| 334944 | GitLab 17.7 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-18244) | medium |
| 334943 | GitLab 19.0 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-15423) | high |
| 334942 | GitLab 17.6 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-8667) | medium |
| 334941 | GitLab 19.2 < 19.2.2 (CVE-2026-16627) | critical |
| 334940 | GitLab 18.5 < 19.0.6 / 19.1 < 19.1.4 / 19.2 < 19.2.2 (CVE-2026-7427) | high |
| 334921 | WordPress 7.0.0 < 7.0.4 | high |
| 334690 | Metabase 0.58.x < 0.58.24 / 0.59.x < 0.59.21 / 0.60.x < 0.60.17 / 0.61.x < 0.61.11 / 0.62.x < 0.62.9 / 0.63.x < 0.63.5 / 1.58.x < 1.58.24 / 1.59.x < 1.59.21 / 1.60.x < 1.60.17 / 1.61.x < 1.61.11 / 1.62.x < 1.62.9 / 1.63.x < 1.63.5 Multiple Vulnerabilities | critical |
| 334528 | WordPress XSS2Shell 4.7.0 < 4.7.34 / 4.8.0 < 4.8.29 / 4.9.0 < 4.9.30 / 5.0.0 < 5.0.26 / 5.1.0 < 5.1.23 / 5.2.0 < 5.2.25 / 5.3.0 < 5.3.22 / 5.4.0 < 5.4.20 / 5.5.0 < 5.5.19 / 5.6.0 < 5.6.18 / 5.7.0 < 5.7.16 / 5.8.0 < 5.8.14 / 5.9.0 < 5.9.14 / 6.0.0 < 6.0.13 / 6.1.0 < 6.1.11 / 6.2.0 < 6.2.10 / 6.3.0 < 6.3.9 / 6.4.0 < 6.4.9 / 6.5.0 < 6.5.9 / 6.6.0 < 6.6.6 / 6.7.0 < 6.7.6 / 6.8.0 < 6.8.7 / 6.9.0 < 6.9.6 / 7.0.0 < 7.0.3 Login Screen XSS | high |
| 333313 | WordPress Core 'batch/v1' REST API Unauthenticated SQLi (WP2Shell) (Direct Check) | critical |
| 332686 | Jenkins plugins Multiple Vulnerabilities (2026-08-05) | critical |
| 332685 | Jenkins LTS < 2.568.2 / Jenkins weekly < 2.576 Multiple Vulnerabilities | medium |
| 331862 | Metabase 0.58.x < 0.58.15 / 0.59.x < 0.59.12 / 0.60.x < 0.60.6.3 / 0.61.x < 0.61.1.4 / 1.58.x < 1.58.15 / 1.59.x < 1.59.12 / 1.60.x < 1.60.6.3 / 1.61.x < 1.61.1.4 RCE (CVE-2026-59827) | high |
| 331861 | Metabase 0.55.0 < 0.58.15.1 / 0.59.x < 0.59.12 / 0.60.x < 0.60.7 / 0.61.x < 0.61.2 / 1.55.0 < 1.58.15.1 / 1.59.x < 1.59.12 / 1.60.x < 1.60.7 / 1.61.x < 1.61.2 RCE (CVE-2026-59826) | critical |
| 331393 | GitLab 18.4 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-4672) | medium |
| 331392 | GitLab 17.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-13113) | medium |
| 331391 | GitLab 8.8 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-14351) | medium |
| 331390 | GitLab 16.6 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-6336) | medium |
| 331389 | GitLab 11.8 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-15975) | high |
| 331388 | GitLab 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-15831) | medium |
| 331387 | GitLab 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-15077) | medium |
| 331386 | GitLab 12.8 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-14341) | medium |
| 331385 | GitLab 18.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-12436) | high |
| 331384 | GitLab 14.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-3093) | medium |
| 331383 | GitLab 10.1.0 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-6267) | medium |
| 331382 | GitLab 18.8 < 19.0.5 / 19.1 < 19.1.3 / 19.2 < 19.2.1 (CVE-2026-16553) | medium |
| 331343 | ManageEngine ADAudit Plus < Build 8606 Unauthenticated RCE | critical |
| 331334 | Atlassian Confluence 9.0.1 / 9.1.x / 9.2.x < 9.2.17 / 9.3.1 / 9.4.x / 9.5.1 / 10.0.2 / 10.1.x / 10.2.x < 10.2.7 (CONFSERVER-104334) | high |
| 331281 | PHP 8.4.x < 8.4.24 Multiple Vulnerabilities SQLI | critical |
| 331280 | PHP 8.3.x < 8.3.33 Multiple Vulnerabilities SQLI | critical |
| 331218 | PHP 8.5.x < 8.5.9 Multiple Vulnerabilities SQLI | critical |
| 331105 | MantisBT 1.3.0 < 2.28.4 RCE (GHSA-v84x-qvhg-f36r) | high |
| 331104 | MantisBT < 2.28.4 Multiple Vulnerabilities | critical |
| 331102 | PHP 8.2.x < 8.2.33 Multiple Vulnerabilities SQLI | critical |
| 330836 | Apache ActiveMQ < 5.19.9 / 6.x < 6.2.8 Multiple Vulnerabilities | medium |
| 330625 | Joomla! Extension 'iCagenda' 3.2.1 < 3.9.15 / 4.x < 4.0.8 Arbitrary Files Upload | critical |
| 330370 | Kibana 8.7.0 < 8.19.18 / 9.0.x < 9.3.7 / 9.4.x < 9.4.3 Authorization Bypass (ESA-2026-59) | high |
| 330369 | Kibana 9.4.x < 9.4.3 Multiple Vulnerabilities (ESA-2026-54 / ESA-2026-58) | medium |
| 330368 | Kibana 9.3.x < 9.3.7 / 9.4.x < 9.4.4 DoS (ESA-2026-55) | medium |
| 330367 | Kibana 8.x < 8.19.19 / 9.3.x < 9.3.8 / 9.4.x < 9.4.4 DoS (ESA-2026-63) | medium |
| 330366 | Kibana 9.3.x < 9.3.8 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-65 / ESA-2026-67) | medium |
| 330365 | Kibana 8.x < 8.19.19 / 9.0.x < 9.3.8 / 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-66 / ESA-2026-69 / ESA-2026-71 / ESA-2026-72) | medium |
| 330364 | Kibana 9.4.x < 9.4.4 Multiple Vulnerabilities (ESA-2026-70 / ESA-2026-73) | medium |
| 330086 | Atlassian Confluence 7.17.x / 7.19.x / 8.5.x / 8.9.x / 9.0.1 / 9.1.x / 9.2.x < 9.2.22 / 10.0.2 / 10.1.x / 10.2.x < 10.2.14 (CONFSERVER-104340) | high |
| 329328 | Zimbra Collaboration Server 10.1.x < 10.1.20 Multiple Vulnerabilities | high |
| 329318 | IBM Cognos Analytics 12.1.3 Race Condition (7280311) | medium |
| 329221 | Oracle Primavera P6 Enterprise Project Portfolio Management (July 2026 CPU) | high |
| 329220 | Oracle Primavera Unifier (July 2026 CPU) | medium |
| 329219 | Oracle Primavera Gateway (July 2026 CPU) | medium |
| 327666 | WordPress 7.0 < 7.0.2 | critical |
| 327419 | Mattermost Server 10.11.x < 10.11.20 / 11.6.x < 11.6.5 / 11.7.x < 11.7.2 Incorrect Authorization (MMSA-2026-00653) | medium |
