CVEs published August 17 to August 23, 2026
3,423 CVEs were published Aug 17 to Aug 23, 2026, 558 of them critical. CISA added 9 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 3,423
- Critical
- 558
- Added to CISA KEV
- 9
- Busiest day
- Tue, Aug 18 (1,405)
- Quietest day
- Sun, Aug 23 (42)
- August 17, 2026337 CVEs · 64 critical
- August 18, 20261,405 CVEs · 225 critical
- August 19, 2026674 CVEs · 110 critical
- August 20, 2026468 CVEs · 75 critical
- August 21, 2026258 CVEs · 41 critical
- August 22, 2026239 CVEs · 37 critical
- August 23, 202642 CVEs · 6 critical
Added to CISA KEV 9
- CVE-2025-62593Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attackray-project ray · ray
- CVE-2026-33824Windows Internet Key Exchange (IKE) Service Extensions Remote Code Execution VulnerabilityMicrosoft Windows
- CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass VulnerabilityMicrosoft SharePoint Enterprise Server · Microsoft SharePoi…
- CVE-2026-59310vCenter directory-traversal vulnerabilityVMware Cloud Foundation · VMware vSphere Foundation +3
- CVE-2026-65400An authentication issue was addressed with improved state management.Apple macOS
- CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)mlflow
- CVE-2026-72529A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X tTrueConf Server
- CVE-2026-72530A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X tTrueConf Server
- CVE-2026-73570A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installedZimbra Collaboration