CVE Tracker, page 8

Ebyte·8 days agocriticalCVSS 9.8

CVE-2026-77966

As of the advisory date, no patch is available. Ebyte has not confirmed a timeline. Organizations should: 1) Restrict network access to the device's web management interface to trusted users only. 2) Use network segmentation to isolate the device from untrusted networks. 3) Monitor device logs for unauthorized access or configuration changes. 4) Contact Ebyte for patch availability updates. 5) If possible, disable remote management features until a patch is applied.

Botslab·8 days agohighCVSS 8.8

CVE-2026-85496

Botslab has not responded to requests to work with CISA to mitigate these vulnerabilities. No official patch has been publicly confirmed. Users of affected firmware versions are advised to reach out to Botslab via the official website (https://www.botslab.com/pages/about-botslab) for guidance. Organizations should monitor for firmware updates, segment affected devices on networks where possible, and review access controls for dashcam deployments.

WSO2·8 days agocriticalCVSS 9.8

CVE-2026-5430

Apply the latest security patches provided by WSO2. Review and follow WSO2's JWT configuration guidelines to ensure proper signature verification. Monitor official WSO2 security advisories for updates and additional mitigation steps.

Eufy·8 days agocriticalCVSS 9.3

CVE-2026-93291

Eufy recommends upgrading firmware to version 1.6.4 or later. CISA advises minimizing network exposure for devices, ensuring they are not internet-accessible, placing them behind firewalls segregated from business networks, and using updated VPNs for remote access.

Eufy·8 days agocriticalCVSS 9.3

CVE-2026-93289

Botslab·8 days agohighCVSS 8.8

CVE-2026-87118

Botslab·8 days agohighCVSS 8.8

CVE-2026-82585

Ebyte·8 days agocriticalCVSS 9.8

CVE-2026-69658

Adobe·8 days agohigh

CVE-2026-81963

CISA and BOD 26-04 require Federal Civilian Executive Branch agencies to prioritize rapid remediation of KEV Catalog vulnerabilities on publicly exposed assets. All organizations should apply available patches, adopt risk-based vulnerability management, and check for prior compromise before patching. Vulnerabilities can be nominated for addition to the KEV Catalog via CISA's KEV Nomination Form if they meet criteria of a CVE ID, evidence of exploitation, and clear mitigation guidance.

NextGen Healthcare·8 days agohighCVSS 8.3

CVE-2026-82583

Upgrade to Mirth Connect v4.7.2 or later from the NextGen Healthcare customer portal. Minimize network exposure, isolate control system networks behind firewalls, and use updated VPNs for remote access.

Issabel·8 days agocriticalCVSS 9.8

CVE-2026-89026

No patch or specific mitigation details were provided in the source. Affected organizations should monitor official Issabel security advisories, restrict network access to the framework interface, and apply available updates when released.

Xecurify·9 days agohighCVSS 8.6

CVE-2026-61979

Update the miniOrange SAML 2.0 Single Sign On plugin to the latest patched version immediately. If updating is not immediately possible, disable the plugin to prevent exploitation, noting that this may disrupt SAML-based single sign-on functionality.

Hitachi Energy·9 days agohighCVSS 8.8

CVE-2026-43284

Disable the esp4 and esp6 kernel modules to mitigate CVE-2026-43284. Disable the rxrpc kernel module to mitigate CVE-2026-43500. Apply principle of least privilege for local users. Follow process control network hardening guidelines (physical isolation, no direct Internet connections). Monitor for vendor-supplied patches.

Red Hat·9 days agocritical

CVE-2021-23758

Organizations should prioritize rapid remediation of the listed KEV Catalog vulnerabilities, particularly on publicly exposed assets. Federal Civilian Executive Branch agencies must follow BOD 26-04 requirements, which include prioritizing patches for vulnerabilities granting total control post-exploitation and checking for prior compromise before applying updates. All organizations are encouraged to adopt risk-based vulnerability management practices, apply vendor-released security updates, and monitor for exploitation activity. Specific mitigation guidance should be obtained from the respective vendors (Red Hat, Microsoft, Citrix, etc.) for each CVE.

Hitachi Energy·9 days agohighCVSS 8.8

CVE-2026-43500

Red Hat·9 days agocritical

CVE-2015-5287

Red Hat·9 days agocritical

CVE-2015-3246

IXON·9 days agocriticalCVSS 9.6

CVE-2026-75925

Update IXON VPN Client to version 1.4.7 or later on all installed systems. As of August 5, 2026, IXON cloud rejects connections from clients below v1.4.7 at both the portal and back-end API. If the client is no longer needed, uninstall it. Refer to the IXON Trust Center Advisory at https://www.ixon.cloud/Advisories/ADV-2026-08-05.pdf for more information.

Red Hat·9 days agocritical

CVE-2026-8452

Kaltura·9 days agohigh

CVE-2026-19912

Until a patch is released, organizations using Kaltura's mwEmbed library should monitor for updates from Kaltura, restrict network access to the mwEmbedLoader.php endpoint where possible, and implement input validation and monitoring for deserialization-related anomalies.

Kaltura·9 days agohigh

CVE-2026-19913

PayRange·9 days agohighCVSS 8.8

CVE-2026-18965

CISA recommends minimizing network exposure for all control system devices and ensuring they are not accessible from the internet. Locate control system networks and remote devices behind firewalls and isolate them from business networks. Use VPNs for remote access, updated to the most current version. Perform proper impact analysis and risk assessment prior to deploying defensive measures. Contact PayRange customer support at support@payrange.com for additional information. Note: PayRange has not responded to requests to work with CISA to mitigate this vulnerability.

Unknown vendor·9 days agocritical

CVE-2024-1084

Apply vendor patches from Linux distribution maintainers immediately. Follow CISA emergency directive requirements for federal agencies. Employ compensating controls if immediate patching is not feasible. Monitor systems for indicators of compromise.

GitLab·9 days agocriticalCVSS 9.8

CVE-2023-2825

Apply the latest GitLab patches immediately. For self-hosted instances, update to the patched version as specified in the GitLab security advisory. For GitLab.com, ensure the instance is up to date with the latest platform updates. Review file access permissions and restrict access to sensitive directories as a defense-in-depth measure.

Unknown vendor·9 days agocritical

CVE-2024-1086

Siemens·9 days agohighCVSS 8.7

CVE-2026-80465

Update the Mendix SAML module to V4.2.3 or later (Mendix 10/11 compatible) or V3.6.27 or later (Mendix 9.24 compatible). Minimize network exposure by ensuring affected devices are not internet-facing. Locate control system networks behind firewalls and isolate from business networks. Use updated VPNs for remote access. Perform impact analysis and risk assessment before deploying defensive measures.

Unknown vendor·9 days agocritical

CVE-2024-1085

Tencent·9 days agohigh

CVE-2026-51990

Users of Tencent's Sogou Input Method for Windows should update the application to the latest available version immediately. It is recommended to monitor official Tencent security advisories for patch releases and further technical details. Administrators should enforce update policies and consider temporary deployment restrictions if immediate updating is not feasible. Users should remain vigilant for unusual system behavior and apply network segmentation where possible to limit potential impact.