Research

August 2026 CVE Landscape

In August 2026, Insikt Group® identified 73 high-impact vulnerabilities that should be prioritized for remediation, 43 of which had a Very Critical Recorded Future Risk Score. This represents a 14% decrease from last month.

Read at Recorded Future Insikt Group

• Recorded Future Insikt Group (recordedfuture.com)
• CVE-2025-62593 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-72898 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-9198 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-3395 on this site · NVD · CVE.org · Vulnpedia
• CVE-2026-59800 on this site · NVD · CVE.org · Vulnpedia

Other items that share a CVE or were clustered with this one.

1. 31
   Research Insikt Group 19d ago

   September 2026 CVE Landscape

   EPSS 1.00 CVE-2026-88771CVE-2026-88772CVE-2026-35273+57 more
2. 16
   watchTowr Labs watchTowr 22d ago

   Death By A Thousand PaperCuts (PaperCut Pre-Auth RCE Chain and Patch Bypasses WT-2026-0141-0144/CVE-2026-82077/CVE-2026-82078/CVE-2026-81578)

   CVE-2026-82077CVE-2026-82078CVE-2026-81578+3 more
3. 16
   Research Check Point Research 14 Sep 2026

   14th September – Threat Intelligence Report

   CVE-2026-72898CVE-2026-85880CVE-2026-81963+4 more
4. 71
   Ivanti advisory Ivanti 8 Sep 2026

   September 2026 Patch Tuesday

   Exploited CVSS 7.0 Fix available CVE-2026-68820CVE-2026-33824CVE-2026-55040+7 more Ivanti Microsoft
5. 35
   CISA advisory CISA 31 Aug 2026

   CISA Adds Two Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2026-81578CVE-2026-82078
6. 51
   KEV NVD 28 Aug 2026

   PaperCut NG/MF contains an unsafe reflection vulnerability that allows an attacker to manipulate system configuration parameters and execute…

   KEV Fix available CVE-2026-82078 Oracle
7. 51
   KEV NVD 28 Aug 2026

   PaperCut NG/MF contains a missing authentication for critical function vulnerability which allows an unauthenticated remote attacker to modify…

   KEV Fix available CVE-2026-81578
8. 52
   CISA advisory CISA 26 Aug 2026

   CISA Adds Six Known Exploited Vulnerabilities to Catalog

   Exploited CVE-2015-3246CVE-2015-5287CVE-2019-1068+3 more Microsoft Red Hat
9. 56
   KEV CISA KEV 26 Aug 2026

   Microsoft SQL Server Remote Code Execution Vulnerability

   KEV Fix available CVE-2019-1068 Microsoft
10. 45
    KEV CISA KEV 26 Aug 2026

    Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability

    KEV Fix available CVE-2015-5287 Red Hat
11. 45
    KEV CISA KEV 26 Aug 2026

    Ajax.NET Professional Deserialization of Untrusted Data Vulnerability

    KEV Fix available CVE-2021-23758 Ajax.NET Professional
12. 62
    KEV CISA KEV 26 Aug 2026

    Linux Kernel Out-of-Bounds Write Vulnerability

    KEV Fix available CVE-2022-0995 Linux kernel
13. 51
    KEV CISA KEV 26 Aug 2026

    Red Hat Libuser Race Condition Vulnerability

    KEV Fix available CVE-2015-3246 Red Hat
14. 56
    KEV CISA KEV 18 Aug 2026

    Ray-Project Ray Code Injection Vulnerability

    KEV Fix available CVE-2025-62593 Ray-Project
15. 41
    CISA advisory CISA 17 Aug 2026

    CISA Adds One Known Exploited Vulnerability to Catalog

    Exploited CVE-2025-62593
16. 53
    CISA advisory CISA 11 Aug 2026

    CISA Adds Three Known Exploited Vulnerabilities to Catalog

    Exploited CVE-2026-20349CVE-2026-68820CVE-2026-72898 Microsoft Cisco
17. 74
    KEV NVD 10 Aug 2026

    Metabase contains a SQL Injection vulnerability that allows an unauthenticated remote attacker to inject arbitrary SQL into the Metabase application…

    KEV CVSS 10.0 Fix available CVE-2026-72898
18. 44
    Wiz Research Wiz 10 Aug 2026

    Inside the Metabase SQLi: Exploited in the Wild

    Exploited CVE-2026-72898
19. 16
    Research Insikt Group 7 Aug 2026

    July 2026 CVE Landscape

    CVE-2025-3248CVE-2008-4128CVE-2017-17215+57 more
20. 53
    CISA advisory CISA 4 Aug 2026

    CISA Adds Three Known Exploited Vulnerabilities to Catalog

    Exploited CVE-2026-9198CVE-2026-18556CVE-2026-34486 Apache Software Foundation N-able