| | CVE-2026-48911 |  Apache | high | 7.5 | 0.2%
| | Insufficient Verification of Data Authenticity vulnerability in Apache Answer.
This issue affects A… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-48912 | Apache | medium | 6.5 | 0.2%
| | Improper Input Validation vulnerability in Apache Answer.
This issue affects Apache Answer: through… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-50749 | Apache | medium | 6.5 | 0.2%
| | Improper Authorization vulnerability in Apache Answer.
This issue affects Apache Answer: through 2.… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-60023 | Apache | high | 7.5 | 0.2%
| | Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.
This iss… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-60053 | Apache | critical | 9.1 | 0.3%
| | Insufficient Session Expiration vulnerability in Apache Answer.
This issue affects Apache Answer: t… | Aug 5, 2026 | Aug 7, 2026 |
| | CVE-2026-20028 |  Cisco | medium | 5.0 | 0.3%
| | A vulnerability in the network driver of Cisco Terminal Service (TS) Agent could allow an authentica… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20124 | Cisco | high | 7.7 | 0.3%
| | A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS XE Software … | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20198 | Cisco | medium | 4.8 | 0.2%
| | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20200 | Cisco | high | 8.8 | 5.2%
| | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem… | Aug 5, 2026 | Aug 31, 2026 |
| | CVE-2026-20263 | Cisco | high | 8.6 | 0.3%
| | A vulnerability in the Blocks Extensible Exchange Protocol (BEEP) feature of Cisco IOS XE Software c… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20267 | Cisco | critical | 9.0 | 0.2%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20268 | Cisco | high | 8.6 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20269 | Cisco | high | 8.6 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20270 | Cisco | high | 8.6 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20271 | Cisco | high | 8.6 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20272 | Cisco | critical | 9.8 | 0.4%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20273 | Cisco | high | 8.6 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE So… | Aug 5, 2026 | Aug 17, 2026 |
| | CVE-2026-20288 | Cisco | medium | 6.5 | 0.4%
| | A vulnerability in the web-based management interface of Cisco IMC could allow an authenticated, rem… | Aug 5, 2026 | Aug 31, 2026 |
| | CVE-2026-20289 | Cisco | medium | 5.7 | 0.2%
| | A vulnerability in the logging subsystem of Cisco RoomOS could allow an authenticated, local attacke… | Aug 5, 2026 | Aug 17, 2026 |
| | CVE-2026-20294 | Cisco | medium | 6.5 | 0.1%
| | A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager could allow a… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20301 | Cisco | high | 8.6 | 0.3%
| | A vulnerability in the Extensible Messaging Client Protocol (XMCP), also referred to as the External… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20303 | Cisco | critical | 9.9 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst … | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20304 | Cisco | critical | 9.9 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst … | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20308 | Cisco | medium | 4.3 | 0.3%
| | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authen… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20310 | Cisco | critical | 9.1 | 0.4%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst … | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20311 | Cisco | medium | 6.3 | 0.2%
| | A vulnerability in the web-based management interface of Cisco IOS XE Software could allow an authen… | Aug 5, 2026 | Aug 6, 2026 |
| | CVE-2026-20312 | Cisco | high | 8.8 | 0.2%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst … | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-20313 | Cisco | high | 7.7 | 0.3%
| | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Catalyst … | Aug 5, 2026 | Aug 14, 2026 |
| | CVE-2026-18839 |  Red Hat | low | 2.2 | — | | An integer underflow was found in the popt library when formatting help text for option tables that … | Aug 5, 2026 | Aug 5, 2026 |
| | CVE-2026-7867 | Red Hat | high | 7.8 | — | | A flaw was found in udisks2. A local attacker with an active console session can exploit insufficien… | Aug 6, 2026 | Aug 6, 2026 |
| | CVE-2026-18649 | Red Hat | medium | 7.5 | 0.6%
| | A flaw was found in the GStreamer gst-plugins-good package. The rtph264depay and rtph265depay RTP de… | Aug 6, 2026 | Aug 6, 2026 |
| | CVE-2026-64640 | Apache | medium | 6.5 | 0.3%
| | Apache Polaris did not consistently validate storage locations supplied during table and view regist… | Aug 6, 2026 | Aug 6, 2026 |
| | CVE-2026-54225 | Apache | high | 7.5 | — | | Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apa… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-57817 | Apache | high | 8.1 | — | | The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter … | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-57819 | Apache | high | 7.5 | — | | Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFo… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-64958 | Apache | high | 7.5 | — | | An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service … | Aug 6, 2026 | Aug 6, 2026 |
| | CVE-2026-65432 | Apache | high | 7.5 | — | | Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and e… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-66909 | Apache | critical | 9.8 | — | | Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java … | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-68480 | Red Hat | high | 8.8 | — | | An attacker executing code on affected system could inject an interrupt at a precise moment to disru… | Aug 6, 2026 | Aug 6, 2026 |
| | CVE-2026-46581 | Red Hat | high | 8.1 | 0.3%
| | In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not prope… | Aug 6, 2026 | Aug 6, 2026 |
| | CVE-2026-57818 | Apache | high | 8.1 | — | | A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code … | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-61466 | Apache | critical | 9.1 | — | | In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and st… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-63687 | Apache | critical | 9.1 | — | | Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-65583 | Apache | critical | 9.1 | — | | Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcin… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-68079 | Apache | critical | 9.8 | — | | In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an … | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-68481 | Apache | high | 7.5 | — | | In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2025-49506 | Apache | high | 7.5 | 0.4%
| | APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with re… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-32327 | Apache | critical | 9.1 | 0.5%
| | A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library co… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-34191 | Apache | critical | 9.1 | 0.4%
| | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability i… | Aug 6, 2026 | Aug 7, 2026 |
| | CVE-2026-34501 | Apache | high | 7.5 | 0.5%
| | Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.
This issu… | Aug 6, 2026 | Aug 7, 2026 |