month report
August 2026
Data as of Aug 3, 2026, 05:00 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
August 2026 closed with 269 published CVEs — -93.1% YoY . 13 criticals, mediatek, inc. led volume, mostly via mediatek chipset. Biggest breakout: bouncycastle at ×6.4 their 12-month median. Top weakness class — CWE-79 (23 CVE). 10 vendors cracked the top-100 for the first time.
Projected total
2,085
-79.6% MoM-46.1% YoY· proj
Severity mix
13 / 43
critical / high
KEV added
0
0 ransomware-linked
Nuclei coverage
0.0%
0 CVEs with templates
Time to exploit
How fast the community ships detection after a CVE drops.
Days → Nuclei (median)
—
n=0
Within 7 days
—%
Within 30 days
—%
Days → KEV (median)
—
n=0
Weakness × Vendor
What's spreading where in August 2026
Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.
79XSS862Missing Authorization89SQL Injection22Path Traversal787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation77Command Injection770Allocation Without Limits74Injectionmediatek, inc.21461legion of the bouncy castle inc.15freerdp11511better-auth321microsoft2axios1red hat31gl.inet77arcadedata1siyuan-note331unisoc (shanghai) technologies co., ltd.8adobe2
Most discussed CVEs — August 2026
First time in top-100
Vendors never in top-100 in the prior 24 periods.
- #2bouncycastle32 CVE
- #4better-auth17 CVE
- #6arcadedata8 CVE
- #7gitpython-developers5 CVE
- #8guzzle4 CVE
- #10ueberauth4 CVE
- #12codesupplyco3 CVE
- #13cubewp12112 CVE
- #15icegram2 CVE
- #16n-able2 CVE
Top vendors
Ranked by distinct CVE count this period.
- 34 CVEmediatek chipset (34)
- 32 CVENEW×6.4bc-java (32) · bc-lts-java (28) · bc-fja (23)
- 23 CVE3 critCVSS 6.8freerdp (23)
- 17 CVE1 critCVSS 7.2NEWbetter-auth (11) · scim (2) · stripe (1)
- 10 CVEaxios (10)
- 8 CVE3 critCVSS 8.3NEWarcadedb (8)
- 5 CVE1 critCVSS 8.3NEWgitpython (5)
- 4 CVECVSS 5.6NEWguzzle (4)
- 4 CVECVSS 6.3red hat build of keycloak (4) · red hat data grid 8 (4) · red hat jboss enterprise application platform expansion pack (4)
- 4 CVENEWguardian (4)
- 4 CVECVSS 5.3zephyr (4)
- 3 CVECVSS 6.4NEWpowerkit – supercharge your wordpress site (3)
- 2 CVECVSS 7.0NEWcubewp framework (2)
- 2 CVECVSS 7.3vikunja (2)
- 2 CVECVSS 5.7NEWicegram engage – popups, optins, ctas & lead generation (1) · icegram mailer – reliable email deliverability, no-code smtp replacement & email logs (1)
- 2 CVENEWn-central (2)
- 2 CVECVSS 6.5luci (2)
- 2 CVECVSS 6.4NEWgamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress (2)
- 2 CVECVSS 6.4kadence blocks — page builder toolkit for gutenberg editor (2)
- 2 CVE1 critCVSS 8.2wazuh (2)
- 1 CVECVSS 7.1NEWbasercms (1)
- 1 CVECVSS 7.5NEWbit integrations – form integration, webhook, spreadsheets, crm, lms & email automation (1)
- 1 CVECVSS 6.4NEWsureforms – contact form builder, ai forms, payment form, survey & quiz (1)
- 1 CVE1 critCVSS 9.8NEWsingle sign on for tng (1)
- 1 CVECVSS 6.8budibase (1)
- 1 CVECVSS 7.5NEWprismaproduction (1)
- 1 CVECVSS 6.4NEWdownload manager (1)
- 1 CVECVSS 6.4NEWcozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templates (1)
- 1 CVECVSS 5.3NEWdatabase collation fix (1)
- 1 CVECVSS 4.9NEWpinpoint booking system – version 2 (1)
- 1 CVECVSS 6.4NEWgenerateblocks (1)
- 1 CVECVSS 3.3NEWllama.cpp (1)
- 1 CVECVSS 7.5NEWuser access manager (1)
- 1 CVECVSS 7.1NEWhuggingface/transformers (1)
- 1 CVECVSS 4.3NEWrealhomes memberships (1)
- 1 CVECVSS 4.3NEWjeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress (1)
- 1 CVECVSS 6.1NEWjupyterlab (1)
- 1 CVECVSS 6.5NEWkeras-team/keras (1)
- 1 CVE1 critCVSS 9.8NEWpyathena (1)
- 1 CVECVSS 6.4NEWeasy property listings (1)
- 1 CVECVSS 6.4NEWadvanced woo labels – product labels & badges for woocommerce (1)
- 1 CVECVSS 4.3NEWtheme editor (1)
- 1 CVECVSS 5.3NEWlibiec61850 (1)
- 1 CVECVSS 6.1NEWresponsive thumbnail slider (1)
- 1 CVECVSS 5.4NEWopenremote (1)
- 1 CVECVSS 5.3NEWpixelyoursite pro – your smart pixel (tag) manager (1) · pixelyoursite – your smart pixel (tag) & api manager (1)
- 1 CVECVSS 8.8NEWpronamic pay (1)
- 1 CVENEWdata::entropy (1)
- 1 CVECVSS 5.3NEWgutena forms – contact form, survey form, feedback form, booking form, and custom form builder (1)
- 1 CVECVSS 6.4NEWsendpulse email marketing newsletter (1)
| # | Vendor | CVEs | Crit | KEV | Nuclei | Signals | Top products | Δ | |
|---|---|---|---|---|---|---|---|---|---|
| 1 | mediatek, inc. | 34 | · | · | · | mediatek chipset (34) | — | ||
| 2 | bouncycastle | 32 | · | · | · | NEW×6.4 | bc-java (32) · bc-lts-java (28) · bc-fja (23) | — | |
| 3 | freerdp | 23 | 3 | · | · | freerdp (23) | — | ||
| 4 | better-auth | 17 | 1 | · | · | NEW | better-auth (11) · scim (2) · stripe (1) | — | |
| 5 | axios | 10 | · | · | · | axios (10) | — | ||
| 6 | arcadedata | 8 | 3 | · | · | NEW | arcadedb (8) | — | |
| 7 | gitpython-developers | 5 | 1 | · | · | NEW | gitpython (5) | — | |
| 8 | guzzle | 4 | · | · | · | NEW | guzzle (4) | — | |
| 9 | redhat | 4 | · | · | · | red hat build of keycloak (4) · red hat data grid 8 (4) · red hat jboss enterprise application platform expansion pack (4) | — | ||
| 10 | ueberauth | 4 | · | · | · | NEW | guardian (4) | — | |
| 11 | zephyrproject | 4 | · | · | · | zephyr (4) | — | ||
| 12 | codesupplyco | 3 | · | · | · | NEW | powerkit – supercharge your wordpress site (3) | — | |
| 13 | cubewp1211 | 2 | · | · | · | NEW | cubewp framework (2) | — | |
| 14 | go-vikunja | 2 | · | · | · | vikunja (2) | — | ||
| 15 | icegram | 2 | · | · | · | NEW | icegram engage – popups, optins, ctas & lead generation (1) · icegram mailer – reliable email deliverability, no-code smtp replacement & email logs (1) | — | |
| 16 | n-able | 2 | · | · | · | NEW | n-central (2) | — | |
| 17 | openwrt | 2 | · | · | · | luci (2) | — | ||
| 18 | rubengc | 2 | · | · | · | NEW | gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress (2) | — | |
| 19 | stellarwp | 2 | · | · | · | kadence blocks — page builder toolkit for gutenberg editor (2) | — | ||
| 20 | wazuh | 2 | 1 | · | · | wazuh (2) | — | ||
| 21 | basercms users community | 1 | · | · | · | NEW | basercms (1) | — | |
| 22 | bitpressadmin | 1 | · | · | · | NEW | bit integrations – form integration, webhook, spreadsheets, crm, lms & email automation (1) | — | |
| 23 | brainstormforce | 1 | · | · | · | NEW | sureforms – contact form builder, ai forms, payment form, survey & quiz (1) | — | |
| 24 | britcoder | 1 | 1 | · | · | NEW | single sign on for tng (1) | — | |
| 25 | budibase | 1 | · | · | · | budibase (1) | — | ||
| 26 | canon production printing | 1 | · | · | · | NEW | prismaproduction (1) | — | |
| 27 | codename065 | 1 | · | · | · | NEW | download manager (1) | — | |
| 28 | cozythemes | 1 | · | · | · | NEW | cozy blocks – page builder for gutenberg editor & fse with 700+ patterns, 58 blocks & templates (1) | — | |
| 29 | davejesch | 1 | · | · | · | NEW | database collation fix (1) | — | |
| 30 | dotonpaper | 1 | · | · | · | NEW | pinpoint booking system – version 2 (1) | — | |
| 31 | edge22 | 1 | · | · | · | NEW | generateblocks (1) | — | |
| 32 | ggml-org | 1 | · | · | · | NEW | llama.cpp (1) | — | |
| 33 | gm_alex | 1 | · | · | · | NEW | user access manager (1) | — | |
| 34 | huggingface | 1 | · | · | · | NEW | huggingface/transformers (1) | — | |
| 35 | inspirythemes | 1 | · | · | · | NEW | realhomes memberships (1) | — | |
| 36 | jegtheme | 1 | · | · | · | NEW | jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress (1) | — | |
| 37 | jupyterlab | 1 | · | · | · | NEW | jupyterlab (1) | — | |
| 38 | keras-team | 1 | · | · | · | NEW | keras-team/keras (1) | — | |
| 39 | laughingman7743 | 1 | 1 | · | · | NEW | pyathena (1) | — | |
| 40 | mervb1 | 1 | · | · | · | NEW | easy property listings (1) | — | |
| 41 | mihail-barinov | 1 | · | · | · | NEW | advanced woo labels – product labels & badges for woocommerce (1) | — | |
| 42 | mndpsingh287 | 1 | · | · | · | NEW | theme editor (1) | — | |
| 43 | mz-automation | 1 | · | · | · | NEW | libiec61850 (1) | — | |
| 44 | nik00726 | 1 | · | · | · | NEW | responsive thumbnail slider (1) | — | |
| 45 | openremote | 1 | · | · | · | NEW | openremote (1) | — | |
| 46 | pixelyoursite | 1 | · | · | · | NEW | pixelyoursite pro – your smart pixel (tag) manager (1) · pixelyoursite – your smart pixel (tag) & api manager (1) | — | |
| 47 | pronamic | 1 | · | · | · | NEW | pronamic pay (1) | — | |
| 48 | rrwo | 1 | · | · | · | NEW | data::entropy (1) | — | |
| 49 | saadiqbal | 1 | · | · | · | NEW | gutena forms – contact form, survey form, feedback form, booking form, and custom form builder (1) | — | |
| 50 | sendpulse | 1 | · | · | · | NEW | sendpulse email marketing newsletter (1) | — |
Sectors
Solution categories ranked by distinct CVE count this period.
- OSS Libraries56 CVE4 crit6 vendorsCVSS 7.2freerdp (23)
- Web & CMS Plugins45 CVE2 crit36 vendorsCVSS 6.8powerkit – supercharge your wordpress site (3) · gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress (2) · kadence blocks — page builder toolkit for gutenberg editor (2)
- Security Products38 CVE1 crit3 vendorsCVSS 8.2bc-java (32) · bc-lts-java (28) · bc-fja (23)
- Hardware Firmware34 CVE1 vendorsmediatek chipset (34)
- Databases12 CVE3 crit2 vendorsCVSS 8.3arcadedb (8)
- Operating Systems8 CVE2 vendorsCVSS 6.3zephyr (4)
- DevTools & CI6 CVE1 crit2 vendorsCVSS 8.3gitpython (5)
- Cloud & SaaS4 CVE3 vendorsCVSS 7.0vikunja (2) · budibase (1) · sendpulse email marketing newsletter (1)
- AI / ML4 CVE4 vendorsCVSS 8.8huggingface/transformers (1) · keras-team/keras (1)
- Enterprise Software2 CVE1 vendorsn-central (2)
- 1 vendorstraefik (1)
- ICS / OT / IoT1 CVE1 vendorsCVSS 5.4openremote (1)
- Unclassified2 CVE1 vendorsCVSS 6.5luci (2)
| Sector | CVEs | Crit | KEV | Vendors | Products | Avg CVSS | Top products |
|---|---|---|---|---|---|---|---|
| OSS Libraries▸ 3 | 56 | 4 | · | 6 | 11 | 7.2 | freerdp (23) |
| Web & CMS Plugins▸ 5 | 45 | 2 | · | 36 | 38 | 6.8 | powerkit – supercharge your wordpress site (3) · gamipress – gamification plugin to reward points, achievements, badges & ranks in wordpress (2) · kadence blocks — page builder toolkit for gutenberg editor (2) |
| Security Products▸ 3 | 38 | 1 | · | 3 | 5 | 8.2 | bc-java (32) · bc-lts-java (28) · bc-fja (23) |
| Hardware Firmware▸ 1 | 34 | · | · | 1 | 1 | · | mediatek chipset (34) |
| Databases▸ 2 | 12 | 3 | · | 2 | 2 | 8.3 | arcadedb (8) |
| Operating Systems▸ 2 | 8 | · | · | 2 | 2 | 6.3 | zephyr (4) |
| DevTools & CI▸ 2 | 6 | 1 | · | 2 | 2 | 8.3 | gitpython (5) |
| Cloud & SaaS▸ 1 | 4 | · | · | 3 | 3 | 7.0 | vikunja (2) · budibase (1) · sendpulse email marketing newsletter (1) |
| AI / ML▸ 3 | 4 | · | · | 4 | 4 | 8.8 | huggingface/transformers (1) · keras-team/keras (1) |
| Enterprise Software▸ 1 | 2 | · | · | 1 | 1 | · | n-central (2) |
| Networking Infrastructure▸ 1 | 1 | · | · | 1 | 1 | · | traefik (1) |
| ICS / OT / IoT▸ 1 | 1 | · | · | 1 | 1 | 5.4 | openremote (1) |
| Unclassified | 2 | · | · | 1 | 1 | 6.5 | luci (2) |
Weakness × Sector
Which weaknesses hit which solution categories in August 2026
Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.
79XSS862Missing Authorization89SQL Injection22Path Traversal787Out-of-bounds Write125Out-of-bounds Read20Improper Input Validation77Command Injection770Allocation Without Limits74InjectionOSS Libraries5131735Web & CMS Plugins181079Hardware Firmware1214681Security Products3116Consumer Software551Networking Infrastructure111312Operating Systems23123Enterprise Software21Databases4Cloud & SaaS11