CVE-2026-77136

CVE-2026-77136 is a Server-Side Template Injection (SSTI) in the TYPO3 extension powermail (in2code). The raw value of a form field configured as the sender name is passed directly into a Fluid template without sanitization, allowing an unauthenticated user to inject Fluid template syntax and exe...

VulnCheck KEV: CVE-2026-77136

The extension passes the raw value of a form field configured as "This field contains the name of the sender" directly into a Fluid View as template source, without any sanitization, and renders it. An anonymous, unauthenticated user can submit Fluid template syntax in that field to execute...

GCVE-1-2026-20208

creationtimestamp| type| source ---|---|--- 2026-08-24 09:56:31+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e8b8d385-eeed-46ce-9754-6cc7d1b4061c...

Exploit for Integer Overflow or Wraparound in Google Android

CVE-2025-48595 — Android Framework Integer Overflow Vulnerabil...

Exploit for CVE-2026-03200

Patch: CVE-2026-03200 Vulnerability Details - CVE: CVE...

Exploit for CVE-2026-31337

Patch: CVE-2026-31337 Vulnerability Details - CVE: CVE...

Vulnerability handling in Zimbra Collaboration Suite

Zimbra has identified a vulnerability in the Zimbra Collaboration Suite. This vulnerability exists in the Zimbra Collaboration Suite version 10.1.20. Unauthorized attackers can execute OS commands through specially crafted SMTP requests. This requires that the Zimbra SNMP package be installed and...

CVE-2025-10164

creationtimestamp| type| source ---|---|--- 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5775be7d-1a29-41ee-bdff-b6026e93023f 2026-08-24 01:11:00+00:00| exploited|...

CVE-2021-27691

creationtimestamp| type| source ---|---|--- 2026-08-23 10:15:05+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2026-08-22 2026-08-23 11:00:35+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/39ee7ca1-fe23-494e-8a9e-ae5f349620a0...

Linux Distros Unpatched Vulnerability : CVE-2026-77806

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

CVE-2026-77806

SPIP before 4.4.21 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to code injection via an X-Spip-Filtre HTTP request header that is mishandled by analyseresultatskel...

Microsoft Patches Severe Entra ID Flaw (CVSS 10.0) Allowing Remote Code Execution

Update: The story was updated after publication to note that the vulnerability has not been exploited. Although the security bulletin originally marked the "Exploited" field under the Exploitability Assessment table as "Yes," on August 21, 2026, Microsoft corrected the "Exploited" status to "No"...

CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

VulnCheck KEV: CVE-2026-77647

SPIP before 4.4.20 allows unauthenticated remote attackers to execute arbitrary code, as exploited in the wild in August 2026. This is related to incorrect identification of ?php blocks, and varexport's mishandling of certain cases such as presence of a '' character...

CVE-2026-76591 TRENDnet TEW-755AP ssi email.cgi log_email_server command injection

A security flaw has been discovered in TRENDnet TEW-755AP up to 20260702. This affects the function logemailserver of the file /cgi-bin/email.cgi of the component ssi. Performing a manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2016-5312

creationtimestamp| type| source ---|---|--- 2026-08-16 11:00:34+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/dc76e2ae-d1cb-4f07-9269-4e12b5e7cc35 2026-08-17 01:01:16+00:00| exploited|...

CVE-2016-20097

creationtimestamp| type| source ---|---|--- 2026-08-14 20:00:19+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/72a4432a-2124-4b6e-9cab-fd09b4ac5fa6 2026-09-03 01:02:31+00:00| exploited|...

CVE-2022-50997

creationtimestamp| type| source ---|---|--- 2026-08-14 18:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b0c9d28-d532-4f72-ac99-6d75bcb0281c 2026-08-30 01:01:35+00:00| exploited|...

EUVD-2026-58735

A vulnerability was identified in TOTOLINK A800R 4.1.2cu.5137B20200730. This impacts the function setUrlFilterRules of the file /cgi-bin/cstecgi.cgi of the component firewall.so. The manipulation of the argument url leads to stack-based buffer overflow. The attack can be initiated remotely. The...