CVE-2026 list

CVE-2026 records published in September 2026

Page 14 of 15: records 13,001 to 14,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 13,001 to 14,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-81543Abandoned Cart Pro for WooCommerce WordPress plugin privilege escalation8.8CNA v3.10.4%2026-09-05Fix
CVE-2026-81424Accept Stripe Payments WordPress plugin unauthenticated Product Substitution via IDOR5.3CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-81423Accept Stripe Payments WordPress plugin open redirect via IPN Handler4.3CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-81404IPGP Visitors Origin WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-81348My Private Site WordPress plugin unauthenticated sensitive information exposure3.7CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-78438W3 Total Cache WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-09-05Fix
CVE-2026-78362SEO Flow by LupsOnline - unauthenticated privilege escalation via API Key Authentication9.8CISA ADP v3.10.5%2026-09-05Fix
CVE-2026-78150Smart Post post duplication feature insecure direct object reference2.7CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-78149Smart Post password-protected post handler information disclosure5.3CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-77830Spam protection WordPress plugin stored cross-site scripting7.2CNA v3.10.5%2026-09-05Fix
CVE-2026-77826RegistrationMagic - unauthenticated authentication bypass8.8CISA ADP v3.10.4%2026-09-05Fix
CVE-2026-77263iubenda WordPress plugin stored cross-site scripting7.2CNA v3.10.4%2026-09-05Fix
CVE-2026-77233iubenda WordPress plugin stored cross-site scripting7.2CNA v3.10.5%2026-09-05Fix
CVE-2026-76573Pods WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-05Fix
CVE-2026-75586Unlimited Elements For Elementor WordPress plugin reflected cross-site scripting6.1CNA v3.10.4%2026-09-05Fix
CVE-2026-75018Custom Contact Forms WordPress plugin authorization bypass4.3CNA v3.10.5%2026-09-05Fix
CVE-2026-67281Unauthenticated file read in MikroTik RouterOS7.5v3.10.7%2026-09-05Fix
CVE-2026-67279Mikrotik RouterOS improper enforcement of behavioral workflow6.5NVD v3.11.0%2026-09-05KEVExploit codeKCVFix
CVE-2026-67278TLS server impersonation possible in MikroTik RouterOS9.1v3.10.3%2026-09-05Fix
CVE-2026-67277MikroTik RouterOS missing authentication for critical function8.2v3.11.6%2026-09-05KEVFix
CVE-2026-67276SSH user impersonation possible in MikroTik RouterOS8.1NVD v3.16.5%2026-09-05Reported exploitedExploit codeKCVFix
CVE-2026-31912The Tcpdump Group libpcap BPF interpreter out-of-bounds read5.5CNA v3.10.1%2026-09-05Fix
CVE-2026-31911Abort in libpcap on an invalid BPF opcode5.5CNA v3.10.1%2026-09-05Fix
CVE-2026-19887Welcart e-Commerce WordPress plugin unauthenticated arbitrary file deletion8.8CNA v3.10.6%2026-09-05Fix
CVE-2026-19861JetFormBuilder WordPress plugin unauthenticated stored XSS via WYSIWYG field in Notification Emails4.7CISA ADP v3.10.2%2026-09-05Fix
CVE-2026-19858JetFormBuilder dynamic preset resolution information disclosure7.5CISA ADP v3.10.3%2026-09-05Fix
CVE-2026-19769Ninja Forms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-05Fix
CVE-2026-18843Beaver Builder Plugin (Pro Version) WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-09-05Fix
CVE-2026-18406SureForms WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-09-05Fix
CVE-2026-18404Social Chat WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-05Fix
CVE-2026-18313Rpcapd memory leak in libpcap4.3CNA v3.10.2%2026-09-05Fix
CVE-2026-18238OOBR in rpcap client in libpcap5.0CNA v3.10.2%2026-09-05Fix
CVE-2026-16649Gravity Forms WordPress plugin unauthenticated stored cross-site scripting via post Body field Value7.2CNA v3.10.2%2026-09-05Fix
CVE-2026-15984QuickCal WordPress plugin unauthenticated stored cross-site scripting via Custom field parameters7.2CNA v3.10.2%2026-09-05
CVE-2026-15550Ninja Forms WordPress plugin missing authorization4.3CNA v3.10.2%2026-09-05Fix
CVE-2026-15247Search Atlas SEO WordPress plugin Subscriber+ Google service account Credential Overwrite/Deletion5.4CISA ADP v3.10.2%2026-09-05Fix
CVE-2026-14975WP File Download WordPress plugin arbitrary file read6.5CNA v3.10.7%2026-09-05Fix
CVE-2026-13447MStore API WordPress plugin unauthenticated authentication bypass via id_token parameter JWT forgery9.8CNA v3.10.4%2026-09-05Exploit codeFix
CVE-2026-12843LearnDash LMS - Unauthenticated arbitrary Course Enrollment via REST endpoint5.4CNA v3.10.2%2026-09-05Fix
CVE-2026-10196Mail Mint WordPress plugin unauthenticated PHP object injection in arbitrary form fields9.8CNA v3.10.7%2026-09-05Fix
CVE-2026-8625Dear Flipbook WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-05Fix
CVE-2026-8623Dear Flipbook WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-05Fix
CVE-2026-6554The Tcpdump Group libpcap BPF interpreter infinite loop7.5CNA v3.10.3%2026-09-05Fix
CVE-2026-6244Division by zero in libpcap5.5CNA v3.10.1%2026-09-05Fix
CVE-2026-4361Divi WordPress theme server-side request forgery5.0CNA v3.10.4%2026-09-05Fix
CVE-2026-3853Divi WordPress theme DOM-based stored cross-site scripting6.4CNA v3.10.3%2026-09-05Fix
CVE-2026-0799The Tcpdump Group libpcap BPF interpreter out-of-bounds write8.7CNA v3.10.1%2026-09-05Fix
CVE-2026-86100owen2345 CamaleonCMS Camaleon CMS SSRF via HTTP Redirect in upload from URL5.3CNA v4.00.3%2026-09-04Fix
CVE-2026-86098ntop nDPI heap buffer overflow via ndpi_json_string_escape8.3CNA v4.00.6%2026-09-04Fix
CVE-2026-86097PX4 Autopilot null pointer dereference via param select7.1CNA v4.00.4%2026-09-04
CVE-2026-86096PX4 Autopilot use-after-free via Temperature Calibration Task Startup6.0CNA v4.00.3%2026-09-04
CVE-2026-86095Unidata netcdf-c out-of-bounds write via Oversized HDF5 Attribute Name8.5CNA v4.00.2%2026-09-04Fix
CVE-2026-86091ntopng missing authorization on the Host Pool Bulk Delete handler7.1CNA v4.00.5%2026-09-04Fix
CVE-2026-86090ntopng missing authorization on the Notification endpoint and Recipient Delete Handlers7.1CNA v4.00.5%2026-09-04Fix
CVE-2026-85787Amazon postgres-mcp-server SQL validation component in Amazon awslabs incomplete denylist7.1CNA v4.00.3%2026-09-04Fix
CVE-2026-85786Incomplete fix for memory-amplification denial of service in Amazon ion-java8.7CNA v4.00.6%2026-09-04Fix
CVE-2026-85781aws-efs-csi-driver unverified access point ownership in Amazon EFS CSI driver5.1CNA v4.00.4%2026-09-04Fix
CVE-2026-85769Red Hat Enterprise Linux 10 libtpms: Libtpms: Heap out-of-bounds read in tpm2 state unmarshalling6.5CNA v3.10.4%2026-09-04Exploit codeFix
CVE-2026-85730smol-toml TOML parser infinite loop8.2CNA v4.00.5%2026-09-04Fix
CVE-2026-85704ramon-victor freegpt-webui Jailbreak Mode config.py getJailbreak race condition6.3CNA v4.00.4%2026-09-04
CVE-2026-85703ramon-victor freegpt-webui Jailbreak Mode backend.py getJailbreak allocation of resources6.9CNA v4.00.6%2026-09-04
CVE-2026-85702ramon-victor freegpt-webui Backend Conversation API backend.py _conversation missing authentication6.9CNA v4.00.7%2026-09-04
CVE-2026-85701ramon-victor freegpt-webui Authentication Check missing authentication6.9CNA v4.00.6%2026-09-04
CVE-2026-85700Onyx Custom Tool Secret Header Disclosure via tool endpoints7.1CNA v4.00.5%2026-09-04
CVE-2026-85699jina-ai reader server-side request forgery via redirect validation bypass8.7CNA v4.00.5%2026-09-04
CVE-2026-85698Turso out-of-bounds read denial of service6.8CNA v4.00.2%2026-09-04
CVE-2026-85697Documenso PDF Route Ignores Document Visibility7.1CNA v4.00.4%2026-09-04
CVE-2026-85696SadTalker OS command injection via Audio Filename9.3CNA v4.02.6%2026-09-04
CVE-2026-85695FastChat Unauthenticated Worker Registration SSRF and Model spoofing9.3CNA v4.00.7%2026-09-04
CVE-2026-85694LaVague remote code execution via eval extraction9.2CNA v4.00.9%2026-09-04
CVE-2026-85693mckaywrigley chatbot-ui Chatbot UI Cross-User Private File Content Disclosure via Retrieval API7.1CNA v4.00.4%2026-09-04
CVE-2026-85692Nightingale SSRF Guard Bypass via IPv6 Encoding7.1CNA v4.00.4%2026-09-04
CVE-2026-85691MegaParse server-side request forgery via POST /v1/URL8.7CNA v4.00.6%2026-09-04
CVE-2026-85690Plandex path traversal via ApplyFiles8.5CNA v4.00.2%2026-09-04
CVE-2026-85689llmware SQL injection via unescaped filter values7.1CNA v4.00.4%2026-09-04
CVE-2026-85688ten-framework TEN Framework Unauthenticated File Read/Write via TMAN Designer9.3CNA v4.02.6%2026-09-04Nuclei
CVE-2026-85687surya unauthenticated arbitrary file read via screenshot server8.7CNA v4.00.5%2026-09-04
CVE-2026-85686ms-swift unauthenticated SSRF via Multimodal Media URLs8.7CNA v4.00.5%2026-09-04
CVE-2026-85685AgentScope arbitrary Directory Copy via add_skill8.7CNA v4.00.5%2026-09-04
CVE-2026-85684marker path traversal via upload filename8.8CNA v4.01.1%2026-09-04
CVE-2026-85676Dub open redirect via Unrestricted redir_url parameter5.3CNA v4.00.4%2026-09-04
CVE-2026-85675OWL DocumentProcessingToolkit server-side request forgery via URL Fetching8.7CNA v4.00.5%2026-09-04
CVE-2026-85674Aider remote code execution via .Aider.conf.yml8.5CNA v4.00.2%2026-09-04
CVE-2026-85673LLaMA-Factory SSRF Guard Bypass via Redirect and DNS Rebinding8.7CNA v4.00.5%2026-09-04
CVE-2026-85672zerox OS command injection via Document URL file extension9.3CNA v4.02.6%2026-09-04
CVE-2026-85671QAnything Unauthenticated Cross-User File Disclosure8.7CNA v4.00.6%2026-09-04
CVE-2026-85670tokenizers BpeBuilder buffer overflow via merge token7.1CNA v4.00.5%2026-09-04
CVE-2026-85669potpie Missing Ownership Check via code-changes sync7.1CNA v4.00.4%2026-09-04
CVE-2026-85668Xinference model auto-register endpoint vulnerability8.7CNA v4.00.6%2026-09-04
CVE-2026-85667xiaobei Unauthenticated Webhook message injection9.3CNA v4.00.7%2026-09-04
CVE-2026-85666ogx server-side request forgery via MCP tool server_url8.7CNA v4.00.7%2026-09-04
CVE-2026-85665Bruno arbitrary file read via Unconfined Body File Path7.1CNA v4.00.8%2026-09-04
CVE-2026-85664Chroma Unbounded HNSW Index parameters memory exhaustion8.7CNA v4.00.7%2026-09-04
CVE-2026-85663Aim remote code execution via Unauthenticated Method Dispatch9.3CNA v4.00.7%2026-09-04
CVE-2026-85662Marqo server-side request forgery via Media URLs6.9CNA v4.00.4%2026-09-04
CVE-2026-85661excel-mcp-server arbitrary file read/Write via stdio mode9.3CNA v4.00.7%2026-09-04
CVE-2026-85660cli-mcp-server Command Allowlist Bypass via Shell Substitution9.2CNA v4.00.6%2026-09-04
CVE-2026-85656An OS command injection issue in the log4j-cve-2021-44228-hotpatch package in Amazon Linux before 1.3-9 might allow a local user to execute arbitrary commands with root privileges via a Java process whose executable path contains embedded newline characters.8.5CNA v4.01.1%2026-09-04Fix
CVE-2026-85654Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server7.1CNA v4.00.2%2026-09-04Fix
CVE-2026-85651Trigger.dev Unauthorized Environment Access via Run Replay8.4CNA v4.00.5%2026-09-04Fix
CVE-2026-85650Trigger.dev server-side request forgery via webhook alert-channel5.3CNA v4.00.3%2026-09-04Fix
CVE-2026-85649ChewKeanHo software-actualizer unchecked return value7.9CNA v3.10.2%2026-09-04Fix
CVE-2026-85643code-projects Online Shopping System adduser.php mysqli_query SQL injection5.1CNA v4.00.3%2026-09-04
CVE-2026-85639jofpin trape Telemetry endpoint user.py race condition6.3CNA v4.00.3%2026-09-04
CVE-2026-85638trape user authorization insecure direct object reference6.9CNA v4.00.5%2026-09-04
CVE-2026-85637jofpin trape Admin endpoint sockets.py join_room missing authentication6.9CNA v4.00.7%2026-09-04
CVE-2026-85636jofpin trape Login endpoint stats.py missing authentication6.9CNA v4.00.8%2026-09-04
CVE-2026-85626git-mcp-server argument injection via Git Ref parameters8.7CNA v4.00.5%2026-09-04
CVE-2026-85625crcn sift.js sift prototype pollution remote code execution via $where9.2CNA v4.00.7%2026-09-04
CVE-2026-85624Blinko Cross-User Private Note Disclosure via noteReferenceList7.1CNA v4.00.4%2026-09-04
CVE-2026-85623goose arbitrary command execution via Recipe extensions8.7CNA v4.00.6%2026-09-04Fix
CVE-2026-85622AppFlowy-Cloud Cross-Workspace Collab Read via WebSocket6.0CNA v4.00.4%2026-09-04
CVE-2026-85621lobehub LobeChat Webhook signature verification Bypass QQ Feishu6.9CNA v4.00.2%2026-09-04
CVE-2026-85620crystaldba postgres-mcp Postgres MCP Pro Restricted-Mode Bypass via FROM-Clause function9.2CNA v4.00.5%2026-09-04
CVE-2026-85619AppFlowy-Cloud Cross-Workspace Collab Access via HTTP API7.7CNA v4.00.6%2026-09-04
CVE-2026-85618ConvertX arbitrary file read via LaTeX Input Directives7.1CNA v4.00.5%2026-09-04
CVE-2026-85617Snipe-IT authorization bypass via Bulk Delete8.7CNA v4.00.5%2026-09-04Fix
CVE-2026-85616Snipe-IT authorization bypass via Checkout-Acceptance8.4CNA v4.00.4%2026-09-04Fix
CVE-2026-85615Openpanel Cross-Tenant IDOR via report.getLayouts5.3CNA v4.00.2%2026-09-04Fix
CVE-2026-85614OpenPanel API unauthenticated SSRF via site-checker9.2CNA v4.00.3%2026-09-04Fix
CVE-2026-85613OpenPanel unauthenticated XSS via SVG Favicon Proxy8.4CNA v4.00.4%2026-09-04Fix
CVE-2026-85612OpenPanel SSRF via favicon and og endpoints8.7CNA v4.00.4%2026-09-04Fix
CVE-2026-85611OpenPanel Cross-Tenant BOLA via report procedures5.3CNA v4.00.2%2026-09-04Fix
CVE-2026-85610OpenPanel remote code execution via chart formulas8.7CNA v4.00.7%2026-09-04Fix
CVE-2026-85609Openpanel SSRF via Site Checker endpoint6.9CNA v4.00.5%2026-09-04Fix
CVE-2026-85608Douyin_TikTok_Download_API SSRF via URL parameter8.7CNA v4.00.5%2026-09-04
CVE-2026-85607Blinko Cross-User AI Conversation Read and Write via message tRPC Router8.7CNA v4.00.7%2026-09-04
CVE-2026-85606firecrawl-mcp-server arbitrary Local File Read via filePath8.7CNA v4.00.9%2026-09-04
CVE-2026-85605Slink missing authorization on Image Comment endpoints6.9CNA v4.00.5%2026-09-04Fix
CVE-2026-85604Grav remote code execution via sort filter8.7CNA v4.00.9%2026-09-04Fix
CVE-2026-85603Grav Admin plugin path traversal via Save as Language Code7.1CNA v4.00.6%2026-09-04Fix
CVE-2026-85602getgrav grav-plugin-form grav form plugin reCAPTCHA v3 authentication bypass9.3CNA v4.00.4%2026-09-04Fix
CVE-2026-85601Grav Admin cross-site scripting via marked.js5.1CNA v4.00.3%2026-09-04Fix
CVE-2026-85600getgrav grav-plugin-admin2 grav Admin stored XSS via username5.1CNA v4.00.2%2026-09-04
CVE-2026-85599getgrav grav-plugin-shortcode-core grav Shortcode Core stored XSS via unescaped parameters5.1CNA v4.00.3%2026-09-04Fix
CVE-2026-85598Grav stored XSS via Modular pages5.1CNA v4.00.3%2026-09-04Fix
CVE-2026-85597Traefik and mTLS Bypass via TLS Option Conflict9.1NVD v3.10.4%2026-09-04Fix
CVE-2026-85596Traefik authentication bypass via TLS Option Conflict9.8NVD v3.10.4%2026-09-04
CVE-2026-85595Traefik and authentication bypass via digestAuth9.8NVD v3.10.7%2026-09-04Fix
CVE-2026-85594Traefik crossProviderNamespaces Bypass via Service Middleware9.8NVD v3.10.5%2026-09-04
CVE-2026-85593phpMyFAQ stored XSS via html_entity_decode5.1CNA v4.00.2%2026-09-04Fix
CVE-2026-85592phpMyFAQ authorization bypass via question/create6.3CNA v4.00.3%2026-09-04Fix
CVE-2026-85591phpMyFAQ authentication bypass via unverified password change7.1CNA v4.00.5%2026-09-04Fix
CVE-2026-85590phpMyFAQ authentication bypass via Two-Factor Disable7.1CNA v4.00.5%2026-09-04Fix
CVE-2026-85589phpMyFAQ missing authorization via Dashboard API5.3CNA v4.00.5%2026-09-04Fix
CVE-2026-85588phpMyFAQ TOTP secret exposure via Data Export5.3CNA v4.00.5%2026-09-04Fix
CVE-2026-85587phpMyFAQ incorrect authorization via Admin pages5.3CNA v4.00.4%2026-09-04Fix
CVE-2026-85586phpMyFAQ CAPTCHA Bypass via store parameter6.9CNA v4.00.5%2026-09-04Fix
CVE-2026-85585SiYuan Unbounded Memory Consumption via ControlConcurrency8.7CNA v4.00.5%2026-09-04Fix
CVE-2026-85584SiYuan denial of service via Auth Throttle8.7CNA v4.00.6%2026-09-04Fix
CVE-2026-85583SiYuan path traversal via symlink in file API7.1CNA v4.00.6%2026-09-04Fix
CVE-2026-85582SiYuan Unbounded Session Creation via Basic Auth7.1CNA v4.00.4%2026-09-04Fix
CVE-2026-85581SiYuan denial of service via unauthenticated UI-process registration8.7CNA v4.00.6%2026-09-04Fix
CVE-2026-85580SiYuan Path Guard Bypass via Case Mismatch7.1CNA v4.00.6%2026-09-04Fix
CVE-2026-85579SiYuan information disclosure via undoState5.3CNA v4.00.3%2026-09-04Fix
CVE-2026-85578SiYuan authorization bypass via getFile7.1CNA v4.00.4%2026-09-04Fix
CVE-2026-85577AVideo userLogin.php reflected XSS via error parameter5.3CNA v4.00.3%2026-09-04
CVE-2026-85547Cross-site request forgery via Attacker-Controlled REST Detection in MISP6.2CNA v4.00.4%2026-09-04
CVE-2026-85546MISP Sharing Group Quick-Edit Actions allow CSRF via State-Changing GET requests8.6CNA v4.00.2%2026-09-04
CVE-2026-85541Interinfo｜DreamMaker reflected cross-site scripting4.8CNA v4.00.3%2026-09-04
CVE-2026-85540Interinfo｜DreamMaker SQL injection8.7CNA v4.00.5%2026-09-04
CVE-2026-85538MISP An incorrect authorization8.3CNA v4.00.4%2026-09-04
CVE-2026-85534libsoup HTTP/2 client reachable assertion5.9CNA v3.10.3%2026-09-04Fix
CVE-2026-85533MISP Sharing Group authorization bypass via Omitted Distribution parameter7.6CNA v4.00.4%2026-09-04
CVE-2026-85528Snowflake JDBC Driver auto-configuration account validation permits credential redirection5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-85525Improper OCSP response validation in Snowflake drivers7.4CNA v3.10.2%2026-09-04Fix
CVE-2026-85522valkey-io valkey Slot Migration cluster_migrateslots.c createSlotImportJob out-of-bounds6.9CNA v4.00.9%2026-09-04Fix
CVE-2026-85517code-projects Vehicle Management System SQL database backup file handler information disclosure6.9CNA v4.00.5%2026-09-04
CVE-2026-85516code-projects Vehicle Management System busprofile.php SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85514StackStorm st2 API Key auth.py privileges management5.3CNA v4.00.4%2026-09-04
CVE-2026-85513StackStorm st2 NoOp RBAC backend actionexecutions.py privileges management5.3CNA v4.00.4%2026-09-04
CVE-2026-85512SourceCodester Class and Exam Timetabling System session.php authorization6.9CNA v4.00.5%2026-09-04
CVE-2026-85509FreeIPMI stack-based buffer overflow9.8CNA v3.10.4%2026-09-04Fix
CVE-2026-85508FreeIPMI stack-based buffer overflow9.8CNA v3.10.4%2026-09-04Fix
CVE-2026-85507FreeIPMI stack-based buffer overflow9.8CNA v3.10.4%2026-09-04Fix
CVE-2026-85506FreeIPMI stack-based buffer overflow9.8CNA v3.10.4%2026-09-04Fix
CVE-2026-85505FreeIPMI out-of-bounds read7.5CNA v3.10.4%2026-09-04Fix
CVE-2026-85504FreeIPMI stack-based buffer overflow9.8CNA v3.10.4%2026-09-04Fix
CVE-2026-85409Eleveo Quality Management Questionnaire Service QuestionnaireService.runDataExportNow path traversal5.3CNA v4.00.5%2026-09-04
CVE-2026-85408Eleveo Quality Management Conversation events dynamically-determined object attributes5.3CNA v4.00.4%2026-09-04
CVE-2026-85407Eleveo Quality Management Conversation events denial of service5.3CNA v4.00.5%2026-09-04
CVE-2026-85406Eleveo Quality Management Conversation Review cross-site scripting5.1CNA v4.00.3%2026-09-04
CVE-2026-85405Eleveo Call Recording Software roleAddAction.do cross-site scripting5.1CNA v4.00.3%2026-09-04
CVE-2026-85403code-projects Doctor Appointment System contactus.php SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85402code-projects Doctor Appointment System booking.php SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85401Dolibarr Legacy File Manager config.inc.php access control5.3CNA v4.00.4%2026-09-04Fix
CVE-2026-85399code-projects Hospital Information System PrespController.php getSinglePresp SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85398code-projects Hospital Information System viewReq.php viewReq SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85397code-projects Hospital Information System addReq.php findBySearch SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85383itsourcecode Sales and Inventory System inv_del.php SQL injection5.3CNA v4.00.3%2026-09-04
CVE-2026-85382light0011 cms Chapter Content Output oneChapter.tpl htmlspecialchars_decode cross-site scripting5.3CNA v4.00.5%2026-09-04
CVE-2026-85381light0011 cms Chapter Controller ChapterController.class.php authorization6.9CNA v4.00.6%2026-09-04
CVE-2026-85380light0011 cms UEditor controller.php catchimage server-side request forgery6.9CNA v4.00.5%2026-09-04
CVE-2026-85379light0011 cms Query Builder ChapterController.class.php searchChapter SQL injection6.9CNA v4.00.4%2026-09-04
CVE-2026-85311MarketKing WordPress plugin broken access control5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-85229Apache SkyWalking: Stored XSS in Booster UI dashboard widgets (incomplete fix of)6.1CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-85197libsoup HTTP/2 client use-after-free7.6CNA v3.10.3%2026-09-04Fix
CVE-2026-85184@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target9.1CNA v3.10.5%2026-09-04Fix
CVE-2026-85152undici vulnerable to cross-origin cache poisoning via missing origin isolation in interceptors7.4CNA v3.10.2%2026-09-04Fix
CVE-2026-85149Lightstar｜SmartIT Desktop Manager use of hard-coded credentials6.9CNA v4.00.4%2026-09-04Fix
CVE-2026-85148Lightstar｜SmartIT Desktop Manager use of hard-coded credentials9.3CNA v4.00.6%2026-09-04Fix
CVE-2026-85147Lightstar｜SmartIT Desktop Manager use of hard-coded credentials8.7CNA v4.00.3%2026-09-04Fix
CVE-2026-85146Lightstar｜SmartIT Desktop Manager use of hard-coded credentials9.3CNA v4.00.6%2026-09-04Fix
CVE-2026-85094Canva improper removal of sensitive information8.8CNA v3.10.4%2026-09-04Fix
CVE-2026-85085Canva improper verification of communication source9.6CNA v3.10.4%2026-09-04Fix
CVE-2026-85024undici vulnerable to denial of service5.9CNA v3.10.4%2026-09-04Fix
CVE-2026-85014undici vulnerable to denial of service via WebSocketStream unclean close5.9CNA v3.10.4%2026-09-04Fix
CVE-2026-85008undici vulnerable to caching and replay of unsafe HTTP method responses3.7CNA v3.10.1%2026-09-04Fix
CVE-2026-84961undici vulnerable to TLS certificate validation bypass via dropped connect options in BalancedPool7.4CNA v3.10.1%2026-09-04Fix
CVE-2026-84947undici vulnerable to response truncation via oversized chunked responses in the dump interceptor3.7CNA v3.10.2%2026-09-04Fix
CVE-2026-84933undici vulnerable to cross-user cookie disclosure via Set-Cookie caching in shared caches6.5CNA v3.10.3%2026-09-04Fix
CVE-2026-84890undici vulnerable to denial of service via unbounded decompression of compressed responses5.9CNA v3.10.4%2026-09-04Fix
CVE-2026-84504fastify vulnerable to request body replacement via an async validation result collision8.1CNA v3.10.4%2026-09-04Fix
CVE-2026-84469fastify vulnerable to request validation bypass via skipped boolean false schemas7.5CNA v3.10.5%2026-09-04Fix
CVE-2026-84428fastify vulnerable to header validation bypass via incomplete schema case normalization7.5CNA v3.10.5%2026-09-04Fix
CVE-2026-84146Xpro Addons Quick View feature information disclosure5.3CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-84066Directorist WordPress plugin Subscriber+ arbitrary post Meta write via atbdp_post_attachment_upload3.1CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-84045E-cab Taxi Booking Manager for WooCommerce mptbm_add_to_cart handler vulnerability5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-84044Restaurant Menu and Food Ordering PayPal IPN handler vulnerability5.3CNA v3.10.2%2026-09-04Fix
CVE-2026-84043ePayco Payment Gateway for WooCommerce WordPress plugin unauthenticated Payment Confirmation bypass5.3CNA v3.10.2%2026-09-04Fix
CVE-2026-82923AI Website Builder (GitHub build) unauthenticated RCE via Unprotected REST Routes9.8CNA v3.10.8%2026-09-04
CVE-2026-82911CSRF in Prospero Flow CRM order confirmation allows unauthorized order state changes5.1CNA v4.00.2%2026-09-04Fix
CVE-2026-82729elixir-mint mint quadratic chunk-size parsing in Mint.HTTP1.Parse allows CPU-exhaustion DoS6.3CNA v4.00.5%2026-09-04Fix
CVE-2026-82728Unbounded HTTP/1 status-line and chunk-extension buffering in Mint causes memory-exhaustion DoS8.2CNA v4.00.5%2026-09-04Fix
CVE-2026-82712Tycon Systems TPDIN-Monitor-WEB3 cross-site request forgery8.6CNA v4.00.2%2026-09-04Fix
CVE-2026-82684Tycon Systems TPDIN-Monitor-WEB3 missing authorization8.6CNA v4.00.5%2026-09-04Fix
CVE-2026-82538ILIAS arbitrary SQL injection via Repository Trash Table Sort parameter8.7CNA v4.00.7%2026-09-04Fix
CVE-2026-82309Robots::Validate reverse DNS validation resource exhaustion4.3CISA ADP v3.10.4%2026-09-04Fix
CVE-2026-82194WPvivid Backup and Migration WordPress plugin Admin+ arbitrary file deletion via path traversal5.5CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-82193WPvivid WordPress plugin path traversal5.5CISA ADP v3.10.4%2026-09-04Fix
CVE-2026-82186WPLP Cookie Consent WordPress plugin Admin+ SQLi via offset parameter4.1CISA ADP v3.10.3%2026-09-04NucleiFix
CVE-2026-81939SonicWall Network Security Manager (NSM) path traversal9.1CISA ADP v3.10.7%2026-09-04Fix
CVE-2026-81859IBM Cloud Pak for Business Automation Enterprise Records weak cryptographic algorithm6.2CNA v3.10.1%2026-09-04Fix
CVE-2026-81832IBM App Connect Enterprise SAP Adapter XML external entity injection7.7CNA v3.10.4%2026-09-04Fix
CVE-2026-81666Red Hat Enterprise Linux 10 An integer overflow6.5CNA v3.10.2%2026-09-04Fix
CVE-2026-81665Red Hat Enterprise Linux 10 Corosync's Totem Process Group heap-based buffer overflow7.5CNA v3.10.3%2026-09-04Fix
CVE-2026-81347DynamiApps Frontend Admin custom directory deletion feature path traversal5.9CISA ADP v3.10.4%2026-09-04Fix
CVE-2026-81302JAL Digital PALLET CONTROL incorrect default permissions8.5CNA v4.00.2%2026-09-04
CVE-2026-81270Apache Allura: Information exposure via search7.5CISA ADP v3.10.4%2026-09-04Fix
CVE-2026-80913Linux kernel SELinux boolean value lookup vulnerability–0.2%2026-09-04Fix
CVE-2026-80912Linux kernel SELinux security_get_classes vulnerability–0.2%2026-09-04Fix
CVE-2026-80911Linux kernel SOF widget setup error path vulnerability–0.2%2026-09-04Fix
CVE-2026-80910Linux kernel lpass-wsa-macro codec driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80909Linux kernel UVD H.265 decoder vulnerability–0.2%2026-09-04Fix
CVE-2026-80908Linux kernel UVD message dimension handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80907Linux kernel UVD H.264 decoder vulnerability–0.2%2026-09-04Fix
CVE-2026-80906Linux kernel packet socket VLAN header handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80905Linux kernel tap driver VLAN header handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80904Linux kernel TLS splice read vulnerability–0.2%2026-09-04Fix
CVE-2026-80903Linux kernel Xe OA config emit vulnerability–0.2%2026-09-04Fix
CVE-2026-80902Linux kernel sun6i DMA engine driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80901Linux kernel IPVS ICMPv6 checksum validation vulnerability–0.2%2026-09-04Fix
CVE-2026-80900Linux kernel ASoC SDCA UMP message parsing vulnerability–0.2%2026-09-04Fix
CVE-2026-80899Linux kernel EROFS fscache backend vulnerability–0.2%2026-09-04Fix
CVE-2026-80898Linux kernel netfs copy-to-cache vulnerability–0.2%2026-09-04Fix
CVE-2026-80897Linux kernel netfs readahead folio handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80896Linux kernel mshv irqfd deassignment race condition–0.2%2026-09-04Fix
CVE-2026-80895Linux kernel mshv virtual processor array race condition–0.2%2026-09-04Fix
CVE-2026-80894Linux kernel IOMMUFD fault handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80893Linux kernel hugetlb fork userfaultfd write protection vulnerability–0.2%2026-09-04Fix
CVE-2026-80892Linux kernel EROFS LZMA decompressor vulnerability–0.2%2026-09-04Fix
CVE-2026-80891Linux kernel KVM s390 PCI adapter interruption vulnerability–0.2%2026-09-04Fix
CVE-2026-80890Linux kernel SCTP cookie verification vulnerability–0.2%2026-09-04Fix
CVE-2026-80889Linux kernel CAN ISOTP protocol driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80888Linux kernel vmwgfx PRIME buffer import vulnerability–0.2%2026-09-04Fix
CVE-2026-80887Linux kernel vmwgfx shader size validation vulnerability–0.2%2026-09-04Fix
CVE-2026-80886Linux kernel MSM serial console UART driver race condition–0.2%2026-09-04Fix
CVE-2026-80885Linux kernel AFS vulnerability–0.2%2026-09-04Fix
CVE-2026-80884Linux kernel NTB DMA address handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80883Linux kernel Tegra GR2D and GR3D DRM driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80882Linux kernel Tegra CCM crypto driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80881Linux kernel ocfs2 buffer head handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80880Linux kernel mlx5 IB driver race condition–0.2%2026-09-04Fix
CVE-2026-80879Linux kernel ocfs2 direct I/O write completion vulnerability–0.2%2026-09-04Fix
CVE-2026-80878Linux kernel AFS volume lookup vulnerability–0.2%2026-09-04Fix
CVE-2026-80877Linux kernel AFS cell server list update vulnerability–0.2%2026-09-04Fix
CVE-2026-80876Linux kernel ring buffer event length calculation vulnerability–0.2%2026-09-04Fix
CVE-2026-80875Linux kernel IPVS TCP state lookup vulnerability–0.2%2026-09-04Fix
CVE-2026-80874Linux kernel DBSC5 DRAM controller inline ECC vulnerability–0.2%2026-09-04Fix
CVE-2026-80873Linux kernel KVM arm64 nested virtualization vulnerability–0.2%2026-09-04Fix
CVE-2026-80872Linux kernel TAS2781 firmware loading vulnerability–0.2%2026-09-04Fix
CVE-2026-80871Linux kernel Xilinx TRNG driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80870Linux kernel AMDKFD CRIU restore denial of service–0.2%2026-09-04Fix
CVE-2026-80869Linux kernel NTFS attribute list parsing vulnerability–0.2%2026-09-04Fix
CVE-2026-80868Linux kernel NTFS3 inline data allocation vulnerability–0.2%2026-09-04Fix
CVE-2026-80867Linux kernel Alpha PCI BAR mmap vulnerability–0.2%2026-09-04Fix
CVE-2026-80866Linux kernel TIPC subsystem denial of service–0.2%2026-09-04Fix
CVE-2026-80865Linux kernel BPF symbol copy vulnerability–0.2%2026-09-04Fix
CVE-2026-80864Linux kernel RDMA rxe responder task use-after-free–0.2%2026-09-04Fix
CVE-2026-80863Linux kernel RDMA rxe QP resource array out-of-bounds write–0.2%2026-09-04Fix
CVE-2026-80862Linux kernel NVMe over TCP page fragment cache vulnerability–0.2%2026-09-04Fix
CVE-2026-80861Linux kernel xHCI controller setup vulnerability–0.2%2026-09-04Fix
CVE-2026-80860Linux kernel FUSE request interrupt handling race condition–0.2%2026-09-04Fix
CVE-2026-80859Linux kernel FUSE io-uring readiness check deadlock–0.2%2026-09-04Fix
CVE-2026-80858Linux kernel FUSE io-uring queue initialization vulnerability–0.2%2026-09-04Fix
CVE-2026-80857Linux kernel FUSE request abort handling use-after-free–0.2%2026-09-04Fix
CVE-2026-80856Linux kernel FUSE setattr writeback vulnerability–0.2%2026-09-04Fix
CVE-2026-80855Linux kernel FUSE DAX truncate vulnerability–0.2%2026-09-04Fix
CVE-2026-80854Linux kernel USB gadget f_tcm LUN teardown vulnerability–0.2%2026-09-04Fix
CVE-2026-80853Linux kernel KVM SEV vulnerability–0.2%2026-09-04Fix
CVE-2026-80852Linux kernel TLS device offload out-of-bounds write–0.2%2026-09-04Fix
CVE-2026-80851Linux kernel GTP PDP context handling race condition–0.2%2026-09-04Fix
CVE-2026-80850Linux kernel TCP-AO connection initialization use-after-free–0.2%2026-09-04Fix
CVE-2026-80849Linux kernel net/tcp-ao use-after-free–0.2%2026-09-04Fix
CVE-2026-80848Linux kernel espintcp encapsulation use-after-free–0.2%2026-09-04Fix
CVE-2026-80847Linux kernel TCP initial window selection divide-by-zero–0.2%2026-09-04Fix
CVE-2026-80846Linux kernel XFRM ESP-in-TCP input path vulnerability–0.2%2026-09-04Fix
CVE-2026-80845Linux kernel XFRM NAT keepalive deadlock–0.2%2026-09-04Fix
CVE-2026-80844Linux kernel AH6 routing header handling vulnerability–0.4%2026-09-04Exploit codeFix
CVE-2026-80843Linux kernel XFRM state auth algorithm attachment vulnerability–0.2%2026-09-04Fix
CVE-2026-80842Linux kernel bridge multicast VLAN context use-after-free–0.2%2026-09-04Fix
CVE-2026-80841Linux kernel AF_PACKET TX ring vulnerability–0.2%2026-09-04Fix
CVE-2026-80840Linux kernel IPv6 seg6 IPIP decapsulation vulnerability–0.2%2026-09-04Fix
CVE-2026-80839Linux kernel batman-adv multicast TVLV handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80838Linux kernel VXLAN FDB flush vulnerability–0.2%2026-09-04Fix
CVE-2026-80837Linux kernel nf_tables object notification queue vulnerability–0.2%2026-09-04Fix
CVE-2026-80836Linux kernel virtio crypto driver out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80835Linux kernel qcom-rng driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80834Linux kernel sun8i-ce crypto RNG driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80833Linux kernel sun8i-ss crypto RNG driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80832Linux kernel qce CCM AAD buffer handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80831Linux kernel mxs-dcp crypto driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80830Linux kernel USB core wakeup notification race condition–0.2%2026-09-04Fix
CVE-2026-80829Linux kernel ALSA usb-audio driver out-of-bounds write–0.2%2026-09-04Fix
CVE-2026-80828Linux kernel USB audio driver resume path denial of service–0.2%2026-09-04Fix
CVE-2026-80827Linux kernel USB serial option driver out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80826Linux kernel c67x00 USB host controller driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80825Linux kernel mt7925 Wi-Fi driver denial of service–0.2%2026-09-04Fix
CVE-2026-80824Linux kernel usbfs use-after-free–0.2%2026-09-04Fix
CVE-2026-80823Linux kernel st21nfca NFC driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80822Linux kernel mchp-ipc-sbi mailbox driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80821Linux kernel NVMe target PCI endpoint completion queue creation vulnerability–0.2%2026-09-04Fix
CVE-2026-80820Linux kernel XFS online scrub vulnerability–0.2%2026-09-04Fix
CVE-2026-80819Linux kernel Bluetooth RFCOMM deferred setup accept vulnerability–0.2%2026-09-04Fix
CVE-2026-80818Linux kernel Tegra241 CMDQV teardown use-after-free–0.2%2026-09-04Fix
CVE-2026-80817Linux kernel IOMMUFD IOAS process change race condition–0.2%2026-09-04Fix
CVE-2026-80816Linux kernel ALSA FCP notification endpoint vulnerability–0.2%2026-09-04Fix
CVE-2026-80815Linux kernel ALSA Scarlett2 notification endpoint vulnerability–0.2%2026-09-04Fix
CVE-2026-80814Linux kernel RNDIS receive fixup vulnerability–0.2%2026-09-04Fix
CVE-2026-80813Linux kernel nvmet driver null pointer dereference–0.2%2026-09-04Fix
CVE-2026-80812Linux kernel ALSA dummy driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80811Linux kernel io_uring async command cache vulnerability–0.2%2026-09-04Fix
CVE-2026-80810Linux kernel io_uring registered buffer handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80809Linux kernel ocfs2 extended attribute allocation vulnerability–0.2%2026-09-04Fix
CVE-2026-80808Linux kernel ext4 extended attribute cache vulnerability–0.2%2026-09-04Fix
CVE-2026-80807Linux kernel nilfs2 garbage collection ioctl vulnerability–0.2%2026-09-04Fix
CVE-2026-80806Linux kernel ext4 encrypted file DAX handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80805Linux kernel XFS extended attribute leaf verification vulnerability–0.2%2026-09-04Fix
CVE-2026-80804Linux kernel XFS transaction roll vulnerability–0.2%2026-09-04Fix
CVE-2026-80803Linux kernel NFC digital layer vulnerability–0.2%2026-09-04Fix
CVE-2026-80802Linux kernel FDP NFC driver out-of-bounds write–0.2%2026-09-04Fix
CVE-2026-80801Linux kernel microread NFC driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80800Linux kernel NFC LLCP connect service name parser out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80799Linux kernel NFC LLCP TLV parser out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80798Linux kernel NFC LLCP PDU parsing out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80797Linux kernel PN533 NFC driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80796Linux kernel NFC NCI activation parameter parsing out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80795Linux kernel NFC NCI target discovery out-of-bounds write–0.2%2026-09-04Fix
CVE-2026-80794Linux kernel NFC NCI RF discovery notification handler vulnerability–0.2%2026-09-04Fix
CVE-2026-80793Linux kernel IPv4 fragmentation vulnerability–0.2%2026-09-04Fix
CVE-2026-80792Linux kernel IPv6 output path use-after-free–0.2%2026-09-04Fix
CVE-2026-80791Linux kernel NVMe authentication response buffer vulnerability–0.2%2026-09-04Fix
CVE-2026-80790Linux kernel nvmet-fc driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80789Linux kernel nvmet-tcp driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80788Linux kernel nvmet-tcp driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80787Linux kernel nvmet PCI-EPF driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80786Linux kernel fbdev variable screen info handling vulnerability–0.2%2026-09-04Fix
CVE-2026-80785Linux kernel fbdev mode sysfs interface vulnerability–0.2%2026-09-04Fix
CVE-2026-80784Linux kernel pm memory leak–0.2%2026-09-04Fix
CVE-2026-80783Linux kernel magicmouse HID driver stack overflow–0.2%2026-09-04Fix
CVE-2026-80782Linux kernel magicmouse HID driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80781Linux kernel HID core field usage dump out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80780Linux kernel HID pidff driver out-of-bounds write–0.2%2026-09-04Fix
CVE-2026-80779In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware timestamp RX queue is allocated with q->index equal to lif->ionic->nrxqs_per_lif. The normal txqcqs array only contains the regular queue pairs, so usin–0.2%2026-09-04Fix
CVE-2026-80778Linux kernel PI futex owner attachment vulnerability–0.2%2026-09-04Fix
CVE-2026-80777Linux kernel PI futex exec handling race condition–0.2%2026-09-04Fix
CVE-2026-80776Linux kernel futex private hash resize race condition–0.2%2026-09-04Fix
CVE-2026-80775Linux kernel futex private hash allocation race condition–0.2%2026-09-04Exploit codeFix
CVE-2026-80774Linux kernel Asus HID driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80773Linux kernel Huawei HID driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80772Linux kernel Nintendo Joy-Con driver out-of-bounds read–0.2%2026-09-04Fix
CVE-2026-80771Linux kernel Nintendo Joy-Con driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80770Linux kernel Nintendo Joy-Con driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80769Linux kernel Rapoo HID driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80768Linux kernel FT260 I2C driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80767Linux kernel HID sensor custom driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80766Linux kernel uclogic tablet driver use-after-free–0.2%2026-09-04Fix
CVE-2026-80765Linux kernel Hyper-V synthetic HID driver vulnerability–0.2%2026-09-04Fix
CVE-2026-80764Linux kernel Bluetooth HCI LE address list use-after-free–0.2%2026-09-04Fix
CVE-2026-80763Linux kernel Bluetooth HCI CIG parameters response vulnerability–0.2%2026-09-04Fix
CVE-2026-80762Linux kernel Bluetooth HCI accept list use-after-free–0.2%2026-09-04Fix
CVE-2026-80761Linux kernel Bluetooth ISO socket getname vulnerability–0.2%2026-09-04Fix
CVE-2026-80760Linux kernel Bluetooth MGMT HCI command sync vulnerability–0.2%2026-09-04Fix
CVE-2026-80759Linux kernel AML Bluetooth firmware loader vulnerability–0.2%2026-09-04Fix
CVE-2026-80758Linux kernel futex private hash use-after-free–0.2%2026-09-04Fix
CVE-2026-80438Ninja Forms - Authenticated arbitrary Post Modification and sensitive information disclosure5.9CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-80190Apache Allura: Stored XSS via code repositories6.1CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-80181Apache Allura: Server-side request forgery9.1CISA ADP v3.10.5%2026-09-04Fix
CVE-2026-80180Apache Allura: Stored XSS via markdown HTML processing6.1CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-80119PassMark Software PerformanceTest, BurnInTest and OSForensics information disclosure8.5CNA v4.00.2%2026-09-04Fix
CVE-2026-80118PassMark PerformanceTest, BurnInTest, and OSForensics Kernel null pointer dereference8.4CNA v4.00.2%2026-09-04Fix
CVE-2026-80117PassMark PerformanceTest, BurnInTest, and OSForensics arbitrary I/O Port Access via DirectIo64.sys6.9CNA v4.00.2%2026-09-04Fix
CVE-2026-80116PassMark PerformanceTest, BurnInTest, and OSForensics privilege escalation via DirectIo64.sys IOCTL8.5CNA v4.00.2%2026-09-04Fix
CVE-2026-80115PassMark PerformanceTest, BurnInTest, and OSForensics Kernel crash6.9CNA v4.00.2%2026-09-04Fix
CVE-2026-80114PassMark PerformanceTest, BurnInTest, and OSForensics hard-coded credentials authentication bypass8.5CNA v4.00.2%2026-09-04Fix
CVE-2026-80113PassMark PerformanceTest, BurnInTest, and OSForensics arbitrary Bit Clear via DirectIo64.sys IOCTL6.9CNA v4.00.2%2026-09-04Fix
CVE-2026-80112PassMark PerformanceTest, BurnInTest, and OSForensics improper access control via DirectIo64.sys8.5CNA v4.00.1%2026-09-04Fix
CVE-2026-79707Arbitrary file read in Google Agent Development Kit (ADK)8.7CNA v4.00.7%2026-09-04Fix
CVE-2026-79632WPFunnels opt-in submission handler missing authorization5.3CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-79631WPFunnels log files information disclosure5.3CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-79630WPFunnels WordPress plugin unauthenticated Price manipulation via order Bump Product ID Substitution5.3CISA ADP v3.10.3%2026-09-04Fix
CVE-2026-79426/adminapi/file/video_data_save component of CRMEB v6.0.0 An arbitrary file deletion7.2CISA ADP v3.10.5%2026-09-04
CVE-2026-79423admin_config.php component of seacms v13.6 authenticated remote code execution8.8CISA ADP v3.10.9%2026-09-04
CVE-2026-79419Emxtecnologia Gestao X Business Suite reflected cross-site scripting8.7v3.10.3%2026-09-04
CVE-2026-79418Emxtecnologia Gestao X Business Suite cross-site scripting8.7v3.10.3%2026-09-04
CVE-2026-79391MQTT service of Trueview missing authentication9.8CISA ADP v3.10.7%2026-09-04
CVE-2026-79390Trueview TI8161 MQTT communications information disclosure7.5CISA ADP v3.10.4%2026-09-04
CVE-2026-79389Trueview T18161 S MQTT command processing improper signature verification7.4CISA ADP v3.10.2%2026-09-04
CVE-2026-78970JeecgBoot SystemApiController missing authorization6.5CISA ADP v3.10.4%2026-09-04
CVE-2026-78849Netgate pfSense captive portal status widget cross-site scripting5.4CISA ADP v3.10.5%2026-09-04
CVE-2026-78839AppNitro MachForm v30 An arbitrary file upload8.1CISA ADP v3.10.6%2026-09-04
CVE-2026-78745Weyon HiDPTAndroid Hi3751V350/Hi3751V352E_DMO ADB daemon remote code execution9.8CISA ADP v3.10.8%2026-09-04
CVE-2026-78658IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to an information disclosure6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-78543IBM App Connect Enterprise Adapter nodes denial of service5.3CNA v3.10.5%2026-09-04Fix
CVE-2026-78328SonicWall Network Security Manager (NSM) missing authorization9.1CISA ADP v3.10.5%2026-09-04Fix
CVE-2026-78327SonicWall Network Security Manager (NSM) OS command injection9.1CISA ADP v3.11.6%2026-09-04Fix
CVE-2026-77847Tycon Systems TPDIN-Monitor-WEB3 use of hard-coded credentials7.1CNA v4.00.3%2026-09-04Fix
CVE-2026-77822IBM ContextForge MCP Gateway is affected by server-side request forgery8.2CNA v3.10.4%2026-09-04Fix
CVE-2026-77818Reflected HTML injection via Form Hijacking in Yordam Informatics's Library Automation System6.1CNA v3.10.3%2026-09-04Exploit codeFix
CVE-2026-77393Inductive Automation Ignition incorrect default permissions8.7CNA v4.00.5%2026-09-04Fix
CVE-2026-76925Red Hat Enterprise Linux 10 flatpak: Flatpak: Toctou race condition allows symlink redirection5.8CNA v3.10.1%2026-09-04Fix
CVE-2026-76169fastify vulnerable to authentication bypass7.5CNA v3.10.5%2026-09-04Fix
CVE-2026-75925IXON VPN Client CRLF injection9.4CNA v4.00.7%2026-09-04Fix
CVE-2026-75754ASUS Control Center Enterprise (ACC) missing authentication10.0CNA v4.00.3%2026-09-04
CVE-2026-75439Free5GC UPF null pointer dereference7.5CISA ADP v3.10.8%2026-09-04
CVE-2026-75438Open5GS v2.7.7 buffer overflow7.5CISA ADP v3.10.8%2026-09-04
CVE-2026-75431PowerJob JWT authentication hard-coded cryptographic key9.1CNA v3.11.1%2026-09-04
CVE-2026-75430PowerJob deployContainer endpoint missing authentication9.8CNA v3.11.2%2026-09-04
CVE-2026-75429PowerJob Server-Worker transport layer remote code execution9.8CISA ADP v3.11.0%2026-09-04
CVE-2026-75171HubCore HUBCOREID session cookie handling session fixation9.8CISA ADP v3.10.6%2026-09-04
CVE-2026-75170HubCore login controller language parameter cross-site scripting6.1CISA ADP v3.10.3%2026-09-04
CVE-2026-75169MBS-Solutions X-Serie Gateway firmware ugwupload.cgi unrestricted file upload8.8CISA ADP v3.10.7%2026-09-04
CVE-2026-75168MBS-Solutions X-Serie Gateway firmware ugw-editfile method improper access control6.3CISA ADP v3.10.4%2026-09-04
CVE-2026-75167MBS-Solutions X-Serie Gateway firmware ugw-usr-edit method improper access control4.3CISA ADP v3.10.4%2026-09-04
CVE-2026-75166MBS-Solutions X-Serie Gateway firmware tcpdump sudo permissions privilege escalation8.8CISA ADP v3.10.7%2026-09-04
CVE-2026-75165MBS-Solutions X-Serie Gateway firmware hidden network diagnostic methods improper authorization6.5CISA ADP v3.10.6%2026-09-04
CVE-2026-75164MBS-Solutions X-Serie Gateway firmware ugwdownload.cgi file parameter arbitrary file read6.5CISA ADP v3.10.6%2026-09-04
CVE-2026-75163MBS-Solutions X-Serie Gateway firmware ugw-deviceinfo method information disclosure6.5CISA ADP v3.10.4%2026-09-04
CVE-2026-75162MBS-Solutions X-Serie Gateway firmware opcua-configuration method information disclosure6.5CISA ADP v3.10.6%2026-09-04
CVE-2026-75161MBS-Solutions X-Serie Gateway firmware ugw-restart method command injection8.8CISA ADP v3.10.8%2026-09-04
CVE-2026-75160X-Serie Gateway firmware wwwugw.cgi and ugwdownload.cgi endpoints privilege escalation9.1CISA ADP v3.10.6%2026-09-04
CVE-2026-74853Pods WordPress plugin Author+ arbitrary file read via shortcode Display Callback6.8CISA ADP v3.10.4%2026-09-04Fix
CVE-2026-74237GFI Exinda AI / ClearView argument injection via Tools Iperf client7.1CNA v4.00.4%2026-09-04Fix
CVE-2026-74236GFI Exinda AI / ClearView path traversal via Diagnostic file deletion handler7.0CNA v4.00.9%2026-09-04Fix
CVE-2026-74235GFI Exinda AI / ClearView path traversal via Configuration Download handler6.9CNA v4.00.8%2026-09-04Fix
CVE-2026-73848Emlog: Stored XSS via Tag Name in Article Editor6.9CNA v4.00.4%2026-09-04
CVE-2026-71626Invoice Ninja webhook request handling information disclosure7.5CISA ADP v3.10.5%2026-09-04
CVE-2026-71625ThinkSNS+ password reset controller privilege escalation9.8CISA ADP v3.10.7%2026-09-04
CVE-2026-71624esoTalk member controller code injection9.8CISA ADP v3.10.9%2026-09-04
CVE-2026-71622Zhao-github APiAdmin v.5.0.1 SQL injection7.4CISA ADP v3.10.4%2026-09-04
CVE-2026-71620Zhao-github ApiAdmin v.5.0.1 file upload8.1CISA ADP v3.10.6%2026-09-04
CVE-2026-71216Apache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTP5.3CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-70403XING CPTrans-ME-X hard-coded password9.3CNA v4.00.5%2026-09-04Fix
CVE-2026-69657XING CPTrans-ME-X default password9.3CNA v4.00.5%2026-09-04Fix
CVE-2026-66840XING CPTrans-ME-X system information disclosure8.7CNA v4.00.4%2026-09-04Fix
CVE-2026-63464Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`7.7CNA v3.10.5%2026-09-04Fix
CVE-2026-62928XING CPTrans-ME-X OS command injection9.3CNA v4.02.0%2026-09-04Fix
CVE-2026-61699nebula-mesh certificate revocation enforcement vulnerability8.1CNA v3.10.4%2026-09-04Fix
CVE-2026-61688SolidInvoice DataGrid LiveComponent insecure direct object reference6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-61686SolidInvoice DataGrid LiveComponent insecure deserialization7.5CNA v3.10.5%2026-09-04Fix
CVE-2026-61614SolidInvoice REST API authenticator information disclosure5.9CNA v3.10.4%2026-09-04Fix
CVE-2026-61608SolidInvoice user invitation tokens insufficient session expiration6.8CNA v3.10.3%2026-09-04Fix
CVE-2026-57777WooCommerce WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-04Fix
CVE-2026-57166PJSIP: Pre-authentication overflow in the telnet CLI error6.3CNA v4.00.5%2026-09-04Fix
CVE-2026-57165PJSIP: Pre-authentication overflow in the telnet CLI history6.3CNA v4.00.5%2026-09-04Fix
CVE-2026-57164PJSIP: Heap overflow in the HTTP client8.3CNA v4.00.5%2026-09-04Fix
CVE-2026-57163PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend8.8CNA v4.00.4%2026-09-04Fix
CVE-2026-57162PJSIP: Stack overflow parsing SDP a=crypto attributes8.8CNA v4.00.6%2026-09-04Fix
CVE-2026-57161PJSIP: Stack overflow handling Service-Route headers in a registration response8.8CNA v4.00.5%2026-09-04Fix
CVE-2026-57160PJSIP: SIP message header buffer overflow6.9CNA v4.00.4%2026-09-04Fix
CVE-2026-57159PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance8.4CNA v4.00.6%2026-09-04Fix
CVE-2026-55513nebula-mesh web UI host creation insufficient session expiration5.4CNA v3.10.3%2026-09-04Fix
CVE-2026-55512nebula-mesh OIDC login endpoint resource exhaustion5.3CNA v3.10.6%2026-09-04Fix
CVE-2026-53932laravel-backup-restore has an OS command injection during database restore8.0CNA v3.11.7%2026-09-04Fix
CVE-2026-53769Avo attachment upload endpoint missing authorization6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-53761Frappe CRM: Authentication bypass via Logged Invitation Keys in crm/API8.2CNA v4.00.6%2026-09-04Fix
CVE-2026-53760Admidio: CSRF on Plugin Install, Uninstall, and Update via Unprotected GET requests5.2CNA v3.10.2%2026-09-04
CVE-2026-53758Emlog: Stored XSS via Parsedown Markdown Processing Raw HTML not Sanitized8.7CNA v4.00.4%2026-09-04
CVE-2026-53757Emlog: Zip Slip path traversal in Plugin/Template ZIP upload enables RCE6.9CNA v4.00.5%2026-09-04
CVE-2026-53756Emlog blind SQL injection via Authentication Cookie4.9CNA v3.10.4%2026-09-04Fix
CVE-2026-53604Forgekeep nebula-mesh mobile bundle CA key handling information disclosure7.1CNA v4.00.2%2026-09-04Fix
CVE-2026-53603Forgekeep nebula-mesh operator session storage cleartext storage of sensitive information7.1CNA v4.00.4%2026-09-04Fix
CVE-2026-53602nebula-mesh host revocation is not durable: Blocked/offboarded hosts can regain a valid certificate6.9CNA v4.00.3%2026-09-04Fix
CVE-2026-52777YesWiki: Authenticated PHP object injection in BazarImportAction via unserialize9.4CNA v4.00.3%2026-09-04Fix
CVE-2026-52775YesWiki authenticated SQL injection in ReactionManager8.8CNA v3.10.5%2026-09-04Fix
CVE-2026-52774Reflected XSS via Unescaped `id` parameter in Bazar Widget HTML attributes in YesWiki6.1CNA v3.10.7%2026-09-04NucleiExploit codeFix
CVE-2026-52773YesWiki vulnerable to reflected XSS6.1CNA v3.10.6%2026-09-04NucleiFix
CVE-2026-52772YesWiki has stored XSS in Bazar form-field templates5.5CNA v3.10.3%2026-09-04Fix
CVE-2026-52771YesWiki: Second-order SQL injection in Page Delete API8.3CNA v3.10.5%2026-09-04Fix
CVE-2026-52770Improper neutralization of special elements used in an SQL command in YesWiki/YesWiki7.5CNA v3.10.5%2026-09-04Fix
CVE-2026-52769YesWiki: Unauthenticated server-side request forgery via ActivityPub `Signature.keyId`8.3CNA v3.10.5%2026-09-04Fix
CVE-2026-52767YesWiki ActivityPub controller improper signature verification8.2CNA v3.10.4%2026-09-04Fix
CVE-2026-52766YesWiki erasespamedcomments action missing authorization9.1CNA v3.10.6%2026-09-04Fix
CVE-2026-52763YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-52762YesWiki: Authenticated server-side template injection to remote code execution7.1CNA v4.00.8%2026-09-04Fix
CVE-2026-52691Apache Griffin Hive Metastore Module: SQL injection vulnerability in Hive Metastore Module8.8CISA ADP v3.10.5%2026-09-04Fix
CVE-2026-50894easyadmin background management interface unrestricted file upload9.8CISA ADP v3.10.9%2026-09-04
CVE-2026-50553enchant97 note-mark note Mark: Path traversal8.6CNA v4.00.5%2026-09-04Fix
CVE-2026-48019CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay8.9CNA v3.10.5%2026-09-04Fix
CVE-2026-46636Twig: Sandbox method allowlist bypass via `Markup` subclass8.7CNA v4.00.6%2026-09-04Fix
CVE-2026-45200GPU DDK double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags7.8CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-45197Imagination Technologies Graphics DDK firmware memory validation race condition2.5CISA ADP v3.10.1%2026-09-04Fix
CVE-2026-44402Voltronic Power SNMP Web Pro Unauthenticated RCE via upload.cgi9.3CNA v4.01.3%2026-09-04Exploit code
CVE-2026-38961Netgate pfSense RSS widget cross-site scripting5.4CISA ADP v3.10.3%2026-09-04
CVE-2026-32480WCFM Membership WordPress plugin broken access control5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-31020DocsGPT custom prompt template rendering server-side template injection9.8CISA ADP v3.11.0%2026-09-04
CVE-2026-27432WP Rentals WordPress theme insecure direct object references (IDOR)5.4CNA v3.10.3%2026-09-04Fix
CVE-2026-27347JetPopup WordPress plugin broken access control5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-27086WoodMart WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-04Fix
CVE-2026-19727HTML injection via Improper Input Sanitization in Yordam Informatics's Library Automation System6.1CNA v3.10.1%2026-09-04Fix
CVE-2026-19649IBM App Connect Enterprise and Integration Bus for z/OS information disclosure6.2CNA v3.10.1%2026-09-04Fix
CVE-2026-19645IBM MQ Agent AI agent worker pool denial of service6.5CNA v3.10.3%2026-09-04Fix
CVE-2026-19534undici vulnerable to denial of service via unrequested WebSocket subprotocol7.5CNA v3.10.4%2026-09-04Fix
CVE-2026-19306IBM Langflow Chat Input attachment pipeline path traversal7.7CNA v3.10.4%2026-09-04Fix
CVE-2026-19305IBM Langflow server-side request forgery8.6CNA v3.10.3%2026-09-04Fix
CVE-2026-19304IBM Langflow server-side request forgery7.7CNA v3.10.3%2026-09-04Fix
CVE-2026-19303IBM Langflow file-processing components path traversal8.1CNA v3.10.4%2026-09-04Fix
CVE-2026-19302IBM Langflow ChatInput, FileInput and GitExtractor components path traversal6.5CNA v3.10.5%2026-09-04Fix
CVE-2026-19301IBM Langflow URL validation server-side request forgery5.0CNA v3.10.3%2026-09-04Fix
CVE-2026-19300IBM Langflow MCP tool cache information disclosure7.5CNA v3.10.4%2026-09-04Fix
CVE-2026-19299IBM Langflow ChatInput, FileInput and GitExtractor components path traversal6.5CNA v3.10.5%2026-09-04Fix
CVE-2026-19298IBM Langflow flow build endpoint authorization bypass8.8CNA v3.10.5%2026-09-04Fix
CVE-2026-19283IBM Observability with Instana etcd credential copying information disclosure7.7CNA v3.10.3%2026-09-04Fix
CVE-2026-19274IBM Observability with Instana Instana Agent Operator improper access control9.6CNA v3.10.2%2026-09-04Fix
CVE-2026-19224Hummingbird WordPress plugin Admin+ Network-Wide RCE via Hub Connector on Multisite7.2CISA ADP v3.10.4%2026-09-04Fix
CVE-2026-19205User Enumeration in GastroMenum's GastroMenum Web Panel7.5CNA v3.10.2%2026-09-04Fix
CVE-2026-19081Gastromenum Ticket and QR Menu System missing authorization4.3CNA v3.10.2%2026-09-04Fix
CVE-2026-19080Username Enumeration in Menulux Software's Menulux Portal7.5CNA v3.10.3%2026-09-04Fix
CVE-2026-19057Stored XSS in Gastromenum's Gastromenum Ticket and QR Menu System5.4CNA v3.10.1%2026-09-04Fix
CVE-2026-19051Plaintext storage of User Credentials in Menulux Software's Menulux Portal7.1CNA v3.10.2%2026-09-04Fix
CVE-2026-19043Authorization bypass Critical POS Management functions in Menulux Software's Menulux Portal4.3CNA v3.10.2%2026-09-04Fix
CVE-2026-18957Stored XSS in Menulux Software's Menulux Portal5.4CNA v3.10.2%2026-09-04Fix
CVE-2026-18905IBM ContextForge MCP Gateway is affected by server-side request forgery7.7CNA v3.10.3%2026-09-04Fix
CVE-2026-18887IBM i is affected by sensitive information exposure vulnerability in PASE []6.5CNA v3.10.3%2026-09-04Fix
CVE-2026-18858IBM i is affected by Obtaining Sensitive Information vulnerability in OpenSSH []3.3CNA v3.10.1%2026-09-04Fix
CVE-2026-18658IBM Operational Decision Manager for Aug 2026 multiple CVEs addressed9.8CNA v3.10.4%2026-09-04Fix
CVE-2026-18567IBM Db2 Mirror for i Unix domain socket race condition4.4CNA v3.10.1%2026-09-04Fix
CVE-2026-18540undici vulnerable to downstream response splitting via retry interceptor3.7CNA v3.10.2%2026-09-04Fix
CVE-2026-18489IBM ContextForge Translate is affected by cross-client credential context confusion7.4CNA v3.10.3%2026-09-04Fix
CVE-2026-18486IBM ContextForge MCP Gateway is affected by credential disclosure and privilege escalation8.8CNA v3.10.3%2026-09-04Fix
CVE-2026-18341IBM i is affected by buffer overflow vulnerability []6.3CNA v3.10.2%2026-09-04Fix
CVE-2026-18221IBM i is affected by improper authorization and Authentication vulnerabilities in DDM / DRDA [, ]8.1CNA v3.10.3%2026-09-04Fix
CVE-2026-18198SQL injection in TAC Information's GoldenHorn8.8CNA v3.10.2%2026-09-04
CVE-2026-18175IBM i is affected by improper authorization and Authentication vulnerabilities in DDM / DRDA [, ]8.1CNA v3.10.2%2026-09-04Fix
CVE-2026-18149undici vulnerable to denial of service via orphaned RetryHandler response body5.9CNA v3.10.4%2026-09-04Fix
CVE-2026-18078IBM i is affected by denial of service vulnerability in Save Restore []4.3CNA v3.10.3%2026-09-04Fix
CVE-2026-18076IBM i Debug Server memory leak4.3CNA v3.10.3%2026-09-04Fix
CVE-2026-18073IBM i Debug Server OS command injection4.4CNA v3.10.1%2026-09-04Fix
CVE-2026-17631IBM Langflow OSS flow component URL validation server-side request forgery5.0CNA v3.10.2%2026-09-04Fix
CVE-2026-17627IBM Langflow OSS voice-mode WebSocket endpoint insecure direct object reference4.9CNA v3.10.2%2026-09-04Fix
CVE-2026-17622IBM Langflow OSS file and knowledge base handling path traversal6.5CNA v3.10.5%2026-09-04Fix
CVE-2026-17621IBM Langflow OSS file and knowledge base handling path traversal5.4CNA v3.10.3%2026-09-04Fix
CVE-2026-17517Content Views views status filter information disclosure5.3CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-17499IBM i Debug Server OS command injection4.4CNA v3.10.1%2026-09-04Fix
CVE-2026-17483IBM Db2 Mirror for i improper access control4.3CNA v3.10.2%2026-09-04Fix
CVE-2026-17470IBM i is affected by denial of service vulnerabilities in Line Printer daemon [, ]5.3CNA v3.10.4%2026-09-04Fix
CVE-2026-17469IBM i is affected by denial of service vulnerabilities in Line Printer daemon [, ]5.3CNA v3.10.2%2026-09-04Fix
CVE-2026-17444IBM App Connect Enterprise and Integration Bus for z/OS XML external entity injection5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-17443IBM App Connect Enterprise and Integration Bus for z/OS XML external entity injection5.3CNA v3.10.3%2026-09-04Fix
CVE-2026-17442IBM App Connect Enterprise and Integration Bus for z/OS trace logs vulnerability5.1CNA v3.10.1%2026-09-04Fix
CVE-2026-17440IBM App Connect Enterprise and Integration Bus for z/OS uncontrolled recursion5.5CNA v3.10.1%2026-09-04Fix
CVE-2026-17274IBM i Debug Server insufficient randomness5.4CNA v3.10.2%2026-09-04Fix
CVE-2026-17273IBM i Debug Server null pointer dereference6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-17270IBM i Debug Server stack-based buffer overflow4.3CNA v3.10.2%2026-09-04Fix
CVE-2026-17259IBM i Debug Server stack-based buffer overflow4.3CNA v3.10.4%2026-09-04Fix
CVE-2026-17255IBM i is affected by denial of service vulnerability []4.3CNA v3.10.4%2026-09-04Fix
CVE-2026-17207IBM i is affected by denial of service vulnerabilities in NFS [, ]6.5CNA v3.10.3%2026-09-04Fix
CVE-2026-17057IBM i is affected by denial of service vulnerabilities in NFS [, ]6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-16941IBM i is affected by an incorrect authorization vulnerability []4.3CNA v3.10.2%2026-09-04Fix
CVE-2026-16892IBM i is affected by an improper authentication vulnerability in Network Authentication service []5.4CNA v3.10.3%2026-09-04Fix
CVE-2026-16826IBM i debug server OS command injection5.3CNA v3.10.1%2026-09-04Fix
CVE-2026-16693IBM i is affected by Cryptographic Algorithm Weakness in DCM []4.4CNA v3.10.1%2026-09-04Fix
CVE-2026-16689IBM App Connect Enterprise and Integration Bus for z/OS adapter node logging information disclosure6.2CNA v3.10.1%2026-09-04Fix
CVE-2026-16660IBM Db2 Mirror for i out-of-bounds read5.3CNA v3.10.4%2026-09-04Fix
CVE-2026-16281Classified Listing WordPress plugin arbitrary Attachment deletion and Listing Image tampering7.1CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-16180IBM App Connect Enterprise z/OS adapter toolkit XML entity expansion5.7CNA v3.10.2%2026-09-04Fix
CVE-2026-15937Checkmk improper certificate validation5.3CNA v4.00.1%2026-09-04Fix
CVE-2026-14470IBM Langflow OSS file and knowledge base components path traversal6.5CNA v3.10.3%2026-09-04Fix
CVE-2026-14466Stormshield Network Security possible XSS in the SNS web administration panel4.3CNA v3.10.2%2026-09-04
CVE-2026-14350Vulnerabilities exists in IBM Cloud Pak for Data System5.3CNA v3.10.2%2026-09-04Fix
CVE-2026-13297IBM Verify Identity Access Advanced Access Control information disclosure7.5CISA ADP v3.10.2%2026-09-04Fix
CVE-2026-13148Softing smartLink HW-PN memory leak in scan method6.3CNA v4.00.2%2026-09-04Fix
CVE-2026-12483LearnDash LMS WordPress plugin arbitrary file upload7.5CNA v3.10.4%2026-09-04Fix
CVE-2026-11613Divi Ajax Filter WordPress plugin unauthenticated local file inclusion9.8CNA v3.10.6%2026-09-04Reported exploitedExploit codeFix
CVE-2026-9317Nango missing authentication RCE via runner tRPC server9.2CNA v4.01.3%2026-09-04Fix
CVE-2026-9186IBM Langflow OSS MCP configuration installer improper access control6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-9138IBM Langflow OSS file-save component path traversal6.5CNA v3.10.4%2026-09-04Fix
CVE-2026-8447Langflow Playground chat Markdown rendering stored cross-site scripting6.1CNA v3.10.3%2026-09-04Fix
CVE-2026-6958Acunetix local privilege escalation via wvsc.exe8.5CNA v4.00.2%2026-09-04
CVE-2026-6217Information disclosure in Pik Online Software's Portal6.3CNA v3.10.2%2026-09-04
CVE-2026-5522IBM QRadar contains hard-coded credentials6.7CNA v3.10.1%2026-09-04Fix
CVE-2026-4644Improper authorization in Google Cloud Integration Connectors leads to Project takeover8.5CNA v4.00.4%2026-09-04Fix
CVE-2026-85458Divide-by-zero in Xpdf due to zero-height Type 3 glyph2.1CNA v4.00.1%2026-09-03
CVE-2026-85456MOOS-IvP alog Splitting path traversal on Windows6.8CNA v4.00.2%2026-09-03
CVE-2026-85455MOOS core-moos MOOSDB out-of-bounds read via Short Packet8.8CNA v4.00.7%2026-09-03
CVE-2026-85454MOOS core-moos off-by-one buffer overflow in Serial Telegram Handling5.2CNA v4.00.3%2026-09-03
CVE-2026-85453MOOS core-moos MOOSDB HTTP pages stored cross-site scripting5.3CNA v4.00.3%2026-09-03
CVE-2026-85452MOOS ui-moos uMS buffer overflow via Long MOOS Identifiers8.7CNA v4.00.7%2026-09-03
CVE-2026-85451MOOS core-moos Remote Process Termination via Hard-Coded Multicast Passphrase7.1CNA v4.00.4%2026-09-03
CVE-2026-85450MOOS core-moos MOOSDB HTTP server resource exhaustion8.7CNA v4.00.6%2026-09-03
CVE-2026-85449MOOS-IvP pMarineViewer Unbounded Memory Consumption via NODE_REPORT8.7CNA v4.00.9%2026-09-03
CVE-2026-85448MOOS-IvP uFldShoreBroker Unbounded Community State Retention8.7CNA v4.00.8%2026-09-03
CVE-2026-85447MOOS-IvP pRealm Unbounded REALMCAST_REQ Subscription denial of service8.7CNA v4.00.8%2026-09-03
CVE-2026-85446MOOS-IvP uFldNodeComms Quadratic Processing denial of service8.7CNA v4.00.8%2026-09-03
CVE-2026-85445MOOS-IvP BHV_IPF Demultiplexer memory exhaustion via Packet Count8.7CNA v4.00.8%2026-09-03
CVE-2026-85444MOOS-IvP out-of-bounds read in isBraced, isQuoted and isChevroned8.7CNA v4.00.8%2026-09-03
CVE-2026-85443MOOS core-moos MOOSDB Accept Loop denial of service8.7CNA v4.00.6%2026-09-03
CVE-2026-85442MOOS core-moos MOOSDB denial of service via Unbounded Packet Allocation8.7CNA v4.00.8%2026-09-03
CVE-2026-85441MOOS core-moos MOOSDB denial of service via Negative Serialized String Length8.7CNA v4.00.7%2026-09-03
CVE-2026-85440MOOS core-moos MOOSDB Pre-authentication heap overflow via Negative Packet Length9.3CNA v4.01.0%2026-09-03
CVE-2026-85439MOOS-IvP alogsplit command injection via Input Pathname8.5CNA v4.00.5%2026-09-03
CVE-2026-85438MOOS-IvP out-of-bounds write via Unvalidated IvP Payload Counts9.3CNA v4.01.1%2026-09-03
CVE-2026-85437MOOS-IvP buffer overflow in IvP Function String Decoders9.3CNA v4.01.4%2026-09-03
CVE-2026-85436MOOS essential-moos pMOOSBridge Heap Corruption via Negative UDP Length8.7CNA v4.02.1%2026-09-03
CVE-2026-85435MOOS-IvP uFldNodeBroker Unauthenticated Shore Route Enrollment9.3CNA v4.00.4%2026-09-03
CVE-2026-85434MOOS-IvP uFldShoreBroker Bridge route injection via Unverified Node Ping9.3CNA v4.00.4%2026-09-03
CVE-2026-85433MOOS essential-moos pShare Unauthorized Runtime Route Reconfiguration9.3CNA v4.00.8%2026-09-03
CVE-2026-85432MOOS core-moos MOOSDB Message Source spoofing via Wire Identity8.8CNA v4.00.5%2026-09-03
CVE-2026-85431MOOS essential-moos pMOOSBridge Unauthenticated UDP Packet injection8.7CNA v4.03.4%2026-09-03
CVE-2026-85430MOOS essential-moos pShare Unauthenticated UDP Datagram Republishing8.8CNA v4.01.7%2026-09-03
CVE-2026-85429MOOS-IvP uFldNodeComms Node Message Source spoofing8.7CNA v4.00.4%2026-09-03
CVE-2026-85428MOOS core-moos MOOSDB HTTP Server Unauthenticated Variable Write9.3CNA v4.00.8%2026-09-03
CVE-2026-85427MOOS essential-moos pAntler remote code execution via Unauthenticated MISSION_FILE9.8NVD v3.10.6%2026-09-03
CVE-2026-85426MOOS-IvP uMemWatch command injection via MOOS Client Names9.3CNA v4.00.9%2026-09-03
CVE-2026-85425MOOS-IvP iSay command injection via SAY_MOOS9.3CNA v4.01.8%2026-09-03
CVE-2026-85424MOOS core-moos missing authentication for MOOSDB Publish, Subscribe and DB_CLEAR9.3CNA v4.00.8%2026-09-03
CVE-2026-85396rubyzip path traversal in Zip::Entry#extract via Sibling-Directory Prefix8.7CNA v4.00.6%2026-09-03Fix
CVE-2026-85395UnoPim missing authorization on Integration Management Routes7.1CNA v4.00.4%2026-09-03Fix
CVE-2026-85394python-jose Algorithm Confusion via DER-encoded Public Key as HMAC Secret9.3CNA v4.00.4%2026-09-03Fix
CVE-2026-85393digitalbazaar forge node-forge RSA PKCS#1 Signature Forgery via Nested DigestAlgorithm Padding8.7CNA v4.00.3%2026-09-03Fix
CVE-2026-85392Peppermint authorization bypass on the User Logout endpoint5.3CNA v4.00.5%2026-09-03
CVE-2026-85391Peppermint Use of Hard-coded JWT Signing Secret in docker-compose.yml9.3CNA v4.00.6%2026-09-03
CVE-2026-85390Checkmate missing authorization on Maintenance Window, Notification, and Check Deletion Routes7.1CNA v4.00.5%2026-09-03
CVE-2026-85389Worklenz authorization bypass on Task-Scoped endpoints7.1CNA v4.00.5%2026-09-03Fix
CVE-2026-85388Worklenz SQL injection via the sort-field Query parameter8.6CNA v4.00.5%2026-09-03Fix
CVE-2026-85378light0011 cms Chapter Controller ChapterController.class.php _initialize authorization6.9CNA v4.00.5%2026-09-03
CVE-2026-85309Ultimate Maps by Supsystic WordPress plugin broken access control5.3CNA v3.10.3%2026-09-03Fix
CVE-2026-85308SureForms WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-09-03Fix
CVE-2026-85307KP Agent Ready WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-09-03Fix
CVE-2026-85306MountDev AI MCP Connector for WordPress plugin broken access control6.5CNA v3.10.3%2026-09-03Fix
CVE-2026-85305SEOPress WordPress plugin server side request forgery (SSRF)5.4CNA v3.10.2%2026-09-03Fix
CVE-2026-85304Unlimited Elements For Elementor WordPress plugin broken access control5.3CNA v3.10.3%2026-09-03Fix
CVE-2026-85303Booking and Rental Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-03Fix
CVE-2026-85302WPKoi Templates for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-03Fix
CVE-2026-85242Server-side request forgery via Favicon Redirect to Local Network Resources in PlaywrightCapture6.9CNA v4.00.4%2026-09-03Fix
CVE-2026-85241SpecterOps BloodHound Graph Write endpoint v2.go NewV2API improper authorization5.3CNA v4.00.4%2026-09-03Fix
CVE-2026-85239MISP Event Template Definition Validation Bypass allows Persistent denial of service6.5NVD v3.10.4%2026-09-03
CVE-2026-85238Session fixation in MISP CustomAuth Authentication allows session hijacking6.8NVD v3.10.3%2026-09-03
CVE-2026-85237MISP Missing Rate Limiting in Email OTP Verification allows brute-force authentication bypass8.1v3.10.5%2026-09-03
CVE-2026-85236MISP cullEmptyEvents CSRF allows Irreversible Deletion of Events via GET request8.8v3.10.3%2026-09-03
CVE-2026-85230MISP Dashboard Button widget allows Persistent JavaScript URL injection5.4v3.10.3%2026-09-03
CVE-2026-85227Reflected cross-site scripting in MISP Event Filtering6.1v3.10.3%2026-09-03
CVE-2026-85226MISP OnDemand Correlation Engine missing access control allows Disclosure of Restricted Correlations4.3v3.10.3%2026-09-03
CVE-2026-85225code-projects Doctor Appointment System patient_login.php SQL injection6.9CNA v4.00.4%2026-09-03
CVE-2026-85224D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection9.4CNA v4.03.6%2026-09-03Emerging Threats
CVE-2026-85223D-Link DNS-340L CGI dropbox.cgi os command injection9.4CNA v4.03.3%2026-09-03Emerging Threats
CVE-2026-85222D-Link DNS-340L Add-On Center addon_center.cgi os command injection9.4CNA v4.03.6%2026-09-03
CVE-2026-85221MISP CurlClient TLS Peer Verification Disabled by Default enables man-in-the-middle Attacks9.1v3.10.3%2026-09-03
CVE-2026-85216MISP LDAP and LinOTP authentication bypass via Empty or Invalid Credentials9.8v3.10.9%2026-09-03
CVE-2026-85214vhr missing authorization in PUT /hr/info allows arbitrary Profile Overwrite7.2CNA v4.00.5%2026-09-03
CVE-2026-85213killbill kill Bill missing authorization on AdminResource endpoints7.2CNA v4.00.4%2026-09-03
CVE-2026-85212CRMEB missing authorization via Inert verifyAuth Role Check8.7CNA v4.00.6%2026-09-03
CVE-2026-85211HumanSignal label-studio Label Studio Cross-Organization Storage URI Resolution8.3CNA v4.00.4%2026-09-03
CVE-2026-85210Oppia missing authorization on AdminRoleHandler GET5.3CNA v4.00.3%2026-09-03
CVE-2026-85208itsourcecode Online Medicine Delivery System order management controller unrestricted file upload6.9CNA v4.00.5%2026-09-03
CVE-2026-85207itsourcecode Online Medicine Delivery System index.php cross-site scripting5.1CNA v4.00.3%2026-09-03
CVE-2026-85205itsourcecode Online Medicine Delivery System Wishlist controller.php addwishlist SQL injection5.3CNA v4.00.3%2026-09-03
CVE-2026-85199Eclipse aeriOS path traversal8.8CNA v4.00.9%2026-09-03
CVE-2026-85187itsourcecode Online Medicine Delivery System order status update SQL injection6.9CNA v4.00.4%2026-09-03
CVE-2026-85186itsourcecode Online Medicine Delivery System Customer Controller unrestricted upload5.3CNA v4.00.4%2026-09-03
CVE-2026-85183Taipy Cross-Site WebSocket Hijacking via Wildcard socket.io CORS9.3CNA v4.00.2%2026-09-03
CVE-2026-85182vhr missing authorization in PUT /hr/pass allows Cross-Account Password Change7.7CNA v4.00.4%2026-09-03
CVE-2026-85181CAT Session Cookie Forgery via Unkeyed hashCode Checksum9.3CNA v4.00.7%2026-09-03
CVE-2026-85180Ollama SSRF via Cross-Host Tensor Blob Redirect8.7CNA v4.00.5%2026-09-03
CVE-2026-85179HumanSignal label-studio Label Studio SSRF via Unvalidated Webhook URL8.4CNA v4.00.4%2026-09-03
CVE-2026-85178Helicone Cross-Tenant Provider key disclosure via Missing Organization Filter8.3CNA v4.00.4%2026-09-03
CVE-2026-85177CRMEB Unauthorized Message Modification via edit_message5.3CNA v4.00.3%2026-09-03
CVE-2026-85176DbGate arbitrary file read and Write via file:// jslid8.7CNA v4.00.6%2026-09-03
CVE-2026-85175SiYuan TLS Private key disclosure via getFile8.7CNA v4.00.3%2026-09-03Fix
CVE-2026-85174SiYuan API token exposure via Log file8.7CNA v4.00.5%2026-09-03Fix
CVE-2026-85173n8n missing authorization via Insights API4.3v3.10.3%2026-09-03Fix
CVE-2026-85172n8n SSRF via Request Helper URI Validation Bypass6.4v3.10.3%2026-09-03Fix
CVE-2026-85171n8n credential exposure via Error Logging6.5NVD v3.10.6%2026-09-03Fix
CVE-2026-85170n8n Local File Read and SSRF via Gmail and Brevo nodes6.5NVD v3.10.4%2026-09-03Fix
CVE-2026-85169n8n remote code execution via $fromAI Prototype leak8.8v3.10.9%2026-09-03Fix
CVE-2026-85168n8n remote code execution via Git Node8.8v3.10.8%2026-09-03Fix
CVE-2026-85167n8n Query injection via Elasticsearch Firestore Nodes6.5v3.10.4%2026-09-03Fix
CVE-2026-85166n8n Credential Exfiltration via Workflow Tool Node6.5NVD v3.10.4%2026-09-03Fix
CVE-2026-85165n8n Expression sandbox bypass via SpreadElement9.9v3.10.6%2026-09-03Fix
CVE-2026-85164WWBN AVideo server-side request forgery via set_api_userImages7.1CNA v4.00.3%2026-09-03
CVE-2026-85163AVideo server-side request forgery via epg_link parameter7.1CNA v4.00.4%2026-09-03
CVE-2026-85162AVideo through c91b5975d CSRF via saveLive.php7.1CNA v4.00.2%2026-09-03
CVE-2026-85161AVideo removePoster.php cross-site request forgery file deletion5.3CNA v4.00.1%2026-09-03Fix
CVE-2026-85160AVideo through c91b5975d CSRF and path traversal via stopLive.php7.2CNA v4.00.4%2026-09-03
CVE-2026-85159AVideo reflected XSS via cancelUri in userLogin.php5.3CNA v4.00.3%2026-09-03
CVE-2026-85158AVideo reflected XSS via videoEmbeded.php link parameter5.3CNA v4.00.3%2026-09-03
CVE-2026-85157WWBN AVideo broken access control via feed/index.php program_id6.9CNA v4.00.3%2026-09-03
CVE-2026-85156WWBN AVideo broken access control via Channel page6.9CNA v4.00.3%2026-09-03Fix
CVE-2026-85155WWBN AVideo SQL injection via get.json.php APIName channels8.7CNA v4.00.5%2026-09-03
CVE-2026-85154WWBN AVideo authentication bypass via Non-Expiring video_id_hash9.3CNA v4.00.6%2026-09-03
CVE-2026-85150Red Hat Enterprise Linux 10 GStreamer's RTSP support library null pointer dereference7.5CNA v3.10.5%2026-09-03Fix
CVE-2026-85138SeaCMS WeChat index.php addslashes SQL injection6.9CNA v4.00.4%2026-09-03
CVE-2026-85137SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection6.9CNA v4.00.5%2026-09-03
CVE-2026-85135ILIAS MediaPool ZipAdapter.php uploadMultipleSubtitleFileObject unrestricted upload5.3CNA v4.00.4%2026-09-03Fix
CVE-2026-85124@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments7.5CNA v3.10.7%2026-09-03Fix
CVE-2026-85110Tenda HG10 Boa Web Server formWlanSetup buffer overflow8.7CNA v4.00.9%2026-09-03
CVE-2026-85109Tenda HG10 Boa Web Server formLogin buffer overflow9.3CNA v4.01.1%2026-09-03
CVE-2026-85107NousResearch hermes-agent Electron main process resource allocation resource exhaustion5.3CNA v4.00.5%2026-09-03
CVE-2026-85106NousResearch hermes-agent Link Title Fetch index.tsx fetchLinkTitle server-side request forgery5.3CNA v4.00.3%2026-09-03
CVE-2026-85105NousResearch hermes-agent Session Management s71.py _sess_nowait authorization6.9CNA v4.00.5%2026-09-03
CVE-2026-851002FastLabs agent-squad streaming agent response routing resource exhaustion5.3CNA v4.00.5%2026-09-03
CVE-2026-85093cheshire-cat-ai core cheshire Cat AI Memory Collection endpoint information disclosure7.1CNA v4.00.4%2026-09-03
CVE-2026-85092LiME arbitrary file overwrite via symlink following5.2CNA v4.00.2%2026-09-03
CVE-2026-85091zlib heap buffer overflow via gz_vacate8.3CNA v4.00.6%2026-09-03Fix
CVE-2026-85090FreeRDP heap out-of-bounds read via AVC4445.3CNA v4.00.3%2026-09-03Fix
CVE-2026-85089FreeRDP information disclosure via uninitialized heap memory7.1CNA v4.00.4%2026-09-03Fix
CVE-2026-85063adaltas node-csv csv-parse columns option prototype pollution6.9CNA v4.00.6%2026-09-03Fix
CVE-2026-85062Colord: Slow rejection of oversized malformed color strings6.9CNA v4.00.5%2026-09-03Fix
CVE-2026-85061MapLibre GL JS: XSS Sanitizer Bypass in DOM.sanitize via Live NamedNodeMap Removal Skip10.0CNA v3.10.5%2026-09-03Fix
CVE-2026-85053Google Chrome CacheStorage resource exposure8.8CISA ADP v3.10.4%2026-09-03Fix
CVE-2026-85052Google Chrome CrashReporting out-of-bounds read3.1CISA ADP v3.10.2%2026-09-03Fix
CVE-2026-85051Google Chrome Compositing type confusion8.8CISA ADP v3.10.5%2026-09-03Fix
CVE-2026-85050Google Android WebGL in Google Chrome on out-of-bounds write9.6CISA ADP v3.10.5%2026-09-03Fix
CVE-2026-85049Google Chrome Skia use-after-free8.8CISA ADP v3.10.3%2026-09-03Fix
CVE-2026-85048Google Chrome Compositing use-after-free8.3CISA ADP v3.10.4%2026-09-03Exploit codeFix
CVE-2026-85047Google Chrome Transactions Platform improper input validation9.6CISA ADP v3.10.5%2026-09-03Fix
CVE-2026-85046Google Chromium V8 type confusion8.8CISA ADP v3.148.9%2026-09-03KEVExploit codeKCVFix
CVE-2026-85045Google Chrome V8 race condition7.5CISA ADP v3.10.3%2026-09-03Exploit codeFix
CVE-2026-85044Google Chrome operation on a released resource6.5CISA ADP v3.10.3%2026-09-03Fix
CVE-2026-85043Google Chrome Network incomplete cleanup9.1CISA ADP v3.10.4%2026-09-03Fix
CVE-2026-85042Google Chrome DevTools use-after-free9.6CISA ADP v3.10.5%2026-09-03Fix
CVE-2026-85040ZhongBangKeJi CRMEB Custom Scheduled Task feature save eval os command injection5.1CNA v4.02.1%2026-09-03
CVE-2026-85031TOTOLINK CP450 cstecgi.cgi buffer overflow9.4CNA v4.00.8%2026-09-03
CVE-2026-85030HKUDS AI-Trader selfRegister API endpoint routes_agent.py logic error6.3CNA v4.00.5%2026-09-03
CVE-2026-85028Creation of temporary file in directory with insecure permissions in AWS FPGA Development Kit7.3CNA v4.00.2%2026-09-03Fix
CVE-2026-85022langgenius dify WebApp Sign-In mail-and-password-auth.tsx router.replace cross-site scripting5.1CNA v4.00.4%2026-09-03
CVE-2026-85021langgenius dify Splash Layout splash.tsx router.replace cross-site scripting5.3CNA v4.00.5%2026-09-03
CVE-2026-85012AWS @amazon-codecatalyst/blueprints.blueprint OS command improper neutralization8.5CNA v4.02.3%2026-09-03Fix
CVE-2026-84989ntopng tag management REST API missing authorization7.1CNA v3.10.4%2026-09-03Fix
CVE-2026-84971MongoDB libmongocrypt persistent client crash loop7.1CNA v4.00.3%2026-09-03Fix
CVE-2026-84970MongoDB C Driver JSON parsing component of the numeric truncation5.9CNA v4.00.1%2026-09-03Fix
CVE-2026-84969MongoDB C Driver heap overflow6.3CNA v4.00.3%2026-09-03Fix
CVE-2026-84968MongoDB PHP Driver heap out-of-bounds read via corrupt nested BSON in field path error message6.9CNA v4.00.2%2026-09-03Fix
CVE-2026-84967Arbitrary command execution via shell-expanded connection string in Launch MongoDB Shell terminal5.1CNA v4.00.3%2026-09-03Fix
CVE-2026-84966MongoDB C Driver BSON element injection via NUL-embedded document keys in builder append5.9CNA v4.00.1%2026-09-03Fix
CVE-2026-84965MongoDB C Driver heap write primitive via size round-up wrap during JSON parsing on 32-bit builds5.9CNA v4.00.1%2026-09-03Fix
CVE-2026-84964MongoDB C Driver double free8.2CNA v4.00.3%2026-09-03Fix
CVE-2026-84963MongoDB C Driver JSON parsing component of the MongoDB incorrect numeric conversion6.3CNA v4.00.3%2026-09-03Fix
CVE-2026-84962MongoDB libmongocrypt GCP KMS key identifier parsing CRLF injection5.7CNA v4.00.2%2026-09-03Fix
CVE-2026-84849Pre-Orders for WooCommerce WordPress plugin bypass vulnerability vulnerability6.5CNA v3.10.3%2026-09-03
CVE-2026-84848Quick Event Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03
CVE-2026-84847Quick Event Manager WordPress plugin broken access control7.5CNA v3.10.3%2026-09-03
CVE-2026-84836WC Ukraine Shipping WordPress plugin insecure direct object references (IDOR)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-84834JobSearch WordPress plugin PHP object injection9.8CNA v3.10.6%2026-09-03
CVE-2026-84832SEPPmail Secure Email Gateway (SEG) unsafe deserialization in the REST interface8.6CNA v4.00.6%2026-09-03Fix
CVE-2026-84831SEPPmail Secure Email Gateway (SEG) mandatory MFA bypass before enrollment7.7CNA v4.00.5%2026-09-03Fix
CVE-2026-84830SEPPmail Secure Email Gateway OS command injection in privileged configuration handling8.6CNA v4.01.2%2026-09-03Fix
CVE-2026-84815Enfold WordPress theme cross-site scripting (XSS)5.8CNA v3.10.2%2026-09-03Fix
CVE-2026-84814Bricksforge WordPress plugin privilege escalation9.8CNA v3.10.5%2026-09-03Fix
CVE-2026-84813GeoDirectory WordPress plugin SQL injection9.3CNA v3.10.4%2026-09-03Reported exploitedFix
CVE-2026-84812BP Better Messages WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-84779Agentimus AI SEO, llms.txt and MCP for AI Agents WordPress plugin broken access control8.1CNA v3.10.4%2026-09-03Fix
CVE-2026-84778Migrate Guru Site Migration and Cloning WordPress plugin denial of service Attack7.5CNA v3.10.5%2026-09-03Fix
CVE-2026-84777Really Simple SSL WordPress plugin 2FA bypass vulnerability7.4CNA v3.10.4%2026-09-03Fix
CVE-2026-84776MalCare Security WordPress plugin denial of service Attack7.5CNA v3.10.5%2026-09-03Fix
CVE-2026-84774WP Statistics WordPress plugin cross-site scripting (XSS)6.1CNA v3.10.3%2026-09-03Fix
CVE-2026-84773EWWW Image Optimizer WordPress plugin cross-site scripting (XSS)7.2CNA v3.10.3%2026-09-03Fix
CVE-2026-84769Business Directory WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-09-03Fix
CVE-2026-84768VikAppointments Services Booking Calendar WordPress plugin SQL injection9.3CNA v3.10.4%2026-09-03Fix
CVE-2026-84767BookIt WordPress plugin bypass vulnerability vulnerability5.3CNA v3.10.2%2026-09-03Fix
CVE-2026-84766FluentBooking Pro WordPress plugin bypass vulnerability vulnerability5.9CNA v3.10.3%2026-09-03Fix
CVE-2026-84765Breadcrumb NavXT WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-84763RTMKit WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-84762WP EasyPay WordPress plugin bypass vulnerability vulnerability5.3CNA v3.10.3%2026-09-03Fix
CVE-2026-84761LiteSpeed Cache WordPress plugin server side request forgery (SSRF)7.2CNA v3.10.3%2026-09-03Fix
CVE-2026-84758Business Directory WordPress plugin broken access control6.5CNA v3.10.3%2026-09-03Fix
CVE-2026-84757WP Compress WordPress plugin settings Change vulnerability8.2CNA v3.10.4%2026-09-03Fix
CVE-2026-84756WCFM Membership WordPress plugin privilege escalation7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-84755Mail Mint WordPress plugin broken access control6.5CNA v3.10.3%2026-09-03Reported exploitedFix
CVE-2026-84754WPFunnels WordPress plugin broken access control6.5CNA v3.10.3%2026-09-03Fix
CVE-2026-84753Mail Mint WordPress plugin PHP object injection9.8CNA v3.10.6%2026-09-03Exploit codeFix
CVE-2026-84752RTMKit WordPress plugin PHP object injection8.8CNA v3.10.5%2026-09-03Fix
CVE-2026-84736Eclipse aeriOS improper certificate validation8.3CNA v4.00.3%2026-09-03
CVE-2026-84238YITH Request a Quote for WooCommerce Premium WordPress plugin broken access control9.8CNA v3.10.5%2026-09-03Fix
CVE-2026-84215Timetics WordPress plugin broken access control6.5CNA v3.10.3%2026-09-03Fix
CVE-2026-84185jwcrypto JWS key ID improper signature verification5.9CNA v3.10.1%2026-09-03Fix
CVE-2026-83961Adobe ColdFusion improper authentication7.1CNA v3.10.4%2026-09-03Fix
CVE-2026-83959Substance3D Sampler heap-based buffer overflow7.8CNA v3.10.3%2026-09-03Fix
CVE-2026-83711Microsoft Azure Active Directory B2C elevation of privilege10.0CNA v3.10.8%2026-09-03Fix
CVE-2026-82918KEYENCE XG-X VisionTerminal XML external entity injection6.7CNA v4.00.2%2026-09-03
CVE-2026-82527R2R SQL injection via Retrieval Search Filter Key8.7CNA v4.00.5%2026-09-03
CVE-2026-82526R2R SQL injection via Vector Index Creation endpoint9.3CNA v4.00.7%2026-09-03
CVE-2026-82525Exterro FTK Imager XXE via Report.xml XSLT Processing6.8CNA v4.00.2%2026-09-03Fix
CVE-2026-82521parsedmarc path traversal via Forensic Report Subject6.3CNA v4.00.4%2026-09-03Fix
CVE-2026-82520parsedmarc zip bomb DoS via Compressed Email Attachments8.7CNA v4.00.8%2026-09-03Fix
CVE-2026-82302Incorrect authorization in Kibana leading to Unauthorized Configuration Modification8.1CNA v3.10.4%2026-09-03Fix
CVE-2026-82299Incorrect authorization in Kibana leading to information disclosure6.5CNA v3.10.4%2026-09-03Fix
CVE-2026-82298Incorrect authorization in Kibana leading to denial of service4.3CNA v3.10.4%2026-09-03Fix
CVE-2026-82180Eclipse Arrowhead authentication bypass by spoofing9.5CNA v4.00.3%2026-09-03
CVE-2026-82024LearnPress WordPress plugin stored XSS via Quiz Question Answer Titles5.1CNA v4.00.2%2026-09-03Fix
CVE-2026-82023LearnPress WordPress Plugin Broken Object-Level Authorization via Quiz Answer Insert5.3CNA v4.00.3%2026-09-03Fix
CVE-2026-81776WP QuickLaTeX WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03
CVE-2026-81773Ninja Forms File Uploads Extension WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03
CVE-2026-81300Calculation For Contact Form 7 WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-81295Under Construction WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-81292Simple Payment WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-03Fix
CVE-2026-81282Product Variations Swatches for WooCommerce WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-03Fix
CVE-2026-81281Graphene WordPress theme cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-03Fix
CVE-2026-80757Linux kernel SELinux policy loader vulnerability–0.2%2026-09-03Fix
CVE-2026-80756Linux kernel SELinux policy loader null pointer dereference–0.2%2026-09-03Fix
CVE-2026-80755Linux kernel SELinux policy loader vulnerability–0.2%2026-09-03Fix
CVE-2026-80754Linux kernel Synaptics RMI4 F55 touch sensor driver vulnerability7.8CNA v3.10.1%2026-09-03Fix
CVE-2026-80753Linux kernel ovpn driver vulnerability8.4CNA v3.10.2%2026-09-03Fix
CVE-2026-80752Linux kernel psxpad-spi driver null pointer dereference8.4CNA v3.10.2%2026-09-03Fix
CVE-2026-80751Linux kernel MediaTek MFG power domain driver vulnerability7.8CNA v3.10.2%2026-09-03Fix
CVE-2026-80750Linux kernel MediaTek power domain bus protection lookup vulnerability8.4CNA v3.10.2%2026-09-03Fix
CVE-2026-80749Linux kernel HDMI connector audio infoframe vulnerability7.1CNA v3.10.2%2026-09-03Fix
CVE-2026-80748Linux kernel loongson2 mmc data reorder vulnerability7.8CNA v3.10.2%2026-09-03Fix
CVE-2026-80747Linux kernel amdkfd CRAT table parser out-of-bounds read8.0CNA v3.10.1%2026-09-03Fix
CVE-2026-80746Linux kernel qcom dispcc-eliza clock driver vulnerability–0.2%2026-09-03Fix
CVE-2026-80745Linux kernel FP9931 regulator voltage selector table vulnerability8.4CNA v3.10.2%2026-09-03Fix
CVE-2026-80744Linux kernel netfilter nf_tables offload abort path reachable assertion–0.2%2026-09-03Fix
CVE-2026-80743Linux kernel Xilinx ASoC formatter PCM interrupt handlers null pointer dereference–0.2%2026-09-03Fix
CVE-2026-80742Linux kernel af_packet tpacket_snd vulnerability–0.2%2026-09-03Fix
CVE-2026-80741Linux kernel drm log kmsg record drawing out-of-bounds read7.1CNA v3.10.2%2026-09-03Fix
CVE-2026-80740Linux kernel drm log console scaling denial of service–0.2%2026-09-03Fix
CVE-2026-80739Linux kernel mlx5e TC offload flow deletion deadlock–0.2%2026-09-03Fix
CVE-2026-80738Linux kernel BPF TCP syncookie helpers vulnerability7.3CNA v3.10.2%2026-09-03Fix
CVE-2026-80737Linux kernel amba-pl011 serial driver DMA teardown vulnerability7.8CNA v3.10.1%2026-09-03Fix
CVE-2026-80736Linux kernel Thunderbolt bandwidth group reservation vulnerability7.8CNA v3.10.2%2026-09-03Fix
CVE-2026-80735Linux kernel ovpn socket handling out-of-bounds read7.3CNA v3.10.2%2026-09-03Fix
CVE-2026-80734Linux kernel btrfs inode mapping reachable assertion8.8CNA v3.10.6%2026-09-03Fix
CVE-2026-80733Linux kernel sk_mc_loop socket handling reachable assertion–0.2%2026-09-03Fix
CVE-2026-80732Linux kernel pata_sl82c105 driver use-after-free7.8CNA v3.10.2%2026-09-03Fix
CVE-2026-80731Linux kernel dev_validate_header out-of-bounds write7.8CNA v3.10.1%2026-09-03Fix
CVE-2026-80730Linux kernel ring buffer self-test null pointer dereference–0.2%2026-09-03Fix
CVE-2026-80729Linux kernel huge_memory folio split vulnerability–0.2%2026-09-03Fix
CVE-2026-80728Linux kernel amdgpu aperture mapping vulnerability–0.2%2026-09-03Fix
CVE-2026-80727Linux kernel x86 machine check CMCI handling vulnerability–0.2%2026-09-03Fix
CVE-2026-80726In the Linux kernel, the following vulnerability has been resolved: KVM: x86/mmu: WARN and clear role.invalid when creating a child shadow page Explicitly clear role.invalid when deriving a child shadow page's role from its parent to harden against bugs elsewhere in KVM, as violating KVM's invaria9.3CNA v3.1–2026-09-03Fix
CVE-2026-80515Eclipse Arrowhead incorrect authorization8.9CNA v4.00.5%2026-09-03
CVE-2026-80465Siemens Mendix SAML (Mendix 10 compatible) improper signature verification8.8CNA v4.00.3%2026-09-03Fix
CVE-2026-80254Shizen Connect ShizenBox2 (edge-app) insecure direct object reference7.1CNA v4.00.4%2026-09-03
CVE-2026-80253Shizen Connect ShizenBox2 (dev-conf) improper access control7.0CNA v4.00.3%2026-09-03
CVE-2026-80098Copilot Studio elevation of privilege9.3CNA v3.10.5%2026-09-03Fix
CVE-2026-79679B&R Industrial Automation mapp Services use of weak credentials7.0CNA v4.00.3%2026-09-03Fix
CVE-2026-78596Missing authorization in Kibana leading to Unauthorized Cross-Space Write Operations4.3CNA v3.10.3%2026-09-03Fix
CVE-2026-78595Missing authorization in Kibana Fleet plugin leading to Cross-Space agent data disclosure4.3CNA v3.10.3%2026-09-03Fix
CVE-2026-78593Improper control of generation of code in Kibana leading to privilege escalation4.3CNA v3.10.3%2026-09-03Fix
CVE-2026-78583Incorrect authorization in Kibana leading to privilege escalation8.1CNA v3.10.4%2026-09-03Fix
CVE-2026-78080Joomla extension feenders.de unauthenticated SQL injection in JooDatabase Lite9.3CNA v4.00.4%2026-09-03
CVE-2026-78069Joomla extension j2commerce.com missing authorization on Apps controller delegation chain in J2Store9.5CNA v4.00.4%2026-09-03
CVE-2026-78065J2Commerce J2Store guest checkout address insecure direct object reference7.1CNA v4.00.4%2026-09-03
CVE-2026-78064Joomla extension j2commerce.com Anonymous cart-record tampering8.8CNA v4.00.4%2026-09-03
CVE-2026-78000Joomla extension j2commerce.com open redirect in cart controller in J2Store5.3CNA v4.00.5%2026-09-03
CVE-2026-77999J2Commerce J2Store PayPal IPN listener vulnerability8.7CNA v4.00.4%2026-09-03
CVE-2026-77465toml-node TOML parser uncontrolled recursion7.5CNA v3.10.6%2026-09-03Fix
CVE-2026-76642util-linux libmount privilege escalation via Failed Mount Helper8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-76178OCS Inventory NG Ocsreports stored cross-site scripting9.2CNA v4.00.4%2026-09-03
CVE-2026-76177OCS Inventory NG Ocsreports server-side request forgery7.1CNA v4.00.4%2026-09-03
CVE-2026-76176OCS Inventory NG Ocsreports endpoint / SQL injection8.6CNA v4.00.3%2026-09-03
CVE-2026-76175OCS Inventory NG Ocsreports del_check parameter of the / SQL injection8.6CNA v4.00.3%2026-09-03
CVE-2026-76174OCS Inventory NG Ocsreports CSV file upload functionality of the arbitrary file upload9.4CNA v4.00.5%2026-09-03
CVE-2026-75602OpenList: Authenticated arbitrary file write6.5CNA v3.10.7%2026-09-03Fix
CVE-2026-75036Fleet: DNS exfiltration via Sprig getHostByName in Fleet.yaml Helm template preprocessing5.3CNA v4.00.2%2026-09-03Fix
CVE-2026-75035Rancher: Ext.cattle.io/v1 Token store: Cross-user token disclosure via label-selector scoping bypass7.1CNA v4.00.3%2026-09-03Fix
CVE-2026-75034Rancher: SAML Assertion Replay7.4CNA v3.10.3%2026-09-03Fix
CVE-2026-75033Rancher: Cross-Cluster secret leakage via Namespace projectId Annotation spoofing7.7CNA v3.10.3%2026-09-03Fix
CVE-2026-74769Dell PowerProtect Data Manager incorrect authorization6.5CNA v3.10.4%2026-09-03Fix
CVE-2026-74768Dell PowerProtect Data Manager server-side request forgery4.1CNA v3.10.4%2026-09-03Fix
CVE-2026-73600Dell PowerProtect Data Manager stack-based buffer overflow7.8CNA v3.10.2%2026-09-03Fix
CVE-2026-71963NousResearch hermes-agent Hermes Agent RCE via git core.fsmonitor Config injection8.6CNA v4.00.9%2026-09-03Exploit code
CVE-2026-71429uhop stream-json path filters denial of service6.2CNA v3.10.2%2026-09-03Fix
CVE-2026-71404SUSE Rancher GlobalRole controller insecure direct object reference8.7CNA v3.10.4%2026-09-03Fix
CVE-2026-71403Rancher: Identity-field mutation in /v3/users allows account hijack via principal rebind6.1CNA v3.10.4%2026-09-03Fix
CVE-2026-71224Red Hat Enterprise Linux 7 gfs2-utils: Gfs2-utils: Stack overflow4.7CNA v3.10.1%2026-09-03Fix
CVE-2026-71222Red Hat Enterprise Linux 7 gfs2-utils: Gfs2-utils: Heap out-of-bounds read5.3CNA v3.10.1%2026-09-03Fix
CVE-2026-71221Red Hat Enterprise Linux 7 gfs2-utils: Gfs2-utils: Stack out-of-bounds write7.0CNA v3.10.2%2026-09-03Fix
CVE-2026-71220Red Hat Enterprise Linux 7 gfs2-utils: Gfs2-utils: Stack out-of-bounds write7.0CNA v3.10.2%2026-09-03Fix
CVE-2026-71219Red Hat Enterprise Linux 7 gfs2-utils: Gfs2-utils: Stack overflow4.7CNA v3.10.1%2026-09-03Fix
CVE-2026-70352Microsoft Azure AI Language elevation of privilege10.0CNA v3.10.9%2026-09-03Fix
CVE-2026-70178Microsoft Fabric elevation of privilege8.5CNA v3.10.6%2026-09-03Fix
CVE-2026-69857Microsoft Azure Cosmos DB spoofing8.5CNA v3.10.6%2026-09-03Fix
CVE-2026-68860Dell PowerProtect Data Manager, versions 20.2.0.0 and below, contain a Reliance on Data/Memory Layout vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Launch of phishing attacks.6.8CNA v3.10.4%2026-09-03Fix
CVE-2026-67402WebPros ConfigServer Security and Firewall files accessible to external parties9.2CNA v4.00.5%2026-09-03Fix
CVE-2026-67398WebPros WHMCS missing authorization8.2CNA v4.00.5%2026-09-03Fix
CVE-2026-67397WebPros Plesk path traversal8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-65818Power Automate elevation of privilege8.5CNA v3.10.6%2026-09-03Fix
CVE-2026-64200Out-of-bounds read in during string conversionwhen parsing a .DSB file in DASYLab8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-64199measX DASYLab There is an out-of-bounds read8.6CNA v4.00.2%2026-09-03Fix
CVE-2026-64198Out-of-bounds read in file handling when parsing a .DSB file in DASYLab8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-64197measX DASYLab There is an out-of-bounds write8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-64196measX DASYLab There is an out-of-bounds write8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-64195measX DASYLab There is an out-of-bounds write8.5CNA v4.00.2%2026-09-03Fix
CVE-2026-63694Dell SmartFabric OS10 command injection5.0CNA v3.10.8%2026-09-03Fix
CVE-2026-63376BinaryMuse toml-node TOML parser prototype pollution8.2CNA v3.10.7%2026-09-03Fix
CVE-2026-63219geonetwork core-geonetwork unauthenticated file upload8.6CNA v3.10.5%2026-09-03Reported exploitedFix
CVE-2026-62916Microsoft Entra ID elevation of privilege9.1CNA v3.10.9%2026-09-03Fix
CVE-2026-62906Microsoft Discovery Studio information disclosure7.4CNA v3.10.9%2026-09-03Fix
CVE-2026-58400GeoNetwork vulnerable to remote code execution9.1CNA v3.11.2%2026-09-03Reported exploitedFix
CVE-2026-574451Hive gardens-v2 gardens v2: Approve-side dispute resolution drains active streaming escrow reserve8.7CNA v4.00.4%2026-09-03
CVE-2026-56128pfSense Plus / CE stored XSS via firewall_schedule_edit.php5.1CNA v4.01.1%2026-09-03Fix
CVE-2026-56127pfSense Plus / CE stored XSS via firewall_rules_edit.php5.1CNA v4.01.1%2026-09-03Fix
CVE-2026-56126pfSense Plus / CE stored XSS via status_monitoring.php5.1CNA v4.01.1%2026-09-03Fix
CVE-2026-55658Gardens v2 StreamingEscrow claim function missing authorization7.7CNA v3.10.3%2026-09-03
CVE-2026-539241Hive gardens-v2 gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes8.7CNA v4.00.4%2026-09-03Fix
CVE-2026-53728Medplum external auth callback open redirect7.1CNA v3.10.2%2026-09-03Fix
CVE-2026-53720pymonocypher argon2i_32 heap-based buffer overflow5.1CNA v4.00.2%2026-09-03Fix
CVE-2026-50554enchant97 Note Mark notes list endpoint information disclosure5.3CNA v3.10.4%2026-09-03Fix
CVE-2026-49509Samsung Open Source rlottie out-of-bounds read4.4CNA v3.10.2%2026-09-03
CVE-2026-49456Waku: Open redirect via `unstable_redirect` Helper3.1CNA v3.10.4%2026-09-03Fix
CVE-2026-49455Waku: Cross-Origin CSRF on RSC Server Action Dispatch6.5CNA v3.10.2%2026-09-03Fix
CVE-2026-48486Signum Node fee distribution integer overflow7.5CNA v3.10.3%2026-09-03Fix
CVE-2026-44506Medplum OAuth dynamic client registration endpoint information disclosure8.2CNA v3.10.4%2026-09-03Fix
CVE-2026-35160Dell SmartFabric OS10 Software OS command injection5.0CNA v3.10.8%2026-09-03Fix
CVE-2026-33630c-ares query-completion handling use-after-free7.5CNA v3.10.8%2026-09-03Fix
CVE-2026-19795IBM Qiskit SDK is vulnerable when deserializing QPY files and may overflow the available stack space6.2CNA v3.10.1%2026-09-03Fix
CVE-2026-18330Hard-coded Shared RSA-1024 Private Key in TP-Link Archer AX55 v46.1CNA v4.00.2%2026-09-03Fix
CVE-2026-18167Stack-based buffer overflow in TP-Link Archer AX55 v47.7CNA v4.00.3%2026-09-03Fix
CVE-2026-17539Hitachi Energy RTU500 series CMU firmware null pointer dereference5.9CNA v3.10.3%2026-09-03Fix
CVE-2026-15933Cleartext storage of Sensitive Credentials in OptimiDoc Server (On-Premise)6.9CNA v4.00.4%2026-09-03Fix
CVE-2026-15431HP Support Assistant potential escalation of privilege7.3CNA v4.00.1%2026-09-03Fix
CVE-2026-9854Hitachi Energy MicroSCADA SYS600 flawed authentication8.5CNA v4.00.1%2026-09-03Fix
CVE-2026-9853Hitachi Energy MicroSCADA SYS600 flawed authentication8.5CNA v4.00.1%2026-09-03Fix
CVE-2026-9852Hitachi Energy MicroSCADA SYS600 CSV injection4.6CNA v4.00.2%2026-09-03Fix
CVE-2026-9745IBM Netezza Software S3 bucket ownership validation vulnerability6.5CNA v3.10.3%2026-09-03Fix
CVE-2026-9744IBM Netezza Software improper certificate validation5.3CNA v3.10.2%2026-09-03Fix
CVE-2026-9736IBM Netezza Software log message handling log injection5.3CNA v3.10.3%2026-09-03Fix
CVE-2026-9036IBM Netezza Software improper certificate validation5.9CNA v3.10.2%2026-09-03Fix
CVE-2026-8862IBM Netezza Software container registry credentials vulnerability7.5CNA v3.10.4%2026-09-03Fix
CVE-2026-6071Code execution vulnerability in Arena®7.5CNA v4.00.5%2026-09-03Fix
CVE-2026-3852Divi WordPress theme stored cross-site scripting6.4CNA v3.10.3%2026-09-03Fix
CVE-2026-3416WSO2 API Manager webhook HMAC secret generation insufficient randomness5.9CNA v3.10.4%2026-09-03Fix
CVE-2026-2573GutenKit WordPress plugin authenticated (Contributor+) stored cross-site scripting via postBodyCss6.4CNA v3.10.3%2026-09-03Fix
CVE-2026-85084Out-of-bounds write in TizenFX MediaBufferBase indexer setter due to missing bounds check6.3CNA v3.10.1%2026-09-02
CVE-2026-84888RightNow-AI OpenFang tool_runner.rs shell_exec memory allocation5.3CNA v4.00.5%2026-09-02
CVE-2026-84887simular-ai Agent-S Model-generated GUI Action Execution Workflow grounding.py denial of service5.3CNA v4.00.6%2026-09-02
CVE-2026-84886simular-ai Agent-S OCR HTTP API ocr_server.py ImageData resource consumption6.9CNA v4.00.6%2026-09-02
CVE-2026-84885simular-ai Agent-S CodeAgent code_agent.py denial of service5.3CNA v4.00.5%2026-09-02
CVE-2026-84857sigoden aichat API endpoint serve.rs memory allocation6.9CNA v4.00.6%2026-09-02
CVE-2026-84856rowboatlabs rowboat Composio Webhook endpoint route.ts req.json denial of service6.9CNA v4.00.7%2026-09-02Fix
CVE-2026-84852Reader Tools PDF Reader App File ActSplashNew.handleDeeplink path traversal4.8CNA v4.00.2%2026-09-02
CVE-2026-84851Uncontrolled recursion in the Ion reader in Amazon Ion-C8.7CNA v4.00.6%2026-09-02Fix
CVE-2026-84841tsi-coop tsi-dpdp-cms client-side enforcement of server-side security6.9CNA v4.00.5%2026-09-02Fix
CVE-2026-84840tsi-coop tsi-dpdp-cms Bootstrap Setup Endpoint InterceptingFilter.java missing authentication6.9CNA v4.00.8%2026-09-02Fix
CVE-2026-84839tsi-coop tsi-dpdp-cms Admin Console/DPO Compliance console web.xml missing authentication6.9CNA v4.00.8%2026-09-02Fix
CVE-2026-84838Red Hat Hardened Images rpm: Command injection in rpmuncompress7.8CNA v3.11.1%2026-09-02Fix
CVE-2026-84837Red Hat Hardened Images rpm: Command injection in `rpmbuild -t*`7.8CNA v3.11.3%2026-09-02Fix
CVE-2026-84835Rentsyst WordPress plugin broken access control5.3CNA v3.10.3%2026-09-02
CVE-2026-84833ntegrals openbrowser Browser agent Message Construction agent.ts resource consumption5.3CNA v4.00.5%2026-09-02
CVE-2026-84811agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode7.1CNA v4.00.5%2026-09-02
CVE-2026-84810claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan7.1CNA v4.00.3%2026-09-02
CVE-2026-84809Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode7.1CNA v4.00.6%2026-09-02Fix
CVE-2026-84808Kimai authorization bypass via API Timesheet5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84807Kimai authentication bypass via Team Creation5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84806Kimai authorization bypass via Team Access endpoints5.3CNA v4.00.2%2026-09-02Fix
CVE-2026-84805Kimai authentication bypass via API5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84804Kimai authorization bypass via Team Activity API5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84803SiYuan stored XSS via incomplete asset blocklist8.6CNA v4.00.4%2026-09-02Fix
CVE-2026-84802Craft CMS information disclosure via AssetsController5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84801Craft CMS authentication bypass via administrateUsers8.7CNA v4.00.4%2026-09-02Fix
CVE-2026-84800Craft CMS File Overwrite via assets/replace-file7.1CNA v4.00.4%2026-09-02Fix
CVE-2026-84799Craft CMS PII Disclosure via GraphQL User Relations5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84798Craft CMS authorization bypass via actionDeleteForSite7.1CNA v4.00.4%2026-09-02Fix
CVE-2026-84797Craft CMS authorization bypass via actionDuplicate5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84796Craft CMS GraphQL Entry Mutation Site Scope Bypass8.7CNA v4.00.5%2026-09-02Fix
CVE-2026-84795Craft CMS authentication bypass via Admin Flag Inheritance9.2CNA v4.00.5%2026-09-02Fix
CVE-2026-84794Craft CMS authorization bypass via assets/move-asset7.1CNA v4.00.4%2026-09-02Fix
CVE-2026-84793Craft CMS stored XSS via site name4.8CNA v4.00.3%2026-09-02Fix
CVE-2026-84792Craft CMS broken access control via element-indexes5.3CNA v4.00.3%2026-09-02Fix
CVE-2026-84781Gallery PhotoBlocks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-02Fix
CVE-2026-84780WP Go Maps WordPress plugin denial of service Attack5.3CNA v3.10.4%2026-09-02Fix
CVE-2026-84775Really Simple SSL WordPress plugin denial of service Attack5.3CNA v3.10.4%2026-09-02Fix
CVE-2026-84772Broken Link Checker WordPress plugin server side request forgery (SSRF)5.5CNA v3.10.3%2026-09-02Fix
CVE-2026-84771PublishPress Permissions WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-09-02Fix
CVE-2026-84770Mang Board WP WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-09-02Fix
CVE-2026-84764Simply Schedule Appointments WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-09-02Fix
CVE-2026-84760Ultimate Gift Cards For WooCommerce WordPress plugin broken access control5.3CNA v3.10.3%2026-09-02Fix
CVE-2026-84759Activity Log WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2026-09-02Fix
CVE-2026-84715FeatherPanel privilege escalation via Subuser Permission Update8.7CNA v4.00.6%2026-09-02Fix
CVE-2026-84702facefusion path traversal via Job Identifier8.7CNA v4.00.4%2026-09-02Fix
CVE-2026-84701NocoBase Rich Text field stored cross-site scripting via API5.1CNA v4.00.3%2026-09-02
CVE-2026-84700OpenAtomFoundation pikiwidb Pika Unauthenticated Replication Access via Internal Protobuf Port8.8CNA v4.00.6%2026-09-02
CVE-2026-84699Team Password Manager authentication bypass in Password Reset9.3CNA v4.00.6%2026-09-02Fix
CVE-2026-84698PX4 Autopilot sd_bench heap buffer overflow via Block Size7.1CNA v4.00.4%2026-09-02
CVE-2026-84697Mailpit SSRF Deny List Bypass via Azure Metadata and IPv6 Prefix6.9CNA v4.00.4%2026-09-02
CVE-2026-84696Phison PS3111-S11 Controller Firmware missing authentication on Vendor Unique commands9.3CNA v4.00.2%2026-09-02
CVE-2026-84695BookStack stored XSS via Drawing upload9.3CNA v4.00.5%2026-09-02Fix
CVE-2026-84694Coolify remote code execution via Environment Variable Key8.7CNA v4.00.8%2026-09-02Fix
CVE-2026-84677Jenkins update-center2 cross-site scripting5.4CISA ADP v3.10.2%2026-09-02Fix