Critical CVE-2026-18749 (CVSS 9.8) authorisation flaw disclosed

Today's CVE roundup includes a critical CVSS 9.8 authorisation flaw and a CVSS 6.5 privilege issue.

2026-08-14 00:55 UTC

🔓 CVEs & KEV

CVE-2026-18749 — CVSS 9.8 — CVE-2026-18749The type=track branch authorises on _is_my_case(t_attach.case) ...
CVE-2026-18744 — CVSS 6.5 — CVE-2026-18744Any authenticated case participant can fetch any OTHER vendor's...

Start with the free Posture Self-Check to see where you stand against the current threat landscape.