Week 32, 2026

Severity mix (104 articles)

• CRITICAL 6
• HIGH 49
• MEDIUM 19
• LOW 3
• INFO 27

Top stories

1. CRITICAL

   CVE-2025-66376: APT28 Exploits Zimbra Zero-Click for Espionage

   Aug 8, 2026

2. CRITICAL

   Metabase Zero-Day Exploited: Unauthenticated Admin Access

   Aug 8, 2026

3. CRITICAL

   CVE-2026-8037: Progress LoadMaster Command Injection RCE

   Aug 8, 2026

4. CRITICAL

   Metabase SQLi Zero-Day Exploited: Data Theft Attacks Confirmed

   Aug 8, 2026

5. CRITICAL

   CISA Warns: Actively Exploited Langflow, N-central, and Tomcat Vulnerabilities

   Aug 5, 2026

6. CRITICAL

   CVE-2026-18556: N-able N-central Authentication Bypass Actively Exploited

   Aug 4, 2026

7. HIGH

   Chrome 151 Update Patches 41 Critical, High-Severity Flaws

   Aug 9, 2026

8. HIGH

   UNC6671 Targets Financial Sector via Vishing and AiTM Phishing

   Aug 9, 2026

9. HIGH

   AI Browsers Face 'PleaseFix' Zero-Click Agent Hijacking

   Aug 9, 2026

10. HIGH

    Microsoft & Apple Patch Critical RCEs and Auth Bypass Flaws

    Aug 9, 2026

+ 94 more in the archive.

CVEs tracked this week (20)

• CVE-2025-21079
• CVE-2025-36934
• CVE-2025-40947
• CVE-2025-40948
• CVE-2025-40949
• CVE-2025-54957
• CVE-2025-58486
• CVE-2025-58487
• CVE-2025-66376
• CVE-2026-18556
• CVE-2026-18577
• CVE-2026-34486
• CVE-2026-56181
• CVE-2026-58047
• CVE-2026-58048
• CVE-2026-63913
• CVE-2026-64561
• CVE-2026-64638
• CVE-2026-8037
• CVE-2026-9198