CVE-2026 list

CVE-2026 records published in September 2026

Page four of 15: records 3,001 to 4,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 3,001 to 4,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-86859Unauthenticated arbitrary Record Disclosure in ServiceNow AI Platform8.7CNA v4.00.3%2026-09-24Fix
CVE-2026-86858Unauthenticated privilege escalation via GraphQL in ServiceNow AI Platform8.7CNA v4.00.3%2026-09-24Fix
CVE-2026-86857Authorization bypass in ServiceNow AI Platform8.4CNA v4.00.2%2026-09-24Fix
CVE-2026-85738TREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)6.3CNA v3.10.3%2026-09-24Fix
CVE-2026-85682YOP Poll WordPress plugin unauthenticated origin validation error to Administrator account takeover8.8CNA v3.10.1%2026-09-24Fix
CVE-2026-85496Botslab G980H Dashcams generation of predictable numbers or identifiers7.7CNA v4.00.3%2026-09-24
CVE-2026-85491Catalyst::Seal dispatch memoization vulnerability8.8CISA ADP v3.10.4%2026-09-24Fix
CVE-2026-85082Maple Media Root Browser Classic OS command injection through crafted SQLite filenames8.5CNA v4.00.1%2026-09-24
CVE-2026-85057ZITADEL: Actions V1 sandbox escape: Host file read via require8.7CNA v3.10.4%2026-09-24Fix
CVE-2026-85056ZITADEL: MFA bypass via session reuse in Login V28.2CNA v3.10.3%2026-09-24Fix
CVE-2026-84403Botslab G980H Dashcams missing authentication for critical function6.9CNA v4.00.1%2026-09-24
CVE-2026-84399Botslab G980H Dashcams incorrect authorization8.7CNA v4.00.2%2026-09-24
CVE-2026-84302Discourse AI reviewable queue missing authorization4.2CNA v3.10.2%2026-09-24Fix
CVE-2026-84283FluteCode Secure Folder -Plaintext vault files in shared storage bypass the PIN gate6.8CNA v4.00.1%2026-09-24
CVE-2026-84151The Post Grid WordPress plugin stored HTML/iframe injection3.5CISA ADP v3.10.1%2026-09-24Fix
CVE-2026-82850Masteriyo LMS WordPress plugin Subscriber+ Quiz Answer key disclosure4.3CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-82849Masteriyo LMS WordPress plugin Subscriber+ arbitrary user Course Progress disclosure via IDOR4.3CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-82716Botslab G980H Dashcams insertion of sensitive information into log file5.1CNA v4.00.2%2026-09-24
CVE-2026-82708Botslab G980H Dashcams improper limitation of a pathname to a restricted directory7.1CNA v4.00.2%2026-09-24
CVE-2026-82585Botslab G980H Dashcams cleartext transmission of sensitive information7.1CNA v4.00.1%2026-09-24
CVE-2026-82566Botslab G980H Dashcams insufficient session expiration8.7CNA v4.00.3%2026-09-24
CVE-2026-82372Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav8.5CNA v4.00.2%2026-09-24Fix
CVE-2026-82371Plaintext exposure of sensitive authentication data in SANnav discovery service log files8.5CNA v4.00.1%2026-09-24Fix
CVE-2026-8219510Web Booster WordPress plugin unauthenticated Connection secret disclosure and deletion6.5CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-82164Dell Trusted Device Client incorrect permission assignment7.1CNA v3.10.1%2026-09-24Fix
CVE-2026-82157Dell ThinOS 10 improper certificate validation8.3CNA v3.10.1%2026-09-24Fix
CVE-2026-82094IBM DataStage on Cloud Pak for Data path traversal7.1CNA v3.10.3%2026-09-24Fix
CVE-2026-82093IBM DataStage on Cloud Pak for Data deserialization of untrusted data8.8CNA v3.10.4%2026-09-24Fix
CVE-2026-82077PaperCut NG/MF: Remote code execution via Scan2Fax7.3CNA v4.00.7%2026-09-24Fix
CVE-2026-81645Huawei HarmonyOS out-of-bounds read vulnerability in the graphics module5.9CNA v3.10.1%2026-09-24Fix
CVE-2026-81630Botslab G980H Dashcams insufficient verification of data authenticity9.2CNA v4.00.2%2026-09-24
CVE-2026-81552IBM DataStage on Cloud Pak for Data environment variable handling OS command injection8.8CNA v3.10.8%2026-09-24Fix
CVE-2026-81549IBM DataStage on Cloud Pak for Data X-Forwarded-Proto header handling server-side request forgery9.6CNA v3.10.3%2026-09-24Fix
CVE-2026-81548IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.10.8%2026-09-24Fix
CVE-2026-81547IBM DataStage on Cloud Pak for Data path traversal8.8CNA v3.10.9%2026-09-24Fix
CVE-2026-81545IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.10.9%2026-09-24Fix
CVE-2026-81539IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.10.4%2026-09-24Fix
CVE-2026-81508espressif esp-idf ESF-IDF: Heap out-of-bounds read in Bluedroid A2DP Sink Media Packet Processing4.3CNA v3.10.2%2026-09-24
CVE-2026-81473Dell Rugged Control Center (RCC) improper authentication8.1CNA v3.10.1%2026-09-24Fix
CVE-2026-81455Dell ThinOS 10 missing authentication8.6CNA v3.10.3%2026-09-24Fix
CVE-2026-80513wpForo Forum WordPress plugin Subscriber+ PHP object injection via Profile fields7.5CISA ADP v3.10.3%2026-09-24Fix
CVE-2026-80338CMB2 WordPress plugin Subscriber+ arbitrary option corruption via oEmbed Handler6.8CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-79959Botslab G980H Dashcams use of hard-coded credentials7.0CNA v4.00.2%2026-09-24
CVE-2026-79766Termix: OS command injection in ACME/Let's Encrypt certificate-request handler9.1CNA v3.10.4%2026-09-24Fix
CVE-2026-79764Termix: Authenticated SSRF via `/homepage/proxy` no Destination Allowlist7.7CNA v3.10.4%2026-09-24Fix
CVE-2026-79763Termix: MFA-critical operations accept the account password as a sole factor (regression of)5.3CNA v3.10.3%2026-09-24Fix
CVE-2026-79762Termix SSH credential encryption hard-coded cryptographic key5.5CNA v3.10.1%2026-09-24Fix
CVE-2026-79761Termix: Command injection in SSH key deployment verification6.6CNA v3.10.4%2026-09-24Fix
CVE-2026-79760Termix: Authenticated blind SSRF through notification channel test endpoints6.4CNA v3.10.3%2026-09-24Fix
CVE-2026-79759Termix: Cross-user information disclosure via Missing Ownership Check in deploy-to-host endpoint4.3CNA v3.10.3%2026-09-24Fix
CVE-2026-79758Termix: Authenticated users can read other users' host status and clear global SSH connections5.4CNA v3.10.4%2026-09-24Fix
CVE-2026-79680Qt authentication bypass4.5CNA v4.00.3%2026-09-24Fix
CVE-2026-78313Improper access control in DIAEnergie6.5CNA v3.10.5%2026-09-24Fix
CVE-2026-78312Path traversal in DIAEnergie9.1CNA v3.10.3%2026-09-24Fix
CVE-2026-78311SQL injection in DIAEnergie8.8CNA v3.10.2%2026-09-24Fix
CVE-2026-78310Authorization bypass through user-controlled key in DIAEnergie4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-78309SQL injection in DIAEnergie8.8CNA v3.10.3%2026-09-24Fix
CVE-2026-78308Authentication bypass in DIAEnergie9.8CNA v3.10.4%2026-09-24Fix
CVE-2026-77967Botslab G980H Dashcams authentication bypass by capture-replay8.6CNA v4.00.2%2026-09-24
CVE-2026-77874IBM Enterprise Build of Quarkus SQL injection8.6CNA v3.10.4%2026-09-24Fix
CVE-2026-77825IBM ContextForge MCP Gateway is affected by path traversal4.9CNA v3.10.3%2026-09-24Fix
CVE-2026-77798Velociraptor Authenticated denial of service6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-77797Velociraptor Prefetch parser out-of-bounds3.6CNA v3.10.1%2026-09-24Fix
CVE-2026-77707TLS Certificate Validation Disabled for Keycloak Connections in HAVELSAN's Liman Render Engine5.9CNA v3.10.1%2026-09-24Fix
CVE-2026-77703SSH Host Key Verification Bypass in HAVELSAN's Liman Render Engine5.9CNA v3.10.2%2026-09-24Fix
CVE-2026-77581BentoPDF: SSRF in cors-proxy-worker.js via DNS-based hostname allowlist bypass8.6CNA v3.10.3%2026-09-24Fix
CVE-2026-77321TREK MCP trip summary bypasses delegated OAuth read scopes4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-77320TREK: Public trip share link ignores the `share_map` permission server-side5.3CNA v3.10.2%2026-09-24Fix
CVE-2026-77294TREK: Server-side request forgery via User-Configurable LLM Base URL8.1CNA v3.10.3%2026-09-24Fix
CVE-2026-77293TREK: Cross-user note-file deletion (IDOR / broken access control)7.1CNA v3.10.4%2026-09-24Fix
CVE-2026-77193eesy_ID2WP WordPress plugin path traversal7.5CNA v3.10.4%2026-09-24Fix
CVE-2026-76907suitenumerique docs LaSuite Doc: Public Documents Enumeration6.5CNA v3.10.3%2026-09-24Fix
CVE-2026-75907Norwegian Cruise Line door access control authentication bypass7.5CISA ADP v3.10.4%2026-09-24Fix
CVE-2026-75558Botslab G980H Dashcams use of hard-coded cryptographic key6.0CNA v4.00.2%2026-09-24
CVE-2026-74991WPForms Stripe payment integration improper access control6.8CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-73064Trusted Firmware Mbed TLS TLS 1.3 handshake vulnerability2.9CNA v3.10.1%2026-09-24Fix
CVE-2026-71540Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion7.5CNA v3.10.4%2026-09-24Fix
CVE-2026-67233RabbitMQ: Monitoring-tag user can delete shovels6.0CNA v4.00.3%2026-09-24Fix
CVE-2026-65827Docmost: Unbounded ZIP decompression (zip-bomb) in page import allows denial of service6.5CNA v3.10.3%2026-09-24Fix
CVE-2026-65422Genetec Security Center missing authorization6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-63645OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials7.5CNA v3.10.3%2026-09-24Fix
CVE-2026-63630BentoPDF workflow import information disclosure3.4CNA v3.10.3%2026-09-24Fix
CVE-2026-63498Snipe-IT: Stored XSS via Inline XML Rendering in the Uploaded Files API8.7CNA v3.10.2%2026-09-24Fix
CVE-2026-63493Snipe-IT: 2FA bypass via the API token flow8.6CNA v4.00.3%2026-09-24Fix
CVE-2026-63203Logto: Account API can disclose stored third-party provider tokens without the identities scope7.6CNA v3.10.3%2026-09-24Fix
CVE-2026-62368Snipe-IT: Stored XSS via Custom field name in asset-list column headers8.1CNA v3.10.4%2026-09-24Fix
CVE-2026-62286Dozzle label filters do not restrict container event and statistics streams4.3CNA v3.10.3%2026-09-24Fix
CVE-2026-61825Code16/sharp has a stored XSS via data-html-content Sanitizer Bypass8.7CNA v3.10.2%2026-09-24Fix
CVE-2026-61823code16 Sharp vulnerable to stored XSS via iframe srcdoc attribute7.3CNA v3.10.2%2026-09-24Fix
CVE-2026-61816Zbateson/mail-mime-parser has uncontrolled resource consumption parsing untrusted MIME7.5CNA v3.10.4%2026-09-24Fix
CVE-2026-61815Zbateson/mail-mime-parser has CRLF header injection via attachment filename7.2CNA v3.10.2%2026-09-24Fix
CVE-2026-61811Wazuh os_xml attribute parser denial of service6.5CNA v3.10.4%2026-09-24Fix
CVE-2026-61788@bytebase/dbhub's read-only mode does not prevent database writes7.4CNA v3.10.3%2026-09-24Fix
CVE-2026-61784cstigler node-xhtml-purifier xhtml-purifier has HTML attribute-injection that leads to XSS6.1CNA v3.10.2%2026-09-24Fix
CVE-2026-61782Rsdoctor report HTTP server information disclosure7.5CNA v3.10.4%2026-09-24Fix
CVE-2026-61742DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution9.3CNA v4.00.2%2026-09-24Fix
CVE-2026-61741http4s-scala-xml has an XML external entity (XXE) processing issue9.3CNA v3.10.3%2026-09-24Fix
CVE-2026-61732BitterSecurity Decepticon web crawl output handling vulnerability10.0CNA v3.11.2%2026-09-24Exploit codeFix
CVE-2026-61604ixofoundation ixo Blockchain x/bonds module improper authorization9.3CNA v4.00.3%2026-09-24Fix
CVE-2026-58008Altera Trusted Firmware unchecked HKDF key-size input in EL3 causes a stack buffer overflow8.3CNA v4.00.1%2026-09-24
CVE-2026-58007Altera Trusted Firmware unchecked SDM mailbox response address enables EL3 secure-memory corruption8.3CNA v4.00.1%2026-09-24
CVE-2026-58006Altera SoCFPGA BL31 Mailbox Output Pointer Validation enables EL3 Secure-memory corruption8.3CNA v4.00.1%2026-09-24
CVE-2026-58005Altera Trusted Firmware out-of-bounds read8.3CNA v4.00.1%2026-09-24
CVE-2026-58004Altera Trusted Firmware out-of-bounds read8.3CNA v4.00.1%2026-09-24
CVE-2026-57590Apache DolphinScheduler Task Group APIs missing authorization8.1CISA ADP v3.10.2%2026-09-24Fix
CVE-2026-57440StarCitizenWiki mediawiki-extensions-EmbedVideo mediawiki EmbedVideo extension has stored XSS7.5CNA v3.10.3%2026-09-24Fix
CVE-2026-57179python-social-auth social-core social-auth-core has a session fixation issue4.2CNA v3.10.2%2026-09-24Fix
CVE-2026-57178Python Social Auth Social Core VK App backend improper signature verification7.4CNA v3.10.2%2026-09-24Fix
CVE-2026-57177python-social-auth social-core social-auth-core has login CSRF4.3CNA v3.10.1%2026-09-24Fix
CVE-2026-57176python-social-auth social-core social-auth-core vulnerable to account takeover6.8CNA v3.10.2%2026-09-24Fix
CVE-2026-57175python-social-auth social-core social-auth-core has an improper authentication issue6.4CNA v3.10.2%2026-09-24Fix
CVE-2026-56792Dell Rugged Control Center (RCC) improper authentication4.4CNA v3.10.1%2026-09-24Fix
CVE-2026-56744BSV Blockchain wallet-toolbox createAction output verification vulnerability8.7CNA v4.00.3%2026-09-24Fix
CVE-2026-56739Logto: SSRF via Webhooks and Custom OAuth2 Connector UserInfo endpoint8.5CNA v4.00.3%2026-09-24Fix
CVE-2026-56738phpMyFAQ has SQL injection in `StopWords::add` Unescaped Stop Word Insertion8.5CNA v4.00.3%2026-09-24Fix
CVE-2026-56737PhpMyFAQ's two-factor authentication login bypasses the password factor8.1CNA v3.10.4%2026-09-24Fix
CVE-2026-56736phpMyFAQ has stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission8.2CNA v3.10.2%2026-09-24Fix
CVE-2026-54461Habitica: Regex injection / ReDoS in Member Search6.5CNA v3.10.3%2026-09-24Fix
CVE-2026-52853Docmost: Privilege escalation admin can Invite Users as OWNER5.2CNA v3.10.2%2026-09-24Fix
CVE-2026-52850Docmost transclusion lookup API missing authorization4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-52001geelen mcp-remote SSE transport fetch wrapper information disclosure7.5CISA ADP v3.10.5%2026-09-24
CVE-2026-51997geelen mcp-remote open function handler code injection8.8CISA ADP v3.10.5%2026-09-24
CVE-2026-51996geelen mcp-remote getServerUrlHash function vulnerability9.8CISA ADP v3.10.5%2026-09-24
CVE-2026-51995geelen mcp-remote authorization server metadata handling information disclosure7.5CISA ADP v3.10.5%2026-09-24
CVE-2026-51994mcp-remote resource metadata handler server-side request forgery9.1CISA ADP v3.10.4%2026-09-24
CVE-2026-48543Krayin CRM stored template injection XSS via Web Form Description5.1CNA v4.00.1%2026-09-24
CVE-2026-48542Krayin CRM stored template injection XSS via Product Name field5.1CNA v4.00.1%2026-09-24
CVE-2026-48541Krayin CRM stored template injection XSS via Contact Name field5.1CNA v4.00.1%2026-09-24
CVE-2026-48540Krayin CRM stored template injection XSS via lead Title5.1CNA v4.00.2%2026-09-24
CVE-2026-48073Docmost: Page export can include restricted same-space attachments through forged attachmentId4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-48072Docmost: Public image fileName path traversal leads to unauthorized local file read5.3CNA v3.10.3%2026-09-24Fix
CVE-2026-48070Docmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion7.1CNA v3.10.4%2026-09-24Fix
CVE-2026-47132phpMyFAQ: SQL LIKE Wildcard injection in Chat User Search allows Authenticated User Enumeration5.4CNA v3.10.3%2026-09-24Fix
CVE-2026-26054SumatraPDF: Heap out-of-bounds read in MOBI header parser6.8CNA v4.00.1%2026-09-24Fix
CVE-2026-19532Path traversal in HAVELSAN's Liman MYS5.3CNA v3.10.3%2026-09-24Fix
CVE-2026-19492This Power System update is being released to address3.2CNA v3.10.1%2026-09-24Fix
CVE-2026-19072Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal9.9CNA v3.10.4%2026-09-24Fix
CVE-2026-18870This Power System update is being released to address4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-18857This Power System update is being released to address3.4CNA v3.10.1%2026-09-24Fix
CVE-2026-18467Paytium: Mollie payment forms and donations WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.4%2026-09-24Fix
CVE-2026-18335Kirki WordPress plugin server-side request forgery5.4CNA v3.10.3%2026-09-24Fix
CVE-2026-18104IBM Db2 Mirror for i is vulnerable to obtain sensitive information []3.3CNA v3.10.1%2026-09-24Fix
CVE-2026-17511This Power System update is being released to address3.4CNA v3.10.1%2026-09-24Fix
CVE-2026-17504This Power System update is being released to address5.1CNA v3.10.1%2026-09-24Fix
CVE-2026-17503This Power System update is being released to address5.1CNA v3.10.1%2026-09-24Fix
CVE-2026-17413This Power System update is being released to address5.1CNA v3.10.1%2026-09-24Fix
CVE-2026-16302Spectra Legacy Gutenberg Blocks WordPress plugin sensitive information exposure4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-15731WP Multilang Translation and Multilingual WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-24Fix
CVE-2026-14780PaperCut NG/MF: Remote code execution via Scripting subsystem7.5CNA v4.00.3%2026-09-24Fix
CVE-2026-14443Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav8.4CNA v4.00.1%2026-09-24Fix
CVE-2026-14442Information exposure vulnerability in the job scheduling component of SANnav6.9CNA v4.00.2%2026-09-24Fix
CVE-2026-14441Logic flaw in SANnav Java cache key handling object comparison handling6.9CNA v4.00.4%2026-09-24Fix
CVE-2026-13467Altera Trusted Firmware Systemic Missing Address Validation in SiP SMC Handlers8.3CNA v4.00.1%2026-09-24
CVE-2026-13466Altera Trusted Firmware Unit Confusion in VAB Authentication8.3CNA v4.00.1%2026-09-24
CVE-2026-13465Altera Trusted Firmware EL3 stack buffer overflow in FCS HKDF request8.3CNA v4.00.1%2026-09-24
CVE-2026-13249Unauthenticated RCE arbitrary file upload Honeywell PD45 Industrial Printer version F109.8CNA v3.10.6%2026-09-24Exploit codeFix
CVE-2026-13248Honeywell PD45 Industrial Printer authenticated remote code execution8.8CNA v3.10.4%2026-09-24Fix
CVE-2026-13016Unauthenticated SQL injection in ServiceNow AI Platform9.3CNA v4.00.3%2026-09-24Fix
CVE-2026-12559OpenText Vendor Invoice Management for SAP Solutions stored cross-site scripting7.3CNA v4.00.4%2026-09-24
CVE-2026-12227Visual Composer Website Builder WordPress plugin unauthenticated local file inclusion9.8CNA v3.12.9%2026-09-24Reported exploitedNucleiExploit codeFix
CVE-2026-11744PaperCut Hive Embedded App for Ricoh: Javascript injection3.8CNA v4.00.2%2026-09-24Fix
CVE-2026-7169Uncontrolled search path element in Evope Collector7.5CNA v4.00.1%2026-09-24Fix
CVE-2026-6544IBM Concert directory copy vulnerability6.2CNA v3.10.1%2026-09-24Fix
CVE-2026-4806Custom Thank You Page for WooCommerce WordPress plugin unauthorized access6.5CNA v3.10.2%2026-09-24Fix
CVE-2026-4638Plaintext password Disclosure via VBScript Sensor Error message in Paessler PRTG Network Monitor7.1CNA v4.00.3%2026-09-24Fix
CVE-2026-4637Reflected cross-site scripting via URL Path in Paessler PRTG Network Monitor5.1CNA v4.00.6%2026-09-24Fix
CVE-2026-3253MailerLite WordPress plugin unauthorized access4.3CNA v3.10.2%2026-09-24Fix
CVE-2026-96889Red Hat Enterprise Linux 10 librsvg: Use-after-free when XML includes have duplicated entities7.8CNA v3.10.2%2026-09-23Exploit codeFix
CVE-2026-96872The Wikimedia Foundation Mediawiki improper handling of insufficient permissions2.9CNA v4.00.2%2026-09-23Exploit codeFix
CVE-2026-96826W4 Post List WordPress plugin SQL injection7.6CNA v3.10.2%2026-09-23Fix
CVE-2026-96808flatpak symlink following7.4CNA v3.10.1%2026-09-23Fix
CVE-2026-96807flatpak symlink following4.0CNA v3.10.1%2026-09-23Fix
CVE-2026-96804MLflow statsmodel flavor deserialization of untrusted data8.8CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-96775MLflow dspy bypasses pickle deserialization control8.8CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-96770s2s-proxy accepts untrusted client certificates9.3CNA v4.00.3%2026-09-23
CVE-2026-96762kvcache-ai Mooncake RPC Path UnmountSegment authorization6.9CNA v4.00.3%2026-09-23
CVE-2026-96759orval code injection via operationId9.3CNA v4.00.4%2026-09-23Fix
CVE-2026-96758orval @orval/core code injection via Form-Data9.3CNA v4.00.5%2026-09-23Fix
CVE-2026-96757orval code injection via unescaped OpenAPI media-type9.3CNA v4.00.6%2026-09-23Fix
CVE-2026-96756orval code injection via Factory Generation9.2CNA v4.00.5%2026-09-23Fix
CVE-2026-96755orval @orval/effect code injection9.3CNA v4.00.4%2026-09-23Fix
CVE-2026-96754orval @orval/hono code injection via OpenAPI Path9.3CNA v4.00.4%2026-09-23Fix
CVE-2026-96751pmTicket Project-Management-Software add_project.php setSync SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-96739SEMCMS KindEditor upload upload_json.php cross-site scripting5.3CNA v4.00.3%2026-09-23
CVE-2026-96680ByteDance Coze Scraper Extension External Message Handler missing authorization5.3CNA v4.00.3%2026-09-23
CVE-2026-96678weiqingwen spring-boot-forum Avatar Upload NewUserFormValidator.java validate path traversal5.3CNA v4.00.3%2026-09-23
CVE-2026-96676Fast FAC1900R uhttpd get_alias_name stack-based overflow5.3CNA v4.00.2%2026-09-23
CVE-2026-96675alsa-lib denial of service via pcm_multi4.8CNA v4.00.1%2026-09-23Fix
CVE-2026-96674alsa-lib integer overflow via Topology file4.8CNA v4.00.1%2026-09-23Fix
CVE-2026-96673Photoview SQL injection via album download route8.7CNA v4.00.4%2026-09-23
CVE-2026-96672Frappe ERPNext Unauthorized Method Invocation5.3CNA v4.00.2%2026-09-23Fix
CVE-2026-96656Plex Media Server external control of file name or path8.6CNA v4.00.8%2026-09-23KEVKCVFix
CVE-2026-96655Plex Media Server server-side request forgery (SSRF)5.3CNA v4.00.5%2026-09-23KEVEmerging ThreatsKCVFix
CVE-2026-96654Plex Media Server improper neutralization of encoded URI schemes in a web page6.9CNA v4.00.5%2026-09-23KEVEmerging ThreatsKCVFix
CVE-2026-96652Plex Media Server server-side request forgery (SSRF)5.3CNA v4.00.5%2026-09-23KEVEmerging ThreatsExploit codeKCVFix
CVE-2026-96651Plex Media Server path traversal7.1CNA v4.00.5%2026-09-23Fix
CVE-2026-96611FFmpeg integer overflow7.8NVD v3.10.1%2026-09-23Fix
CVE-2026-96609Robur Albatross resource exhaustion7.1CNA v4.00.2%2026-09-23Fix
CVE-2026-96606LB-Link BL-CPE600EU Configuration Backup Mifi_config.bin information disclosure6.9CNA v4.00.3%2026-09-23
CVE-2026-96604SoftNews Media Group DataLife Engine Search search.php strip_data SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-96603Abdurrab5 online-makeup-store Admin functions.php confirm_user authorization6.9CNA v4.00.3%2026-09-23
CVE-2026-96602Abdurrab5 online-makeup-store Customer Login Handler SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-96601Abdurrab5 online-makeup-store Admin Login index.php SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-96600Isotope eCommerce SQL injection via Backend Callbacks7.0CNA v4.00.2%2026-09-23
CVE-2026-96599Isotope eCommerce Weak Order Identifier Generation8.2CNA v4.00.4%2026-09-23
CVE-2026-96560LightLLM unauthenticated remote code execution via NCCL PD RPyC Control Channel9.3CNA v4.00.7%2026-09-23
CVE-2026-96556Neethuharii CafeManagement AddCashierCode.php addcashier improper authorization6.9CNA v4.00.3%2026-09-23
CVE-2026-96552sfturing hosp_order User Password MD5.java MD5.getMD5 hash without salt2.3CNA v4.00.2%2026-09-23
CVE-2026-96551sfturing hosp_order CommonUserController.java cross-site request forgery5.3CNA v4.00.2%2026-09-23
CVE-2026-96550sfturing hosp_order MailUtil.java getProperties cleartext transmission6.3CNA v4.00.2%2026-09-23
CVE-2026-96549sfturing hosp_order CommonUserServiceImpl.java cleartext storage4.8CNA v4.00.1%2026-09-23
CVE-2026-96548sfturing hosp_order jdbc.properties hard-coded credentials6.3CNA v4.00.3%2026-09-23
CVE-2026-96546GIMP DDS image loader out-of-bounds read2.5CNA v3.10.1%2026-09-23Fix
CVE-2026-96545Red Hat Enterprise Linux 10 gimp: Gimp: Out-of-bounds heap read in the 4bpp tim image loader4.4CNA v3.10.2%2026-09-23Fix
CVE-2026-96541Red Hat Enterprise Linux 10 gnome-remote-desktop denial of service7.5CNA v3.10.8%2026-09-23
CVE-2026-96514Neethuharii CafeManagement Login CafePortalLogin.php SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-96513Neethuharii CafeManagement AddProductCode.php unrestricted upload6.9CNA v4.00.3%2026-09-23
CVE-2026-96512Red Hat Enterprise Linux 10 incorrect authorization7.8CNA v3.10.1%2026-09-23Exploit codeFix
CVE-2026-96456Reachy Mini Bluetooth PIN authentication can be bypassed by racing an authenticated device6.3CNA v3.10.2%2026-09-23Fix
CVE-2026-96455Reachy Mini daemon allows unauthenticated remote code execution8.8CNA v3.10.2%2026-09-23Fix
CVE-2026-96454Pake grants unrestricted IPC access to every HTTPS origin loaded in generated applications8.2CNA v3.10.3%2026-09-23Fix
CVE-2026-96446Red Hat Build of Keycloak Pushed Authorization Request handling missing authorization4.2CNA v3.10.2%2026-09-23
CVE-2026-96445Red Hat Build of Keycloak Conditional OTP authenticator authentication bypass6.8CNA v3.10.2%2026-09-23
CVE-2026-96443Apache Doris: JDBC driver URL validation bypass leads to remote code execution6.5CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-96442Emacs: Emacs: Arbitrary code execution in flymake mode7.8CNA v3.10.2%2026-09-23Fix
CVE-2026-96276Red Hat Enterprise Linux 10 flatpak: Flatpak: Arbitrary write in host context via flatpak build-init9.8CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-96275Flatpak extra-data extraction path traversal8.8CNA v3.10.4%2026-09-23Fix
CVE-2026-96273Ghidra denial of service via Unreleased Lock in OptionsDB6.8CNA v4.00.1%2026-09-23Fix
CVE-2026-96272MacWarrior clipbucket-v5 ClipBucket v5#182 SQL injection via search_result.php8.7CNA v4.00.3%2026-09-23Fix
CVE-2026-96271Photoview authorization bypass via shareAlbum7.1CNA v4.00.2%2026-09-23
CVE-2026-96258onSite internet Auktion NG Auktionssoftware password reset endpoint cross-site scripting5.3CNA v4.00.3%2026-09-23
CVE-2026-96257Fast FAC1203R Gigabit Edition Device Discovery service copy_msg_element stack-based overflow10.0CNA v4.00.6%2026-09-23
CVE-2026-95958JusticeRage Manalyze PE parser pe.cpp _parse_relocations integer underflow4.8CNA v4.00.1%2026-09-23
CVE-2026-95957SourceCodester Smart Attendance System with QR Code Scanner student_signup.php cross-site scripting5.3CNA v4.00.3%2026-09-23
CVE-2026-95930iFlytek astron-agent debugToolV2 API endpoint UrlCheckTool.checkUrl server-side request forgery5.3CNA v4.00.3%2026-09-23Fix
CVE-2026-95929iFlytek astron-agent getBotList API endpoint ChatBotMarketMapper.xml SQL injection5.3CNA v4.00.2%2026-09-23Fix
CVE-2026-95928recommenders-team recommenders Dict Loading mind_iterator.py pickle.load deserialization5.1CNA v4.00.2%2026-09-23
CVE-2026-95927SourceCodester Online Reviewer Management System exam-delete.php SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-95926SourceCodester Online Reviewer Management System btn_functions.php update SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-95925SourceCodester Online Reviewer Management System btn_functions.php update SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-95924SourceCodester Online Reviewer Management System btn_functions.php add SQL injection6.9CNA v4.00.3%2026-09-23
CVE-2026-95897Dask Loader core.py from_npy_stack deserialization5.1CNA v4.00.2%2026-09-23
CVE-2026-95868AdithyaYelloju Restaurant-Management-System Search form display_menu.php mysqli_query SQL injection5.3CNA v4.00.2%2026-09-23
CVE-2026-95848Moquette fails open when configured authentication or authorization classes cannot load9.3CNA v4.00.4%2026-09-23Fix
CVE-2026-95847Moquette client IDs can cause cross-session H2 durable-queue corruption8.8CNA v4.00.3%2026-09-23Fix
CVE-2026-95846Moquette publishes Last-Will messages without enforcing write authorization8.7CNA v4.00.3%2026-09-23Fix
CVE-2026-95845Moquette unbounded per-session message queues allow memory exhaustion8.7CNA v4.00.4%2026-09-23Fix
CVE-2026-95844Moquette deeply nested MQTT topics can cause stack exhaustion8.7CNA v4.00.4%2026-09-23Fix
CVE-2026-95843Moquette malformed shared subscriptions can crash command processing8.7CNA v4.00.4%2026-09-23Fix
CVE-2026-95842Moquette uncaught MQTT command exceptions can terminate shared session event loops8.7CNA v4.00.4%2026-09-23Fix
CVE-2026-95676AuthPoint Gateway improper authentication in LDAP Sync allows First-Factor authentication bypass7.4CNA v4.00.4%2026-09-23Fix
CVE-2026-95627Tauri dialog plugin file picker scope incorrect permission assignment7.7CNA v3.10.2%2026-09-23
CVE-2026-95626Tauri content security policy cross-site scripting8.3CNA v3.10.3%2026-09-23
CVE-2026-95625Tauri updater plugin update manifest vulnerability5.9CNA v3.10.2%2026-09-23Fix
CVE-2026-95604Loops and Logic WordPress plugin broken access control7.5CNA v3.10.3%2026-09-23Fix
CVE-2026-95603Reycob Product Import Export WordPress plugin PHP object injection7.2CNA v3.10.4%2026-09-23Fix
CVE-2026-95602YITH WooCommerce Request A Quote WordPress plugin insecure direct object references (IDOR)6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-95601Product Filter by WBW WordPress plugin SQL injection9.3CNA v3.10.2%2026-09-23Fix
CVE-2026-95600TrustedLogin Connector WordPress plugin sensitive data exposure5.3CNA v3.10.3%2026-09-23Fix
CVE-2026-95593Ultimeter WordPress plugin SQL injection7.6CNA v3.10.3%2026-09-23Fix
CVE-2026-95592Team WordPress plugin Unauthenticated insecure direct object reference5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-95590Tainacan WordPress plugin SQL injection7.1CNA v3.10.3%2026-09-23Fix
CVE-2026-95586Ultimate Addons for Contact Form 7 WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-95530PixelYourSite Your smart PIXEL (TAG) Manager WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-95529Calculated Fields Form WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-95528Core Web Vitals and PageSpeed Booster WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-95527Conekta Payment Gateway WordPress plugin broken access control6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-95525WP User Frontend WordPress plugin arbitrary file deletion6.5CNA v3.10.5%2026-09-23Fix
CVE-2026-95524WP User Frontend WordPress plugin bypass vulnerability vulnerability5.3CNA v3.10.3%2026-09-23Fix
CVE-2026-95523WP User Frontend WordPress plugin bypass vulnerability vulnerability6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-95522Easy Digital Downloads WordPress plugin SQL injection7.6CNA v3.10.3%2026-09-23Fix
CVE-2026-95515Ninja Forms WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-95514Netgsm WordPress plugin bypass vulnerability vulnerability5.3CNA v3.10.3%2026-09-23Fix
CVE-2026-95513Online Booking and Scheduling Calendar for WordPress by vcita plugin broken access control7.5CNA v3.10.3%2026-09-23Fix
CVE-2026-94682Podcast Importer SecondLine WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94680The Post Grid WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94679Fluent Support WordPress plugin broken access control5.4CNA v3.10.2%2026-09-23Fix
CVE-2026-94671The Post Grid WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94500ElementsKit Elementor addons Lite WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94498AppMySite WordPress plugin broken access control6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94487PublishPress Capabilities WordPress plugin cross-site request forgery (CSRF)8.1CNA v3.10.1%2026-09-23Fix
CVE-2026-94461Ditty WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94457Captcha Code WordPress plugin bypass vulnerability vulnerability4.8CNA v3.10.2%2026-09-23Fix
CVE-2026-94391Ultimate FAQ WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94251Apache Sling Security Bundle ContentDispositionFilter vulnerability6.5CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-94243Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence7.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-94183The Browser Company of New York Arc Search fullscreen mode handling UI spoofing7.4CNA v3.10.2%2026-09-23Fix
CVE-2026-94181The Browser Company of New York Arc affected versions spoofing7.4CNA v3.10.3%2026-09-23Fix
CVE-2026-94179Razorpay Payment Button WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-94176Mang Board WP WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-94174Email Log WordPress plugin SQL injection7.6CNA v3.10.3%2026-09-23Fix
CVE-2026-94168Premium Addons for Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94124WP EasyCart WordPress plugin SQL injection8.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94118Premium Blocks Gutenberg Blocks for WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-94080MarketKing WordPress plugin broken access control5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-94079WP User Manager WordPress plugin broken access control5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-93774WP Photo Album Plus WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-93773Mollie Forms WordPress plugin SQL injection8.5CNA v3.10.2%2026-09-23Fix
CVE-2026-93772wpForo Forum WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-93769HumHub stored XSS in Profile Field Category title7.2CNA v4.00.3%2026-09-23
CVE-2026-93623AI Engine WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-93622WPS Limit Login WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Reported exploitedFix
CVE-2026-93620PayPlus Payment Gateway WordPress plugin broken access control6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-93618JetTricks WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-93577Integer overflow or wraparound in GitLab9.9CNA v3.10.6%2026-09-23Fix
CVE-2026-93529WSP MCP - AI Agents Connector WordPress plugin broken access control6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-93528NP Quote Request for WooCommerce WordPress plugin unauthenticated order data disclosure3.7CISA ADP v3.10.2%2026-09-23Exploit codeFix
CVE-2026-93527Live Copy Paste for Elementor WordPress plugin SQL injection8.5CNA v3.10.2%2026-09-23Fix
CVE-2026-93526Event Tickets WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-93513SiteSkite WordPress plugin insecure direct object references (IDOR)4.3CNA v3.10.2%2026-09-23Fix
CVE-2026-93511Premium Packages WordPress plugin unauthenticated PayPal Webhook signature verification bypass5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-93510Points and Rewards for WooCommerce Win Wheel claim handler missing authorization4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-93508WC Fields Factory WordPress plugin Subscriber+ arbitrary post Meta manipulation via AJAX8.1CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-93507WC Fields Factory WordPress plugin arbitrary post Cloning and Private content disclosure3.3CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-93421Mesop: Unauthenticated ANSI escape sequence injection in CSP Reporting endpoint5.3CNA v4.00.4%2026-09-23Fix
CVE-2026-93368Rename wp-login.php to anything you want WordPress plugin unauthenticated SQL injection7.5CNA v3.10.3%2026-09-23
CVE-2026-93352Laravel-Mediable RCE via .pht file upload9.3CNA v4.00.6%2026-09-23Fix
CVE-2026-93349frictionlessdata frictionless-py frictionless OS command injection via explore console command8.6CNA v4.02.1%2026-09-23Exploit codeFix
CVE-2026-92874Incorrect authorization in GitLab5.4CNA v3.10.1%2026-09-23Fix
CVE-2026-92730LimeSurvey Community Edition reflected XSS in participant CSV import result7.4CNA v4.00.4%2026-09-23
CVE-2026-92700Caddy: FileHidden case-sensitive pattern bypass exposes hidden files via case variation6.3CNA v4.00.4%2026-09-23Fix
CVE-2026-92692Sulu: JCR-SQL2 injection via `categories` query parameter (unauthenticated)6.9CNA v4.00.3%2026-09-23Fix
CVE-2026-92628Concurrent execution using shared resource with improper synchronization (race condition) in GitLab3.1CNA v3.10.1%2026-09-23Fix
CVE-2026-92530GitLab Direct Transfer import spoofing4.3CNA v3.10.1%2026-09-23Fix
CVE-2026-92529Incorrect authorization in GitLab4.3CNA v3.10.2%2026-09-23Fix
CVE-2026-92470Missing authorization in GitLab7.7CNA v3.10.2%2026-09-23Fix
CVE-2026-92419WEBCON BPS vacations API endpoint insecure direct object reference5.3CNA v4.00.3%2026-09-23Fix
CVE-2026-92378uniFLOW Online Legacy UI Previous login session retained when entering Reduced Function Login4.1CNA v4.00.1%2026-09-23Fix
CVE-2026-92284caddyserver caddy resource exhaustion6.9CNA v4.00.4%2026-09-23Fix
CVE-2026-92164Streamlink: HTTPSession follows HTTP redirects into file:// URLs, reading local files6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-92001Apache Sling XSS: Missing parser resource limits6.1CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-91999Apache Sling XSS: Improper escaping in the XSS Webconsole plugin6.1CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-91928Apache Sling XSS input sanitizer cross-site scripting6.1CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-91852Apache Sling XSS: Multiple raw-string break-outs and ReDOS in XSSImpl6.1CISA ADP v3.10.5%2026-09-23Fix
CVE-2026-91818Foxit PDF Editor/Reader Annotation use-after-free remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91817Foxit PDF Editor/Reader AcroForm out-of-bounds read remote code execution6.1CNA v3.10.1%2026-09-23Fix
CVE-2026-91816Foxit PDF Editor/Reader AcroForm use-after-free remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91815Foxit PDF Editor/Reader JPEG2000 Parsing memory corruption remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91814Foxit PDF Editor A improper signature verification5.3CNA v3.10.1%2026-09-23Fix
CVE-2026-91813Foxit PDF Editor/Reader FoxitUpdater race condition local privilege escalation8.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91812Foxit PDF Editor/Reader FoxitUpdater improper certificate validation local privilege escalation7.9CNA v3.10.1%2026-09-23Fix
CVE-2026-91811Foxit PDF Editor/Reader PRC Stream Parsing out-of-bounds write remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91810Foxit PDF Editor/Reader Doc object out-of-bounds read information disclosure6.1CNA v3.10.1%2026-09-23Fix
CVE-2026-91809Foxit PDF Editor/Reader Annotation use-after-free information disclosure7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91808Foxit PDF Editor/Reader JPEG File Parsing out-of-bounds read information disclosure6.1CNA v3.10.1%2026-09-23Fix
CVE-2026-91807Foxit PDF Editor/Reader PDF File Parsing out-of-bounds read information disclosure6.1CNA v3.10.1%2026-09-23Fix
CVE-2026-91806Foxit PDF Editor/Reader Doc object use-after-free information disclosure7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91805Foxit PDF Editor A use-after-free7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91804Foxit PDF Editor/Reader out-of-bounds write vulnerability While Rendering7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91803Security vulnerability Report Foxit PDF Editor/Reader Updater DLL Search Path Hijacking8.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91802Foxit PDF Editor/Reader heap buffer overflow in WebP Image Decoding via Bitmap Stride Confusion7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91801Foxit PDF Editor/Reader RichMedia Annotation directory traversal remote code execution7.8CNA v3.10.2%2026-09-23Fix
CVE-2026-91800Foxit PDF Editor installer local privilege escalation8.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91799Foxit Editor/Reader Array resetForm use-after-free7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91798Foxit PDF Editor/Reader Updater privilege escalation8.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91797Foxit PDF Editor/Reader Portfolio directory traversal remote code execution7.8CNA v3.10.2%2026-09-23Fix
CVE-2026-91796Foxit PDF Editor/Reader importIcon NTLM Response information disclosure6.1CNA v3.10.1%2026-09-23Fix
CVE-2026-91795Foxit PDF Editor/Reader FileOpen uninitialized variable remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91794Foxit PDF Editor/Reader DeviceN Colorspace out-of-bounds write remote code execution7.8CNA v3.10.2%2026-09-23Fix
CVE-2026-91793Foxit PDF Editor/Reader Doc object use-after-free information disclosure7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91792Foxit PDF Editor/Reader Annotation use-after-free remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91791Foxit PDF Editor/Reader Annotation use-after-free remote code execution7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91790Foxit PDF Editor/Reader Doc object use-after-free information disclosure7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-91789Foxit PDF Editor/Reader U3D File Parsing integer overflow remote code execution7.8CNA v3.10.2%2026-09-23Fix
CVE-2026-91788Foxit PDF Editor/Reader missing authorization information disclosure4.7CNA v3.10.1%2026-09-23Fix
CVE-2026-91777jackson-databind quadratic forward-reference completion7.5CNA v3.10.5%2026-09-23Fix
CVE-2026-91776jackson-databind retains every unknown raw type ID7.5CNA v3.10.5%2026-09-23Fix
CVE-2026-91775LimeSurvey Community Edition reflected XSS through unescaped LSS survey-import warnings7.4CNA v4.00.4%2026-09-23
CVE-2026-91077Event Booking Manager for WooCommerce event listing query improper access control2.7CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-91073Subscribe Forms - Author+ stored XSS via Attention Effect form setting6.8CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-91025Booking Manager WordPress plugin Subscriber+ arbitrary user plugin Meta modification via IDOR4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-91024Booking Manager WordPress plugin Author+ SQLi via ICS import Feed UID (sync_gid)6.8CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-90985WPC Smart Compare for WooCommerce product comparison handler information disclosure5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-90951Paid Membership Subscriptions checkout payment action incorrect authorization3.7CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-90950Paid Member Subscriptions WordPress plugin unauthenticated reCAPTCHA bypass via Registration form5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-90905JoomShaper Easy Store site configuration update improper access control7.2CNA v4.00.3%2026-09-23
CVE-2026-90904JoomShaper Easy Store record editing improper access control8.6CNA v4.00.3%2026-09-23
CVE-2026-90903JoomShaper Easy Store administrator AJAX API endpoints cross-site request forgery7.2CNA v4.00.2%2026-09-23
CVE-2026-90902JoomShaper Easy Store coupon bulk update SQL injection8.6CNA v4.00.3%2026-09-23
CVE-2026-90901JoomShaper Easy Store media image deletion SQL injection8.6CNA v4.00.3%2026-09-23
CVE-2026-90900JoomShaper Easy Store extension for Joomla product review submission cross-site request forgery5.3CNA v4.00.2%2026-09-23
CVE-2026-90899JoomShaper Easy Store extension for Joomla guest checkout insecure direct object reference8.2CNA v4.00.3%2026-09-23
CVE-2026-89425FasterXML jackson-core UTF8DataInputJsonParser resource exhaustion7.5CNA v3.10.5%2026-09-23Fix
CVE-2026-89331FluentBoards - Unauthenticated Board Member Email Address Disclosure via Public Board endpoints5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-89078Double free in GitLab9.9CNA v3.10.4%2026-09-23Fix
CVE-2026-88997JSM Show Post Metadata WordPress plugin Contributor+ stored XSS via Custom field Meta Key6.8CISA ADP v3.10.3%2026-09-23Exploit codeFix
CVE-2026-88974WPGraphQL: Contributor can publish and modify posts without the required capabilities via updatePost5.4CNA v3.10.3%2026-09-23Fix
CVE-2026-88929Sale Booster - Unauthenticated Non-Public Product Disclosure5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-88840BusyBox TLS ClientHello parser out-of-bounds read5.3CNA v3.10.2%2026-09-23
CVE-2026-88839BusyBox passwd and group file parser out-of-bounds write6.7CNA v3.10.1%2026-09-23Fix
CVE-2026-88837BusyBox httpd basic authentication authentication bypass6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-88835BusyBox dpkg package field parser out-of-bounds read6.1CNA v3.10.1%2026-09-23Fix
CVE-2026-88832BusyBox romfs volume ID parsing out-of-bounds write7.3CNA v3.10.1%2026-09-23Fix
CVE-2026-88831BusyBox httpd IP deny rules vulnerability5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-88830BusyBox TLS Montgomery reduction buffer allocation out-of-bounds write7.5CNA v3.10.4%2026-09-23Fix
CVE-2026-87981Paymob for WooCommerce payment gateway configuration missing authorization4.7CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-87979Paymob for WooCommerce payment webhook missing authorization5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-87978Paymob for WooCommerce payment webhook vulnerability5.3CNA v3.10.1%2026-09-23Fix
CVE-2026-87900WebPros WP Toolkit for cPanel argument injection9.4CNA v4.00.6%2026-09-23
CVE-2026-87899WebPros cPanel execution with unnecessary privileges9.4CNA v4.00.6%2026-09-23Fix
CVE-2026-87898WebPros Plesk extension "Site Import" OS command injection9.4CNA v4.01.0%2026-09-23
CVE-2026-87848MPCX Lightbox - Unauthenticated Non-Public Post Content Disclosure3.7CNA v3.10.2%2026-09-23
CVE-2026-87074Forminator Forms saved draft notification missing authorization3.7CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-87071Forminator Forms WordPress plugin unauthenticated post Meta injection on Submitted posts5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-87070Forminator Forms WordPress plugin unauthenticated Poll Vote Limit bypass via IP spoofing5.3CNA v3.10.1%2026-09-23Fix
CVE-2026-87069Forminator Forms WordPress plugin Subscriber+ form Stripe field Migration via migrate_stripe3.1CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-87022Apache Tomcat: WebSocket message smuggling with per-message-deflate7.5CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-86938Claris FileMaker Pro DLL hijacking7.3CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-86934Claris FileMaker Server An authorization bypass9.1CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-86930Claris FileMaker Server An out-of-bounds read9.1NVD v3.10.3%2026-09-23Fix
CVE-2026-86926Claris FileMaker Server heap-based buffer overflow7.8CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-86867Cinnamon's Kotaemon contains improper authorization checks in multi‑user chat handlers6.5CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86842Real3D Flipbook Lite WordPress plugin content deletion and stored XSS6.8CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86785Social Commerce for WooCommerce REST API endpoints missing authorization5.3CISA ADP v3.10.2%2026-09-23
CVE-2026-86783Post Grid Gutenberg Blocks REST API custom field route information disclosure5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86708Zoho ManageEngine Applications Manager sensitive data exposure10.0CNA v3.11.2%2026-09-23Fix
CVE-2026-86683Zoho ManageEngine Applications Manager broken authentication8.1CNA v3.10.7%2026-09-23Fix
CVE-2026-86681Zoho ManageEngine Applications Manager broken access control7.6CNA v3.10.5%2026-09-23Fix
CVE-2026-86679Zoho ManageEngine Applications Manager broken access control7.1CNA v3.10.8%2026-09-23Fix
CVE-2026-86678Zoho ManageEngine Applications Manager broken authentication8.8CNA v3.10.7%2026-09-23Fix
CVE-2026-86677Zoho ManageEngine Applications Manager broken authentication8.8CNA v3.12.0%2026-09-23Fix
CVE-2026-86612Ninja Tables Fluent Forms data source shortcode expansion vulnerability5.6CNA v3.10.2%2026-09-23Fix
CVE-2026-86608WP Recipe Maker - unauthenticated DoS via Unbounded User Meta Insertion8.2CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86604GTranslate WordPress plugin unauthenticated arbitrary shortcode execution via email Translation4.8CNA v3.10.2%2026-09-23Fix
CVE-2026-86603WP Recipe Maker WordPress plugin Subscriber+ Non-Public List Title disclosure via wprm_search_lists4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86602WP Recipe Maker - Subscriber+ Draft and Private Recipe Content Disclosure via wprm_shortcode_preview4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86601WP Recipe Maker WordPress plugin unauthenticated arbitrary shortcode execution via comment content6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-86583Import and export users and customers WordPress plugin privilege escalation8.8CNA v3.10.3%2026-09-23Fix
CVE-2026-86350Apache Tomcat: Regression in fix for can trigger request header mix-up9.1CISA ADP v3.10.3%2026-09-23Exploit codeFix
CVE-2026-86248Apache Tomcat CLIENT_CERT improper authentication9.8CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-86247Apache Tomcat Native: Client certificate requirements can be down-graded7.4CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-86246Apache Tomcat Native: Insecure OpenSSL options enabled9.1CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-86243Apache Tomcat Native: DoS via TLS handshake7.5CISA ADP v3.10.6%2026-09-23Fix
CVE-2026-86065Klever-Go WebSocket subscribe endpoint denial of service7.5CNA v3.10.4%2026-09-23Fix
CVE-2026-86064Klever-Go: /log controls global node logging8.6CNA v3.10.4%2026-09-23Fix
CVE-2026-85724Moquette pattern ACL wildcard injection allows cross-tenant authorization bypass9.6CNA v3.10.3%2026-09-23Fix
CVE-2026-85475Red Hat Ansible Automation Platform rsyslog logging configuration remote code execution7.2CNA v3.10.4%2026-09-23Fix
CVE-2026-85006Happy Addons for Elementor WordPress plugin Contributor+ stored XSS via Creative Button widget6.8CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84791Zoho ManageEngine OpManager broken access control7.1CNA v3.10.6%2026-09-23Fix
CVE-2026-84789Zoho ManageEngine OpManager broken access control7.1CNA v3.10.6%2026-09-23Fix
CVE-2026-84787Zoho ManageEngine OpManager privilege escalation8.1CNA v3.10.8%2026-09-23Fix
CVE-2026-84743The Events Calendar - Contributor+ Event/Venue/Organizer Update, Trash and Ownership takeover3.8CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84742The Events Calendar - Contributor+ Content Publication via TEC V1 REST API2.7CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84741The Events Calendar - Unauthenticated Non-Public Venue and Organizer Disclosure via REST API5.3CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-84724Red Hat Ansible Automation Platform argument injection6.6CNA v3.10.3%2026-09-23Fix
CVE-2026-84721Red Hat Ansible Automation Platform server-side request forgery6.4CNA v3.10.2%2026-09-23Fix
CVE-2026-84720Red Hat Ansible Automation Platform information disclosure6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-84719Red Hat Ansible Automation Platform automation-controller workflow job template copy vulnerability9.9CNA v3.10.4%2026-09-23Fix
CVE-2026-84718Red Hat Ansible Automation Platform automation-controller X-Forwarded-For handling vulnerability4.3CNA v3.10.1%2026-09-23Fix
CVE-2026-84717Red Hat Ansible Automation Platform response discrepancy5.3CNA v3.10.3%2026-09-23Fix
CVE-2026-84716Red Hat Ansible Automation Platform incorrect privilege assignment6.6CNA v3.10.2%2026-09-23Fix
CVE-2026-84714Red Hat Ansible Automation Platform template injection7.1CNA v3.10.3%2026-09-23Fix
CVE-2026-84713Red Hat Ansible Automation Platform insecure direct object reference6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-84712Red Hat Ansible Automation Platform information disclosure5.3CNA v3.10.3%2026-09-23Fix
CVE-2026-84706Red Hat Ansible Automation Platform code execution7.6CNA v3.10.3%2026-09-23Fix
CVE-2026-84691Red Hat Ansible Automation Platform format string injection8.7CNA v3.10.2%2026-09-23Fix
CVE-2026-84683Red Hat Ansible Automation Platform job stdout HTML rendering stored cross-site scripting8.7CNA v3.10.3%2026-09-23Fix
CVE-2026-84502Red Hat Ansible Automation Platform project SCM URL handling argument injection9.9CNA v3.10.6%2026-09-23Fix
CVE-2026-84499Red Hat Ansible Automation Platform survey password validation information disclosure7.7CNA v3.10.4%2026-09-23Fix
CVE-2026-84486Red Hat Ansible Automation Platform debug scheduler trigger endpoints denial of service8.2CNA v3.10.5%2026-09-23Fix
CVE-2026-84474Red Hat Ansible Automation Platform provisioning callback authentication privilege escalation9.9CNA v3.10.8%2026-09-23Fix
CVE-2026-84168Easy Hide Login WordPress plugin login page Protection bypass / Hidden URL disclosure5.3CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-84150Directorist WordPress plugin Cross-User Favorites read and write via REST Favorites endpoint5.4CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84098Directorist - Subscriber+ arbitrary Listing Deletion via remove_listing6.5CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84091SUMIT Payment Gateway for WooCommerce IPN handler improper authentication5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-84046Directorist WordPress plugin Subscriber+ SSRF via Avatar URL5.0CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84027Directorist - Subscriber+ Paid Order and Payment Record Forgery via REST Orders endpoint4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-84026Directorist - unauthenticated sensitive data disclosure via REST Users endpoint5.3CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-83555Email Subscribers and Newsletters subscription status endpoint missing authorization5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-82843WP OAuth Server WordPress plugin Cross-user account takeover9.0CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-82409Klever-Go: Elasticsearch bulk / painless injection8.4CNA v4.00.3%2026-09-23Fix
CVE-2026-82407Klever-Go: Validator registration accepts an unvalidated BLS public key → consensus liveness DoS7.0CNA v4.00.4%2026-09-23Fix
CVE-2026-82406Klever-Go: Zombie-order theft: `Buy` missing `IsClaimed` guard in native marketplace7.1CNA v4.00.3%2026-09-23Fix
CVE-2026-82405Klever-Go account permission update incorrect authorization8.7CNA v4.00.3%2026-09-23Fix
CVE-2026-82370Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service8.6CNA v4.00.6%2026-09-23Fix
CVE-2026-82369Insufficient input sanitization of shell metacharacters in Brocade SANnav8.6CNA v4.00.5%2026-09-23Fix
CVE-2026-82368Brocade SANnav improper access control8.7CNA v4.00.3%2026-09-23Fix
CVE-2026-82356Imprivata EAM: Unrotatable X.509 RSA Key Pair in Production7.5CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-82331Apache BuildStream: Tar source extraction escape9.8CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-81537IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.11.0%2026-09-23Fix
CVE-2026-81536IBM DataStage on Cloud Pak for Data XML external entity injection7.7CNA v3.10.3%2026-09-23Fix
CVE-2026-81339MasterStudy LMS WordPress plugin Subscriber+ Quiz Attempt Grade disclosure via IDOR4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-81338MasterStudy LMS WordPress plugin Subscriber+ stored HTML injection via Course Discussions4.6CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-81208IBM DataStage on Cloud Pak for Data insufficiently protected credentials7.7CNA v3.10.2%2026-09-23Fix
CVE-2026-80444Unauthenticated open redirect vulnerability in ABIS Technology's AVESİS5.4CNA v3.10.1%2026-09-23Fix
CVE-2026-80425IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.11.0%2026-09-23Fix
CVE-2026-80423IBM DataStage on Cloud Pak for Data file mounts information disclosure8.8CNA v3.10.3%2026-09-23Fix
CVE-2026-80412IBM DataStage on Cloud Pak for Data OSH script generation vulnerability8.8CNA v3.10.6%2026-09-23Fix
CVE-2026-80379IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.11.0%2026-09-23Fix
CVE-2026-80342Payment Plugins for PayPal WooCommerce payment capture endpoint insecure direct object reference6.5CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-79677Apache Tomcat: WebSocket DoS due to lost asynchronous write timeout7.5CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-79616Out-of-bounds read vulnerability in Context2D.path and PathSvg.path properties impacts Qt Quick0.6CNA v4.00.1%2026-09-23Fix
CVE-2026-79310web.py template engine server-side template injection8.5CISA ADP v3.10.7%2026-09-23
CVE-2026-79306CyberPanel file manager compress function path traversal6.5CNA v3.10.5%2026-09-23
CVE-2026-79304CyberPanel file manager controller path traversal6.5CNA v3.10.5%2026-09-23
CVE-2026-78437Apache Tomcat: HTTP/2 DoS via malformed request7.3CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-78383Apache Tomcat: AJP DoS via missing request body7.5CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-78253Denial of service (stack-exhaustion) vulnerability in QXmlStreamReader::readElementText impacts Qt2.3CNA v4.00.3%2026-09-23Fix
CVE-2026-77791Apache Tomcat: DoS via busy wait during WebSocket close7.5CISA ADP v3.10.5%2026-09-23Fix
CVE-2026-77766Directorist - Subscriber+ Order and Financial Record Disclosure via REST Orders endpoint4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-77765Better Payment WordPress plugin unauthenticated Payment Amount manipulation5.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-77762Apache Tomcat: Stale HPACK emitter injects trailers into recycled pooled request8.1CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-77756Apache Tomcat: Transfer-Encoding honored for HTTP/1.0 requests3.7CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-77602OpenC3 COSMOS: Authenticated remote code execution9.9CNA v3.10.6%2026-09-23Fix
CVE-2026-77601OpenC3 COSMOS: Authenticated OS command injection via the `pypi_url` setting8.8CNA v3.10.6%2026-09-23Fix
CVE-2026-77423JLine: ReDoS in Built-in Less Viewer Search7.5CNA v3.10.4%2026-09-23Fix
CVE-2026-77422JLine: ReDoS in Built-in grep Command Amplified by Automatic `.*` Wrapping7.5CNA v3.10.5%2026-09-23Fix
CVE-2026-77421JLine: ReDoS in Nano Editor Regex Search Mode6.5CNA v3.10.4%2026-09-23Fix
CVE-2026-77420JLine: ReDoS via `HISTORY_IGNORE` Configuration variable5.5CNA v3.10.1%2026-09-23Fix
CVE-2026-77394OpenC3 COSMOS: Stored, cross-user XSS via Telemetry screen BUTTON widget7.6CNA v3.10.4%2026-09-23Fix
CVE-2026-77285OpenBao Agent Writes Secrets to Stdout2.4CNA v4.00.1%2026-09-23Fix
CVE-2026-77112SSRF leading to JWT token disclosure in Global IT Informatics' Weoll6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-76980Zoho ManageEngine OpManager data exposure7.4CNA v3.10.4%2026-09-23Fix
CVE-2026-76979Zoho ManageEngine OpManager XML injection7.7CNA v3.11.1%2026-09-23Fix
CVE-2026-76978Zoho ManageEngine OpManager command injection8.8CNA v3.13.7%2026-09-23Fix
CVE-2026-76648Red Hat Ansible Automation Platform CopyAPIView job template copy endpoint missing authorization8.5CNA v3.10.2%2026-09-23Fix
CVE-2026-76183Apache Tomcat: Bypass of security constraints for WebSocket endpoints9.8CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-76089Formie: Missing authorization on sent notification resend modal exposes submission PII7.7CNA v3.10.2%2026-09-23Fix
CVE-2026-76087Formie: Unauthenticated users can overwrite incomplete submissions via submit action8.2CNA v3.10.3%2026-09-23Fix
CVE-2026-76086verbb Formie integration form-settings action server-side request forgery8.5CNA v3.10.3%2026-09-23Fix
CVE-2026-75973Apache Tomcat: Cross-context authentication mix-up with Jakarta Authentication configured7.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-75887Openshift/console: Openshift/console: Unauthenticated path traversal in i18n locale handler7.5CNA v3.10.5%2026-09-23Fix
CVE-2026-75886Red Hat OpenShift Container Platform console CatalogdHandler vulnerability7.2CNA v3.10.3%2026-09-23Fix
CVE-2026-75884Red Hat Ansible Automation Platform awx: Awx: Privilege escalation to openshift namespace9.1CNA v3.10.4%2026-09-23Fix
CVE-2026-75825Zoho ManageEngine OpManager authentication bypass8.8CNA v3.11.1%2026-09-23Fix
CVE-2026-75799YAHMAN Add-ons WordPress plugin unauthenticated arbitrary file upload via Blog Card Cache9.0CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-75131NetworkManager-l2tp privilege escalation via pppd Username injection8.5CNA v4.00.2%2026-09-23Fix
CVE-2026-73858Solspace Freeform: Limited Twig template injection via submitted field values5.3CNA v3.10.4%2026-09-23Fix
CVE-2026-73591Dell Secure Connect Gateway (SCG) Policy Manager sensitive information in source code7.5CNA v3.10.3%2026-09-23Fix
CVE-2026-73589Dell Secure Connect Gateway (SCG) Policy Manager weak password encoding6.3CNA v3.10.1%2026-09-23Fix
CVE-2026-73588Dell Secure Connect Gateway (SCG) Policy Manager missing authentication7.4CNA v3.10.2%2026-09-23Fix
CVE-2026-73587Dell Secure Connect Gateway (SCG) Policy Manager improper certificate validation6.8CNA v3.10.1%2026-09-23Fix
CVE-2026-73586Dell Secure Connect Gateway (SCG) Policy Manager insufficient session expiration6.4CNA v3.10.1%2026-09-23Fix
CVE-2026-73581Apache Tomcat OpenSSL and OpenSSL-FFM TLS implementations vulnerability6.5CISA ADP v3.10.1%2026-09-23Fix
CVE-2026-73192Apache Sling XSS: XSS possible through XSSAPI.getValidHref6.1CISA ADP v3.10.4%2026-09-23Fix
CVE-2026-71465Red Hat Ansible Automation Platform ad hoc command limit field argument injection3.1CNA v3.10.2%2026-09-23Fix
CVE-2026-71464Red Hat Ansible Automation Platform scm branch field argument injection3.1CNA v3.10.2%2026-09-23Fix
CVE-2026-71463Red Hat Ansible Automation Platform notification template engine vulnerability2.7CNA v3.10.3%2026-09-23Fix
CVE-2026-71462Red Hat Ansible Automation Platform custom venv path setting information disclosure4.1CNA v3.10.3%2026-09-23Fix
CVE-2026-71461Red Hat Ansible Automation Platform host list API vulnerability4.3CNA v3.10.2%2026-09-23Fix
CVE-2026-71460Red Hat Ansible Automation Platform configuration endpoint vulnerability4.3CNA v3.10.2%2026-09-23Fix
CVE-2026-71459Red Hat Ansible Automation Platform job events API missing authorization5.0CNA v3.10.3%2026-09-23Fix
CVE-2026-71458Red Hat Ansible Automation Platform named-URL lookup information disclosure5.0CNA v3.10.3%2026-09-23Fix
CVE-2026-71178Dell Secure Connect Gateway (SCG) Policy Manager unauthorized access3.7CNA v3.10.2%2026-09-23Fix
CVE-2026-71177Dell Secure Connect Gateway (SCG) Policy Manager clickjacking5.4CNA v3.10.1%2026-09-23Fix
CVE-2026-70125Microsoft Office Outlook remote code execution8.8CNA v3.10.4%2026-09-23Fix
CVE-2026-68492WebPros Plesk An untrusted search path8.7CNA v4.00.4%2026-09-23Fix
CVE-2026-68490WebPros cPanel incorrect permission assignment8.2CNA v4.00.1%2026-09-23Fix
CVE-2026-67405RabbitMQ: CSWSH on Web-STOMP / Web-MQTT (no Origin validation)5.3CNA v4.00.1%2026-09-23Fix
CVE-2026-67404RabbitMQ: OAuth2 silent verify_none fallback for JWKS fetch9.2CNA v4.00.2%2026-09-23Fix
CVE-2026-67240RabbitMQ: ReDoS via AMQP SQL filter LIKE wildcard2.3CNA v4.00.3%2026-09-23Fix
CVE-2026-67238RabbitMQ: Atom-table exhaustion via reply-to queue name decoding7.1CNA v4.00.3%2026-09-23Fix
CVE-2026-67235RabbitMQ: AMQP 0-9-1 body assembly never validates accumulated size7.1CNA v4.00.3%2026-09-23Fix
CVE-2026-67232RabbitMQ: Web-MQTT decompression bomb8.2CNA v4.00.4%2026-09-23Fix
CVE-2026-67231RabbitMQ: Trust-store whitelist by Issuer+Serial only9.1CNA v4.00.2%2026-09-23Fix
CVE-2026-67229RabbitMQ: Admin-only atom exhaustion: Atomize_keys on vhost metadata6.9CNA v4.00.3%2026-09-23Fix
CVE-2026-67228RabbitMQ: Atom exhaustion: To_atom on runtime-parameter component6.9CNA v4.00.3%2026-09-23Fix
CVE-2026-67224RabbitMQ: Admin path-traversal write via trace name2.1CNA v4.00.4%2026-09-23Fix
CVE-2026-67221RabbitMQ: AMQP shovel status exposes plaintext URI passwords5.9CNA v4.00.2%2026-09-23Fix
CVE-2026-67220RabbitMQ: JMS topic exchange erl_scan atom exhaustion6.0CNA v4.00.3%2026-09-23Fix
CVE-2026-67219RabbitMQ: Consistent-hash exchange unbounded weight6.0CNA v4.00.3%2026-09-23Fix
CVE-2026-67218RabbitMQ: Super-stream HTTP creation skips configure-permission check2.1CNA v4.00.3%2026-09-23Fix
CVE-2026-66080RabbitMQ: Super-stream partitions unbounded allocation5.9CNA v4.00.3%2026-09-23Fix
CVE-2026-66079RabbitMQ: Pre-auth AMQP array32 zero-width element DoS8.2CNA v4.00.3%2026-09-23Fix
CVE-2026-66077RabbitMQ: Stored XSS via TLS peer-certificate DN in management UI7.3CNA v4.00.3%2026-09-23Fix
CVE-2026-66076RabbitMQ: Cross-vhost quorum-queue status and stream tracking disclosure2.3CNA v4.00.3%2026-09-23Fix
CVE-2026-66075RabbitMQ: Monitoring-tag user can restart federation links2.3CNA v4.00.2%2026-09-23Fix
CVE-2026-66074RabbitMQ: ReDoS via management API ?name= filter6.0CNA v4.00.3%2026-09-23Fix
CVE-2026-66072RabbitMQ: Atom table exhaustion via stream `chunk_selector`6.0CNA v4.00.3%2026-09-23Fix
CVE-2026-66070RabbitMQ: CORS * reflects Origin with Allow-Credentials7.6CNA v4.00.4%2026-09-23Fix
CVE-2026-66069RabbitMQ: Monitoring-tag delete of auth-attempt metrics2.3CNA v4.00.4%2026-09-23Fix
CVE-2026-66068RabbitMQ: Shovel DEBUG log of full state exposes decrypted URIs5.6CNA v4.00.1%2026-09-23Fix
CVE-2026-66067RabbitMQ: Stream protocol skips per vhost per user connection limits6.0CNA v4.00.4%2026-09-23Fix
CVE-2026-63132OpenBao's Recovery Mode vulnerable to token leakage via Timing Attack9.2CNA v4.00.5%2026-09-23Fix
CVE-2026-63131OpenBao LIST ACL bypass: A trailing-slash LIST request skips a more-specific deny rule6.0CNA v4.00.4%2026-09-23Fix
CVE-2026-63002REDAXO: Stored XSS in Mediapool Sync page via Unescaped Filesystem Filenames4.8CNA v3.10.2%2026-09-23Fix
CVE-2026-63001REDAXO: Stored XSS via Unescaped Media Manager Type Name in `mediaIsInUse`4.8CNA v3.10.2%2026-09-23Fix
CVE-2026-63000REDAXO: Missing CSRF Protection on Package Update action allows Forced Addon Updates6.4CNA v3.10.1%2026-09-23Fix
CVE-2026-62998REDAXO: Unwhitelisted ORDER BY Column in rex_list allows Authenticated Column Enumeration4.3CNA v3.10.3%2026-09-23Fix
CVE-2026-61834thomaspoignant scim-patch prototype pollution4.3CNA v3.10.3%2026-09-23Fix
CVE-2026-61814Jawn: Quadratic parsing effort in AsyncParser7.5CNA v3.10.6%2026-09-23Fix
CVE-2026-61695Square Wire Swift protobuf reader denial of service7.5CNA v3.10.6%2026-09-23Fix
CVE-2026-61413Dell Secure Connect Gateway (SCG) Policy Manager improper privilege management6.8CNA v3.10.2%2026-09-23Fix
CVE-2026-59990Jawn: Uncontrolled nesting depth in JSON parser7.5CNA v3.10.6%2026-09-23Fix
CVE-2026-59980python-hyper hpack variable integer decoder resource exhaustion6.3CNA v4.00.3%2026-09-23Fix
CVE-2026-59167SunEditor: Critical XSS vulnerability sanitizer bypass10.0CNA v3.10.4%2026-09-23Fix
CVE-2026-55632GoCD is vulnerable to authorization bypass via pipeline structure API4.3CNA v3.10.3%2026-09-23Fix
CVE-2026-55610InvoiceShelf has cross-company user read/update IDOR that enables cross-tenant account takeover8.7CNA v3.10.3%2026-09-23Fix
CVE-2026-52744GoCD is vulnerable to authorization bypass via fetch artifact autosuggestion API5.3CNA v4.00.4%2026-09-23Fix
CVE-2026-50228Electron DevTools arbitrary code execution vulnerability in NitroSense6.1CNA v4.00.1%2026-09-23
CVE-2026-50227MQTT WebSocket command execution vulnerability in NitroSense6.1CNA v4.00.3%2026-09-23
CVE-2026-42801ASR Crane，Falcon deference after null check in as_rrc7.4CNA v3.10.2%2026-09-23
CVE-2026-31377Apache Doris: Improper authentication allows unauthorized access to FE Meta service7.5CNA v3.10.5%2026-09-23Fix
CVE-2026-19888Null pointer dereference in SCRAM client-final-message parsing in PgBouncer7.5CNA v3.10.4%2026-09-23Fix
CVE-2026-19599Zoho ManageEngine OpManager remote code execution9.9CNA v3.12.9%2026-09-23Fix
CVE-2026-19438Mint Workbench I path traversal8.2CNA v4.00.3%2026-09-23
CVE-2026-19267IBM Financial Transaction Manager for OpenShift missing authentication6.2CNA v3.10.1%2026-09-23Fix
CVE-2026-19179IBM Financial Transaction Manager (FTM) for RedHat OpenShift improper neutralization8.2CNA v3.10.3%2026-09-23Fix
CVE-2026-19125EthPress WordPress plugin unauthenticated authentication bypass8.1CNA v3.10.6%2026-09-23Exploit codeFix
CVE-2026-19087IBM Financial Transaction Manager for OpenShift privilege escalation4.4CNA v3.10.1%2026-09-23Fix
CVE-2026-18875IBM Financial Transaction Manager (FTM) for RedHat OpenShift FTM AI agent server injection7.3CNA v3.10.2%2026-09-23Fix
CVE-2026-18872IBM Financial Transaction Manager (FTM) stored cross-site scripting9.3CNA v3.10.2%2026-09-23Fix
CVE-2026-18505IBM Financial Transaction Manager PMP Host header filter open redirect5.4CNA v3.10.1%2026-09-23Fix
CVE-2026-18490IBM Financial Transaction Manager PayDir RMI endpoint deserialization of untrusted data8.8CNA v3.10.3%2026-09-23Fix
CVE-2026-18365Zportals WordPress plugin Subscriber+ user email disclosure4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-18364Zportals WordPress plugin Subscriber+ arbitrary plugin settings update4.3CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-18185IBM Financial Transaction Manager (FTM) for RedHat OpenShift missing authentication7.3CNA v3.10.3%2026-09-23Fix
CVE-2026-18184IBM Financial Transaction Manager (FTM) for RedHat OpenShift XML external entity injection7.4CNA v3.10.2%2026-09-23Fix
CVE-2026-18181IBM Financial Transaction Manager (FTM) for RedHat OpenShift hard-coded cryptographic key8.1CNA v3.10.2%2026-09-23Fix
CVE-2026-18180IBM Financial Transaction Manager (FTM) for RedHat OpenShift SQL injection6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-18179IBM Financial Transaction Manager for RedHat OpenShift chat sessions missing authorization6.5CNA v3.10.2%2026-09-23Fix
CVE-2026-18177IBM Financial Transaction Manager for RedHat OpenShift payment actions missing authorization7.1CNA v3.10.2%2026-09-23Fix
CVE-2026-16264Newsletters WordPress plugin unauthenticated Subscriber Record Overwrite and PII disclosure via IDOR6.5CISA ADP v3.10.2%2026-09-23Fix
CVE-2026-15358Zoho ManageEngine OpManager path traversal7.5CNA v3.11.1%2026-09-23Fix
CVE-2026-15027Changing｜CGServiSign OS command injection8.6CNA v4.03.2%2026-09-23Fix
CVE-2026-14913Zoho ManageEngine OpManager SQL injection8.8CNA v3.11.0%2026-09-23Fix
CVE-2026-14321Divi Dash rate limiting denial of service8.2CISA ADP v3.10.3%2026-09-23Fix
CVE-2026-12974Forcepoint Security Engine (NGFW) permissive allowlist7.9CNA v4.00.3%2026-09-23
CVE-2026-12370Zoho ManageEngine OpManager remote code execution7.6CNA v3.11.5%2026-09-23Fix
CVE-2026-6935IBM Concert uncontrolled search path7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-6928IBM Concert use-after-free9.8CNA v3.10.5%2026-09-23Fix
CVE-2026-6925IBM Concert path traversal5.3CNA v3.10.3%2026-09-23Fix
CVE-2026-6831Advanced Contact form 7 DB WordPress plugin missing authorization6.5CNA v3.10.3%2026-09-23Fix
CVE-2026-6794IBM Concert double free7.8CNA v3.10.1%2026-09-23Fix
CVE-2026-6730IBM Concert buffer overflow9.8CNA v3.10.3%2026-09-23Fix
CVE-2026-6721IBM Concert OS command injection9.8CNA v3.11.4%2026-09-23Fix
CVE-2026-6718IBM Concert improper access control6.2CNA v3.10.1%2026-09-23Fix
CVE-2026-6669Unbounded SCRAM iteration count causes CPU exhaustion in PgBouncer5.9CNA v3.10.3%2026-09-23Fix
CVE-2026-6668Integer overflow causes an infinite loop in packet buffer growth in PgBouncer7.5CNA v3.10.4%2026-09-23Fix
CVE-2026-6327IBM Concert log injection4.3CNA v3.10.2%2026-09-23Fix
CVE-2026-5924Getwid WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-23Fix
CVE-2026-5696microweber Administration panel reflected cross-site scripting5.9CNA v4.00.3%2026-09-23
CVE-2026-5695Microweber administration panel upload forms arbitrary file upload8.4CNA v4.00.3%2026-09-23
CVE-2026-4921IBM Guardium Data Protection information disclosure2.7CNA v3.10.2%2026-09-23Fix
CVE-2026-3626IBM Concert information disclosure5.3CNA v3.10.2%2026-09-23Fix
CVE-2026-96269GNU Emacs inclusion of untrusted functionality7.5CNA v4.00.1%2026-09-22Fix
CVE-2026-96260Mattermost excessive memory allocation6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-96259Mattermost server-side request forgery via OAuth endpoints configurable by a System Administrator5.5CNA v3.10.3%2026-09-22Fix
CVE-2026-95862Ubiquiti Dream Machines out-of-bounds write7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-95861Ubiquiti Dream Machines uncontrolled recursion7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-95833itsourcecode Leave Management System index.php SQL injection5.3CNA v4.00.2%2026-09-22
CVE-2026-95831Crypt::SelfCertificate generate_certificate function embedded malicious code7.8CISA ADP v3.10.1%2026-09-22Fix
CVE-2026-95830theRealSain Pixtream post_upload.php unrestricted upload5.3CNA v4.00.2%2026-09-22
CVE-2026-95829tduck-platform pagination interceptor SQL injection5.3CNA v4.00.2%2026-09-22
CVE-2026-95828Mstfakts College-Management-System Authentication server.php session_start session fixiation5.3CNA v4.00.5%2026-09-22
CVE-2026-95820anirbandutta9 College-Notes-Gallery userprofile.php admin1 unrestricted upload5.3CNA v4.00.3%2026-09-22
CVE-2026-95819anirbandutta9 College-Notes-Gallery login.php SQL injection6.9CNA v4.00.4%2026-09-22
CVE-2026-95818The GNU C Library glibc AT_SECURE program buffer overflow via $ORIGIN processing3.6CNA v3.10.1%2026-09-22Fix
CVE-2026-95815OpenClaw iOS credential exposure via Deep-Link URL Logging7.2CNA v4.00.2%2026-09-22Fix
CVE-2026-95814Vaultwarden authorization bypass via Missing Status Check8.6CNA v4.00.4%2026-09-22
CVE-2026-95813e621ng open redirect via URL parameters5.3CNA v4.00.3%2026-09-22Fix
CVE-2026-95812MacWarrior clipbucket-v5 ClipBucket v5#182 reflected XSS via Query parameters5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95806MISP: PHP phar stream wrapper enables deserialization and code execution7.7CNA v4.00.4%2026-09-22Fix
CVE-2026-95805MISP ACLComponent: Typo in previewEventAttributes ACL key bypasses intended access restriction5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95754MISP: Disabled-user check ineffective in pre-authentication TOTP login branch6.9CNA v4.00.5%2026-09-22Fix
CVE-2026-95703MISP OrganisationsController File Existence and Image-Type Oracle via Forged upload tmp_name5.1CNA v4.00.5%2026-09-22Fix
CVE-2026-95701MISP path traversal via Organization Name in Org-Statistics Logo Check5.1CNA v4.00.8%2026-09-22Fix
CVE-2026-95698MISP path traversal in OrgImgHelper findOrgImage via Crafted Organization Name5.3CNA v4.00.7%2026-09-22Fix
CVE-2026-95697MISP: Insufficient authorization allows Sharing Group Editors to Overwrite Organization Metadata5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95693MISP information disclosure via Forged Upload Path5.3CNA v4.00.5%2026-09-22Fix
CVE-2026-95685MISP missing authorization on replaceSuggestionInReport Event Report action5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95683MISP Overmind Event View Discloses Report Content Bypassing Report-Level ACL5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95682MISP stored cross-site scripting via Unescaped Organization Name in Admin Email view4.8CNA v4.00.4%2026-09-22Fix
CVE-2026-95679MISP unauthenticated blind SSRF via XML Body Processing6.9CNA v4.00.6%2026-09-22Fix
CVE-2026-95675D-Link DAP-1360 unauthenticated RCE via Web Management interface9.3CNA v4.02.1%2026-09-22Reported exploitedEmerging ThreatsExploit code
CVE-2026-95674MISP event enrichment improper input validation5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95671MISP Collections: Missing authorization Check for Sharing Group on PUT request in collections/add5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-95667MISP Installer Log and FIFO Created World-Readable, Exposing Sensitive Credentials6.9CNA v4.00.2%2026-09-22Fix
CVE-2026-95666Mattermost unbounded post ID array in the bulk reactions endpoint allows denial of service4.3CNA v3.10.4%2026-09-22Fix
CVE-2026-95665MISP reflected cross-site scripting in Event Export Confirmation form via Unescaped JSON5.1CNA v4.00.5%2026-09-22Fix
CVE-2026-95661MISP reflected cross-site scripting in Attribute Histogram via Unescaped URL-Supplied Type List5.1CNA v4.00.4%2026-09-22Fix
CVE-2026-95660Moonshot AI Kimi Code MCP Configuration Loader config-loader.ts os command injection5.3CNA v4.01.7%2026-09-22Fix
CVE-2026-95659MISP reflected XSS via Unvalidated Object Type in AnalystData Overmind Thread4.8CNA v4.00.4%2026-09-22Fix
CVE-2026-95658MISP workflow module execution cross-site request forgery6.9CNA v4.00.3%2026-09-22Fix
CVE-2026-95657changedetection.io visual selector cross-site scripting5.1CNA v4.00.4%2026-09-22Fix
CVE-2026-95656changedetection.io preview endpoint server-side request forgery6.9CNA v4.00.5%2026-09-22Fix
CVE-2026-95655Aureus ERP Unscoped Message Access via ChatterPanel8.6CNA v4.00.5%2026-09-22Fix
CVE-2026-95654Databasement authorization bypass via Stale Invitation Token9.1CNA v4.00.5%2026-09-22Fix
CVE-2026-95653Concrete CMS Community Store digital download token vulnerability8.7CNA v4.00.6%2026-09-22Fix
CVE-2026-95624Tauri framework v2 malicious downgrade via allow_downgrades from frontend code6.8CNA v3.10.4%2026-09-22Fix
CVE-2026-95623Tauri framework v2 SSRF Protection Bypass via HTTP Redirects5.6CNA v3.10.2%2026-09-22Fix
CVE-2026-95619Red Hat Hardened Images gcc: Libstdc++ integer overflow in `new` operator7.7CNA v3.10.4%2026-09-22Fix
CVE-2026-95508Red Hat Enterprise Linux 10 heap-based buffer overflow7.4CNA v3.10.6%2026-09-22Fix
CVE-2026-95503Red Hat Keycloak Kerberos federation provider improper signature verification6.8CNA v3.10.2%2026-09-22
CVE-2026-95501mtrano APENCMS template weasel.php eval code injection4.8CNA v4.00.3%2026-09-22
CVE-2026-95500php-file-manager-with-code-editor save handler unrestricted file upload6.9CNA v4.00.5%2026-09-22
CVE-2026-95499JosephChuks php-file-manager-with-code-editor filemanager.php move_uploaded_file unrestricted upload6.9CNA v4.00.5%2026-09-22
CVE-2026-95396sfturing hosp_order Public Search Handlers HospitalController.java cross-site scripting5.3CNA v4.00.5%2026-09-22
CVE-2026-95273dgtlmoon changedetection.io visual_selector_data flask_app.py static_content path traversal5.3CNA v4.00.5%2026-09-22
CVE-2026-95272dgtlmoon changedetection.io Screenshot flask_app.py static_content path traversal6.3CNA v4.00.7%2026-09-22
CVE-2026-95271changedetection.io authentication hook improper authentication6.9CNA v4.00.7%2026-09-22
CVE-2026-95270dgtlmoon changedetection.io Hash Comparison flask_app.py check_password timing discrepancy6.3CNA v4.00.4%2026-09-22
CVE-2026-94640rpcbind statistics tracking resource exhaustion7.5CNA v3.10.4%2026-09-22Fix
CVE-2026-94574gnuwget wget code execution7.8CISA ADP v3.10.1%2026-09-22
CVE-2026-94570SGLang Decode worker control socket denial of service5.9CISA ADP v3.10.5%2026-09-22Fix
CVE-2026-94504Ninja Forms submission editor stored cross-site scripting7.2CNA v3.10.4%2026-09-22Reported exploitedFix
CVE-2026-94493Gigatech PDV5701 WebSocket service index.html missing authentication10.0CNA v4.00.7%2026-09-22
CVE-2026-94492Yonyou U8cloud OpenAPI so.saleorder.sendaudit SQL injection5.3CNA v4.00.3%2026-09-22
CVE-2026-94491Yonyou KSOA search_list.jsp SQL injection6.9CNA v4.00.4%2026-09-22
CVE-2026-94462Spree: Broken access control in `PATCH /API/v3/store/carts/:id/associate` (IDOR)7.1CNA v3.10.3%2026-09-22Fix
CVE-2026-94456Postiz insufficient randomness9.1CNA v3.10.5%2026-09-22Fix
CVE-2026-94455postiz-app enterprise user creation endpoint missing authentication7.1CNA v3.10.3%2026-09-22Fix
CVE-2026-94450Potential denial of service when configured to send Retry packets in s2n-quic8.7CNA v4.01.9%2026-09-22Fix
CVE-2026-94384Missing authorization in sfExecuteAWSService Lambda Dispatcher in Amazon Connect Salesforce Lambda6.4CNA v4.00.3%2026-09-22Fix
CVE-2026-94367OpenEye Apex Network Video Recorder (NVR) OS command injection7.2CNA v3.11.0%2026-09-22
CVE-2026-94127F5 BIG-IP APM heap-based buffer overflow9.3CNA v4.02.2%2026-09-22KEVEmerging ThreatsExploit codeFix
CVE-2026-94117HashBar WordPress Notification Bar plugin SQL injection7.6CNA v3.10.4%2026-09-22Fix
CVE-2026-93952Arista VeloCloud Orchestrator improper input validation9.5CNA v4.01.1%2026-09-22KEVFix
CVE-2026-93928Taxi Booking Manager for WooCommerce WordPress plugin broken authentication7.3CNA v3.10.4%2026-09-22Fix
CVE-2026-93836WPC Product Bundles for WooCommerce WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-09-22Reported exploitedFix
CVE-2026-93778WP Yelp Review Slider WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.4%2026-09-22Fix
CVE-2026-93712Dancer2 File route handler path traversal7.5CISA ADP v3.10.5%2026-09-22Fix
CVE-2026-93711Dancer2 versions for Perl do not strip CR and LF from response header names in headers_to_array6.5CISA ADP v3.10.4%2026-09-22Fix
CVE-2026-93710Dancer2 hook exception handling vulnerability7.5CISA ADP v3.10.6%2026-09-22Fix
CVE-2026-93709Dancer2 AutoPage handler vulnerability5.3CISA ADP v3.10.3%2026-09-22Fix
CVE-2026-93655Booking Calendar WordPress plugin reflected cross-site scripting via wpbc_auto_fill parameter6.1CNA v3.10.4%2026-09-22Fix
CVE-2026-93616Check Point Multiple Products path traversal9.8CNA v3.175.9%2026-09-22KEVNucleiEmerging ThreatsFix
CVE-2026-93556Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini9.3CNA v4.00.3%2026-09-22Fix
CVE-2026-93345MikroTik RouterOS improper input validation DoS via BGP Labelled-VPN NLRI8.7CNA v4.00.5%2026-09-22Fix
CVE-2026-93344MarketKing missing authorization via marketking_get_page_content AJAX7.1CNA v4.00.4%2026-09-22Fix
CVE-2026-93343MarketKing missing authorization via marketking_admin_vendors_ajax7.1CNA v4.00.4%2026-09-22Fix
CVE-2026-93342MarketKing missing authorization via marketking_duplicate_product AJAX5.3CNA v4.00.3%2026-09-22Fix
CVE-2026-93341MarketKing missing authorization via marketking_send_refund AJAX5.3CNA v4.00.3%2026-09-22Fix
CVE-2026-93088SGLang DiffusionServer ZeroMQ socket deserialization of untrusted data9.8CISA ADP v3.10.7%2026-09-22Fix
CVE-2026-92969HUSKY WordPress plugin unauthenticated local file inclusion8.1CNA v3.10.7%2026-09-22Fix
CVE-2026-92930OpenEye Apex Network Video Recorder (NVR) insufficient randomness6.2CNA v3.10.2%2026-09-22
CVE-2026-92929OpenEye Apex Network Video Recorder (NVR) authentication bypass by spoofing5.3CNA v3.10.4%2026-09-22
CVE-2026-92928OpenEye Apex Network Video Recorder (NVR) hard-coded credentials6.5CNA v3.10.2%2026-09-22
CVE-2026-92882Checkmk insufficiently protected credentials2.3CNA v4.00.4%2026-09-22Fix
CVE-2026-92706darkreader dark Reader: Ability to request icon-like bitmap data from certain local web servers3.4CNA v3.10.2%2026-09-22Fix
CVE-2026-92438Ninja Forms unauthenticated stored XSS via Paragraph Text field in Submissions Admin8.8CNA v3.10.3%2026-09-22Reported exploitedFix
CVE-2026-92235roxnor WP Ultimate Review review summary field code injection8.1CNA v3.10.4%2026-09-22Fix
CVE-2026-91827Ninja Forms unauthenticated PHP object injection via CSV Export7.5CNA v3.10.3%2026-09-22Fix
CVE-2026-91130home-assistant core Home Assistant: XSS in Statistics Graph Card9.3CNA v4.00.4%2026-09-22Fix
CVE-2026-91129home-assistant core home Assistant: MDNS server-side request forgery5.4CNA v3.10.2%2026-09-22Fix
CVE-2026-91092wpForo Forum WordPress plugin missing authorization authenticated Guest post takeover4.3CNA v3.10.4%2026-09-22Fix
CVE-2026-91018Double free in lwIP (lightweight IP)8.7CNA v4.00.2%2026-09-22Fix
CVE-2026-90990Checkmk livestatus injection via monitoring filter values5.3CNA v4.00.4%2026-09-22Fix
CVE-2026-90882Eclipse Foundation open-vsx.org user API vulnerability8.7CNA v4.00.4%2026-09-22
CVE-2026-90462Sssd: Sssd: Fail-open in LDAP ppolicy access check allows continued authorization5.4CNA v3.10.2%2026-09-22
CVE-2026-89422Erlang OTP key exchange without authentication9.3CNA v4.00.5%2026-09-22Fix
CVE-2026-89420ZenHive mpp Input improper input validation7.1CNA v4.00.4%2026-09-22Fix
CVE-2026-89412TranslatePress WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.5%2026-09-22Fix
CVE-2026-89407FasterXML jackson-core NumberInput denial of service7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-89282Apache Lounge Apache HTTP Server installation directory incorrect permission assignment9.1CISA ADP v3.10.3%2026-09-22Fix
CVE-2026-89281Apache Lounge Apache HTTP Server openssl.cnf path incorrect permission assignment8.4CISA ADP v3.10.1%2026-09-22Fix
CVE-2026-89277Adobe CAI Content Credentials integer overflow or wraparound5.5CNA v3.10.3%2026-09-22Fix
CVE-2026-89276Adobe Campaign Classic (ACC) improper control of generation of code (code injection)9.9CNA v3.10.5%2026-09-22Fix
CVE-2026-89275Adobe Campaign Classic (ACC) improper control of generation of code (code injection)10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-88788Text Styler WordPress plugin Contributor+ stored XSS6.8CISA ADP v3.10.4%2026-09-22
CVE-2026-88624openCode Worktree.remove path traversal9.1CISA ADP v3.10.3%2026-09-22
CVE-2026-88419WuzhiCMS thumbnail upload endpoint unrestricted file upload8.8CISA ADP v3.10.5%2026-09-22
CVE-2026-88418CMSimple CSRF protection cross-site request forgery8.8CISA ADP v3.10.3%2026-09-22
CVE-2026-88416MCMS custom model and form import feature SQL injection9.8CISA ADP v3.10.3%2026-09-22
CVE-2026-88415MCMS article content field stored cross-site scripting8.7CISA ADP v3.10.3%2026-09-22
CVE-2026-88414MCMS PageAction.verify endpoint SQL injection9.8CISA ADP v3.10.4%2026-09-22
CVE-2026-88350MPack An integer overflow6.2CISA ADP v3.10.1%2026-09-22
CVE-2026-88345schema lexer of flatcc An out-of-bounds read7.5CISA ADP v3.10.4%2026-09-22
CVE-2026-88344schema lexer of flatcc An out-of-bounds read7.5CISA ADP v3.10.4%2026-09-22
CVE-2026-88341YARA reachable assertion5.5CISA ADP v3.10.2%2026-09-22
CVE-2026-88340YARA .yrc rule file deserialization vulnerability7.6CISA ADP v3.10.3%2026-09-22
CVE-2026-88339gf_sg_vrml_field_clone function of GPAC null pointer dereference5.5CISA ADP v3.10.2%2026-09-22
CVE-2026-88020Improper neutralization of input during web page generation in OpenPLC Runtime v35.3CNA v4.00.3%2026-09-22Fix
CVE-2026-88010Traefik BasicAuth middleware timing side channel6.3CNA v4.00.7%2026-09-22Fix
CVE-2026-87902WordPress Core remote file inclusion8.1CISA ADP v3.140.0%2026-09-22KEVNucleiEmerging ThreatsExploit codeFix
CVE-2026-87121Out-of-bounds write in lwIP TCP/IP Stack MQTT client application9.3CNA v4.00.5%2026-09-22Fix
CVE-2026-87119ZenHive mpp authentication bypass by replay8.2CNA v4.00.6%2026-09-22Fix
CVE-2026-87082Net::IDN::Punycode versions for Perl hang, crash or return a wrong label7.5CISA ADP v3.10.7%2026-09-22Fix
CVE-2026-87081Net::IDN::UTS46 versions for Perl allow CPU exhaustion7.5CISA ADP v3.10.6%2026-09-22Fix
CVE-2026-87080Net::IDN::Punycode::PP decode_punycode improper input validation9.1CISA ADP v3.10.6%2026-09-22Fix
CVE-2026-87079Net::IDN::Punycode versions for Perl allow CPU exhaustion7.5CISA ADP v3.10.6%2026-09-22Fix
CVE-2026-87078Net::IDN::Punycode decode_punycode memory leak9.1CISA ADP v3.10.7%2026-09-22Fix
CVE-2026-86805The GNU C Library glibc AT_SECURE programs may load attacker-controlled code via $ORIGIN6.3CNA v3.10.1%2026-09-22Fix
CVE-2026-86698hexpm refresh tokens accepted as private repository credentials at the CDN2.3CNA v4.00.4%2026-09-22Fix
CVE-2026-86062LightRAG: Stored cross-site scripting in the LightRAG WebUI chat/answer renderer6.1CNA v3.10.2%2026-09-22Fix
CVE-2026-86059Dokploy: Git Provider credential exposure via Unprotected .one endpoints and application.one9.6CNA v3.10.5%2026-09-22Fix
CVE-2026-86056Notepad++ NPPM_SAVESESSION message handler null pointer dereference5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-86054notepad-plus-plus notepad++: Stack buffer overflow in `NppParameters::writeSession`7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-85995notepad-plus-plus notepad++: Authenticode verification bypass allows modified updater execution7.3CNA v3.10.1%2026-09-22Fix
CVE-2026-85740HKUDS LightRAG lightrag-hku: SSRF7.1CNA v3.10.2%2026-09-22Fix
CVE-2026-85734LightRAG: No Rate Limiting on /login endpoint allows brute-force Attacks9.1CNA v3.10.4%2026-09-22Fix
CVE-2026-85725LightRAG: Plaintext Passwords Compared without Constant-Time function5.9CNA v3.10.4%2026-09-22Fix
CVE-2026-85709LightRAG: Sensitive information exposure through Raw Exception messages in API Error Responses5.3CNA v3.10.4%2026-09-22Fix
CVE-2026-85653Contextual Related Posts WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-22Fix
CVE-2026-85288Notepad++ macro shortcut validation vulnerability6.7CNA v3.10.1%2026-09-22Fix
CVE-2026-85279notepad-plus-plus Notepad++: Stack buffer overflow in Plugin Lexer Loading8.6CNA v3.10.2%2026-09-22Fix
CVE-2026-85055Twenty: Field-level read bypass7.1CNA v4.00.4%2026-09-22Fix
CVE-2026-84412Adobe Campaign Classic (ACC) improper control of generation of code (code injection)10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-84396Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.1%2026-09-22Fix
CVE-2026-84395Adobe Premiere Pro server-side request forgery (SSRF)7.1CNA v3.10.2%2026-09-22Fix
CVE-2026-84388Fortinet FortiPAM Chrome Extension clickjacking9.1CNA v3.10.4%2026-09-22Exploit codeFix
CVE-2026-84301FastGPT safe axios SSRF guard still allows DNS rebinding TOCTOU on protected outbound requests6.3CNA v3.10.3%2026-09-22Fix
CVE-2026-83964Adobe Connect improper certificate validation6.2CNA v3.10.2%2026-09-22Fix
CVE-2026-83963Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.1%2026-09-22Fix
CVE-2026-83962Adobe Substance3D Modeler stack-based buffer overflow7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-83805Nautobot approval workflow REST API improper authorization6.4CNA v3.10.2%2026-09-22Fix
CVE-2026-83803Sentry: Unsafe pickle deserialization in Relocation feature7.7CNA v4.00.6%2026-09-22Fix
CVE-2026-83801Nautobot: Stored cross-site scripting (XSS) in object create/edit form help text5.4CNA v3.10.2%2026-09-22Fix
CVE-2026-83660Adobe Campaign Classic (ACC) server-side request forgery (SSRF)9.9CNA v3.10.3%2026-09-22Fix
CVE-2026-83603Netdata: Local Root via ndsudo arbitrary socket_path → fail2ban-client Pickle RCE8.4CNA v3.10.3%2026-09-22Exploit codeFix
CVE-2026-83602Netdata settings API improper access control6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-83601Netdata streaming protocol dimension slot handling out-of-bounds write6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-83600Netdata streaming protocol chart slot handling off-by-one error6.5CNA v3.10.5%2026-09-22Fix
CVE-2026-83599Netdata: WebSocket decompression bomb7.5CNA v3.10.7%2026-09-22Fix
CVE-2026-83598Netdata: Local privilege escalation in Netdata Agent Windows installer7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-83597Netdata: Local privilege escalation in Netdata Windows agent installer via MSI Repair Execution7.0CNA v3.10.1%2026-09-22Fix
CVE-2026-82443Adobe Campaign Classic (ACC) server-side request forgery (SSRF)9.6CNA v3.10.4%2026-09-22Fix
CVE-2026-82013Adobe Campaign Classic (ACC) server-side request forgery (SSRF)9.9CNA v3.10.8%2026-09-22Fix
CVE-2026-82011Adobe Campaign Classic improper neutralization of special elements used in an SQL command9.1CNA v3.10.6%2026-09-22Fix
CVE-2026-82010Adobe Campaign Classic improper neutralization of special elements used in an SQL command9.9CNA v3.10.4%2026-09-22Fix
CVE-2026-82009Adobe Campaign Classic improper neutralization of special elements used in an SQL command9.1CNA v3.11.0%2026-09-22Fix
CVE-2026-82008Adobe Campaign Classic (ACC) improper input validation9.9CNA v3.10.5%2026-09-22Fix
CVE-2026-82003Adobe Campaign Classic (ACC) improper input validation8.5CNA v3.10.5%2026-09-22Fix
CVE-2026-82000Adobe Experience Manager Forms JEE server-side request forgery (SSRF)9.6CNA v3.10.7%2026-09-22Fix
CVE-2026-81999Adobe Experience Manager Forms JEE server-side request forgery (SSRF)8.7CNA v3.10.8%2026-09-22Fix
CVE-2026-81998Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.1%2026-09-22Fix
CVE-2026-81995Adobe Experience Manager Forms JEE improper input validation9.1CNA v3.11.2%2026-09-22Fix
CVE-2026-81886radare2 dmp64 crash-dump parser denial of service5.5CNA v3.10.1%2026-09-22Fix
CVE-2026-81885radare2 NE relocation parser denial of service5.5CNA v3.10.1%2026-09-22Fix
CVE-2026-81884radare2 Mach-O LC_DATA_IN_CODE parser out-of-bounds read2.5CNA v3.10.2%2026-09-22Fix
CVE-2026-81883radareorg radare2 out-of-bounds read3.3CNA v3.10.2%2026-09-22Fix
CVE-2026-81882radare2 bplist parser out-of-bounds read3.3CNA v3.10.1%2026-09-22Fix
CVE-2026-81881radare2 Mach-O Swift metadata parser out-of-bounds read3.3CNA v3.10.1%2026-09-22Fix
CVE-2026-81880radare2 PEF loader denial of service5.5CNA v3.10.1%2026-09-22Fix
CVE-2026-81879radare2 ELF parser out-of-bounds read5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-81878radare2 PYC bytecode parser out-of-bounds write5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-80156Lantronix Autonomous Out-of-Band Devices arbitrary file write via Upload Filename Validation Bypass9.4CNA v4.00.7%2026-09-22Fix
CVE-2026-80155Lantronix Autonomous Out-of-Band Devices Unauthenticated authentication bypass10.0CNA v4.01.0%2026-09-22Fix
CVE-2026-80154Lantronix Autonomous Out-of-Band Devices predictable session Token with Validation Bypass8.9CNA v4.00.6%2026-09-22
CVE-2026-80152Lantronix Autonomous Out-of-Band Devices OS command injection via set script schedule9.4CNA v4.01.7%2026-09-22Fix
CVE-2026-80151Lantronix Autonomous Out-of-Band Devices OS command injection via set nfs download9.4CNA v4.01.7%2026-09-22Fix
CVE-2026-80150Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl parameter7.7CNA v4.00.6%2026-09-22Fix
CVE-2026-80149Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl parameter7.7CNA v4.00.6%2026-09-22Fix
CVE-2026-80148Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation7.7CNA v4.00.6%2026-09-22Fix
CVE-2026-80147Lantronix Autonomous Out-of-Band Devices stack-based buffer overflow via mfc eeprom write9.4CNA v4.00.5%2026-09-22Fix
CVE-2026-80146Lantronix Autonomous Out-of-Band Devices stack-based buffer overflow via mfc eeprom read9.4CNA v4.00.8%2026-09-22Fix
CVE-2026-80145Lantronix Autonomous Out-of-Band Devices CLI command injection via set cifs password9.4CNA v4.01.7%2026-09-22Fix
CVE-2026-80144Lantronix Autonomous Out-of-Band Devices CLI command injection via mfc eeprom write9.4CNA v4.01.5%2026-09-22Fix
CVE-2026-80143Lantronix Autonomous Out-of-Band Devices CLI command injection via mfc eeprom read9.4CNA v4.01.5%2026-09-22Fix
CVE-2026-79913Cloudreve SSRF guard server-side request forgery6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-79906Adobe Substance3D Modeler out-of-bounds write7.8CNA v3.10.1%2026-09-22Fix
CVE-2026-79767Gardener: Authorization bypass via Group Subject injection5.5CNA v3.10.4%2026-09-22Fix
CVE-2026-79315x-ui A reflected cross-site scripting4.7CISA ADP v3.10.3%2026-09-22
CVE-2026-79314x-ui horizontal privilege escalation8.8CISA ADP v3.10.3%2026-09-22
CVE-2026-79313web.py session management insufficient session expiration9.8CISA ADP v3.10.4%2026-09-22
CVE-2026-79312web.py session handling session fixation6.8CISA ADP v3.10.3%2026-09-22
CVE-2026-79311web.py render_jinja template renderer cross-site scripting6.1CISA ADP v3.10.2%2026-09-22
CVE-2026-77987GitHub Enterprise Server notebook viewer vulnerable to server-side request forgery9.3CNA v4.00.7%2026-09-22Fix
CVE-2026-77912GitHub Enterprise Server Markdown rendering pipeline stored cross-site scripting7.4CNA v4.00.2%2026-09-22Fix
CVE-2026-77637Cloudreve admin tool route scope check missing authorization3.8CNA v3.10.3%2026-09-22Fix
CVE-2026-77633Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service7.1CNA v3.10.4%2026-09-22Fix
CVE-2026-77621Vector: Arbitrary file write in the file sink via templated path (path traversal)9.3CNA v4.01.1%2026-09-22Fix
CVE-2026-77620Vector: Unauthenticated denial of service in the `logstash` source8.7CNA v4.00.5%2026-09-22Fix
CVE-2026-77619Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation8.7CNA v4.00.5%2026-09-22Fix
CVE-2026-77605Notepad++ Run by system command execution7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-77558Ubiquiti Dream Machines out-of-bounds read7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-77556Ubiquiti Dream Machines out-of-bounds read7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-77555Ubiquiti Dream Machines out-of-bounds write7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-77544Ubiquiti Dream Machines out-of-bounds write7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-77426Unleash: Missing await on permission check + cross-project IDOR in admin API7.1CNA v4.00.5%2026-09-22Fix
CVE-2026-77425Unleash strategy sort order API insecure direct object reference4.3CNA v3.10.2%2026-09-22Fix
CVE-2026-77399icalendar VALARM REPEAT expansion resource exhaustion6.5CNA v3.10.3%2026-09-22Fix
CVE-2026-77322SIPGO: DoS via unvalidated WebSocket frame length7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-77274sooperset mcp-atlassian MCP Atlassian: SSRF Protection Bypass8.8CNA v4.00.3%2026-09-22Fix
CVE-2026-77272sooperset mcp-atlassian MCP Atlassian: Reflected XSS in OAuth Setup Callback handler5.4CNA v3.10.2%2026-09-22Fix
CVE-2026-77271sooperset MCP Atlassian attachment path validation vulnerability8.3CNA v4.00.5%2026-09-22Fix
CVE-2026-77270sooperset mcp-atlassian MCP Atlassian: Arbitrary file read via Upload Attachment tools6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-77269sooperset MCP Atlassian attachment upload tool path traversal6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-77268sooperset mcp-atlassian MCP Atlassian: Insecure file permissions on OAuth Token Storage5.5CNA v3.10.1%2026-09-22Fix
CVE-2026-77267Mcp-atlassian has an incomplete SSRF remediation8.3CNA v4.00.3%2026-09-22Fix
CVE-2026-77266sooperset MCP Atlassian attachment upload tool path traversal6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-77265sooperset mcp-atlassian MCP Atlassian: SSRF via DNS Rebinding in Header-Based Authentication Flow5.9CNA v3.10.3%2026-09-22Fix
CVE-2026-77262sooperset MCP Atlassian Confluence attachment upload tool path traversal8.6CNA v3.10.5%2026-09-22Exploit codeFix
CVE-2026-77261sooperset MCP Atlassian basic auth and OAuth request sessions server-side request forgery7.1CNA v3.10.3%2026-09-22Fix
CVE-2026-77260sooperset MCP Atlassian attachment upload tool path traversal8.3CNA v4.00.3%2026-09-22Fix
CVE-2026-77259sooperset mcp-atlassian MCP Atlassian: Arbitrary file read7.7CNA v3.10.4%2026-09-22Fix
CVE-2026-77258sooperset mcp-atlassian MCP Atlassian: Arbitrary file read/exfiltration7.7CNA v3.10.3%2026-09-22Fix
CVE-2026-77257sooperset mcp-atlassian MCP Atlassian: HTTP upload tools accept arbitrary server-local file paths8.3CNA v4.00.4%2026-09-22Fix
CVE-2026-77256sooperset MCP Atlassian OAuth token backup file incorrect permission assignment8.3CNA v4.00.3%2026-09-22Fix
CVE-2026-77255sooperset mcp-atlassian MCP Atlassian: Arbitrary file read and Exfiltration in JIRA update_issue8.6CNA v3.10.4%2026-09-22Fix
CVE-2026-77254sooperset MCP Atlassian HTTP MCP endpoint missing authentication9.1CNA v3.10.6%2026-09-22Fix
CVE-2026-77253sooperset MCP Atlassian attachment upload tools path traversal7.1CNA v3.10.4%2026-09-22Fix
CVE-2026-77252sooperset MCP Atlassian project and space search filters improper access control6.5CNA v3.10.3%2026-09-22Fix
CVE-2026-77251sooperset MCP Atlassian Jira and Confluence search filters vulnerability8.3CNA v4.00.2%2026-09-22Fix
CVE-2026-77250sooperset mcp-atlassian OAuth token storage cleartext storage of sensitive information6.1CNA v3.10.1%2026-09-22Fix
CVE-2026-77249sooperset mcp-atlassian MCP Atlassian: Incomplete fix for redirect-based SSRF5.3CNA v3.10.3%2026-09-22Fix
CVE-2026-77248sooperset mcp-atlassian attachment upload handler missing authentication8.6CNA v3.10.4%2026-09-22Fix
CVE-2026-77247sooperset mcp-atlassian attachment upload file path parameter vulnerability8.3CNA v4.00.4%2026-09-22Fix
CVE-2026-77246sooperset mcp-atlassian attachment upload handler path traversal7.4CNA v3.10.4%2026-09-22Fix
CVE-2026-77244sooperset mcp-atlassian HTTP transport token verifier improper authentication10.0CNA v3.10.3%2026-09-22Fix
CVE-2026-77243sooperset mcp-atlassian MCP Atlassian: ENABLED_TOOLS / Toolset authorization bypass8.8CNA v3.10.3%2026-09-22Fix
CVE-2026-77242sooperset mcp-atlassian MCP Atlassian: Incomplete fix for DNS rebinding bypasses SSRF validation7.5CNA v3.10.3%2026-09-22Fix
CVE-2026-76974Information disclosure vulnerability in SAP Fiori Launchpad5.3CNA v3.10.3%2026-09-22Fix
CVE-2026-76910Unleash: Clone-feature lets a user copy a feature from a project they cannot read5.3CNA v4.00.3%2026-09-22Fix
CVE-2026-76909Unleash: CR-approval email renders user-controlled raw HTML2.1CNA v4.00.3%2026-09-22Fix
CVE-2026-76805Nuclei: Environment Variable Disclosure via Response-Derived Data in DAST/Fuzz Mode5.3CNA v3.10.4%2026-09-22Fix
CVE-2026-76804Nuclei: Local File Read via Workflow File-Protocol Gate Bypass5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-76803Nuclei: Local File Read via MySQL client sandbox bypass5.3CNA v3.10.4%2026-09-22Fix
CVE-2026-76802Nuclei: Arbitrary command execution via DAST Code Signature Bypass4.7CNA v3.10.2%2026-09-22Fix
CVE-2026-76717HPE ALE information disclosure5.3CNA v3.10.4%2026-09-22Fix
CVE-2026-76716HPE ALE resource exhaustion5.3CNA v3.10.5%2026-09-22Fix
CVE-2026-76715HPE ALE man-in-the-middle7.1CNA v3.10.3%2026-09-22Fix
CVE-2026-76714HPE ALE OS command injection7.2CNA v3.10.8%2026-09-22Fix
CVE-2026-76713HPE ALE improper privilege management7.2CNA v3.10.6%2026-09-22Fix
CVE-2026-76712HPE ALE unauthorized access7.3CNA v3.10.4%2026-09-22Fix
CVE-2026-76711Unauthenticated remote data injection vulnerability in HPE Networking Analytics And Location Engine7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-76710HPE ALE information disclosure7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-76709HPE ALE privilege escalation9.8CNA v3.10.6%2026-09-22Fix
CVE-2026-76708Analytics and Location Engine administrative accounts hard-coded credentials9.8CNA v3.10.6%2026-09-22Fix
CVE-2026-76194Adobe CAI Content Credentials improper input validation4.3CNA v3.10.6%2026-09-22Fix
CVE-2026-76192Adobe InDesign Desktop null pointer dereference5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-75791Zoho ManageEngine ADSelfService Plus authentication bypass8.6CNA v3.11.7%2026-09-22Fix
CVE-2026-75745Adobe Experience Manager Forms JEE incorrect authorization10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-75744Adobe Experience Manager Forms JEE cross-site scripting (stored XSS)8.1CNA v3.11.2%2026-09-22Fix
CVE-2026-75743Adobe Experience Manager Forms JEE cross-site request forgery (CSRF)7.1CNA v3.11.5%2026-09-22Fix
CVE-2026-75728Adobe Campaign Classic (ACC) incorrect authorization9.1CNA v3.11.0%2026-09-22Fix
CVE-2026-75723Adobe Campaign Classic (ACC) incorrect authorization10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-75721Adobe Campaign Classic (ACC) improper control of generation of code (code injection)10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-75703Adobe Campaign Classic (ACC) improper control of generation of code (code injection)10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-75699Adobe Campaign Classic (ACC) improper control of generation of code (code injection)10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-75698Adobe Connect cross-site scripting (reflected XSS)9.3CNA v3.10.3%2026-09-22Fix
CVE-2026-75697Adobe Connect cross-site scripting (stored XSS)9.3CNA v3.10.3%2026-09-22Fix
CVE-2026-75689Adobe Connect cross-site scripting (stored XSS)9.3CNA v3.10.3%2026-09-22Fix
CVE-2026-75686Adobe Connect improper input validation9.3CNA v3.10.6%2026-09-22Fix
CVE-2026-75684Adobe Connect cross-site scripting (stored XSS)9.3CNA v3.10.3%2026-09-22Fix
CVE-2026-75682Adobe Connect improper neutralization of special elements used in an SQL command (SQL injection)9.9CNA v3.10.5%2026-09-22Fix
CVE-2026-75676Bridge stack-based buffer overflow7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-75665Bridge heap-based buffer overflow7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-75663Bridge out-of-bounds write7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-75658Bridge out-of-bounds write7.8CNA v3.10.1%2026-09-22Fix
CVE-2026-75656Bridge out-of-bounds read5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-75655Bridge uncontrolled recursion7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-75649Bridge heap-based buffer overflow7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-75638Adobe CAI Content Credentials improper input validation6.5CNA v3.10.7%2026-09-22Fix
CVE-2026-75634Adobe CAI Content Credentials improper input validation4.3CNA v3.10.6%2026-09-22Fix
CVE-2026-75633Adobe CAI Content Credentials improper input validation5.5CNA v3.10.2%2026-09-22Fix
CVE-2026-75632Adobe CAI Content Credentials uncontrolled resource consumption7.5CNA v3.10.9%2026-09-22Fix
CVE-2026-75608Frigate: Viewer-Role User can Access go2rtc Internal API to obtain sensitive information7.7CNA v3.10.4%2026-09-22Fix
CVE-2026-75607Frigate: WebSocket missing authorization Viewer can Execute Admin-Only Operations8.1CNA v3.10.6%2026-09-22Fix
CVE-2026-75517Novu: Cross-Environment Integration Manipulation (IDOR)6.5CNA v3.10.7%2026-09-22Fix
CVE-2026-75511Novu: Server-side request forgery (SSRF) via Chat Provider Webhook URLs5.3CNA v4.00.5%2026-09-22Fix
CVE-2026-75510Novu: Stored XSS in In-App Inbox via notification redirect.url javascript: Scheme5.1CNA v4.00.4%2026-09-22Fix
CVE-2026-75432yaml-cpp YAML scanner information disclosure5.1CISA ADP v3.10.2%2026-09-22
CVE-2026-75101GitHub Enterprise Server pull request diff and patch access authorization bypass6.0CNA v4.00.3%2026-09-22Fix
CVE-2026-74849Zoho ManageEngine ADSelfService Plus remote code execution9.8CNA v3.14.6%2026-09-22Fix
CVE-2026-74766Net::IDN::Punycode versions from for Perl allow a heap use-after-free8.4CISA ADP v3.10.2%2026-09-22Fix
CVE-2026-74765Net::IDN::Punycode versions for Perl allow an out-of-bounds read6.5CISA ADP v3.10.5%2026-09-22Fix
CVE-2026-73369Adobe Campaign Classic (ACC) improper control of generation of code (code injection)10.0CNA v3.11.2%2026-09-22Fix
CVE-2026-70410Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins8.8CISA ADP v3.10.6%2026-09-22Fix
CVE-2026-68956Erlang OTP SSH daemon allocates unbounded idle session channels, bypassing max_channels7.1CNA v4.00.4%2026-09-22Fix
CVE-2026-67615openEQUELLA authenticated RCE via Java deserialization in HTTP Invoker8.7CNA v4.00.5%2026-09-22Fix
CVE-2026-65829MPXJ: Potential path traversal vulnerability in Primavera P3 PRX and SureTrak STX readers5.3CNA v3.10.3%2026-09-22Fix
CVE-2026-65634Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder8.2CNA v4.00.3%2026-09-22Fix
CVE-2026-65179NVIDIA NeMo Speech deserialization of untrusted data8.8CNA v3.10.8%2026-09-22Fix
CVE-2026-65178NVIDIA NeMo Speech deserialization of untrusted data7.8CNA v3.10.4%2026-09-22Fix
CVE-2026-65130NVIDIA Infrastructure Controller OS command injection8.0CNA v3.11.6%2026-09-22Fix
CVE-2026-65129NVIDIA Infrastructure Controller improper certificate validation6.7CNA v3.10.2%2026-09-22Fix
CVE-2026-65128NVIDIA Infrastructure Controller SQL injection8.8CNA v3.10.7%2026-09-22Fix
CVE-2026-65127NVIDIA Infrastructure Controller information disclosure4.1CNA v3.10.3%2026-09-22Fix
CVE-2026-65126NVIDIA Infrastructure Controller improper workflow enforcement5.0CNA v3.10.3%2026-09-22Fix
CVE-2026-65125NVIDIA Infrastructure Controller external control of a file path6.6CNA v3.10.6%2026-09-22Fix
CVE-2026-65124NVIDIA Infrastructure Controller XML injection5.9CNA v3.10.4%2026-09-22Fix
CVE-2026-65121NVIDIA Infrastructure Controller improper authentication8.2CNA v3.10.4%2026-09-22Fix
CVE-2026-65118NVIDIA Infrastructure Controller improper certificate validation7.5CNA v3.10.2%2026-09-22Fix
CVE-2026-65117NVIDIA Infrastructure Controller hard-coded password5.0CNA v3.10.2%2026-09-22Fix
CVE-2026-65115NVIDIA Infrastructure Controller resource exhaustion6.5CNA v3.10.6%2026-09-22Fix
CVE-2026-65114NVIDIA Infrastructure Controller missing authentication8.3CNA v3.10.5%2026-09-22Fix
CVE-2026-65113NVIDIA Infrastructure Controller hard-coded credentials9.8CNA v3.10.7%2026-09-22Fix
CVE-2026-65112NVIDIA Infrastructure Controller resource exhaustion6.5CNA v3.10.6%2026-09-22Fix
CVE-2026-65111NVIDIA NeMo Speech command injection7.8CNA v3.10.2%2026-09-22Fix
CVE-2026-63628wevm mppx fee payer access list improper input validation6.9CNA v4.00.4%2026-09-22Fix
CVE-2026-63627wevm mppx fee payer policy improper input validation6.9CNA v4.00.4%2026-09-22Fix
CVE-2026-63386sunnyadn js-toml load function uncontrolled recursion5.3CNA v3.10.4%2026-09-22Fix
CVE-2026-63374AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing9.3CNA v4.00.3%2026-09-22Fix
CVE-2026-63279The Document Foundation LibreOffice out-of-bounds read in PICT image import5.4CNA v4.00.2%2026-09-22Fix
CVE-2026-63278The Document Foundation LibreOffice package URL handling information disclosure6.7CNA v4.00.2%2026-09-22Fix
CVE-2026-63276The Document Foundation LibreOffice stack buffer overflow in CFF to Type 1 font conversion5.4CNA v4.00.2%2026-09-22Fix
CVE-2026-63275The Document Foundation LibreOffice stack buffer overflow in CFF font hint handling5.4CNA v4.00.2%2026-09-22Fix
CVE-2026-63274The Document Foundation LibreOffice heap buffer overflow in PDF import stream handling5.4CNA v4.00.2%2026-09-22Fix
CVE-2026-63273The Document Foundation LibreOffice heap buffer overflow in PDF import encryption handling5.4CNA v4.00.1%2026-09-22Fix
CVE-2026-63272The Document Foundation LibreOffice heap buffer overflow in WMF text record import5.4CNA v4.00.2%2026-09-22Fix
CVE-2026-63104Kaneo missing authorization via Bulk Task endpoint7.2CNA v4.00.5%2026-09-22Fix
CVE-2026-62985request-filtering-agent HTTP connection filtering denial of service7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-62364wlc may disclose API tokens to project-configured URLs2.3CNA v3.10.1%2026-09-22Fix
CVE-2026-61685ReactPress has SQL injection via dynamic column names in TypeORM query builders7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-61570MPXJ: XXE vulnerability in MerlinReader7.5CNA v3.10.3%2026-09-22Fix
CVE-2026-59991psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry7.5CNA v3.10.5%2026-09-22Fix
CVE-2026-58268SIPGO: DoS via unvalidated Content-Length in the stream parser7.5CNA v3.10.6%2026-09-22Fix
CVE-2026-57576plone.app.dexterity has a denial of service due to excessive title or description length6.5CNA v3.10.8%2026-09-22Fix
CVE-2026-57149plone.app.portlets vulnerable to remote code execution via TALES injection9.9CNA v3.10.6%2026-09-22Fix
CVE-2026-566829Router: Login brute-force Lockout Bypass via Spoofable X-9r-Real-Ip header5.3CNA v3.10.5%2026-09-22Fix
CVE-2026-566819Router: Authentication bypass in Public LLM API via Spoofable X-9r-Real-Ip header7.3CNA v3.11.0%2026-09-22NucleiFix
CVE-2026-48361Adobe Connect cross-site scripting (stored XSS)6.1CNA v3.10.2%2026-09-22Fix
CVE-2026-47116LTSecurity LTK3500SF hard-coded credentials via Telnet/SSH9.2CNA v4.00.5%2026-09-22
CVE-2026-43643Softaculous Virtualizor authorization bypass via Billing module handler8.7CNA v4.00.6%2026-09-22Fix
CVE-2026-43642Softaculous Virtualizor PHP object injection via Billing module handler9.2CNA v4.01.0%2026-09-22Fix
CVE-2026-43641Softaculous Virtualizor OS command injection via Billing module handler9.3CNA v4.03.0%2026-09-22Fix
CVE-2026-37604pH7Software pH7Builder (pH7 Social Dating CMS) through 18.2.0 resolves the client IP address in _protected/framework/Ip/Ip.class.php from the HTTP_CLIENT_IP and HTTP_X_FORWARDED_FOR headers without verifying the request comes from a trusted proxy. Because the admin login attempt counter and lockout6.5CISA ADP v3.10.4%2026-09-22
CVE-2026-37603administration login of pH7Software pH7Builder missing brute-force protection6.5CISA ADP v3.10.5%2026-09-22
CVE-2026-34689Adobe Connect improper limitation of a pathname to a restricted directory (path traversal)8.6CNA v3.10.7%2026-09-22Fix