8 vulnerabilities across 5 products scored HIGH or above on August 24, 2026.

  • 🟠 HIGH: 8

Exploit Status Upgrades

The following CVEs from previous bulletins have been upgraded based on new exploit intelligence:

  • [UPGRADED] CVE-2026-72843 (evershopcommerce/evershop) — F1: exploitable → functional, AAS: 10.2 → 12.2 (HIGH → CRITICAL). Originally in 2026-08-20 bulletin.

🟠 [HIGH] canonical/lxd

1 CVE | CVSS 3.1: 9.9 | AAS 11.1

  • cpe:2.3:a:canonical:lxd:*:*:*:*:*:*:*:*

Failed to authenticate: OAuth session expired and could not be refreshed

Vendor Advisory

🟠 [HIGH] exceljs/exceljs

2 CVEs | CVSS 4.0: 9.3 | AAS 10.2

  • cpe:2.3:a:exceljs:exceljs:*:*:*:*:*:*:*:*

Failed to authenticate: OAuth session expired and could not be refreshed

Vendor Advisory

🟠 [HIGH] redefiningtheweb/affiliate_pro_-affiliate_program_for_woocommerce&_wordpress

1 CVE | CVSS 3.1: 9.8 | AAS 10.1

  • cpe:2.3:a:redefiningtheweb:affiliate_pro_-_affiliate_program_for_woocommerce_wordpress:*:*:*:*:*:*:*:*

Failed to authenticate: OAuth session expired and could not be refreshed

Vendor Advisory

🟠 [HIGH] gohugoio/hugo

1 CVE | CVSS 4.0: 8.3 | AAS 9.7

  • cpe:2.3:a:gohugoio:hugo:*:*:*:*:*:*:*:*

Failed to authenticate: OAuth session expired and could not be refreshed

Vendor Advisory

🟠 [HIGH] fast-uri/fast-uri

3 CVEs | CVSS 3.1: 7.5 | AAS 9.6

  • cpe:2.3:a:fast-uri:fast-uri:*:*:*:*:*:*:*:*

Failed to authenticate: OAuth session expired and could not be refreshed

Vendor Advisory