CERT / PSIRT advisories
219
● Daily security briefing
Monday, August 3, 2026
219 CERT/PSIRT advisories and 3,988 CVEs were recorded on August 3, 2026, with 1 added to the CISA KEV catalog.
CVEs published
3988
Added to KEV
1
Known exploited
3
12 critical11 high1 unknownacross the day’s notable advisories and CVEs
Added to the KEV catalog
Exploitation observed in the wild — remediate first.
Notable advisories
Critical/high or exploited items from national CERTs and vendor PSIRTs.
- highexploitedcisco-psirtCisco Secure Firewall Management Center Software Static Credential Vulnerability
- unknownexploitedncsc-nlNCSC-2026-0275 [1.00] [M/H] Kwetsbaarheden verholpen in N-able N-central
- highexploitedcisaCISA Adds One Known Exploited Vulnerability to Catalog
- highcert-bund[NEU] [hoch] Wazuh: Mehrere Schwachstellen
- highcert-bund[NEU] [hoch] Gitea: Schwachstelle ermöglicht Offenlegung von Informationen und Codeausführung
- highcert-bund[NEU] [hoch] IBM Langflow Desktop: Mehrere Schwachstellen
- highcert-bund[NEU] [hoch] Bouncy Castle: Mehrere Schwachstellen
- highcert-bund[NEU] [hoch] Microsoft Azure Cosmos DB: Schwachstelle ermöglicht Codeausführung
- highcert-bund[NEW] [high] rsyslog: Vulnerability allows Denial of Service and potentially code execution
- highcert-bund[UPDATE] [high] MariaDB: Multiple vulnerabilities allow unspecified attack
- highcert-bund[NEU] [hoch] IBM App Connect Enterprise: Mehrere Schwachstellen
- highcert-bund[NEU] [hoch] rclone: Mehrere Schwachstellen
Notable CVEs
Highest-severity CVEs published this day from the NVD and GitHub Advisory firehose — the sharpest items behind the day’s numbers.
- criticalCVE-2026-48331CVSS 10Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not requir
- criticalCVE-2026-69085CVSS 10SiYuan before v3.7.3 contains a SQL injection vulnerability in the /api/filetree/searchDocs endpoint, where the caller-supplied keyword parameter is concatenated directly into SQL
- criticalCVE-2026-48330CVSS 10Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod
- criticalCVE-2026-69083CVSS 10SiYuan versions before v3.7.3 contain SQL injection vulnerabilities in the fullTextSearchAssetContent endpoint reachable by unauthenticated users and publish RoleReader tokens. Att
- criticalCVE-2026-69084CVSS 10SiYuan versions <= v3.7.2 expose the /api/search/searchEmbedBlock endpoint, which passes a client-supplied SQL statement verbatim to the main read-write siyuan.db handle with no si
- criticalCVE-2026-48323CVSS 10Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in
- criticalCVE-2026-48326CVSS 9.9Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability that could result in arbitrary cod
- criticalCVE-2026-18684CVSS 9.8A weakness has been identified in GL.iNet GL-MT3000 up to 4.4.5. This issue affects the function remove_profile of the file /cgi-bin/glc of the component modem.so. This manipulatio
- criticalCVE-2026-18616CVSS 9.8A vulnerability was identified in GL-iNet GL-MT3000 up to 4.4.5. The impacted element is the function server.set_peer of the file /cgi-bin/glc of the component wg-server.so Native
- criticalCVE-2026-48333CVSS 9.8Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could exploit this vulnerability to gain
- criticalCVE-2026-38447CVSS 9.8osTicket 1.18.3 generates API keys using a predictable construction based on MD5 hashing. The use of MD5, combined with predictable inputs such as the current timestamp and client
- criticalCVE-2026-18615CVSS 9.8A vulnerability was determined in GL-iNet GL-MT3000 up to 4.4.5. The affected element is the function wg-server.generate_publickey of the file /cgi-bin/glc of the component wg-serv
Highest exploitation probability
EPSS (FIRST.org) estimated probability of exploitation within 30 days, among CVEs published this day.
Where the day’s advisories came from
Curated CERT and PSIRT sources — these add up to the 219 above.
Get this briefing by email. One free message every morning after 06:00 UTC — same data, zero noise, one-click unsubscribe. Subscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.