| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-76133 | Ebyte NA111-M Use of a Broken or Risky Cryptographic Algorithm | Ebyte | Ebyte NA111-M Firmware | Critical | 9.8 | 2026-08-31 15:30:38 | Deep Dive |
| CVE-2026-73819 | Ebyte NA111-M Weak Authentication | Ebyte | Ebyte NA111-M Firmware | Critical | 9.8 | 2026-08-31 15:28:32 | Deep Dive |
| CVE-2026-82970 | WordPress WP Cookie Notice for GDPR, CCPA & ePrivacy Consent plugin <= 4.4.1 - Arbitrary File Upload vulnerability | WP Legal Pages | WP Cookie Notice for GDPR, CCPA & ePrivacy Consent | Critical | 10.0 | 2026-08-31 14:43:38 | Deep Dive |
| CVE-2026-59111 | Command Injection vulnerability in eObčanka-Identifikace | Ministry of the Interior (MVČR) | eObčanka-Identifikace | Critical | 9.3 | 2026-08-31 14:43:03 | Deep Dive |
| CVE-2026-82695 | Tenda AC18 Telnet telnet missing authentication | Tenda | AC18 | Critical | 10.0 | 2026-08-31 12:45:10 | Deep Dive |
| CVE-2026-82694 | Tenda AC1206 Web UI ate R7WebsSecurityHandler missing authentication | Tenda | AC1206 | Critical | 10.0 | 2026-08-31 12:30:11 | Deep Dive |
| CVE-2026-82693 | Tenda AC1206 Web UI telnet TendaTelnet missing authentication | Tenda | AC1206 | Critical | 10.0 | 2026-08-31 12:15:12 | Deep Dive |
| CVE-2026-82692 | D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection | D-Link | DNS-340L | Critical | 9.9 | 2026-08-31 12:00:12 | Deep Dive |
| CVE-2026-82691 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection | D-Link | DNS-320L | Critical | 9.1 | 2026-08-31 11:45:09 | Deep Dive |
| CVE-2026-82690 | D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection | D-Link | DNS-327L | Critical | 9.1 | 2026-08-31 11:30:11 | Deep Dive |
| CVE-2026-82689 | D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection | D-Link | DNS-320L | Critical | 9.9 | 2026-08-31 11:15:10 | Deep Dive |
| CVE-2026-82688 | D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection | D-Link | DNS-340L | Critical | 9.1 | 2026-08-31 11:00:11 | Deep Dive |
| CVE-2026-49003 | Unauthenticated RCE Vulnerability in ZTE ZXDU68 S202 V5.0 Product | ZTE | ZXDU68 S202 V5.0 | Critical | 9.6 | 2026-08-31 09:43:24 | Deep Dive |
| CVE-2026-82874 | ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db | ToolJet | ToolJet | Critical | 9.9 | 2026-08-31 08:46:42 | Deep Dive |
| CVE-2026-82872 | ToolJet before v3.16.208 Cross-Workspace Authorization Bypass | ToolJet | ToolJet | Critical | 9.1 | 2026-08-31 08:46:41 | Deep Dive |
| CVE-2026-82870 | ToolJet before v3.16.208 Cross-Tenant Database Manipulation | ToolJet | ToolJet | Critical | 9.6 | 2026-08-31 08:46:40 | Deep Dive |
| CVE-2026-82860 | @hulumi/policies before 1.3.2 Admin Policy Bypass | hulumi | policies | Critical | 9.8 | 2026-08-31 08:46:33 | Deep Dive |
| CVE-2026-82859 | hulumi before v1.3.2 SCP Template Tag-on-Create Bypass | kerberosmansour | hulumi | Critical | 9.8 | 2026-08-31 08:46:32 | Deep Dive |
| CVE-2026-82858 | @hulumi/drift before 1.3.2 Unsafe Execute Plan Acceptance | hulumi | drift | Critical | 9.8 | 2026-08-31 08:46:31 | Deep Dive |
| CVE-2026-82857 | hulumi before v1.3.2 Privilege Escalation via IAM Policy | kerberosmansour | hulumi | Critical | 9.8 | 2026-08-31 08:46:30 | Deep Dive |