CVEs published August 3 to August 9, 2026
1,847 CVEs were published Aug 3 to Aug 9, 2026, 293 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 1,847
- Critical
- 293
- Added to CISA KEV
- 6
- Busiest day
- Thu, Aug 6 (483)
- Quietest day
- Sat, Aug 8 (62)
- August 3, 2026309 CVEs · 56 critical
- August 4, 2026272 CVEs · 46 critical
- August 5, 2026429 CVEs · 53 critical
- August 6, 2026483 CVEs · 84 critical
- August 7, 2026214 CVEs · 23 critical
- August 8, 202662 CVEs · 27 critical
- August 9, 202678 CVEs · 4 critical
Added to CISA KEV 6
- CVE-2026-18577Incomplete patch leads to administrative account takeoverN-able N-central
- CVE-2026-18556Unauthenticated administrative account takeoverN-able N-central
- CVE-2026-34486Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorApache Software Foundation Apache Tomcat · org.apache.to… +1
- CVE-2026-9198Unauthenticated Remote Code Execution via Auto-Login Bypass and Code ValidationIBM Langflow OSS
- CVE-2026-63077In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocolJetBrains TeamCity
- CVE-2026-8037OS Command Injection Remote Code Execution Vulnerability in Progress LoadMaster, ECS Connection Manager, Object Scale Connection Manager & MOVEit WAFProgress Software LoadMaster · Progress Software ECS Con… +2