Most recent vulnerabilities from the CISA CNA root

CVE-2026-81934 (cisa-cg)

Thu, 27 Aug 2026 19:40:15 +0000

Redis TLS pending-data list use-after-free

CVE-2026-79988 (Hackrate)

Thu, 27 Aug 2026 15:36:18 +0000

Authenticated RCE through Twig sandbox escape

CVE-2026-64896 (jci)

Thu, 27 Aug 2026 14:42:33 +0000

T2000 open debug port

CVE-2026-66155 (siemens)

Thu, 27 Aug 2026 11:56:48 +0000

A vulnerability has been identified in Element maps-ng V47 (All versions < V47.12.3), Element maps-ng V48 (All versions < V48.11.3), Element maps-ng V49 (All versions < V49.16.1). The si-map component does not properly neutralize user-controllable input of the points property that is used to render the tooltip label of map pins. This could allow an attacker to craft a malicious URL that, when loaded by a victim and the map pin is hovered over, executes arbitrary script code within the victim's browser session.

CVE-2026-81625 (CERTVDE)

Thu, 27 Aug 2026 09:06:44 +0000

Stack buffer overflow in Greenbone OS and openvas-scanner

CVE-2026-19398 (ASUS)

Thu, 27 Aug 2026 02:00:16 +0000

“unsupported-when-assigned.” An out-of-bounds write in the SmiFlash SMM module of ASUS FA507NU and FA507NV BIOS allows a local administrator to cause a system crash (BSOD) or BIOS corruption via a crafted software SMI (SW SMI) request with an oversized length value.Refer to the ' Security Update for ASUS FA507NV / FA507NU BIOS ' section on the ASUS Security Advisory for more information.

CVE-2026-75960 (icscert)

Wed, 26 Aug 2026 13:20:19 +0000

Insufficiently Protected Credentials in Rently Smart Home

CVE-2026-15203 (Danfoss)

Wed, 26 Aug 2026 05:36:02 +0000

Debug interfaces are accessible by default in Danfoss iC7 Automation SP, iC7 Marine and iC7 7Hybrid software

CVE-2026-75498 (cisa-cg)

Tue, 25 Aug 2026 16:37:43 +0000

Webkul QloApps SQL injection

CVE-2026-75497 (cisa-cg)

Tue, 25 Aug 2026 16:37:10 +0000

Webkul QloApps SQL injection