CVE-2026 list

CVE-2026 records published in September 2026

Page 10 of 15: records 9,001 to 10,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 9,001 to 10,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-28935Apple macOS denial of service7.5CISA ADP v3.10.5%2026-09-14Fix
CVE-2026-28934Apple macOS buffer overflow6.5CISA ADP v3.10.4%2026-09-14Fix
CVE-2026-28933Apple macOS use-after-free5.5CISA ADP v3.10.2%2026-09-14Fix
CVE-2026-28899Apple macOS logic flaw5.5CISA ADP v3.10.2%2026-09-14Fix
CVE-2026-28836Apple macOS personal information exposure6.1CISA ADP v3.10.2%2026-09-14Fix
CVE-2026-25832TrustedFirmware Mbed TLS incorrect resource transfer3.7CNA v3.10.3%2026-09-14Fix
CVE-2026-25687Zscaler Client Connector ZCC race condition in ZPA tunnel handler8.1CNA v3.10.4%2026-09-14Fix
CVE-2026-23793Samsung Exynos 1330 firmware out-of-bounds write3.5CNA v3.10.2%2026-09-14
CVE-2026-23792Samsung Exynos 1080 firmware origin validation error4.0CNA v3.10.1%2026-09-14
CVE-2026-23791Samsung Exynos 1280 firmware out-of-bounds write4.2CNA v3.10.1%2026-09-14
CVE-2026-23790Samsung Exynos 1280 firmware double free4.2CNA v3.10.1%2026-09-14
CVE-2026-23789Samsung Exynos 850 firmware double free7.8CNA v3.10.1%2026-09-14
CVE-2026-23788Samsung Exynos 1280 firmware heap-based buffer overflow4.2CNA v3.10.1%2026-09-14
CVE-2026-23787Samsung Exynos 1280 firmware use-after-free4.2CNA v3.10.1%2026-09-14
CVE-2026-23786Samsung Exynos 1280 firmware time-of-check time-of-use race condition2.8CNA v3.10.1%2026-09-14
CVE-2026-21391Improper Claim Validation in PingAM OIDC Provider9.5CNA v4.00.4%2026-09-14Fix
CVE-2026-20773Improper authorization in PingFederate Administrative Expression Evaluation endpoint8.5CNA v4.00.2%2026-09-14
CVE-2026-20683Apple macOS improper authentication7.1CISA ADP v3.10.2%2026-09-14Fix
CVE-2026-20353Cisco Secure Email Gateway Security Hardening Release9.8CNA v3.10.4%2026-09-14Fix
CVE-2026-19816Fedora PackageKit: Dnf5 backend ignores SIMULATE on RepoRemove7.1CNA v3.10.1%2026-09-14Fix
CVE-2026-19624Fedora NetworkManager-l2tp: Local privilege escalation via ipsec.conf injection7.8CNA v3.10.1%2026-09-14Fix
CVE-2026-19543IBM Common Licensing server-side improper input validation6.2CNA v3.10.1%2026-09-14Fix
CVE-2026-19542The GNU C Library glibc stack-based out-of-bounds write in tdelete during tree rebalancing5.6CNA v3.10.2%2026-09-14Fix
CVE-2026-19499The GNU C Library glibc buffer overflow in strfmon and strfmon_l right-justification padding7.7CNA v3.10.3%2026-09-14Fix
CVE-2026-19290IBM Sterling File Gateway is vulnerable to improper access control7.5CNA v3.10.4%2026-09-14Fix
CVE-2026-19280IBM i PASE buffer overflow5.2CNA v3.10.1%2026-09-14Fix
CVE-2026-19273IBM Sterling B2B Integrator and File Gateway dashboard authentication bypass5.4CNA v3.10.3%2026-09-14Fix
CVE-2026-19086IBM i PASE process buffer overflow3.3CNA v3.10.1%2026-09-14Fix
CVE-2026-18515IBM i Navigator for i path traversal4.3CNA v3.10.3%2026-09-14Fix
CVE-2026-18251IBM i Navigator for i vulnerability4.3CNA v3.10.1%2026-09-14Fix
CVE-2026-18151IBM i Navigator for i WebSocket handshake race condition4.2CNA v3.10.1%2026-09-14Fix
CVE-2026-18119Concrete CMS is vulnerable to stored XSS via unsanitized inline block custom style values7.0CNA v4.00.3%2026-09-14
CVE-2026-18117Concrete CMS to is vulnerable to stored XSS in Custom Page Alias Name7.3CNA v4.00.1%2026-09-14
CVE-2026-18116Concrete CMS to is vulnerable to stored XSS in Calendar Event Name7.3CNA v4.00.2%2026-09-14
CVE-2026-18069IBM i is affected by A race condition vulnerability in SQL Query Engine []6.0CNA v3.10.1%2026-09-14Fix
CVE-2026-18065IBM i Navigator for i vulnerability5.3CNA v3.10.3%2026-09-14Fix
CVE-2026-17628IBM Langflow OSS password reset endpoint improper authentication5.4CNA v3.10.3%2026-09-14Fix
CVE-2026-17467Vulnerabilities exists in IBM Cloud Pak for Data System8.2CNA v3.10.2%2026-09-14Fix
CVE-2026-17463IBM Db2 resource exhaustion6.5CNA v3.10.3%2026-09-14Fix
CVE-2026-17416IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs7.8CNA v3.10.1%2026-09-14Fix
CVE-2026-17156IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs7.8CNA v3.10.1%2026-09-14Fix
CVE-2026-17133IBM App Connect Enterprise Toolkit is vulnerable to arbitrary code execution due to multiple CVEs7.8CNA v3.10.1%2026-09-14Fix
CVE-2026-17047IBM Db2 Mirror for i is vulnerable to cross-site request forgery []5.4CNA v3.10.1%2026-09-14Fix
CVE-2026-16726Panasonic PANATERM v6 buffer overflow6.8CNA v4.00.1%2026-09-14
CVE-2026-16702IBM Db2 federated server null pointer dereference6.5CNA v3.10.3%2026-09-14Fix
CVE-2026-16673IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.4%2026-09-14Fix
CVE-2026-16466IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.9%2026-09-14Fix
CVE-2026-16435IBM WebSphere Application Server Intelligent Management authentication bypass5.9CNA v3.10.3%2026-09-14Fix
CVE-2026-16432IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software7.7CNA v3.10.3%2026-09-14Fix
CVE-2026-16428IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.6%2026-09-14Fix
CVE-2026-16338IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.9CNA v3.10.4%2026-09-14Fix
CVE-2026-16335IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.1CNA v3.10.5%2026-09-14Fix
CVE-2026-16190IBM WebSphere Application Server authorization bypass3.1CNA v3.10.2%2026-09-14Fix
CVE-2026-16189IBM WebSphere Application Server administrative log log injection4.8CNA v3.10.2%2026-09-14Fix
CVE-2026-16188IBM WebSphere Application Server administrative log log injection5.3CNA v3.10.3%2026-09-14Fix
CVE-2026-16187IBM WebSphere Application Server authentication bypass6.5CNA v3.10.3%2026-09-14Fix
CVE-2026-16186IBM WebSphere Application Server reflected cross-site scripting5.4CNA v3.10.2%2026-09-14Fix
CVE-2026-16185IBM WebSphere Application Server admin console servlet authentication bypass6.4CNA v3.10.2%2026-09-14Fix
CVE-2026-16148zephyrproject zephyr kernel panic in the it82xx2 USB device controller driver4.6CNA v3.10.2%2026-09-14Fix
CVE-2026-16147Zephyr IT82xx2 USB device controller driver use-after-free6.8CNA v3.10.2%2026-09-14Fix
CVE-2026-15955IBM Db2 JDBC and SQLJ driver path traversal7.5CNA v3.10.4%2026-09-14Fix
CVE-2026-15924Zephyr TLS client session cache use-after-free5.9CNA v3.10.3%2026-09-14Fix
CVE-2026-15923Infinite loop denial of service in Zephyr SDIO byte-I/O from a card-supplied zero max_blk_size4.6CNA v3.10.2%2026-09-14Fix
CVE-2026-15893Zephyr IPv6 neighbor discovery denial of service6.5CNA v3.10.2%2026-09-14Fix
CVE-2026-15887IBM WebSphere Application Server SOAP request processing server-side request forgery5.4CNA v3.10.2%2026-09-14Fix
CVE-2026-15814Uploading a crafted image causes excessive memory allocation in the Mattermost Server6.5CNA v3.10.2%2026-09-14Fix
CVE-2026-15634IBM WebSphere Application Server and IBM WebSphere Application Server Liberty Request Smuggling6.5CNA v3.10.3%2026-09-14Fix
CVE-2026-15600SQL injection in Alior Bank raty PrestaShop module8.6CNA v4.00.2%2026-09-14Fix
CVE-2026-15412IBM WebSphere Application Server and IBM WebSphere Application Server Liberty open redirect6.5CNA v3.10.2%2026-09-14Fix
CVE-2026-15396IBM WebSphere Application Server IBM WebSphere Application Server Liberty HTTP request smuggling6.5CNA v3.10.3%2026-09-14Fix
CVE-2026-14986Zephyr it51xxx I2C target driver out-of-bounds write6.8CNA v3.10.2%2026-09-14Fix
CVE-2026-14344Inconsistent authorization checks in Mattermost Boards endpoints4.3CNA v3.10.2%2026-09-14Fix
CVE-2026-14277IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities6.3CNA v3.10.5%2026-09-14Fix
CVE-2026-14276IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities6.3CNA v3.10.3%2026-09-14Fix
CVE-2026-14275IBM i Access Client Solutions (ACS) is affected by multiple vulnerabilities6.3CNA v3.10.3%2026-09-14Fix
CVE-2026-14259Mattermost board archive import bypasses team board creation permissions4.3CNA v3.10.2%2026-09-14Fix
CVE-2026-13417Mattermost boards plugin denial of service via unvalidated block fields.properties4.3CNA v3.10.2%2026-09-14Fix
CVE-2026-13293IBM MQ Java messaging is vulnerable to remote code execution8.8CNA v3.10.7%2026-09-14Fix
CVE-2026-13287IBM MQ Managed File Transfer is vulnerable to XML external entity injection7.1CNA v3.10.4%2026-09-14Fix
CVE-2026-13285IBM MQ Managed File Transfer is vulnerable to XML external entity injection7.1CNA v3.10.4%2026-09-14Fix
CVE-2026-13277IBM Verify Identity Access open redirect4.7CISA ADP v3.10.3%2026-09-14Fix
CVE-2026-13276IBM Verify Identity Access cross-site scripting6.1CISA ADP v3.10.2%2026-09-14Fix
CVE-2026-13275IBM MQ Managed File Transfer is vulnerable to XML external entity injection7.1CNA v3.10.3%2026-09-14Fix
CVE-2026-13272IBM Verify Identity Access missing WebSocket origin validation5.4CISA ADP v3.10.1%2026-09-14Fix
CVE-2026-13265IBM MQ Managed File Transfer REST API is vulnerable to XML external entity injection6.8CNA v3.10.2%2026-09-14Fix
CVE-2026-13260IBM Verify Identity Access denial of service7.5CISA ADP v3.10.4%2026-09-14Fix
CVE-2026-13107Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 20267.1CNA v3.10.3%2026-09-14Fix
CVE-2026-12985Mattermost DCR redirect URI allowlist bypass via improper URL component validation6.8CNA v3.10.3%2026-09-14Fix
CVE-2026-12944IBM Langflow OSS Incomplete Security Scanner Blocklist enables Network-based code execution9.6CNA v3.10.4%2026-09-14Exploit codeFix
CVE-2026-12882Mattermost Markdown autolink parsing denial of service4.3CNA v3.10.2%2026-09-14Fix
CVE-2026-12767IBM Langflow OSS URL fetches server-side request forgery6.5CNA v3.10.2%2026-09-14Fix
CVE-2026-12766IBM Langflow OSS server-side request forgery5.4CNA v3.10.2%2026-09-14Fix
CVE-2026-12765IBM Langflow OSS flow components server-side request forgery6.5CNA v3.10.2%2026-09-14Fix
CVE-2026-12763IBM Langflow is vulnerable to authentication bypass and insufficient session expiration4.2CNA v3.10.1%2026-09-14Fix
CVE-2026-12759IBM Cloud Pak for Business Automation resource exhaustion6.5CNA v3.10.2%2026-09-14Fix
CVE-2026-12758IBM Cloud Pak for Business Automation HTTP header validation missing authorization5.4CNA v3.10.2%2026-09-14Fix
CVE-2026-12756Multiple secuirty vulnerabilies addressed with IBM Business Automation Workflow August 20267.1CNA v3.10.3%2026-09-14Fix
CVE-2026-12518Local privilege escalation in the Logi Options+ updater service on Windows8.5CNA v4.00.1%2026-09-14Fix
CVE-2026-12258Inadequate access control in the Hiperdino REST API9.2CNA v4.00.4%2026-09-14
CVE-2026-11993Mattermost file extraction pool resource exhaustion4.3CNA v3.10.2%2026-09-14Fix
CVE-2026-10556Mattermost Microsoft Calendar plugin vulnerability5.3CNA v3.10.2%2026-09-14Fix
CVE-2026-10542Mattermost playbooks channel action update validation issue5.0CNA v3.10.1%2026-09-14Fix
CVE-2026-9812Mattermost missing property field ownership validation in Playbooks run property update endpoint6.5CNA v3.10.4%2026-09-14Fix
CVE-2026-8821Mattermost playbooks run owner channel membership permission bypass7.1CNA v3.10.3%2026-09-14Fix
CVE-2026-7884IBM Cognos Analytics user account management panel vulnerability5.4CNA v3.10.2%2026-09-14Fix
CVE-2026-7848SQL injection in Alior Bank raty PrestaShop module8.6CNA v4.00.4%2026-09-14Fix
CVE-2026-7208Yealink SIP-T33G race condition via Diagnostic file deletion6.0CNA v4.00.3%2026-09-14Fix
CVE-2026-5132Mattermost unbounded zlib decompression in Calls SDP WebSocket messages6.5CNA v3.10.4%2026-09-14Fix
CVE-2026-4103WSO2 API Manager Publisher and Developer Portals cross-site scripting6.4CNA v3.10.3%2026-09-14Fix
CVE-2026-90783MKVToolNix heap buffer overflow via avilib ODML Superindex integer wraparound8.5CNA v4.00.2%2026-09-13Fix
CVE-2026-90782S2OPC null pointer dereference in alloc_notification_message_items6.0CNA v4.00.6%2026-09-13Exploit code
CVE-2026-90781alsa-lib off-by-one stack buffer overflow in __snd_ctl_ascii_elem_id_parse4.8CNA v4.00.2%2026-09-13Exploit codeFix
CVE-2026-90780SIPp buffer overflow via Oversized SIP Header Content8.7CNA v4.00.9%2026-09-13
CVE-2026-90779SIPp stack buffer overflow via createAuthHeader Algorithm parameter8.7CNA v4.00.8%2026-09-13
CVE-2026-90778SIPp buffer overflow via SIP to Header Tag8.7CNA v4.00.9%2026-09-13
CVE-2026-90777ESPnet remote code execution via unsafe deserialization8.7CNA v4.00.7%2026-09-13Fix
CVE-2026-90776Nodemailer denial of service via Quadratic Address Parsing8.7CNA v4.00.7%2026-09-13Fix
CVE-2026-90775PostGIS address_standardizer out-of-bounds read via Unvalidated Rule Weight7.1CNA v4.00.6%2026-09-13
CVE-2026-90774rustypaste path traversal via filename header8.7CNA v4.00.6%2026-09-13NucleiFix
CVE-2026-90773procs Terminal escape sequence injection via command2.4CNA v4.00.1%2026-09-13
CVE-2026-90772amundsen-io amundsen-frontend Amundsen Frontend stored XSS via Description8.3CNA v4.00.4%2026-09-13
CVE-2026-90771joi and prototype pollution via messages6.3CNA v4.00.4%2026-09-13Fix
CVE-2026-90770Spug remote code execution via ping_check8.7CNA v4.01.3%2026-09-13
CVE-2026-90769lfnovo open-notebook open Notebook server-side request forgery via link-source8.3CNA v4.00.4%2026-09-13Fix
CVE-2026-90768CAPEv2 through commit 471ee4b REST API Task Endpoints Missing Ownership Check8.6CNA v4.00.4%2026-09-13
CVE-2026-90767Froxlor SSH Key injection via authorized_keys7.1CNA v4.00.4%2026-09-13Fix
CVE-2026-90679Forgejo use of a less trusted source4.3CNA v3.10.2%2026-09-13
CVE-2026-90678HAProxy improper length parameter handling7.5CNA v3.10.8%2026-09-13Fix
CVE-2026-90668UnrealIRCd resource exhaustion8.7CNA v4.00.6%2026-09-13Fix
CVE-2026-90606Totolink A3002MU boa formIpv6Setup buffer overflow9.4CNA v4.00.9%2026-09-13
CVE-2026-90605Totolink A3002MU boa formFilter buffer overflow9.4CNA v4.00.9%2026-09-13
CVE-2026-90604Totolink A3002MU Anchor Tag cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90603Anil-matcha Open-Generative-AI S3 upload upload-binary unrestricted upload6.9CNA v4.00.5%2026-09-13
CVE-2026-90602Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross-site scripting5.1CNA v4.00.4%2026-09-13
CVE-2026-90601getzep graphiti REST API main.py improper authentication6.9CNA v4.00.7%2026-09-13
CVE-2026-90600itsourcecode Sales and Inventory System inv_edit1.php SQL injection5.3CNA v4.00.3%2026-09-13
CVE-2026-90599Rizwan17 inventory-management-system process.php cross-site request forgery5.3CNA v4.00.2%2026-09-13
CVE-2026-90598jaygajera17 E-commerce-project-springBoot UserController.updateUser authorization bypass5.3CNA v4.00.4%2026-09-13
CVE-2026-90597itsourcecode Sales and Inventory System sup_edit1.php SQL injection5.3CNA v4.00.3%2026-09-13
CVE-2026-90596embedded-graphics image_raw.rs new/bytes_per_row integer overflow6.9CNA v4.00.6%2026-09-13
CVE-2026-90595wxiaoqi Spring-Cloud-Platform OnlineController.java OnlineController.getOnlineInfo authorization5.3CNA v4.00.4%2026-09-13
CVE-2026-90594wxiaoqi Spring-Cloud-Platform permission service missing authorization5.3CNA v4.00.4%2026-09-13
CVE-2026-90593embedded-graphics image_raw.rs draw_sub_image integer overflow6.9CNA v4.00.5%2026-09-13
CVE-2026-90584TooTallNate Java-WebSocket frame fragmentation handler resource exhaustion6.9CNA v4.00.7%2026-09-13
CVE-2026-90583kagisearch smallweb Query String Rendering sw.py index cross-site scripting5.3CNA v4.00.5%2026-09-13
CVE-2026-90582evanchiu serverless-todo improper resource release6.9CNA v4.00.7%2026-09-13
CVE-2026-90581cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection5.3CNA v4.00.4%2026-09-13
CVE-2026-90580FlowiseAI Flowise Evaluations endpoint index.ts axios.post server-side request forgery5.3CNA v4.00.4%2026-09-13Fix
CVE-2026-90579cheshire-cat-ai Cheshire Cat AI custom_auth_handler.py _authorize_http_key missing authentication6.9CNA v4.00.7%2026-09-13
CVE-2026-90578GPAC MP4Box list.c gf_list_count use-after-free4.8CNA v4.00.2%2026-09-13Fix
CVE-2026-90577GPAC MP4Box base_scenegraph.c gf_node_get_field heap-based overflow4.8CNA v4.00.2%2026-09-13Fix
CVE-2026-90576GPAC MP4Box base_scenegraph.c gf_node_list_add_child null pointer dereference4.8CNA v4.00.2%2026-09-13Fix
CVE-2026-90575PHPGurukul Small CRM Login Success login.php unserialize deserialization6.3CNA v4.00.5%2026-09-13
CVE-2026-90574itsourcecode Sales and Inventory System emp_transac.php add SQL injection5.3CNA v4.00.3%2026-09-13
CVE-2026-90573GPAC MP4Box vrml_tools.c gf_sg_mfurl_del null pointer dereference4.8CNA v4.00.2%2026-09-13Fix
CVE-2026-90572davenardella snap7 s7_micro_client.cpp opUpload memory corruption5.1CNA v4.00.4%2026-09-13
CVE-2026-90571Exrick xmall Order Printing order-print.jsp cross-site scripting5.3CNA v4.00.5%2026-09-13
CVE-2026-90570linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross-site scripting4.8CNA v4.00.4%2026-09-13
CVE-2026-90569linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross-site scripting4.8CNA v4.00.4%2026-09-13
CVE-2026-90568moxi624 Mogu Blog v2 blogSort endpoint info.ftl BlogSortServiceImpl.addBlogSort cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90567quequnlong shiyi-blog Search index.vue highlightKeyword cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90566Rizwan17 inventory-management-system registration handler improper authorization6.9CNA v4.00.5%2026-09-13
CVE-2026-90565Rizwan17 inventory-management-system dashboard.php access control6.9CNA v4.00.5%2026-09-13
CVE-2026-90564quequnlong shiyi-blog chat message handler cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90563maliangnansheng bbs-springboot ArticleController.java utils.toToc cross-site scripting5.1CNA v4.00.4%2026-09-13
CVE-2026-90562LangBot authentication bypass via Weak Recovery Key9.2CNA v4.00.7%2026-09-13Fix
CVE-2026-90561Strapi and stored XSS via WYSIWYG9.3CNA v4.00.4%2026-09-13Fix
CVE-2026-90529DataEase Symbolic Map symbolic-map.ts buildTooltip cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90528TDuckApp tduck-platform Form Write view index.vue cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90527quequnlong shiyi-blog Add Message API index.vue cross-site scripting5.3CNA v4.00.5%2026-09-13
CVE-2026-90526SourceCodester School Registration and Fee System save_class.php SQL injection6.9CNA v4.00.4%2026-09-13
CVE-2026-90525itsourcecode Sales and Inventory System cust_pos_trans.php SQL injection5.3CNA v4.00.3%2026-09-13
CVE-2026-90524jaychouchannel Tourism-Management-System Update endpoint missing authentication6.9CNA v4.00.7%2026-09-13
CVE-2026-90523jaychouchannel Tourism-Management-System user registration endpoint improper privilege management6.9CNA v4.00.5%2026-09-13
CVE-2026-90522jaychouchannel Tourism-Management-System password recovery weak password recovery6.9CNA v4.00.5%2026-09-13
CVE-2026-90521jaychouchannel Tourism-Management-System CRUD MenpiaodingdanController.java authorization5.3CNA v4.00.4%2026-09-13
CVE-2026-90520jaychouchannel Tourism-Management-System authorization interceptor improper authorization5.3CNA v4.00.4%2026-09-13
CVE-2026-90519PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload5.3CNA v4.00.4%2026-09-13
CVE-2026-90518PHPGurukul Bank Locker Management System sidebar.php access control5.3CNA v4.00.4%2026-09-13
CVE-2026-90517PHPGurukul Bank Locker Management System view-assign-locker.php authorization6.9CNA v4.00.6%2026-09-13
CVE-2026-90516SourceCodester School Registration and Fee System pay_report.php SQL injection6.9CNA v4.00.4%2026-09-13
CVE-2026-90515SourceCodester School Registration and Fee System delete_stud.php SQL injection6.9CNA v4.00.4%2026-09-13
CVE-2026-90514SourceCodester School Registration and Fee System save_stud.php SQL injection6.9CNA v4.00.4%2026-09-13
CVE-2026-90513simalexan api-lambda-send-email-ses API Gateway endpoint missing authentication6.9CNA v4.00.8%2026-09-13
CVE-2026-90511GongShengyue OnlineBooks listSplit BooksServlet.java SQL injection5.3CNA v4.00.3%2026-09-13
CVE-2026-90510dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key6.9CNA v4.00.5%2026-09-13
CVE-2026-90509dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials6.9CNA v4.00.5%2026-09-13
CVE-2026-90508Chengdu Qilu Technology Ludashi message dispatch handler missing authorization4.6CNA v4.00.2%2026-09-13
CVE-2026-90507vvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control5.3CNA v4.00.4%2026-09-13
CVE-2026-90506vvbbnn00 WARP-Clash-API Save Account Job race condition2.3CNA v4.00.3%2026-09-13
CVE-2026-90505vvbbnn00 WARP-Clash-API doUpdateLicenseKey race condition2.3CNA v4.00.3%2026-09-13
CVE-2026-90504vvbbnn00 WARP-Clash-API authorized missing authentication6.9CNA v4.00.7%2026-09-13
CVE-2026-90503Chengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure4.6CNA v4.00.2%2026-09-13
CVE-2026-90502stilleshan ServerStatus Stats Generation main.cpp cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90501lenve vhr HrMapper.xml HrInfoController.updateHr privileges management5.3CNA v4.00.3%2026-09-13
CVE-2026-90500lenve vhr Avatar upload userface FastDFSUtils.upload unrestricted upload5.3CNA v4.00.3%2026-09-13
CVE-2026-90499lenve vhr Password Update pass HrInfoController.updatePass improper authorization5.3CNA v4.00.4%2026-09-13
CVE-2026-90498lenve vhr vhr.sql default credentials6.9CNA v4.00.5%2026-09-13
CVE-2026-90497Fengoffice Feng Office Task Title Output add_task.php getTitle cross-site scripting5.1CNA v4.00.3%2026-09-13
CVE-2026-90496Feng Office reorder handler SQL injection5.1CNA v4.00.3%2026-09-13
CVE-2026-90495Feng Office Legacy API SQL injection6.9CNA v4.00.4%2026-09-13
CVE-2026-90494restify node-restify static.js serveStatic path traversal6.9CNA v4.00.8%2026-09-13
CVE-2026-90493Tonec Internet Download Manager Kernel driver idmwfp.sys access control9.3CNA v4.00.2%2026-09-13
CVE-2026-90492webgjc web_robot web.py controller_recover os command injection5.3CNA v4.02.4%2026-09-13
CVE-2026-90491sanjevirau gsubs Electron index.js showQuerySuccessPage code injection5.3CNA v4.00.4%2026-09-13
CVE-2026-90490lenve vhr MailReceiver deserialization5.3CNA v4.00.4%2026-09-13
CVE-2026-89080Really Simple Security WordPress plugin unauthenticated 2FA bypass via email Provider State Demotion7.5CISA ADP v3.10.3%2026-09-13Fix
CVE-2026-89050Quads Ads Manager for Google AdSense ad order payment verification vulnerability4.3CNA v3.10.1%2026-09-13Fix
CVE-2026-88995Bookit WordPress plugin unauthenticated Appointment PII disclosure via Availability check5.3CISA ADP v3.10.3%2026-09-13Fix
CVE-2026-88912rtMedia for WordPress, BuddyPress and bbPress insecure direct object reference4.2CISA ADP v3.10.2%2026-09-13Fix
CVE-2026-88802MDJM Event Management and Mobile Events Manager Unauthenticated arbitrary Post Deletion7.5CNA v3.10.4%2026-09-13Fix
CVE-2026-88793YouTube Embed - unauthenticated stored XSS via youram_server8.8CNA v3.10.5%2026-09-13
CVE-2026-88764Simple Membership WordPress plugin Membership Level escalation via PayPal Standard subsc_ref5.4CISA ADP v3.10.2%2026-09-13Fix
CVE-2026-86407User Registration and Membership WordPress plugin unauthenticated user data disclosure3.7CISA ADP v3.10.3%2026-09-13Fix
CVE-2026-86406User Registration and Membership WordPress plugin privilege escalation7.5CISA ADP v3.10.3%2026-09-13Fix
CVE-2026-85129Hoo Companion unauthenticated stored XSS via theme Settings Import8.8CNA v3.10.5%2026-09-13
CVE-2026-81648CryptoPayment Gateway - unauthenticated arbitrary file deletion and Settings Update10.0CNA v3.10.5%2026-09-13Exploit code
CVE-2026-80072User Registration and Membership WordPress plugin unauthenticated open redirect4.7CISA ADP v3.10.3%2026-09-13Fix
CVE-2026-80071User Registration and Membership WordPress plugin Author+ privilege escalation to Administrator7.2CISA ADP v3.10.5%2026-09-13Fix
CVE-2026-77773Contact Form to Chat Apps Gravity Forms entry AJAX action information disclosure5.3CISA ADP v3.10.3%2026-09-13Fix
CVE-2026-74933GenieWords - unauthenticated stored XSS and Configuration Overwrite8.8CNA v3.10.5%2026-09-13
CVE-2026-52297FFmpeg out-of-bounds read7.1NVD v3.10.1%2026-09-13Fix
CVE-2026-52296FFmpeg out-of-bounds read7.1NVD v3.10.2%2026-09-13Fix
CVE-2026-49030pathe through 2.0.3 unconditionally normalizes backslash characters to forward slashes on all platforms, including POSIX systems where backslash is a valid filename character. This causes join(), resolve(), and normalize() to interpret backslash-separated dot notation sequences as directory traversa––2026-09-13
CVE-2026-38332cdcseacave TinyEXIF out-of-bounds read2.9CNA v3.10.2%2026-09-13Fix
CVE-2026-37008CrewAI unprotected alternate path8.1CNA v3.10.2%2026-09-13
CVE-2026-36989LuxSoft LuxCal Web Calendar SQL injection5.8CNA v3.10.3%2026-09-13
CVE-2026-36453Rhymix forced browsing7.4CNA v3.10.3%2026-09-13Fix
CVE-2026-35867LB-LINK AC1900 firmware command injection3.1CNA v3.11.0%2026-09-13
CVE-2026-29812CyberPanel child domains management vulnerability4.3CNA v3.10.3%2026-09-13Fix
CVE-2026-29811CyberPanel domain alias detection vulnerability7.7CNA v3.10.3%2026-09-13Fix
CVE-2026-29810CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.4.3CNA v3.10.3%2026-09-13Fix
CVE-2026-15892Zephyr mcumgr settings management handler memory leak5.3CNA v3.10.3%2026-09-13Fix
CVE-2026-15891Null pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway7.5CNA v3.10.3%2026-09-13Fix
CVE-2026-90651Socket Firewall improper certificate validation8.1CNA v3.10.2%2026-09-12Fix
CVE-2026-90648WebAssembly wabt unchecked return value7.1CNA v4.00.2%2026-09-12Fix
CVE-2026-90647Kalkitech ASE2000 V2 Communication Test Set improper certificate validation9.1CNA v4.00.2%2026-09-12Fix
CVE-2026-90616flatpak symlink following7.4CNA v3.10.2%2026-09-12Fix
CVE-2026-90560zstd-jni out-of-bounds read via ZstdDictDecompress8.8CNA v4.00.6%2026-09-12Fix
CVE-2026-90559snappy-java out-of-bounds write via uncompress8.7CNA v4.00.6%2026-09-12
CVE-2026-90558sngrep stack buffer overflow via SIP headers9.3CNA v4.00.9%2026-09-12Fix
CVE-2026-90557Freeciv out-of-bounds read via Savegame6.9CNA v4.00.2%2026-09-12Fix
CVE-2026-90556Freeciv heap buffer overflow via worklist_load8.5CNA v4.00.2%2026-09-12Fix
CVE-2026-90555vLLM denial of service via Audio header7.1CNA v4.00.5%2026-09-12Fix
CVE-2026-90554vLLM denial of service via audio extraction7.5v3.10.2%2026-09-12Fix
CVE-2026-90553vLLM remote code execution via LlavaOnevision2 processor8.5CNA v4.00.3%2026-09-12Fix
CVE-2026-90552WWBN AVideo missing authorization via Playlists_schedules list.json.php5.3CNA v4.00.4%2026-09-12
CVE-2026-90551WWBN AVideo missing authorization via video_from_program API6.9CNA v4.00.4%2026-09-12Fix
CVE-2026-90550WWBN AVideo missing authorization via mediaSession.json.php6.9CNA v4.00.4%2026-09-12
CVE-2026-90549WWBN AVideo missing authorization via videosAndroid.json.php endpoint6.9CNA v4.00.3%2026-09-12Fix
CVE-2026-90548WWBN AVideo missing authorization in ImageGallery list.json.php6.9CNA v4.00.4%2026-09-12Fix
CVE-2026-90547WWBN AVideo missing authorization via getBookmarks.json.php6.9CNA v4.00.4%2026-09-12
CVE-2026-90546WWBN AVideo missing authorization via like.json.php5.3CNA v4.00.4%2026-09-12Fix
CVE-2026-90545WWBN AVideo missing authorization via commentAddNew.json.php5.3CNA v4.00.3%2026-09-12
CVE-2026-90544WWBN AVideo missing authorization via videoAddViewCount.json.php5.3CNA v4.00.3%2026-09-12Fix
CVE-2026-90543WWBN AVideo missing authentication via socketMessageLiveOwner.json.php6.9CNA v4.00.6%2026-09-12Fix
CVE-2026-90542WWBN AVideo missing authorization via remindMe.json.php5.3CNA v4.00.2%2026-09-12
CVE-2026-90541WWBN AVideo unauthenticated information disclosure via menus.json.php6.9CNA v4.00.4%2026-09-12Fix
CVE-2026-90540WWBN AVideo missing authorization via playListAddVideo.json.php5.3CNA v4.00.3%2026-09-12
CVE-2026-90539WWBN AVideo missing authentication via menuItems.json.php6.9CNA v4.00.4%2026-09-12Fix
CVE-2026-90538WWBN AVideo missing authorization via playlistsFromUser.json.php6.9CNA v4.00.4%2026-09-12
CVE-2026-90537WWBN AVideo Scheduler sendEmail missing authorization via Token8.8CNA v4.00.4%2026-09-12
CVE-2026-90536WWBN AVideo missing authorization via adsInfo API endpoint6.9CNA v4.00.4%2026-09-12Fix
CVE-2026-90535Flowise denial of service via text-to-speech/abort7.5v3.10.5%2026-09-12Fix
CVE-2026-90534Flowise Cross-Workspace Credential IDOR via node-load-method6.5v3.10.4%2026-09-12Fix
CVE-2026-90533Flowise broken access control via organizationuser6.5v3.10.3%2026-09-12Fix
CVE-2026-90489Xuxueli xxl-job insert cross-site scripting5.1CNA v4.00.3%2026-09-12
CVE-2026-90488Xuxueli xxl-job GlueFactory.java GroovyClassLoader.parseClass code injection5.3CNA v4.00.4%2026-09-12
CVE-2026-90487Xuxueli xxl-job JobGroupController.java privileges management5.3CNA v4.00.3%2026-09-12
CVE-2026-90486openstatusHQ openstatus resolve-custom-domain-rewrite.ts server-side request forgery5.3CNA v4.00.4%2026-09-12
CVE-2026-90485IOBit Uninstaller IOCTL Dispatch IURegistryFilter.sys sub_11838 null pointer dereference6.8CNA v4.00.2%2026-09-12
CVE-2026-90474MCPHub OAuth 2.0 authentication bypass7.6CNA v4.00.6%2026-09-12Fix
CVE-2026-90473msgpack-java integer overflow via MAP326.9CNA v4.00.4%2026-09-12
CVE-2026-90472msgpack-java stack overflow via Nested Arrays6.9CNA v4.00.6%2026-09-12
CVE-2026-90467aiosmtplib ESMTP parameter injection via unvalidated addresses6.3CNA v4.00.4%2026-09-12Fix
CVE-2026-89268QloApps reflected XSS via List Filter parameters5.1CNA v4.00.3%2026-09-12
CVE-2026-89267starlette-admin Searchable Fields Allowlist Bypass5.3CNA v4.00.3%2026-09-12
CVE-2026-89172Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms5.6CNA v4.00.2%2026-09-12Fix
CVE-2026-87919Product XML Feed Manager for WooCommerce WordPress plugin arbitrary Product deletion via shortcode4.9CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87918WPBot WordPress plugin unauthenticated AI Provider API Abuse via Multiple AJAX actions5.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87916WPBot - Unauthenticated Chat Visitor PII Disclosure5.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87894Rox Appointment Booking confirmation endpoint vulnerability5.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87892Rox Appointment Booking improper access control5.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87891Rox Appointment Booking WordPress plugin unauthenticated Holiday Schedule modification via REST API6.5CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87888YayPricing WordPress plugin Subscriber+ stored XSS via save_page_data REST Route8.0CISA ADP v3.10.4%2026-09-12Fix
CVE-2026-87842Zonify WordPress plugin unauthenticated account login token disclosure7.5CISA ADP v3.10.5%2026-09-12Fix
CVE-2026-87797Client Invoicing by Sprout Invoices WordPress plugin Private Note Overwrite via si_edit_private_note4.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-87759The Add User Autocomplete WordPress plugin before 1.2 does not perform any capability or nonce check before creating a pending site-membership invitation carrying a caller-supplied role, allowing any authenticated user, such as a subscriber, to grant themselves the administrator role on a multisite8.8CISA ADP v3.10.4%2026-09-12Fix
CVE-2026-87719Deserialization of untrusted data in GitLab9.9CNA v3.10.6%2026-09-12Fix
CVE-2026-86790WP Highlight Box WordPress plugin Contributor+ stored XSS via highlight-box shortcode6.8CISA ADP v3.10.4%2026-09-12
CVE-2026-85706GitLab Community Edition and Enterprise Edition path traversal10.0CNA v3.192.0%2026-09-12KEVNucleiMetasploitEmerging ThreatsExploit codeFix
CVE-2026-85681WP Component WordPress plugin unauthenticated privilege escalation via arbitrary Blog option update9.8CISA ADP v3.10.5%2026-09-12
CVE-2026-85200GEO my WP WordPress plugin unauthenticated local file inclusion7.5CNA v3.13.2%2026-09-12NucleiFix
CVE-2026-85198MPG WordPress plugin unauthenticated SQL injection via URL path6.5CNA v3.10.5%2026-09-12Fix
CVE-2026-84171WP Images Upload on Piclect WordPress plugin unauthenticated arbitrary file upload9.8CISA ADP v3.10.7%2026-09-12
CVE-2026-84099IDB Ecommerce (wpStoreCart 5) WordPress plugin unauthenticated PHP object injection8.1CISA ADP v3.10.5%2026-09-12
CVE-2026-84047Album Cover Finder WordPress plugin unauthenticated SQLi via and_action8.6CISA ADP v3.10.4%2026-09-12
CVE-2026-84025BEAR product data endpoints insecure direct object reference2.2CISA ADP v3.10.2%2026-09-12Fix
CVE-2026-84024BEAR meta field configuration cross-site request forgery4.3CISA ADP v3.10.1%2026-09-12Fix
CVE-2026-84023BEAR taxonomy term editor cross-site request forgery6.5CISA ADP v3.10.2%2026-09-12Fix
CVE-2026-83532Custom Menu Wizard WordPress plugin Contributor+ stored XSS via shortcode attributes6.8CISA ADP v3.10.4%2026-09-12
CVE-2026-82851Masteriyo LMS - Instructor+ arbitrary Post Disclosure via IDOR2.7CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-82847Masteriyo LMS WordPress plugin Instructor+ stored XSS via Course Highlights6.8CISA ADP v3.10.4%2026-09-12Fix
CVE-2026-82845Masteriyo LMS WordPress plugin Subscriber+ PHP object injection9.9CISA ADP v3.10.6%2026-09-12Fix
CVE-2026-81742BE REST Endpoints WordPress plugin unauthenticated stored XSS and widget manipulation8.8CISA ADP v3.10.5%2026-09-12
CVE-2026-81429Export and Import WPBakery Page Builder WordPress plugin stored XSS via CSRF7.1CISA ADP v3.10.1%2026-09-12
CVE-2026-81402DS Ad Rotator WordPress plugin unauthenticated arbitrary file upload9.8CISA ADP v3.10.8%2026-09-12
CVE-2026-81090Gpx2Graphics WordPress plugin arbitrary file upload via CSRF7.2CISA ADP v3.10.4%2026-09-12
CVE-2026-80494Yogeta WP Cloud WordPress plugin unauthenticated arbitrary file download8.6CISA ADP v3.10.4%2026-09-12
CVE-2026-80491SAMO Forms WordPress plugin unauthenticated SQLi8.6CISA ADP v3.10.4%2026-09-12
CVE-2026-79300SEP sesam Active Directory username handling vulnerability3.5CNA v3.10.3%2026-09-12Fix
CVE-2026-78175Tutor LMS WordPress plugin authenticated (Subscriber+) PHP object injection to remote code execution8.8CNA v3.11.1%2026-09-12Reported exploitedFix
CVE-2026-78159The Events Calendar WordPress plugin unauthenticated code injection to remote code execution9.8CNA v3.11.4%2026-09-12Reported exploitedExploit codeFix
CVE-2026-78152SureRank - Unauthenticated Author email disclosure via Person Schema5.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-78006The Events Calendar WordPress plugin unauthenticated PHP object injection to remote code execution9.8CNA v3.11.5%2026-09-12Reported exploitedExploit codeFix
CVE-2026-77753Temporary Login Without Password application password revocation improper access control5.5CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-77752Temporary Login Without Password - Multisite Subsite Admin+ Network Super Admin privilege escalation7.2CISA ADP v3.10.5%2026-09-12Fix
CVE-2026-77705Booking for Appointments and Events Calendar insecure direct object reference7.2CISA ADP v3.10.5%2026-09-12Fix
CVE-2026-77689Booking for Appointments and Events Calendar payment verification vulnerability5.3CISA ADP v3.10.3%2026-09-12Fix
CVE-2026-77161Smart Marketing SMS and Newsletters Forms WordPress plugin SQL injection6.5CNA v3.10.5%2026-09-12Fix
CVE-2026-77006WebTotem Backups WordPress plugin Subscriber+ arbitrary file deletion via path traversal9.6CISA ADP v3.10.2%2026-09-12Fix
CVE-2026-77005Code Monkeys Proposals WordPress plugin Subscriber+ arbitrary file deletion via path traversal9.6CISA ADP v3.10.4%2026-09-12
CVE-2026-75800Frontegg SAML SSO WordPress plugin unauthenticated account takeover via Unverified SAMLResponse9.8CISA ADP v3.10.6%2026-09-12
CVE-2026-17585Royal Addons for Elementor WordPress plugin unauthenticated sensitive information exposure5.3CNA v3.10.3%2026-09-12Fix
CVE-2026-16482rtMedia for WordPress, BuddyPress and bbPress plugin unauthenticated SQL injection7.5CNA v3.10.3%2026-09-12Fix
CVE-2026-15451MemberPress Corporate Accounts WordPress plugin privilege escalation8.8CNA v3.10.2%2026-09-12Fix
CVE-2026-11355DT LMS WordPress plugin missing authorization unauthenticated arbitrary plugin settings modification5.3CNA v3.10.2%2026-09-12Fix
CVE-2026-10148Booking for Appointments and Events Calendar Amelia WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-12Fix
CVE-2026-90461OpenStack Ironic improper channel restriction6.3CNA v3.10.4%2026-09-11Fix
CVE-2026-90460OpenStack Keystone incorrect authorization7.6CNA v4.00.6%2026-09-11Fix
CVE-2026-90457Malcolm weak password hash6.9CNA v4.00.1%2026-09-11Fix
CVE-2026-90456Malcolm inventory-management component use of default credentials9.2CNA v4.00.3%2026-09-11Fix
CVE-2026-90455Dependency on vulnerable third-party component in Malcolm6.3CNA v4.00.2%2026-09-11Fix
CVE-2026-90454Missing authorization in Malcolm5.3CNA v4.00.2%2026-09-11Fix
CVE-2026-90453Open redirect in Malcolm5.1CNA v4.00.2%2026-09-11Fix
CVE-2026-90452Improper certificate validation in Malcolm6.0CNA v4.00.1%2026-09-11Fix
CVE-2026-90451Malcolm packet-analysis component use of default credentials8.2CNA v4.00.3%2026-09-11Fix
CVE-2026-90450Incorrect authorization in Malcolm5.3CNA v4.00.2%2026-09-11Fix
CVE-2026-90449Missing authentication for critical function in Malcolm6.9CNA v4.00.2%2026-09-11Fix
CVE-2026-90448Missing authorization in Malcolm7.1CNA v4.00.2%2026-09-11Fix
CVE-2026-90447Authentication bypass by spoofing in Malcolm7.1CNA v4.00.2%2026-09-11Fix
CVE-2026-90446Server-side request forgery in Malcolm5.3CNA v4.00.2%2026-09-11Fix
CVE-2026-90445Path traversal in Malcolm7.1CNA v4.00.3%2026-09-11Fix
CVE-2026-90444OS command injection in Malcolm8.7CNA v4.00.3%2026-09-11Fix
CVE-2026-90443Cross-site scripting in Malcolm5.3CNA v4.00.2%2026-09-11Fix
CVE-2026-89773Linux kernel AMD display HDCP configuration vulnerability–0.2%2026-09-11Fix
CVE-2026-89772Linux kernel btrfs data writeback vulnerability–0.2%2026-09-11Fix
CVE-2026-89771Linux kernel trace ring buffer resize race condition7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89770Linux kernel iomap integrity payload handling null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89769Linux kernel NXP PIT clocksource driver use-after-free7.4CNA v3.10.2%2026-09-11Fix
CVE-2026-89768Linux kernel nested backing file path resolution vulnerability–0.2%2026-09-11Fix
CVE-2026-89767Linux kernel ovl vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89766Linux kernel pidfd namespace ioctl vulnerability–0.2%2026-09-11Fix
CVE-2026-89765Linux kernel itimer copy to userspace vulnerability–0.2%2026-09-11Fix
CVE-2026-89764Linux kernel Rust devres revocation use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89763Linux kernel trusted keys TPM backend vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89762Linux kernel AppArmor credential handling use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89761Linux kernel AppArmor label vector handling out-of-bounds write7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89760Linux kernel swap hibernation slot handling vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89759Linux kernel kmemleak task stack scanner denial of service–0.2%2026-09-11Fix
CVE-2026-89758Linux kernel mempolicy vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89757Linux kernel multi-gen LRU folio sorting vulnerability–0.2%2026-09-11Fix
CVE-2026-89756In the Linux kernel, the following vulnerability has been resolved: mm/migrate: report RCU-tasks quiescent states in migrate_pages_batch() migrate_pages_batch() unmaps each folio before moving it, and every unmap runs the mmu_notifier invalidate callbacks. On KVM hosts try_to_migrate() ends up in–0.2%2026-09-11Fix
CVE-2026-89755Linux kernel device migration vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89754Linux kernel page table walker vulnerability7.8CNA v3.10.1%2026-09-11Exploit codeFix
CVE-2026-89753Linux kernel page reclaim scanner denial of service–0.2%2026-09-11Fix
CVE-2026-89752Linux kernel memory cgroup reclaim vulnerability–0.2%2026-09-11Fix
CVE-2026-89751Linux kernel TDX port I/O handling off-by-one error–0.2%2026-09-11Fix
CVE-2026-89750Linux kernel ftrace user_events fork handling use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89749Linux kernel ftrace event self-test vulnerability–0.2%2026-09-11Fix
CVE-2026-89748Linux kernel ftrace ring buffer reader swap vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89747Linux kernel ftrace trace_pipe reader use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89746Linux kernel ftrace histogram triggers use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89745Linux kernel debugfs mmap lockdown check vulnerability–0.2%2026-09-11Fix
CVE-2026-89744Linux kernel fwnode child node iteration denial of service8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89743Linux kernel nsm misc driver out-of-bounds read7.7CNA v3.10.1%2026-09-11Fix
CVE-2026-89742Linux kernel RapidIO mport character device driver use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89741Linux kernel V4L2 device registration double free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89740Linux kernel i.MX serial driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89739Linux kernel DWC3 USB gadget driver use-after-free–0.2%2026-09-11Fix
CVE-2026-89738Linux kernel AT91 USB gadget driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89737Linux kernel USB Type-C Thunderbolt altmode driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89736Linux kernel USB gadget audio driver use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89735Linux kernel usb gadget midi2 driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89734Linux kernel USB gadget UVC function driver null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89733Linux kernel USB gadget UVC function driver use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89732Linux kernel FunctionFS gadget driver deadlock–0.2%2026-09-11Fix
CVE-2026-89731Linux kernel CXL RAS AER register handling out-of-bounds read7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89730Linux kernel Altera CVP FPGA driver out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-89729Linux kernel HID sensor hub driver out-of-bounds write8.8CNA v3.10.4%2026-09-11Fix
CVE-2026-89728Linux kernel i3c Renesas driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89727Linux kernel KVM arm64 GICv2 emulation denial of service–0.2%2026-09-11Fix
CVE-2026-89726Linux kernel ucs2 string library out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-89725Linux kernel STM32 CEC receiver out-of-bounds write8.8CNA v3.10.3%2026-09-11Fix
CVE-2026-89724Linux kernel FWHT video encoder out-of-bounds write7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89723Linux kernel NILFS2 direct block mapping vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89722Linux kernel PCI legacy I/O sysfs interface out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-89721Linux kernel rockchip-samsung DCPHY register map vulnerability–0.2%2026-09-11Fix
CVE-2026-89720Linux kernel UBIFS signature verification out-of-bounds read7.7CNA v3.10.2%2026-09-11Fix
CVE-2026-89719Linux kernel zram block state reporting vulnerability–0.2%2026-09-11Fix
CVE-2026-89718Linux kernel zram writeback vulnerability–0.2%2026-09-11Fix
CVE-2026-89717Linux kernel zram compressor teardown vulnerability–0.2%2026-09-11Fix
CVE-2026-89716Linux kernel zram deflate compressor denial of service–0.2%2026-09-11Fix
CVE-2026-89715Linux kernel NFS localio file open vulnerability–0.2%2026-09-11Fix
CVE-2026-89714Linux kernel NFSv4 client delegation hash table memory leak–0.2%2026-09-11Fix
CVE-2026-89713Linux kernel NFSD truncate permission check race condition9.1CNA v3.10.6%2026-09-11Fix
CVE-2026-89712Linux kernel NFSD vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89711Linux kernel NFSD file handle mode check denial of service8.2CNA v3.10.4%2026-09-11Fix
CVE-2026-89710Linux kernel NFSv4.1 pNFS layout processing vulnerability–0.2%2026-09-11Fix
CVE-2026-89709Linux kernel lockd dispatch table use-after-free8.1CNA v3.10.6%2026-09-11Fix
CVE-2026-89708Linux kernel nfsd use-after-free9.8CNA v3.10.4%2026-09-11Fix
CVE-2026-89707Linux kernel nfsd vulnerability7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89706Linux kernel nfsd vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89705Linux kernel NFSD RPC status counter vulnerability7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89704Linux kernel nfsd vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89703Linux kernel nfsd use-after-free9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89702Linux kernel NFS server fh_verify tracepoint vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89701Linux kernel nfsd vulnerability–0.2%2026-09-11Fix
CVE-2026-89700Linux kernel listener socket address validation out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-89699Linux kernel NFSv4 CREATE symlink handling vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89698Linux kernel RPC status netlink reporting vulnerability–0.2%2026-09-11Fix
CVE-2026-89697Linux kernel SETATTR mount write reference vulnerability9.1CNA v3.10.7%2026-09-11Fix
CVE-2026-89696Linux kernel compound filehandle handling vulnerability7.5CNA v3.10.8%2026-09-11Fix
CVE-2026-89695Linux kernel POSIX ACL decoding vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89694Linux kernel copy-notify state cancellation vulnerability–0.2%2026-09-11Fix
CVE-2026-89693Linux kernel nfsd vulnerability–0.2%2026-09-11Fix
CVE-2026-89692Linux kernel delegation recall callback vulnerability7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89691Linux kernel RPC status reporting out-of-bounds read7.1CNA v3.10.1%2026-09-11Fix
CVE-2026-89690Linux kernel RPC status reporting use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89689Linux kernel session slot management vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89688Linux kernel seqid-based operation replay use-after-free9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89687Linux kernel file open handling vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89686Linux kernel nfsd race condition9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89685Linux kernel reclaim grace period handling vulnerability7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-89684Linux kernel copy-notify state publishing race condition7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89683Linux kernel V4ROOT filehandle lookup vulnerability–0.2%2026-09-11Fix
CVE-2026-89682Linux kernel delayed file-close queue use-after-free8.1CNA v3.10.6%2026-09-11Fix
CVE-2026-89681Linux kernel nfsd layout fence worker race condition9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89680Linux kernel inter-server copy setup vulnerability7.5CNA v3.10.7%2026-09-11Fix
CVE-2026-89679Linux kernel special stateid handling null pointer dereference7.5CNA v3.10.7%2026-09-11Fix
CVE-2026-89678Linux kernel direct write handling vulnerability7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-89677Linux kernel nfsd vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89676Linux kernel copy-offload state tracking vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89675Linux kernel NFS server async copy cancellation use-after-free9.8CNA v3.10.4%2026-09-11Fix
CVE-2026-89674Linux kernel nfsd out-of-bounds write9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89673Linux kernel NFS server flexfile GETDEVICEINFO encoding vulnerability–0.2%2026-09-11Fix
CVE-2026-89672Linux kernel nfsd vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89671Linux kernel NFSv3 SETACL handling vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89670Linux kernel NFS server local I/O file cache vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89669Linux kernel NFS server copy-notify stateid initialization use-after-free9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89668Linux kernel NFS server debugfs initialization vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89667Linux kernel NFS server file cache shutdown race condition8.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89666Linux kernel NFSv3 SETATTR and create decoding vulnerability–0.2%2026-09-11Fix
CVE-2026-89665Linux kernel NFSv2 SETATTR and CREATE decoding vulnerability8.2CNA v3.10.6%2026-09-11Fix
CVE-2026-89664Linux kernel NFS server OPEN posix ACL handling vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89663Linux kernel NFS server copy-notify stateids use-after-free8.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89662Linux kernel NFS server lock owner teardown use-after-free9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89661Linux kernel NFS server unlock_filesystem interface use-after-free–0.2%2026-09-11Fix
CVE-2026-89660Linux kernel NFS server admin state revocation use-after-free9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89659Linux kernel NFSD use-after-free9.8CNA v3.10.4%2026-09-11Fix
CVE-2026-89658Linux kernel NFS server client state cleanup use-after-free9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89657Linux kernel libceph OSD sparse read denial of service7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89656Linux kernel libceph CRUSH mapper out-of-bounds write9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89655Linux kernel Ceph client cap flush tracking use-after-free9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89654Linux kernel Ceph client MDS session handling use-after-free9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89653Linux kernel Ceph client MDS map decoding out-of-bounds write9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89652Linux kernel Ceph client NFS export name handling out-of-bounds write9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89651Linux kernel Ceph client session handling vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89650Linux kernel Ceph client MDS map decoding vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89649Linux kernel Ceph client xattr parsing vulnerability9.1CNA v3.10.7%2026-09-11Fix
CVE-2026-89648Linux kernel Ceph client delegated inode parsing vulnerability7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89647Linux kernel Ceph client dentry lease trimming denial of service7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89646Linux kernel Ceph client writeback at unmount memory leak7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89645Linux kernel Btrfs relocation recovery vulnerability–0.2%2026-09-11Fix
CVE-2026-89644Linux kernel Btrfs NOCOW direct I/O write vulnerability–0.2%2026-09-11Fix
CVE-2026-89643Linux kernel audit fsnotify rule autoremove vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89642Linux kernel CIFS inode size extension information disclosure–0.2%2026-09-11Fix
CVE-2026-89641Linux kernel CIFS file size set path vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89640Linux kernel CIFS file range clone integer underflow7.1CNA v3.10.1%2026-09-11Fix
CVE-2026-89639Linux kernel CIFS truncate cache invalidation vulnerability7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89638Linux kernel SMB client cifsacl mode extensions vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89637Linux kernel SMB client transaction2 response handling use-after-free9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89636Linux kernel SMB client DFS target cache use-after-free9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89635Linux kernel ksmbd durable handle reconnect vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89634Linux kernel SMB client symlink error context parsing vulnerability9.1CNA v3.10.7%2026-09-11Fix
CVE-2026-89633Linux kernel SMB client vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89632Linux kernel SMB client reparse point parsing vulnerability8.2CNA v3.10.6%2026-09-11Fix
CVE-2026-89631Linux kernel SMB client tree connect response parsing vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89630Linux kernel SMB client oplock break handling vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89629Linux kernel HID corsair-void driver out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-89628Linux kernel HID picoLCD eeprom debugfs interface vulnerability–0.2%2026-09-11Fix
CVE-2026-89627Linux kernel HID roccat driver report buffer vulnerability–0.2%2026-09-11Fix
CVE-2026-89626Linux kernel HID sensor custom driver sysfs attributes vulnerability8.8CNA v3.10.4%2026-09-11Fix
CVE-2026-89625Linux kernel sony GHL poke timer and URB teardown use-after-free–0.2%2026-09-11Fix
CVE-2026-89624Linux kernel universal-pidff force-feedback probe vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89623Linux kernel mcp2221 device teardown use-after-free–0.2%2026-09-11Fix
CVE-2026-89622Linux kernel mcp2221 I2C/SMBus transfer buffer use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89621Linux kernel mcp2221 I2C/SMBus read handler vulnerability–0.2%2026-09-11Fix
CVE-2026-89620Linux kernel intel-quickspi report buffer copy vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89619Linux kernel intel-quickspi GET_REPORT handler vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89618Linux kernel eventfs inode improper initialization–0.2%2026-09-11Fix
CVE-2026-89617Linux kernel NTFS3 log replay dirty page table vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89616Linux kernel NTFS3 LZNT frame decompression vulnerability7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-89615Linux kernel NTFS3 log replay page table vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-89614Linux kernel NTFS free-cluster bitmap scan out-of-bounds read9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89613Linux kernel NTFS mapping pairs validator vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89612Linux kernel NTFS boot sector parser vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89611Linux kernel NTFS non-resident attribute converter vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89610Linux kernel NTFS mapping pairs decoder privilege escalation9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89609Linux kernel eCryptfs daemon message queue race condition7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89608Linux kernel eCryptfs packet set parser vulnerability7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89607Linux kernel eCryptfs tag 3 packet parser vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89606Linux kernel eCryptfs tag 70 packet parser integer underflow7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89605Linux kernel eCryptfs message context list vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89604Linux kernel efivarfs statfs handler vulnerability–0.2%2026-09-11Fix
CVE-2026-89602Linux kernel erofs global buffer pool vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89601Linux kernel ext2 inode metadata sync vulnerability8.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89600Linux kernel fanotify permission events use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89599Linux kernel omapfb panel-dsi-cm display vulnerability8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89598Linux kernel ssd1307fb display driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89597Linux kernel uvesafb v86d connector vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89596Linux kernel forcedeth driver off-by-one7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89595Linux kernel fsnotify mark notification race condition–0.2%2026-09-11Fix
CVE-2026-89594Linux kernel OMAP SSI controller denial of service7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89593Linux kernel hugetlb reservation accounting integer underflow7.1CNA v3.10.1%2026-09-11Fix
CVE-2026-89592Linux kernel accel rocket driver null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89591Linux kernel accel rocket driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89590Linux kernel Rocket NPU job scheduler memory leak–0.2%2026-09-11Fix
CVE-2026-89589Linux kernel ACPI APEI GHES CXL CPER handling deadlock–0.2%2026-09-11Fix
CVE-2026-89588Linux kernel ACPI APEI GHES ARM error handling vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-89587Linux kernel ACPI PFRU capability query stack buffer overflow7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89586Linux kernel libata-scsi DSM TRIM vulnerability8.2CNA v3.10.6%2026-09-11Fix
CVE-2026-89585Linux kernel charlcd backlight driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89584Linux kernel block layer bio vector validation vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89583Linux kernel Bluetooth EIR parser out-of-bounds read8.1CNA v3.10.3%2026-09-11Fix
CVE-2026-89582Linux kernel bnx2x firmware loader double free–0.2%2026-09-11Fix
CVE-2026-89581Linux kernel bpf x86 vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89580Linux kernel BPF stack trace helper out-of-bounds write7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89579Linux kernel BPF bloom filter map vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89578Linux kernel dm-io bio cloning denial of service–0.2%2026-09-11Fix
CVE-2026-89577Linux kernel dm-io error reporting vulnerability–0.2%2026-09-11Fix
CVE-2026-89576Linux kernel dm-era target vulnerability–0.2%2026-09-11Fix
CVE-2026-89575Linux kernel device-mapper raid1 constructor string out-of-bounds write–0.2%2026-09-11Fix
CVE-2026-89574Linux kernel dm array vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89573Linux kernel device-mapper array value size validation vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89572Linux kernel apple-soc cpufreq driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89571Linux kernel CXL fwctl command handling vulnerability7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89570Linux kernel CXL MCE notifier use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89569Linux kernel Bluetooth RFCOMM security confirmation vulnerability8.8CNA v3.10.3%2026-09-11Fix
CVE-2026-89568Linux kernel kernel handover memory reservation vulnerability–0.2%2026-09-11Fix
CVE-2026-89567Linux kernel jbd2 checkpoint shrinker scan accounting denial of service–0.2%2026-09-11Fix
CVE-2026-89566Linux kernel jbd2 checkpoint buffer shrinker denial of service–0.2%2026-09-11Fix
CVE-2026-89565Linux kernel IPIP tunnel receive vulnerability–0.2%2026-09-11Fix
CVE-2026-89564Linux kernel IP multicast forwarding socket handling vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89563Linux kernel IPv6 tunnel transmit path vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89562Linux kernel ip6_gre NBMA tunnel header length vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89561Linux kernel IPv6 RPL segment routing header null pointer dereference7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-89560Linux kernel Landlock whiteout creation vulnerability8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89559Linux kernel libnvdimm labels integer overflow7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89558Linux kernel md raid10 bitmap recovery vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89557Linux kernel md driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89556Linux kernel module ELF section validation vulnerability–0.2%2026-09-11Fix
CVE-2026-89555Linux kernel MPLS multipath hashing vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89554Linux kernel MPTCP MP_JOIN syncookie handling vulnerability8.2CNA v3.10.6%2026-09-11Fix
CVE-2026-89553Linux kernel nouveau GEM info ioctl use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89552Linux kernel module charp parameter handling null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89551Linux kernel SUNRPC XDR buffer trimming integer underflow9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89550Linux kernel SUNRPC GSS Kerberos v2 token validation vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89549Linux kernel SUNRPC service pool thread routing denial of service7.5CNA v3.10.7%2026-09-11Fix
CVE-2026-89548Linux kernel SUNRPC cache_detail teardown use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89547Linux kernel SUNRPC service pool percpu counter allocation vulnerability8.1CNA v3.10.6%2026-09-11Fix
CVE-2026-89546Linux kernel SUNRPC NFS callback backchannel teardown race condition9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89545Linux kernel SUNRPC RPC request cleanup use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89544Linux kernel SUNRPC gssx XDR decoder vulnerability7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89543Linux kernel SUNRPC pipefs client directory handling use-after-free–0.2%2026-09-11Fix
CVE-2026-89542Linux kernel SUNRPC Kerberos v2 unwrap out-of-bounds read9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89541Linux kernel SUNRPC GSS response unwrap vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89540Linux kernel SUNRPC GSS proxy proc entry setup vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89539Linux kernel SUNRPC vulnerability–0.2%2026-09-11Fix
CVE-2026-89538Linux kernel SUNRPC Kerberos v2 wrap token handling vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89537Linux kernel SUNRPC Kerberos v2 MIC verification vulnerability9.1CNA v3.10.7%2026-09-11Fix
CVE-2026-89536Linux kernel SUNRPC TLS handshake vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89535Linux kernel svcrdma transport teardown vulnerability8.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89534Linux kernel svcrdma listener replacement use-after-free8.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89533Linux kernel svcrdma Read chunk range calculation integer underflow9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89532Linux kernel svcrdma parsed chunk list vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-89531Linux kernel svcrdma connection handling vulnerability–0.2%2026-09-11Fix
CVE-2026-89530Linux kernel svcrdma inline reply pull-up buffer out-of-bounds write9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89529Linux kernel svcrdma Read segment decoding vulnerability–0.2%2026-09-11Fix
CVE-2026-89528Linux kernel svcrdma Read chunk list null pointer dereference7.5CNA v3.10.7%2026-09-11Fix
CVE-2026-89527Linux kernel svcrdma listener creation vulnerability–0.2%2026-09-11Fix
CVE-2026-89526Linux kernel svcrdma Read chunk decoding vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89525Linux kernel UDF filesystem VAT vulnerability–0.2%2026-09-11Fix
CVE-2026-89524Linux kernel ath6kl Wi-Fi driver information disclosure8.1CNA v3.10.3%2026-09-11Fix
CVE-2026-89523Linux kernel mt7925 Wi-Fi driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89522Linux kernel IPU7 media driver async notifier use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89521Linux kernel core scheduling task pick vulnerability7.3CNA v3.10.2%2026-09-11Fix
CVE-2026-89520Linux kernel core scheduling vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89519Linux kernel sched_ext task dispatch vulnerability–0.2%2026-09-11Fix
CVE-2026-89518Linux kernel sched_ext dispatch kfuncs deadlock–0.2%2026-09-11Fix
CVE-2026-89517Linux kernel sched_ext core scheduling vulnerability–0.2%2026-09-11Fix
CVE-2026-89516Linux kernel sched_ext dispatch queue denial of service–0.2%2026-09-11Fix
CVE-2026-89515Linux kernel SCSI DMA scatter-gather allocation vulnerability–0.2%2026-09-11Fix
CVE-2026-89514Linux kernel fnic driver VLAN handling deadlock–0.2%2026-09-11Fix
CVE-2026-89513Linux kernel RISC-V KVM PMU vulnerability8.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89512Linux kernel remoteproc SCP driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89511Linux kernel qede driver TPA processing null pointer dereference7.5CNA v3.10.7%2026-09-11Fix
CVE-2026-89510Linux kernel cxgb4 RDMA driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89509Linux kernel ionic RDMA counter driver null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89508Linux kernel ucma event handler use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89507Linux kernel ucma event handler vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89506Linux kernel RDMA uverbs vulnerability–0.2%2026-09-11Fix
CVE-2026-89505Linux kernel uverbs legacy write path vulnerability–0.2%2026-09-11Fix
CVE-2026-89504Linux kernel AS3722 regulator driver vulnerability8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89503Linux kernel ring buffer subsystem race condition7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89502Linux kernel ring buffer subsystem vulnerability–0.2%2026-09-11Fix
CVE-2026-89501Linux kernel ring buffer subsystem race condition7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89500Linux kernel ring buffer reader page free denial of service7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89499Linux kernel remote ring buffer reader swap vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89498Linux kernel Orangefs readdir downcall handling double free–0.2%2026-09-11Fix
CVE-2026-89497Linux kernel Orangefs client debug mask parsing out-of-bounds write7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89496Linux kernel OCFS2 copy-on-write completion memory leak–0.2%2026-09-11Fix
CVE-2026-89495Linux kernel OCFS2 DLM migration handler out-of-bounds write9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89494Linux kernel OCFS2 DLM lock resource migration out-of-bounds write9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89493Linux kernel OCFS2 refcount block validation vulnerability8.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89492Linux kernel OCFS2 indexed directory metadata vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-89491Linux kernel OCFS2 heartbeat region pinning deadlock–0.2%2026-09-11Fix
CVE-2026-89490Linux kernel OCFS2 readdir position handling vulnerability–0.2%2026-09-11Fix
CVE-2026-89489Linux kernel or1k_atomic syscall vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89488Linux kernel openvswitch use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89487In the Linux kernel, the following vulnerability has been resolved: openvswitch: only skb_tx_error() a packet we are about to drop queue_userspace_packet() borrows the packet skb -- it only copies it into a private netlink message (user_skb) and does not own it; on return do_execute_actions() keep7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89486Linux kernel IPMI message handler use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89485Linux kernel NLM file locking vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89484Linux kernel NLM client file locking null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89483Linux kernel NVMe discard command handling vulnerability7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-89482Linux kernel NVMe over TCP driver vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-89481Linux kernel NVMe over TCP driver vulnerability7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-89480Linux kernel NVMe over TCP driver vulnerability7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-89479Linux kernel SCTP association handling vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89478Linux kernel SCTP transport handling vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-89477Linux kernel SCTP stream reconfiguration vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-89476Linux kernel SCTP stream reconfiguration integer underflow7.5CNA v3.10.7%2026-09-11Fix
CVE-2026-89475Linux kernel BQ24257 charger driver use-after-free–0.2%2026-09-11Fix
CVE-2026-89474Linux kernel BQ256xx charger driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89473Linux kernel BQ25890 charger driver memory leak–0.2%2026-09-11Fix
CVE-2026-89472Linux kernel charger-manager regulator teardown vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89471Linux kernel cros_usbpd-charger driver vulnerability8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89470Linux kernel cros_usbpd-charger driver out-of-bounds write8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89469Linux kernel LP8727 charger driver use-after-free8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89468Linux kernel LP8788 charger driver use-after-free–0.2%2026-09-11Fix
CVE-2026-89467Linux kernel qcom_battmgr use-after-free–0.2%2026-09-11Fix
CVE-2026-89466Linux kernel qcom_battmgr driver vulnerability7.7CNA v3.10.1%2026-09-11Fix
CVE-2026-89465Linux kernel RT9455 charger driver vulnerability8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-89464Linux kernel TWL4030 charger driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89463Linux kernel UCS1002 charger driver use-after-free–0.2%2026-09-11Fix
CVE-2026-89462Linux kernel max17040 power supply driver improper error handling–0.2%2026-09-11Fix
CVE-2026-89461Linux kernel max17040 fuel gauge driver race condition–0.2%2026-09-11Fix
CVE-2026-89460Linux kernel s390 cpum_cf denial of service–0.2%2026-09-11Fix
CVE-2026-89459Linux kernel s390 per-CPU operations vulnerability7.0CNA v3.10.1%2026-09-11Fix
CVE-2026-89458Linux kernel DASD ESE read handling vulnerability–0.2%2026-09-11Fix
CVE-2026-89457Linux kernel DASD sysfs discipline callbacks null pointer dereference–0.2%2026-09-11Fix
CVE-2026-89456Linux kernel DASD extended error recovery vulnerability7.0CNA v3.10.1%2026-09-11Fix
CVE-2026-89455Linux kernel PLDA PCIe interrupt teardown use-after-free–0.2%2026-09-11Fix
CVE-2026-89454Linux kernel PLDA PCIe interrupt initialization vulnerability–0.2%2026-09-11Fix
CVE-2026-89453Linux kernel AMD IOMMU PPR fault handling vulnerability–0.2%2026-09-11Fix
CVE-2026-89452Linux kernel MSM IOMMU driver probe vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-89451Linux kernel IOMMU SVA handle initialization race condition–0.2%2026-09-11Fix
CVE-2026-89450Linux kernel Tegra241 CMDQV driver vulnerability8.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89449Linux kernel IOMMU device registration memory leak–0.2%2026-09-11Fix
CVE-2026-89448Linux kernel vt-d IOMMU driver vulnerability9.3CNA v3.10.1%2026-09-11Fix
CVE-2026-89447Linux kernel IOMMUFD access unmap handling memory leak–0.2%2026-09-11Fix
CVE-2026-89446Linux kernel IOMMUFD IOAS allocation vulnerability–0.2%2026-09-11Fix
CVE-2026-89445Linux kernel IOMMUFD selftest use-after-free8.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89444Linux kernel dell-wmi-sysman driver information disclosure–0.2%2026-09-11Fix
CVE-2026-89443Linux kernel ISST driver out-of-bounds read7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-89442Linux kernel ISST driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89441Linux kernel via-sdmmc driver vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-89440Linux kernel via-sdmmc driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89439Linux kernel ISST driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89438Linux kernel ISST driver vulnerability–0.2%2026-09-11Fix
CVE-2026-89437Linux kernel int1092 SAR driver memory leak–0.2%2026-09-11Fix
CVE-2026-89436Linux kernel panasonic-laptop driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-89332Kiro IDE Sensitive Workspace Data Exfiltration via Agent-Written Workspace Configuration6.7CNA v4.00.2%2026-09-11Fix
CVE-2026-89329Red Hat Enterprise Linux 10 device-mapper-multipath: Local denial of service6.2CNA v3.10.2%2026-09-11
CVE-2026-89298Red Hat Keycloak client registration endpoint information disclosure4.9CNA v3.10.4%2026-09-11
CVE-2026-89266stb_vorbis heap buffer overflow via codebook multiplicands8.8CNA v4.00.6%2026-09-11
CVE-2026-89265MoguBlog missing authorization on the Admin getPictureSortByUid endpoint5.3CNA v4.00.4%2026-09-11Fix
CVE-2026-89264MoguBlog Comment Author spoofing via Request-Body Identity5.3CNA v4.00.4%2026-09-11Fix
CVE-2026-89263MoguBlog missing authentication on the Comment Email-Notification endpoint6.9CNA v4.00.5%2026-09-11Fix
CVE-2026-89262MoguBlog arbitrary Comment Deletion via Request-Body Ownership Check8.7CNA v4.00.5%2026-09-11Fix
CVE-2026-89261MoguBlog missing authentication for Elasticsearch Index Management endpoints6.9CNA v4.00.8%2026-09-11Fix
CVE-2026-89260MoguBlog XML external entity injection in the Unauthenticated WeChat Callback endpoint8.7CNA v4.00.7%2026-09-11Fix
CVE-2026-89259Hugo insufficient permission Restriction via TailwindCSS9.3CNA v4.00.6%2026-09-11Fix
CVE-2026-89258Hugo Symlink Confinement Bypass via resources.Get9.3CNA v4.00.5%2026-09-11Fix
CVE-2026-89257AVideo Cross-User Category Asset Deletion via Missing Ownership Check5.3CNA v4.00.3%2026-09-11
CVE-2026-89256AVideo Bookmark plugin stored XSS via Chapter Names9.3CNA v4.00.4%2026-09-11
CVE-2026-89255AVideo LoginControl stored XSS via PGP Public Key9.3CNA v4.00.4%2026-09-11
CVE-2026-89254AVideo CustomizeUser stored XSS via field_name parameter9.3CNA v4.00.4%2026-09-11Fix
CVE-2026-89253AVideo stored XSS via donationLink in watch page button9.3CNA v4.00.4%2026-09-11
CVE-2026-89252AVideo missing authorization in addLiveLink.php LiveLink Update7.1CNA v4.00.3%2026-09-11
CVE-2026-89251AVideo missing authorization via AD_Server log.php Wallet Credit7.1CNA v4.00.2%2026-09-11
CVE-2026-89250WWBN AVideo Unauthenticated File Read via getRecordedFile.php8.7CNA v4.00.5%2026-09-11
CVE-2026-89249AVideo YPTWallet stored XSS via CryptoWallet Configuration9.3CNA v4.00.4%2026-09-11Fix
CVE-2026-89248AVideo WebRTC plugin information disclosure via status.json.php6.9CNA v4.00.5%2026-09-11
CVE-2026-89247WWBN AVideo XML injection via plugin/AD_Server/VMAP.php5.3CNA v4.00.4%2026-09-11
CVE-2026-89246WWBN AVideo CSV formula injection via myComments.download.php5.1CNA v4.00.2%2026-09-11
CVE-2026-89245WWBN AVideo cross-site request forgery via playlistRemove.php7.1CNA v4.00.2%2026-09-11
CVE-2026-89244WWBN AVideo reflected XSS via Gallery Category getBackURL5.3CNA v4.00.3%2026-09-11Fix
CVE-2026-89243WWBN AVideo stored XSS via UserGroups setGroup_name9.2CNA v4.00.4%2026-09-11
CVE-2026-89242WWBN AVideo unauthenticated SSRF via login.json.php6.9CNA v4.00.3%2026-09-11
CVE-2026-89241WWBN AVideo reflected XSS via confirmLivePassword.php5.3CNA v4.00.3%2026-09-11
CVE-2026-89240WWBN AVideo reflected XSS via confirmLivePassword.php5.3CNA v4.00.3%2026-09-11
CVE-2026-89239WWBN AVideo reflected XSS via Referer Header Comment Breakout5.3CNA v4.00.3%2026-09-11Fix
CVE-2026-89212XML external entity in Akana API Platform9.2CNA v4.00.4%2026-09-11
CVE-2026-89179Howyar｜WeenyGenius missing support for integrity check5.3CNA v4.00.2%2026-09-11Fix
CVE-2026-89178Howyar｜WeenyGenius origin validation error8.7CNA v4.00.4%2026-09-11Fix
CVE-2026-89177Howyar｜WeenyGenius Use of Insecure protocol8.7CNA v4.00.4%2026-09-11Fix
CVE-2026-89176Howyar｜WeenyGenius missing authentication8.7CNA v4.00.4%2026-09-11Fix
CVE-2026-89175Kingdom Communication Associated｜Smart Video Intercom System client-side authentication6.9CNA v4.00.5%2026-09-11Fix
CVE-2026-89174Kingdom Communication Associated｜Smart Video Intercom System Missing Burte-force Protection8.7CNA v4.00.5%2026-09-11Fix
CVE-2026-89173Kingdom Communication Associated｜Smart Video Intercom System sensitive data exposure6.9CNA v4.00.4%2026-09-11Fix
CVE-2026-89169Debian live-boot improper signature verification4.1CNA v4.00.1%2026-09-11
CVE-2026-89162PCRE2 incorrect resource transfer3.3v3.10.1%2026-09-11Fix
CVE-2026-89161PCRE2 pcre2_jit_match vulnerability7.8v3.10.1%2026-09-11Fix
CVE-2026-89160PCRE2 out-of-bounds read6.5v3.10.2%2026-09-11Fix
CVE-2026-89158PCRE2 integer overflow6.5v3.10.2%2026-09-11Fix
CVE-2026-89157PCRE2 integer overflow7.4v3.10.2%2026-09-11Fix
CVE-2026-89156PCRE2 out-of-bounds read5.9v3.10.2%2026-09-11Fix
CVE-2026-89151Forgejo incorrect authorization3.5CNA v3.10.2%2026-09-11Fix
CVE-2026-89148AVideo open redirect via playlistSort.php Referer header5.1CNA v4.00.2%2026-09-11
CVE-2026-89147Net-SNMP denial of service via Blocking Unauthenticated SMUX Read8.7CNA v4.00.5%2026-09-11Fix
CVE-2026-89146libp2p-rendezvous denial of service via Unbounded Registration TTL in Discovery Responses8.7CNA v4.00.6%2026-09-11
CVE-2026-89145Flextype CMS stored XSS via Plugin Directory2.4CNA v4.00.2%2026-09-11
CVE-2026-89099Race condition in MongoDB Server Document Value Layer leads to memory corruption7.7CNA v4.00.3%2026-09-11Fix
CVE-2026-89092The GNU C Library glibc stack overflow in nscd due to unbounded alloca use4.2CNA v3.10.3%2026-09-11Fix
CVE-2026-89090Denial of service in the event stream header decoder in AWS SDK for Go v28.2CNA v4.00.3%2026-09-11Fix
CVE-2026-89066OS command injection in the task synthesis component in projen8.4CNA v4.00.2%2026-09-11Fix
CVE-2026-89065Relative path traversal in the generated file manifest cleanup component in projen6.8CNA v4.00.2%2026-09-11Fix
CVE-2026-89060Red Hat Advanced Cluster Management for Kubernetes information disclosure7.7CNA v3.10.5%2026-09-11Fix
CVE-2026-89013Dolibarr authorization bypass via hashp parameter in document.php8.7CNA v4.01.6%2026-09-11Reported exploitedNucleiExploit codeFix
CVE-2026-89012Dolibarr SQL Filter Denylist Bypass via sqlfilters parameter7.1CNA v4.00.5%2026-09-11Exploit codeFix
CVE-2026-89010WAVLINK WN535M1/WN535M3 unauthenticated OS command injection via sync_server9.3CNA v4.03.2%2026-09-11Emerging Threats
CVE-2026-89009WAVLINK WN535M1/WN535M3 unauthenticated arbitrary file write via sync_server8.8CNA v4.01.0%2026-09-11Emerging Threats
CVE-2026-88914GStreamer qtdemux CEA-608 closed-caption parser integer overflow4.4CNA v3.10.1%2026-09-11Fix
CVE-2026-88260Brainzcompany Zenius EMS authentication bypass8.7CNA v4.00.3%2026-09-11
CVE-2026-87988mistralai mistral-vibe incorrect permission assignment10.0CNA v4.00.4%2026-09-11
CVE-2026-87987mistralai mistral-vibe arbitrary code execution10.0CNA v4.00.6%2026-09-11Fix
CVE-2026-87986mistralai mistral-vibe arbitrary code execution10.0CNA v4.00.6%2026-09-11
CVE-2026-87985mistralai mistral-vibe arbitrary code execution10.0CNA v4.00.6%2026-09-11
CVE-2026-87984mistralai mistral-vibe arbitrary file write9.3CNA v4.00.5%2026-09-11Fix
CVE-2026-87983mistralai mistral-vibe arbitrary file read9.2CNA v4.00.6%2026-09-11
CVE-2026-87910Python CPython tarfile hardlink fallback ignores custom extraction filter rejection via None5.7CNA v4.00.6%2026-09-11Fix
CVE-2026-87908multiparty vulnerable to denial of service via unbounded part-header accumulation7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-87859morgan vulnerable to log injection via unescaped double quote in quoted log fields5.3CNA v3.10.4%2026-09-11Fix
CVE-2026-87776compression vulnerable to denial of service via memory leak on premature response close7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-87727appleple a-blog cms path traversal6.9CNA v4.00.4%2026-09-11
CVE-2026-87123hbs vulnerable to denial of service via unhandled exception in async helper output escaping5.9CNA v3.10.4%2026-09-11Fix
CVE-2026-87020Orthanc DICOM Server integer overflow or wraparound7.2CNA v4.00.6%2026-09-11Fix
CVE-2026-86815BackWPup job REST routes missing authorization5.5CISA ADP v3.10.4%2026-09-11Fix
CVE-2026-86813MetForm WordPress plugin unauthenticated email header injection via Notification Reply-To4.8CNA v3.10.2%2026-09-11Fix
CVE-2026-86812WPCafe - Unauthenticated Order Disclosure and Modification via food-orders REST API6.5CISA ADP v3.10.3%2026-09-11Fix
CVE-2026-86809Persian Elementor WordPress plugin unauthenticated ZarinPal Payment Callback Authority bypass5.3CNA v3.10.2%2026-09-11Fix
CVE-2026-86793SGLang update_weights_from_tensor endpoint deserialization of untrusted data9.8CISA ADP v3.10.8%2026-09-11Fix
CVE-2026-86782Visualizer WordPress plugin Contributor+ arbitrary Post/Page modification via IDOR5.5CISA ADP v3.10.3%2026-09-11Fix
CVE-2026-86781SSL Zen WordPress plugin Subscriber+ TLS Private key disclosure5.3CISA ADP v3.10.2%2026-09-11Fix
CVE-2026-86780Featured Image with URL WordPress plugin Contributor+ stored XSS via Image Alt Text6.8CISA ADP v3.10.4%2026-09-11Fix
CVE-2026-86779Visualizer WordPress plugin Contributor+ arbitrary Chart deletion via deleteChart2.7CISA ADP v3.10.3%2026-09-11Fix
CVE-2026-85979Command injection in Puppet Enterprise8.6CNA v4.01.3%2026-09-11Fix
CVE-2026-85678AI Builder - Contributor+ stored XSS via Post JavaScript6.8CISA ADP v3.10.4%2026-09-11Fix
CVE-2026-85677Gutenverse News WordPress plugin unauthenticated stored XSS via comment content8.8CISA ADP v3.10.5%2026-09-11Fix
CVE-2026-85116Simple CAPTCHA with Cloudflare Turnstile Contact Form 7 shortcode parser vulnerability6.5CNA v3.10.3%2026-09-11Fix
CVE-2026-85083CareCam Pro IP Cameras use of hard-coded credentials7.0CNA v4.00.3%2026-09-11
CVE-2026-84960WP-Members Membership WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2026-09-11Fix
CVE-2026-84390Fortinet FortiMonitorOnSight sensitive information in source code9.6CNA v3.10.5%2026-09-11Fix
CVE-2026-83546CoolClock WordPress plugin Contributor+ stored XSS via Skin Class attribute6.8CISA ADP v3.10.4%2026-09-11Fix
CVE-2026-83545CoolClock WordPress plugin Contributor+ stored XSS via Custom Skin JSON6.8CISA ADP v3.10.4%2026-09-11Fix
CVE-2026-82617Apache OpenNLP regex name finder patterns regular expression denial of service10.0CNA v4.00.8%2026-09-11Fix
CVE-2026-82583NextGen Healthcare Mirth Connect SQL injection7.2CNA v4.00.5%2026-09-11Fix
CVE-2026-82578NextGen Healthcare Mirth Connect improper restriction of XML external entity reference8.7CNA v4.00.4%2026-09-11Fix
CVE-2026-82535Chamilo LMS stored XSS via Survey Answer Submission in reporting.php5.3CNA v4.00.5%2026-09-11Fix
CVE-2026-82305YITH WooCommerce Wishlist wishlist rename endpoint insecure direct object reference5.3CISA ADP v3.10.3%2026-09-11Fix
CVE-2026-82215WC PayPay Gateway - Unauthenticated Payment Bypass via Unverified Webhook5.9CNA v3.10.2%2026-09-11
CVE-2026-82213Nexi XPay Build - Unauthenticated Saved Payment token disclosure via IDOR5.3CNA v3.10.3%2026-09-11
CVE-2026-81918Concrete CMS is vulnerable to stored XSS4.8CNA v4.00.3%2026-09-11
CVE-2026-81917Concrete CMS is vulnerable to stored XSS in the Document library block file description and tags5.1CNA v4.00.2%2026-09-11
CVE-2026-81916Concrete CMS Express entries dashboard incorrect authorization5.1CNA v4.00.3%2026-09-11
CVE-2026-81915In Concrete CMS, Page Type update omits object-level authorization5.1CNA v4.00.3%2026-09-11
CVE-2026-81913Concrete CMS are vulnerable to open redirect via the rcURL parameter5.3CNA v4.00.3%2026-09-11
CVE-2026-81912Concrete CMS is vulnerable to cross-site request forgery in the Move multiple Groups feature5.7CNA v4.00.2%2026-09-11
CVE-2026-81911Concrete CMS to is vulnerable to stored XSS in Board Custom Slot save_template5.8CNA v4.00.2%2026-09-11
CVE-2026-81910Concrete CMS 9 is vulnerable to server-side template injection in Theme Customizer5.9CNA v4.00.4%2026-09-11
CVE-2026-81909Concrete CMS orphaned block alias route missing authorization5.9CNA v4.00.4%2026-09-11Fix
CVE-2026-81908Concrete CMS REST API groups list endpoint missing authorization6.0CNA v4.00.4%2026-09-11Fix
CVE-2026-81907Concrete CMS Express clear entries endpoint cross-site request forgery6.1CNA v4.00.1%2026-09-11
CVE-2026-81861Schneider Electric SCADAPack 47x insufficiently protected credentials5.9CNA v4.00.5%2026-09-11Exploit code
CVE-2026-81825Simple Ajax Chat WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-09-11Fix
CVE-2026-81754Vigilant WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-09-11Fix
CVE-2026-81018Linux kernel think-lmi driver memory leak–0.2%2026-09-11Fix
CVE-2026-81017Linux kernel sensorhub driver vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-81016Linux kernel AMD PMC driver improper error handling7.7CNA v3.10.2%2026-09-11Fix
CVE-2026-81015Linux kernel AMD PMC driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-81014Linux kernel hp-bioscfg driver out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-81013Linux kernel hp-bioscfg driver out-of-bounds read–0.2%2026-09-11Fix
CVE-2026-81012Linux kernel hp-bioscfg driver vulnerability8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-81011Linux kernel HP BIOS configuration driver vulnerability7.1CNA v3.10.1%2026-09-11Fix
CVE-2026-81010Linux kernel io_uring waitid vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-81009Linux kernel io_uring query interface vulnerability–0.2%2026-09-11Fix
CVE-2026-81008Linux kernel interconnect framework use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-81007Linux kernel IPMB driver vulnerability7.1CNA v3.10.1%2026-09-11Fix
CVE-2026-81006Linux kernel IPMI sysfs interface vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-81005Linux kernel IPMI system interface driver null pointer dereference–0.2%2026-09-11Fix
CVE-2026-81004Linux kernel IPMI message handler vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-81003Linux kernel AF_IUCV socket lookup vulnerability8.1CNA v3.10.3%2026-09-11Fix
CVE-2026-81002Linux kernel AF_XDP zero-copy conversion vulnerability9.8CNA v3.10.5%2026-09-11Fix
CVE-2026-81001Linux kernel SLIP driver use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-81000Linux kernel tun driver integer underflow7.8CNA v3.10.4%2026-09-11Exploit codeFix
CVE-2026-80999Linux kernel Realtek DSA driver reset GPIO handling vulnerability–0.2%2026-09-11Fix
CVE-2026-80998Linux kernel bnxt Ethernet driver denial of service7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-80997Linux kernel IPA modem TX queue vulnerability7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-80996Linux kernel L2TP netlink notifications improper error handling–0.2%2026-09-11Fix
CVE-2026-80995Linux kernel MCTP route lookup use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80994Linux kernel openvswitch use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80993Linux kernel phylink PCS selection vulnerability–0.2%2026-09-11Fix
CVE-2026-80992Linux kernel ravb PTP clock null pointer dereference7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80991Linux kernel ravb PTP clock use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80990Linux kernel Thunderbolt networking HopID allocation vulnerability–0.2%2026-09-11Fix
CVE-2026-80989Linux kernel Thunderbolt networking teardown vulnerability8.8CNA v3.10.3%2026-09-11Fix
CVE-2026-80988Linux kernel NTB transport TX queue vulnerability–0.2%2026-09-11Fix
CVE-2026-80987Linux kernel NTB transport TX queue vulnerability7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-80986Linux kernel SMC-Rv2 LLC add-link handling vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-80985Linux kernel SMC-Rv2 LLC message handling vulnerability8.2CNA v3.10.5%2026-09-11Fix
CVE-2026-80984Linux kernel SMC-D close teardown vulnerability–0.2%2026-09-11Fix
CVE-2026-80983Linux kernel SMC connection switch vulnerability–0.2%2026-09-11Fix
CVE-2026-80982Linux kernel SMC receive buffer splice use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80981Linux kernel SMC LLC add-link handling use-after-free9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-80980Linux kernel SMC connection state flags vulnerability9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-80979Linux kernel SMC-D connection teardown vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80978Linux kernel IP tunnel headroom calculation vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80977Linux kernel SKB zerocopy completion vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80976Linux kernel seg6 IPv6 decapsulation vulnerability9.8CNA v3.10.7%2026-09-11Fix
CVE-2026-80975Linux kernel qnap-mcu driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80974Linux kernel sm501 MFD driver memory leak–0.2%2026-09-11Fix
CVE-2026-80973Linux kernel ALSA 6fire driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80972Linux kernel ALSA aloop driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80971Linux kernel ALSA bcd2000 driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80970Linux kernel ALSA FCP driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80969Linux kernel ALSA mpu401 driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80968Linux kernel ALSA mts64 driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80967Linux kernel ALSA pcxhr driver vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-80966Linux kernel ALSA portman2x4 driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80965Linux kernel ALSA serial-u16550 driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80964Linux kernel ALSA virmidi driver vulnerability–0.2%2026-09-11Fix
CVE-2026-80963Linux kernel dm-stats per-CPU allocation null pointer dereference–0.2%2026-09-11Fix
CVE-2026-80962Linux kernel dm-pcache geometry validation vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80961Linux kernel dm-pcache kset validation out-of-bounds read7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80960Linux kernel dm-pcache segment validation out-of-bounds write–0.2%2026-09-11Fix
CVE-2026-80959Linux kernel dm-pcache tail position decoding vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80958Linux kernel dm-pcache tail kset read vulnerability7.1CNA v3.10.2%2026-09-11Fix
CVE-2026-80957Linux kernel dm-pcache replay chain vulnerability–0.2%2026-09-11Fix
CVE-2026-80956Linux kernel dm-pcache segment allocator vulnerability–0.2%2026-09-11Fix
CVE-2026-80955Linux kernel dm-pcache kset replay use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80954Linux kernel I3C transfer mode selection vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80953Linux kernel ADI I3C master driver vulnerability8.4CNA v3.10.2%2026-09-11Fix
CVE-2026-80952Linux kernel I3C device unregister path information disclosure7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80951Linux kernel i3c master driver out-of-bounds write–0.2%2026-09-11Fix
CVE-2026-80950Linux kernel Renesas I3C driver vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80949Linux kernel brcmfmac SDIO driver memory leak–0.2%2026-09-11Fix
CVE-2026-80948Linux kernel iwlwifi DVM driver memory leak–0.2%2026-09-11Fix
CVE-2026-80947Linux kernel rtl8xxxu RX URB worker use-after-free7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80946Linux kernel FUSE io-uring request header copy denial of service–0.2%2026-09-11Fix
CVE-2026-80945Linux kernel iaa hardware decompression fallback vulnerability9.1CNA v3.10.5%2026-09-11Fix
CVE-2026-80944Linux kernel mwifiex synchronous command buffer vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80943Linux kernel rtl8192du QoS TID aggregation state vulnerability7.6CNA v3.10.2%2026-09-11Fix
CVE-2026-80942Linux kernel rtl8192du driver initialization memory leak–0.2%2026-09-11Fix
CVE-2026-80941Linux kernel rtw88 TX queue memory leak–0.2%2026-09-11Fix
CVE-2026-80940Linux kernel rtw88 PCI NAPI setup vulnerability–0.2%2026-09-11Fix
CVE-2026-80939Linux kernel rtw89 PCI rfkill polling denial of service–0.2%2026-09-11Fix
CVE-2026-80938Linux kernel mt7615 suspend handling deadlock–0.2%2026-09-11Fix
CVE-2026-80937Linux kernel mt7915 EEPROM EFUSE copy out-of-bounds write8.8CNA v3.10.3%2026-09-11Fix
CVE-2026-80936Linux kernel mt7925 multi-link power-save work vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80935Linux kernel mt7996 EEPROM EFUSE copy out-of-bounds write8.8CNA v3.10.3%2026-09-11Fix
CVE-2026-80934Linux kernel mt7996 AddBA frame TX DMA mapping vulnerability–0.2%2026-09-11Fix
CVE-2026-80933Linux kernel mt7996 EEPROM firmware parsing vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80932Linux kernel virtio vsock work teardown use-after-free8.4CNA v3.10.1%2026-09-11Fix
CVE-2026-80931Linux kernel DS28E17 I2C block read vulnerability7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80930Linux kernel tpm_i2c_nuvoton interrupt handling vulnerability–0.2%2026-09-11Fix
CVE-2026-80929Linux kernel cad_pid sysctl permissions vulnerability7.8CNA v3.10.2%2026-09-11Fix
CVE-2026-80928Linux kernel smack use-after-free7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-80927Linux kernel adjtimex auxiliary clock handling vulnerability–0.2%2026-09-11Fix
CVE-2026-80926Linux kernel ksmbd oplock break notification use-after-free9.8CNA v3.10.4%2026-09-11Fix
CVE-2026-80469SICK Sentio Creator Extension Device Manager device driver improper signature verification8.3CNA v3.10.4%2026-09-11Fix
CVE-2026-80462Privilege escalation in Progress Chef Automate10.0CNA v3.10.5%2026-09-11NucleiFix
CVE-2026-79396Xiongmai XM530 firmware Sofia executable hard-coded credentials9.8CISA ADP v3.10.6%2026-09-11
CVE-2026-79395WS-Security An improper authentication9.8CISA ADP v3.10.8%2026-09-11
CVE-2026-79394Xiongmai XM530 firmware Happytime RTSP server missing authentication7.5CISA ADP v3.10.6%2026-09-11
CVE-2026-79393Xiongmai XM530 firmware Sofia IPC daemon WS-Addressing handler heap-based buffer overflow7.5CISA ADP v3.10.7%2026-09-11
CVE-2026-79362WoltLab Suite Core cache file generation code injection8.8CISA ADP v3.10.6%2026-09-11
CVE-2026-79035Zeta Marketing Platform p.rfihub.com endpoint reflected cross-site scripting6.1CISA ADP v3.10.3%2026-09-11
CVE-2026-78807wpa_supplicant PMKSA caching vulnerability7.1CISA ADP v3.10.1%2026-09-11Fix
CVE-2026-78547Citrix Workspace app out-of-bounds write4.4CNA v4.00.1%2026-09-11
CVE-2026-78546Citirx Workspace app out-of-bounds read4.8CNA v4.00.1%2026-09-11
CVE-2026-78224NextGen Healthcare Mirth Connect improper restriction of XML external entity reference8.8CNA v4.00.4%2026-09-11Fix
CVE-2026-78172Themify WooCommerce Product Filter WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2026-09-11Fix
CVE-2026-78135strongSwan improper workflow enforcement7.3v3.10.4%2026-09-11Fix
CVE-2026-78134strongSwan incorrect authorization7.1CNA v3.10.3%2026-09-11Fix
CVE-2026-78133strongSwan use-after-free7.5CNA v3.10.4%2026-09-11Fix
CVE-2026-78132strongSwan infinite loop7.5CNA v3.10.3%2026-09-11Fix
CVE-2026-78131strongSwan memory leak3.7CNA v3.10.2%2026-09-11Fix
CVE-2026-78130strongSwan null pointer dereference7.5CNA v3.10.3%2026-09-11Fix
CVE-2026-78129strongSwan infinite loop5.9CNA v3.10.4%2026-09-11Fix
CVE-2026-78127strongSwan memory leak3.7CNA v3.10.4%2026-09-11Fix
CVE-2026-78126strongSwan null pointer dereference5.9CNA v3.10.4%2026-09-11Fix
CVE-2026-78124strongSwan memory leak3.7CNA v3.10.2%2026-09-11Fix
CVE-2026-78123strongSwan expired pointer dereference5.9CNA v3.10.4%2026-09-11Fix
CVE-2026-77490Microsoft Edge (Chromium-based) spoofing6.1CNA v3.10.4%2026-09-11Fix
CVE-2026-77159libvirt qemuTPMEmulatorPrepareHost function symlink following5.5CNA v3.10.2%2026-09-11Fix
CVE-2026-77150Unlimited Elements For Elementor WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2026-09-11Fix
CVE-2026-74925MultiVendorX - Store Owner+ privilege escalation to Administrator7.2CISA ADP v3.10.5%2026-09-11Fix
CVE-2026-73785HPE IceWall Federation agent and Proxy, denial of service7.5CNA v3.10.6%2026-09-11
CVE-2026-73784HPE IceWall products, Remote Bypass of Security Restrictions8.8CNA v3.10.3%2026-09-11
CVE-2026-72710SPIP RCE via editer_objet.php Job Queue injection9.3CNA v4.01.1%2026-09-11Fix
CVE-2026-72709SPIP missing authorization via ecrire/action/9.3CNA v4.00.7%2026-09-11KCVFix
CVE-2026-72708SPIP unauthenticated blind SQL injection via sitemap.xml.html8.7CNA v4.00.5%2026-09-11Exploit codeKCVFix
CVE-2026-71646SYSU STAR Group RACER exploration FSM timer callback denial of service7.5CISA ADP v3.10.5%2026-09-11
CVE-2026-71644Robotics-STAR-Lab RACER Tested FSM type confusion9.8CISA ADP v3.10.6%2026-09-11
CVE-2026-71641EGO-Planner-v2 emergency recovery logic denial of service7.5CISA ADP v3.10.6%2026-09-11
CVE-2026-71416Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)8.8CNA v3.10.2%2026-09-11Fix
CVE-2026-70341Microsoft Edge (Chromium-based) remote code execution8.5CNA v3.10.5%2026-09-11Fix
CVE-2026-68535Concrete CMS CMS Area REST API block-create endpoint missing authorization5.1CNA v4.00.2%2026-09-11
CVE-2026-68528Concrete CMS is vulnerable to stored XSS in RSS Displayer block via Unescaped Remote Feed Item title6.0CNA v4.00.4%2026-09-11Fix
CVE-2026-68526Concrete CMS is vulnerable to CSRF in the Calendar event duplicate dialog controller5.3CNA v4.00.1%2026-09-11Fix
CVE-2026-68497FasterXML jackson-databind CoreXMLDeserializers denial of service7.5CNA v3.10.6%2026-09-11Fix
CVE-2026-67211Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer7.5CISA ADP v3.10.7%2026-09-11Fix
CVE-2026-62140Quiz And Survey Master WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62139Site Kit by Google WordPress plugin cross-site request forgery (CSRF)4.3CNA v3.10.1%2026-09-11Fix
CVE-2026-62138Visual Composer Website Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-11Fix
CVE-2026-62137bbPress WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62136Flexible Quantity WordPress plugin Unauthenticated missing authorization5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62135Booktics WordPress plugin broken access control5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62134Starter Templates WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62133RTMKit WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-09-11Fix
CVE-2026-62132Masteriyo - LMS WordPress plugin broken access control5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62114Passster WordPress plugin broken access control5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62113Slim SEO WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.3%2026-09-11Fix
CVE-2026-62112Amelia WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-11Fix
CVE-2026-62111Simple Payment WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-11Fix
CVE-2026-62110Bold Page Builder WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-11Fix
CVE-2026-62109Sky Addons for Elementor WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-11Fix
CVE-2026-62107Masteriyo - LMS WordPress plugin PHP object injection8.8CNA v3.10.5%2026-09-11Fix
CVE-2026-62106SMS Alert Order Notifications WordPress plugin privilege escalation8.8CNA v3.10.4%2026-09-11Fix
CVE-2026-62105ThemeREX Addons WordPress plugin PHP object injection9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-62103Everest Forms WordPress plugin PHP object injection9.8CNA v3.10.6%2026-09-11Fix
CVE-2026-62102Gato GraphQL WordPress plugin privilege escalation8.8CNA v3.10.4%2026-09-11Fix
CVE-2026-62089Master Addons for Elementor WordPress plugin broken access control7.1CNA v3.10.3%2026-09-11Fix
CVE-2026-62088ElasticPress WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-57843NetBSD mm_open PK_KMEM Flag Kernel Pointer information disclosure6.8CNA v4.00.1%2026-09-11Fix
CVE-2026-57842NetBSD COMPAT_NETBSD32 double free / use-after-free via recvmsg msg_iovlen7.3CNA v4.00.1%2026-09-11Fix
CVE-2026-54258zoneminder cross-monitor event media authorization bypass in direct event media endpoints6.5CNA v3.10.3%2026-09-11Fix
CVE-2026-54248Doco-CD has an OCI Trust Policy Bypass via Artifact-Contained Configuration6.5CNA v3.10.4%2026-09-11Fix
CVE-2026-54241libde265 sample adaptive offset filter heap buffer overflow7.4CNA v3.10.4%2026-09-11Fix
CVE-2026-54240libde265 pixel accessor integer overflow7.4CNA v3.10.4%2026-09-11Fix
CVE-2026-54174melange package data section verification vulnerability8.3CNA v3.10.2%2026-09-11Fix
CVE-2026-54166shelf.nu Shelf vulnerable to server-side request forgery7.1CNA v3.10.4%2026-09-11Fix
CVE-2026-54165smgdkngt dobase stored DOM-XSS in public shared-folder image gallery6.4CNA v4.00.5%2026-09-11Fix
CVE-2026-54135AirSane has a remote denial of service (OOM) via Unvalidated Content-Length in HTTP Server7.5CNA v3.10.8%2026-09-11Fix
CVE-2026-54072Authorizer: Unvalidated redirect_uri in /authorize leaks oauth2 tokens to attacker-controlled URL9.3CNA v3.10.5%2026-09-11Fix
CVE-2026-54047LaciSynchroni server Laci Synchroni Backend vulnerable to account takeover / User Impersonation9.2CNA v4.00.3%2026-09-11Fix
CVE-2026-53952GetSimple CMS setup.php missing authentication9.8CNA v3.10.6%2026-09-11
CVE-2026-52630Woltlab WCF v.6.2.4 and SQL injection9.8CISA ADP v3.10.7%2026-09-11
CVE-2026-50025Mousehole: Unauthenticated HTTP/WebSocket boundary exposes and mutates MAM cookie state6.9CNA v4.00.3%2026-09-11Fix
CVE-2026-50018Hoverfly: Denial of service via Goroutine leak in Remote Post-Serve Actions6.5CNA v3.10.5%2026-09-11Fix
CVE-2026-50013Hoverfly: Process crash via Concurrent Map Write race condition in Diff Mode7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-49992Kimai team creation endpoints cross-site request forgery6.3CNA v4.00.2%2026-09-11Fix
CVE-2026-49865Kimai has server-side request forgery in Invoice PDF Rendering via Markdown Image URLs5.3CNA v4.00.4%2026-09-11Fix
CVE-2026-49846libks has path traversal in kws HTTP parser via URI segment overflow7.5CNA v3.10.5%2026-09-11Fix
CVE-2026-49464NL Portal taak GraphQL API insecure direct object reference8.1CNA v3.10.4%2026-09-11Fix
CVE-2026-49463NL Portal documenten and besluiten GraphQL API improper authorization6.5CNA v3.10.3%2026-09-11Fix
CVE-2026-49462nl.nl-portal:app has GraphiQL UI and GraphQL schema introspection enabled by default5.3CNA v3.10.4%2026-09-11Fix
CVE-2026-49439OpenRemote read-only asset users can write predicted datapoints4.3CNA v3.10.3%2026-09-11Fix
CVE-2026-48496OpenTelemetry eBPF Profiler mapping file reader denial of service6.2CNA v3.10.2%2026-09-11Fix
CVE-2026-48490ArduinoCore-AVR: Stack-based buffer overflow in String float/double concatenation handler6.9CNA v4.00.7%2026-09-11Fix
CVE-2026-47839Cloud Foundry Foundation UAA OIDC group mapping vulnerability9.2CNA v4.00.3%2026-09-11
CVE-2026-47773ArduinoBLE: Memory corruption via malformed ATT write request7.2CNA v4.00.2%2026-09-11Fix
CVE-2026-45057Matrix.org matrix-sdk-ui message edit validation vulnerability4.9CNA v3.10.2%2026-09-11Fix
CVE-2026-45056Matrix.org matrix-rust-sdk Olm to-device event decryption vulnerability6.9CNA v4.00.3%2026-09-11Fix
CVE-2026-44715OpenMRS has broken access control in HL7 Configuration8.7CNA v4.00.4%2026-09-11Fix
CVE-2026-38058ST Engineering iDirect iQ-Series terminals configuration endpoint system information disclosure8.6CNA v4.00.5%2026-09-11Fix
CVE-2026-38056ST Engineering iDirect iQ-Series Terminals missing authorization9.4CNA v4.00.2%2026-09-11Fix
CVE-2026-27378Deposits and Partial Payments for WooCommerce WordPress plugin broken access control5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-19991UsersWP WordPress plugin authenticated (Subscriber+) arbitrary file deletion8.1CNA v3.10.4%2026-09-11Fix
CVE-2026-19985Relevanssi WordPress plugin reflected cross-site scripting6.1CNA v3.10.3%2026-09-11Fix
CVE-2026-19486SSRF in Gemini Enterprise Agent Platform App Builder8.7CNA v4.00.3%2026-09-11Fix
CVE-2026-18964Floating Chat Widget: Contact Chat Icons WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-09-11Fix
CVE-2026-18579WP Photo Album Plus WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-09-11Fix
CVE-2026-18562HUSKY WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-09-11Reported exploitedFix
CVE-2026-18561Unlimited Elements For Elementor WordPress plugin unauthenticated SQL injection7.5CNA v3.10.3%2026-09-11Fix
CVE-2026-18495Red Hat Hardened Images libtiff: Libtiff: Heap-buffer overflow6.1CNA v3.10.1%2026-09-11Fix
CVE-2026-18122Concrete CMS Express REST API list endpoint missing authorization6.0CNA v4.00.2%2026-09-11Fix
CVE-2026-18061AWS Advanced JDBC Wrapper RemoteQueryCachePlugin XML external entity injection6.0CNA v4.00.3%2026-09-11Fix
CVE-2026-17037Kirki WordPress plugin unauthenticated stored cross-site scripting via comment parameter7.2CNA v3.10.2%2026-09-11Fix