CVEs.

Latest CVEs

1. 9.8Crit

   CVE-2026-47627 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service.

   NVNVIDIA· Aug 18, 2026

2. 9.1Crit

   CVE-2026-47606 ↗ (opens in a new tab)

   NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure.

   NVNVIDIA· Aug 18, 2026

3. 7.1High

   CVE-2026-24185 ↗ (opens in a new tab)

   NVIDIA NVOS for network switches contains a vulnerability in the secure shell (SSH) server configuration component while PKA-only mode is enabled, where an administrator could inadvertently enable an alternative authentication path. If best practices for replacing the default password as recommended by NVIDIA are not followed, this alternative authentication path might lead to unauthorized access. A successful exploit of this vulnerability might lead to escalation of privileges.

   NVNVIDIA· Aug 18, 2026

4. 8.8High

   CVE-2026-24184 ↗ (opens in a new tab)

   NVIDIA Cumulus Linux contains a vulnerability in the Link Layer Discovery Protocol (LLDP) daemon component, where an unauthenticated attacker on an adjacent network could cause buffer overflow by sending crafted LLDP frames. A successful exploit of this vulnerability might lead to code execution.

   NVNVIDIA· Aug 18, 2026

5. 7.8High

   CVE-2026-24183 ↗ (opens in a new tab)

   NVIDIA Cumulus Linux contains a vulnerability in the user management component, where an unprivileged user could use improper privilege management on the system. A successful exploit of this vulnerability might lead to escalation of privileges.

   NVNVIDIA· Aug 18, 2026

6. 7.1High

   CVE-2026-17106 ↗ (opens in a new tab)

   The tar extraction routines in moby/go-archive (Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers) do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the filesystem operation on a path that is resolved by the OS, so links introduced by the archive can be followed out of the destination directory. An attacker who controls the contents of an archive can create or overwrite files at arbitrary paths writable by the extracting process.

   DODocker· Aug 18, 2026

7. 7.5High

   CVE-2026-24301 ↗ (opens in a new tab)

   Improper neutralization of special elements used in a command ('command injection') in Microsoft Copilot allows an unauthorized attacker to disclose information over a network.

   M3Microsoft 365· Aug 18, 2026

8. 3.5Low

   CVE-2026-9693 ↗ (opens in a new tab)

   Mattermost versions 10.11.x <= 10.11.20, 11.7.x <= 11.7.5 Mattermost fails to remove thread membership records when a user is removed from or leaves a team, which allows a previously removed user who is later re-invited to the team to view private channel thread root post content and metadata via the team threads API.. Mattermost Advisory ID: MMSA-2026-00682

   MCMattermost Cloud· Aug 17, 2026

9. 3.3Low

   CVE-2026-75587 ↗ (opens in a new tab)

   Mattermost Desktop App versions <=6.2 6.2.2.0 fail to redact the pre-auth secret when generating a diagnostics report, which allows a local attacker with access to a user's diagnostics report or log files to obtain the plaintext pre-auth secret configured for a connected server via inspecting the Server Connectivity (Step-3) diagnostics output. Mattermost Advisory ID: MMSA-2026-00716

   MCMattermost Cloud· Aug 17, 2026

10. 6.5Med

    CVE-2026-9859 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to enforce PermissionManageBoardRoles on the channelId field of the batch endpoint, which allows an authenticated board editor to relink any board they can edit to an arbitrary channel via a crafted PATCH request. Mattermost Advisory ID: MMSA-2026-00686

    MCMattermost Cloud· Aug 17, 2026

11. 8.3High

    CVE-2026-9816 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate BoardMember.Scheme* fields server-side on insert and archive-import paths which allows a board editor or non-guest team member to grant board admin to arbitrary users via POST /api/v2/boards/{boardID}/members and POST /api/v2/teams/{teamID}/archive/import.. Mattermost Advisory ID: MMSA-2026-00685

    MCMattermost Cloud· Aug 17, 2026

12. 5.3Med

    CVE-2026-11817 ↗ (opens in a new tab)

    This vulnerability only affects Grafana stacks configured with multiple organizations; single-organization deployments are not impacted. In a multi-organization stack, a user who is an Org Admin of a single organization can call GET /api/access-control/users/permissions/search?actionPrefix=dashboards: and receive permission data belonging to other organizations. The disclosed data is limited to dashboard and folder identifiers (UIDs) and per-user permission/scope mappings (which user holds which access on which dashboard). Dashboard contents, panels, query results, datasource credentials, secr

    GCGrafana Cloud· Aug 17, 2026

13. 6.5Med

    CVE-2026-10080 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to validate WebSocket command field types which allows an authenticated user to crash the plugin process and deny service to all Boards users via a custom_focalboard_SUBSCRIBE_TEAM message with a non-string teamId.. Mattermost Advisory ID: MMSA-2026-00687

    MCMattermost Cloud· Aug 17, 2026

14. 7.1High

    CVE-2026-19589 ↗ (opens in a new tab)

    Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability (CVE-2026-19589) is fixed in Packer 1.16.0.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 17, 2026

15. 7.1High

    CVE-2026-19650 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could have allowed an unauthenticated user to execute mutations via GET requests due to improper request validation in GraphQL multiplex query handling.

    GIGitLab· Aug 17, 2026

16. 9.1Crit

    CVE-2026-19478 ↗ (opens in a new tab)

    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2 before 18.11.11, 19.0 before 19.0.8, 19.1 before 19.1.6, and 19.2 before 19.2.4 that under certain conditions could allow an unauthenticated user to remotely modify or delete public projects and user data via a GraphQL directive.

    GIGitLab· Aug 17, 2026

17. 4.3Med

    CVE-2026-16049 ↗ (opens in a new tab)

    Mattermost Plugins versions <=11.8 10.20.11 11.5.7.0 _The Mattermost GitLab plugin fails to verify channel permissions when processing API requests with a caller-supplied_ {{post_id}}_, and fails to validate the_ {{web_url}} _parameter against the configured GitLab instance, which allows an authenticated attacker to inject bot-authored messages containing arbitrary URLs into channels they do not have access to via the_ {{createIssue}} _and_ {{attachCommentToIssue}} _API endpoints._ Mattermost Advisory ID: MMSA-2026-00673

    MCMattermost Cloud· Aug 17, 2026

18. 6.3Med

    CVE-2026-16048 ↗ (opens in a new tab)

    Mattermost versions 11.8.x <= 11.8.2, 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to restrict channel member role assignment to channel-scoped roles which allows a channel administrator to gain additional channel permissions via the channel member roles API.. Mattermost Advisory ID: MMSA-2026-00697

    MCMattermost Cloud· Aug 17, 2026

19. 4.3Med

    CVE-2026-16047 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fail to validate that users have read access to a channel before linking a board to it, which allows an authenticated attacker to discover the membership of private channels on the same team via creating, patching, importing, or bulk-creating boards with an arbitrary channelId. Mattermost Advisory ID: MMSA-2026-00674

    MCMattermost Cloud· Aug 17, 2026

20. 4.3Med

    CVE-2026-16046 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to enforce run-state validation on write operations for finished playbook runs which allows a run participant to modify status, checklists, retrospective content, ownership, and participants on completed runs via REST and GraphQL API requests. Mattermost Advisory ID: MMSA-2026-00675

    MCMattermost Cloud· Aug 17, 2026

21. 4.3Med

    CVE-2026-16045 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 Mattermost failed to restrict OAuth deauthorization and personal access token management endpoints to direct user sessions, which allowed an OAuth app with a delegated user token to revoke the user's authorizations or tokens for other integrations via account-management endpoints.. Mattermost Advisory ID: MMSA-2026-00704

    MCMattermost Cloud· Aug 17, 2026

22. 5.4Med

    CVE-2026-16044 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21 fail to prevent guest users from receiving Board Admin privileges during board archive import which allows a board member to escalate a guest user to Board Admin via importing a crafted .boardarchive file. Mattermost Advisory ID: MMSA-2026-00672

    MCMattermost Cloud· Aug 17, 2026

23. 4.2Med

    CVE-2026-15754 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 11.8.x <= 11.8.3 The access control policy unassign endpoint fails to re-validate that each target channel still belongs to the requesting admin's team, which allows an authenticated team administrator to remove ABAC (attribute-based access control) policy assignments from channels outside their team via the policy unassign API after a channel has been moved to another team.. Mattermost Advisory ID: MMSA-2026-00718

    MCMattermost Cloud· Aug 17, 2026

24. 6.3Med

    CVE-2026-10527 ↗ (opens in a new tab)

    Mattermost versions 11.7.x <= 11.7.6, 10.11.x <= 10.11.21, 11.8.x <= 11.8.3 fails to reconcile SchemeAdmin flags with a user's current role which allows a user demoted to System Guest to retain Board Admin privileges and perform admin-only operations via the Boards REST API or UI.. Mattermost Advisory ID: MMSA-2026-00691

    MCMattermost Cloud· Aug 17, 2026

25. 7.2High

    CVE-2026-16139 ↗ (opens in a new tab)

    In Progress ShareFile Storage Zones Controller versions <= 5.12.5 and <= 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote code execution in v5 versions. Remote code execution is not confirmed on v6 versions.

    SHShareFile· Aug 17, 2026

26. 8.0High

    CVE-2026-16138 ↗ (opens in a new tab)

    In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host.

    SHShareFile· Aug 17, 2026

27. 7.2High

    CVE-2026-16137 ↗ (opens in a new tab)

    In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result in the execution of attacker-supplied code.

    SHShareFile· Aug 17, 2026

28. 9.4Crit

    CVE-2026-19682 ↗ (opens in a new tab)

    A command injection vulnerability exists in Security Center where a remote, unauthenticated attacker could exploit this issue to execute arbitrary commands on the underlying operating system with the privileges of the service account.

    TETenable· Aug 14, 2026

29. 9.4Crit

    CVE-2026-19681 ↗ (opens in a new tab)

    An authenticated command injection vulnerability exists in Security Center related to file upload processing. An attacker could exploit this issue by uploading a specially crafted file, potentially resulting in arbitrary command execution on the underlying operating system.

    TETenable· Aug 14, 2026

30. 7.1High

    CVE-2026-19680 ↗ (opens in a new tab)

    A SQL injection vulnerability exists in Security Center that could allow an attacker to access unauthorized data from the application's database.

    TETenable· Aug 14, 2026

31. 8.7High

    CVE-2026-19679 ↗ (opens in a new tab)

    An input validation vulnerability exists in Security Center's file upload handling, where insufficient sanitization of uploaded filenames could contribute to a downstream command injection issue.

    TETenable· Aug 14, 2026

32. 5.3Med

    CVE-2026-19639 ↗ (opens in a new tab)

    An improper access control vulnerability exists where an authenticated non-administrative application user could potentially view settings outside of their assigned scope.

    TETenable· Aug 14, 2026

33. 6.0Med

    CVE-2026-19636 ↗ (opens in a new tab)

    An issue was identified in which CSRF tokens were generated using a predictable method, potentially reducing their effectiveness as a security control. This has been addressed by improving the randomness and entropy of token generation.

    TETenable· Aug 14, 2026

34. 8.5High

    CVE-2026-19635 ↗ (opens in a new tab)

    A local privilege escalation vulnerability exists in Security Center. An attacker with write access to a specific configuration file could achieve arbitrary code execution with elevated privileges, without requiring further user or victim interaction.

    TETenable· Aug 14, 2026

35. 6.9Med

    CVE-2026-19631 ↗ (opens in a new tab)

    A SQL injection vulnerability exists in Security Center that could allow an authenticated administrator to execute arbitrary SQL queries, potentially resulting in unauthorized access to sensitive data, including credentials.

    TETenable· Aug 14, 2026

36. 8.6High

    CVE-2026-19629 ↗ (opens in a new tab)

    A privilege escalation vulnerability exists in Tenable Security Center that allows a user with "Security Manager" role and "manage user" permission on a single group to modify users belonging to other groups. This bypasses the intended access control restrictions and enables unauthorized cross-group user management.

    TETenable· Aug 14, 2026

37. 8.6High

    CVE-2026-19628 ↗ (opens in a new tab)

    A command injection vulnerability exists in Tenable Security Center. An authenticated administrator could modify application configuration values to achieve arbitrary command execution on the underlying operating system when specific backend operations are triggered.

    TETenable· Aug 14, 2026

38. 9.4Crit

    CVE-2026-19626 ↗ (opens in a new tab)

    A remote code execution vulnerability exists in Tenable Security Center's report generation functionality. An authenticated, non-administrative user could exploit this issue by supplying specially crafted input that is later processed unsafely during server-side report rendering, resulting in arbitrary code execution with the privileges of the service account.

    TETenable· Aug 14, 2026

39. 9.6Crit

    CVE-2026-8715 ↗ (opens in a new tab)

    Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their contents to a tenant-controlled endpoint, potentially leading to privilege escalation within the cluster. This vulnerability (CVE-2026-8715) is fixed in Vault Secrets Operator 1.5.0.

    HAHashiCorp (HCP / Terraform Cloud)· Aug 13, 2026

40. 6.5Med

    CVE-2026-72687 ↗ (opens in a new tab)

    A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single small request containing a forged opaque identifier. Elasticsearch decodes and deserializes the identifier before confirming that it was legitimately issued by the cluster, and a size value carried inside the identifier drives an allocation that is neither capped nor accounted for by the available memory-usage controls. The resulting out-of-memory condition is fatal and terminates the affected node process, resulting in a denial of service.

    ECElastic Cloud· Aug 13, 2026

41. 6.5Med

    CVE-2026-72686 ↗ (opens in a new tab)

    A flaw in Elasticsearch allows a low-privileged authenticated user to submit a single request containing a crafted user-supplied input. A specific internal component validates the input using a recursive routine and applies no bound to the length of the value being validated, so the validation causes the thread to exhaust its stack. The resulting fatal error is not handled by the surrounding execution paths and terminates the affected node process, producing a denial of service.

    ECElastic Cloud· Aug 13, 2026

42. 4.3Med

    CVE-2026-72685 ↗ (opens in a new tab)

    A flaw in Elasticsearch allows a low-privileged authenticated user who can index documents to submit a single small document containing a crafted user-supplied input. Processing one such document occupies a worker thread from a bounded pool for a disproportionate amount of time, degrading the availability of indexing operations on the affected node.

    ECElastic Cloud· Aug 13, 2026

43. 6.5Med

    CVE-2026-72684 ↗ (opens in a new tab)

    A flaw in Elasticsearch allows an authenticated user holding only read privileges to submit a small search request containing a crafted user-supplied input. Processing that input causes a specific internal component to allocate memory without any upper bound, and the allocation occurs outside the scope of the existing memory accounting controls that were intended to constrain it. The resulting out-of-memory condition is fatal and terminates the affected node process, causing a denial of service.

    ECElastic Cloud· Aug 13, 2026

44. 6.5Med

    CVE-2026-72683 ↗ (opens in a new tab)

    A flaw in Elasticsearch allows an authenticated user with the privileges required to invoke the simulate pipeline API endpoint (https://www.elastic.co/docs/api/doc/elasticsearch/operation/operation-ingest-simulate) to submit a request that causes a self-referential data structure to be created. When a specific internal component later processes that structure, the operation recurses without bound and raises a fatal error that is not handled by the surrounding execution path, terminating the affected node process and resulting in a denial of service.

    ECElastic Cloud· Aug 13, 2026

45. 8.8High

    CVE-2026-72681 ↗ (opens in a new tab)

    Kibana Agent Builder does not correctly verify that the requesting user holds the privileges required by a separate Kibana feature before it creates and runs a tool that invokes that feature's functionality. This allows privilege escalation and could lead to disclosure of sensitive information that the user is not authorized to read.

    ECElastic Cloud· Aug 13, 2026

46. 5.4Med

    CVE-2026-72680 ↗ (opens in a new tab)

    Kibana Agent Builder A2A JSON-RPC API endpoint derives the identifier of a stored conversation from a user-supplied input, and the ownership check on that identifier does not distinguish between a conversation that does not exist and one that exists but belongs to another user. As a result, an authenticated user holding only the Agent Builder read privilege can supply an identifier already in use by another user in the same space and cause that user's conversation to be replaced and reassigned to the requesting account. The original owner permanently loses access to the conversation and its hi

    ECElastic Cloud· Aug 13, 2026

47. 6.5Med

    CVE-2026-72679 ↗ (opens in a new tab)

    Elasticsearch does not apply its configurable input length restriction to a user-supplied pattern accepted by an intervals query. Compiling a deeply nested pattern drives unbounded recursion that exhausts the thread stack and raises a fatal error, terminating the Elasticsearch node process and causing a denial of service for that node. An authenticated user holding only read-only privileges on a single searchable index can trigger the condition with one small search request.

    ECElastic Cloud· Aug 13, 2026

48. 6.5Med

    CVE-2026-72678 ↗ (opens in a new tab)

    Elasticsearch does not validate a size value taken from a user-supplied input before that value is used to reserve memory for an internal data structure. An authenticated user holding only read privileges can submit a single small crafted request to a product API endpoint that causes the node to attempt an excessively large allocation. The resulting memory exhaustion raises a fatal error that terminates the Elasticsearch node process, causing a denial of service for the affected node and degrading cluster health. The defect is not volumetric, so a single request is sufficient regardless of the

    ECElastic Cloud· Aug 13, 2026

49. 7.3High

    CVE-2026-72677 ↗ (opens in a new tab)

    Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal (CAPEC-139). Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored as provided and is later incorporated into the request that Kibana issues when that configuration is removed.

    ECElastic Cloud· Aug 13, 2026

50. 9.1Crit

    CVE-2026-72676 ↗ (opens in a new tab)

    Improper Control of Generation of Code ('Code Injection') (CWE-94) in Fleet Server can lead to the execution of attacker-supplied script content via Code Injection (CAPEC-242). Kibana accepted an identifier for an output configuration without restricting it to safe characters. That identifier is later placed into a server-side script that Fleet Server builds as part of routine agent policy processing, so script syntax embedded in the identifier became part of the script that was executed rather than being treated as data.

    ECElastic Cloud· Aug 13, 2026