Weekly Vulnerability Report: Aug 17 – Aug 23, 2026
34 new CVEs were published, 20 of them rated critical or high. 9 were added to CISA's exploited list.
Between August 17, 2026 and August 23, 2026, 34 new vulnerabilities were published, 49% fewer than the previous week (67). 20 of them, or 59%, were rated high or critical. The busiest day was August 19, 2026, with 12 CVEs.
CISA confirmed active exploitation of 9 vulnerabilities during the week. These are listed first below because attackers are already using them. HCL Software had the most new CVEs (4), and improper neutralization of special elements in output used by a downstream component was the most common weakness type (3).
Confirmed exploited this week
- 8.8 High severity
Ray-Project Ray Code Injection Exploited
Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-bas
- 9.8 Critical severity
Microsoft Internet Key Exchange (IKE) Service Extensions Double Free Exploited
Double free in Windows IKE Extension allows an unauthorized attacker to execute code over a network.
- 9.1 Critical severity
Microsoft SharePoint Weak Authentication Exploited
Weak authentication in Microsoft Office SharePoint allows an unauthorized attacker to bypass a security feature over a network.
- 9.8 Critical severity
Broadcom VMware vCenter Path Traversal Exploited
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.
- 9.8 Critical severity
Apple macOS Improper Authentication Exploited
An authentication issue was addressed with improved state management. This issue is fixed in macOS Golden Gate 27, macOS Sequoia 15.7.9, macOS Sonoma 14.8.9, macOS Tahoe 26.6.1, macOS Tahoe 26.7. An attacker on the network may be able to authenticate to Screen
- 9.3 Critical severity
MLflow Server-Side Request Forgery Exploited
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow
- 9.8 Critical severity
TrueConf Server Missing Authentication for Critical Function Exploited
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.
- 9.0 Critical severity
TrueConf Server Code Injection Exploited
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary
- 8.9 High severity
Zimbra Collaboration Suite (ZCS) OS Command Injection Exploited
A remote code execution vulnerability exists in Zimbra Collaboration (ZCS) before 10.1.20 when the optional zimbra-snmp package is installed and SNMP notifications are enabled. Due to improper sanitization of untrusted input during SNMP notification processing
The 15 most important new vulnerabilities
- 9.8 Critical severity
Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Exploited
Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: from 14.1 through 73.32 and from 13.1 through 63.21; Gateway: from 14.1 through 73.32 and from 13.1 through 63.21.
- 7.5 High severity
Cisco BroadWorks Improper Restriction of XML External Entity Reference Exploited
A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information on an affected system. This vulnerability exists because XML entries are improperly pa
- 9.3 Critical severity
MLflow Server-Side Request Forgery Exploited
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflow
- 9.8 Critical severity
TrueConf Server Missing Authentication for Critical Function Exploited
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could execute an arbitrary script by calling an undocumented function.
- 9.0 Critical severity
TrueConf Server Code Injection Exploited
A remote unauthorized attacker with network access via port 4307/TCP to the TrueConf server versions 5.3.X to 5.3.9, 5.4.X to 5.4.9, 5.5.X to 5.5.5, and earlier could use a specially crafted script to break out of the isolated environment and execute arbitrary
- 8.8 High severity
DS8A00( R10.0 - R10.1 ): Privilege Defined With Unsafe Actions
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an authenticated user to create a user with privileged user roles due to improper privileged defined with unsafe actions.
- 7.4 High severity
DS8A00 (R10.0 - R10.1): Improper Encoding or Escaping of Output
IBM System Storage DS8A00 10.1.3.0 through 10.11.35.0 and IBM DS8900F 89.40.83.0 through 89.44.25.0 could allow an attacker to bypass security authentication due to improperly encoding of DSCLI command output to obtain sensitive information or cause a denial o
- 9.3 Critical severity
vsDesk: Authentication Bypass by Primary Weakness
An insecure deserialization vulnerability in vsDesk allows a remote attacker to gain unauthorized administrative access. By manipulating application configuration data, an attacker can force the system to authenticate against an arbitrary LDAP server and provi
- 8.6 High severity
vsDesk: Use of Potentially Dangerous Function
An OS command injection vulnerability in vsDesk allows an authenticated attacker with administrative privileges to execute arbitrary operating system commands due to insufficient input filtering. An attacker can exploit this flaw to disrupt web server operatio
- 7.7 High severity
uptrain: Improper Authentication
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the UpTrain backend creates a new default user with a static username, where the username is also used as the default API key. The UpTrain backen
- 8.1 High severity
Ship Property Management System: Improper Verification of Cryptographic Signature
Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs
- 7.6 High severity
RK3588s: Time-of-check Time-of-use (TOCTOU) Race Condition
Secure BootROM of RK3588s SoC is vulnerable to a time-of-check to time-of-use attack in case of booting from external media (SPI NOR or NAND, EMMC or SD). The code reads the header of the next-stage loader twice. The header contains hashes of the executable mo
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/new_run` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrain an
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/add_prompts` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpTrai
- 7.4 High severity
uptrain: Improper Neutralization of Special Elements in Output Used by a Downstream Component
UpTrain is an open-source platform to evaluate and improve generative AI applications. In version 0.7.1 and prior, the `/create_project` endpoint is vulnerable to remote code execution via the `checks` and `metadata` parameters. Any user that has access to UpT
Vendors with the most new CVEs
Most common weakness types
Severity breakdown
| Severity | CVEs | Share |
|---|---|---|
| Critical | 7 | 21% |
| High | 13 | 38% |
| Medium | 14 | 41% |
| Low | 0 | 0% |
| Not yet scored | 0 | 0% |
This report is compiled from NVD, CISA KEV and CWE data for CVEs published in the week shown. Counts exclude rejected records.