August 2026
12,909 CVEs published, +26% on July 2026 and 3.3× August 2025. CISA added 31 to KEV.
2026 month by month
- Critical
- 1,58915% of the 10,466 with a CVSS score
- Added to CISA KEV
- 3114 of this month's CVEs are in KEV, listed a median 2.5 days after publication
- Vendors
- 2,1515,622 products
- Top weakness
- Improper Access ControlCWE-284 · 1,202 CVEs
Who drove it
Vendors by distinct CVEs this month, with how many of those CVEs are now in CISA KEV and how far each moved in the ranking.
- 1LinuxLinux1,645212none+1
- 2OracleHelidon, Hyperion Financial Management, Oracle Hyperion Financial Management890144none−1
- 3MicrosoftWindows Server 2025 (Server Core Installation), Windows Server 2025, Windows 11 26h1479351—
- 4GoogleChrome, Android, @a2ui/web_core40254none—
- 5IBMPowervm Vios, Aix, Vios39051none+6
- 6Red HatRed Hat Enterprise Linux 9, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 722821none+1
- 7Apache Software FoundationApache Cloudstack, Apache Airflow, Apache Cxf16739none−2
- 8ApacheCloudstack, Airflow, Cxf16339none+1
- 9SplunkSplunk Enterprise, Splunk, Splunk Soar1104nonenew
- 10AdobeContent Credentials Rust Sdk, C2PA, C2PATOOL10115none—
- 11SpringSpring Framework, Spring Integration, Spring AI917nonenew
- 12Siyuan-noteSiyuan8116none+97
- 13DellCommand Update, Dell Command Update (Dcu), Openmanage Enterprise725none+6
- 14GetgravGrav, Grav-plugin-api, Grav-plugin-login663none+10
- 15JahlivesOpenssl_encrypt, OpenSSL Encrypt6618nonenew
- 16VMwareSpring Integration, Spring Framework, Spring Security647none+94
- 17MozillaFirefox, Thunderbird, Firefox Mobile6017none−5
- 18ZephyrprojectZephyr571none+19
- 19PyPINltk, Gitpython, Wagtail560none+10
- 20MongodbMongodb Server, Bi Connector, Bi Connector Odbc Driver551none+20
- 21NvidiaDynamo, Nemoclaw, Triton Inference Server524none−1
- 22ElasticKibana, Elasticsearch, Elastic Cloud On Kubernetes490none+11
- 23GiteaGitea Open Source Git Server, Gitea4981—
- 24SourcecodesterSimple Online Food Ordering System, Class and Exam Timetabling System, Photo Share Website490none−8
- 25CiscoCisco IOS XE Software, Cisco Secure Endpoint, IOS XE48131+30
Severity
How this month's CVEs score on CVSS; 2,443 have no score yet. Severity is not exploitation.
- Critical1,589
- High4,889
- Medium3,608
- Low380
Breakouts
Vendors with at least three times their own 12-month median.
New in the top 100
Not in the top 100 in any of the 24 months before.
What kind of weakness
Weakness classes (CWE) by distinct CVEs, with how far each moved in the ranking.
- CWE-284Improper Access Control1,202
- CWE-79XSS769
- CWE-862Missing Authorization627
- CWE-89SQL Injection452
- CWE-22Path Traversal451
- CWE-918SSRF356
- CWE-863Incorrect Authorization335
- CWE-639Auth Bypass via User Key332
- CWE-200Information Exposure329
- CWE-78OS Command Injection313
- CWE-94Code Injection263
- CWE-20Improper Input Validation251
- CWE-787Out-of-bounds Write247
- CWE-125Out-of-bounds Read237
- CWE-74Injection233
- CWE-306Missing Auth for Critical Function228
- CWE-122Heap Buffer Overflow224
- CWE-416Use After Free220
- CWE-269Improper Privilege Mgmt207
- CWE-770Allocation Without Limits195
Where it landed
The month's CVEs by the sector of the software they affect. A CVE that touches several sectors counts in each.
- Operating Systems2,69322% of sector-tagged CVEs
- Enterprise Software1,59113% of sector-tagged CVEs
- Web & CMS Plugins1,41811% of sector-tagged CVEs
- OSS Libraries1,30811% of sector-tagged CVEs
- Consumer Software1,0338% of sector-tagged CVEs
- Databases9368% of sector-tagged CVEs
- Cloud & SaaS8697% of sector-tagged CVEs
- Networking Infrastructure5484% of sector-tagged CVEs
- Security Products5324% of sector-tagged CVEs
- 6 smaller sectors1,360
- Not yet classified106
Which weakness, where
The top weakness classes against the vendors and the sectors that carried them.
The lighter the cell, the more CVEs. Point at one to read it.
| By vendor | 284Improper Access Control | 79XSS | 862Missing Authorization | 22Path Traversal | 89SQL Injection | 918SSRF | 863Incorrect Authorization | 639Auth Bypass via User Key | 200Information Exposure | 78OS Command Injection |
|---|---|---|---|---|---|---|---|---|---|---|
| Linux | 10 | 1 | 1 | |||||||
| Oracle Corporation | 818 | 20 | ||||||||
| Oracle | 814 | 19 | ||||||||
| Microsoft | 6 | 13 | 12 | 4 | 3 | 14 | 7 | 3 | 8 | 2 |
| 1 | 1 | 22 | 51 | 35 | 1 | |||||
| IBM | 2 | 3 | 3 | 24 | 7 | 4 | 2 | 3 | 5 | 28 |
| Red Hat | 4 | 6 | 4 | 9 | 5 | 8 | 1 | 3 | ||
| Apache Software Foundation | 4 | 6 | 4 | 2 | 5 | 8 | 7 | 6 | 10 | 2 |
| Apache | 4 | 6 | 4 | 2 | 5 | 8 | 7 | 5 | 10 | 2 |
| Splunk | 5 | 8 | 12 | 5 | 3 | 5 | 4 | 2 | 4 | |
| Adobe | 4 | 3 | 3 | 3 | 15 | 4 | ||||
| Spring | 3 | 4 | 4 | 4 | 1 |
In the news
The CVEs security news mentioned most in August 2026.
- CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability227.0
- CVE-2026-18577Incomplete patch leads to administrative account takeover178.1
- CVE-2026-55040Microsoft SharePoint Server Security Feature Bypass Vulnerability159.1
- CVE-2026-18556Unauthenticated administrative account takeover147.4
- CVE-2026-19478Improper Control of Generation of Code ('Code Injection') in GitLab139.4
- CVE-2026-62832Windows User Profile Service Elevation of Privilege Vulnerability137.8
- CVE-2026-63520Microsoft SharePoint Server Remote Code Execution Vulnerability138.1
- CVE-2026-65400An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. A...139.8
- CVE-2026-50656Microsoft Defender Elevation of Privilege Vulnerability107.8
- CVE-2026-62878Windows DNS Server Remote Code Execution Vulnerability109.8
- CVE-2026-66066Action Pack: Possible arbitrary file read and remote code execution in Active Storage variant processing10—
- CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-1949099.8
CVEs published in August 2026
264 vulnerabilities from this month that were exploited in the wild (CISA KEV), covered in the news, explained on cve.tools or searched for. Known-exploited first, then by CVSS. Showing 1–100.
- CVE-2026-5430Authentication Bypass via JWT Algorithm Mismatch in Multiple WSO2 Products Allows Account TakeoverKEV10.0
- CVE-2026-72898Metabase SQL injection via password reset endpointKEV10.0
- CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490KEV9.8
- CVE-2026-60004Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation.KEV9.8
- CVE-2026-65400An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. A...KEV9.8
- CVE-2026-72529A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by...KEV9.8
- CVE-2026-81578PaperCut MF/NG: Authentication BypassKEV9.8
- CVE-2026-82329Potential authentication bypass leading to administrative access in ArtifactoryKEV9.8
- CVE-2026-64849MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)KEV9.3
- CVE-2026-71362Adobe Commerce | Incorrect Authorization (CWE-863)KEV9.1
- CVE-2026-82078PaperCut MF/NG: Unsafe Dynamic Class Loading in Database ConnectorKEV9.1
- CVE-2026-72530A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script...KEV9.0
- CVE-2026-73570A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sani...KEV8.9
- CVE-2026-65660Microsoft SharePoint Server Remote Code Execution VulnerabilityKEV8.8
- CVE-2026-20349Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service VulnerabilityKEV8.6
- CVE-2026-18577Incomplete patch leads to administrative account takeoverKEV8.1
- CVE-2026-42018Anonymous user token generation exposure in JFrog ArtifactoryKEV7.5
- CVE-2026-18556Unauthenticated administrative account takeoverKEV7.4
- CVE-2026-68820Windows Ancillary Function Driver for WinSock Elevation of Privilege VulnerabilityKEV7.0
- CVE-2026-66384Authenticated users may write data outside the intended Docker cache pathKEV5.3
- CVE-2026-48362ColdFusion | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)10.0
- CVE-2026-56162Azure SQL Database Elevation of Privilege Vulnerability10.0
- CVE-2026-58115A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4-1 running Industrial OS with Node-RED installed), SIMATIC IoT2050 Basic (6ES7647-0BA00-0Y...10.0
- CVE-2026-58231Improper Authorization in SAP Commerce Cloud (Data Hub Adapter)10.0
- CVE-2026-63508Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability10.0
- CVE-2026-65667Microsoft Teams Elevation of Privilege Vulnerability10.0
- CVE-2026-65801Microsoft Exchange Online Elevation of Privilege Vulnerability10.0
- CVE-2026-65816Azure Arc Elevation of Privilege Vulnerability10.0
- CVE-2026-69555Azure Arc Elevation of Privilege Vulnerability10.0
- CVE-2026-69836Microsoft Entra ID Remote Code Execution Vulnerability10.0
- CVE-2026-82222WordPress GiveWP plugin <= 4.16.7.1 - Remote Code Execution (RCE) vulnerability10.0
- CVE-2026-20304Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities9.9
- CVE-2026-50481Azure Active Directory Elevation of Privilege Vulnerability9.9
- CVE-2026-50515Azure Service Bus Remote Code Execution Vulnerability9.9
- CVE-2026-59115Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability9.9
- CVE-2026-62830Azure SRE Agent Elevation of Privilege Vulnerability9.9
- CVE-2026-19598Pods <= 3.3.9 - Unauthenticated Privilege Escalation via Authorization Bypass to Admin Methods via 'pods_admin' AJAX Router9.8
- CVE-2026-20272Cisco IOS XE Software Security Hardening Release9.8
- CVE-2026-26035An Improper Authentication vulnerability [CWE-287] vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb 7.4.0 through 7.4.11, FortiWeb 7.2.0 through 7.2.12...9.8
- CVE-2026-30612An issue in Time4 Popcorn for Windows <= 6.2.1.18 and Time4Popcorn for MacOS <= 6.2.1.17 and Time4Popcorn for Android <= 3.5.0.173 allows a remote attacker to execute arbitrary code via the updater...9.8
- CVE-2026-59124Microsoft High Performance Computing (HPC) Pack Remote Code Execution Vulnerability9.8
- CVE-2026-62815Microsoft QUIC Remote Code Execution Vulnerability9.8
- CVE-2026-62873Microsoft 365 Admin Center Elevation of Privilege Vulnerability9.8
- CVE-2026-62878Windows DNS Server Remote Code Execution Vulnerability9.8
- CVE-2026-62893Windows Deployment Services TFTP Server Remote Code Execution Vulnerability9.8
- CVE-2026-64564sctp: don't free the ASCONF's own transport in DEL-IP processing9.8
- CVE-2026-65791Windows iSCSI Target Service Remote Code Execution Vulnerability9.8
- CVE-2026-66909Apache CXF: Unsafe deserialization of inbound JMS ObjectMessage9.8
- CVE-2026-72776AgenticSeek Unauthenticated RCE via /query API Endpoint9.8
- CVE-2026-76581WPMU DEV Dashboard <= 5.0.1 - Authentication Bypass to Administrator via SSO HMAC Canonicalization Confusion9.8
- CVE-2026-81707openssl_encrypt before 1.4.9 ANSI Escape Injection via Identity Email9.8
- CVE-2026-18667Sensor Proxy Version 1.4.2 Fixes One Vulnerability9.6
- CVE-2026-56161Azure Logic Apps Information Disclosure Vulnerability9.6
- CVE-2026-62896Microsoft Teams Elevation of Privilege Vulnerability9.6
- CVE-2026-70332Microsoft Office SharePoint Spoofing Vulnerability9.6
- CVE-2026-79290Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)9.6
- CVE-2026-19478Improper Control of Generation of Code ('Code Injection') in GitLab9.4
- CVE-2026-50516Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability9.4
- CVE-2026-59270Spring Security embedded UnboundID LDAP server exposes well-known administrative bind DN on all network interfaces9.4
- CVE-2026-66147An unauthenticated command injection vulnerability was identified in the GMS Dispatcher Service in GMS 9.5.1 and earlier versions which allows remote attacker to perform remote code execution throu...9.4
- CVE-2026-59118Copilot Cowork Elevation of Privilege Vulnerability9.3
- CVE-2026-18963Keycloak-services: keycloak-services: unauthenticated account takeover via reset-credentials flow bypass9.1
- CVE-2026-66145An unauthenticated remote code execution vulnerability was identified in GMS 9.5.1 (Build 9510.1044) and earlier versions which allows remote attacker to read sensitive data and perform arbitrary f...9.1
- CVE-2026-68823Azure Confidential Ledger Remote Code Execution Vulnerability9.1
- CVE-2026-10090Multicluster-operators-subscription: multicluster-operators-subscription: namespace edit user can deploy cluster-scoped clusterrolebinding and become cluster-admin via application subscription9.0
- CVE-2026-20267Cisco IOS XE Software Security Hardening Release9.0
- CVE-2026-32475WordPress Elementor Pro plugin <= 4.2.1 - Arbitrary File Upload vulnerability9.0
- CVE-2026-77638Tor before 0.4.9.11 is prone to a race condition where in just the right circumstances a rendezvous point could man-in-the-middle (impersonate) the onion service that the client was trying to reach.8.9
- CVE-2026-15315Unauthenticated Administrative Authentication Bypass via device_confirm Replay in TP-Link Tapo C120 and C2008.8
- CVE-2026-19824Tenda W20E addIpMacBind ipMacBindListStore stack-based overflow8.8
- CVE-2026-49163Application Insights Profiler Elevation of Privilege Vulnerability8.8
- CVE-2026-59133Microsoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability8.8
- CVE-2026-62816Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability8.8
- CVE-2026-62817Windows DNS Server Remote Code Execution Vulnerability8.8
- CVE-2026-62818Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability8.8
- CVE-2026-62822Windows GDI+ Remote Code Execution Vulnerability8.8
- CVE-2026-62823Windows DHCP Server Remote Code Execution Vulnerability8.8
- CVE-2026-62824Remote Desktop Client Remote Code Execution Vulnerability8.8
- CVE-2026-62827Microsoft SharePoint Server Elevation of Privilege Vulnerability8.8
- CVE-2026-62869Azure Entra ID Spoofing Vulnerability8.8
- CVE-2026-62872.NET Framework Elevation of Privilege Vulnerability8.8
- CVE-2026-62913Microsoft Exchange Server Remote Code Execution Vulnerability8.8
- CVE-2026-63514Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-64901Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-64921Microsoft SharePoint Server Elevation of Privilege Vulnerability8.8
- CVE-2026-65346An integer overflow was addressed with improved input validation. This issue is fixed in iOS 26.6.1 and iPadOS 26.6.1, macOS Sequoia 15.8, macOS Tahoe 26.6.2, tvOS 27, visionOS 27, watchOS 27. Proc...8.8
- CVE-2026-65658Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-65663Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-65665Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-65668Microsoft Purview eDiscovery Elevation of Privilege Vulnerability8.8
- CVE-2026-66805Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-66808Microsoft SharePoint Server Remote Code Execution Vulnerability8.8
- CVE-2026-70324Microsoft SharePoint Elevation of Privilege Vulnerability8.8
- CVE-2026-74469sctp: prevent peer transport count overflow8.8
- CVE-2026-79784Vocos through 0.1.0 Arbitrary Code Execution via Unrestricted class_path in Model Configuration8.8
- CVE-2026-62836Azure SQL Managed Instance Elevation of Privilege Vulnerability8.7
- CVE-2026-20269Cisco IOS XE Software Security Hardening Release8.6
- CVE-2026-20270Cisco IOS XE Software Security Hardening Release8.6
- CVE-2026-20273Cisco IOS XE Software Security Hardening Release8.6
- CVE-2026-70130Microsoft Office Remote Code Execution Vulnerability8.4