DailyCVE

@UndercodeUpdate @UndercodeNews @DailyCve

[DailyCVE @dailycve]

🔴 Progress LoadMaster, #OS Command Injection RCE, #CVE-2026-8037 (CRITICAL) -DC-Aug2026-1482

🔗 https://t.co/C7Y4DzAJy5

[DailyCVE @dailycve]

🟠 Netty HttpContentEncoder Unbounded Queue Growth via HTTP/11 Pipelining - #CVE-2026-59899 (MEDIUM) -DC-Aug2026-1462

https://t.co/2bpgKES0cb

[DailyCVE @dailycve]

🟠 Netty (codec-http2) - Host Header Deduplication Failure in HTTP/2→HTTP/1x Translation - #CVE-2026-59900 (Medium) -DC-Aug2026-1463

https://t.co/o47fLHz6YM

[DailyCVE @dailycve]

🔴 PDFjs Code Injection Vulnerability - #CVE-2026-16633 (High) -DC-Aug2026-1464

https://t.co/Q2KxJFpOAC

[DailyCVE @dailycve]

🟠 Craft CMS, Stored XSS, GHSA-2rp4-x2j7-qmcc (Moderate) -DC-Aug2026-1465

https://t.co/CLeRaeYksi

[DailyCVE @dailycve]

🔵 node-re2 (#CVE-2026-71430) - Uncatchable Denial of Service via Stringprototypereplace -DC-Aug2026-1466

https://t.co/iLXGAg2Xjh

[DailyCVE @dailycve]

🔴 #IBM Langflow OSS, #Docker Volume-Mount Injection, #CVE-2026-17626 (High) -DC-Aug2026-1467

https://t.co/JxR4jOrGKk

[DailyCVE @dailycve]

🔴 league/commonmark, Denial of Service, #CVE-2026-30838 (High) -DC-Aug2026-1468

https://t.co/wonnOfwUbT

[DailyCVE @dailycve]

🟠 #AWS CLI (#Amazon Web Services Command Line Interface), Improper Authentication - SSH Host Key Disabled (#CVE-2026-18654) (Medium) -DC-Aug2026-1469

https://t.co/SbNKJ9mvbM

[DailyCVE @dailycve]

🟠 Craft CMS – Missing Authorization Check (#CVE-2026-14793) – Medium -DC-Aug2026-1474

https://t.co/6w72JewbEp

[DailyCVE @dailycve]

🔴 GIMP, Integer Overflow, #CVE-2026-66758 (High) -DC-Aug2026-1475

https://t.co/ncZ8wDVDgB

[DailyCVE @dailycve]

🟠 jsoup (#Java #HTML Parser), Cross-Site Scripting (XSS) via Parsing Inconsistency, #CVE-2026-71497 (Moderate) -DC-Aug2026-1476

https://t.co/hCDCVDIo11

[DailyCVE @dailycve]

🔴 ngx-extended-pdf-viewer, Arbitrary #JavaScript Execution (XSS), #CVE-2026-16633 (High) -DC-Aug2026-1477

https://t.co/qDGzGCrh33

[DailyCVE @dailycve]

🔴 Craft CMS, Authorization Bypass via Mass Assignment, GHSA-p8x7-9vfw-p7vc (High) -DC-Aug2026-1478

https://t.co/TLxyplrrQS

[DailyCVE @dailycve]

🔴 (Netty) Bzip2Decoder Infinite Loop Denial-of-Service - #CVE-2026-59901 (High) -DC-Aug2026-1479

https://t.co/MT41I7eOrM

[DailyCVE @dailycve]

🔵 Craft CMS – Arbitrary File Read via SplFileObject in Non-Sandboxed Template Contexts (PGV-265772Q / GHSA-957r-qf9p-67xw) -DC-Aug2026-1480

https://t.co/XkdDwgqtuQ

[DailyCVE @dailycve]

🟠 Ghost CMS, Server-Side Request Forgery (SSRF) via DNS Rebinding, #CVE-2026-53945 (Medium) -DC-Aug2026-1358

https://t.co/ChGC3Dqu2F

[DailyCVE @dailycve]

🔴 #IBM Langflow OSS, Path Traversal, #CVE-2026-12942 (High) -DC-Aug2026-1359

https://t.co/BB0sqpii5f

[DailyCVE @dailycve]

🟠 Devolutions Server NetBox Synchronizer Improper Access Control Vulnerability (#CVE-2026-17569) — MEDIUM -DC-Aug2026-1238

https://t.co/Run2UpTdHm

[DailyCVE @dailycve]

🔴 #Google Chrome on #Android PDF Insufficient Validation Vulnerability (#CVE-2026-17690) – High -DC-Aug2026-1239

https://t.co/3cUdqCfAGL