| CVE ID | Title | Vendor | Product | Severity | CVSS Score | Published At | AI Analysis |
|---|---|---|---|---|---|---|---|
| CVE-2026-73414 🧪 | Shescape: Shell injection via unescaped parentheses on Windows with CMD | ericcornelissen | shescape | Critical | 9.2 | 2026-08-12 19:42:56 | Deep Dive |
| CVE-2026-72508 | Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*) | Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 | Critical | 9.9 | 2026-08-12 19:41:19 | Deep Dive |
| CVE-2026-17083 | IBM i is Affected By Multiple Vulnerabilities in the Debug Server | IBM | i | Critical | 9.8 | 2026-08-12 19:35:54 | Deep Dive |
| CVE-2026-63296 🧪 | Project restriction bypass via instance migration config override | Canonical | LXD | Critical | 9.9 | 2026-08-12 19:27:46 | Deep Dive |
| CVE-2026-63297 🧪 | Cross-project instance copy bypasses target project restrictions via TOCTOU in config merge | Canonical | LXD | Critical | 9.9 | 2026-08-12 19:25:24 | Deep Dive |
| CVE-2026-62420 🧪 | Cross-project cluster migration bypasses project restrictions via cluster notification flag | Canonical | LXD | Critical | 9.9 | 2026-08-12 19:12:28 | Deep Dive |
| CVE-2026-19656 | ScadaLTS Authenticated Remote Code Execution | SCADA-LTS | ScadaLTS | Critical | 9.9 | 2026-08-12 19:10:11 | Deep Dive |
| CVE-2026-73407 🧪 | Budibase: Unauthenticated REST Datasource Credential Theft via Cross-Origin Auth Leak (bypass of CVE-2026-48152)) | Budibase | budibase | Critical | 9.0 | 2026-08-12 19:09:56 | Deep Dive |
| CVE-2026-63300 🧪 | Cross-project instance move bypasses all project restrictions allowing host command execution | Canonical | LXD | Critical | 9.9 | 2026-08-12 19:09:04 | Deep Dive |
| CVE-2026-73268 | Cluster-curator-controller: cluster-curator-controller: spec.install.overridejob allows arbitrary job spec injection | Red Hat | multicluster engine for Kubernetes 2.1 | Critical | 9.9 | 2026-08-12 19:05:12 | Deep Dive |
| CVE-2026-73269 | Cluster-curator-controller: cluster-curator-controller: tenant-controllable trigger creates clusterrolebinding granting cluster-wide secrets access to namespace-local sa | Red Hat | multicluster engine for Kubernetes 2.1 | Critical | 9.9 | 2026-08-12 19:05:05 | Deep Dive |
| CVE-2026-73300 🧪 | Budibase: SQL Injection via `multipleStatements: true` | Budibase | budibase | Critical | 9.6 | 2026-08-12 18:05:51 | Deep Dive |
| CVE-2026-17218 | IBM i is Affected By Remote Code Execution Vulnerability in Line Printer Daemon [] | IBM | i | Critical | 9.8 | 2026-08-12 17:35:04 | Deep Dive |
| CVE-2026-73299 🧪 | Prompty: Server-Side Template Injection to Remote Code Execution in the @prompty/core Nunjucks Renderer | microsoft | prompty | Critical | 10.0 | 2026-08-12 17:31:39 | Deep Dive |
| CVE-2026-16956 | IBM Db2 Mirror for i is vulnerable to OS command injection [] | IBM | Db2 Mirror for i | Critical | 9.8 | 2026-08-12 17:30:23 | Deep Dive |
| CVE-2026-16860 | IBM i is Affected By Remote Code Execution Vulnerability [] | IBM | i | Critical | 9.9 | 2026-08-12 17:30:00 | Deep Dive |
| CVE-2026-17276 | IBM i is Affected By Multiple Vulnerabilities in Navigator for i | IBM | i | Critical | 9.6 | 2026-08-12 17:20:24 | Deep Dive |
| CVE-2026-73296 🧪 | Microsoft UFO: Unauthenticated Mobile MCP access allows remote Android device control and screen disclosure | microsoft | UFO | Critical | 9.4 | 2026-08-12 16:29:03 | Deep Dive |
| CVE-2026-73294 🧪 | Semaphore U: OS Command Injection | semaphoreui | semaphore | Critical | 9.9 | 2026-08-12 15:55:01 | Deep Dive |
| CVE-2026-64639 | WebPros Plesk 权限许可和访问控制问题漏洞 | WebPros | Plesk | Critical | 9.3 | 2026-08-12 15:31:46 | Deep Dive |