| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-52723 🧪 | ePA 3.x Integration: VAU Server Authentication Bypass via Circular Certificate Trust | fbeta-GmbH | ePA3-Service-OpenSource | Critical | 9.1 | 2026-08-18 16:50:50 | Deep Dive |
| CVE-2026-67271 | Dell PowerStore 缓冲区错误漏洞 | Dell | PowerStore 500T | Critical | 9.8 | 2026-08-18 16:44:13 | Deep Dive |
| CVE-2026-45118 🧪 | MyBB: Contact page reflected XSS | mybb | mybb | Critical | 9.3 | 2026-08-18 15:55:27 | Deep Dive |
| CVE-2026-45117 🧪 | MyBB: Installer database configuration RCE | mybb | mybb | Critical | 9.8 | 2026-08-18 15:53:30 | Deep Dive |
| CVE-2026-12564 | Automation-controller: automation-controller: kubernetes service account token exfiltration via hashicorp vault credential ssrf | Red Hat | Red Hat Ansible Automation Platform 2.7 | Critical | 9.6 | 2026-08-18 15:50:55 | Deep Dive |
| CVE-2026-75913 🧪 | CodeWhale before 0.8.64 Argument Injection via git_show | Hmbown | CodeWhale | Critical | 9.3 | 2026-08-18 15:22:02 | Deep Dive |
| CVE-2026-59940 | Seroval: `seroval.fromJSON()` Promise resolver type confusion invokes attacker-controlled methods during deserialization | lxsmnsyc | seroval | Critical | 9.8 | 2026-08-18 14:34:29 | Deep Dive |
| CVE-2026-74015 | WordPress Readabler plugin < 2.0.18 - SQL Injection vulnerability | merkulove | Readabler | Critical | 9.3 | 2026-08-18 14:00:52 | Deep Dive |
| CVE-2026-73996 | WordPress Masteriyo - LMS plugin <= 2.3.2 - Arbitrary File Upload vulnerability | masteriyo | Masteriyo - LMS | Critical | 9.8 | 2026-08-18 14:00:41 | Deep Dive |
| CVE-2026-73397 | WordPress Youzify plugin <= 1.3.7 - Deserialization of untrusted data vulnerability | Youzify | Youzify | Critical | 9.8 | 2026-08-18 14:00:34 | Deep Dive |
| CVE-2026-73381 | WordPress Popup by Supsystic plugin <= 1.13.0 - Broken Authentication vulnerability | supsystic | Popup by Supsystic | Critical | 9.1 | 2026-08-18 14:00:28 | Deep Dive |
| CVE-2026-73380 | WordPress Popup by Supsystic plugin <= 1.13.0 - PHP Object Injection vulnerability | supsystic | Popup by Supsystic | Critical | 9.8 | 2026-08-18 14:00:27 | Deep Dive |
| CVE-2026-73376 | WordPress Ultimate Maps by Supsystic plugin < 1.5.0 - PHP Object Injection vulnerability | supsystic | Ultimate Maps by Supsystic | Critical | 9.8 | 2026-08-18 14:00:24 | Deep Dive |
| CVE-2026-73366 | WordPress Easy Google Maps plugin <= 1.13.0 - PHP Object Injection vulnerability | supsystic | Easy Google Maps | Critical | 9.8 | 2026-08-18 14:00:21 | Deep Dive |
| CVE-2026-73365 | WordPress JetAppointment plugin <= 2.5.2 - SQL Injection vulnerability | Crocoblock. Jetimpex Inc. | JetAppointment | Critical | 9.3 | 2026-08-18 14:00:20 | Deep Dive |
| CVE-2026-73355 | WordPress Affiliates Manager plugin <= 2.9.53 - SQL Injection vulnerability | wp.insider | Affiliates Manager | Critical | 9.3 | 2026-08-18 14:00:14 | Deep Dive |
| CVE-2026-75784 🧪 | TRENDnet TEW-WLC100 HTTP Header nginx FUN_0040da4c stack-based overflow | TRENDnet | TEW-WLC100 | Critical | 10.0 | 2026-08-18 14:00:09 | Deep Dive |
| CVE-2026-73343 | WordPress WP Compress plugin < 7.20.01 - Remote Code Execution (RCE) vulnerability | AresIT | WP Compress | Critical | 10.0 | 2026-08-18 14:00:09 | Deep Dive |
| CVE-2026-73341 | WordPress RegistrationMagic plugin <= 6.0.9.7 - PHP Object Injection vulnerability | Metagauss | RegistrationMagic | Critical | 9.8 | 2026-08-18 14:00:08 | Deep Dive |
| CVE-2026-73339 | WordPress Modern Events Calendar plugin < 7.35.0 - SQL Injection vulnerability | Webnus Inc. | Modern Events Calendar | Critical | 9.3 | 2026-08-18 14:00:07 | Deep Dive |