| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-16903 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.6 | 2026-08-19 19:55:08 | Deep Dive |
| CVE-2026-16894 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:54:07 | Deep Dive |
| CVE-2026-16885 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:51:05 | Deep Dive |
| CVE-2026-16882 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:43:46 | Deep Dive |
| CVE-2026-16872 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:40:31 | Deep Dive |
| CVE-2026-16864 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:39:19 | Deep Dive |
| CVE-2026-16862 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:39:03 | Deep Dive |
| CVE-2026-55085 🧪 | Etherpad: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in etherpad-lite | ether | etherpad | Critical | 9.6 | 2026-08-19 19:34:27 | Deep Dive |
| CVE-2026-55089 🧪 | Etherpad: JWT `admin` claim presence-only check lets non-admin OAuth users invoke every Etherpad HTTP API endpoint | ether | etherpad | Critical | 9.9 | 2026-08-19 19:33:20 | Deep Dive |
| CVE-2026-16845 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:32:40 | Deep Dive |
| CVE-2026-16840 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:31:14 | Deep Dive |
| CVE-2026-16839 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.4 | 2026-08-19 19:30:59 | Deep Dive |
| CVE-2026-16834 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 19:29:43 | Deep Dive |
| CVE-2026-16822 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.3 | 2026-08-19 19:25:59 | Deep Dive |
| CVE-2026-22306 | Critical flaw impacting OZOLS ERP's automatic update channel | Ozols Grupa | OZOLS | Critical | 10.0 | 2026-08-19 19:25:11 | Deep Dive |
| CVE-2026-63722 🧪 | ICEcoder 8.1 Unauthenticated RCE via terminal-xhr.php | ICEcoder | ICEcoder | Critical | 9.8 | 2026-08-19 19:13:45 | Deep Dive |
| CVE-2026-16687 | Power System Buffer Overflow | IBM | Power Systems Firmware | Critical | 9.6 | 2026-08-19 18:56:42 | Deep Dive |
| CVE-2026-16835 | Power System Improper Certificate Validation | IBM | Power Systems Firmware | Critical | 9.6 | 2026-08-19 18:52:27 | Deep Dive |
| CVE-2026-18315 | TrueBooker <= 1.2.6 - Unauthenticated Authorization Bypass Through User-Controlled Key to Account Takeover to 'truebooker_wp_user_id' Parameter | themetechmount | TrueBooker – Appointment Booking and Scheduler System | Critical | 9.8 | 2026-08-19 18:27:42 | Deep Dive |
| CVE-2026-70496 | Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork | Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | Critical | 9.9 | 2026-08-19 18:16:13 | Deep Dive |