By publication date

Exploited and new serious CVEs: September 2026

7,960 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-83616No exploit	xmldom: Processing Instruction Target Injection Bypasses requireWellFormedxmldom · xmldom · CWE-91 Pre-auth	High8.7	—	0.6%	Sep 1, 2026
34Monitor	CVE-2026-83617No exploit	xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminatorxmldom · xmldom · CWE-91 Pre-auth	High8.7	—	0.5%	Sep 1, 2026
34Monitor	CVE-2026-83618No exploit	xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminatorxmldom · xmldom · CWE-91 Pre-auth	High8.7	—	0.5%	Sep 1, 2026
34Monitor	CVE-2026-83619No exploit	xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parserxmldom · xmldom · CWE-400 Pre-auth Denial of service	High8.7	—	0.5%	Sep 1, 2026
35Monitor	CVE-2026-10195No exploit	FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Settingfs-code · fs poster - wordpress social media auto poster & scheduler [facebook, instagram, twitter, pinterest] · CWE-77 RCE Command injection	High8.8	—	1.0%	Sep 1, 2026
36Monitor	CVE-2026-18931No exploit	Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Softwaretmt machine industry and trade ltd. co. · talassoft industrial management software · CWE-798 Pre-auth Hard-coded credentials	Critical9.1	—	0.4%	Sep 1, 2026
39Monitor	CVE-2026-51767No exploit	Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset paiCWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Sep 1, 2026
30Monitor	CVE-2026-51768No exploit	Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify pCWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Sep 1, 2026
39Monitor	CVE-2026-51769No exploit	Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to resCWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Sep 1, 2026
39Monitor	CVE-2026-51770No exploit	Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forwCWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Sep 1, 2026
31Monitor	CVE-2026-61750No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61751No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61752No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61753No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-22 Deserialization Path traversal	High7.8	—	0.5%	Sep 1, 2026
31Monitor	CVE-2026-61754No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61755No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61756No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61757No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61758No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61759No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61760No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61761No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61762No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61763No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61764No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61765No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61766No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61767No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61768No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61769No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61770No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61771No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61772No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61773No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
37Monitor	CVE-2023-54356No exploit	Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suiteskyverno · kyverno · CWE-326 Pre-auth Weak crypto	Critical9.3	—	0.2%	Sep 1, 2026
31Monitor	CVE-2026-61774No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61775No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61776No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61777No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61778No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
31Monitor	CVE-2026-61779No exploit	NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.nvidia · nemo megatron bridge · CWE-502 Deserialization	High7.8	—	0.4%	Sep 1, 2026
34Monitor	CVE-2026-84202No exploit	ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loadingmodelscope · modelscope · CWE-502 pre-auth RCE Deserialization	High8.7	—	0.6%	Sep 1, 2026
34Monitor	CVE-2026-84203No exploit	Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Changeusememos · memos · CWE-613	High8.6	—	0.4%	Sep 1, 2026
28Monitor	CVE-2026-84204No exploit	GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrievalgrowilabs · growi · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 1, 2026
28Monitor	CVE-2026-84205No exploit	GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrievalgrowilabs · growi · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 1, 2026
35Monitor	CVE-2026-76111No exploit	Dell PowerStore contains an Incorrect Authorization vulnerability.dell · powerstoreos · CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Sep 1, 2026
36Monitor	CVE-2026-84189No exploit	LibreNMS before 26.7.0 Stored XSS via Oxidized APIlibrenms · librenms · CWE-79 SSRF XSS	Critical9.2	—	0.3%	Sep 1, 2026
34Monitor	CVE-2026-84190No exploit	LibreNMS before 26.5.0 Remote Code Execution via AboutControllerlibrenms · librenms · CWE-77 RCE Command injection	High8.7	—	0.8%	Sep 1, 2026
28Monitor	CVE-2026-84192No exploit	LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Datalibrenms · librenms · CWE-79 Pre-auth XSS	High7.1	—	0.3%	Sep 1, 2026
30Monitor	CVE-2026-51788Proof of concept	An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the accCWE-400 Pre-auth Denial of service	High7.5	—	0.7%	Sep 1, 2026
39Monitor	CVE-2026-51934No exploit	Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd.CWE-120 pre-auth RCE Memory safety	Critical9.8	—	1.1%	Sep 1, 2026
32Monitor	CVE-2026-51956No exploit	A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0.CWE-284 Broken access control (IDOR)	High8.1	—	0.4%	Sep 1, 2026
35Monitor	CVE-2026-58566No exploit	Dell PowerStore, an Incorrect Authorization vulnerability.dell · powerstore 500t · CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Sep 1, 2026
35Monitor	CVE-2026-58575No exploit	Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability.dell · powerstoreos · CWE-290 Auth bypass	High8.8	—	0.5%	Sep 1, 2026
35Monitor	CVE-2026-79683No exploit	Dell PowerStore contains a Protection Mechanism Failure vulnerability.dell · powerstoreos · CWE-693	High8.8	—	0.4%	Sep 1, 2026
32Monitor	CVE-2024-10085No exploit	CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communicschneider electric · ecostruxure™ opc ua server expert · CWE-770 Pre-auth Denial of service	High8.2	—	0.4%	Sep 1, 2026
28Monitor	CVE-2024-14047No exploit	Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Serviceelastic · winlogbeat · CWE-59 Local privilege escalation	High7.1	—	0.1%	Sep 1, 2026
34Monitor	CVE-2025-12768No exploit	FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerabilityrockwell automation · factorytalk® historian machine edition · CWE-787 RCE Memory safety	High8.6	—	0.4%	Sep 1, 2026
35Monitor	CVE-2026-58571No exploit	Dell PowerStore contains an OS Command Injection vulnerability.dell · powerstoreos · CWE-78 RCE Local privilege escalation Command injection	High8.8	—	0.7%	Sep 1, 2026
35Monitor	CVE-2026-58572No exploit	Dell PowerStore contains a Code Injection vulnerability.dell · powerstoreos · CWE-94 RCE Local privilege escalation	High8.8	—	0.2%	Sep 1, 2026
34Monitor	CVE-2024-7953No exploit	DataEdgePlatform DataMosaix™ Private Cloudrockwell automation · dataedgeplatform datamosaix™ private cloud · CWE-284 Broken access control (IDOR)	High8.7	—	0.3%	Sep 1, 2026
29Monitor	CVE-2026-19590No exploit	OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the repositoopenai · codex desktop · CWE-427 Local privilege escalation	High7.3	—	0.1%	Sep 1, 2026
35Monitor	CVE-2026-19591No exploit	OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe becopenai · codex cli · CWE-150 Pre-auth	High8.8	—	0.5%	Sep 1, 2026
29Monitor	CVE-2026-19592No exploit	OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata withoopenai · codex cli · CWE-15 Local privilege escalation	High7.3	—	0.1%	Sep 1, 2026
35Monitor	CVE-2026-79684No exploit	Dell PowerStore contains a Protection Mechanism Failure vulnerability.dell · powerstoreos · CWE-693	High8.8	—	0.4%	Sep 1, 2026
35Monitor	CVE-2026-51974No exploit	An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remoCWE-94 RCE	High8.8	—	0.7%	Sep 1, 2026
30Monitor	CVE-2026-52022No exploit	An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compokamailio · kamailio · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Sep 1, 2026
39Monitor	CVE-2026-52111No exploit	An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes autCWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Sep 1, 2026
30Monitor	CVE-2026-52130No exploit	llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.ggml · llama.cpp · CWE-674 Pre-auth Denial of service	High7.5	—	0.4%	Sep 1, 2026
30Monitor	CVE-2026-52131No exploit	llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.ggml · llama.cpp · CWE-617 Pre-auth	High7.5	—	0.4%	Sep 1, 2026
30Monitor	CVE-2026-52132No exploit	llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_allggml · llama.cpp · CWE-674 Pre-auth Denial of service	High7.5	—	0.5%	Sep 1, 2026
35Monitor	CVE-2026-58569No exploit	Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.dell · powerstoreos · CWE-829 RCE Local privilege escalation	High8.8	—	0.1%	Sep 1, 2026
34Monitor	CVE-2026-83551No exploit	Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline pathaws · sagemaker-python-sdk · CWE-312	High8.5	—	0.8%	Sep 1, 2026
35Monitor	CVE-2026-79686No exploit	Dell PowerStore contains a Protection Mechanism Failure vulnerability.dell · powerstoreos · CWE-693	High8.8	—	0.4%	Sep 1, 2026
34Monitor	CVE-2026-84304No exploit	gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentationgrpc · grpc-go · CWE-400 Pre-auth Denial of service	High8.7	—	0.6%	Sep 1, 2026
27Monitor	CVE-2026-8712Proof of concept	Wyoming < 1.10.2 SSRF via uri Query Parameterohf-voice · wyoming · CWE-918 Pre-auth SSRF	Medium6.9	—	0.3%	Sep 1, 2026
28Monitor	CVE-2026-84233No exploit	Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenamesred hat · red hat enterprise linux 10 · CWE-78 RCE Local privilege escalation Command injection	High7.0	—	0.1%	Sep 1, 2026
30Monitor	CVE-2026-49329No exploit	Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpointsred hat · red hat openshift container platform 4 · CWE-407 Pre-auth Denial of service	High7.5	—	0.7%	Sep 1, 2026
35Monitor	CVE-2026-58567No exploit	Dell PowerStore contains an OS Command Injection vulnerability.dell · powerstoreos · CWE-78 RCE Local privilege escalation Command injection	High8.8	—	0.7%	Sep 1, 2026
38Monitor	CVE-2026-19766No exploit	Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-287 pre-auth RCE Auth bypass	Critical9.6	—	0.3%	Sep 1, 2026
34Monitor	CVE-2026-45221No exploit	Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Patheasybyte software · konga · CWE-427 RCE Local privilege escalation	High8.5	—	0.1%	Sep 1, 2026
33Monitor	CVE-2026-63137No exploit	Incorrect Authorization in Kibana Leading to Privilege Escalationelastic · kibana · CWE-863 Broken access control (IDOR)	High8.3	—	0.5%	Sep 1, 2026
35Monitor	CVE-2026-72649No exploit	Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Executionelastic · elasticsearch · CWE-502 RCE Deserialization	High8.8	—	0.9%	Sep 1, 2026
36Monitor	CVE-2026-73700No exploit	Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-79 RCE XSS	Critical9.0	—	0.4%	Sep 1, 2026
36Monitor	CVE-2026-73701No exploit	Unauthenticated Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-94 pre-auth RCE	Critical9.0	—	0.6%	Sep 1, 2026
35Monitor	CVE-2026-73702No exploit	Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Sep 1, 2026
35Monitor	CVE-2026-73703No exploit	Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interfacearubanetworks · fabric composer · CWE-79 pre-auth RCE XSS	High8.8	—	0.3%	Sep 1, 2026
35Monitor	CVE-2026-73704No exploit	Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-77 RCE Command injection	High8.8	—	0.5%	Sep 1, 2026
35Monitor	CVE-2026-73705No exploit	Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-552 RCE	High8.8	—	0.6%	Sep 1, 2026
34Monitor	CVE-2026-73706No exploit	Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changesarubanetworks · fabric composer · CWE-306 Pre-auth Auth bypass	High8.6	—	0.4%	Sep 1, 2026
34Monitor	CVE-2026-73707No exploit	Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-863 Broken access control (IDOR)	High8.5	—	0.3%	Sep 1, 2026
33Monitor	CVE-2026-73708No exploit	Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-863 Broken access control (IDOR)	High8.3	—	0.4%	Sep 1, 2026
33Monitor	CVE-2026-73709No exploit	Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Processarubanetworks · fabric composer · CWE-78 pre-auth RCE Command injection	High8.3	—	0.3%	Sep 1, 2026
32Monitor	CVE-2026-73710No exploit	Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-306 Pre-auth Auth bypass	High8.2	—	0.4%	Sep 1, 2026
32Monitor	CVE-2026-73711No exploit	Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-269 Pre-auth	High8.1	—	0.4%	Sep 1, 2026
32Monitor	CVE-2026-73712No exploit	Unauthenticated Remote Code Execution in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-78 pre-auth RCE Command injection	High8.1	—	0.6%	Sep 1, 2026
31Monitor	CVE-2026-73713No exploit	Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-269 RCE Local privilege escalation	High7.8	—	0.1%	Sep 1, 2026
30Monitor	CVE-2026-73714No exploit	Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer APIarubanetworks · fabric composer · CWE-269	High7.6	—	0.3%	Sep 1, 2026
30Monitor	CVE-2026-73715No exploit	Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Sep 1, 2026
30Monitor	CVE-2026-73716No exploit	Unauthenticated Remote Code Execution in HPE Networking Fabric Composerarubanetworks · fabric composer · CWE-78 pre-auth RCE Command injection	High7.5	—	0.6%	Sep 1, 2026

CVE-2026-83616
34Monitor
xmldom: Processing Instruction Target Injection Bypasses requireWellFormed
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
xmldom · xmldomSep 1, 2026
CVE-2026-83617
34Monitor
xmldom: requireWellFormed element/attribute name validation is bypassable via an embedded line terminator
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
xmldom · xmldomSep 1, 2026
CVE-2026-83618
34Monitor
xmldom: requireWellFormed DocType publicId/systemId validation is bypassable via an embedded line terminator
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
xmldom · xmldomSep 1, 2026
CVE-2026-83619
34Monitor
xmldom: End-tag Whitespace-Trim Regex ReDoS — quadratic backtracking in the 0.8.x end-tag parser
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
xmldom · xmldomSep 1, 2026
CVE-2026-10195
35Monitor
FS Poster <= 8.0.1 - Authenticated (Subscriber+) Remote Code Execution via FFmpeg Path Setting
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
fs-code · fs poster - wordpress social media auto poster & scheduler [facebook, instagram, twitter, pinterest]Sep 1, 2026
CVE-2026-18931
36Monitor
Hardcoded Credentials in TMT Machine's Talassoft Industrial Management Software
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
tmt machine industry and trade ltd. co. · talassoft industrial management softwareSep 1, 2026
CVE-2026-51767
39Monitor
Incorrect access control in the recvClearPairCfg function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to reset pai
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Sep 1, 2026
CVE-2026-51768
30Monitor
Incorrect access control in the setElinkQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to modify p
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Sep 1, 2026
CVE-2026-51769
39Monitor
Incorrect access control in the remoteCloudUpdateCheck function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to res
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Sep 1, 2026
CVE-2026-51770
39Monitor
Incorrect access control in the sendToMasterQosConfig function of TOTOLINK T6 4.1.5cu.748_B20211015 allows unauthenticated attackers to forw
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Sep 1, 2026
CVE-2026-61750
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61751
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61752
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61753
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
- Path traversal
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61754
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61755
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61756
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61757
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61758
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61759
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61760
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61761
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61762
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61763
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61764
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61765
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61766
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61767
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61768
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61769
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61770
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61771
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61772
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61773
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2023-54356
37Monitor
Kyverno before 1.9.5 Sweet32 Medium Strength Cipher Suites
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
kyverno · kyvernoSep 1, 2026
CVE-2026-61774
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61775
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61776
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61777
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61778
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-61779
31Monitor
NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a deserialization of untrusted data.
HighCVSS 7.8No exploitEPSS 0%
- Deserialization
nvidia · nemo megatron bridgeSep 1, 2026
CVE-2026-84202
34Monitor
ModelScope through 1.40.0 Unsafe YAML Deserialization in Model Config Loading
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- Deserialization
modelscope · modelscopeSep 1, 2026
CVE-2026-84203
34Monitor
Memos 0.26.0 through 0.30.0 Insufficient Session Expiration on Password Change
HighCVSS 8.6No exploitEPSS 0%
usememos · memosSep 1, 2026
CVE-2026-84204
28Monitor
GROWI through 8.0.2 Missing Authorization on apiv3 Attachment Retrieval
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
growilabs · growiSep 1, 2026
CVE-2026-84205
28Monitor
GROWI through 8.0.2 Authorization Bypass Through User-Controlled Key on apiv3 Revision Retrieval
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
growilabs · growiSep 1, 2026
CVE-2026-76111
35Monitor
Dell PowerStore contains an Incorrect Authorization vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
dell · powerstoreosSep 1, 2026
CVE-2026-84189
36Monitor
LibreNMS before 26.7.0 Stored XSS via Oxidized API
CriticalCVSS 9.2No exploitEPSS 0%
- SSRF
- XSS
librenms · librenmsSep 1, 2026
CVE-2026-84190
34Monitor
LibreNMS before 26.5.0 Remote Code Execution via AboutController
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Command injection
librenms · librenmsSep 1, 2026
CVE-2026-84192
28Monitor
LibreNMS before 26.3.1 Stored XSS via SNMP/Syslog Data
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
librenms · librenmsSep 1, 2026
CVE-2026-51788
30Monitor
An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification function and the acc
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
Sep 1, 2026
CVE-2026-51934
39Monitor
Buffer Overflow vulnerability in Shenzhen Jixiang Tengda Technology Co., Ltd.
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Memory safety
Sep 1, 2026
CVE-2026-51956
32Monitor
A Broken Object Level Authorization vulnerability exists in Grashjs Atlas CMMS prior to v1.6.0.
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
Sep 1, 2026
CVE-2026-58566
35Monitor
Dell PowerStore, an Incorrect Authorization vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
dell · powerstore 500tSep 1, 2026
CVE-2026-58575
35Monitor
Dell PowerStore contains an Authentication Bypass by Spoofing vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- Auth bypass
dell · powerstoreosSep 1, 2026
CVE-2026-79683
35Monitor
Dell PowerStore contains a Protection Mechanism Failure vulnerability.
HighCVSS 8.8No exploitEPSS 0%
dell · powerstoreosSep 1, 2026
CVE-2024-10085
32Monitor
CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause denial of service of the OPC UA communic
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
schneider electric · ecostruxure™ opc ua server expertSep 1, 2026
CVE-2024-14047
28Monitor
Improper Link Resolution Before File Access ('Link Following') in Winlogbeat Leading to Arbitrary File Write and Denial of Service
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
elastic · winlogbeatSep 1, 2026
CVE-2025-12768
34Monitor
FactoryTalk® Historian Machine Edition - Out-of-Bounds Write Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Memory safety
rockwell automation · factorytalk® historian machine editionSep 1, 2026
CVE-2026-58571
35Monitor
Dell PowerStore contains an OS Command Injection vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
dell · powerstoreosSep 1, 2026
CVE-2026-58572
35Monitor
Dell PowerStore contains a Code Injection vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
dell · powerstoreosSep 1, 2026
CVE-2024-7953
34Monitor
DataEdgePlatform DataMosaix™ Private Cloud
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
rockwell automation · dataedgeplatform datamosaix™ private cloudSep 1, 2026
CVE-2026-19590
29Monitor
OpenAI Codex Desktop for Windows and macOS could execute attacker-controlled Git hooks because automated Git operations trusted the reposito
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
openai · codex desktopSep 1, 2026
CVE-2026-19591
35Monitor
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS misclassified certain PowerShell commands as safe bec
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
openai · codex cliSep 1, 2026
CVE-2026-19592
29Monitor
OpenAI Codex CLI for Windows, macOS, and Linux and Codex Desktop for Windows and macOS automatically collected Git repository metadata witho
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
openai · codex cliSep 1, 2026
CVE-2026-79684
35Monitor
Dell PowerStore contains a Protection Mechanism Failure vulnerability.
HighCVSS 8.8No exploitEPSS 0%
dell · powerstoreosSep 1, 2026
CVE-2026-51974
35Monitor
An eval() injection vulnerability in the get_list function in modules/meta_parser.py in lllyasviel Fooocus 2.1.854 through 2.5.5 allows remo
HighCVSS 8.8No exploitEPSS 0%
- RCE
Sep 1, 2026
CVE-2026-52022
30Monitor
An issue in kamailio v.6.1.1 and before allows a remote attacker to cause a denial of service via the IMS P-CSCF registration handling compo
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
kamailio · kamailioSep 1, 2026
CVE-2026-52111
39Monitor
An issue in fast-note-sync-service <=2.13.7 allows a remote attacker to escalate privileges via the admin configuration endpoint exposes aut
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Sep 1, 2026
CVE-2026-52130
30Monitor
llama.cpp b5693 and before is vulnerable to Uncontrolled Recursion in common/json-schema-to-grammar.cpp, resulting in a denial of service.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ggml · llama.cppSep 1, 2026
CVE-2026-52131
30Monitor
llama.cpp b5693 and before has a Reachable Assertion via the gguf_reader::read function.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
ggml · llama.cppSep 1, 2026
CVE-2026-52132
30Monitor
llama.cpp through commit 97f06e9, when started with the --reranking flag, allows remote attackers to cause a denial of service (std::bad_all
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ggml · llama.cppSep 1, 2026
CVE-2026-58569
35Monitor
Dell PowerStore contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
dell · powerstoreosSep 1, 2026
CVE-2026-83551
34Monitor
Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK @step/@remote pipeline path
HighCVSS 8.5No exploitEPSS 0%
aws · sagemaker-python-sdkSep 1, 2026
CVE-2026-79686
35Monitor
Dell PowerStore contains a Protection Mechanism Failure vulnerability.
HighCVSS 8.8No exploitEPSS 0%
dell · powerstoreosSep 1, 2026
CVE-2026-84304
34Monitor
gRPC-Go: Heap Memory Exhaustion (OOM) via HTTP/2 DATA Frame Fragmentation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
grpc · grpc-goSep 1, 2026
CVE-2026-8712
27Monitor
Wyoming < 1.10.2 SSRF via uri Query Parameter
MediumCVSS 6.9Proof of conceptEPSS 0%
- Pre-auth
- SSRF
ohf-voice · wyomingSep 1, 2026
CVE-2026-84233
28Monitor
Rpm: command execution via macro expansion in `rpmuncompress -x` for crafted `.gem` filenames
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
red hat · red hat enterprise linux 10Sep 1, 2026
CVE-2026-49329
30Monitor
Openshift/oauth-server: openshift/oauth-server: quadratic-time dos via accept-language header underscore bypass on unauthenticated login endpoints
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat openshift container platform 4Sep 1, 2026
CVE-2026-58567
35Monitor
Dell PowerStore contains an OS Command Injection vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
dell · powerstoreosSep 1, 2026
CVE-2026-19766
38Monitor
Authentication Bypass leads to Administrative control of adjacent network hosts in HPE Networking Fabric Composer
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
arubanetworks · fabric composerSep 1, 2026
CVE-2026-45221
34Monitor
Konga < 2.1.0 Privilege Escalation via Hardcoded OpenSSL Path
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
easybyte software · kongaSep 1, 2026
CVE-2026-63137
33Monitor
Incorrect Authorization in Kibana Leading to Privilege Escalation
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
elastic · kibanaSep 1, 2026
CVE-2026-72649
35Monitor
Deserialization of Untrusted Data in Elasticsearch Leading to Remote Code Execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Deserialization
elastic · elasticsearchSep 1, 2026
CVE-2026-73700
36Monitor
Authenticated Stored Cross-Site Scripting Vulnerability (XSS) in HPE Networking Fabric Composer Web-Based Management Interface
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
- XSS
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73701
36Monitor
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
CriticalCVSS 9.0No exploitEPSS 0%
- pre-auth RCE
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73702
35Monitor
Authenticated Privilege Escalation Vulnerability in the API of HPE Networking Fabric Composer
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73703
35Monitor
Unauthenticated Stored Cross-Site Scripting (XSS) Vulnerability in HPE Networking Fabric Composer Web-Based Management Interface
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- XSS
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73704
35Monitor
Authenticated Command Injection Leading to Administrative Access in HPE Networking Fabric Composer API
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73705
35Monitor
Authenticated Arbitrary File Write leads to Remote Code Execution in HPE Networking Fabric Composer
HighCVSS 8.8No exploitEPSS 0%
- RCE
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73706
34Monitor
Authentication Bypass in the API of HPE Networking Fabric Composer allows Data Exposure and Unauthorized Changes
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73707
34Monitor
Authenticated Privilege Escalation via Broken Access Control in HPE Networking Fabric Composer API
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73708
33Monitor
Fault in Business Logic allows Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73709
33Monitor
Unauthenticated Remote Code Execution during HPE Networking Fabric Composer Installation Process
HighCVSS 8.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73710
32Monitor
Unauthenticated Denial of Service Vulnerabilities in API Endpoint of HPE Networking Fabric Composer
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73711
32Monitor
Unauthenticated Privilege Escalation allows Administrative Access in HPE Networking Fabric Composer API
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73712
32Monitor
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer API
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Command injection
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73713
31Monitor
Local Privilege Escalation Vulnerabilities in HPE Networking Fabric Composer
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73714
30Monitor
Authenticated Sensitive Information Disclosure in HPE Networking Fabric Composer API
HighCVSS 7.6No exploitEPSS 0%
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73715
30Monitor
Unauthenticated Denial-of-Service (DoS) Vulnerability in the API of HPE Networking Fabric Composer
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
arubanetworks · fabric composerSep 1, 2026
CVE-2026-73716
30Monitor
Unauthenticated Remote Code Execution in HPE Networking Fabric Composer
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Command injection
arubanetworks · fabric composerSep 1, 2026