| | CVE-2026-68969 |  Apache | medium | 6.5 | 0.2%
| | Apache Airflow wrote Variable values and Connection `extra` contents to the audit log in cleartext w… | Aug 12, 2026 | Aug 13, 2026 |
| | CVE-2026-68970 | Apache | medium | 6.5 | 0.2%
| | Apache Airflow's Task SDK did not mask the contents of a Variable whose JSON value is a list, so sec… | Aug 12, 2026 | Aug 14, 2026 |
| | CVE-2026-68971 | Apache | medium | 6.5 | 0.1%
| | Apache Airflow's asset materialization endpoint (`POST /api/v2/assets/{asset_id}/materialize`) and t… | Aug 12, 2026 | Aug 13, 2026 |
| | CVE-2026-73237 | Apache | medium | 6.1 | 0.2%
| | XSS vulnerability in Markdown handling in Apache Allura.
This issue affects Apache Allura: from 1.1… | Aug 12, 2026 | Aug 17, 2026 |
| | CVE-2026-73238 | Apache | medium | 6.1 | 0.2%
| | XSS vulnerability in code display in Apache Allura.
This issue affects Apache Allura: before 1.19.1… | Aug 12, 2026 | Aug 17, 2026 |
| | CVE-2026-73239 | Apache | medium | 6.5 | 0.2%
| | Insecure Direct Object Reference (IDOR) due to missing permission checks for multiple Artifact types… | Aug 12, 2026 | Aug 17, 2026 |
| | CVE-2026-73240 | Apache | critical | 9.8 | 0.4%
| | Specifically crafted inputs may lead to git argument injection in Apache Allura.
This issue affects… | Aug 12, 2026 | Aug 17, 2026 |
| | CVE-2026-68451 |  Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's s390 zcrypt module. The `cca_ecc2protkey()` function, respons… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-68452 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insuffi… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-68453 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's s390/zcrypt component. This vulnerability arises from insuffi… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-68454 | Red Hat | medium | 5.5 | — | | A flaw was found in the KVM (Kernel-based Virtual Machine) subsystem of the Linux kernel, affecting … | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-67986 | Red Hat | high | 7.8 | — | | A flaw was found in amazing_print. This vulnerability allows an attacker to inject and execute arbit… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-11970 |  Forcepoint | medium | — | 0.1%
| | This vulnerability allows a normal (non-admin) user to disable the Forcepoint One Endpoint SafariExt… | Aug 13, 2026 | Sep 3, 2026 |
| | CVE-2026-73583 | Red Hat | medium | 6.6 | — | | A flaw was found in sblim-sfcb. A local attacker with access to the system can exploit an unsafe des… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-73584 | Red Hat | medium | 6.3 | — | | A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-73585 | Red Hat | medium | 6.3 | — | | A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration s… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-66804 | Red Hat | high | 7.7 | 3.0%
| | Improper access control in Windows Cross Device Service allows an authorized attacker to elevate pri… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-56657 | Red Hat | medium | 6.5 | — | | A flaw was found in Gitea. The SSH Key Parser component is vulnerable to a denial of service. A remo… | Aug 13, 2026 | Aug 13, 2026 |
| | CVE-2026-74245 | Red Hat | medium | 5.9 | 0.3%
| | A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid f… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-74247 | Red Hat | medium | 4.2 | 0.1%
| | A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write acc… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-74244 | Red Hat | medium | 5.9 | 0.1%
| | A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unau… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-74243 | Red Hat | medium | 6.5 | 0.3%
| | A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a re… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-74241 | Red Hat | medium | 4.8 | 0.2%
| | A flaw was found in Red Hat Quay's external Lightweight Directory Access Protocol (LDAP) authenticat… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-74242 | Red Hat | medium | 5.3 | 0.3%
| | A flaw was found in Red Hat Quay. An administrator of any repository, by knowing or guessing a targe… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-74240 | Red Hat | medium | 5.4 | 0.2%
| | A flaw was found in Red Hat Quay's JWT (JSON Web Token) validation for federated robot accounts and … | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-73633 | Apache | high | 7.5 | 0.3%
| | Uncontrolled resource consumption vulnerability in the JSON plugin of Apache Struts. When an applica… | Aug 14, 2026 | Aug 18, 2026 |
| | CVE-2026-19879 | Red Hat | medium | 5.3 | 0.2%
| | A flaw was found in Undertow, an HTTP server, within its HTTP response header writing path. The `wri… | Aug 14, 2026 | Aug 14, 2026 |
| | CVE-2026-19626 |  Tenable | critical | 9.9 | 0.8%
| | A remote code execution vulnerability exists in Tenable Security Center's report generation function… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19628 | Tenable | high | 7.2 | 2.0%
| | A command injection vulnerability exists in Tenable Security Center. An authenticated administrator … | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19629 | Tenable | high | 8.1 | 0.4%
| | A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Secu… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19631 | Tenable | medium | 4.9 | 0.4%
| | A SQL injection vulnerability exists in Security Center that could allow an authenticated administra… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19635 | Tenable | high | 8.8 | 0.2%
| | A local privilege escalation vulnerability exists in Security Center. An attacker with write access … | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19636 | Tenable | medium | 5.3 | 0.3%
| | An issue was identified in which CSRF tokens were generated using a predictable method, potentially … | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19639 | Tenable | medium | 4.3 | 0.3%
| | An improper access control vulnerability exists where an authenticated non-administrative applicatio… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19679 | Tenable | high | 8.8 | 1.6%
| | An input validation vulnerability exists in Security Center's file upload handling, where insufficie… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19680 | Tenable | high | 7.1 | 0.3%
| | A SQL injection vulnerability exists in Security Center that could allow an attacker to access unaut… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19681 | Tenable | critical | 9.9 | 2.2%
| | An authenticated command injection vulnerability exists in Security Center related to file upload pr… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-19682 | Tenable | critical | 9.9 | 1.9%
| | A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker… | Aug 14, 2026 | Aug 19, 2026 |
| | CVE-2026-72970 |  Microsoft | high | 8.3 | 0.5%
| | Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to exe… | Aug 14, 2026 | Aug 18, 2026 |
| | CVE-2026-50523 | Microsoft | high | 7.8 | 0.5%
| | Improper neutralization of special elements used in a command ('command injection') in Microsoft Pow… | Aug 14, 2026 | Aug 18, 2026 |
| | CVE-2026-69414 | Microsoft | high | 7.8 | 0.6%
| | Microsoft is aware of an elevation of privilege in the Microsoft Malware Protection Engine in Micros… | Aug 14, 2026 | Sep 3, 2026 |
| | CVE-2026-73631 | Apache | medium | 4.3 | 0.2%
| | Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-req… | Aug 15, 2026 | Aug 18, 2026 |
| | CVE-2026-73632 | Apache | medium | 4.3 | 0.2%
| | Exposure of data element to wrong session vulnerability in the JSON plugin of Apache Struts. Per-res… | Aug 15, 2026 | Aug 18, 2026 |
| | CVE-2026-73634 | Apache | high | 7.5 | 0.5%
| | Uncontrolled resource consumption vulnerability in Apache Struts. An application that exposes an end… | Aug 15, 2026 | Aug 18, 2026 |
| | CVE-2026-73635 | Apache | high | 7.5 | 0.5%
| | Allocation of resources without limits or throttling vulnerability in Apache Struts. When no fixed l… | Aug 15, 2026 | Aug 18, 2026 |
| | CVE-2026-74579 | Red Hat | low | 5.5 | 0.2%
| | A flaw was found in the Linux kernel's `netfilter` subsystem. The `nft_payload_offload_mask()` funct… | Aug 17, 2026 | Aug 17, 2026 |
| | CVE-2026-19967 | Red Hat | medium | 6.3 | — | | A flaw was found in Open Asset Import Library Assimp. A remote attacker could exploit a heap-based b… | Aug 17, 2026 | Aug 17, 2026 |
| | CVE-2026-19969 | Red Hat | medium | 5.4 | — | | A flaw was found in Open Asset Import Library Assimp. A buffer overflow vulnerability exists in the … | Aug 17, 2026 | Aug 17, 2026 |
| | CVE-2026-19970 | Red Hat | medium | 6.3 | — | | A flaw was found in Open Asset Import Library Assimp. A heap-based buffer overflow vulnerability exi… | Aug 17, 2026 | Aug 17, 2026 |
| | CVE-2026-19999 | Red Hat | medium | 5.6 | 0.3%
| | A buffer overflow in Assimp's ParseBoneTrafoKeys_3DGS_MDL7 function allows a remote attacker to caus… | Aug 17, 2026 | Aug 17, 2026 |