CVE-2026-70316

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:23+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:20+00:00| seen|...

CVE-2026-65769

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:21+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:22+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:17+00:00| seen|...

CVE-2026-65767

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:21+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:15+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:17+00:00| seen|...

CVE-2026-70313

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:14+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:19+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:01:10+00:00| seen|...

CVE-2026-68801

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:03+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 22:01:21+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0286 2026-08-12 01:00:59+00:00| seen|...

CVE-2026-62871

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:52+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:47:35+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0285 2026-08-11 21:32:34+00:00| seen|...

CVE-2026-62869

creationtimestamp| type| source ---|---|--- 2026-08-11 19:00:40+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 01:00:36+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-12 07:02:11+00:00| seen|...

CVE-2026-65791

creationtimestamp| type| source ---|---|--- 2026-08-11 18:50:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mstbs6pjbq2q 2026-08-11 19:00:51+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:16:40+00:00| seen|...

CVE-2026-10294

creationtimestamp| type| source ---|---|--- 2026-08-11 11:52:18+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3msskh4gdlk25 2026-08-11 11:52:19+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3msskh5kfv225...

WordPress Everest Backup plugin <= 2.3.12 - SQL Injection vulnerability

SQL Injection vulnerability discovered by manop55555 in WordPress Plugin Everest Backup versions = 2.3.12...

CVE-2026-19379 EFM ipTIME AX8004M CGI Endpoint d.cgi popen os command injection

A vulnerability was determined in EFM ipTIME AX8004M 15.09.0. Impacted is the function popen of the file /cgi/d.cgi of the component CGI Endpoint. This manipulation of the argument fname causes os command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and...

CVE-2026-19375 dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19362 lmammino oidc-authorizer Authorization Header Parsing parse_token_from_header.rs parse_token_from_header denial of service

A vulnerability has been found in lmammino oidc-authorizer 0.4.0. This issue affects the function parsetokenfromheader of the file src/parsetokenfromheader.rs of the component Authorization Header Parsing. The manipulation of the argument authorizationtoken leads to denial of service. Remote...

CVE-2026-19339 aliyun alibabacloud-dataworks-mcp-server initResources.ts ReadResourceRequestSchema server-side request forgery

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

CVE-2026-19195 V-Secure Jingyun Antivirus Kernel Driver ZyArk.sys access control

A vulnerability has been found in V-Secure Jingyun Antivirus 2.4.2.39. The affected element is an unknown function in the library ZyArk.sys of the component Kernel Driver. The manipulation leads to improper access controls. The attack needs to be performed locally. The exploit has been disclosed ...

CVE-2026-19034

CVE-2026-19034 affects Shibby Tomato 1.28.0000. The vulnerability lies in the function new_qoslimit_stop in the file /tmp/qoslimittc_stop.sh; manipulating the argument wan_iface can lead to an OS command injection. The attack is remote, and the exploit has been publicly disclosed. The issue is ti...

CVE-2026-18997

The vulnerability affects cosmicstack-labs mercury-agent up to version 1.1.12 , specifically in the function Agent.handleBgCommand of the file src/core/agent.ts within the bg Command Handler . Manipulation can lead to incorrect authorization , with remote exploitation possible and the exploit pub...

CVE-2026-18902

Summary: Affects H3C NX15 V100R017. The vulnerable component is esps.wan.repeater.set/repeaterproc in /api/esps. Manipulating the argument my2P4key enables command injection, enabling remote code execution. The CVSS data indicate high impact with network access, low attack complexity, and no user...

CVE-2026-18901 H3C NX15 Web API esps service.add routine

A security vulnerability has been detected in H3C NX15 V100R017. Affected is the function service.add of the file /api/esps of the component Web API. Such manipulation leads to exposed dangerous routine. The attack may be launched remotely. The exploit has been disclosed publicly and may be used...

CVE-2026-18784 o6 open62541 ua_client_highlevel.c UA_Client_readNodeClassAttribute heap-based overflow

A vulnerability was found in o6 open62541 up to 1.5.5. This issue affects the function UAClientreadNodeClassAttribute of the file src/client/uaclienthighlevel.c. Performing a manipulation results in heap-based buffer overflow. Attacking locally is a requirement. The exploit has been made public a...