|
Critical
|
26 Aug 2026 |
26 Aug 2026 |
CPAI-2026-10598
|
|
|
Oracle WebLogic Server Insecure Deserialization
|
|
High
|
26 Aug 2026 |
26 Aug 2026 |
CPAI-2026-10596
|
|
CVE-2026-63520
|
Microsoft SharePoint Server Remote Code Execution (CVE-2026-63520)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10460
|
|
CVE-2026-76904
|
GeoTools SQL Injection (CVE-2026-76904)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10451
|
|
CVE-2026-32475
|
WordPress Elementor Pro Plugin Arbitrary File Upload (CVE-2026-32475)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10354
|
|
CVE-2026-48092
|
7-Zip Information Disclosure (CVE-2026-48092)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10348
|
|
CVE-2026-8438
|
Multiple Products Cross-Site Scripting (CVE-2026-8438)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10346
|
|
CVE-2026-10796
|
OpenJSF Node Version Manager Command Injection (CVE-2026-10796)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10344
|
|
CVE-2026-48111
|
7-Zip Out of Bounds Read (CVE-2026-48111)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10342
|
|
CVE-2026-48103
|
7-Zip Out of Bounds Read (CVE-2026-48103)
|
|
High
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10330
|
|
CVE-2026-26119
|
Microsoft Windows Admin Center Privilege Escalation (CVE-2026-26119)
|
|
Critical
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10454
|
|
CVE-2026-59310
|
VMware vCenter Server Directory Traversal (CVE-2026-59310)
|
|
Critical
|
24 Aug 2026 |
24 Aug 2026 |
CPAI-2026-10297
|
|
CVE-2026-10886
|
Google Chrome Use After Free (CVE-2026-10886)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10264
|
|
CVE-2026-55687
|
Espressif ESP-IDF Out of Bounds Write (CVE-2026-55687)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10263
|
|
CVE-2026-65903
|
DOMPurify Security Bypass (CVE-2026-65903)
|
|
Critical
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10261
|
|
CVE-2026-48904
|
Joomla! CMS Privilege Escalation (CVE-2026-48904)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10260
|
|
CVE-2026-47897
|
Apache Lucene.Net.Replicator Directory Traversal (CVE-2026-47897)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10259
|
|
CVE-2026-54304
|
n8n Information Disclosure (CVE-2026-54304)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10258
|
|
CVE-2026-42129
|
Grafana Loki Data Source Plugin Directory Traversal (CVE-2026-42129)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10257
|
|
CVE-2026-44496
|
Axios Denial of Service (CVE-2026-44496)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10256
|
|
CVE-2026-6657
|
Jupyter Server Authentication Bypass (CVE-2026-6657)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10203
|
|
CVE-2026-44237
|
Sangoma FreePBX Authentication Bypass (CVE-2026-44237)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10199
|
|
CVE-2026-44492
|
Axios Security Bypass (CVE-2026-44492)
|
|
Critical
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10197
|
|
CVE-2026-50627
|
Apache CXF Security Bypass (CVE-2026-50627)
|
|
Critical
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10193
|
|
CVE-2026-35223
|
Joomla! CMS Authentication Bypass (CVE-2026-35223)
|
|
Critical
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10191
|
|
CVE-2026-40383
|
Joomla! CMS File Inclusion (CVE-2026-40383)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10189
|
|
CVE-2026-42266
|
JupyterLab Security Bypass (CVE-2026-42266)
|
|
High
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10187
|
|
CVE-2026-5422
|
Jupyter Server Directory Traversal (CVE-2026-5422)
|
|
Critical
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10158
|
|
CVE-2026-47323
|
Apache Camel Remote Code Execution (CVE-2026-47323)
|
|
Critical
|
23 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10140
|
|
CVE-2026-45700
|
FreeRDP Out of Bounds Write (CVE-2026-45700)
|
|
Critical
|
12 Aug 2026 |
23 Aug 2026 |
CPAI-2026-10241
|
|
CVE-2026-72898
|
Metabase SQL Injection (CVE-2026-72898)
|
|
Critical
|
20 Aug 2026 |
20 Aug 2026 |
CPAI-2026-10368
|
|
CVE-2025-69981 CVE-2026-25895
|
Frangoteam FUXA Directory Traversal (CVE-2025-69981; CVE-2026-25895)
|
|
High
|
20 Aug 2026 |
20 Aug 2026 |
CPAI-2026-10366
|
Adobe APSB26-90
|
CVE-2026-71386
|
Adobe ColdFusion Cross-site Scripting (APSB26-90: CVE-2026-71386)
|
|
High
|
20 Aug 2026 |
20 Aug 2026 |
CPAI-2026-10364
|
Adobe APSB26-90
|
CVE-2026-48376
|
Adobe ColdFusion Improper Encoding or Escaping of Output (APSB26-90: CVE-2026-48376)
|
|
Critical
|
20 Aug 2026 |
20 Aug 2026 |
CPAI-2026-10362
|
Adobe APSB26-90
|
CVE-2026-48362 CVE-2026-48385
|
Adobe ColdFusion Command Injection (CVE-2026-48362; CVE-2026-48385)
|
|
Critical
|
14 Jul 2026 |
20 Aug 2026 |
CPAI-2026-10332
|
Microsoft CVE-2026-50522
|
CVE-2026-50522 CVE-2026-58644
|
Microsoft SharePoint Insecure Deserialization (CVE-2026-50522; CVE-2026-58644)
|
|
Critical
|
5 Jul 2026 |
20 Aug 2026 |
CPAI-2026-10326
|
|
CVE-2026-48276 CVE-2026-48282 CVE-2026-48313
|
Adobe ColdFusion Remote Code Execution (CVE-2026-48276; CVE-2026-48282; CVE-2026-48313)
|
|
High
|
19 Aug 2026 |
19 Aug 2026 |
CPAI-2025-18328
|
|
CVE-2025-62593
|
Ray Remote Code Execution (CVE-2025-62593)
|
|
Critical
|
19 Aug 2026 |
19 Aug 2026 |
CPAI-2026-10295
|
|
CVE-2026-57827
|
Joomla RSFiles Plugin Arbitrary File Upload (CVE-2026-57827)
|
|
Critical
|
18 Aug 2026 |
18 Aug 2026 |
CPAI-2026-10250
|
Adobe APSB26-92
|
CVE-2026-71362
|
Adobe Multiple Products Privilege Escalation (CVE-2026-71362)
|
|
High
|
17 Aug 2026 |
17 Aug 2026 |
CPAI-2026-10092
|
|
CVE-2026-18972
|
Velociraptor Authentication Bypass (CVE-2026-18972)
|
|
High
|
17 Aug 2026 |
17 Aug 2026 |
CPAI-2026-10036
|
|
CVE-2026-45659
|
SharePoint Server Insecure Deserialization (CVE-2026-45659)
|
|
High
|
17 Aug 2026 |
17 Aug 2026 |
CPAI-2024-8384
|
|
CVE-2024-5196
|
Arris VAP2500 Command Injection (CVE-2024-5196)
|
|
High
|
17 Aug 2026 |
17 Aug 2026 |
CPAI-2024-8383
|
|
CVE-2024-5195
|
Arris VAP2500 Command Injection (CVE-2024-5195)
|
|
Medium
|
17 Aug 2026 |
17 Aug 2026 |
CPAI-2025-18242
|
|
CVE-2025-47931
|
LibreNMS Cross-Site Scripting (CVE-2025-47931)
|
|
High
|
17 Aug 2026 |
17 Aug 2026 |
CPAI-2026-10119
|
|
CVE-2026-23921
|
Zabbix SQL Injection (CVE-2026-23921)
|
|
Critical
|
17 Jun 2026 |
17 Aug 2026 |
CPAI-2026-7682
|
|
CVE-2026-48907
|
Joomla Content Editor Remote Code Execution (CVE-2026-48907)
|
|
High
|
18 May 2026 |
17 Aug 2026 |
CPAI-2025-15588
|
|
CVE-2025-36527
|
Zohocorp ManageEngine ADAudit Plus SQL Injection (CVE-2025-36527)
|
|
High
|
10 Mar 2026 |
17 Aug 2026 |
CPAI-2026-1502
|
|
CVE-2026-21962
|
Oracle Servers Directory Traversal (CVE-2026-21962)
|
|
Critical
|
5 Jul 2026 |
13 Aug 2026 |
CPAI-2026-8444
|
|
CVE-2026-48276 CVE-2026-48282 CVE-2026-48313
|
Adobe ColdFusion Remote Code Execution (CVE-2026-48276; CVE-2026-48282; CVE-2026-48313)
|
|
Critical
|
13 Aug 2026 |
13 Aug 2026 |
CPAI-2026-10100
|
|
CVE-2026-63077
|
JetBrains TeamCity Remote Code Execution (CVE-2026-63077)
|