubiquiti: malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UID Enterprise Agent to execute a Command Injection on the host device

CVE-2026-77541Critical

malicious actor with access to the network and high privileges could exploit an Improper Access Control vulnerability found in UniFi Network Application to escalate privileges within the UniFi Network Application

CVE-2026-77540Critical

malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device

CVE-2026-77539Critical

malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi OS Server to execute a Command Injection on the host device

CVE-2026-77538High

malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi Connect Application to escalate privileges within the UniFi Connect Application

CVE-2026-77537Critical

malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device

CVE-2026-77536Critical

malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances

CVE-2026-77535Critical

malicious actor with access to the network and high privileges could exploit an Improper Input Validation vulnerability found in UniFi Network Application to execute a Command Injection on an adopted device

CVE-2026-77534Critical

malicious actor with access to the network and low privileges could exploit an Improper Access Control vulnerability found in certain devices running UniFi OS to escalate privileges within such UniFi OS devices or instances

CVE-2026-77533Critical

malicious actor with access to the network and low privileges could exploit an Improper Input Validation vulnerability found in UniFi Protect Application to execute a Command Injection on the host device

CVE-2026-41707High

Spring Security: Authentication Bypass by Capture-replay vulnerability in Spring Spring Security allows Spring Security's DPoPProofJwt…

CVE-2026-73180Medium

Insufficient Session Expiration vulnerability in Apache Tomcat meant that if the session ID for an authenticated HTTP session was changed after a WebSocket connection had been established under that authenticated HTTP session, the WebSokcet session would not be closed as required by the Jakarta WebSocket specification when the HTTP session ended

CVE-2026-68763High

Uncontrolled Resource Consumption vulnerability in Apache Tomcat via an allocation leak in the HTTP/2 backlog tracking when a stream is reset This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.24, from 10.1.0-M1 through 10.1.57, from 9.0.39 through 9.0.120

CVE-2026-68569High

Improper Authentication due to principal lookup failure

CVE-2026-68525Critical

Unauthorized resource access via FORM authentication bypass

CVE-2026-66422High

Improper Authorization vulnerability in Apache Tomcat cause by security-role-ref definitions being incorrectly used as role aliases within the Realm in additional to the correct usage with Request.isUserInRole

CVE-2026-65927High

Off-by-one Error vulnerability in Apache Tomcat impacting the [N] flag on the rewrite valves causes rewrite processing to restart at the second rule rather than the first rule

CVE-2026-65905Critical

Apache Tomcat Vulnerability in NetApp Products

CVE-2026-65637Critical

MITM (Man-in-the-Middle) org.apache.tomcat:tomcat-coyote Dependency in Confluence Data Center

CVE-2026-65183High

Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat when creating unix domain sockets allows an unauthorised local user to access the unix domain socket

CVE-2026-65182Critical

Security constraint bypass due to improper access control

CVE-2026-66153High

The NEService auto-upgrade process insecurely handles temporary files in SonicWall NetExtender Linux client which allows an attacker to manipulate file paths

CVE-2026-66152High

Path traversal vulnerability in OPSWAT tarball in the SonicWall NetExtender Linux client allows an attacker to write arbitrary file as root

CVE-2026-63075Critical

QUIC ACK-only packet retention can cause memory exhaustion

CVE-2026-75803Critical

OpenSSL Vulnerability in NetApp Products

CVE-2026-57910Critical

Improper authentication in the WatchGuard Agent allows an unauthenticated attacker with network access to cause the agent to execute arbitrary code with elevated privileges

CVE-2026-57909Critical

path traversal vulnerability in WatchGuard Agent allows a remote, unauthenticated attacker on an adjacent network to execute arbitrary code on an affected system

CVE-2026-49845Critical

SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata (including statistics updates, truncation targets, and file-metadata cache operations) via crafted partition names in metastore RPC requests when direct SQL is enabled (the default)

CVE-2026-55976Critical

Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is subsequently queried

CVE-2026-53561High

improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an unauthenticated network attacker to authenticate as an arbitrary Hive user and obtain an authenticated HiveServer2 session via a forged Authorization: Bearer token sent to the /cliservice HTTP endpoint

CVE-2026-49050High

General user can mint admin access tokens via /access-tokens This issue affects Apache DolphinScheduler: before 3.4.2

CVE-2026-93026Critical

CVE-2026-63076Critical

invalid pointer dereference in CMP server via crafted protectionAlg

CVE-2026-63074Critical

OpenSSL Vulnerability in NetApp Products

CVE-2026-63073Critical

untrusted sender DN used as format string in CMP response validation

CVE-2026-63072Critical

heap buffer overflow in CMS key unwrapping

CVE-2026-58070Medium

CVE-2026-58069Medium

CVE-2026-58068Medium

CVE-2026-54874Critical

excessive memory use buffering DTLS records for a future epoch

CVE-2026-18798Critical

QUIC server may trigger double free when processing INITIAL packet

CVE-2026-14457Critical

RPK server signature algorithm selection can dereference a missing certificate

CVE-2026-108142Critical

CVE-2026-108141Critical

CVE-2026-108140Critical

CVE-2026-105477Critical

CVE-2025-64393Critical

CVE-2025-64392Critical

CVE-2025-64391Medium

CVE-2025-59470Unrated

CVE-2025-59469Unrated

CVE-2025-59468Unrated

CVE-2025-55125Unrated

CVE-2025-48984Unrated

CVE-2025-48983Unrated

CVE-2025-48982Unrated

CVE-2025-24287Unrated

CVE-2025-24286Unrated

CVE-2025-23121Unrated

CVE-2025-23120Unrated

CVE-2024-45207Unrated

CVE-2024-45204Unrated

CVE-2024-42457Unrated

CVE-2024-42456Unrated

CVE-2024-42455Unrated

CVE-2024-42453Unrated

CVE-2024-42452Unrated

CVE-2024-42451Unrated

CVE-2024-40717Unrated