CVE-2026 list

CVE-2026 records published in September 2026

Page two of 15: records 1,001 to 2,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 1,001 to 2,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-95336Google Chrome Transactions Platform information disclosure6.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95335Google Chrome HID use-after-free8.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95334Google Chrome incorrectly resolved name or reference8.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95333Google Chrome Metrics use-after-free8.1CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95332Google Android Tint in Google Chrome on uninitialized variable use4.7CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95331Google Chrome ANGLE out-of-bounds write9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95330Google Chrome improper check for exceptional conditions6.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95329Google Android WebGL in Google Chrome on out-of-bounds write9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95328Google Android Mobile in Google Chrome on confused deputy6.5CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95327Google Chrome Networking information disclosure6.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95326Google Chrome Bluetooth incomplete cleanup8.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95325Google Chrome ANGLE use-after-free9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95324Google Chrome GPU uninitialized resource use3.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95323Google Chrome Chromium UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95322Google Android GPU in Google Chrome on out-of-bounds write8.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95321Google Android Payments in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95320Google Chrome Navigation missing authorization5.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95319Google Chrome Printing use-after-free8.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95318Google Chrome Video buffer overflow9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95317Google Chrome MediaCapture incorrect authorization3.1CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95316Google Chrome Performance unchecked return value2.9CISA ADP v3.10.1%2026-09-29Fix
CVE-2026-95315Google Chrome Aura use-after-free7.8CISA ADP v3.10.1%2026-09-29Fix
CVE-2026-95314Google Chrome HID incorrect authorization8.1CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95313Google Chrome Fullscreen use-after-free9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95312Google Chrome Passwords information disclosure3.1CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95311Google Chrome arbitrary code execution9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95310Google Chrome AdFilter use-after-free9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95309Google Chrome Mobile UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95308Google Chrome Metrics integer overflow3.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95307Google Chrome ExtensionsMenu UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95306Google Chrome V8 type confusion8.8CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95305Google Chrome Chromoting UI misrepresentation4.8CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95304Google Chrome V8 out-of-bounds write8.8CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95303Google Chrome SmartCard incomplete cleanup6.5CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95302Google Android WebAPKs in Google Chrome on incorrect authorization2.9CISA ADP v3.10.1%2026-09-29Fix
CVE-2026-95301Google Chrome extensions missing authorization8.1CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95300Google Chrome DevTools missing authorization4.8CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95299Google Chrome GPU use-after-free9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95298Google Chrome Browser use-after-free7.8CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95297Google Chrome Contextual Tasks missing authorization6.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95296Google Chrome Core missing authorization4.3CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95295Google Chrome Mobile information disclosure4.6CISA ADP v3.10.1%2026-09-29Fix
CVE-2026-95294Google Chrome Browser UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95293Google Chrome GPU uninitialized resource use4.7CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95292Google Chrome Safebrowsing incorrect authorization4.8CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95291Google Chrome SecurityIndicators UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95290Google Chrome NFC missing authorization5.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95289Google Chrome Scroll incorrect authorization4.3CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95288Google Chrome Mobile UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95287Google Chrome Navigation missing authorization5.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95286Google Chrome Bindings type confusion8.8CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95285Google Android WebView in Google Chrome on missing authorization8.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95284Google Android ANGLE in Google Chrome on buffer overflow9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95283Google Android Tint in Google Chrome on buffer overflow9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95282Google Chrome Platform use-after-free8.8CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-95281Google Android ANGLE in Google Chrome on buffer overflow9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95280Google Chrome V8 race condition7.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95279Google Android Omnibox in Google Chrome on UI misrepresentation5.4CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95278Google Chrome WakeLock missing authorization8.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-95277Google Chrome Views use-after-free9.6CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95276Google Chrome Themes improper input validation8.3CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-95275Google Chrome incorrectly resolved name or reference6.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-95274Google Chrome DevTools improper output encoding8.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-94954TOTOLINK N150RT firmware web management interface stack-based buffer overflow8.8CISA ADP v3.10.3%2026-09-29
CVE-2026-94953TOTOLINK N150RT (NTR150) firmware web management interface stack-based buffer overflow8.8CISA ADP v3.10.3%2026-09-29
CVE-2026-94952TOTOLINK N150RT (NTR150) firmware web management interface stack-based buffer overflow9.8CISA ADP v3.10.3%2026-09-29
CVE-2026-94204Incorrect permission assignment for critical resource in Viidure Dashcam Android Application8.7CNA v4.00.3%2026-09-29
CVE-2026-93853Barman snapshot backup deletion trusts unverified backup catalog metadata7.2CNA v4.00.2%2026-09-29Fix
CVE-2026-93332Devolutions Server partial connection API improper access control5.4CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-93330Devolutions Server incorrect behavior order4.3CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-92371TeamViewer Full Client local privilege escalation7.0CNA v3.10.1%2026-09-29Fix
CVE-2026-92370TeamViewer Full Client Remote Session Access Control Bypass leading to remote code execution8.8CNA v3.10.4%2026-09-29Fix
CVE-2026-92369TeamViewer Full Client and Host installer rollback mechanism race condition7.3CNA v3.10.1%2026-09-29Fix
CVE-2026-92368Heap-based buffer overflow in TeamViewer Session Recording Playback leads to remote code execution7.8CNA v3.10.1%2026-09-29Fix
CVE-2026-92232Joomla! Core [20260916] Core XSS filter bypass in InputFilter7.1CNA v4.00.2%2026-09-29Fix
CVE-2026-92231Joomla! Core [20260915] Core XSS filter bypass in InputFilter7.1CNA v4.00.3%2026-09-29Fix
CVE-2026-92227Joomla! Core [20260914] Core MFA authentication bypass through rememberme cookies in Joomla8.2CNA v4.00.3%2026-09-29Fix
CVE-2026-92226Joomla! Core [20260913] Core Improper ACL checks for varous webservice edit tasks in Joomla7.0CNA v4.00.2%2026-09-29Fix
CVE-2026-92225Joomla! Core [20260912] Core XSS in module list in Joomla5.9CNA v4.00.3%2026-09-29Fix
CVE-2026-92224Joomla! Core [20260911] Core XSS in link toolbar layout in Joomla5.9CNA v4.00.3%2026-09-29Fix
CVE-2026-92223Joomla! Core [20260910] Core Improper ACL checks for workflow stage changes in Joomla5.1CNA v4.00.2%2026-09-29Fix
CVE-2026-92222Joomla! Core [20260909] Core SSRF vectors in various core extensions in Joomla8.9CNA v4.00.2%2026-09-29Fix
CVE-2026-92142Apache Karaf: Authorization bypass in JMX MBean lifecycle operations8.8CISA ADP v3.10.6%2026-09-29Fix
CVE-2026-91191Lantronix G520 series Cellular Gateway improper verification of cryptographic signature7.7CNA v4.00.2%2026-09-29Fix
CVE-2026-91085Apache Karaf: Config:install missing ACL entry allows privilege escalation to admin6.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-91048Apache Karaf jdbc shell command scope privilege escalation9.8CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-91012Apache Karaf: Path traversal in Config service allows Manager-to-admin privilege escalation9.8CISA ADP v3.10.6%2026-09-29Fix
CVE-2026-90918Joomla! Core [20260908] Core XSS in HTML Mail templates in Joomla6.9CNA v4.00.2%2026-09-29Fix
CVE-2026-90917Joomla! Core [20260907] Core Improper ACL checks in outputs for tagged items in Joomla6.9CNA v4.00.2%2026-09-29Fix
CVE-2026-90916Joomla! Core [20260906] Core Improper ACL checks in content history comparison view in Joomla5.1CNA v4.00.2%2026-09-29Fix
CVE-2026-90915Joomla! Core [20260905] Core Arbitrary directory deletion via cache purge action in Joomla7.0CNA v4.00.3%2026-09-29Fix
CVE-2026-90914Joomla! Core [20260904] Core XSS in the generic media output layouts in Joomla5.9CNA v4.00.2%2026-09-29Fix
CVE-2026-90913Joomla! Core [20260903] Core Improper ACL checks for access level webservice endpoints in Joomla7.0CNA v4.00.2%2026-09-29Fix
CVE-2026-90907Joomla! CMS profile.save controller insecure direct object reference6.9CNA v4.00.2%2026-09-29Exploit codeFix
CVE-2026-90906Joomla! Core [20260901] XSS in HTMLHelper::link method in Joomla5.9CNA v4.00.2%2026-09-29Fix
CVE-2026-90441Fireware OS missing authorization in wgagent Management API allows denial of service Variant B7.1CNA v4.00.2%2026-09-29Fix
CVE-2026-87748Privilege escalation via account takeover in Interprobe's Qorela DC8.8CNA v3.10.2%2026-09-29Fix
CVE-2026-86843Apache Airflow Teradata provider: SQL injection6.3CISA ADP v3.10.9%2026-09-29Fix
CVE-2026-86450Sensitive data exposure in Parla Auto's DetaWix Mobile Web Portal7.5CNA v3.10.2%2026-09-29Fix
CVE-2026-86158Missing authentication in the local .NET backend of Progress Telerik Fiddler Everywhere7.7CNA v3.10.1%2026-09-29Fix
CVE-2026-86157Exposure of Privileged IPC Functionality in Progress Telerik Fiddler Everywhere5.6CNA v3.10.1%2026-09-29Fix
CVE-2026-86136Fireware OS missing authorization in wgagent Management API allows denial of service Variant A7.1CNA v4.00.3%2026-09-29Fix
CVE-2026-86133Fireware OS Pre-authentication integer underflow in iked allows Remote denial of service8.2CNA v4.00.3%2026-09-29Fix
CVE-2026-86132Fireware OS Pre-authentication integer underflow in iked allows denial of service8.2CNA v4.00.4%2026-09-29Fix
CVE-2026-86131Fireware OS code injection in BOVPN over TLS client allows remote code execution9.2CNA v4.00.4%2026-09-29Fix
CVE-2026-86128WatchGuard Fireware OS null pointer dereference8.2CNA v4.00.4%2026-09-29Fix
CVE-2026-86105Fireware OS improper authorization in Access Portal Reverse Proxy5.3CNA v4.00.3%2026-09-29Fix
CVE-2026-86104Fireware OS resource exhaustion in Login Process allows denial of service8.7CNA v4.00.4%2026-09-29Fix
CVE-2026-86101Fireware OS authorization bypass in SAML Login allows Unauthorized SSLVPN Access7.2CNA v4.00.2%2026-09-29Fix
CVE-2026-86035Weblate: Mercurial argument injection8.5CNA v3.10.4%2026-09-29Fix
CVE-2026-85520MyPresta Google Merchant Center Feed feed.php endpoint arbitrary file write9.3CNA v4.01.0%2026-09-29Reported exploitedExploit codeFix
CVE-2026-84842IBM Guardium Data Protection Datasource REST component path traversal8.1CNA v3.10.4%2026-09-29Fix
CVE-2026-84784OpenSSL QUIC: Unbounded RETIRE_CONNECTION_ID Backlog7.5CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-84783OpenSSL use-after-free in X.509 Extension Cache under Concurrent Use7.5CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-84782OpenSSL DTLS Retransmits Handshake messages from a Stale Buffer Offset8.2CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-84739Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.7CNA v3.10.5%2026-09-29Fix
CVE-2026-84440IBM Guardium Data Protection SNMP alert notification OS command injection7.5CNA v3.10.7%2026-09-29Fix
CVE-2026-84436IBM Guardium Data Protection certificate export CLI command injection9.1CNA v3.10.7%2026-09-29Fix
CVE-2026-84422IBM Guardium Data Protection CLI certificate SMIME recipient deletion command injection7.2CNA v3.10.7%2026-09-29Fix
CVE-2026-84421IBM DataStage on Cloud Pak for Data path traversal8.8CNA v3.10.6%2026-09-29Fix
CVE-2026-84414IBM i Network Authentication Service incorrect permission assignment7.8CNA v3.10.1%2026-09-29Fix
CVE-2026-84409Lantronix G520 series Cellular Gateway cross-site scripting7.7CNA v4.00.4%2026-09-29Fix
CVE-2026-84154Dassault Systèmes GEOVIA Geospatial Data Manager code injection9.9CNA v3.10.4%2026-09-29
CVE-2026-82973Improper neutralization of CRLF sequences (CRLF injection) in docker-mailbox9.4CNA v3.10.4%2026-09-29
CVE-2026-82804Apache DolphinScheduler: Command injection in the Alert script plugin8.8CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-81930Apache Airflow Snowflake provider information disclosure6.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-81914Apache Airflow Google provider: Google Drive query injection via unescaped file and folder names4.3CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-81862Apache Airflow Teradata provider Teradata transfer operators information disclosure6.5CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-81842Grafana Enterprise library panel can be moved into a folder without library panel create permission4.3CNA v3.10.2%2026-09-29Fix
CVE-2026-81841Grafana Enterprise paused shared dashboard access tokens still expose data source configuration5.3CNA v3.10.4%2026-09-29Fix
CVE-2026-81569Apache DolphinScheduler handling of sub-workflow tasks improper authorization4.3CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-81433Fireware OS Pre-authentication stack buffer overflow in fingerd allows remote code execution8.7CNA v4.00.2%2026-09-29Fix
CVE-2026-79538metatool-ai MetaMCP internal MCP inspector proxy endpoint code execution9.8CISA ADP v3.10.4%2026-09-29
CVE-2026-79537metatool-ai MetaMCP MCP transport session dispatch insecure direct object reference9.1CISA ADP v3.10.3%2026-09-29
CVE-2026-79536Bytebase dbhub sql-parser.ts SQL injection9.1CISA ADP v3.10.2%2026-09-29
CVE-2026-79535mbailey VoiceMode update_config MCP tool OS command injection6.3CISA ADP v3.10.5%2026-09-29
CVE-2026-79534mark3labs mcp-filesystem-server validatePath directory traversal5.9CISA ADP v3.10.2%2026-09-29
CVE-2026-79417ArgusMonitor.sys in Argotronic eGbR ArgusMonitor improper access control5.3CISA ADP v3.10.3%2026-09-29Exploit code
CVE-2026-79403Kilo Code permission/allow-everything endpoint arbitrary code execution8.4CISA ADP v3.10.1%2026-09-29
CVE-2026-79348KitchenAsty reservations API vulnerability4.3CNA v3.10.2%2026-09-29
CVE-2026-78214Apache DolphinScheduler: Actuator endpoint authentication bypass via Percent-Encoded Paths5.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-77696OpenSSL timing side-channel in SM2 Signature Generation3.7CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-77177Open GenAI Stack ogx-ai code execution9.8CISA ADP v3.10.6%2026-09-29
CVE-2026-76875PyPy pyexpat ExternalEntityParserCreate use-after-free6.3CNA v4.00.2%2026-09-29Fix
CVE-2026-76738HPE Instant ON API endpoint of HPE Networking buffer overflow2.7CNA v3.10.2%2026-09-29
CVE-2026-76737HPE Instant ON command line interface of HPE Networking path traversal3.0CNA v3.10.1%2026-09-29
CVE-2026-76736HPE Instant ON underlying operating system of HPE Networking buffer overflow3.3CNA v3.10.1%2026-09-29
CVE-2026-76735Authenticated local sensitive information disclosure in HPE Networking Instant ON4.1CNA v3.10.1%2026-09-29
CVE-2026-76734HPE Instant ON affected interface of HPE Networking memory corruption4.8CNA v3.10.3%2026-09-29
CVE-2026-76733Authenticated denial of service vulnerability in HPE Networking Instant ON API endpoint4.9CNA v3.10.3%2026-09-29
CVE-2026-76732Authenticated local privilege escalation vulnerability in a daemon of HPE Networking Instant ON6.4CNA v3.10.1%2026-09-29
CVE-2026-76731Authentication bypass in the Captive portal of HPE Networking Instant ON6.5CNA v3.10.3%2026-09-29
CVE-2026-76730Improper PAPI Packet handling leads to unauthorized access in HPE Networking Instant ON APs6.5CNA v3.10.2%2026-09-29
CVE-2026-76729HPE Instant ON API endpoint of HPE Networking format string6.6CNA v3.10.4%2026-09-29
CVE-2026-76728HPE Networking Instant ON APs API endpoint server-side request forgery7.2CNA v3.10.5%2026-09-29
CVE-2026-76727Authenticated command injection vulnerabilities in HPE Networking Instant ON7.2CNA v3.11.0%2026-09-29
CVE-2026-76726HPE Instant ON API endpoint of HPE Networking authentication bypass8.1CNA v3.10.4%2026-09-29
CVE-2026-76725Authentication bypass in a Management protocol of HPE Networking Instant ON APs9.6CNA v3.10.3%2026-09-29
CVE-2026-76724HPE Instant ON CLI of the affected HPE Networking command injection9.6CNA v3.11.0%2026-09-29
CVE-2026-76723HPE Instant ON affected interface of HPE Networking buffer overflow9.6CNA v3.10.3%2026-09-29
CVE-2026-76722HPE Instant ON affected interface of HPE Networking format string9.8CNA v3.10.5%2026-09-29
CVE-2026-76721HPE Instant ON affected interface of HPE Networking buffer overflow9.8CNA v3.10.6%2026-09-29
CVE-2026-76720HPE OneView open redirect4.3CNA v3.10.2%2026-09-29Fix
CVE-2026-76719HPE OneView cross-site scripting8.2CNA v3.10.2%2026-09-29Fix
CVE-2026-76718HPE OneView cross-site scripting8.2CNA v3.10.2%2026-09-29Fix
CVE-2026-76114Dell Secure Connect Gateway (SCG) Policy Manager cleartext transmission of sensitive information5.9CNA v3.10.1%2026-09-29Fix
CVE-2026-75806OpenSSL Unauthenticated and Undersized DTLS 1.2 AEAD Record causes DoS5.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-75805OpenSSL null pointer dereference in CMP Client Revocation Response Handling5.3CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-75804OpenSSL QUIC Connection-Level Flow Control is not Enforced for Streams5.3CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-74225U-Boot out-of-bounds write via DHCPv67.1CNA v4.00.2%2026-09-29Fix
CVE-2026-74222U-Boot use-after-free in lwIP wget Receive Callback8.8CNA v4.00.3%2026-09-29Fix
CVE-2026-74221U-Boot buffer overflow via NFS READLINK8.8CNA v4.00.3%2026-09-29Fix
CVE-2026-74220U-Boot buffer overflow via NFS read Reply8.8CNA v4.00.3%2026-09-29Fix
CVE-2026-73599Dell Secure Connect Gateway (SCG) Policy Manager open redirect5.4CNA v3.10.1%2026-09-29Fix
CVE-2026-73598Dell Secure Connect Gateway (SCG) Policy Manager incorrect permission assignment7.8CNA v3.10.1%2026-09-29Fix
CVE-2026-73597Dell Secure Connect Gateway (SCG) Policy Manager cross-site request forgery6.5CNA v3.10.1%2026-09-29Fix
CVE-2026-73596Dell Secure Connect Gateway (SCG) Policy Manager insecure default initialization3.8CNA v3.10.2%2026-09-29Fix
CVE-2026-73595Dell Secure Connect Gateway (SCG) Policy Manager download without integrity check4.7CNA v3.10.1%2026-09-29Fix
CVE-2026-73594Dell Secure Connect Gateway (SCG) Policy Manager improper certificate validation6.4CNA v3.10.1%2026-09-29Fix
CVE-2026-73593Dell Secure Connect Gateway (SCG) Policy Manager active debug code3.0CNA v3.10.1%2026-09-29Fix
CVE-2026-72897OpenSSL out-of-bounds access after SSL_set_SSL_CTX during a Handshake7.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-72510Toptech TMS7 and TopHAT SQL injection8.5CNA v4.00.3%2026-09-29Fix
CVE-2026-72507Toptech TMS7 and TopHAT SQL injection8.5CNA v4.00.3%2026-09-29Fix
CVE-2026-71974U-Boot out-of-bounds write via Android Bootmeth Partition Read4.3CNA v4.00.2%2026-09-29Fix
CVE-2026-71973u-boot U-Bootrc4 integer overflow in SquashFS Directory Table Allocation5.2CNA v4.00.2%2026-09-29Fix
CVE-2026-71972U-Boot out-of-bounds write in BMP RLE8 Decoder6.0CNA v4.00.2%2026-09-29
CVE-2026-71971U-Boot out-of-bounds write in IP Fragment Reassembly8.8CNA v4.00.4%2026-09-29Fix
CVE-2026-71899Apache DolphinScheduler `query-dynamic-sub-workflows` API missing authorization6.5CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-71898Apache DolphinScheduler An incorrect authorization4.3CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-71897Apache DolphinScheduler An improper authorization4.3CISA ADP v3.10.2%2026-09-29Fix
CVE-2026-71379Toptech TMS7 and TopHAT files or directories accessible to external parties10.0CNA v4.00.4%2026-09-29Fix
CVE-2026-71302Toptech TMS7 and TopHAT session fixation7.5CNA v4.00.3%2026-09-29Fix
CVE-2026-71189Toptech TMS7 and TopHAT cross-site scripting4.8CNA v4.00.2%2026-09-29Fix
CVE-2026-70356Toptech TMS7 and TopHAT unrestricted upload of file with dangerous type9.4CNA v4.00.4%2026-09-29Fix
CVE-2026-69662Toptech TMS7 and TopHAT eval injection2.1CNA v4.00.2%2026-09-29Fix
CVE-2026-68954Toptech TMS7 and TopHAT SQL injection8.5CNA v4.00.3%2026-09-29Fix
CVE-2026-68911nicotine-plus nicotine+: Decompression of peer messages can exhaust available memory8.7CNA v4.00.3%2026-09-29Fix
CVE-2026-68068Toptech TMS7 and TopHAT SQL injection8.5CNA v4.00.3%2026-09-29Fix
CVE-2026-67993basecamp upright static credentials callback cross-site request forgery8.8CISA ADP v3.10.1%2026-09-29
CVE-2026-67987crmne ruby_llm think-tag response parsing denial of service7.5CISA ADP v3.10.4%2026-09-29
CVE-2026-66083Apache DolphinScheduler /datasources/unauth-datasource endpoint information disclosure6.5CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-65102NVIDIA DeepStream integer overflow7.8CNA v3.10.1%2026-09-29Fix
CVE-2026-63713Toptech TMS7 and TopHAT SQL injection8.5CNA v4.00.3%2026-09-29Fix
CVE-2026-63209Integer overflow or wraparound and out-of-bounds write in compress7.5CNA v3.10.4%2026-09-29Fix
CVE-2026-61519Liberu CRM broken access control via TeamPolicy::addTeamMember8.7CNA v4.00.4%2026-09-29Fix
CVE-2026-54875OpenSSL Non-Constant-Time SM2 Scalar Multiplication on ARM64 and RISC-V3.7CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-54873OpenSSL QUIC STREAM Fragment Metadata DoS7.5CISA ADP v3.10.5%2026-09-29Fix
CVE-2026-54872OpenSSL timing side-channel in Scalar Multiplication for Non-NIST EC Curves3.7CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-53989Dockhand open redirect via OIDC Initiation endpoint5.3CNA v4.00.3%2026-09-29Fix
CVE-2026-53988Dockhand Unauthenticated Webhook Trigger via Git Webhook endpoints9.2CNA v4.00.5%2026-09-29Fix
CVE-2026-49243Webmin: Reflected XSS in the Configuration module9.6CNA v3.10.3%2026-09-29Fix
CVE-2026-42772OpenSSL potential CPU DoS via O(n^2) Fragment Reassembly in QUIC5.3CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-41875Cross-site request forgery in admin panel of Quick.Cart6.9CNA v4.00.2%2026-09-29Exploit codeFix
CVE-2026-39117AltumCode 66Uptime index.php vulnerability9.8CISA ADP v3.10.8%2026-09-29
CVE-2026-35191OpenSSL QUIC Unvalidated Amplification Credit may be over Accounted3.7CISA ADP v3.10.4%2026-09-29Fix
CVE-2026-35189OpenSSL excessive memory allocation in Relative CRLDP Processing5.3CISA ADP v3.10.3%2026-09-29Fix
CVE-2026-22101EVbee DC-80 sensitive information leak through hidden menu5.1CNA v4.00.1%2026-09-29Fix
CVE-2026-22094Weak root password in EVbee DC 809.3CNA v4.00.2%2026-09-29Fix
CVE-2026-19743Improper limitation of a pathname to a restricted directory in TeamViewer Desktop Clients7.8CNA v3.10.1%2026-09-29Fix
CVE-2026-19547Local privilege escalation in Ghostscript for Windows7.0CNA v4.00.2%2026-09-29Fix
CVE-2026-18145Fireware OS stack-based buffer overflow in spamd allows remote code execution8.6CNA v4.00.4%2026-09-29Fix
CVE-2026-18105Fireware OS uncontrolled resource consumption in Diagnostic Tasks allows denial of service7.1CNA v4.00.2%2026-09-29Fix
CVE-2026-15390Out-of-bounds write in Das U-Boot9.0CNA v4.00.3%2026-09-29Fix
CVE-2026-13224Fireware OS path traversal in WebUI Management agent allows arbitrary Local File Read8.2CNA v4.00.4%2026-09-29Fix
CVE-2026-13046Fireware OS deserialization of untrusted data in samld allows remote code execution7.5CNA v4.00.4%2026-09-29Fix
CVE-2026-12345Python CPython tempfile.TemporaryDirectory race condition5.9CNA v4.00.2%2026-09-29Exploit codeFix
CVE-2026-11796Hitachi Energy Asset Suite missing authentication5.1CNA v4.00.2%2026-09-29
CVE-2026-10518Incorrect authorization in GitLab4.3CNA v3.10.3%2026-09-29Fix
CVE-2026-8937Missing authorization in GitLab4.3CNA v3.10.3%2026-09-29Fix
CVE-2026-8067Hitachi Energy RTU500 series CMU firmware An improper authorization6.5CNA v3.10.3%2026-09-29Fix
CVE-2026-8066Hitachi Energy RTU500 series CMU firmware file upload functionality path traversal9.1CNA v3.10.7%2026-09-29Fix
CVE-2026-8065Hitachi Energy RTU500 series CMU firmware firmware update endpoint authentication bypass9.1CNA v3.10.6%2026-09-29Exploit codeFix
CVE-2026-7395Hitachi Energy Asset Suite missing authentication8.5CNA v4.00.2%2026-09-29
CVE-2026-7193Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router Telnet service hard-coded credentials8.6CNA v4.00.2%2026-09-29Fix
CVE-2026-7192Shenzhen Dbit Network Equipment T-CPE301K 4G Mini WiFi Router stack-based buffer overflow9.3CNA v4.00.3%2026-09-29Fix
CVE-2026-4523Missing authorization in GitLab3.7CNA v3.10.3%2026-09-29Fix
CVE-2026-4034TIBCO Administrator injection8.7CNA v4.00.3%2026-09-29
CVE-2026-102367mall4j insufficient session expiration via Token Refresh5.3CNA v4.00.2%2026-09-28
CVE-2026-102366mall4j unrestricted file upload in Admin file endpoints2.1CNA v4.00.2%2026-09-28
CVE-2026-102365mall4j missing authorization in Admin User Address endpoints7.1CNA v4.00.2%2026-09-28
CVE-2026-102364mall4j improper authentication Accepts Storefront Tokens on Admin API5.3CNA v4.00.2%2026-09-28
CVE-2026-102363mall4j Unauthenticated Shipment Tracking Disclosure via Order Number6.3CNA v4.00.3%2026-09-28
CVE-2026-102362mall4j missing authentication in Product Review Deletion6.9CNA v4.00.3%2026-09-28
CVE-2026-102361mall4j missing authentication in Password Update endpoint9.3CNA v4.00.4%2026-09-28
CVE-2026-102335nginx-proxy-manager Nginx Proxy Manager improper authorization via advanced_config7.1CNA v4.00.2%2026-09-28
CVE-2026-102334nginx-proxy-manager Nginx Proxy Manager Missing brute-force Protection9.1CNA v4.00.5%2026-09-28
CVE-2026-102333httpdbg stored cross-site scripting via javascript URL5.3CNA v4.00.2%2026-09-28Fix
CVE-2026-102332Dozzle path traversal via Log ZIP Download4.6CNA v4.00.3%2026-09-28Fix
CVE-2026-102297ZoneMinder incorrect authorization in frames API index5.3CNA v4.00.2%2026-09-28Fix
CVE-2026-102296ZoneMinder buffer overflow via HTTP Camera Response8.3CNA v4.00.4%2026-09-28Fix
CVE-2026-102281Nest: Remote process termination via a deeply nested microservice message pattern7.5CNA v3.10.4%2026-09-28Fix
CVE-2026-102279Laravel: XSS in Debug Page Information3.1CNA v3.10.2%2026-09-28Fix
CVE-2026-102278juliangruber brace-expansion denial of service7.5CNA v3.10.4%2026-09-28Fix
CVE-2026-102277juliangruber brace-expansion expand function denial of service5.3CNA v3.10.3%2026-09-28Fix
CVE-2026-102276juliangruber brace-expansion parseCommaParts denial of service7.5CNA v3.10.4%2026-09-28Fix
CVE-2026-102275PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion6.5CNA v3.10.1%2026-09-28Fix
CVE-2026-102274PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set5.9CNA v3.10.4%2026-09-28Fix
CVE-2026-102273PyJWT accepts public JWK containers as HMAC secrets7.4CNA v3.10.2%2026-09-28Fix
CVE-2026-102272jpadilla pyjwt HMACAlgorithm.prepare_key improper signature verification7.4CNA v3.10.2%2026-09-28Fix
CVE-2026-102271PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the guard7.4CNA v3.10.2%2026-09-28Fix
CVE-2026-102270PyJWT: ReDoS vulnerability when calling the `is_pem_format` function4.4CNA v3.10.2%2026-09-28Fix
CVE-2026-102269PyJWT: Non-canonical signature segments enable raw-token revocation bypass4.8CNA v3.10.2%2026-09-28Fix
CVE-2026-102268jpadilla pyjwt jwt/utils.py improper signature verification9.1CNA v3.10.2%2026-09-28Exploit codeFix
CVE-2026-102267PyJWT: PyJWKClient follows redirects when fetching JWKS7.4CNA v3.10.2%2026-09-28Fix
CVE-2026-102266PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation7.4CNA v3.10.2%2026-09-28Fix
CVE-2026-102265PyJWT: Uncaught RecursionError in jwt.decode on deeply nested token header5.3CNA v3.10.3%2026-09-28Fix
CVE-2026-102010Red Hat Hardened Images gcc-toolset-15-gcc: Gcc: Gcc-toolset-16: Gcc: Denial of service7.0CNA v3.10.3%2026-09-28Fix
CVE-2026-102006Wind River Systems VxWorks 7 process management subsystem memory leak5.5CNA v3.10.1%2026-09-28
CVE-2026-102005Wind River VxWorks 7 memory leak5.5CNA v3.10.1%2026-09-28
CVE-2026-102004Wind River Systems VxWorks 7 memory management subsystem out-of-bounds write7.8CNA v3.10.1%2026-09-28
CVE-2026-101918PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse5.3CNA v3.10.4%2026-09-28Fix
CVE-2026-101917PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values5.3CNA v3.10.4%2026-09-28Fix
CVE-2026-101916grpc-node getAuthContext improper certificate validation7.4CNA v3.10.2%2026-09-28Fix
CVE-2026-101915grpc-node @grpc/grpc-js information disclosure3.7CNA v3.10.3%2026-09-28Fix
CVE-2026-101914grpc-node exact path matcher incorrect authorization6.5CNA v3.10.3%2026-09-28Fix
CVE-2026-101913beaugunderson ip-address Address6 isLinkLocal method server-side request forgery6.3CNA v4.00.4%2026-09-28Fix
CVE-2026-101912beaugunderson ip-address isInSubnet and isHostInSubnet methods incorrect comparison6.3CNA v4.00.4%2026-09-28Fix
CVE-2026-101911beaugunderson ip-address Address6 resource exhaustion6.3CNA v4.00.3%2026-09-28Fix
CVE-2026-101910beaugunderson ip-address Address6 isPrivate classifier server-side request forgery6.9CNA v4.00.4%2026-09-28Fix
CVE-2026-101909Axios: Prototype pollution Gadget in axios toFormData options8.3CNA v4.00.4%2026-09-28Fix
CVE-2026-101908Axios: Prototype pollution gadget in fetch adapter can alter outbound requests6.9CNA v4.00.4%2026-09-28Fix
CVE-2026-101907Axios: MaxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF7.0CNA v4.00.4%2026-09-28Fix
CVE-2026-101906Axios: ReDoS (O) in shouldBypassProxy host normalization, reachable8.2CNA v4.00.4%2026-09-28Fix
CVE-2026-101905Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack7.6CNA v4.00.3%2026-09-28Fix
CVE-2026-101904Axios: Header injection via Inherited headers after Minimal Interceptor6.9CNA v4.00.4%2026-09-28Fix
CVE-2026-101903Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)8.2CNA v4.00.4%2026-09-28Fix
CVE-2026-101902axios default instance prototype pollution6.9CNA v4.00.4%2026-09-28Fix
CVE-2026-101901Axios: Denial of service via unhandled error Event in HTTP/2 ClientHttp2Session Initialization8.2CNA v4.00.4%2026-09-28Fix
CVE-2026-101900Axios: Fetch Adapter header injection via Inherited FormData getHeaders6.9CNA v4.00.5%2026-09-28Fix
CVE-2026-101898Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls7.0CNA v4.00.5%2026-09-28Fix
CVE-2026-101894@XhmikosR/decompress: Path traversal via symlink chain9.1CNA v3.10.8%2026-09-28Exploit codeFix
CVE-2026-101891WatchGuard AP improper access control in API service allows unauthenticated access9.3CNA v4.00.3%2026-09-28Fix
CVE-2026-101861Langflow code execution via eval in Component Input Schema2.1CNA v4.00.2%2026-09-28Fix
CVE-2026-101333Red Hat Keycloak Micrometer user-event metrics listener resource exhaustion3.7CNA v3.10.2%2026-09-28
CVE-2026-101292Red Hat JBoss Enterprise Application Platform unsafe reflection8.2CNA v3.10.4%2026-09-28Fix
CVE-2026-101277Trusted Domain Project OpenDKIM Tag Tokenizer dkim.c dkim_process_set less trusted source6.9CNA v4.00.2%2026-09-28
CVE-2026-101265Intelbras TIP 125i Básico sensitive information in source2.3CNA v4.00.2%2026-09-28
CVE-2026-101264Ziroom ZHOME A0101 set_passwd command injection9.4CNA v4.02.3%2026-09-28
CVE-2026-101263Ziroom ZHOME A0101 set_online_client command injection9.4CNA v4.02.3%2026-09-28
CVE-2026-101262Ziroom ZHOME A0101 set_online_client command injection9.4CNA v4.02.4%2026-09-28
CVE-2026-101261Ziroom ZHOME A0101 firstSetup_wifi command injection9.4CNA v4.02.4%2026-09-28
CVE-2026-101260Ziroom ZHOME A0101 firstLogin command injection9.4CNA v4.02.3%2026-09-28
CVE-2026-101205FastStone Image Viewer PCX Decoder out-of-bounds5.3CNA v4.00.2%2026-09-28
CVE-2026-101204FastStone Image Viewer TGA Image FSViewer.exe out-of-bounds5.3CNA v4.00.2%2026-09-28
CVE-2026-101203FastStone Image Viewer 1bpp RLE Decoder out-of-bounds write5.3CNA v4.00.2%2026-09-28
CVE-2026-101202FastStone Image Viewer TGA Image out-of-bounds write5.3CNA v4.00.2%2026-09-28
CVE-2026-101188Netcore POWER13 ubus routerd.passwd_set password recovery6.9CNA v4.00.5%2026-09-28
CVE-2026-101187Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection9.4CNA v4.02.3%2026-09-28
CVE-2026-101146Eleveo Quality Management GWT RPC Handler information disclosure5.3CNA v4.00.3%2026-09-28
CVE-2026-101145Eleveo Call Recording Software User Management userAddAction.do LDAP injection5.3CNA v4.00.2%2026-09-28
CVE-2026-101144Eleveo Call Recording Software Query Builder searchAction.do access control5.3CNA v4.00.2%2026-09-28
CVE-2026-101143Eleveo Quality Management QMBODownload information disclosure5.3CNA v4.00.4%2026-09-28
CVE-2026-101142Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal5.3CNA v4.00.3%2026-09-28
CVE-2026-101141Eleveo Call Recording Software Play Audio audio.jsp cross-site scripting5.1CNA v4.00.2%2026-09-28
CVE-2026-101139Webkul Bagisto Invoice Mass Status Update state authorization5.1CNA v4.00.3%2026-09-28Fix
CVE-2026-101132DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal2.3CNA v4.00.4%2026-09-28
CVE-2026-101131deepseek-ai deepseek-harness dsh index.ts reliance on untrusted inputs in a security decision4.8CNA v4.00.1%2026-09-28
CVE-2026-101111Joomla Extension Ordasoft.com reflected cross-site scripting in Book Library (Free)6.1NVD v3.10.1%2026-09-28
CVE-2026-101110Joomla Extension Ordasoft.com unauthenticated SQL injection in Book Library (Free)9.8NVD v3.10.3%2026-09-28Exploit code
CVE-2026-101109Joomla extension ordasoft.com reflected cross-site scripting in Vehicle Manager (Free)5.3CNA v4.00.3%2026-09-28
CVE-2026-101108Joomla extension ordasoft.com unauthenticated SQL injection in Vehicle Manager (Free)9.3CNA v4.00.3%2026-09-28Exploit code
CVE-2026-101105code-projects Matrimonial System Profile Creation Endpoint SQL injection5.3CNA v4.00.2%2026-09-28
CVE-2026-101102deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox5.3CNA v4.00.2%2026-09-28
CVE-2026-101101ag-ui-protocol ag-ui Middleware convert.ts JSON.parse uncaught exception5.3CNA v4.00.4%2026-09-28Fix
CVE-2026-101100ag-ui-protocol ag-ui Middleware filter-tool-calls.ts FilterToolCallsMiddleware cleanup5.3CNA v4.00.3%2026-09-28Fix
CVE-2026-101099ag-ui-protocol ag-ui Kotlin Community SDK SseParser.kt exceptional condition5.3CNA v4.00.5%2026-09-28
CVE-2026-101098ag-ui-protocol ag-ui HTTP JdkAgentHttpHandler.java readAllBytes resource consumption5.3CNA v4.00.5%2026-09-28
CVE-2026-101093Cotonti cross-site request forgery via User Group Deletion5.3CNA v4.00.1%2026-09-28
CVE-2026-101092SiYuan information disclosure via getCurrentAttrViewImages6.9CNA v4.00.2%2026-09-28Fix
CVE-2026-101091SiYuan SQL injection via Block Query Embed7.1CNA v4.00.3%2026-09-28Fix
CVE-2026-101083PMWeb encryptionhelper.dll information disclosure6.9CNA v4.00.3%2026-09-28
CVE-2026-101082PMWeb downloader.aspx path traversal6.9CNA v4.00.5%2026-09-28
CVE-2026-101081D-Link DI-8400 Web Administration service menu_nat_more.asp menu_nat_more_asp stack-based overflow9.4CNA v4.00.5%2026-09-28
CVE-2026-101080Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal2.4CNA v4.00.1%2026-09-28Fix
CVE-2026-101079agentverus-scanner context.js reliance on untrusted input in a security decision2.4CNA v4.00.1%2026-09-28
CVE-2026-101078deepseek-ai deepseek-harness Landlock Backend profiles.ts isolation4.8CNA v4.00.1%2026-09-28
CVE-2026-101077Netcore NR289-GE boa_temp process_request missing authentication10.0CNA v4.00.7%2026-09-28
CVE-2026-101076Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection10.0CNA v4.02.0%2026-09-28
CVE-2026-101075Netcore NR289-GE Location Time location_time.cgi system os command injection10.0CNA v4.02.5%2026-09-28
CVE-2026-101074Netcore NR289-GE Authentication boa password-check stack-based overflow9.3CNA v4.01.3%2026-09-28
CVE-2026-101073Netcore NR289-GE CGI Dispatcher boa improper authentication6.9CNA v4.00.6%2026-09-28
CVE-2026-101072Netcore NR289-GE CGI ap_ip.cgi system os command injection10.0CNA v4.02.0%2026-09-28
CVE-2026-101071Acrel Electric Unet Web Service upload endpoint upload unrestricted upload5.3CNA v4.00.3%2026-09-28
CVE-2026-101070dbgate files endpoint runners.js files path traversal6.9CNA v4.00.7%2026-09-28
CVE-2026-101069dbgate Export databaseConnections.js exportModelSql path traversal6.9CNA v4.00.8%2026-09-28
CVE-2026-101068dbgate Create Connection endpoint zipJsonLinesData.js zipJsonLinesData path traversal6.9CNA v4.00.8%2026-09-28
CVE-2026-101067dbgate save-uploaded-file endpoint files.js saveUploadedFile path traversal6.9CNA v4.00.7%2026-09-28
CVE-2026-101066dbgate Archive Link Creation archive.js createLink path traversal6.9CNA v4.00.7%2026-09-28
CVE-2026-101055Thinkware U3000 TCP Service GET_STATUS information disclosure6.9CNA v4.00.5%2026-09-28
CVE-2026-101054Thinkware U3000 TCP service wpa_supplicant.conf get_file access control6.9CNA v4.00.3%2026-09-28
CVE-2026-101053Thinkware U3000 TCP service wpa_supplicant.conf PUT_FILE access control6.9CNA v4.00.4%2026-09-28Exploit code
CVE-2026-101052refly-ai refly JWT Token app.config.ts hard-coded credentials6.9CNA v4.00.5%2026-09-28
CVE-2026-101040Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-data denial of service7.1CNA v4.00.4%2026-09-28
CVE-2026-101039FAST FAC1900R devdiscover service copy_msg_element stack-based overflow10.0CNA v4.00.7%2026-09-28
CVE-2026-101038FAST FAC1200R MmtAtePrase stack-based overflow9.4CNA v4.00.4%2026-09-28
CVE-2026-101037FAST FAC1200R devdiscover service parse_advertisement_frame stack-based overflow9.4CNA v4.00.5%2026-09-28
CVE-2026-101036FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal4.8CNA v4.00.2%2026-09-28
CVE-2026-101035aligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception6.9CNA v4.00.5%2026-09-28
CVE-2026-101018dayrui XunruiCMS Group Editing Home.php group_all_edit SQL injection5.1CNA v4.00.2%2026-09-28
CVE-2026-101017Trusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition6.9CNA v4.00.3%2026-09-28
CVE-2026-101016Trusted Domain Project OpenDMARC libopendmarc/opendmarc_policy.c vulnerability6.9CNA v4.00.3%2026-09-28
CVE-2026-101015Trusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input6.9CNA v4.00.3%2026-09-28
CVE-2026-101014Trusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one6.9CNA v4.00.3%2026-09-28
CVE-2026-101013mathurvishal CloudClassroom-PHP-Project updateresultdetails.php SQL injection6.9CNA v4.00.3%2026-09-28
CVE-2026-101012mathurvishal CloudClassroom-PHP-Project makeresult.php SQL injection6.9CNA v4.00.3%2026-09-28
CVE-2026-101011aaPanel BaoTa Domain domainMod.py get_domain_status SQL injection5.1CNA v4.00.2%2026-09-28
CVE-2026-101010aaPanel BaoTa data.py getData SQL injection5.1CNA v4.00.2%2026-09-28
CVE-2026-101009aaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection9.3CNA v4.01.8%2026-09-28
CVE-2026-101008aaPanel BaoTa File Merge files.py merge_split_file command injection9.4CNA v4.02.3%2026-09-28
CVE-2026-101007aaPanel BaoTa Database Backup database.py InputSql os command injection9.3CNA v4.01.8%2026-09-28
CVE-2026-101006Frappe HR Permission Validation __init__.py get_attendance_requests authorization5.3CNA v4.00.2%2026-09-28
CVE-2026-101005October CMS SSRF Protection ResizeImages.php server-side request forgery6.9CNA v4.00.3%2026-09-28Fix
CVE-2026-101004notionnext-org NotionNext Authentication Guard cache.js cleanCache missing authentication6.9CNA v4.00.5%2026-09-28
CVE-2026-101003Cesanta Mongoose MQTT Broker main.c fn stack-based overflow6.9CNA v4.00.5%2026-09-28Fix
CVE-2026-101002Netcore NBR200V2 Tools Ping network_tools system os command injection9.4CNA v4.01.7%2026-09-28
CVE-2026-101001Netcore NBR200V2 Web Management network_tools eval os command injection10.0CNA v4.02.6%2026-09-28
CVE-2026-101000Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization10.0CNA v4.00.5%2026-09-28
CVE-2026-100909OctoberCMS ResizeImages.php getSourcePathForResize server-side request forgery6.9CNA v4.00.3%2026-09-28Fix
CVE-2026-100908Eyeplus p2pcam HTTP stack-based overflow8.7CNA v4.00.8%2026-09-28
CVE-2026-100907Eyeplus p2pcam service snapshot information disclosure6.9CNA v4.00.3%2026-09-28
CVE-2026-100906Eyeplus ONVIF Device GetUsers information disclosure6.9CNA v4.00.3%2026-09-28
CVE-2026-100904amirsanni Mini-Inventory-and-Sales-Management-System Items Management Items.php cross-site scripting5.1CNA v4.00.2%2026-09-28
CVE-2026-100903ООО НПО Ритм GEOritm REST API obj-groups missing authentication6.9CNA v4.00.5%2026-09-28Fix
CVE-2026-100902Barco ClickShare CX-20 Gen2 Wallpaper Upload improper input validation7.1CNA v4.00.3%2026-09-28
CVE-2026-100901athlon1600 youtube-downloader stream.php stream server-side request forgery6.9CNA v4.00.3%2026-09-28
CVE-2026-100900DevaslanPHP project-management Jira Import server-side request forgery5.1CNA v4.00.2%2026-09-28
CVE-2026-100899DevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw SQL injection5.3CNA v4.00.2%2026-09-28
CVE-2026-100898DevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw SQL injection5.3CNA v4.00.2%2026-09-28
CVE-2026-100897fuzui StudentInfo Password Change endpoint moditypasswordstu authorization5.1CNA v4.00.2%2026-09-28
CVE-2026-100896TOTOLINK N150RT Web Management formWlSiteSurvey system os command injection9.4CNA v4.01.9%2026-09-28
CVE-2026-100895Trusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference6.9CNA v4.00.7%2026-09-28Fix
CVE-2026-100894mathurvishal CloudClassroom-PHP-Project updateguest.php SQL injection5.3CNA v4.00.3%2026-09-28
CVE-2026-100893Privoce VoceChat Server open_graphic_parse endpoint resource.rs fetch server-side request forgery6.9CNA v4.00.5%2026-09-28
CVE-2026-100892aligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption6.9CNA v4.00.6%2026-09-28
CVE-2026-100891Trusted Domain Project OpenDMARC Internationalized Domain Name Handler vulnerability6.9CNA v4.00.3%2026-09-28
CVE-2026-100890Trusted Domain Project OpenDMARC SPF Parser null pointer dereference6.9CNA v4.00.4%2026-09-28
CVE-2026-100753Joomla extension ordasoft.com reflected cross-site scripting in Real Estate Manager (Free)5.3CNA v4.00.3%2026-09-28
CVE-2026-100752Joomla extension ordasoft.com unauthenticated SQL injection in Real Estate Manager (Free)9.3CNA v4.00.3%2026-09-28Exploit code
CVE-2026-100751Joomla extension regularlabs.com Privileged stored XSS7.5CNA v4.00.3%2026-09-28
CVE-2026-100750Joomla extension regularlabs.com arbitrary file read / SSRF in Modules Anywhere for Joomla8.5CNA v4.00.2%2026-09-28
CVE-2026-100392InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form`7.0CNA v4.00.2%2026-09-28
CVE-2026-100371InvoicePlane Users::form incorrect authorization8.7CNA v4.00.3%2026-09-28
CVE-2026-100370rhukster dom-sanitizer isDangerousUrl method improper input validation4.7CNA v3.10.3%2026-09-28Fix
CVE-2026-97686VxWorks 7 memory resource leak5.5CNA v3.10.1%2026-09-28
CVE-2026-97399The GNU C Library glibc one-byte overread in strncasecmp on Power83.7CNA v3.10.3%2026-09-28Fix
CVE-2026-97335Incorrect authorization in LXD storage volume API allows reading volumes from other projects7.7CNA v3.10.2%2026-09-28Fix
CVE-2026-97027Red Hat Enterprise Linux 10 flatpak: Flatpak: Denial of service3.6CNA v3.10.1%2026-09-28Fix
CVE-2026-97026Flatpak system-helper cache path insecure temporary file3.9CNA v3.10.1%2026-09-28Fix
CVE-2026-97025Red Hat Enterprise Linux 10 insecure temporary file3.2CNA v3.10.1%2026-09-28Fix
CVE-2026-97023Red Hat Enterprise Linux 10 flatpak: Flatpak: Arbitrary file deletion in root context7.1CNA v3.10.3%2026-09-28Fix
CVE-2026-96760Authlib library contains a signature‑verification bypass vulnerability9.8CISA ADP v3.10.3%2026-09-28Exploit codeFix
CVE-2026-96740Red Hat StreamsHub Console for Apache Kafka® unsafe reflection6.5CNA v3.10.4%2026-09-28
CVE-2026-96538WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation8.7CNA v4.00.3%2026-09-28Fix
CVE-2026-95104Buffalo WSR-300HP stack-based buffer overflow8.7CNA v4.00.4%2026-09-28Fix
CVE-2026-94287Denial of service via unsigned underflow in libXpm's write path5.5CNA v3.10.1%2026-09-28Fix
CVE-2026-94286Out-of-bounds read in libXtst's RECORD reply parser7.1CNA v3.10.2%2026-09-28Fix
CVE-2026-94285Out-of-bounds read in libX11's byte-oriented codeset parser5.1CNA v3.10.1%2026-09-28Fix
CVE-2026-94284Out-of-bounds read vulnerability in libX11's XIM trigger-keyregistration parser.registration parser5.5CNA v3.10.1%2026-09-28Fix
CVE-2026-94283Out-of-bounds read vulnerability in libX11's XIM (X Input method) attribute parser6.5CNA v3.10.2%2026-09-28Fix
CVE-2026-94282Out-of-bounds read in libXi's XI2 enter/leave/focus cookie conversion5.6CNA v3.10.1%2026-09-28Fix
CVE-2026-94194elixir-mint mint HTTP/1 client HTTP request smuggling6.3CNA v4.00.3%2026-09-28Fix
CVE-2026-93540Fleet applies namespace labels and annotations without the bundle's service account privileges6.5CNA v3.10.2%2026-09-28Fix
CVE-2026-93539Unauthenticated GitRepo Spec Mutation via Fleet Git Webhook Receiver5.4CNA v3.10.2%2026-09-28Fix
CVE-2026-93538SUSE Rancher Fleet agent-initiated registration information disclosure7.1CNA v3.10.2%2026-09-28Fix
CVE-2026-93537Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory6.5CNA v3.10.3%2026-09-28Fix
CVE-2026-93355LiteLLM Weak JWT Authentication via Email-Based User Lookup7.6CNA v4.00.3%2026-09-28Fix
CVE-2026-93348Unsloth Zoo code injection via model_type in config.json8.6CNA v4.00.4%2026-09-28Fix
CVE-2026-93000SPS-Suite WordPress plugin unauthenticated time-based SQLi via Search6.8CISA ADP v3.10.2%2026-09-28
CVE-2026-92996Verge3D - Unauthenticated Payment Bypass via v3d_payment_done5.3CNA v3.10.1%2026-09-28Fix
CVE-2026-92103Mint HTTP/2 client buffers oversized frames MiB before enforcing max_frame_size6.3CNA v4.00.3%2026-09-28Fix
CVE-2026-91206Apache Roller: Reflected XSS in the optional LDAP comment authenticator6.1CNA v3.10.4%2026-09-28Fix
CVE-2026-91204Apache Roller: Stored javascript: URI in HTML comments6.1CNA v3.10.4%2026-09-28Fix
CVE-2026-91154MarcosCamara01 Ecommerce Template product cache revalidation Server action missing authentication6.9CNA v4.00.4%2026-09-28Fix
CVE-2026-91096Facebook proxygen use-after-free7.5CISA ADP v3.10.3%2026-09-28Fix
CVE-2026-91095Facebook proxygen use-after-free5.3CISA ADP v3.10.2%2026-09-28Fix
CVE-2026-91043elixir-mint mint resource exhaustion8.2CNA v4.00.4%2026-09-28Fix
CVE-2026-91006Apache Karaf: OS command injection in Child-Instance Launch (instance:* / InstancesMBean)8.8CISA ADP v3.11.1%2026-09-28Fix
CVE-2026-90979Apache Karaf: LDAP filter injection in JAAS LDAP login modules7.3CISA ADP v3.10.4%2026-09-28Fix
CVE-2026-90926Code injection in Innotim Software's Logsign SIEM8.8CNA v3.10.3%2026-09-28Fix
CVE-2026-90925Path traversal in Innotim Software's Logsign SIEM7.1CNA v3.10.3%2026-09-28Fix
CVE-2026-90924Default Admin Credentials in Innotim Software's Logsign SIEM9.8CNA v3.10.3%2026-09-28Fix
CVE-2026-89411Paymattic WordPress plugin unauthenticated Payment bypass via Unbound Stripe PaymentIntent5.3CNA v3.10.1%2026-09-28Fix
CVE-2026-89303Post Voting System WordPress plugin Subscriber+ SQLi via row parameter6.4CISA ADP v3.10.1%2026-09-28
CVE-2026-89300WP Verify API REST routes missing authorization5.3CISA ADP v3.10.2%2026-09-28
CVE-2026-88828Blacklist Manager authentication bypass5.4CNA v3.10.2%2026-09-28Fix
CVE-2026-88816DBI versions for Perl incorrectly treat numeric values as strings in FetchHashKeyName7.5CISA ADP v3.10.6%2026-09-28Fix
CVE-2026-88815DBI versions for Perl incorrectly treat numeric values as strings in sql_type_cast_svpv6.2CISA ADP v3.10.2%2026-09-28Fix
CVE-2026-88808SUSE Rancher Fleet Fleet agent execution with unnecessary privileges8.8CNA v3.10.3%2026-09-28Fix
CVE-2026-88805Session not Revoked Server-Side on Logout in Rancher8.1CNA v3.10.3%2026-09-28Fix
CVE-2026-88804Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher9.6CNA v3.10.5%2026-09-28Fix
CVE-2026-87969WatchGuard AP authenticated command injection in Diagnostic CLI8.6CNA v4.01.2%2026-09-28Fix
CVE-2026-87799Arbitrary file write on LXD host via symlink in migration stream9.9CNA v3.10.4%2026-09-28Fix
CVE-2026-87798LXD client recursive file pull allows directory escape via malicious VM agent5.8CNA v3.10.2%2026-09-28Fix
CVE-2026-87752HTML injection in Rolantis Information Technologies' Agentis6.1CNA v3.10.1%2026-09-28Fix
CVE-2026-87741ConvertPlus WordPress plugin authenticated (Subscriber+) PHP object injection via style parameter8.8CNA v3.10.4%2026-09-28Fix
CVE-2026-87723Google untrusted search path (path Hijacking) in fuse-archive5.4CNA v4.00.1%2026-09-28Fix
CVE-2026-87114Red Hat kube-compare arbitrary code execution7.1CNA v3.10.2%2026-09-28Fix
CVE-2026-86950Apple Multiple Products out-of-bounds write8.8CISA ADP v3.11.2%2026-09-28KEVExploit codeFix
CVE-2026-86838Bookly WordPress plugin unauthenticated Payment bypass via Booking Price manipulation5.3CNA v3.10.2%2026-09-28Fix
CVE-2026-86595SQLi in Iron Mountain's enVision8.8CNA v3.10.2%2026-09-28Fix
CVE-2026-86530Buffalo WSR-300HP OS command injection8.6CNA v4.00.4%2026-09-28Fix
CVE-2026-86507Apache Roller: Stored XSS in comment moderation via comment author URL6.1CNA v3.10.4%2026-09-28Fix
CVE-2026-86335LXD Cross-Project Private Image Theft via Unsanitized GetImageFromAnyProject Local Reuse6.3CNA v3.10.2%2026-09-28Fix
CVE-2026-86334CLI path traversal via Content-Disposition in LXD Image Export/Copy4.2CNA v3.10.3%2026-09-28Fix
CVE-2026-86330Red Hat Openshift Data Foundation 4 OS command injection7.2CNA v3.12.2%2026-09-28
CVE-2026-86102WatchGuard AP command injection in Internal Management API allows command execution9.3CNA v4.02.0%2026-09-28Fix
CVE-2026-85644XS::Parse::Infix versions from for Perl treat a number as an array reference7.5CISA ADP v3.10.4%2026-09-28Fix
CVE-2026-85526Canonical LXD Btrfs storage driver path traversal9.9CNA v3.10.5%2026-09-28Fix
CVE-2026-85185Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root9.6CNA v3.10.4%2026-09-28Fix
CVE-2026-85134Arbitrary file upload leading to remote command execution in Bimser's eBA Plus8.8CNA v3.10.3%2026-09-28Fix
CVE-2026-84895Facebook proxygen use-after-free7.3CISA ADP v3.10.2%2026-09-28Fix
CVE-2026-84894Meta Platforms moxygen use-after-free7.5CISA ADP v3.10.3%2026-09-28
CVE-2026-84744WPForms Lite - Unauthenticated arbitrary Shortcode Execution via form Field Repopulation6.5CNA v3.10.2%2026-09-28Fix
CVE-2026-82969Stored XSS in BİMSER's eBA Plus5.4CNA v3.10.1%2026-09-28Fix
CVE-2026-82936Denial of service in mH-DEVELOPER5.9CNA v4.00.2%2026-09-28Fix
CVE-2026-82935F&F Filipowski mH-DEVELOPER firmware vulnerability6.9CNA v4.00.4%2026-09-28Fix
CVE-2026-82933Cleartext transmission of sensitive information in mH-DEVELOPER6.0CNA v4.00.2%2026-09-28Fix
CVE-2026-82932Missing Firewall Configuration in mH-DEVELOPER5.3CNA v4.00.2%2026-09-28Fix
CVE-2026-82930Missing authentication in mH-DEVELOPER6.4CNA v4.00.2%2026-09-28Fix
CVE-2026-82929F&F Filipowski mH-DEVELOPER SSH host keys hard-coded cryptographic key6.3CNA v4.00.2%2026-09-28Fix
CVE-2026-82928Undocumented access path in mH-DEVELOPER7.7CNA v4.00.2%2026-09-28Fix
CVE-2026-82915Path traversal in Bimser Solution Software's eBA Plus6.5CNA v3.10.3%2026-09-28Fix
CVE-2026-82546Apache Roller: Stored cross-site scripting through incoming Trackback links6.1CNA v3.10.3%2026-09-28Fix
CVE-2026-82387Apache Roller: Stored cross-site scripting via uploaded media content type5.4CNA v3.10.2%2026-09-28Fix
CVE-2026-82386Apache Roller: XML external entity processing in OPML bookmark import7.7CNA v3.10.3%2026-09-28Fix
CVE-2026-82385Apache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files6.5CNA v3.10.3%2026-09-28Fix
CVE-2026-82384Apache Roller: Unauthenticated deserialization in the XML-RPC endpoint9.8CNA v3.10.8%2026-09-28Exploit codeFix
CVE-2026-82383Apache Roller: Anonymous setup action allows frontpage configuration tampering8.2CNA v3.10.5%2026-09-28Fix
CVE-2026-82382Apache Roller: Reflected cross-site scripting in the frontpage directory parameter6.1CNA v3.10.3%2026-09-28Fix
CVE-2026-82381Apache Roller: Stored cross-site scripting in the authoring UI5.4CNA v3.10.2%2026-09-28Fix
CVE-2026-82380Apache Roller: CSRF protection bypass via self-generated salt validation8.1CNA v3.10.3%2026-09-28Fix
CVE-2026-82379Apache Roller: WSSE digest authentication headers can be replayed7.7CNA v3.10.4%2026-09-28Fix
CVE-2026-82378Apache Roller: OAuth authorization endpoint trusts request-supplied identity9.0CNA v3.10.4%2026-09-28Fix
CVE-2026-82377Apache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers9.9CNA v3.10.5%2026-09-28Fix
CVE-2026-82376Apache Roller: XML external entity processing in trackback response parser7.7CNA v3.10.3%2026-09-28Fix
CVE-2026-82375Apache Roller: Server-side request forgery via entry trackback and enclosure URLs7.4CNA v3.10.4%2026-09-28Fix
CVE-2026-82348Apache Roller: Cross-weblog resource tampering via unscoped authoring lookups7.7CNA v3.10.4%2026-09-28Fix
CVE-2026-82326HTML injection in Enocta Educational's Enocta Platform4.1CNA v3.10.1%2026-09-28
CVE-2026-82323Improper authorization in Enocta Educational's Enocta Platform8.1CNA v3.10.3%2026-09-28
CVE-2026-81867Deserialization of untrusted data in Application Integration allows remote code execution9.4CNA v4.00.4%2026-09-28Fix
CVE-2026-81375Confused deputy in Application Integration allows Internal File Read8.3CNA v4.00.3%2026-09-28Fix
CVE-2026-80359Dell Boot Optimized Server Storage (BOSS) improper access control6.8CNA v3.10.2%2026-09-28Fix
CVE-2026-80358Dell Boot Optimized Server Storage (BOSS) improper access control5.1CNA v3.10.1%2026-09-28Fix
CVE-2026-80357Dell Boot Optimized Server Storage (BOSS) improper access control7.0CNA v3.10.1%2026-09-28Fix
CVE-2026-78424SUSE neuvector improper parameter handling8.8CNA v3.10.2%2026-09-28Fix
CVE-2026-75600FreePBX: Authenticated API generatedocs host command injection8.6CNA v4.00.8%2026-09-28Fix
CVE-2026-73642Path traversal in Dayforce ESS Excelity9.2CNA v4.00.4%2026-09-28Fix
CVE-2026-73641Multiple reflected XSS in Dayforce ESS Excelity5.1CNA v4.00.3%2026-09-28Fix
CVE-2026-73640Time-based SQL injection in Dayforce ESS Excelity9.3CNA v4.00.3%2026-09-28Fix
CVE-2026-70413Dell Live Optics Collector hard-coded password5.6CNA v3.10.1%2026-09-28Fix
CVE-2026-59563HMAC Confirmation Token Unbinding in zscaler-mcp-server4.6CNA v3.10.1%2026-09-28Fix
CVE-2026-55160Authenticated server-side request forgery (SSRF) via feed URL in Stringer7.6CNA v3.10.3%2026-09-28
CVE-2026-55157ooples token-optimizer-mcp token Optimizer MCP: OS command injection in smart_user8.4CNA v3.10.7%2026-09-28Fix
CVE-2026-55156ooples token-optimizer-mcp dashboard HTTP server path traversal5.3CNA v3.10.4%2026-09-28Fix
CVE-2026-55096leshchenko1979 fast-mcp-telegram SSRF7.1CNA v3.10.2%2026-09-28Fix
CVE-2026-54710FreePBX: Authenticated Superfecta arbitrary PHP code execution (RCE via Unsafe file inclusion)8.6CNA v4.00.5%2026-09-28Fix
CVE-2026-54708Authenticated remote code execution via path traversal in FreePBX Backup module8.6CNA v4.00.5%2026-09-28Fix
CVE-2026-54675FreePBX: Authenticated remote code execution via file upload and Convert in Soundlang module8.7CNA v4.00.7%2026-09-28Fix
CVE-2026-54674Authenticated command injection in FreePBX UCP interface8.6CNA v4.00.9%2026-09-28Fix
CVE-2026-54160Network UPS Tools NUT GitHub Actions script inclusion of untrusted functionality8.2CNA v3.10.2%2026-09-28
CVE-2026-52749Improper authentication in Kaon AR2140X5.3CNA v4.00.3%2026-09-28
CVE-2026-52748Missing authentication for backup functionality in Kaon AR2140X7.1CNA v4.00.3%2026-09-28
CVE-2026-49994Bluehood: Missing authentication on Bluehood API routes when web auth is enabled9.1CNA v3.10.3%2026-09-28Fix
CVE-2026-48100Payy: Agg_agg trailing message slots are unconstrained and allow forged burn messages8.7CNA v4.00.2%2026-09-28Fix
CVE-2026-45562FreePBX: Authenticated remote code execution in FreePBX Music on Hold (MoH) module7.7CNA v4.00.4%2026-09-28Fix
CVE-2026-19759Incorrect authorization in Application Integration allows Internal Stubby RPC Execution9.4CNA v4.00.2%2026-09-28Fix
CVE-2026-19444Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes6.5CNA v3.10.2%2026-09-28Fix
CVE-2026-18825github.com/antono connect-cors origin validation error in the connect-xcors npm package5.3CNA v4.00.2%2026-09-28
CVE-2026-18747zephyrproject zephyr MCUmgr serial transport out-of-bounds read6.8CNA v3.10.1%2026-09-28Fix
CVE-2026-18746Null pointer dereference in Zephyr LwM2M client when the CoAP Block1 context pool is exhausted5.9CNA v3.10.3%2026-09-28Fix
CVE-2026-18417zephyrproject Zephyr BSD sockets vulnerability6.5CNA v3.10.2%2026-09-28Fix
CVE-2026-18416zephyrproject zephyr out-of-bounds read in CoAP well-known-core Uri-Query href matching3.7CNA v3.10.2%2026-09-28Fix
CVE-2026-18415zephyrproject zephyr IEEE 802.15.4 L2 transmit path out-of-bounds write6.3CNA v3.10.1%2026-09-28Fix
CVE-2026-18414zephyrproject zephyr ADI MAX32 ADC driver out-of-bounds write7.8CNA v3.10.1%2026-09-28Fix
CVE-2026-18413zephyr NXP MCUX LPADC ADC driver out-of-bounds write7.8CNA v3.10.1%2026-09-28Fix
CVE-2026-16513zephyrproject zephyr RTIO syscall verifier out-of-bounds write7.8CNA v3.10.1%2026-09-28Fix
CVE-2026-15953ABB Protection and control IED manager (PCM600) path traversal during Project Archive Import5.6CNA v4.00.1%2026-09-28Fix
CVE-2026-15952ABB Protection and control IED manager (PCM600) improper permission Assignment in Scheduler service7.1CNA v4.00.1%2026-09-28
CVE-2026-13018Google Chrome out-of-bounds access4.3CISA ADP v3.10.2%2026-09-28Fix
CVE-2026-12342SailPoint IdentityIQ Improper Form Validation vulnerability9.6CNA v3.10.2%2026-09-28
CVE-2026-12269Authenticated File Write to RCE via keepalived in DDI Central8.8CNA v3.17.0%2026-09-28Fix
CVE-2026-12268Zoho DDI Central authenticated PowerShell injection leads to RCE8.8CNA v3.14.7%2026-09-28Fix
CVE-2026-12267Zoho DDI Central Authenticated PowerShell injection in DNS Query Resolution Policy leads to RCE7.2CNA v3.13.6%2026-09-28Fix
CVE-2026-12265Zoho DDI Central missing authorization on HA Failover Config allows Complete Data Destruction8.8CNA v3.10.9%2026-09-28Fix
CVE-2026-12264Zoho DDI Central Authenticated File Write via HA Failover Config upload leads to RCE8.8CNA v3.12.0%2026-09-28Fix
CVE-2026-7172Stored cross-site scripting (XSS) in TPVEnlanube4.8CNA v4.00.3%2026-09-28
CVE-2026-7171Stored cross-site scripting (XSS) in TPVEnlanube4.8CNA v4.00.3%2026-09-28
CVE-2026-7170Stored cross-site scripting (XSS) in TPVEnlanube4.8CNA v4.00.3%2026-09-28
CVE-2026-4556MacOS Exam4 local privilege escalation via command injection7.8CNA v3.10.9%2026-09-28
CVE-2026-101090Nezha host header injection via OAuth2 redirect_uri9.3CNA v4.00.4%2026-09-27
CVE-2026-101089Nezha information disclosure via /API/v1/profile2.3CNA v4.00.2%2026-09-27Fix
CVE-2026-101088Nezha denial of service via Concurrent Server Delete6.0CNA v4.00.2%2026-09-27Fix
CVE-2026-101087Nezha SSRF Denylist Bypass IPv65.3CNA v4.00.3%2026-09-27Fix
CVE-2026-101086Nezha Dashboard Task Type Validation Bypass7.1CNA v4.00.3%2026-09-27Fix
CVE-2026-101085Nezha denial of service via Alert Rule7.1CNA v4.00.2%2026-09-27Fix
CVE-2026-101084obot authorization bypass via /mcp-connect9.3CNA v4.00.3%2026-09-27Fix
CVE-2026-101065Obot Quickstart Docker Deployment Unauthenticated Admin Access9.3CNA v4.00.4%2026-09-27Fix
CVE-2026-101064Obot server-side request forgery via MCP8.3CNA v4.00.2%2026-09-27Fix
CVE-2026-101063Obot authentication bypass via Registry API6.9CNA v4.00.2%2026-09-27Fix
CVE-2026-101062Obot authentication bypass via OAuth Dynamic Client Registration8.7CNA v4.00.3%2026-09-27Fix
CVE-2026-101061universal-tool-calling-protocol python-utcp utcp-gql and utcp-websocket SSRF2.3CNA v4.00.2%2026-09-27Fix
CVE-2026-101060python-utcp SSRF via unvalidated HTTP redirects8.4CNA v4.00.2%2026-09-27Fix
CVE-2026-101059universal-tool-calling-protocol python-utcp utcp-http OAuth2 tokenUrl Trust Boundary Bypass7.1CNA v4.00.2%2026-09-27Fix
CVE-2026-101058python-utcp SSRF via Remote HTTP Manual7.1CNA v4.00.2%2026-09-27Fix
CVE-2026-101057universal-tool-calling-protocol python-utcp utcp-mcp SSRF via unvalidated MCP server URL2.3CNA v4.00.1%2026-09-27Fix
CVE-2026-101056Cloudreve authentication bypass via Cached Context Hint6.9CNA v4.00.2%2026-09-27Fix
CVE-2026-101051Cloudreve path traversal via Remote Download2.3CNA v4.00.2%2026-09-27Fix
CVE-2026-101050Heym authentication bypass via Telegram Webhook8.3CNA v4.00.3%2026-09-27Fix
CVE-2026-101049Heym Slack Webhook signature verification Bypass8.3CNA v4.00.3%2026-09-27Fix
CVE-2026-101048Cloudreve SSRF via Admin.Read OAuth scope5.3CNA v4.00.2%2026-09-27Fix
CVE-2026-101047Fleet Unauthenticated iOS App Download via Predictable URLs6.9CNA v4.00.2%2026-09-27Fix
CVE-2026-101046Fleet SQL injection via ORDER BY Activity endpoints4.3NVD v3.10.2%2026-09-27Fix
CVE-2026-101045Fleet Homebrew Cask OS command injection via Metadata8.9CNA v4.00.8%2026-09-27Fix
CVE-2026-101044pnpm pacquet path traversal via lockfile alias7.1CNA v4.00.3%2026-09-27Fix
CVE-2026-101043pnpm Environment Variable Exfiltration via Proxy settings8.3CNA v4.00.2%2026-09-27Fix
CVE-2026-101042parse-community parse-server Parse Server authentication bypass via Unverified Provider Identity7.4CNA v4.00.2%2026-09-27Fix
CVE-2026-101041Vulnerability-Lookup race condition in Account Recovery Token Consumption allows Password takeover6.3CNA v4.00.2%2026-09-27
CVE-2026-101033KitchenOwl IDOR via unchecked category ID5.3CNA v4.00.2%2026-09-27
CVE-2026-101032navi OS command injection via Cheatsheet variables7.3CNA v4.00.1%2026-09-27
CVE-2026-100889Trusted Domain Project OpenDKIM Decoder util.c dkim_qp_decode off-by-one6.9CNA v4.00.3%2026-09-27
CVE-2026-100888Trusted Domain Project OpenDKIM DKIM Signature Header Selection out-of-bounds write6.9CNA v4.00.3%2026-09-27Fix
CVE-2026-100887amirsanni Mini-Inventory-and-Sales-Management-System SQL injection5.3CNA v4.00.2%2026-09-27
CVE-2026-100886Seetong T8108/T8108P/T8116/T8232 Debug service improper authentication10.0CNA v4.00.8%2026-09-27Exploit code
CVE-2026-100885Krayin laravel-crm admin-config-setup API Endpoint CanInstall.php authorization6.9CNA v4.01.0%2026-09-27Exploit codeFix
CVE-2026-100884Krayin laravel-crm attachment-download endpoint acl.php resource injection5.3CNA v4.00.5%2026-09-27Fix
CVE-2026-100883Krayin laravel-crm acl.php access control5.3CNA v4.00.5%2026-09-27Fix
CVE-2026-100882Krayin laravel-crm Admin settings endpoint index.blade.php cross-site scripting4.8CNA v4.00.3%2026-09-27Fix
CVE-2026-100881zhistaredu StarTraining application.yml cross-site scripting2.1CNA v4.00.2%2026-09-27
CVE-2026-100880zhistaredu StarTraining upload Endpoint MimeTypeUtils.java cross-site scripting5.1CNA v4.00.2%2026-09-27
CVE-2026-100879zhistaredu StarTraining dataScope Endpoint SysRoleServiceImpl.java checkRoleAllowed authorization5.3CNA v4.00.2%2026-09-27
CVE-2026-100878zhistaredu StarTraining authRole Endpoint SysUser.java SysUser.isAdmin authorization5.3CNA v4.00.2%2026-09-27
CVE-2026-100877mathurvishal CloudClassroom-PHP-Project registrationform.php cross-site scripting5.3CNA v4.00.3%2026-09-27
CVE-2026-100876mathurvishal CloudClassroom-PHP-Project loginlinkstudent.php missing authentication5.3CNA v4.00.3%2026-09-27
CVE-2026-100875mathurvishal CloudClassroom-PHP-Project updatedetailsfromfaculty.php SQL injection6.9CNA v4.00.3%2026-09-27
CVE-2026-100874mathurvishal CloudClassroom-PHP-Project addnewstudent.php SQL injection6.9CNA v4.00.3%2026-09-27
CVE-2026-100873mathurvishal CloudClassroom-PHP-Project cross-site request forgery5.3CNA v4.00.2%2026-09-27
CVE-2026-100872Sylius and Payment Amount Overwrite8.7CNA v4.00.2%2026-09-27Fix
CVE-2026-100871Sylius,,,, and JWT Audience Confusion allows Admin API Authentication8.7CNA v4.00.3%2026-09-27Fix
CVE-2026-100870Sylius,,,, and Admin Password Reset Poisoning via host header8.7CNA v4.00.3%2026-09-27Fix
CVE-2026-100869Sylius and arbitrary Payment action via Shop API8.2CNA v4.00.3%2026-09-27Fix
CVE-2026-100868Penpot Unauthenticated WebSocket Access via MCP Bridge5.3CNA v4.00.3%2026-09-27Fix
CVE-2026-100867spaceship-prompt Terminal escape sequence injection4.8CNA v4.00.1%2026-09-27
CVE-2026-100866onefetch Terminal escape sequence injection4.8CNA v4.00.1%2026-09-27Fix
CVE-2026-100865Heym remote code execution via eval sandbox escape8.7CNA v4.00.3%2026-09-27Fix
CVE-2026-100864heym remote code execution via Expression Engine8.7CNA v4.00.7%2026-09-27Fix
CVE-2026-100863Heym SSRF via image fetching and IPv6 validation5.3CNA v4.00.2%2026-09-27Fix
CVE-2026-100862heym multiple Secrets plaintext storage6.9CNA v4.00.2%2026-09-27Fix
CVE-2026-100861heym SSRF via credential-controlled base URLs5.3CNA v4.00.2%2026-09-27Fix
CVE-2026-100860heym authentication bypass via Redis Node6.8CNA v4.00.1%2026-09-27Fix
CVE-2026-100859Heym Credential Exfiltration via URL Override7.1CNA v4.00.3%2026-09-27Fix
CVE-2026-100858heym server-side request forgery via Workflow Nodes7.6CNA v4.00.3%2026-09-27Fix
CVE-2026-100857AzuraCast remote code execution via Liquidsoap string interpolation8.6CNA v4.00.3%2026-09-27Fix
CVE-2026-100856AzuraCast code injection via Remote Relay Password8.7CNA v4.00.4%2026-09-27Fix
CVE-2026-100855AzuraCast missing permission check via /play7.1CNA v4.00.2%2026-09-27Fix
CVE-2026-100854AzuraCast Metadata injection via Liquidsoap API5.3CNA v4.00.2%2026-09-27Fix
CVE-2026-100853AzuraCast On-Demand Download endpoint authorization bypass8.2CNA v4.00.2%2026-09-27Fix
CVE-2026-100852AzuraCast command injection via Streamer Username8.7CNA v4.03.7%2026-09-27Fix
CVE-2026-100851AzuraCast missing authorization7.2CNA v4.00.2%2026-09-27Fix
CVE-2026-100850AzuraCast SSRF and Local File Read via Remote Playlist4.8CNA v4.00.2%2026-09-27Fix
CVE-2026-100849AzuraCast SSRF Filter Bypass via Hostname and Private IPs7.1CNA v4.00.2%2026-09-27Fix
CVE-2026-100848AzuraCast server-side request forgery via Remote Relay URL7.1CNA v4.00.2%2026-09-27Fix
CVE-2026-100847AzuraCast DQL injection via sortOrder8.7CNA v4.00.3%2026-09-27Fix
CVE-2026-100846MONAI remote code execution via Pickle deserialization8.8NVD v3.10.3%2026-09-27Fix
CVE-2026-100845MONAI remote code execution via NumpyReader8.5CNA v4.00.1%2026-09-27Fix
CVE-2026-100844MONAI OS command injection via dataset_name_or_id7.8NVD v3.10.8%2026-09-27Fix
CVE-2026-100843MONAI remote code execution via algo_from_pickle8.5CNA v4.00.2%2026-09-27Fix
CVE-2026-100842MONAI _get_fake_spatial_shape eval sandbox bypass via Attribute Chains8.8NVD v3.10.1%2026-09-27Fix
CVE-2026-100841MONAI PersistentDataset remote code execution via Pickle Cache8.5CNA v4.00.1%2026-09-27Fix
CVE-2026-100840MONAI remote code execution via bundle configuration8.5CNA v4.00.2%2026-09-27Fix
CVE-2026-100839Contrast AML injection remote code execution8.4CNA v4.00.1%2026-09-27Fix
CVE-2026-100838Contrast CopyFile Policy Symlink Subversion8.6CNA v4.00.2%2026-09-27Fix
CVE-2026-100837Edgeless Systems Contrast credential leak via Registry Suffix Matching6.3CNA v4.00.2%2026-09-27Fix
CVE-2026-100836Edgeless Systems Contrast denial of service via ciphertextContainer5.3CNA v4.00.1%2026-09-27Fix
CVE-2026-100835Contrast Remote Attestation Relay Attack9.1CNA v4.00.2%2026-09-27Exploit codeFix
CVE-2026-100834http4k Digest Authentication Replay Protection Bypass8.2CNA v4.00.3%2026-09-27Fix
CVE-2026-100833Contrast Image Substitution via Policy Generation8.6CNA v4.00.2%2026-09-27Exploit codeFix
CVE-2026-100749Joomla extension svenbluege.de CSRF in backend cleanup actions in Event Gallery extension5.1CNA v4.00.1%2026-09-27
CVE-2026-100748Joomla extension svenbluege.de CSRF in various cart actions in Event Gallery extension6.9CNA v4.00.2%2026-09-27
CVE-2026-100747Joomla extension svenbluege.de CSRF in image upload in Event Gallery extension5.1CNA v4.00.1%2026-09-27
CVE-2026-100746coollabsio Coolify GitHub App Setup redirect missing authentication6.9CNA v4.00.5%2026-09-27Fix
CVE-2026-100745Edimax BR-6428nC Wireless Wizard formWizSurvey stack-based overflow5.3CNA v4.00.3%2026-09-27
CVE-2026-100744coollabsio Coolify Route-Level Middleware CanUpdateResource.php authorization6.9CNA v4.00.5%2026-09-27Fix
CVE-2026-100741Improper neutralization of directives in dynamically evaluated code (eval injection) in hMailServer9.8CNA v3.11.7%2026-09-27Fix
CVE-2026-100740D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write9.4CNA v4.00.5%2026-09-27Exploit code
CVE-2026-100725http4k Cookie Scoping Bypass via BasicCookieStorage8.3CNA v4.00.2%2026-09-27Fix
CVE-2026-100724http4k host Header Routing Bypass via reverseProxy6.3CNA v4.00.3%2026-09-27Fix
CVE-2026-100723vm2 Memory Disclosure via zlib Buffer Pool6.9CNA v4.00.3%2026-09-27Fix
CVE-2026-100722vm2 Host Process Termination via Construct Trap8.9CNA v4.00.3%2026-09-27Fix
CVE-2026-100721vm2 authorization bypass via Custom Resolver9.5CNA v4.00.4%2026-09-27Exploit codeFix
CVE-2026-97319PowerPress WordPress plugin Contributor+ stored XSS via Podcast Player block6.8CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-97227NextScripts: Social Networks Auto-Poster WordPress plugin missing authorization5.9CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-97165Joomla extension svenbluege.de reflected XSS and open redirect in Event Gallery extension5.3CNA v4.00.2%2026-09-27
CVE-2026-97164Joomla extension svenbluege.de path traversal in Clear Cache task in Event Gallery extension7.0CNA v4.00.3%2026-09-27
CVE-2026-96899Optima Express - Author+ stored XSS via faq_script6.8CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-96897Optima Express IDX ihf_clear_cache AJAX action missing authorization5.3CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-96896Malcure Malware Shield WordPress plugin Multisite Subsite arbitrary file write and deletion7.2CISA ADP v3.10.4%2026-09-27Fix
CVE-2026-96895WP YouTube Lyte WordPress plugin Contributor+ stored XSS via Embed block attributes6.8CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-96284Red Hat Enterprise Linux 10 link following2.5CNA v3.10.1%2026-09-27Fix
CVE-2026-96283Red Hat Enterprise Linux 10 missing authorization3.3CNA v3.10.1%2026-09-27Fix
CVE-2026-96282Red Hat Enterprise Linux 10 link following3.1CNA v3.10.3%2026-09-27Fix
CVE-2026-96281Red Hat Enterprise Linux 10 improper access control6.2CNA v3.10.2%2026-09-27Fix
CVE-2026-96280Flatpak OCI delta stream parser buffer overflow7.5CNA v3.10.7%2026-09-27Fix
CVE-2026-96279Red Hat Enterprise Linux 10 flatpak: Flatpak: Path traversal issue in oci archive extraction6.5CNA v3.10.6%2026-09-27Fix
CVE-2026-94419wolfSSL client session cache reference poisoning allows resumption with wrong server2.3CNA v4.00.1%2026-09-27
CVE-2026-94418wolfSSL signature failure masked by date error under WOLFSSL_SMALL_CERT_VERIFY2.3CNA v4.00.1%2026-09-27
CVE-2026-94417wolfSSL CRL check skipped when OCSP enabled and certificate has no OCSP URL2.3CNA v4.00.2%2026-09-27Fix
CVE-2026-93304wolfSSL (D)TLS 1.2 client accepts early ChangeCipherSpec before ClientKeyExchange6.3CNA v4.00.2%2026-09-27Fix
CVE-2026-93302wolfSSL trusted peer certificate match ignores public key, allowing forged CA clones8.3CNA v4.00.2%2026-09-27Fix
CVE-2026-92995Verge3D WordPress plugin unauthenticated Product download disclosure via v3d_download_file5.3CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-92436Mailchimp for WooCommerce insecure direct object reference5.3CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-89136wolfSSL client accepts unsolicited RawPublicKey server certificate type8.3CNA v4.00.6%2026-09-27Fix
CVE-2026-89135wolfSSL failed X509_verify_cert leaves unverified CA in shared CertManager6.3CNA v4.00.2%2026-09-27
CVE-2026-89134wolfSSL subject CN name-constraint check bypassed when non-DNS SAN present6.3CNA v4.00.2%2026-09-27Fix
CVE-2026-89133wolfSSL NameConstraints not enforced across unconstrained intermediate CA6.3CNA v4.00.1%2026-09-27Fix
CVE-2026-89102wolfSSL OCSP stapling v2 multi accepts non-CA chain certificates as issuers8.3CNA v4.00.2%2026-09-27Fix
CVE-2026-89006WPeMatico RSS Feed Fetcher WordPress plugin Contributor+ stored XSS via Feed import6.8CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-89003WPeMatico RSS Feed Fetcher WordPress plugin Contributor+ SSRF via Campaign Preview4.1CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-89001WPeMatico RSS Feed Fetcher WordPress plugin post Publication and Author spoofing4.9CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-89000WPeMatico RSS Feed Fetcher WordPress plugin Contributor+ SSRF via Campaign Run4.1CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-88778Citrix NetScaler ADC TCP Initial Sequence Number (ISN) prediction8.8CNA v4.00.4%2026-09-27Fix
CVE-2026-88777Citrix NetScaler ADC and Gateway denial of service8.8CNA v4.00.4%2026-09-27Fix
CVE-2026-88776Citrix NetScaler ADC and Gateway denial of service8.8CNA v4.00.4%2026-09-27Fix
CVE-2026-88775Citrix NetScaler ADC and Gateway buffer overflow8.8CNA v4.00.4%2026-09-27Fix
CVE-2026-88774Citrix NetScaler ADC feature policy bypass due to improper HTTP URL based expression usage7.0CNA v4.00.2%2026-09-27Fix
CVE-2026-88773Citrix NetScaler ADC HTTP request smuggling9.3CNA v4.00.4%2026-09-27MetasploitExploit codeKCVFix
CVE-2026-88772Citrix NetScaler improper restriction of operations within the bounds of a memory buffer9.5CNA v4.05.3%2026-09-27KEVMetasploitExploit codeKCVFix
CVE-2026-88771Citrix NetScaler improper input validation9.5CNA v4.05.1%2026-09-27KEVMetasploitEmerging ThreatsExploit codeKCVFix
CVE-2026-86841Online Scheduling and Appointment Booking System Diagnostics Advanced Options PHP object injection4.7CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-86839Online Scheduling and Appointment Booking System insecure direct object reference3.8CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-86609Download Manager Pro WordPress plugin unauthenticated stored XSS via email Lock Subscription8.8CISA ADP v3.10.3%2026-09-27Fix
CVE-2026-85002EmbedPress WordPress plugin Contributor+ stored XSS via Instagram Carousel block attributes6.8CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-84069WebFacing Email Accounts for cPanel - unauthenticated LFI via assets/index.php5.3CISA ADP v3.10.3%2026-09-27Fix
CVE-2026-82841UpdraftPlus - Subscriber+ Remote Storage credential disclosure via Migration Notice5.3CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-81655Ad Inserter - Subscriber+ RCE / stored XSS via Global Custom fields7.5CISA ADP v3.10.2%2026-09-27Fix
CVE-2026-15442wolfSSL heap use-after-free on read during bidirectional (D)TLS shutdown2.3CNA v4.00.3%2026-09-27Fix
CVE-2026-100739mathurvishal CloudClassroom-PHP-Project viewresult.php SQL injection6.9CNA v4.00.3%2026-09-26
CVE-2026-100720Froxlor stored XSS via SSL certificate issuer9.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100719Froxlor credential disclosure via DirProtections API7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100718Froxlor authentication bypass via EmailSender.add7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100717froxlor CRLF injection via validateUrl userinfo8.5CNA v4.00.3%2026-09-26Fix
CVE-2026-100716Froxlor privilege escalation via Symlink9.4CNA v4.00.4%2026-09-26Fix
CVE-2026-100715Froxlor arbitrary file deletion via Symlink8.5CNA v4.00.4%2026-09-26Fix
CVE-2026-100714Froxlor command injection via letsencryptchallengepath9.4CNA v4.00.5%2026-09-26Fix
CVE-2026-100713Froxlor privilege escalation via SSH Key Sync7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100712froxlor Two-Factor authentication bypass via CSRF7.1CNA v4.00.1%2026-09-26Fix
CVE-2026-100711froxlor authentication bypass via Session Persistence8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100710Froxlor DKIM Private key disclosure via API6.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100709Froxlor 2FA Bypass via Namespace Confusion7.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100708Froxlor Private key disclosure via Certificates API7.1CNA v4.00.1%2026-09-26Fix
CVE-2026-100707Kyverno Namespace Isolation Bypass via Percent-Encoded Path8.3CNA v4.00.5%2026-09-26Fix
CVE-2026-100706kyverno privilege escalation via Policy apiCall urlPath9.4CNA v4.00.6%2026-09-26Fix
CVE-2026-100705Kyverno SSRF via legacy apiCall service executor8.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100704Kyverno ImageValidatingPolicy Exception Bypass8.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100703Kyverno Cross-Namespace Data Access via globalcontext.Lib8.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100702Nodemailer stack exhaustion via Nested Recipient Arrays8.2CNA v4.00.3%2026-09-26Fix
CVE-2026-100701Nodemailer TLS servername Cache Confusion6.0CNA v4.00.1%2026-09-26Fix
CVE-2026-100700nodemailer denial of service via addressparser8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100699Nodemailer Malformed Envelope Recipient via RFC 5322 Comment6.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100698Adminer Privileged-Port SSRF via host_port Regex6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100697Adminer server-side request forgery via ClickHouse driver5.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100696Adminer Unauthenticated SSRF via Elasticsearch driver6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100695Adminer XSS via CONNECTION_ID escalating to RCE5.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100694Hugo cross-site scripting via text/org5.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100693Hugo IP-literal Deny Rule Bypass8.6CNA v4.00.1%2026-09-26Fix
CVE-2026-100692Hugo path traversal via Symlinked Mount Roots8.7CNA v4.00.4%2026-09-26Fix
CVE-2026-100691Hugo stored XSS via lineAnchors code block option5.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100690Hugo to arbitrary file read via Symlinks8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100689GitPython path traversal via gitmodules path8.7CNA v4.00.4%2026-09-26Fix
CVE-2026-100688Budibase server Cross-Tenant information disclosure7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100687Budibase Server credential exposure via External Table Broadcast7.0CNA v4.00.3%2026-09-26Fix
CVE-2026-100686Budibase Cross-Workspace privilege escalation via POST /API/global/groups/:groupId/apps8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100685Budibase information disclosure via Chat Links8.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100684Budibase Server authentication bypass via OIDC9.2CNA v4.00.3%2026-09-26Fix
CVE-2026-100683Budibase SQL injection via column-rename DDL8.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100682Budibase Server arbitrary file write via ZIP Symlink8.7CNA v4.00.6%2026-09-26Fix
CVE-2026-100681Budibase SSRF and OAuth Token Exfiltration via Teams Webhook6.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100680Budibase arbitrary Local File Read via OpenAPI Import8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100679stoatchat insecure direct object reference7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100678stoatchat MFA brute force via Insufficient Rate Limiting8.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100677stoatchat Account Enumeration via Error Location6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100676stoatchat Local Filesystem Read via SVG8.8CNA v4.00.4%2026-09-26Fix
CVE-2026-100675stoatchat denial of service via mass mentions7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100674stoatchat Username Validation Bypass via Unicode Sanitization5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100673getgrav grav-plugin-data-manager grav Data Manager stored XSS via item-detail view8.4CNA v4.00.3%2026-09-26Fix
CVE-2026-100672grav-plugin-comments unauthenticated information disclosure8.7CNA v4.00.4%2026-09-26Fix
CVE-2026-100671Grav Session Cookie Theft via Twig Sandbox8.6CNA v4.00.3%2026-09-26Fix
CVE-2026-100670Grav CMS privilege escalation via Blueprint Guard Bypass8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100669Grav Sensitive File Disclosure via Case-Variation Bypass8.7CNA v4.00.4%2026-09-26Fix
CVE-2026-100668Grav sandbox escape via array Filter7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100667getgrav grav grav-plugin-login Two-Factor authentication bypass6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100666Netty Response Desynchronization via HttpServerCodec6.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100665Netty QUIC Hostname Verification Bypass8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100664Netty HTTP/1 host Header Authority Confusion8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100663Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/38.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100662Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100661Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100660Netty QpackEncoder Unbounded Memory Retention8.7CNA v4.00.4%2026-09-26Fix
CVE-2026-100659Netty HTTP/3 Request Routing Bypass6.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100654vLLM denial of service via out-of-range stop_token_ids7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100653vLLM Incomplete Artifact Pin Propagation8.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100652vLLM denial of service via stop_token_ids7.5NVD v3.10.4%2026-09-26Fix
CVE-2026-100651vLLM denial of service via Decoder Prompt Length Bypass7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100650vLLM resource exhaustion via Unbounded Media Materialization7.1CNA v4.00.7%2026-09-26Fix
CVE-2026-100649vLLM Resource Limit Bypass via Sampler Subclass5.3NVD v3.10.3%2026-09-26Fix
CVE-2026-100648vLLM uncontrolled resource consumption via Audio Decoding6.9CNA v4.00.4%2026-09-26Fix
CVE-2026-100647vLLM CPU exhaustion via unbounded cache_salt7.5NVD v3.10.3%2026-09-26Fix
CVE-2026-100646SiYuan authentication bypass via Missing Origin header8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100645SiYuan stored XSS via Gallery Kanban8.6CNA v4.00.4%2026-09-26Fix
CVE-2026-100644SiYuan SQL injection via dailyNoteSavePath8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100643SiYuan stored XSS via attribute view textarea8.5CNA v4.00.4%2026-09-26Fix
CVE-2026-100642SiYuan cross-site request forgery via CheckAuth7.2CNA v4.00.1%2026-09-26Fix
CVE-2026-100641SiYuan stored XSS via Unescaped Flashcard Content8.6CNA v4.00.5%2026-09-26Fix
CVE-2026-100640SiYuan Clipboard data disclosure via IPC8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100639SiYuan cross-site scripting via Kramdown IAL8.6CNA v4.00.5%2026-09-26Fix
CVE-2026-100638SiYuan path traversal via setNotebookIcon8.3CNA v4.00.5%2026-09-26Fix
CVE-2026-100637SiYuan path traversal via checkoutRepo sessionID8.3CNA v4.00.5%2026-09-26Fix
CVE-2026-100636SiYuan path traversal via exportBrowserHTML folder8.3CNA v4.00.5%2026-09-26Fix
CVE-2026-100635SiYuan authentication bypass via Plaintext Session Cookie8.2CNA v4.00.3%2026-09-26Fix
CVE-2026-100634SiYuan missing authorization via siyuan-send-windows5.3CNA v4.00.5%2026-09-26Fix
CVE-2026-100633SiYuan path traversal via MCP File Operations8.5CNA v4.00.3%2026-09-26Fix
CVE-2026-100632parse-community parse-server Parse Server Protected Fields Disclosure via LiveQuery7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100631parse-community Parse Server device token deduplication logic NoSQL injection8.7CNA v4.00.4%2026-09-26Fix
CVE-2026-100630AVideo stored XSS via HTML Entity Bypass in trailer1 field5.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100629Capgo backend privilege escalation via role_bindings PATCH7.0CNA v4.00.3%2026-09-26Fix
CVE-2026-100628Capgo.app authentication bypass via apikey8.7CNA v4.00.2%2026-09-26Fix
CVE-2026-100627Capgo bundle promotion API channel RBAC deny override bypass7.2CNA v4.00.3%2026-09-26
CVE-2026-100626Capgo IDOR via PUT /app icon endpoint5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100625Capgo Build Upload Proxy authorization bypass via TUS Resource8.7CNA v4.00.3%2026-09-26
CVE-2026-100624Capgo.app Upload Expiry Bypass via build upload5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100623Capgo authentication bypass via Direct PostgREST org_users Table Write8.7CNA v4.00.3%2026-09-26
CVE-2026-100622Capgo.app Cache Restoration of Deleted Bundles8.7CNA v4.00.3%2026-09-26
CVE-2026-100621Capgo.app Content-Lock Bypass via r2-direct Bundle Mutation5.3CNA v4.00.2%2026-09-26
CVE-2026-100620Capgo CLI Excessive Permissions via Overpermissioned Play console Service Account5.1CNA v4.00.3%2026-09-26
CVE-2026-100619Capgo OTA Manifest Poisoning via app_versions.manifest Bypass8.7CNA v4.00.3%2026-09-26
CVE-2026-100618Capgo App Icon Update privilege escalation via Service-Role Worker8.7CNA v4.00.2%2026-09-26
CVE-2026-100617Cap-go Capgo.app authorization bypass via channel_permission_overrides8.7CNA v4.00.3%2026-09-26
CVE-2026-100616Capgo.app authentication bypass via PostgREST customer_id Mutation7.0CNA v4.00.3%2026-09-26
CVE-2026-100615Cap-go Capgo.app privilege escalation via API Key Rotation8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100614Capgo Cross-Tenant Image Overwrite via Metadata Worker8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100613Capgo.app authorization bypass via Stale Channel Permission Overrides6.0CNA v4.00.2%2026-09-26
CVE-2026-100612Capgo SSO Provider ID authentication bypass via Incomplete Migration8.6CNA v4.00.3%2026-09-26Fix
CVE-2026-100611Capgo apikey_manager role privilege escalation via Incomplete Role Deny-list7.1CNA v4.00.2%2026-09-26
CVE-2026-100610Flowise missing authorization via upsert-history7.7CNA v4.00.3%2026-09-26
CVE-2026-100609Flowise insecure direct object reference via Credential7.6CNA v4.00.2%2026-09-26
CVE-2026-100608Flowise authorization bypass via BullMQ Dashboard8.7CNA v4.00.3%2026-09-26
CVE-2026-100607Flowise authentication bypass via Email-Only SSO9.2CNA v4.00.3%2026-09-26
CVE-2026-100606Flowise authentication bypass via SSO Email Match9.2CNA v4.00.4%2026-09-26
CVE-2026-100605Flowise missing authorization via Chat Message Routes7.5CNA v4.00.2%2026-09-26
CVE-2026-100604ClawHub authentication bypass via Former Publisher Skill Control5.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100603ClawHub Skill Hiding via Coordinated Reports8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100602ClawHub Changelog Preview information disclosure via authorization bypass7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100601ClawHub SSRF via Unchecked DNS Resolution in Profile Image6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100600ClawHub Quota Exhaustion via Anonymous API6.9CNA v4.00.4%2026-09-26Fix
CVE-2026-100599OpenClaw remote code execution via googlemeet.chrome8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100598OpenClaw Approval Binding logic error7.5CNA v4.00.1%2026-09-26Fix
CVE-2026-100597OpenClaw path traversal via Filesystem Race8.8CNA v4.00.1%2026-09-26Fix
CVE-2026-100596OpenClaw authorization bypass via MCP Configuration8.7CNA v4.00.2%2026-09-26Fix
CVE-2026-100595OpenClaw authorization bypass via diagnostics7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100594OpenClaw authorization bypass via trajectory export7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100593OpenClaw authentication bypass via activation5.3CNA v4.00.1%2026-09-26Fix
CVE-2026-100592OpenClaw authentication bypass via Memory Dreaming5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100591OpenClaw authentication bypass via Active Memory5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100590OpenClaw authorization bypass via voice set5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100589OpenClaw sandbox bypass via Browser Node8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100588OpenClaw authentication bypass via node.invoke8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100587OpenClaw authorization bypass via Codex Install8.7CNA v4.00.2%2026-09-26Fix
CVE-2026-100586OpenClaw Codex authorization bypass via Bind8.7CNA v4.00.2%2026-09-26Fix
CVE-2026-100585OpenClaw authentication bypass via MCP Channel8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100584OpenClaw Allowlist Bypass via Workspace Shadows5.4CNA v4.00.1%2026-09-26Fix
CVE-2026-100583OpenClaw Discord authorization bypass5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100582OpenClaw Channel Plugins Channel Read Allowlist Bypass7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100581OpenClaw iOS Credential Storage via Share extension6.8CNA v4.00.1%2026-09-26Fix
CVE-2026-100580OpenClaw remote code execution via cron tool8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100579OpenClaw authentication bypass via Spoofed Requester7.2CNA v4.00.2%2026-09-26Fix
CVE-2026-100578OpenClaw authorization bypass via chat.send7.2CNA v4.00.2%2026-09-26Fix
CVE-2026-100577OpenClaw server-side request forgery via Video Asset5.3CNA v4.00.1%2026-09-26Fix
CVE-2026-100576OpenClaw SSRF via Browser Wait Predicates5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100575OpenClaw Slack authentication bypass via Group DM8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100574OpenClaw SSRF via Trusted-Host DNS8.2CNA v4.00.2%2026-09-26Fix
CVE-2026-100573OpenClaw Sandbox Policy Bypass via MCP Loopback4.8CNA v4.00.1%2026-09-26Fix
CVE-2026-100572OpenClaw denial of service via Rate Limit6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100571OpenClaw SMS Webhook Rate Limit Bypass6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100570OpenClaw remote code execution via CLOUDSDK_PYTHON_ARGS8.5CNA v4.00.1%2026-09-26Fix
CVE-2026-100569OpenClaw credential exposure via Endpoint Override6.8CNA v4.00.1%2026-09-26Fix
CVE-2026-100568OpenClaw Unauthorized Command Job Access8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100567OpenClaw DNS Rebinding via CDP Hostname8.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100566OpenClaw LINE Access Control Inheritance6.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100564OpenClaw CSV formula injection via Attendance Export5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100563OpenClaw CSV formula injection via Session Labels5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100562OpenClaw authorization bypass via sessions.create5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100561OpenClaw authentication bypass via Exec Wrapper8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100560OpenClaw Reusable Exec Approvals authorization bypass7.7CNA v4.00.6%2026-09-26Fix
CVE-2026-100559OpenClaw command injection via Escaped Newlines8.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100558OpenClaw resource exhaustion via WebSocket Upgrade8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100557OpenClaw authorization bypass via Skill Tool Dispatch8.7CNA v4.00.2%2026-09-26Fix
CVE-2026-100556OpenClaw authentication bypass via Session Reset5.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100555OpenClaw DNS Rebinding via attachment delivery7.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100554OpenClaw Canvas Capability Revocation Bypass2.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100553OpenClaw Cross-Context Policy Bypass via Feishu unpin5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100552OpenClaw Policy Bypass via Native tools8.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100551OpenClaw iOS Control UI TLS Pin Enforcement Bypass9.0CNA v4.00.2%2026-09-26Fix
CVE-2026-100550OpenClaw authentication bypass via Access Group5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100549OpenClaw path traversal via QQBot voice filenames5.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100548OpenClaw credential exposure via Embedding Fallback6.0CNA v4.00.3%2026-09-26Fix
CVE-2026-100547OpenClaw authentication bypass via File URL6.8CNA v4.00.1%2026-09-26Fix
CVE-2026-100546OpenClaw authentication bypass via Voice Transcript6.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100545OpenClaw Policy Bypass via Session Filename Generation6.0CNA v4.00.2%2026-09-26Fix
CVE-2026-100544OpenClaw voice-call authorization bypass8.7CNA v4.00.2%2026-09-26Fix
CVE-2026-100543OpenClaw information disclosure via Configuration Hash7.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100542OpenClaw Extraction Limit Bypass via tar.bz22.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100541OpenClaw Matrix authorization bypass via Case Folding7.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100540OpenClaw Feishu authentication bypass via Disabled Account7.6CNA v4.00.2%2026-09-26Fix
CVE-2026-100539OpenClaw Memory Access Control Bypass2.1CNA v4.00.2%2026-09-26Fix
CVE-2026-100538OpenClaw Local File Read via Outbound Attachments7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100537OpenClaw authentication bypass via Active Memory2.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100536OpenClaw path traversal via Structured Attachments7.1CNA v4.00.4%2026-09-26Fix
CVE-2026-100535OpenClaw privilege escalation via Session Memory7.7CNA v4.00.3%2026-09-26Fix
CVE-2026-100534OpenClaw Session Cancellation authorization bypass2.3CNA v4.00.3%2026-09-26Fix
CVE-2026-100533OpenClaw path traversal via Unicode Fallback6.0CNA v4.00.3%2026-09-26Fix
CVE-2026-100532OpenClaw WhatsApp authentication bypass7.2CNA v4.00.3%2026-09-26Fix
CVE-2026-100531OpenClaw Slack authorization bypass7.1CNA v4.00.3%2026-09-26Fix
CVE-2026-100530OpenClaw Exec Approval Directory Binding8.5CNA v4.00.2%2026-09-26Fix
CVE-2026-100529OpenClaw Authorization Scope Widening via File-Transfer7.4CNA v4.00.2%2026-09-26Fix
CVE-2026-100528OpenClaw credential disclosure via Provider endpoint5.9CNA v4.00.2%2026-09-26Fix
CVE-2026-100527OpenClaw denial of service via Browser Relay6.9CNA v4.00.3%2026-09-26Fix
CVE-2026-100526OpenClaw discord emoji and sticker upload actions missing authorization6.0CNA v4.00.3%2026-09-26Fix
CVE-2026-100525OpenClaw diagnostics-prometheus authentication bypass5.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100524Cotonti cross-site request forgery via Extensions Manager5.3CNA v4.00.1%2026-09-26
CVE-2026-100523Cotonti open redirect via message.php redirect parameter5.1CNA v4.00.2%2026-09-26
CVE-2026-100522Cotonti reflected XSS via message.php lng parameter5.1CNA v4.00.2%2026-09-26
CVE-2026-100521Cotonti reflected XSS via search highlight parameter5.1CNA v4.00.2%2026-09-26
CVE-2026-100520Laranode path traversal in File Manager upload endpoint8.7CNA v4.00.9%2026-09-26Exploit codeFix
CVE-2026-100505Ghidra Heap out-of-bounds read via StringManager4.8CNA v4.00.1%2026-09-26Fix
CVE-2026-100504Ghidra stack-based buffer overflow via leftshift1287.3CNA v4.00.2%2026-09-26Fix
CVE-2026-100503Ghidra Heap use-after-free in Decompiler5.5NVD v3.10.1%2026-09-26Fix
CVE-2026-100315mathurvishal CloudClassroom-PHP-Project mydetailsfaculty.php SQL injection6.9CNA v4.00.4%2026-09-26
CVE-2026-100314mathurvishal CloudClassroom-PHP-Project updatedetailsfromstudent.php SQL injection6.9CNA v4.00.4%2026-09-26
CVE-2026-100313mathurvishal CloudClassroom-PHP-Project updatequery.php cross-site scripting5.3CNA v4.00.4%2026-09-26
CVE-2026-100312mathurvishal CloudClassroom-PHP-Project updateguest.php SQL injection5.3CNA v4.00.2%2026-09-26
CVE-2026-100311mathurvishal CloudClassroom-PHP-Project cross-site scripting5.1CNA v4.00.2%2026-09-26
CVE-2026-98163Linux kernel cgroup race condition7.8CNA v3.10.1%2026-09-26Fix
CVE-2026-97163Joomla extension lomart.fr Unauthenticated remote code installation in UP plugin extension10.0CNA v4.00.4%2026-09-26Exploit code
CVE-2026-97162Joomla extension lomart.fr Various SQL injection vectors in UP plugin extension8.3CNA v4.00.3%2026-09-26
CVE-2026-97161Joomla extension lomart.fr Various path traversal / file access vectors in UP plugin extension9.2CNA v4.00.4%2026-09-26Exploit code
CVE-2026-97160Joomla extension lomart.fr Authenticated, privileged PHP command injection in UP plugin extension9.4CNA v4.01.3%2026-09-26Exploit code
CVE-2026-96533Testimonials Widget WordPress plugin unauthenticated SSRF via Featured Image URL5.8CISA ADP v3.10.2%2026-09-26
CVE-2026-96532Testimonials Widget WordPress plugin unauthenticated arbitrary post update7.5CISA ADP v3.10.2%2026-09-26
CVE-2026-96531Optimole - Author+ stored XSS via Video Player block6.8CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-96526MCP Server for WordPress plugin arbitrary post Title disclosure via workflows/run REST Route2.7CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-96525MCP Server for WordPress plugin Workflow modification and deletion via missing Ownership check2.7CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-96524MCP Server for WordPress plugin Administrator account creation via CSRF8.8CISA ADP v3.10.1%2026-09-26Fix
CVE-2026-94408Uncontrolled resource consumption in Elasticsearch leading to denial of service4.9CNA v3.10.4%2026-09-26Fix
CVE-2026-94400Uncontrolled resource consumption in Kibana leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-94399Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-94398Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-94397Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-94396Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-94132acymailing.com AcyMailing Enterprise extension for Joomla remote code execution9.5CNA v4.00.6%2026-09-26Exploit code
CVE-2026-94131acymailing.com AcyMailing extension for Joomla SQL injection8.3CNA v4.00.3%2026-09-26
CVE-2026-94130Joomla Extension Joomlaboat.com unauthenticated SQL injection in YouTube Gallery extension9.8NVD v3.10.4%2026-09-26Exploit code
CVE-2026-92411WP Delicious WordPress plugin Contributor+ stored XSS via Recipe block Tag Name6.8CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-89237Bluff Post WordPress plugin unauthenticated SQLi via table_name and column_name parameters6.8CISA ADP v3.10.2%2026-09-26
CVE-2026-85984miniOrange OTP Login, Verification and SMS Notifications WordPress plugin authentication bypass9.8CNA v3.10.7%2026-09-26Exploit codeFix
CVE-2026-85081File Manager WordPress plugin Multiple elFinder Plugins DOM-based XSS via postMessage Origin Bypass7.5CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-84097wp-review-slider-pro plugin stored template filter SQL injection6.5CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-84096wp-review-slider-pro plugin review submission forms stored cross-site scripting8.0CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-84095wp-review-slider-pro plugin Review Import AJAX handler stored cross-site scripting8.0CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-82901Ultra Addons for Contact Form 7 WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.1%2026-09-26Reported exploitedNucleiExploit codeFix
CVE-2026-82300Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-82294Uncontrolled resource consumption in Elasticsearch leading to denial of service6.5CNA v3.10.4%2026-09-26Fix
CVE-2026-78582Missing authorization in Kibana leading to Unauthorized Deletion of Data6.5CNA v3.10.2%2026-09-26Fix
CVE-2026-77203Groups WordPress plugin authenticated (Subscriber+) privilege escalation via groups_join shortcode8.8CNA v3.10.3%2026-09-26Fix
CVE-2026-72668Unintended proxy or intermediary (confused deputy) in Kibana leading to privilege escalation7.3CNA v3.10.2%2026-09-26Fix
CVE-2026-72662Elastic Kibana insecure direct object reference6.3CNA v3.10.2%2026-09-26Fix
CVE-2026-19708File Manager - Unauthenticated Database Backup Disclosure5.9CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-18143Request a Quote for WooCommerce WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.10.4%2026-09-26Reported exploitedNucleiExploit code
CVE-2026-16591WP Directory Kit WordPress plugin Listing stored XSS7.2CISA ADP v3.10.3%2026-09-26Fix
CVE-2026-15273Automatic.css unauthenticated stored cross-site scripting via REQUEST_URI6.4CNA v3.10.2%2026-09-26Fix
CVE-2026-11871Team Members WordPress plugin wpm_6310_team_member_details AJAX action information disclosure5.3CISA ADP v3.10.2%2026-09-26Fix
CVE-2026-100502Flame Admin Token insufficient session expiration5.9CNA v4.00.3%2026-09-25
CVE-2026-100501Flame brute-force Attack via Login endpoint8.3CNA v4.00.3%2026-09-25
CVE-2026-100419gitoxide gix-fs Worktree Escape via Symlink7.3CNA v4.00.1%2026-09-25Fix
CVE-2026-100418Flame information exposure via GET /API/config6.9CNA v4.00.3%2026-09-25
CVE-2026-100417RustDesk One-Way File Transfer Bypass2.3CNA v4.00.2%2026-09-25Fix
CVE-2026-100391mhdzumair mediaflow-proxy MediaFlow Proxy server-side request forgery via Incomplete Validation8.8CNA v4.00.3%2026-09-25
CVE-2026-100390Zoraxy Client IP spoofing via X-Forwarded-For IPv69.1CNA v4.00.3%2026-09-25
CVE-2026-100389GestSup remote code execution via IMAP Attachment9.2CNA v4.00.6%2026-09-25Fix
CVE-2026-100388RustDesk missing authorization Check on Incoming File Clipboard messages5.3CNA v4.00.2%2026-09-25Fix
CVE-2026-100387pgPointcloud heap out-of-bounds read via WKB deserialization7.2CNA v4.00.3%2026-09-25
CVE-2026-100383Wikimedia Foundation Mediawiki stored i18n XSS in WikiLambda's VisualEditor integration4.8CNA v4.00.3%2026-09-25
CVE-2026-100382Wikimedia Foundation Mediawiki unauthenticated remote code execution10.0CNA v4.00.9%2026-09-25Reported exploitedExploit codeFix
CVE-2026-100381Wikimedia Foundation MediaWiki UploadWizard Flickr collection and set titles allow DOM XSS5.3CNA v4.00.3%2026-09-25Exploit codeFix
CVE-2026-100380Wikimedia Foundation Mediawiki reflected XSS in Wikibase Special:SetLabel language validation5.3CNA v4.00.3%2026-09-25Exploit codeFix
CVE-2026-100379Cross-request disclosure of CentralAuth cookies in Wikipedia Android App5.3CNA v4.00.3%2026-09-25
CVE-2026-100378Wikimedia Foundation Mediawiki missing permission check in the Translate sandbox doRemind action5.3CNA v4.00.3%2026-09-25Fix
CVE-2026-100377Wikimedia Foundation Mediawiki information disclosure6.9CNA v4.00.3%2026-09-25
CVE-2026-100376Wikimedia MediaWiki TemplateSandbox extension cross-site scripting4.8CNA v4.00.3%2026-09-25Fix
CVE-2026-100373OpenMetadata SSRF via Webhook URL Validation Bypass5.1CNA v4.00.3%2026-09-25
CVE-2026-100372MacWarrior clipbucket-v5 ClipBucket v5#197 path traversal via template_editor.php8.6CNA v4.01.1%2026-09-25Fix
CVE-2026-100369CliInvoke: Argument injection in Extensibility Runner Factory8.4CNA v3.10.4%2026-09-25Fix
CVE-2026-100368CliInvoke.Specializations: Command injection in PowerShell and Cmd shell wrappers8.4CNA v3.10.6%2026-09-25Fix
CVE-2026-100310GNU libextractor privilege escalation via LIBEXTRACTOR_PREFIX7.3CNA v4.00.1%2026-09-25Fix
CVE-2026-100306TDuckCloud tduck-survey-form TDuck survey form Write Password Bypass via Client-Side Enforcement6.9CNA v4.00.4%2026-09-25
CVE-2026-100305TDuckCloud tduck-survey-form form submission endpoint missing authorization5.3CNA v4.00.3%2026-09-25
CVE-2026-100304TDuckCloud tduck-survey-form TDuck survey form information disclosure6.0CNA v4.00.4%2026-09-25
CVE-2026-100303TDuckCloud tduck-survey-form form theme management endpoints missing authorization5.3CNA v4.00.3%2026-09-25
CVE-2026-100248Rattadan Cosmowarp Contract current_admin check vulnerability8.4CNA v4.00.4%2026-09-25
CVE-2026-100237The Wikimedia Foundation Mediawiki Stored i18n XSS in the Flow integration of Thanks6.1CISA ADP v3.10.2%2026-09-25Fix
CVE-2026-100230Input Leap path traversal5.3CNA v3.10.7%2026-09-25
CVE-2026-100208Microsoft Office Outlook remote code execution7.5CNA v3.10.3%2026-09-25Fix
CVE-2026-100192X-SpringBoot credential exposure via Unauthenticated endpoint6.9CNA v4.00.3%2026-09-25
CVE-2026-100190Stored cross-site scripting (XSS) via Crawler Capture Import in AIL Framework showDomain page6.3CNA v4.00.3%2026-09-25Fix
CVE-2026-100187AIL Framework Onion Module: Non-Onion URL Accepted as Crawler Task due to Bypassed Domain Validation6.9CNA v4.00.4%2026-09-25Fix
CVE-2026-100177AIL Framework crawler cookiejar authorization check insecure direct object reference6.3CNA v4.00.3%2026-09-25Fix
CVE-2026-100176Stored cross-site scripting (XSS) in AIL Framework Username Timeline Tooltip8.5CNA v4.00.4%2026-09-25Fix
CVE-2026-100174Stored cross-site scripting (XSS) in AIL Framework Tag Selector via Unescaped Tag Names5.1CNA v4.00.4%2026-09-25Fix
CVE-2026-100172Stored XSS in AIL Framework extracted-match popovers8.5CNA v4.00.3%2026-09-25Fix
CVE-2026-100079Linux kernel UCSI debugfs interface vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-100078Linux kernel iwlwifi MEI interface vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-100077Linux kernel MSM GPU driver vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-100076Linux kernel rtl8723bs Wi-Fi driver vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-100075Linux kernel RDMA srpt driver vulnerability9.8CNA v3.10.4%2026-09-25Fix
CVE-2026-100074Linux kernel BPF verifier refcount field tracking vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-100073Linux kernel ext4 writeback journal credits vulnerability–0.1%2026-09-25Fix
CVE-2026-100072Linux kernel ACPI platform device lookup vulnerability–0.1%2026-09-25Fix
CVE-2026-100071Linux kernel HSR driver vulnerability–0.1%2026-09-25Fix
CVE-2026-100070Linux kernel nf_nat_sip NAT helper vulnerability–0.1%2026-09-25Fix
CVE-2026-98162Linux kernel ksmbd SMB2 tree connect handling vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98161Linux kernel pmem block I/O flush ordering vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98160Linux kernel rtl8723bs SDIO HalData allocation memory corruption5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98159Linux kernel mt7921 CLC firmware loader vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98158Linux kernel ppp_async frame error handling vulnerability–0.1%2026-09-25Fix
CVE-2026-98157Linux kernel EDAC device sysfs poll_msec vulnerability–0.1%2026-09-25Fix
CVE-2026-98156Linux kernel virtio-gpu resource backing on Xen vulnerability7.8CNA v3.10.1%2026-09-25Fix
CVE-2026-98155Linux kernel QAIC accelerator response worker out-of-bounds read–0.1%2026-09-25Fix
CVE-2026-98154Linux kernel NVMe over RDMA queue_rq error path vulnerability7.0CNA v3.10.1%2026-09-25Fix
CVE-2026-98153Linux kernel NVMe FDP placement id array race condition–0.1%2026-09-25Fix
CVE-2026-98152Linux kernel NVMe over RDMA target connect backlog vulnerability5.5NVD v3.10.1%2026-09-25Fix
CVE-2026-98151Linux kernel BPF verifier pointer arithmetic vulnerability–0.1%2026-09-25Fix
CVE-2026-98150Linux kernel BPF_F_CPU flag validation vulnerability7.0CNA v3.10.1%2026-09-25Fix