CVE-2026 list

CVE-2026 records published in September 2026

Page 13 of 15: records 12,001 to 13,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 12,001 to 13,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-69580Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69579Microsoft Windows Message Queuing remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69578Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69576Microsoft Windows graphic Fonts elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69575Microsoft Windows Storage Spaces controller elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69574Microsoft Windows Device Association service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69573Microsoft Windows Universal Disk Format File System Driver (UDFS) elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69572Microsoft Windows SMB client information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69571Microsoft Windows USB Audio class driver (usbaudio.sys) elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69569Microsoft Windows Print Spooler components denial of service5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69568Microsoft Windows storage Spaces controller information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69567Microsoft Windows NTFS elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69566Microsoft Windows NTFS remote code execution6.8CNA v3.10.4%2026-09-08Fix
CVE-2026-69564Microsoft Windows Online Certificate Status Protocol (OCSP) elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69563Microsoft Windows Program Compatibility Assistant service elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69562Microsoft SQL Server information disclosure6.5CNA v3.10.9%2026-09-08Fix
CVE-2026-69561Microsoft Windows CD-ROM driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69560Microsoft Windows Work Folder service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69559Microsoft Teams for Android information disclosure5.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69556Microsoft Office Word remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69554Microsoft Windows Search component tampering5.5CNA v3.10.3%2026-09-08Fix
CVE-2026-69553Microsoft Windows Hyper-V elevation of privilege7.1CNA v3.10.5%2026-09-08Fix
CVE-2026-69552Microsoft Windows Print Spooler components information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69551Microsoft Windows DNS server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-69549Microsoft Windows Virtual Hard Disk (VHD) Miniport driver elevation of privilege Vulernability7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69548Microsoft Windows RNDIS information disclosure4.6CNA v3.10.5%2026-09-08Fix
CVE-2026-69547Microsoft Windows DHCP server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-69546Microsoft Windows Active Directory Domain services remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69544Microsoft Windows SMB client elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69542Microsoft Windows Camera Frame Server Monitor elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69541Microsoft Windows Virtual Hard Disk (VHD) Miniport driver elevation of privilege Vulernability7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69540Microsoft Windows Audio service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69539Microsoft Windows remote Desktop services remote code execution7.5CNA v3.10.7%2026-09-08Fix
CVE-2026-69538Microsoft Windows Spaceport.sys remote code execution7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69536Microsoft Windows remote Desktop services remote code execution7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69535Microsoft Windows Spaceport.sys elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69534Microsoft Windows Program Compatibility Assistant service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69532Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69531Microsoft Windows Speech tampering5.5CNA v3.10.3%2026-09-08Fix
CVE-2026-69530Microsoft Windows Reliable Multicast Transport Driver (RMCAST) remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69529Microsoft Office Access remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69528Microsoft Windows Shell elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69527Microsoft Windows USB Mass Storage class driver information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69525Microsoft Windows remote Desktop services remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69524Microsoft Windows Active Directory Domain services remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69522Microsoft .NET and Visual Studio remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-69518Microsoft Windows Remote Desktop remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69517Microsoft Windows Wireless Networking elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69516Microsoft Windows Connected Devices Platform Service (Cdpsvc) elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69514Microsoft Windows remote Desktop services remote code execution7.5CNA v3.10.7%2026-09-08Fix
CVE-2026-69513Microsoft Windows Error Reporting elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69512Microsoft Windows Spaceport.sys elevation of privilege8.0CNA v3.10.6%2026-09-08Fix
CVE-2026-69511Microsoft Windows Media Foundation remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69510Microsoft Windows DHCP server remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69509Microsoft Role: Windows Fax service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69508Microsoft Windows MIDI service module elevation of privileges7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69507Microsoft Windows Search component information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69505Microsoft Windows NTFS elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69504Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69503Microsoft Windows USB driver elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69501Microsoft Windows Secure Kernel Mode elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69500Microsoft Windows Image Acquisition elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69499Microsoft Windows Imaging component remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69498Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69497Microsoft Windows DHCP server denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-69496Microsoft Windows Compressed Folder remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69495Microsoft Windows Event Logging service remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69494Microsoft Windows Event Logging service remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69493Microsoft Windows Event Logging service remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69492Microsoft Windows Partition Management driver elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69491Microsoft DirectMusic remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69490Microsoft Windows USB Mass Storage class driver elevation of privilege6.8CNA v3.10.4%2026-09-08Fix
CVE-2026-69489Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69488Microsoft Windows Device Association service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69485Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-69483Microsoft Windows Image Acquisition information disclosure4.7CNA v3.10.3%2026-09-08Fix
CVE-2026-69482Microsoft Windows Error Reporting tampering7.1CNA v3.10.5%2026-09-08Fix
CVE-2026-69481Microsoft Windows Enterprise App Management elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69480Microsoft Windows Partition Management driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69479Microsoft Windows NTFS remote code execution8.4CNA v3.10.4%2026-09-08Fix
CVE-2026-69478Microsoft Windows Device Association service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69477Microsoft Office Access remote code execution7.3CNA v3.10.4%2026-09-08Fix
CVE-2026-69476Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69475Microsoft Windows Remote Desktop services elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69474Microsoft Windows Overlay Filter information disclosure4.8CNA v3.10.7%2026-09-08Fix
CVE-2026-69473Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69472Microsoft Windows Devices Human interface elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69470Microsoft Windows Connected User Experiences and Telemetry elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69469Microsoft Windows USB Audio class driver (usbaudio.sys) elevation of privilege6.6CNA v3.10.5%2026-09-08Fix
CVE-2026-69468Microsoft Windows Volume Manager extension driver elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69467Microsoft Graphics component elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69466Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69465Microsoft Office SharePoint remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69464Microsoft Office SharePoint elevation of privilege8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-69463Microsoft Windows NTFS remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69462Microsoft Windows Error Reporting elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69461Microsoft Windows NTFS remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69460Microsoft Windows Modern Device Management (MDM) elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69459Microsoft Windows Power Dependency Coordinator elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69458Microsoft Windows BitLocker elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69457Microsoft Windows USB driver information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69456Microsoft Windows Speech elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69455Microsoft Windows Remote Access Connection Manager elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69453Microsoft Windows Search component tampering5.5CNA v3.10.3%2026-09-08Fix
CVE-2026-69451Microsoft Windows Management Instrumentation elevation of privilege7.1CNA v3.10.6%2026-09-08Exploit codeFix
CVE-2026-69450Microsoft Windows Error Reporting elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69449Microsoft Windows BitLocker remote code execution6.7CNA v3.10.3%2026-09-08Fix
CVE-2026-69448Microsoft Windows Bluetooth service elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69447Microsoft Windows Audio service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69445Microsoft Windows Compressed Folder elevation of privilege7.8CNA v3.10.4%2026-09-08Fix
CVE-2026-69444Microsoft Windows Speech elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69443Microsoft Windows Device Health Attestation (DHA) information disclosure7.5CNA v3.11.0%2026-09-08Fix
CVE-2026-69442Microsoft Office remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69441Microsoft Windows Installer elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69440Microsoft Windows MIDI service module elevation of privileges7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69439Microsoft .NET and Visual Studio elevation of privilege8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69438Microsoft JScript remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69436Microsoft Windows State Repository service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69434Microsoft Windows URL Moniker remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69433Microsoft Windows Error Reporting elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69432Microsoft Windows volume Manager driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69431Microsoft Windows telnet client remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69430Microsoft Windows Embedded Mode service elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69429Microsoft Windows Internet Key Exchange (IKE) protocol extensions remote code execution7.5CNA v3.10.7%2026-09-08Fix
CVE-2026-69428Microsoft Windows LDAP Lightweight Directory Access protocol denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-69427Microsoft VOLSNAP.SYS elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69426Microsoft Windows VOLSNAP.SYS remote code execution7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69425Microsoft Windows NTFS tampering4.7CNA v3.10.3%2026-09-08Fix
CVE-2026-69424Microsoft Windows Distributed File System (DFS) elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69423Microsoft Windows USB Video driver elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69422Microsoft Windows USB Video driver elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69421Microsoft Windows Kernel-Mode driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69420Microsoft VOLSNAP.SYS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69418Microsoft Windows volume Manager driver elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69417Microsoft Office SharePoint spoofing7.3CNA v3.10.4%2026-09-08Fix
CVE-2026-69416Microsoft Windows DHCP server denial of service5.7CNA v3.10.6%2026-09-08Fix
CVE-2026-69415Microsoft Windows DHCP server elevation of privilege6.8CNA v3.10.7%2026-09-08Fix
CVE-2026-69413Microsoft Windows USB Audio class driver (usbaudio.sys) elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69412Microsoft Windows DHCP server remote code execution8.0CNA v3.10.6%2026-09-08Fix
CVE-2026-69410Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69409Microsoft Office SharePoint information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-69408Microsoft Windows Media Foundation remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69407Microsoft Windows volume Manager driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69406Microsoft Windows Kernel information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-69405Microsoft Windows DHCP server denial of service5.7CNA v3.10.6%2026-09-08Fix
CVE-2026-69404Microsoft Windows TCP/IP elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69403Microsoft Windows SMB server information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69402Microsoft Office SharePoint spoofing7.3CNA v3.10.4%2026-09-08Fix
CVE-2026-69401Microsoft Windows audio Video Control Transport protocol elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69398Microsoft Windows Bluetooth service elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69397Microsoft OpenSSH for Windows remote code execution7.5CNA v3.10.6%2026-09-08Fix
CVE-2026-69396Microsoft Windows NDIS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69395Microsoft Windows Active Directory Certificate Services (AD CS) information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-69394Microsoft Windows Audio service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69393Microsoft Windows Spaceport.sys information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69392Microsoft Windows Shell elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69391Microsoft Windows Broker Infrastructure service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69390Microsoft Windows Spaceport.sys information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69389Microsoft Windows Storage Management Provider elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69388Microsoft Windows Bluetooth service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69386Microsoft Windows Media Foundation remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69385Microsoft Windows TCP/IP elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69384Microsoft Windows virtual Hard Disk (VHD) Miniport driver denial of service7.1CNA v3.10.4%2026-09-08Fix
CVE-2026-69383Microsoft Windows Shell elevation of privilege7.0CNA v3.10.4%2026-09-08Fix
CVE-2026-69382Microsoft Exchange Server information disclosure5.9CNA v3.10.5%2026-09-08Fix
CVE-2026-69381Microsoft Windows Storage Port driver information disclosure4.6CNA v3.10.5%2026-09-08Fix
CVE-2026-69380Microsoft Exchange Server elevation of privilege8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69379Microsoft Windows NTFS elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69378Microsoft Exchange Server denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-69377Microsoft Windows Modern Device Management (MDM) elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69376Microsoft Standard XPS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69375Microsoft Exchange Server tampering6.5CNA v3.10.6%2026-09-08Fix
CVE-2026-69374Microsoft Windows SMB server denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-69373Microsoft Windows Overlay Filter elevation of privilege6.7CNA v3.10.3%2026-09-08Fix
CVE-2026-69372Microsoft Windows Network File System denial of service5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69371Microsoft Windows Overlay Filter elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69369Microsoft Windows DNS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69368Microsoft Windows Overlay Filter elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69367Microsoft Standard XPS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69366Microsoft Windows Kernel elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69365Microsoft Local Security Authority (LSA) server elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69364Microsoft Windows Print Spooler components elevation of privilege7.1CNA v3.10.4%2026-09-08Fix
CVE-2026-69362Microsoft Windows Error Reporting elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69361Microsoft Exchange Server spoofing6.5CNA v3.10.8%2026-09-08Fix
CVE-2026-69360Microsoft Office Word remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69359Microsoft Windows active Directory Domain services elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69358Microsoft Windows remote Desktop client remote code execution7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69357Microsoft Windows NDIS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69356Microsoft Exchange Server spoofing9.3CNA v3.10.8%2026-09-08Fix
CVE-2026-69355Microsoft Exchange Server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-69353Microsoft Windows Text Shaping information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69352Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69351Microsoft Windows Universal Plug and Play (UPnP) device host information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-69350Microsoft Windows Overlay Filter elevation of privilege6.7CNA v3.10.3%2026-09-08Fix
CVE-2026-69349Microsoft Windows Management Instrumentation information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69348Microsoft Windows Win32k elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69347Microsoft Windows Fast FAT driver remote code execution7.4CNA v3.10.3%2026-09-08Fix
CVE-2026-69346Microsoft Windows Print Spooler components elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69345Microsoft Standard XPS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69344Microsoft Windows Print Spooler components information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69343Microsoft Windows Overlay Filter information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69342Microsoft Windows DHCP server denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-69341Microsoft Windows Image Acquisition elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69340Microsoft Windows NTFS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69339Microsoft Windows MIDI service module information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-69338Microsoft Windows remote Desktop Gateway service elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69337Microsoft Windows Registry elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69336Microsoft Standard XPS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69335Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69334Microsoft Windows Volume Manager extension driver remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69333Microsoft Windows Win32k elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69332Microsoft Windows NTFS elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69331Microsoft Windows Remote Access Connection Manager elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69329Microsoft Windows BranchCache denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-69328Microsoft Windows Storage elevation of privilege7.8CNA v3.10.5%2026-09-08Exploit codeFix
CVE-2026-69325Microsoft JScript remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-69324Microsoft Windows Performance Monitor elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69323Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69322Microsoft Windows Search component elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69321Microsoft Windows Power Dependency Coordinator tampering5.5CNA v3.10.3%2026-09-08Fix
CVE-2026-69319Microsoft Windows USB Video driver elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-69318Microsoft Windows Imaging component information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69317Microsoft Windows Remote Desktop client information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-69316Microsoft Windows Overlay Filter information disclosure4.7CNA v3.10.3%2026-09-08Fix
CVE-2026-69315Microsoft Windows License Manager information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-69314Microsoft Windows Device Association Broker service elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69313Microsoft Standard XPS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69312Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69311Microsoft Windows Audio service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69310Microsoft Windows DNS elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69309Microsoft Windows Print Spooler components elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69308Microsoft Standard XPS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69307Microsoft Windows USB Audio class driver (usbaudio.sys) elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69305Microsoft Windows Search component elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69304ASP.NET Core denial of service5.9CNA v3.10.9%2026-09-08Fix
CVE-2026-69303Microsoft Windows push Message Routing service information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69301Microsoft Windows Win32k elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69300Microsoft Windows Push Notifications elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69299Microsoft COM for Windows elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69298Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69297Microsoft Windows DHCP server information disclosure6.5CNA v3.10.8%2026-09-08Fix
CVE-2026-69296Microsoft Windows Device Association service elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69295Microsoft Windows USB driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69294Microsoft COM for Windows information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-69293Microsoft Windows Biometric service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69292Microsoft Windows remote Desktop Gateway service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69291Microsoft Windows Volume Manager extension driver remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69290Microsoft Windows Storage Spaces controller elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69289Microsoft Windows Setup Files Cleanup elevation of privilege7.8CNA v3.10.4%2026-09-08Fix
CVE-2026-69288Microsoft Windows GDI+ information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69287Microsoft Windows Remote Desktop services elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69286Microsoft Windows USB Audio class driver information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69285Microsoft Office remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69284Microsoft Windows DCOM server elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69283Microsoft Windows CD-ROM driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69282Microsoft Office SharePoint remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69281Microsoft Windows License Manager elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69280Microsoft Windows Push Notifications elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69279Microsoft Windows Cloud Files Mini Filter driver elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69277Microsoft Local Security Authority (LSA) server elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69276Microsoft UxTheme library (uxtheme.dll) remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-69275Microsoft Windows kernel Streaming WOW Thunk service driver elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-69274Microsoft Windows Win32k elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69273Microsoft Office SharePoint remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69272Microsoft Standard XPS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-69271Microsoft Standard XPS elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-69270Microsoft Windows USB Audio class driver (usbaudio.sys) elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69269Microsoft Standard XPS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-69268Microsoft Office SharePoint remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69267Microsoft Windows Connected User Experiences and Telemetry information disclosure6.5CNA v3.10.4%2026-09-08Fix
CVE-2026-69266Microsoft Windows DHCP server remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-69265Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68898Microsoft Windows iSCSI denial of service6.5CNA v3.10.9%2026-09-08Fix
CVE-2026-68897Microsoft Standard XPS elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-68896Microsoft Windows Search component elevation of privilege7.8CNA v3.10.4%2026-09-08Fix
CVE-2026-68895Microsoft Windows internet Storage Name service information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-68894Microsoft Windows Error Reporting elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68893Microsoft Windows remote Desktop Licensing service elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-68892Microsoft Standard XPS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68891Microsoft Standard XPS information disclosure4.7CNA v3.10.3%2026-09-08Fix
CVE-2026-68890Microsoft Standard XPS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68889Microsoft Standard XPS elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-68888Microsoft Standard XPS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68887Microsoft Windows Message Queuing Queue Manager denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-68886Microsoft Windows Network Connection Broker information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-68885Microsoft Standard XPS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68884Microsoft Windows Kernel elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-68881Microsoft Standard XPS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-68880Microsoft Windows Win32k elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68878Microsoft Windows Fast FAT driver elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68877Microsoft Windows Storage Spaces controller remote code execution7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68876Microsoft Windows Program Compatibility Assistant service elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68875Microsoft Windows NTFS remote code execution7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68874Microsoft Windows Program Compatibility Assistant service information disclosure5.7CNA v3.10.9%2026-09-08Fix
CVE-2026-68873Microsoft Windows Program Compatibility Assistant service information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-68852Microsoft Account information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-68851Microsoft Windows NTFS information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-68850Microsoft Account elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68849Microsoft Windows Bluetooth Port driver information disclosure4.7CNA v3.10.3%2026-09-08Fix
CVE-2026-68848Microsoft Windows Print Spooler components elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68847Microsoft Windows Connected User Experiences and Telemetry elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-68846Microsoft Windows Kernel elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-68845Microsoft Windows Program Compatibility Assistant service elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68844Microsoft Windows Storage Spaces controller remote code execution7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68843Microsoft Office Word information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-68842Microsoft Windows MIDI service module information disclosure5.5CNA v3.10.5%2026-09-08Fix
CVE-2026-68841Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68840Microsoft Windows USB driver elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-68839Microsoft Windows USB Mass Storage class driver remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-68838Microsoft Windows NTFS elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68837Microsoft Windows File History service elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-68835Microsoft Windows Print Spooler components elevation of privilege7.1CNA v3.10.6%2026-09-08Fix
CVE-2026-68834Microsoft Windows NTFS elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68833Microsoft Windows NTFS remote code execution6.8CNA v3.10.4%2026-09-08Fix
CVE-2026-68832Microsoft Windows NTFS elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68831Microsoft Windows Defender Firewall service information disclosure5.5CNA v3.10.6%2026-09-08Fix
CVE-2026-68830Microsoft Windows Universal Plug and Play (UPnP) device host information disclosure5.5CNA v3.10.4%2026-09-08Fix
CVE-2026-68828Microsoft Windows remote Desktop client remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-68827Microsoft Windows GDI+ elevation of privilege8.0CNA v3.10.8%2026-09-08Fix
CVE-2026-68825Microsoft Windows Bind Filter driver elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-68824Microsoft Windows Connected User Experiences and Telemetry elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-68787Microsoft SQL server remote code execution7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-68786Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-68785Microsoft SQL server remote code execution4.9CNA v3.11.1%2026-09-08Fix
CVE-2026-68784Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68781Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68780Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68779Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68778Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68777Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68776Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-68775Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67648Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67645Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67643Microsoft SQL Server remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-67642Microsoft SQL Server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67641Microsoft SQL Server denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-67639Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67638Microsoft SQL Server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67636Microsoft SQL Server remote code execution9.0CNA v3.10.7%2026-09-08Fix
CVE-2026-67633Microsoft SQL server denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-67631Microsoft SQL server remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-67630Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67629Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67624Microsoft SQL Server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67393Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67390Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67389Microsoft SQL Server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67388Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67386Microsoft SQL server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67385Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67384Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67383Microsoft SQL Server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67381Microsoft SQL server elevation of privilege8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67380Microsoft SQL server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67379Microsoft SQL Server remote code execution8.5CNA v3.10.7%2026-09-08Fix
CVE-2026-67378Microsoft SQL Server remote code execution9.0CNA v3.10.7%2026-09-08Fix
CVE-2026-67376Microsoft SQL server denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-67373Microsoft SQL Server remote code execution8.8CNA v3.10.9%2026-09-08Fix
CVE-2026-67370Microsoft SQL server elevation of privilege8.8CNA v3.11.0%2026-09-08Fix
CVE-2026-67369Microsoft SQL Server information disclosure6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-67368Microsoft SQL server elevation of privilege8.8CNA v3.11.0%2026-09-08Fix
CVE-2026-67367Siemens SIMOVE Fleetmanager relative path traversal9.2CNA v4.01.1%2026-09-08Fix
CVE-2026-66820SQL server elevation of privilege8.8CNA v3.11.0%2026-09-08Fix
CVE-2026-66819Microsoft SQL server elevation of privilege8.8CNA v3.11.0%2026-09-08Fix
CVE-2026-66818Microsoft SQL server elevation of privilege8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-66816Microsoft SQL Server security feature bypass6.5CNA v3.11.0%2026-09-08Fix
CVE-2026-66814Microsoft SQL server elevation of privilege8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-66768Improper access control in SAP NetWeaver (SAP GUI for Java)9.0CNA v3.10.6%2026-09-08Fix
CVE-2026-66767Memory corruption vulnerability in SAP NetWeaver Application Server for ABAP and ABAP Platform7.7CNA v3.10.4%2026-09-08Fix
CVE-2026-66308Microsoft Skype for Business and Lync denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-66307Microsoft Skype for Business and Lync denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-66306Microsoft Skype for Business information disclosure6.5CNA v3.10.9%2026-09-08Fix
CVE-2026-66305Microsoft Skype for Business spoofing7.1CNA v3.10.5%2026-09-08Fix
CVE-2026-66304Microsoft Skype for Business information disclosure7.5CNA v3.11.0%2026-09-08Fix
CVE-2026-66303Microsoft Skype for Business and Lync denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-66302Microsoft Skype for Business remote code execution9.8CNA v3.11.0%2026-09-08Fix
CVE-2026-65812Microsoft Teams for Android information disclosure6.8CNA v3.10.9%2026-09-08Fix
CVE-2026-65772Microsoft Dynamics 365 On-Premises remote code execution8.8CNA v3.11.7%2026-09-08Fix
CVE-2026-65669Microsoft SQL server elevation of privilege9.6CNA v3.10.9%2026-09-08Fix
CVE-2026-64918Microsoft Office spoofing6.5CNA v3.10.9%2026-09-08Fix
CVE-2026-63523Microsoft Skype for Business spoofing6.5CNA v3.10.6%2026-09-08Fix
CVE-2026-62895Microsoft Azure Arc SQL Server Extension elevation of privilege8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-62813Microsoft Windows Active Directory Domain services remote code execution7.5CNA v3.10.7%2026-09-08Fix
CVE-2026-62810Microsoft Windows Active Directory Certificate Services (AD CS) elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-62804Microsoft Word remote code execution7.8CNA v3.10.6%2026-09-08Fix
CVE-2026-62801Microsoft PowerShell security feature bypass6.5CNA v3.10.8%2026-09-08Fix
CVE-2026-62762Microsoft Windows Active Directory Domain services denial of service6.5CNA v3.11.1%2026-09-08Fix
CVE-2026-62759Microsoft Windows Netlogon spoofing7.5CNA v3.10.4%2026-09-08Fix
CVE-2026-62744Microsoft Windows Media Foundation remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-62706Microsoft Windows Media Foundation remote code execution8.8CNA v3.10.8%2026-09-08Fix
CVE-2026-62697Microsoft Windows Push Notifications elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-62694Microsoft Windows Installer elevation of privilege7.0CNA v3.10.3%2026-09-08Fix
CVE-2026-62654Siemens Reyrolle 7SR5 download without integrity check7.0CNA v4.00.2%2026-09-08Fix
CVE-2026-62653Siemens Reyrolle 7SR5 out-of-bounds write7.0CNA v4.00.3%2026-09-08Fix
CVE-2026-62652Siemens Reyrolle 7SR5 debug information exposure6.9CNA v4.00.3%2026-09-08Fix
CVE-2026-62650Siemens Reyrolle 7SR5 authentication bypass8.7CNA v4.00.6%2026-09-08Fix
CVE-2026-62649Siemens Reyrolle 7SR5 resource exhaustion8.7CNA v4.00.6%2026-09-08Fix
CVE-2026-62648Siemens Reyrolle 7SR5 out-of-bounds write8.7CNA v4.00.6%2026-09-08Fix
CVE-2026-62647Siemens Reyrolle 7SR5 improper input validation9.3CNA v4.00.6%2026-09-08Fix
CVE-2026-62646Siemens Reyrolle 7SR5 insufficient entropy9.1CNA v4.00.5%2026-09-08Fix
CVE-2026-62645Siemens Reyrolle 7SR5 missing authentication9.3CNA v4.00.6%2026-09-08Fix
CVE-2026-62437Xen x86: DMs may cause mem leak by IRQ binding6.5CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-61517Netis NX10 OS command injection via Ping Diagnostic handler8.6CNA v4.02.5%2026-09-08
CVE-2026-61516Netis NX10 credential disclosure via sysinfo Diagnostic endpoint9.3CNA v4.00.7%2026-09-08
CVE-2026-58941Google Android iommu.c out-of-bounds read7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58874Google Android SmsController.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58848Google Android alloc.c privilege escalation7.0CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58846Google Android iommu.c use-after-free7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58839Google Android MountRegistry.cpp out-of-bounds read7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58823Google Android stpropnci_std.cc memory safety bugs7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58822Google Android ftsmooth.c memory safety bugs9.8CISA ADP v3.10.4%2026-09-08Fix
CVE-2026-58820Google Android multiple locations memory safety bugs7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-58649Microsoft .NET information disclosure6.5CNA v3.10.3%2026-09-08Fix
CVE-2026-58611Microsoft Xbox Gaming Services elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-58600Microsoft HEVC Video Extensions elevation of privilege7.8CNA v3.10.5%2026-09-08Fix
CVE-2026-58599Microsoft HEVC Video Extensions remote code execution7.8CNA v3.10.5%2026-09-08Fix
CVE-2026-58240Missing authentication check in SAP NetWeaver (Message Server)9.8CNA v3.10.5%2026-09-08Fix
CVE-2026-58234Denial of service vulnerability in SAP Process Integration (SOAP Adapter)2.2CNA v3.10.3%2026-09-08Fix
CVE-2026-58113Siemens Teamcenter V2412 cross-site scripting8.5CNA v4.00.4%2026-09-08Fix
CVE-2026-57099Microsoft AspNetCore.OData ASP.NET Core denial of service7.5CNA v3.11.2%2026-09-08Fix
CVE-2026-57098Microsoft Remote Desktop App for Windows information disclosure7.5CNA v3.10.6%2026-09-08Fix
CVE-2026-56198Microsoft Trace Data Helper elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-56177Microsoft Windows Server elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-56172Microsoft Windows VHD miniport driver elevation of privilege7.8CNA v3.10.3%2026-09-08Fix
CVE-2026-56101OpenBSD ieee80211_crypto_tkip.c TKIP MIC Countermeasure Logic Inversion DoS6.0CNA v4.00.6%2026-09-08
CVE-2026-55294Google Android ihevcd_utils.c out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-55290Google Android ResourceTypes.cpp information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-55285Google Android multiple files out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-55277Google Android RoutingManager.cpp out-of-bounds write8.0CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-55273Google Android AnnotationProcessor.cpp privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-55256Google Android multiple files denial of service6.5CISA ADP v3.10.3%2026-09-08Fix
CVE-2026-55250Maravel-Framework Token Replay vulnerability via Premature JWT Blacklist Eviction in Tagged Caches8.7CNA v4.00.9%2026-09-08Fix
CVE-2026-55007Microsoft Exchange Server remote code execution8.1CNA v3.10.7%2026-09-08Fix
CVE-2026-54611instantsoft icms2 InstantCMS has remote code execution in package installer5.5CNA v3.10.7%2026-09-08Fix
CVE-2026-53939OpenIDC/cjose uses all-zero Content Encryption Key for AES-CBC-HMAC JWE encryption9.1CNA v3.10.2%2026-09-08Fix
CVE-2026-53938OpenIDC/cjose has a heap buffer overflow in AES Key Wrap decryption (A128KW/A192KW/A256KW)8.2CNA v3.10.2%2026-09-08Fix
CVE-2026-53937Model Context Protocol Kotlin SDK stdio transport buffer denial of service6.2CNA v3.10.2%2026-09-08Fix
CVE-2026-53933Maravel-Framework vulnerable to side-channel information disclosure6.9CNA v4.00.5%2026-09-08Fix
CVE-2026-53639Sylius: IDOR on Shop Payment Request API endpoints6.3CNA v4.00.5%2026-09-08Fix
CVE-2026-53638Sylius: Channel-based payment method restriction bypass on shop account orders API endpoint4.3CNA v3.10.3%2026-09-08Fix
CVE-2026-53637Sylius: Cart FormComponent allows modification or deletion of an already-completed order6.5CNA v3.10.4%2026-09-08Fix
CVE-2026-53581OPNsense core ntp: Write path traversal9.0CNA v3.10.5%2026-09-08Fix
CVE-2026-52486OpenDDS SignedDocument verify function improper signature verification6.6CISA ADP v3.10.1%2026-09-08
CVE-2026-52307Column Management component of ClassCMS authenticated stored cross-site scripting5.4CISA ADP v3.10.3%2026-09-08
CVE-2026-50349Microsoft Windows Ancillary function driver for WinSock elevation of privilege7.0CNA v3.10.2%2026-09-08Fix
CVE-2026-50093Siemens Siveillance Control Pro unrestricted file upload8.9CNA v4.00.3%2026-09-08Fix
CVE-2026-49932Google Android PduParser.java out-of-bounds read7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49927Google Android multiple locations out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49921Google Android multiple locations memory safety bugs9.8CISA ADP v3.10.4%2026-09-08Fix
CVE-2026-49919Google Android ttcolr.c remote code execution7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49918Google Android multiple functions out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49895Google Android ieee802_11_common.c out-of-bounds read3.5CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49887Google Android InstallRepository.kt privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49884Google Android rw_mfc.cc out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-49883Google Android Wear PermissionsManager.java information disclosure10.0CNA v4.00.2%2026-09-08Fix
CVE-2026-49882Google Android rw_mfc.cc memory safety bugs8.8CISA ADP v3.10.4%2026-09-08Fix
CVE-2026-49881Google Android InCallController.java arbitrary code execution7.8CISA ADP v3.10.1%2026-09-08Exploit codeFix
CVE-2026-49879Google Android rw_t3t.cc out-of-bounds write8.8CISA ADP v3.10.4%2026-09-08Fix
CVE-2026-48888WooCommerce WordPress plugin denial of service Attack7.5CNA v3.10.5%2026-09-08Fix
CVE-2026-48707instantsoft icms2 InstantCMS vulnerable to SSRF3.1CNA v3.10.3%2026-09-08Fix
CVE-2026-48273Adobe ColdFusion improper neutralization of directives in dynamically evaluated code9.9CNA v3.11.3%2026-09-08Fix
CVE-2026-47680fluxcd source-controller source controller: Improper path handling allows traversal5.3CNA v4.00.5%2026-09-08Fix
CVE-2026-47625NVIDIA Triton Inference Server missing authorization7.5CNA v3.10.6%2026-09-08Fix
CVE-2026-47297Microsoft SQL Server remote code execution8.1CNA v3.11.1%2026-09-08Fix
CVE-2026-45531Google Android fsck.c out-of-bounds read7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-45528Google Android StorageManagerService.java privilege escalation7.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-45527Google Android HeifCleanAperture.cpp denial of service4.3CISA ADP v3.10.3%2026-09-08Fix
CVE-2026-45525Google Android multiple locations information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-45521Google Android AppFuseBridge.java information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-45520Google Android BiometricsSettingsBase.java authentication bypass7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-45519Google Android confused deputy3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-45515Google Android a2dp_vendor_opus_decoder.cc out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-44766SQL injection vulnerability in SAP S/4HANA (Intercompany Matching and Reconciliation)6.5CNA v3.10.4%2026-09-08Fix
CVE-2026-44756Memory corruption vulnerability in SAP Extended Passport (EPP) Processing10.0CNA v3.10.7%2026-09-08Fix
CVE-2026-34223Siemens Desigo CC ClickOnce Client V6 code injection8.6CNA v4.00.2%2026-09-08
CVE-2026-33920Cross-site request forgery in the Guardian/CMC login5.1CNA v4.00.1%2026-09-08Fix
CVE-2026-33391Incorrect authorization in Smart Polling configuration in Guardian/CMC5.3CNA v4.00.4%2026-09-08Fix
CVE-2026-33389Nozomi Networks Guardian Smart Polling vulnerability5.3CNA v4.00.2%2026-09-08Fix
CVE-2026-33388Incorrect authorization in Credentials Manager in Guardian/CMC6.4CNA v4.00.4%2026-09-08Fix
CVE-2026-33387Insufficient sanitization of Dashboards in Guardian/CMC5.1CNA v4.00.3%2026-09-08Fix
CVE-2026-33197AMI AptioV BDS Module Bypass Secure Boot Advisory8.7CNA v4.00.2%2026-09-08Fix
CVE-2026-30754FFmpeg A memory corruption8.8CISA ADP v3.10.5%2026-09-08Fix
CVE-2026-28671Google Android MediaProvider.java information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28668Google Android malloc_limit.cpp use-after-free7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28666Google Android LocalImageResolver.java denial of service8.8CISA ADP v3.10.3%2026-09-08Fix
CVE-2026-28664Google Android runtime_image.cc tampering7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28663Google Android LauncherAppsService.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28662Google Android p2p_pd.c out-of-bounds write8.0CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-28660Google Android multiple files confused deputy3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28659Google Android XR MicroXR Blobstore privilege escalation10.0CNA v4.00.2%2026-09-08Fix
CVE-2026-28658Google Android AccountsDb.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28657Google Android AppWidgetConfigActivityProxy.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28656Google Android DeviceAdminAdd.java privilege escalation7.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28655Google Android RemoteViews.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28653Google Android rw_t3t.cc out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28652Google Android RangingServiceImpl.java information disclosure3.1CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-28650Google Android WindowState.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28644Google Android ActivityTaskManagerService.java insecure permissions7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28642Google Android ActivityStarter.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28639Google Android rw_mfc.cc out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28638Google Android XmpDataParser.java information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28636Google Android PickActivity.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28634Google Android PhoneInterfaceManager.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28633Google Android VoiceInteractionManagerService.java denial of service5.5CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28631Google Android IntentForwarderActivity.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28630Google Android ContactsPickerActivity.kt information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28627Google Android btm_sec.cc information disclosure4.3CISA ADP v3.10.3%2026-09-08Fix
CVE-2026-28626Google Android SetupPassthroughActivity.java privilege escalation7.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28624Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28623Google Android BleRssiRangingCapabilities.java information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28622Google Android MediaProvider.java information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28620Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28618Google Android oapv.c out-of-bounds write8.8CISA ADP v3.10.4%2026-09-08Exploit codeFix
CVE-2026-28617Google Android WifiNetworkSuggestionsManager.java denial of service5.5CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28616Google Android Setup Wizard privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28614Google Android SlicePermissionActivity.java insecure permissions7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28613Google Android ChannelImpl.java privilege escalation7.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28612Google Android ActivityStarter.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28611Google Android NfcService.java session hijacking7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28609Google Android MatroskaExtractor.cpp out-of-bounds write8.8CISA ADP v3.10.4%2026-09-08Exploit codeFix
CVE-2026-28607Google Android multiple functions in multiple locations privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28606Google Android AdapterService.java privilege escalation9.8CISA ADP v3.10.4%2026-09-08Fix
CVE-2026-28604Google Android multiple locations use-after-free7.5CISA ADP v3.10.3%2026-09-08Fix
CVE-2026-28603Google Android AppRestrictionsFragment.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28602Google Android ClipboardService.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28600Google Android PaymentDefaultDialog.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28599Google Android ActivityManagerService.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28596Google Android GameManagerService.java denial of service5.5CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28594Google Android multiple locations use-after-free7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28593Google Android SettingsFragment.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28590Google Android multiple locations privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28584Google Android PackageInstallerService.java denial of service5.5CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28583Google Android camera_metadata.c out-of-bounds write7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28582Google Android ConfirmDeviceCredentialActivity.java unauthorized access3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-28572Google Android InstallLaunch.kt privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-27227Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.4%2026-09-08Fix
CVE-2026-26084Fortinet FortiSandbox PaaS improper access control8.9CNA v3.10.4%2026-09-08Fix
CVE-2026-22575Fortinet FortiManager improper access control4.7CNA v3.10.2%2026-09-08Fix
CVE-2026-20293Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass vulnerability7.1CNA v3.10.2%2026-09-08Fix
CVE-2026-19872HTML::FormHandler versions for Perl allow cross-site scripting6.1CISA ADP v3.10.3%2026-09-08Fix
CVE-2026-19713Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-09-08Fix
CVE-2026-19651IBM Enterprise Build of Quarkus query string parameter mapping insecure direct object reference7.4CNA v3.10.3%2026-09-08Fix
CVE-2026-19644Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-09-08Fix
CVE-2026-19625IBM Enterprise Build of Quarkus OIDC token introspection cache improper access control5.3CNA v3.10.2%2026-09-08Fix
CVE-2026-19614XML external entity (XXE) injection in CyberELF NanoXML5.3CNA v4.00.2%2026-09-08
CVE-2026-19612Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-09-08Fix
CVE-2026-19479Adobe Experience Manager cross-site scripting (DOM-based XSS)5.4CNA v3.10.3%2026-09-08Fix
CVE-2026-19397ASUS Control Center Express Agent missing authentication7.7CNA v4.00.2%2026-09-08
CVE-2026-19232Adobe Experience Manager incorrect authorization9.9CNA v3.10.6%2026-09-08Fix
CVE-2026-19203Eclipse Jetty HTTP request smuggling8.3CNA v4.00.3%2026-09-08Fix
CVE-2026-19201Google denial of service via Unbounded Recursion in go-attestation Windows SIPA parser6.6CNA v4.00.3%2026-09-08Fix
CVE-2026-18851Ivanti Endpoint Manager Mobile missing authorization8.8CNA v3.11.0%2026-09-08Fix
CVE-2026-18090Red Hat Enterprise Linux 10 gdk-pixbuf: Gdk-pixbuf: Heap out-of-bounds read in uncompress6.1CNA v3.10.2%2026-09-08
CVE-2026-18023ASUS Armoury Crate sensitive information not cleared before reuse5.7CNA v4.00.1%2026-09-08
CVE-2026-18021Beaver Builder Page Builder WordPress plugin unauthenticated arbitrary shortcode execution6.5CNA v3.10.3%2026-09-08Fix
CVE-2026-17509WPML Multilingual CMS WordPress plugin incorrect authorization to authenticated SQL injection6.5CNA v3.10.2%2026-09-08Fix
CVE-2026-16769silabs.com WiseCnnect RS9116W/SiWx917 plaintext pause encryption request causes DOS7.1CNA v4.00.1%2026-09-08Fix
CVE-2026-16502Live Composer WordPress plugin authenticated (Contributor+) PHP object injection via shortcode8.8CNA v3.10.5%2026-09-08Fix
CVE-2026-16497NVIDIA Triton Inference Server excessive iteration7.5CNA v3.10.5%2026-09-08Fix
CVE-2026-16037PayTR Virtual Pos iFrame API WHMCS Module authentication bypass7.5CNA v3.10.3%2026-09-08Fix
CVE-2026-16025PayTR Virtual Pos iFrame API WHMCS Module improper quantity validation7.5CNA v3.10.3%2026-09-08Fix
CVE-2026-16006ASUS Armoury Crate system information disclosure5.7CNA v4.00.1%2026-09-08
CVE-2026-16005ASUS Armoury Crate release of an invalid pointer5.8CNA v4.00.1%2026-09-08
CVE-2026-16004ASUS Armoury Crate exposed IOCTL without access control5.9CNA v4.00.1%2026-09-08
CVE-2026-16003ASUS Armoury Crate exposed IOCTL without access control2.0CNA v4.00.1%2026-09-08
CVE-2026-12962ASUS Armoury Crate permissive cross-domain policy5.3CNA v4.00.4%2026-09-08
CVE-2026-12745Ivanti Neurons for ITSM deserialization of untrusted data9.8CNA v3.12.2%2026-09-08Fix
CVE-2026-12744Ivanti Neurons for ITSM deserialization of untrusted data9.8CNA v3.12.3%2026-09-08Fix
CVE-2026-12651Ivanti Neurons for ITSM deserialization of untrusted data8.8CNA v3.11.5%2026-09-08Fix
CVE-2026-12650Ivanti Neurons for ITSM deserialization of untrusted data9.9CNA v3.11.6%2026-09-08Fix
CVE-2026-12648Ivanti Neurons for ITSM deserialization of untrusted data8.8CNA v3.11.5%2026-09-08Fix
CVE-2026-12647Ivanti Neurons for ITSM missing authorization9.9CNA v3.11.2%2026-09-08Fix
CVE-2026-12646Ivanti Neurons for ITSM missing authorization9.9CNA v3.11.2%2026-09-08Fix
CVE-2026-12645Ivanti Neurons for ITSM missing authorization9.9CNA v3.11.3%2026-09-08Fix
CVE-2026-12611Eclipse Jetty race condition8.7CNA v4.00.3%2026-09-08Fix
CVE-2026-12387Mali GPU Kernel Driver allows access to already freed memory5.1CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-12285Mali GPU Kernel Driver allows access to already freed memory4.0CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-12230LearnPress WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-08Fix
CVE-2026-11891Mali GPU Userspace Driver allows access to already freed memory5.1CISA ADP v3.10.1%2026-09-08
CVE-2026-11573Qt uncontrolled recursion in QDomDocument/QDomNode serialization causes stack exhaustion (QtXml)7.1CNA v4.00.4%2026-09-08Fix
CVE-2026-9331EDD Product Catalog Feed by PixelYourSite WordPress plugin unauthorized access7.1CNA v3.10.4%2026-09-08Fix
CVE-2026-9216Insufficient input validation vulnerability exists in certain NETGEAR RAX Models1.2CNA v4.00.4%2026-09-08Fix
CVE-2026-9215A CSRF vulnerability exists in certain NETGEAR XR series devices1.8CNA v4.00.2%2026-09-08Fix
CVE-2026-9040Mali GPU Kernel Driver allows denial of service or disclosure of sensitive information7.7CISA ADP v3.10.1%2026-09-08
CVE-2026-9034Mali GPU Userspace Driver allows access to already freed memory7.8CISA ADP v3.10.2%2026-09-08
CVE-2026-7477Mali GPU Kernel Driver allows access to already freed memory7.8CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-7476Mali GPU Kernel Driver allows access to already freed memory7.8CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-5729Mali GPU Kernel Driver allows access to already freed memory7.8CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-3174Event Tickets and Registration WordPress plugin unauthorized access7.5CNA v3.10.5%2026-09-08Fix
CVE-2026-2520Online Scheduling and Appointment Booking System WordPress plugin unauthorized access5.4CNA v3.10.2%2026-09-08Fix
CVE-2026-0860Mali GPU Kernel Driver allows access to sensitive kernel information7.5CISA ADP v3.10.2%2026-09-08
CVE-2026-0084Google Android HostEmulationManager.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-0065Google Android BackgroundLaunchProcessController.java privilege escalation7.8CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-0054Google Android WalletContextualLocationsService.kt information disclosure3.3CISA ADP v3.10.1%2026-09-08Fix
CVE-2026-0001Mali GPU Kernel Driver allows access to already freed memory4.4CISA ADP v3.10.2%2026-09-08Fix
CVE-2026-86544knowns authorization bypass via Misclassified Code Actions7.2CNA v4.00.6%2026-09-07Fix
CVE-2026-86543knowns Unauthenticated Management API Exposure9.3CNA v4.00.9%2026-09-07Fix
CVE-2026-86542knowns path traversal via Import Name8.8CNA v4.00.7%2026-09-07Fix
CVE-2026-86541knowns path traversal via code.replace MCP action7.2CNA v4.00.8%2026-09-07Fix
CVE-2026-86540knowns arbitrary code execution via LSP Binary8.5CNA v4.00.2%2026-09-07Fix
CVE-2026-86539knowns server-side request forgery via embedding-models endpoint6.9CNA v4.00.4%2026-09-07Fix
CVE-2026-86538knowns path traversal via templateFile parameter8.7CNA v4.01.0%2026-09-07Reported exploitedFix
CVE-2026-86506JetBrains GoLand missing authentication5.9CNA v3.10.4%2026-09-07Fix
CVE-2026-86505JetBrains IntelliJ IDEA information disclosure3.3CNA v3.10.2%2026-09-07Fix
CVE-2026-86504JetBrains IntelliJ IDEA inclusion of untrusted functionality7.8CNA v3.10.2%2026-09-07Fix
CVE-2026-86503JetBrains IntelliJ IDEA server-side request forgery3.3CNA v3.10.1%2026-09-07Fix
CVE-2026-86502JetBrains IntelliJ IDEA missing authentication8.4CNA v3.10.2%2026-09-07Fix
CVE-2026-86501JetBrains IntelliJ IDEA sensitive information in log files2.8CNA v3.10.4%2026-09-07Fix
CVE-2026-86500JetBrains YouTrack incorrect privilege assignment5.5CNA v3.10.3%2026-09-07Fix
CVE-2026-86499JetBrains YouTrack missing authorization4.3CNA v3.10.3%2026-09-07Fix
CVE-2026-86498JetBrains YouTrack incorrect authorization7.7CNA v3.10.3%2026-09-07Fix
CVE-2026-86497JetBrains YouTrack information disclosure6.8CNA v3.10.5%2026-09-07Fix
CVE-2026-86496JetBrains YouTrack missing authorization4.3CNA v3.10.3%2026-09-07Fix
CVE-2026-86495JetBrains YouTrack missing authorization6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-86494JetBrains YouTrack missing authorization7.7CNA v3.10.3%2026-09-07Fix
CVE-2026-86493JetBrains YouTrack incorrect authorization6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-86492JetBrains YouTrack session data exposure8.5CNA v3.10.9%2026-09-07Fix
CVE-2026-86491JetBrains YouTrack cross-site scripting3.5CNA v3.10.2%2026-09-07Fix
CVE-2026-86490JetBrains YouTrack incorrect authorization6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-86489JetBrains YouTrack insecure direct object reference6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-86488JetBrains YouTrack insecure direct object reference6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-86487JetBrains YouTrack incorrect authorization3.1CNA v3.10.2%2026-09-07Fix
CVE-2026-86486JetBrains YouTrack missing authentication3.7CNA v3.10.3%2026-09-07Fix
CVE-2026-86485JetBrains YouTrack spoofing3.5CNA v3.10.2%2026-09-07Fix
CVE-2026-86484JetBrains YouTrack cross-site scripting4.6CNA v3.10.6%2026-09-07Fix
CVE-2026-86483JetBrains YouTrack cross-site scripting5.4CNA v3.10.6%2026-09-07Fix
CVE-2026-86482JetBrains YouTrack incorrect privilege assignment8.8CNA v3.10.4%2026-09-07Fix
CVE-2026-86481JetBrains YouTrack insecure direct object reference4.3CNA v3.10.3%2026-09-07Fix
CVE-2026-86480JetBrains Hub missing authentication9.8CNA v3.10.5%2026-09-07Fix
CVE-2026-86479JetBrains YouTrack missing authorization8.0CNA v3.10.4%2026-09-07Fix
CVE-2026-86478JetBrains YouTrack authentication bypass by spoofing9.8CNA v3.10.6%2026-09-07Exploit codeFix
CVE-2026-86469GLib2 g_file_create_replace_destination race condition5.3CNA v3.10.1%2026-09-07
CVE-2026-86452MISP Unauthenticated Mail endpoints allow Unbounded Storage Consumption and Request Flooding7.5v3.10.5%2026-09-07
CVE-2026-86451MISP Event Graph Object Reference Lookup exposes References from Unauthorized Objects4.3v3.10.3%2026-09-07
CVE-2026-86441MISP dashboard organisation widgets information disclosure4.3v3.10.3%2026-09-07
CVE-2026-86440MISP Dashboard Button widget allows stored XSS via Unsafe javascript: And Backslash URLs5.4v3.10.2%2026-09-07
CVE-2026-86439knowns path traversal via MCP doc and memory tools8.7CNA v4.01.1%2026-09-07Fix
CVE-2026-86438laradashboard Lara Dashboard missing authorization in Marketplace Module Install action8.6CNA v4.01.1%2026-09-07Fix
CVE-2026-86437laradashboard lara Dashboard incorrect authorization in Core-Upgrade Archive upload8.6CNA v4.00.7%2026-09-07Fix
CVE-2026-86436laradashboard lara Dashboard missing authorization in Post-Builder Media upload endpoints5.3CNA v4.00.5%2026-09-07Fix
CVE-2026-86435commonmark denial of service via Footnote8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-86434commonmark denial of service via Slug Collision8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-86433commonmark denial of service via attributes8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-86432commonmark denial of service via XML6.9CNA v4.00.4%2026-09-07Fix
CVE-2026-86431commonmark XSS via AttributesExtension form feed bypass6.9CNA v4.00.4%2026-09-07Fix
CVE-2026-86430League/commonmark denial of service via parsing8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-86429commonmark denial of service via SmartPunct and attributes8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-86428commonmark denial of service via attributes8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-86427LibreNMS argument injection via graph_title8.7CNA v4.00.6%2026-09-07Fix
CVE-2026-86426LibreNMS authentication bypass via API Token type confusion9.8v3.13.9%2026-09-07NucleiFix
CVE-2026-86425ImageMagick Heap-use-after-free via Layer5.5v3.10.2%2026-09-07Fix
CVE-2026-86424ImageMagick path traversal via TOCTOU Symlink Race2.0CNA v4.00.1%2026-09-07Fix
CVE-2026-86423ImageMagick Heap-use-after-free via GetList5.5v3.10.1%2026-09-07Fix
CVE-2026-86422ImageMagick Path Policy TOCTOU Symlink Race3.3v3.10.1%2026-09-07Fix
CVE-2026-86421ImageMagick memory leak via MSL decoder7.5v3.10.5%2026-09-07Fix
CVE-2026-86420ImageMagick denial of service Memory Budget7.5v3.10.3%2026-09-07Fix
CVE-2026-86419MISP Insufficient Outbound URL Validation allows SSRF and credential disclosure9.1v3.10.4%2026-09-07
CVE-2026-86418MISP Dashboard Organisation Picker exposes Hidden Organisation Metadata to Unauthorized Users4.3v3.10.3%2026-09-07
CVE-2026-86417MISP Dashboard Template REST API exposes Template Owner Email Addresses to Unauthorized Users4.3v3.10.3%2026-09-07
CVE-2026-86416ILIAS,, and missing authorization in Group object Action Methods5.3CNA v4.00.4%2026-09-07Fix
CVE-2026-86408MISP missing authorization in Cryptographic Key view exposes Signing Keys from Protected Events6.5NVD v3.10.3%2026-09-07
CVE-2026-86404Red Hat JBoss Enterprise Application Platform deserialization of untrusted data8.8CNA v3.10.7%2026-09-07Fix
CVE-2026-86351MISP User Homepage Validation allows Authenticated open redirect via Protocol-Relative URL6.1v3.10.3%2026-09-07
CVE-2026-86347MISP missing authorization on template file upload allows Authenticated Disk Exhaustion6.5NVD v3.10.4%2026-09-07
CVE-2026-86342MISP Freetext Feed Preview improper authorization exposes Restricted Event and Feed Information4.3v3.10.3%2026-09-07
CVE-2026-86332Red Hat OpenShift AI odh-dashboard missing authorization6.5CNA v3.10.4%2026-09-07Fix
CVE-2026-86321java-json-tools jackson-coreutils URL validation server-side request forgery6.9CNA v4.00.7%2026-09-07
CVE-2026-86319java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption6.9CNA v4.00.7%2026-09-07
CVE-2026-86318java-json-tools json-patch JsonMergePatch deserializer stack-based buffer overflow6.9CNA v4.00.8%2026-09-07
CVE-2026-86317ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize_tensor assertion6.9CNA v4.00.7%2026-09-07
CVE-2026-86315Samsung Open Source Escargot numeric truncation6.2CNA v3.10.2%2026-09-07
CVE-2026-86314Samsung Open Source Walrus source-bounds check in Memory::init integer overflow6.2CNA v3.10.2%2026-09-07
CVE-2026-86313Samsung Open Source Walrus out-of-bounds write7.8CNA v3.10.2%2026-09-07
CVE-2026-86310itsourcecode Sales and Inventory System cust_edit1.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86309itsourcecode Sales and Inventory System pro_searchfrm.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86308light0011 cms Debug Mode config.php information disclosure6.9CNA v4.00.5%2026-09-07
CVE-2026-86307light0011 cms cross-site request forgery5.3CNA v4.00.2%2026-09-07
CVE-2026-86306light0011 cms Cookie Helper UserModel.class.php improper authentication6.9CNA v4.00.7%2026-09-07
CVE-2026-86305light0011 cms Upload.class.php upload unrestricted upload6.9CNA v4.00.5%2026-09-07
CVE-2026-8630392181 markdown md.c lds function out-of-bounds read6.9CNA v4.00.5%2026-09-07
CVE-2026-86302code-projects Hospital Information System SQL Database Backup file his.sql information disclosure6.9CNA v4.00.5%2026-09-07
CVE-2026-86301code-projects Hospital Information System Patient Management editPatient.php cross-site scripting5.1CNA v4.00.3%2026-09-07
CVE-2026-86300Tenda AC9 Web Management R7WebsSecurityHandler improper authentication6.9CNA v4.00.8%2026-09-07
CVE-2026-86299Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection9.4CNA v4.03.7%2026-09-07
CVE-2026-86298SourceCodester Class and Exam Timetabling System delete_subject.php SQL injection6.9CNA v4.00.4%2026-09-07
CVE-2026-86297D-Link DIR-605 L2TP Control message tunnel.c tunnel_set_params off-by-one9.2CNA v4.01.1%2026-09-07
CVE-2026-86296D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow10.0CNA v4.01.7%2026-09-07Emerging ThreatsFix
CVE-2026-86295D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection6.9CNA v4.02.3%2026-09-07
CVE-2026-86294SourceCodester Simple Traffic Offense System settings update endpoint cross-site scripting5.3CNA v4.00.5%2026-09-07
CVE-2026-86293SourceCodester Simple Traffic Offense System deletion endpoint missing authentication6.9CNA v4.00.8%2026-09-07
CVE-2026-86292SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication6.9CNA v4.00.7%2026-09-07
CVE-2026-86291itsourcecode Sales and Inventory System us_edit1.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86290SourceCodester Online Voting System ajax.php save_category SQL injection6.9CNA v4.00.4%2026-09-07
CVE-2026-86289Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow5.3CNA v4.00.7%2026-09-07Fix
CVE-2026-86288ModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds5.3CNA v4.00.5%2026-09-07Fix
CVE-2026-86287Net::IP::LPM versions for Perl accept malformed prefix lengths7.5CISA ADP v3.10.6%2026-09-07Fix
CVE-2026-86285BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control5.3CNA v4.00.4%2026-09-07
CVE-2026-86284jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure6.9CNA v4.00.6%2026-09-07
CVE-2026-86282jaychouchannel Tourism-Management-System CommonDao CommonController.java SQL injection6.9CNA v4.00.4%2026-09-07
CVE-2026-86281A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This impacts an unknown function. Performing a manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been released to the public an5.3CNA v4.00.2%2026-09-07
CVE-2026-86280A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The explo6.9CNA v4.00.3%2026-09-07
CVE-2026-86279SourceCodester Syllabus-Aligned Learning Management and Examination System login session fixation5.3CNA v4.00.4%2026-09-07
CVE-2026-86278SourceCodester Syllabus-Aligned Learning Management and Examination System cross-site scripting5.3CNA v4.00.5%2026-09-07
CVE-2026-86277SourceCodester Syllabus-Aligned Learning Management and Examination System authorization bypass6.9CNA v4.00.5%2026-09-07
CVE-2026-86276SourceCodester Syllabus-Aligned Learning Management and Examination System hard-coded credentials6.9CNA v4.00.5%2026-09-07
CVE-2026-86275A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the att6.9CNA v4.00.5%2026-09-07
CVE-2026-86274projeto-siga siga authentication flow missing authorization6.9CNA v4.00.7%2026-09-07
CVE-2026-86273projeto-siga siga HTML-to-PDF endpoint server-side request forgery6.9CNA v4.00.5%2026-09-07
CVE-2026-86272Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload6.9CNA v4.00.5%2026-09-07
CVE-2026-86271FluentCMS PermissionManager.cs GetAccessible authorization5.1CNA v4.00.4%2026-09-07
CVE-2026-86270itsourcecode Sales and Inventory System settings_edit.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86269itsourcecode Sales and Inventory System emp_edit1.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86268itsourcecode School Management System User_Login.php SQL injection6.9CNA v4.00.4%2026-09-07
CVE-2026-86267itsourcecode Information System Society Membership System check_student.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86265itsourcecode Sales and Inventory System us_transac.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86264sfturing ssm_pro Order Endpoint OrderController.java cross-site scripting5.3CNA v4.00.4%2026-09-07
CVE-2026-86263sfturing hosp_order order cancellation authorization bypass6.9CNA v4.00.6%2026-09-07
CVE-2026-86262sfturing hosp_order Order OrderController.java updateOrderdiseaseInfo authorization6.9CNA v4.00.6%2026-09-07
CVE-2026-86261sfturing hosp_order Order Controller OrderController.java authorization6.9CNA v4.00.6%2026-09-07
CVE-2026-86260sfturing hosp_order password recovery unverified password change6.9CNA v4.00.6%2026-09-07
CVE-2026-86245itsourcecode Sales and Inventory System sup_transac.php SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-86244FastAdmin User Controller User.php login cross-site scripting5.3CNA v4.00.5%2026-09-07
CVE-2026-86241liufee FeehiCMS Cookie Validation main-local.php hard-coded key5.3CNA v4.00.5%2026-09-07
CVE-2026-86240liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery5.1CNA v4.00.4%2026-09-07
CVE-2026-86239liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload6.9CNA v4.00.5%2026-09-07
CVE-2026-86238Projectworlds Online Examination System Feedback form feedback.php cross-site scripting5.3CNA v4.00.4%2026-09-07
CVE-2026-86237openagents-org OpenAgents http.py test_default_model server-side request forgery6.9CNA v4.00.5%2026-09-07
CVE-2026-86236itsourcecode Sales and Inventory System pro_transac.php add SQL injection5.3CNA v4.00.3%2026-09-07
CVE-2026-85640Zoho ManageEngine Endpoint Central privilege escalation6.3CNA v3.10.4%2026-09-07Fix
CVE-2026-85201Eclipse Ankaios excessive memory allocation6.8CNA v4.00.2%2026-09-07
CVE-2026-84732OpenVPN integer overflow8.7CNA v4.00.5%2026-09-07Fix
CVE-2026-84256OpenVPN OS command injection7.7CNA v4.00.4%2026-09-07Fix
CVE-2026-84226OpenVPN untrusted search path8.5CNA v4.00.1%2026-09-07Fix
CVE-2026-84186Incorrect access control in PrestaShop6.9CNA v4.00.5%2026-09-07Fix
CVE-2026-84173Eclipse Ankaios incorrect authorization8.3CNA v4.00.2%2026-09-07
CVE-2026-82758ash-project ash_authentication_oauth2_server improper authentication6.3CNA v4.00.7%2026-09-07Fix
CVE-2026-82757ash-project ash_authentication_oauth2_server server-side request forgery6.3CNA v4.00.7%2026-09-07Fix
CVE-2026-82756ash-project ash_authentication_oauth2_server improper output encoding6.3CNA v4.00.7%2026-09-07Fix
CVE-2026-82755ash-project ash_authentication_oauth2_server sensitive information in cache6.3CNA v4.00.7%2026-09-07Fix
CVE-2026-82754ash-project ash_authentication_oauth2_server unprotected alternate path6.3CNA v4.00.7%2026-09-07Fix
CVE-2026-82753ash-project ash_authentication_oauth2_server resource exhaustion8.2CNA v4.00.7%2026-09-07Fix
CVE-2026-82586ash-project ash_lua unprotected alternate path8.2CNA v4.00.5%2026-09-07Fix
CVE-2026-82584Igniter package installer confirmation prompt escape sequence injection2.3CNA v4.00.5%2026-09-07Fix
CVE-2026-82325OpenVPN ovpn-dco-win use-after-free6.8CNA v4.00.1%2026-09-07Fix
CVE-2026-82312OpenVPN unrestricted externally accessible lock1.8CNA v4.00.1%2026-09-07Fix
CVE-2026-81830OpenVPN external control of a file path5.6CNA v4.00.2%2026-09-07Fix
CVE-2026-81738OpenVPN stack-based buffer overflow2.3CNA v4.00.3%2026-09-07Fix
CVE-2026-81638Non-canonical ULID spellings are accepted and alias to the same record in ash_double_entry2.1CNA v4.00.2%2026-09-07Fix
CVE-2026-80238Dell Secure Connect Gateway execution with unnecessary privileges9.3CNA v3.10.2%2026-09-07Fix
CVE-2026-80178Dell Secure Connect Gateway improper privilege management5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-80176Dell Secure Connect Gateway recoverable password storage4.7CNA v3.10.1%2026-09-07Fix
CVE-2026-80170Dell Secure Connect Gateway hard-coded credentials6.5CNA v3.10.4%2026-09-07Fix
CVE-2026-80167Dell Secure Connect Gateway hard-coded cryptographic key5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-80166Dell Secure Connect Gateway improper privilege management7.8CNA v3.10.1%2026-09-07Fix
CVE-2026-80164Dell Secure Connect Gateway improper certificate validation7.4CNA v3.10.3%2026-09-07Fix
CVE-2026-80135Dell Secure Connect Gateway improper exception handling7.5CNA v3.10.4%2026-09-07Fix
CVE-2026-80134Dell Secure Connect Gateway hard-coded credentials7.7CNA v3.10.3%2026-09-07Fix
CVE-2026-80133Dell Secure Connect Gateway relative path traversal7.4CNA v3.10.7%2026-09-07Fix
CVE-2026-80132Dell Secure Connect Gateway missing authentication8.1CNA v3.10.5%2026-09-07Fix
CVE-2026-80131Dell Secure Connect Gateway path traversal7.4CNA v3.10.8%2026-09-07Fix
CVE-2026-80130Dell Secure Connect Gateway relative path traversal7.1CNA v3.10.6%2026-09-07Fix
CVE-2026-80129Dell Secure Connect Gateway path traversal6.5CNA v3.10.7%2026-09-07Fix
CVE-2026-80128Dell Secure Connect Gateway improper authentication6.4CNA v3.10.3%2026-09-07Fix
CVE-2026-80127Dell Secure Connect Gateway OS command injection7.2CNA v3.11.4%2026-09-07Fix
CVE-2026-80126Dell Secure Connect Gateway improper locking6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-80125Dell Secure Connect Gateway improper certificate validation5.9CNA v3.10.2%2026-09-07Fix
CVE-2026-80058Dell Secure Connect Gateway cleartext storage of sensitive information5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-80057Dell Secure Connect Gateway hard-coded cryptographic key5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-80056Dell Secure Connect Gateway sensitive information in log files5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-80054Dell Secure Connect Gateway incorrect permission assignment5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-79975Dell Secure Connect Gateway improper certificate validation5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-79943Dell Secure Connect Gateway improper certificate host validation4.8CNA v3.10.1%2026-09-07Fix
CVE-2026-79734Dell Secure Connect Gateway improper certificate validation5.9CNA v3.10.2%2026-09-07Fix
CVE-2026-79698Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection9.4CNA v4.03.2%2026-09-07Fix
CVE-2026-79697Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection9.4CNA v4.04.9%2026-09-07Fix
CVE-2026-79691Dell Secure Connect Gateway improper certificate validation7.3CNA v3.10.2%2026-09-07Fix
CVE-2026-79678Red Hat FreeIPA idp-add command eval injection8.1CNA v3.10.9%2026-09-07Fix
CVE-2026-79645Dell Secure Connect Gateway missing authentication8.2CNA v3.10.4%2026-09-07Fix
CVE-2026-79644Dell Secure Connect Gateway improper certificate validation7.4CNA v3.10.2%2026-09-07Fix
CVE-2026-79643Dell Secure Connect Gateway unauthorized access7.3CNA v3.10.3%2026-09-07Fix
CVE-2026-79642Dell Secure Connect Gateway improper certificate validation5.6CNA v3.10.2%2026-09-07Fix
CVE-2026-79639Dell Secure Connect Gateway improper certificate validation7.6CNA v3.10.2%2026-09-07Fix
CVE-2026-78488Dell Secure Connect Gateway OS command injection6.5CNA v3.14.8%2026-09-07Fix
CVE-2026-78487Dell Secure Connect Gateway hard-coded cryptographic key5.5CNA v3.10.1%2026-09-07Fix
CVE-2026-78480Dell Secure Connect Gateway missing authentication7.5CNA v3.10.6%2026-09-07Fix
CVE-2026-78325XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import6.9CNA v4.00.1%2026-09-07
CVE-2026-78254Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write7.4CISA ADP v3.10.5%2026-09-07Fix
CVE-2026-78221OpenVPN Windows Interactive service incorrect buffer size calculation5.9CNA v4.00.1%2026-09-07Fix
CVE-2026-78043OpenVPN path traversal5.6CNA v4.00.2%2026-09-07Fix
CVE-2026-77699Zoho ManageEngine Endpoint Central privilege escalation5.0CNA v3.10.3%2026-09-07Fix
CVE-2026-77698Zoho ManageEngine Endpoint Central privilege escalation5.7CNA v3.10.3%2026-09-07Fix
CVE-2026-77697Zoho ManageEngine Endpoint Central privilege escalation6.3CNA v3.10.4%2026-09-07Fix
CVE-2026-76578Red Hat FreeIPA self-managed-token ACI missing authentication9.8CNA v3.11.2%2026-09-07Exploit codeFix
CVE-2026-76560Red Hat Directory Server incorrect authorization7.5CNA v3.10.6%2026-09-07Fix
CVE-2026-75650Adobe Commerce and Magento improper neutralization of special elements used in a template engine10.0CNA v3.13.9%2026-09-07KEVEmerging ThreatsExploit codeFix
CVE-2026-61410Dell Secure Connect Gateway missing authorization9.4CNA v3.10.8%2026-09-07Fix
CVE-2026-61409Dell Secure Connect Gateway (SCG) OS command injection7.3CNA v3.11.5%2026-09-07Fix
CVE-2026-20518MediaTek chipset geniezone information disclosure4.4CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20517MediaTek chipset geniezone privilege escalation6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20516MediaTek chipset MiracastService privilege escalation5.5CISA ADP v3.10.1%2026-09-07Exploit codeFix
CVE-2026-20515MediaTek chipset gpu crash5.5CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20514MediaTek chipset Audio HAL information disclosure4.4CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20513MediaTek chipset Audio HAL information disclosure4.4CISA ADP v3.10.2%2026-09-07Fix
CVE-2026-20512MediaTek chipset Audio HAL privilege escalation6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20511MediaTek chipset SurfaceFlinger memory corruption6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20510MediaTek chipset camera middleware privilege escalation6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20509MediaTek chipset Power HAL out-of-bounds write6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20508MediaTek chipset Power HAL privilege escalation6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20507MediaTek chipset Audio HAL privilege escalation6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20506MediaTek chipset Audio HAL privilege escalation6.7CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20504MediaTek chipset Modem crash5.3CISA ADP v3.10.2%2026-09-07Fix
CVE-2026-20503MediaTek chipset Modem crash5.3CISA ADP v3.10.2%2026-09-07Fix
CVE-2026-20502MediaTek chipset vdec out-of-bounds write8.4CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20501MediaTek chipset vdec out-of-bounds write8.4CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-20500MediaTek chipset Modem crash5.5CISA ADP v3.10.1%2026-09-07Fix
CVE-2026-19843Red Hat Directory Server 389-ds-base: 389-ds-base: Command injection8.4CNA v3.10.5%2026-09-07Fix
CVE-2026-19204Eclipse Jetty resource exhaustion8.7CNA v4.00.3%2026-09-07Fix
CVE-2026-18922Red Hat Directory Server improper authentication9.8CNA v3.10.6%2026-09-07Fix
CVE-2026-18796Nordic Semiconductor ASA nRF5340 QSPI flash encryption side-channel leakage6.8CNA v4.00.1%2026-09-07
CVE-2026-18453Red Hat Directory Server 389-ds-base: 389-ds-base: Pre-authentication null pointer dereference7.5CNA v3.10.8%2026-09-07Fix
CVE-2026-18355Red Hat Directory Server 389-ds-base: 389-ds-base: Heap buffer overflow7.5CNA v3.10.8%2026-09-07Fix
CVE-2026-16876NEC UNIVERGE IX-R/IX-V WebGUI of Series authentication bypass9.3CNA v4.00.3%2026-09-07
CVE-2026-16028Protocol::HTTP2 versions for Perl allow memory exhaustion7.5CISA ADP v3.10.4%2026-09-07Fix
CVE-2026-14444WP Fusion (Pro) WordPress plugin privilege escalation7.5CNA v3.10.2%2026-09-07Fix
CVE-2026-14297Nordic Semiconductor ASA nRF Connect SDK buffer overflow8.7CNA v4.00.2%2026-09-07
CVE-2026-14296nRF54H20: MCUBoot can be tricked to executing unauthenticated code7.5CNA v3.10.1%2026-09-07
CVE-2026-12853Flamingo WordPress plugin missing authorization unauthorized Tag information disclosure5.4CNA v3.10.3%2026-09-07Fix
CVE-2026-12757Icegram Email Subscribers and Newsletters subscriber name field code injection6.5CNA v3.10.3%2026-09-07Fix
CVE-2026-8279Masteriyo LMS course progress deletion missing authorization5.3CNA v3.10.4%2026-09-07Fix
CVE-2026-7861Code injection in Next4Biz's CSM (Customer Service Management)9.8CNA v3.10.6%2026-09-07Fix
CVE-2026-6431User Profile Builder WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-09-07Fix
CVE-2026-6377Path traversal in Next4Biz's CSM (Customer Service Management)7.5CNA v3.10.5%2026-09-07NucleiFix
CVE-2026-6223OTP Bypass in Bahçelievler Muncipality's BiHayat App9.4CNA v3.10.6%2026-09-07Fix
CVE-2026-4945Otter Blocks WordPress plugin missing authorization to unauthenticated Purchase verification bypass5.3CNA v3.10.4%2026-09-07Fix
CVE-2026-2390Powerkit WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-07Fix
CVE-2026-86304MojoX::Authentication SAML assertion improper signature verification9.8CISA ADP v3.10.3%2026-09-06Fix
CVE-2026-86283MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event Data7.1CNA v4.00.4%2026-09-06Exploit code
CVE-2026-86259OpenMAIC SSRF via Environment-Gated URL Validation9.0CNA v4.00.4%2026-09-06Exploit codeFix
CVE-2026-86258nbviewer path traversal via LocalFileHandler8.2CNA v4.00.5%2026-09-06
CVE-2026-86257wger CSV formula injection via member export4.8CNA v4.00.3%2026-09-06Fix
CVE-2026-86256wger open redirect via trainer-login next parameter5.1CNA v4.00.2%2026-09-06Fix
CVE-2026-86255wger uncontrolled resource consumption via date_sequence7.1CNA v4.00.4%2026-09-06Fix
CVE-2026-86254wger Incomplete Authorization Fix Cross-Tenant Account Deletion6.1CNA v4.00.4%2026-09-06
CVE-2026-86253h3 path traversal via Percent-Encoded Dot Segments8.2CNA v4.00.6%2026-09-06Fix
CVE-2026-86252h3 SSE Event injection via Carriage Return6.9CNA v4.00.4%2026-09-06Fix
CVE-2026-86251h3 path traversal via Double Decoding8.2CNA v4.00.4%2026-09-06Fix
CVE-2026-86250h3 denial of service via Unbounded Chunked Cookie8.7CNA v4.00.5%2026-09-06Fix
CVE-2026-86242maximhq Bifrost unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds8.1CNA v3.13.6%2026-09-06NucleiFix
CVE-2026-86235itsourcecode Sales and Inventory System pos_transac.php add SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86234itsourcecode Sales and Inventory System cust_transac.php add SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86233itsourcecode Sales and Inventory System us_del.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86232itsourcecode Sales and Inventory System sup_del.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86231mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation6.3CNA v4.00.4%2026-09-06Fix
CVE-2026-86228JeecgBoot AiragModelController.java exportXls access control5.3CNA v4.00.4%2026-09-06Fix
CVE-2026-86227valkey-io valkey kvstore.c kvstoreGetHashtable out-of-bounds2.3CNA v4.00.5%2026-09-06Fix
CVE-2026-86226Projectwolds Online Attendance System profile.php cross-site scripting5.1CNA v4.00.3%2026-09-06
CVE-2026-86225SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86224SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86223SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86222SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86221SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86220SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86219Authen::SASL::Perl::DIGEST_MD5 nonce verification vulnerability9.8CISA ADP v3.10.5%2026-09-06Fix
CVE-2026-86218N-able N-central static code injection10.0CNA v4.013.3%2026-09-06KEVNucleiMetasploitExploit codeFix
CVE-2026-86217code-projects Hotel and Tourism Reservation in PHP database backup handler information disclosure6.9CNA v4.00.5%2026-09-06
CVE-2026-86216code-projects Hotel and Tourism Reservation in PHP details.php cross-site scripting5.3CNA v4.00.5%2026-09-06
CVE-2026-86215Mstfakts College-Management-System Logout server.php session expiration5.3CNA v4.00.4%2026-09-06
CVE-2026-86214Mstfakts College-Management-System login.php improper authentication6.9CNA v4.00.7%2026-09-06
CVE-2026-86213Mstfakts College-Management-System Search university.php mysqli_query SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86212Open5GS AMF/MME improper authorization5.3CNA v4.00.5%2026-09-06
CVE-2026-86211rabindralamsal inventory-management-system Login index.php SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86210SourceCodester Class and Exam Timetabling System delete_user_account.php SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86209SourceCodester Class and Exam Timetabling System delete_user.php SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86208SourceCodester Class and Exam Timetabling System delete_teacher.php SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86205h3 open redirect via redirectBack5.3CNA v4.00.3%2026-09-06Fix
CVE-2026-86183diem-project diem dmWidget BasedmWidgetActions.class.php authorization6.9CNA v4.00.6%2026-09-06
CVE-2026-86182diem-project diem dmConsole actions.class.php executeCommand cross-site request forgery5.3CNA v4.00.2%2026-09-06
CVE-2026-86181code-projects Task Management System User Profile Update UpdateUserProfile.php cross-site scripting5.1CNA v4.00.4%2026-09-06
CVE-2026-86180code-projects Task Management System In PHP Login index.php SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86179code-projects Daily Expense Manager Database Backup exp_ak.sql information disclosure6.9CNA v4.00.5%2026-09-06
CVE-2026-86172DefaultFuction CRM delete.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86171DefaultFuction CRM delete.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86170DefaultFuction CRM edit.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86168code-projects Content Management System login.php SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86167Tenda HG10 Boa formgponConf os command injection9.4CNA v4.02.7%2026-09-06
CVE-2026-86166Tenda HG10 Boa Web Server formWanRedirect buffer overflow8.7CNA v4.00.9%2026-09-06
CVE-2026-86165Tenda HG10 formURL buffer overflow9.3CNA v4.01.1%2026-09-06
CVE-2026-86164itsourcecode Sales and Inventory System trans_view.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86163itsourcecode Sales and Inventory System pro_del.php SQL injection5.3CNA v4.00.3%2026-09-06
CVE-2026-86162SourceCodester Online Voting System ajax.php login SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86161SourceCodester Online Voting System ajax.php delete_category SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86160SourceCodester Online Voting System ajax.php delete_voting SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86159SourceCodester Online Voting System ajax.php save_user SQL injection6.9CNA v4.00.4%2026-09-06
CVE-2026-86153Tenda CP3 Redirect.cpp SetRedirectEnable privileges management9.4CNA v4.00.7%2026-09-06
CVE-2026-86152Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injection10.0CNA v4.02.9%2026-09-06
CVE-2026-85038B2BKing registration role selection missing authorization5.3CISA ADP v3.10.3%2026-09-06Fix
CVE-2026-84219Kirki - unauthenticated stored XSS via HTML Entity Decoding7.5CISA ADP v3.10.4%2026-09-06Fix
CVE-2026-84028Bold Page Builder WordPress plugin Contributor+ stored XSS via Slider Elements' additional_settings6.8CISA ADP v3.10.4%2026-09-06Fix
CVE-2026-83534PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel6.4CNA v3.10.2%2026-09-06Fix
CVE-2026-82751ZenHive mpp Input improper input validation8.3CNA v4.00.5%2026-09-06Fix
CVE-2026-82750ZenHive mpp Input improper input validation8.3CNA v4.00.5%2026-09-06Fix
CVE-2026-82209curl domain-scoped PSL domain cookie8.2CISA ADP v3.10.4%2026-09-06Fix
CVE-2026-82208curl wolfSSL CA-cache hit overrides callback7.5CISA ADP v3.10.4%2026-09-06Fix
CVE-2026-80439Redirection for Contact Form 7 action setting mail-tags vulnerability4.8CNA v3.10.2%2026-09-06Fix
CVE-2026-80437Ninja Forms - Unauthenticated arbitrary Shortcode Execution via IP and Referer Merge Tags4.8CNA v3.10.2%2026-09-06Fix
CVE-2026-80255curl secure cookie attribute bypass with tab7.5CISA ADP v3.10.5%2026-09-06Fix
CVE-2026-80231curl native CA store conn reuse7.5CISA ADP v3.10.9%2026-09-06Fix
CVE-2026-80230curl OpenSSL pinning bypass7.5CISA ADP v3.10.4%2026-09-06Fix
CVE-2026-80229curl OpenSSL provider use-after-free7.5CISA ADP v3.10.6%2026-09-06Fix
CVE-2026-75816Frontend Admin by DynamiApps WordPress plugin unauthenticated account takeover9.8CNA v3.10.9%2026-09-06Exploit codeFix
CVE-2026-75793SureCart WordPress plugin unauthenticated account creation with Automatic login6.5CISA ADP v3.10.3%2026-09-06Fix
CVE-2026-19931curl negotiate ambient user conn reuse9.8CISA ADP v3.10.7%2026-09-06Fix
CVE-2026-19862JetFormBuilder WordPress plugin unauthenticated email header injection via Send email action4.8CNA v3.10.2%2026-09-06Fix
CVE-2026-19859JetFormBuilder WordPress plugin unauthenticated arbitrary shortcode execution via status parameter6.5CNA v3.10.2%2026-09-06Fix
CVE-2026-19634PostgreSQL Anonymizer: SQL injection in import_database_rules and import_roles_rules6.4CNA v3.10.2%2026-09-06Fix
CVE-2026-19633DALIBO PostgreSQL Anonymizer masking rules SQL injection8.8CNA v3.10.4%2026-09-06Fix
CVE-2026-18924curl HTTP/2 server push UAF9.1CISA ADP v3.10.6%2026-09-06Fix
CVE-2026-18480SureCart WordPress plugin Subscriber+ Administrator account takeover8.8CISA ADP v3.10.2%2026-09-06Fix
CVE-2026-18056HivePress Authentication WordPress plugin unauthenticated authentication bypass7.5CNA v3.10.3%2026-09-06Fix
CVE-2026-16310MemberDash WordPress plugin unauthenticated account takeover9.8CNA v3.10.3%2026-09-06Fix
CVE-2026-13608curl OpenLDAP SASL authentication bypass7.4CISA ADP v3.10.5%2026-09-06Fix
CVE-2026-13159Real Estate Papi WordPress theme Subscriber+ plugin installation4.3CISA ADP v3.10.1%2026-09-06
CVE-2026-86207Authentication bypass leads to unauthorised access to N-central7.7CNA v4.01.3%2026-09-05Reported exploitedNucleiKCVFix
CVE-2026-86206N-able N-central access control filter bypass allows unauthorised access to APIs6.9CNA v4.01.1%2026-09-05Reported exploitedNucleiKCVFix
CVE-2026-86197Grav cross-site scripting via Assets Sandbox5.1CNA v4.00.4%2026-09-05Fix
CVE-2026-86196getgrav grav-plugin-api grav API plugin authentication bypass via host header8.7CNA v4.00.4%2026-09-05Fix
CVE-2026-86195grav-plugin-api privilege escalation via Dot-Keyed Super Flag8.7CNA v4.00.4%2026-09-05Fix
CVE-2026-86194getgrav grav-plugin-form Grav form Plugin Cross-Page Form Execution6.9CNA v4.00.6%2026-09-05Fix
CVE-2026-86193getgrav grav-plugin-api grav API plugin authentication bypass via Group-Inherited Super8.7CNA v4.00.4%2026-09-05Fix
CVE-2026-86192SiYuan information disclosure via Attribute-View7.1CNA v4.00.4%2026-09-05Fix
CVE-2026-86191SiYuan Private attribute View Key Enumeration5.3CNA v4.00.3%2026-09-05Fix
CVE-2026-86190WWBN AVideo broken access control via videoViewsInfo hash parameter9.3CNA v4.00.4%2026-09-05
CVE-2026-86189WWBN AVideo unauthenticated path traversal via notify.ffmpeg.json.php9.3CNA v4.00.7%2026-09-05Fix
CVE-2026-86188AVideo YPTSocket plugin unauthenticated cross-site scripting6.9CNA v4.00.4%2026-09-05
CVE-2026-86187WWBN AVideo Weak PRNG Password Generation via External Login7.4CNA v4.00.4%2026-09-05Fix
CVE-2026-86186AVideo API Rate Limit Bypass via Bot User-Agent header6.3CNA v4.00.3%2026-09-05
CVE-2026-86185Bilibili Desktop remote code execution via TLS Verification Bypass8.6CNA v4.00.2%2026-09-05
CVE-2026-86184laradashboard lara Dashboard missing authentication in screenshot-login route9.3CNA v4.01.1%2026-09-05Fix
CVE-2026-86178Pixelfed Unauthorized Story Access via API5.3CNA v4.00.3%2026-09-05
CVE-2026-86177Pterodactyl Panel privilege escalation via Schedule Tasks8.7CNA v4.00.6%2026-09-05Fix
CVE-2026-86176NetBox information disclosure via REST and GraphQL APIs5.3CNA v4.00.3%2026-09-05
CVE-2026-86175NetBox credential disclosure via REST and GraphQL APIs7.1CNA v4.00.5%2026-09-05
CVE-2026-86174Plane arbitrary Comment Write via Public Deploy Board5.3CNA v4.00.3%2026-09-05
CVE-2026-86173MindsDB unauthenticated SSRF via Web Crawler8.7CNA v4.00.6%2026-09-05
CVE-2026-86169Axolotl remote code execution via Multipack Patching8.7CNA v4.00.9%2026-09-05Fix
CVE-2026-86151Tenda CP3 Network Configuration Management system.c sub_2F77E8 os command injection9.4CNA v4.02.9%2026-09-05
CVE-2026-86150Tenda CP3 hostapd hard-coded credentials5.1CNA v4.00.4%2026-09-05
CVE-2026-86149Tenda CP3 NetCheckPing.cpp os command injection9.4CNA v4.02.9%2026-09-05
CVE-2026-86148Tenda CP3 Kylin system.c SystemAsh os command injection9.4CNA v4.02.9%2026-09-05
CVE-2026-86145PCRE2 unprotected alternate path8.2CNA v3.10.4%2026-09-05Fix
CVE-2026-86144libxml2 incorrect resource transfer7.8v3.10.2%2026-09-05Fix
CVE-2026-86143libxml2 integer overflow7.3v3.10.1%2026-09-05Fix
CVE-2026-86142libxml2 heap-based buffer overflow7.8v3.10.2%2026-09-05Fix
CVE-2026-86141libxml2 unchecked return value3.3v3.10.1%2026-09-05Fix
CVE-2026-86140libxml2 stack-based buffer overflow7.8v3.10.1%2026-09-05Fix
CVE-2026-86139libxml2 integer overflow7.8v3.10.1%2026-09-05Fix
CVE-2026-86138libxml2 integer overflow7.8v3.10.1%2026-09-05Fix
CVE-2026-86137libxml2 out-of-bounds read6.1v3.10.1%2026-09-05Fix
CVE-2026-86124AutoAgent unauthenticated remote code execution via the Sandbox TCP Command Server9.3CNA v4.01.0%2026-09-05Reported exploited
CVE-2026-86123sqlchat SQL Chat Unauthenticated Database-Connection Proxy in the /API/connection endpoints9.4CNA v4.00.5%2026-09-05
CVE-2026-86122Rowboat server-side request forgery via Custom MCP Server5.3CNA v4.00.4%2026-09-05
CVE-2026-86121trycua cua-computer-server Cua computer-server unauthenticated RCE via Desktop Control9.3CNA v4.01.1%2026-09-05Fix
CVE-2026-86120APITable Fail-Open Authorization in the Fusion API Node Permission Guard5.3CNA v4.00.4%2026-09-05
CVE-2026-86119Webstudio SSRF via /cgi proxy routes9.2CNA v4.00.6%2026-09-05
CVE-2026-86118gonic Missing Administrator Check on the Subsonic startScan endpoint5.3CNA v4.00.5%2026-09-05Fix
CVE-2026-86117Coolify OAuth account takeover via Unverified Email Matching9.2CNA v4.00.7%2026-09-05
CVE-2026-86116Metabase Missing Function-Level Authorization on the Glossary Management API7.1CNA v4.00.4%2026-09-05Fix
CVE-2026-86115Sim confused deputy in Tool URL Routing Mints an Internal Token for a User-Supplied /API/ Path5.3CNA v4.00.5%2026-09-05Fix
CVE-2026-86114Arcane Missing Administrator Authorization on the Compose Template Mutation endpoints7.1CNA v4.00.4%2026-09-05Fix
CVE-2026-86113BookWyrm edit readthrough endpoint insecure direct object reference7.1CNA v4.00.4%2026-09-05
CVE-2026-86112BookWyrm missing authorization on the Favorite and Unfavorite endpoints5.3CNA v4.00.3%2026-09-05
CVE-2026-86111BookWyrm insecure direct object reference in EditStatus exposes Followers-Only and Direct Statuses7.1CNA v4.00.4%2026-09-05
CVE-2026-86060MikroTik RouterOS improper neutralization of argument delimiters in a command9.8v3.16.4%2026-09-05KEVExploit codeKCVFix
CVE-2026-85414Gallery: FooGallery WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-05Fix
CVE-2026-84937YT Player WordPress plugin Contributor+ SQLi via ytp_ajax6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84936EmbedPress - Unauthenticated Google Reviews API Quota Consumption and Database Bloat5.3CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-84935HT Menu WordPress plugin Subscriber+ stored XSS via Menu settings8.0CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84934JCH Optimize WordPress plugin Subscriber+ stored XSS via getcacheinfo Task Override8.0CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84931Joli Table Of Contents WordPress plugin Author+ stored XSS via joli-toc shortcode theme attribute6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84930CatFolders Document Gallery WordPress plugin Author+ stored XSS via titleTag block attribute6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84927EmbedPress - Contributor+ Google Reviews Modification2.7CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-84926EmbedPress - Contributor+ Administrator email disclosure via Google Reviews REST route2.7CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-84901Eventin event management REST routes missing authorization4.9CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-84899VikWidgetsLoader WordPress plugin Contributor+ stored XSS via Gutenberg block class_suffix6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84898Eventin WordPress plugin Contributor+ LFI via Event Layout Meta6.6CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84896King Addons for Elementor WordPress plugin Contributor+ stored XSS via Magazine Grid widget6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84745The Events Calendar REST API archives information disclosure2.7CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-84225Kirki - Authenticated Collaboration Comment Status Modification via IDOR2.2CISA ADP v3.10.2%2026-09-05Fix
CVE-2026-84221Kirki - Editor+ SQLi via Content Manager Field ID6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84022Bold Page Builder WordPress plugin Contributor+ stored XSS via Multiple shortcode Element attributes6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-84021Bold Page Builder WordPress plugin stored XSS6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-83628Theme My Login WordPress plugin missing authorization unauthorized Multisite Subsite creation4.3CNA v3.10.4%2026-09-05Fix
CVE-2026-83627Hummingbird WordPress plugin remote code execution9.8CNA v3.11.4%2026-09-05Exploit codeFix
CVE-2026-83625Contact Form by Supsystic WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.6%2026-09-05Fix
CVE-2026-83544Greenshift WordPress plugin Contributor+ stored XSS via block Animation customProps attribute6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-83543Greenshift WordPress plugin Contributor+ SSRF via get-csv-to-json REST endpoint4.1CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-82846Masteriyo LMS - Instructor+ stored XSS via Course Custom fields6.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-82752ash-project ash Input vulnerability improper input validation5.9CNA v4.00.2%2026-09-05Fix
CVE-2026-82304Music Store WordPress eCommerce plugin unauthenticated SQLi via paypal-data Handler8.6CISA ADP v3.10.4%2026-09-05Fix