CVE-2026 list

CVE-2026 records published in September 2026

Page six of 15: records 5,001 to 6,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 5,001 to 6,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-15797Popup Maker WordPress plugin authenticated (Contributor+) stored cross-site scripting via post_title6.4CNA v3.10.3%2026-09-18Fix
CVE-2026-15650RT Mega Menu WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-18
CVE-2026-15579Moxa TN-4500B Series An out-of-bounds write8.8CNA v4.00.4%2026-09-18Fix
CVE-2026-15275WP Multi Store Locator Pro WordPress plugin unauthenticated SQL injection7.5CNA v3.10.4%2026-09-18Fix
CVE-2026-15004FileBird WordPress Media Library Folders and File Manager plugin stored cross-site scripting5.4CNA v3.10.2%2026-09-18Fix
CVE-2026-14855RT Mega Menu WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-18Fix
CVE-2026-14472Kubio AI Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-18Fix
CVE-2026-14323Printcart Web to Print Product Designer for WooCommerce WordPress plugin path traversal7.5CNA v3.10.9%2026-09-18Fix
CVE-2026-13684Synology DiskStation Manager (DSM) SCGI improper output encoding9.8CNA v3.10.6%2026-09-18Fix
CVE-2026-13683Synology DiskStation Manager (DSM) SQL injection2.7CNA v3.10.3%2026-09-18Fix
CVE-2026-13673Synology DiskStation Manager (DSM) LDAP API incorrect permission assignment8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-13666Synology DiskStation Manager (DSM) Sharing API CRLF injection3.5CNA v3.10.2%2026-09-18Fix
CVE-2026-13639Synology DiskStation Manager (DSM) login logic insufficient entropy9.8CNA v3.10.7%2026-09-18Fix
CVE-2026-13635Synology DiskStation Manager (DSM) Auth API improper output encoding5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-13623Synology DiskStation Manager (DSM) cross-site scripting4.8CNA v3.10.2%2026-09-18Fix
CVE-2026-13471LatePoint WordPress plugin insecure direct object reference4.3CNA v3.10.3%2026-09-18Fix
CVE-2026-12954Mapster WP Maps WordPress plugin arbitrary user Meta write via acf-photo-gallery-groups parameter8.8CNA v3.10.5%2026-09-18Fix
CVE-2026-12739WP Easy Pay WordPress plugin missing authorization authenticated arbitrary post deletion4.3CNA v3.10.3%2026-09-18Fix
CVE-2026-12384Broken access control in TECHIN2B Application8.8CNA v3.10.3%2026-09-18
CVE-2026-12106Auto Upload Images WordPress plugin server-side request forgery6.4CNA v3.10.2%2026-09-18Fix
CVE-2026-11757Reflected XSS in KA Informatics' Bar Association Website6.1CNA v3.10.2%2026-09-18
CVE-2026-11727IBM MQ for HPE NonStop is vulnerable to a denial of service issue8.1CNA v3.10.4%2026-09-18Fix
CVE-2026-11726IBM MQ for HPE NonStop is vulnerable to a denial of service issue8.1CNA v3.10.3%2026-09-18Fix
CVE-2026-11725IBM MQ queue manager is vulnerable to privilege escalation8.8CNA v3.10.4%2026-09-18Fix
CVE-2026-11722IBM WebSphere Application Server and IBM WebSphere Application Server Liberty HTTP request smuggling4.8CNA v3.10.2%2026-09-18Fix
CVE-2026-11716IBM MQ for HPE NonStop is vulnerable to a denial of service attack7.5CNA v3.10.3%2026-09-18Fix
CVE-2026-11711IBM WebSphere Application Server Name Service component deserialization of untrusted data6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-11710IBM WebSphere Application Server is affected by an HTTP request smuggling6.5CNA v3.10.2%2026-09-18Fix
CVE-2026-11549IBM WebSphere Application Server virtual host improper access control6.5CNA v3.10.2%2026-09-18Fix
CVE-2026-11548IBM WebSphere Application Server and IBM WebSphere Application Server Liberty HTTP request smuggling4.8CNA v3.10.2%2026-09-18Fix
CVE-2026-11545IBM WebSphere Application Server is affected by a privilege escalation3.7CNA v3.10.3%2026-09-18Fix
CVE-2026-11540IBM WebSphere Application Server FileTransfer servlet information disclosure5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-11539IBM WebSphere Application Server SOAP/JMX connector authentication bypass5.3CNA v3.10.3%2026-09-18Fix
CVE-2026-11538IBM WebSphere Application Server LTPA token cookies log injection3.7CNA v3.10.2%2026-09-18Fix
CVE-2026-11537IBM WebSphere Application Server FileTransfer servlet information disclosure4.3CNA v3.10.2%2026-09-18Fix
CVE-2026-11381IBM MQ for HPE NonStop is vulnerable to a denial of service issue8.8CNA v3.10.3%2026-09-18Fix
CVE-2026-11378IBM MQ queue manager is vulnerable to remote code execution8.8CNA v3.10.3%2026-09-18Fix
CVE-2026-11375IBM MQ queue manager is vulnerable to remote code execution8.8CNA v3.10.3%2026-09-18Fix
CVE-2026-10858IBM MQ for HPE NonStop is vulnerable to a denial of service attack9.9CNA v3.10.4%2026-09-18Fix
CVE-2026-10853IBM MQ queue manager is vulnerable to remote code execution7.5CNA v3.10.4%2026-09-18Fix
CVE-2026-10841IBM WebSphere Application Server and IBM WebSphere Application Server Liberty HTTP request smuggling4.8CNA v3.10.2%2026-09-18Fix
CVE-2026-10832Red Hat JBoss Enterprise Application Platform resource exhaustion5.9CNA v3.10.4%2026-09-18Fix
CVE-2026-10751IBM MQ Java messaging is vulnerable to remote code execution7.5CNA v3.10.4%2026-09-18Fix
CVE-2026-10747IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing10.0CNA v3.10.6%2026-09-18Fix
CVE-2026-10744IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation7.5CNA v3.10.3%2026-09-18Fix
CVE-2026-10575IBM MQ queue manager is vulnerable to remote code execution8.8CNA v3.10.3%2026-09-18Fix
CVE-2026-10030IBM MQ console is vulnerable to privilege escalation7.1CNA v3.10.2%2026-09-18Fix
CVE-2026-10027IBM MQ queue manager is vulnerable to unauthenticated remote code execution8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-7006Sublime Text 4192/3207 local privilege escalation via Update Staging Mechanism7.0CNA v4.00.1%2026-09-18
CVE-2026-6205Synology DiskStation Manager (DSM) Upload API external control of a file path8.1CNA v3.10.5%2026-09-18Fix
CVE-2026-4036Synology DiskStation Manager (DSM) SQL injection6.5CNA v3.10.4%2026-09-18Fix
CVE-2026-1037IBM Common Licensing web UI cross-site scripting6.1CNA v3.10.2%2026-09-18Fix
CVE-2026-1031IBM Common Licensing web UI cross-site scripting6.1CNA v3.10.2%2026-09-18Fix
CVE-2026-1030IBM Common Licensing error messages vulnerability4.3CNA v3.10.2%2026-09-18Fix
CVE-2026-1029IBM Common Licensing web UI cross-site scripting5.4CNA v3.10.2%2026-09-18Fix
CVE-2026-1025IBM Common Licensing web UI cross-site scripting6.1CNA v3.10.2%2026-09-18Fix
CVE-2026-93454Aureus ERP stored XSS via Payment Term Note5.1CNA v4.00.3%2026-09-17
CVE-2026-93453SOGo Password Reset Token Interception via Origin header8.7CNA v4.00.5%2026-09-17Exploit codeFix
CVE-2026-93452snappy-java buffer overflow in Snappy.compress8.7CNA v4.00.7%2026-09-17
CVE-2026-93451snappy-java buffer overflow via typed uncompress methods6.9CNA v4.00.5%2026-09-17
CVE-2026-93450Go-openapi/swag jsonutils uncontrolled recursion in Ordered JSON Marshal and Unmarshal8.7CNA v4.00.9%2026-09-17Fix
CVE-2026-93436vLLM memory exhaustion via Rejected requests8.7CNA v4.00.8%2026-09-17Fix
CVE-2026-93435redis-parser denial of service via Unbounded Recursion8.7CNA v4.00.7%2026-09-17
CVE-2026-93426SigNoz SQL injection in v5 Query Builder Field Key Names8.4CNA v4.00.5%2026-09-17Fix
CVE-2026-93395MongoDB C Driver integer underflow → heap out-of-bounds read in `bson_new_from_buffer6.9CNA v4.00.4%2026-09-17Fix
CVE-2026-93394MongoDB C Driver libmongoc SCRAM client nonce-validation bypass6.3CNA v4.00.3%2026-09-17Fix
CVE-2026-93393MongoDB C Driver heap overflow9.2CNA v4.00.5%2026-09-17Fix
CVE-2026-93387Google Chrome improper check for exceptional conditions4.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-93386Google Chrome WebAppInstalls UI misrepresentation5.4CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-93385Google Chrome Paint information disclosure6.5CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-93384Google Android Omnibox in Google Chrome on server-side request forgery3.7CISA ADP v3.10.2%2026-09-17Fix
CVE-2026-93383Google Chrome Permissions information disclosure4.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-93382Google Chrome PDFium use-after-free8.8CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-93381Google Chrome PDFium buffer overflow8.8CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-93380Google Chrome FileSystem race condition3.1CISA ADP v3.10.2%2026-09-17Fix
CVE-2026-93379Google Chrome ORB incorrect authorization4.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-93378Google Chrome Storage missing authorization3.1CISA ADP v3.10.2%2026-09-17Fix
CVE-2026-93377Google Chrome V8 type confusion8.8CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-93376Google Chrome DataTransfer out-of-bounds read6.3CISA ADP v3.10.1%2026-09-17Fix
CVE-2026-93375Google Chrome incorrectly resolved name or reference8.1CISA ADP v3.10.1%2026-09-17Fix
CVE-2026-93374Google Android Dawn in Google Chrome on use-after-free9.6CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-93373Google Chrome extensions use-after-free9.6CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-93372Google Android WebGL in Google Chrome on buffer overflow9.6CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-93337NetworkManager-l2tp privilege escalation via pppd plugin injection8.5CNA v4.00.1%2026-09-17Fix
CVE-2026-93309O-RAN-SC SMO OAM VES Collector allocation of resources5.3CNA v4.00.5%2026-09-17
CVE-2026-93308O-RAN-SC SMO OAM VES Collector allocation of resources5.3CNA v4.00.5%2026-09-17
CVE-2026-93307O-RAN-SC SMO OAM VES Collector memory allocation5.3CNA v4.00.5%2026-09-17
CVE-2026-93296MISP Overmind: Stored cross-site scripting via Unescaped Object Names in Statistics Legends8.5CNA v4.00.4%2026-09-17Fix
CVE-2026-93295MISP Background Job argument injection via Console Path Switches enables remote code execution8.7CNA v4.00.6%2026-09-17Fix
CVE-2026-93292SigNoz SQL injection in Trace Funnel Analytics Query Builders8.4CNA v4.00.4%2026-09-17Fix
CVE-2026-93204Linux kernel batman-adv driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93203Linux kernel batman-adv BLA vulnerability7.1CNA v3.10.3%2026-09-17Fix
CVE-2026-93202Linux kernel I3C master device registration deadlock–0.2%2026-09-17Fix
CVE-2026-93201Linux kernel dm-pcache segment id validation vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93200Linux kernel I3C master sysfs attributes use-after-free–0.2%2026-09-17Fix
CVE-2026-93199Linux kernel I3C master duplicate device search vulnerability–0.2%2026-09-17Fix
CVE-2026-93198Linux kernel dm-pcache writeback worker vulnerability–0.2%2026-09-17Fix
CVE-2026-93197Linux kernel memory cgroup LRU accounting vulnerability–0.2%2026-09-17Fix
CVE-2026-93196Linux kernel virtio_pmem driver use-after-free8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-93195Linux kernel synopsys dw-dp DRM bridge use-after-free–0.2%2026-09-17Fix
CVE-2026-93194Linux kernel Rockchip dw_dp DisplayPort driver use-after-free–0.2%2026-09-17Fix
CVE-2026-93193Linux kernel rockchip analogix_dp driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93192Linux kernel v3d GPU driver vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93191Linux kernel Smack message queue security hook vulnerability–0.2%2026-09-17Fix
CVE-2026-93190Linux kernel cros_ec_typec driver vulnerability8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-93189Linux kernel HID core hidraw interface use-after-free8.8CNA v3.10.3%2026-09-17Fix
CVE-2026-93188Linux kernel Roccat Kone HID driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93187Linux kernel SOF IPC4 topology driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93186Linux kernel CXL mailbox driver denial of service–0.2%2026-09-17Fix
CVE-2026-93185Linux kernel rt700 SoundWire codec driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93184Linux kernel fsl_audmix ASoC driver denial of service–0.2%2026-09-17Fix
CVE-2026-93183Linux kernel lima GPU driver denial of service–0.2%2026-09-17Fix
CVE-2026-93182Linux kernel CFS group scheduling load tracking divide-by-zero–0.2%2026-09-17Fix
CVE-2026-93181Linux kernel perf x86 intel uncore vulnerability–0.2%2026-09-17Fix
CVE-2026-93180Linux kernel Panthor GPU driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-93179Linux kernel AMD powerplay VoltageObjectInfo table out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-93178Linux kernel AMDGPU SMU7 voltage lookup vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-93177Linux kernel AMDGPU Vega10 voltage lookup vulnerability7.3CNA v3.10.2%2026-09-17Fix
CVE-2026-93176Linux kernel AMD display plane reset vulnerability7.0CNA v3.10.2%2026-09-17Fix
CVE-2026-93175Linux kernel AMD display CRTC reset vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93174Linux kernel BPF per-CPU map value copy vulnerability–0.2%2026-09-17Fix
CVE-2026-93173Linux kernel BPF sleepable LSM hooks vulnerability–0.2%2026-09-17Fix
CVE-2026-93172Linux kernel memory hotplug initialization vulnerability–0.2%2026-09-17Fix
CVE-2026-93171In the Linux kernel, the following vulnerability has been resolved: leds: lp5860: Fix a potential double-unlock In lp5860_device_init(), if lp5860_init_dt() fails, an already unlocked mutex is unlocked another time. Slightly rework how the lock is taken/released to avoid this potential double unl–0.2%2026-09-17Fix
CVE-2026-93170Linux kernel Xilinx DMA AXIDMA and MCDMA interrupt handlers race condition7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93169Linux kernel ZynqMP DMA driver race condition–0.2%2026-09-17Fix
CVE-2026-93168Linux kernel Xilinx DMA poll timeout handler denial of service–0.2%2026-09-17Fix
CVE-2026-93167Linux kernel C-SKY syscall trace path vulnerability–0.2%2026-09-17Fix
CVE-2026-93166Linux kernel rtw89 Wi-Fi driver debug logging vulnerability–0.2%2026-09-17Fix
CVE-2026-93165Linux kernel Chrome EC sensorhub driver vulnerability7.7CNA v3.10.2%2026-09-17Fix
CVE-2026-93164Linux kernel x86 uprobes optimizer vulnerability–0.2%2026-09-17Fix
CVE-2026-93163Linux kernel hwrng core registration use-after-free–0.2%2026-09-17Fix
CVE-2026-93162Linux kernel QAT SR-IOV re-enable path vulnerability–0.2%2026-09-17Fix
CVE-2026-93161Linux kernel QAT AES key schedule vulnerability–0.2%2026-09-17Fix
CVE-2026-93160Linux kernel Atmel ECC ECDH driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93159Linux kernel Atmel SHA204A hwrng driver information disclosure–0.2%2026-09-17Fix
CVE-2026-93158Linux kernel SA2UL crypto driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93157Linux kernel Xilinx TRNG driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93156Linux kernel RK3288 crypto driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93155Linux kernel Keembay crypto driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93154Linux kernel irdma driver vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93153Linux kernel bng_re RDMA driver denial of service–0.2%2026-09-17Fix
CVE-2026-93152Linux kernel nvme-apple driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93151Linux kernel NVMe target RDMA transport memory leak7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-93150Linux kernel cpuset deadline task counter race condition–0.2%2026-09-17Fix
CVE-2026-93149Linux kernel mac80211_hwsim Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93148Linux kernel BPF BTF pointer bounds checking vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93147Linux kernel s390 BPF vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93146Linux kernel time namespace offset handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93145Linux kernel qcom GDSC clock driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93144Linux kernel BPF BTF pointer access checks vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93143Linux kernel IPU7 media driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93142Linux kernel R-Car thermal driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93141Linux kernel r8a66597 USB gadget driver double free–0.2%2026-09-17Fix
CVE-2026-93140Linux kernel UDF filesystem LVID handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93139Linux kernel AMDGPU MES driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-93138Linux kernel BPF vmlinux BTF handling race condition7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93137Linux kernel BPF find_vma helper use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93136Linux kernel MHI endpoint device driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93135Linux kernel BPF JIT helper inlining vulnerability–0.2%2026-09-17Fix
CVE-2026-93134Linux kernel printk console handling use-after-free–0.2%2026-09-17Fix
CVE-2026-93133Linux kernel RISC-V ACPI PRT dependency handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93132Linux kernel RISC-V ACPI PRT dependency handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93131Linux kernel dell-privacy driver race condition–0.2%2026-09-17Fix
CVE-2026-93130Linux kernel dell-wmi-base module load resource leak–0.2%2026-09-17Fix
CVE-2026-93129Linux kernel dell-wmi-base key event handling out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-93128Linux kernel lg-laptop keyboard backlight vulnerability–0.2%2026-09-17Fix
CVE-2026-93127Linux kernel BPF verifier stack fills out-of-bounds access7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93126Linux kernel qcom_q6v5_adsp carveout mapping vulnerability–0.2%2026-09-17Fix
CVE-2026-93125Linux kernel BPF kfunc buffer size check vulnerability7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-93124Linux kernel asus-wireless driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93123Linux kernel qcom-geni serial DMA vulnerability–0.2%2026-09-17Fix
CVE-2026-93122Linux kernel UAC configfs rate list vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93121Linux kernel f_fs dmabuf transfer vulnerability7.0CNA v3.10.2%2026-09-17Fix
CVE-2026-93120Linux kernel configfs qw_sign attribute out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-93119Linux kernel ljca GPIO enumeration vulnerability–0.2%2026-09-17Fix
CVE-2026-93118Linux kernel aspeed_udc endpoint DMA buffer vulnerability–0.2%2026-09-17Fix
CVE-2026-93117Linux kernel USB dynamic ID removal use-after-free–0.2%2026-09-17Fix
CVE-2026-93116Linux kernel asus-wmi driver resource leak7.0CNA v3.10.2%2026-09-17Fix
CVE-2026-93115Linux kernel mlxbf-pmc driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-93114Linux kernel Surface ACPI notify driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-93113Linux kernel camcc-sc8280xp clock driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93112Linux kernel BPF cpumask kfuncs vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-93111Linux kernel BPF tracing_multi trampoline vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93110Linux kernel ib_core GID cache vulnerability–0.2%2026-09-17Fix
CVE-2026-93109Linux kernel mlx5 DevX event handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93108Linux kernel IPoIB driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93107Linux kernel RDMA rxe responder race condition8.2CNA v3.10.5%2026-09-17Fix
CVE-2026-93106Linux kernel crash dump keyring restore use-after-free–0.2%2026-09-17Fix
CVE-2026-93105Linux kernel ESP scatterlist fragment page reference handling vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93104Linux kernel rvt IB device port allocation use-after-free–0.2%2026-09-17Fix
CVE-2026-93103Linux kernel hfi1 device unit table vulnerability–0.2%2026-09-17Fix
CVE-2026-93102Linux kernel hfi1 RX data allocation vulnerability–0.2%2026-09-17Fix
CVE-2026-93101Linux kernel V4L2 async sub-device unregistration vulnerability–0.2%2026-09-17Fix
CVE-2026-93100Linux kernel resctrl group teardown use-after-free–0.2%2026-09-17Fix
CVE-2026-93099Linux kernel resctrl monitor domain workers use-after-free–0.2%2026-09-17Fix
CVE-2026-93098Linux kernel rpmsg glink endpoint destroy deadlock–0.2%2026-09-17Fix
CVE-2026-93097Linux kernel CXL poison list scan denial of service–0.2%2026-09-17Fix
CVE-2026-93096Linux kernel CXL Get/Set Feature transfer vulnerability–0.2%2026-09-17Fix
CVE-2026-93095Linux kernel HFS+ catalog thread record handling vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93094Linux kernel ath12k AP vdev rollback vulnerability–0.2%2026-09-17Fix
CVE-2026-93093Linux kernel SCMI transport channel setup vulnerability–0.2%2026-09-17Fix
CVE-2026-93092Linux kernel SCMI device notifier teardown race condition–0.2%2026-09-17Fix
CVE-2026-93091Linux kernel SCMI notification teardown vulnerability–0.2%2026-09-17Fix
CVE-2026-93090Linux kernel SCMI channel setup failure handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93089Linux kernel SCMI transport channel teardown vulnerability–0.2%2026-09-17Fix
CVE-2026-93086Linux kernel SCMI channel cleanup vulnerability–0.2%2026-09-17Fix
CVE-2026-93085Linux kernel SCMI devicetree protocol ID parsing vulnerability–0.2%2026-09-17Fix
CVE-2026-93084Linux kernel SCMI protocol driver bind handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93083Linux kernel SCMI mailbox channel setup vulnerability–0.2%2026-09-17Fix
CVE-2026-93082Linux kernel SCMI mailbox channel setup vulnerability–0.2%2026-09-17Fix
CVE-2026-93081Linux kernel SCMI device destroy path vulnerability–0.2%2026-09-17Fix
CVE-2026-93080Linux kernel SCMI transport device lookup vulnerability–0.2%2026-09-17Fix
CVE-2026-93079Linux kernel CXL Get Feature ioctl handler out-of-bounds write7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93078Linux kernel CXL Set Feature command handler vulnerability–0.2%2026-09-17Fix
CVE-2026-93077Linux kernel CXL Get Feature command handler vulnerability–0.2%2026-09-17Fix
CVE-2026-93076Linux kernel static DAX pgmap binding vulnerability–0.2%2026-09-17Fix
CVE-2026-93075Linux kernel static DAX device pgmap teardown vulnerability–0.2%2026-09-17Fix
CVE-2026-93074Linux kernel fsdev DAX direct access mapping vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93073Linux kernel DAX holder failure notification race condition–0.2%2026-09-17Fix
CVE-2026-93072Linux kernel Renesas IRQC interrupt chip driver use-after-free–0.2%2026-09-17Fix
CVE-2026-93071Linux kernel bcm2835-unicam V4L2 async notifier memory leak–0.2%2026-09-17Fix
CVE-2026-93070Linux kernel ipu6 auxiliary device initialization vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93069Linux kernel OPP core cleanup path use-after-free–0.2%2026-09-17Fix
CVE-2026-93068Linux kernel amdgpu display I2C adapter teardown null pointer dereference–0.2%2026-09-17Fix
CVE-2026-93067Linux kernel tc358767 DRM bridge driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93066Linux kernel large-page collapse path use-after-free–0.2%2026-09-17Fix
CVE-2026-93065Linux kernel iwlwifi error log dump routine vulnerability–0.2%2026-09-17Fix
CVE-2026-93064Linux kernel iwlwifi TXF key sanitizer off-by-one error–0.2%2026-09-17Fix
CVE-2026-93063Linux kernel iwlwifi MEI SAP message handler buffer overflow8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-93062Linux kernel iwlwifi debug TLV fragment allocator division by zero–0.2%2026-09-17Fix
CVE-2026-93061Linux kernel host1x debug output helpers vulnerability–0.2%2026-09-17Fix
CVE-2026-93060Linux kernel Adreno a6xx GPU driver use-after-free–0.2%2026-09-17Fix
CVE-2026-93059Linux kernel MSM GPU hang recovery worker memory leak–0.2%2026-09-17Fix
CVE-2026-93058Linux kernel MSM GPU ringbuffer scheduler improper initialization–0.2%2026-09-17Fix
CVE-2026-93057Linux kernel UFS host controller driver deadlock–0.2%2026-09-17Fix
CVE-2026-93056Linux kernel UAC1 legacy USB gadget driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-93055Linux kernel UDF symlink parser out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-93054Linux kernel UIO driver vulnerability7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-93053Linux kernel speakup keyhelp out-of-bounds write–0.2%2026-09-17Fix
CVE-2026-93052Linux kernel bcm-vk accelerator driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93051Linux kernel ad525x_dpot driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93050Linux kernel ipoctal tty driver use-after-free–0.2%2026-09-17Fix
CVE-2026-93049Linux kernel mtdswap block driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93048Linux kernel MTD partition handling vulnerability–0.2%2026-09-17Fix
CVE-2026-93047Linux kernel v3d GPU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93046Linux kernel software node reference lookup vulnerability7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-93045Linux kernel BPF arena allocator vulnerability7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-93044Linux kernel BPF interpreter denial of service–0.2%2026-09-17Fix
CVE-2026-93043Linux kernel BPF interpreter denial of service–0.2%2026-09-17Fix
CVE-2026-93042Linux kernel dw-edma DMA driver vulnerability8.8CNA v3.10.4%2026-09-17Fix
CVE-2026-93041In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize abort state updates dw_edma_abort_interrupt() drops vc.lock before changing request and status. issue_pending() can acquire the lock in that small window, observe the old busy state, and skip starting–0.2%2026-09-17Fix
CVE-2026-93040In the Linux kernel, the following vulnerability has been resolved: dmaengine: dw-edma: Serialize channel state checks pause() and resume() read and update channel state without holding vc.lock, while the interrupt handlers update the same state under it. Take the same lock around those state chec–0.2%2026-09-17Fix
CVE-2026-93039Linux kernel meson ASoC driver use-after-free7.4CNA v3.10.2%2026-09-17Fix
CVE-2026-93038Linux kernel ad5686 DAC driver vulnerability–0.2%2026-09-17Fix
CVE-2026-93037Linux kernel hfi1 RDMA driver improper error handling7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-93015BlueKitchen BTstack A2DP SEP Discovery out-of-bounds write7.0CNA v4.00.4%2026-09-17
CVE-2026-93014RosarioSIS path traversal in file deletion via filename parameter7.1CNA v4.00.5%2026-09-17Fix
CVE-2026-93013RAGFlow Tenant Import endpoints path traversal5.3CNA v4.00.5%2026-09-17
CVE-2026-92993Dromara mayfly-go Machine script feature machine_script.go RunMachineScript os command injection5.3CNA v4.01.5%2026-09-17
CVE-2026-92992Dromara mayfly-go AI Assistant missing authorization5.3CNA v4.00.4%2026-09-17
CVE-2026-92987roxmltree denial of service via Quadratic Parsing8.7CNA v4.00.6%2026-09-17Fix
CVE-2026-92986SiYuan cross-site scripting via Document Title8.6CNA v4.00.8%2026-09-17Fix
CVE-2026-92985SiYuan cross-site scripting via Bookmark Labels8.6CNA v4.00.8%2026-09-17Fix
CVE-2026-92984HUBzero CMS session fixation via Query-String Session Identifier8.5CNA v4.00.5%2026-09-17
CVE-2026-92983InternLM LMDeploy memory exhaustion via Session ID Mismatch8.7CNA v4.00.7%2026-09-17
CVE-2026-92980HortusFox-Web remote code execution via Import/Export8.6CNA v4.01.0%2026-09-17Fix
CVE-2026-92973ansi2html cross-site scripting via OSC 85.3CNA v4.00.4%2026-09-17Fix
CVE-2026-92972SGLang Unauthenticated Route Poisoning via PUT endpoint8.8CNA v4.00.5%2026-09-17
CVE-2026-92971InternLM LMDeploy Assertion denial of service8.7CNA v4.00.7%2026-09-17
CVE-2026-92970HUBzero CMS path traversal via file upload8.7CNA v4.00.8%2026-09-17
CVE-2026-92963vm2 information disclosure via Internal State6.9CNA v4.00.3%2026-09-17Fix
CVE-2026-92962vm2 Defense Invariant Violation via setup-sandbox.js2.1CNA v4.00.2%2026-09-17Fix
CVE-2026-92961vm2 memory exhaustion DoS via bufferAllocLimit Bypass8.7CNA v4.00.5%2026-09-17Fix
CVE-2026-92960vm2 Process-wide State Exposure via os and DNS10.0CNA v4.00.5%2026-09-17Fix
CVE-2026-92959vm2 allowAsync Bypass via Promise Thenable7.1CNA v4.00.4%2026-09-17Fix
CVE-2026-92958vm2 Denylist Bypass via fs/promises8.4CNA v4.00.4%2026-09-17Fix
CVE-2026-92957vm2 NodeVM Builtin Deny-List Bypass via node: Prefix9.4CNA v4.00.5%2026-09-17Fix
CVE-2026-92956vm2 sandbox escape via WebAssembly.compileStreaming10.0CNA v4.00.6%2026-09-17Fix
CVE-2026-92955vm2 sandbox escape via NodeVM10.0CNA v4.00.7%2026-09-17Fix
CVE-2026-92954vm2 denial of service via Host Promise9.2CNA v4.00.5%2026-09-17Fix
CVE-2026-92953vm2 prototype pollution via TypedArray9.3CNA v4.00.5%2026-09-17Fix
CVE-2026-92952vm2 Sandbox Symbol Filtering Bypass8.9CNA v4.00.5%2026-09-17Fix
CVE-2026-92951vm2 Module Allowlist Bypass via Custom Resolver9.4CNA v4.00.5%2026-09-17Fix
CVE-2026-92950vm2 sandbox escape via CLI require9.3CNA v4.00.2%2026-09-17Fix
CVE-2026-92949vm2 sandbox bypass via Accessor Descriptor6.3CNA v4.00.3%2026-09-17Fix
CVE-2026-92948vm2 sandbox escape via node:test9.4CNA v4.00.7%2026-09-17Fix
CVE-2026-92947vm2 Memory Disclosure via Buffer Pool10.0CNA v4.00.5%2026-09-17Fix
CVE-2026-92946vm2 remote code execution via require.external10.0CNA v4.00.9%2026-09-17Fix
CVE-2026-92945vm2 Module Allowlist Bypass via Prefix Matching2.3CNA v4.00.3%2026-09-17Fix
CVE-2026-92944vm2 sandbox escape via Promise Protector9.3CNA v4.00.8%2026-09-17Fix
CVE-2026-92943Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python9.2CNA v4.00.4%2026-09-17Fix
CVE-2026-92942vm2 Timeout Bypass via FinalizationRegistry8.7CNA v4.00.5%2026-09-17Fix
CVE-2026-92941vm2 TLS Trust Store Manipulation10.0CNA v4.00.3%2026-09-17Fix
CVE-2026-92940vm2 HTTPS credential exposure via globalAgent10.0CNA v4.00.5%2026-09-17Fix
CVE-2026-92939vm2 Native code execution via crypto.setEngine9.4CNA v4.00.6%2026-09-17Fix
CVE-2026-92938vm2 remote code execution via node:sqlite9.4CNA v4.00.6%2026-09-17Fix
CVE-2026-92937vm2 remote code execution via Promise call/apply10.0CNA v4.01.0%2026-09-17Fix
CVE-2026-92936vm2 information disclosure via Error Stack6.9CNA v4.00.5%2026-09-17Fix
CVE-2026-92935vm2 NodeVM remote code execution via Array-Shaped Require9.5CNA v4.00.7%2026-09-17Fix
CVE-2026-92934vm2 sandbox escape RCE via AggregateError9.5CNA v4.00.8%2026-09-17Fix
CVE-2026-92933vm2 information disclosure via util.getCallSites6.9CNA v4.00.4%2026-09-17Fix
CVE-2026-92932MISP Project sachertortephp Xml::build method server-side request forgery5.1CNA v4.00.4%2026-09-17
CVE-2026-92927SourceCodester Drug Recommendation System drug_recommendor.sql information disclosure6.9CNA v4.00.5%2026-09-17
CVE-2026-92926code-projects Matrimonial System partner_preference.php writepartnerprefs SQL injection6.9CNA v4.00.4%2026-09-17
CVE-2026-92925Red Hat Enterprise Linux 9 redis: Redis: Out-of-bounds read via crafted cluster bus packets7.1CNA v3.10.4%2026-09-17Fix
CVE-2026-92921admin3 weak password Hashing via Single-Round MD56.9CNA v4.00.3%2026-09-17
CVE-2026-92920admin3 Session not Invalidated when a User Account is Disabled5.3CNA v4.00.3%2026-09-17
CVE-2026-92919admin3 arbitrary file write via path traversal in Storage Upload Filename7.2CNA v4.00.6%2026-09-17
CVE-2026-92918admin3 Session token disclosure via Audit Log8.7CNA v4.00.6%2026-09-17
CVE-2026-92917Grav Configuration Disclosure via print_r8.7CNA v4.00.5%2026-09-17Fix
CVE-2026-92916Grav Unauthenticated information disclosure via Clockwork8.7CNA v4.00.5%2026-09-17Fix
CVE-2026-92915WWBN AVideo userVerifyEmail.php unauthenticated access Control6.9CNA v4.00.4%2026-09-17
CVE-2026-92914AVideo LoginControl PGP Second Factor authentication bypass8.6CNA v4.00.5%2026-09-17Fix
CVE-2026-92913AVideo Weak PRNG activation code authentication bypass9.1CNA v4.00.5%2026-09-17
CVE-2026-92912AVideo Cryptographically Weak PRNG via uniqid Stream Key8.3CNA v4.00.3%2026-09-17
CVE-2026-92904Red Hat Satellite foreman_remote_execution job invocation controller incorrect authorization4.3CNA v3.10.3%2026-09-17
CVE-2026-92903Snowflake CLI improper input validation8.2CNA v3.10.2%2026-09-17Fix
CVE-2026-92894Red Hat Satellite foreman_ansible override values API incorrect authorization4.3CNA v3.10.3%2026-09-17
CVE-2026-92893Red Hat Satellite foreman_ansible inventory API incorrect authorization4.3CNA v3.10.3%2026-09-17
CVE-2026-92881vgmstream AWB parser awb.c init_vgmstream_awb_memory divide by zero5.3CNA v4.00.6%2026-09-17
CVE-2026-92880vgmstream EA SCHl parser vadpcm_decoder.c vadpcm_read_coefs_be out-of-bounds write5.3CNA v4.00.4%2026-09-17
CVE-2026-92879vgmstream mus_acm.c parse_mus resource consumption5.3CNA v4.00.6%2026-09-17
CVE-2026-92860rcourtman Pulse Quick Security Setup quick-setup fmt.Sprintf input validation9.4CNA v4.00.9%2026-09-17Fix
CVE-2026-92839Canva Desktop deeplink handler vulnerability4.3CNA v3.10.3%2026-09-17Fix
CVE-2026-92838GeoVision GV-Remote E-Map dll hijacking7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-92758MongoDB Entity Framework Core Provider logs may collect sensitive information5.7CNA v4.00.2%2026-09-17Fix
CVE-2026-92757MongoDB Entity Framework Core Provider connection string parser missing encryption6.8CNA v4.00.1%2026-09-17Fix
CVE-2026-92756MongoDB Entity Framework Core Provider combining encryption settings may disable encryption6.8CNA v4.00.1%2026-09-17Fix
CVE-2026-92611Eclipse Ankaios incorrect authorization4.8CNA v4.00.3%2026-09-17Fix
CVE-2026-92525Linux kernel RDMA rxe driver out-of-bounds read7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-92524In the Linux kernel, the following vulnerability has been resolved: irqchip/gic-v3-its: Prevent leak in its_vpe_irq_domain_alloc() When its_irq_gic_domain_alloc() fails, the following its_vpe_irq_domain_free() fails to invoke its_vep_teardown() for the corresponding interrupt, which leaks the reso–0.2%2026-09-17Fix
CVE-2026-92523Linux kernel RDMA nldev vulnerability–0.2%2026-09-17Fix
CVE-2026-92522Linux kernel ACPI MADT IOAPIC parser vulnerability7.3CNA v3.10.1%2026-09-17Fix
CVE-2026-92521Linux kernel ACPI PCI root bridge vulnerability–0.2%2026-09-17Fix
CVE-2026-92520Linux kernel BPF queue and stack map helpers vulnerability–0.2%2026-09-17Fix
CVE-2026-92519Linux kernel RISC-V BPF JIT compiler memory leak–0.2%2026-09-17Fix
CVE-2026-92518Linux kernel bpf subsystem vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-92517Linux kernel bpf RISC-V subsystem vulnerability–0.2%2026-09-17Fix
CVE-2026-92516Linux kernel BPF resilient spin lock verifier check vulnerability–0.2%2026-09-17Fix
CVE-2026-92515Linux kernel BPF BTF field parser vulnerability–0.2%2026-09-17Fix
CVE-2026-92514Linux kernel erdma completion event queue tasklet use-after-free–0.2%2026-09-17Fix
CVE-2026-92513Linux kernel mana_ib queue pair table use-after-free–0.2%2026-09-17Fix
CVE-2026-92512Linux kernel RDMA queue pair query use-after-free–0.2%2026-09-17Fix
CVE-2026-92511Linux kernel RDMA core use-after-free7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-92510Linux kernel RDMA core use-after-free7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-92509Linux kernel RDMA counter release use-after-free–0.2%2026-09-17Fix
CVE-2026-92508Linux kernel RDMA core use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-92507Linux kernel RDMA protection domain deallocation use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-92506Linux kernel SCMI device removal vulnerability–0.2%2026-09-17Fix
CVE-2026-92505Linux kernel AMD IOMMU debugfs vulnerability–0.2%2026-09-17Fix
CVE-2026-92504Linux kernel int3400 thermal driver vulnerability7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-92503Linux kernel ext4 extended attribute inode cache deadlock–0.2%2026-09-17Fix
CVE-2026-92502Linux kernel ext4 writeback vulnerability–0.2%2026-09-17Fix
CVE-2026-92501Linux kernel ext4 direct I/O write fallback race condition–0.2%2026-09-17Fix
CVE-2026-92500Linux kernel ext4 inline data write race condition–0.2%2026-09-17Fix
CVE-2026-92499Linux kernel ext4 readdir use-after-free–0.2%2026-09-17Fix
CVE-2026-92498Linux kernel ath6kl Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-92497Linux kernel ath12k WMI receive handler out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-92496Linux kernel ath11k WMI TLV receive handler out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-92495Linux kernel bnxt_re doorbell and toggle page mmap vulnerability–0.2%2026-09-17Fix
CVE-2026-92494Linux kernel ext4 orphan file initialization memory leak–0.2%2026-09-17Fix
CVE-2026-92493Linux kernel amd-pstate unit test module null pointer dereference–0.2%2026-09-17Fix
CVE-2026-92492Linux kernel amd-pstate dynamic EPP callbacks null pointer dereference–0.2%2026-09-17Fix
CVE-2026-92491Linux kernel arm_scmi protocol table registration vulnerability–0.2%2026-09-17Fix
CVE-2026-92490Linux kernel arm_scmi driver registration vulnerability–0.2%2026-09-17Fix
CVE-2026-92489Linux kernel XFRM device direct output path vulnerability9.8CNA v3.10.5%2026-09-17Fix
CVE-2026-92488Linux kernel erdma resource teardown memory leak7.0CNA v3.10.2%2026-09-17Fix
CVE-2026-92487Linux kernel exFAT shared writable mapping race condition–0.2%2026-09-17Fix
CVE-2026-92486Linux kernel BPF task work callback vulnerability–0.2%2026-09-17Fix
CVE-2026-92485Linux kernel BPF trampoline tail-call handling vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-92484Linux kernel CXL region switch decoder lookup use-after-free–0.2%2026-09-17Fix
CVE-2026-92483Linux kernel live update FLB retrieval vulnerability–0.2%2026-09-17Fix
CVE-2026-92482Linux kernel MediaTek GPIO chip driver use-after-free–0.2%2026-09-17Fix
CVE-2026-92481Linux kernel MediaTek EINT driver vulnerability–0.2%2026-09-17Fix
CVE-2026-92480Linux kernel UFS string descriptor parsing vulnerability–0.2%2026-09-17Fix
CVE-2026-92479Linux kernel UFS single-doorbell completion path vulnerability–0.2%2026-09-17Fix
CVE-2026-92478Linux kernel UFS TX equalization vulnerability–0.2%2026-09-17Fix
CVE-2026-92477Linux kernel UFS debugfs error injection interface vulnerability–0.2%2026-09-17Fix
CVE-2026-92476Linux kernel Keembay OCS AES driver vulnerability–0.2%2026-09-17Fix
CVE-2026-92230Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching7.5CISA ADP v3.10.5%2026-09-17Fix
CVE-2026-91039team-alembic ash_authentication authentication bypass by spoofing9.1CNA v4.00.7%2026-09-17Fix
CVE-2026-91019Event Booking Manager for WooCommerce WordPress plugin Payment Gateway credential disclosure4.9CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-91017Robokassa payment gateway for WooCommerce insufficient verification of data authenticity3.7CNA v3.10.1%2026-09-17Fix
CVE-2026-91016Motors WordPress plugin unauthenticated Draft/Private Listing disclosure5.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-91015Master Addons for Elementor popup deactivation action missing authorization5.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-91014Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin reflected XSS7.1CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-91011EWWW Image Optimizer WordPress plugin stored XSS6.8CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-91010Invisible Anti-Spam and CAPTCHA WordPress plugin Subscriber+ arbitrary form Submission deletion4.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-91009Active Products Tables for WooCommerce attachment title update action missing authorization4.3CISA ADP v3.10.1%2026-09-17Fix
CVE-2026-91008Event Booking Manager for WooCommerce booking confirmation panel insecure direct object reference3.7CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-90997Keycloak-services: Keycloak: Replay protection bypass leads to unauthorized access7.4CNA v3.10.4%2026-09-17
CVE-2026-90986Visitor Traffic Real Time Statistics Pro WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-17Fix
CVE-2026-90982@fastify/static vulnerable to route guard bypass via path case-folding5.3CNA v3.10.6%2026-09-17Fix
CVE-2026-90923Autopay payment callback signature verification incorrect authorization6.5CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-90922Paid Membership Subscriptions PayPal Standard payment verification improper access control5.3CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-90887WP Inventory Manager WordPress plugin cross-site scripting (XSS)7.1CNA v3.10.3%2026-09-17Fix
CVE-2026-90823FatPipe Networks MPVPN stack-based buffer overflow9.8CNA v3.10.7%2026-09-17
CVE-2026-90822FatPipe Networks MPVPN OS command injection9.8CNA v3.11.4%2026-09-17
CVE-2026-90435Linux kernel mlx5 RDMA driver integer overflow7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-90434Linux kernel isofs zisofs block pointer table vulnerability–0.2%2026-09-17Fix
CVE-2026-90433Linux kernel oc-tiny SPI driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90432Linux kernel sched_ext hardlockup handler denial of service–0.2%2026-09-17Fix
CVE-2026-90431Linux kernel remoteproc crash handler use-after-free–0.2%2026-09-17Fix
CVE-2026-90430Linux kernel Tegra241 CMDQV IOMMU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90429Linux kernel Tegra241 CMDQV IOMMU driver vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90428Linux kernel Tegra241 CMDQV IOMMU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90427Linux kernel Tegra241 CMDQV IOMMU driver vulnerability7.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90426Linux kernel Tegra241 CMDQV IOMMU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90425Linux kernel Tegra241 CMDQV IOMMU driver vulnerability8.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90424Linux kernel Tegra241 CMDQV IOMMU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90423Linux kernel RXE ODP memory region use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90422Linux kernel mediatek pllfh clock driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90421Linux kernel PCI dynamic ID matching use-after-free–0.2%2026-09-17Fix
CVE-2026-90420Linux kernel nilfs2 segment cleaner denial of service–0.2%2026-09-17Fix
CVE-2026-90419Linux kernel nilfs2 super root block parsing out-of-bounds read7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90418Linux kernel nilfs2 dirty page copying vulnerability–0.2%2026-09-17Fix
CVE-2026-90417Linux kernel cxgb4 RDMA TPT entry write double free–0.2%2026-09-17Fix
CVE-2026-90416Linux kernel mlx5 RDMA cc_params debugfs out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-90415Linux kernel cxgb4 RDMA STAG allocation vulnerability–0.2%2026-09-17Fix
CVE-2026-90414Linux kernel IB isert driver vulnerability9.1CNA v3.10.5%2026-09-17Fix
CVE-2026-90413Linux kernel IB isert driver vulnerability9.1CNA v3.10.8%2026-09-17Fix
CVE-2026-90412Linux kernel NVMe target RMI log page vulnerability–0.2%2026-09-17Fix
CVE-2026-90411Linux kernel nvme-fc DMA mapping vulnerability–0.2%2026-09-17Fix
CVE-2026-90410Linux kernel DaVinci SPI driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90409Linux kernel Panthor GPU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90408Linux kernel ath12k Wi-Fi driver out-of-bounds read7.7CNA v3.10.2%2026-09-17Fix
CVE-2026-90407Linux kernel ath11k Wi-Fi driver out-of-bounds read7.7CNA v3.10.2%2026-09-17Fix
CVE-2026-90406Linux kernel qcom iris media driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90405Linux kernel STM32 DCMI driver probe null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90404Linux kernel cros_ec_debugfs panic notifier vulnerability–0.2%2026-09-17Fix
CVE-2026-90403Linux kernel rtlwifi PCI probe vulnerability7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-90402Linux kernel MHI controller registration vulnerability7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-90401Linux kernel MD RAID1/10/456 vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90400Linux kernel md subsystem race condition–0.2%2026-09-17Fix
CVE-2026-90399Linux kernel ath12k Wi-Fi driver vulnerability8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90398Linux kernel ath11k Wi-Fi driver vulnerability8.4CNA v3.10.1%2026-09-17Fix
CVE-2026-90397Linux kernel scm null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90396In the Linux kernel, the following vulnerability has been resolved: block: fix dio leak on metadata mapping error A failed integrity mapping holds a dio reference, so we need to go through the full bio ending in case there were previously submitted bio's in the sequence.–0.2%2026-09-17Fix
CVE-2026-90395Linux kernel isp1704 charger driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90394Linux kernel sc2731 charger driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90393Linux kernel BPF netns link update use-after-free–0.2%2026-09-17Fix
CVE-2026-90392Linux kernel BPF link info reporting use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90391Linux kernel HMM test driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90390Linux kernel md bitmap backlog_store vulnerability–0.2%2026-09-17Fix
CVE-2026-90389Linux kernel md memalloc_noio scoping vulnerability–0.2%2026-09-17Fix
CVE-2026-90388Linux kernel IOMMU DMA atomic pool allocation vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90387Linux kernel swiotlb dynamic pools vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90386Linux kernel i3c dw master driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90385Linux kernel RAID1 serialization pool vulnerability–0.2%2026-09-17Fix
CVE-2026-90384Linux kernel iomap folio batch handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90383Linux kernel sgi-gru driver vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90382Linux kernel mt76x02 Wi-Fi driver denial of service–0.2%2026-09-17Fix
CVE-2026-90381Linux kernel mt76 channel context switching vulnerability8.8CNA v3.10.4%2026-09-17Fix
CVE-2026-90380Linux kernel mt792x Wi-Fi driver use-after-free8.8CNA v3.10.3%2026-09-17Fix
CVE-2026-90379Linux kernel mt7921 Wi-Fi driver denial of service8.8CNA v3.10.4%2026-09-17Fix
CVE-2026-90378Linux kernel mt792x SDIO TX path memory leak–0.2%2026-09-17Fix
CVE-2026-90377Linux kernel mt76 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90376Linux kernel mt7996 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90375Linux kernel mt76 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90374Linux kernel mt7996 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90373Linux kernel mt7915 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90372Linux kernel mt7915 Wi-Fi driver integer underflow7.1CNA v3.10.4%2026-09-17Fix
CVE-2026-90371Linux kernel mt76 Wi-Fi driver race condition8.8CNA v3.10.4%2026-09-17Fix
CVE-2026-90370Linux kernel mt7996 Wi-Fi driver denial of service–0.2%2026-09-17Fix
CVE-2026-90369Linux kernel mt76 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90368Linux kernel mt7915 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90367Linux kernel mt7996 Wi-Fi driver race condition8.8CNA v3.10.4%2026-09-17Fix
CVE-2026-90366Linux kernel mt7996 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90365Linux kernel mt76 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90364Linux kernel ACPI processor driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90363Linux kernel MSM display driver use-after-free–0.2%2026-09-17Fix
CVE-2026-90362Linux kernel MSM DSI display driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90361Linux kernel ath11k Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90360Linux kernel regulator core race condition–0.2%2026-09-17Fix
CVE-2026-90359Linux kernel BPF trampoline vulnerability–0.2%2026-09-17Fix
CVE-2026-90358Linux kernel x86 BPF trampoline vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90357Linux kernel mt7915 Wi-Fi driver vulnerability8.8CNA v3.10.3%2026-09-17Fix
CVE-2026-90356Linux kernel mt7996 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90355Linux kernel mt7996 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90354Linux kernel mt7915 Wi-Fi driver memory leak–0.2%2026-09-17Fix
CVE-2026-90353Linux kernel mt7915 Wi-Fi driver use-after-free7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-90352Linux kernel mt7915 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90351Linux kernel mt7996 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90350Linux kernel mt76 Wi-Fi driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90349Linux kernel mt76 mt7996 Wi-Fi driver link handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90348Linux kernel ath10k SNOC firmware ramdump denial of service–0.2%2026-09-17Fix
CVE-2026-90347Linux kernel arm64 ptrace syscall entry synchronization vulnerability8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90346Linux kernel nl80211 color-change beacon parsing memory leak–0.2%2026-09-17Fix
CVE-2026-90345Linux kernel brcmfmac P2P action frame handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90344Linux kernel mac80211 channel switch announcement handling denial of service–0.2%2026-09-17Fix
CVE-2026-90343Linux kernel cfg80211 P2P and NAN device teardown vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90342Linux kernel BPF arena fault handler deadlock–0.2%2026-09-17Fix
CVE-2026-90341Linux kernel coreboot table parser vulnerability7.7CNA v3.10.2%2026-09-17Fix
CVE-2026-90340Linux kernel generic pinctrl mapping vulnerability–0.2%2026-09-17Fix
CVE-2026-90339Linux kernel powerpc syscall entry and exit handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90338Linux kernel amba-pl011 serial driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90337Linux kernel serial core port registration use-after-free–0.2%2026-09-17Fix
CVE-2026-90336Linux kernel serial core UART driver registration vulnerability–0.2%2026-09-17Fix
CVE-2026-90335Linux kernel tty core character device removal null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90334Linux kernel tty subsystem use-after-free–0.2%2026-09-17Fix
CVE-2026-90333Linux kernel device-mapper integrity target vulnerability–0.2%2026-09-17Fix
CVE-2026-90332Linux kernel PCI dwc EP driver vulnerability8.2CNA v3.10.3%2026-09-17Fix
CVE-2026-90331Linux kernel Asus HID driver use-after-free–0.2%2026-09-17Fix
CVE-2026-90330Linux kernel Logitech HID++ force feedback driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90329Linux kernel HID device probe use-after-free8.8CNA v3.10.3%2026-09-17Fix
CVE-2026-90328Linux kernel Steam Controller HID driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90327Linux kernel phonet PEP vulnerability–0.2%2026-09-17Fix
CVE-2026-90326Linux kernel blk-cgroup policy activation use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90325Linux kernel block cgroup policy activation use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90324Linux kernel ublk user buffer import vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90323Linux kernel ublk auto buffer registration denial of service–0.2%2026-09-17Fix
CVE-2026-90322Linux kernel OCFS2 heartbeat local node state vulnerability–0.2%2026-09-17Fix
CVE-2026-90321Linux kernel OCFS2 inline extended attribute metadata vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90320Linux kernel OCFS2 external extended attribute metadata vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90319Linux kernel rapidio driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90318Linux kernel FAT parent inode rebuild vulnerability–0.2%2026-09-17Fix
CVE-2026-90317Linux kernel BPF spin lock RCU pointer tracking use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90316Linux kernel OMAP DSI interrupt handler use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90315Linux kernel PCI legacy I/O and memory sysfs handlers vulnerability–0.2%2026-09-17Fix
CVE-2026-90314Linux kernel remoteproc resource table parser out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-90313Linux kernel cgroup BPF storage attach vulnerability–0.2%2026-09-17Fix
CVE-2026-90312Linux kernel BPF load-acquire verifier vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90311Linux kernel hwmon thermal zone device vulnerability–0.2%2026-09-17Fix
CVE-2026-90309Linux kernel RDMA erdma completion queue event handling vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90308Linux kernel RDMA erdma queue pair reference handling vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90307Linux kernel RDMA SRP credit request handler information disclosure–0.2%2026-09-17Fix
CVE-2026-90306Linux kernel ARM hardware breakpoint handler denial of service–0.2%2026-09-17Fix
CVE-2026-90305Linux kernel POSIX CPU timers vulnerability–0.2%2026-09-17Fix
CVE-2026-90304Linux kernel ARM user fault handler vulnerability–0.2%2026-09-17Fix
CVE-2026-90303Linux kernel ARM page fault handler use-after-free–0.2%2026-09-17Fix
CVE-2026-90302Linux kernel OCFS2 use-after-free–0.2%2026-09-17Fix
CVE-2026-90301Linux kernel OCFS2 heartbeat negotiate handler vulnerability8.1CNA v3.10.6%2026-09-17Fix
CVE-2026-90300Linux kernel BPF task stack helper vulnerability–0.2%2026-09-17Fix
CVE-2026-90299Linux kernel BPF sleepable program attachment vulnerability–0.2%2026-09-17Fix
CVE-2026-90298Linux kernel sun4i TCON driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90297Linux kernel sun4i CRTC driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90296Linux kernel imx6q cpufreq driver memory leak–0.2%2026-09-17Fix
CVE-2026-90295Linux kernel imx6q cpufreq driver out-of-bounds write–0.2%2026-09-17Fix
CVE-2026-90294Linux kernel isert login response handling null pointer dereference7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-90293Linux kernel isert receive buffer posting vulnerability7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-90292Linux kernel siw connection endpoint handling use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90291Linux kernel kmod duplicate request handling use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90290Linux kernel arm64 hibernation vulnerability–0.2%2026-09-17Fix
CVE-2026-90289Linux kernel MST HDCP connector arrays vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90288Linux kernel R-Car Gen2 PHY driver vulnerability7.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90287Linux kernel Sunplus PHY driver improper error handling–0.2%2026-09-17Fix
CVE-2026-90286Linux kernel amdgpu GFX6 driver vulnerability8.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90285Linux kernel qla2xxx VPD sysfs read vulnerability–0.2%2026-09-17Fix
CVE-2026-90284Linux kernel firmware loader sysfs fallback vulnerability–0.2%2026-09-17Fix
CVE-2026-90283Linux kernel hugetlbfs vulnerability–0.2%2026-09-17Fix
CVE-2026-90282Linux kernel qmp-usb-legacy PHY driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90281Linux kernel snps-femto-v2 PHY driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90280Linux kernel qmp-usb PHY driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90279Linux kernel RAID5 bitmap sector mapping vulnerability–0.2%2026-09-17Fix
CVE-2026-90278Linux kernel RAID1 behind-write handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90277Linux kernel MD live bitmap driver use-after-free–0.2%2026-09-17Fix
CVE-2026-90276Linux kernel MD live bitmap driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90275Linux kernel RAID1 driver denial of service–0.2%2026-09-17Fix
CVE-2026-90274Linux kernel coresight etm4x driver integer underflow–0.2%2026-09-17Fix
CVE-2026-90273Linux kernel ETM4x coresight active configuration tracking vulnerability–0.2%2026-09-17Fix
CVE-2026-90272Linux kernel arm_pmuv3 branch stack sampling vulnerability–0.2%2026-09-17Fix
CVE-2026-90271Linux kernel MPAM driver unbind handling null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90270Linux kernel MPAM MSC driver unbind use-after-free–0.2%2026-09-17Fix
CVE-2026-90269Linux kernel BPF load-acquire instruction verifier vulnerability–0.2%2026-09-17Fix
CVE-2026-90268Linux kernel SCSI disk probe improper error handling8.1CNA v3.10.5%2026-09-17Fix
CVE-2026-90267Linux kernel SCSI SD driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90266Linux kernel btrfs zoned block group reclaim vulnerability–0.2%2026-09-17Fix
CVE-2026-90265Linux kernel btrfs defragmentation deadlock–0.2%2026-09-17Fix
CVE-2026-90264Linux kernel btrfs ordered extent handling race condition–0.2%2026-09-17Fix
CVE-2026-90263Linux kernel btrfs POSIX ACL handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90262Linux kernel btrfs fs-verity Merkle tree reads vulnerability–0.2%2026-09-17Fix
CVE-2026-90261Linux kernel btrfs zoned metadata block group writeback vulnerability–0.2%2026-09-17Fix
CVE-2026-90260Linux kernel btrfs zoned tree block writeback vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90259Linux kernel btrfs qgroup reserved data accounting incorrect calculation–0.2%2026-09-17Fix
CVE-2026-90258Linux kernel airoha pin controller driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90257Linux kernel virtio_bt build information handling out-of-bounds read–0.2%2026-09-17Fix
CVE-2026-90256Linux kernel Bluetooth L2CAP disconnect handling use-after-free8.8CNA v3.10.4%2026-09-17Fix
CVE-2026-90255Linux kernel Bluetooth SCO connection setup vulnerability8.8CNA v3.10.3%2026-09-17Fix
CVE-2026-90254Linux kernel Bluetooth advertising instance handling memory leak–0.2%2026-09-17Fix
CVE-2026-90253Linux kernel Bluetooth MGMT mesh send cancel command memory leak–0.2%2026-09-17Fix
CVE-2026-90252Linux kernel Bluetooth MGMT HCI command handling memory leak–0.2%2026-09-17Fix
CVE-2026-90251Linux kernel Bluetooth MSFT vendor extension vulnerability–0.2%2026-09-17Fix
CVE-2026-90250Linux kernel BPF cgroup storage handling null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90249Linux kernel gp2ap002 light sensor driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90248Linux kernel traffic control classifier API race condition–0.2%2026-09-17Fix
CVE-2026-90247Linux kernel BPF stack map irq_work handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90246Linux kernel AppArmor tagset verification integer overflow7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90245Linux kernel Kyro framebuffer overlay viewport integer overflow–0.2%2026-09-17Fix
CVE-2026-90244Linux kernel IOMMU DMA MSI page list vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90243Linux kernel IOMMU vt-d driver vulnerability8.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90242Linux kernel vt-d IOMMU driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90241Linux kernel vt-d IOMMU driver vulnerability8.2CNA v3.10.2%2026-09-17Fix
CVE-2026-90240Linux kernel IOMMU vt-d driver vulnerability8.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90239Linux kernel AMD ISP4 driver firmware GPU memory allocation vulnerability–0.2%2026-09-17Fix
CVE-2026-90238Linux kernel AMD ISP4 driver power-on error path deadlock–0.2%2026-09-17Fix
CVE-2026-90237Linux kernel netfilter nft_ct conntrack expectations vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90236Linux kernel NFSD open stateid reaping vulnerability–0.2%2026-09-17Fix
CVE-2026-90235Linux kernel SunRPC socket transport callbacks vulnerability9.8CNA v3.10.6%2026-09-17Fix
CVE-2026-90234Linux kernel NFS client delegation handling vulnerability7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-90233Linux kernel nvme-pci probe error path memory leak–0.2%2026-09-17Fix
CVE-2026-90232Linux kernel AMT driver netns handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90231Linux kernel AppArmor user namespace restriction vulnerability8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90230Linux kernel nvmet driver out-of-bounds read9.1CNA v3.10.5%2026-09-17Fix
CVE-2026-90229Linux kernel nvme-apple driver admin queue teardown vulnerability7.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90228Linux kernel NVMe target ZNS identify namespace null pointer dereference7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-90227Linux kernel NVMe ioctl SUBMIT_IO vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90226Linux kernel NFC LLCP getsockopt vulnerability–0.2%2026-09-17Fix
CVE-2026-90225Linux kernel NFC LLCP socket getsockopt vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90224Linux kernel NFC NCI data exchange completion vulnerability7.5CNA v3.10.4%2026-09-17Fix
CVE-2026-90223Linux kernel NFC LLCP SNL TLV parsing out-of-bounds read7.1CNA v3.10.4%2026-09-17Fix
CVE-2026-90222Linux kernel pn533 NFC driver I2C transport vulnerability–0.2%2026-09-17Fix
CVE-2026-90221Linux kernel NFC NCI CORE_INIT_RSP parsing vulnerability–0.2%2026-09-17Fix
CVE-2026-90220Linux kernel ALSA sequencer bounce payload information disclosure–0.2%2026-09-17Fix
CVE-2026-90219Linux kernel cxgb4 RDMA driver debugfs vulnerability–0.2%2026-09-17Fix
CVE-2026-90218Linux kernel RDMA CMA denial of service–0.2%2026-09-17Fix
CVE-2026-90217Linux kernel BPF verifier state pruning vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90216Linux kernel UBI device attach rollback vulnerability–0.2%2026-09-17Fix
CVE-2026-90215Linux kernel UBI device detach vulnerability–0.2%2026-09-17Fix
CVE-2026-90214Linux kernel Xilinx PCM formatter driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90213Linux kernel FireWire topology tree builder memory leak–0.2%2026-09-17Fix
CVE-2026-90212Linux kernel EFI runtime service calls denial of service–0.2%2026-09-17Fix
CVE-2026-90211Linux kernel s390 BPF JIT arena atomics vulnerability–0.2%2026-09-17Fix
CVE-2026-90210Linux kernel BPF trampoline attachment use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90209Linux kernel s390 debug feature unregistration deadlock–0.2%2026-09-17Fix
CVE-2026-90208Linux kernel Samsung PWM clocksource driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90207Linux kernel ALSA sequencer MIDI input vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90206Linux kernel nvmet race condition–0.2%2026-09-17Fix
CVE-2026-90205Linux kernel OCFS2 orphan slot validation vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90204Linux kernel OCFS2 append-DIO orphan slot use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90203Linux kernel Squashfs fragment block decompression vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90202Linux kernel mpt3sas driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90201Linux kernel page_pool use-after-free–0.2%2026-09-17Fix
CVE-2026-90200Linux kernel NTFS3 MFT cluster validation integer overflow–0.2%2026-09-17Fix
CVE-2026-90199Linux kernel NTFS3 attribute VCN validation vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90198Linux kernel ALSA card release handling use-after-free–0.2%2026-09-17Fix
CVE-2026-90197Linux kernel HID haptics driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90196Linux kernel SOF topology volume control vulnerability–0.2%2026-09-17Fix
CVE-2026-90195Linux kernel RISC-V BPF JIT kfunc argument handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90194Linux kernel ACPI device bus ID cleanup vulnerability–0.2%2026-09-17Fix
CVE-2026-90193Linux kernel qcom-cpucp mailbox driver deadlock–0.2%2026-09-17Fix
CVE-2026-90192Linux kernel qcom-cpucp mailbox driver null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90191Linux kernel RISC-V SBI MPXY mailbox RPMI notifications vulnerability8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90190Linux kernel null_blk device lookup mutex race condition–0.2%2026-09-17Fix
CVE-2026-90189Linux kernel null_blk device initialization race condition–0.2%2026-09-17Fix
CVE-2026-90188Linux kernel null_blk tag set initialization vulnerability–0.2%2026-09-17Fix
CVE-2026-90187Linux kernel null_blk zoned device memory leak–0.2%2026-09-17Fix
CVE-2026-90186Linux kernel null_blk queue mapping vulnerability–0.2%2026-09-17Fix
CVE-2026-90185Linux kernel null_blk configfs attribute stores race condition–0.2%2026-09-17Fix
CVE-2026-90184Linux kernel null_blk configfs attribute updates vulnerability–0.2%2026-09-17Fix
CVE-2026-90183Linux kernel blk-iolatency delay state vulnerability–0.2%2026-09-17Fix
CVE-2026-90182Linux kernel blk-iocost delay state vulnerability–0.2%2026-09-17Fix
CVE-2026-90181Linux kernel ublk shmem teardown vulnerability–0.2%2026-09-17Fix
CVE-2026-90180Linux kernel mtip32xx ioctl handler vulnerability–0.2%2026-09-17Fix
CVE-2026-90179Linux kernel AppArmor change_hat deadlock–0.2%2026-09-17Fix
CVE-2026-90178Linux kernel coretemp driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90177Linux kernel BPF verifier atomic RMW checks vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90176Linux kernel ksmbd byte-range lock checks vulnerability8.1CNA v3.10.5%2026-09-17Fix
CVE-2026-90175Linux kernel ksmbd login request handling memory leak–0.2%2026-09-17Fix
CVE-2026-90174Linux kernel ksmbd user allocation out-of-bounds read7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90173Linux kernel smbdirect vulnerability9.8CNA v3.10.6%2026-09-17Fix
CVE-2026-90172Linux kernel smbdirect vulnerability7.5CNA v3.10.5%2026-09-17Fix
CVE-2026-90171Linux kernel smbdirect use-after-free–0.2%2026-09-17Fix
CVE-2026-90170Linux kernel ksmbd IPC message validation vulnerability–0.2%2026-09-17Fix
CVE-2026-90169Linux kernel ksmbd preauthentication session handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90167Linux kernel ksmbd oplock break handling race condition–0.2%2026-09-17Fix
CVE-2026-90166Linux kernel ksmbd IPC tree connect handling null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90165Linux kernel ksmbd durable handle scavenger vulnerability–0.2%2026-09-17Fix
CVE-2026-90164Linux kernel ksmbd proc initialization vulnerability–0.2%2026-09-17Fix
CVE-2026-90163Linux kernel ksmbd module initialization vulnerability–0.2%2026-09-17Fix
CVE-2026-90162Linux kernel ksmbd byte-range lock handling use-after-free8.8CNA v3.10.7%2026-09-17Fix
CVE-2026-90161Linux kernel EROFS ztailpacking decompression out-of-bounds read7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90160Linux kernel LWT BPF xmit headroom handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90159Linux kernel cgroup UNIX getname hooks vulnerability–0.2%2026-09-17Fix
CVE-2026-90158Linux kernel m68k nfcon console driver deadlock–0.2%2026-09-17Fix
CVE-2026-90157Linux kernel cgroup getsockopt hook vulnerability–0.2%2026-09-17Fix
CVE-2026-90156Linux kernel ksmbd deferred lock handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90155Linux kernel ksmbd byte-range lock handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90154Linux kernel ksmbd session state handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90153Linux kernel ksmbd DACL ACE parsing vulnerability8.1CNA v3.10.5%2026-09-17Fix
CVE-2026-90152Linux kernel ksmbd session registration memory leak–0.2%2026-09-17Fix
CVE-2026-90151Linux kernel NFSv4 callback client vulnerability9.8CNA v3.10.7%2026-09-17Fix
CVE-2026-90150Linux kernel pNFS block layout driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90149Linux kernel NFSv4 flexfiles data servers null pointer dereference7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-90148Linux kernel NFSv4 lease handling null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90147Linux kernel device-managed clock cleanup vulnerability–0.2%2026-09-17Fix
CVE-2026-90146Linux kernel BPF XDP link update vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90145Linux kernel hinic3 driver vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90144Linux kernel DPLL subsystem vulnerability–0.2%2026-09-17Fix
CVE-2026-90143Linux kernel KCM BPF parser vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90142Linux kernel virtio-net AF_XDP RX ring out-of-bounds write7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90141Linux kernel IPVS FTP helper integer overflow7.3CNA v3.10.4%2026-09-17Fix
CVE-2026-90140Linux kernel CUSE driver use-after-free–0.2%2026-09-17Fix
CVE-2026-90139Linux kernel FUSE submount handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90138Linux kernel AF_VSOCK accept handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90137Linux kernel hp-bioscfg driver vulnerability7.7CNA v3.10.2%2026-09-17Fix
CVE-2026-90136Linux kernel AMD HSMP hwmon interface vulnerability–0.2%2026-09-17Fix
CVE-2026-90135Linux kernel net crash–0.2%2026-09-17Fix
CVE-2026-90134Linux kernel NTFS decompression vulnerability–0.2%2026-09-17Fix
CVE-2026-90133Linux kernel NTFS index block conversion out-of-bounds write7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90132Linux kernel NTFS reserved extended attributes vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90131Linux kernel NTFS resident attribute reads race condition7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90130Linux kernel vDPA simulator vulnerability–0.2%2026-09-17Fix
CVE-2026-90129Linux kernel virtio balloon driver denial of service–0.2%2026-09-17Fix
CVE-2026-90128Linux kernel vdpa/mlx5 driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90127Linux kernel virtio RTC driver denial of service–0.2%2026-09-17Fix
CVE-2026-90126Linux kernel PCF8563 RTC driver memory leak–0.2%2026-09-17Fix
CVE-2026-90125Linux kernel SMB client vulnerability–0.2%2026-09-17Fix
CVE-2026-90124Linux kernel RZ/G2L interrupt status clearing race condition–0.2%2026-09-17Fix
CVE-2026-90123Linux kernel AST2700 interrupt controller activation vulnerability–0.2%2026-09-17Fix
CVE-2026-90122Linux kernel visconti clock gate registration vulnerability–0.2%2026-09-17Fix
CVE-2026-90121Linux kernel gic-v5 irqchip vulnerability–0.2%2026-09-17Fix
CVE-2026-90120Linux kernel gic-v5 irqchip driver vulnerability8.4CNA v3.10.2%2026-09-17Fix
CVE-2026-90119Linux kernel ice1712 sound card probe vulnerability–0.2%2026-09-17Fix
CVE-2026-90118Linux kernel NTFS decompression vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90117Linux kernel NTFS MFT update sequence array vulnerability–0.2%2026-09-17Fix
CVE-2026-90116Linux kernel ALSA mtpav driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90115Linux kernel xsk null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90114Linux kernel bridge VLAN tunnel range validation vulnerability–0.2%2026-09-17Fix
CVE-2026-90113Linux kernel netdevsim receive queue NAPI mapping use-after-free–0.2%2026-09-17Fix
CVE-2026-90112Linux kernel qlcnic unified ROM firmware parser vulnerability–0.2%2026-09-17Fix
CVE-2026-90111Linux kernel IPv6 multicast routing cache reporting use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90110Linux kernel inetpeer rate limiting vulnerability9.4CNA v3.10.6%2026-09-17Fix
CVE-2026-90109Linux kernel gred, bfifo and plug queue disciplines vulnerability–0.2%2026-09-17Fix
CVE-2026-90108Linux kernel SMC LLC add-link flow vulnerability–0.2%2026-09-17Fix
CVE-2026-90107Linux kernel SMC LLC flow control vulnerability–0.2%2026-09-17Fix
CVE-2026-90106Linux kernel bridge ARP/ND proxy vulnerability–0.2%2026-09-17Fix
CVE-2026-90105Linux kernel vxlan neighbor address lookup vulnerability–0.2%2026-09-17Fix
CVE-2026-90104Linux kernel NFSv4.1 callback sequence decoding vulnerability9.8CNA v3.10.6%2026-09-17Fix
CVE-2026-90103Linux kernel NFSv4.2 LAYOUTSTATS encoding vulnerability7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-90102Linux kernel NFSv4 pNFS data server cache vulnerability7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-90101Linux kernel bnxt_en hardware monitoring handler vulnerability–0.2%2026-09-17Fix
CVE-2026-90100Linux kernel netc PTP PEROUT driver divide-by-zero–0.2%2026-09-17Fix
CVE-2026-90099Linux kernel net/sched classifier vulnerability–0.2%2026-09-17Fix
CVE-2026-90098Linux kernel sparx5 switch driver MAC table access vulnerability–0.2%2026-09-17Fix
CVE-2026-90097Linux kernel hv vmbus driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90096Linux kernel FUSE O_APPEND direct write vulnerability–0.2%2026-09-17Fix
CVE-2026-90095Linux kernel FUSE io_uring support deadlock–0.2%2026-09-17Fix
CVE-2026-90094Linux kernel arm64 context switching vulnerability–0.2%2026-09-17Fix
CVE-2026-90093Linux kernel Bluetooth L2CAP socket options use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90092Linux kernel Bluetooth L2CAP accept queue use-after-free8.0CNA v3.10.4%2026-09-17Fix
CVE-2026-90091Linux kernel Bluetooth L2CAP listening socket race condition8.0CNA v3.10.4%2026-09-17Fix
CVE-2026-90090Linux kernel Bluetooth btmtksdio driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90089Linux kernel Bluetooth btnxpuart driver vulnerability7.1CNA v3.10.3%2026-09-17Fix
CVE-2026-90088Linux kernel Bluetooth RFCOMM parameter negotiation denial of service–0.2%2026-09-17Fix
CVE-2026-90087Linux kernel Bluetooth LE connection manager vulnerability–0.2%2026-09-17Fix
CVE-2026-90086Linux kernel xsk vulnerability–0.2%2026-09-17Fix
CVE-2026-90085Linux kernel octeontx2 NIX traffic manager debugfs vulnerability–0.2%2026-09-17Fix
CVE-2026-90084Linux kernel octeontx2 virtual function driver race condition–0.2%2026-09-17Fix
CVE-2026-90083Linux kernel act_ife packet scheduler action vulnerability–0.2%2026-09-17Fix
CVE-2026-90082In the Linux kernel, the following vulnerability has been resolved: net: mana: Cap MSI-X vectors to the device MSI-X table size mana_gd_query_max_resources() sizes gc->num_msix_usable from resp.max_msix and the CPU count, but never from the device MSI-X table. On a 1792 vCPU M-series VM that yield–0.2%2026-09-17Fix
CVE-2026-90081Linux kernel RDS congestion map vulnerability–0.2%2026-09-17Fix
CVE-2026-90080Linux kernel octeontx2-pf driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90079Linux kernel octeontx2-af driver memory leak–0.2%2026-09-17Fix
CVE-2026-90078Linux kernel act_skbmod packet scheduler action vulnerability–0.2%2026-09-17Fix
CVE-2026-90077Linux kernel net resource leak–0.2%2026-09-17Fix
CVE-2026-90076In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: add overflow bounds to quantum and initial quantum fq_init() computes quantum = 2 * psched_mtu() and initial_quantum = 10 * psched_mtu() with no overflow check. A device with a huge MTU (e.g. dummy with max_mtu == 0–0.2%2026-09-17Fix
CVE-2026-90075Linux kernel fq_codel infinite loop–0.2%2026-09-17Fix
CVE-2026-90074Linux kernel fq_pie packet scheduler integer overflow–0.2%2026-09-17Fix
CVE-2026-90073Linux kernel HHF packet scheduler vulnerability–0.2%2026-09-17Fix
CVE-2026-90072Linux kernel SFQ packet scheduler integer overflow–0.2%2026-09-17Fix
CVE-2026-90071In the Linux kernel, the following vulnerability has been resolved: net/sched: sch_teql: restore skb->dev on the slave failure path teql_master_xmit() sets skb->dev = slave before calling the slave's ndo_start_xmit(), but never restores it when that transmit fails. The skb then walks on to the nex7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90070Linux kernel st33zp24 TPM status read improper error handling–0.2%2026-09-17Fix
CVE-2026-90069Linux kernel crypto acomp request cloning out-of-bounds write7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90068Linux kernel ASoC DAPM enum control vulnerability–0.2%2026-09-17Fix
CVE-2026-90067Linux kernel Ceph messenger v2 banner parsing vulnerability7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-90066Linux kernel ftrace direct-multi-modify sample null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90065Linux kernel SMC protocol socket creation vulnerability–0.2%2026-09-17Fix
CVE-2026-90064Linux kernel Xe GPU page fault handling vulnerability–0.2%2026-09-17Fix
CVE-2026-90063Linux kernel virtio-net GSO segmentation vulnerability–0.2%2026-09-17Fix
CVE-2026-90062Linux kernel nf_tables hardware offload vulnerability7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-90061Linux kernel nf_tables set element expressions vulnerability–0.2%2026-09-17Fix
CVE-2026-90060Linux kernel ALSA control LED layer null pointer dereference–0.2%2026-09-17Fix
CVE-2026-90059Linux kernel stmmac Ethernet RX DMA vulnerability7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-90058Linux kernel traffic control size table denial of service–0.2%2026-09-17Fix
CVE-2026-90057Linux kernel SLIP line discipline use-after-free7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90056Linux kernel FEC Ethernet PTP driver vulnerability–0.2%2026-09-17Fix
CVE-2026-90055Linux kernel usbatm ci_range initialization vulnerability–0.2%2026-09-17Fix
CVE-2026-90054Linux kernel TCP urgent data retransmit path vulnerability–0.2%2026-09-17Fix
CVE-2026-90053Linux kernel sch_htb scheduler denial of service–0.2%2026-09-17Fix
CVE-2026-90052In the Linux kernel, the following vulnerability has been resolved: dm-integrity: fix buffer overflow with keyed discard Since commit 68c5c42567bc ("dm-integrity: replace forgeable discard filler with a keyed sector marker"), integrity_metadata computes a checksum for every discarded block into th7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90051Linux kernel devmem TCP transmit path vulnerability7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-90050In the Linux kernel, the following vulnerability has been resolved: net/sched: fq: clamp quantum and initial_quantum in change path The fq change path accepts TCA_FQ_QUANTUM in [1, INT_MAX] and TCA_FQ_INITIAL_QUANTUM up to INT_MAX, while fq_init() already clamps to [1, 1<<20]. A user can override–0.2%2026-09-17Fix
CVE-2026-89418Google uncontrolled recursion leading to denial of service in protobuf-javascript (google-protobuf)8.7CNA v4.00.3%2026-09-17
CVE-2026-89064ServMask All-in-One WP Migration and Backup insufficiently protected credentials5.3CNA v3.10.5%2026-09-17Fix
CVE-2026-89038Verizon Cloud for Android path traversal via OneTouchUploadActivity6.9CNA v4.00.2%2026-09-17Fix
CVE-2026-89036Appwrite argument injection via providerRootDirectory parameter8.7CNA v4.00.7%2026-09-17Fix
CVE-2026-88952team-alembic ash_authentication improper authentication9.1CNA v4.00.7%2026-09-17Fix
CVE-2026-88904PuppyFW WordPress plugin arbitrary Blog options update and deletion Leading to privilege escalation8.8CISA ADP v3.10.4%2026-09-17
CVE-2026-88795wpShopGermany IT-RECHT KANZLEI WordPress plugin unauthenticated RCE via Predictable API Token9.0CISA ADP v3.10.8%2026-09-17Fix
CVE-2026-88792Dictionary WordPress plugin unauthenticated stored XSS via direct Dictionary update8.8CISA ADP v3.10.5%2026-09-17
CVE-2026-87963Yo - unauthenticated SQL injection via username parameter8.6CNA v3.10.4%2026-09-17
CVE-2026-87935Paid Downloads WordPress plugin unauthenticated arbitrary file upload8.1CNA v3.10.9%2026-09-17
CVE-2026-87886Acronis Backup incorrect default permissions7.8CNA v3.00.2%2026-09-17KEVFix
CVE-2026-87836Comments Import and Export - Author+ Comment PII Disclosure via Export2.7CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-87831Checkout Field Manager for WooCommerce missing authorization4.3CNA v3.10.3%2026-09-17Fix
CVE-2026-87829Checkout Field Manager for WooCommerce insecure direct object reference4.3CNA v3.10.3%2026-09-17Fix
CVE-2026-87796Multi Uploader for Gravity Forms WordPress plugin unauthenticated arbitrary file upload9.8CNA v3.11.1%2026-09-17Exploit code
CVE-2026-87786Dewa Kirim WordPress plugin unauthenticated stored XSS via Checkout Coordinates8.8CISA ADP v3.10.5%2026-09-17
CVE-2026-87742Red Hat build of Quarkus quarkus-websockets-next: Denial of service in quarkus-websockets-next7.5CNA v3.10.8%2026-09-17Fix
CVE-2026-87701Microsoft Azure Cosmos DB elevation of privilege9.6CNA v3.10.8%2026-09-17Fix
CVE-2026-86864pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool8.7CNA v4.00.6%2026-09-17Fix
CVE-2026-86863pgAdmin 4: Authentication bypass9.3CNA v4.00.6%2026-09-17Fix
CVE-2026-86862pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools7.1CNA v4.00.4%2026-09-17Fix
CVE-2026-86861pgAdmin 4: File Manager save_file writes through a symbolic link planted after the containment check6.0CNA v4.00.3%2026-09-17Fix
CVE-2026-86824Newsletter email tracking signature key inadequate encryption strength4.8CISA ADP v3.10.2%2026-09-17Fix
CVE-2026-86801To Do List Member - unauthenticated stored XSS, File Listing and Deletion8.8CNA v3.10.5%2026-09-17
CVE-2026-86788HT Mega - Contributor+ stored XSS via Section Headline Tag6.8CISA ADP v3.10.4%2026-09-17Fix
CVE-2026-86710Login with QR WordPress plugin unauthenticated authentication bypass via autologin_code parameter9.8CISA ADP v3.10.5%2026-09-17
CVE-2026-86709The Pressengine WordPress plugin unauthenticated authentication bypass9.8CISA ADP v3.10.6%2026-09-17
CVE-2026-86707Private Feed Key WordPress plugin unauthenticated authentication bypass via feedkey parameter9.8CISA ADP v3.10.5%2026-09-17
CVE-2026-86688Session id is not renewed on authentication in ash_authentication, allowing session fixation7.4CNA v4.00.7%2026-09-17Fix
CVE-2026-86533team-alembic ash_authentication insufficient session expiration9.1CNA v4.00.9%2026-09-17Fix
CVE-2026-86522team-alembic ash_authentication log injection6.3CNA v4.00.7%2026-09-17Fix
CVE-2026-86446LearnPress - Unauthenticated Quiz Answer Disclosure via check-answer REST endpoint3.7CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-86320Red Hat Enterprise Linux 10 flatpak-builder: Host code execution7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-86311Photo Gallery by 10Web Mobile-Friendly Image Gallery WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-17Fix
CVE-2026-86049jupyter_server jupyter Server: 5xx request logging leaks token-bearing Referer header values7.1CNA v3.10.4%2026-09-17Fix
CVE-2026-86040libp2p js-libp2p floodsub RPC decoding denial of service7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-86039libp2p js-libp2p PeerStore record verification vulnerability8.2CNA v3.10.3%2026-09-17Fix
CVE-2026-86038libp2p js-libp2p Gossipsub signature validation improper signature verification7.5CNA v3.10.2%2026-09-17Fix
CVE-2026-86000Soup Sieve CSS selector parser regular expression denial of service5.3CNA v3.10.6%2026-09-17Fix
CVE-2026-85999Soup Sieve CSS selector whitespace trimming regular expression denial of service5.3CNA v3.10.6%2026-09-17Fix
CVE-2026-85917Microsoft Azure AI Foundry elevation of privilege7.5CNA v3.11.0%2026-09-17Fix
CVE-2026-85889Microsoft Azure AI Foundry elevation of privilege10.0CNA v3.10.7%2026-09-17Fix
CVE-2026-85887M365 Copilot information disclosure7.7CNA v3.10.8%2026-09-17Fix
CVE-2026-85885Microsoft 365 Copilot elevation of privilege9.9CNA v3.10.7%2026-09-17Fix
CVE-2026-85878Microsoft Azure Database for PostgreSQL elevation of privilege9.9CNA v3.10.8%2026-09-17Fix
CVE-2026-85721AsyncHttpClient HTTP response decompression denial of service7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-85720AsyncHttpClient: Origin credentials sent to the proxy on the plaintext CONNECT request5.9CNA v3.10.3%2026-09-17Fix
CVE-2026-85719AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP7.5CNA v3.10.4%2026-09-17Fix
CVE-2026-85718AsyncHttpClient: Connection permit leak on TLS handshake failure causes per-host denial of service5.9CNA v3.10.5%2026-09-17Fix
CVE-2026-85717AsyncHttpClient: Client-wide realm credentials re-sent to a cross-origin redirect target6.8CNA v3.10.5%2026-09-17Fix
CVE-2026-85716AsyncHttpClient: SCRAM and Digest mutual-authentication responses are not verified3.7CNA v3.10.4%2026-09-17Fix
CVE-2026-85715ExifReader: DoS via Crafted HEIC/AVIF iloc Box memory exhaustion7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-85500team-alembic ash_authentication authentication bypass9.1CNA v4.00.8%2026-09-17Fix
CVE-2026-85130WPLP Cookie Consent WordPress plugin unauthenticated stored XSS via Consent Logs8.8CISA ADP v3.10.5%2026-09-17Fix
CVE-2026-85128Choose User Role at Registration registration role selection privilege escalation7.5CISA ADP v3.10.3%2026-09-17Fix
CVE-2026-85078sanic chunked trailer request smuggling allows hidden second request execution6.5CNA v3.10.5%2026-09-17Fix
CVE-2026-85077Sanic: HTTP response header injection via missing CR/LF validation in Sanic HTTP/1.1 responses8.2CNA v3.10.5%2026-09-17Fix
CVE-2026-83946Microsoft Azure Portal spoofing8.2CNA v3.10.3%2026-09-17Fix
CVE-2026-83944Microsoft Azure Logic Apps elevation of privilege10.0CNA v3.10.4%2026-09-17Fix
CVE-2026-82761team-alembic ash_authentication time-of-check time-of-use race condition9.1CNA v4.00.6%2026-09-17Fix
CVE-2026-82760team-alembic ash_authentication algorithmic complexity8.2CNA v4.00.7%2026-09-17Fix
CVE-2026-82759team-alembic ash_authentication predictable password hash salt1.8CNA v4.00.1%2026-09-17Fix
CVE-2026-82723team-alembic ash_authentication sensitive information in log files1.8CNA v4.00.2%2026-09-17Fix
CVE-2026-82685team-alembic ash_authentication confirmation token accepted on any record in AshAuthentication7.6CNA v4.00.7%2026-09-17Fix
CVE-2026-81868Steeltoe certificate authorization middleware authentication bypass6.5CNA v3.10.3%2026-09-17Fix
CVE-2026-81829SmallRye JWT AwsAlbKeyResolver server-side request forgery5.3CNA v3.10.6%2026-09-17Fix
CVE-2026-81637team-alembic ash_authentication insufficient session expiration2.3CNA v4.00.6%2026-09-17Fix
CVE-2026-81632team-alembic ash_authentication_phoenix sensitive query strings7.2CNA v4.00.2%2026-09-17Fix
CVE-2026-81546Canva Affinity stack-based buffer overflow7.7CNA v3.10.1%2026-09-17Fix
CVE-2026-81516Steeltoe.Discovery.Consul ConsulDiscoveryClient denial of service7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-81515SteeltoeOSS security-advisories improper exception handling7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-81481Dell OpenManage Server Administrator Managed Node (Patch) path traversal7.5CNA v3.10.5%2026-09-17Fix
CVE-2026-81480Dell OpenManage Server Administrator Managed Node (Patch) stack-based buffer overflow7.2CNA v3.10.6%2026-09-17Fix
CVE-2026-81479Dell OpenManage Server Administrator Managed Node (Patch) denial of service5.8CNA v3.10.2%2026-09-17Fix
CVE-2026-81478Dell OpenManage Server Administrator Managed Node (Patch) hard-coded cryptographic key8.1CNA v3.10.3%2026-09-17Fix
CVE-2026-81477Dell OpenManage Server Administrator Managed Node (Patch) heap-based buffer overflow7.2CNA v3.10.6%2026-09-17Fix
CVE-2026-81476Dell OpenManage Server Administrator Managed Node (Patch) OS command injection8.1CNA v3.10.9%2026-09-17Fix
CVE-2026-81475Dell OpenManage Server Administrator Managed Node (Patch) missing authentication8.1CNA v3.10.5%2026-09-17Fix
CVE-2026-81474Dell OpenManage Server Administrator Managed Node (Patch) heap-based buffer overflow7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-81453Dell OpenManage Server Administrator Managed Node (Patch) path traversal6.5CNA v3.10.5%2026-09-17Fix
CVE-2026-81447Dell OpenManage Server Administrator Managed Node (Patch) improper certificate validation6.8CNA v3.10.1%2026-09-17Fix
CVE-2026-81446Dell OpenManage Server Administrator Managed Node (Patch) server-side request forgery7.4CNA v3.10.4%2026-09-17Fix
CVE-2026-81445Dell OpenManage Server Administrator Managed Node (Patch) improper privilege management7.2CNA v3.10.5%2026-09-17Fix
CVE-2026-81443Dell OpenManage Server Administrator Managed Node (Patch) server-side request forgery6.4CNA v3.10.2%2026-09-17Fix
CVE-2026-81442Dell OpenManage Server Administrator Managed Node (Patch) improper privilege management8.1CNA v3.10.4%2026-09-17Fix
CVE-2026-81441Dell OpenManage Server Administrator Managed Node (Patch) missing authentication4.0CNA v3.10.1%2026-09-17Fix
CVE-2026-81440Dell OpenManage Server Administrator Managed Node (Patch) hard-coded credentials7.3CNA v3.10.2%2026-09-17Fix
CVE-2026-81439Dell OpenManage Server Administrator Managed Node (Patch) incorrect authorization3.7CNA v3.10.2%2026-09-17Fix
CVE-2026-81438Dell OpenManage Server Administrator Managed Node (Patch) weak cryptographic algorithm3.7CNA v3.10.2%2026-09-17Fix
CVE-2026-80356Dell OpenManage Server Administrator Managed Node (Patch) information disclosure7.3CNA v3.10.1%2026-09-17Fix
CVE-2026-80355Dell OpenManage Server Administrator Managed Node (Patch) cross-site request forgery5.4CNA v3.10.2%2026-09-17Fix
CVE-2026-80218team-alembic ash_authentication improper authentication7.6CNA v4.00.6%2026-09-17Fix
CVE-2026-79752CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection9.2CNA v4.00.6%2026-09-17Exploit codeFix
CVE-2026-78528BerqWP WordPress plugin broken access control5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-78501Microsoft 365 Copilot Business Chat information disclosure8.6CNA v3.10.5%2026-09-17Fix
CVE-2026-78428SUSE neuvector SSO login session fixation8.8CNA v4.00.3%2026-09-17Fix
CVE-2026-78427SUSE github.com/neuvector/neuvector Admission Control Bypass via Hard-coded Sidecar Image Exemption5.3CNA v4.00.2%2026-09-17Fix
CVE-2026-78426SUSE neuvector logout bypass via alternate JWT spelling2.0CNA v4.00.2%2026-09-17Fix
CVE-2026-78425SUSE github.com/neuvector/neuvector SAML Audience Confusion allows Cross-SP Authentication7.6CNA v4.00.4%2026-09-17Fix
CVE-2026-78296FluentAuth WordPress plugin email verification bypass vulnerability5.3CNA v3.10.2%2026-09-17Fix
CVE-2026-78295Xagio SEO WordPress plugin cross-site request forgery (CSRF)8.8CNA v3.10.2%2026-09-17Fix
CVE-2026-78294Geo Mashup WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-78223team-alembic ash_authentication improper signature verification6.9CNA v4.00.4%2026-09-17Fix
CVE-2026-77903Microsoft Dataverse elevation of privilege9.0CNA v3.10.4%2026-09-17Fix
CVE-2026-77615opencast paella Player: Stored XSS via caption cue text8.7CNA v3.10.6%2026-09-17Fix
CVE-2026-77614Opencast: Session fixation in login enables account takeover via crafted link8.8CNA v3.10.5%2026-09-17Fix
CVE-2026-77281caddy rewrite handler information disclosure6.5CNA v3.10.5%2026-09-17Fix
CVE-2026-76949team-alembic ash_authentication authentication bypass by spoofing9.1CNA v4.00.8%2026-09-17Fix
CVE-2026-76834B2Evolution CMS object injection via Negative Integer Array Key9.2CNA v4.00.8%2026-09-17
CVE-2026-76781libxml2 XML catalog parser null pointer dereference5.5CNA v3.10.2%2026-09-17Fix
CVE-2026-76154Grafana OSS Geomap panel's MapLibre base layer stored cross-site scripting7.3CNA v3.10.4%2026-09-17Fix
CVE-2026-75588Mattermost Desktop App plugin popout scheme validation bypass2.6CNA v3.10.2%2026-09-17Fix
CVE-2026-75523Steeltoe.Management.Endpoint HttpExchanges endpoint information disclosure5.9CNA v3.10.4%2026-09-17Fix
CVE-2026-74017User Registration WordPress plugin broken access control5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-74005PublishPress Series WordPress plugin cross-site request forgery (CSRF)5.4CNA v3.10.1%2026-09-17Fix
CVE-2026-74002Booking Calendar WordPress plugin broken access control5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-74000Simple Membership WordPress plugin broken access control5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-73999Cooked WordPress plugin insecure direct object references (IDOR)5.4CNA v3.10.3%2026-09-17Fix
CVE-2026-73639Imager::File::PNG PNG tRNS chunk reader out-of-bounds write9.1CISA ADP v3.10.7%2026-09-17Fix
CVE-2026-73638Imager tiff_load_ifd EXIF parser out-of-bounds read6.2CISA ADP v3.10.2%2026-09-17Fix
CVE-2026-71568BMCtest exposes Ironic without authentication and TLS during the test5.3CNA v3.10.2%2026-09-17Fix
CVE-2026-71538@CycloneDX/cyclonedx-npm: Shell injection via Unsanitized --workspace argument on Windows8.5CNA v4.00.2%2026-09-17Fix
CVE-2026-70200Microsoft Azure Logic Apps elevation of privilege10.0CNA v3.10.6%2026-09-17Fix
CVE-2026-70009Microsoft Azure ARC elevation of privilege9.3CNA v3.10.5%2026-09-17Fix
CVE-2026-69865Microsoft Container Registry elevation of privilege10.0CNA v3.10.8%2026-09-17Fix
CVE-2026-69843Microsoft Fabric elevation of privilege10.0CNA v3.10.9%2026-09-17Fix
CVE-2026-69399Microsoft Azure ARC elevation of privilege10.0CNA v3.10.5%2026-09-17Fix
CVE-2026-69197Umbraco CMS Content Delivery API content picker missing authorization8.7CNA v4.00.7%2026-09-17Fix
CVE-2026-68791Microsoft Azure Machine Learning information disclosure8.6CNA v3.10.5%2026-09-17Fix
CVE-2026-68537Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-68523Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-67071HCL Software DevOps Deploy and Launch redaction engine information disclosure6.5CNA v3.10.4%2026-09-17
CVE-2026-66676Easy Invoice WordPress plugin broken access control5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-66631MC Woocommerce Wishlist WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66630PublishPress Series WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66628WP-Lister Lite for eBay WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66626SKT Addons for Elementor WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66625WC Vendors Marketplace WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66624WPMasterToolKit WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66619Newsletters WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66618WP Maps WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-17Fix
CVE-2026-66617PublishPress Series WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66608Unlimited Elements For Elementor WordPress plugin server side request forgery6.4CNA v3.10.2%2026-09-17Fix
CVE-2026-66580Product Feed Manager WordPress plugin SQL injection8.5CNA v3.10.4%2026-09-17Fix
CVE-2026-66579JetElements For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66578PropertyHive WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66577JetSearch WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66576JetBlocks For Elementor WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66575King Addons for Elementor WordPress plugin insecure direct object references (IDOR)5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-66574Element Pack Elementor Addons WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66573JetTabs WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66572JetBlog WordPress plugin cross-site scripting (XSS)6.5CNA v3.10.2%2026-09-17Fix
CVE-2026-66571Asset CleanUp: Page Speed Booster WordPress plugin cross-site request forgery (CSRF)7.1CNA v3.10.1%2026-09-17Fix
CVE-2026-66269Dell OpenManage Server Administrator Managed Node (Patch) unsafe reflection7.3CNA v3.10.2%2026-09-17Fix
CVE-2026-63472Vendure external authentication service improper authentication9.1CNA v3.10.6%2026-09-17Fix
CVE-2026-63461Vendure: Shop API list queries can return non-public entities when filterOperator is OR5.3CNA v3.10.4%2026-09-17Fix
CVE-2026-63460Vendure: Unauthenticated ReDoS via `regex` filter on SQLite backends7.5CNA v3.10.6%2026-09-17Fix
CVE-2026-63459Vendure: Stored XSS in the Admin Dashboard8.7CNA v3.10.4%2026-09-17Fix
CVE-2026-62874Microsoft Azure Billing elevation of privilege10.0CNA v3.10.3%2026-09-17Fix
CVE-2026-62108Headless Single Sign On WordPress plugin broken authentication9.8CNA v3.10.6%2026-09-17Fix
CVE-2026-62104Migratico Lite WordPress plugin remote code execution (RCE)10.0CNA v3.10.9%2026-09-17Fix
CVE-2026-62101EduAdmin Booking WordPress plugin broken authentication9.8CNA v3.10.6%2026-09-17Fix
CVE-2026-61793nuxt-modules og-image nuxt OG Image has unauthenticated SSRF via `fonts[].path` URL parameter6.9CNA v4.00.5%2026-09-17Fix
CVE-2026-61700MariaDB Corporation MariaDB Connector/J ClientMessage.readPacket improper access control3.7CNA v3.10.4%2026-09-17Fix
CVE-2026-56795Dell Driver Pack uncontrolled search path8.2CNA v3.10.2%2026-09-17Fix
CVE-2026-55946Microsoft CoPilot information disclosure6.1CNA v3.10.4%2026-09-17Fix
CVE-2026-55062uniget-org cli uniget: Path traversal in Hook Files Directory Escape8.4CNA v4.00.2%2026-09-17Fix
CVE-2026-55061uniget CLI has an EDITOR command injection1.0CNA v4.00.2%2026-09-17Fix
CVE-2026-54918NetBox Device Type Library test upstream clone URL server-side request forgery5.3CNA v3.10.4%2026-09-17
CVE-2026-54916NetBox Device Type Library test suite import path code execution8.8CNA v3.10.6%2026-09-17
CVE-2026-54907Caddy Proxy Manager self-registration vulnerability5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-54767WeGIA: Hard-coded secret Key backdoor Mass Data Destruction via deletar_socios.php9.1CNA v3.10.8%2026-09-17Fix
CVE-2026-54752netbox-community NetBox Device Type Library validation test suite insecure deserialization9.6CNA v3.10.7%2026-09-17
CVE-2026-54734Prebid Server Java bidder adapter request URLs server-side request forgery10.0CNA v3.10.6%2026-09-17Fix
CVE-2026-54716Valhalla: Degenerate exclude_polygons causes OOM in /sources_to_targets7.5CNA v3.10.5%2026-09-17
CVE-2026-54692HappySeaFox SAIL XBM X10 decoder out-of-bounds write7.8CNA v3.10.2%2026-09-17Fix
CVE-2026-54677Erudika Scoold question reply and comment endpoints missing authorization6.5CNA v3.10.4%2026-09-17Fix
CVE-2026-54676Erudika Scoold answers API missing authorization6.5CNA v3.10.4%2026-09-17Fix
CVE-2026-54671WeGIA: Authorization bypass via Empty Resource Array in InternoControle8.8CNA v3.10.6%2026-09-17Fix
CVE-2026-54670WeGIA: Unauthenticated Auth Bypass + local file inclusion9.1CNA v3.10.7%2026-09-17Fix
CVE-2026-54649PunchIn-App punchin-email email relay information disclosure2.1CNA v4.00.8%2026-09-17Fix
CVE-2026-54648CubeCart GDPR customer tools missing authorization6.5CNA v3.10.6%2026-09-17Fix
CVE-2026-54647CubeCart: SQL injection via download_expire parameter in settings.index.inc.php7.2CNA v3.11.4%2026-09-17Exploit codeFix
CVE-2026-54646CubeCart: SQL Identifier injection via Backtick Bypass in maintenance.index.inc.php7.2CNA v3.11.4%2026-09-17Exploit codeFix
CVE-2026-54645CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass4.8CNA v3.11.1%2026-09-17Exploit codeFix
CVE-2026-54644CubeCart: XSS via Anchor Tag attribute injection in gui.class.php Message System6.1CNA v3.10.9%2026-09-17Exploit codeFix
CVE-2026-54643CubeCart: Missing authorization Check for Order Note Deletion in orders.index.inc.php5.4CNA v3.10.4%2026-09-17Fix
CVE-2026-54642CubeCart: CSRF Protection Missing for Download Resets and Card Deletions in orders.index.inc.php5.3CNA v4.00.3%2026-09-17Fix
CVE-2026-54634Hamlib: Rigctld `send_raw` stack out-of-bounds write and uninitialized memory Disclosure7.3CNA v3.10.4%2026-09-17Fix
CVE-2026-54633PoDoFo: Heap out-of-bounds read in Indexed Color Space Image Decoding (FetchScanLine)6.9CNA v4.00.2%2026-09-17Fix
CVE-2026-54627SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)9.8CNA v3.10.8%2026-09-17Fix
CVE-2026-54626SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)9.8CNA v3.10.8%2026-09-17Fix
CVE-2026-54618Obsidian Web MCP OAuth authorize endpoint missing authentication9.4CNA v3.10.5%2026-09-17Fix
CVE-2026-54617GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler9.8CNA v3.10.7%2026-09-17NucleiFix
CVE-2026-54613Vvveb: Path traversal in Revision Backup Reader/Deleter via Unsanitized theme parameter5.4CNA v3.10.3%2026-09-17Fix
CVE-2026-54612Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global8.8CNA v3.10.8%2026-09-17Fix
CVE-2026-54608MythicalLTD MythicalDash insufficient verification of data authenticity7.1CNA v4.00.2%2026-09-17
CVE-2026-54604OpenSlide: Openslide_read_region returns uninitialized memory with libtiff5.3CNA v4.00.5%2026-09-17Fix
CVE-2026-54597ITFlow: Authenticated Time-based blind SQL injection in ITFlow via expires parameter8.3CNA v3.10.4%2026-09-17Exploit codeFix
CVE-2026-54596ITFlow: Authenticated SQL injection8.1CNA v3.10.5%2026-09-17Exploit codeFix
CVE-2026-54594OmniBlocks: Spamming in Discussions tab possible via disc.yml5.3CNA v4.00.5%2026-09-17
CVE-2026-54587mport directory asset installation is vulnerable to symlink and path traversal races5.8CNA v4.00.1%2026-09-17Fix
CVE-2026-54586mport permits repository and package mirror fetches over insecure transport6.0CNA v4.00.2%2026-09-17Fix
CVE-2026-54585mport sample file handling can write outside the configured root6.0CNA v4.00.5%2026-09-17Fix
CVE-2026-54583mport package bundle downloads allow unsafe destination filenames8.3CNA v4.00.5%2026-09-17Fix
CVE-2026-54582mport package installation can overwrite existing unmanaged or differently owned files6.0CNA v4.00.6%2026-09-17Fix
CVE-2026-54581mport bootstrap index fetch can continue after hash verification failure8.3CNA v4.00.2%2026-09-17Fix
CVE-2026-54580mport index decompression can leave partial or corrupt index data after zstd failures8.3CNA v4.00.3%2026-09-17Fix
CVE-2026-54579mport mirror-selection ping accepts insufficiently validated ICMP replies2.3CNA v4.00.2%2026-09-17Fix
CVE-2026-54578mport verify can compare stale checksum data after hashing failures2.0CNA v4.00.1%2026-09-17Fix
CVE-2026-54577mport audit can inspect the wrong package when options are present2.0CNA v4.00.2%2026-09-17Fix
CVE-2026-54576mport package installation has symlink TOCTOU in chown and chmod handling5.8CNA v4.00.1%2026-09-17Fix
CVE-2026-54575mport package fetch and clean paths are vulnerable to TOCTOU filesystem races5.8CNA v4.00.1%2026-09-17Fix
CVE-2026-54571ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service8.7CNA v4.00.5%2026-09-17Fix
CVE-2026-54565rhwp browser extension service worker message handling server-side request forgery4.7CNA v3.10.2%2026-09-17Fix
CVE-2026-54551WireGuard Portal statistics WebSocket information disclosure4.3CNA v3.10.4%2026-09-17Fix
CVE-2026-54546CloudTAK: Authenticated full-read SSRF in CloudTAK basemap import no IP-classification guard5.0CNA v3.10.4%2026-09-17Fix