CVEs published August 30, 2026
92 CVEs were published on August 30, 2026: 8 critical, 20 high.
- Published
- 92
- Critical
- 8
- High
- 20
- Medium
- 51
- Low
- 13
- Unrated
- 0
- Now in CISA KEV
- 0
- Fix available
- 54
Most affected products
- ash-project ash_graphql
- 6
- Linux Foundation Magma
- 6
- WWBN AVideo
- 6
- ash-project ash_sql
- 5
- itsourcecode Sales and Inventory System
- 5
- siyuan-note siyuan
- 5
- admidio
- 4
- Open5GS
- 4
- ash-project ash_paper_trail
- 3
- D-Link DIR-825M
- 3
Critical 8
- CVE-2026-82593D-Link DIR-825M LTE Module Firmware Upgrade formLtefotaUpgradeFibocom sub_41802C stack-based overflowD-Link DIR-825M
- CVE-2026-82592D-Link DIR-825M Disk Formatting Handler Endpoint formDiskFormat sub_46725C stack-based overflowD-Link DIR-825M
- CVE-2026-82654SiYuan before v3.8.1 Stored XSS via block namesiyuan-note siyuan
- CVE-2026-82653SiYuan before v3.8.1 Stored XSS via confirmDialogsiyuan-note siyuan
- CVE-2026-82645AVideo Unauthenticated Stream Credential Disclosure via Forgeable TokenWWBN AVideo
- CVE-2026-82542Tenda HG10 Boa Web Server formIPv6Routing buffer overflowTenda HG10
- CVE-2026-82539TOTOLINK A720R MAC Filtering cstecgi.cgi setMacFilterRules memory corruptionTOTOLINK A720R
- CVE-2026-15980MyHome Core <= 4.4.5 - Authentication Bypass to Account Takeover via Activation TokenTangibleWP MyHome Core
High 20
- CVE-2026-56718AJCloud AJY IPC Firmware Path Traversal via jdbhttpdAJCloud AJY IPC Firmware
- CVE-2026-80223Cross-tenant subscription disclosure in AshGraphql authorizes notifications in memory without a tenant-scoped readash-project ash_graphql
- CVE-2026-81636Query-complexity limit bypass via first/last pagination arguments in AshGraphql enables denial of serviceash-project ash_graphql
- CVE-2026-78699rename_tenant returns :ok on a failed rename, enabling cross-tenant access in AshPostgresash-project ash_postgres
- CVE-2026-82657Admidio before 5.0.12 Authentication Bypass via RSS feedsadmidio
- CVE-2026-82655Admidio before 5.0.12 SQL Injection via relation_type_listadmidio
- CVE-2026-82649SiYuan before 3.8.1 Local Privilege Escalation via Uncontrolled Search Pathsiyuan-note siyuan
- CVE-2026-82648WWBN AVideo SSRF Filter Bypass via NAT64 Hex AddressWWBN AVideo
- CVE-2026-82644WWBN AVideo Brute-force Rate Limiting Bypass via Missing User-AgentWWBN AVideo
- CVE-2026-82642Readest: unsanitized iframe srcdoc attribute in the EPUB sanitizer can lead to arbitrary code executionreadest
- CVE-2026-82641Keploy 3.1.0-3.6.25 Unauthenticated TLS Key ExposureKeploy
- CVE-2026-82639NextChat 2.15.8 through 2.16.1 OpenAI API Key DisclosureChatGPTNextWeb NextChat
- CVE-2026-82638jina-ai reader Server-Side Request Forgery via disabled private-address guardjina-ai reader
- CVE-2026-82636Qubes OS before qubes-core-dom0-linux 4.3.22 allows OS command injection during a qvm-copy-to-vm call from dom0 to an attacker-controlled quQubes OS
- CVE-2026-82634Frappe Framework Development Branch Incorrect Authorization via Jinja Template Preview Endpointfrappe
- CVE-2026-82635Pake arbitrary file write via unsanitized download_file filenametw93 Pake
- CVE-2026-81660Groundhogg < 4.5.13 - Unauthenticated Stored XSS via Web Form Dropdown/Radio FieldGroundhogg — CRM, Newsletters, and Marketing Automation
- CVE-2026-76585Customer Reviews for WooCommerce < 5.118.0 - Unauthenticated Stored XSS via 'comment' ParameterCustomer Reviews for WooCommerce
- CVE-2026-14307Geotargeting WP < 3.5.6.2 - Reflected XSSgeotargetingwp
- CVE-2026-75759Encrypted ID token or JARM response accepted without a nested signature in erlef oidccerlef oidcc
Medium, low and unrated 64
- CVE-2026-82595D-Link DIR-825M System Command Execution formSysCmd sub_456CF4 command injectionD-Link DIR-825M
- CVE-2026-82594LogNet grpc-spring-boot-starter Annotation Processing improper authorizationLogNet grpc-spring-boot-starter
- CVE-2026-82591Open Asset Import Library Assimp MD5Loader.cpp MakeDataUnique heap-based overflowOpen Asset Import Library Assimp
- CVE-2026-82590Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertionOpen5GS
- CVE-2026-82589Open5GS N1-N2 Message namf-handler.c amf_namf_comm_handle_n1_n2_message_transfer denial of serviceOpen5GS
- CVE-2026-82588Open5GS Transfer Endpoint namf-handler.c null pointer dereferenceOpen5GS
- CVE-2026-82587Open5GS AMF namf-handler.c amf_namf_comm_decode_ue_mm_context_list memory corruptionOpen5GS
- CVE-2026-78693Incomplete redaction re-attaches the original error path in AshGraphql, leaking internal field namesash-project ash_graphql
- CVE-2026-81633Unhandled KeyError in AshGraphql relay node resolution crashes queries via an unknown type segmentash-project ash_graphql
- CVE-2026-81643Broken access control in AshGraphql subscription batcher applies authorization suppression to only the first notificationash-project ash_graphql
- CVE-2026-82367Re-entrant synchronous publish in AshGraphql subscription batcher delivers one subscriber's records to another's topicash-project ash_graphql
- CVE-2026-81322Cloaked plaintext leaks through a non-sensitive action argument in AshCloakash-project ash_cloak
- CVE-2026-81319Unsafe deserialization of decrypted terms enables node DoS in AshCloakash-project ash_cloak
- CVE-2026-82556Forgejo Repository Migration is_migrate_allowed.go net.LookupIP server-side request forgeryForgejo
- CVE-2026-82555TOTOLINK N600R Authentication cstecgi.cgi loginAuth random valuesTOTOLINK N600R
- CVE-2026-82554SourceCodester Queue Management System add_customer.php cross site scriptingSourceCodester Queue Management System
- CVE-2026-82553sambitraj Student Management System Student Dashboard student_dashboard.php mysqli_query improper authorizationsambitraj Student Management System
- CVE-2026-82552Linux Foundation Magma gNB Termination ngap_amf.c denial of serviceLinux Foundation Magma
- CVE-2026-82551Linux Foundation Magma NGSetup ngap_amf_handlers.c state issueLinux Foundation Magma
- CVE-2026-82550Linux Foundation Magma NGSetupRequest input validationLinux Foundation Magma
- CVE-2026-82549Linux Foundation Magma SecurityModeComplete integrity checkLinux Foundation Magma
- CVE-2026-82548Linux Foundation Magma InitialUEMessage information disclosureLinux Foundation Magma
- CVE-2026-82547Linux Foundation Magma Registration Complete Message amf_fsm.cpp improper authenticationLinux Foundation Magma
- CVE-2026-82658Admidio before 5.0.12 Broken Access Control via profile_function.phpadmidio
- CVE-2026-82656Admidio before 5.0.12 Path Traversal via Photo ZIP Downloadadmidio
- CVE-2026-82652SiYuan before v3.8.1 Information Disclosure via Publish Accesssiyuan-note siyuan
- CVE-2026-82651SiYuan before v3.8.1 Missing Authorization via /history and /repo/diffsiyuan-note siyuan · github.com/siyuan-note/siyuan/kernel
- CVE-2026-82650SiYuan before v3.8.1 Path Traversal via /api/template/rendersiyuan-note siyuan
- CVE-2026-82647WWBN AVideo Cross-Site Request Forgery via sendEmail.json.phpWWBN AVideo
- CVE-2026-82646WWBN AVideo Unauthenticated Reflected XSS via url2Embed.json.phpWWBN AVideo
- CVE-2026-82643WWBN AVideo Unauthenticated Rate Limit Bypass via preauthorize.json.phpWWBN AVideo
- CVE-2026-82545itsourcecode Sales and Inventory System sup_searchfrm.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82544wger-project wger Password Reset gym.py reset_user_password cross-site request forgerywger-project wger
- CVE-2026-82640browser-use web-ui 2.0.0 through 3.0.0 Cleartext API Key Storagebrowser-use web-ui
- CVE-2026-82637browser-use web-ui 2.0.0 through 3.0.0 Arbitrary Directory Creationbrowser-use web-ui
- CVE-2026-82543vastsa FileCodeBox Pickup Limit views.py update_file_usage race conditionvastsa FileCodeBox
- CVE-2026-82633Dolibarr 10.0.0 before 24.0.0 Missing Authorization on REST Users Groups Endpointdolibarr
- CVE-2026-77454exists/2 predicate silently dropped on limited relationships with a parent() filter in AshSqlash-project ash_sql
- CVE-2026-82541itsourcecode Sales and Inventory System sup_edit.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-81316Same-named aggregates with differing filters are conflated in AshSqlash-project ash_sql
- CVE-2026-81318Distinct-query aggregate drops the tenant schema prefix, leaking across tenants in AshSqlash-project ash_sql
- CVE-2026-78691Unescaped backslash allows LIKE wildcard injection in AshSql string searchash-project ash_sql
- CVE-2026-80227SQL string_trim removes only spaces, diverging from in-memory trimming in AshSqlash-project ash_sql
- CVE-2026-78228Unbounded handle_error recursion enables denial of service in AshOban triggersash-project ash_oban
- CVE-2026-78038Job argument injection via :args overrides primary_key and tenant in AshObanash-project ash_oban
- CVE-2026-82540itsourcecode Sales and Inventory System cust_searchfrm.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82488Beetel 450TC3 User Management cross site scriptingBeetel 450TC3
- CVE-2026-82487Beetel 450TC3 password recoveryBeetel 450TC3
- CVE-2026-82486SiteServer SSCMS Agent Installation Workflow access controlSiteServer SSCMS
- CVE-2026-82485itsourcecode Sales and Inventory System pro_edit.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82484itsourcecode Sales and Inventory System emp_searchfrm.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-82483coppermine-gallery Coppermine Photo Gallery Hidden Album Update Endpoint db_input.php cross site scriptingcoppermine-gallery Coppermine Photo Gallery
- CVE-2026-82482coppermine-gallery Coppermine Photo Gallery edit_profile Endpoint profile.php cross site scriptingcoppermine-gallery Coppermine Photo Gallery
- CVE-2026-81766Really Simple Security < 9.8.0 - Multisite Subsite Admin+ Arbitrary Plugin Installation via rsp_upgrade_install_pluginReally Simple Security
- CVE-2026-78364MW WP Form < 5.1.6 - Editor+ Stored XSS via Inquiry Data ListMW WP Form
- CVE-2026-19722WPvivid Backup & Migration < 0.9.133 - Admin+ Arbitrary File Write via Zip Slip in Backup RestoreWPvivid — Backup, Migration & Staging
- CVE-2026-14835SOGO Add Script to Individual Pages Header Footer <= 3.9 - Contributor+ Stored XSS via Post MetaboxSOGO Add Script to Individual Pages Header Footer
- CVE-2026-82480NASA cFS cFE Software Bus cfe_sb_util.c CFE_SB_GetUserDataLength integer underflowNASA cFS
- CVE-2026-82479NASA cFS SBN TCP sbn_tcp_if.c OS_read buffer overflowNASA cFS
- CVE-2026-82478NASA Trick TCP Socket JSONVariableServerThread.cpp parse_request stack-based overflowNASA Trick
- CVE-2026-77846JSON path injection via unescaped get_path segments in AshSqliteash-project ash_sqlite
- CVE-2026-77831Algorithmic-complexity denial of service in AshPaperTrail full-diff list trackingash-project ash_paper_trail
- CVE-2026-77970Sensitive fields nested in embedded values are not redacted in AshPaperTrail versionsash-project ash_paper_trail
- CVE-2026-75847Sensitive attribute values stored in a non-sensitive public changes map in AshPaperTrailash-project ash_paper_trail