| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-20317 | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Authentication Vulnerabilities | Cisco | Cisco Secure Workload | Critical | 10.0 | 2026-08-19 16:19:28 | Deep Dive |
| CVE-2026-20318 | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Input Validation Vulnerabilities | Cisco | Cisco Secure Workload | Critical | 9.6 | 2026-08-19 16:19:24 | Deep Dive |
| CVE-2026-20359 | Cisco Crosswork Security Hardening Release: August 2026 | Cisco | Cisco Crosswork Planning | Critical | 9.9 | 2026-08-19 16:18:52 | Deep Dive |
| CVE-2026-20358 | Cisco Crosswork Security Hardening Release: August 2026 | Cisco | Cisco Crosswork Planning | Critical | 10.0 | 2026-08-19 16:18:44 | Deep Dive |
| CVE-2026-20357 | Cisco Crosswork Security Hardening Release: August 2026 | Cisco | Cisco Crosswork Planning | Critical | 10.0 | 2026-08-19 16:18:44 | Deep Dive |
| CVE-2026-20231 | Cisco Secure Workload Software Security Hardening Release August 2026 - Improper Neutralization of Special Elements Vulnerabilities | Cisco | Cisco Secure Workload | Critical | 9.9 | 2026-08-19 16:16:59 | Deep Dive |
| CVE-2026-20030 | Cisco Crosswork Security Hardening Release: August 2026 | Cisco | Cisco Crosswork Planning | Critical | 10.0 | 2026-08-19 16:16:51 | Deep Dive |
| CVE-2026-48024 🧪 | Wazuh: merged-file header path traversal in cluster sync allows arbitrary file write under WAZUH_PATH in Wazuh manager | wazuh | wazuh | Critical | 9.1 | 2026-08-19 16:14:21 | Deep Dive |
| CVE-2026-48162 🧪 | Wazuh: cluster peer can read arbitrary master files and forge offline REST API administrator tokens via DAPI tmp_file path injection in Wazuh manager | wazuh | wazuh | Critical | 9.1 | 2026-08-19 16:13:16 | Deep Dive |
| CVE-2026-62668 🧪 | Grav API Plugin: Webhook SSRF via Unrestricted cURL Protocols | getgrav | grav | Critical | 9.4 | 2026-08-19 15:29:24 | Deep Dive |
| CVE-2026-16816 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.9 | 2026-08-19 15:01:14 | Deep Dive |
| CVE-2026-52889 🧪 | Formie: Server-Side Template Injection in Formie Hidden field defaults | verbb | formie | Critical | 9.8 | 2026-08-19 14:57:13 | Deep Dive |
| CVE-2026-16656 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.8 | 2026-08-19 14:55:54 | Deep Dive |
| CVE-2026-53451 🧪 | Ground Station: Unauthenticated arbitrary file write (path traversal) in save-waterfall-snapshot leads to remote code execution | sgoudelis | ground-station | Critical | 9.8 | 2026-08-19 14:45:24 | Deep Dive |
| CVE-2026-47187 🧪 | SSHFS Symlink Escape: Rogue SFTP Server → Local File Read/Write | libfuse | sshfs | Critical | 9.3 | 2026-08-19 14:41:58 | Deep Dive |
| CVE-2026-75954 | Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 | cmsjunkie.com | J-BusinessDirectory extension for Joomla | Critical | 9.3 | 2026-08-19 14:41:04 | Deep Dive |
| CVE-2026-75949 🧪 | Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 | cmsjunkie.com | J-BusinessDirectory extension for Joomla | Critical | 10.0 | 2026-08-19 14:40:42 | Deep Dive |
| CVE-2026-45272 🧪 | MyBooks: Remote Code Execution via SOCIAL_AUTH Key Name Injection in Python Config File | PoxenStudio | talebook | Critical | 9.4 | 2026-08-19 14:39:50 | Deep Dive |
| CVE-2026-15068 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.9 | 2026-08-19 14:34:28 | Deep Dive |
| CVE-2026-15065 | Vulnerabilities in IBM AIX and PowerVM VIOS | IBM | AIX | Critical | 9.1 | 2026-08-19 14:33:37 | Deep Dive |