| | CVE-2026-58155 |  Apache | critical | 9.3 | 0.3%
| | Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling,… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58154 | Apache | high | 8.9 | 0.3%
| | Apache Traffic Server can write out of bounds or overflow integers while parsing MIME and HTTP heade… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58153 | Apache | high | 8.3 | 0.2%
| | Apache Traffic Server forwards HTTP/2 origin trailers to HTTP/1 clients without proper chunked frami… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58152 | Apache | medium | 5.9 | 0.2%
| | Apache Traffic Server mishandles integers while decoding HPACK/XPACK headers, corrupting memory.
Th… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58151 | Apache | high | 7.5 | 0.3%
| | Apache Traffic Server can be crashed or driven to resource exhaustion by abusive HTTP/2 framing and … | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-58150 | Apache | critical | 10.0 | 0.2%
| | Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade reque… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-57834 | Apache | critical | 10.0 | 0.3%
| | Apache Traffic Server allows request smuggling if chunked messages are malformed.
This issue affect… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-41920 | Apache | critical | 9.3 | 0.2%
| | Improper Access Control vulnerability in Apache Traffic Server.
This issue affects Apache Traffic S… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-33930 | Apache | medium | 5.9 | 0.2%
| | Apache Traffic Server copies the client Host header into a fixed-size stack buffer without a bound d… | Jul 29, 2026 | Aug 3, 2026 |
| | CVE-2026-33267 | Apache | critical | 10.0 | 0.2%
| | Improper Input Validation vulnerability in Apache Traffic Server.
This issue affects Apache Traffic… | Jul 29, 2026 | Aug 5, 2026 |
| | CVE-2026-24033 | Apache | high | 7.2 | 0.2%
| | Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') vulnerability in Ap… | Jul 29, 2026 | Aug 5, 2026 |
| | CVE-2026-22068 | Apache | high | 8.2 | 0.2%
| | Regular Expression without Anchors vulnerability in Apache Traffic Server.
This issue affects Apach… | Jul 29, 2026 | Aug 5, 2026 |
| | CVE-2026-64556 |  Red Hat | high | 7.0 | — | | A flaw was found in the Linux kernel's performance monitoring unit (PMU) subsystem. This vulnerabili… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-64557 | Red Hat | medium | 7.0 | — | | A flaw was found in the Linux kernel's Bluetooth L2CAP component. A race condition exists during the… | Jul 29, 2026 | Jul 29, 2026 |
| | CVE-2026-18107 | Red Hat | medium | 7.8 | — | | A flaw was found in CRIU's handling of restartable sequences (rseq) during checkpoint/restore. A mal… | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-62828 |  Microsoft | medium | 5.4 | 0.2%
| | Improper input validation in Microsoft Edge for Android allows an unauthorized attacker to perform t… | Jul 28, 2026 | Aug 5, 2026 |
| | CVE-2026-66713 | Apache | critical | 9.8 | 1.2%
| | Deserialization of Untrusted Data (CWE-502) in the Tribes-based clustering component
in Apache So… | Jul 28, 2026 | Aug 5, 2026 |
| | CVE-2026-66299 | Apache | medium | 5.3 | 0.5%
| | Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example.
This iss… | Jul 28, 2026 | Aug 27, 2026 |
| | CVE-2026-61487 | Apache | medium | 6.5 | 0.4%
| | Improper Authorization vulnerability in Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ… | Jul 28, 2026 | Aug 5, 2026 |
| | CVE-2026-59878 | Apache | high | 7.5 | 0.5%
| | Improper Input Validation vulnerability in Apache ActiveMQ AMQP, Apache ActiveMQ, Apache ActiveMQ Al… | Jul 28, 2026 | Aug 5, 2026 |
| | CVE-2026-49332 | Red Hat | high | 8.5 | — | | A flaw was found in openshift/oauth-proxy. The proxy sets authenticated identity headers using only … | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-58341 | Red Hat | medium | 3.5 | — | | A flaw was found in Moodle. The actions to enable and disable group messaging did not include the ne… | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-18047 | Red Hat | medium | 6.5 | — | | A flaw was found in Dogtag PKI's ACME responder where the web.xml security constraints use exact URL… | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-65624 | Red Hat | high | 7.5 | — | ✓ Fix | A flaw was found in Cowboy. An unauthenticated remote attacker can exploit this vulnerability by sen… | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-17072 | Red Hat | low | 3.3 | — | | A flaw was found in GStreamer's gst-plugins-good. A heap-based out-of-bounds read of 4 bytes can occ… | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-59248 | Red Hat | high | 7.5 | — | ✓ Fix | A flaw was found in cowlib, an HTTP parser. An unauthenticated remote attacker could exploit this vu… | Jul 28, 2026 | Jul 28, 2026 |
| | CVE-2026-12383 | Red Hat | high | 7.5 | — | | A flaw was found in the Event-Driven Ansible (EDA) server. The ExternalEventStreamViewSet uses permi… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-66391 | Apache | medium | 6.5 | 0.2%
| | Use of Insufficiently Random Values, Protection Mechanism Failure vulnerability in Apache Wicket.
T… | Jul 27, 2026 | Aug 5, 2026 |
| | CVE-2026-66390 | Apache | medium | 6.1 | 0.2%
| | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability i… | Jul 27, 2026 | Aug 5, 2026 |
| | CVE-2026-15003 | Red Hat | medium | 5.6 | — | | A flaw was found in the GNU Binutils (Binary Utilities) linker. This vulnerability, a heap-buffer-ov… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-17513 | Red Hat | low | 3.3 | — | | A flaw was found in whisper.cpp, a library for machine learning. A local attacker can exploit a vuln… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-17512 | Red Hat | low | 3.3 | — | | A flaw was found in whisper.cpp. A local attacker can exploit an out-of-bounds read vulnerability in… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-66053 | Apache | medium | 5.9 | — | | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift Python bindings… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-58662 | Apache | critical | 9.1 | — | | Improper Validation of Specified Quantity in Input, Out-of-bounds Read vulnerability in Apache Thrif… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-58389 | Apache | high | 7.5 | — | | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Rust bindings.
… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-58023 | Apache | critical | 9.1 | — | | Out-of-bounds Read vulnerability in Apache Thrift c_glib bindings.
This issue affects Apache Thrift… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-55971 | Apache | critical | 9.8 | — | | Heap-based Buffer Overflow vulnerability in Apache Thrift C++ bindings.
This issue affects Apache T… | Jul 27, 2026 | Jul 28, 2026 |
| | CVE-2026-55970 | Apache | medium | 6.5 | — | | Buffer Over-read vulnerability in Apache Thrift C++ bindings.
This issue affects Apache Thrift: bef… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-55969 | Apache | high | 7.5 | — | | Integer Overflow or Wraparound vulnerability in Apache Thrift C++, c_glib, Go, netstd, Delphi and Ha… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-55968 | Apache | high | 7.5 | — | | Inefficient Algorithmic Complexity, Allocation of Resources Without Limits or Throttling vulnerabili… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-49158 | Apache | high | 7.5 | — | | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Ruby… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-48586 | Apache | high | 7.5 | — | | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++,… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-48145 | Apache | high | 7.5 | — | | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings.
… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-48144 | Apache | critical | 9.1 | — | | Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings… | Jul 27, 2026 | Jul 28, 2026 |
| | CVE-2026-45112 | Apache | high | 7.5 | — | | Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings.
… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-43871 | Apache | high | 7.5 | — | | Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Apache Thrift Python, Go, PH… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-41608 | Apache | high | 7.5 | 1.1%
| | Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift Pyth… | Jul 27, 2026 | Jul 28, 2026 |
| | CVE-2026-16554 | Red Hat | medium | 6.8 | — | | A flaw was found in the cJSON library. On 32-bit platforms, a specially crafted JSON string can caus… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-64535 | Red Hat | medium | 6.5 | — | | A use-after-free flaw was found in the Linux kernel's NVMe-over-Fabrics TCP target (nvmet-tcp) drive… | Jul 27, 2026 | Jul 27, 2026 |
| | CVE-2026-17501 | Red Hat | medium | 5.3 | — | | A flaw was found in llama.cpp. A remote attacker could exploit a vulnerability in the JSON-Schema-to… | Jul 27, 2026 | Jul 27, 2026 |