CVE-2026 list

CVE-2026 records published in September 2026

Page five of 15: records 4,001 to 5,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 4,001 to 5,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-28325SolarWinds Observability Self-Hosted unauthenticated remote code execution8.8CNA v3.11.5%2026-09-22Fix
CVE-2026-28324SolarWinds Observability Self-Hosted remote code execution9.8CNA v3.10.7%2026-09-22Fix
CVE-2026-25265Creation of temporary file with insecure permissions in Qualcomm Software Center8.8CNA v3.10.1%2026-09-22Fix
CVE-2026-25264Uncontrolled search path element in Qualcomm Software Center8.8CNA v3.10.1%2026-09-22Fix
CVE-2026-25262Qualcomm Snapdragon write-what-where condition in Primary Bootloader6.9CNA v3.10.1%2026-09-22Fix
CVE-2026-25255Exposed function in Qualcomm Package Manager and Qualcomm Software Center8.8CNA v3.10.1%2026-09-22Fix
CVE-2026-25254Improper authorization in Qualcomm Software Center9.8CNA v3.10.3%2026-09-22Fix
CVE-2026-24267NVIDIA NeMo Speech deserialization of untrusted data7.8CNA v3.10.4%2026-09-22Fix
CVE-2026-24239NVIDIA NeMo Speech deserialization of untrusted data7.8CNA v3.10.4%2026-09-22Fix
CVE-2026-19915HP Support Assistant local escalation of privilege7.3CNA v4.00.1%2026-09-22Fix
CVE-2026-19658Give Tributes WordPress plugin unauthenticated PHP object injection9.8CNA v3.10.5%2026-09-22Exploit codeFix
CVE-2026-19480Adobe CAI Content Credentials improper input validation7.5CNA v3.10.6%2026-09-22Fix
CVE-2026-19202Google Token Cache Reuse in mcp-toolbox-sdk-python9.1CNA v4.00.3%2026-09-22
CVE-2026-18626Out-of-bounds read vulnerability in RTI Connext Professional allows Overread Buffers6.8CNA v4.00.1%2026-09-22Fix
CVE-2026-18462RTI Connext Professional core libraries integer overflow7.3CNA v4.00.1%2026-09-22Fix
CVE-2026-18461RTI Connext Professional format string9.2CNA v4.00.2%2026-09-22Fix
CVE-2026-18460RTI Connext Professional core libraries out-of-bounds write6.9CNA v4.00.3%2026-09-22Fix
CVE-2026-18459Incorrect calculation vulnerability in RTI Connext Professional allows Abuse Existing Functionality8.7CNA v4.00.3%2026-09-22Fix
CVE-2026-18458RTI Connext Professional core libraries out-of-bounds read6.8CNA v4.00.1%2026-09-22Fix
CVE-2026-18457Heap-based buffer overflow vulnerability in RTI Connext Professional allows Overflow Buffers8.3CNA v4.00.3%2026-09-22Fix
CVE-2026-18439Tutor LMS WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-09-22Fix
CVE-2026-18345WP User Manager WordPress plugin missing authorization authenticated Stripe account Hijack4.3CNA v3.10.2%2026-09-22Fix
CVE-2026-18176IBM Financial Transaction Manager cleartext transmission of sensitive information7.4CNA v3.10.1%2026-09-22Fix
CVE-2026-18173IBM Financial Transaction Manager for RedHat OpenShift improper certificate validation3.7CNA v3.10.2%2026-09-22Fix
CVE-2026-18172IBM Financial Transaction Manager for RedHat OpenShift XML external entity injection7.4CNA v3.10.2%2026-09-22Fix
CVE-2026-18170IBM Financial Transaction Manager for RedHat OpenShift resource exhaustion6.5CNA v3.10.2%2026-09-22Fix
CVE-2026-18169IBM Financial Transaction Manager for RedHat OpenShift symbolic link validation path traversal9.9CNA v3.10.5%2026-09-22Fix
CVE-2026-18163IBM Financial Transaction Manager for RedHat OpenShift deserialization of untrusted data9.8CNA v3.10.5%2026-09-22Fix
CVE-2026-18162IBM Financial Transaction Manager for RedHat OpenShift Function constructor code injection9.8CNA v3.10.5%2026-09-22Fix
CVE-2026-18161IBM Financial Transaction Manager for RedHat OpenShift improper input validation4.3CNA v3.10.2%2026-09-22Fix
CVE-2026-18156IBM Financial Transaction Manager (FTM) for RedHat OpenShift improper authorization6.5CNA v3.10.2%2026-09-22Fix
CVE-2026-18154IBM Financial Transaction Manager for RedHat OpenShift hard-coded cryptographic key8.0CNA v3.10.3%2026-09-22Fix
CVE-2026-18153IBM Financial Transaction Manager for RedHat OpenShift weak cryptographic algorithm5.4CNA v3.10.2%2026-09-22Fix
CVE-2026-18152IBM Financial Transaction Manager for RedHat OpenShift improper signature verification7.4CNA v3.10.2%2026-09-22Fix
CVE-2026-18137IBM Financial Transaction Manager for RedHat OpenShift ESQL command handling SQL injection8.1CNA v3.10.3%2026-09-22Fix
CVE-2026-18134IBM Financial Transaction Manager cleartext transmission of sensitive information7.5CNA v3.10.2%2026-09-22Fix
CVE-2026-18133IBM Financial Transaction Manager for RedHat OpenShift path traversal5.4CNA v3.10.3%2026-09-22Fix
CVE-2026-18132IBM Financial Transaction Manager for RedHat OpenShift missing authorization6.5CNA v3.10.2%2026-09-22Fix
CVE-2026-18131IBM Financial Transaction Manager for RedHat OpenShift cross-site scripting8.2CNA v3.10.2%2026-09-22Fix
CVE-2026-18124IBM Financial Transaction Manager (FTM) for RedHat OpenShift insufficiently protected credentials6.5CNA v3.10.1%2026-09-22Fix
CVE-2026-18123IBM Financial Transaction Manager unsafe reflection7.6CNA v3.10.3%2026-09-22Fix
CVE-2026-18114IBM Financial Transaction Manager path traversal6.5CNA v3.10.4%2026-09-22Fix
CVE-2026-18095IBM Financial Transaction Manager buffer overflow8.5CNA v3.10.4%2026-09-22Fix
CVE-2026-18074IBM Financial Transaction Manager improper authentication8.2CNA v3.10.4%2026-09-22Fix
CVE-2026-18066IBM Financial Transaction Manager server-side request forgery7.9CNA v3.10.1%2026-09-22Fix
CVE-2026-17647IBM Financial Transaction Manager for OpenShift inclusion of untrusted functionality8.8CNA v3.10.2%2026-09-22Fix
CVE-2026-17646IBM Financial Transaction Manager for OpenShift XML external entity injection8.5CNA v3.10.3%2026-09-22Fix
CVE-2026-17645IBM Financial Transaction Manager for OpenShift privilege escalation9.1CNA v3.10.3%2026-09-22Fix
CVE-2026-17644IBM Financial Transaction Manager for OpenShift hard-coded credentials8.8CNA v3.10.1%2026-09-22Fix
CVE-2026-17643IBM Financial Transaction Manager for OpenShift insufficiently protected credentials8.8CNA v3.10.1%2026-09-22Fix
CVE-2026-17637IBM Financial Transaction Manager for OpenShift deserialization of untrusted data8.8CNA v3.10.2%2026-09-22Fix
CVE-2026-17636IBM Financial Transaction Manager for OpenShift out-of-bounds write8.8CNA v3.10.5%2026-09-22Fix
CVE-2026-17635IBM Financial Transaction Manager for OpenShift missing authentication9.1CNA v3.10.3%2026-09-22Fix
CVE-2026-17620IBM Financial Transaction Manager unprotected transport of credentials5.3CNA v3.10.2%2026-09-22Fix
CVE-2026-17618IBM Financial Transaction Manager for OpenShift missing authorization7.3CNA v3.10.2%2026-09-22Fix
CVE-2026-17472IBM Concert RBAC permission definitions improper privilege management9.6CNA v3.10.3%2026-09-22Fix
CVE-2026-17465IBM Concert resource exhaustion6.5CNA v3.10.3%2026-09-22Fix
CVE-2026-17102IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.10.6%2026-09-22Fix
CVE-2026-16778Live Composer WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-22Fix
CVE-2026-16672IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.10.6%2026-09-22Fix
CVE-2026-16469IBM DataStage on Cloud Pak for Data px-runtime OS command injection8.8CNA v3.11.0%2026-09-22Fix
CVE-2026-16468IBM DataStage on Cloud Pak for Data OS command injection8.8CNA v3.11.7%2026-09-22Fix
CVE-2026-16426IBM Concert server-side request forgery6.5CNA v3.10.2%2026-09-22Fix
CVE-2026-16346IBM DataStage on Cloud Pak for Data OS command injection9.9CNA v3.10.5%2026-09-22Fix
CVE-2026-15915IBM Concert container image build process information disclosure6.2CNA v3.10.1%2026-09-22Fix
CVE-2026-15095Product Feed Manager for WooCommerce WordPress plugin path traversal to file deletion4.9CNA v3.11.1%2026-09-22Fix
CVE-2026-13355Meta Box AIO WordPress plugin privilege escalation9.8CNA v3.10.4%2026-09-22Exploit codeFix
CVE-2026-12995Custom Field Template WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-09-22Fix
CVE-2026-12718SQLi in Karel Electronics' KarelIPS9.8CNA v3.10.3%2026-09-22
CVE-2026-12470CMP WordPress plugin privilege escalation7.2CNA v3.10.3%2026-09-22Fix
CVE-2026-11389RTI Connext Professional core libraries out-of-bounds read6.8CNA v4.00.1%2026-09-22Fix
CVE-2026-11388Double free vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation6.9CNA v4.00.1%2026-09-22Fix
CVE-2026-9231WP Travel Engine WordPress plugin local file inclusion7.5CNA v3.10.6%2026-09-22Fix
CVE-2026-9004WP-CRM System WordPress plugin exposure of sensitive information4.3CNA v3.10.4%2026-09-22Fix
CVE-2026-8849RTI Connext Professional use-after-free7.7CNA v4.00.4%2026-09-22Fix
CVE-2026-7866Stack-based buffer overflow vulnerability in RTI Connext Professional allows Overflow Buffers10.0CNA v4.00.3%2026-09-22Fix
CVE-2026-7622ThumbPress WordPress plugin missing authorization to authenticated (Subscriber+) plugin deactivation4.3CNA v3.10.4%2026-09-22Fix
CVE-2026-6922WP Table Builder WordPress plugin incorrect authorization to authenticated arbitrary post deletion7.1CNA v3.10.6%2026-09-22Fix
CVE-2026-4123RW Elephant Rental Inventory WordPress plugin missing authorization4.3CNA v3.10.4%2026-09-22Fix
CVE-2026-1645Hostel WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-09-22
CVE-2026-94627vLLM GPU KV Cache leak via Mooncake Transfer ID Collision8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-94626vLLM memory exhaustion via Unvalidated NIXL tp_size8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-94625vLLM resource exhaustion via Ownerless Mooncake Transfer Placeholders6.9CNA v4.00.5%2026-09-21Fix
CVE-2026-94624vLLM denial of service via Unbounded P2P KV Offloading Sessions8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-94623vLLM denial of service via NIXL Multi-Prompt assertion failure8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-94622vLLM denial of service via Incomplete NIXL KV Transfer Metadata8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-94588Proxmox pmg-api argument injection4.4CNA v3.10.2%2026-09-21Fix
CVE-2026-94572OpenStack Octavia code injection9.4CNA v4.00.5%2026-09-21Fix
CVE-2026-94571OpenStack Octavia code injection9.4CNA v4.00.5%2026-09-21Fix
CVE-2026-94540DesktopSMS unauthorized access via Local service7.4CNA v4.00.2%2026-09-21
CVE-2026-94536lamp-cloud unauthorized information disclosure via /anyone/visible/resource5.3CNA v4.00.3%2026-09-21
CVE-2026-94535lamp-cloud Unauthorized Notification Deletion7.1CNA v4.00.5%2026-09-21
CVE-2026-94534lamp-cloud Unauthorized Profile Modification via PUT endpoints7.1CNA v4.00.5%2026-09-21
CVE-2026-94533lamp-cloud Unauthorized File Download via /anyone/file7.1CNA v4.00.4%2026-09-21
CVE-2026-94532lamp-cloud Unauthorized User Profile Access via getUserInfoById7.1CNA v4.00.4%2026-09-21
CVE-2026-94501jshERP privilege escalation via userBusiness CRUD8.7CNA v4.00.5%2026-09-21
CVE-2026-94497jshERP unauthorized access via by-id endpoints8.7CNA v4.00.5%2026-09-21
CVE-2026-94496jshERP privilege escalation via Role Management8.7CNA v4.00.5%2026-09-21
CVE-2026-94495jshERP missing authorization via systemConfig7.1CNA v4.00.4%2026-09-21
CVE-2026-94494jshERP Tenant information disclosure via GET /tenant/info5.3CNA v4.00.4%2026-09-21
CVE-2026-94488Telegram Desktop cross-site scripting8.3CNA v4.00.2%2026-09-21Fix
CVE-2026-94449Red Hat build of Quarkus resource exhaustion7.5CNA v3.10.6%2026-09-21Fix
CVE-2026-94426Xuxueli xxl-job insert cross-site scripting5.1CNA v4.00.3%2026-09-21
CVE-2026-94425Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140006F0C privileges management9.3CNA v4.00.2%2026-09-21
CVE-2026-94424Moore Threads MTT S80 Driver Package IOCTL mtdispkm64.sys sub_140001000 heap-based overflow9.3CNA v4.00.2%2026-09-21
CVE-2026-94414jshERP missing authorization via updateBtnStr5.3CNA v4.00.4%2026-09-21
CVE-2026-94413jshERP password hash disclosure via /user/info7.1CNA v4.00.5%2026-09-21
CVE-2026-94412jshERP authorization bypass via resetPwd8.7CNA v4.00.5%2026-09-21
CVE-2026-94411jshERP privilege escalation via updateOneValueByKeyIdAndType8.7CNA v4.00.5%2026-09-21
CVE-2026-94404MISP CSRF vulnerability allows unauthorized attribute modification7.1CNA v4.00.2%2026-09-21Fix
CVE-2026-94403ColorFul iGameCenter IOCTL ene.sys sub_140001AF0 untrusted pointer dereference9.3CNA v4.00.2%2026-09-21
CVE-2026-94401MISP arbitrary Local File Read and SSRF via MISP Export upload8.3CNA v4.00.4%2026-09-21Fix
CVE-2026-94394MISP object references missing authorization6.3CNA v4.00.4%2026-09-21Fix
CVE-2026-94393MISP Event Report Cross-Event Reparenting via Unscoped UUID Resolution in editReport6.4CNA v4.00.4%2026-09-21Fix
CVE-2026-94387Aureus ERP stored XSS via Chatter Field-Change Log5.1CNA v4.00.3%2026-09-21Fix
CVE-2026-94383MISP Blocklist Workflow Module: Arbitrary Script Execution via Unrestricted file extension8.6CNA v4.00.5%2026-09-21Fix
CVE-2026-94382Beszel insecure direct object reference via user-alerts2.3CNA v4.00.3%2026-09-21Fix
CVE-2026-94381MISP privilege escalation: Read-Only API Key User can Regain Full Role via updateLoginTime8.7CNA v4.00.4%2026-09-21Fix
CVE-2026-94379MISP: HTTP Method Bypass of Login Security Controls (Bruteforce Protection and Email OTP)6.9CNA v4.00.6%2026-09-21Fix
CVE-2026-94374MISP MISP contains an insecure direct object reference8.3CNA v4.00.4%2026-09-21Fix
CVE-2026-94373MISP DOM-based cross-site scripting via innerHTML in Contextual menu6.3CNA v4.00.4%2026-09-21Fix
CVE-2026-94372MISP default theme's Galaxies index page stored cross-site scripting6.3CNA v4.00.4%2026-09-21Fix
CVE-2026-94368Red Hat Openshift Data Foundation 4 improper signature verification7.1CNA v3.10.2%2026-09-21
CVE-2026-94301Apache MINA: ResolveProxyClass fix missing from.X and.X branches ( /) ZDRES-2329.8CNA v3.10.4%2026-09-21Fix
CVE-2026-94277Stored cross-site scripting in MISP Galaxy Matrix Statistics via Unescaped Galaxy Name6.3CNA v4.00.4%2026-09-21Fix
CVE-2026-94218Keycloak authentication session management authentication bypass3.1CNA v3.10.3%2026-09-21
CVE-2026-94217Keycloak UMA authorization token endpoint missing authorization3.5CNA v3.10.2%2026-09-21
CVE-2026-94216ST Engineering iDirect iDX/Evo iDX HTTP request authorize response splitting5.3CNA v4.00.4%2026-09-21
CVE-2026-94215Keycloak admin REST API client cache missing authorization5.5CNA v3.10.3%2026-09-21
CVE-2026-94214ST Engineering iDirect iDX/Evo iDX Location header redirect5.3CNA v4.00.4%2026-09-21
CVE-2026-94213Keycloak policy evaluation endpoint information disclosure4.9CNA v3.10.4%2026-09-21
CVE-2026-94211Hyve5 Leantime Project Dashboard show.blade.php cross-site scripting4.8CNA v4.00.4%2026-09-21
CVE-2026-94210Hyve5 Leantime Kanban Board Tickets.php getAllGrouped cross-site scripting5.1CNA v4.00.4%2026-09-21
CVE-2026-94185nvm alias resolution follows `..` and discloses files outside $NVM_DIR/alias6.7CNA v4.00.2%2026-09-21Fix
CVE-2026-94184Red Hat Enterprise Linux 10 fetchmail: Fetchmail: Stack-based buffer overflow in ntlm authentication8.1CISA ADP v3.11.0%2026-09-21Fix
CVE-2026-94152Omega Solution FBP Fulfillment by People User Profile API user authorization5.3CNA v4.00.4%2026-09-21
CVE-2026-94151Omega Solution HRM OS Role Permission API permission missing authentication6.9CNA v4.00.7%2026-09-21
CVE-2026-94150Omega Solution HRM OS SVG file upload view cross-site scripting4.8CNA v4.00.4%2026-09-21
CVE-2026-94149Omega Solution HRM OS Role Permission Retrieval endpoint permission resource injection5.3CNA v4.00.4%2026-09-21
CVE-2026-94148ScadaBR Export Project endpoint export_project.htm EmportDwr.createExportJSON information disclosure6.9CNA v4.00.5%2026-09-21Fix
CVE-2026-94146BioStar BIOS Update Utility IOCTL BSMEM64_W10.sys sub_110BC write-what-where9.3CNA v4.00.2%2026-09-21
CVE-2026-94145Xuxueli xxl-job Task Management JobInfoController.java cross-site scripting5.1CNA v4.00.3%2026-09-21
CVE-2026-94144drogonframework drogon ORM Criteria.cc makeCriteria SQL injection6.9CNA v4.00.4%2026-09-21
CVE-2026-94143drogonframework drogon ORM Mapper Mapper.h orderBy SQL injection6.9CNA v4.00.4%2026-09-21
CVE-2026-94142BioStar Temperature Monitor Utility IOCTL BS_HWMIO64_W10.sys sub_1105C write-what-where9.3CNA v4.00.2%2026-09-21
CVE-2026-94139Chengdu Feiyuxing Technology Feiyu Star Router Cookie send_order.cgi command injection5.3CNA v4.01.2%2026-09-21
CVE-2026-94138Chengdu Feiyuxing Technology Feiyu Star Router send_order.cgi command injection5.1CNA v4.02.1%2026-09-21
CVE-2026-94137Hangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL handler denial of service4.8CNA v4.00.2%2026-09-21
CVE-2026-94129BioStar VALKYRIE AURORA IOCTL BS_RVSIO64.sys sub_1105C write-what-where9.3CNA v4.00.2%2026-09-21Exploit code
CVE-2026-94128BioStar VIVID LED DJ IOCTL BS_LED64.sys sub_1105C write-what-where9.3CNA v4.00.2%2026-09-21Exploit code
CVE-2026-94110QCMS Content Detail Controllers.php self_Tmp SQL injection6.9CNA v4.00.4%2026-09-21
CVE-2026-94103RooCMS Frontend Rendering site_pagePHP.php eval code injection5.1CNA v4.00.4%2026-09-21
CVE-2026-94102WuzhiCMS Login index.php redirect5.3CNA v4.00.4%2026-09-21
CVE-2026-94101Netcore NBR200V2 routerd vlan_load_form_uci buffer overflow9.4CNA v4.00.8%2026-09-21
CVE-2026-94100Netcore NBR200V2 WAN VLAN Reconfiguration routerd wan_config_set_vlan buffer overflow9.4CNA v4.00.8%2026-09-21
CVE-2026-94099Netcore NBR200V2 Backup Restore restore.cgi command injection9.4CNA v4.01.7%2026-09-21
CVE-2026-94098Netcore NBR200V2 Firmware Upgrade CGI endpoint upgrade command injection9.4CNA v4.02.4%2026-09-21
CVE-2026-93433Red Hat Enterprise Linux 10 libstoragemgmt: Libstoragemgmt: Denial of service5.5CNA v3.10.2%2026-09-21
CVE-2026-93340Gladys Assistant Password Reset Link Poisoning via forgot_password endpoint7.4CNA v4.00.5%2026-09-21Fix
CVE-2026-93339Ditty stored XSS via Layout Tag Wrapper attribute5.1CNA v4.00.3%2026-09-21Fix
CVE-2026-93012Email::Sender::Transport::Sendmail _sendmail_pipe OS command injection9.8CISA ADP v3.10.6%2026-09-21Fix
CVE-2026-92612Eclipse iceoryx™ exposed dangerous method1.0CNA v4.00.2%2026-09-21Fix
CVE-2026-92574Red Hat CRI-O checkpoint restore privilege escalation8.8CNA v3.10.7%2026-09-21
CVE-2026-92400Payment Gateway for PayPal on WooCommerce IPN handler vulnerability5.3CNA v3.10.2%2026-09-21Fix
CVE-2026-92382Red Hat Enterprise Linux 10 usbredir out-of-bounds write4.1CNA v3.10.1%2026-09-21
CVE-2026-91921Cross-site scripting (XSS) in 1millionbot’s AI chatbot platform5.1CNA v4.00.6%2026-09-21Fix
CVE-2026-91867Apache Neethi remote policy fetch resource exhaustion4.3CISA ADP v3.10.5%2026-09-21Fix
CVE-2026-91866Apache Neethi policy intersection resource exhaustion7.5CISA ADP v3.10.7%2026-09-21Fix
CVE-2026-91865Apache Neethi WS-Policy normalization resource exhaustion7.5CISA ADP v3.10.7%2026-09-21Fix
CVE-2026-91864Apache Neethi: Crafted WS-Policy documents bypass element/attribute limits causing memory exhaustion7.5CISA ADP v3.10.7%2026-09-21Fix
CVE-2026-91863Apache Neethi WS-Policy parser uncontrolled recursion7.5CISA ADP v3.10.8%2026-09-21Fix
CVE-2026-91167Warpgate user role assignment API missing authorization6.0CNA v4.00.4%2026-09-21Fix
CVE-2026-91166Warpgate web SSH jump host key validation vulnerability5.7CNA v3.10.2%2026-09-21Fix
CVE-2026-91165Warpgate: Markup injection in SSO form_post return page via unencoded redirect/error values2.4CNA v3.10.4%2026-09-21Fix
CVE-2026-91164Warpgate: API tokens bypass the user's allowed_ip_ranges restriction4.3CNA v3.10.4%2026-09-21Fix
CVE-2026-90860Canva improper removal of sensitive information7.1CNA v3.10.3%2026-09-21Fix
CVE-2026-89139Temporal Server subprocess compute provider OS command injection8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-88978Hatchet WorkerStatus gRPC polling insecure direct object reference4.3CNA v3.10.3%2026-09-21Fix
CVE-2026-88807libXrender RenderQueryPictFormats Reply heap-based buffer overflow8.9CNA v4.00.3%2026-09-21Fix
CVE-2026-88806libX11 XkbGetMap Reply heap-based buffer overflow7.5CNA v3.10.2%2026-09-21Fix
CVE-2026-88756Pagekit CMS login endpoint SQL injection5.3CISA ADP v3.10.2%2026-09-21
CVE-2026-88746idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.php.7.1CISA ADP v3.10.3%2026-09-21
CVE-2026-88745EMLOG-Pro cross-site scripting6.1CISA ADP v3.10.3%2026-09-21
CVE-2026-88738Jazzware RT1000 Edge webUI upgrade package unrestricted file upload8.8CISA ADP v3.10.6%2026-09-21
CVE-2026-88467CRMEB Knowledge-Paid System backend verification function information disclosure6.2CISA ADP v3.10.1%2026-09-21
CVE-2026-88412_BulkInsert_ReadProperty component An integer overflow5.3CNA v3.10.4%2026-09-21
CVE-2026-88411GRAPH.EFFECT component improper error handling7.5CNA v3.10.5%2026-09-21
CVE-2026-88410FalkorDB graph.UDF command missing authentication7.1CNA v3.10.3%2026-09-21
CVE-2026-88409FalkorDB _Decode_GrB_Matrix function buffer overflow8.8CNA v3.10.5%2026-09-21
CVE-2026-88408FalkorDB _GetGroup function stack-based buffer overflow6.5CNA v3.10.4%2026-09-21
CVE-2026-88407node_token_count/relation_token_count component of FalkorDB An out-of-bounds read7.5CNA v3.10.5%2026-09-21
CVE-2026-88406FalkorDB _ValidateUnion_Clauses function stack-based buffer overflow7.5CNA v3.10.5%2026-09-21
CVE-2026-88405RemoteRegisterFunctionService function A remote code execution9.8CISA ADP v3.10.8%2026-09-21
CVE-2026-88404UniscriptExecutionService.execute function A remote code execution9.8CISA ADP v3.10.8%2026-09-21
CVE-2026-88403serverRequest function of nocobase v2.1.21 server-side request forgery6.5CISA ADP v3.10.4%2026-09-21
CVE-2026-88402checkSQL function of nocobase v2.1.21 SQL injection9.8CISA ADP v3.10.5%2026-09-21
CVE-2026-87858Temporal Server completion callback vulnerability7.2CNA v4.00.8%2026-09-21Fix
CVE-2026-86802To Do List Member - unauthenticated content injection via Import3.7CNA v3.10.2%2026-09-21
CVE-2026-86473Apache Airflow Core API logout endpoint insufficient session expiration9.1CISA ADP v3.10.7%2026-09-21Fix
CVE-2026-85751Mailu: Authentication bypass in header-based proxy authentication9.8CNA v3.10.6%2026-09-21Fix
CVE-2026-85220Denial of service in the Thinkst Canary Redis service3.7CNA v3.10.4%2026-09-21
CVE-2026-85219Denial of service in the OpenCanary Redis service3.7CNA v3.10.4%2026-09-21Fix
CVE-2026-85113GiveWP WordPress plugin unauthenticated arbitrary shortcode execution via Donor Name6.5CNA v3.10.3%2026-09-21Reported exploitedFix
CVE-2026-85010RestroPress WordPress plugin unauthenticated Price manipulation via Cart Add-ons5.3CNA v3.10.3%2026-09-21Fix
CVE-2026-84990ntopng system configuration backup missing authorization8.8CNA v3.10.3%2026-09-21Fix
CVE-2026-84298Hatchet: Cross-tenant durable callback payload disclosure in Hatchet V1 Dispatcher3.1CNA v3.10.2%2026-09-21Fix
CVE-2026-84285OS command injection vulnerability affecting Tuleap Enterprise Edition from8.8CNA v3.11.8%2026-09-21
CVE-2026-83621ntopng blacklist editor REST API missing authorization8.1CNA v3.10.5%2026-09-21Fix
CVE-2026-82412ntopng vulnerability scan REST API command injection8.8CNA v3.10.7%2026-09-21Fix
CVE-2026-82355Apache Airflow Core API authentication session fixation4.2CISA ADP v3.10.7%2026-09-21Fix
CVE-2026-82187Web to Print Online Designer arbitrary file upload9.8CISA ADP v3.10.5%2026-09-21Fix
CVE-2026-82165Dell Command incorrect default permissions5.5CNA v3.10.1%2026-09-21Fix
CVE-2026-82163Dell Command incorrect default permissions5.5CNA v3.10.1%2026-09-21Fix
CVE-2026-81469Dell Inventory Collector Client unquoted search path7.8CNA v3.10.2%2026-09-21Fix
CVE-2026-80110Red Hat Certificate System pki-core v2 REST ACL filter incorrect authorization8.1CNA v3.10.2%2026-09-21Fix
CVE-2026-79920Ajenti: Privilege escalation to root via unauthenticated/unauthorized plugin install task9.9CNA v3.10.6%2026-09-21Fix
CVE-2026-79919MaxKB function-library sandbox escape: Dlopen stack-check bypass6.3CNA v3.10.4%2026-09-21Fix
CVE-2026-79918MaxKB: Sandbox escape via unhooked fexecve6.3CNA v3.10.4%2026-09-21Fix
CVE-2026-799171Panel MaxKB chat share-link endpoint insecure direct object reference6.5CNA v3.10.3%2026-09-21
CVE-2026-79916MaxKB AWS Bedrock model credential injection leads to remote code execution9.1CNA v3.10.4%2026-09-21Fix
CVE-2026-79320Stencil component runtime cross-site scripting6.1CISA ADP v3.10.2%2026-09-21
CVE-2026-79319Stencil core information disclosure5.3CISA ADP v3.10.2%2026-09-21
CVE-2026-79318web2py admin webservices controller path traversal6.5CISA ADP v3.10.6%2026-09-21
CVE-2026-79317x-ui authentication cookie insufficient session expiration4.8CISA ADP v3.10.3%2026-09-21
CVE-2026-79316x-ui An improper access control7.6CISA ADP v3.10.3%2026-09-21
CVE-2026-79079CrossWire Xiphos URL and menu popup handling OS command injection7.8CISA ADP v3.10.2%2026-09-21Fix
CVE-2026-78847gray-matter front matter parser code injection9.8CISA ADP v3.10.6%2026-09-21
CVE-2026-78806Project CHIP ChipDeviceController information disclosure5.5CISA ADP v3.10.1%2026-09-21
CVE-2026-77582Tinyauth: User enumeration attack by timing oracle6.9CNA v4.00.5%2026-09-21Fix
CVE-2026-77561Tinyauth: Unauthenticated login attempts can trigger global login lockdown denial of service5.3CNA v3.10.6%2026-09-21Fix
CVE-2026-77560Tinyauth forward-auth hostname matching vulnerability8.1CNA v3.10.6%2026-09-21Fix
CVE-2026-77525MaxKB: Management chat-record routes trust path application_id but load ChatRecord by global chat_id4.2CNA v3.10.2%2026-09-21
CVE-2026-77523MaxKB: Cross-workspace model parameter form write7.4CNA v3.10.3%2026-09-21
CVE-2026-77522MaxKB: Authenticated full-read SSRF4.3CNA v3.10.3%2026-09-21
CVE-2026-77521MaxKB: Prompt-injectable agent can lead to command execution10.0CNA v3.11.0%2026-09-21Fix
CVE-2026-775201Panel MaxKB application ranking endpoint missing authorization5.4CNA v3.10.2%2026-09-21
CVE-2026-77519MaxKB: Expired application API keys remain usable on `/chat/API/mcp`5.4CNA v3.10.2%2026-09-21
CVE-2026-77518MaxKB: Known MCP tool IDs expose owner Tool.code and can be referenced by attacker workflows5.0CNA v3.10.3%2026-09-21
CVE-2026-775171Panel MaxKB knowledge base document access insecure direct object reference5.4CNA v3.10.2%2026-09-21
CVE-2026-77516MaxKB: Missing per-tool authorization in the agent and workflow tool-dispatch path5.4CNA v3.10.2%2026-09-21
CVE-2026-77166Nextcloud Collectives business logic error2.4CNA v3.00.3%2026-09-21
CVE-2026-77165Nextcloud Server improper access control6.5CNA v3.00.4%2026-09-21Fix
CVE-2026-77021Checkmk missing decompression size limit in agent receiver allows memory exhaustion5.3CNA v4.00.4%2026-09-21Fix
CVE-2026-76898jgraph drawio draw.io: Unauthenticated SSRF via IPv6 ULA blocklist bypass in /embed2.js7.7CNA v4.00.4%2026-09-21Fix
CVE-2026-75939Red Hat OpenShift Container Platform oc-mirror improper signature verification7.4CNA v3.10.4%2026-09-21Fix
CVE-2026-75158Apache Airflow assets events API information disclosure4.3CISA ADP v3.10.6%2026-09-21Fix
CVE-2026-73553Envoy: RBAC authorization bypass via Path parameters7.5CNA v3.10.5%2026-09-21Fix
CVE-2026-73552Envoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values7.5CNA v3.10.5%2026-09-21Fix
CVE-2026-73551Envoy: Path normalization does not handle dot and dotdot segments with parameters5.3CNA v3.10.5%2026-09-21Fix
CVE-2026-73550Envoy: HTTP/2 Discarded host header 200 GB Header-Copy OOM in Envoy7.5CNA v3.10.6%2026-09-21Fix
CVE-2026-73549Envoy scoped IPv6 address parsing denial of service5.3CNA v3.10.6%2026-09-21Fix
CVE-2026-73548Envoy: Cross-user response poisoning via a generic HTTP upgrade on Envoy's shared backend pool7.5CNA v3.10.5%2026-09-21Fix
CVE-2026-73547Envoy ext_authz: Request `:path` pseudoheader dereferenced w/o null check7.5CNA v3.10.6%2026-09-21Fix
CVE-2026-73546Envoy: Stored XSS in Admin Stats interface (/stats?format=html)7.4CNA v3.10.6%2026-09-21Fix
CVE-2026-73513Envoy: Oghttp2 upstream trailers incorrect handling7.5CNA v3.10.5%2026-09-21Fix
CVE-2026-73512Envoy Capsule Protocol datagram handler use-after-free7.5CNA v3.10.9%2026-09-21Fix
CVE-2026-73511Envoy: Potential path-matching/authentication bypass when5.3CNA v3.10.4%2026-09-21Fix
CVE-2026-71543OpenBao's Templated Policies allow privilege escalation via Wildcard Characters7.5CNA v4.00.4%2026-09-21Fix
CVE-2026-69190graylog2-server graylog: Manager-to-Owner privilege escalation on saved searches and dashboards6.3CNA v3.10.4%2026-09-21Fix
CVE-2026-68919GoCD has stored XSS possible via forged package material comments on Stage/Job/VSM pages7.0CNA v4.00.5%2026-09-21Fix
CVE-2026-67827ZLMediaKit server configuration API code injection9.8CISA ADP v3.10.8%2026-09-21
CVE-2026-65980Chartbrew: SQL injection via Missing Backslash Escaping in ClickHouse Variable Substitution7.9CNA v4.00.5%2026-09-21Fix
CVE-2026-65654temporalio/ringpop-go fails to enforce configured label limits on inbound membership gossip8.7CNA v4.00.6%2026-09-21Fix
CVE-2026-65653temporalio/tchannel-go zero-chunk call fragment causes process termination8.7CNA v4.00.7%2026-09-21Fix
CVE-2026-65652temporalio/tchannel-go malformed checksum type causes process termination8.7CNA v4.00.7%2026-09-21Fix
CVE-2026-65651Temporal Server SQL parser uncontrolled recursion8.7CNA v4.00.7%2026-09-21Fix
CVE-2026-63416JGraph draw.io export proxy servlet path traversal3.7CNA v3.10.3%2026-09-21Fix
CVE-2026-63373jgraph drawio draw.io: OAuth CSRF4.2CNA v3.10.2%2026-09-21Fix
CVE-2026-63342Hatchet: Cross-Tenant Durable Task Event Log Disclosure via missing authorization Check6.3CNA v3.10.3%2026-09-21Fix
CVE-2026-63334jgraph drawio draw.io: SSRF via DNS rebinding in ProxyServlet bypasses private IP blocklist6.8CNA v3.10.3%2026-09-21Fix
CVE-2026-63330Warpgate recording stream WebSocket missing authorization7.7CNA v3.10.4%2026-09-21Fix
CVE-2026-63329Warpgate trust header forwarding authentication bypass by spoofing4.9CNA v3.10.3%2026-09-21Fix
CVE-2026-63116deepstream.io Valve permission system missing authorization8.8CNA v3.10.5%2026-09-21Fix
CVE-2026-62987Fabio trust header forwarding authentication bypass by spoofing5.8CNA v3.10.2%2026-09-21Fix
CVE-2026-62866Dasel: Selector lexer panics on trailing whitespace in `parseCurRune`6.2CNA v3.10.2%2026-09-21Fix
CVE-2026-62371KubeEdge: Command injection in NodeUpgradeJob RCE on edge nodes via v1alpha2 API8.8CNA v3.10.5%2026-09-21Fix
CVE-2026-62370KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub6.5CNA v3.10.5%2026-09-21Fix
CVE-2026-62369KubeEdge keadm archive extraction path traversal8.1CNA v3.10.6%2026-09-21Fix
CVE-2026-62247Supabase Realtime: Incorrect authorization6.5CNA v3.10.5%2026-09-21Fix
CVE-2026-62182KubeEdge ConfigUpdateJob task handler command injection8.8CNA v3.10.5%2026-09-21Fix
CVE-2026-61852Chartbrew: SQL injection via row_limit parameter in AI runQuery tool5.8CNA v4.00.4%2026-09-21Fix
CVE-2026-61851Chartbrew: Incomplete Read-Only Keyword Blocklist in AI runQuery tool6.5CNA v4.00.5%2026-09-21Fix
CVE-2026-61749InvenTree report template rendering server-side request forgery6.5CNA v3.10.5%2026-09-21Fix
CVE-2026-61748InvenTree: Report/Label print endpoints ignore per-model permissions4.3CNA v3.10.4%2026-09-21Fix
CVE-2026-61747InvenTree data import API insecure direct object reference4.3CNA v3.10.3%2026-09-21Fix
CVE-2026-61746InvenTree: Plugin-settings GET endpoints are readable without authentication5.3CNA v3.10.4%2026-09-21Fix
CVE-2026-61745InvenTree machine restart endpoint missing authorization4.3CNA v3.10.4%2026-09-21Fix
CVE-2026-61744InvenTree barcode scan API incorrect authorization6.5CNA v3.10.5%2026-09-21Fix
CVE-2026-61743Chartbrew: DNS Rebinding SSRF Bypass in Outbound Request Validation6.3CNA v3.10.4%2026-09-21Fix
CVE-2026-61687hatchet Unauthenticated OAuth state CSRF / login-CSRF7.1CNA v3.10.2%2026-09-21Fix
CVE-2026-61681Hatchet: SSRF via Unsigned UnsubscribeURL in SNS UnsubscribeConfirmation handler4.1CNA v3.10.3%2026-09-21Fix
CVE-2026-61674Fluent Bit: Remote stack buffer overflow in Fluent Bit `out_forward` Secure-Forward `PONG` handler9.2CNA v4.00.7%2026-09-21Fix
CVE-2026-61652Zapros streaming decoder denial of service8.7CNA v4.00.4%2026-09-21Fix
CVE-2026-61647NotebookLM MCP batch-to-vault endpoint path traversal7.1CNA v4.00.3%2026-09-21Fix
CVE-2026-61630lucasdillmann nginx-ignition nginx ignition has TOTP Reuse During Validity window4.2CNA v3.10.4%2026-09-21Fix
CVE-2026-61629nginx ignition i18n middleware denial of service7.5CNA v3.10.4%2026-09-21Fix
CVE-2026-61628nginx ignition onboarding endpoint race condition8.1CNA v3.10.4%2026-09-21Exploit codeFix
CVE-2026-61612@aborruso/ckan-mcp-server has SSRF via DNS-name → internal IP incomplete fix of5.7CNA v3.10.2%2026-09-21Fix
CVE-2026-61541Zapros has an Unbounded Content-Encoding decompression chain that allows denial of service6.9CNA v4.00.4%2026-09-21Fix
CVE-2026-59830Discourse: Stored XSS via unescaped actor name in post actions5.4CNA v3.10.3%2026-09-21Fix
CVE-2026-59816Joplin: Path traversal in transcribe proxy endpoint via URL-encoded slash4.3CNA v3.10.4%2026-09-21Fix
CVE-2026-59815Joplin: Pending share recipients can write items into shared folders before accepting invitations4.3CNA v3.10.2%2026-09-21Fix
CVE-2026-59814Joplin: Stored XSS via inline-served note attachment on published shares7.6CNA v3.10.4%2026-09-21Fix
CVE-2026-59168Dasel: Unbounded recursion in JSON and XML readers causes unrecoverable stack-overflow DoS6.2CNA v3.10.1%2026-09-21Fix
CVE-2026-58504jgraph drawio draw.io: Stored XSS on file open via editable=0 sibling cell patch bypass of6.1CNA v3.10.3%2026-09-21Fix
CVE-2026-58491Warpgate: Reflected XSS in SSO return endpoint via attacker-controlled next parameter9.3CNA v3.10.5%2026-09-21Fix
CVE-2026-58272Sync-in Server has Username/Login Enumeration via timing side-channel on POST /API/auth/login5.3CNA v3.10.3%2026-09-21Fix
CVE-2026-58271@Sync-in/server vulnerable to TOTP brute-force via `POST /API/app/sync/register`6.8CNA v3.10.2%2026-09-21Fix
CVE-2026-58270Sync-in Server has a ReDoS via Unsanitized Regex in Sync Diff `pathFilters`6.5CNA v3.10.3%2026-09-21Fix
CVE-2026-58269Sync-in Server has a complete 2FA Bypass via `POST /API/auth/token`8.1CNA v3.10.2%2026-09-21Fix
CVE-2026-55897OpenWrt LuCI Advanced Reboot app OS command injection8.8CNA v3.10.7%2026-09-21Fix
CVE-2026-55870GoCD is vulnerable to credential exposure when admins insecurely configure material URLs2.3CNA v4.00.6%2026-09-21Fix
CVE-2026-55625GoCD is vulnerable to authorization bypass via material connection test APIs4.9CNA v3.10.6%2026-09-21Fix
CVE-2026-55567BleachBit: Exploit File Delete to Escalate Privilege7.8CNA v3.10.1%2026-09-21Fix
CVE-2026-55563Feast pull request integration test workflow incorrect authorization8.9CNA v4.00.5%2026-09-21Fix
CVE-2026-55473HomeBox notifier SSRF guard server-side request forgery6.0CNA v4.00.4%2026-09-21Fix
CVE-2026-55210Joplin: SAML SSO account takeover7.4CNA v3.10.5%2026-09-21Fix
CVE-2026-55179Joplin Joplin Server item access insecure direct object reference6.5CNA v3.10.3%2026-09-21Fix
CVE-2026-55159OpenWrt luci-app-adblock-fast cron entry API CRLF injection8.8CNA v3.10.5%2026-09-21Fix
CVE-2026-55105Joplin: Fountain embeds allow arbitrary script execution in published notes and the note viewer7.7CNA v3.10.5%2026-09-21Fix
CVE-2026-55074Ansible FreeBSD Jail Connection Plugin put_file file transfer link following8.2CNA v4.00.4%2026-09-21Fix
CVE-2026-55071MCP-for-Stata: Stata command injection via Unsanitized `package` in `ado_package_install`8.4CNA v3.10.3%2026-09-21Fix
CVE-2026-55060GoCD is vulnerable to authorization bypass via support process list API3.7CNA v3.10.4%2026-09-21Fix
CVE-2026-54915Tautulli: Open redirect via whitespace bypass in /auth/redirect5.4CNA v3.10.3%2026-09-21Fix
CVE-2026-54584mport trusts environment-controlled temporary directories in privileged metadata extraction5.3CNA v4.00.5%2026-09-21Fix
CVE-2026-53940Conda: Entry-point path traversal in noarch:python install canonical Python implementation8.8CNA v3.10.5%2026-09-21Fix
CVE-2026-52835Tautulli: Path traversal / arbitrary file write7.0CNA v4.00.6%2026-09-21Fix
CVE-2026-52743GoCD is vulnerable to authorization bypass via job status API4.3CNA v3.10.4%2026-09-21Fix
CVE-2026-52742GoCD is vulnerable to historical server configuration API authorization bypass5.1CNA v4.00.7%2026-09-21Fix
CVE-2026-52741GoCD has stored XSS possible via tracking tool link highlighting on Compare Pipeline pages7.5CNA v4.00.5%2026-09-21Fix
CVE-2026-52740GoCD is vulnerable to pipeline template view API authorization bypass5.3CNA v4.00.6%2026-09-21Fix
CVE-2026-50572Envoy: Ext_authz RawHttpClientImpl onSuccess 0x0 segfault5.9CNA v3.10.7%2026-09-21Fix
CVE-2026-49995Tautulli: Stored cross-site scripting (XSS) in the newsletter4.8CNA v4.00.6%2026-09-21Fix
CVE-2026-49811Dell Command Monitor (DCM) incorrect permission assignment8.4CNA v3.10.1%2026-09-21Fix
CVE-2026-49810Dell Command Powershell Provider (DCPP) sensitive information in log files7.8CNA v3.10.2%2026-09-21Fix
CVE-2026-49453Joplin: Path traversal in resource sync silent arbitrary file write outside the resource directory7.0CNA v3.10.4%2026-09-21Fix
CVE-2026-49450Joplin Windows auto-updater vulnerability7.1CNA v3.10.2%2026-09-21Fix
CVE-2026-49449Joplin KaTeX href rendering information disclosure2.5CNA v3.10.2%2026-09-21Fix
CVE-2026-48976HomeBox: Cross-Tenant IDOR in Notifier Update leaks shoutrrr credentials and allows Webhook Hijack8.1CNA v3.10.4%2026-09-21Fix
CVE-2026-48975sysadminsmedia HomeBox maintenance entry API insecure direct object reference8.1CNA v3.10.5%2026-09-21Fix
CVE-2026-48974HomeBox: Forced Group Membership without Consent in Homebox AddMember handler5.4CNA v3.10.3%2026-09-21Fix
CVE-2026-48826HomeBox: Cross-Group Inventory Wipe in Homebox via Global Owner Role and X-Tenant Header Switching8.1CNA v3.10.5%2026-09-21Fix
CVE-2026-48521Envoy HTTP/3 connection pool selection null pointer dereference5.9CNA v3.10.7%2026-09-21Fix
CVE-2026-47321Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate7.5CNA v3.10.5%2026-09-21Fix
CVE-2026-46650Joplin: Stored XSS in public share viewer via javascript: URL bypass in isAcceptedUrl4.4CNA v3.10.3%2026-09-21Fix
CVE-2026-46649Joplin SSO login endpoint vulnerability9.1CNA v4.00.5%2026-09-21Fix
CVE-2026-45381Tautulli: Reflected XSS in `/search` endpoint5.1CNA v4.00.6%2026-09-21Fix
CVE-2026-36472CuteNews msg_info page referer handling cross-site scripting5.2CISA ADP v3.10.2%2026-09-21
CVE-2026-36471CuteNews cn_parse_url function insecure deserialization5.8CISA ADP v3.10.2%2026-09-21
CVE-2026-36470CuteNews Referer header handling cross-site scripting5.8CISA ADP v3.10.2%2026-09-21
CVE-2026-36469CuteNews Media Manager server-side request forgery9.1CISA ADP v3.10.3%2026-09-21
CVE-2026-36468index.php in CuteNews v.2.1.2 cross-site scripting6.1CISA ADP v3.10.3%2026-09-21
CVE-2026-36467core/modules/media.php in CuteNews v.2.1.2 unrestricted file upload7.2CISA ADP v3.10.5%2026-09-21
CVE-2026-17054Zephyr ESP-hosted Wi-Fi driver out-of-bounds read5.3CNA v3.10.2%2026-09-21Fix
CVE-2026-17052Zephyr time-aware GPIO syscall handler out-of-bounds write7.8CNA v3.10.1%2026-09-21Fix
CVE-2026-17051Zephyr Intel SEDI IPM driver out-of-bounds write6.0CNA v3.10.1%2026-09-21Fix
CVE-2026-17050Zephyr USB host stack double free5.7CNA v3.10.2%2026-09-21Fix
CVE-2026-16652Temporal Server Schedule exclusion search can cause excessive CPU consumption7.1CNA v4.00.3%2026-09-21Fix
CVE-2026-16651temporalio/sqlparser malformed MySQL version comments can cause a panic8.7CNA v4.00.4%2026-09-21Fix
CVE-2026-15890Zephyr secure storage nonce provider nonce reuse5.3CNA v3.10.1%2026-09-21Fix
CVE-2026-15801Cri-o: Cri-o: Insufficient validation during container checkpoint restore8.0CNA v3.10.3%2026-09-21
CVE-2026-94113Frappe ERPNext and missing authorization in Timesheet endpoints7.1CNA v4.00.4%2026-09-20Fix
CVE-2026-94112mayswind ezBookkeeping TOTP Replay Attack7.6CNA v4.00.4%2026-09-20Fix
CVE-2026-94111Tencent BrowserSkill origin validation error in Local WebSocket daemon6.9CNA v4.00.1%2026-09-20
CVE-2026-94109openEQUELLA authenticated stored SSTI via FreemarkerPortletRenderer8.6CNA v4.00.8%2026-09-20Fix
CVE-2026-94108getID3 XML external entity injection via XML2array8.3CNA v4.00.5%2026-09-20Fix
CVE-2026-94107NivoCart Predictable Administrator Password Reset Token9.2CNA v4.00.6%2026-09-20
CVE-2026-94106getID3 OS command injection via Unescaped Filenames8.7CNA v4.01.7%2026-09-20Fix
CVE-2026-94105NivoCart Destructive Configuration Write via the Password Reset controller6.9CNA v4.00.4%2026-09-20
CVE-2026-94104NivoCart arbitrary file upload RCE via filemanager8.7CNA v4.00.7%2026-09-20
CVE-2026-94097Netcore NBR200V2 CGI Diagnostic endpoint network_tools command injection10.0CNA v4.02.9%2026-09-20Emerging Threats
CVE-2026-94096Netcore NBR200V2 LAN IP Configuration network_tools command injection9.4CNA v4.02.0%2026-09-20
CVE-2026-94095Netcore NBR200V2 Traceroute Diagnostic feature network_tools command injection9.4CNA v4.02.4%2026-09-20Exploit code
CVE-2026-94094OpenClaw Canvas host route server.ts createCanvasHostHandler denial of service5.3CNA v4.00.5%2026-09-20
CVE-2026-94093DLR-RM stable-baselines3 save_util.py VecNormalize.load deserialization5.3CNA v4.00.5%2026-09-20
CVE-2026-94092dmlc dgl utils.py _read_torch_data deserialization5.1CNA v4.00.3%2026-09-20
CVE-2026-94091piskvorky gensim Model Loader utils.py load deserialization5.1CNA v4.00.3%2026-09-20
CVE-2026-94090JusticeRage Manalyze PE parser pe.cpp _parse_debug integer underflow5.3CNA v4.00.4%2026-09-20
CVE-2026-94089D-Link DIR-868L Authentication webfa_authentication.cgi strcpy stack-based overflow10.0CNA v4.01.0%2026-09-20
CVE-2026-94084OISF suricata use-after-free9.4CNA v3.10.5%2026-09-20Fix
CVE-2026-94083OISF suricata type confusion9.4CNA v3.10.5%2026-09-20Fix
CVE-2026-940510717376 cowork_bench pdf-tools-mcp server.py ControlFlowNode server-side request forgery5.3CNA v4.00.4%2026-09-20
CVE-2026-94050D-Link DIR-X1860Z ubus JSON-RPC interface routerd.get_rand_key information disclosure5.3CNA v4.00.4%2026-09-20Fix
CVE-2026-9404906ketan slideshot renderer.ts render_slides path traversal5.3CNA v4.00.5%2026-09-20
CVE-2026-94048CodeAstro QR Code Attendance Management System UserController.php save privileges management5.1CNA v4.00.4%2026-09-20
CVE-2026-94047samanhappy MCPHub Template Import endpoint templateService.ts importTemplate privileges management5.3CNA v4.00.4%2026-09-20Fix
CVE-2026-940460215AndrewFeng ACE-MCP MCP tool getFileSnippet.ts get_file_snippet path traversal5.3CNA v4.00.5%2026-09-20
CVE-2026-94045newbee-ltd newbee-mall Goods Save Endpoint UploadController.java cross-site scripting5.1CNA v4.00.4%2026-09-20
CVE-2026-9404403-lovepreetSingh MCP route.ts create_file path traversal6.9CNA v4.00.6%2026-09-20
CVE-2026-94043Free5GC Gmm handler.go race condition6.9CNA v4.00.6%2026-09-20
CVE-2026-94042AdithyaYelloju Restaurant Management System add_table.php mysqli_query SQL injection5.3CNA v4.00.3%2026-09-20
CVE-2026-94041AdithyaYelloju Restaurant-Management-System add_menu.php SQL injection5.3CNA v4.00.3%2026-09-20
CVE-2026-94040vas3k TaxHacker actions.ts testLLMProviderAction server-side request forgery6.9CNA v4.00.5%2026-09-20
CVE-2026-94039vas3k TaxHacker Invoice PDF Renderer actions.ts generateInvoicePDF server-side request forgery6.9CNA v4.00.5%2026-09-20
CVE-2026-94038NonceGeek dim-sum-app Deno Backend main.tsx textSearchV2Handler server-side request forgery6.9CNA v4.00.5%2026-09-20
CVE-2026-9403700Kisumi00 mcp-file-analyzer analyze_csv_data MCP tool main.py ControlFlowNode path traversal5.3CNA v4.00.5%2026-09-20
CVE-2026-94036D-Link DIR-X1860/DIR-X1860Z routerd ubus access control8.7CNA v4.00.6%2026-09-20Fix
CVE-2026-94035SourceCodester Drug Recommendation System index.php cross-site scripting5.3CNA v4.00.5%2026-09-20
CVE-2026-94034SourceCodester Drug Recommendation System Password Change change_password cross-site scripting5.1CNA v4.00.3%2026-09-20
CVE-2026-94033SourceCodester Drug Recommendation System User Management add_user cross-site scripting5.1CNA v4.00.3%2026-09-20
CVE-2026-94032itsourcecode Leave Management System index.php SQL injection5.3CNA v4.00.3%2026-09-20
CVE-2026-940310-Gaurav-0 nexus-mcp nexus_reauth MCP tool browser.ts child_process.exec command injection5.3CNA v4.01.1%2026-09-20
CVE-2026-94030SerenityOS LibGfx BMPLoader.cpp decode_bmp_pixel_data integer overflow2.3CNA v4.00.5%2026-09-20
CVE-2026-94028Mealie recipe action trigger server-side request forgery5.3CNA v4.00.5%2026-09-20Fix
CVE-2026-94016SourceCodester Drug Recommendation System add_symptom cross-site scripting4.8CNA v4.00.4%2026-09-20
CVE-2026-94015SourceCodester Drug Recommendation System edit_user.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-94004DedeCMS mytag_js.php code injection6.9CNA v4.00.5%2026-09-20
CVE-2026-94003Comfast CF-N1-S Web Management mbox-config get_css_path_from_uri stack-based overflow10.0CNA v4.00.6%2026-09-20
CVE-2026-93997SourceCodester Drug Recommendation System edit_symptom.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93980code-projects Internship Management System Admin Login form login.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93979code-projects Internship Management System login.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93978code-projects Internship Management System login.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93977code-projects Assessment Management add-single-mark.php cross-site scripting5.1CNA v4.00.3%2026-09-20
CVE-2026-93976code-projects Assessment Management add-user.php cross-site scripting4.8CNA v4.00.4%2026-09-20
CVE-2026-93975code-projects Assessment Management User Editing edit-user.php cross-site scripting4.8CNA v4.00.4%2026-09-20
CVE-2026-93974SourceCodester Online Reviewer Management System btn_functions.php remove SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93973SourceCodester Online Reviewer Management System btn_functions.php remove SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93972SourceCodester Online Reviewer Management System btn_functions.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93971aiyiyi121 SxDevOps settings.py information disclosure6.9CNA v4.00.5%2026-09-20
CVE-2026-93970aiyiyi121 SxDevOps settings settings.py hard-coded credentials6.9CNA v4.00.5%2026-09-20
CVE-2026-93969aiyiyi121 SxDevOps services.py ensure_default_superuser hard-coded credentials6.9CNA v4.00.5%2026-09-20
CVE-2026-93968aiyiyi121 SxDevOps UserSerializer serializers.py update privileges management5.1CNA v4.00.4%2026-09-20
CVE-2026-93967aiyiyi121 SxDevOps command services.py generate_host_task command injection5.1CNA v4.00.7%2026-09-20
CVE-2026-93966aiyiyi121 SxDevOps TASK_RUN_COMMAND host_tasks.py paramiko.SSHClient.exec_command command injection5.1CNA v4.01.6%2026-09-20
CVE-2026-93965aiyiyi121 SxDevOps MCP STDIO Server Management services.py subprocess.Popen command injection5.1CNA v4.01.9%2026-09-20
CVE-2026-93964nginx-proxy-manager certificate validation missing authentication6.9CNA v4.00.5%2026-09-20
CVE-2026-93963itsourcecode Leave Management System controller.php SQL injection5.3CNA v4.00.3%2026-09-20
CVE-2026-93962Kamailio CDP Diameter Receiver receiver.c shm_malloc heap-based overflow6.9CNA v4.00.7%2026-09-20Fix
CVE-2026-93961Dromara UJCMS UserController UserController.java usernameExist improper authorization6.9CNA v4.00.6%2026-09-20
CVE-2026-93960Pixelfed OAuth Scope ApiV1Controller.php instancePeers missing authentication5.3CNA v4.00.6%2026-09-20Fix
CVE-2026-93959SourceCodester Online Reviewer Management System btn_functions.php SQL injection6.9CNA v4.00.4%2026-09-20
CVE-2026-93958D-Link R95 DHMAPI ssi system os command injection9.4CNA v4.02.7%2026-09-20Emerging ThreatsExploit codeFix
CVE-2026-93957olivier-ls PHP-FTS Filter Matching SearchEngine.php matchesSingleFilter comparison5.3CNA v4.00.5%2026-09-20Fix
CVE-2026-92965TikTok - Unauthenticated OAuth Code Redemption3.7CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-92541Import and export users and customers front-end import handler privilege escalation7.2CISA ADP v3.10.5%2026-09-20Fix
CVE-2026-92540Import and export users and customers CSV import handler privilege escalation7.2CISA ADP v3.10.5%2026-09-20Fix
CVE-2026-92423Meow Gallery WordPress plugin Author+ Draft and Private post disclosure via fetch_posts2.7CISA ADP v3.10.3%2026-09-20Fix
CVE-2026-92422Meow Gallery gallery collection REST route vulnerability6.5CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-92410Sign-up Sheets WordPress plugin arbitrary Sign-up deletion via CSRF4.3CISA ADP v3.10.1%2026-09-20Fix
CVE-2026-92254WatchDog Antivirus kernel driver arbitrary file deletion via unauthenticated IOCTL6.9CNA v4.00.1%2026-09-20Fix
CVE-2026-92253Arbitrary file write via Directory Junction in WatchDog Anti-Virus Quarantine Restoration5.2CNA v4.00.2%2026-09-20Fix
CVE-2026-92252Incorrect default permissions in WatchDog Anti-Virus Installation Directory5.9CNA v4.00.1%2026-09-20Fix
CVE-2026-90817Vanderbilt University REDCap external control of a file path9.8CNA v3.10.9%2026-09-20Reported exploitedNucleiExploit code
CVE-2026-88857OrdaSoft Joomla Gallery extension for Joomla watermark upload function vulnerability9.4CNA v4.00.6%2026-09-20
CVE-2026-88856OrdaSoft Joomla Gallery extension for Joomla gallery update function code injection9.4CNA v4.00.7%2026-09-20
CVE-2026-88855OrdaSoft Joomla Gallery extension for Joomla gallery ordering fields SQL injection8.6CNA v4.00.4%2026-09-20
CVE-2026-88854OrdaSoft.com Joomla Gallery extension search function SQL injection9.3CNA v4.00.4%2026-09-20Exploit code
CVE-2026-87840Tripzzy WordPress plugin unauthenticated Booking data tampering5.3CISA ADP v3.10.3%2026-09-20Fix
CVE-2026-87839Tripzzy WordPress plugin unauthenticated arbitrary comment deletion7.5CISA ADP v3.10.4%2026-09-20Fix
CVE-2026-87068Forminator Forms WordPress plugin authenticated privilege escalation via Quiz Lead-Form import6.6CISA ADP v3.10.4%2026-09-20Fix
CVE-2026-87067Forminator Forms WordPress plugin authenticated RCE via XML-RPC PHP object injection8.5CISA ADP v3.10.5%2026-09-20Fix
CVE-2026-86555Hard-coded key vulnerability in ZTE SmartLife APP6.2CNA v3.10.2%2026-09-20KCV
CVE-2026-86554Email enumeration and account ID leakage vulnerabilities in ZTE SmartLife APP4.3CNA v3.10.3%2026-09-20
CVE-2026-86553A password reset vulnerability in ZTE SmartLife APP8.8CNA v3.10.5%2026-09-20
CVE-2026-86552ZTE SmartLife account registration endpoint improper authentication5.4CNA v3.10.4%2026-09-20Exploit codeKCV
CVE-2026-86551Wi-Fi MAC Address Obtainment by Non-privileged Program vulnerability in ZTE Z80Ultra product3.3CNA v3.10.2%2026-09-20
CVE-2026-85017Unlimited Elements For Elementor WordPress plugin Subscriber+ PHP object injection7.5CISA ADP v3.10.4%2026-09-20Fix
CVE-2026-84223Kirki - Author+ stored XSS via Unsanitized SVG upload6.8CISA ADP v3.10.4%2026-09-20Fix
CVE-2026-82842SAML Single Sign On WordPress plugin unauthenticated privilege escalation via account Matching8.1CISA ADP v3.10.4%2026-09-20Fix
CVE-2026-81654NextGEN Gallery WordPress plugin authenticated plugin Image settings update3.1CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-81653NextGEN Gallery WordPress plugin authenticated arbitrary Gallery Image deletion via IDOR4.2CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-81652NextGEN Gallery WordPress plugin Contributor+ Image Metadata disclosure via IDOR2.7CISA ADP v3.10.3%2026-09-20Fix
CVE-2026-81651NextGEN Gallery WordPress plugin authenticated Cross-Gallery settings modification via IDOR3.1CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-81650NextGEN Gallery WordPress plugin authenticated arbitrary file upload via ZIP import7.2CISA ADP v3.10.5%2026-09-20Fix
CVE-2026-16542Import and export users and customers WordPress plugin Admin+ SSRF via bp_avatar4.1CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-14844Master Slider WordPress plugin Contributor+ stored XSS via ms_slider shortcode attributes6.8CISA ADP v3.10.2%2026-09-20Fix
CVE-2026-94057Exim SMTP DATA processing CRLF injection5.3v3.10.2%2026-09-19Fix
CVE-2026-94056Exim uninitialized resource use7.5v3.10.2%2026-09-19Fix
CVE-2026-94055Exim GnuTLS TLS support use-after-free5.3v3.10.3%2026-09-19Fix
CVE-2026-94054Exim out-of-bounds write5.3NVD v3.10.3%2026-09-19Fix
CVE-2026-94001Keycloak admin REST API credential deletion missing authorization6.5CNA v3.10.4%2026-09-19
CVE-2026-94000Keycloak admin REST API group membership vulnerability6.6CNA v3.10.4%2026-09-19
CVE-2026-93999Keycloak OIDC token refresh missing authorization4.2CNA v3.10.2%2026-09-19
CVE-2026-93993mistralai mistral-vibe mistral Vibe remote code execution via git post-checkout8.6CNA v4.00.8%2026-09-19Fix
CVE-2026-93992Gopeed arbitrary file write via path traversal7.0CNA v4.00.9%2026-09-19
CVE-2026-93991argoproj argo-workflows Argo Workflows Cross-Namespace Disclosure via Negated Selector8.3CNA v4.00.4%2026-09-19Fix
CVE-2026-93990libexpat Expat Malformed UTF-16 Acceptance via Unchecked Surrogate8.7CNA v4.00.4%2026-09-19Fix
CVE-2026-93989vLLM Cross-Request Logits Corruption via bad_words4.3v3.10.2%2026-09-19Fix
CVE-2026-93988QloApps arbitrary file read via getEmailHTML7.1CNA v4.00.6%2026-09-19
CVE-2026-93987rclone serve docker path traversal via Volume Name4.6CNA v4.00.2%2026-09-19Fix
CVE-2026-93986rclone path traversal via directory listing Names2.3CNA v4.00.3%2026-09-19Fix
CVE-2026-93985OpenPanel js-runtime JavaScript template sandbox escape RCE9.4CNA v4.00.7%2026-09-19
CVE-2026-93984OpenPanel API authentication bypass via Unverified Client Secret6.9CNA v4.00.4%2026-09-19Fix
CVE-2026-93983OpenPanel SQL injection via ClickHouse Property Key Filter5.3CNA v4.00.3%2026-09-19
CVE-2026-93982OpenPanel MCP Authentication Token in Query Parameter Logged Plaintext4.8CNA v4.00.2%2026-09-19
CVE-2026-93981Hono/jsx cross-site scripting via Unescaped Strings2.3CNA v4.00.2%2026-09-19Fix
CVE-2026-93956olivier-ls PHP-FTS Search SearchEngine.php buildHighlights cross-site scripting5.1CNA v4.00.4%2026-09-19
CVE-2026-93955grimmory-tools grimmory Download Endpoint KoboController.java streamFileToResponse authorization5.3CNA v4.00.4%2026-09-19
CVE-2026-93954grimmory-tools grimmory settings API incorrect authorization5.3CNA v4.00.4%2026-09-19
CVE-2026-93742Totolink A3002MU formWsc command injection9.4CNA v4.02.3%2026-09-19
CVE-2026-93741Totolink A3002MU formWlWds buffer overflow10.0CNA v4.00.7%2026-09-19
CVE-2026-92967Pochipp WordPress plugin reflected cross-site scripting via keyword parameter6.1CNA v3.10.4%2026-09-19Fix
CVE-2026-92807Save as PDF Plugin by PDFCrowd WordPress plugin arbitrary function Invocation / code injection8.8CNA v3.10.5%2026-09-19Fix
CVE-2026-92435Mailchimp for WooCommerce WordPress plugin unauthenticated broken access control in REST API5.3CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-92430Rede Itaú for WooCommerce WordPress plugin unauthenticated order Status manipulation via PIX Webhook5.3CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-92425Hydra Booking WordPress plugin Hydra Host+ Cross-Host account modification and deletion via IDOR5.5CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-92421Hydra Booking host profile insecure direct object reference4.7CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-92420Hydra Booking WordPress plugin Hydra Host+ Cross-Host Booking deletion and modification via IDOR3.8CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-92404MgoSync - Unauthenticated WooCommerce API credential disclosure7.5CISA ADP v3.10.4%2026-09-19Fix
CVE-2026-92403Secure Custom Fields front-end form handler incorrect authorization3.7CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-92229WPMU DEV Forminator Forms do_shortcode function code injection9.1CNA v3.10.7%2026-09-19Reported exploitedExploit codeFix
CVE-2026-92099WPGraphQL Smart Cache persisted query cache vulnerability6.5CISA ADP v3.10.3%2026-09-19Exploit codeFix
CVE-2026-91847Online Scheduling and Appointment Booking System insecure direct object reference4.8CISA ADP v3.10.2%2026-09-19Fix
CVE-2026-89334Better Messages WordPress plugin missing authorization authenticated Chat-Room Transcript disclosure6.5CNA v3.10.7%2026-09-19Fix
CVE-2026-89333Tutor LMS WordPress plugin insecure direct object reference6.5CNA v3.10.5%2026-09-19Fix
CVE-2026-89274brechtvds WP Recipe Maker recipe review content code injection9.1CNA v3.10.7%2026-09-19Exploit codeFix
CVE-2026-89093Better Messages WordPress plugin unauthenticated information exposure spoofing5.3CNA v3.10.6%2026-09-19Fix
CVE-2026-89081Tutor LMS WordPress plugin reflected cross-site scripting via back_url and search parameters6.1CNA v3.10.4%2026-09-19Fix
CVE-2026-88944Tutor LMS WordPress plugin missing authorization authenticated arbitrary post deletion4.3CNA v3.10.5%2026-09-19Fix
CVE-2026-88926VikRentItems Flexible Rental Management System WordPress plugin unauthenticated SQLi8.6CISA ADP v3.10.4%2026-09-19Fix
CVE-2026-88824Master Blocks - unauthenticated stored XSS via White Label settings8.8CISA ADP v3.10.5%2026-09-19Fix
CVE-2026-87917MC4WP: Mailchimp for WordPress plugin reflected cross-site scripting via data Dynamic content Tag6.1CNA v3.10.4%2026-09-19Fix
CVE-2026-87909WP Photo Album Plus WordPress plugin remote code execution7.5CNA v3.10.9%2026-09-19Fix
CVE-2026-86814UsersWP - Social Login WordPress plugin unauthenticated account takeover8.1CISA ADP v3.10.4%2026-09-19Fix
CVE-2026-86591Botiga Pro Templates Builder REST route missing authorization9.8CISA ADP v3.10.5%2026-09-19Fix
CVE-2026-85680Ultimate Member WordPress plugin unauthenticated stored XSS via Profile page Title8.8CISA ADP v3.10.5%2026-09-19Fix
CVE-2026-85658ProfilePress biography field code injection8.1CNA v3.10.7%2026-09-19Fix
CVE-2026-85574Unbounce Landing Pages - Subscriber+ Reverse-Proxy Target Hijack via set_unbounce_domains8.0CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-84750Ultimate Addons for Contact Form 7 - unauthenticated arbitrary file upload via Signature field6.5CISA ADP v3.10.4%2026-09-19Reported exploitedFix
CVE-2026-84434Gravity Forms WordPress plugin unauthenticated arbitrary file upload via Hidden file upload field9.8CNA v3.13.9%2026-09-19Reported exploitedNucleiExploit codeFix
CVE-2026-82672elixir-mint Mint HTTP/1 chunk-size parser HTTP request smuggling6.3CNA v4.00.5%2026-09-19Fix
CVE-2026-82560Pod::Text line wrapping infinite loop7.5CISA ADP v3.10.6%2026-09-19Fix
CVE-2026-78030DBI DBD::DBM driver unsafe reflection9.8CISA ADP v3.10.4%2026-09-19Fix
CVE-2026-77820WPComplete WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-19Fix
CVE-2026-76790Estatik WordPress plugin reflected XSS via get_listings hash parameter7.1CISA ADP v3.10.3%2026-09-19Fix
CVE-2026-76579LiteSpeed Cache WordPress plugin reflected cross-site scripting via ESI esi parameter4.7CNA v3.10.4%2026-09-19Fix
CVE-2026-76554WP Import Export Lite WordPress plugin authenticated privilege escalation via user import7.2CISA ADP v3.10.5%2026-09-19Fix
CVE-2026-75959GoPay for WooCommerce WordPress plugin SQL injection4.9CNA v3.10.4%2026-09-19Fix
CVE-2026-19860JetFormBuilder - Admin+ arbitrary file deletion via Server-Side Validation Callback5.5CISA ADP v3.10.2%2026-09-19Fix
CVE-2026-18346TikTok WordPress plugin missing authorization unauthenticated TikTok Integration takeover5.3CNA v3.10.3%2026-09-19Fix
CVE-2026-16557Nimble Page Builder sek_get_nimble_content_for_seo_plugins AJAX action information disclosure4.3CISA ADP v3.10.2%2026-09-19
CVE-2026-15947Search Atlas SEO WordPress plugin missing authorization authenticated Site-Wide option modification4.3CNA v3.10.2%2026-09-19Fix
CVE-2026-15946Search Atlas SEO WordPress plugin authorization bypass4.3CNA v3.10.2%2026-09-19Fix
CVE-2026-15760Divi Essential WordPress plugin information disclosure6.5CNA v3.10.2%2026-09-19Fix
CVE-2026-15664Quill Forms WordPress plugin stored cross-site scripting7.2CNA v3.10.4%2026-09-19Fix
CVE-2026-15660SEO Booster WordPress plugin missing authorization arbitrary options modification4.3CNA v3.10.2%2026-09-19Fix
CVE-2026-15463SSL Zen WordPress plugin reflected cross-site scripting via uri and host parameters6.1CNA v3.10.1%2026-09-19Fix
CVE-2026-15098Real 3D Flipbook WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-19Fix
CVE-2026-13770AppMySite WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-19Fix
CVE-2026-13354Asset CleanUp: Page Speed Booster WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.2%2026-09-19Fix
CVE-2026-13200Create WordPress plugin authenticated (Author+) SQL injection via order parameter6.5CNA v3.10.2%2026-09-19Fix
CVE-2026-13191Create WordPress plugin authenticated (Author+) SQL injection via order_by parameter6.5CNA v3.10.3%2026-09-19Fix
CVE-2026-12402OTP Login and Register Woocommerce WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-09-19Fix
CVE-2026-12042WP2Social Auto Publish WordPress plugin stored cross-site scripting4.4CNA v3.10.2%2026-09-19Fix
CVE-2026-11899PDF Builder for WooCommerce GetInvoiceDetail AJAX handler missing authorization4.3CNA v3.10.2%2026-09-19Fix
CVE-2026-11608WP Customer Reviews WordPress plugin reflected cross-site scripting via wpcr3_fname parameter6.1CNA v3.10.3%2026-09-19Fix
CVE-2026-9858Partial Shipment for Woocommerce WordPress plugin missing authorization4.3CNA v3.10.4%2026-09-19Fix
CVE-2026-9855Custom Field Template WordPress plugin SQL injection6.5CNA v3.10.6%2026-09-19Fix
CVE-2026-9832Payment Gateway of Stripe for WooCommerce WordPress plugin improper signature verification5.3CNA v3.10.4%2026-09-19Fix
CVE-2026-9766Empik for Woocommerce WordPress plugin authorization bypass4.3CNA v3.10.4%2026-09-19Fix
CVE-2026-9615Flex Import WordPress plugin missing authorization authenticated arbitrary modification4.3CNA v3.10.4%2026-09-19Fix
CVE-2026-9613Datalogics Ecommerce Delivery WordPress plugin authorization bypass4.3CNA v3.10.6%2026-09-19Fix
CVE-2026-9289WordLift WordPress plugin information disclosure5.3CNA v3.10.6%2026-09-19Fix
CVE-2026-9232Easy Appointments WordPress plugin information disclosure6.5CNA v3.10.5%2026-09-19Fix
CVE-2026-8354Gum Addon for Elementor WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-19Fix
CVE-2026-7527WP Ghost (Hide My WP Ghost) WordPress plugin unauthenticated open redirect via redirect_to parameter4.7CNA v3.10.4%2026-09-19Fix
CVE-2026-6295WP Optimizer WordPress plugin authenticated (Administrator+) SQL injection via s parameter4.9CNA v3.10.5%2026-09-19Fix
CVE-2026-5410Redux Framework WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-19Fix
CVE-2026-5400Redux Framework WordPress plugin authenticated (Subscriber+) cross-site scripting via user input6.4CNA v3.10.4%2026-09-19Fix
CVE-2026-4792Bread WordPress plugin missing authorization to unauthenticated information exposure5.3CNA v3.10.6%2026-09-19Fix
CVE-2026-4327The Welcomizer WordPress plugin missing authorization authenticated remote code execution8.8CNA v3.10.7%2026-09-19Fix
CVE-2026-2422WP Composer WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-19Fix
CVE-2026-2278VW Writer Blog WordPress theme missing authorization authenticated theme settings reset4.3CNA v3.10.2%2026-09-19Fix
CVE-2026-1984vowelweb Ibtana editor AJAX action missing authorization5.3CNA v3.10.2%2026-09-19Fix
CVE-2026-1641Wow Elements Addons for Elementor WordPress plugin server-side request forgery6.5CNA v3.10.3%2026-09-19Fix
CVE-2026-1256YS LeadGen WordPress plugin authorization bypass6.4CNA v3.10.2%2026-09-19Fix
CVE-2026-1255YS LeadGen WordPress plugin information disclosure7.5CNA v3.10.3%2026-09-19Fix
CVE-2026-1242BlockSpare WordPress plugin authorization bypass4.3CNA v3.10.2%2026-09-19Fix
CVE-2026-93923SiYuan stored XSS via Heading Style attribute8.6CNA v4.00.6%2026-09-18
CVE-2026-93922SiYuan stored XSS via notebook names8.6CNA v4.00.8%2026-09-18
CVE-2026-93921SiYuan Access Control Bypass via Dynamic Icon endpoint5.3CNA v4.00.4%2026-09-18
CVE-2026-93894Vinyl Cache out-of-bounds write2.3CNA v4.00.4%2026-09-18Fix
CVE-2026-93873Cotonti cross-site request forgery in the Contact plugin5.3CNA v4.00.2%2026-09-18
CVE-2026-93872Cotonti PHP object injection via Comments Plugin Edit action cb parameter7.7CNA v4.00.7%2026-09-18
CVE-2026-93871Cotonti Stored open redirect via page redir: Prefix5.1CNA v4.00.3%2026-09-18
CVE-2026-93870Cotonti cross-site request forgery in the Ratings Plugin AJAX handler5.3CNA v4.00.2%2026-09-18
CVE-2026-93869Cotonti open redirect via Unanchored cot_url_check Regex5.3CNA v4.00.4%2026-09-18
CVE-2026-93868Cotonti Predictable Password Recovery Token via Weak PRNG9.2CNA v4.00.7%2026-09-18
CVE-2026-93854OpenStack Blazar lease API missing authorization7.2CNA v4.00.4%2026-09-18Fix
CVE-2026-93852OpenStack Blazar missing authorization7.1CNA v4.00.4%2026-09-18Fix
CVE-2026-93841vLLM Adjacent-Request Sampler State Corruption via Unvalidated Prompt Token IDs5.3v3.10.2%2026-09-18Fix
CVE-2026-93840vLLM Cross-Request Logits Corruption via allowed_token_ids5.3v3.10.2%2026-09-18Fix
CVE-2026-93839LightLLM missing authentication in PD Master /pd_register WebSocket endpoint9.3CNA v4.00.8%2026-09-18
CVE-2026-93838SGLang Unbounded Memory Allocation via STAGING_REQ chunk_idx8.2CNA v4.00.7%2026-09-18Fix
CVE-2026-93765MongoDB Mongoid document deletion and process crash8.3CNA v4.00.5%2026-09-18
CVE-2026-93764MongoDB Mongoid plaintext storage of encrypted fields7.1CNA v4.00.2%2026-09-18Fix
CVE-2026-93763MongoDB Mongoid protection mechanism failure7.1CNA v4.00.2%2026-09-18
CVE-2026-93762MongoDB Mongoid embedded document query field-name handling unsafe reflection9.2CNA v4.00.6%2026-09-18
CVE-2026-93761Denial of service via unbounded regex matching in Mongoid's in-memory query matcher8.7CNA v4.00.5%2026-09-18
CVE-2026-93760MongoDB Mongoid NoSQL injection of JavaScript-executing query operators8.3CNA v4.00.5%2026-09-18
CVE-2026-93759MongoDB Mongoid server-side JavaScript injection8.8CNA v4.00.4%2026-09-18
CVE-2026-93758MongoDB Mongoid nested attributes handling of the insecure direct object reference8.6CNA v4.00.4%2026-09-18Fix
CVE-2026-93753deepmerge Prototype Poisoning via mergeObject8.7CNA v4.00.5%2026-09-18
CVE-2026-93752CSSOM denial of service via length Property8.7CNA v4.00.7%2026-09-18
CVE-2026-93751uri-js Improper UTF-8 Decoding via pctDecChars6.9CNA v4.00.4%2026-09-18
CVE-2026-93750http-cache-semantics Cross-Client Cache Disclosure via Vary Wildcard8.2CNA v4.00.4%2026-09-18
CVE-2026-93749source-map-js Event Loop denial of service8.7CNA v4.00.6%2026-09-18Fix
CVE-2026-93748http-cache-semantics Cross-User Cache Disclosure via max-stale8.7CNA v4.00.6%2026-09-18Fix
CVE-2026-93740Totolink A3002MU formWlEncrypt buffer overflow10.0CNA v4.00.9%2026-09-18
CVE-2026-93739Totolink A3002MU formWlAc buffer overflow9.4CNA v4.00.9%2026-09-18
CVE-2026-93738Totolink A3002MU formSchedule buffer overflow9.4CNA v4.00.9%2026-09-18
CVE-2026-93737Azkaban authorization bypass via ScheduleServlet7.1CNA v4.00.5%2026-09-18Fix
CVE-2026-93736Mealie information disclosure via Ratings endpoint5.3CNA v4.00.4%2026-09-18Fix
CVE-2026-93690uri-js denial of service via removeDotSegments8.7CNA v4.00.7%2026-09-18Fix
CVE-2026-93689WinFsp null pointer dereference via Fast I/O6.8CNA v4.00.2%2026-09-18Fix
CVE-2026-93688SGLang Unbounded Memory Allocation via bootstrap_room8.7CNA v4.00.7%2026-09-18Fix
CVE-2026-93687braces stack overflow via Deeply Nested Patterns8.7CNA v4.00.8%2026-09-18
CVE-2026-93685Red Hat Advanced Cluster Management for Kubernetes information disclosure5.4CNA v3.10.4%2026-09-18
CVE-2026-93676xdg-dbus-proxy D-Bus broadcast message filtering improper access control3.2CNA v3.10.1%2026-09-18Fix
CVE-2026-93660SQLBot improper access control via Dashboard Update7.1CNA v4.00.4%2026-09-18
CVE-2026-93659concretecms-community-store community_store Concrete CMS Community Store stored XSS8.6CNA v4.00.4%2026-09-18Fix
CVE-2026-93658Uutils coreutils privilege escalation via setuid7.3CNA v4.00.1%2026-09-18Fix
CVE-2026-93657hickory-resolver DNSSEC Validation Bypass8.7CNA v4.00.4%2026-09-18Fix
CVE-2026-93653Red Hat Enterprise Linux 10 Poppler's Splash backend denial of service5.5CNA v3.10.2%2026-09-18
CVE-2026-93652Integer overflow or wraparound in µD3TN7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-93650Saleor throttling.py get_client_ip excessive authentication6.3CNA v4.00.7%2026-09-18
CVE-2026-93606vm2 sandbox escape via Promise Symbol.species10.0CNA v4.00.7%2026-09-18Fix
CVE-2026-93605vm2 NodeVM remote code execution via child_process10.0CNA v4.00.7%2026-09-18Fix
CVE-2026-93604vm2 sandbox escape via crypto.setFips6.9CNA v4.00.3%2026-09-18Fix
CVE-2026-93603vm2 sandbox escape RCE via Non-Strict host function10.0CNA v4.00.7%2026-09-18Fix
CVE-2026-93602rustls webpki rustls-webpki CRL Revocation Check Bypass5.9CNA v4.00.2%2026-09-18Fix
CVE-2026-93601rustls webpki Name Constraint Bypass2.1CNA v4.00.2%2026-09-18Fix
CVE-2026-93600rustls webpki Name Constraints URI Validation Bypass2.1CNA v4.00.2%2026-09-18Fix
CVE-2026-93599rustls webpki rustls-webpki panic via empty BIT STRING8.7CNA v4.00.3%2026-09-18Fix
CVE-2026-93598ArcadeDB Classpath credential disclosure via ResourceBundle7.1CNA v4.00.6%2026-09-18Fix
CVE-2026-93597ArcadeDB SSRF via IPv6 transition addresses5.3CNA v4.00.4%2026-09-18Fix
CVE-2026-93596ArcadeDB authorization bypass via Batch Edge Connect5.3CNA v4.00.3%2026-09-18Fix
CVE-2026-93595ArcadeDB ACL Bypass via query_database tool7.1CNA v4.00.4%2026-09-18Fix
CVE-2026-93594ArcadeDB ACL Bypass via Index and TimeSeries7.1CNA v4.00.4%2026-09-18Fix
CVE-2026-93593ArcadeDB TimeSeries ACL Bypass via Type Permission8.6CNA v4.00.4%2026-09-18Fix
CVE-2026-93592vLLM denial of service via negative token ID8.7CNA v4.00.5%2026-09-18Fix
CVE-2026-93591SiYuan SQL injection via unescaped tag in graph.go7.2CNA v4.00.3%2026-09-18Fix
CVE-2026-93590ImageMagick Policy Bypass in UHDR encoder7.5NVD v3.10.4%2026-09-18Fix
CVE-2026-93589ImageMagick division by zero in FLIF encoder7.5NVD v3.10.3%2026-09-18Fix
CVE-2026-93588ImageMagick null pointer dereference via PNM4.3NVD v3.10.3%2026-09-18Fix
CVE-2026-93587ImageMagick Policy Bypass via PCD decoder4.8CNA v4.00.1%2026-09-18Fix
CVE-2026-93586ImageMagick use-after-free via ImagesToBlob3.3NVD v3.10.1%2026-09-18Fix
CVE-2026-93579Red Hat Build of Debezium HTTP header injection6.5CNA v3.10.9%2026-09-18Fix
CVE-2026-93578Netty OCSP client vulnerability5.9CNA v3.10.2%2026-09-18Fix
CVE-2026-93576Netty SMTP codec CRLF injection7.5CNA v3.10.3%2026-09-18Fix
CVE-2026-93575Red Hat AMQ Broker 7 io.netty/netty-codec-mqtt: Netty: Resource exhaustion in mqttdecoder7.5CNA v3.10.4%2026-09-18Fix
CVE-2026-93574Red Hat Build of Debezium io.netty/netty-codec-http: Netty: Http request smuggling6.5CNA v3.11.4%2026-09-18Fix
CVE-2026-93573Red Hat Build of Debezium HTTP request smuggling6.5CNA v3.10.9%2026-09-18Fix
CVE-2026-93572Netty RedisArrayAggregator denial of service7.5CNA v3.10.3%2026-09-18Fix
CVE-2026-93569Red Hat Build of Apache Camel HTTP request smuggling8.2CNA v3.12.2%2026-09-18Fix
CVE-2026-93568Netty HTTP-object conversion path improper input validation7.5CNA v3.11.0%2026-09-18Fix
CVE-2026-93567A flaw was found in Netty's HTTP/2 codec. When converting HTTP/1 CONNECT requests to HTTP/2, the component incorrectly uses the Host header instead of the CONNECT authority-form request-target for the tunnel authority. A remote attacker can exploit this by supplying a different Host header, leading7.5CNA v3.12.6%2026-09-18Fix
CVE-2026-93566Red Hat Build of Debezium HTTP request smuggling6.5CNA v3.10.5%2026-09-18Fix
CVE-2026-93565A flaw was found in Netty RtspDecoder. The `RtspMethods.valueOf()` function incorrectly strips trailing control bytes from method tokens in Real-Time Streaming Protocol (RTSP) requests. A remote attacker can exploit this by sending a specially crafted RTSP request, leading to method-token smuggling.7.5CNA v3.10.8%2026-09-18Fix
CVE-2026-93564Red Hat Build of Apache Camel resource exhaustion7.5CNA v3.10.9%2026-09-18Fix
CVE-2026-93563Netty SMTP response decoder denial of service7.5CNA v3.10.3%2026-09-18Fix
CVE-2026-93562Red Hat Build of Debezium HTTP request smuggling6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-93561Netty Memcache binary codec vulnerability6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-93560Netty STOMP codec denial of service7.5CNA v3.10.4%2026-09-18Fix
CVE-2026-93559Forget-C Jellyfish AI Short Drama Studio FastAPI dependencies.py missing authentication6.9CNA v4.00.7%2026-09-18
CVE-2026-93558Red Hat Build of Apache Camel denial of service7.5CNA v3.11.1%2026-09-18Fix
CVE-2026-93534spatie Scotty Self Update SelfUpdater.php update code download5.3CNA v4.00.2%2026-09-18Fix
CVE-2026-93533spatie Scotty Doctor DoctorCommand.php checkRemoteTools os command injection5.3CNA v4.01.4%2026-09-18
CVE-2026-93532gedelumbung HospitalManagement Password Change password.php simpan improper authentication5.3CNA v4.00.5%2026-09-18
CVE-2026-93531gedelumbung HospitalManagement cross-site request forgery5.3CNA v4.00.2%2026-09-18
CVE-2026-93506SveltyCMS file upload endpoint upload-media server-side request forgery5.3CNA v4.00.4%2026-09-18
CVE-2026-93505SveltyCMS SVG Media upload media-service.server.ts cross-site scripting5.1CNA v4.00.3%2026-09-18
CVE-2026-93504SveltyCMS User Attribute Update endpoint +server.ts access control5.3CNA v4.00.4%2026-09-18
CVE-2026-93494Netty STOMP decoder memory leak7.5CNA v3.10.4%2026-09-18Fix
CVE-2026-93493Netty OCSP improper certificate validation5.9CNA v3.10.2%2026-09-18Fix
CVE-2026-93492Red Hat Build of Debezium denial of service5.3CNA v3.10.4%2026-09-18Fix
CVE-2026-93491Red Hat Build of Apache Camel io.netty/netty-codec-http: Netty: Denial of service7.5CNA v3.10.7%2026-09-18Fix
CVE-2026-93488Red Hat Build of Apache Camel io.netty/netty-codec-http: Netty: Denial of service7.5CNA v3.10.8%2026-09-18Fix
CVE-2026-93485Automattic WordPress cross-site scripting7.1CNA v3.10.4%2026-09-18Reported exploitedExploit codeFix
CVE-2026-93468HGiga｜OAKlouds arbitrary file read8.7CNA v4.00.7%2026-09-18Fix
CVE-2026-93467HGiga｜OAKlouds insecure deserialization9.3CNA v4.00.9%2026-09-18Fix
CVE-2026-93456django-page-cms CSRF via admin mutation views8.4CNA v4.00.2%2026-09-18
CVE-2026-93455django-page-cms Unauthorized Content Access via Staff Account7.1CNA v4.00.5%2026-09-18
CVE-2026-93432Red Hat Quarkus Qute template engine cross-site scripting6.1CNA v3.10.5%2026-09-18Fix
CVE-2026-93371marcopiovanello yt-dlp-web-ui generic.go NewGenericDownload command injection6.9CNA v4.01.4%2026-09-18
CVE-2026-93338Grandstream GWN7660ELR information disclosure via SNMP Default Community String6.9CNA v4.00.5%2026-09-18Fix
CVE-2026-93331GPAC RTP Depacketizer rtp_depacketizer.c gf_rtp_parse_ttxt out-of-bounds6.9CNA v4.00.5%2026-09-18Fix
CVE-2026-93314Freedesktop Poppler FoFiTrueType.cc mapCodeToGID integer overflow5.3CNA v4.00.4%2026-09-18Fix
CVE-2026-93313Freedesktop Poppler JBIG2Stream.cc readCodeTableSeg integer overflow5.3CNA v4.00.4%2026-09-18Fix
CVE-2026-93312Freedesktop Poppler JBIG2Stream.cc rewind null pointer dereference5.3CNA v4.00.6%2026-09-18Fix
CVE-2026-93311Freedesktop Poppler SampledFunction Function.cc integer overflow5.3CNA v4.00.6%2026-09-18Fix
CVE-2026-93310O-RAN-SC SMO OAM VES Collector allocation of resources6.9CNA v4.00.7%2026-09-18
CVE-2026-93031WP Cloud Plugins Use-your-Drive WordPress plugin arbitrary file upload8.8CNA v3.10.6%2026-09-18Fix
CVE-2026-93019Imager TGA colour map reader vulnerability9.1CISA ADP v3.10.7%2026-09-18Fix
CVE-2026-93018Imager paletted image reader vulnerability5.5CISA ADP v3.10.2%2026-09-18Fix
CVE-2026-92991Live Copy Paste for Elementor WordPress plugin biggopti library cross-site scripting5.4CNA v3.10.4%2026-09-18Fix
CVE-2026-92976Stored cross-site scripting (XSS) in T-Systems’ TAO5.1CNA v4.00.4%2026-09-18Fix
CVE-2026-92768Red Hat Enterprise Linux 10 cockpit-machines: Cockpit-machines: Sensitive data exposure5.5CNA v3.10.2%2026-09-18Fix
CVE-2026-92747Red Hat Cockpit Machines install_machine.py script information disclosure5.0CNA v3.10.2%2026-09-18Fix
CVE-2026-92745Red Hat Cockpit Machines RHSM token validation helper information disclosure5.0CNA v3.10.1%2026-09-18Fix
CVE-2026-92714Download Manager WordPress plugin insecure direct object reference6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-92708sveltejs devalue stringify and uneval functions information disclosure7.5CNA v3.10.7%2026-09-18Fix
CVE-2026-92702ultravioletrs Cocos AI AMD SEV-SNP verifier origin validation error9.1CNA v3.10.3%2026-09-18Fix
CVE-2026-92701ultravioletrs Cocos AI Intel TDX aTLS verifier vulnerability9.1CNA v3.10.2%2026-09-18Fix
CVE-2026-92622Strong Testimonials WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-18Fix
CVE-2026-92619Booking Calendar WordPress plugin privilege escalation to data_name parameter7.2CNA v3.10.7%2026-09-18Fix
CVE-2026-92561Booking Calendar WordPress plugin reflected cross-site scripting via options parameter6.1CNA v3.10.4%2026-09-18Fix
CVE-2026-92554ShopLentor WordPress plugin reflected cross-site scripting via Query-String parameter Name6.1CNA v3.10.4%2026-09-18Fix
CVE-2026-92249Qi Addons For Elementor WordPress plugin reflected DOM-based cross-site scripting via s parameter6.1CNA v3.10.4%2026-09-18Fix
CVE-2026-91707Divi WordPress theme missing authorization unauthenticated arbitrary Registered shortcode execution5.3CNA v3.10.5%2026-09-18Fix
CVE-2026-91205Red Hat Cockpit Files directory creation ownership assignment race condition6.0CNA v3.10.1%2026-09-18Fix
CVE-2026-91203Red Hat Cockpit Files file ownership and permission changes race condition6.0CNA v3.10.1%2026-09-18Fix
CVE-2026-91202Red Hat Cockpit Files privileged paste symlink following6.1CNA v3.10.1%2026-09-18Fix
CVE-2026-91149Red Hat Enterprise Linux 10 cockpit: Cockpit: Denial of service7.5CNA v3.10.3%2026-09-18Fix
CVE-2026-91147Red Hat Cockpit cockpit-ws URL root handling denial of service5.9CNA v3.10.4%2026-09-18Fix
CVE-2026-91142Red Hat Enterprise Linux 10 cockpit: Cockpit: Unauthorized modification of login records3.6CNA v3.10.1%2026-09-18Fix
CVE-2026-91127File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer8.2CNA v3.10.4%2026-09-18Fix
CVE-2026-90984Generate PDF using Contact Form 7 WordPress plugin unauthenticated server-side request forgery5.8CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-90981Newsletter WordPress plugin reflected cross-site scripting via nn parameter6.1CNA v3.10.4%2026-09-18Fix
CVE-2026-90978Filter Gallery AJAX nonce verification improper access control7.1CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-90977Clean Login WordPress plugin unauthenticated CAPTCHA bypass via Empty Session Comparison5.3CNA v3.10.4%2026-09-18Fix
CVE-2026-90976Clean Login WordPress plugin unauthenticated account creation with Registration Disabled5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-90884WP Recipe Maker WordPress plugin stored cross-site scripting5.4CNA v3.10.2%2026-09-18Fix
CVE-2026-89413Filter Gallery WordPress plugin missing authorization authenticated arbitrary Gallery deletion8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-89330EmbedPress WordPress plugin reflected cross-site scripting via hash and unique parameters6.1CNA v3.10.4%2026-09-18Fix
CVE-2026-89278GPTranslate WordPress plugin information disclosure5.3CNA v3.10.4%2026-09-18Fix
CVE-2026-89138Filter Gallery WordPress plugin missing authorization authenticated arbitrary post modification4.3CNA v3.10.4%2026-09-18Fix
CVE-2026-89059Red Hat RESTEasy IIOImageProvider image decoder denial of service7.5CNA v3.10.8%2026-09-18Fix
CVE-2026-89058JBoss RESTEasy CorsFilter origin validation error7.4CNA v3.10.3%2026-09-18Fix
CVE-2026-89008Bookit WordPress plugin Bookit Staff+ Appointment PII disclosure2.7CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-89007Bookit WordPress plugin Bookit Staff+ arbitrary Appointment deletion via missing authorization2.7CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-88994All Bootstrap Blocks - Contributor+ LFI via lightspeed block attributes6.6CNA v3.10.4%2026-09-18
CVE-2026-88993All Bootstrap Blocks WordPress plugin Contributor+ stored XSS via areoi/button type attribute6.8CISA ADP v3.10.4%2026-09-18
CVE-2026-88844MasterStudy LMS course student enrollment data insecure direct object reference2.7CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-88825iGMS Direct Booking WordPress plugin unauthenticated stored XSS via widget settings8.8CISA ADP v3.10.5%2026-09-18Fix
CVE-2026-88798Really Simple Security client IP header handling resource exhaustion5.3CISA ADP v3.10.4%2026-09-18Fix
CVE-2026-88623NUUO Network Video Recorder up.php arbitrary file read7.5CISA ADP v3.10.5%2026-09-18
CVE-2026-88622NUUO Network Video Recorder handle_import_privilege.php command injection8.8CISA ADP v3.11.1%2026-09-18
CVE-2026-88259CareCam CM2507 missing authentication for critical function8.7CNA v4.00.5%2026-09-18
CVE-2026-88097Microsoft Edge (Chromium-based) elevation of privilege8.1CNA v3.10.3%2026-09-18Fix
CVE-2026-87966Easy Appointments - Unauthenticated arbitrary Appointment Modification and Deletion via IDOR5.3CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-87965Easy Appointments appointment cancellation link improper access control4.8CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-87915Popup Maker WordPress plugin unauthenticated stored cross-site scripting via values[Name] parameter7.2CNA v3.10.5%2026-09-18Fix
CVE-2026-87775Tz Weekly Radio Schedule WordPress plugin unauthenticated SQLi via tzwrs_update_cell8.6CISA ADP v3.10.4%2026-09-18
CVE-2026-87774Tz Weekly Radio Schedule WordPress plugin unauthenticated SQL injection via week8.6CISA ADP v3.10.4%2026-09-18
CVE-2026-87771Product Question and Answer WordPress plugin unauthenticated SQL injection via p_id and read8.6CISA ADP v3.10.4%2026-09-18
CVE-2026-87770Price Drop Alert for WooCommerce WordPress plugin unauthenticated SQL injection via product8.6CISA ADP v3.10.4%2026-09-18
CVE-2026-87767WP Shortcut Link WordPress plugin unauthenticated SQL injection via URL8.6CISA ADP v3.10.4%2026-09-18
CVE-2026-87743Quarkus-vertx-http: Authorization bypass via path normalization discrepancy in quarkus HTTP security7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-86800WP Ghost WordPress plugin unauthenticated URL Hiding bypass via Loopback Compatibility check5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-86796Hide My WP Ghost WooCommerce request handling vulnerability5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-86689Cleartext transmission of sensitive information in Bransys ELD8.2CNA v4.00.2%2026-09-18Fix
CVE-2026-86520Bransys ELD MQTT broker credentials hard-coded credentials8.7CNA v4.00.4%2026-09-18Fix
CVE-2026-85705Location Manager WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-85652Photo Gallery by 10Web WordPress plugin SQL injection6.5CNA v3.10.6%2026-09-18Fix
CVE-2026-85511Red Hat JBoss Enterprise Application Platform Elytron token-realm vulnerability4.2CNA v3.10.3%2026-09-18Fix
CVE-2026-85497CareCam CM2507 use of password hash with insufficient computational effort9.3CNA v4.00.3%2026-09-18
CVE-2026-85478CareCam CM2507 missing authentication for critical function2.4CNA v4.00.2%2026-09-18
CVE-2026-85410Master Addons for Elementor WordPress plugin authorization bypass8.1CNA v3.10.6%2026-09-18Fix
CVE-2026-85350UpsellWP WordPress plugin unauthenticated Price manipulation via Frequently Bought Together5.3CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-85272openedx-platform Open edX Platform: Path traversal4.3CNA v3.10.5%2026-09-18
CVE-2026-85271openedx-platform Open edX Platform: Stored CSS injection in Email Digest Notifications6.1CNA v3.10.4%2026-09-18
CVE-2026-85127VikBooking - unauthenticated stored XSS via SVG Chat Attachment8.8CISA ADP v3.10.5%2026-09-18Fix
CVE-2026-85123Easy Form Builder - Unauthenticated Registration Policy Bypass via login form type confusion5.3CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-85122Easy Form Builder - unauthenticated stored XSS via form type confusion8.8CISA ADP v3.10.5%2026-09-18Fix
CVE-2026-85058Moquette: Missing authorization in io.moquette:moquette-broker7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-85009RestroPress payment recovery flow insecure direct object reference6.5CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-84992imzbf md-editor-v3 fenced-code language rendering cross-site scripting6.1CNA v3.10.3%2026-09-18Fix
CVE-2026-84975PJSIP: TLS server identity verification bypass via embedded NUL in certificate SubjectAltName7.4CNA v3.10.2%2026-09-18
CVE-2026-84909Custom Twitter Feeds WordPress plugin stored cross-site scripting6.4CNA v3.10.4%2026-09-18Fix
CVE-2026-84904King Addons for Elementor - Author+ missing authorization via Image Optimizer3.8CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-84903King Addons for Elementor kng_maintenance_page shortcode information disclosure2.7CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-84902King Addons for Elementor WordPress plugin Contributor+ stored XSS via Template Catalog import6.8CISA ADP v3.10.4%2026-09-18Fix
CVE-2026-84738AF Companion WordPress plugin Shop Manager+ arbitrary file upload to RCE9.1CISA ADP v3.10.8%2026-09-18Fix
CVE-2026-84451libheif uncompressed tile decoding out-of-bounds read6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-84450libheif image crop dimension calculation reachable assertion4.3CNA v3.10.3%2026-09-18Fix
CVE-2026-84449libheif hOp_RGB24_32_to_YCbCr Memory Access Error / SEGV3.7CNA v3.10.4%2026-09-18Fix
CVE-2026-84448libheif inline mask region data out-of-bounds read4.0CNA v3.10.2%2026-09-18Fix
CVE-2026-84447libheif derived image decode caching denial of service7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-84446libheif sequence timing table initialization infinite loop7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-84444libheif uncompressed tiled image encoding allows out-of-bounds write7.4CNA v3.10.5%2026-09-18Fix
CVE-2026-84400CareCam CM2507 missing authentication for critical function2.3CNA v4.00.2%2026-09-18
CVE-2026-84398CareCam CM2507 Empty Password in Configuration file8.7CNA v4.00.4%2026-09-18
CVE-2026-84384libheif compressed metadata decompression denial of service7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-84383libheif alpha plane image scaling out-of-bounds write9.8CNA v3.10.6%2026-09-18Exploit codeFix
CVE-2026-84241IBM Guardium Data Protection improper authorization8.1CNA v3.10.4%2026-09-18Fix
CVE-2026-84239IBM Guardium Data Protection SQL injection7.6CNA v3.10.5%2026-09-18Fix
CVE-2026-84108IBM Guardium Data Protection cross-site scripting8.1CNA v3.10.6%2026-09-18Fix
CVE-2026-84106IBM Guardium Data Protection cross-site scripting8.9CNA v3.10.5%2026-09-18Fix
CVE-2026-84105IBM Guardium Data Protection SQL injection7.7CNA v3.10.5%2026-09-18Fix
CVE-2026-84089IBM Guardium Data Protection privilege escalation7.8CNA v3.10.1%2026-09-18Fix
CVE-2026-84086IBM Guardium Data Protection path traversal7.2CNA v3.10.9%2026-09-18Fix
CVE-2026-84085IBM Guardium Data Protection OS command injection8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-84084IBM Guardium Data Protection cross-site request forgery8.8CNA v3.10.2%2026-09-18Fix
CVE-2026-84083IBM Guardium Data Protection nmap_wrapper binary privilege escalation7.8CNA v3.10.2%2026-09-18Fix
CVE-2026-84082IBM Guardium Data Protection SQL injection9.8CNA v3.10.7%2026-09-18Fix
CVE-2026-84081IBM Guardium Data Protection improper certificate validation8.1CNA v3.10.3%2026-09-18Fix
CVE-2026-84078IBM Guardium Data Protection LoadBalancerServlet missing authentication9.9CNA v3.10.5%2026-09-18Fix
CVE-2026-84077IBM Guardium Data Protection cross-site request forgery8.1CNA v3.10.2%2026-09-18Fix
CVE-2026-84076IBM Guardium Data Protection improper authorization7.6CNA v3.10.4%2026-09-18Fix
CVE-2026-84075IBM Guardium Data Protection ChangeTrackerServlet missing authentication9.9CNA v3.10.6%2026-09-18Fix
CVE-2026-84074IBM Guardium Data Protection cross-site scripting8.9CNA v3.10.5%2026-09-18Fix
CVE-2026-84073IBM Guardium Data Protection SQL injection9.1CNA v3.10.4%2026-09-18Fix
CVE-2026-84071IBM Guardium Data Protection Universal Connector plugin upload command injection7.2CNA v3.11.5%2026-09-18Fix
CVE-2026-84070IBM Guardium Data Protection cross-site scripting8.9CNA v3.10.5%2026-09-18Fix
CVE-2026-84064IBM Guardium Data Protection SQL injection9.9CNA v3.10.6%2026-09-18Fix
CVE-2026-84036IBM Guardium Data Protection improper authorization7.4CNA v3.10.3%2026-09-18Fix
CVE-2026-84034IBM Guardium Data Protection hardware assessment utility hard-coded credentials8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-84031IBM Guardium Data Protection cross-site scripting9.0CNA v3.10.6%2026-09-18Fix
CVE-2026-83561Complianz GDPR/CCPA Cookie Consent Banner WordPress plugin stored cross-site scripting7.2CNA v3.10.5%2026-09-18Fix
CVE-2026-82985Nextcloud Server improper access control6.5CNA v3.00.4%2026-09-18Fix
CVE-2026-82982Nextcloud Approval business logic error4.3CNA v3.00.3%2026-09-18
CVE-2026-82980Nextcloud Files Lock improper authentication6.3CNA v3.00.3%2026-09-18
CVE-2026-82967IBM Guardium Data Protection IP-based access controls authentication bypass9.8CNA v3.10.8%2026-09-18Fix
CVE-2026-82896IBM Guardium Data Protection path traversal7.6CNA v3.10.5%2026-09-18Fix
CVE-2026-82893IBM Guardium Data Protection privilege escalation7.8CNA v3.10.1%2026-09-18Fix
CVE-2026-82892IBM Guardium Data Protection OS command injection8.1CNA v3.10.6%2026-09-18Fix
CVE-2026-82890IBM Guardium Data Protection cross-site scripting5.9CNA v3.10.3%2026-09-18Fix
CVE-2026-82887IBM Guardium Data Protection OS command injection8.8CNA v3.10.8%2026-09-18Fix
CVE-2026-82885IBM Guardium Data Protection REST API missing authorization8.8CNA v3.10.5%2026-09-18Fix
CVE-2026-82832IBM Guardium Data Protection cross-site scripting9.6CNA v3.10.6%2026-09-18Fix
CVE-2026-82340IBM Guardium Data Protection Change Audit System listener insecure deserialization9.8CNA v3.10.7%2026-09-18Fix
CVE-2026-81946PLANET IGS-5225-8P2T4S V1/V2 weak password Hashing via MD5 Algorithm6.7CNA v4.00.2%2026-09-18Fix
CVE-2026-81945PLANET IGS-5225-8P2T4S V1/V2 admin stack-based buffer overflow via Web Server7.5CNA v4.00.6%2026-09-18Fix
CVE-2026-81944PLANET IGS-5225-8P2T4S V1/V2 stack-based buffer overflow via Web Server7.7CNA v4.00.7%2026-09-18Fix
CVE-2026-81943PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE8.4CNA v4.00.2%2026-09-18Fix
CVE-2026-81942PLANET IGS-5225-8P2T4S V1/V2 OS command injection via Web Server8.7CNA v4.01.9%2026-09-18Fix
CVE-2026-81937IBM Guardium Data Protection remotelog config import command OS command injection7.2CNA v3.11.5%2026-09-18Fix
CVE-2026-81933IBM Guardium Data Protection analytic grid service handler SQL injection8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-81810All-in-One WP Migration and Backup WordPress plugin privilege escalation to admin7.2CISA ADP v3.10.5%2026-09-18Fix
CVE-2026-81669IBM Guardium Data Protection create csr wildcard CLI command command injection7.2CNA v3.11.3%2026-09-18Fix
CVE-2026-81657IBM Guardium Data Protection deserialization of untrusted data9.8CNA v3.10.8%2026-09-18Fix
CVE-2026-81656IBM Guardium Data Protection New Query Builder REST endpoint SQL injection8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-81627QEMU VAPIC setup hypercall out-of-bounds write8.2CNA v3.10.2%2026-09-18Fix
CVE-2026-81626IBM Guardium Data Protection Load Balancer Servlet SQL injection8.6CNA v3.10.4%2026-09-18Fix
CVE-2026-81623IBM Guardium Data Protection command injection6.3CNA v3.10.3%2026-09-18Fix
CVE-2026-81505Convoy: Cross-Tenant Source IDOR leaks Plaintext Message Broker Credentials7.1CNA v4.00.5%2026-09-18Fix
CVE-2026-81340MasterStudy LMS WordPress plugin Instructor+ order Status manipulation via IDOR3.8CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-81321CareCam CM2507 cleartext storage of sensitive information9.3CNA v4.00.3%2026-09-18
CVE-2026-81305CareCam CM2507 inclusion of functionality from untrusted control sphere7.0CNA v4.00.3%2026-09-18
CVE-2026-81182SysReptor: Unauthorized file disclosure by broken access control in writable shared notes4.2CNA v3.10.3%2026-09-18Fix
CVE-2026-81181SysReptor: Session fixation in Password-Protected Shared Notes3.7CNA v3.10.3%2026-09-18Fix
CVE-2026-81180SysReptor: Authenticated RCE by insecure image processing8.8CNA v3.10.7%2026-09-18Fix
CVE-2026-81179SysReptor: Host header injection might allow account takeover8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-81178Syslifters SysReptor public note share link information disclosure3.5CNA v3.10.3%2026-09-18Fix
CVE-2026-80442IBM Guardium Data Protection certificate export function OS command injection9.9CNA v3.10.6%2026-09-18Fix
CVE-2026-80441IBM Guardium Data Protection change tracker insert query SQL injection9.8CNA v3.10.6%2026-09-18Fix
CVE-2026-79954NASA CryptoLib TC receive path accepts Security Associations from the wrong GVCID8.7CNA v4.00.6%2026-09-18
CVE-2026-79713Breeze Cache - unauthenticated cache poisoning via Unkeyed Tracking parameters6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-79294Moonshot AI Kimi public share view cross-site scripting6.1CISA ADP v3.10.5%2026-09-18
CVE-2026-77960Bransys ELD MQTT broker hard-coded credentials6.9CNA v4.00.3%2026-09-18Fix
CVE-2026-77929MacWarrior clipbucket-v5 ClipBucket#182 remote code execution via Photo upload endpoint8.7CNA v4.00.9%2026-09-18Fix
CVE-2026-77928MacWarrior clipbucket-v5 ClipBucket#182 blind SQL injection via Private Message Deletion endpoint7.1CNA v4.00.4%2026-09-18Fix
CVE-2026-77927MacWarrior clipbucket-v5 ClipBucket#182 blind SQL injection via Photo Deletion endpoint7.1CNA v4.00.4%2026-09-18Fix
CVE-2026-77875QUANTUMTECH Hide Photos vault storage insecure storage of sensitive information6.8CNA v4.00.2%2026-09-18
CVE-2026-77616SemanticMediaWiki semantic MediaWiki affected by reflected XSS in `Special:Ask`6.1CNA v3.10.3%2026-09-18Fix
CVE-2026-77610SemanticMediaWiki semantic MediaWiki has a query debug output XSS (`DebugFormatter`)6.1CNA v3.10.3%2026-09-18Fix
CVE-2026-77609SemanticMediaWiki semantic MediaWiki has an open redirect in Special:URIResolver6.1CNA v3.10.2%2026-09-18Fix
CVE-2026-77608SemanticMediaWiki semantic MediaWiki has reflected XSS in `Special:SearchByProperty`6.1CNA v3.10.3%2026-09-18Fix
CVE-2026-77607SemanticMediaWiki semantic MediaWiki affected by Special:Ask table `sep` parameter reflected XSS6.1CNA v3.10.3%2026-09-18Fix
CVE-2026-77606SemanticMediaWiki semantic MediaWiki has reflected XSS in Special:Ask plain table headers6.1CNA v3.10.3%2026-09-18Fix
CVE-2026-77528Crossbar.io Autobahn Python permessage-deflate compression decompression bomb5.3CNA v3.10.5%2026-09-18Fix
CVE-2026-77396PJSIP: Heap buffer overflow in the AVI parser6.9CNA v4.00.1%2026-09-18Fix
CVE-2026-77386Kyoo: OIDC login token can be redirected to an attacker-controlled URL6.5CNA v3.10.6%2026-09-18Fix
CVE-2026-77385Kyoo: Transcoder serves uncataloged files from the media directory4.3CNA v3.10.3%2026-09-18Fix
CVE-2026-77339Process Compose: Browser DNS rebinding lets websites control local process-compose MCP tools5.1CNA v4.00.3%2026-09-18Fix
CVE-2026-77301adm-zip ZIP entry decompression excessive memory allocation7.5CNA v3.10.6%2026-09-18Fix
CVE-2026-77240WACRM: Database-layer authorization bypasses9.9CNA v3.10.3%2026-09-18
CVE-2026-77239WACRM: Service-role routes missing a role check8.1CNA v3.10.5%2026-09-18
CVE-2026-77170Nextcloud Deck improper access control4.3CNA v3.00.3%2026-09-18
CVE-2026-77169Nextcloud Team Folders improper access control6.5CNA v3.00.5%2026-09-18Fix
CVE-2026-77164Nextcloud Server server-side request forgery6.2CNA v3.00.2%2026-09-18Fix
CVE-2026-76902CordysCRM: Unauthenticated arbitrary file disclosure5.0CNA v3.10.3%2026-09-18Fix
CVE-2026-769011Panel-dev CordysCRM lead and account pool endpoints insecure direct object reference5.8CNA v3.10.4%2026-09-18Fix
CVE-2026-76900CordysCRM: SSRF via Approval Flow Webhook Execution due to missing SSRF Validation at Runtime6.8CNA v3.10.5%2026-09-18
CVE-2026-76899CordysCRM: Authenticated SQL injection via `sort.name` on `POST /account-pool/page`5.7CNA v3.10.4%2026-09-18Fix
CVE-2026-75961NEX-Forms WordPress plugin SQL injection4.9CNA v3.10.5%2026-09-18Fix
CVE-2026-75895Osmocom libsmpp34 out-of-bounds read at smpp34_unpack7.5CISA ADP v3.10.4%2026-09-18Fix
CVE-2026-75894Osmocom osmo-iuh reachable assertion at ranap_handle_co_dt7.5CISA ADP v3.10.3%2026-09-18Fix
CVE-2026-75893Osmocom osmo-bsc heap based buffer overflow at ipaccess_proxy_read_msg7.5CISA ADP v3.10.5%2026-09-18Fix
CVE-2026-75892Osmocom osmo-ggsn out-of-bounds write in PDP ctx GSN-Address decode6.5CISA ADP v3.10.3%2026-09-18
CVE-2026-75885Openshift/console: Openshift/console: Unauthenticated SSRF and resource exhaustion9.3CNA v3.10.7%2026-09-18Fix
CVE-2026-75883ppp PPPD buffer overflow in PEAP response code6.8CNA v3.10.2%2026-09-18Fix
CVE-2026-75878IBM Sterling File Gateway is vulnerable to authentication bypass9.1CNA v3.10.6%2026-09-18Fix
CVE-2026-75157Apache Airflow: Asset queued-events delete endpoints gated on Dag read instead of Dag EDIT7.5CISA ADP v3.10.4%2026-09-18Exploit codeFix
CVE-2026-75031Interchange code injection9.8CISA ADP v3.10.7%2026-09-18Fix
CVE-2026-75017Magazine Blocks WordPress plugin authorization bypass4.3CNA v3.10.4%2026-09-18Fix
CVE-2026-75016Magazine Blocks WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-18Fix
CVE-2026-73863NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode` During MQTT v5 SUBSCRIBE Parsing7.0CNA v4.00.4%2026-09-18Fix
CVE-2026-71855Suricata flow: IPv4/IPv6 hash collision can reuse wrong flow state5.9CNA v3.10.3%2026-09-18Fix
CVE-2026-71537Paymenter: Credit-refund double-spend race condition in service downgrade (doUpgrade)6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-71418Suricata doh2: Crafted HTTP/2 DATA frames can cause quadratic CPU consumption7.5CNA v3.10.6%2026-09-18Fix
CVE-2026-69186c-ares DNS response parser denial of service5.3CNA v3.10.5%2026-09-18Fix
CVE-2026-69184c-ares DNS name parser denial of service7.5CNA v3.10.7%2026-09-18Fix
CVE-2026-68928Acode: Exported TerminalService lets any installed app execute arbitrary shell commands as Acode8.6CNA v3.10.2%2026-09-18Fix
CVE-2026-68493Nextcloud Server insecure direct object reference3.1CNA v3.00.2%2026-09-18Fix
CVE-2026-67549OpenImageIO: TIFF 1-bit CMYK bit conversion heap out-of-bounds write7.6CNA v3.10.3%2026-09-18Fix
CVE-2026-67103HCL Software BigFix Service Management cross-site scripting7.6CNA v3.10.2%2026-09-18Fix
CVE-2026-67102HCL Software BigFix Service Management administrative screens vulnerability8.1CNA v3.10.4%2026-09-18Fix
CVE-2026-67101HCL Software BigFix Service Management search functionality server-side request forgery9.3CNA v3.10.3%2026-09-18Fix
CVE-2026-67100HCL Software BigFix Service Management SQL injection9.8CNA v3.10.5%2026-09-18Fix
CVE-2026-65970OpenImageIO: TIFF multithreaded scanline read use-after-scope in `TIFFInput::read_native_scanlines`5.3CNA v3.10.4%2026-09-18Fix
CVE-2026-65969OpenImageIO: TGA-to-GIF palette split signed overflow causes SIGSEGV5.5CNA v3.10.2%2026-09-18Fix
CVE-2026-64847AnyIO process-pool workers can block indefinitely on undrained stderr6.8CNA v4.00.2%2026-09-18Fix
CVE-2026-63647CordysCRM SSE Notification Stream Hijack via `/sse/subscribe`9.3CNA v4.00.5%2026-09-18Fix
CVE-2026-63646CordysCRM MCP Form Configuration Endpoint Exposed to Anonymous Users6.9CNA v4.00.7%2026-09-18Fix
CVE-2026-63638OpenImageIO: Cineon invalid bit depth heap out-of-bounds write8.3CNA v3.10.5%2026-09-18Fix
CVE-2026-63635OpenImageIO: PSD RawColor invalid color mode causes global out-of-bounds read and allocation DoS5.5CNA v3.10.2%2026-09-18Fix
CVE-2026-63458Perses project query parameter authorization bypass exposes cross-project resources7.1CNA v4.00.3%2026-09-18Fix
CVE-2026-63452Suricata http1: Repeated brotli compression bombs can cause excessive CPU consumption7.5CNA v3.10.6%2026-09-18Fix
CVE-2026-63451OISF Suricata detection rule loader heap buffer overflow3.3CNA v3.10.1%2026-09-18Fix
CVE-2026-63450Suricata ftp: RETR/STOR before PORT/PASV can disable further IDS app-layer detection3.7CNA v3.10.2%2026-09-18Fix
CVE-2026-63449Suricata sip: Large SIP message bodies can evade detection with frame keyword3.7CNA v3.10.2%2026-09-18Fix
CVE-2026-63448Suricata SMB: Some SMB flows can cause resource exhaustion5.9CNA v3.10.4%2026-09-18Fix
CVE-2026-63447Suricata ftp: Crafted FTP traffic can cause quadratic CPU consumption7.5CNA v3.10.6%2026-09-18Fix
CVE-2026-63446Suricata app-layer: Passed flows can retain transactions, causing resource exhaustion7.5CNA v3.10.7%2026-09-18Fix
CVE-2026-63445Perses: Unvalidated project parameter enables filesystem path traversal7.1CNA v4.00.6%2026-09-18Fix
CVE-2026-63422OpenImageIO OpenEXR plugin partial edge tile heap out-of-bounds write7.8CNA v3.10.2%2026-09-18Fix
CVE-2026-63420OpenImageIO: PSD RawColor indexed image out-of-bounds read in `interleave_row`5.5CNA v3.10.2%2026-09-18Fix
CVE-2026-63419OpenImageIO: IFF ZBUFFER tile read writes past caller tile buffer7.8CNA v3.10.2%2026-09-18Fix
CVE-2026-63406AnyCable telemetry subsystem hard-coded credentials5.9CNA v3.10.3%2026-09-18Fix
CVE-2026-63405AnyCable Pusher REST API vulnerability5.9CNA v3.10.2%2026-09-18Fix
CVE-2026-63349AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups7.0CNA v4.00.1%2026-09-18Fix
CVE-2026-63199Perses: Missing authorization in datasource proxy allows cross-scope secret disclosure8.3CNA v4.00.3%2026-09-18Fix
CVE-2026-62943btrbk SSH command filter OS command injection8.7CNA v4.00.5%2026-09-18Fix
CVE-2026-62282OpenCVE: Server-side request forgery (SSRF) in notifications6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-62279LubeLogger vehicle record duplication endpoint insecure direct object reference7.1CNA v3.10.4%2026-09-18Fix
CVE-2026-62278LubeLogger translation file upload handler path traversal8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-61833zot bearer authentication handler incorrect authorization8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-61822pg_partman disable maintenance for all partition sets6.5CNA v3.10.5%2026-09-18Fix
CVE-2026-61821pg_partman authorization bypass to move child tables between schemas during retention8.5CNA v3.10.4%2026-09-18Fix
CVE-2026-61820pg_partman privilege escalation via SQL injection when inheriting template properties8.5CNA v3.10.7%2026-09-18Fix
CVE-2026-61819pg_partman privilege escalation via SQL injection in when using pg_jobmon and encountering exception8.5CNA v3.10.7%2026-09-18Fix
CVE-2026-61818pg_partman SQL injection in undo partition time encoder8.5CNA v3.10.5%2026-09-18Fix
CVE-2026-61817pg_partman privilege escalation via SQL injection in several functions via time decoder8.5CNA v3.10.7%2026-09-18Fix
CVE-2026-61795Capsule hostname regex validation webhook vulnerability6.8CNA v3.10.6%2026-09-18Fix
CVE-2026-61794Capsule tenant admission webhook denial of service6.8CNA v3.10.6%2026-09-18Fix
CVE-2026-61781pg_partman has privilege escalation through SQL injection in create_partition_time9.9CNA v3.10.8%2026-09-18Fix
CVE-2026-61723FluidSynth: DLS ptbl Chunk integer overflow6.8CNA v3.10.2%2026-09-18Fix
CVE-2026-61722FluidSynth: DLS Articulation Chunk integer overflow6.8CNA v3.10.2%2026-09-18Fix
CVE-2026-61721FluidSynth: Heap-based buffer overrun for DLS samples8.0CNA v3.10.2%2026-09-18Fix
CVE-2026-61720FluidSynth: SF2 DMOD Chunk Unsigned Underflow6.2CNA v3.10.2%2026-09-18Fix
CVE-2026-61714FluidSynth: Heap buffer overflow in MIDI Player7.8CNA v3.10.2%2026-09-18Fix
CVE-2026-61682kcp front-proxy authentication bypass9.9CNA v3.10.4%2026-09-18Fix
CVE-2026-61672Capsule forbidden list matcher incorrect authorization7.1CNA v3.10.3%2026-09-18Fix
CVE-2026-61670microsandbox sandbox spawn arguments information disclosure6.5CNA v3.10.1%2026-09-18Fix
CVE-2026-61633NanoMQ: Infinite loop in UNSUBSCRIBE Decoder leading to remote DoS2.0CNA v3.10.3%2026-09-18Fix
CVE-2026-61552Icinga 2 DSL injection via Unescaped Import Template Name7.2CNA v3.10.9%2026-09-18Fix
CVE-2026-61551Icinga 2: Stack overflow via deeply nested JSON objects8.6CNA v3.10.9%2026-09-18Fix
CVE-2026-61550Icinga 2: Improper access control for JSON-RPC update certificate messages9.8CNA v3.10.7%2026-09-18Fix
CVE-2026-61548Rsyslog: Mmpstrucdata stack buffer overflow with oversized RFC5424 structured data8.1CNA v3.10.9%2026-09-18Fix
CVE-2026-59956OpenImageIO: Heap-buffer-overread in IffInput::readimg when ZBUFFER flag is set6.1CNA v3.10.2%2026-09-18Fix
CVE-2026-59181OpenImageIO: Stack buffer overflow in OpenImageIO Cineon reader via unchecked numberOfElements6.1CNA v3.10.2%2026-09-18Fix
CVE-2026-59163Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass9.1CNA v3.10.3%2026-09-18Fix
CVE-2026-59156OpenImageIO: Unbounded recursion in FITS header parser leads to stack overflow6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-58264FluidSynth: Heap-based buffer overrun9.8CNA v3.10.8%2026-09-18Fix
CVE-2026-58197Stacklok ToolHive MCP proxy and control plane endpoints missing authentication8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-57229Suricata smtp/mime: Incomplete state reset allows detection bypass5.3CNA v3.10.4%2026-09-18Fix
CVE-2026-57228Suricata smtp/mime: Heap out-of-bounds read quoted-printable decoder8.2CNA v3.10.4%2026-09-18Fix
CVE-2026-57227Suricata mqtt: Unbounded resource consumption from repeated pubrec and pubrel messages7.5CNA v3.10.7%2026-09-18Fix
CVE-2026-57226Suricata swf: Heap buffer overflow in SWF decompression depth handling3.7CNA v3.10.6%2026-09-18Fix
CVE-2026-57225Suricata datasets: Null pointer dereference in JSON/NDJSON dataset loading3.3CNA v3.10.2%2026-09-18Fix
CVE-2026-57224Suricata dhcp: Unbounded transactions in unidirectional traffic can lead to resource exhaustion6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-57223Suricata windows: Unquoted LocalSystem service ImagePath can allow local privilege escalation7.0CNA v3.10.2%2026-09-18Fix
CVE-2026-57222Suricata ippair: Hash collision can cause incorrect state reuse across IPv4 and IPv65.3CNA v3.10.4%2026-09-18Fix
CVE-2026-56597HCL BigFix Service Management information disclosure3.1CNA v3.10.2%2026-09-18Fix
CVE-2026-56595HCL BigFix Service Management permissive cross-domain policy3.1CNA v3.10.1%2026-09-18Fix
CVE-2026-56592HCL BigFix Service Management login interface vulnerability6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-56590HCL BigFix Service Management unrestricted file upload6.4CNA v3.10.2%2026-09-18Fix
CVE-2026-55556Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling8.2CNA v4.00.9%2026-09-18Fix
CVE-2026-54148http4k digest authentication provider vulnerability8.1CNA v3.10.6%2026-09-18Fix
CVE-2026-54147http4k digest authentication provider vulnerability6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-52745CordysCRM account pool sorting field SQL injection5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-46655virtio-win Viosock driver heap-based buffer overflow7.8CNA v3.10.2%2026-09-18
CVE-2026-44639NanoMQ: O(N²) denial of service in MQTT v5 Property Parsing3.7CNA v3.10.4%2026-09-18Fix
CVE-2026-40539Synology DiskStation Manager (DSM) Email API improper certificate validation7.1CNA v3.10.1%2026-09-18Fix
CVE-2026-40538Synology DiskStation Manager (DSM) Auto block missing brute-force protection3.7CNA v3.10.4%2026-09-18Fix
CVE-2026-40537Synology DiskStation Manager (DSM) PersonMail API server-side request forgery4.3CNA v3.10.3%2026-09-18Fix
CVE-2026-40536Synology DiskStation Manager (DSM) path traversal4.3CNA v3.10.4%2026-09-18Fix
CVE-2026-40535Synology DiskStation Manager (DSM) path traversal6.5CNA v3.10.5%2026-09-18Fix
CVE-2026-40534Synology DiskStation Manager (DSM) cross-site scripting5.4CNA v3.10.3%2026-09-18Fix
CVE-2026-40533Synology DiskStation Manager (DSM) Desktop API information disclosure through data queries5.3CNA v3.10.4%2026-09-18Fix
CVE-2026-40532Synology DiskStation Manager (DSM) Wallpaper Path forced browsing6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-40531Synology DiskStation Manager (DSM) File Operation integer overflow4.3CNA v3.10.4%2026-09-18Fix
CVE-2026-40530Synology DiskStation Manager (DSM) User API CRLF injection8.0CNA v3.10.5%2026-09-18Fix
CVE-2026-33625LMDeploy vulnerable to arbitrary code execution8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-32641Parseable: Unauthenticated denial of service via panic in Kinesis header parsing middleware7.5CNA v3.10.9%2026-09-18Fix
CVE-2026-28199Sensitive File Disclosure via relative path traversal in NetBackup Flex OS Shell4.8CNA v4.00.1%2026-09-18Fix
CVE-2026-28198Privilege escalation via Cryptographic signature verification Bypass in NetBackup Flex OS Shell9.4CNA v4.00.3%2026-09-18Fix
CVE-2026-28197Privilege escalation via argument injection in NetBackup Flex OS Shell9.4CNA v4.00.7%2026-09-18Fix
CVE-2026-25684Zscaler ZIA File Type Control evaluation rules improper input validation4.4CNA v3.10.2%2026-09-18
CVE-2026-21848HCL BigFix Service Management improper access control5.0CNA v3.10.2%2026-09-18Fix
CVE-2026-21822A path traversal vulnerability has been identified in HCL AppScan 360°6.3CNA v3.10.2%2026-09-18
CVE-2026-21806HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability3.1CNA v3.10.2%2026-09-18Fix
CVE-2026-18912Zoho ManageEngine DataSecurity Plus SQL injection7.7CNA v3.11.5%2026-09-18Fix
CVE-2026-18911Zoho ManageEngine DataSecurity Plus authentication bypass7.5CNA v3.11.1%2026-09-18Fix
CVE-2026-18869IBM i is affected by denial of service and Security Restriction Bypass vulnerabilities in FTP [, ]6.4CNA v3.10.2%2026-09-18Fix
CVE-2026-18442WCFM Marketplace WordPress plugin unauthenticated SQL injection7.5CNA v3.10.5%2026-09-18Fix
CVE-2026-18405Jeg Kit for Elementor WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-09-18Fix
CVE-2026-18317Foxtool All-in-One: Contact chat button WordPress plugin authorization bypass4.3CNA v3.10.2%2026-09-18Fix
CVE-2026-17619The IBM Platform RTM is affected by an SQL injection8.6CNA v3.10.3%2026-09-18Fix
CVE-2026-17607WP Inventory Manager WordPress plugin SQL injection6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-17586VK All in One Expansion Unit WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-18Fix
CVE-2026-17576InfiniteWP Client WordPress plugin SQL injection6.5CNA v3.10.3%2026-09-18Fix
CVE-2026-17262IBM i is affected by denial of service and Security Restriction Bypass vulnerabilities in FTP [, ]5.4CNA v3.10.2%2026-09-18Fix
CVE-2026-17086ShortPixel Image Optimizer WordPress plugin PHP object injection8.8CNA v3.10.9%2026-09-18Fix
CVE-2026-16777Store Exporter WordPress plugin path traversal to arbitrary file read and arbitrary file deletion4.9CNA v3.10.7%2026-09-18Fix
CVE-2026-16515Zephyr IPv6 stack ICMPv6 error handling network amplification4.7CNA v3.10.2%2026-09-18Fix
CVE-2026-16514zephyrproject zephyr out-of-bounds read in gPTP Announce path-trace validation4.3CNA v3.10.2%2026-09-18Fix
CVE-2026-16512Out-of-bounds read in the Zephyr gPTP receive path when handling short Ethernet frames3.1CNA v3.10.2%2026-09-18Fix