CVE Vulnerability Database
Search and browse 375,948 CVE records with CVSS scores, EPSS exploit predictions, and CISA KEV status.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-72536 | HIGH | 8.6 | — | Aug 11, 2026 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mani... |
| CVE-2026-72535 | HIGH | 8.6 | — | Aug 11, 2026 | A missing authentication vulnerability in Chaskiq through commit 46dfdd1 allows unauthenticated remote attackers to mint... |
| CVE-2026-72534 | HIGH | 8.8 | — | Aug 11, 2026 | A privilege escalation vulnerability in Authentik Security authentik through 2026.5.6 allows an attacker with a source-s... |
| CVE-2026-72533 | HIGH | 8.8 | — | Aug 11, 2026 | An authentication bypass vulnerability in Portainer CE through 2.44.0 allows authenticated low-privileged users to bypas... |
| CVE-2026-50237 | HIGH | 7.4 | — | Aug 11, 2026 | A Server-Side Request Forgery and supply chain flaw was found in the OpenShift Console Helm catalog proxy. A namespace t... |
| CVE-2026-50236 | HIGH | 7.4 | — | Aug 11, 2026 | An authenticated SSRF flaw was found in the OpenShift Console Dev Console webhook helpers. User-supplied target URLs are... |
| CVE-2026-13739 | HIGH | 8.8 | — | Aug 11, 2026 | A legacy endpoint in Command Center contained an unauthenticated server-side request forgery (SSRF) vulnerability relate... |
| CVE-2026-13738 | CRITICAL | 9.2 | — | Aug 11, 2026 | CommServe contained an authorization bypass vulnerability affecting a limited set of command execution operations. Soft... |
| CVE-2026-13737 | CRITICAL | 9.2 | — | Aug 11, 2026 | CommServe contained an allowlist bypass vulnerability affecting command execution authorization. Software customers upg... |
| CVE-2026-58231 | CRITICAL | 10 | — | Aug 11, 2026 | SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially craf... |
| CVE-2026-73162 | MEDIUM | 5.3 | 0.2% | Aug 11, 2026 | Affected versions of MISP cti-transmute expose several state-changing account operations as GET requests: * /acco... |
| CVE-2026-33922 | MEDIUM | 6.8 | 0.2% | Aug 11, 2026 | A path traversal vulnerability was discovered in the Offline archives functionality of the local web interface due to in... |
| CVE-2026-33921 | MEDIUM | 5.2 | 0.1% | Aug 11, 2026 | The Windows installer deployed Npcap leaving its access restriction option at the insecure default value, so the driver ... |
| CVE-2026-73161 | MEDIUM | 5.1 | 0.2% | Aug 11, 2026 | Affected versions of cti-transmute improperly handle conversion-table values passed through the search highlighting feat... |
| CVE-2026-73160 | HIGH | 8.7 | — | Aug 11, 2026 | Affected versions of cti-transmute contain an SSRF vulnerability in the /fetch_misp_event and /misp_search_events endpoi... |
| CVE-2026-73159 | MEDIUM | 5.1 | 0.2% | Aug 11, 2026 | Affected versions of cti-transmute allow a tag's icon value to be stored and later interpolated into HTML through Vue's ... |
| CVE-2026-73158 | MEDIUM | 5.1 | 0.2% | Aug 11, 2026 | Affected versions of cti-transmute insufficiently validate saved graph configuration data. Graph configurations can cont... |
| CVE-2026-73157 | LOW | 2.3 | 0.3% | Aug 11, 2026 | Affected versions of cti-transmute render data obtained from a remote MISP instance into the event-browser interface usi... |
| CVE-2026-72694 | HIGH | 7.1 | 0.1% | Aug 11, 2026 | A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low... |
| CVE-2026-72693 | HIGH | 7.8 | 0.1% | Aug 11, 2026 | `openvt -u` is intended to identify the owner of the current VT and then execute `login` as that user from a privileged ... |
| CVE-2026-71218 | MEDIUM | 5.3 | 0.3% | Aug 11, 2026 | A flaw was found in iperf3. A remote unauthenticated attacker can exploit a vulnerability in the `JSON_read()` function,... |
| CVE-2026-71217 | HIGH | 7.5 | 0.3% | Aug 11, 2026 | A flaw was found in iperf3. A remote attacker can exploit this vulnerability by sending crafted control-channel JSON wit... |
| CVE-2026-15567 | HIGH | 7.5 | 0.3% | Aug 11, 2026 | A flaw was found in Wildfly. A remote unauthenticated attacker can trigger OutOfMemoryError as CSIv2Util's GSS token dec... |
| CVE-2026-15565 | HIGH | 7.5 | 0.4% | Aug 11, 2026 | A flaw was found in Undertow. A remote attacker can cause Out of Memory on websockets endpoint without authentication on... |
| CVE-2026-15563 | HIGH | 7.4 | 0.3% | Aug 11, 2026 | A flaw was found in EAP's IIOP. The listener's NameService would accept bind operations without authentication, allowing... |