2026-08-12 (Critical: 43, High: 138)

[github-actions]

CVE Daily Brief

Date: 2026-08-12

Summary

• Total qualifying CVEs: 181
• Critical: 43
• High: 138
• With GitHub PoC references: 55
• In CISA KEV: 1

Critical

All Critical CVE details are preserved across this issue and managed follow-up comments.

High Index

• 🟠 CVE-2026-20702 | CVSS 8.9 | Protection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP) may allow information disclosure. Unprivi…
• 🟠 CVE-2026-19546 | CVSS 8.8 | A flaw was found in DBI. This is a fix for a partial fix for CVE-2026-14380 for RHEL 9.8.z and 10.2.z. For a detailed Statement, Descriptio…
• 🟠 CVE-2026-49179 | CVSS 8.8 | Improper neutralization of special elements used in a command ('command injection') in Windows Active Directory allows an unauthorized atta…
• 🟠 CVE-2026-57104 | CVSS 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Azure Storage Explorer allows an unauthorized attac…
• 🟠 CVE-2026-59113 | CVSS 8.8 | Missing authorization in Visual Studio Code allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-59133 | CVSS 8.8 | Execution with unnecessary privileges in Microsoft High Performance Computing (HPC) Pack allows an authorized attacker to elevate privilege…
• 🟠 CVE-2026-62784 | CVSS 8.8 | Heap-based buffer overflow in Microsoft Local Security Authority Server (lsasrv) allows an authorized attacker to execute code over a netwo…
• 🟠 CVE-2026-62785 | CVSS 8.8 | Heap-based buffer overflow in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a n…
• 🟠 CVE-2026-62790 | CVSS 8.8 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-62795 | CVSS 8.8 | Use after free in Windows LDAP - Lightweight Directory Access Protocol allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-62800 | CVSS 8.8 | Heap-based buffer overflow in Windows SMB Server allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-62816 | CVSS 8.8 | Heap-based buffer overflow in Reliable Multicast Transport Driver (RMCAST) allows an unauthorized attacker to execute code over an adjacent…
• 🟠 CVE-2026-62817 | CVSS 8.8 | Out-of-bounds write in Windows DNS allows an unauthorized attacker to execute code over an adjacent network.
• 🟠 CVE-2026-62818 | CVSS 8.8 | Use after free in Active Directory Certificate Services (AD CS) allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-62822 | CVSS 8.8 | Integer overflow or wraparound in Windows GDI+ allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-62823 | CVSS 8.8 | Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacker to execute code over an adjacent network.
• 🟠 CVE-2026-62824 | CVSS 8.8 | Stack-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-62827 | CVSS 8.8 | Improper authentication in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
• 🟠 CVE-2026-62869 | CVSS 8.8 | Insufficient verification of data authenticity in Azure Entra ID allows an authorized attacker to perform spoofing over a network.
• 🟠 CVE-2026-62872 | CVSS 8.8 | Incorrect authorization in .NET Framework allows an authorized attacker to elevate privileges over a network.
• 🟠 CVE-2026-62913 | CVSS 8.8 | Heap-based buffer overflow in Microsoft Exchange Server allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-63514 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-64901 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-64921 | CVSS 8.8 | Missing authentication for critical function in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a netw…
• 🟠 CVE-2026-65658 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-65663 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-65665 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-65767 | CVSS 8.8 | Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Teams for Android allows an authorized at…
• 🟠 CVE-2026-65768 | CVSS 8.8 | Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Teams for Android allows an unauthorized attack…
• 🟠 CVE-2026-65807 | CVSS 8.8 | Access of resource using incompatible type ('type confusion') in Microsoft Office Excel allows an unauthorized attacker to execute code ove…
• 🟠 CVE-2026-65811 | CVSS 8.8 | Improper input validation in Power BI allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-65815 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Dynamics 365 (on-premises) allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-66805 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-66808 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-69320 | CVSS 8.8 | Improper neutralization of special elements used in an os command ('os command injection') in Visual Studio Code allows an unauthorized att…
• 🟠 CVE-2026-70321 | CVSS 8.8 | Deserialization of untrusted data in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.
• 🟠 CVE-2026-70324 | CVSS 8.8 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
• 🟠 CVE-2026-70326 | CVSS 8.8 | Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.
• 🟠 CVE-2026-70329 | CVSS 8.8 | Integer overflow or wraparound in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-70336 | CVSS 8.8 | Improper control of generation of code ('code injection') in Visual Studio Code allows an unauthorized attacker to execute code over a netw…
• 🟠 CVE-2026-70337 | CVSS 8.8 | Relative path traversal in Microsoft PowerShell Core allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-71386 | CVSS 8.8 | is affected by a Cross-site Scripting (XSS) vulnerability that could result in arbitrary code execution in the context of the current user.…
• 🟠 CVE-2026-71387 | CVSS 8.8 | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the curr…
• 🟠 CVE-2026-15426 | CVSS 8.8 | The AcyMailing – An Ultimate Newsletter Plugin and Marketing Automation Solution for WordPress plugin for WordPress is vulnerable to author…
• 🟠 CVE-2026-73222 | CVSS 8.8 | Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by… | PoC 3
• 🟠 CVE-2026-73224 | CVSS 8.8 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FT… | PoC 3
• 🟠 CVE-2026-73226 | CVSS 8.8 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticat… | PoC 4
• 🟠 CVE-2026-15606 | CVSS 8.8 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 3.29.9. T…
• 🟠 CVE-2026-55676 | CVSS 8.8 | Malcolm is a network traffic analysis tool suite. The file-upload component (FilePond PHP backend) accepts uploads at POST /server/php/sub… | PoC 2`
• 🟠 CVE-2026-19556 | CVSS 8.8 | Use after free in V8 in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a cr…
• 🟠 CVE-2026-19560 | CVSS 8.8 | Use after free in Blink in Google Chrome prior to 151.0.7922.137 allowed a remote attacker to execute arbitrary code inside a sandbox via a…
• 🟠 CVE-2026-19426 | CVSS 8.8 | POS System developed by FitSoft has a Missing Authentication vulnerability. Unauthenticated remote attackers can directly access and operat…
• 🟠 CVE-2026-11325 | CVSS 8.8 | Description Cloudflare was recently notified by external researchers of vulnerabilities in this archived repository, including a remote cod… | PoC 1
• 🟠 CVE-2026-73284 | CVSS 8.8 | RustFS is a distributed object storage system built in Rust. RustFS AddServiceAccount in rustfs/src/admin/handlers/service_account.rs accep… | PoC 4
• 🟠 CVE-2026-73431 | CVSS 8.8 | Vulnerability-Lookup contains an authentication weakness in its account activation and password-recovery mechanism. Activation and recovery… | PoC 1
• 🟠 CVE-2026-56721 | CVSS 8.7 | CamaleonCMS version 2.9.2 and earlier contains a privilege escalation vulnerability via insecure direct object reference (IDOR) that allows… | PoC 3
• 🟠 CVE-2026-21273 | CVSS 8.7 | is affected by an Improper Input Validation vulnerability that could result in privilege escalation. A low-privileged attacker could exploi…
• 🟠 CVE-2026-73081 | CVSS 8.7 | Activepieces is an open source AI workflow automation platform. Prior to 0.80.0, the worker's code-compilation pipeline builds the on-disk… | PoC 2
• 🟠 CVE-2016-20097 | CVSS 8.7 | Weaver (Fanwei) E-cology 8.0 contains a SQL injection vulnerability in the SignatureDownLoad servlet that allows unauthenticated remote att…
• 🟠 CVE-2022-50997 | CVSS 8.7 | Weaver (Fanwei) E-cology 8.0 and 9.0 contains a SQL injection vulnerability in the HrmCareerApplyPerView.jsp endpoint that allows unauthent…
• 🟠 CVE-2026-48413 | CVSS 8.7 | Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject…
• 🟠 CVE-2026-72713 | CVSS 8.7 | XAgent contains a path traversal vulnerability in the workspace file endpoint that allows self-registered or default-credential users to re… | PoC 4
• 🟠 CVE-2026-18697 | CVSS 8.7 | An issue in MongoDB Server's aggregation framework could allow an unauthenticated party to cause a mongos (router) process to terminate une…
• 🟠 CVE-2026-48813 | CVSS 8.7 | Flawfinder is a a static analysis tool for finding vulnerabilities in C/C++ source code. Versions prior to 2.0.20 have an improper input ne… | PoC 1
• 🟠 CVE-2026-14863 | CVSS 8.7 | FileRun up to and including version 2026.2.0 contains an OS command injection vulnerability that allows authenticated attackers to achieve…
• 🟠 CVE-2026-29036 | CVSS 8.7 | cJSON versions 1.5.0 through 1.7.19 contain an incorrectly-resolved name or reference vulnerability in the decode_pointer_inplace() functio… | PoC 1
• 🟠 CVE-2026-66875 | CVSS 8.7 | In the Mira hormone monitor device firmware v1.7.1.47 build 01070147, a remote unauthenticated attacker within BLE range (approximately 10–… | PoC 1
• 🟠 CVE-2025-41770 | CVSS 8.7 | An unauthenticated denial-of-service vulnerability in the device's PLCnext Engineer communication interface allow an remote attacker to int…
• 🟠 CVE-2026-73078 | CVSS 8.6 | Vim is an open source, command line text editor. Prior to 9.2.0840, runtime/plugin/netrwPlugin.vim loads netrw and runtime/pack/dist/opt/ne… | PoC 2
• 🟠 CVE-2026-20349 | CVSS 8.6 | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure… | CISA KEV
• 🟠 CVE-2026-48397 | CVSS 8.6 | Lightroom Classic is affected by a Deserialization of Untrusted Data vulnerability that could result in arbitrary code execution in the con…
• 🟠 CVE-2026-48441 | CVSS 8.6 | Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could…
• 🟠 CVE-2026-73247 | CVSS 8.6 | Kestra is an open-source, event-driven orchestration platform. Prior to 2.0.0, Kestra's core/src/main/java/io/kestra/core/runners/pebble/fu… | PoC 1
• 🟠 CVE-2026-18474 | CVSS 8.6 | The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement, leading to…
• 🟠 CVE-2026-73072 | CVSS 8.5 | Vim is an open source, command line text editor. Prior to 9.2.0846, set_sofo() in src/spellfile.c reuses sl_sal_first[] without resetting v… | PoC 3
• 🟠 CVE-2026-73079 | CVSS 8.5 | Sub2API is an AI API gateway platform designed to distribute and manage API quotas from AI product subscriptions. From 0.1.135, to 0.1.168,… | PoC 4
• 🟠 CVE-2026-20898 | CVSS 8.5 | Improper access control in the firmware for some in Alias Checking Trusted Module for some Intel(R) Xeon(R) processors may allow an escalat…
• 🟠 CVE-2026-43606 | CVSS 8.5 | Observable Timing Discrepancy in the AMD Vitis Libraries ECDSA secp256k1 component could allow attackers with local access to potentially p…
• 🟠 CVE-2026-73233 | CVSS 8.5 | FreeCAD is a free and open-source multiplatform 3D parametric modeler. Prior to 1.1.2, the FEM Displacement Constraint task dialog in src/M… | PoC 5
• 🟠 CVE-2026-73248 | CVSS 8.5 | calibre is an e-book manager. Prior to 9.12.0, calibre processes attacker-controlled composite_template metadata from a malicious EPUB, OPF… | PoC 3
• 🟠 CVE-2026-73076 | CVSS 8.4 | Vim is an open source, command line text editor. Prior to 9.2.0847, runtime/autoload/vimball.vim allows a crafted vimball member named .Vim… | PoC 2
• 🟠 CVE-2026-73077 | CVSS 8.4 | Vim is an open source, command line text editor. Prior to 9.2.0839, the runtime/ftplugin/sh.vim, runtime/ftplugin/zsh.vim, and runtime/ftpl… | PoC 2
• 🟠 CVE-2026-20789 | CVSS 8.4 | Improper access control for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 2: Device Drivers may allow an escalation o…
• 🟠 CVE-2026-34635 | CVSS 8.4 | is affected by a Use of Hard-coded Cryptographic Key vulnerability that could result in a Security feature bypass. A low-privileged attacke…
• 🟠 CVE-2026-70130 | CVSS 8.4 | Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker to execute code locally.
• 🟠 CVE-2026-53413 | CVSS 8.3 | Missing bounds check in the annotator function of Zoom Clients allows buffer over-write, which may allow a meeting participant to achieve r…
• 🟠 CVE-2026-53415 | CVSS 8.3 | Use after Free in the annotator function of Zoom Clients may allow a meeting participant to achieve remote code execution of another partic…
• 🟠 CVE-2026-20727 | CVSS 8.3 | Null pointer dereference for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service. U…
• 🟠 CVE-2026-20741 | CVSS 8.3 | Improper access control for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Unpriv…
• 🟠 CVE-2026-20776 | CVSS 8.3 | Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software within Ring 2: Device Drivers may allow a denial of service. Netw…
• 🟠 CVE-2026-22887 | CVSS 8.3 | Improper buffer restrictions for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of servic…
• 🟠 CVE-2026-24911 | CVSS 8.3 | Stack-based buffer overflow for some Intel(R) PROSet/Wireless WiFi Software for Windows within Ring 0: Kernel may allow a denial of service…
• 🟠 CVE-2026-56179 | CVSS 8.3 | Origin validation error in Windows Network Address Translation (NAT) allows an unauthorized attacker to perform spoofing over an adjacent n…
• 🟠 CVE-2026-73241 | CVSS 8.3 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP server-side RDSTLS in libfreerdp/core/rdstls.c ac… | PoC 4
• 🟠 CVE-2026-73242 | CVSS 8.3 | FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.30.0, FreeRDP's winpr/libwinpr/sspi/Kerberos/kerberos.c kerbero… | PoC 4
• 🟠 CVE-2026-29035 | CVSS 8.3 | CivetWeb (commit 4a4f0c95) contains a heap and stack buffer overflow vulnerability in the read_websocket() function that allows unauthentic… | PoC 1
• 🟠 CVE-2026-66154 | CVSS 8.3 | An insufficient certificate validation in a privileged communication workflow, was identified in a GMS application 9.5.1 (Build 9510.1044)…
• 🟠 CVE-2026-19557 | CVSS 8.3 | Use after free in TabStrip in Google Chrome on Mac prior to 151.0.7922.137 allowed a remote attacker who had compromised the renderer proce…
• 🟠 CVE-2026-20715 | CVSS 8.2 | Improper input validation in some firmware for some Intel(R) Active Management Technology (Intel(R) AMT) and some Intel(R) Standard Managea…
• 🟠 CVE-2026-21279 | CVSS 8.2 | is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. An attacker could leverage this v…
• 🟠 CVE-2026-69306 | CVSS 8.2 | Not failing securely ('failing open') in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network.
• 🟠 CVE-2026-48771 | CVSS 8.2 | ishankportfolio is a portfolio website. Prior to version 1.0.1, contact form submissions could potentially be exposed due to improperly sec… | PoC 1
• 🟠 CVE-2026-73214 | CVSS 8.2 | Coturn is a free open source implementation of TURN and STUN Server. Prior to 4.16.0, dtls_server_input_handler() and create_new_connected_… | PoC 5
• 🟠 CVE-2026-73031 | CVSS 8.2 | telegram-search contains a stored cross-site scripting vulnerability that allows remote attackers to execute arbitrary JavaScript in victim… | PoC 4
• 🟠 CVE-2026-48763 | CVSS 8.2 | TypeBot is a chatbot builder tool. Versions prior to 3.17.0 expose a deprecated public upload endpoint at GET /api/v1/typebots/{typebotId}… | PoC 4`
• 🟠 CVE-2026-18710 | CVSS 8.2 | A MongoDB driver component could write sensitive configuration information, including a credential used for outbound network connectivity,…
• 🟠 CVE-2026-67558 | CVSS 8.2 | The Mira Android companion app v4.5.15.4 identifies the paired Mira hormone analyzer by performing a substring match against the BLE advert… | PoC 1
• 🟠 CVE-2026-6484 | CVSS 8.2 | In an UEFI, Lack of verified boot to certain FV may cause arbitrary code execution.
• 🟠 CVE-2026-64954 | CVSS 8.2 | Velociraptor allows scheduling new collections via VQL queries in notebooks. For a user to schedule a new collection, they require the COLL… | PoC 1
• 🟠 CVE-2026-48440 | CVSS 8.1 | ColdFusion is affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the cu…
• 🟠 CVE-2026-62778 | CVSS 8.1 | Use after free in Windows DNS allows an unauthorized attacker to elevate privileges over a network.
• 🟠 CVE-2026-62781 | CVSS 8.1 | Heap-based buffer overflow in RPC Runtime allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-62792 | CVSS 8.1 | Stack-based buffer overflow in Windows TCP/IP allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-62819 | CVSS 8.1 | Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker to gain an unauthorized access to victim's machine
• 🟠 CVE-2026-62820 | CVSS 8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Windows DNS allows an unauthorized attacker…
• 🟠 CVE-2026-62889 | CVSS 8.1 | Double free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-63520 | CVSS 8.1 | Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-65679 | CVSS 8.1 | Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-65789 | CVSS 8.1 | Use after free in Windows DNS allows an unauthorized attacker to execute code over a network.
• 🟠 CVE-2026-66802 | CVSS 8.1 | Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Azure Attestation service and Devi…
• 🟠 CVE-2026-70340 | CVSS 8.1 | Missing authorization in Azure CycleCloud allows an authorized attacker to elevate privileges over a network.
• 🟠 CVE-2026-71331 | CVSS 8.1 | Integer overflow or wraparound in Microsoft Azure Attestation service and Device Health Attestation Service allows an unauthorized attacker…
• 🟠 CVE-2026-73223 | CVSS 8.1 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SF… | PoC 3
• 🟠 CVE-2026-73225 | CVSS 8.1 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FT… | PoC 3
• 🟠 CVE-2026-73227 | CVSS 8.1 | electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RD… | PoC 3
• 🟠 CVE-2026-19091 | CVSS 8.1 | The GeoDirectory – WP Business Directory Plugin and Classified Listings Directory plugin for WordPress is vulnerable to arbitrary file dele… | PoC 5
• 🟠 CVE-2026-18961 | CVSS 8.1 | The Social Login, Passkeys, Magic Link & Email OTP – Passwordless Login by VentraConnect plugin for WordPress is vulnerable to Authenticati…
• 🟠 CVE-2026-16977 | CVSS 8.1 | The Form Maker by 10Web WordPress plugin before 1.15.45 does not properly parameterize a user-controlled value that is substituted into a d…
• 🟠 CVE-2026-18057 | CVSS 8.1 | The Events Manager WordPress plugin before 7.4.1 does not sanitise and escape a user-controlled value before using it in a SQL statement, a…
• 🟠 CVE-2026-18230 | CVSS 8.1 | The WP Directory Kit WordPress plugin before 1.5.6 does not sanitise and escape a parameter before using it in a SQL statement through one…
• 🟠 CVE-2026-19594 | CVSS 8.1 | Insufficient input sanitization in Snowflake Python API (snowflake.core) versions prior to 1.13.0 allowed confused-deputy privilege escal…
• 🟠 CVE-2026-70465 | CVSS 8.1 | A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,…
• 🟠 CVE-2026-70468 | CVSS 8.1 | A authentication bypass using an alternate path or channel vulnerability in Fortinet FortiManager 7.6.1, FortiManager 7.4.3 through 7.4.5,…
• 🟠 CVE-2026-47231 | CVSS 8.1 | Admidio is an open-source user management solution. Prior to version 5.0.10, modules/documents-files.php gates state-changing modes by ch… | PoC 1
• 🟠 CVE-2026-66375 | CVSS 8.1 | A low-privilege authenticated user may permanently remove protected internal metadata across repositories under specific conditions.
• 🟠 CVE-2026-73286 | CVSS 8.1 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS get_condition_values folds attacker-controlled… | PoC 4
• 🟠 CVE-2026-73289 | CVSS 8.1 | RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-beta.12, RustFS evaluates the ForAllValues: and ForAnyValue: se… | PoC 3
• 🟠 CVE-2026-62911 | CVSS 8.0 | Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.

Notes

• PoC links are collected from NVD references and GitHub repository search. They are untrusted and may include unsafe code.
• Critical CVE details may span multiple managed comments to guarantee completeness without exceeding GitHub issue size limits.

[github-actions]

Critical Details (2026-08-12) - Part 1

🔴 CVE-2026-48362 | CVSS 10.0 | CRITICAL

Summary: ColdFusion is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does…
Published: 2026-08-11T17:17:59.627
Last Modified: 2026-08-12T05:17:47.677
Affected: Adobe ColdFusion 2025, Adobe ColdFusion 2023
CWE: CWE-78
References:

• Reference

---

🔴 CVE-2026-27302 | CVSS 10.0 | CRITICAL

Summary: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-08-11T18:17:25.603
Last Modified: 2026-08-11T18:17:25.603
Affected: Adobe Adobe Campaign Classic
CWE: CWE-863
References:

• Reference

---

🔴 CVE-2026-71398 | CVSS 10.0 | CRITICAL

Summary: Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction. Scope is changed.
Published: 2026-08-11T18:18:22.327
Last Modified: 2026-08-11T18:18:22.327
Affected: Adobe Adobe Campaign Classic
CWE: CWE-863
References:

• Reference

---

🔴 CVE-2026-45618 | CVSS 10.0 | CRITICAL

Summary: LiquidJS is a Shopify/GitHub Pages compatible template engine. Prior to version 10.26.0, it is possible to execute arbitrary code with crafted templates. Version 10.26.0 patches the issue.
Published: 2026-08-11T20:17:40.163
Last Modified: 2026-08-11T20:17:40.163
Affected: harttle liquidjs
CWE: CWE-94
GitHub PoC:

• tag/v10.26.0
• advisories/GHSA-gf2q-c269-pqgc
  References:
• Reference
• Reference

---

🔴 CVE-2026-67282 | CVSS 10.0 | CRITICAL

Summary: Joomla Extension - fabrikar.com - Unauthenticated remote code execution in Fabrik < 4.6.8 - An unauthenticated attacker could execute arbitrary code by using the frontend listfilter model.
Published: 2026-08-12T09:17:30.590
Last Modified: 2026-08-12T13:17:24.073
Affected: fabrikar.com Fabrik extension for Joomla
CWE: CWE-94
References:

• Reference

---

🔴 CVE-2026-48765 | CVSS 9.9 | CRITICAL

Summary: TypeBot is a chatbot builder tool. Versions prior to 3.17.0 allow a low-privilege read collaborator to extract a workspace OAuth credentialsId from a readable bot configuration and then overwrite that credential through handleUpdateOAuthCredentials() by supplying an attacker-controlled writable workspaceId. The…
Published: 2026-08-11T21:17:36.947
Last Modified: 2026-08-12T14:17:55.857
Affected: baptisteArno typebot.io
CWE: CWE-639
GitHub PoC:

• commit/7ae4c007d0987d2ca907b47e1b7418db62b8a157
• pull/2459
• tag/v3.17.0
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-72526 | CVSS 9.9 | CRITICAL

Summary: A flaw was found in the multicloud-integrations component. The Application propagation controller processes the ocm-managed-cluster annotation from an Application Custom Resource (CR) without proper validation. A tenant with permissions to create Applications on the hub cluster can exploit this to target arbitrary m…
Published: 2026-08-12T02:16:38.200
Last Modified: 2026-08-12T13:17:25.827
Affected: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
CWE: CWE-441
References:

• Reference
• Reference

---

🔴 CVE-2026-73263 | CVSS 9.9 | CRITICAL

Summary: Prowler is a cloud security platform. Prior to 5.36.0, the Kubernetes provider connection test accepted kubeconfig_content containing a legacy gcp auth-provider with config.cmd-path and config.cmd-args because kubeconfig_contains_exec_auth in api/src/backend/api/v1/serializers.py checked only exec blocks, and POST /ap…
Published: 2026-08-12T15:18:30.943
Last Modified: 2026-08-12T16:17:21.910
Affected: prowler-cloud prowler
CWE: CWE-78
GitHub PoC:

• commit/0b782fcb8c24ece7bd38deede2b8f13d8583e39c
• pull/12091
• tag/5.36.0
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-12571 | CVSS 9.8 | CRITICAL

Summary: An authentication bypass in ManageEngine DDI Central's password-reset workflow allows account takeover.
Published: 2026-08-11T17:17:46.940
Last Modified: 2026-08-12T05:17:42.403
Affected: zohocorp manageengine_ddi_central
CWE: CWE-287, CWE-640
References:

• Reference

---

🔴 CVE-2026-59124 | CVSS 9.8 | CRITICAL

Summary: Deserialization of untrusted data in Microsoft High Performance Computing (HPC) Pack allows an unauthorized attacker to execute code over a network.
Published: 2026-08-11T17:18:06.287
Last Modified: 2026-08-12T14:18:02.933
Affected: Microsoft Windows App Client for Windows Desktop
CWE: CWE-502
References:

• Reference

---

🔴 CVE-2026-62815 | CVSS 9.8 | CRITICAL

Summary: Use after free in Microsoft QUIC allows an unauthorized attacker to execute code over a network.
Published: 2026-08-11T17:18:35.320
Last Modified: 2026-08-12T05:18:47.180
Affected: Microsoft Windows 11 version 23H2, Microsoft Windows 11 Version 23H2, Microsoft Windows 11 Version 24H2, Microsoft Windows 11 Version 25H2, Microsoft Windows 11 version 26H1, Microsoft Windows Server 2022
CWE: CWE-416
References:

• Reference

---

🔴 CVE-2026-62878 | CVSS 9.8 | CRITICAL

Summary: Stack-based buffer overflow in Windows DNS allows an unauthorized attacker to execute code over a network.
Published: 2026-08-11T17:18:38.590
Last Modified: 2026-08-12T15:18:02.483
Affected: Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)
CWE: CWE-121
References:

• Reference

---

🔴 CVE-2026-62893 | CVSS 9.8 | CRITICAL

Summary: Use after free in Windows Deployment Services allows an unauthorized attacker to execute code over a network.
Published: 2026-08-11T17:18:43.440
Last Modified: 2026-08-12T05:19:00.377
Affected: Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)
CWE: CWE-416
References:

• Reference

---

🔴 CVE-2026-65791 | CVSS 9.8 | CRITICAL

Summary: Heap-based buffer overflow in Windows iSCSI Target Service allows an unauthorized attacker to execute code over a network.
Published: 2026-08-11T17:18:59.053
Last Modified: 2026-08-12T05:19:26.767
Affected: Microsoft Windows 10 Version 1607, Microsoft Windows 10 Version 1809, Microsoft Windows Server 2012, Microsoft Windows Server 2012 (Server Core installation), Microsoft Windows Server 2012 R2, Microsoft Windows Server 2012 R2 (Server Core installation)
CWE: CWE-122
References:

• Reference

---

🔴 CVE-2026-73211 | CVSS 9.8 | CRITICAL

Summary: PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.1.6, ActorFollowModel.updateScore() interpolates the attacker-controlled ActivityPub actor inboxUrl into an SQL query, allowing an unauthenticated remote server to read and write PeerTube database tables, including oAuthToken.accessToken, and ta…
Published: 2026-08-11T18:18:26.357
Last Modified: 2026-08-11T20:18:47.210
Affected: Chocobozzz PeerTube
CWE: CWE-89
GitHub PoC:

• commit/cc07364a5d635b6e43a92fc5e2e2e3eeacf4e8f4
• tag/v8.1.6
• tag/v8.1.8
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-16230 | CVSS 9.8 | CRITICAL

Summary: The Formidable Digital Signatures plugin for WordPress is vulnerable to file deletion due to insufficient file path validation in the delete_file function in all versions up to, and including, 3.0.6. This makes it possible for unauthenticated attackers to delete files on the server by supplying an attacker-controlled…
Published: 2026-08-11T20:17:27.133
Last Modified: 2026-08-11T21:17:28.030
Affected: Strategy11 Formidable Digital Signatures
CWE: CWE-23
References:

• Reference
• Reference
• Reference

---

🔴 CVE-2026-26035 | CVSS 9.8 | CRITICAL

Summary: An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12, FortiWeb 7.0.0 through 7.0.12 may allow a remote unauthenticated attacker to login into the Fortiweb GUI/CLI with a rand…
Published: 2026-08-12T13:17:22.307
Last Modified: 2026-08-12T14:17:51.473
Affected: Fortinet FortiWeb
CWE: CWE-287
References:

• Reference

---

🔴 CVE-2026-71384 | CVSS 9.6 | CRITICAL

Summary: is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access, potentially resulting in an application denial-of-service condition. The vulnerable component is…
Published: 2026-08-11T17:19:13.593
Last Modified: 2026-08-12T15:18:30.017
Affected: Adobe ColdFusion 2025, Adobe ColdFusion 2023
CWE: CWE-863
References:

• Reference

---

🔴 CVE-2026-47705 | CVSS 9.6 | CRITICAL

Summary: TypeBot is a chatbot builder tool. Version 3.16.1 has a CSV injection vulnerability in the result export functionality. The application does not sanitize or escape user-supplied input when generating CSV files. An attacker can inject spreadsheet formulas into input fields, which are later executed when an administrato…
Published: 2026-08-11T18:17:27.123
Last Modified: 2026-08-11T18:17:27.123
Affected: baptisteArno typebot.io
CWE: CWE-1236
GitHub PoC:

• commit/89682dd4ad56f33263332fa377beb01ad616c27c
• pull/2493
• tag/v3.17.0
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-70398 | CVSS 9.6 | CRITICAL

Summary: A flaw was found in multicloud-integrations, a component of Red Hat Advanced Cluster Management (RHACM). This vulnerability allows an authenticated user, referred to as a tenant, to manipulate the GitOpsCluster controller. By exploiting this, a tenant can redirect sensitive spoke cluster bearer tokens from secure loca…
Published: 2026-08-12T02:16:38.060
Last Modified: 2026-08-12T13:17:24.637
Affected: Red Hat Red Hat Advanced Cluster Management for Kubernetes 2
CWE: CWE-441
References:

• Reference
• Reference

---

🔴 CVE-2026-50516 | CVSS 9.4 | CRITICAL

Summary: Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an unauthorized attacker to elevate privileges over a network.
Published: 2026-08-11T17:18:02.900
Last Modified: 2026-08-11T21:17:37.093
Affected: Microsoft Azure Kubernetes Service
CWE: CWE-306
References:

• Reference

---

🔴 CVE-2026-73032 | CVSS 9.4 | CRITICAL

Summary: PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval() in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM interception of API…
Published: 2026-08-11T20:18:46.320
Last Modified: 2026-08-11T20:18:46.320
Affected: papersgpt papersgpt-for-zotero
CWE: CWE-94
GitHub PoC:

• papersgpt/papersgpt-for-zotero
• commit/094134172ce4a344a31e4b196cc75d1806383658
• issues/154
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-66147 | CVSS 9.4 | CRITICAL

Summary: An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution through specially crafted requests.
Published: 2026-08-11T21:17:49.173
Last Modified: 2026-08-12T15:18:18.370
Affected: SonicWall GMS
CWE: CWE-94
References:

• Reference

---

🔴 CVE-2026-5917 | CVSS 9.4 | CRITICAL

Summary: libgit2 versions v0.27.0 through v1.9.0 built with the libssh2 SSH backend (USE_SSH=libssh2) contain a shell command injection vulnerability that allows remote attackers to execute arbitrary commands on an SSH server by supplying a repository path containing unescaped shell metacharacters such as single quotes, semico…
Published: 2026-08-11T22:17:37.390
Last Modified: 2026-08-12T13:17:23.147
Affected: libgit2 libgit2
CWE: CWE-78
GitHub PoC:

• libgit2/libgit2
  References:
• Reference
• Reference

---

🔴 CVE-2026-50561 | CVSS 9.4 | CRITICAL

Summary: Yuxi is a large-model-based intelligent knowledge base and knowledge graph agent development platform. Prior to version 0.6.2, the project's authentication mechanism contains a flaw. In affected versions, the system does not sufficiently validate the identity token in the Authorization header — only performing a valid…
Published: 2026-08-12T15:17:38.307
Last Modified: 2026-08-12T15:17:38.307
Affected: xerrors Yuxi
CWE: CWE-287
GitHub PoC:

• commit/1e8b20e30b1258d1cd3ebf3af5c6212da4b84b48
• issues/673
• advisories/GHSA-6959-99pq-c56x
  References:
• Reference
• Reference
• Reference

---

🔴 CVE-2025-31114 | CVSS 9.3 | CRITICAL

Summary: Fooocus is an image generating software. In versions 2.5.5 and prior, the Fooocus web UI is vulnerable to remote code execution due to the unsafe use of eval when processing metadata JSON. An attacker with access to the Fooocus web UI may be able to execute arbitrary code on the instance. As of time of publication, no…
Published: 2026-08-11T16:17:26.520
Last Modified: 2026-08-11T17:17:43.210
Affected: lllyasviel Fooocus
CWE: CWE-95
GitHub PoC:

• issues/3552
• pull/4207
• advisories/GHSL-2024-196_Fooocus
  References:
• Reference
• Reference
• Reference

---

🔴 CVE-2026-73080 | CVSS 9.3 | CRITICAL

Summary: SeaweedFS is a distributed storage system. Prior to 4.24, VolumeServer.FetchAndWriteNeedle in weed/server/volume_grpc_remote.go fetches a caller-supplied remote endpoint through weed/remote_storage/s3/s3_storage_client.go and writes the response into a needle. The RPC performs no authentication and no target validatio…
Published: 2026-08-11T16:17:39.857
Last Modified: 2026-08-11T16:17:39.857
Affected: seaweedfs seaweedfs
CWE: CWE-918
GitHub PoC:

• commit/69da20bdaec923e5a43d8aa71bf3c0a2051fc019
• pull/9441
• tag/4.24
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-70306 | CVSS 9.3 | CRITICAL

Summary: Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an unauthorized attacker to perform spoofing over a network.
Published: 2026-08-11T17:19:07.970
Last Modified: 2026-08-11T18:53:42.910
Affected: Microsoft Microsoft SharePoint Enterprise Server 2016, Microsoft Microsoft SharePoint Server 2019, Microsoft Microsoft SharePoint Server Subscription Edition
CWE: CWE-79
References:

• Reference

---

🔴 CVE-2026-69102 | CVSS 9.3 | CRITICAL

Summary: MaxKey contains an unauthorized access vulnerability due to a hard-coded JWT signing secret in application-maxkey.properties that allows unauthenticated attackers to forge valid JWT tokens and authenticate as any user by exploiting the password-skipped login endpoint. Attackers can craft a JWT token signed with the pu…
Published: 2026-08-11T18:18:17.587
Last Modified: 2026-08-12T17:17:30.880
Affected: dromara MaxKey
CWE: CWE-798
GitHub PoC:

• dromara/MaxKey
• commit/6cda394ec111f03a06fb2eed0de74f787d68bd97
• issues/270
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-73090 | CVSS 9.3 | CRITICAL

Summary: PeerTube is an ActivityPub-federated video streaming platform. Prior to 8.2.2, processUpdateActivity and processUpdateVideo accept an ActivityPub Update containing a Video object without verifying that byActor.url is authorized for the host in videoObject.id, allowing a malicious federated server to rewrite another se…
Published: 2026-08-11T18:18:26.210
Last Modified: 2026-08-11T18:18:26.210
Affected: Chocobozzz PeerTube
CWE: CWE-863
GitHub PoC:

• commit/63d487d2a4a2a0e36af8c0ccb888cd23725bf7f2
• tag/v8.2.2
• advisories/GHSA-g9p4-f7h8-hc86
  References:
• Reference
• Reference
• Reference

---

🔴 CVE-2026-73034 | CVSS 9.3 | CRITICAL

Summary: DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers to write arbitrary files to any location on the server by injecting directory traversal sequences into the user_id HTTP header of the Python file-upload endpoint. Attackers can send a crafted multipart upload request wi…
Published: 2026-08-11T20:18:46.470
Last Modified: 2026-08-11T20:18:46.470
Affected: eosphoros-ai DB-GPT
CWE: CWE-22
GitHub PoC:

• eosphoros-ai/DB-GPT
• commit/e0c741bd2b5e521b128cffb3f68982dde3f7b359
• issues/3104
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-67568 | CVSS 9.3 | CRITICAL

Summary: The distributed Mira Android APK v4.5.15.4 allows an attacker read/write access to reproductive health profiles from internet connected hosts, which could result in forgery, deletion, or destruction of health information.
Published: 2026-08-11T22:18:54.877
Last Modified: 2026-08-12T14:18:33.557
Affected: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware, Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Android App
CWE: CWE-798
GitHub PoC:

• 2026/icsma-26-223-01.json
  References:
• Reference
• Reference

---

🔴 CVE-2026-68067 | CVSS 9.3 | CRITICAL

Summary: The login endpoint on the Mira cloud API accepts any format-valid string in the password field and returns a live active session token for the account matching the supplied email address. An attacker could use an email address to control cloud accounts and access hormone record information and account settings.
Published: 2026-08-11T22:18:55.017
Last Modified: 2026-08-12T14:18:33.687
Affected: Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Firmware, Quanovate Tech Inc. (operating as Mira / Mira Care) Mira Android App
CWE: CWE-1390
GitHub PoC:

• 2026/icsma-26-223-01.json
  References:
• Reference
• Reference

---

🔴 CVE-2026-66659 | CVSS 9.3 | CRITICAL

Summary: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Essekia Tablesome Table allows Blind SQL Injection. This issue affects Tablesome Table: from n/a through 1.2.9.
Published: 2026-08-12T06:22:09.420
Last Modified: 2026-08-12T17:17:29.850
Affected: Essekia Tablesome Table
CWE: CWE-89
References:

• Reference

---

🔴 CVE-2025-41769 | CVSS 9.3 | CRITICAL

Summary: The device's PROFINET service is affected by a buffer overflow vulnerability that exists in the default configuration. An unauthenticated remote attacker could exploit this vulnerability to reboot the device or execute arbitrary code.
Published: 2026-08-12T08:17:11.590
Last Modified: 2026-08-12T08:17:11.590
Affected: Phoenix Contact AXC F 1152, Phoenix Contact AXC F 1252, Phoenix Contact AXC F 2152, Phoenix Contact AXC F 3152, Phoenix Contact BPC 9102S, Phoenix Contact BPC 9202S
CWE: CWE-120
References:

• Reference

---

🔴 CVE-2026-57858 | CVSS 9.3 | CRITICAL

Summary: Cal.com Cal.diy versions 2.1.1 through 6.2.0 contain a stored cross-site scripting vulnerability in the BookingPageTagManager component that allows authenticated event owners to inject arbitrary JavaScript by supplying a malicious analytics tracking ID without sanitization. Attackers can close the inline script string…
Published: 2026-08-12T13:17:22.943
Last Modified: 2026-08-12T13:17:22.943
Affected: Cal.com Cal.com Self-Hosted (Cal.diy)
CWE: CWE-79
GitHub PoC:

• calcom/cal.com
  References:
• Reference
• Reference
• Reference

---

🔴 CVE-2026-72742 | CVSS 9.2 | CRITICAL

Summary: DSPy 3.3.0b1 contains a file exfiltration vulnerability in the Image and Audio output field adapters that allows attackers with influence over language model outputs to read arbitrary local files by injecting a filesystem path into the url field of a parsed Image or Audio typed output. The JSONAdapter and ChatAdapter…
Published: 2026-08-11T19:18:49.130
Last Modified: 2026-08-12T17:17:31.593
Affected: Stanford NLP DSPy
CWE: CWE-73
GitHub PoC:

• stanfordnlp/dspy
• commit/c69136b29aca4c00ca6da7667f7b80783188980e
• issues/10067
  References:
• Reference
• Reference
• Reference
• Reference

---

🔴 CVE-2026-67285 | CVSS 9.2 | CRITICAL

Summary: Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Builder < 6.8.0 - An unauthenticated attacker can perform includes to arbitrary PHP files that are accessible by the system.
Published: 2026-08-12T14:18:33.423
Last Modified: 2026-08-12T15:18:21.163
Affected: joomshaper.com SP Page Builder extension for Joomla
CWE: CWE-22
References:

• Reference

---

🔴 CVE-2026-73069 | CVSS 9.1 | CRITICAL

Summary: Twenty is an open-source CRM (customer relationship management) platform. Prior to 2.15.0, Twenty allowed a workspace administrator with the DATA_MODEL permission to supply settings.asExpression for the system TS_VECTOR field searchVector through PATCH /rest/metadata/fields/:id or the updateOneField GraphQL mutation,…
Published: 2026-08-11T16:17:38.090
Last Modified: 2026-08-11T19:18:49.750
Affected: twentyhq twenty
CWE: CWE-89
GitHub PoC:

• commit/0b8368cd6c1a47711bf52972800f162bde0bbab9
• pull/21947
• advisories/GHSA-mm7j-q9q3-qqwj
  References:
• Reference
• Reference
• Reference

---

🔴 CVE-2026-71362 | CVSS 9.1 | CRITICAL

Summary: Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could leverage this vulnerability to gain elevated access to sensitive resources. Exploitation of this issue does not require user interaction.
Published: 2026-08-11T18:18:21.610
Last Modified: 2026-08-12T14:18:37.940
Affected: Adobe Adobe Commerce, Adobe Adobe Commerce B2B, Adobe Magento Open Source
CWE: CWE-863
References:

• Reference

---

🔴 CVE-2026-66145 | CVSS 9.1 | CRITICAL

Summary: An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary file write via zipslip.
Published: 2026-08-11T20:18:37.717
Last Modified: 2026-08-12T15:18:17.893
Affected: SonicWall GMS
CWE: CWE-94
References:

• Reference

---

🔴 CVE-2026-48381 | CVSS 9.0 | CRITICAL

Summary: Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. Exploit depends on…
Published: 2026-08-11T18:17:28.247
Last Modified: 2026-08-11T19:17:36.097
Affected: Adobe Adobe Campaign Classic
CWE: CWE-89
References:

• Reference

---

🔴 CVE-2026-18691 | CVSS 9.0 | CRITICAL

Summary: An issue in MongoDB Server's intra-cluster connection setup could allow a party with suitable network access to influence which authentication mechanism is used when one replica set member connects to another. Under certain conditions, this could cause the cluster's shared internal credential to be transmitted in a le…
Published: 2026-08-11T19:17:22.903
Last Modified: 2026-08-11T21:17:31.620
Affected: MongoDB MongoDB Server
CWE: CWE-757
References:

• Reference

---