| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-72407 | In the Linux kernel, the following vulnerability has been resolved:
geneve: validate inner network offset in geneve_gro | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-72408 | In the Linux kernel, the following vulnerability has been resolved:
geneve: gate GRO hint in geneve_gro_complete() on g | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-72421 | In the Linux kernel, the following vulnerability has been resolved:
ipv4: fib: Don't ignore error route in local/main t | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-74279 | In the Linux kernel, the following vulnerability has been resolved:
crypto: cavium/cpt - fix DMA cleanup using wrong lo | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-74280 | In the Linux kernel, the following vulnerability has been resolved:
crypto: marvell/octeontx - fix DMA cleanup using wr | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-74309 | In the Linux kernel, the following vulnerability has been resolved:
vdpa/octeon_ep: fix IRQ-to-ring mapping in interrup | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-74475 | In the Linux kernel, the following vulnerability has been resolved:
vxlan: use neigh_ha_snapshot() in route_shortcircui | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-74764 | Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted | CRITICAL | 10.0 | NVD | 2026-08-15 |
| CVE-2026-74253 | Joomla Extension - regularlabs.com - Unauthenticated RCE through unverified reflected user input in Sourcerer < 14.0.0 - | CRITICAL | 10.0 | NVD | 2026-08-17 |
| CVE-2026-75874 | Sandbox escape in the Remote Settings Client component. This vulnerability was fixed in Firefox 154 and Thunderbird 154. | CRITICAL | 10.0 | NVD | 2026-08-18 |
| CVE-2026-73343 | Unauthenticated Remote Code Execution (RCE) in WP Compress < 7.20.01 versions. | CRITICAL | 10.0 | NVD | 2026-08-18 |
| CVE-2026-61241 | Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server). Suppor | CRITICAL | 10.0 | NVD | 2026-08-18 |
| CVE-2026-70880 | Vulnerability in the Oracle Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and secu | CRITICAL | 10.0 | NVD | 2026-08-18 |
| CVE-2026-70921 | Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hyperion (component: Security). The suppor | CRITICAL | 10.0 | NVD | 2026-08-18 |
| CVE-2026-76008 | A flaw has been found in Comfast CF-N1-S 2.6.0.1. This affects the function get_para_from_uri of the file /cgi-bin/mbox- | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-18051 | The W3 Total Cache WordPress plugin before 2.10.5 does not properly validate the request path it uses to build cache fil | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-67364 | Joomla Extension - balbooa.com - Pre-auth PHP Code Injection in Balbooa Forms < 2.4.3.2 - CWE-94 / CWE-95 | CVSS 3.1: 9. | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-74803 | Joomla Extension - yootheme.com - Unauthenticated arbitrary file upload in Zoo < 4.1.64 - The image element accepts arbi | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-75949 | Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 - U | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-20030 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team ha | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-20315 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering t | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-20317 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Workload engineering t | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-20357 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team ha | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-20358 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Crosswork engineering team ha | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-22306 | Download of code without integrity check, inclusion of functionality from untrusted control sphere, and cleartext
trans | CRITICAL | 10.0 | NVD | 2026-08-19 |
| CVE-2026-65770 | Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-65801 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-65816 | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-69555 | Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-69836 | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-69502 | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne | CRITICAL | 10.0 | NVD | 2026-08-21 |
| CVE-2026-61539 | Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference | CRITICAL | 10.0 | NVD | 2026-08-21 |
| CVE-2026-61539 | Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing | CRITICAL | 10.0 | GitHub | 2026-08-21 |
| GHSA-m5w8-4gq2-6f8x | vm2: NodeVM `builtin: ['*']` exposes `os` and `dns` — process-wide observability reads AND writes that hijack the host ( | CRITICAL | 10.0 | GitHub | 2026-08-17 |
| CVE-2026-55107 | kobako Sandbox Escape: guest eval reaches host RCE via method_missing → public_send (any bound Service) | CRITICAL | 10.0 | GitHub | 2026-08-18 |
| CVE-2026-32186 | Microsoft Bing Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-32213 | Azure AI Foundry Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33105 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33107 | Azure Databricks Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |
| CVE-2026-33819 | Microsoft Bing Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-04-14 |