CVE-2026 list

CVE-2026 records published in September 2026

Page seven of 15: records 6,001 to 7,000 of the 14,718 published in September 2026, newest first. The first page carries the figures for September 2026.

CVE-2026 records published in September 2026, newest first: records 6,001 to 7,000 of 14,718
CVE Summary CVSS EPSS Published Signals
CVE-2026-54524Frappe HR: SQL injection in HRMS Salary Payments Based on Payment Mode Report7.1CNA v4.00.5%2026-09-17Fix
CVE-2026-54521FairEmail: Cross-site scripting (XSS) in AMP message rendering (ActivityAMP)6.1CNA v3.10.3%2026-09-17Fix
CVE-2026-54520AI Agent Automation workflow file step executor path traversal8.1CNA v3.10.5%2026-09-17Fix
CVE-2026-54519AI Agent Automation memory API missing authorization8.8CNA v3.10.5%2026-09-17Fix
CVE-2026-54510Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook7.1CNA v3.10.2%2026-09-17Fix
CVE-2026-54507Vvveb oEmbedProxy vulnerable to server-side request forgery8.4CNA v4.00.5%2026-09-17Fix
CVE-2026-54506Vvveb: Stored XSS via sanitizeHTML bypass in user profile bio field7.6CNA v3.10.3%2026-09-17Fix
CVE-2026-54504MCP Documentation Server web UI API missing authentication8.8CNA v3.10.6%2026-09-17Fix
CVE-2026-54501Webrecorder Browsertrix custom behavior Git URL handling command injection9.4CNA v4.01.2%2026-09-17Fix
CVE-2026-54495OpenFeature Operator cross-namespace FeatureFlagSource resolution information disclosure4.3CNA v3.10.3%2026-09-17
CVE-2026-54471Dell SmartFabric Manager improper handling of insufficient permissions3.5CNA v3.10.2%2026-09-17Fix
CVE-2026-54460OpenReception WebAuthn passkey enrollment missing authentication9.8CNA v3.10.7%2026-09-17Fix
CVE-2026-54451Elixir protobuf: Unbounded recursion depth in embedded-message decoding8.2CNA v4.00.5%2026-09-17Fix
CVE-2026-54446NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode8.1CNA v3.10.6%2026-09-17Fix
CVE-2026-54355MapServer: Reflected XSS in OpenLayers HTML Output via `HTTP_X_FORWARDED_HOST`5.3CNA v4.00.5%2026-09-17Fix
CVE-2026-54354MapServer: PostGIS Numeric Filter Value SQL injection in MapServer Runtime Query Translation8.2CNA v3.10.7%2026-09-17Fix
CVE-2026-54343Frappe LMS: Path traversal in SCORM File Serving8.7CNA v4.00.7%2026-09-17Fix
CVE-2026-54339Glean: Server-side request forgery with Full Response Disclosure7.7CNA v3.10.5%2026-09-17Fix
CVE-2026-54253joni1802 ts3-manager TS3 Manager: Reflected XSS8.2CNA v3.10.3%2026-09-17Fix
CVE-2026-54239WP Engine Faust.js FaustWP authentication bypass8.8CNA v3.10.3%2026-09-17Fix
CVE-2026-54237Wavelog: Unauthenticated remote code execution9.3CNA v4.00.8%2026-09-17Fix
CVE-2026-54053brufdev many-notes many Notes: Path traversal9.6CNA v3.10.7%2026-09-17Fix
CVE-2026-53557SQLBot: Second-order SQL injection via Excel Datasource leading to remote command execution7.7CNA v4.00.3%2026-09-17Fix
CVE-2026-53556SQLBot: Authenticated SQL injection in previewData resulting in arbitrary file read6.0CNA v4.00.5%2026-09-17Fix
CVE-2026-53555dataease SQLBot stored XSS via SVG upload5.1CNA v4.00.5%2026-09-17Fix
CVE-2026-53554SQLBot: Arbitrary file write7.3CNA v4.00.4%2026-09-17Fix
CVE-2026-53534JabRef CAYW Sublime Text integration permits operating-system command injection7.5CNA v4.00.4%2026-09-17Fix
CVE-2026-52852Traccar: Uncontrolled infinite loop DoS via Group Parent Cycle6.5CNA v3.10.5%2026-09-17Fix
CVE-2026-52851Traccar: Authenticated blind SQL injection in delete /API/permissions7.1CNA v3.10.4%2026-09-17Fix
CVE-2026-52836OpenDDS RTPS UDP receive strategy out-of-bounds read8.7CNA v4.00.7%2026-09-17Fix
CVE-2026-52727lxc-ci Arch Linux image pacman keyring hard-coded cryptographic key7.2CNA v3.10.6%2026-09-17Fix
CVE-2026-52483MitraStar GPT-2741GNAC-N2-SV router device management utilities CGI command injection8.8CISA ADP v3.10.5%2026-09-17
CVE-2026-50610Acer System Monitoring NitroSense and PredatorSense software privilege escalation7.4CNA v4.00.1%2026-09-17
CVE-2026-50609Acer System Monitoring NitroSense and PredatorSense Named Pipe service privilege escalation7.4CNA v4.00.1%2026-09-17
CVE-2026-50608Acer System Monitoring authentication vulnerability in NitroSense and PredatorSense software1.2CNA v4.00.2%2026-09-17
CVE-2026-50607Acer System Monitoring WebSocket Exposure vulnerability in NitroSense and PredatorSense software2.7CNA v4.00.4%2026-09-17
CVE-2026-50606Acer System Monitoring NitroSense and PredatorSense hard-coded encryption key1.2CNA v4.00.1%2026-09-17
CVE-2026-50605Acer Agent Serivce privilege escalation vulnerability in NitroSense and PredatorSense software7.4CNA v4.00.1%2026-09-17
CVE-2026-50604Acer Agent Service unauthenticated access vulnerability in NitroSense and PredatorSense software4.9CNA v4.00.2%2026-09-17
CVE-2026-50603Hard-coded encryption key vulnerability in Acer Agent Service for NitroSense and PredatorSense4.9CNA v4.00.1%2026-09-17
CVE-2026-50291OpenImageIO: Segmentation Fault in BmpInput::read_native_scanline (bmpinput.cpp:399)5.5CNA v3.10.2%2026-09-17Fix
CVE-2026-50285Pomerium: Pre-Auth memory exhaustion via Unbounded zstd Decompression in HPKE Callback7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-50277Datadog dd-trace-cpp W3C baggage header parser denial of service7.5CNA v3.10.8%2026-09-17Fix
CVE-2026-50275DataDog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS7.5CNA v3.10.7%2026-09-17Fix
CVE-2026-50158eat-pray-ai yutu caption-download MCP tool vulnerability7.7CNA v3.10.2%2026-09-17Fix
CVE-2026-50125MKP pod log retrieval tool resource exhaustion7.5CNA v3.10.5%2026-09-17Fix
CVE-2026-50022Metacat acts as unintended proxy to backend Apache SOLR engine5.8CNA v3.10.4%2026-09-17Fix
CVE-2026-49292Kiwi TCMS: The /init-db/ page renders and responds to requests after first use0.0CNA v3.10.4%2026-09-17Fix
CVE-2026-48977OpenSlide: Arbitrary memory write with crafted Ventana BIF file7.7CNA v4.00.5%2026-09-17Fix
CVE-2026-47252Anyquery: AppleScript/JXA code injection9.0CNA v3.10.7%2026-09-17Fix
CVE-2026-45726Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService7.6CNA v3.10.1%2026-09-17Fix
CVE-2026-45723Sidero Labs Omni image factory schematic API path traversal2.7CNA v3.10.5%2026-09-17Fix
CVE-2026-45720Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token7.0CNA v3.10.1%2026-09-17Fix
CVE-2026-45143Chamilo LMS: Student-to-admin stored XSS in private messages via v-html9.0CNA v3.10.5%2026-09-17Fix
CVE-2026-45140Chamilo LMS CStudio upload flow allows unauthenticated remote code execution9.8CNA v3.11.3%2026-09-17Exploit codeFix
CVE-2026-44940Service token exposure and potential privilege escalation in SUSE Observability5.7CNA v3.10.2%2026-09-17Fix
CVE-2026-44236rabbitmq-c AMQP login handshake heap-based buffer overflow7.1CNA v3.10.5%2026-09-17Fix
CVE-2026-44235rabbitmq-c AMQP frame length parser out-of-bounds read6.5CNA v3.10.4%2026-09-17Fix
CVE-2026-28326SolarWinds Access Rights Manager unauthenticated remote code execution8.8CNA v3.10.7%2026-09-17Fix
CVE-2026-26950Dell SmartFabric Manager insufficient verification of data authenticity8.1CNA v3.10.2%2026-09-17Fix
CVE-2026-25294Qualcomm Snapdragon buffer over-read in WLAN firmware7.4CNA v3.10.1%2026-09-17Fix
CVE-2026-25290Qualcomm Snapdragon integer overflow or wraparound in OOBM7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-25284Qualcomm Snapdragon buffer over-read in OOBM7.3CNA v3.10.1%2026-09-17Fix
CVE-2026-25283Qualcomm Snapdragon stack-based buffer overflow in OOBM8.8CNA v3.10.1%2026-09-17Fix
CVE-2026-25282Qualcomm Snapdragon out-of-bounds read in OOBM7.9CNA v3.10.1%2026-09-17Fix
CVE-2026-25281Qualcomm Snapdragon allocation of resources without limits or throttling in OOBM7.4CNA v3.10.1%2026-09-17Fix
CVE-2026-25280Qualcomm Snapdragon out-of-bounds write in DSP service7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-25278Qualcomm Snapdragon I2C driver race condition7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-25275Qualcomm Snapdragon buffer over-read in WLAN firmware7.5CNA v3.10.2%2026-09-17Fix
CVE-2026-25261Qualcomm Snapdragon untrusted pointer dereference in Camera6.7CNA v3.10.1%2026-09-17Fix
CVE-2026-24081Qualcomm Snapdragon buffer over-read in BT controller7.4CNA v3.10.1%2026-09-17Fix
CVE-2026-24075Buffer over-read in Qualcomm IPC7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-24074Qualcomm Snapdragon out-of-bounds write in Video7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-24073Qualcomm Snapdragon out-of-bounds write in Video7.8CNA v3.10.1%2026-09-17Fix
CVE-2026-19477MCC Universal Library stack-based buffer overflow vulnerability in Linux (uldaq)8.6CNA v4.00.1%2026-09-17
CVE-2026-18441Appointment Booking Plugin WordPress plugin insecure direct object reference4.3CNA v3.10.2%2026-09-17Fix
CVE-2026-16750Motors WordPress plugin unauthorized access5.3CNA v3.10.2%2026-09-17Fix
CVE-2026-16582Booking for Appointments and Events Calendar WordPress plugin unauthorized access5.3CNA v3.10.2%2026-09-17Fix
CVE-2026-15815Grafana plugin archive extraction path traversal8.8CNA v3.10.7%2026-09-17Fix
CVE-2026-15688Password authentication bypass vulnerability in GX Works3 and Motion Control Setting9.2CNA v4.00.1%2026-09-17
CVE-2026-14850Weak password recovery mechanism for forgotten password in MobiAPParc8.8CNA v4.00.3%2026-09-17Fix
CVE-2026-14311Booking for Appointments and Events Calendar WordPress plugin unauthorized access5.4CNA v3.10.2%2026-09-17Fix
CVE-2026-12284Mattermost Desktop App Missing IPC Sender Validation in Calls Leave handler3.8CNA v3.10.1%2026-09-17Fix
CVE-2026-8674The GNU C Library glibc assertion failure in the DNS stub resolver with a long search domain5.3CNA v3.10.3%2026-09-17Fix
CVE-2026-2585Brizy Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-17Fix
CVE-2026-92816ComfyUI path traversal via dataset save nodes8.5CNA v4.00.2%2026-09-16Fix
CVE-2026-92815changedetection.io SSRF via browser-step Goto URL8.7CNA v4.00.5%2026-09-16
CVE-2026-92814changedetection.io cross-site scripting via watch_title2.3CNA v4.00.3%2026-09-16
CVE-2026-92813Metabase SSRF via GeoJSON URL validation bypass6.9CNA v4.00.5%2026-09-16
CVE-2026-92812decaporg decap-cms Decap CMS path traversal via Sibling Directory Prefix Matching9.3CNA v4.00.4%2026-09-16Fix
CVE-2026-92811browserless file Protocol Restriction Bypass7.1CNA v4.00.5%2026-09-16
CVE-2026-92810PrestaShop blockwishlist information disclosure5.3CNA v4.00.3%2026-09-16
CVE-2026-92809PrestaShop psgdpr GDPR Log Forgery5.3CNA v4.00.3%2026-09-16
CVE-2026-92808Altium Enterprise Server UnifiedLogin service server-side request forgery10.0CNA v4.00.6%2026-09-16Fix
CVE-2026-92806phpList cross-site request forgery via massremove.php7.2CNA v4.00.3%2026-09-16Fix
CVE-2026-92805UVdesk Community Skeleton missing authentication on the Installation Wizard9.3CNA v4.00.6%2026-09-16
CVE-2026-92804Nango server-side request forgery via Configuration7.1CNA v4.00.4%2026-09-16
CVE-2026-92803LibreTranslate Missing Access Check on the download_file route6.9CNA v4.00.5%2026-09-16
CVE-2026-92802kan authorization bypass via GitHub Project Import5.3CNA v4.00.4%2026-09-16
CVE-2026-92801cc-connect User Allowlist Bypass via Feishu Card Actions8.7CNA v4.00.5%2026-09-16
CVE-2026-92800Docs Stale Collaboration Session after Access Revocation7.6CNA v4.00.4%2026-09-16Fix
CVE-2026-92796Manticore Search Multi-Statement authorization bypass8.7CNA v4.00.5%2026-09-16Fix
CVE-2026-92795coze-dev coze-studio coze Studio server-side request forgery via plugin7.1CNA v4.00.4%2026-09-16
CVE-2026-92794OpenSign information disclosure via getDocument8.7CNA v4.00.6%2026-09-16
CVE-2026-92793GoAdminGroup go-admin GoAdmin authorization bypass via Query parameter8.6CNA v4.00.4%2026-09-16
CVE-2026-92792OpenNHP authentication bypass via Fallback Verifier8.7CNA v4.00.6%2026-09-16
CVE-2026-92791Uber Kraken path traversal via tag parameter8.7CNA v4.00.6%2026-09-16
CVE-2026-92790Higress Rate Limit Bypass via Malformed Cookie header6.9CNA v4.00.5%2026-09-16Fix
CVE-2026-92789graylog2-server graylog server-side request forgery via HTTP Redirect7.1CNA v4.00.4%2026-09-16
CVE-2026-92788coze-dev coze-studio Coze Studio Cross-Tenant Database Access via Workflow SQL Node8.7CNA v4.00.5%2026-09-16
CVE-2026-92787Feast authentication bypass via Unverified Token9.3CNA v4.00.7%2026-09-16
CVE-2026-92786LightGBM out-of-bounds write via Crafted Model8.5CNA v4.00.2%2026-09-16Fix
CVE-2026-92785Angel Unauthenticated Kryo deserialization of arbitrary Classes9.2CNA v4.00.6%2026-09-16
CVE-2026-92784@refinedev/inferencer code injection via API Field Names7.7CNA v4.00.5%2026-09-16
CVE-2026-92783Yeti missing authorization on RBAC Relationship Deletion7.2CNA v4.00.5%2026-09-16
CVE-2026-92782Chroma authorization bypass via Collection Identifier8.6CNA v4.00.4%2026-09-16
CVE-2026-92781Builder.io Gen2 SDKs prototype pollution via builder.userAttributes5.3CNA v4.00.4%2026-09-16
CVE-2026-92780KnowStreaming missing authorization on the REST API8.7CNA v4.00.5%2026-09-16
CVE-2026-92779Builder.io Gen2 SDKs prototype pollution via Bindings7.2CNA v4.00.5%2026-09-16
CVE-2026-92778CMAK Feature Gate Bypass via HTML Form Routes5.3CNA v4.00.4%2026-09-16
CVE-2026-92776Wiki.js Path Prefix Matching authorization bypass8.6CNA v4.00.4%2026-09-16
CVE-2026-92775Wiki.js server-side request forgery via Image Prefetch7.1CNA v4.00.4%2026-09-16
CVE-2026-92774Wiki.js authorization bypass via GraphQL Tag Omission5.3CNA v4.00.4%2026-09-16
CVE-2026-92773Trigger.dev GitHub App Installation takeover7.1CNA v4.00.3%2026-09-16Fix
CVE-2026-92772Leantime Unauthorized Plugin Installation via HTMX7.1CNA v4.00.5%2026-09-16Fix
CVE-2026-92771Twenty permission bypass via groupBy-with-records Query7.1CNA v4.00.4%2026-09-16Fix
CVE-2026-92770Harbor Scanner credential disclosure via Query parameter7.1CNA v4.00.5%2026-09-16
CVE-2026-92765ArcherySec information disclosure via WebScanVulnList7.1CNA v4.00.5%2026-09-16
CVE-2026-92764OpenCVE Organization API Ignores Token Scope5.3CNA v4.00.4%2026-09-16Fix
CVE-2026-92763Rundeck authorization bypass via Project Import8.6CNA v4.00.5%2026-09-16
CVE-2026-92762Pelican Panel authorization bypass via Startup8.7CNA v4.00.7%2026-09-16Fix
CVE-2026-92761WebVirtCloud missing authorization on Instance Control Actions8.7CNA v4.00.6%2026-09-16
CVE-2026-92760Shlink Mercure Token authorization bypass7.1CNA v4.00.4%2026-09-16
CVE-2026-92759SecObserve information disclosure via API Configuration7.1CNA v4.00.5%2026-09-16Fix
CVE-2026-92754PatrowlManager improper access control via users API5.3CNA v4.00.3%2026-09-16
CVE-2026-92753PatrowlManager authorization bypass via Events API7.1CNA v4.00.4%2026-09-16
CVE-2026-92752metasfresh unauthorized access via Document Attachments and Comments endpoints8.7CNA v4.00.5%2026-09-16
CVE-2026-92751CMAK cross-site request forgery via missing CSRF Filter7.2CNA v4.00.3%2026-09-16
CVE-2026-92750Harness missing access control via infraproviders endpoint7.1CNA v4.00.3%2026-09-16
CVE-2026-92749SafeLine authentication bypass via Weak Session Secret9.2CNA v4.00.7%2026-09-16
CVE-2026-92748BC Security Empire path traversal file upload RCE8.7CNA v4.00.8%2026-09-16Fix
CVE-2026-92729SigNoz missing authentication on Trace Funnel Analytics endpoints8.8CNA v4.00.6%2026-09-16Fix
CVE-2026-92720Kubero Unauthenticated Notifications API Access9.3CNA v4.00.6%2026-09-16
CVE-2026-92719Quickwit SSRF via SQS queue_url parameter8.7CNA v4.00.5%2026-09-16
CVE-2026-92718Nuclei from Template Signature Bypass via Modification-Time-Only Cache7.0CNA v4.00.1%2026-09-16Fix
CVE-2026-92717Covenant missing authentication on the CovenantHub SignalR Hub9.3CNA v4.00.5%2026-09-16
CVE-2026-92716Shuffle API Key Reset Cross-Tenant privilege escalation8.6CNA v4.00.4%2026-09-16
CVE-2026-92627The HDF Group HDF5 heap use-after-free in H5T__conv_f_f4.6CNA v4.00.2%2026-09-16Fix
CVE-2026-92626Control iD iDSecure unauthenticated denial of service7.5CNA v3.10.5%2026-09-16Fix
CVE-2026-92625Control iD iDSecure unauthenticated denial of service7.5CNA v3.10.7%2026-09-16Fix
CVE-2026-92616FileRise privilege escalation via WebDAV Session Inheritance7.6CNA v4.00.4%2026-09-16Fix
CVE-2026-92615Red Hat Flightctl device-render worker git client race condition6.6CNA v3.10.2%2026-09-16
CVE-2026-92605dfir-iris iris-web IRIS Unauthorized Comment Access via Object ID7.1CNA v4.00.4%2026-09-16
CVE-2026-92604Scirius arbitrary file write via PCAP upload7.2CNA v4.00.6%2026-09-16
CVE-2026-92603continew-org continew-admin ContiNew Admin Unauthorized Message Deletion via UserMessageController7.1CNA v4.00.5%2026-09-16
CVE-2026-92602TDuckCloud tduck-survey-form TDuck survey form server-side request forgery7.1CNA v4.00.4%2026-09-16
CVE-2026-92601Guns improper access control via SysNoticeController7.1CNA v4.00.4%2026-09-16
CVE-2026-92600Guns information disclosure via missing permission check7.1CNA v4.00.4%2026-09-16
CVE-2026-92599Joi and ReDoS via isoDate8.7CNA v4.00.6%2026-09-16Fix
CVE-2026-92598Nodemailer IDN/Punycode Domain Allow-list Bypass8.3CNA v4.00.4%2026-09-16Fix
CVE-2026-92597Nodemailer Email Domain Validation Bypass via RFC 5322 Comment8.3CNA v4.00.4%2026-09-16Fix
CVE-2026-92596Nodemailer denial of service via addressparser8.7CNA v4.00.8%2026-09-16Fix
CVE-2026-92595Nodemailer Security sandbox bypass via resolveContent6.0CNA v4.00.3%2026-09-16Fix
CVE-2026-92594Craft CMS Unauthenticated PII Disclosure via GraphQL8.7CNA v4.00.4%2026-09-16Fix
CVE-2026-92593Craft CMS authenticated remote code execution8.7CNA v4.00.5%2026-09-16Fix
CVE-2026-92592Craft CMS remote code execution via signed cookie8.7CNA v4.00.6%2026-09-16Exploit codeFix
CVE-2026-92591Craft CMS Environment secret exposure via Installer8.2CNA v4.00.4%2026-09-16Fix
CVE-2026-92590Craft CMS stored XSS via Generated fields5.1CNA v4.00.2%2026-09-16Fix
CVE-2026-92589Craft CMS broken access control via nested-elements/reorder5.3CNA v4.00.3%2026-09-16Fix
CVE-2026-92588n8n improper authorization via Source Control Push5.9CNA v4.00.3%2026-09-16Fix
CVE-2026-92587n8n sandbox escape via Git Relative URL5.3CNA v4.00.3%2026-09-16Fix
CVE-2026-92586AVideo missing authorization via comment API endpoint5.3CNA v4.00.3%2026-09-16
CVE-2026-92585AVideo missing authorization Check via API Like endpoint5.3CNA v4.00.3%2026-09-16
CVE-2026-92584AVideo stored cross-site scripting via User-Agent header5.3CNA v4.00.3%2026-09-16
CVE-2026-92583AVideo Rate Limit Bypass via Non-Atomic Counter Increment6.9CNA v4.00.3%2026-09-16
CVE-2026-92582AVideo broken access control via videoAddNew.json.php CSRF Bypass7.1CNA v4.00.2%2026-09-16Fix
CVE-2026-92581AVideo Like Counter Desynchronization via Array parameter5.3CNA v4.00.3%2026-09-16
CVE-2026-92580AVideo CloneSite Stored Shell injection via SSH password CSRF8.7CNA v4.01.4%2026-09-16
CVE-2026-92579AVideo broken access control via CSRF Exemption Basename Collision5.3CNA v4.00.3%2026-09-16
CVE-2026-92578WWBN AVideo authentication bypass via Stored Password Hash9.2CNA v4.00.6%2026-09-16
CVE-2026-92577AVideo API get_api_video broken access control via clean_title8.7CNA v4.00.4%2026-09-16Fix
CVE-2026-92576HKUDS nanobot server-side request forgery via WebFetchTool9.2CNA v4.00.4%2026-09-16Fix
CVE-2026-92570reNgine Unauthorized Configuration File Read7.1CNA v4.00.4%2026-09-16
CVE-2026-92569Hippo4j SSRF via clientAddress parameter5.3CNA v4.00.3%2026-09-16
CVE-2026-92568MLRun server-side request forgery via Webhook5.3CNA v4.00.3%2026-09-16
CVE-2026-92567TDuckCloud tduck-survey-form TDuck survey form unauthorized data modification7.1CNA v4.00.4%2026-09-16
CVE-2026-92566DataGear unauthenticated SSRF via HTTP Dataset Preview8.8CNA v4.00.5%2026-09-16
CVE-2026-92565Rallly information disclosure via polls.get6.9CNA v4.00.5%2026-09-16Fix
CVE-2026-92527chatwoot Shopify OAuth callbacks_controller.rb server-side request forgery5.3CNA v4.00.4%2026-09-16
CVE-2026-92526itsourcecode Leave Management System index.php SQL injection5.3CNA v4.00.3%2026-09-16
CVE-2026-92475GPAC downloader.c wait_for_header_and_parse out-of-bounds4.8CNA v4.00.2%2026-09-16Fix
CVE-2026-92474GPAC Proto Link mpeg4_inline.c gf_inline_get_proto_lib use-after-free4.8CNA v4.00.2%2026-09-16Fix
CVE-2026-92473GPAC BIFS commands.c gf_sg_command_del use-after-free4.8CNA v4.00.2%2026-09-16Fix
CVE-2026-92472GPAC MP4Box base_scenegraph.c gf_node_deactivate_ex use-after-free4.8CNA v4.00.2%2026-09-16Fix
CVE-2026-92469microservices-platform arbitrary file deletion via Missing Ownership Check7.2CNA v4.00.5%2026-09-16
CVE-2026-92468microservices-platform Arbitrary Elasticsearch Index Read via search-center7.1CNA v4.00.5%2026-09-16
CVE-2026-92467microservices-platform unverified password change via /users/password8.7CNA v4.00.5%2026-09-16
CVE-2026-92466microservices-platform missing authorization via Disabled URL Permission Checking8.7CNA v4.00.9%2026-09-16
CVE-2026-92465WP Mega Menu WordPress plugin SQL injection7.6CNA v3.10.4%2026-09-16
CVE-2026-92463yshop-crm missing authorization via Disabled Annotation on System User Listing7.1CNA v4.00.5%2026-09-16
CVE-2026-92462yshop-crm missing authorization via CrmFlowController deleteFlowStep7.1CNA v4.00.4%2026-09-16
CVE-2026-92461yshop-crm missing authorization via CRM Approval-Chain endpoint5.3CNA v4.00.4%2026-09-16
CVE-2026-92460yshop-crm missing authorization via CRM Operation-Log Listing7.1CNA v4.00.5%2026-09-16
CVE-2026-92459yshop-crm missing authorization via CRM Lead-Claim endpoint7.1CNA v4.00.4%2026-09-16
CVE-2026-92458yshop-crm missing authorization via StoreProductController onSale5.3CNA v4.00.4%2026-09-16
CVE-2026-92457yshop-crm missing authorization via CrmInvoiceController issueInvoice7.1CNA v4.00.4%2026-09-16
CVE-2026-92456guchengwuyue yshop-crm CRM customer rule-configuration endpoints missing authorization7.1CNA v4.00.5%2026-09-16
CVE-2026-92455guchengwuyue yshop-crm CRM customer messaging endpoints missing authorization5.3CNA v4.00.4%2026-09-16
CVE-2026-92418ChangeWeDer crm customer save endpoint cross-site scripting5.1CNA v4.00.3%2026-09-16
CVE-2026-92417Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference7.1CNA v4.00.7%2026-09-16
CVE-2026-92416Open5GS PFCP Session Report request n4-handler.c smf_n4_handle_session_report_request assertion5.3CNA v4.00.5%2026-09-16
CVE-2026-92413Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_filter null pointer dereference5.3CNA v4.00.6%2026-09-16
CVE-2026-92406SourceCodester Inventory and Monitoring System btn_functions.php add SQL injection6.9CNA v4.00.4%2026-09-16
CVE-2026-92405SourceCodester Inventory and Monitoring System index.php SQL injection6.9CNA v4.00.4%2026-09-16
CVE-2026-92402ChangeWeDer crm top.upstudy.crm.controller.UserController UserController.java index authorization5.3CNA v4.00.4%2026-09-16
CVE-2026-92401ChangeWeDer crm improper authentication6.9CNA v4.00.7%2026-09-16
CVE-2026-92399GPAC WebSocket rmt_ws.c rmt_client_handle_ws_frame heap-based overflow6.9CNA v4.00.7%2026-09-16Fix
CVE-2026-92398Ruijie RG-EW3000GX user_list_note admin os command injection9.4CNA v4.03.2%2026-09-16
CVE-2026-92397Ruijie RG-EW3000GX configChange unifyframe-sgi.elf cc_set os command injection9.4CNA v4.03.2%2026-09-16
CVE-2026-92395@fastify/proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet9.1CNA v3.10.3%2026-09-16Fix
CVE-2026-92385SourceCodester Online Food Ordering System Category Update update_category.php cross-site scripting4.8CNA v4.00.4%2026-09-16
CVE-2026-92383PbootCMS User Management UserController.php mod cross-site request forgery5.3CNA v4.00.2%2026-09-16Fix
CVE-2026-92381PbootCMS Template Rendering ContentController.php decode_string cross-site scripting5.1CNA v4.00.3%2026-09-16
CVE-2026-92380WuzhiCMS Remote Image Fetch index.php saveRemote server-side request forgery6.9CNA v4.00.5%2026-09-16
CVE-2026-92366code-projects Matrimonial System Regular Search search.php SQL injection6.9CNA v4.00.6%2026-09-16
CVE-2026-92365Vllm-project vLLM thinking_budget_state.py algorithmic complexity5.3CNA v4.00.5%2026-09-16Fix
CVE-2026-92364itsourcecode Leave Management System index.php SQL injection5.3CNA v4.00.3%2026-09-16
CVE-2026-92363ag-ui-protocol ag-ui JSON sse_parser.cpp resource consumption5.3CNA v4.00.5%2026-09-16
CVE-2026-92362ag-ui-protocol ag-ui SSE Frame sse.rs resource consumption6.9CNA v4.00.5%2026-09-16
CVE-2026-92361ag-ui-protocol ag-ui SSE client client.go resource consumption5.3CNA v4.00.5%2026-09-16
CVE-2026-92360ag-ui-protocol ag-ui Event Application Layer agent.ts prepareRunAgentInput origin validation5.3CNA v4.00.2%2026-09-16
CVE-2026-92359ag-ui-protocol ag-ui CORSMiddleware utils.py create_strands_app cross-domain policy2.3CNA v4.00.3%2026-09-16Fix
CVE-2026-92358Red Hat Keycloak account-link proof insufficient session expiration6.4CNA v3.10.3%2026-09-16
CVE-2026-92357a2ui-project a2ui Model Processor model-processor.ts information disclosure5.3CNA v4.00.4%2026-09-16
CVE-2026-92356a2ui-project a2ui Update components basic_functions.ts updateComponents resource consumption5.3CNA v4.00.5%2026-09-16
CVE-2026-92355Octopus Deploy Octopus Server path traversal8.7CNA v4.00.7%2026-09-16Fix
CVE-2026-92299@jitsi/electron-sdk Unauthorized Screen Capture7.1CNA v4.00.5%2026-09-16Fix
CVE-2026-92298EspoCRM Weak Token Generation via rand6.3CNA v4.00.4%2026-09-16
CVE-2026-92247synaptikcms synaptik-cms Admin File Manager file-manager.php rename unrestricted upload5.1CNA v4.00.4%2026-09-16Exploit codeFix
CVE-2026-92221gedelumbung HospitalManagement app_global_admin_model.php generate_index_pasien SQL injection5.1CNA v4.00.3%2026-09-16
CVE-2026-92220vLLM MoRIIO acknowledgment handler resource exhaustion6.9CNA v4.00.7%2026-09-16Fix
CVE-2026-92217a2ui message processor mass assignment5.3CNA v4.00.4%2026-09-16
CVE-2026-92216a2ui-project a2ui Binder generic-binder.ts openUrl redirect5.3CNA v4.00.5%2026-09-16
CVE-2026-92215a2ui-project a2ui FileResolver file_resolver.py httpx.get server-side request forgery6.9CNA v4.00.5%2026-09-16
CVE-2026-92214a2ui-project a2ui a2a-chat-canvas sanitizer-markdown-renderer-service.ts cross-site scripting5.1CNA v4.00.3%2026-09-16
CVE-2026-92213a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection5.1CNA v4.00.3%2026-09-16
CVE-2026-92141Jenkins Keycloak Authentication Plugin open redirect4.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-92140Jenkins Gitee Plugin cross-site scripting6.8CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-92139Jenkins Bitbucket Push and Pull Request Plugin server-side request forgery6.5CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-92138Jenkins Bitbucket Server Integration Plugin insufficient verification of data authenticity4.2CISA ADP v3.10.1%2026-09-16Fix
CVE-2026-92137Jenkins Robot Framework Plugin path traversal8.8CISA ADP v3.10.8%2026-09-16Fix
CVE-2026-92136Jenkins OWASP Dependency-Check Plugin cross-site scripting8.0CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-92135Jenkins Coverage Plugin cross-site scripting8.0CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-92134Jenkins Warnings Plugin cross-site scripting8.0CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-92133Jenkins GitLab Plugin insufficiently protected credentials5.4CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-92132Jenkins Gradle Plugin injection5.4CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-92131Jenkins Pipeline: Groovy Libraries Plugin path traversal4.2CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-92130Jenkins Pipeline: Multibranch Plugin incorrect authorization3.1CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-92129Jenkins Script Security Plugin protection mechanism failure7.5CISA ADP v3.10.5%2026-09-16Fix
CVE-2026-92128Jenkins Script Security Plugin download without integrity check7.5CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-92127Jenkins Script Security Plugin code injection8.0CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-92126Jenkins Script Security Plugin unsafe reflection8.5v3.10.6%2026-09-16Fix
CVE-2026-92125Jenkins Script Security Plugin code injection8.8CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-92124Jenkins Script Security Plugin arbitrary code execution8.8CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-92123Jenkins Script Security Plugin arbitrary code execution8.8CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-92122Jenkins Script Security Plugin arbitrary code execution8.8CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-92091Red Hat Ansible Automation Platform 2 jwcrypto: Jwcrypto: Denial of service5.9CNA v3.10.7%2026-09-16Fix
CVE-2026-92087@fastify/auth vulnerable to authorization bypass via order-dependent evaluation of composed auth8.1CNA v3.10.5%2026-09-16Fix
CVE-2026-92081fastify vulnerable to denial of service via unhandled exception on HTTP/2 trailer responses5.9CNA v3.10.4%2026-09-16Fix
CVE-2026-91843Stack overflow in login process to the Security Management and Log Servers9.8CNA v3.10.5%2026-09-16
CVE-2026-91106HP Linux Imaging and Printing Software (HPLIP) heap-based buffer overflow9.3CNA v4.01.0%2026-09-16Fix
CVE-2026-91105HP Linux Imaging and Printing Software (HPLIP) heap-based buffer overflow8.6CNA v4.01.0%2026-09-16Fix
CVE-2026-91104HP Linux Imaging and Printing Software (HPLIP) heap-based buffer overflow9.3CNA v4.01.1%2026-09-16Fix
CVE-2026-91103HP Linux Imaging and Printing Software (HPLIP) integer underflow5.1CNA v4.01.0%2026-09-16Fix
CVE-2026-91102HP Linux Imaging and Printing Software (HPLIP) OS command injection8.4CNA v4.00.8%2026-09-16Fix
CVE-2026-91101HP Linux Imaging and Printing Software (HPLIP) improper array index validation5.1CNA v4.01.0%2026-09-16Fix
CVE-2026-91100HP Linux Imaging and Printing Software (HPLIP) OS command injection6.8CNA v4.00.7%2026-09-16Fix
CVE-2026-91099HP Linux Imaging and Printing Software (HPLIP) symlink following5.1CNA v4.01.0%2026-09-16Fix
CVE-2026-91098HP Linux Imaging and Printing Software (HPLIP) heap-based buffer overflow8.6CNA v4.01.0%2026-09-16Fix
CVE-2026-91097HP Linux Imaging and Printing Software (HPLIP) out-of-bounds write7.0CNA v4.01.0%2026-09-16Exploit codeFix
CVE-2026-90999Sentry Seer telemetry ingestion vulnerability9.8CISA ADP v3.10.7%2026-09-16Fix
CVE-2026-90049Linux kernel skbuff zerocopy vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-90048Linux kernel NTFS3 file system driver out-of-bounds write9.8CNA v3.10.7%2026-09-16Fix
CVE-2026-90047Linux kernel Xe graphics driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90046Linux kernel page allocator vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90045Linux kernel USB gadget ffs use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90044Linux kernel usb gadget f_fs use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90043Linux kernel zram driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90042Linux kernel Ceph client vulnerability9.8CNA v3.10.5%2026-09-16Fix
CVE-2026-90041Linux kernel Sony HID driver vulnerability8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-90040Linux kernel KVM SEV vulnerability–0.2%2026-09-16Fix
CVE-2026-90039Linux kernel NFS server admin state revocation vulnerability–0.2%2026-09-16Fix
CVE-2026-90038Linux kernel NFS server export state revocation use-after-free9.8CNA v3.10.6%2026-09-16Fix
CVE-2026-90037Linux kernel NFS server close_lru reaping use-after-free9.8CNA v3.10.5%2026-09-16Fix
CVE-2026-90036Linux kernel NFS server blocked-lock reaping use-after-free9.8CNA v3.10.5%2026-09-16Fix
CVE-2026-90035Linux kernel AMD display driver division by zero–0.2%2026-09-16Fix
CVE-2026-90034Linux kernel MDC800 USB camera driver vulnerability–0.2%2026-09-16Fix
CVE-2026-90033Linux kernel ALSA usb-audio driver out-of-bounds write–0.2%2026-09-16Fix
CVE-2026-90032Linux kernel usbtv ALSA audio driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90031Linux kernel ENE UB6250 card reader driver race condition–0.2%2026-09-16Fix
CVE-2026-90030Linux kernel dwc3 USB driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90029Linux kernel realtek_cr USB storage driver use-after-free–0.2%2026-09-16Fix
CVE-2026-90028Linux kernel HD3SS3220 USB Type-C driver vulnerability–0.2%2026-09-16Fix
CVE-2026-90027Linux kernel qcom-pmic-typec USB driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90026Linux kernel qcom-pmic USB Type-C driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90025Linux kernel UCSI DisplayPort driver vulnerability7.7CNA v3.10.2%2026-09-16Fix
CVE-2026-90024Linux kernel usb gadget midi2 driver null pointer dereference–0.2%2026-09-16Fix
CVE-2026-90023Linux kernel USB mass storage gadget buffer configuration null pointer dereference–0.2%2026-09-16Fix
CVE-2026-90022Linux kernel f_midi2 USB gadget driver use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90021Linux kernel USB MIDI gadget driver improper initialization–0.2%2026-09-16Fix
CVE-2026-90020Linux kernel USB gadget device ioctl handling null pointer dereference–0.2%2026-09-16Fix
CVE-2026-90019Linux kernel USB gadget function instance release null pointer dereference–0.2%2026-09-16Fix
CVE-2026-90018Linux kernel RTL8723BS Wi-Fi driver WPS IE parsing out-of-bounds write8.8CNA v3.10.4%2026-09-16Fix
CVE-2026-90017Linux kernel RTL8723BS Wi-Fi driver action frame parsing out-of-bounds read7.1CNA v3.10.4%2026-09-16Fix
CVE-2026-90016Linux kernel RTL8723BS Wi-Fi driver WMM IE parsing out-of-bounds read7.1CNA v3.10.4%2026-09-16Fix
CVE-2026-90015Linux kernel xHCI bounce buffer handling vulnerability–0.2%2026-09-16Fix
CVE-2026-90014Linux kernel event filter and trigger display files use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90013Linux kernel trace options file handling use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90012Linux kernel SPI DMA mapping null pointer dereference9.8CNA v3.10.6%2026-09-16Fix
CVE-2026-90011Linux kernel iSCSI target login request handling vulnerability9.1CNA v3.10.8%2026-09-16Fix
CVE-2026-90010Linux kernel bsg io_uring sense buffer copy vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90009Linux kernel bsg io_uring passthrough command setup race condition7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90008Linux kernel megaraid_sas NVMe PRP list construction vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90007Linux kernel pm8001 MSI-X vector allocation vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90006Linux kernel DAMON mtier sample module vulnerability–0.2%2026-09-16Fix
CVE-2026-90005Linux kernel DAMON wsse sample module memory leak–0.2%2026-09-16Fix
CVE-2026-90004Linux kernel DAMON region splitting vulnerability–0.2%2026-09-16Fix
CVE-2026-90003Linux kernel futex requeue PI use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90002Linux kernel ftrace filter file handling use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90001Linux kernel HID BPF vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-90000Linux kernel RMI HID driver vulnerability8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-89999Linux kernel Wacom HID driver vulnerability8.1CNA v3.10.4%2026-09-16Fix
CVE-2026-89998Linux kernel device-mapper table loading race condition7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89997Linux kernel device-mapper resume and remove race condition7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89996Linux kernel DMA-BUF heap allocation vulnerability–0.2%2026-09-16Fix
CVE-2026-89995Linux kernel dma-direct pool allocator vulnerability8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-89994Linux kernel fsl-edma tracing vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89993Linux kernel dw-edma null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89992Linux kernel cpuidle dt_idle_genpd vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89991Linux kernel bpf denial of service–0.2%2026-09-16Fix
CVE-2026-89990Linux kernel Ceph client MDS access control use-after-free9.8CNA v3.10.6%2026-09-16Fix
CVE-2026-89989Linux kernel IMA hash algorithm validation vulnerability–0.2%2026-09-16Fix
CVE-2026-89988Linux kernel kprobe blacklist vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89987Linux kernel huge page zap handling vulnerability–0.2%2026-09-16Fix
CVE-2026-89986Linux kernel weighted interleave memory allocation vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89985Linux kernel memory cgroup folio reparenting vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89984Linux kernel Intel LBR perf subsystem vulnerability–0.2%2026-09-16Fix
CVE-2026-89983Linux kernel I2C core debugfs use-after-free–0.2%2026-09-16Fix
CVE-2026-89982Linux kernel I2C mux driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89981Linux kernel arm64 MTE feature detection denial of service–0.2%2026-09-16Fix
CVE-2026-89980Linux kernel ALSA Harmony sound driver vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89979Linux kernel ALSA PCM core race condition7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89978Linux kernel amdxdna accelerator driver denial of service–0.2%2026-09-16Fix
CVE-2026-89977Linux kernel ethosu accelerator driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89976Linux kernel Ethos-U accelerator driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89975Linux kernel NVMe over Fabrics authentication memory leak–0.2%2026-09-16Fix
CVE-2026-89974Linux kernel NVMe-FC controller options cleanup double free7.5CNA v3.10.3%2026-09-16Fix
CVE-2026-89973Linux kernel NVMe-TCP C2HData PDU handling denial of service8.2CNA v3.10.6%2026-09-16Fix
CVE-2026-89972Linux kernel NVMe namespace removal vulnerability9.8CNA v3.10.6%2026-09-16Fix
CVE-2026-89971Linux kernel NVMe zoned namespace info vulnerability7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-89970Linux kernel nvmet-auth vulnerability9.8CNA v3.10.8%2026-09-16Fix
CVE-2026-89969Linux kernel nvmet-tcp driver out-of-bounds write9.8CNA v3.10.7%2026-09-16Fix
CVE-2026-89968Linux kernel nvmet-tcp vulnerability7.5CNA v3.10.8%2026-09-16Fix
CVE-2026-89967Linux kernel device migration PFN array out-of-bounds write7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89966Linux kernel HugeTLB CMA allocator vulnerability–0.2%2026-09-16Fix
CVE-2026-89965Linux kernel BTT arena freelist out-of-bounds write7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89964Linux kernel EISA IRQ parameter parser denial of service–0.2%2026-09-16Fix
CVE-2026-89963Linux kernel kexec FDT size calculation null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89962Linux kernel kexec memory range merging vulnerability–0.2%2026-09-16Fix
CVE-2026-89961Linux kernel compound page vmemmap population vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89960Linux kernel vfio-ap KVM hook pointer vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89959Linux kernel vfio-ap control domain removal vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89958Linux kernel vfio-ap KVM callback vulnerability–0.2%2026-09-16Fix
CVE-2026-89957Linux kernel vfio-ap hot-unplug handling vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89956Linux kernel vfio-ap mdev list locking vulnerability–0.2%2026-09-16Fix
CVE-2026-89955Linux kernel vfio-ap status attribute null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89954Linux kernel AFS v2 image parser vulnerability8.0CNA v3.10.2%2026-09-16Fix
CVE-2026-89953Linux kernel mtdoops driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89952Linux kernel raw NAND ONFI parameter parser vulnerability–0.2%2026-09-16Fix
CVE-2026-89951Linux kernel batman-adv fragment reassembly vulnerability8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-89950Linux kernel batman-adv multicast forwarding vulnerability–0.2%2026-09-16Fix
CVE-2026-89949Linux kernel batman-adv distributed ARP table vulnerability–0.2%2026-09-16Fix
CVE-2026-89948Linux kernel batman-adv BLA vulnerability–0.2%2026-09-16Fix
CVE-2026-89947Linux kernel Meson gxbb clock controller out-of-bounds read8.0CNA v3.10.2%2026-09-16Fix
CVE-2026-89946Linux kernel cs35l33 amplifier driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89945Linux kernel cs35l34 amplifier driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89944Linux kernel hdac_hda component registration resource leak–0.2%2026-09-16Fix
CVE-2026-89943Linux kernel Loongson ASoC ACPI property parsing improper error handling8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89942Linux kernel IIO anonymous buffer release use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89941Linux kernel IIO DMA buffer fence use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89940Linux kernel IIO DMA buffer fence use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89939Linux kernel atlas-sensor driver memory leak–0.2%2026-09-16Fix
CVE-2026-89938Linux kernel atlas-sensor driver use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89937Linux kernel sgp30 chemical sensor driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89936Linux kernel m62332 DAC driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89935Linux kernel apds9306 light sensor driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89934Linux kernel ltrf216a light sensor driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89933Linux kernel dps310 pressure sensor driver null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89932Linux kernel KVM nested VPID TLB flush vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89931Linux kernel KVM nVMX vulnerability–0.2%2026-09-16Fix
CVE-2026-89930Linux kernel KVM nested VM-Enter TLB flush handling vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89929Linux kernel KVM nested VPID invalidation vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89928Linux kernel KVM x86 MMU rmap walk vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89927Linux kernel KVM Hyper-V synthetic timer integer overflow7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89926Linux kernel KVM s390 watchpoint import vulnerability–0.2%2026-09-16Fix
CVE-2026-89925Linux kernel KVM s390 guest debug handling memory leak–0.2%2026-09-16Fix
CVE-2026-89924Linux kernel s390 KVM guest debug watchpoints vulnerability–0.2%2026-09-16Fix
CVE-2026-89923Linux kernel s390 KVM guest debug data vulnerability–0.2%2026-09-16Fix
CVE-2026-89922Linux kernel s390 KVM guest debug watchpoints vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89921Linux kernel s390 KVM pfault token injection information disclosure–0.2%2026-09-16Fix
CVE-2026-89920Linux kernel s390 KVM machine check handling memory corruption7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89919Linux kernel KVM s390 memory corruption7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89918Linux kernel arm64 KVM TLBI invalidation vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89917Linux kernel arm64 KVM VNCR TLB invalidation race condition–0.2%2026-09-16Fix
CVE-2026-89916Linux kernel arm64 KVM VNCR invalidation vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89915Linux kernel arm64 KVM VNCR mapping vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89914Linux kernel arm64 KVM TLBI invalidation vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89913Linux kernel arm64 KVM vGIC-v3 LPI tables race condition8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89912Linux kernel arm64 KVM vGIC ITS vulnerability7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89911Linux kernel arm64 KVM TLBI range invalidation vulnerability7.9CNA v3.10.2%2026-09-16Fix
CVE-2026-89910Linux kernel LoongArch KVM dmsintc interrupt injection vulnerability7.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89909Linux kernel LoongArch KVM initialization vulnerability–0.2%2026-09-16Fix
CVE-2026-89908Linux kernel LoongArch KVM memslot handling vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89907Linux kernel LoongArch KVM EIOINTC interrupt controller vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89906Linux kernel LoongArch BPF JIT tail calls denial of service7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89905Linux kernel LoongArch BPF vulnerability–0.2%2026-09-16Fix
CVE-2026-89904Linux kernel LoongArch ACPI PPTT parsing vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89903Linux kernel LoongArch rethook trampoline vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89902Linux kernel LoongArch kprobes vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89901Linux kernel airspy USB driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89900Linux kernel CEC core memory leak–0.2%2026-09-16Fix
CVE-2026-89899Linux kernel CEC framework vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89898Linux kernel Extron DA HD 4K Plus CEC driver vulnerability8.8CNA v3.10.4%2026-09-16Fix
CVE-2026-89897Linux kernel CEC framework vulnerability7.5CNA v3.10.3%2026-09-16Fix
CVE-2026-89896Linux kernel cedrus driver memory leak–0.2%2026-09-16Fix
CVE-2026-89895Linux kernel cobalt ALSA driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89894Linux kernel cx231xx VBI driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89893Linux kernel cx23885 NetUP CI driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89892Linux kernel em28xx driver use-after-free–0.2%2026-09-16Fix
CVE-2026-89891Linux kernel em28xx driver use-after-free–0.2%2026-09-16Fix
CVE-2026-89890Linux kernel go7007 ALSA driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89889Linux kernel imx415 i2c driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89888Linux kernel ov02a10 I2C driver use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89887Linux kernel ov7740 I2C driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89886Linux kernel ipu6 camera driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89885Linux kernel mtk-mdp3 driver vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89884Linux kernel mtk-mdp3 driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89883In the Linux kernel, the following vulnerability has been resolved: media: rc: sunxi-cir: Unregister rc device on probe failure After rc_register_device() succeeds, later probe failures must undo the registration with rc_unregister_device(). The current error path jumps to the allocation cleanup l7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89882Linux kernel rkvdec HEVC decoder vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89881Linux kernel rtl2832_sdr driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89880Linux kernel rtl2832_sdr driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89879Linux kernel s2255 driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89878Linux kernel s2255 firmware loader vulnerability–0.2%2026-09-16Fix
CVE-2026-89877Linux kernel saa7164 driver vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89876Linux kernel tda18250 tuner driver integer overflow–0.2%2026-09-16Fix
CVE-2026-89875Linux kernel TI VPE overflow recovery vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89874Linux kernel v4l2-async subdevice connection vulnerability–0.2%2026-09-16Fix
CVE-2026-89873Linux kernel V4L2 HEVC SPS control vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89872Linux kernel v4l2-fwnode endpoint parsing vulnerability–0.2%2026-09-16Fix
CVE-2026-89871Linux kernel video-i2c capture kthread vulnerability–0.2%2026-09-16Fix
CVE-2026-89870Linux kernel zoran video device teardown vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89869Linux kernel iris video codec power-off vulnerability–0.2%2026-09-16Fix
CVE-2026-89868Linux kernel wave5 decoder stop streaming denial of service–0.2%2026-09-16Fix
CVE-2026-89867Linux kernel wave5 decoder job scheduling vulnerability–0.2%2026-09-16Fix
CVE-2026-89866Linux kernel wave5 decoder power management denial of service–0.2%2026-09-16Fix
CVE-2026-89865Linux kernel qla2xxx SFP DMA buffer vulnerability–0.2%2026-09-16Fix
CVE-2026-89864Linux kernel qla2xxx I2C BSG handler vulnerability–0.2%2026-09-16Fix
CVE-2026-89863Linux kernel qla2xxx EDIF RX SA delete check null pointer dereference7.5CNA v3.10.7%2026-09-16Fix
CVE-2026-89862Linux kernel qla2xxx flash image validation vulnerability–0.2%2026-09-16Fix
CVE-2026-89861Linux kernel qla2xxx virtual port teardown use-after-free8.1CNA v3.10.6%2026-09-16Fix
CVE-2026-89860Linux kernel qla2xxx NVMe abort work vulnerability8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-89859Linux kernel qla2xxx dport diagnostics information disclosure–0.2%2026-09-16Fix
CVE-2026-89858Linux kernel qla2xxx FRU version BSG handler vulnerability–0.2%2026-09-16Fix
CVE-2026-89857Linux kernel qla2xxx NVMe LS reject handler vulnerability9.8CNA v3.10.6%2026-09-16Fix
CVE-2026-89856Linux kernel qla2xxx MSI-X queue allocation vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89855Linux kernel qla2xxx flash version read vulnerability–0.2%2026-09-16Fix
CVE-2026-89854Linux kernel qla2xxx cs84xx chip interface use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89853Linux kernel qla2xxx FCE trace buffer use-after-free–0.2%2026-09-16Fix
CVE-2026-89852Linux kernel qla2xxx firmware state sysfs interface vulnerability–0.2%2026-09-16Fix
CVE-2026-89851Linux kernel qla2xxx FCE trace debugfs interface vulnerability–0.2%2026-09-16Fix
CVE-2026-89850Linux kernel qla2xxx firmware state query denial of service–0.2%2026-09-16Fix
CVE-2026-89849Linux kernel qla2xxx status IOCB handling vulnerability8.8CNA v3.10.4%2026-09-16Fix
CVE-2026-89848Linux kernel qla2xxx queue pair teardown use-after-free8.1CNA v3.10.5%2026-09-16Fix
CVE-2026-89847Linux kernel qla2xxx async IOCB timeout handling vulnerability9.8CNA v3.10.7%2026-09-16Fix
CVE-2026-89846Linux kernel qla2xxx sense data handling vulnerability9.1CNA v3.10.7%2026-09-16Fix
CVE-2026-89845Linux kernel qla2xxx error entry handling vulnerability–0.2%2026-09-16Fix
CVE-2026-89844Linux kernel qla2xxx report ID acquisition race condition8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-89843Linux kernel qla2xxx bsg handler information disclosure–0.2%2026-09-16Fix
CVE-2026-89842Linux kernel qla2xxx NVMe LS reject handling vulnerability–0.2%2026-09-16Fix
CVE-2026-89841Linux kernel F2FS folio redirty handling vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89840Linux kernel F2FS MOVE_RANGE ioctl vulnerability7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89839Linux kernel F2FS xattr advise handling vulnerability–0.2%2026-09-16Fix
CVE-2026-89838Linux kernel F2FS recovery filename logging vulnerability7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89837Linux kernel f2fs memory leak–0.2%2026-09-16Fix
CVE-2026-89836Linux kernel F2FS large folio invalidate handling vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89835Linux kernel F2FS checkpoint thread sysfs interface vulnerability–0.2%2026-09-16Fix
CVE-2026-89834Linux kernel F2FS segment range migration vulnerability–0.2%2026-09-16Fix
CVE-2026-89833Linux kernel F2FS fsync node pages race condition–0.2%2026-09-16Fix
CVE-2026-89832Linux kernel F2FS node folio error handling vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89831Linux kernel F2FS thread priority sysfs interface race condition–0.2%2026-09-16Fix
CVE-2026-89830Linux kernel F2FS data block allocation vulnerability–0.2%2026-09-16Fix
CVE-2026-89829Linux kernel F2FS node footer check vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89828Linux kernel AMDGPU VRAM manager vulnerability–0.2%2026-09-16Fix
CVE-2026-89827Linux kernel AMDGPU UVD driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89826Linux kernel Panthor GPU driver vulnerability7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89825Linux kernel Panthor firmware control interface vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89824Linux kernel eDP panel i2c probe vulnerability–0.2%2026-09-16Fix
CVE-2026-89823Linux kernel DRM device registration teardown race condition7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89822Linux kernel i915 PCI device probe null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89821Linux kernel AMD display LUT linearity check divide-by-zero–0.2%2026-09-16Fix
CVE-2026-89820Linux kernel AMD display GPU reset lock handling vulnerability–0.2%2026-09-16Fix
CVE-2026-89819Linux kernel AMD display plane degamma LUT out-of-bounds read7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89818Linux kernel amdgpu VCN driver integer overflow7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89817Linux kernel GUD USB display driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89816Linux kernel DRM atomic page-flip commit memory leak–0.2%2026-09-16Fix
CVE-2026-89815Linux kernel TTM memory backup and restore vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89814Linux kernel amdgpu DRM driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89813Linux kernel amdgpu driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89812Linux kernel amdgpu driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89811Linux kernel amdkfd DRM driver race condition8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89810Linux kernel amdkfd DRM driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89809Linux kernel amdkfd DRM driver null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89808Linux kernel amdkfd DRM driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89807Linux kernel amdkfd DRM driver null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89806Linux kernel ofdrm framebuffer driver integer overflow8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89805Linux kernel DRM pagemap folio migration vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89804Linux kernel Nouveau device-private memory driver vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89803Linux kernel Nouveau channel teardown vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89802Linux kernel nouveau UVMM driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89801Linux kernel nouveau UVMM driver vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89800Linux kernel nouveau UVMM driver vulnerability–0.2%2026-09-16Fix
CVE-2026-89799Linux kernel BPF stack trace collection vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89798Linux kernel RPC/RDMA transport notification vulnerability–0.2%2026-09-16Fix
CVE-2026-89797Linux kernel ab8500_fg power supply driver use-after-free–0.2%2026-09-16Fix
CVE-2026-89796Linux kernel DAMON region merging denial of service–0.2%2026-09-16Fix
CVE-2026-89795Linux kernel PCI slot reset on s390 vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89794Linux kernel ksmbd SMB2 pipe read information disclosure–0.2%2026-09-16Fix
CVE-2026-89793Linux kernel ublk character device mmap vulnerability7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89792Linux kernel ksmbd IPC share config out-of-bounds read7.1CNA v3.10.2%2026-09-16Fix
CVE-2026-89791Linux kernel perf event ring buffer mmap use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89790Linux kernel IPv6 multipath route rebalancing divide by zero–0.2%2026-09-16Fix
CVE-2026-89789Linux kernel GTP encapsulation driver use-after-free7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89788Linux kernel ksmbd SMB2 tree connect use-after-free9.8CNA v3.10.7%2026-09-16Fix
CVE-2026-89787Linux kernel ext4 directory entry lookup vulnerability–0.2%2026-09-16Fix
CVE-2026-89786Linux kernel ext4 inline directory out-of-bounds read9.1CNA v3.10.7%2026-09-16Fix
CVE-2026-89785Linux kernel NTFS3 index root parsing out-of-bounds read–0.2%2026-09-16Fix
CVE-2026-89784Linux kernel SUNRPC null pointer dereference–0.2%2026-09-16Fix
CVE-2026-89783Linux kernel IPv6 secpath handling out-of-bounds write9.8CNA v3.10.7%2026-09-16Fix
CVE-2026-89782Linux kernel NTFS3 restart table vulnerability8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89781Linux kernel ntfs3 file system out-of-bounds read8.4CNA v3.10.2%2026-09-16Fix
CVE-2026-89780Linux kernel rmnet MAP command handling vulnerability–0.2%2026-09-16Fix
CVE-2026-89779Linux kernel ntfs3 file system information disclosure9.1CNA v3.10.7%2026-09-16Fix
CVE-2026-89778Linux kernel zisofs decompression vulnerability9.8CNA v3.10.7%2026-09-16Fix
CVE-2026-89777Linux kernel vfio-pci MSI permission table vulnerability8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-89776Linux kernel VXLAN VNI filter information disclosure–0.2%2026-09-16Fix
CVE-2026-89775Linux kernel KVM arm64 VNCR TLB invalidation vulnerability9.3CNA v3.10.2%2026-09-16Fix
CVE-2026-89774Linux kernel Bluetooth SCO connection handling use-after-free8.8CNA v3.10.4%2026-09-16Fix
CVE-2026-89328FluentBoards WordPress plugin Board Member+ Board Membership and Public access modification3.8CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-89327FluentBoards WordPress plugin Board Member+ comment Author spoofing via comment_by parameter3.8CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-89207Siemens WTV676-HB6035 Web Interface improper type validation6.9CNA v4.00.4%2026-09-16Fix
CVE-2026-89186ZenHive mpp sensitive information in cache6.3CNA v4.00.5%2026-09-16Fix
CVE-2026-89084HP Advance potential elevation of privilege, remote code execution and arbitrary file write8.8CNA v4.00.8%2026-09-16
CVE-2026-89083HP Advance potential elevation of privilege, remote code execution and arbitrary file write9.3CNA v4.00.7%2026-09-16
CVE-2026-89082HP Advance potential elevation of privilege, remote code execution and arbitrary file write9.3CNA v4.00.7%2026-09-16
CVE-2026-89063Online Scheduling and Appointment Booking System WordPress plugin insecure direct object reference7.5CNA v3.11.6%2026-09-16NucleiFix
CVE-2026-89034TCH QRing R20_B006 Unauthenticated BLE Access7.1CNA v4.00.3%2026-09-16
CVE-2026-89031Blog2Social WordPress plugin broken access control via b2s_calendar_move_post5.3CNA v4.00.3%2026-09-16Fix
CVE-2026-89030Blog2Social WordPress plugin user email disclosure via b2s_search_user5.3CNA v4.00.3%2026-09-16Fix
CVE-2026-89029Blog2Social WordPress Plugin User Enumeration via AJAX handler5.3CNA v4.00.3%2026-09-16Fix
CVE-2026-89028MikroTik RouterOS Heap Corruption via SMB1 SessionSetupAndX8.2CNA v4.00.6%2026-09-16Fix
CVE-2026-88976udecode plate @platejs/core HTML deserialization can trigger browser behavior during parsing6.1CNA v3.10.3%2026-09-16Fix
CVE-2026-88910KBoard WordPress plugin unauthenticated Board Media deletion via IDOR5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-88817Curiosity Workspace privilege escalation via legacy access group creation endpoint8.7CNA v4.00.4%2026-09-16Fix
CVE-2026-88593kkFileView online preview endpoint reflected cross-site scripting6.1CISA ADP v3.10.3%2026-09-16
CVE-2026-88592kkFileView getCorsFile endpoint server-side request forgery9.1CISA ADP v3.10.2%2026-09-16
CVE-2026-88263XikeStor SKS8310-8X missing authentication8.7CNA v4.00.6%2026-09-16Fix
CVE-2026-88255ZenHive mpp Input improper input validation6.3CNA v4.00.5%2026-09-16Fix
CVE-2026-88064Backstage: Improper input validation in TechDocs MkDocs configuration8.8CNA v3.11.2%2026-09-16Fix
CVE-2026-87976Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles7.2CNA v4.00.8%2026-09-16Fix
CVE-2026-87959WPBot - Subscriber+ Claude AI Settings Update5.4CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-87907Rox Appointment Booking service and category REST routes information disclosure5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-87896Rox Appointment Booking WordPress plugin unauthenticated Staff PII disclosure via Agent REST Route5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-87860Subscriptions for WooCommerce WordPress plugin Subscription Cancellation via CSRF4.3CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-87854Subscriptions for WooCommerce WordPress plugin unauthenticated Subscription data disclosure5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-87828Seraphinite Accelerator WordPress plugin Subscriber+ DoS via seraph_accel_State update5.7CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-87116Tanium addressed a server-side request forgery vulnerability in Threat Response6.5CNA v3.10.3%2026-09-16Fix
CVE-2026-87113Tanium addressed an improper access controls vulnerability in Threat Response6.3CNA v3.10.3%2026-09-16Fix
CVE-2026-87105Tanium addressed a SQL injection vulnerability in Threat Response8.8CNA v3.10.4%2026-09-16Fix
CVE-2026-87076Tanium addressed an information disclosure vulnerability in Discover6.5CNA v3.10.4%2026-09-16Fix
CVE-2026-87031Concrete CMS REST API user creation endpoint missing authorization2.1CNA v4.00.3%2026-09-16
CVE-2026-87028Concrete CMS board custom slot preview missing authorization5.3CNA v4.00.4%2026-09-16
CVE-2026-87026Tanium addressed an improper access controls vulnerability in Threat Response3.8CNA v3.10.3%2026-09-16Fix
CVE-2026-87024Tanium addressed a SQL injection vulnerability in Asset7.2CNA v3.10.4%2026-09-16Fix
CVE-2026-86865Tanium addressed a SQL injection vulnerability in Asset7.2CNA v3.10.4%2026-09-16Fix
CVE-2026-86831Improper validation of pod identifier uniqueness in aws-network-policy-agent in Amazon EKS8.7CNA v4.00.6%2026-09-16Fix
CVE-2026-86823Newsletter WordPress plugin unauthenticated open redirect and Subscriber token disclosure5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-86792Apache Airflow Apache Kafka provider: Connection-editor remote code execution on the Scheduler8.8CISA ADP v3.11.2%2026-09-16Fix
CVE-2026-86784Visualizer WordPress plugin Contributor+ stored XSS via JSON data Source6.8CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-86585Improper Verification of the Firmware Signature vulnerability7.7CNA v4.00.2%2026-09-16Fix
CVE-2026-86475Appointment Hour Booking booking capacity check improper input validation5.3CNA v3.10.3%2026-09-16Fix
CVE-2026-86474Improper certificate validation in the Firmware Download7.7CNA v4.00.1%2026-09-16Fix
CVE-2026-86466Apache Airflow FAB provider: FAB Authentik provider: Id_token issuer/audience not validated8.1CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-86465Apache Airflow Akeyless provider secrets backend team-scope guard insecure direct object reference6.5v3.10.8%2026-09-16Fix
CVE-2026-86462Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions9.1CISA ADP v3.10.8%2026-09-16Fix
CVE-2026-86449LearnPress WordPress plugin unauthenticated Unpublished Course disclosure via REST API5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-86448LearnPress WordPress plugin unauthenticated order data disclosure via lp_download_order3.7CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-86447LearnPress WordPress plugin unauthenticated Student Enrollment disclosure via load_content_via_ajax5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-86445LearnPress WordPress plugin unauthenticated Question Bank disclosure via load_content_via_ajax5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-86444LearnPress WordPress plugin reflected XSS via skin parameter7.1CISA ADP v3.10.3%2026-09-16Reported exploitedFix
CVE-2026-86443Fermax Electronica S.A.U DuoxMe cleartext storage of sensitive information6.9CNA v4.00.1%2026-09-16Fix
CVE-2026-86359Dell Repository Manager incorrect default permissions8.5CNA v3.10.3%2026-09-16Fix
CVE-2026-86358Dell Update Package Framework stack-based buffer overflow6.5CNA v3.10.4%2026-09-16Fix
CVE-2026-86341Access Control Check Implemented after Asset is Accessed in GitLab4.4CNA v3.10.3%2026-09-16Fix
CVE-2026-86338Ash field policies information disclosure6.0CNA v4.00.4%2026-09-16Fix
CVE-2026-86109Arista Networks VeloCloud Edge security Advisory 01827.5CNA v4.00.2%2026-09-16Fix
CVE-2026-86108Arista Networks VeloCloud Edge security Advisory 01817.5CNA v4.00.6%2026-09-16Fix
CVE-2026-86107Arista Networks VeloCloud security Advisory 01808.2CNA v4.00.4%2026-09-16Fix
CVE-2026-86106Arista Networks VeloCloud Edge security Advisory 01798.7CNA v4.00.4%2026-09-16Fix
CVE-2026-86089Apache NiFi: Missing Process Group Authorization for Connector Migration2.3CNA v4.00.4%2026-09-16Fix
CVE-2026-86071Junrar: LocalFolderExtractor mkdir escape allows directory creation outside extraction root3.7CNA v3.10.4%2026-09-16Fix
CVE-2026-86043Skipper: OPA body-authz bypass: Truncated_body mitigation fails open on chunked/HTTP-27.5CNA v3.10.5%2026-09-16Fix
CVE-2026-86003CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP7.5CNA v3.10.4%2026-09-16Fix
CVE-2026-85756SSH.NET: ScpClient allows server-side RCE via default SCP path handling7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-85732oras-go Link header pagination handling server-side request forgery4.7CNA v3.10.4%2026-09-16Fix
CVE-2026-85731oras-go file.Store tar extraction path traversal8.8CNA v3.10.7%2026-09-16Fix
CVE-2026-85641Formidable Forms unauthenticated stored content injection via updated_by parameter4.3CISA ADP v3.10.1%2026-09-16Fix
CVE-2026-85628Fermax DuoxMe Wi-Fi pairing process cleartext transmission of sensitive information7.0CNA v4.00.1%2026-09-16Fix
CVE-2026-85572Tutor LMS lesson discussion information disclosure4.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-85569Tutor LMS REST API request classification privilege escalation7.2CISA ADP v3.10.5%2026-09-16Fix
CVE-2026-85530GiveWP WordPress plugin unauthenticated account takeover via Donor email Sanitization Mismatch8.1CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-85501NLnet Labs Unbound retrap: Novel vulnerabilities to launch algorithmic complexity Attacks on DNSSEC5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-85469Red Hat Quay builder-qemu release workflow vulnerability8.0CNA v3.10.5%2026-09-16
CVE-2026-85387Concrete CMS allows a deactivated user to retain OAuth-authenticated REST API access2.0CNA v4.00.3%2026-09-16
CVE-2026-85386Concrete CMS stored is vulneratble to cross-site scripting7.3CNA v4.00.2%2026-09-16
CVE-2026-85385Concrete CMS is vulnerable to stored XSS via User Timezone field7.7CNA v4.00.5%2026-09-16
CVE-2026-85349FluentBoards WordPress plugin Subscriber+ Private Board Membership disclosure via IDOR4.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-85131WPLP Cookie Consent WordPress plugin arbitrary post deletion via CSRF6.5CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-85104Brain stimulation parameters can be modified via Bluetooth in Sooma5.3CNA v4.00.2%2026-09-16
CVE-2026-84997React/http: A malformed HTTP chunked body can lead to a denial of service and peg the CPU7.5CNA v3.10.7%2026-09-16Fix
CVE-2026-84993mikro-orm MikroORM: SQL injection via unvalidated order direction in orderBy6.5CNA v3.10.5%2026-09-16Fix
CVE-2026-84907Eventin WordPress plugin unauthenticated order and Attendee Status reset via Payment REST endpoint3.7CISA ADP v3.10.2%2026-09-16Fix
CVE-2026-84906Eventin Stripe and PayPal payment gateways insufficient verification of data authenticity5.3CNA v3.10.2%2026-09-16Fix
CVE-2026-84905Eventin WordPress plugin Contributor+ user creation via Speaker creation2.7CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-84860Scada-LTS DWR authorization bypass Systemic8.8CNA v3.10.5%2026-09-16
CVE-2026-84859Scada-LTS authenticated blind SQL injection6.5CNA v3.10.4%2026-09-16
CVE-2026-84858Scada-LTS authenticated remote code execution via scripting sandbox bypass8.8CNA v3.10.8%2026-09-16
CVE-2026-84829Optimole WordPress plugin unauthenticated stored XSS via Srcset Descriptor parameter8.8CISA ADP v3.10.5%2026-09-16Fix
CVE-2026-84501Apache ZooKeeper: Operational log forgery via newline injection in EnsembleAuthenticationProvider5.3CISA ADP v3.10.7%2026-09-16Fix
CVE-2026-84439Apache ZooKeeper: Audit log injection via unsanitized output from multiple sources5.3CISA ADP v3.10.7%2026-09-16Fix
CVE-2026-84408QualitySoft QND Premium named pipe improper access control8.7CNA v4.00.6%2026-09-16
CVE-2026-84397Adobe Experience Manager cross-site scripting (stored XSS)5.4CNA v3.10.6%2026-09-16Fix
CVE-2026-84088Xpro Elementor Addons WordPress plugin Contributor+ stored XSS via Interactive Circle widget6.8CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-82964Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-82720NLnet Labs Unbound use-after-free in DoH stream cleanup code path5.9CNA v3.10.4%2026-09-16Fix
CVE-2026-82717NLnet Labs Unbound CNAME synthesis could lead to heap corruption8.4CNA v4.00.8%2026-09-16Fix
CVE-2026-82561Apache NiFi: Missing authorization for Components Referenced in Flow Update Methods5.9CNA v4.00.5%2026-09-16Fix
CVE-2026-82410Pocketbase: Unhandled panic in worker goroutines8.7CNA v4.00.6%2026-09-16Fix
CVE-2026-82399CoreDNS: Unauthenticated memory exhaustion in custom transports7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-82311Apache Airflow FAB provider password reset insufficient session expiration9.8CISA ADP v3.11.0%2026-09-16Fix
CVE-2026-82310Apache Airflow FAB provider Core API authentication insufficient session expiration7.2CISA ADP v3.11.0%2026-09-16Fix
CVE-2026-82126Schema and Structured Data for WP and AMP AI schema generation improper access control2.7CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-82125Schema and Structured Data for WP and AMP comment moderation check insecure direct object reference5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-82124Schema and Structured Data for WP and AMP JSON-LD schema output information disclosure5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-81876hapifhir org.hl7.fhir.core HAPI FHIR: SHCParser DEFLATE infinite loop causes denial of service7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-81875HAPI FHIR Smart Health Card parser denial of service7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-81872OpenTelemetry-Go: BatchProcessor can busy-spin when export buffer is full6.3CNA v4.00.4%2026-09-16Fix
CVE-2026-81871OpenTelemetry-Go: Log gRPC exporter ignores env TLS certs, bypassing mTLS/pinning6.3CNA v4.00.2%2026-09-16Fix
CVE-2026-81870OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs2.0CNA v4.00.2%2026-09-16Fix
CVE-2026-81869OpenTelemetry-Go: UTF-8 replacement rune bypasses attribute length truncation5.1CNA v4.00.2%2026-09-16Fix
CVE-2026-81866Apache NiFi: Missing authorization for Assets and Secrets Referenced by Connector Configuration0.5CNA v4.00.6%2026-09-16Fix
CVE-2026-81736ISC BIND 9 remote CPU denial of service through cached SVCB/HTTPS AliasMode trees7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-81642NLnet Labs Unbound heap buffer overflow and possible remote code execution when digesting DNSKEY9.1CNA v4.01.0%2026-09-16Exploit codeFix
CVE-2026-81634NLnet Labs Unbound possible heap buffer overflow during DNSSEC canonicalization7.5CNA v3.10.5%2026-09-16Fix
CVE-2026-81563ISC BIND 9 SVCB AliasMode additional-data error leaks qpcache references7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-81326QualitySoft QND Premium hard-coded cryptographic key6.8CNA v4.00.1%2026-09-16
CVE-2026-81176Svelte devalue: DoS via malformed input5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-80274ISC BIND 9 validating resolver can abort while caching a mismatched NOQNAME proof7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-80225NLnet Labs Unbound TCP/DoT connection handling resource exhaustion5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-79993Apache ZooKeeper deleteContainer opcode missing authorization7.5CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-79708Incorrect authorization in GitLab8.5CNA v3.10.4%2026-09-16Fix
CVE-2026-79651Red Hat build of Keycloak keycloak-services: Keycloak-services: Unauthenticated DoS7.5CNA v3.10.8%2026-09-16Fix
CVE-2026-79298Howyar Technologies Inc SysReturn BOOTia32.efi protection mechanism failure8.4CISA ADP v3.10.2%2026-09-16Exploit code
CVE-2026-78474WooCommerce Sales Report report printing information disclosure5.3CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-78472Ni WooCommerce Sales Report WordPress plugin unauthenticated SQLi via sort parameter8.6CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-78301ISC BIND 9 out-of-zone database nodes can become authoritative zone cuts5.8CNA v3.10.2%2026-09-16Fix
CVE-2026-78252Improper neutralization of input during web page generation (cross-site scripting) in GitLab8.2CNA v3.10.3%2026-09-16Fix
CVE-2026-78227NLnet Labs Unbound use-after-free in DoQ stream output buffer on reset re-transmission6.5CNA v3.10.3%2026-09-16Fix
CVE-2026-78088Contest Gallery WordPress plugin unauthenticated arbitrary file upload8.8CNA v3.10.8%2026-09-16Fix
CVE-2026-77955NLnet Labs Unbound possible ZONEMD verification bypass window4.4CNA v3.10.2%2026-09-16Fix
CVE-2026-77860Serve-expired can bypass Unbound wait-limit3.7CNA v3.10.3%2026-09-16Fix
CVE-2026-77702Eventin order token validation missing authorization5.3CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-77692ISC BIND 9 unauthenticated remote crash of named via a single DoH SIG(0) request7.5CNA v3.16.6%2026-09-16Fix
CVE-2026-77412RabbitMQ amqp091-go: Denial of service via Malicious Field Length in AMQP client8.9CNA v4.00.5%2026-09-16Fix
CVE-2026-77411RabbitMQ amqp091-go: Protocol Desynchronization and Frame injection9.5CNA v4.00.5%2026-09-16Fix
CVE-2026-77410RabbitMQ amqp091-go: Resource exhaustion (OOM) via Unbounded Body Buffer Allocation8.9CNA v4.00.5%2026-09-16Fix
CVE-2026-77409RabbitMQ amqp091-go: Denial of service via Synchronous Event Channel Blocking8.2CNA v4.00.5%2026-09-16Fix
CVE-2026-77408RabbitMQ amqp091-go: Silent Data Truncation and State Corruption via Shortstr integer overflow9.1CNA v4.00.5%2026-09-16Fix
CVE-2026-77407RabbitMQ amqp091-go: Plaintext credential exposure via Exported PLAIN Authentication Struct fields7.0CNA v4.00.1%2026-09-16Fix
CVE-2026-77406RabbitMQ amqp091-go Qos prefetch configuration vulnerability8.2CNA v4.00.4%2026-09-16Fix
CVE-2026-77405RabbitMQ amqp091-go: Missing Explicit TLS Minimum Version Configuration in URI parser9.4CNA v4.00.3%2026-09-16Fix
CVE-2026-77404RabbitMQ amqp091-go: Connection Configuration Overwrite via Unsanitized TLS path parameter injection8.7CNA v4.00.1%2026-09-16Fix
CVE-2026-77403RabbitMQ amqp091-go: Denial of service via Sub-Spec Frame Size Negotiation8.9CNA v4.00.5%2026-09-16Fix
CVE-2026-77401Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions6.8CNA v3.10.5%2026-09-16Fix
CVE-2026-77360oRPC: Vary header injection in CORS plugin leading to potential Cache/CORS Bypass6.3CNA v4.00.5%2026-09-16Fix
CVE-2026-77190Arista Networks EOS security Advisory 01776.0CNA v4.00.3%2026-09-16Fix
CVE-2026-77119ISC BIND 9 NSEC3 insecure-referral proof can use unrelated cached NSEC3 RRsets5.9CNA v3.10.2%2026-09-16Fix
CVE-2026-76825RestrictedPython: Sandbox escape via string.Formatter field resolution8.4CNA v3.10.6%2026-09-16Fix
CVE-2026-76646Apache MyFaces: Denial of service via Unbounded Request Parsing7.5CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-76559WP Import Export Lite WordPress plugin Admin+ SSRF via import URL Handling4.1CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-76558WP Import Export Lite WordPress plugin Contributor+ stored DOM XSS via Custom field Names6.8CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-76557WP Import Export Lite WordPress plugin authenticated SQLi via import options6.8CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-76556WP Import Export Lite WordPress plugin authenticated SQLi via export Filter Rules6.8CISA ADP v3.10.4%2026-09-16Fix
CVE-2026-76555WP Import Export Lite file import feature path traversal6.8CISA ADP v3.10.5%2026-09-16Fix
CVE-2026-76553WP Import Export Lite WordPress plugin arbitrary directory deletion via Template path traversal6.5CISA ADP v3.10.5%2026-09-16Fix
CVE-2026-76552WP Import Export Lite WordPress plugin authenticated arbitrary file upload via remote Image import8.8CISA ADP v3.10.7%2026-09-16Fix
CVE-2026-76551WP Import Export Lite WordPress plugin authenticated RCE via export field PHP function7.2CISA ADP v3.10.8%2026-09-16Fix
CVE-2026-76550WP Import Export Lite WordPress plugin authenticated RCE via export Template path traversal7.2CISA ADP v3.10.8%2026-09-16Fix
CVE-2026-76460Cisco Identity Services Engine incorrect use of privileged apis10.0CNA v3.166.6%2026-09-16KEVNucleiEmerging ThreatsExploit codeFix
CVE-2026-76451Cisco Identity Services Engine Certificate Management SQL injection4.9CNA v3.10.4%2026-09-16Fix
CVE-2026-76450Cisco Identity Services Engine SQL injection4.9CNA v3.10.4%2026-09-16Fix
CVE-2026-76449Cisco Identity Services Engine SQL injection4.9CNA v3.10.4%2026-09-16Fix
CVE-2026-76448Cisco Identity Services Engine SQL injection4.9CNA v3.10.4%2026-09-16Fix
CVE-2026-76447Cisco Identity Services Engine OCSP responder missing authentication5.3CNA v3.10.4%2026-09-16Fix
CVE-2026-76446Cisco Identity Services Engine External Entity injection4.9CNA v3.10.3%2026-09-16Fix
CVE-2026-76444Cisco Identity Services Engine information disclosure5.3CNA v3.10.3%2026-09-16Fix
CVE-2026-76439Cisco Identity Services Engine Event injection5.3CNA v3.10.3%2026-09-16Fix
CVE-2026-76438Cisco BroadWorks CommPilot application software authorization bypass6.5CNA v3.10.6%2026-09-16Fix
CVE-2026-76434Cisco Identity Services Engine arbitrary file read4.9CNA v3.10.4%2026-09-16Fix
CVE-2026-76433Cisco Identity Services Engine information disclosure5.3CNA v3.11.3%2026-09-16Fix
CVE-2026-76432Cisco Identity Services Engine arbitrary file write4.9CNA v3.11.2%2026-09-16Fix
CVE-2026-76431Cisco Identity Services Engine arbitrary file deletion4.9CNA v3.11.2%2026-09-16Fix
CVE-2026-76428Cisco ISE Profiler SQL injection4.9CNA v3.10.5%2026-09-16Fix
CVE-2026-76427Cisco ISE XML external entity injection4.9CNA v3.10.5%2026-09-16Fix
CVE-2026-76426Cisco ISE REST API SQL injection4.9CNA v3.10.5%2026-09-16Fix
CVE-2026-76425Cisco ISE SQL injection7.6CNA v3.10.4%2026-09-16Fix
CVE-2026-76424Cisco ISE arbitrary File Access vulnerability7.2CNA v3.10.9%2026-09-16Fix
CVE-2026-76423Cisco ISE API authentication bypass10.0CNA v3.10.6%2026-09-16Fix
CVE-2026-76420Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection vulnerability9.0CNA v3.10.4%2026-09-16Fix
CVE-2026-76413Cisco Secure Firewall Management Center ASDM single sign-on handler vulnerability8.2CNA v3.10.5%2026-09-16Fix
CVE-2026-76412Cisco Secure Firewall Management Center Software Authenticated privilege escalation to Root8.5CNA v3.10.4%2026-09-16Fix
CVE-2026-76409Cisco Nexus Dashboard path traversal8.8CNA v3.10.5%2026-09-16Fix
CVE-2026-76187Apache Airflow Keycloak provider: Any realm client's credentials mint an Airflow session JWT9.8CISA ADP v3.11.0%2026-09-16Fix
CVE-2026-76186Apache Airflow Keycloak provider: Keycloak token cookies not bound to Airflow session identity9.1CISA ADP v3.10.8%2026-09-16Fix
CVE-2026-76163ISC BIND 9 named aborts on a TKEY query when the user configuration has no global options statement7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-76151Out-of-bounds read vulnerability in HTTP Cache-Control response header parsing impacts Qt Framework4.6CNA v4.00.7%2026-09-16Fix
CVE-2026-76104Dell ObjectScale incorrect permission assignment5.5CNA v3.10.4%2026-09-16Fix
CVE-2026-75516RabbitMQ Java client: Frame-level OOM: Math.min defeats frame size enforcement8.7CNA v4.00.6%2026-09-16Fix
CVE-2026-75513Marten: SQL injection in Marten's LINQ provider via unescaped string literals9.1CNA v3.10.5%2026-09-16Fix
CVE-2026-75029ISC BIND 9 negative cache vulnerability5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-75025Mattermost Desktop local network access from server-rendered content4.7CNA v3.10.2%2026-09-16Fix
CVE-2026-74926MultiVendorX - Subscriber+ arbitrary Store Data and Ownership Overwrite via stores REST endpoint7.1CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-74909Red Hat Keycloak policy enforcer vulnerability8.1CNA v3.10.8%2026-09-16Fix
CVE-2026-73469Arista Networks EOS security Advisory 01766.9CNA v4.00.3%2026-09-16Fix
CVE-2026-73468Arista Networks EOS security Advisory 01757.1CNA v4.00.3%2026-09-16Fix
CVE-2026-73464Arista Networks EOS security Advisory 01668.7CNA v4.00.6%2026-09-16Fix
CVE-2026-73463Arista Networks EOS security Advisory 01696.0CNA v4.00.2%2026-09-16Fix
CVE-2026-73462Arista EOS IGMP snooping out-of-bounds read7.1CNA v4.00.3%2026-09-16Fix
CVE-2026-73461Arista Networks EOS security Advisory 01639.4CNA v4.00.4%2026-09-16Fix
CVE-2026-73457Arista EOS gNPSI information disclosure6.0CNA v4.00.3%2026-09-16Fix
CVE-2026-73456Arista EOS gNPSI vulnerability9.2CNA v4.00.7%2026-09-16Fix
CVE-2026-73455Arista Networks EOS security Advisory 01738.9CNA v4.00.5%2026-09-16Fix
CVE-2026-73454Arista Networks EOS security Advisory 01658.6CNA v4.00.4%2026-09-16Fix
CVE-2026-73453Arista Networks EOS security Advisory 01749.5CNA v4.00.7%2026-09-16Fix
CVE-2026-73450Arista Networks EOS security Advisory 01617.0CNA v4.00.2%2026-09-16Fix
CVE-2026-73447Arista Networks EOS security Advisory 0162 gNSI Certz/Bootz OS command injection9.4CNA v4.00.7%2026-09-16Fix
CVE-2026-73445Arista Networks EOS security Advisory 01676.9CNA v4.00.4%2026-09-16Fix
CVE-2026-73443Arista EOS VRRPv2 IP-AH authentication authentication bypass by replay5.3CNA v4.00.3%2026-09-16Fix
CVE-2026-73442Arista EOS VRRP authentication logging information disclosure2.1CNA v4.00.2%2026-09-16Fix
CVE-2026-73440Arista Networks EOS security Advisory 01782.3CNA v4.00.3%2026-09-16Fix
CVE-2026-73439Arista Networks EOS security Advisory 01647.7CNA v4.00.4%2026-09-16Fix
CVE-2026-73438Arista Networks EOS security Advisory 01727.0CNA v4.00.2%2026-09-16Fix
CVE-2026-73436Arista Networks EOS security Advisory 01716.0CNA v4.00.3%2026-09-16Fix
CVE-2026-73435Arista Networks EOS security Advisory 01717.0CNA v4.00.2%2026-09-16Fix
CVE-2026-73177Advantech EKI-1242EIMS insufficient verification of data authenticity8.6CNA v4.00.1%2026-09-16Fix
CVE-2026-73176Advantech EKI-1242IEIMS OS command injection8.6CNA v4.01.2%2026-09-16Fix
CVE-2026-73175Advantech EKI-1242EIMS resource exhaustion7.1CNA v4.00.3%2026-09-16Fix
CVE-2026-73174Advantech EKI-1242EIMS cleartext transmission of sensitive information8.7CNA v4.00.2%2026-09-16Fix
CVE-2026-73173Advantech EKI-1242EIMS missing authentication8.8CNA v4.00.7%2026-09-16Fix
CVE-2026-73172Advantech EKI-1242EIMS OS command injection9.3CNA v4.02.2%2026-09-16Fix
CVE-2026-73171Advantech EKI-1242EIMS external control of a file path8.6CNA v4.00.5%2026-09-16Fix
CVE-2026-73170Advantech EKI-1242EIMS code injection8.6CNA v4.00.5%2026-09-16Fix
CVE-2026-73169Advantech EKI-1242EIMS cross-site scripting6.3CNA v4.00.5%2026-09-16Fix
CVE-2026-73167Advantech EKI-1242IEIMS OS command injection8.6CNA v4.01.2%2026-09-16Fix
CVE-2026-73166Advantech EKI-1242IEIMS code injection8.6CNA v4.00.7%2026-09-16Fix
CVE-2026-73165Advantech EKI-1242IEIMS OS command injection8.6CNA v4.01.2%2026-09-16Fix
CVE-2026-73164Advantech EKI-1242IEIMS OS command injection8.6CNA v4.01.2%2026-09-16Fix
CVE-2026-73163Advantech EKI-1242IEIMS OS command injection8.6CNA v4.01.2%2026-09-16Fix
CVE-2026-71182Dell Update Package Framework link following3.0CNA v3.10.1%2026-09-16Fix
CVE-2026-71181Dell Update Package Framework link following3.0CNA v3.10.1%2026-09-16Fix
CVE-2026-71180Dell Update Package Framework unchecked return value8.2CNA v3.10.2%2026-09-16Fix
CVE-2026-71179Dell Update Package Framework OS command injection7.3CNA v3.10.6%2026-09-16Fix
CVE-2026-70469Apache NiFi: Improper handling of case sensitivity for Content-Encoding in HTTP requests7.5CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-70416Dell ObjectScale deserialization of untrusted data10.0CNA v3.10.8%2026-09-16Fix
CVE-2026-69200node-opcua alarm and condition client prototype pollution3.7CNA v3.10.3%2026-09-16Fix
CVE-2026-69147vLLM: Request-selected PyNvVideoCodec GPU decode bypasses static VRAM reservation6.5CNA v3.10.6%2026-09-16Fix
CVE-2026-68904node-opcua client keepalive reconnection resource exhaustion7.0CNA v3.10.4%2026-09-16Fix
CVE-2026-68536Apache MyFaces: Server-side request forgery / local file inclusion9.8CISA ADP v3.10.5%2026-09-16Fix
CVE-2026-65388Apple Containerization open redirect7.5CISA ADP v3.10.4%2026-09-16
CVE-2026-64684modelcontextprotocol rust-sdk RMCP: Custom HTTP headers leak to cross-origin redirect targets6.8CNA v3.10.5%2026-09-16Fix
CVE-2026-63671Nuxt MDC URL sanitizer cross-site scripting8.1CNA v3.10.5%2026-09-16Fix
CVE-2026-63506tinacms auth broken access control8.8CNA v3.10.5%2026-09-16Fix
CVE-2026-63325Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`7.8CNA v3.10.2%2026-09-16Fix
CVE-2026-63225Redocly CLI: Path traversal when using `split` command4.4CNA v3.10.2%2026-09-16Fix
CVE-2026-63128Model Context Protocol Rust SDK Streamable HTTP server transport memory leak7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-63127Model Context Protocol Rust SDK OAuth resource metadata vulnerability8.2CNA v3.10.2%2026-09-16Fix
CVE-2026-63126Wire: Unauthenticated decoder crash7.5CNA v3.10.8%2026-09-16Fix
CVE-2026-62997kedro-org kedro-plugins Kedro-Datasets: Remote code execution in experimental `PyTorchDataset`7.7CNA v4.00.7%2026-09-16Fix
CVE-2026-62949AsyncSSH SSH channel data flushing denial of service6.5CNA v3.10.4%2026-09-16Fix
CVE-2026-61709OpenFGA ListUsers API incorrect authorization5.3CNA v3.10.4%2026-09-16Fix
CVE-2026-61599djust has an unauthenticated arbitrary module import via the WebSocket/SSE view-mount path8.8CNA v4.00.6%2026-09-16Fix
CVE-2026-61598djust client mass-assignment of arbitrary view attributes7.1CNA v4.00.4%2026-09-16Fix
CVE-2026-61597djust is vulnerable to stored/reflected XSS via javascript: URLs in built-in component template tags5.1CNA v4.00.4%2026-09-16Fix
CVE-2026-61596djust has broken object-level access control (IDOR)7.1CNA v3.10.3%2026-09-16Fix
CVE-2026-61595djust multi-tenant isolation information disclosure7.7CNA v3.10.4%2026-09-16Fix
CVE-2026-61594djust has an authorization bypass on the WebSocket/SSE mount path9.1CNA v3.10.5%2026-09-16Fix
CVE-2026-61593djust SSE transport cross-site request forgery8.1CNA v3.10.2%2026-09-16Fix
CVE-2026-61592djust SSE session management session fixation7.4CNA v3.10.4%2026-09-16Fix
CVE-2026-61591djust client state snapshot restoration privilege escalation8.1CNA v3.10.2%2026-09-16Fix
CVE-2026-61590djust observability endpoints missing authentication7.4CNA v3.10.4%2026-09-16Fix
CVE-2026-61589djust WebSocket tenant resolution vulnerability6.3CNA v3.10.2%2026-09-16Fix
CVE-2026-61588djust model serialization information disclosure6.5CNA v3.10.4%2026-09-16Fix
CVE-2026-59974Stanza: Zip Slip path traversal in Model/Resource Extraction7.8CNA v3.10.4%2026-09-16Fix
CVE-2026-59969Apache ZooKeeper: Improper validation of certificate with host mismatch in FIPS mode7.5CISA ADP v3.10.3%2026-09-16Fix
CVE-2026-59944Composer path traversal6.1CNA v3.10.3%2026-09-16Fix
CVE-2026-59823LiteLLM: Server-side request forgery via the `user_config` request parameter in LiteLLM Proxy5.3CNA v4.00.4%2026-09-16Fix
CVE-2026-59739Apache ZooKeeper: Information disclosure via SetWatches reconnect replay7.5CISA ADP v3.10.6%2026-09-16Fix
CVE-2026-58147Authorized remote code execution via password change functionality in T-Mobile 5G Box IDU routers9.3CNA v4.01.6%2026-09-16Fix
CVE-2026-58146Unauthorized remote code execution in T-Mobile 5G Box IDU routers9.4CNA v4.02.9%2026-09-16Fix
CVE-2026-57173vLLM: Unauthenticated audio decompression-bomb DoS in /v1/chat/completions6.5CNA v3.10.7%2026-09-16Fix
CVE-2026-56719MikroTik RouterOS out-of-bounds read via SMB1 SessionSetupAndX6.3CNA v4.00.4%2026-09-16Fix
CVE-2026-51990Sogou Input Method biz_helper.exe code injection9.8CISA ADP v3.10.9%2026-09-16Reported exploited
CVE-2026-47094SIMAC MyPHR employee update endpoint insecure direct object reference8.7CNA v4.00.5%2026-09-16
CVE-2026-46352Suricata defrag: Fragmented encapsulated traffic with fragments can lead to deadlock7.5CNA v3.10.5%2026-09-16Fix
CVE-2026-42784sequoia-openpgp improper signature verification7.4CNA v3.10.3%2026-09-16Fix
CVE-2026-40857CSRF token bypass in T-Mobile 5G Box IDU routers8.4CNA v4.00.2%2026-09-16Fix
CVE-2026-40856Config disclosure in T-Mobile 5G Box IDU routers7.1CNA v4.00.4%2026-09-16Fix
CVE-2026-40855Command injection in T-Mobile 5G Box IDU router via ping functionality9.3CNA v4.01.6%2026-09-16Fix
CVE-2026-40854Session auth bypass via cookie value in T-Mobile 5G Box IDU routers8.7CNA v4.00.3%2026-09-16Fix
CVE-2026-38999mk_sched_event_close function A null pointer dereference7.5CISA ADP v3.11.4%2026-09-16
CVE-2026-27565Pepperl+Fuchs ICE2-8IOL1-G65L-V1D remote code execution via uploading a malicious IODD file9.8CNA v3.11.0%2026-09-16Fix
CVE-2026-27564Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection via PUT in /API/datastorage/data7.2CNA v3.12.7%2026-09-16Fix
CVE-2026-27563Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection via GET in /API/datastorage/data7.2CNA v3.12.7%2026-09-16Fix
CVE-2026-27562Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection via PUT in /API/iodd/config7.2CNA v3.12.7%2026-09-16Fix
CVE-2026-27561Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection via GET in /API/iodd/config7.2CNA v3.12.7%2026-09-16Fix
CVE-2026-27560Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection via delete in /API/status/data7.2CNA v3.12.7%2026-09-16Fix
CVE-2026-27559Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection via GET in /API/status/data8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27558Pepperl+Fuchs ICE2-8IOL1-G65L-V1D OS command injection8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27557Pepperl+Fuchs ICE2-8IOL1-G65L-V1D path traversal in /index.php/view_uploaded_iodd_file7.5CNA v3.10.7%2026-09-16Fix
CVE-2026-27556Pepperl+Fuchs ICE2-8IOL1-G65L-V1D local file inclusion in /index.php/ajax/save_iodd_parameters8.8CNA v3.10.9%2026-09-16Fix
CVE-2026-27555Pepperl+Fuchs ICE2-8IOL1-G65L-V1D local file inclusion in /index.php/ajax/get_iodd_port_info8.8CNA v3.10.9%2026-09-16Fix
CVE-2026-27554Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection in /index.php/ajax/save_iodd_parameters8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27553Pepperl+Fuchs ICE2-8IOL1-G65L-V1D information disclosure via Schema Path Manipulation6.5CNA v3.10.6%2026-09-16Fix
CVE-2026-27552Pepperl+Fuchs ICE2-8IOL1-G65L-V1D unauthorized IODD file upload due to improper authorization8.1CNA v3.10.6%2026-09-16Fix
CVE-2026-27551Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection in /index.php/ajax/parameterManage8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27550Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection in Field_Shadow_Password class8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27549Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection in /index.php/attached_devices_tab/do_upload8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27548Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection in /index.php/ajax/get_iodd_port_info8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27547Pepperl+Fuchs ICE2-8IOL1-G65L-V1D command injection in /index.php/ajax/get_iodd_menu_info8.8CNA v3.12.9%2026-09-16Fix
CVE-2026-27546Pepperl+Fuchs ICE2-8IOL1-G65L-V1D authentication bypass in _account_log9.8CNA v3.11.0%2026-09-16Fix
CVE-2026-26947Dell ECS improper privilege management6.7CNA v3.10.2%2026-09-16Fix
CVE-2026-20361Cisco Nexus Dashboard Software Security Hardening Release September 2026 SQL injection8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-20360Cisco Nexus Dashboard information disclosure8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-20352Cisco Identity Services Engine RADIUS denial of service8.6CNA v3.10.4%2026-09-16Fix
CVE-2026-20350Cisco ThousandEyes Virtual Appliance Authenticated Web interface command injection4.7CNA v3.10.3%2026-09-16Fix
CVE-2026-20344Cisco Secure Firewall Management Center Software SQL injection8.8CNA v3.10.4%2026-09-16Fix
CVE-2026-20343Cisco Secure Firewall Management Center software information disclosure and Disk denial of service7.5CNA v3.10.5%2026-09-16Fix
CVE-2026-20342Cisco Secure Firewall Management Center Software Low Privileged arbitrary file download7.7CNA v3.10.6%2026-09-16Fix
CVE-2026-20341Cisco Secure Firewall Management Center software sftunnel deserialization Root command execution9.1CNA v3.10.4%2026-09-16Fix
CVE-2026-20340Cisco Secure Firewall Management Center software deserialization arbitrary Root command execution8.8CNA v3.10.7%2026-09-16Fix
CVE-2026-20336Cisco ASA, FTD and FMC software improper resource control8.8CNA v3.10.2%2026-09-16Fix
CVE-2026-20335Cisco ASA, FTD and FMC software incorrect calculation8.1CNA v3.10.3%2026-09-16Fix
CVE-2026-20334As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has conducted a comprehensive internal security8.4CNA v3.10.3%2026-09-16Fix
CVE-2026-20333Cisco ASA, FTD and FMC software incorrect comparison8.8CNA v3.10.3%2026-09-16Fix
CVE-2026-20332Cisco ASA, FTD and FMC software improper access control9.9CNA v3.10.3%2026-09-16Fix
CVE-2026-20331Cisco ASA, FTD and FMC software protection mechanism failure9.6CNA v3.10.2%2026-09-16Fix
CVE-2026-20330Cisco ASA, FTD and FMC software improper neutralization9.9CNA v3.10.3%2026-09-16Fix
CVE-2026-20329Cisco Secure Firewall Adaptive Security Appliance (ASA) Software improper exception handling9.9CNA v3.10.4%2026-09-16Fix
CVE-2026-20326Cisco Nexus Dashboard missing authentication9.8CNA v3.10.4%2026-09-16Fix
CVE-2026-20325Cisco Nexus Dashboard command injection9.9CNA v3.10.3%2026-09-16Fix
CVE-2026-20324Cisco Secure Firewall Management Center sftunnel Root arbitrary Code Exectution vulnerability9.9CNA v3.10.5%2026-09-16Fix
CVE-2026-20323Cisco Secure Firewall Management Center and Threat Defense Software authentication bypass8.3CNA v3.10.1%2026-09-16Fix
CVE-2026-20322Cisco Nexus Dashboard Software Security Hardening Release September 2026 improper access control9.9CNA v3.10.3%2026-09-16Fix
CVE-2026-20309Cisco Identity Services Engine cross-site scripting6.1CNA v3.10.2%2026-09-16Fix
CVE-2026-20307Cisco Identity Services Engine remote code execution9.9CNA v3.11.0%2026-09-16Fix
CVE-2026-20306Cisco Identity Services Engine command injection9.1CNA v3.11.4%2026-09-16Fix
CVE-2026-20305Cisco Identity Services Engine command injection9.1CNA v3.11.4%2026-09-16Fix
CVE-2026-20300Cisco Identity Services Engine SQL injection7.1CNA v3.10.3%2026-09-16Fix
CVE-2026-20295Cisco Secure Firewall Management Center and Threat Defense Software denial of service8.6CNA v3.10.5%2026-09-16Fix
CVE-2026-20290Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS denial of service5.8CNA v3.10.2%2026-09-16Fix
CVE-2026-20287Cisco Identity Services Engine Hardening Release Improper Privlege Management vulnerabilities6.5CNA v3.10.2%2026-09-16Fix
CVE-2026-20286Cisco Identity Services Engine authorization bypass4.3CNA v3.10.4%2026-09-16Fix
CVE-2026-20285Cisco Identity Services Engine authorization bypass4.3CNA v3.10.4%2026-09-16Fix
CVE-2026-20284Cisco Identity Search Engine SXP REST API SQL injection9.1CNA v3.10.4%2026-09-16Fix
CVE-2026-20283Cisco Identity Services Engine IPSec Open API command injection6.5CNA v3.10.4%2026-09-16Fix
CVE-2026-20282A vulnerability in Cisco ISE could allow an authenticated, remote attacker to obtain write access on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by sending a crafte4.9CNA v3.10.6%2026-09-16Fix
CVE-2026-20250Cisco Secure Firewall ASA and FTD Software DTLS message handling denial of service8.6CNA v3.10.5%2026-09-16Fix
CVE-2026-20249Cisco Secure Firewall ASA and FTD Software IKEv2 certificate authentication denial of service8.6CNA v3.10.4%2026-09-16Fix
CVE-2026-20248Cisco Secure Firewall ASA and FTD Software DNS over TCP handler denial of service6.8CNA v3.10.3%2026-09-16Fix
CVE-2026-20247Cisco Identity Services Engine Unauthenticated SQL injection7.5CNA v3.10.3%2026-09-16Fix
CVE-2026-20242Cisco Secure Firewall Management Center Software Java deserialization remote code execution9.8CNA v3.10.6%2026-09-16Fix
CVE-2026-20237Cisco Identity Services Engine Hardening Release Input Validation vulnerabilities9.1CNA v3.10.3%2026-09-16Fix
CVE-2026-20235Cisco Identity Services Engine information disclosure4.9CNA v3.10.3%2026-09-16Fix
CVE-2026-20234Cisco Identity Services Engine Software insufficiently protected credentials9.9CNA v3.10.4%2026-09-16Fix
CVE-2026-20222Cisco Secure Firewall ASA and FTD Software EIGRP implementation memory leak7.4CNA v3.10.2%2026-09-16Fix
CVE-2026-20211Cisco Identity Services Engine remote code execution9.1CNA v3.10.6%2026-09-16Fix
CVE-2026-20194Cisco Identity Services Engine Hardening Release incorrect resource transfer9.1CNA v3.10.4%2026-09-16Fix
CVE-2026-20192Cisco Identity Services Engine Hardening Release Access Control vulnerabilities10.0CNA v3.10.5%2026-09-16Fix
CVE-2026-20176Cisco Identity Services Engine remote code execution9.1CNA v3.10.8%2026-09-16Fix
CVE-2026-20154Cisco Secure Firewall ASA and FTD Software syslog rate limiting denial of service8.6CNA v3.10.4%2026-09-16Fix
CVE-2026-20135Cisco Secure Firewall Threat Defense Software TLS 1.3 denial of service8.6CNA v3.10.5%2026-09-16Fix
CVE-2026-20130Cisco Identity Services Engine Hardening Release improper neutralization10.0CNA v3.10.4%2026-09-16Fix
CVE-2026-20121CIsco FTD Bypass Access List5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-20120Cisco Secure Firewall ASA and FTD Software access control list object group search vulnerability5.8CNA v3.10.4%2026-09-16Fix
CVE-2026-20072Cisco Identity Services Engine Software ISE information disclosure4.9CNA v3.10.4%2026-09-16Fix
CVE-2026-20071Cisco Identity Services Engine Software ISE 802.1x Session Hijack vulnerability3.8CNA v3.10.1%2026-09-16Fix
CVE-2026-19941ISC BIND 9 checkwildcard accepts an out-of-zone NSEC as a wildcard-nonexistence proof5.9CNA v3.10.2%2026-09-16Fix
CVE-2026-19857Formidable Forms custom HTML entry key token vulnerability4.8CNA v3.10.2%2026-09-16Fix
CVE-2026-19668ISC BIND 9 resource exhaustion via Excessive DNSSEC Cryptographic Material Matching5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-19667ISC BIND 9 remote assertion failure via 16-bit length truncation in `dns_ncache_add`7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-19666ISC BIND 9 use-after-free in query_addnoqnameproof via the DNS64 filter64 path7.5CNA v3.10.6%2026-09-16Fix
CVE-2026-19662ISC BIND 9 qpcache NOQNAME proof use-after-free crashes recursive resolver5.9CNA v3.10.5%2026-09-16Fix
CVE-2026-19640Arista Networks EOS security Advisory 01702.3CNA v4.00.2%2026-09-16Fix
CVE-2026-19619Improper neutralization of input during web page generation (cross-site scripting) in GitLab4.7CNA v3.10.2%2026-09-16Fix
CVE-2026-19607Red Hat Keycloak first broker login flow improper authentication5.3CNA v3.10.5%2026-09-16Fix
CVE-2026-19535Advantech EKI-1242IEIMS cross-site request forgery8.6CNA v4.00.2%2026-09-16Fix
CVE-2026-19248Unbounded recursion vulnerability in the QDomNode destructor of Qt XML impacts Qt7.1CNA v4.00.4%2026-09-16Fix
CVE-2026-19033ISC BIND 9 unauthenticated IXFR deltas are applied to the live zone before TSIG verification6.5CNA v3.10.2%2026-09-16Fix
CVE-2026-18595WP-Lister Lite for eBay WordPress plugin unauthenticated stored cross-site scripting7.2CNA v3.10.3%2026-09-16Fix
CVE-2026-18555Better Messages WordPress plugin reflected cross-site scripting6.1CNA v3.10.2%2026-09-16Fix
CVE-2026-18212Red Hat Keycloak SAML redirect binding memory leak7.5CNA v3.10.5%2026-09-16Fix
CVE-2026-18120Concrete CMS Express entries search endpoint missing authorization6.3CNA v4.00.3%2026-09-16
CVE-2026-17526Red Hat build of Keycloak keycloak-services: Keycloak-services: Privilege escalation7.2CNA v3.10.5%2026-09-16Fix
CVE-2026-16794Missing authorization in GitLab4.3CNA v3.10.3%2026-09-16Fix
CVE-2026-16588WP Directory Kit WordPress plugin authenticated (Custom+) SQL injection via order_by parameter6.5CNA v3.10.3%2026-09-16Fix
CVE-2026-14917Kong API Gateway Enterprise: SAML authentication bypass7.7CNA v4.00.7%2026-09-16Fix
CVE-2026-14916Kong API Gateway Enterprise: JWT Algorithm-Confusion7.7CNA v4.00.7%2026-09-16Fix
CVE-2026-14349TrueBooker WordPress plugin missing authorization unauthenticated arbitrary user email modification9.8CNA v3.10.4%2026-09-16Fix
CVE-2026-13407Royal Addons for Elementor form notification emails HTML injection6.1CNA v3.10.2%2026-09-16Fix
CVE-2026-12793JetFormBuilder WordPress plugin unauthenticated privilege escalation9.8CNA v3.10.5%2026-09-16Exploit codeFix
CVE-2026-11996Advanced Popups WordPress plugin stored cross-site scripting6.4CNA v3.10.2%2026-09-16Fix
CVE-2026-11984Ad Inserter WordPress plugin missing authorization unauthenticated Header/Footer code disclosure5.3CNA v3.10.3%2026-09-16Fix
CVE-2026-8462OpenMeter SQL injection in ClickHouse-backed Meter Definitions8.9CNA v4.00.5%2026-09-16Fix
CVE-2026-8030Missing authorization in GitLab4.3CNA v3.10.4%2026-09-16Fix
CVE-2026-7514Missing authorization in GitLab4.3CNA v3.10.4%2026-09-16Fix
CVE-2026-5920Bold Page Builder WordPress plugin stored cross-site scripting6.4CNA v3.10.3%2026-09-16Fix
CVE-2026-3855Improper control of resource identifiers (resource injection) in GitLab3.1CNA v3.10.3%2026-09-16Fix
CVE-2026-2380Arista Networks EOS security Advisory 01685.1CNA v4.00.2%2026-09-16Fix
CVE-2026-1168Allocation of resources without limits or throttling in GitLab7.5CNA v3.10.5%2026-09-16Fix
CVE-2026-92259Samsung Open Source Escargot integer overflow5.5CNA v3.10.1%2026-09-15
CVE-2026-92257Netcore NR255-V stored cross-site scripting in L7 Content Management via eval Sinks5.1CNA v4.00.2%2026-09-15
CVE-2026-92256Netcore NR255-V IPsec PSK and RSA key disclosure via l2tpd_config_show.cgi Read Handlers7.1CNA v4.00.4%2026-09-15
CVE-2026-92255Netcore NR255-V out-of-bounds read in filter_arp_put_file.cgi via String API Misuse5.3CNA v4.00.3%2026-09-15
CVE-2026-92248Gimp: Integer overflow when generating a thumbnail preview for a psd file7.8CNA v3.10.2%2026-09-15Fix
CVE-2026-92240Mozilla Thunderbird out-of-bounds read in IMAP response parser9.1CISA ADP v3.10.6%2026-09-15Fix
CVE-2026-92239Mozilla Thunderbird buffer overrun in IMAP8.1CISA ADP v3.10.4%2026-09-15Fix
CVE-2026-92238Mozilla Thunderbird ambiguous parsing of mail headers9.8CISA ADP v3.10.5%2026-09-15Fix
CVE-2026-92237Devolutions PowerShell Universal slow query logging feature sensitive information in log files6.5CISA ADP v3.10.4%2026-09-15
CVE-2026-92234QloApps reflected XSS via Hotel Feature Validation Errors5.1CNA v4.00.3%2026-09-15
CVE-2026-92184ag-ui-protocol ag-ui Multimodal Content utils.py urllib.request.urlopen server-side request forgery5.3CNA v4.00.4%2026-09-15
CVE-2026-92180pdfforge PDF Architect Update Service privilege escalation7.8CNA v3.00.2%2026-09-15
CVE-2026-92179pdfforge PDF Architect PDF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2026-09-15
CVE-2026-92178pdfforge PDF Architect PDF File Parsing memory corruption remote code execution7.8CNA v3.00.2%2026-09-15
CVE-2026-92177pdfforge PDF Architect PDF File Parsing out-of-bounds write remote code execution7.8CNA v3.00.2%2026-09-15
CVE-2026-92176pdfforge PDF Architect App object out-of-bounds read remote code execution7.8CNA v3.00.2%2026-09-15
CVE-2026-92114a2ui-project a2ui Basic Catalog safe_regex.ts redos6.9CNA v4.00.7%2026-09-15
CVE-2026-92082Payara Server missing brute-force protection6.3CNA v4.00.3%2026-09-15Fix
CVE-2026-92079Mozilla Firefox mitigation bypass in the Widget: Win32 component9.1CISA ADP v3.10.3%2026-09-15Fix
CVE-2026-92078Mozilla Firefox denial of service in the Security component6.5CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92077Mozilla Firefox denial of service in the SVG component6.5CISA ADP v3.10.3%2026-09-15Fix
CVE-2026-92076Mozilla Firefox incorrect boundary conditions in the Networking component8.8CISA ADP v3.10.1%2026-09-15Fix
CVE-2026-92075Mozilla Firefox mitigation bypass in the Networking component9.1CISA ADP v3.10.3%2026-09-15Fix
CVE-2026-92074Mozilla Firefox Mitigation bypass in the Popup Blocker component8.8CISA ADP v3.10.1%2026-09-15Fix
CVE-2026-92073Mozilla Firefox privilege escalation in the Enterprise Policies component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92072Mozilla Firefox incorrect boundary conditions in the Safe Browsing component8.0CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92071Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.6CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92070Mozilla Firefox information disclosure in the Networking component4.3CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92069Mozilla Firefox spoofing issue in the DOM: Navigation component5.4CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92068Mozilla Firefox Site isolation issue in the Reader Mode component5.4CISA ADP v3.10.1%2026-09-15Fix
CVE-2026-92067Mozilla Firefox use-after-free in the Widget: Gtk component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92066Mozilla Firefox sandbox escape in the Profile Backup component9.8CISA ADP v3.10.6%2026-09-15Fix
CVE-2026-92065Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Widget: Win32 component8.8CISA ADP v3.10.1%2026-09-15Fix
CVE-2026-92064Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Widget: Win32 component8.8CISA ADP v3.10.1%2026-09-15Fix
CVE-2026-92063Mozilla Firefox denial of service in the Audio/Video component6.5CISA ADP v3.10.4%2026-09-15Fix
CVE-2026-92062Mozilla Firefox privilege escalation in the Session Restore component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92061Mozilla Firefox incorrect boundary conditions in the Security: Process Sandboxing component9.8CISA ADP v3.10.6%2026-09-15Fix
CVE-2026-92060Mozilla Firefox use-after-free in the Internationalization component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92059Mozilla Firefox incorrect boundary conditions in the DOM: Editor component9.3CISA ADP v3.10.1%2026-09-15Fix
CVE-2026-92058Mozilla Firefox use-after-free in the Graphics component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92057Mozilla Firefox Mitigation bypass in the Enterprise Policies component9.1CISA ADP v3.10.3%2026-09-15Fix
CVE-2026-92056Mozilla Firefox use-after-free in the Graphics: Text component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92055Mozilla Firefox privilege escalation in the DevTools component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92054Mozilla Firefox privilege escalation in the Memory component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92053Mozilla Firefox privilege escalation in the Graphics: CanvasWebGL component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92052Mozilla Firefox Graphics: CanvasWebGL component privilege escalation8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92051Mozilla Firefox spoofing issue due to invalid pointer in the Graphics component9.1CISA ADP v3.10.5%2026-09-15Fix
CVE-2026-92050Mozilla Firefox sandbox escape due to race condition in the XPConnect component9.1CISA ADP v3.10.4%2026-09-15Fix
CVE-2026-92049Mozilla Firefox use-after-free in the Widget: Win32 component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92048Mozilla Firefox sandbox escape due to incorrect boundary conditions in the Widget: Win32 component9.0CISA ADP v3.10.3%2026-09-15Fix
CVE-2026-92047Mozilla Firefox privilege escalation in the crash Reporting component8.8CISA ADP v3.10.2%2026-09-15Fix
CVE-2026-92046Mozilla Firefox use-after-free in the Graphics component8.8CISA ADP v3.10.3%2026-09-15Fix