# CVEs published 2026-08-23

42 CVEs were published on August 23, 2026: 6 critical, 5 high. Days are UTC.

- [CVE-2026-78156](https://cve.now/CVE-2026-78156.md): Open5GS S6a Authentication-Information-Request hss-s6a-path.c hss\_ogs\_diam\_s6a\_air\_cb heap-based overflow (CVSS 5.3, Open5GS)
- [CVE-2026-78148](https://cve.now/CVE-2026-78148.md): ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp graph\_compute null pointer dereference (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-78147](https://cve.now/CVE-2026-78147.md): ggml-org llama.cpp ggml-RPC Server ggml-rpc.cpp deserialize\_tensor deserialization (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-78145](https://cve.now/CVE-2026-78145.md): CTFd \_\_init\_\_.py \_is\_safe\_url redirect (CVSS 5.3, CTFd)
- [CVE-2026-78144](https://cve.now/CVE-2026-78144.md): code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization (CVSS 5.3, code-projects Barangay Resident Profiling Management System)
- [CVE-2026-78143](https://cve.now/CVE-2026-78143.md): code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection (CVSS 6.9, code-projects Barangay Resident Profiling Management System)
- [CVE-2026-78142](https://cve.now/CVE-2026-78142.md): code-projects Barangay Resident Profiling Management System Restore/Delete archived\_records.php authorization (CVSS 5.3, code-projects Barangay Resident Profiling Management System)
- [CVE-2026-78141](https://cve.now/CVE-2026-78141.md): Tenda CH22 exeCommand formexeCommand command injection (CVSS 5.3, Tenda CH22)
- [CVE-2026-78183](https://cve.now/CVE-2026-78183.md): DBD::Pg version 3.21.0 for Perl has a heap out-of-bounds write in quote\_float (CVSS 9.8, DBD-Pg)
- [CVE-2026-78140](https://cve.now/CVE-2026-78140.md): Dromara UJCMS web-file-template Endpoint WebFileTemplateController.java update special elements in template engine (CVSS 5.1, Dromara UJCMS)
- [CVE-2026-19565](https://cve.now/CVE-2026-19565.md): Apache::AppSamurai::Util versions through 1.01 for Perl generate predictable session authentication keys from the clock and process id in CreateSessionAuthKey (CVSS 3.7, Apache-AppSamurai)
- [CVE-2026-75922](https://cve.now/CVE-2026-75922.md): Reverse::Proxy versions before 0.04 for Perl allow HTTP request smuggling via a percent-decoded PATH\_INFO written unencoded to the upstream request line (CVSS 5.3, Reverse-Proxy)
- [CVE-2026-9769](https://cve.now/CVE-2026-9769.md): justhtml before 1.10.0 Denial of Service via deeply nested HTML (CVSS 8.7, EmilStenstrom justhtml · justhtml)
- [CVE-2026-8630](https://cve.now/CVE-2026-8630.md): justhtml before 1.12.0 Mutation XSS via Raw Text Elements (CVSS 5.1, EmilStenstrom justhtml · justhtml)
- [CVE-2026-8445](https://cve.now/CVE-2026-8445.md): justhtml before 1.12.0 Sanitizer Bypass via Markdown (CVSS 9.3, EmilStenstrom justhtml · justhtml)
- [CVE-2026-7808](https://cve.now/CVE-2026-7808.md): justhtml before 1.16.0 Multiple Security Issues via Sanitization (CVSS 9.3, EmilStenstrom justhtml · justhtml)
- [CVE-2026-77088](https://cve.now/CVE-2026-77088.md): justhtml 0.9.0 through 1.21.0 Cross-Site Scripting via code-span (CVSS 5.3, EmilStenstrom justhtml · justhtml)
- [CVE-2026-74793](https://cve.now/CVE-2026-74793.md): justhtml before 3.11.0 XSS via selectedcontent projection (CVSS 5.1, EmilStenstrom justhtml)
- [CVE-2026-6827](https://cve.now/CVE-2026-6827.md): justhtml before 1.17.0 Multiple Cross-Site Scripting Vulnerabilities (CVSS 5.1, EmilStenstrom justhtml · justhtml)
- [CVE-2026-5751](https://cve.now/CVE-2026-5751.md): justhtml before 1.14.0 Mutation XSS via custom sanitization policies (CVSS 5.1, EmilStenstrom justhtml · justhtml)
- [CVE-2026-5389](https://cve.now/CVE-2026-5389.md): justhtml before 1.13.0 XSS via code fence breakout (CVSS 5.1, EmilStenstrom justhtml · justhtml)
- [CVE-2026-5388](https://cve.now/CVE-2026-5388.md): justhtml before 1.15.0 Multiple Security Issues (CVSS 9.3, EmilStenstrom justhtml · justhtml)
- [CVE-2026-4671](https://cve.now/CVE-2026-4671.md): justhtml before 1.18.0 Denial of Service via CSS Selector (CVSS 8.7, EmilStenstrom justhtml · justhtml)
- [CVE-2026-78115](https://cve.now/CVE-2026-78115.md): SourceCodester Class and Exam Timetabling System User Account Update edit\_user\_account.php improper authorization (CVSS 5.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-10053](https://cve.now/CVE-2026-10053.md): Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab (CVSS 8.5, GitLab)
- [CVE-2026-78155](https://cve.now/CVE-2026-78155.md): Untrusted Search Path in StackGres (CVSS 9.9, OnGres StackGres)
- [CVE-2026-78112](https://cve.now/CVE-2026-78112.md): itsourcecode Hospital Management System Project in PHP viewservicetype.php sql injection (CVSS 5.3, itsourcecode Hospital Management System Project in PHP)
- [CVE-2026-77116](https://cve.now/CVE-2026-77116.md): Brave Popup Builder \< 0.8.6 - Subscriber+ Unpublished Popup Disclosure via Preview (CVSS 4.3, Brave)
- [CVE-2026-77115](https://cve.now/CVE-2026-77115.md): Brave Popup Builder \< 0.8.6 - Unauthenticated Reflected XSS via UTM Parameters (CVSS 7.1, Brave)
- [CVE-2026-77003](https://cve.now/CVE-2026-77003.md): Content Mask 1.8.0 - 1.8.5.4 - Contributor Publish Capability Bypass via create\_new\_content\_mask (CVSS 2.7, Content Mask)
- [CVE-2026-14853](https://cve.now/CVE-2026-14853.md): WooCommerce Bookings \< 3.9.0 - Subscriber+ Draft Bookable Product Creation via Missing Authorization (CVSS 4.3, WooCommerce Bookings)
- [CVE-2026-13598](https://cve.now/CVE-2026-13598.md): RestrictMate \< 1.3.0 - Unauthenticated Privilege Escalation to Administrator (CVSS 9.8, RestrictMate)
- [CVE-2026-78063](https://cve.now/CVE-2026-78063.md): Tenda CH22 editFileName formeditFileName command injection (CVSS 5.3, Tenda CH22)
- [CVE-2026-78062](https://cve.now/CVE-2026-78062.md): vas3k TaxHacker JWT Secret config.ts envSchema.parse hard-coded credentials (CVSS 6.9, vas3k TaxHacker)
- [CVE-2026-78061](https://cve.now/CVE-2026-78061.md): vas3k TaxHacker Email Sync imap-client.ts buildImapConfig server-side request forgery (CVSS 5.3, vas3k TaxHacker)
- [CVE-2026-78060](https://cve.now/CVE-2026-78060.md): SourceCodester Stock Management System getOrderReport.php cross site scripting (CVSS 5.3, SourceCodester Stock Management System)
- [CVE-2026-78059](https://cve.now/CVE-2026-78059.md): SourceCodester Stock Management System printOrder.php cross site scripting (CVSS 5.3, SourceCodester Stock Management System)
- [CVE-2026-78057](https://cve.now/CVE-2026-78057.md): sambitraj Student-Management-System Management Mutation sql injection (CVSS 5.3, sambitraj Student-Management-System)
- [CVE-2026-78056](https://cve.now/CVE-2026-78056.md): sambitraj Student-Management-System Dashboard sql injection (CVSS 5.3, sambitraj Student-Management-System)
- [CVE-2026-78055](https://cve.now/CVE-2026-78055.md): SourceCodester Class and Exam Timetabling System BSIT2.php cross site scripting (CVSS 5.3, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-78136](https://cve.now/CVE-2026-78136.md): chirpmyradio CHIRP before 39178db allows eval injection via crafted CSV data. (CVSS 7.8, chirpmyradio CHIRP)
- [CVE-2026-78054](https://cve.now/CVE-2026-78054.md): SourceCodester Class and Exam Timetabling System BSIS1.php cross site scripting (CVSS 5.3, SourceCodester Class and Exam Timetabling System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.