# CVEs published 2026-08-07

214 CVEs were published on August 7, 2026: 23 critical, 80 high. Days are UTC.

- [CVE-2026-52880](https://cve.now/CVE-2026-52880.md): Klever-Go: REST API slow-header connection exhaustion via Gin Engine.Run (CVSS 7.5, klever-io klever-go · github.com/klever-io/klever-go)
- [CVE-2026-47127](https://cve.now/CVE-2026-47127.md): Ghostfolio has a Stripe subscription bypass (CVSS 6.5, ghostfolio)
- [CVE-2026-48122](https://cve.now/CVE-2026-48122.md): Workspace settings can override executable and Gemfile paths used by the Ruby LSP VS Code extension (CVSS 5.4, Shopify ruby-lsp)
- [CVE-2026-52879](https://cve.now/CVE-2026-52879.md): Klever-Go: Unbounded goroutine spawn on direct-message ingress enables peer-driven DoS (CVSS 7.5, klever-io klever-go · github.com/klever-io/klever-go)
- [CVE-2026-48120](https://cve.now/CVE-2026-48120.md): Kakoune has a Critical RCE via Autorestore Backup Filename Injection (CVSS 8.6, mawww kakoune)
- [CVE-2026-52878](https://cve.now/CVE-2026-52878.md): Klever-Go: Unauthenticated nil-pointer DoS in P2P transaction validation can halt the chain (CVSS 7.5, klever-io klever-go · github.com/klever-io/klever-go)
- [CVE-2026-48026](https://cve.now/CVE-2026-48026.md): lakeFS vulnerable to stored XSS in rendered markdown previews via raw HTML (CVSS 8.7, treeverse lakeFS · treeverse lakeFS-enterprise)
- [CVE-2026-49343](https://cve.now/CVE-2026-49343.md): Klever-Go KVM: Throttler slot leak in trie account-data sync causes epoch bootstrap / state sync DoS (CVSS 5.9, klever-io klever-go · github.com/klever-io/klever-go)
- [CVE-2026-46409](https://cve.now/CVE-2026-46409.md): OpenYak local API: unauthenticated CSRF chain leads to Remote Code Execution (CVSS 9.6, openyak)
- [CVE-2026-48047](https://cve.now/CVE-2026-48047.md): XWiki Platform vulnerable to potential arbitrary file writing using path traversal from (subwiki) admin (CVSS 5.9, xwiki-platform · org.xwiki.platform:xwiki-platform-webjars-…)
- [CVE-2026-47249](https://cve.now/CVE-2026-47249.md): Klever-Go KVM: Hash-array amplification in P2P resolver request handling (CVSS 7.5, klever-io klever-go · github.com/klever-io/klever-go)
- [CVE-2026-58262](https://cve.now/CVE-2026-58262.md): Klever-Go: PubKeysBitmap padding bits bypass the BLS signature quorum (CVSS 7.1, klever-io klever-go)
- [CVE-2026-64676](https://cve.now/CVE-2026-64676.md): Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory (CVSS 5.7, kata-containers)
- [CVE-2026-47243](https://cve.now/CVE-2026-47243.md): Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs (CVSS 9.2, kata-containers · github.com/kata-containers/kata-containers)
- [CVE-2026-48170](https://cve.now/CVE-2026-48170.md): scimPatch vulnerable to prototype pollution via unfiltered keys in patch (CVSS 9.1, thomaspoignant scim-patch · scim-patch)
- [CVE-2026-48169](https://cve.now/CVE-2026-48169.md): PraisonAI has Cross-Workspace IDOR and Privilege Escalation via Platform API (CVSS 8.8, MervinPraison praisonai-platform · praisonai-platform)
- [CVE-2026-45808](https://cve.now/CVE-2026-45808.md): OpenBao's cross-namespace lease revocation via legacy sys/revoke path bypasses ACL (CVSS 7.1, openbao · github.com/openbao/openbao)
- [CVE-2026-46405](https://cve.now/CVE-2026-46405.md): OpenBao's Kerberos Auth Method Accumulates Unaccessible Tokens (CVSS 5.3, openbao · github.com/openbao/openbao)
- [CVE-2026-11743](https://cve.now/CVE-2026-11743.md): Missing negative-offset/overflow check in SF32LB MPI QSPI NOR flash driver allows out-of-bounds read and write (CVSS 6.6, zephyrproject zephyr)
- [CVE-2026-11742](https://cve.now/CVE-2026-11742.md): Use-after-free race in kernel \`k\_queue\_peek\_head/tail\` due to missing spinlock (CVSS 3.6, zephyrproject zephyr)
- [CVE-2026-19246](https://cve.now/CVE-2026-19246.md): HKUDS nanobot Provider-returned Image URL image\_generation.py \_download\_image\_data\_url server-side request forgery (CVSS 5.3, HKUDS nanobot)
- [CVE-2026-50540](https://cve.now/CVE-2026-50540.md): Kata Containers: Config Path Annotation Arbitrary File Loading (CVSS 9.6, kata-containers)
- [CVE-2026-54338](https://cve.now/CVE-2026-54338.md): JupyterHub: Unauthenticated Denial of Service via Unbounded Username Logging on Failed Login (CVSS 5.3, jupyterhub)
- [CVE-2026-69207](https://cve.now/CVE-2026-69207.md): Hono: ReDoS in CORS middleware via Access-Control-Request-Headers (CVSS 5.3, honojs hono · hono)
- [CVE-2026-19245](https://cve.now/CVE-2026-19245.md): HKUDS nanobot Login-shell Environment shell.py ExecTool.\_prepare\_command information disclosure (CVSS 4.8, HKUDS nanobot)
- [CVE-2026-66061](https://cve.now/CVE-2026-66061.md): Home Assistant: iOS Companion app forwards NFC/QR tag scans without confirmation, enabling silent automation execution (CVSS 7.1, home-assistant core)
- [CVE-2026-9031](https://cve.now/CVE-2026-9031.md): Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6 (CVSS 6.8, TP-Link Systems Archer A6)
- [CVE-2026-9030](https://cve.now/CVE-2026-9030.md): Authenticated Denial-of-Service in HTTPD Service in TP-Link Archer A6 (CVSS 6.8, TP-Link Systems Archer A6)
- [CVE-2026-66060](https://cve.now/CVE-2026-66060.md): Home Assistant: Unconfirmed NFC/QR tag scans allow silent automation execution by untrusted callers (CVSS 7.1, home-assistant core)
- [CVE-2026-46358](https://cve.now/CVE-2026-46358.md): OpenBao's Inline Auth Incorrectly Redacted Headers (CVSS 5.4, openbao · github.com/openbao/openbao)
- [CVE-2026-19244](https://cve.now/CVE-2026-19244.md): HKUDS nanobot MCP enabledTools Scope mcp.py connect\_mcp\_servers access control (CVSS 5.1, HKUDS nanobot)
- [CVE-2026-47664](https://cve.now/CVE-2026-47664.md): Pathling: $import-pnp operation enables authenticated SSRF, credential leakage, and warehouse data poisoning (CVSS 8.6, aehrc pathling)
- [CVE-2026-71381](https://cve.now/CVE-2026-71381.md): Adobe Genuine Software Integrity Service | CWE-863 Incorrect Authorization (CVSS 4.0, Adobe Genuine Software Integrity Service)
- [CVE-2026-47663](https://cve.now/CVE-2026-47663.md): Pathling: Typed CRUD/search/batch providers can lead to server-wide PHI exfiltration and cross-resource mutation (CVSS 8.7, aehrc pathling)
- [CVE-2026-47662](https://cve.now/CVE-2026-47662.md): Pathling $bulk-submit allows bearer-token exfiltration and persistent warehouse poisoning via unvalidated manifest output URLs (CVSS 8.7, aehrc pathling)
- [CVE-2026-11425](https://cve.now/CVE-2026-11425.md): Domoticz Mobile Dashboard versions prior to 2026.3 Stored XSS via Text/Alert Device Rendering (CVSS 2.0, Domoticz)
- [CVE-2026-59717](https://cve.now/CVE-2026-59717.md): Home Assistant Companion: \`homeassistant://invite\` Deep Link Credential Phishing (CVSS 4.3, home-assistant core)
- [CVE-2026-66151](https://cve.now/CVE-2026-66151.md): SonicWall Global VPN Client version 4.10.8.1108 and earlier is vulnerable to an out-of-bounds kernel memory read in the SWIPsec.sys driver, (CVSS 5.5, SonicWall Global VPN Client)
- [CVE-2026-61808](https://cve.now/CVE-2026-61808.md): LightRAG: Missing Authentication for Critical API Functions in Default Configuration (CVSS 9.8, HKUDS LightRAG)
- [CVE-2026-62296](https://cve.now/CVE-2026-62296.md): HAPI FHIR: XHTML narrative parser unbounded recursion causes StackOverflow denial of service (CVSS 7.5, hapifhir org.hl7.fhir.core · hapifhir ca.uhn.hapi.fhir:o… +3)
- [CVE-2026-47661](https://cve.now/CVE-2026-47661.md): Pathling has path traversal in $result endpoint that allows arbitrary warehouse file read (CVSS 8.7, aehrc pathling)
- [CVE-2026-47660](https://cve.now/CVE-2026-47660.md): Pathling: Explicit oauthMetadataUrl in bulk-submit allows OAuth client credential exfiltration (CVSS 8.7, aehrc pathling)
- [CVE-2026-47659](https://cve.now/CVE-2026-47659.md): Pathling has path traversal in $import-pnp manifest that enables read-capable SSRF via /jobs/{jobId}/{filename} (CVSS 8.7, aehrc pathling)
- [CVE-2026-62295](https://cve.now/CVE-2026-62295.md): HAPI FHIR: JSON utility parser unbounded recursion causes StackOverflow denial of service (CVSS 7.5, hapifhir org.hl7.fhir.core · hapifhir ca.uhn.hapi.fhir:o… +3)
- [CVE-2026-48007](https://cve.now/CVE-2026-48007.md): Element Call reports full URLs of visited pages to analytics server (CVSS 8.6, element-hq element-call · @element-hq/element-call-embedded)
- [CVE-2026-19243](https://cve.now/CVE-2026-19243.md): HKUDS nanobot Shell Allowlist shell.py ExecTool.\_spawn os command injection (CVSS 5.3, HKUDS nanobot)
- [CVE-2026-48039](https://cve.now/CVE-2026-48039.md): Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token (CVSS 9.1, pipeboard-co meta-ads-mcp · meta-ads-mcp)
- [CVE-2026-71870](https://cve.now/CVE-2026-71870.md): pypdf: Possible large memory usage for large /ToUnicode streams (CVSS 4.8, py-pdf pypdf · pypdf)
- [CVE-2026-62293](https://cve.now/CVE-2026-62293.md): HAPI FHIR: Stored XSS in scan report via unescaped IG and profile titles (CVSS 5.0, hapifhir org.hl7.fhir.core · hapifhir ca.uhn.hapi.fhir:o… +1)
- [CVE-2026-19113](https://cve.now/CVE-2026-19113.md): Unauthenticated denial of service via unbounded request body processing (CVSS 5.3, HashiCorp Consul)
- [CVE-2026-15972](https://cve.now/CVE-2026-15972.md): Unauthenticated denial of service via unbounded external gRPC connection acceptance (CVSS 7.5, HashiCorp Consul)
- [CVE-2026-15970](https://cve.now/CVE-2026-15970.md): L7 intention authorization bypass via custom public listener (CVSS 4.2, HashiCorp Consul)
- [CVE-2026-19017](https://cve.now/CVE-2026-19017.md): Consul vulnerable to partial arbitrary file read via Vault Connect CA provider (CVSS 6.8, HashiCorp Consul)
- [CVE-2026-65819](https://cve.now/CVE-2026-65819.md): gopacket: Multiple layer decoders panic on crafted packets (out-of-bounds/underflow) enabling unauthenticated remote DoS via DecodingLayerParser (CVSS 7.5, gopacket)
- [CVE-2026-19015](https://cve.now/CVE-2026-19015.md): Uncontrolled resource consumption in the Consul Connect CA roots endpoint (CVSS 5.3, HashiCorp Consul)
- [CVE-2026-19014](https://cve.now/CVE-2026-19014.md): Uncontrolled resource consumption in the Consul Connect authorization endpoint (CVSS 4.3, HashiCorp Consul)
- [CVE-2026-19012](https://cve.now/CVE-2026-19012.md): Authenticated denial of service in Consul Enterprise-to-Community Edition downgrade path (CVSS 5.3, HashiCorp Consul)
- [CVE-2026-19016](https://cve.now/CVE-2026-19016.md): Authorization bypass for session deletion in the transaction API (CVSS 4.2, HashiCorp Consul)
- [CVE-2026-48098](https://cve.now/CVE-2026-48098.md): NexTOR IP Changer Unsafely Uses sudo and shell=True (CVSS 7.3, 0x5t4l1n NexTOR\_IP\_CHANGER)
- [CVE-2026-48097](https://cve.now/CVE-2026-48097.md): NexTOR\_IP\_CHANGER has PATH Injection Leading to Arbitrary Command Execution (CVSS 7.8, 0x5t4l1n NexTOR\_IP\_CHANGER)
- [CVE-2026-17435](https://cve.now/CVE-2026-17435.md): File::Rotate::Simple versions before 0.4.0 for Perl create the target of dangling symlinks when rotating files (CVSS 2.5, RRWO File::Rotate::Simple)
- [CVE-2025-71409](https://cve.now/CVE-2025-71409.md): No Authentication for Very High Frequency Data Link messages used in CPDLC (CVSS 7.1, ATN-B1 CPDLC)
- [CVE-2025-71410](https://cve.now/CVE-2025-71410.md): Malicious Link Control Frames Can Cause Loss of CPDLC Functions (CVSS 6.0, ATN-B1 CPDLC)
- [CVE-2026-11430](https://cve.now/CVE-2026-11430.md): Grav CMS Scheduler Webhook Authentication Bypass via Null Short-Circuit (CVSS 6.9, Trilby Media grav-plugin-scheduler-webhook · Trilby Media g…)
- [CVE-2025-71411](https://cve.now/CVE-2025-71411.md): In CPDLC, Broadcast Control Frames Can Disconnect Multiple Aircraft Simultaneously (CVSS 6.0, ATN-B1 CPDLC)
- [CVE-2025-71412](https://cve.now/CVE-2025-71412.md): In CPDLC, False Emergency or Status Messages Will be Accepted as Legitimate (CVSS 7.1, ATN-B1 CPDLC)
- [CVE-2025-71413](https://cve.now/CVE-2025-71413.md): In CPDLC, Malformed or Out of Sequence Frames Can Cause Resets (CVSS 6.0, ATN-B1 CPDLC)
- [CVE-2026-71852](https://cve.now/CVE-2026-71852.md): pypdf: Possible long runtimes/large memory usage for large CID font width ranges (CVSS 4.8, py-pdf pypdf · pypdf)
- [CVE-2026-71851](https://cve.now/CVE-2026-71851.md): crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain (CVSS 9.0, brix crypto-js · crypto-js)
- [CVE-2026-71850](https://cve.now/CVE-2026-71850.md): Hono: \`memo()\` retains SSR output across requests, leading to cross-user data disclosure (CVSS 4.8, honojs hono · hono)
- [CVE-2026-71849](https://cve.now/CVE-2026-71849.md): Hono: Proxy Helper does not remove response headers listed in the \`Connection\` header (CVSS 3.7, honojs hono · hono)
- [CVE-2026-71848](https://cve.now/CVE-2026-71848.md): Hono: Algorithmic Complexity DoS in Language Middleware (CVSS 5.3, honojs hono · hono)
- [CVE-2026-69127](https://cve.now/CVE-2026-69127.md): Kirby: System path exposure from error messages in the REST API (CVSS 6.9, getkirby kirby · getkirby/cms)
- [CVE-2026-71847](https://cve.now/CVE-2026-71847.md): Ruby JSON: JSON::ResumableParser#partial\_value dereferences a freed input buffer and crashes on truncated duplicate-key streams (CVSS 8.7, ruby json · json)
- [CVE-2026-19231](https://cve.now/CVE-2026-19231.md): SourceCodester Simple Doctors Appointment System ajax.php delete\_appointment sql injection (CVSS 6.9, SourceCodester Simple Doctors Appointment System)
- [CVE-2026-70561](https://cve.now/CVE-2026-70561.md): TestLink 1.9.20 and prior Authenticated IDOR via attachmentdownload.php (CVSS 7.1, TestLinkOpenSourceTRMS TestLink)
- [CVE-2026-66000](https://cve.now/CVE-2026-66000.md): Frappe: Unrestricted access to Document Follow APIs (CVSS 2.3, frappe)
- [CVE-2025-58375](https://cve.now/CVE-2025-58375.md): Frappe has potential SQL Injection due to missing validation (CVSS 8.1, frappe)
- [CVE-2026-19230](https://cve.now/CVE-2026-19230.md): SourceCodester Photo Share Website Comment Input Box ajax.php save\_upload cross site scripting (CVSS 5.1, SourceCodester Photo Share Website)
- [CVE-2026-44965](https://cve.now/CVE-2026-44965.md): In versions of the Datadog Android application prior to v545-5.9.2, six App Widget configuration activities (IncidentWidgetActivity, Monitor (CVSS 5.5, Datadog Android App)
- [CVE-2026-44964](https://cve.now/CVE-2026-44964.md): In versions of the Datadog Android application prior to v545-5.9.2, OnCallNotificationActivity is declared exported with no permission guard (CVSS 6.5, Datadog Android App)
- [CVE-2026-47364](https://cve.now/CVE-2026-47364.md): In versions of the Datadog Android application prior to v545-5.9.2, the app tags Crashlytics data with the user's Datadog UUID, with no user (CVSS 6.5, Datadog Android App)
- [CVE-2026-47363](https://cve.now/CVE-2026-47363.md): In versions of the Datadog Android application prior to v541-5.9.2, the exported launcher activity AppActivity accepts an attacker-supplied (CVSS 6.3, Datadog Android App)
- [CVE-2026-47361](https://cve.now/CVE-2026-47361.md): In versions of the Datadog Android application prior to v541-5.9.2, BubbleChatActivity is exported with no permission guard and accepts a SE (CVSS 6.4, Datadog Android App)
- [CVE-2026-47362](https://cve.now/CVE-2026-47362.md): In versions of the Datadog Android application prior to v554-5.9.4, two Room-backed SQLite databases store sensitive content in plaintext: L (CVSS 4.6, Datadog Android App)
- [CVE-2026-64638](https://cve.now/CVE-2026-64638.md): WordPress is vulnerable to a pre-auth reflected XSS vulnerability on the login screen. (CVSS 8.9, WordPress)
- [CVE-2026-19229](https://cve.now/CVE-2026-19229.md): SourceCodester Online Clothing Store Dreamweaver Metadata Files \_notes file information disclosure (CVSS 6.9, SourceCodester Online Clothing Store)
- [CVE-2026-64637](https://cve.now/CVE-2026-64637.md): Improper privilege management in the XML-RPC API of Plesk before 18.0.80, allows an authenticated reseller to obtain an administrative sessi (CVSS 9.9, WebPros Plesk)
- [CVE-2026-64636](https://cve.now/CVE-2026-64636.md): An SQL injection vulnerability in Plesk Obsidian up to 18.0.80 for Linux and Windows allows an authenticated user to read arbitrary data fro (CVSS 7.7, WebPros Plesk)
- [CVE-2026-19082](https://cve.now/CVE-2026-19082.md): Imager versions from 0.45\_02 before 1.034 for Perl may expose adjacent heap bytes via strlen() over-read from zero-count ASCII EXIF entries in copy\_string\_tags (CVSS 7.5, TONYC Imager)
- [CVE-2026-66058](https://cve.now/CVE-2026-66058.md): Frappe: Unrestricted access to a Document Follow API (CVSS 5.3, frappe)
- [CVE-2026-19213](https://cve.now/CVE-2026-19213.md): WonderTrader Pending Order TraderAdapter.h \_undone\_qty behavioral workflow (CVSS 5.3, WonderTrader)
- [CVE-2026-56818](https://cve.now/CVE-2026-56818.md): Netty: RedisArrayAggregator max-elements failure leaves retained partial aggregate state (CVSS 6.5, netty · io.netty:netty-codec-redis)
- [CVE-2026-66062](https://cve.now/CVE-2026-66062.md): SvelteKit: ReDoS (O(n^2)) in content negotiation — unauthenticated DoS via the Accept header (CVSS 5.3, sveltejs kit · @sveltejs/kit)
- [CVE-2026-20348](https://cve.now/CVE-2026-20348.md): ClamAV XAR File Format Processing Memory Corruption Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-20345](https://cve.now/CVE-2026-20345.md): ClamAV GPT File Format Processing Memory Corruption Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-20339](https://cve.now/CVE-2026-20339.md): ClamAV PESpin File Format Processing Integer Overflow Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-20347](https://cve.now/CVE-2026-20347.md): ClamAV Mach-O File Format Processing Memory Corruption Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-67585](https://cve.now/CVE-2026-67585.md): Atom Exhaustion via \_entities Representation Keys in DivvyPayHQ absinthe\_federation (CVSS 8.7, DivvyPayHQ absinthe\_federation)
- [CVE-2026-20346](https://cve.now/CVE-2026-20346.md): ClamAV PDF File Format Processing Memory Corruption Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-20338](https://cve.now/CVE-2026-20338.md): ClamAV ZIP File Format Processing Memory Corruption Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-20337](https://cve.now/CVE-2026-20337.md): ClamAV ZIP File Format Processing Memory Corruption Vulnerability (CVSS 7.5, Cisco Secure Endpoint)
- [CVE-2026-71557](https://cve.now/CVE-2026-71557.md): go-git: Malicious reference names may modify files outside the reference storage (CVSS 6.3, go-git · github.com/go-git/go-git/v5 +1)
- [CVE-2026-71556](https://cve.now/CVE-2026-71556.md): go-git: Worktree operations may follow symlinks (CVSS 7.1, go-git · github.com/go-git/go-git/v5 +1)
- [CVE-2026-19212](https://cve.now/CVE-2026-19212.md): WonderTrader TraderATP Cash Trade Conversion WTSTradeDef.hpp uninitialized variable (CVSS 5.3, WonderTrader)
- [CVE-2026-68772](https://cve.now/CVE-2026-68772.md): ZenML 0.94.6 Remote Code Execution via CloudpickleMaterializer (CVSS 8.5, ZenML)
- [CVE-2026-19211](https://cve.now/CVE-2026-19211.md): SourceCodester Photo Share Website ajax.php signup sql injection (CVSS 6.9, SourceCodester Photo Share Website)
- [CVE-2026-14644](https://cve.now/CVE-2026-14644.md): Nexus Repository 3 - Privilege Escalation (CVSS 8.6, Sonatype Nexus Repository)
- [CVE-2026-17593](https://cve.now/CVE-2026-17593.md): Nexus Repository - Arbitrary Class Instantiation via Unsafe Realm Configuration (CVSS 7.2, Sonatype Nexus Repository)
- [CVE-2026-17594](https://cve.now/CVE-2026-17594.md): Nexus Repository 3 - Authorization Bypass in Repository Creation (CVSS 8.2, Sonatype Nexus Repository)
- [CVE-2026-17595](https://cve.now/CVE-2026-17595.md): Nexus Repository 3 - JEXL Content Selector Sandbox Property-Read Bypass (CVSS 5.3, Sonatype Nexus Repository)
- [CVE-2026-17596](https://cve.now/CVE-2026-17596.md): Nexus Repository 3 - Stored Cross-Site Scripting (XSS) via Blob Store Name (CVSS 6.3, Sonatype Nexus Repository)
- [CVE-2026-17598](https://cve.now/CVE-2026-17598.md): Nexus Repository 3 - Improper Input Validation in Scheduled Task Configuration (CVSS 5.3, Sonatype Nexus Repository)
- [CVE-2026-17599](https://cve.now/CVE-2026-17599.md): Nexus Repository 3 - Unverified Onboarding State on change-admin-password Endpoint (CVSS 6.9, Sonatype Nexus Repository)
- [CVE-2026-17600](https://cve.now/CVE-2026-17600.md): Nexus Repository 3 - Session Not Invalidated on User Account Deletion or Deactivation (CVSS 8.7, Sonatype Nexus Repository · org.sonatype.security:securi… +2)
- [CVE-2026-17601](https://cve.now/CVE-2026-17601.md): Nexus Repository 3 - Wildcard Privilege Update Self-Escalation to Administrator (CVSS 8.9, Sonatype Nexus Repository)
- [CVE-2026-17603](https://cve.now/CVE-2026-17603.md): Nexus Repository 3 - HikariCP connectionInitSql Injection RCE via DataStore Configuration API (CVSS 8.7, Sonatype Nexus Repository)
- [CVE-2026-17597](https://cve.now/CVE-2026-17597.md): Nexus Repository 3 - Server-Side Request Forgery via Email Configuration Verification (CVSS 5.1, Sonatype Nexus Repository)
- [CVE-2026-19210](https://cve.now/CVE-2026-19210.md): SourceCodester Photo Share Website ajax.php save\_upload unrestricted upload (CVSS 5.3, SourceCodester Photo Share Website)
- [CVE-2026-48093](https://cve.now/CVE-2026-48093.md): Code Embed - Contributor Stored Cross-Site Scripting via Remote URL Embed (CVSS 6.5, dartiss code-embed)
- [CVE-2026-19209](https://cve.now/CVE-2026-19209.md): SourceCodester Photo Share Website index.php home cross site scripting (CVSS 5.1, SourceCodester Photo Share Website)
- [CVE-2026-66059](https://cve.now/CVE-2026-66059.md): Frappe: Field-level permission bypass via Document Follow (CVSS 5.3, frappe)
- [CVE-2026-62996](https://cve.now/CVE-2026-62996.md): Smarty Security stream restriction bypass through stream: resource (CVSS 6.9, smarty-php smarty · smarty/smarty)
- [CVE-2026-62992](https://cve.now/CVE-2026-62992.md): Smarty: Symlink path traversal out of trusted directories (CVSS 6.9, smarty-php smarty · smarty/smarty)
- [CVE-2026-19208](https://cve.now/CVE-2026-19208.md): WonderTrader TraderDD.cpp queryTrades behavioral workflow (CVSS 6.3, WonderTrader)
- [CVE-2026-19207](https://cve.now/CVE-2026-19207.md): PHPGurukul Company Visitor Management System manage-newvisitors.php cross site scripting (CVSS 4.8, PHPGurukul Company Visitor Management System)
- [CVE-2022-4995](https://cve.now/CVE-2022-4995.md): Weaver E-cology 9.0 File Upload RCE via uploaderOperate.jsp (CVSS 9.3, Weaver Network Co. E-cology)
- [CVE-2026-18497](https://cve.now/CVE-2026-18497.md): The nothings stb TrueType library contains a heap buffer overflow vulnerability (CVSS 7.1, Sean Barrett (nothings) nothings stb)
- [CVE-2026-19264](https://cve.now/CVE-2026-19264.md): Unauthenticated arbitrary file read via /uploads path traversal (URL-encoded separators) leading to instance takeover (CVSS 9.8, gitroomhq postiz-app)
- [CVE-2026-61477](https://cve.now/CVE-2026-61477.md): Libvirt: libvirt: newline injection in network xml dns txt/srv fields allows dnsmasq config directive injection (CVSS 2.3, Red Hat Enterprise Linux)
- [CVE-2026-19206](https://cve.now/CVE-2026-19206.md): MZ Automation libiec61850 ASDU Element sv\_subscriber.c SVReceiver\_stopThreadless heap-based overflow (CVSS 4.8, MZ Automation libiec61850)
- [CVE-2026-15570](https://cve.now/CVE-2026-15570.md): Improper URL Scheme and Destination Validation in SmartCenter browserseturl Command (CVSS 7.1, Vestel Telefunken TE24553B45V2DZ Smart TV)
- [CVE-2026-66914](https://cve.now/CVE-2026-66914.md): Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD \< 3.30.0, \< 4.7.0, \< 6.0.1 (CVSS 9.2, seblod.com SEBLOD extension for Joomla)
- [CVE-2026-16637](https://cve.now/CVE-2026-16637.md): OPeNDAP Hyrax SSRF and Credential Disclosure via Unvalidated Redirects (CVSS 6.5, OPeNDAP hyrax-docker)
- [CVE-2026-66494](https://cve.now/CVE-2026-66494.md): Joomla Extension - joomshaper.com - Unauthenticated stored XSS in Shapes API endpoint SP Page Builder \< 6.7.0 (CVSS 8.7, joomshaper.com SP Page Builder extension for Joomla)
- [CVE-2026-48094](https://cve.now/CVE-2026-48094.md): ShareOpenly has Cross-Site Scripting (XSS) via Missing esc\_url() on Shared URL in Content Output (CVSS 5.3, dartiss shareopenly)
- [CVE-2026-66838](https://cve.now/CVE-2026-66838.md): SQL injection via the :comment option in Postgrex.stream/4 (CVSS 5.9, elixir-ecto postgrex)
- [CVE-2026-56794](https://cve.now/CVE-2026-56794.md): Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. (CVSS 6.5, Dell OpenManage Server Administrator Managed Node (Patch… +1)
- [CVE-2026-56793](https://cve.now/CVE-2026-56793.md): Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains an Improper Authentication vulnerability. (CVSS 7.7, Dell OpenManage Server Administrator Managed Node (Patch… +1)
- [CVE-2026-15816](https://cve.now/CVE-2026-15816.md): Dracut: dracut: root code execution via unescaped error message written to sourced emergency hook script in die() (CVSS 7.5, Red Hat Enterprise Linux · Red Hat OpenShift Container P… +1)
- [CVE-2026-54205](https://cve.now/CVE-2026-54205.md): TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in link storing functionality (CVSS 6.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54218](https://cve.now/CVE-2026-54218.md): TeamDavid: Weak Cryptography and Insecure Password Storage (CVSS 8.8, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54217](https://cve.now/CVE-2026-54217.md): TeamDavid: Stored XSS in web application (CVSS 5.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54216](https://cve.now/CVE-2026-54216.md): TeamDavid: Reflected Cross Site Scripting (XSS) via the 'EntryInfo' parameter (CVSS 5.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54215](https://cve.now/CVE-2026-54215.md): TeamDavid: Open Redirect via the 'replyUrl' parameter (CVSS 5.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54214](https://cve.now/CVE-2026-54214.md): TeamDavid: Header Injection through the 'cType' URL parameter (CVSS 5.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54213](https://cve.now/CVE-2026-54213.md): TeamDavid: Denial of Service via endpoint 'internalRestart' (CVSS 9.2, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54212](https://cve.now/CVE-2026-54212.md): TeamDavid: Buffer Overflow in JSON-parsing (CVSS 9.5, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54211](https://cve.now/CVE-2026-54211.md): TeamDavid: Buffer Overflow in multiple form data parameters (CVSS 9.5, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54210](https://cve.now/CVE-2026-54210.md): TeamDavid: Buffer Overflow in file names of file upload functionalities (CVSS 9.5, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54209](https://cve.now/CVE-2026-54209.md): TeamDavid: Buffer Overflow in 'editini' function (CVSS 8.9, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54208](https://cve.now/CVE-2026-54208.md): TeamDavid: Arbitrary File Write leading to Stored XSS (CVSS 8.5, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54207](https://cve.now/CVE-2026-54207.md): TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in move archive functionality (CVSS 6.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54206](https://cve.now/CVE-2026-54206.md): TeamDavid: Server-Side Request Forgery (SSRF) via 'pathname' parameter in sending functionality (CVSS 6.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54204](https://cve.now/CVE-2026-54204.md): TeamDavid: Server-Side Request Forgery (SSRF) via 'pathnameroot' parameter in search functionality (CVSS 7.7, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54203](https://cve.now/CVE-2026-54203.md): TeamDavid: Memory Leak leaking sensitive information (CVSS 9.2, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54202](https://cve.now/CVE-2026-54202.md): TeamDavid: Path Traversal in the archive creation functionality (CVSS 8.5, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54201](https://cve.now/CVE-2026-54201.md): TeamDavid: Missing Authorization (CVSS 6.9, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54200](https://cve.now/CVE-2026-54200.md): TeamDavid: Local File Inclusion via the form field 'scjob' (CVSS 8.4, Tobit Laboratories AG TeamDavid)
- [CVE-2026-54199](https://cve.now/CVE-2026-54199.md): TeamDavid: Header Injection through request body in link storing functionality (CVSS 5.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-12071](https://cve.now/CVE-2026-12071.md): TeamDavid: Header Injection leading to Open Redirect via URL-encoded characters (CVSS 5.3, Tobit Laboratories AG TeamDavid)
- [CVE-2026-12070](https://cve.now/CVE-2026-12070.md): TeamDavid: Arbitrary File Deletion via form field 'scjob' (CVSS 8.4, Tobit Laboratories AG TeamDavid)
- [CVE-2026-71559](https://cve.now/CVE-2026-71559.md): Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata (CVSS 7.5, Apache Software Foundation Apache Fory)
- [CVE-2026-71558](https://cve.now/CVE-2026-71558.md): Apache Fory: Heap type confusion in C++ polymorphic smart-pointer deserialization (CVSS 9.8, Apache Software Foundation Apache Fory)
- [CVE-2026-71560](https://cve.now/CVE-2026-71560.md): Apache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path (CVSS 9.1, Apache Software Foundation Apache Fory)
- [CVE-2026-9169](https://cve.now/CVE-2026-9169.md): LUCID Vision Labs: DLL Search Order Hijacking in Arena SDK 1.0.80.49 on Windows (CVSS 8.8, LUCID Vision Labs Arena SDK)
- [CVE-2026-18938](https://cve.now/CVE-2026-18938.md): P11-kit: integer overflow in rpc attribute-array length calculation can under-allocate nested attribute storage on 32 bit systems (CVSS 6.2, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-66491](https://cve.now/CVE-2026-66491.md): Joomla Extension - phoca.cz - Arbitrary File Read in Phoca Commander 1.0.0-6.1.3 (CVSS 8.2, phoca.cz Phoca Commander extension for Joomla)
- [CVE-2026-66492](https://cve.now/CVE-2026-66492.md): Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 (CVSS 6.1, phoca.cz Phoca Commander extension for Joomla)
- [CVE-2026-49008](https://cve.now/CVE-2026-49008.md): Integrity‑check credential leakage vulnerability in an application function of ZTE F689 product (CVSS 6.5, ZTE F689)
- [CVE-2026-66493](https://cve.now/CVE-2026-66493.md): Joomla Extension - phoca.cz - Path traversal vulnerability in Phoca Commander 1.0.0-6.1.3 (CVSS 6.4, phoca.cz Phoca Commander extension for Joomla)
- [CVE-2026-49007](https://cve.now/CVE-2026-49007.md): Information leakage vulnerability in ZTE F689 product (CVSS 7.5, ZTE F689)
- [CVE-2026-15239](https://cve.now/CVE-2026-15239.md): Simple CAPTCHA with Cloudflare Turnstile \< 1.42.0 - Unauthenticated Turnstile Protection Bypass via Reusable Forminator Cache Key (CVSS 5.3, Simple CAPTCHA with Cloudflare Turnstile)
- [CVE-2026-15211](https://cve.now/CVE-2026-15211.md): Subscriptions for WooCommerce \< 2.0.1 - Payment Bypass via Attacker-Supplied PayPal Capture Token (CVSS 5.9, Subscriptions for WooCommerce)
- [CVE-2026-15148](https://cve.now/CVE-2026-15148.md): WP Events Manager \< 2.2.5 - Unauthenticated Payment Bypass and Booking Status Update via IDOR (CVSS 5.3, WP Events Manager)
- [CVE-2026-19079](https://cve.now/CVE-2026-19079.md): Policycoreutils: policycoreutils: toctou race condition in fixfiles allows arbitrary selinux label manipulation (CVSS 4.4, Red Hat Hardened Images · Red Hat Enterprise Linux +1)
- [CVE-2026-16027](https://cve.now/CVE-2026-16027.md): Unauthenticated WebSocket-to-XAdES SSRF in Revenue Administration's E-Signature (CVSS 5.4, Revenue Administration E-Signature)
- [CVE-2026-49006](https://cve.now/CVE-2026-49006.md): TLS credential leakage vulnerability in ZTE F689 product (CVSS 5.3, ZTE F689)
- [CVE-2026-12261](https://cve.now/CVE-2026-12261.md): Improper Access Control in nltk/nltk (CVSS 5.3, nltk/nltk · nltk)
- [CVE-2026-16265](https://cve.now/CVE-2026-16265.md): WP Maps \< 4.9.7 - Subscriber+ Denial of Service (CVSS 6.5, WP Maps)
- [CVE-2026-16263](https://cve.now/CVE-2026-16263.md): WP Maps \< 4.9.7 - Subscriber+ Local File Inclusion (CVSS 8.8, WP Maps)
- [CVE-2026-16262](https://cve.now/CVE-2026-16262.md): Estatik \< 4.3.3 - Login CSRF (CVSS 7.5, Estatik Real Estate Plugin)
- [CVE-2026-16258](https://cve.now/CVE-2026-16258.md): Ajax Search Lite \< 4.14.5 - Unauthenticated PHP Object Injection via Search Statistics REST Endpoint (CVSS 9.8, Ajax Search Lite)
- [CVE-2026-16041](https://cve.now/CVE-2026-16041.md): MStore API \< 4.21.0 - Unauthenticated Product Review Creation (CVSS 7.5, MStore API)
- [CVE-2026-16039](https://cve.now/CVE-2026-16039.md): MStore API \< 4.21.0 - Subscriber+ Order and Customer PII Disclosure via IDOR (CVSS 6.5, MStore API)
- [CVE-2026-16038](https://cve.now/CVE-2026-16038.md): MStore API \< 4.21.0 - Unauthenticated Payment Bypass via Multiple Payment Gateways (CVSS 9.1, MStore API)
- [CVE-2026-16030](https://cve.now/CVE-2026-16030.md): MStore API \< 4.21.0 - Unauthenticated Account Takeover via Firebase Phone Authentication (CVSS 8.1, MStore API)
- [CVE-2026-15386](https://cve.now/CVE-2026-15386.md): Meow Gallery \< 5.5.2 - Author+ Stored XSS via Attachment Alt-Text (CVSS 5.4, Meow Gallery)
- [CVE-2026-15361](https://cve.now/CVE-2026-15361.md): Content Views \< 4.5 - Subscriber+ SQL Injection via preview\_request (CVSS 8.1, Content Views)
- [CVE-2026-15359](https://cve.now/CVE-2026-15359.md): Templately \< 3.7.1 - Unauthenticated Administrator Templately Cloud Connection Overwrite (CVSS 6.5, Templately)
- [CVE-2026-15245](https://cve.now/CVE-2026-15245.md): BNE Testimonials \< 2.0.8.2 - Contributor+ Stored XSS via Slider Shortcode (CVSS 5.4, BNE Testimonials)
- [CVE-2026-15215](https://cve.now/CVE-2026-15215.md): Subscriptions for WooCommerce \< 2.0.1 - Shop Manager+ Arbitrary Plugin Installation (CVSS 8.8, Subscriptions for WooCommerce)
- [CVE-2026-15214](https://cve.now/CVE-2026-15214.md): Subscriptions for WooCommerce \< 2.0.1 - Subscriber+ Subscription Detail Disclosure via IDOR (CVSS 4.3, Subscriptions for WooCommerce)
- [CVE-2026-15032](https://cve.now/CVE-2026-15032.md): wpDiscuz \< 7.6.60 - Unauthenticated Stored XSS via Image URL Conversion (CVSS 6.1, Comments)
- [CVE-2026-14943](https://cve.now/CVE-2026-14943.md): Password Protected \< 2.8.4 - Unauthenticated Sensitive Information Exposure via REST API (CVSS 7.5, Password Protected — Lock Entire Site, Pages, Posts, Catego…)
- [CVE-2026-14331](https://cve.now/CVE-2026-14331.md): Subscribe2 \< 10.46 - Reflected XSS via email Parameter (CVSS 6.1, Subscribe2)
- [CVE-2026-14205](https://cve.now/CVE-2026-14205.md): WP Events Manager \< 2.2.5 - Subscriber+ Payment Bypass via 'qty' Parameter (CVSS 9.8, WP Events Manager)
- [CVE-2026-19196](https://cve.now/CVE-2026-19196.md): SourceCodester Photo Share Website ajax.php login sql injection (CVSS 6.9, SourceCodester Photo Share Website)
- [CVE-2026-19195](https://cve.now/CVE-2026-19195.md): V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control (CVSS 8.5, V-Secure Jingyun Antivirus)
- [CVE-2026-14364](https://cve.now/CVE-2026-14364.md): TrueBooker \<= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'tbab-userid' (CVSS 9.8, themetechmount TrueBooker – Appointment Booking and Schedul…)
- [CVE-2026-11907](https://cve.now/CVE-2026-11907.md): Stream \<= 4.2.0 - Missing Authorization to Authenticated (Subscriber+) Sensitive Information Disclosure via Heartbeat API (CVSS 6.5, xwp Stream – Activity Log & Audit Trail)
- [CVE-2026-12801](https://cve.now/CVE-2026-12801.md): Ultra Addons for Contact Form 7 \<= 3.5.43 - Authenticated (Contributor+) Stored Cross-Site Scripting via Slider Attributes (CVSS 6.4, themefic Ultra Addons for Contact Form)
- [CVE-2026-14365](https://cve.now/CVE-2026-14365.md): TrueBooker \<= 1.2.3 - Missing Authorization to Unauthenticated Arbitrary Password Reset via 'truebooker\_wp\_user\_id' (CVSS 9.8, themetechmount TrueBooker – Appointment Booking and Schedul…)
- [CVE-2026-19193](https://cve.now/CVE-2026-19193.md): Jiangmin Antivirus Minifilter Port kvcore.sys MessageNotifyCallback access control (CVSS 8.5, Jiangmin Antivirus)
- [CVE-2026-19192](https://cve.now/CVE-2026-19192.md): DeepCool DisplayService DeepCoolDisplayService.exe access control (CVSS 8.5, DeepCool DisplayService)
- [CVE-2026-49005](https://cve.now/CVE-2026-49005.md): Root password hash exposure vulnerability in ZTE F689 product (CVSS 2.4, ZTE F689)
- [CVE-2026-19191](https://cve.now/CVE-2026-19191.md): StableBit DrivePool DrivePoolService DrivePool.Service.exe permission (CVSS 8.5, StableBit DrivePool)
- [CVE-2026-19190](https://cve.now/CVE-2026-19190.md): StableBit Scanner ScannerService Scanner.Service.exe permission (CVSS 8.5, StableBit Scanner)
- [CVE-2026-19189](https://cve.now/CVE-2026-19189.md): Power Sofware PowerISO Kernel Driver scdemu.sys privileges management (CVSS 8.5, Power Sofware PowerISO)
- [CVE-2026-49746](https://cve.now/CVE-2026-49746.md): GPU DDK - Dimension Mismatch and Integer Truncation in PMRDevPhysAddrOSMem (CVSS 7.1, Imagination Technologies Graphics DDK)
- [CVE-2026-45204](https://cve.now/CVE-2026-45204.md): GPU DDK - Out of bounds memory access and kernel NULL pointer dereference in DmaTransfer when pui64Address is a pointer to device memory (CVSS 5.5, Imagination Technologies Graphics DDK)
- [CVE-2026-45198](https://cve.now/CVE-2026-45198.md): GPU DDK - RGXFWIF\_SYSINIT::sCorememDataStore is untrusted (CVSS 7.8, Imagination Technologies Graphics DDK)
- [CVE-2025-63235](https://cve.now/CVE-2025-63235.md): In sol commit 373d848 (2024-12-12), the broker does not fully release resources when handling malformed or duplicate CONNECT packets. (CVSS 7.5)
- [CVE-2026-37171](https://cve.now/CVE-2026-37171.md): A lack of tenant separation in SuperTokens Inc. (CVSS 5.9)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.