| CVE / ID | Title | Severity | CVSS | Source | Date |
|---|
| CVE-2026-65770 | Improper neutralization of argument delimiters in a command ('argument injection') in Azure Managed Instance for Apache | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-65801 | Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges ov | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-65816 | Use of incorrectly-resolved name or reference in Azure Arc allows an unauthorized attacker to elevate privileges over a | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-69555 | Incorrect authorization in Azure Arc allows an unauthorized attacker to elevate privileges over a network. | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-69836 | Deserialization of untrusted data in Microsoft Entra ID allows an unauthorized attacker to execute code over a network. | CRITICAL | 10.0 | NVD | 2026-08-20 |
| CVE-2026-69502 | Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a ne | CRITICAL | 10.0 | NVD | 2026-08-21 |
| CVE-2026-61539 | Xinference is an inference API for running open-source, speech, and multimodal models. In 2.5.0 and earlier, Xinference | CRITICAL | 10.0 | NVD | 2026-08-21 |
| CVE-2026-76604 | Joomla Extension - fabrikar.com - Unauthenticated remote code execution via PHP form element in Fabrik < 4.7.2 - The PHP | CRITICAL | 10.0 | NVD | 2026-08-22 |
| CVE-2026-76605 | Joomla Extension - fabrikar.com - Remote code execution via image element in Fabrik < 4.7.2. | CRITICAL | 10.0 | NVD | 2026-08-22 |
| CVE-2026-76606 | Joomla Extension - fabrikar.com - Path Traversal via image element in Fabrik < 4.7.2. | CRITICAL | 10.0 | NVD | 2026-08-22 |
| CVE-2026-76607 | Joomla Extension - fabrikar.com - Missing ACL check in download element in Fabrik < 4.7.2. | CRITICAL | 10.0 | NVD | 2026-08-22 |
| CVE-2026-74612 | In the Linux kernel, the following vulnerability has been resolved:
veth: fix skb length accounting after XDP frag adju | CRITICAL | 10.0 | NVD | 2026-08-22 |
| CVE-2026-74705 | In the Linux kernel, the following vulnerability has been resolved:
udp: fix potential use-after-free in tunnel segment | CRITICAL | 10.0 | NVD | 2026-08-22 |
| CVE-2026-77995 | Joomla Extension - miniorange.com - Arbitrary account takeover in miniOrange OAuth Client < 3.2.0 - The manipulation of | CRITICAL | 10.0 | NVD | 2026-08-24 |
| CVE-2025-36939 | Multiple vulnerabilities exist in OpenThread's handling of MLE packets. An authenticated attacker on the same Thread net | CRITICAL | 10.0 | NVD | 2026-08-24 |
| CVE-2026-77998 | Joomla Extension - miniorange.com - Unauthenticated Authentication Bypass via SAMLResponse Parameter in miniOrange SAML | CRITICAL | 10.0 | NVD | 2026-08-25 |
| CVE-2026-76193 | Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in arbi | CRITICAL | 10.0 | NVD | 2026-08-25 |
| CVE-2026-76195 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co | CRITICAL | 10.0 | NVD | 2026-08-25 |
| CVE-2026-76197 | Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an OS Command ('OS Co | CRITICAL | 10.0 | NVD | 2026-08-25 |
| CVE-2026-77537 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Pro | CRITICAL | 10.0 | NVD | 2026-08-26 |
| CVE-2026-77550 | A malicious actor with access to the network could exploit an Improper Neutralization of CRLF Sequences vulnerability fo | CRITICAL | 10.0 | NVD | 2026-08-26 |
| CVE-2026-77554 | A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi Tal | CRITICAL | 10.0 | NVD | 2026-08-26 |
| CVE-2026-65956 | KubePi is a Kubernetes multi-cluster management panel. In versions up to and including 1.6.15, the SSO configuration API | CRITICAL | 10.0 | NVD | 2026-08-26 |
| CVE-2026-61539 | Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing | CRITICAL | 10.0 | GitHub | 2026-08-21 |
| CVE-2026-56162 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-63508 | Microsoft Planetary Computer Pro Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65667 | Microsoft Teams Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65770 | Azure Managed Instance for Apache Cassandra Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65801 | Microsoft Exchange Online Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-65816 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-69502 | Azure SQL Database Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-69555 | Azure Arc Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-69836 | Microsoft Entra ID Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-08-11 |
| CVE-2026-56163 | Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-56191 | Microsoft Exchange Online Tampering Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-57106 | Data Quality Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58275 | Azure DNS Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-58630 | Azure App Service on Azure Stack Hub Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-62825 | Azure Key Vault Elevation of Privilege Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |
| CVE-2026-66803 | Azure Cosmos DB Remote Code Execution Vulnerability | CRITICAL | 10.0 | Microsoft | 2026-07-14 |