CVEs published August 29, 2026
66 CVEs were published on August 29, 2026: 13 critical, 18 high.
- Published
- 66
- Critical
- 13
- High
- 18
- Medium
- 31
- Low
- 4
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 42
Most affected products
- jeremyevans rodauth
- 5
- pac4j
- 5
- HEL Online Classroom: AI-powered Online Classrooms
- 3
- MasterStudy LMS WordPress Plugin
- 3
- User Profile Builder
- 3
- iot-ecology rust-iot-platform
- 2
- itsourcecode Sales and Inventory System
- 2
- ljharb qs · qs
- 2
- macrozheng mall
- 2
- MStore API
- 2
Critical 13
- CVE-2026-15369Custom User Registration Fields for WooCommerce <= 2.2.3 - Unauthenticated Privilege Escalation via 'afreg_select_user_role' Parameter in Store API CheckoutAddify Custom User Registration Fields for WooCommerce
- CVE-2026-82466Rodauth before 2.46.0 Authentication Bypass via webauthn_loginjeremyevans rodauth
- CVE-2026-82460Cloud Commander before 19.20.2 Directory Traversal via REST and Markdowncoderaiser cloudcmd
- CVE-2026-82456argocd-mcp 0.8.0 Authentication Bypass via Unauthenticated HTTPargoproj-labs argocd-mcp
- CVE-2026-82454Omnivore before android-0.227.0 Authentication Bypass via Apple Sign-inomnivore-app omnivore
- CVE-2026-82452rust-iot-platform Authentication Bypass via Missing Request Guardsiot-ecology rust-iot-platform
- CVE-2026-82448Shinobi before commit 5a76c74f Arbitrary Database Query Execution via Hardcoded Child Node KeyShinobi Systems Shinobi
- CVE-2026-14494Sigma Forms Pro <= 1.4.5 - Unauthenticated Unauthenticated Arbitrary File Upload Leading to Remote Code Execution via Pre-built Template File Upload Fieldbdthemes SigmaForms Pro – AI Generated Forms
- CVE-2026-80725net: gro: properly validate BIG TCP aggregation criteriaLinux
- CVE-2026-77012Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password爱采集数据采集和发布插件
- CVE-2026-16947Total Processing Card Payments for WooCommerce <= 7.3 - Unauthenticated SSRF leading to Payment Bypass and Gateway Credential DisclosureTotal processing card payments for WooCommerce
- CVE-2026-16259Uix UserCenter <= 1.0.3 - Unauthenticated Privilege EscalationUix UserCenter
- CVE-2026-10522Simple User Registration <= 6.9 - Unauthenticated Privilege Escalation to AdministratorMemberHero
High 18
- CVE-2026-75807SAML Single Sign On <= 5.4.6 - Unauthenticated Authentication Bypass via X.509 Certificate Poisoningcyberlord92 SAML Single Sign On – SSO Login
- CVE-2026-82475iFlytek astron-agent through 1.1.1 Workflow Hijacking via Missing Ownership Checkiflytek astron-agent
- CVE-2026-82474Sudo through 1.9.17p2 Intercept Policy Bypass via execveatsudo-project sudo
- CVE-2026-82473KubeEdge CloudCore through 1.23.1 Missing Authentication on Node Task Endpointskubeedge
- CVE-2026-82472Documenso before 2.13.0 Unauthenticated File Upload via /api/files/upload-pdfdocumenso
- CVE-2026-82463pac4j-core before 6.5.6 Authorization Bypass via Reversed Profile Type Checkpac4j
- CVE-2026-82461pac4j-oidc before 6.5.6 Privilege Escalation via Unverified Keycloak Access Tokenpac4j
- CVE-2026-82481The cohttp package before 6.3.0 for OCaml allows directory traversal.mirage cohttp
- CVE-2026-82457su-exec through 0.3 Privilege Escalation via Numeric User IDncopa su-exec
- CVE-2026-82453rust-iot-platform Cleartext Password Storage via User Modeliot-ecology rust-iot-platform
- CVE-2026-82450BookStack before 26.05.4 Remote Code Execution via Book Coverbookstackapp bookstack
- CVE-2026-82447Skyvern before 1.0.45 Sandbox Escape via TextPromptBlockSkyvern-AI skyvern
- CVE-2026-77007HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated BigBlueButton API Secret DisclosureHEL Online Classroom: AI-powered Online Classrooms
- CVE-2026-76586BookingPress 1.5.6 - 1.6.2 - Unauthenticated Booking Price Manipulation via PayPal Payment ConfirmationAppointment Booking Calendar Plugin and Scheduling Plugin
- CVE-2026-76548Profile Builder < 4.0.1 - Unauthenticated Unpublished Content and Media Modification via Front-End Upload Auth BypassUser Profile Builder
- CVE-2026-16600SmartAIPress <= 1.2.0 - Subscriber+ Server-Side Request Forgery via smartaipress_openai_upload_and_set_featured_imageSmartAIPress
- CVE-2026-16061Rest Routes <= 5.5.5 - Unauthenticated SQLi via custom-tables/tables/{table_name}Rest Routes
- CVE-2026-41012BOSH vSphere CPI Improper Cert ValidationCloud Foundry bosh-vsphere-cpi-release
Medium, low and unrated 35
- CVE-2026-82562qs.parse does not enforce arrayLimit on comma groups under bracket-push keys when throwOnLimitExceeded is set (incomplete fix for CVE-2026-2391)ljharb qs · qs
- CVE-2026-82417qs.stringify throws TypeError on objects with a non-callable constructor.isBuffer propertyljharb qs · qs
- CVE-2026-82424PHPGurukul Student Information System student_edit1.php sql injectionPHPGurukul Student Information System
- CVE-2026-82423macrozheng mall Payment Status Endpoint paySuccess behavioral workflowmacrozheng mall
- CVE-2026-82422itsourcecode Sales and Inventory System emp_del.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82421itsourcecode Sales and Inventory System emp_edit.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82476Memos through 0.30.0 SSRF via Omitted CGNAT Address Rangeusememos memos
- CVE-2026-82470Rodauth before 2.47.0 TOTP Code Reuse via Drift Windowjeremyevans rodauth
- CVE-2026-82469Rodauth before 2.47.0 Authentication Bypass via jwt_refreshjeremyevans rodauth
- CVE-2026-82468Rodauth before 2.47.0 CSRF Protection Bypass via Content-Typejeremyevans rodauth
- CVE-2026-82467Rodauth before 2.47.0 Open Redirect via Return-to Pathjeremyevans rodauth
- CVE-2026-82465pac4j-saml before 6.5.6 Session Destruction via Unsigned LogoutRequestpac4j
- CVE-2026-82464pac4j-core before 6.5.6 Open Redirect via Backslash Logoutpac4j
- CVE-2026-82462pac4j-oidc before 6.5.6 Authentication Bypass via Access Token Substitutionpac4j
- CVE-2026-82477In MITRE SAF Heimdall 2.11.6 through 2.13.x before 2.14.0, an SSRF issue allows remote attackers to access internal network resources via thMITRE Heimdall
- CVE-2026-82451Formwork < 2.3.11 Stored XSS via Referer Headergetformwork Formwork
- CVE-2026-82449Cockpit CMS before 2.14.1 Account Enumeration via Auth Timingcockpit-hq cockpit
- CVE-2026-82364macrozheng mall Order Submission submit race conditionmacrozheng mall
- CVE-2026-81346Frontend Admin by DynamiApps < 3.29.11 - Subscriber+ Arbitrary Membership Plan DeletionFrontend Admin by DynamiApps
- CVE-2026-81342MasterStudy LMS < 3.7.43 - Unauthenticated Open RedirectMasterStudy LMS WordPress Plugin
- CVE-2026-81200MasterStudy LMS < 3.7.42 - Instructor+ Cross-Tenant Order Billing PII Disclosure via IDORMasterStudy LMS WordPress Plugin
- CVE-2026-81026MasterStudy LMS < 3.7.40 - Unauthenticated Payment Bypass via PayPal IPNMasterStudy LMS WordPress Plugin
- CVE-2026-80488WP Ultimate CSV Importer < 9.0 - Admin+ SQLi via AIOSEO Import FieldsWP Ultimate CSV Importer
- CVE-2026-80311Stripe Payment Forms by WP Full Pay < 8.5.5 - Cross-Customer Subscription Cancellation via IDORStripe Payment Forms by WP Full Pay
- CVE-2026-77786Rank Math SEO < 1.0.277 - Editor+ Core Settings Modification via fix-site-seo AbilityRank Math SEO
- CVE-2026-77704Amelia 1.2.32 - 2.4.8 - Amelia Customer+ Appointment Status Update and Self-ApprovalBooking for Appointments and Events Calendar
- CVE-2026-77010HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Moderator Join URL Disclosure and Class Access Code BypassHEL Online Classroom: AI-powered Online Classrooms
- CVE-2026-77008HEL Online Classroom: AI-powered Online Classrooms <= 1.0.3 - Unauthenticated Plugin Settings UpdateHEL Online Classroom: AI-powered Online Classrooms
- CVE-2026-76547Profile Builder < 4.0.1 - Admin+ PHP Object Injection via Import/ExportUser Profile Builder
- CVE-2026-76546Profile Builder < 4.0.1 - Contributor+ Stored XSS via Format Date ShortcodeUser Profile Builder
- CVE-2026-19430CatFolders Document Gallery Pro < 2.0.7 - Unauthenticated Missing Authorization via download-allCatfolders Document Gallery Pro
- CVE-2026-18234MStore API < 4.21.1 - Subscriber+ Arbitrary Order Payment Bypass via WalletMStore API
- CVE-2026-18233MStore API < 4.21.1 - Subscriber+ Arbitrary Order CompletionMStore API
- CVE-2026-17522Newsletters < 4.17 - Arbitrary Plugin Option Update via CSRFNewsletters
- CVE-2026-17520Newsletters < 4.17 - Unauthenticated API Access via Predictable API KeyNewsletters