1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
  1. Guard
  2. Security
  3. CVEs
HOL Guard

Public security guidance for teams protecting AI harnesses, MCP servers, skills, prompts, and local tool execution.

Install Guard

AI Security

  • Prompt injection
  • MCP security
  • Supply chain

Resources

  • Trust packet
  • Harness setup
  • Redacted warnings
  • Safe labs

Product

  • Install Guard
  • Pricing
  • Open dashboard
HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

HOL LogoHOL
Overview
InstallPricingEnterpriseAffiliatesDocsOpen App
Docs
  • API Reference
  • Run in Postman
  • OpenAPI Spec
  • Standards
  • Submit ERC-8004 Contract
  • Feature Your Agent
Best Agents
  • Best ERC-8004 Agents
  • Best Virtuals Agents
  • Best MCP Servers
  • Best A2A Agents
  • Best x402 Payable
  • All Categories
Community
  • Telegram
  • X
More
  • Blog
  • GitHub
  • Privacy Policy
  • Terms of Service
Settings

Copyright © 2026 HOL DAO LLC. All rights reserved.

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 8, 2026, 3:15 PM 16,243 active 1,443 known exploited

Catalog summary

16,243

Active CVEs

Active CVEs

Search active, non-withdrawn CVEs in the HOL Guard feed, then open the matching HOL analysis.

Feed liveLast checked Aug 8, 2026, 3:15 PM 16,243 active 1,443 known exploited

Catalog summary

16,243

Active CVEs

8,391

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 801–850 of 16,243 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-70429High
    CISA ADP Vulnrichment
    CVSS 8.1
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  2. CVE-2026-70428Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  3. CVE-2026-70427Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  4. CVE-2026-70426Critical
    CISA ADP Vulnrichment
    CVSS 9.0
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  5. CVE-2026-9081High
    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
    CVSS 7.1
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  6. CVE-2026-7657Medium
    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
    CVSS 6.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  7. CVE-2026-70609Medium
    Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter
    CVSS 5.7
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  8. CVE-2026-44605Medium
    Rpm: heap buffer overflow in ndb slot table parsing
    CVSS 5.5
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  9. CVE-2026-70608High
    Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path
    CVSS 7.2
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  10. CVE-2026-17625High
    Langflow is affected by OS Command Injection in Model Context Protocol features
    CVSS 7.2
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  11. CVE-2026-10716High
    Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
    CVSS 7.5
    Directus/Directusgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2026-17623High
    Langflow is affected OS Command Injection in Model Context Protocol features
    CVSS 8.8
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  13. CVE-2026-17630High
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 7.2
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 7, 2026View HOL analysis
  14. CVE-2026-20313High
    Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
    CVSS 7.7
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  15. CVE-2026-20311Medium
    Cisco IOS XE Software Web UI Denial of Service Vulnerability
    CVSS 6.3
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  16. CVE-2026-20289Medium
    Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
    CVSS 5.7
    Cisco/Cisco RoomOS Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  17. CVE-2026-17626High
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 8.8
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  18. CVE-2026-20312High
    Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
    CVSS 8.8
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  19. CVE-2026-20310Critical
    Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
    CVSS 9.1
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  20. CVE-2026-18927Medium
    imranrisal-dev Student-Management-System Shared Upload Helper student_profile_pic.php storeProfileImage unrestricted upload
    CVSS 6.3
    imranrisal-dev/Student-Management-Systemgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  21. CVE-2026-20303Critical
    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
    CVSS 9.9
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  22. CVE-2026-20294Medium
    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
    CVSS 6.5
    Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  23. CVE-2026-20301High
    Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
    CVSS 8.6
    Cisco/Cisco IOS XE Software, Cisco/IOSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  24. CVE-2026-20288Medium
    Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
    CVSS 6.5
    Cisco/Cisco Unified Computing System (Standalone), Cisco/Cisco Unified Computing System E-Series Software (UCSE)generic
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  25. CVE-2026-8446High
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 7.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  26. CVE-2026-7646Medium
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 6.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  27. CVE-2026-9077High
    Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features
    CVSS 8.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  28. CVE-2026-70607Medium
    Electron: window.open features string controls some window options considered privileged
    CVSS 5.3
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2026-20308Medium
    Cisco IOS XE Software Web-Based Management Interface Vulnerability
    CVSS 4.3
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  30. CVE-2026-20304Critical
    Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
    CVSS 9.9
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  31. CVE-2026-20273High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  32. CVE-2026-20272Critical
    Cisco IOS XE Software Security Hardening Release
    CVSS 9.8
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  33. CVE-2026-20271High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  34. CVE-2026-20270High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  35. CVE-2026-20269High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  36. CVE-2026-20268High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  37. CVE-2026-20267Critical
    Cisco IOS XE Software Security Hardening Release
    CVSS 9.0
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  38. CVE-2026-20263High
    Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  39. CVE-2026-20200High
    Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
    CVSS 8.8
    Cisco/Cisco Unified Computing System (Standalone)generic
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  40. CVE-2026-17617High
    Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator
    CVSS 8.5
    IBM/Application Gateway Operatorgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  41. CVE-2026-20124High
    Cisco IOS XE Software SNMP Denial of Service Vulnerability
    CVSS 7.7
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  42. CVE-2026-20198Medium
    Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
    CVSS 4.8
    Cisco/Cisco Enterprise NFV Infrastructure Software, Cisco/Cisco Unified Computing System (Standalone) +1generic
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  43. CVE-2026-20028Medium
    Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability
    CVSS 5.0
    Cisco/Cisco Terminal Services Agentgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  44. CVE-2026-14587Medium
    Unathenticated connection can hold Bolt channel open
    CVSS 5.5
    neo4j/Community Edition, neo4j/Enterprise Editiongeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-70606Medium
    Electron: ProtocolResponse.url reuses the default session cache instead of the registering session
    CVSS 5.9
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2026-15656Medium
    IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
    CVSS 4.3
    IBM/Maximo Application Suitegeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  47. CVE-2026-18531Medium
    IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
    CVSS 5.3
    IBM/Maximo Application Suitegeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  48. CVE-2026-70605Medium
    Electron: HTTP redirect followed into local file loader
    CVSS 5.9
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  49. CVE-2026-10025High
    IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
    CVSS 8.2
    IBM/QRadargeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  50. CVE-2026-70604High
    Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads
    CVSS 7.4
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 17 of 325
Previous1516171819Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard

8,391

Critical + high

1,443

Known exploited

12

Ecosystems

Search and filter active CVEs

Filters & sort
Severity
Clear

Showing 801–850 of 16,243 active CVEs

Sorted by Published (newest)

Active CVE results

Select a result for the HOL analysis
IdentityRiskAffected softwarePublished
  1. CVE-2026-70429High
    CISA ADP Vulnrichment
    CVSS 8.1
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  2. CVE-2026-70428Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  3. CVE-2026-70427Medium
    CISA ADP Vulnrichment
    CVSS 4.3
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  4. CVE-2026-70426Critical
    CISA ADP Vulnrichment
    CVSS 9.0
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  5. CVE-2026-9081High
    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
    CVSS 7.1
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  6. CVE-2026-7657Medium
    Langflow OSS is affected by server-side request forgery in provider validation and API request functionality
    CVSS 6.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  7. CVE-2026-70609Medium
    Electron: DevTools JavaScript Injection via Unsanitized Dock State Parameter
    CVSS 5.7
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  8. CVE-2026-44605Medium
    Rpm: heap buffer overflow in ndb slot table parsing
    CVSS 5.5
    Affected software not mappedEcosystem not listed
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  9. CVE-2026-70608High
    Electron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path
    CVSS 7.2
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  10. CVE-2026-17625High
    Langflow is affected by OS Command Injection in Model Context Protocol features
    CVSS 7.2
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  11. CVE-2026-10716High
    Directus <12.1.0 - Authenticated time-based SQL injection in PostgreSQL/PostGIS collection creation
    CVSS 7.5
    Directus/Directusgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  12. CVE-2026-17623High
    Langflow is affected OS Command Injection in Model Context Protocol features
    CVSS 8.8
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  13. CVE-2026-17630High
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 7.2
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 7, 2026View HOL analysis
  14. CVE-2026-20313High
    Cisco Catalyst SD-WAN Security Hardening Release - Memory Corruption Vulnerabilities
    CVSS 7.7
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  15. CVE-2026-20311Medium
    Cisco IOS XE Software Web UI Denial of Service Vulnerability
    CVSS 6.3
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  16. CVE-2026-20289Medium
    Cisco RoomOS Logging Subsystem Information Disclosure Vulnerability
    CVSS 5.7
    Cisco/Cisco RoomOS Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  17. CVE-2026-17626High
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 8.8
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  18. CVE-2026-20312High
    Cisco Catalyst SD-WAN Security Hardening Release - Information Disclosure Vulnerabilities
    CVSS 8.8
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  19. CVE-2026-20310Critical
    Cisco SD-WAN Software Security Hardening Release - Improper Link Resolution Before File Access
    CVSS 9.1
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  20. CVE-2026-18927Medium
    imranrisal-dev Student-Management-System Shared Upload Helper student_profile_pic.php storeProfileImage unrestricted upload
    CVSS 6.3
    imranrisal-dev/Student-Management-Systemgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026View HOL analysis
  21. CVE-2026-20303Critical
    Cisco Catalyst SD-WAN Security Hardening Release - Input Validation Vulnerabilities
    CVSS 9.9
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  22. CVE-2026-20294Medium
    Cisco Catalyst SD-WAN Manager Information Disclosure Vulnerability
    CVSS 6.5
    Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  23. CVE-2026-20301High
    Cisco IOS Software and IOS XE Software Extensible Messaging Client Protocol Denial of Service Vulnerability
    CVSS 8.6
    Cisco/Cisco IOS XE Software, Cisco/IOSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  24. CVE-2026-20288Medium
    Cisco IMC Remote Code Execution Vulnerability Remote Code Execution Vulnerability
    CVSS 6.5
    Cisco/Cisco Unified Computing System (Standalone), Cisco/Cisco Unified Computing System E-Series Software (UCSE)generic
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  25. CVE-2026-8446High
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 7.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  26. CVE-2026-7646Medium
    Langflow is affected by security vulnerabilities in Model Context Protocol features
    CVSS 6.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  27. CVE-2026-9077High
    Reliance on Untrusted Inputs in a Security Decision vulnerabilities in Model Context Protocol features
    CVSS 8.5
    IBM/Langflow OSSgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  28. CVE-2026-70607Medium
    Electron: window.open features string controls some window options considered privileged
    CVSS 5.3
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  29. CVE-2026-20308Medium
    Cisco IOS XE Software Web-Based Management Interface Vulnerability
    CVSS 4.3
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  30. CVE-2026-20304Critical
    Cisco Catalyst SD-WAN Security Hardening Release - Access Control Vulnerabilities
    CVSS 9.9
    Cisco/Cisco Catalyst SD-WAN Controller, Cisco/Cisco Catalyst SD-WAN Managergeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  31. CVE-2026-20273High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  32. CVE-2026-20272Critical
    Cisco IOS XE Software Security Hardening Release
    CVSS 9.8
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  33. CVE-2026-20271High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  34. CVE-2026-20270High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  35. CVE-2026-20269High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  36. CVE-2026-20268High
    Cisco IOS XE Software Security Hardening Release
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  37. CVE-2026-20267Critical
    Cisco IOS XE Software Security Hardening Release
    CVSS 9.0
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  38. CVE-2026-20263High
    Cisco IOS XE Software Blocks Extensible Exchange Protocol Denial of Service Vulnerability
    CVSS 8.6
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  39. CVE-2026-20200High
    Cisco Integrated Management Controller Argument Injection and Remote Code Execution Vulnerability
    CVSS 8.8
    Cisco/Cisco Unified Computing System (Standalone)generic
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  40. CVE-2026-17617High
    Server-Side Request Forgery (SSRF) in IBM Application Gateway Operator
    CVSS 8.5
    IBM/Application Gateway Operatorgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  41. CVE-2026-20124High
    Cisco IOS XE Software SNMP Denial of Service Vulnerability
    CVSS 7.7
    Cisco/Cisco IOS XE Softwaregeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  42. CVE-2026-20198Medium
    Cisco Integrated Management Controller Cross-Site Scripting Vulnerability
    CVSS 4.8
    Cisco/Cisco Enterprise NFV Infrastructure Software, Cisco/Cisco Unified Computing System (Standalone) +1generic
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  43. CVE-2026-20028Medium
    Cisco Terminal Services Agent Firewall Rules Bypass Vulnerability
    CVSS 5.0
    Cisco/Cisco Terminal Services Agentgeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  44. CVE-2026-14587Medium
    Unathenticated connection can hold Bolt channel open
    CVSS 5.5
    neo4j/Community Edition, neo4j/Enterprise Editiongeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  45. CVE-2026-70606Medium
    Electron: ProtocolResponse.url reuses the default session cache instead of the registering session
    CVSS 5.9
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
  46. CVE-2026-15656Medium
    IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
    CVSS 4.3
    IBM/Maximo Application Suitegeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  47. CVE-2026-18531Medium
    IBM MAS uses axios-1.15.2, protobufjs-8.0.1 and undici-7.26 which is vulnerable to multiple CVEs, and contains vulnerabilities related to missing Secure attribute on mas-redirect-uri cookie and weak HMAC Session Secret
    CVSS 5.3
    IBM/Maximo Application Suitegeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  48. CVE-2026-70605Medium
    Electron: HTTP redirect followed into local file loader
    CVSS 5.9
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026 Fix availableView HOL analysis
  49. CVE-2026-10025High
    IBM QRadar SIEM has an XML External Entity (XXE) injection vulnerability
    CVSS 8.2
    IBM/QRadargeneric
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 6, 2026View HOL analysis
  50. CVE-2026-70604High
    Electron: Custom protocol with supportFetchAPI but not corsEnabled allows cross-origin reads
    CVSS 7.4
    electron, electron/electrongeneric · npm
    PublishedAug 5, 2026First seen at HOL Aug 5, 2026Updated Aug 5, 2026 Fix availableView HOL analysis
Page 17 of 325
Previous1516171819Next
How this catalog works

Active means a non-withdrawn CVE List record with a validated alias, English description, publication date, and source reference. Published is the CVE Program date; First seen at HOL is when this feed first indexed the record; Modified and Source checked describe later feed activity. Severity uses the reported source value when present, otherwise a valid CVSS score supplies the displayed band. Unmapped records do not imply package coverage.

Put Guard beside your supply-chain workflow.

Explore HOL Guard