7 vulnerabilities across 3 products scored HIGH or above on August 14, 2026.

  • 🟠 HIGH: 7

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-17083 (ibm/i) — F1: exploitable → functional, AAS: 10.9 → 12.9 (HIGH → CRITICAL). Originally in 2026-08-12 bulletin.
  • [UPGRADED] CVE-2026-72886 (dokploy/dokploy) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-72882 (dokploy/dokploy) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-72901 (dokploy/dokploy) — F1: exploitable → functional, AAS: 10.1 → 12.1 (HIGH → CRITICAL). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-72737 (dokploy/dokploy) — F1: exploitable → functional, AAS: 9.7 → 11.7 (HIGH → HIGH). Originally in 2026-08-10 bulletin.
  • [UPGRADED] CVE-2026-71558 (apache/fory) — F1: exploitable → functional, AAS: 10.9 → 12.9 (HIGH → CRITICAL). Originally in 2026-08-07 bulletin.
  • [UPGRADED] CVE-2026-62873 (microsoft/microsoft_365_admin_center) — F1: theoretical → poc, AAS: 9.1 → 11.6 (HIGH → HIGH). Originally in 2026-08-07 bulletin.

🟠 [HIGH] getgrav/grav

5 CVEs | CVSS 4.0: 9.3 | AAS 9.9

  • cpe:2.3:a:getgrav:grav:*:*:*:*:*:*:*:*

You’ve hit your session limit · resets 10:10am (America/Toronto)

Vendor Advisory

🟠 [HIGH] budibase/server

1 CVE | CVSS 4.0: 8.3 | AAS 9.5

  • cpe:2.3:a:budibase:server:*:*:*:*:*:*:*:*

You’ve hit your session limit · resets 10:10am (America/Toronto)

Vendor Advisory

🟠 [HIGH] siyuan-note/siyuan

1 CVE | CVSS 4.0: 9.9 | AAS 9.3

  • cpe:2.3:a:siyuan-note:siyuan:*:*:*:*:*:*:*:*

You’ve hit your session limit · resets 10:10am (America/Toronto)

Vendor Advisory