All findings

CVE-2026-75143 + 50 more high

AISLE publishes a second 51-CVE August wave

AISLE's public registry adds 51 accepted CVEs across FFmpeg, FreeBSD, Rodauth, phpMyFAQ, Roundcube, jsoup, pac4j, Wireshark, FreeIPA, pdfio, open-iscsi, Dolibarr, and OpenSSH.

Bug class
Memory safety, denial of service, authentication, and input-validation vulnerabilities
Affected codebase
Multiple open-source projects
Credited system
AISLE
Disclosed
August 31, 2026
Attribution
Self-reported attribution
Severity
high
Source status: AISLE's public per-CVE registry exposes exact identifiers, affected projects, and upstream references. This entry is the 51-ID late-August subset absent from the August 19 Bugflation snapshot.

Summary

The late-August registry expansion contains 51 previously unindexed CVEs:

The affected-project CVE and advisory trails corroborate the vulnerabilities. AISLE supplies the autonomous-system attribution, so the campaign remains self-reported even where upstream advisories credit the AISLE research team.


References


Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.