Communications

Communication software — email servers and clients, messaging platforms, VoIP and video conferencing — carries sensitive conversations and is a frequent phishing and interception target. This hub tracks CVEs across it.

CVEs per month

Newest period on the right. Click a point to open that monthly report.

The 15 most recently published vulnerabilities tagged to Communications.

• CVE-2026-73227electerm's RDP clipboard file download may parse unsafe file name8.1Aug 11, 2026
• CVE-2026-73226Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist8.8Aug 11, 2026
• CVE-2026-73225electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename8.1Aug 11, 2026
• CVE-2026-73224Electerm check folder size function may get attacked by unsafe folder name8.8Aug 11, 2026
• CVE-2026-73223electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename8.1Aug 11, 2026
• CVE-2026-53416Zoom VDI - Path Traversal7.1Aug 11, 2026
• CVE-2026-53415Zoom Clients - Use After Free8.3Aug 11, 2026
• CVE-2026-53414Zoom Clients - Buffer Over-read6.5Aug 11, 2026
• CVE-2026-53413Zoom Clients - Buffer Over-write8.3Aug 11, 2026
• CVE-2026-72919Rocket.Chat: Broken Access Control in channels.convertToTeam Allows Unauthorized Conversion of Public Channels into Teams4.3Aug 10, 2026
• CVE-2026-72918Rocket.Chat: Insecure implementation of websocket notifications5.4Aug 10, 2026
• CVE-2026-72915Mastodon: Personally-identifying information disclosure due to incorrect access control validation7.5Aug 10, 2026
• CVE-2026-72914Mastodon: Exhausting data by an unauthenticated request to the admin retention API7.5Aug 10, 2026
• CVE-2026-72719Chatwoot: Cross-Account Resource Transfer via `account_id` Parameter6.7Aug 10, 2026
• CVE-2026-72578FreePBX Framework - Missing CSRF Protection in Admin Panel Ajax Dispatcher8.8Aug 10, 2026

Subsectors

Breakdown for the latest monthly snapshot (month in progress).