CVE-2026-78003: Mailgun for WordPress SSRF

A CVSS 9.8 unauthenticated SSRF in Mailgun for WordPress headlines this run, plus Apache InLong and CloudStack RCE flaws.

2026-08-22 11:25 UTC

🔓 CVEs & KEV

CVE-2026-78003 — CVSS 9.8 — Mailgun for WordPress through 2.2.0 - Unauthenticated Server-Side Request Forgery ...
CVE-2026-63046 — CVSS 8.8 — Apache InLong: Agent Installer — Command Injection to RCE via Default Credent...
CVE-2026-50112 — CVSS 8.8 — Apache CloudStack: RCE and SSRF in direct download, metalink and NFS template...
CVE-2026-61400 — CVSS 8.8 — Apache CloudStack: Get and Run Diagnostics Command InjectionImproper Neutrali...

Start with the free Posture Self-Check to see where you stand against the current threat landscape.