CERT / PSIRT advisories
155
● Daily security briefing
Tuesday, August 4, 2026
155 CERT/PSIRT advisories and 2,045 CVEs were recorded on August 4, 2026, with 3 added to the CISA KEV catalog.
CVEs published
2045
Added to KEV
3
Known exploited
3
15 critical7 high2 unknownacross the day’s notable advisories and CVEs
Added to the KEV catalog
Exploitation observed in the wild — remediate first.
- exploitedCVE-2026-9198CVE-2026-9198: IBM Langflow Code Injection Vulnerability
- exploitedCVE-2026-18556CVE-2026-18556: N-able N-central Authentication Bypass Using an Alternate Path or Channel Vulnerability
- exploitedCVE-2026-34486CVE-2026-34486: Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Notable advisories
Critical/high or exploited items from national CERTs and vendor PSIRTs.
- unknownexploitedcccsIBM security advisory (AV26-770)
- unknownexploitedcccsN-able security advisory (AV26-769) - Update 1
- highexploitedcisaCISA Adds Three Known Exploited Vulnerabilities to Catalog
- highcert-bund[NEW] [high] Google Chrome: Multiple vulnerabilities
- highcert-bund[NEU] [hoch] Linux Kernel: Mehrere Schwachstellen
- highcert-bund[UPDATE] [high] IBM App Connect Enterprise Certified Container: Multiple vulnerabilities
- criticalcert-bund[NEU] [kritisch] PJSIP (pjmedia): Mehrere Schwachstellen ermöglichen Denial of Service
- highcert-bund[NEU] [hoch] Microsoft Edge: Mehrere Schwachstellen
- highcert-bund[UPDATE] [high] Golang Go: Multiple vulnerabilities allow unspecified attack
- highcert-bund[NEU] [hoch] Zammad: Mehrere Schwachstellen
- criticalcisaAcrisure KARR BT and DR-100
- criticalcisaThermo Fisher Applied Biosystems Genetic Analyzers
Notable CVEs
Highest-severity CVEs published this day from the NVD and GitHub Advisory firehose — the sharpest items behind the day’s numbers.
- criticalCVE-2026-15721CVSS 9.8Cleartext storage of sensitive information vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows SQL Injection. This issue affec
- criticalCVE-2026-61514CVSS 9.8Puwell IP Camera firmware versions 2.x through 4.x contains an authentication bypass vulnerability that allows unauthenticated attackers to access device functions by sending proto
- criticalCVE-2026-61515CVSS 9.8Puwell IP Camera firmware versions 2.x through 4.x contains an unauthenticated command injection vulnerability that allows remote attackers to execute arbitrary operating system co
- criticalCVE-2017-20242CVSS 9.8Keysight IxChariot Endpoint before 9.5.102 contains a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or p
- criticalCVE-2026-69703CVSS 9.8Atlas-Livre contains an improper access control vulnerability in the admin controllers under Espace_admin/controleur/ that allows unauthenticated attackers to bypass session-based
- criticalCVE-2026-24254CVSS 9.8NVIDIA Dynamo for Linux contains a vulnerability in the multimodal serving topology, where an attacker could cause an out-of-bounds write. A successful exploit of this vulnerabilit
- criticalCVE-2026-49435CVSS 9.8Keysight IxChariot Endpoint and associated products contain a stack-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet and execute arbitr
- criticalCVE-2026-69098CVSS 9.8kotaemon through 0.12.0 contains an insecure deserialization vulnerability in the check_connection endpoint that allows unauthenticated attackers to instantiate arbitrary Python cl
- criticalCVE-2026-63456CVSS 9.8Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and
- criticalCVE-2026-63455CVSS 9.8Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and
- criticalCVE-2017-20241CVSS 9.8Keysight IxChariot Endpoint before 9.5.102 contains a heap-based buffer overflow. An unauthenticated remote attacker can send a specially crafted packet to crash the endpoint or po
- criticalCVE-2026-14175CVSS 9.8Unrestricted upload of file with dangerous type vulnerability in Bilin Software and Informatics Consultancy Inc. HUMANIST Digital Human Resources allows Upload a Web Shell to a Web
Highest exploitation probability
EPSS (FIRST.org) estimated probability of exploitation within 30 days, among CVEs published this day.
Where the day’s advisories came from
Curated CERT and PSIRT sources — these add up to the 155 above.
Get this briefing by email. One free message every morning after 06:00 UTC — same data, zero noise, one-click unsubscribe. Subscribe. Tracking specific products instead? Watch them from any product page and get alerted only when they ship a new advisory.