CVE-2026 list

CVE-2026 records published in September 2026

Page 11 of 15: records 10,001 to 11,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 10,001 to 11,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-15710Netskope client Endpoint DLP Kernel driver information leakage6.8CNA v4.00.1%2026-09-11Fix
CVE-2026-15462Sticky Chat Widget WordPress plugin unauthenticated SQL injection7.5CNA v3.10.3%2026-09-11Fix
CVE-2026-15439GamiPress WordPress plugin authenticated (Subscriber+) SQL injection6.5CNA v3.10.2%2026-09-11Fix
CVE-2026-14566Advanced Customized Prompts order item metadata insecure direct object reference4.3CISA ADP v3.10.1%2026-09-11
CVE-2026-14565Advanced Customized Prompts product popup configuration stored cross-site scripting5.4CISA ADP v3.10.1%2026-09-11
CVE-2026-14563Advanced Customized Prompts improper authentication9.8CISA ADP v3.10.3%2026-09-11
CVE-2026-14562Teddy Bear Customize Addon order and attachment metadata information disclosure5.3CISA ADP v3.10.2%2026-09-11
CVE-2026-14560Teddy Bear Customize Addon arbitrary file upload10.0CISA ADP v3.10.4%2026-09-11
CVE-2026-14559Teddy Bear Customize Addon improper authentication9.8CISA ADP v3.10.3%2026-09-11
CVE-2026-13326Out-of-bounds read and integer underflow vulnerability in QNdefNfcTextRecord impacts Qt NFC module6.9CNA v4.00.2%2026-09-11Fix
CVE-2026-12215OTP Login and Register Woocommerce WordPress plugin unauthenticated authentication bypass5.3CNA v3.10.3%2026-09-11Fix
CVE-2026-11765Argument injection in TUBITAK BILGEM's Pardus Pen3.3CNA v3.10.1%2026-09-11Fix
CVE-2026-11496PDF Builder for WooCommerce InspectOrder AJAX handler missing authorization6.5CNA v3.10.3%2026-09-11Fix
CVE-2026-11446Booktics WordPress plugin unauthorized access5.3CNA v3.10.2%2026-09-11Fix
CVE-2026-9160Arma Digital Media Website Template template engine vulnerability improper neutralization4.3CNA v3.10.3%2026-09-11
CVE-2026-8778MIPL Grouped Checkout Fields for WooCommerce WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.1%2026-09-11Fix
CVE-2026-8304Information disclosure in TUBITAK BILGEM's Pardus About5.5CNA v3.10.1%2026-09-11Fix
CVE-2026-8303Privilege escalation in TUBITAK BILGEM's Pardus-software7.8CNA v3.10.1%2026-09-11Fix
CVE-2026-8301OS command injection in TUBITAK BILGEM's Pardus-boot-repair7.8CNA v3.10.8%2026-09-11Fix
CVE-2026-7863OS command injection in TUBITAK BILGEM's Pardus Software8.4CNA v3.11.0%2026-09-11Fix
CVE-2026-7438Bold Timeline Lite WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-11Fix
CVE-2026-7298Reflected XSS in IdeaSoft's Smart E-Commerce6.1CNA v3.10.3%2026-09-11Fix
CVE-2026-6642Media Library Assistant WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-11Fix
CVE-2026-6641Media Library Assistant WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-11Fix
CVE-2026-6640Media Library Assistant WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-11Fix
CVE-2026-3869Schneider Electric Modicon M580 flawed authentication9.2CNA v4.00.5%2026-09-11Fix
CVE-2026-89094Forgejo server-side template injection9.9CNA v3.10.9%2026-09-10Fix
CVE-2026-89089OpenNMS SQL injection in shipped Asset Management JasperReports6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-89087cstruct index handling vulnerability7.3CNA v3.10.3%2026-09-10Fix
CVE-2026-89086OCaml jose improper signature verification9.1CNA v3.10.3%2026-09-10Fix
CVE-2026-89054The OpenNMS Group Horizon missing authorization8.2CNA v3.10.5%2026-09-10Fix
CVE-2026-89049AWS Amazon SSM Agent server-side request forgery8.5CNA v4.00.7%2026-09-10Fix
CVE-2026-89046zstd-jni out-of-bounds read via Negative Offset8.8CNA v4.00.7%2026-09-10Fix
CVE-2026-89045zstd-jni denial of service via Negative Length5.1CNA v4.00.2%2026-09-10Fix
CVE-2026-89044netty Netty.Final and.Final HTTP request smuggling via Transfer-Encoding6.9CNA v4.00.3%2026-09-10Fix
CVE-2026-89043passport-saml-encrypted XML Signature Wrapping via Assertion Prepending9.1CNA v4.00.3%2026-09-10
CVE-2026-89042passport-saml-encrypted authentication bypass via missing signature verification9.3CNA v4.00.4%2026-09-10
CVE-2026-89011isomorphic-git prototype pollution via getRemoteInfo7.1CNA v4.00.4%2026-09-10Fix
CVE-2026-88959Anchor CMS privilege escalation via missing authorization on Admin User-Management endpoints8.7CNA v4.00.5%2026-09-10
CVE-2026-88940knowns Arbitrary Directory Enumeration via workspace browse endpoint6.9CNA v4.00.6%2026-09-10
CVE-2026-88939knowns authorization bypass via project.set Bootstrap Exemption8.7CNA v4.00.5%2026-09-10
CVE-2026-88938knowns path traversal via code.find MCP tool7.1CNA v4.00.5%2026-09-10
CVE-2026-88937knowns path traversal via Template Engine8.6CNA v4.00.7%2026-09-10Fix
CVE-2026-88924Gvfs: Gvfs-admin socket ownership race permits local root7.0CNA v3.10.2%2026-09-10Fix
CVE-2026-88921MISP: Unescaped HTML injection in PDF Report Element Rendering5.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88915MISP Event Template Instantiation Bypasses Sharing Group and Tagging Authorization7.1CNA v4.00.4%2026-09-10
CVE-2026-88899knowns External Control of Agent Working Directory via x-opencode-directory header9.3CNA v4.00.8%2026-09-10Exploit codeFix
CVE-2026-88898AppFlowy-Cloud Missing Workspace Authorization on Bulk Publish endpoint7.1CNA v4.00.4%2026-09-10
CVE-2026-88897Flextype CMS API token exposure via Query String8.2CNA v4.00.6%2026-09-10
CVE-2026-88896EspoCRM SSRF via IPv6 Transition Address Bypass6.9CNA v4.00.4%2026-09-10Fix
CVE-2026-88895CyberPanel authentication bypass via API8.6CNA v4.00.7%2026-09-10Fix
CVE-2026-88894Snipe-IT authorization bypass via Predefined Kit Checkout5.3CNA v4.00.3%2026-09-10Fix
CVE-2026-88893OpenPanel Unauthenticated Share Lookup information disclosure8.7CNA v4.00.5%2026-09-10Fix
CVE-2026-88892OpenPanel SSRF via Unguarded Importer File URL Fetch5.3CNA v4.00.3%2026-09-10
CVE-2026-88891OpenPanel Read-Only Access Level Enforcement Bypass via Mutations7.2CNA v4.00.4%2026-09-10
CVE-2026-88890OpenPanel SQL injection via unvalidated profile filter column identifier8.4CNA v4.00.4%2026-09-10Fix
CVE-2026-88889Renovate command injection via distributionType8.5CNA v4.01.0%2026-09-10Fix
CVE-2026-88888Renovate command injection via Mix organization7.3CNA v4.00.9%2026-09-10Fix
CVE-2026-88887Renovate Credential Exfiltration via Link header9.2CNA v4.00.4%2026-09-10Fix
CVE-2026-88886Renovate command injection via gradle-wrapper8.5CNA v4.00.2%2026-09-10Fix
CVE-2026-88885Renovate command injection via depName7.3CNA v4.00.9%2026-09-10Fix
CVE-2026-88884Renovate authentication bypass via Digest Updates6.9CNA v4.00.3%2026-09-10Fix
CVE-2026-88883Renovate TLS Private Key Log Sanitisation8.3CNA v4.00.4%2026-09-10Fix
CVE-2026-88882Renovate Credential Exfiltration via Link header9.2CNA v4.00.4%2026-09-10Fix
CVE-2026-88881Renovate Credential Exfiltration via Link header9.2CNA v4.00.4%2026-09-10Fix
CVE-2026-88880Renovate Credential Exfiltration via Link header9.2CNA v4.00.5%2026-09-10Fix
CVE-2026-88879Traefik Identity spoofing via Header Alias8.2NVD v3.10.3%2026-09-10Fix
CVE-2026-88878Traefik HTTP/3 Timeout Bypass6.9CNA v4.00.4%2026-09-10Fix
CVE-2026-88877Traefik authentication bypass via from-to-www-redirect9.3CNA v4.00.6%2026-09-10Fix
CVE-2026-88876AVideo PlayerSkins seo.php missing authorization Password-Protected VOD8.7CNA v4.00.4%2026-09-10Fix
CVE-2026-88875AVideo Incomplete API Sanitization information disclosure5.3CNA v4.00.3%2026-09-10Fix
CVE-2026-88874AVideo through c3edcc274c389816d434acadac07ee78eaf330c1 authentication bypass8.7CNA v4.00.5%2026-09-10
CVE-2026-88873WWBN AVideo cross-site request forgery via logArchive.json.php7.1CNA v4.00.2%2026-09-10Fix
CVE-2026-88872AVideo CustomizeUser setPassword.json.php CSRF7.1CNA v4.00.2%2026-09-10
CVE-2026-88871WWBN AVideo CustomizeUser setSubscribers CSRF via GET5.3CNA v4.00.2%2026-09-10
CVE-2026-88870WWBN AVideo LoginControl PGP Key CSRF via GET request7.1CNA v4.00.2%2026-09-10Fix
CVE-2026-88869AVideo AD_Server stored XSS via log.php label parameter9.3CNA v4.00.5%2026-09-10
CVE-2026-88868AVideo LiveLinks stored XSS via title and description fields9.3CNA v4.00.4%2026-09-10Fix
CVE-2026-88867WWBN AVideo stored XSS via Category Name and Icon class9.3CNA v4.00.4%2026-09-10
CVE-2026-88866WWBN AVideo LoginControl stored XSS via User-Agent header9.3CNA v4.00.4%2026-09-10
CVE-2026-88865AVideo missing authorization via getRestream.json.php8.6CNA v4.00.4%2026-09-10Fix
CVE-2026-88864Capgo SSO Provider authentication bypass via PostgREST Direct Write9.3CNA v4.00.4%2026-09-10
CVE-2026-88863Capgo.app privilege escalation via invite_new_user_to_org8.6CNA v4.00.4%2026-09-10Fix
CVE-2026-88862Capgo API Key Manager authentication bypass via x-limited-key-id8.7CNA v4.00.4%2026-09-10
CVE-2026-88861Capgo AAL1 Session MFA Bypass via Direct RBAC Authorization8.7CNA v4.00.5%2026-09-10Exploit code
CVE-2026-88860Capgo authorization bypass via Stale Channel Permission Overrides9.3CNA v4.00.3%2026-09-10Fix
CVE-2026-88859Evolution mail viewer vCard handler cross-site scripting6.3CNA v3.10.5%2026-09-10
CVE-2026-88790proma-ai Proma File Preview service file-preview-service.ts resolveTargetPath path traversal2.4CNA v4.00.2%2026-09-10Fix
CVE-2026-88770Red Hat Build of Keycloak device authorization grant vulnerability6.5CNA v3.10.4%2026-09-10
CVE-2026-88763Skupper-router: Skupper-router: Unbounded recursion in amqp field parser leads to denial of service5.9CNA v3.10.5%2026-09-10Fix
CVE-2026-88290GV-LPC2011/LPC2211 Unauthenticated VLSVR Slowloris and memory resource exhaustion7.5CNA v3.10.5%2026-09-10
CVE-2026-88289GV-LPC2011/LPC2211 multiple Pre-Authentication Stack Buffer Overflows in VLSVR Request Handlers7.5CNA v3.10.6%2026-09-10
CVE-2026-88288GV-LPC2011/LPC2211 arbitrary file read through BKDownloadLink.cgi Symlink Creation6.5CNA v3.10.5%2026-09-10
CVE-2026-88287GV-LPC2011/LPC2211 -ONVIF Discovery Probe Scopes Stack-Frame Overflow denial of service7.5CNA v3.10.5%2026-09-10
CVE-2026-88286GV-LPC2011/LPC2211 PTZ Connection-State Accept-Loop denial of service7.5CNA v3.10.5%2026-09-10
CVE-2026-88285GV-LPC2011/LPC2211 Unauthenticated PTZ Control service9.4CNA v3.10.5%2026-09-10
CVE-2026-88284GV-LPC2011/LPC2211 ONVIF SetUser Repeated-Element Stack-Frame Overflow denial of service4.9CNA v3.10.4%2026-09-10
CVE-2026-88283GV-LPC2011/LPC2211 ONVIF CreateUsers Repeated-Element Stack-Frame Overflow denial of service4.9CNA v3.10.4%2026-09-10
CVE-2026-88282GV-LPCLPC2011/2211 Stored FTP-Username command injection7.2CNA v3.10.5%2026-09-10
CVE-2026-88281GV-LPC2011/LPC2211 ONVIF DeleteUsers Repeated-Element stack overflow denial of service4.9CNA v3.10.4%2026-09-10
CVE-2026-88280GV-LPC2011/LPC2211 ONVIF SetUser Stack-Frame Overflow denial of service4.9CNA v3.10.4%2026-09-10
CVE-2026-88279GV-LPC2011/LPC2211 ONVIF CreateUsers Username/Password Stack-Frame Overflow denial of service4.9CNA v3.10.4%2026-09-10
CVE-2026-88278GV-LPCLPC2011/2211 ONVIF WS-Security PasswordDigest Replay9.8CNA v3.10.5%2026-09-10
CVE-2026-88277GV-LPCLPC2011/2211 ONVIF Subscribe Address command injection8.8CNA v3.10.7%2026-09-10
CVE-2026-88276GV-LPCLPC2011/2211 Wireless WEP Key1-Key4 command injection7.2CNA v3.10.7%2026-09-10
CVE-2026-88275GV-LPC2011/LPC2211 Wireless WPA-PSK command injection7.2CNA v3.10.7%2026-09-10
CVE-2026-88274GV-LPC2011/LPC2211 Wireless SSID command injection7.2CNA v3.10.7%2026-09-10
CVE-2026-88273GV-LPC2011/LPC2211 PPPoE Username Shell-Configuration command injection7.2CNA v3.10.7%2026-09-10
CVE-2026-88272GV-LPC2011/LPC2211 Stored Administrator-Username command injection7.2CNA v3.10.5%2026-09-10
CVE-2026-88271GV-LPC2011/LPC2211 SSVR Guest Configuration Overwrite and Administrative Credential takeover8.8CNA v3.10.4%2026-09-10
CVE-2026-88270GV-LPC2011/LPC2211 SSVR Guest Firmware-Mode Pre-Validation Service Teardown denial of service6.5CNA v3.10.4%2026-09-10
CVE-2026-88269GV-LPC2011/LPC2211 SSVR Guest Configuration and credential disclosure6.5CNA v3.10.3%2026-09-10
CVE-2026-88268GeoVision GV-LPC2011/LPC2211 SSVR fragment reassembly stack-based buffer overflow6.5CNA v3.10.4%2026-09-10
CVE-2026-88265crun stdio reopen after pivot_root link following5.6CNA v3.10.1%2026-09-10Fix
CVE-2026-88264Crun: Crun: /dev/console symlink follow allows root-owned file creation outside the rootfs5.6CNA v3.10.1%2026-09-10Fix
CVE-2026-88062OmniRoute ACP Custom-Agent remote code execution (RCE)9.5CNA v4.01.4%2026-09-10Reported exploitedNucleiFix
CVE-2026-88061career-ops local dashboard API cross-site request forgery5.8CNA v4.00.4%2026-09-10Fix
CVE-2026-88060Angular server-side rendering cross-site scripting8.6CNA v4.00.4%2026-09-10Fix
CVE-2026-88059Angular: Information leak via `HttpTransferCache` Bypass when using `withRequestsMadeViaParent`4.0CNA v3.10.3%2026-09-10Fix
CVE-2026-88058Angular @angular/platform-server cross-site scripting8.6CNA v4.00.3%2026-09-10Fix
CVE-2026-88057Angular directive host binding sanitization cross-site scripting5.3CNA v4.00.4%2026-09-10Fix
CVE-2026-88056Angular: SSRF and Cross-Origin credential disclosure via URL Resolution Discrepancy in SSR8.6CNA v4.00.5%2026-09-10Fix
CVE-2026-88055Mintplex Labs AnythingLLM MetaGenerator stored cross-site scripting5.5CNA v3.10.3%2026-09-10
CVE-2026-88054Tesseract: Denial of service via empty-stack dereference in Plumbing/Series at model load6.9CNA v4.00.2%2026-09-10Fix
CVE-2026-88053Tesseract: Heap out-of-bounds write in Classify::ReadIntTemplates8.6CNA v4.00.2%2026-09-10Fix
CVE-2026-88052Tesseract: Heap out-of-bounds write in UNICHARSET::load_via_fgets via count/insert desynchronization7.8CNA v3.10.2%2026-09-10Fix
CVE-2026-88051Tesseract GenericVector deserialization out-of-bounds write8.6CNA v4.00.2%2026-09-10Fix
CVE-2026-88050Tesseract: Out-of-bounds write in UnicharCompress via unvalidated recoder code values6.9CNA v4.00.2%2026-09-10Fix
CVE-2026-88049Tesseract: Heap out-of-bounds write in LSTM::Forward via na_/gate-matrix dimension mismatch8.6CNA v4.00.2%2026-09-10Fix
CVE-2026-88048Tesseract: Heap out-of-bounds write/read in FullyConnected::Forward8.6CNA v4.00.2%2026-09-10Fix
CVE-2026-88047Tesseract: ReadNormProtos stack buffer overflow8.6CNA v4.00.1%2026-09-10Fix
CVE-2026-88046rclone object upload path handling path traversal5.3CNA v3.10.3%2026-09-10Fix
CVE-2026-88045rclone S3 multipart upload resource exhaustion7.5CNA v3.10.6%2026-09-10Fix
CVE-2026-88044rclone FTP and S3 auth-proxy check incorrect authorization9.1CNA v3.10.5%2026-09-10Fix
CVE-2026-88038cookies vulnerable to Set-Cookie attribute injection via unvalidated domain and path options4.8CNA v3.10.3%2026-09-10Fix
CVE-2026-88036GridFS data disclosure and deletion via query-operator injection in file IDs in the MongoDB C Driver6.1CNA v4.00.3%2026-09-10Fix
CVE-2026-88035MongoDB C Driver SASL username canonicalization integer overflow5.7CNA v4.00.1%2026-09-10Fix
CVE-2026-88034MongoDB C Driver improper neutralization6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88033MongoDB Java Driver improper neutralization6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88032MongoDB Java Driver use-after-free8.2CNA v4.00.3%2026-09-10Fix
CVE-2026-88031GridFS data deletion via query-operator injection in file IDs in the MongoDB Go Driver6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88030MongoDB Ruby Driver improper neutralization6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88029MongoDB Python Driver pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88028Laravel MongoDB (PHP) improper neutralization7.1CNA v4.00.4%2026-09-10Fix
CVE-2026-88027Laravel MongoDB (PHP) improper neutralization7.1CNA v4.00.3%2026-09-10Fix
CVE-2026-88026Regular expression injection via unescaped characters in LINQ query translation in MongoDB C# Driver7.1CNA v4.00.4%2026-09-10Fix
CVE-2026-88025MongoDB C Driver improper neutralization6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88024MongoDB Rust Driver improper neutralization6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88023MongoDB: GridFS data disclosure and deletion via query-operator injection in file IDs6.1CNA v4.00.5%2026-09-10Fix
CVE-2026-88022Laravel MongoDB (PHP) data query logic in the improper neutralization8.4CNA v4.00.4%2026-09-10Fix
CVE-2026-88021Consul vulnerable to an authorization bypass in the Connect service mesh7.5CNA v3.10.3%2026-09-10Fix
CVE-2026-88018rclone serve s3: --auth-proxy without --auth-key authenticates nobody full SigV4 signature bypass9.8CNA v3.10.5%2026-09-10Fix
CVE-2026-88017rclone FTP auth-proxy backend session data exposure7.3CNA v3.10.2%2026-09-10Fix
CVE-2026-88016rclone local backend symlink handling link following7.1CNA v3.10.2%2026-09-10Fix
CVE-2026-88015rclone local: Crafted Range request against a translated symlink panics (DoS)5.3CNA v3.10.4%2026-09-10Fix
CVE-2026-88014rclone archive zip backend path traversal6.3CNA v3.10.2%2026-09-10Fix
CVE-2026-88013rclone HTTP backend redirect handling information disclosure3.7CNA v3.10.2%2026-09-10Fix
CVE-2026-88012Traefik HTTP/3 read timeout enforcement denial of service5.3CNA v3.10.5%2026-09-10Fix
CVE-2026-88011Traefik: ForwardAuth identity spoofing via dot-form header alias5.3CNA v4.00.4%2026-09-10Fix
CVE-2026-88009Traefik HTTP/1 request-target routing HTTP request smuggling8.8CNA v4.00.4%2026-09-10Fix
CVE-2026-88008Traefik: Inconsistent interpretation of HTTP requests and incorrect authorization7.0CNA v4.00.5%2026-09-10Exploit codeFix
CVE-2026-88007Traefik HTTP/3 Backend NTLM Connection Reuse9.1CNA v4.00.6%2026-09-10Fix
CVE-2026-88006open-webui open WebUI: Users denied by the OAuth role policy can still sign in via token exchange6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-88005Open WebUI OAuth token exchange endpoint incorrect authorization6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-88004Traefik entrypoint header-name sanitization bypassed via request trailers7.0CNA v4.00.5%2026-09-10Fix
CVE-2026-87993HashiCorp Tooling consul-template vulnerable to an information disclosure issue in error handling7.7CNA v3.10.4%2026-09-10Fix
CVE-2026-87962t-digest denial of service via Unvalidated Length fields in MergingDigest.fromBytes8.7CNA v4.00.6%2026-09-10
CVE-2026-87961ESP32-audioI2S Heap-based out-of-bounds read via Shadowed Length parameter in read_ID3_Header7.1CNA v4.00.5%2026-09-10
CVE-2026-87958IBM Db2 denial of service8.1CNA v3.10.4%2026-09-10Fix
CVE-2026-87933DaveGamble cJSON cJSON_Utils.c cJSONUtils_MergePatch use-after-free6.9CNA v4.00.5%2026-09-10
CVE-2026-87913Missing S3 bucket ownership verification in the AWS Security Agent MCP server5.1CNA v4.00.4%2026-09-10Fix
CVE-2026-87912AWS Security Agent plugin S3 output bucket information disclosure5.1CNA v4.00.4%2026-09-10Fix
CVE-2026-87870Ninja Forms - Scheduled Exports WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-10Fix
CVE-2026-87803countly-server An authorization bypass7.1CNA v4.00.3%2026-09-10Fix
CVE-2026-87107Consul vulnerable to an authorization bypass in the catalog deregistration path5.4CNA v3.10.3%2026-09-10Fix
CVE-2026-87106Consul vulnerable to a denial of service in the native RPC listener6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-87090Consul vulnerable to an authorization bypass in the catalog node-write path8.3CNA v3.10.4%2026-09-10Fix
CVE-2026-86093IBM Db2 federated server DRDA client stack-based buffer overflow7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-86087IBM Db2 path traversal4.3CNA v3.10.3%2026-09-10Fix
CVE-2026-85645Form Maker by 10Web WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2026-09-10Fix
CVE-2026-85545Hikvision HikCentral Access Control improper access control7.1CNA v3.10.3%2026-09-10
CVE-2026-85544Hikvision DS-KV9503 hard-coded credentials6.1CNA v3.10.4%2026-09-10
CVE-2026-85543Hikvision Wi-Fi series camera improper authorization4.3CNA v3.10.3%2026-09-10
CVE-2026-85310Groundhogg WordPress plugin path traversal6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-85228Integer overflow in tensor buffer validation in Deep Java Library8.8CNA v4.00.5%2026-09-10Fix
CVE-2026-85217Man-in-the-middle (MITM) vulnerability in Autodesk Fusion Desktop8.6CNA v3.10.2%2026-09-10Fix
CVE-2026-85025IBM Langflow shared MCP project endpoints incorrect authorization9.8CNA v3.10.6%2026-09-10Fix
CVE-2026-84941TP-Link Systems Omada Software Controller (Windows) SAML Single Sign-On information disclosure6.9CNA v4.00.5%2026-09-10Fix
CVE-2026-84939Apache FreeMarker template loading mechanism vulnerable to path traversal9.1CISA ADP v3.10.9%2026-09-10Fix
CVE-2026-84889IBM Langflow file handling path traversal8.8CNA v3.10.9%2026-09-10Fix
CVE-2026-84828Red Hat PCS pcs host auth --token command information disclosure6.5CNA v3.10.1%2026-09-10Fix
CVE-2026-84821WP Fast Total Search WordPress plugin broken access control7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-84819WPAdverts WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-10Fix
CVE-2026-84816WPCS WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-10Fix
CVE-2026-84432Concrete CMS 9 is vulnerable to CSRFin the Boards custom slot dialog controller5.3CNA v4.00.2%2026-09-10
CVE-2026-84063D-ZERO BurgerEditor unrestricted file upload8.5CNA v4.00.4%2026-09-10
CVE-2026-84062D-ZERO BurgerEditor insecure direct object reference5.3CNA v4.00.3%2026-09-10
CVE-2026-84042Crun: Crun: Rootful krun with passt executes container payload as host root7.8CNA v3.10.1%2026-09-10Fix
CVE-2026-82925Site Reviews - unauthenticated PHP object injection via Form Signature8.1CISA ADP v3.10.5%2026-09-10Fix
CVE-2026-82582SHIRASAGI An authorization bypass5.3CNA v4.00.3%2026-09-10
CVE-2026-82107IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.6CNA v3.10.5%2026-09-10Fix
CVE-2026-82100IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.6CNA v3.10.6%2026-09-10Fix
CVE-2026-82099IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-82098IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-82097IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.6%2026-09-10Fix
CVE-2026-82095IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-82092IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-82079Potential Leakage of Nintendo Switch System Information through a Proximity-Based Remote Attack7.0CNA v4.00.3%2026-09-10Fix
CVE-2026-81941IBM Langflow MCP Tools component improper access control8.8CNA v3.10.6%2026-09-10Fix
CVE-2026-81940IBM Langflow flow display names code injection8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-81906Concrete CMS OAuth Callback Login Bypasses Deactivated-Account Checks6.3CNA v4.00.6%2026-09-10Fix
CVE-2026-81905Concrete CMS validation hash redemption incorrect authorization6.3CNA v4.00.4%2026-09-10Fix
CVE-2026-81805SiteSkite WordPress plugin privilege escalation8.1CNA v3.10.4%2026-09-10Fix
CVE-2026-81804ZHBackup Backup, Restore and Migration WordPress plugin sensitive data exposure7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-81803RepairBuddy WordPress plugin remote code execution (RCE)7.5CNA v3.10.6%2026-09-10Fix
CVE-2026-81801WP-Stateless WordPress plugin settings Change vulnerability8.1CNA v3.10.4%2026-09-10Fix
CVE-2026-81800Verified Reviews (Avis Vérifiés) WordPress plugin SQL injection9.3CNA v3.10.4%2026-09-10
CVE-2026-81799WP Swings Return Refund and Exchange For WooCommerce missing authorization7.5CNA v3.10.3%2026-09-10Fix
CVE-2026-81796WP Travel WordPress plugin broken authentication7.3CNA v3.10.4%2026-09-10Fix
CVE-2026-81795Page Visits Counter Lite WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-10Fix
CVE-2026-81794Shirt Product Designer for WooCommerce WordPress plugin broken access control7.5CNA v3.10.3%2026-09-10
CVE-2026-81793Salon booking system WordPress plugin broken access control6.5CNA v3.10.3%2026-09-10
CVE-2026-81791EventON WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-10Fix
CVE-2026-81789Advanced Product Fields Extended for WooCommerce WordPress plugin arbitrary file deletion8.6CNA v3.10.5%2026-09-10Fix
CVE-2026-81788IMPress for IDX Broker WordPress plugin broken access control6.3CNA v3.10.3%2026-09-10Fix
CVE-2026-81787IMPress for IDX Broker WordPress plugin broken authentication6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-81786Thank You Page Customizer for WooCommerce WordPress plugin broken access control7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-81785BuddyForms WordPress plugin broken access control6.5CNA v3.10.3%2026-09-10
CVE-2026-81784Wise Chat WordPress plugin PHP object injection8.1CNA v3.10.4%2026-09-10Fix
CVE-2026-81783MailMunch Grow your Email List WordPress plugin broken authentication7.1CNA v3.10.4%2026-09-10Fix
CVE-2026-81782WP Docs WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-10
CVE-2026-81635SHIRASAGI cross-site scripting5.1CNA v4.00.2%2026-09-10
CVE-2026-81554IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-81551IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.6%2026-09-10Fix
CVE-2026-81550IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-81540IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.5CNA v3.10.5%2026-09-10Fix
CVE-2026-81468Dell ThinOS 10 OS command injection9.1CNA v3.12.0%2026-09-10Fix
CVE-2026-81467Dell ThinOS 10 OS command injection9.8CNA v3.13.0%2026-09-10Fix
CVE-2026-81431Registration Form for WooCommerce - Contributor+ privilege escalation via Unvalidated tgwcfb_id7.2CISA ADP v3.10.5%2026-09-10Fix
CVE-2026-81275Youzify WordPress plugin arbitrary file download6.5CNA v3.10.4%2026-09-10
CVE-2026-81268IBM Langflow is vulnerable to authentication bypass and insufficient session expiration8.1CNA v3.10.4%2026-09-10Fix
CVE-2026-81265IBM Langflow server-side URL fetches server-side request forgery7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-81213IBM Langflow server-side URL fetches server-side request forgery8.6CNA v3.10.5%2026-09-10Fix
CVE-2026-81211IBM Langflow custom component missing authorization8.8CNA v3.10.5%2026-09-10Fix
CVE-2026-81210IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software7.7CNA v3.10.3%2026-09-10Fix
CVE-2026-81207IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.5CNA v3.10.3%2026-09-10Fix
CVE-2026-81204IBM Langflow graph construction code injection9.8CNA v3.10.9%2026-09-10Fix
CVE-2026-81052Dell ThinOS 10 download without integrity check6.8CNA v3.10.2%2026-09-10Fix
CVE-2026-81051Dell ThinOS security version number vulnerability6.6CNA v3.10.2%2026-09-10Fix
CVE-2026-81049Dell ThinOS 10 missing integrity check4.4CNA v3.10.1%2026-09-10Fix
CVE-2026-81048Dell ThinOS 10 command injection9.6CNA v3.12.4%2026-09-10Fix
CVE-2026-81046Dell ThinOS 10 protection mechanism failure9.4CNA v3.10.6%2026-09-10Fix
CVE-2026-80436IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.5CNA v3.10.4%2026-09-10Fix
CVE-2026-80434IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software7.4CNA v3.10.3%2026-09-10Fix
CVE-2026-80424IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software9.1CNA v3.10.5%2026-09-10Fix
CVE-2026-80380IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software7.1CNA v3.10.2%2026-09-10Fix
CVE-2026-80378IBM DataStage on Cloud Pak for Data has several vulnerabilities due to open source software8.5CNA v3.10.4%2026-09-10Fix
CVE-2026-80354Apache Camel K insecure direct object reference8.1CISA ADP v3.10.5%2026-09-10Fix
CVE-2026-80352Apache Camel K code injection9.8CISA ADP v3.10.8%2026-09-10Fix
CVE-2026-80351Apache Camel K: Camel K Tenant repositories reach Maven execution inside operator pod9.8CISA ADP v3.11.0%2026-09-10Fix
CVE-2026-79987craftcms cms low-privilege RCE through element-search eager loading8.7CNA v4.00.6%2026-09-10Fix
CVE-2026-79742IBM Langflow environment variable blocklist code injection8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-79725IBM Langflow storage path validation path traversal6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-79724IBM Langflow code execution guardrails OS command injection9.8CNA v3.10.7%2026-09-10Fix
CVE-2026-79723IBM Langflow API endpoint fetcher server-side request forgery5.0CNA v3.10.4%2026-09-10Fix
CVE-2026-79592xls_dumpSummary function of libxls An out-of-bounds read7.5CISA ADP v3.10.4%2026-09-10Fix
CVE-2026-79591libxls xls_getCSS function heap-based buffer overflow7.8CISA ADP v3.10.2%2026-09-10Fix
CVE-2026-79590Prism parser component of mruby null pointer dereference6.5CISA ADP v3.10.4%2026-09-10
CVE-2026-78575IBM Langflow MCP stdio server configuration command injection8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-78573IBM ContextForge MCP Gateway is affected by use of default credentials9.8CNA v3.10.6%2026-09-10Fix
CVE-2026-78571IBM Langflow eval function code injection8.8CNA v3.10.8%2026-09-10Fix
CVE-2026-78569IBM Langflow code security scanner command injection8.8CNA v3.10.7%2026-09-10Fix
CVE-2026-78536Robokassa payment gateway for Woocommerce WordPress plugin broken access control6.5CNA v3.10.3%2026-09-10Fix
CVE-2026-78374Joomla extension joomlart.com Open mail relay via contact AJAX endpoint in T4 Page Builder extension6.9CNA v4.00.5%2026-09-10
CVE-2026-78361zipMoney Payments Plugin for WooCommerce WordPress plugin unauthenticated arbitrary option deletion9.1CISA ADP v3.10.5%2026-09-10Fix
CVE-2026-78303joomshaper.com SP Property booking request email routing information disclosure6.9CNA v4.00.4%2026-09-10
CVE-2026-78302Joomla extension joomshaper.com unauthenticated cross-site scripting8.6CNA v4.00.4%2026-09-10
CVE-2026-78085Joomla extension joomshaper.com path traversal in Gallery Image Management in SP Property6.9CNA v4.00.5%2026-09-10
CVE-2026-78084Joomla extension joomshaper.com missing access control in Gallery Image Management in SP Property6.9CNA v4.00.3%2026-09-10
CVE-2026-78083JoomShaper SP Property property booking form cross-site request forgery7.1CNA v4.00.2%2026-09-10
CVE-2026-78082JoomShaper SP Property property search filter SQL injection9.3CNA v4.00.5%2026-09-10
CVE-2026-77807AcyMailing WordPress plugin path traversal7.5CNA v3.10.9%2026-09-10Fix
CVE-2026-77771miniOrange 2FA (Free and Pro) 2FA Bypass via Session-Scoped OTP Lockout7.5CISA ADP v3.10.3%2026-09-10Exploit codeFix
CVE-2026-77770miniOrange 2FA Unauthenticated arbitrary Option Deletion via Out-of-Band Email Link Validator10.0CISA ADP v3.10.4%2026-09-10Fix
CVE-2026-76653Missing authentication in VPN Configuration Management in TP-Link TL-MR6400 and Archer MR6005.3CNA v4.00.5%2026-09-10Fix
CVE-2026-76652TP-Link Systems Archer MR600 file upload functionality has been identified path traversal4.8CNA v4.00.7%2026-09-10Fix
CVE-2026-76562Sidebar Manager Light WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-09-10
CVE-2026-76059IBM Langflow custom component security scanner arbitrary code execution8.8CNA v3.10.7%2026-09-10Fix
CVE-2026-75940Lenovo Health Application hard-coded credentials9.3CNA v4.00.4%2026-09-10Fix
CVE-2026-75880Apache ActiveMQ Artemis message selector wildcard matching denial of service6.5CISA ADP v3.10.7%2026-09-10Fix
CVE-2026-75777IBM Aspera Enterprise WebApps container sandbox improper privilege management8.8CNA v3.10.1%2026-09-10Fix
CVE-2026-75624IBM App Connect Enterprise is vulnerable to privilege escalation and denial of service8.8CNA v3.10.5%2026-09-10Fix
CVE-2026-75584ION-DTN denial of service via canonicalizePayloadBlock Assertion8.7CNA v4.00.6%2026-09-10Fix
CVE-2026-73699FileRun PHP object injection via Perms::getPerms8.6CNA v4.00.8%2026-09-10Fix
CVE-2026-73698FileRun authenticated SQL injection via Groups Add action8.6CNA v4.00.6%2026-09-10Fix
CVE-2026-73694FileRun OS command injection via escapeshellcmd No-Op Redefinition8.6CNA v4.02.2%2026-09-10Fix
CVE-2026-73693FileRun OS command injection via PhotoProofSheet handler8.7CNA v4.02.7%2026-09-10Fix
CVE-2026-71647EGO-Planner-v2 trajectory replanning FSM denial of service7.5CISA ADP v3.10.6%2026-09-10
CVE-2026-71645SYSU STAR Group RACER exploration state machine denial of service7.5CISA ADP v3.10.6%2026-09-10
CVE-2026-71643ZJU-FAST-Lab EGO-Planner-v2 EGOReplanFSM denial of service7.5CISA ADP v3.10.6%2026-09-10
CVE-2026-71642EGO-Planner-v2 collision check callback denial of service4.0CISA ADP v3.10.2%2026-09-10
CVE-2026-71640EGO-Planner-v2 trajectory replanning vulnerability9.1CISA ADP v3.10.6%2026-09-10
CVE-2026-68527Concrete CMS is vulnerable to an authorization bypass5.9CNA v4.00.5%2026-09-10
CVE-2026-68488WebPros Plesk time-of-check time-of-use race condition9.9CNA v3.00.4%2026-09-10
CVE-2026-68487WebPros Plesk path traversal9.9CNA v3.00.6%2026-09-10
CVE-2026-68006Puma HTTP/1.1 parser HTTP request smuggling9.1CISA ADP v3.10.5%2026-09-10
CVE-2026-67593Apache ActiveMQ Artemis Openwire protocol handler missing authentication9.1CISA ADP v3.10.9%2026-09-10Fix
CVE-2026-66674Simple Cloudflare Turnstile WordPress plugin Captcha bypass vulnerability5.6CNA v3.10.3%2026-09-10Fix
CVE-2026-66632Simple Cloudflare Turnstile WordPress plugin content injection6.5CNA v3.10.3%2026-09-10Fix
CVE-2026-65639WebPros ConfigServer Security and Firewall advanced-rule parser OS command injection9.5CNA v4.01.4%2026-09-10Fix
CVE-2026-65638WebPros ConfigServer Security and Firewall OS command injection9.2CNA v4.02.3%2026-09-10Fix
CVE-2026-64838ICEcoder path traversal via oldFileName parameter8.7CNA v4.00.5%2026-09-10
CVE-2026-64837ICEcoder OS command injection via lib/properties.php8.7CNA v4.00.8%2026-09-10
CVE-2026-64836ICEcoder path traversal via Ineffective File::check Confinement8.7CNA v4.00.6%2026-09-10
CVE-2026-63427Lenovo Software Fix authentication bypass by spoofing8.5CNA v4.00.2%2026-09-10Fix
CVE-2026-59679Fs_read_glyphs heap OOB read/write via encoding array index mismatch in libXfont29.2CNA v4.00.4%2026-09-10Fix
CVE-2026-57967Apache ActiveMQ Artemis CORE protocol session reattachment missing authentication9.8CISA ADP v3.11.5%2026-09-10Exploit codeFix
CVE-2026-57822Apache ActiveMQ Artemis message-based management deserialization of untrusted data6.5CISA ADP v3.10.7%2026-09-10Fix
CVE-2026-54054Transmute has full-read SSRF in URL file import no host/IP validation, follows redirects6.5CNA v3.10.4%2026-09-10Fix
CVE-2026-52098FlowiseAI Flowise code injection9.8CISA ADP v3.11.1%2026-09-10
CVE-2026-52097AppFlowy URL launcher code injection6.8CISA ADP v3.10.5%2026-09-10
CVE-2026-49838GoBGP confederation validation panics on empty AS_PATH attribute5.9CNA v3.10.4%2026-09-10Fix
CVE-2026-49837GoBGP: BGP OPEN capability parser may read capability values outside declared CapLen boundaries5.9CNA v3.10.3%2026-09-10Fix
CVE-2026-49836psd-tools vulnerable to arbitrary file write via smart-object filename4.6CNA v4.00.2%2026-09-10Fix
CVE-2026-49364Apache ActiveMQ Artemis cluster connection handshake information disclosure9.1CISA ADP v3.10.6%2026-09-10Fix
CVE-2026-49363Apache ActiveMQ Artemis CORE protocol topology subscription information disclosure7.5CISA ADP v3.10.8%2026-09-10Fix
CVE-2026-49362Apache ActiveMQ Artemis CORE protocol handler missing authentication7.5CISA ADP v3.10.8%2026-09-10Fix
CVE-2026-46387Suricata http2: Decompression bomb can cause denial of service in Suricata7.5CNA v3.10.9%2026-09-10Fix
CVE-2026-45770Suricata lua: Excessive flow variable registration can bypass sandbox7.5CNA v3.10.5%2026-09-10Fix
CVE-2026-45769OISF suricata ikev2: Unbounded client transform storage can lead to resource exhaustion7.5CNA v3.11.8%2026-09-10Fix
CVE-2026-45768Suricata LDAP: Unbounded responses per transaction can lead to resource exhaustion7.5CNA v3.10.7%2026-09-10Fix
CVE-2026-45767Suricata datasets: Save to absolute filename can be bypassed when combined with load command4.4CNA v3.10.4%2026-09-10Fix
CVE-2026-45766Suricata nfs: Unbounded stateful structures can lead to resource exhaustion7.5CNA v3.10.6%2026-09-10Fix
CVE-2026-45765Suricata dnp3: Unbounded reassembly can lead to resource exhaustion7.5CNA v3.10.6%2026-09-10Fix
CVE-2026-45764Suricata http2: Protocol-change type confusion can lead to denial of service9.1CNA v3.10.6%2026-09-10Fix
CVE-2026-45763Suricata lua: Sandbox allocation limit not enforced for new allocations5.9CNA v3.10.6%2026-09-10Fix
CVE-2026-45762Suricata defrag: Missing address-family check can lead to remote crash7.5CNA v3.10.6%2026-09-10Fix
CVE-2026-45761Suricata detect: Case-insensitive frame handling can cause heap buffer overflow during rule load3.3CNA v3.10.2%2026-09-10Fix
CVE-2026-45759Suricata http1: Quadratic Content-Disposition processing can lead to denial of service7.5CNA v3.10.8%2026-09-10Fix
CVE-2026-45752Suricata detect/transform: Use-after-free in decompress transforms5.9CNA v3.10.5%2026-09-10Fix
CVE-2026-45751Suricata detect/transform: Use-after-free in dotprefix transform5.9CNA v3.10.3%2026-09-10Fix
CVE-2026-45747Suricata lua/TLS: Null dereference in TlsGetCertInfo7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-44950libXfont fs_read_glyphs heap buffer overflow via cumulative glyph data overflow in libXfont29.5CNA v4.00.4%2026-09-10Fix
CVE-2026-42808Bosch Sensortec COINES_SDK buffer overflow6.8CNA v3.10.3%2026-09-10Fix
CVE-2026-42807Bosch Sensortec COINES_SDK PC bridge protocol decoder of BoschSensortec heap-based buffer overflow8.0CNA v3.10.3%2026-09-10Fix
CVE-2026-42806Bosch Sensortec BME690 SensorAPI (C) out-of-bounds read4.3CNA v3.10.2%2026-09-10Fix
CVE-2026-42805Bosch Sensortec BHI385 SensorAPI (C Library) stack-based buffer overflow8.4CNA v3.10.2%2026-09-10Fix
CVE-2026-42804Bosch Sensortec BHI360_SensorAPI (C-Library) stack-based buffer overflow7.6CNA v3.10.3%2026-09-10Fix
CVE-2026-38626Garlic-Hub item repository SQL injection9.8CISA ADP v3.10.5%2026-09-10
CVE-2026-36392FairSketch Rise CRM item title field vulnerability5.4CISA ADP v3.10.2%2026-09-10Exploit code
CVE-2026-19840Notiqoo WordPress plugin Contributor+ arbitrary option update via Multiple AJAX actions6.5CISA ADP v3.10.2%2026-09-10Fix
CVE-2026-19646IBM Common Licensing HTTP Host header handling vulnerability9.1CNA v3.10.4%2026-09-10Fix
CVE-2026-19596OpenNMS XML collector XXE allows arbitrary file read from the OpenNMS host5.9CNA v3.10.2%2026-09-10Fix
CVE-2026-19584Velociraptor VQL injection during notebook restore from backup7.7CNA v3.10.2%2026-09-10Fix
CVE-2026-19583Velociraptor Required permissions bypass by using client monitoring queries9.9CNA v3.10.6%2026-09-10Fix
CVE-2026-19439Ultimate Gift Cards for WooCommerce gift card report details endpoint information disclosure7.5CISA ADP v3.10.3%2026-09-10Fix
CVE-2026-19436Ultimate Gift Cards for WooCommerce checkout gift card reconciliation improper access control7.5CISA ADP v3.10.2%2026-09-10Fix
CVE-2026-19136Lenovo Tianxi AI Agent PC Application OS command injection8.4CNA v4.00.9%2026-09-10Fix
CVE-2026-18994Lenovo File Manager Application improper export of Android application components8.4CNA v4.00.1%2026-09-10Fix
CVE-2026-18594Advanced Contact form 7 DB WordPress plugin authorization bypass4.3CNA v3.10.2%2026-09-10
CVE-2026-18386WP BackItUp Community Edition WordPress plugin path traversal to arbitrary file read4.9CNA v3.10.7%2026-09-10
CVE-2026-18351Drag and Drop File Upload for Elementor Forms WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.0%2026-09-10Exploit codeFix
CVE-2026-18121Concrete CMS is vulnerable to an authorization bypass in the Calendar block's frontend event dialog6.3CNA v4.00.3%2026-09-10Fix
CVE-2026-17176OS command injection vulnerability in Deco Devices7.7CNA v4.05.0%2026-09-10Fix
CVE-2026-17038drEryk Gabinet ticket reporting component hard-coded credentials6.9CNA v4.00.3%2026-09-10Fix
CVE-2026-16174Netskope Endpoint DLP driver integer overflow leading to Kernel Pool Overflow8.7CNA v4.00.1%2026-09-10Fix
CVE-2026-16172Netskope Endpoint DLP service out-of-bounds read leading to Process crash6.0CNA v4.00.1%2026-09-10Fix
CVE-2026-15889Aruba HiSpeed Cache WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-10Fix
CVE-2026-15823Builderall for WordPress plugin missing authorization authenticated arbitrary post Meta modification4.3CNA v3.10.2%2026-09-10
CVE-2026-15820Builderall for WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-10
CVE-2026-15796Builderall for WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-10
CVE-2026-15461Type confusion in Zephyr HL78xx GNSS NMEA driver causes wild-pointer write from GNSS input5.3CNA v3.10.2%2026-09-10Fix
CVE-2026-15419CP210x driver memory corruption results in arbitrary code execution7.0CNA v4.00.2%2026-09-10Fix
CVE-2026-15418Silicon Labs silabser.sys driver CP210x Memory Leakage2.4CNA v4.00.2%2026-09-10Fix
CVE-2026-15417Silicon Labs silabser.sys driver CP210x denial of service6.9CNA v4.00.1%2026-09-10Fix
CVE-2026-15019Direct Download for WooCommerce WordPress plugin unauthenticated arbitrary file read7.5CNA v3.10.7%2026-09-10
CVE-2026-14873Bulk Password Reset WordPress plugin authenticated (Subscriber+) arbitrary password reset8.0CNA v3.10.2%2026-09-10
CVE-2026-13745Arbitrary code execution in Gemini CLI via Untrusted Local .env Files Overriding GEMINI_CLI_HOME7.7CNA v4.00.4%2026-09-10Fix
CVE-2026-12683Stored XSS Yönetim panel in Ankaref's LIBRID/LIBREF5.4CNA v3.10.2%2026-09-10Fix
CVE-2026-12682Stored XSS in Ankaref's LIBRID/LIBREF5.4CNA v3.10.2%2026-09-10Fix
CVE-2026-11813Lenovo FileZ Client incorrect default permissions8.5CNA v4.00.1%2026-09-10Fix
CVE-2026-9667IBM WebSphere Application Server server-side request forgery5.3CNA v3.10.4%2026-09-10Fix
CVE-2026-9338IBM WebSphere Application Server resource exhaustion5.3CNA v3.10.5%2026-09-10Fix
CVE-2026-9336IBM WebSphere Application Server administrative endpoint denial of service6.5CNA v3.10.8%2026-09-10Fix
CVE-2026-9327IBM WebSphere Application Server privilege escalation6.3CNA v3.10.4%2026-09-10Fix
CVE-2026-9225IBM Langflow File Read component path traversal6.5CNA v3.10.3%2026-09-10Fix
CVE-2026-9176IBM WebSphere Application Server privilege escalation6.7CNA v3.10.2%2026-09-10Fix
CVE-2026-9166LFI in GIS Informatics' GisLab Laboratory Management System7.5CNA v3.10.5%2026-09-10Fix
CVE-2026-9163SQLi in GIS Informatics' GisLab Laboratory Management System9.8CNA v3.10.5%2026-09-10Fix
CVE-2026-9161DernekPlus Website Template response discrepancy5.3CNA v3.10.3%2026-09-10
CVE-2026-8323Open redirect in Armiya Information Technologies' Access Control System9.3CNA v3.10.4%2026-09-10Fix
CVE-2026-7188SQLi in Armiya Information Technologies' Access Control System9.8CNA v3.10.5%2026-09-10Fix
CVE-2026-6285Improper authentication in Ankaref's LIBRID/LIBREF7.5CNA v3.10.4%2026-09-10Fix
CVE-2026-5399Redux Framework WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-10Fix
CVE-2026-4657Easy Google Fonts WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-10
CVE-2026-4130Storage of Sensitive Information in Cleartext in NI SystemLink8.4CNA v4.00.1%2026-09-10Fix
CVE-2026-4129Improper Access Controls in NI SystemLink8.6CNA v4.00.4%2026-09-10Fix
CVE-2026-3096WSO2 API Manager external link navigation reverse tabnabbing4.7CNA v3.10.3%2026-09-10Fix
CVE-2026-2310IBM webMethods Integration Server XML external entity injection7.8CNA v3.10.2%2026-09-10Fix
CVE-2026-0310PAN-OS: Buffer overflow vulnerability via XML Processing7.2CNA v4.00.4%2026-09-10Fix
CVE-2026-0309PAN-OS: Authenticated command injection in CLI with Luna HSM Configuration4.0CNA v4.00.5%2026-09-10Fix
CVE-2026-0308PAN-OS: Stored cross-site scripting (XSS) vulnerability in the Web interface1.1CNA v4.00.3%2026-09-10Fix
CVE-2026-0307GlobalProtect App: Local privilege escalation5.9CNA v4.00.1%2026-09-10Fix
CVE-2026-0306Prisma Access Agent: EndPoint DLP Bypass vulnerability on Windows5.8CNA v4.00.1%2026-09-10Fix
CVE-2026-0305Prisma Access Agent: Information disclosure vulnerability on Linux4.3CNA v4.00.1%2026-09-10Fix
CVE-2026-0304Cortex XDR Broker VM: Privilege escalation4.8CNA v4.00.2%2026-09-10Fix
CVE-2026-0303Checkov by Prisma Cloud: Code execution via Auto-Loaded Configuration file2.4CNA v4.00.2%2026-09-10Exploit codeFix
CVE-2026-0302Checkov by Prisma Cloud: OS command injection1.1CNA v4.00.8%2026-09-10Fix
CVE-2026-88069pandora-analysis pandora its archive extraction worker path traversal9.3CNA v4.00.5%2026-09-09
CVE-2026-88002open-webui open WebUI: Any authenticated user can hang the server via a cyclic chat message history6.5CNA v3.10.6%2026-09-09Fix
CVE-2026-88001Open WebUI web fetch redirects server-side request forgery5.0CNA v3.10.4%2026-09-09Fix
CVE-2026-88000Open WebUI chat message deletion infinite loop6.5CNA v3.10.6%2026-09-09Fix
CVE-2026-87999Open WebUI web fetch server-side request forgery7.1CNA v3.10.4%2026-09-09Fix
CVE-2026-87998Open WebUI knowledge base deletion privilege escalation7.1CNA v3.10.5%2026-09-09Fix
CVE-2026-87997Open WebUI chat completions endpoint missing authorization4.3CNA v3.10.4%2026-09-09Fix
CVE-2026-87996open-webui open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader7.7CNA v3.10.4%2026-09-09Fix
CVE-2026-87995open-webui open WebUI: Same-origin XSS to account takeover8.7CNA v3.10.4%2026-09-09Fix
CVE-2026-87994Open WebUI chat completions endpoint insecure direct object reference4.3CNA v3.10.4%2026-09-09Fix
CVE-2026-87931Behavioral Technology Group Pavlok Apple Notification Center Service buffer overflow9.4CNA v4.00.6%2026-09-09
CVE-2026-87930MaxSite CMS PHP object injection via ci_session9.2CNA v4.00.6%2026-09-09Exploit code
CVE-2026-87929MaxSite CMS authentication bypass via hard-coded encryption key9.3CNA v4.00.5%2026-09-09
CVE-2026-87928MaxSite CMS HTML upload XSS via admin_page5.1CNA v4.00.3%2026-09-09
CVE-2026-87927MaxSite CMS local file inclusion via ajax dispatcher8.8CNA v4.00.6%2026-09-09
CVE-2026-87926Rizwan17 inventory-management-system Login page index.php cross-site scripting5.3CNA v4.00.5%2026-09-09
CVE-2026-87925Rizwan17 inventory-management-system manage.php storeCustomerOrderInvoice SQL injection6.9CNA v4.00.4%2026-09-09
CVE-2026-87924Rizwan17 inventory-management-system Invoice Generation invoice_bill.php missing authentication6.9CNA v4.00.8%2026-09-09
CVE-2026-87923Rizwan17 inventory-management-system List DBOperation.php cross-site scripting5.3CNA v4.00.5%2026-09-09
CVE-2026-87922Rizwan17 inventory-management-system process.php AJAX backend missing authentication6.9CNA v4.00.7%2026-09-09
CVE-2026-87921Rizwan17 inventory-management-system manage.php update_record SQL injection6.9CNA v4.00.4%2026-09-09
CVE-2026-87911AWS Labs postgres MCP Server OS command injection9.0CNA v4.01.7%2026-09-09Fix
CVE-2026-87877zstd-jni use-after-free via Setters Called After close7.0CNA v4.00.2%2026-09-09Fix
CVE-2026-87876OpenPrinting CUPS scheduler case sensitivity bypass3.0CNA v3.10.3%2026-09-09Fix
CVE-2026-87875Red Hat Hardened Images cups: Openprinting cups: Heap out-of-bounds read in cupsutf32toutf84.3CNA v3.10.4%2026-09-09Fix
CVE-2026-87874community.general memcached cache plugin insecure deserialization8.1CNA v3.10.7%2026-09-09
CVE-2026-87872community.general OCAPI modules improper certificate validation6.8CNA v3.10.1%2026-09-09
CVE-2026-87853SSSD IdP authentication provider vulnerability7.5CNA v3.10.3%2026-09-09Fix
CVE-2026-87827KGUARD DVR unauthenticated remote command execution10.0CNA v4.01.1%2026-09-09Reported exploited
CVE-2026-87825zstd-jni use-after-free of Compression and Decompression Dictionaries7.0CNA v4.00.2%2026-09-09Fix
CVE-2026-87824zstd-jni out-of-bounds read via Zstd.trainFromBufferDirect8.7CNA v4.00.4%2026-09-09Fix
CVE-2026-87823zstd-jni out-of-bounds read via Direct ByteBuffer Frame-Size Methods8.8CNA v4.00.4%2026-09-09Fix
CVE-2026-87822t-digest denial of service via NaN Centroid Means in MergingDigest.fromBytes8.7CNA v4.00.7%2026-09-09
CVE-2026-87821laradashboard Lara Dashboard server-side request forgery in Builder Markdown Fetch7.1CNA v4.00.5%2026-09-09Fix
CVE-2026-87820CyberPanel information disclosure via AI Scanner6.9CNA v4.00.9%2026-09-09NucleiFix
CVE-2026-87819GitPython denial of service via ReDoS8.7CNA v4.00.5%2026-09-09Fix
CVE-2026-87818GitPython Local File Content Oracle via --no-index7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-87817GitPython remote code execution via Git Directory Impersonation8.7CNA v4.00.4%2026-09-09Fix
CVE-2026-87816PasswordPusher race condition View Limit Bypass8.7CNA v4.00.4%2026-09-09Fix
CVE-2026-87815SiYuan path traversal via removeRiffDeck8.4CNA v4.00.5%2026-09-09Fix
CVE-2026-87814SiYuan stored XSS via Asset Preview8.4CNA v4.00.4%2026-09-09Fix
CVE-2026-87813SiYuan stored XSS via unescaped asset filenames8.4CNA v4.00.4%2026-09-09Fix
CVE-2026-87812SiYuan stored XSS via Bazaar iconURL7.4CNA v4.00.4%2026-09-09Fix
CVE-2026-87811SiYuan stored XSS via notebook template paths8.4CNA v4.00.4%2026-09-09Fix
CVE-2026-87810Siyuan information disclosure via fullTextSearchBlock6.9CNA v4.00.3%2026-09-09Fix
CVE-2026-87809Siyuan information disclosure via Export Preview7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-87808SiYuan Read-Only Boundary Bypass via fullTextSearchBlock8.7CNA v4.00.4%2026-09-09Fix
CVE-2026-87807siyuan SQL injection via fullTextSearchBlock8.7CNA v4.00.5%2026-09-09Fix
CVE-2026-87806parse-community parse-server Parse Server authentication bypass via LDAP Empty Password9.1CNA v4.00.5%2026-09-09Fix
CVE-2026-87795zstd-jni out-of-bounds read via ZstdDictCompress8.8CNA v4.00.6%2026-09-09Fix
CVE-2026-87794bestzip and argument injection via the Native Zip Destination8.6CNA v4.00.3%2026-09-09Fix
CVE-2026-87766Red Hat Enterprise Linux 10 link following8.8CNA v3.10.2%2026-09-09Fix
CVE-2026-87747Ragic｜Enterprise Cloud Database arbitrary file read6.9CNA v4.00.6%2026-09-09Fix
CVE-2026-87737OCaml mirage-crypto-ec timing side channel5.9CNA v3.10.3%2026-09-09Fix
CVE-2026-87736OCaml mirage-crypto-ec out-of-bounds read4.3CNA v3.10.4%2026-09-09Fix
CVE-2026-87735OCaml mirage-crypto-pk improper quantity validation4.3CNA v3.10.2%2026-09-09Fix
CVE-2026-87734OCaml utcp improper channel restriction7.5CNA v3.10.5%2026-09-09Fix
CVE-2026-87733OCaml mirage-crypto-ec improper certificate validation6.2CNA v3.10.2%2026-09-09Fix
CVE-2026-87732OCaml mirage-crypto improper signature verification6.2CNA v3.10.1%2026-09-09Fix
CVE-2026-87724torprject Tor incorrect resource transfer6.5CNA v3.10.4%2026-09-09Fix
CVE-2026-87658Google Chrome extensions information disclosure4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87657Google Chrome V8 use-after-free3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87656Google Chrome improper check for exceptional conditions5.4v3.10.2%2026-09-09Fix
CVE-2026-87655Google Chrome Downloads clickjacking5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87654Google Chrome ANGLE buffer overflow9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87653Google Chrome FullScreen UI misrepresentation5.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87652Google Chrome PushAPI incorrect authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87651Google Chrome Paint incorrect authorization4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87650Google Chrome WebGL out-of-bounds read9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87649Google Chrome Downloads UI misrepresentation5.4v3.10.2%2026-09-09Fix
CVE-2026-87648Google Chrome ANGLE use-after-free8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87647Google Chrome GPU uninitialized resource use3.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87646Google Chrome Web Authentication use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87645Google Chrome improper check for exceptional conditions5.4v3.10.2%2026-09-09Fix
CVE-2026-87644Google Chrome Views incorrect authorization8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87643Google Android GPU in Google Chrome on integer overflow9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87642Google Chrome WebGL uninitialized resource use4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87641Google Chrome Browser race condition4.2v3.10.1%2026-09-09Fix
CVE-2026-87640Google Android WebView in Google Chrome on out-of-bounds read6.1v3.10.2%2026-09-09Fix
CVE-2026-87639Google Chrome WebPackaging use-after-free8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87638Google Chrome Media out-of-bounds write9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87637Google Chrome extensions use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87636Google Chrome XML type confusion8.8CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87635Google Chrome Payments UI misrepresentation5.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87634Google Chrome WebPackaging use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87633Google Chrome Views use-after-free8.6CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87632Google Chrome SanitizerAPI cross-site scripting4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87631Google Chrome DOM missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87630Google Chrome WebRTC integer overflow4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87629Google Chrome Sources incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87628Google Chrome Cast use-after-free8.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87627Google Chrome Safebrowsing interpretation conflict6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87626Google Chrome DeviceBoundSessionCredentials incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87625Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87624Google Android Passwords in Google Chrome on UI misrepresentation4.2CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87623Google Chrome DOM observable discrepancy6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87622Google Chrome FedCM missing authorization4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87621Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87620Google Chrome SVG observable discrepancy6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87619Google Chrome Prefetch observable discrepancy4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87618Google Chrome incorrectly resolved name or reference8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87617Google Chrome DevTools use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87616Google Chrome Views improper initialization8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87615Google Chrome Payments race condition5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87614Google Chrome ServiceWorker incorrect authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87613Google Chrome incorrectly resolved name or reference9.0CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87612Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87611Google Chrome FileSystem missing authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87610Google Chrome Omnibox incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87609Google Chrome Sharing use-after-free9.6CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87608Google Chrome FedCM improper certificate validation7.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87607Google Chrome Device use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87606Google Chrome SiteIsolation missing authorization8.1CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87605Google Chrome Contacts missing authorization5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87604Google Chrome ANGLE out-of-bounds read8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87603Google Chrome FileSystem missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87602Google Chrome ANGLE out-of-bounds read4.7CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87601Google Chrome V8 race condition7.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87600Google Android Safebrowsing in Google Chrome on improper input validation6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87599Google Chrome Interstitials improper input validation5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87598Google Chrome ServiceWorker incorrect authorization4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87597Google Android CustomTabs in Google Chrome on UI misrepresentation4.8CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87596Google Chrome ANGLE out-of-bounds read4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87595Google Chrome Mobile server-side request forgery9.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87594Google Chrome DataTransfer incorrect authorization5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87593Google Chrome Editing information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87592Google Chrome Tint out-of-bounds read4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87591Google Chrome extensions incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87590Google Chrome Passwords improper input validation5.9CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87589Google Chrome SiteIsolation incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87588Google Chrome Chromecast use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87587Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87586Google Chrome ANGLE out-of-bounds read4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87585Google Chrome PDFium double free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87584Google Chrome WebUI incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87583Google Android Passwords in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87582Google Chrome DataTransfer confused deputy8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87581Google Chrome Payments use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87580Google Chrome WebAppInstalls incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87579Google Chrome WebRTC buffer overflow8.8CISA ADP v3.10.6%2026-09-09Fix
CVE-2026-87578Google Chrome Receiver use-after-free8.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87577Google Chrome Isolated incorrect authorization4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87576Google Android GPU in Google Chrome on uninitialized resource use3.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87575Google Chrome Loader incorrect authorization5.4v3.10.1%2026-09-09Exploit codeFix
CVE-2026-87574Google Chrome ServiceWorker information disclosure4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87573Google Chrome Network improper input validation4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87572Google Chrome DevTools injection8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87571Google Chrome Loader improper certificate validation5.4v3.10.1%2026-09-09Fix
CVE-2026-87570Google Chrome SiteIsolation incorrect authorization8.8v3.10.2%2026-09-09Fix
CVE-2026-87569Google Chrome Views missing authorization8.8v3.10.2%2026-09-09Fix
CVE-2026-87568Google Chrome Chromium improper input validation4.3v3.10.2%2026-09-09Fix
CVE-2026-87567Google Chrome UrlFormatting UI misrepresentation4.3v3.10.2%2026-09-09Fix
CVE-2026-87566Google Chrome Layout observable discrepancy5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87565Google Android Passwords in Google Chrome on information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87564Google Chrome V8 type confusion4.3v3.10.3%2026-09-09Fix
CVE-2026-87563Google Chrome Paint origin validation error4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87562Google Chrome incorrectly resolved name or reference4.3v3.10.2%2026-09-09Fix
CVE-2026-87561Google Chrome Web Authentication incorrect authorization4.3v3.10.2%2026-09-09Fix
CVE-2026-87560Google Chrome Browser missing authorization4.3v3.10.2%2026-09-09Fix
CVE-2026-87559Google Chrome UI UI misrepresentation4.2CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87558Google Chrome Payments use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87557Google Chrome LocalNetworkAccess missing authorization4.3v3.10.2%2026-09-09Fix
CVE-2026-87556Google Chrome Browser missing authorization4.3v3.10.3%2026-09-09Fix
CVE-2026-87555Google Android GPU in Google Chrome on uninitialized resource use4.7CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87554Google Chrome Chromoting race condition8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87553Google Chrome SiteIsolation improper input validation8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87552Google Android TrustedWebActivities in Google Chrome on missing authorization5.5v3.10.1%2026-09-09Fix
CVE-2026-87551Google Chrome CORS improper certificate validation4.3v3.10.1%2026-09-09Fix
CVE-2026-87550Google Chrome CSS improper output encoding4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87549Google Chrome Downloads incomplete cleanup6.5v3.10.3%2026-09-09Fix
CVE-2026-87548Google Chrome improper check for exceptional conditions4.3v3.10.3%2026-09-09Fix
CVE-2026-87547Google Chrome incorrectly resolved name or reference9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87546Google Chrome Safebrowsing incorrect type conversion4.3v3.10.2%2026-09-09Fix
CVE-2026-87545Google Chrome Mobile information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87544Google Chrome extensions incorrect authorization9.8v3.10.3%2026-09-09Fix
CVE-2026-87543Google Chrome Core missing authorization4.3v3.10.2%2026-09-09Fix
CVE-2026-87542Google Chrome Input use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87541Google Chrome Navigation information disclosure6.5v3.10.2%2026-09-09Fix
CVE-2026-87540Google Chrome Isolated incorrect authorization5.4v3.10.2%2026-09-09Fix
CVE-2026-87539Google Chrome Network observable discrepancy3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87538Google Chrome Input clickjacking4.2v3.10.2%2026-09-09Fix
CVE-2026-87537Google Chrome extensions missing authorization8.1CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87536Google Chrome V8 use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87535Google Chrome Safebrowsing security feature bypass6.5v3.10.3%2026-09-09Fix
CVE-2026-87534Google Android WebView in Google Chrome on missing authorization9.8v3.10.2%2026-09-09Fix
CVE-2026-87533Google Chrome DevTools use-after-free8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87532Google Chrome improper check for exceptional conditions6.5v3.10.2%2026-09-09Fix
CVE-2026-87531Google Chrome CORS information disclosure3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87530Google Chrome CredentialProvider uncontrolled search path8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87529Google Chrome Media numeric truncation9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87528Google Chrome Rust type confusion9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87527Google Chrome WebGL buffer overflow9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87526Google Chrome Passwords use-after-free9.6CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87525Google Chrome Chromoting out-of-bounds read2.7CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87524Google Chrome Core use-after-free8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87523Google Chrome DataTransfer race condition5.3v3.10.2%2026-09-09Fix
CVE-2026-87522Google Android WebView in Google Chrome on missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87521Google Chrome WebMCP information disclosure3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87520Google Android Dawn in Google Chrome on use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87519Google Chrome Safebrowsing incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87518Google Chrome Safebrowsing observable discrepancy5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87517Google Chrome Mobile race condition3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87516Google Chrome Navigation observable discrepancy4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87515Google Chrome FileAPI incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87514Google Chrome Views use-after-free8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87513Google Chrome ControlledFrame missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87512Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87511Google Chrome DevTools missing authorization4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87510Google Chrome FileAPI improper input validation8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87509Google Chrome Updater incorrect authorization8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87508Google Chrome Loader incorrect authorization4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87507Google Chrome Downloads UI misrepresentation5.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87506Google Chrome execution with unnecessary privileges8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87505Google Chrome FileSystem incorrect authorization8.1CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87504Google Chrome Core use-after-free9.6CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87503Google Android Downloads in Google Chrome on inappropriate implementation6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87502Google Chrome Fullscreen confused deputy4.2CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87501Google Chrome Passwords UI misrepresentation5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87500Google Chrome ANGLE improper array index validation9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87499Google Chrome Network incorrect authorization8.1CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87498Google Chrome WebUI missing authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87497Google Chrome Codecs uninitialized resource use4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87496Google Chrome Browser UI misrepresentation5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87495Google Chrome Scroll information disclosure4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87494Google Chrome Browser use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87493Google Chrome FileSystem missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87492Google Chrome DevTools incorrect authorization9.6CISA ADP v3.10.4%2026-09-09Exploit codeFix
CVE-2026-87491Google Chromium V8 out-of-bounds write8.8CISA ADP v3.13.1%2026-09-09KEVExploit codeKCVFix
CVE-2026-87490Google Chrome Transactions Platform information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87489Google Chrome V8 memory corruption8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87488Google Android WebGL in Google Chrome on use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87487Google Chrome FileSystem missing authorization8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87486Google Android TrustedWebActivities in Google Chrome on clickjacking4.0CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87485Google Chrome CORS incorrect authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87484Google Chrome Geometry UI misrepresentation5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87483Google Android Browser in Google Chrome on incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87482Google Chrome HttpsUpgrades cleartext transmission of sensitive information5.9CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87481Google Android WebView in Google Chrome on incorrect authorization8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87480Google Chrome Printing use-after-free8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87479Google Chrome extensions insufficient policy enforcement8.3CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87478Google Chrome Autofill observable discrepancy6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87477Google Chrome Core information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87476Google Chrome Loader incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87475Google Chrome Omnibox missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87474Google Chrome Payments use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87473Google Chrome FileHandling incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87472Google Chrome FedCM improper input validation4.2CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87471Google Chrome ServiceWorker incorrect authorization8.1CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87470Google Chrome Tint improper quantity validation9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87469Google Chrome extensions improper input validation4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87468Google Chrome Isolated incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87467Google Chrome Updater race condition8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87466Google Chrome Workers incorrect authorization4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87465Google Chrome Downloads incorrect authorization4.2CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87464Google Chrome WebGL use-after-free9.6CISA ADP v3.10.6%2026-09-09Fix
CVE-2026-87463Google Android Certificate in Google Chrome on incorrect authorization4.8CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87462Google Chrome FedCM UI misrepresentation5.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87461Google Chrome Core information disclosure4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87460Google Chrome Platform use-after-free8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87459Google Chrome Select observable discrepancy6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87458Google Chrome Geometry UI misrepresentation5.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87457Google Chrome Updater race condition8.1CISA ADP v3.10.1%2026-09-09Fix
CVE-2026-87456Google Chrome Media uninitialized resource use3.4CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87455Google Chrome Aura use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87454Google Chrome Enterprise information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87453Google Chrome BackgroundFetch confused deputy5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87452Google Chrome GPU incorrect authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87451Google Chrome Downloads information disclosure3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87450Google Chrome Permissions incorrect authorization7.5v3.10.3%2026-09-09Fix
CVE-2026-87449Google Chrome DeviceBoundSessionCredentials cross-site request forgery4.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87448Google Chrome DevTools use-after-free9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87447Google Chrome Network incorrect authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87446Google Chrome extensions incomplete cleanup6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87445Google Chrome Session UI misrepresentation5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87444Google Chrome Codecs memory corruption8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87443Google Chrome Actor missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87442Google Chrome Prerender confused deputy3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87441Google Chrome Downloads missing authorization6.5CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87440Google Chrome Media out-of-bounds read8.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-87439Google Chrome ServiceWorker information disclosure5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87438Google Android WebGL in Google Chrome on out-of-bounds write9.6CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-87437Google Chrome Frames information disclosure6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87436Google Chrome Browser incomplete cleanup6.5v3.10.3%2026-09-09Fix
CVE-2026-87435Google Chrome ControlledFrame information disclosure5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-87434Google Chrome CORS missing authorization3.1CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87433Google Chrome FileAPI race condition8.8v3.10.3%2026-09-09Fix
CVE-2026-87432Google Chrome Navigation incorrect authorization4.2CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-87431Google Chrome extensions missing authorization7.5v3.10.4%2026-09-09Fix
CVE-2026-87430Google Chrome WebRTC buffer overflow8.8CISA ADP v3.10.6%2026-09-09Fix
CVE-2026-87429Google Chrome ServiceWorker missing authorization6.5v3.10.3%2026-09-09Fix
CVE-2026-87088Tanium addressed an unauthorized code execution vulnerability in Enforce7.0CNA v3.10.2%2026-09-09Fix
CVE-2026-87084Tanium addressed a server-side request forgery vulnerability in Enforce7.7CNA v3.10.3%2026-09-09Fix
CVE-2026-87083tile-ai tilelang Kernel Cache kernel_cache.py KernelCache._load_kernel_from_disk deserialization5.1CNA v4.00.3%2026-09-09
CVE-2026-87075Tanium addressed an improper access controls vulnerability in Comply8.1CNA v3.10.4%2026-09-09Fix
CVE-2026-87073Tanium addressed an improper access controls vulnerability in Comply6.5CNA v3.10.3%2026-09-09Fix
CVE-2026-87072Tanium addressed an improper access controls vulnerability in Comply7.1CNA v3.10.3%2026-09-09Fix
CVE-2026-87048Tanium addressed an improper access controls vulnerability in Comply5.4CNA v3.10.3%2026-09-09Fix
CVE-2026-87047Tanium addressed an improper access controls vulnerability in Comply6.3CNA v3.10.3%2026-09-09Fix
CVE-2026-87046Tanium addressed an improper access controls vulnerability in Comply4.3CNA v3.10.3%2026-09-09Fix
CVE-2026-87037Tanium addressed an improper access controls vulnerability in Comply5.4CNA v3.10.2%2026-09-09Fix
CVE-2026-87036Tanium addressed an improper access controls vulnerability in Comply8.1CNA v3.10.4%2026-09-09Fix
CVE-2026-87035Tanium addressed an information disclosure vulnerability in Comply4.3CNA v3.10.3%2026-09-09Fix
CVE-2026-87034Tanium addressed a SQL injection vulnerability in Comply8.3CNA v3.10.3%2026-09-09Fix
CVE-2026-87033Tanium addressed an improper access controls vulnerability in Comply5.4CNA v3.10.3%2026-09-09Fix
CVE-2026-87032Tanium addressed an information disclosure vulnerability in Tanium Server4.3CNA v3.10.3%2026-09-09Fix
CVE-2026-87030Tanium addressed a path traversal vulnerability in Comply8.5CNA v3.10.4%2026-09-09Fix
CVE-2026-87025Tanium addressed an improper access controls vulnerability in Comply5.4CNA v3.10.3%2026-09-09Fix
CVE-2026-87023Tanium addressed a path traversal vulnerability in Comply8.5CNA v3.10.5%2026-09-09Fix
CVE-2026-87021Tanium addressed an unauthorized code execution vulnerability in Comply7.2CNA v3.10.7%2026-09-09Fix
CVE-2026-87019Tanium addressed an improper access controls vulnerability in Comply4.3CNA v3.10.3%2026-09-09Fix
CVE-2026-87017Open WebUI knowledge search tool information disclosure4.3CNA v3.10.4%2026-09-09Fix
CVE-2026-87016Open WebUI OAuth subject matching improper authentication8.1CNA v3.10.6%2026-09-09Fix
CVE-2026-87015Open WebUI tool server connections information disclosure6.8CNA v3.10.5%2026-09-09Fix
CVE-2026-87014Open WebUI Socket.IO session cache incorrect authorization6.5CNA v3.10.5%2026-09-09Fix
CVE-2026-87013Open WebUI folder hierarchy infinite loop4.3CNA v3.10.5%2026-09-09Fix
CVE-2026-87012Open WebUI calendar alert scheduler vulnerability4.3CNA v3.10.5%2026-09-09Fix
CVE-2026-87011Open WebUI OIDC back-channel logout denial of service7.5CNA v3.10.6%2026-09-09Fix
CVE-2026-86777AlchemyCMS and missing authorization on GET /API/nodes6.9CNA v4.00.6%2026-09-09Fix
CVE-2026-86776KeePass memory exhaustion via KDBX header Field Size4.6CNA v4.00.2%2026-09-09
CVE-2026-86775knowns path traversal via Document API8.8CNA v4.00.7%2026-09-09Fix
CVE-2026-86774Snipe-IT broken access control via AssetModelPolicy5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86773Snipe-IT broken access control via Kit Update endpoints5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86772Snipe-IT stored XSS via Department Names5.1CNA v4.00.3%2026-09-09Fix
CVE-2026-86771Snipe-IT server-side request forgery via employee_num8.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86770Snipe-IT authentication bypass via SAML Username Collation8.6CNA v4.00.6%2026-09-09Fix
CVE-2026-86769Snipe-IT Audit Log Misattribution via Consumables Checkout5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86768Snipe-IT improper input validation via API Checkout5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86767Snipe-IT Cross-Company Read via requested-assets5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86766Snipe-IT race condition via Consumable Checkout7.1CNA v4.00.3%2026-09-09Fix
CVE-2026-86765Snipe-IT authorization bypass via Asset Update endpoint7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86764Snipe-IT permission bypass via assigned components7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86763Snipe-IT authorization bypass via Importer5.1CNA v4.00.3%2026-09-09
CVE-2026-86762Snipe-IT authentication bypass via API Middleware8.6CNA v4.00.5%2026-09-09Fix
CVE-2026-86761Snipe-IT authorization bypass via print endpoints5.3CNA v4.00.4%2026-09-09Fix
CVE-2026-86760Snipe-IT authentication bypass via activated flag5.3CNA v4.00.4%2026-09-09Fix
CVE-2026-86759Snipe-IT missing authorization via asset-history CSV importer7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86758Snipe-IT License key exposure via CSV Export7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86757Snipe-IT information disclosure via Custom fields7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86756Snipe-IT open redirect via SAML RelayState5.3CNA v4.00.3%2026-09-09
CVE-2026-86755Snipe-IT permission bypass via OAuth5.3CNA v4.00.3%2026-09-09
CVE-2026-86754Snipe-IT authorization bypass via OAuth Clients8.5CNA v4.00.3%2026-09-09Fix
CVE-2026-86753Snipe-IT Business Logic Bypass via asset_model endpoint5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86752Snipe-IT authorization bypass via Asset Audit endpoints5.3CNA v4.00.2%2026-09-09Fix
CVE-2026-86751Snipe-IT arbitrary file read and SSRF via Markdown9.6v3.10.4%2026-09-09Fix
CVE-2026-86750Snipe-IT authorization bypass via API User Create/Update8.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86749Snipe-IT Data Loss via Failed Image Write7.0CNA v4.00.3%2026-09-09Fix
CVE-2026-86748Snipe-IT Database Wipe via Invalid Backup Archive6.9CNA v4.00.4%2026-09-09Fix
CVE-2026-86747Snipe-IT authorization bypass via Pivot-Only User5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86746Snipe-IT authorization bypass via Livewire Snapshot Replay7.4CNA v4.00.3%2026-09-09Fix
CVE-2026-86745Snipe-IT CSV formula injection via Location-Scoping Export5.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86744Snipe-IT race condition in Asset Checkout2.1CNA v4.00.3%2026-09-09Fix
CVE-2026-86743Snipe-IT authorization bypass via Asset Acceptance Report5.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86742Snipe-IT CSV formula injection via Asset Acceptance Report5.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86741Snipe-IT arbitrary file read and SSRF via Category EULA8.4CNA v4.00.4%2026-09-09Fix
CVE-2026-86740Snipe-IT Attachment Deletion Reports Success While File Remains5.1CNA v4.00.3%2026-09-09Fix
CVE-2026-86739Snipe-IT Acceptance Finalization without Stored Evidence6.5v3.10.4%2026-09-09Fix
CVE-2026-86547mrubyc null pointer dereference via OP_ENTER6.9CNA v4.00.2%2026-09-09Exploit code
CVE-2026-86204PocketMine-MP denial of service via ModalFormResponsePacket7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-86203PocketMine-MP Item Duplication via Despawn State6.3CNA v4.00.3%2026-09-09Fix
CVE-2026-86202PocketMine-MP network amplification via ActorEventPacket5.3CNA v4.00.4%2026-09-09Fix
CVE-2026-86201PocketMine-MP LogDoS via LoginPacket clientData8.7CNA v4.00.6%2026-09-09Fix
CVE-2026-86200PocketMine-MP LogDoS via LoginPacket clientData JWT6.9CNA v4.00.6%2026-09-09Fix
CVE-2026-86199PocketMine-MP denial of service via unauthenticated login8.7CNA v4.00.5%2026-09-09Fix
CVE-2026-86198PocketMine-MP denial of service via ResourcePackClientResponsePacket2.3CNA v4.00.4%2026-09-09Fix
CVE-2026-86099Chainlit path traversal via socket.io sessionId8.8CNA v4.00.6%2026-09-09
CVE-2026-85978Unauthenticated remote code execution in Akana API Platform10.0CNA v4.01.4%2026-09-09
CVE-2026-85788AWS Labs MySQL MCP Server incomplete list of disallowed inputs in awslabs mysql-mcp-server5.7CNA v4.00.2%2026-09-09Fix
CVE-2026-85418Orbit Fox WordPress plugin Contributor+ stored XSS via Beaver Builder Pricing Table widget5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-85133WPLP Cookie Consent WordPress plugin missing authorization5.4CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-85132WPLP Cookie Consent - Subscriber+ Cookie Scan Schedule Disclosure via gcc_get_schedule_scan4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-85117Contact Form 7 Captcha - Unauthenticated arbitrary Shortcode Execution via Form Field Repopulation6.5CNA v3.10.3%2026-09-09Fix
CVE-2026-85103A heap-based buffer overflow in VPN certificate ASN.1 decoding may allow an unauthenticated remote attacker to execute arbitrary code on Check Point Quantum Security Management and Quantum Security Gateway systems.9.8CNA v3.13.7%2026-09-09Reported exploited
CVE-2026-85102Check Point Multiple Products improper certificate validation9.8CNA v3.154.2%2026-09-09KEVFix
CVE-2026-85037Sunshine Photo Cart WordPress plugin unauthenticated Price manipulation via IDOR5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-84908WPFunnels WordPress plugin missing authorization5.3CNA v3.10.4%2026-09-09Fix
CVE-2026-84293Repeater Fields for Gravity Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-09-09Fix
CVE-2026-84222Kirki - Unauthenticated Non-Public Post Content Disclosure via kirki_data parameter5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-84113Quentn WP WordPress plugin Admin+ SQLi via 'orderby'/'order' parameter4.1CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-84068Quentn WP - unauthenticated SQLi via qntn_wp parameter8.6CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-83593WPBot WordPress plugin unauthenticated stored cross-site scripting via conversation parameter7.2CNA v3.10.5%2026-09-09Fix
CVE-2026-83541Sina Extension for Elementor - Contributor+ stored XSS via Table widget6.8CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-83537WP Express Checkout WordPress plugin unauthenticated Payment bypass via wpec_process_empty_payment5.3CNA v3.10.2%2026-09-09Fix
CVE-2026-83530Google Uncontrolled Memory Allocation in cel-go6.9CNA v4.00.1%2026-09-09Fix
CVE-2026-82848Masteriyo LMS - Unauthenticated Course Enrollment Disclosure5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-82563Softish C6 Ear Camera and EarVision Android application authentication bypass by spoofing8.4CNA v4.00.2%2026-09-09
CVE-2026-82530IP2Location Country Blocker Access Control Bypass via X-Real-IP header6.9CNA v4.00.4%2026-09-09Fix
CVE-2026-82185WPLP Cookie Consent WordPress plugin Subscriber+ Banner settings Overwrite and A/B Test data reset4.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-82184WPLP Cookie Consent WordPress plugin unauthenticated IAB TCF Consent option update5.3CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-81741Groundhogg WordPress plugin open redirect via redirect_to parameter4.7CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-81647Huawei HarmonyOS out-of-bounds read vulnerability in the graphics module5.3CNA v3.10.4%2026-09-09Fix
CVE-2026-81646Huawei HarmonyOS out-of-bounds read vulnerability in the graphics module5.9CNA v3.10.1%2026-09-09Fix
CVE-2026-81644Huawei HarmonyOS DoS vulnerability in the preview service module4.3CNA v3.10.2%2026-09-09Fix
CVE-2026-81640Softish C6 Ear Camera and EarVision Android application use of hard-coded credentials8.7CNA v4.00.3%2026-09-09
CVE-2026-81330Softish C6 Ear Camera and EarVision Android app video stream transmission cleartext transmission7.1CNA v4.00.1%2026-09-09
CVE-2026-81022SupportCandy ticket authorization code check information disclosure5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-81021SupportCandy ticket attachment download missing authorization5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-80925Linux kernel VLAN hardware offload race condition–0.2%2026-09-09Fix
CVE-2026-80924Linux kernel krb5 key derivation vulnerability7.5CNA v3.10.3%2026-09-09Fix
CVE-2026-80923Linux kernel xHCI USB debug tty driver use-after-free–0.2%2026-09-09Fix
CVE-2026-80922Linux kernel qcom-rng driver vulnerability–0.2%2026-09-09Fix
CVE-2026-80921Linux kernel KVM s390 VSIE crypto control block vulnerability8.8CNA v3.10.1%2026-09-09Fix
CVE-2026-80920Linux kernel io_uring eventfd signaling vulnerability–0.2%2026-09-09Fix
CVE-2026-80919Linux kernel amdgpu devcoredump vulnerability–0.2%2026-09-09Fix
CVE-2026-80918Linux kernel HID report descriptor parser vulnerability–0.2%2026-09-09Fix
CVE-2026-80917Linux kernel PCI host-generic CAM driver null pointer dereference–0.2%2026-09-09Fix
CVE-2026-80916Linux kernel kcov remote state storage race condition–0.2%2026-09-09Fix
CVE-2026-80915Linux kernel Xe DPT allocation denial of service–0.2%2026-09-09Fix
CVE-2026-80914Linux kernel Bluetooth ISO listener socket use-after-free8.8CNA v3.10.2%2026-09-09Fix
CVE-2026-80440Hustle success message placeholders vulnerability4.8CNA v3.10.2%2026-09-09Fix
CVE-2026-80341Payment Plugins for PayPal WooCommerce WordPress plugin stored Payment Method Assignment via IDOR5.9CISA ADP v3.10.2%2026-09-09Fix
CVE-2026-80340Payment Plugins for PayPal WooCommerce order-pay endpoint information disclosure5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-80339Payment Plugins for Stripe WooCommerce order-pay endpoint information disclosure5.3CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-80239Dell Secure Connect Gateway information disclosure2.4CNA v3.10.2%2026-09-09Fix
CVE-2026-80177Dell Secure Connect Gateway SQL injection6.5CNA v3.10.4%2026-09-09Fix
CVE-2026-80175Dell Secure Connect Gateway sensitive information in an accessible file3.3CNA v3.10.1%2026-09-09Fix
CVE-2026-80174Dell Secure Connect Gateway insufficient session expiration5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-80172Dell Secure Connect Gateway insufficient verification of data authenticity9.8CNA v3.10.3%2026-09-09Fix
CVE-2026-80171Dell Secure Connect Gateway insufficient entropy4.7CNA v3.10.1%2026-09-09Fix
CVE-2026-80169Dell Secure Connect Gateway sensitive information in log files3.3CNA v3.10.1%2026-09-09Fix
CVE-2026-80124Dell Secure Connect Gateway sensitive information in log files5.5CNA v3.10.1%2026-09-09Fix
CVE-2026-80123Dell Secure Connect Gateway server-side request forgery7.3CNA v3.10.3%2026-09-09Fix
CVE-2026-80122Dell Secure Connect Gateway improper certificate validation7.3CNA v3.10.2%2026-09-09Fix
CVE-2026-80099Various Newfold plugins various Versions unauthenticated authentication bypass8.8CNA v3.12.9%2026-09-09Reported exploitedNucleiExploit codeFix
CVE-2026-80055Dell Secure Connect Gateway LDAP injection4.4CNA v3.10.3%2026-09-09Fix
CVE-2026-79974Dell Secure Connect Gateway improper authentication6.4CNA v3.10.3%2026-09-09Fix
CVE-2026-79973Dell Secure Connect Gateway denial of service6.3CNA v3.10.2%2026-09-09Fix
CVE-2026-79972Dell Secure Connect Gateway SQL injection7.2CNA v3.10.4%2026-09-09Fix
CVE-2026-79971Dell Secure Connect Gateway CSV injection5.3CNA v3.10.4%2026-09-09Fix
CVE-2026-79970Dell Secure Connect Gateway improper signature verification5.6CNA v3.10.2%2026-09-09Fix
CVE-2026-79969Dell Secure Connect Gateway race condition5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79968Dell Secure Connect Gateway time-of-check time-of-use race condition5.6CNA v3.10.2%2026-09-09Fix
CVE-2026-79967Dell Secure Connect Gateway improper certificate validation5.6CNA v3.10.2%2026-09-09Fix
CVE-2026-79966Dell Secure Connect Gateway insertion of sensitive information into log file3.3CNA v3.10.1%2026-09-09Fix
CVE-2026-79965Dell Secure Connect Gateway external control of critical state data5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79964Dell Secure Connect Gateway escape sequence injection5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79963Dell Secure Connect Gateway download without integrity check7.4CNA v3.10.3%2026-09-09Fix
CVE-2026-79962Dell Secure Connect Gateway race condition5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79961Dell Secure Connect Gateway missing authentication5.3CNA v3.10.4%2026-09-09Fix
CVE-2026-79952Dell Secure Connect Gateway improper output encoding5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79950Dell Secure Connect Gateway hard-coded credentials7.5CNA v3.10.4%2026-09-09Fix
CVE-2026-79947Dell Secure Connect Gateway SQL injection5.5CNA v3.11.8%2026-09-09Fix
CVE-2026-79946Dell Secure Connect Gateway cross-site scripting5.3CNA v3.10.4%2026-09-09Fix
CVE-2026-79945Dell Secure Connect Gateway command injection5.5CNA v3.12.3%2026-09-09Fix
CVE-2026-79944Dell Secure Connect Gateway least privilege violation3.4CNA v3.10.1%2026-09-09Fix
CVE-2026-79942Dell Secure Connect Gateway execution with unnecessary privileges3.4CNA v3.10.2%2026-09-09Fix
CVE-2026-79941Dell Secure Connect Gateway command injection5.3CNA v3.14.7%2026-09-09Fix
CVE-2026-79741Dell Secure Connect Gateway command injection5.3CNA v3.13.5%2026-09-09Fix
CVE-2026-79740Dell Secure Connect Gateway hard-coded credentials7.5CNA v3.10.4%2026-09-09Fix
CVE-2026-79738Dell Secure Connect Gateway hard-coded credentials7.5CNA v3.10.4%2026-09-09Fix
CVE-2026-79736Dell Secure Connect Gateway improper certificate validation3.7CNA v3.10.2%2026-09-09Fix
CVE-2026-79735Dell Secure Connect Gateway hard-coded cryptographic key4.4CNA v3.10.3%2026-09-09Fix
CVE-2026-79732Dell Secure Connect Gateway improper certificate validation3.7CNA v3.10.2%2026-09-09Fix
CVE-2026-79731Dell Secure Connect Gateway hard-coded credentials4.4CNA v3.10.3%2026-09-09Fix
CVE-2026-79730Dell Secure Connect Gateway time-of-check time-of-use race condition5.6CNA v3.10.2%2026-09-09Fix
CVE-2026-79729Dell Secure Connect Gateway improper certificate validation3.7CNA v3.10.2%2026-09-09Fix
CVE-2026-79728Dell Secure Connect Gateway relative path traversal6.5CNA v3.10.3%2026-09-09Fix
CVE-2026-79727Dell Secure Connect Gateway information disclosure3.3CNA v3.10.1%2026-09-09Fix
CVE-2026-79696Remote code execution in Google ADK for Python via Incomplete Standard Library Denylist10.0CNA v4.00.7%2026-09-09Fix
CVE-2026-79695Dell Secure Connect Gateway decompression bomb7.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79694Dell Secure Connect Gateway debug information exposure5.5CNA v3.10.1%2026-09-09Fix
CVE-2026-79693Dell Secure Connect Gateway least privilege violation3.4CNA v3.10.1%2026-09-09Fix
CVE-2026-79692Dell Secure Connect Gateway external control of a file path7.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79690Dell Secure Connect Gateway improper certificate validation3.7CNA v3.10.2%2026-09-09Fix
CVE-2026-79689Dell Secure Connect Gateway OS command injection5.3CNA v3.14.7%2026-09-09Fix
CVE-2026-79641Dell Secure Connect Gateway OS command injection7.5CNA v3.11.1%2026-09-09Fix
CVE-2026-79640Dell Secure Connect Gateway SQL injection5.4CNA v3.10.3%2026-09-09Fix
CVE-2026-79638Dell Secure Connect Gateway cross-site scripting5.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79637Dell Secure Connect Gateway improper certificate validation7.7CNA v3.10.2%2026-09-09Fix
CVE-2026-79636Dell Secure Connect Gateway improper certificate host validation7.0CNA v3.10.2%2026-09-09Fix
CVE-2026-79635Dell Secure Connect Gateway server-side request forgery7.3CNA v3.10.3%2026-09-09Fix
CVE-2026-79617Improper access control leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter7.1CNA v3.10.1%2026-09-09Exploit codeFix
CVE-2026-79522gpac gf_dm_get_chunk_data function out-of-bounds read6.5v3.10.3%2026-09-09
CVE-2026-79516stbsp_vsnprintf function An out-of-bounds read4.0CNA v3.10.1%2026-09-09
CVE-2026-79515nothings stb stbtt_GetGlyphShape out-of-bounds read4.3CNA v3.10.4%2026-09-09
CVE-2026-79514gpac gf_dm_data_received function out-of-bounds read6.5v3.10.3%2026-09-09
CVE-2026-79513gpac gf_dash_get_timeline_duration function divide by zero6.5CNA v3.10.4%2026-09-09
CVE-2026-79387PbootCMS versions SQL injection4.3CISA ADP v3.10.3%2026-09-09Exploit code
CVE-2026-79324Mageplaza Gdpr Address Delete controller missing authorization7.5CISA ADP v3.10.6%2026-09-09
CVE-2026-79323Mageplaza Magefan Blog blogComments GraphQL query information disclosure7.5CISA ADP v3.10.6%2026-09-09
CVE-2026-79322Mageplaza Blog RelatedProduct block SQL injection8.6CISA ADP v3.10.5%2026-09-09
CVE-2026-78494Dell Secure Connect Gateway improper certificate validation7.4CNA v3.10.2%2026-09-09Fix
CVE-2026-78493Dell Secure Connect Gateway command injection5.5CNA v3.12.5%2026-09-09Fix
CVE-2026-78492Dell Secure Connect Gateway improper certificate validation7.4CNA v3.10.2%2026-09-09Fix
CVE-2026-78491Dell Secure Connect Gateway improper certificate validation8.2CNA v3.10.3%2026-09-09Fix
CVE-2026-78490Dell Secure Connect Gateway missing brute-force protection7.5CNA v3.10.5%2026-09-09Fix
CVE-2026-78489Dell Secure Connect Gateway improper certificate validation5.9CNA v3.10.2%2026-09-09Fix
CVE-2026-78486Dell Secure Connect Gateway hard-coded cryptographic key4.4CNA v3.10.3%2026-09-09Fix
CVE-2026-78485Dell Secure Connect Gateway path traversal7.3CNA v3.10.4%2026-09-09Fix
CVE-2026-78484Dell Secure Connect Gateway command injection5.5CNA v3.12.5%2026-09-09Fix
CVE-2026-78483Dell Secure Connect Gateway improper certificate validation5.9CNA v3.10.2%2026-09-09Fix
CVE-2026-78482Dell Secure Connect Gateway SQL injection5.5CNA v3.12.5%2026-09-09Fix
CVE-2026-78481Dell Secure Connect Gateway hard-coded cryptographic key6.5CNA v3.10.3%2026-09-09Fix
CVE-2026-78377Open redirect in Yordam Informatics's Library Automation System6.1CNA v3.10.2%2026-09-09Fix
CVE-2026-77974Softish C6 Ear Camera and EarVision Android application missing authentication for critical function8.5CNA v4.00.3%2026-09-09
CVE-2026-77187My Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-09Fix
CVE-2026-77186My Calendar WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-09Fix
CVE-2026-77120Schneider Electric PowerLogic T300 OS command injection8.7CNA v4.00.7%2026-09-09Fix
CVE-2026-76801FireBox WordPress plugin authenticated (Author+) remote code execution to privilege escalation8.8CNA v3.10.9%2026-09-09Fix
CVE-2026-76009Next-Cart Store to WooCommerce Migration WordPress plugin unauthenticated authentication bypass8.1CNA v3.10.9%2026-09-09Fix
CVE-2026-75966Podlove Podcast Publisher WordPress plugin stored cross-site scripting6.4CNA v3.10.5%2026-09-09Fix
CVE-2026-75927PublishPress Capabilities WordPress plugin privilege escalation7.2CNA v3.10.6%2026-09-09Reported exploitedFix
CVE-2026-75905WP Recipe Maker WordPress plugin authorization bypass4.3CNA v3.10.4%2026-09-09Fix
CVE-2026-75861Ultimate Gift Cards for WooCommerce gift card redemption missing authorization6.5CISA ADP v3.10.3%2026-09-09Fix
CVE-2026-75308yshopmall file upload endpoint cross-site scripting6.1CISA ADP v3.10.3%2026-09-09
CVE-2026-75307zhitan-ems equipment file upload endpoint cross-site scripting6.1CISA ADP v3.10.3%2026-09-09
CVE-2026-74761Apache ActiveMQ Broker TopicRegion improper input validation7.5CISA ADP v3.10.6%2026-09-09Fix
CVE-2026-73789Unauthenticated Insecure Parameter Manipulation allows data tampering in CPPM Web interface5.3CNA v3.10.4%2026-09-09
CVE-2026-73788Privilege escalation in ClearPass OnGuard agent6.5CNA v3.10.4%2026-09-09
CVE-2026-73787Authenticated arbitrary file write allows remote code execution via CPPM Web interface7.2CNA v3.10.8%2026-09-09
CVE-2026-73786Unauthenticated Network-based denial of service in CPPM systems7.5CNA v3.10.6%2026-09-09
CVE-2026-73769Authenticated remote code execution in CPPM Web interface7.2CNA v3.11.1%2026-09-09
CVE-2026-73334Apache Parquet Hadoop KMS key tools improper input validation8.1CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-73324VLC media player information disclosure5.3CNA v4.00.2%2026-09-09Fix
CVE-2026-71809Siam Ordering master verification code vulnerability8.1CISA ADP v3.10.6%2026-09-09
CVE-2026-71808Siam Ordering SQL injection8.8CISA ADP v3.10.5%2026-09-09
CVE-2026-71807RuoYi-Cloud-Plus workflow task controller improper access control4.3CISA ADP v3.10.4%2026-09-09
CVE-2026-71805LZ-litchi An arbitrary file upload9.8CISA ADP v3.10.7%2026-09-09
CVE-2026-71803money-pos order return goods name field stored cross-site scripting5.4CISA ADP v3.10.3%2026-09-09
CVE-2026-71802announcement preview component of REBUILD stored cross-site scripting5.4CISA ADP v3.10.2%2026-09-09
CVE-2026-71801SPMS-Server access token secret hard-coded credentials9.8CISA ADP v3.10.8%2026-09-09
CVE-2026-71616GPAC ROUTE media object completion denial of service6.2CISA ADP v3.10.2%2026-09-09
CVE-2026-71614GPAC DVB MPE descriptor parsing code injection8.4CISA ADP v3.10.2%2026-09-09
CVE-2026-71613GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 buffer overflow7.8CISA ADP v3.10.2%2026-09-09
CVE-2026-71612GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 buffer overflow8.4CISA ADP v3.10.2%2026-09-09
CVE-2026-70425Dell PowerScale OneFS OS command injection6.7CNA v3.10.5%2026-09-09Fix
CVE-2026-68484Sage AR Automation Cash Collect contains an improper authorization9.0CNA v4.00.3%2026-09-09Fix
CVE-2026-67403Sage AR Automation Cash Collect contains an improper authorization9.0CNA v4.00.3%2026-09-09Fix
CVE-2026-67401WebPros cPanel SQL injection9.9CNA v3.00.9%2026-09-09Exploit codeFix
CVE-2026-65181Apache Impala: RCE via External Data Source Class Loading8.1CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-64857tirreno has session fixation in Login Authentication5.3CNA v4.00.5%2026-09-09Fix
CVE-2026-61915Cyrus IMAP double free7.1v3.10.3%2026-09-09Fix
CVE-2026-61911Cyrus IMAP system information disclosure4.3CNA v3.10.2%2026-09-09Fix
CVE-2026-61910Cyrus IMAP incorrect authorization5.0v3.10.2%2026-09-09Fix
CVE-2026-61909Cyrus IMAP unprotected alternate channel4.3v3.10.2%2026-09-09Fix
CVE-2026-61908Cyrus IMAP out-of-bounds read6.5v3.10.2%2026-09-09Fix
CVE-2026-61907Cyrus IMAP incorrect authorization4.3CNA v3.10.2%2026-09-09Fix
CVE-2026-57866Apache Impala: Secrets Exfiltration via SSRF8.8CISA ADP v3.10.6%2026-09-09Fix
CVE-2026-57825OCaml opam symlink following5.7CNA v3.10.5%2026-09-09Fix
CVE-2026-56711VLC media player memory corruption7.3CNA v4.00.1%2026-09-09Fix
CVE-2026-56207Apache Impala: SAML authentication bypass via forged bearer token9.8CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-54694NationalSecurityAgency/skills-service has stored XSS9.6CNA v3.10.5%2026-09-09Fix
CVE-2026-54048Apache Impala: Avro Schema URL server-side request forgery5.3CISA ADP v3.10.5%2026-09-09Fix
CVE-2026-53956Rattler vulnerable to package cache path traversal via conda package build string5.4CNA v3.10.3%2026-09-09Fix
CVE-2026-52482SJRC F11 SJ-GPS-PRO firmware inetd telnet script information disclosure7.5CISA ADP v3.10.5%2026-09-09
CVE-2026-50165alf.io has improper access control for Organization Owners that exposes System Secrets7.1CNA v4.00.4%2026-09-09Fix
CVE-2026-49315Huawei HarmonyOS DoS vulnerability in the input device module7.1CNA v3.10.1%2026-09-09Fix
CVE-2026-49314Huawei HarmonyOS OOB write vulnerability in the rendering and composition module7.3CNA v3.10.1%2026-09-09Fix
CVE-2026-49313Huawei HarmonyOS permission control vulnerability in the app lock module5.5CNA v3.10.1%2026-09-09Fix
CVE-2026-49312Huawei HarmonyOS permission control vulnerability in the window module4.0CNA v3.10.1%2026-09-09Fix
CVE-2026-49311Huawei HarmonyOS permission control vulnerability in the event notification module6.2CNA v3.10.1%2026-09-09Fix
CVE-2026-49310Huawei HarmonyOS permission control vulnerability in the event notification module8.6CNA v3.10.4%2026-09-09Fix
CVE-2026-49309Huawei HarmonyOS permission control vulnerability in the settings module4.8CNA v3.10.1%2026-09-09Fix
CVE-2026-47156MantisBT: SOAP API authentication bypass with privilege escalation to Administrator9.3CNA v4.00.7%2026-09-09Fix
CVE-2026-46460Dell PowerScale OneFS incorrect authorization3.5CNA v3.10.2%2026-09-09Fix
CVE-2026-41987Huawei HarmonyOS permission control vulnerability in the app management module6.2CNA v3.10.1%2026-09-09Fix
CVE-2026-41871Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)9.8CISA ADP v3.10.7%2026-09-09Fix
CVE-2026-41870Apache Nutch: Unauthenticated remote code execution8.8CISA ADP v3.10.7%2026-09-09Fix
CVE-2026-41869Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)9.1CISA ADP v3.10.7%2026-09-09Fix
CVE-2026-40635Dell PowerScale OneFS insecure temporary file5.4CNA v3.10.4%2026-09-09Fix
CVE-2026-39020Wings3D Wavefront OBJ import denial of service5.5CNA v3.10.1%2026-09-09
CVE-2026-38998SocketDescriptor::tcpReadHandler1 function use-after-free6.5CISA ADP v3.10.4%2026-09-09Fix
CVE-2026-36433Actions Semiconductor Media Player Utilities Production.dll and RdiskUpgrade.exe code injection9.8CISA ADP v3.10.7%2026-09-09
CVE-2026-26212Rara One Click Demo Import arbitrary file upload RCE8.6CNA v4.00.8%2026-09-09Fix
CVE-2026-23855Dell iDRAC9 OS command injection7.2CNA v3.10.9%2026-09-09Fix
CVE-2026-22591eProsima Fast-DDS fast DDS DDSSQLFilter Recursive parser stack exhaustion (remote DoS)7.5CNA v3.10.3%2026-09-09Fix
CVE-2026-22590Fast-DDS Discovery Server: Out-of-bounds read and Heap Memory Disclosure9.1CNA v3.10.4%2026-09-09Fix
CVE-2026-21113Samsung Mobile Visual Voicemail improper export of Android application components4.8CNA v4.00.1%2026-09-09Fix
CVE-2026-21112Samsung Mobile Samsung Tips improper input validation5.1CNA v4.00.1%2026-09-09Fix
CVE-2026-21111Samsung Mobile libsthmbc out-of-bounds write6.9CNA v4.00.1%2026-09-09
CVE-2026-21110Samsung Mobile libsavscmn.so out-of-bounds write6.9CNA v4.00.1%2026-09-09
CVE-2026-21109Samsung Mobile Watch Plugin improper access control2.1CNA v4.00.1%2026-09-09
CVE-2026-21108Samsung Mobile Bixby Touch improper export of Android application components6.9CNA v4.00.1%2026-09-09Fix
CVE-2026-21107Samsung Mobile Samsung Notes out-of-bounds write6.9CNA v4.00.1%2026-09-09Fix
CVE-2026-21106Samsung Mobile Samsung Cloud Assistant improper intent verification5.1CNA v4.00.1%2026-09-09
CVE-2026-21105Samsung Mobile Collection improper access control5.9CNA v4.00.1%2026-09-09Fix
CVE-2026-21104Samsung Mobile Devices KnoxVault trustlet heap-based buffer overflow7.1CNA v4.00.1%2026-09-09Fix
CVE-2026-21103Samsung Mobile Devices GalaxyDiagnostics path traversal6.8CNA v4.00.2%2026-09-09Fix
CVE-2026-21102Samsung Mobile Devices DualDAR use-after-free9.3CNA v4.00.1%2026-09-09Fix
CVE-2026-21101Samsung Mobile Devices DualDAR driver improper input validation8.4CNA v4.00.1%2026-09-09Fix
CVE-2026-21100Samsung Mobile Devices SystemUI improper access control6.9CNA v4.00.1%2026-09-09Fix
CVE-2026-21099Samsung Mobile Devices SettingsProvider improper access control5.1CNA v4.00.1%2026-09-09Fix
CVE-2026-21098Samsung Mobile Devices Link to Windows improper access control6.9CNA v4.00.1%2026-09-09Fix
CVE-2026-21097Samsung Mobile Devices ActivityTaskManagerService improper authentication4.6CNA v4.00.1%2026-09-09Fix
CVE-2026-21096Samsung Mobile Devices JPEG decoder of libimagecodec.quram.so heap-based buffer overflow9.2CNA v4.00.5%2026-09-09Fix
CVE-2026-21095Samsung Mobile Devices DNG decoder of libimagecodec.quram.so heap-based buffer overflow9.2CNA v4.00.5%2026-09-09Fix
CVE-2026-21094Samsung Mobile Devices wpa_supplicant improper input validation6.1CNA v4.00.2%2026-09-09Fix
CVE-2026-21093Samsung Mobile Devices PROCA trustlet stack-based buffer overflow5.6CNA v4.00.1%2026-09-09Fix
CVE-2026-21092Samsung Mobile Devices ImsService path traversal8.8CNA v4.00.3%2026-09-09Fix
CVE-2026-21091Samsung Mobile Devices libcodec2secevrcdec.so out-of-bounds write4.4CNA v4.00.1%2026-09-09Fix
CVE-2026-21090Samsung Mobile Devices libsaviextractor.so out-of-bounds write4.4CNA v4.00.1%2026-09-09Fix
CVE-2026-21089Samsung Mobile Devices removing style tag in libsubextractor.so improper input validation6.9CNA v4.00.1%2026-09-09Fix
CVE-2026-21088Samsung Mobile Devices improper input validation6.9CNA v4.00.1%2026-09-09Fix