New Vulnerabilities CVE-2026-18438 and CVE-2026-74767 Disclosed

Two new vulnerabilities, CVE-2026-18438 and CVE-2026-74767, were published on August 15, 2026. Both vulnerabilities are classified as remotely exploitable, affecting systems bound to the network stack. CVE-2026-18438 allows exploitation without user interaction, while CVE-2026-74767 requires no specific circumvention. Attackers can exploit these vulnerabilities with low privileges, potentially impacting system availability. The vulnerabilities do not affect confidentiality or integrity within the vulnerable systems. Organizations are advised to assess their systems for these vulnerabilities and apply necessary patches.

Key Points: • CVE-2026-18438 and CVE-2026-74767 are remotely exploitable vulnerabilities. • Both vulnerabilities allow exploitation without user interaction and require low privileges. • CVE-2026-74767 results in a total loss of availability for the affected systems.