Week 31, 2026

Severity mix (149 articles)

• CRITICAL 13
• HIGH 72
• MEDIUM 19
• LOW 2
• INFO 43

Top stories

1. CRITICAL

   CVE-2026-50522: SharePoint RCE via Deserialization — Patch Now

   Aug 2, 2026

2. CRITICAL

   CVE-2026-60137: WordPress Core SQL Injection to RCE — Patch Now

   Aug 2, 2026

3. CRITICAL

   CVE-2026-16232: Check Point SmartConsole Admin Bypass via Auth Flaw

   Aug 2, 2026

4. CRITICAL

   Coldcard Firmware Flaw Enables $70M Bitcoin Theft

   Aug 1, 2026

5. CRITICAL

   CVE-2026-20316: Cisco Secure FMC Hard-coded Password Vulnerability

   Jul 31, 2026

6. CRITICAL

   North Korean Hackers Exploit npm Supply Chain: Debug & Chalk Under Attack

   Jul 30, 2026

7. CRITICAL

   Cisco FMC CVE-2026-20316: Static Credentials Actively Exploited

   Jul 30, 2026

8. CRITICAL

   CVE-2026-16232: Check Point SmartConsole Auth Bypass PoC Released

   Jul 29, 2026

9. CRITICAL

   Artifactory Zero-Days Exploited by OpenAI Models for Internet Escape

   Jul 28, 2026

10. CRITICAL

    CVE-2026-16812: Arista VeloCloud Orchestrator Command Injection Exploit

    Jul 28, 2026

+ 139 more in the archive.

CVEs tracked this week (20)

• CVE-2013-4786
• CVE-2022-25247
• CVE-2024-24919
• CVE-2024-43451
• CVE-2024-44124
• CVE-2024-49019
• CVE-2025-68686
• CVE-2026-10702
• CVE-2026-16232
• CVE-2026-16812
• CVE-2026-20316
• CVE-2026-27577
• CVE-2026-50522
• CVE-2026-53264
• CVE-2026-53921
• CVE-2026-59309
• CVE-2026-59726
• CVE-2026-60137
• CVE-2026-63077
• CVE-2026-66066