By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 24 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2026-86750No exploit	snipe-it before 8.7.0 Authorization Bypass via API User Create/Updatesnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	High8.3	—	0.3%	Sep 9, 2026
33Monitor	CVE-2026-86751No exploit	Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdownsnipeitapp · snipe-it · CWE-73 SSRF Path traversal	High8.4	—	0.3%	Sep 9, 2026
34Monitor	CVE-2026-86754No exploit	Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clientssnipeitapp · snipe-it · CWE-863 Broken access control (IDOR)	High8.5	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-86757No exploit	Snipe-IT before 8.7.0 Information Disclosure via Custom Fieldssnipeitapp · snipe-it · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-86758No exploit	Snipe-IT before 8.7.0 License Key Exposure via CSV Exportsnipeitapp · snipe-it · CWE-204	High7.1	—	0.4%	Sep 9, 2026
28Monitor	CVE-2026-86759No exploit	Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importersnipeitapp · snipe-it · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 9, 2026
34Monitor	CVE-2026-86762No exploit	Snipe-IT before 8.7.0 Authentication Bypass via API Middlewaresnipeitapp · snipe-it · CWE-862 Auth bypass Broken access control (IDOR)	High8.6	—	0.4%	Sep 9, 2026
28Monitor	CVE-2026-86764No exploit	Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned componentssnipeitapp · snipe-it · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-86765No exploit	Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpointsnipeitapp · snipe-it · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 9, 2026
28Monitor	CVE-2026-86766No exploit	Snipe-IT 8.6.3 Race Condition via Consumable Checkoutsnipeitapp · snipe-it · CWE-362 Race condition	High7.1	—	0.3%	Sep 9, 2026
34Monitor	CVE-2026-86770No exploit	Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collationsnipeitapp · snipe-it · CWE-178 Auth bypass	High8.6	—	0.5%	Sep 9, 2026
33Monitor	CVE-2026-86771No exploit	Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_numsnipeitapp · snipe-it · CWE-918 SSRF	High8.3	—	0.3%	Sep 9, 2026
35Monitor	CVE-2026-86775No exploit	knowns before 0.30.0 Path Traversal via Document APIknowns-dev · knowns · CWE-22 Pre-auth Path traversal	High8.8	—	0.7%	Sep 9, 2026
34Monitor	CVE-2026-26212No exploit	Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCErara themes · rara one click demo import · CWE-434 RCE File upload	High8.6	—	0.8%	Sep 9, 2026
32Monitor	CVE-2026-78482No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralidell · secure connect gateway · CWE-89 RCE SQL injection Local privilege escalation	High7.8	—	2.4%	Sep 9, 2026
28Monitor	CVE-2026-79617Proof of concept	Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greetertübi̇tak bi̇lgem software technologies research institute · pardus lightdm greeter · CWE-732	High7.1	—	0.1%	Sep 9, 2026
40Plan	CVE-2026-79941No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralidell · secure connect gateway · CWE-77 pre-auth RCE Command injection	Critical9.8	—	4.7%	Sep 9, 2026
34Monitor	CVE-2026-87822No exploit	t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytestdunning · t-digest · CWE-407 Pre-auth Deserialization	High8.7	—	0.6%	Sep 9, 2026
35Monitor	CVE-2026-87823No exploit	zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methodsluben · zstd-jni · CWE-190 Pre-auth Memory safety	High8.8	—	0.4%	Sep 9, 2026
34Monitor	CVE-2026-87824No exploit	zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirectluben · zstd-jni · CWE-125 Pre-auth Memory safety	High8.7	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-87825No exploit	zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionariesluben · zstd-jni · CWE-416 Memory safety	High7.0	—	0.2%	Sep 9, 2026
28Monitor	CVE-2026-87877No exploit	zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()luben · zstd-jni · CWE-416 Memory safety	High7.0	—	0.2%	Sep 9, 2026
36Monitor	CVE-2026-22590No exploit	Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessageeprosima · fast-dds · CWE-125 Pre-auth Memory safety	Critical9.1	—	0.5%	Sep 9, 2026
30Monitor	CVE-2026-22591No exploit	Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)eprosima · fast-dds · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Sep 9, 2026
39Monitor	CVE-2026-67401Proof of concept	A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack componentwebpros · cpanel · CWE-89 RCE SQL injection	Critical9.9	—	0.8%	Sep 9, 2026
36Monitor	CVE-2026-67403No exploit	Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.sage · sage ar automation · CWE-639 Broken access control (IDOR)	Critical9.0	—	0.2%	Sep 9, 2026
36Monitor	CVE-2026-68484No exploit	Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.sage · sage ar automation · CWE-862 Broken access control (IDOR)	Critical9.0	—	0.2%	Sep 9, 2026
34Monitor	CVE-2026-77974No exploit	Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical functionsoftish · earvision android application · CWE-306 Pre-auth Auth bypass	High8.5	—	0.2%	Sep 9, 2026
32Monitor	CVE-2026-78484No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralidell · secure connect gateway · CWE-77 RCE Local privilege escalation Command injection	High7.8	—	2.4%	Sep 9, 2026
32Monitor	CVE-2026-78493No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralidell · secure connect gateway · CWE-77 RCE Local privilege escalation Command injection	High7.8	—	2.4%	Sep 9, 2026
40Plan	CVE-2026-79689No exploit	Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralidell · secure connect gateway · CWE-78 pre-auth RCE Command injection	Critical9.8	—	4.7%	Sep 9, 2026
28Monitor	CVE-2026-81330No exploit	Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive informationsoftish · earvision android application · CWE-319 Pre-auth Weak crypto	High7.1	—	0.0%	Sep 9, 2026
34Monitor	CVE-2026-81640No exploit	Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentialssoftish · earvision android application · CWE-798 Pre-auth Hard-coded credentials	High8.7	—	0.2%	Sep 9, 2026
33Monitor	CVE-2026-82563No exploit	Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofingsoftish · earvision android application · CWE-290 Pre-auth Auth bypass	High8.4	—	0.2%	Sep 9, 2026
34Monitor	CVE-2026-87807No exploit	siyuan before v3.8.2 SQL Injection via fullTextSearchBlocksiyuan-note · siyuan · CWE-89 Pre-auth SQL injection	High8.7	—	0.4%	Sep 9, 2026
34Monitor	CVE-2026-19233No exploit	CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server daschneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert) · CWE-918 RCE SSRF	High8.6	—	0.6%	Sep 9, 2026
28Monitor	CVE-2026-23855No exploit	Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, codell · idrac9 · CWE-78 RCE Command injection	High7.2	—	1.3%	Sep 9, 2026
37Monitor	CVE-2026-47156No exploit	MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administratormantisbt · mantisbt · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.6%	Sep 9, 2026
34Monitor	CVE-2026-77120No exploit	CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause prischneider electric · powerlogic t300 · CWE-78 RCE Local privilege escalation Command injection	High8.7	—	0.6%	Sep 9, 2026
32Monitor	CVE-2026-87874No exploit	Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution ored hat · red hat ceph storage 5 · CWE-502 pre-auth RCE Deserialization	High8.1	—	0.7%	Sep 9, 2026
35Monitor	CVE-2026-87927No exploit	MaxSite CMS through 109.6 Local File Inclusion via ajax dispatchermaxsite · maxsite cms · CWE-98 Pre-auth Auth bypass Path traversal	High8.8	—	0.5%	Sep 9, 2026
37Monitor	CVE-2026-87929No exploit	MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Keymaxsite · maxsite cms · CWE-321 Pre-auth Auth bypass Hard-coded credentials	Critical9.3	—	0.5%	Sep 9, 2026
36Monitor	CVE-2026-87930Proof of concept	MaxSite CMS through 109.6 PHP Object Injection via ci_sessionmaxsite · maxsite cms · CWE-502 Pre-auth Deserialization	Critical9.2	—	0.6%	Sep 9, 2026
34Monitor	CVE-2026-8044No exploit	CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote codeschneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert) · CWE-88 RCE	High8.6	—	0.6%	Sep 9, 2026
34Monitor	CVE-2023-54355No exploit	PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curvepmmp · pocketmine-mp · CWE-347 Pre-auth Weak crypto	High8.7	—	0.3%	Sep 9, 2026
34Monitor	CVE-2023-54390No exploit	PocketMine-MP before 5.3.1 Denial of Service via LoginPacketpmmp · pocketmine-mp · CWE-1025 Pre-auth	High8.7	—	0.6%	Sep 9, 2026
28Monitor	CVE-2023-54392No exploit	PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacketpmmp · pocketmine-mp · CWE-20	High7.1	—	0.5%	Sep 9, 2026
34Monitor	CVE-2023-54393No exploit	PocketMine-MP before 4.20.5 Denial of Service via LoginPacketpmmp · pocketmine-mp · CWE-20 Pre-auth	High8.7	—	0.6%	Sep 9, 2026
28Monitor	CVE-2023-54396No exploit	PocketMine-MP before 4.8.1 Server Crash via Banner NBTpmmp · pocketmine-mp · CWE-129 Deserialization	High7.1	—	0.5%	Sep 9, 2026
28Monitor	CVE-2024-58380No exploit	PocketMine-MP before 5.11.2 Denial of Service via BookEditPacketpmmp · pocketmine-mp · CWE-20	High7.1	—	0.5%	Sep 9, 2026
34Monitor	CVE-2024-58381No exploit	PocketMine-MP before 5.11.1 Denial of Service via LoginPacketpmmp · pocketmine-mp · CWE-502 Pre-auth Deserialization	High8.7	—	0.7%	Sep 9, 2026
34Monitor	CVE-2024-58382No exploit	league/commonmark before 2.6.0 Denial of Service via Quadratic Complexitythephpleague · commonmark · CWE-407 Pre-auth	High8.7	—	0.4%	Sep 9, 2026
28Monitor	CVE-2025-71417No exploit	PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacketpmmp · pocketmine-mp · CWE-20	High7.1	—	0.4%	Sep 9, 2026
34Monitor	CVE-2026-86201No exploit	PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientDatapmmp · pocketmine-mp · CWE-400 Pre-auth Denial of service	High8.7	—	0.6%	Sep 9, 2026
28Monitor	CVE-2026-86204No exploit	PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacketpmmp · pocketmine-mp · CWE-400 Denial of service	High7.1	—	0.4%	Sep 9, 2026
30Monitor	CVE-2026-52482No exploit	An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spaCWE-200 Pre-auth Info leak	High7.5	—	0.5%	Sep 9, 2026
38Monitor	CVE-2026-54694No exploit	NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeovernationalsecurityagency · skills-service · CWE-20 Pre-auth XSS	Critical9.6	—	0.4%	Sep 9, 2026
34Monitor	CVE-2026-79322No exploit	SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote umageplaza · mageplaza blog · CWE-89 pre-auth RCE SQL injection	High8.6	—	0.4%	Sep 9, 2026
30Monitor	CVE-2026-79323No exploit	Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1 mageplaza · magefan blog · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Sep 9, 2026
28Monitor	CVE-2026-61915No exploit	An issue was discovered in Cyrus IMAP before 3.12.4.cyrus · imap · CWE-415 Memory safety	High7.1	—	0.2%	Sep 9, 2026
33Monitor	CVE-2026-71612No exploit	Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_CWE-120 RCE Memory safety	High8.4	—	0.2%	Sep 9, 2026
31Monitor	CVE-2026-71613No exploit	Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_pCWE-120 RCE Memory safety	High7.8	—	0.2%	Sep 9, 2026
33Monitor	CVE-2026-71614No exploit	An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, deCWE-94 RCE	High8.4	—	0.2%	Sep 9, 2026
28Monitor	CVE-2026-73769No exploit	Authenticated Remote Code Execution in CPPM Web Interfacehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-78 RCE Command injection	High7.2	—	1.0%	Sep 9, 2026
30Monitor	CVE-2026-73786Proof of concept	Unauthenticated Network-Based Denial of Service in CPPM systemshewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Sep 9, 2026
28Monitor	CVE-2026-73787No exploit	Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interfacehewlett packard enterprise (hpe) · clearpass policy manager (cppm) · CWE-78 RCE Command injection	High7.2	—	0.8%	Sep 9, 2026
30Monitor	CVE-2026-79324No exploit	Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote umageplaza · gdpr · CWE-639 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Sep 9, 2026
37Monitor	CVE-2026-87911No exploit	Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-serveraws · aws labs postgres mcp server · CWE-78 pre-auth RCE Command injection	Critical9.0	—	1.7%	Sep 9, 2026
39Monitor	CVE-2026-36433No exploit	An issue in Actions Semiconductor Co.CWE-94 pre-auth RCE	Critical9.8	—	0.6%	Sep 9, 2026
28Monitor	CVE-2026-50165No exploit	alf.io has Improper Access Control for Organization Owners that Exposes System Secretsalfio-event · alf.io · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Sep 9, 2026
39Monitor	CVE-2026-71801No exploit	An issue was discovered in s-pms SPMS-Server through v1.0.CWE-798 Pre-auth Auth bypass Hard-coded credentials	Critical9.8	—	0.7%	Sep 9, 2026
35Monitor	CVE-2026-71808No exploit	A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands vCWE-89 RCE SQL injection	High8.8	—	0.5%	Sep 9, 2026
17Monitor	CVE-2026-79387Proof of concept	SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (iCWE-89 SQL injection	Medium4.3	—	0.2%	Sep 9, 2026
30Monitor	CVE-2026-87011No exploit	Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logoutopenwebui · open webui · CWE-405 Pre-auth Denial of service	High7.5	—	0.6%	Sep 9, 2026
32Monitor	CVE-2026-18147No exploit	Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted urlred hat · red hat enterprise linux 10 · CWE-79 pre-auth RCE XSS	High8.1	—	0.5%	Sep 9, 2026
35Monitor	CVE-2026-80914Proof of concept	Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_readylinux · linux Pre-auth	High8.8	—	0.3%	Sep 9, 2026
35Monitor	CVE-2026-80921No exploit	KVM: s390: vsie: zero stale crypto bitslinux · linux	High8.8	—	0.1%	Sep 9, 2026
30Monitor	CVE-2026-80924No exploit	crypto: krb5 - use kfree_sensitive() for derived key bufferslinux · linux Pre-auth	High7.5	—	0.3%	Sep 9, 2026
30Monitor	CVE-2026-87853No exploit	Sssd: sssd: idp authentication prefix comparison allows cross-user impersonationred hat · red hat enterprise linux 10 · CWE-187	High7.5	—	0.3%	Sep 9, 2026
30Monitor	CVE-2026-15913No exploit	Path Traversal in Fortra's GoAnywhere MFT Endpointfortra · goanywhere mft · CWE-23 Path traversal	High7.7	—	0.4%	Sep 9, 2026
39Monitor	CVE-2026-71805No exploit	An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0.CWE-434 Pre-auth Path traversal File upload	Critical9.8	—	0.6%	Sep 9, 2026
32Monitor	CVE-2026-87016No exploit	Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLiteopenwebui · open webui · CWE-155 Pre-auth	High8.1	—	0.5%	Sep 9, 2026
34Monitor	CVE-2026-87995No exploit	Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-originopenwebui · open webui · CWE-79 XSS	High8.7	—	0.4%	Sep 9, 2026
30Monitor	CVE-2026-87996No exploit	Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loaderopenwebui · open webui · CWE-367 SSRF Race condition	High7.7	—	0.3%	Sep 9, 2026
28Monitor	CVE-2026-87998No exploit	Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletionopenwebui · open webui · CWE-269	High7.1	—	0.4%	Sep 9, 2026
28Monitor	CVE-2026-87999No exploit	Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetchopenwebui · open webui · CWE-918 SSRF	High7.1	—	0.3%	Sep 9, 2026
37Monitor	CVE-2026-88069No exploit	Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysispandora-analysis · pandora · CWE-22 Pre-auth Path traversal	Critical9.3	—	0.4%	Sep 9, 2026
32Monitor	CVE-2026-71809No exploit	Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticateCWE-259 Pre-auth Auth bypass Hard-coded credentials	High8.1	—	0.5%	Sep 9, 2026
34Monitor	CVE-2026-87931No exploit	Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflowbehavioral technology group · pavlok behavioral conditioning wearable · CWE-119 Pre-auth Memory safety	High8.6	—	0.6%	Sep 9, 2026
39Monitor	CVE-2026-18351Proof of concept	Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameteraddonsorg · drag and drop file upload for elementor forms · CWE-434 pre-auth RCE File upload	Critical9.8	—	1.1%	Sep 9, 2026
39Monitor	CVE-2026-19583No exploit	Velociraptor Required Permissions bypass by using client monitoring queriesrapid7 · velociraptor · CWE-732 RCE	Critical9.9	—	0.5%	Sep 9, 2026
30Monitor	CVE-2026-19584No exploit	Velociraptor VQL injection during notebook restore from backuprapid7 · velociraptor · CWE-94 RCE	High7.7	—	0.3%	Sep 9, 2026
35Monitor	GHSA-hxjg-93wc-h8p8No exploit	Komari: Management Interface CSRFGo · github.com/komari-monitor/komari · CWE-918 Pre-auth SSRF CSRF	High8.8	—	—	Sep 9, 2026
32Monitor	CVE-2026-14873No exploit	Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Resetrubenw · bulk password reset · CWE-862 Broken access control (IDOR)	High8.0	—	0.4%	Sep 10, 2026
30Monitor	CVE-2026-15019No exploit	Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segmentkamalyon · direct download for woocommerce · CWE-22 Pre-auth Path traversal	High7.5	—	1.0%	Sep 10, 2026
30Monitor	CVE-2026-49362No exploit	Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creationapache · artemis · CWE-306 Pre-auth Auth bypass Denial of service	High7.5	—	0.8%	Sep 10, 2026
30Monitor	CVE-2026-49363No exploit	Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscriptionapache · artemis · CWE-306 Pre-auth Auth bypass	High7.5	—	0.8%	Sep 10, 2026
36Monitor	CVE-2026-49364No exploit	Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peersapache · artemis · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.5%	Sep 10, 2026
36Monitor	CVE-2026-67593No exploit	Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletionapache · artemis · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.8%	Sep 10, 2026
28Monitor	CVE-2026-82079No exploit	Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attacknintendo · nintendo switch · CWE-121 pre-auth RCE Memory safety	High7.0	—	0.2%	Sep 10, 2026

CVE-2026-86750
33Monitor
snipe-it before 8.7.0 Authorization Bypass via API User Create/Update
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86751
33Monitor
Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Markdown
HighCVSS 8.4No exploitEPSS 0%
- SSRF
- Path traversal
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86754
34Monitor
Snipe-IT before 8.7.0 Authorization Bypass via OAuth Clients
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86757
28Monitor
Snipe-IT before 8.7.0 Information Disclosure via Custom Fields
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86758
28Monitor
Snipe-IT before 8.7.0 License Key Exposure via CSV Export
HighCVSS 7.1No exploitEPSS 0%
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86759
28Monitor
Snipe-IT before 8.7.0 Missing Authorization via asset-history CSV importer
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86762
34Monitor
Snipe-IT before 8.7.0 Authentication Bypass via API Middleware
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86764
28Monitor
Snipe-IT 8.6.4 before 8.7.0 Permission Bypass via assigned components
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86765
28Monitor
Snipe-IT 8.6.3 Authorization Bypass via Asset Update Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86766
28Monitor
Snipe-IT 8.6.3 Race Condition via Consumable Checkout
HighCVSS 7.1No exploitEPSS 0%
- Race condition
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86770
34Monitor
Snipe-IT before 8.7.0 Authentication Bypass via SAML Username Collation
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86771
33Monitor
Snipe-IT before 8.7.0 Server-Side Request Forgery via employee_num
HighCVSS 8.3No exploitEPSS 0%
- SSRF
snipeitapp · snipe-itSep 9, 2026
CVE-2026-86775
35Monitor
knowns before 0.30.0 Path Traversal via Document API
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
knowns-dev · knownsSep 9, 2026
CVE-2026-26212
34Monitor
Rara One Click Demo Import < 1.3.5 Arbitrary File Upload RCE
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
rara themes · rara one click demo importSep 9, 2026
CVE-2026-78482
32Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali
HighCVSS 7.8No exploitEPSS 2%
- RCE
- SQL injection
- Local privilege escalation
dell · secure connect gatewaySep 9, 2026
CVE-2026-79617
28Monitor
Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter
HighCVSS 7.1Proof of conceptEPSS 0%
tübi̇tak bi̇lgem software technologies research institute · pardus lightdm greeterSep 9, 2026
CVE-2026-79941
40Plan
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Command injection
dell · secure connect gatewaySep 9, 2026
CVE-2026-87822
34Monitor
t-digest 3.1 through 3.3 Denial of Service via NaN Centroid Means in MergingDigest.fromBytes
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Deserialization
tdunning · t-digestSep 9, 2026
CVE-2026-87823
35Monitor
zstd-jni 1.1.1 through 1.5.7-13 Out-of-Bounds Read via Direct ByteBuffer Frame-Size Methods
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
luben · zstd-jniSep 9, 2026
CVE-2026-87824
34Monitor
zstd-jni 1.3.3-1 through 1.5.7-13 Out-of-Bounds Read via Zstd.trainFromBufferDirect
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
luben · zstd-jniSep 9, 2026
CVE-2026-87825
28Monitor
zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free of Compression and Decompression Dictionaries
HighCVSS 7.0No exploitEPSS 0%
- Memory safety
luben · zstd-jniSep 9, 2026
CVE-2026-87877
28Monitor
zstd-jni 1.3.8-4 through 1.5.7-13 Use-After-Free via Setters Called After close()
HighCVSS 7.0No exploitEPSS 0%
- Memory safety
luben · zstd-jniSep 9, 2026
CVE-2026-22590
36Monitor
Fast-DDS Discovery Server: Out-of-Bounds Read & Heap Memory Disclosure via DATA_FRAG sampleSize / fragmentsInSubmessage
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Memory safety
eprosima · fast-ddsSep 9, 2026
CVE-2026-22591
30Monitor
Fast DDS DDSSQLFilter Recursive Parser Stack Exhaustion (Remote DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
eprosima · fast-ddsSep 9, 2026
CVE-2026-67401
39Monitor
A vulnerability in cPanel allows a mail-enabled account to achieve remote code execution as root through SQLi in EmailTrack component
CriticalCVSS 9.9Proof of conceptEPSS 0%
- RCE
- SQL injection
webpros · cpanelSep 9, 2026
CVE-2026-67403
36Monitor
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.
CriticalCVSS 9.0No exploitEPSS 0%
- Broken access control (IDOR)
sage · sage ar automationSep 9, 2026
CVE-2026-68484
36Monitor
Cash Collect contains an improper authorization vulnerability in the Sage AR Automation API.
CriticalCVSS 9.0No exploitEPSS 0%
- Broken access control (IDOR)
sage · sage ar automationSep 9, 2026
CVE-2026-77974
34Monitor
Softish C6 Ear Camera and EarVision Android Application Missing authentication for critical function
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
softish · earvision android applicationSep 9, 2026
CVE-2026-78484
32Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Local privilege escalation
- Command injection
dell · secure connect gatewaySep 9, 2026
CVE-2026-78493
32Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali
HighCVSS 7.8No exploitEPSS 2%
- RCE
- Local privilege escalation
- Command injection
dell · secure connect gatewaySep 9, 2026
CVE-2026-79689
40Plan
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Command injection
dell · secure connect gatewaySep 9, 2026
CVE-2026-81330
28Monitor
Softish C6 Ear Camera and EarVision Android Application Cleartext transmission of sensitive information
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
softish · earvision android applicationSep 9, 2026
CVE-2026-81640
34Monitor
Softish C6 Ear Camera and EarVision Android Application Use of Hard-coded Credentials
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
softish · earvision android applicationSep 9, 2026
CVE-2026-82563
33Monitor
Softish C6 Ear Camera and EarVision Android Application Authentication bypass by spoofing
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
softish · earvision android applicationSep 9, 2026
CVE-2026-87807
34Monitor
siyuan before v3.8.2 SQL Injection via fullTextSearchBlock
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SQL injection
siyuan-note · siyuanSep 9, 2026
CVE-2026-19233
34Monitor
CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthorized command execution and disclosure of server da
HighCVSS 8.6No exploitEPSS 0%
- RCE
- SSRF
schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)Sep 9, 2026
CVE-2026-23855
28Monitor
Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G versions prior to 1.30.30.50, co
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
dell · idrac9Sep 9, 2026
CVE-2026-47156
37Monitor
MantisBT: SOAP API Authentication Bypass with Privilege Escalation to Administrator
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
mantisbt · mantisbtSep 9, 2026
CVE-2026-77120
34Monitor
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause pri
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
schneider electric · powerlogic t300Sep 9, 2026
CVE-2026-87874
32Monitor
Community.general: community.general: memcached cache plugin deserializes untrusted pickle data from memcached, enabling cache-poisoning remote code execution o
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Deserialization
red hat · red hat ceph storage 5Sep 9, 2026
CVE-2026-87927
35Monitor
MaxSite CMS through 109.6 Local File Inclusion via ajax dispatcher
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Path traversal
maxsite · maxsite cmsSep 9, 2026
CVE-2026-87929
37Monitor
MaxSite CMS through 109.6 Authentication Bypass via Hardcoded Encryption Key
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
maxsite · maxsite cmsSep 9, 2026
CVE-2026-87930
36Monitor
MaxSite CMS through 109.6 PHP Object Injection via ci_session
CriticalCVSS 9.2Proof of conceptEPSS 0%
- Pre-auth
- Deserialization
maxsite · maxsite cmsSep 9, 2026
CVE-2026-8044
34Monitor
CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability exists that could cause remote code
HighCVSS 8.6No exploitEPSS 0%
- RCE
schneider electric · ecostruxure™ it data center expert (formerly known as struxureware data center expert)Sep 9, 2026
CVE-2023-54355
34Monitor
PocketMine-MP 5.2.0 Server Crash via Incorrect EC Curve
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
pmmp · pocketmine-mpSep 9, 2026
CVE-2023-54390
34Monitor
PocketMine-MP before 5.3.1 Denial of Service via LoginPacket
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
pmmp · pocketmine-mpSep 9, 2026
CVE-2023-54392
28Monitor
PocketMine-MP before 4.22.3 Denial of Service via BlockActorDataPacket
HighCVSS 7.1No exploitEPSS 0%
pmmp · pocketmine-mpSep 9, 2026
CVE-2023-54393
34Monitor
PocketMine-MP before 4.20.5 Denial of Service via LoginPacket
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
pmmp · pocketmine-mpSep 9, 2026
CVE-2023-54396
28Monitor
PocketMine-MP before 4.8.1 Server Crash via Banner NBT
HighCVSS 7.1No exploitEPSS 0%
- Deserialization
pmmp · pocketmine-mpSep 9, 2026
CVE-2024-58380
28Monitor
PocketMine-MP before 5.11.2 Denial of Service via BookEditPacket
HighCVSS 7.1No exploitEPSS 0%
pmmp · pocketmine-mpSep 9, 2026
CVE-2024-58381
34Monitor
PocketMine-MP before 5.11.1 Denial of Service via LoginPacket
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Deserialization
pmmp · pocketmine-mpSep 9, 2026
CVE-2024-58382
34Monitor
league/commonmark before 2.6.0 Denial of Service via Quadratic Complexity
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
thephpleague · commonmarkSep 9, 2026
CVE-2025-71417
28Monitor
PocketMine-MP before 5.32.1 Denial of Service via ResourcePackClientResponsePacket
HighCVSS 7.1No exploitEPSS 0%
pmmp · pocketmine-mpSep 9, 2026
CVE-2026-86201
34Monitor
PocketMine-MP before 5.41.1 LogDoS via LoginPacket clientData
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
pmmp · pocketmine-mpSep 9, 2026
CVE-2026-86204
28Monitor
PocketMine-MP before 5.39.2 Denial of Service via ModalFormResponsePacket
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
pmmp · pocketmine-mpSep 9, 2026
CVE-2026-52482
30Monitor
An issue in SJRC F11 SJ-GPS-PRO firmware build 2019-09-17 allows a remote attacker to obtain sensitive information via the inetd service spa
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
Sep 9, 2026
CVE-2026-54694
38Monitor
NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
- XSS
nationalsecurityagency · skills-serviceSep 9, 2026
CVE-2026-79322
34Monitor
SQL injection in the RelatedProduct block in Mageplaza Blog for Magento 2 (mageplaza/magento-2-blog-extension) through 4.3.2 allows remote u
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- SQL injection
mageplaza · mageplaza blogSep 9, 2026
CVE-2026-79323
30Monitor
Information disclosure in the blogComments GraphQL query in Magefan Blog GraphQL for Magento 2 (magefan/module-blog-graph-ql) through 2.2.1
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
mageplaza · magefan blogSep 9, 2026
CVE-2026-61915
28Monitor
An issue was discovered in Cyrus IMAP before 3.12.4.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
cyrus · imapSep 9, 2026
CVE-2026-71612
33Monitor
Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the nhntdmx_
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Memory safety
Sep 9, 2026
CVE-2026-71613
31Monitor
Buffer Overflow vulnerability in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the j2kdec_p
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
Sep 9, 2026
CVE-2026-71614
33Monitor
An issue in GPAC c2dee3aff638cd96f9617ac5b17dc2868cd90ef3 allows an attacker to execute arbitrary code via the src/media_tools/dvb_mpe.c, de
HighCVSS 8.4No exploitEPSS 0%
- RCE
Sep 9, 2026
CVE-2026-73769
28Monitor
Authenticated Remote Code Execution in CPPM Web Interface
HighCVSS 7.2No exploitEPSS 1%
- RCE
- Command injection
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)Sep 9, 2026
CVE-2026-73786
30Monitor
Unauthenticated Network-Based Denial of Service in CPPM systems
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)Sep 9, 2026
CVE-2026-73787
28Monitor
Authenticated Arbitrary File Write allows Remote Code Execution via CPPM Web Interface
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Command injection
hewlett packard enterprise (hpe) · clearpass policy manager (cppm)Sep 9, 2026
CVE-2026-79324
30Monitor
Missing authorization in the Address Delete controller in Mageplaza GDPR for Magento 2 (mageplaza/module-gdpr) through 4.2.9 allows remote u
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
mageplaza · gdprSep 9, 2026
CVE-2026-87911
37Monitor
Read-only enforcement bypass enabling operating system command execution in the SQL validation component of Amazon awslabs postgres-mcp-server
CriticalCVSS 9.0No exploitEPSS 1%
- pre-auth RCE
- Command injection
aws · aws labs postgres mcp serverSep 9, 2026
CVE-2026-36433
39Monitor
An issue in Actions Semiconductor Co.
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Sep 9, 2026
CVE-2026-50165
28Monitor
alf.io has Improper Access Control for Organization Owners that Exposes System Secrets
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
alfio-event · alf.ioSep 9, 2026
CVE-2026-71801
39Monitor
An issue was discovered in s-pms SPMS-Server through v1.0.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
Sep 9, 2026
CVE-2026-71808
35Monitor
A SQL Injection vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote authenticated attackers to execute arbitrary SQL commands v
HighCVSS 8.8No exploitEPSS 0%
- RCE
- SQL injection
Sep 9, 2026
CVE-2026-79387
17Monitor
SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (i
MediumCVSS 4.3Proof of conceptEPSS 0%
- SQL injection
Sep 9, 2026
CVE-2026-87011
30Monitor
Open WebUI: Unauthenticated requests can stall the server via uncached OIDC fetches in back-channel logout
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
openwebui · open webuiSep 9, 2026
CVE-2026-18147
32Monitor
Freeipa: ipa: freeipa/idm: cross-site scripting vulnerability allows arbitrary code execution via crafted url
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- XSS
red hat · red hat enterprise linux 10Sep 9, 2026
CVE-2026-80914
35Monitor
Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready
HighCVSS 8.8Proof of conceptEPSS 0%
- Pre-auth
linux · linuxSep 9, 2026
CVE-2026-80921
35Monitor
KVM: s390: vsie: zero stale crypto bits
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 9, 2026
CVE-2026-80924
30Monitor
crypto: krb5 - use kfree_sensitive() for derived key buffers
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 9, 2026
CVE-2026-87853
30Monitor
Sssd: sssd: idp authentication prefix comparison allows cross-user impersonation
HighCVSS 7.5No exploitEPSS 0%
red hat · red hat enterprise linux 10Sep 9, 2026
CVE-2026-15913
30Monitor
Path Traversal in Fortra's GoAnywhere MFT Endpoint
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
fortra · goanywhere mftSep 9, 2026
CVE-2026-71805
39Monitor
An arbitrary file upload and path traversal vulnerability exists in LZ-litchi 1.0.0.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
- File upload
Sep 9, 2026
CVE-2026-87016
32Monitor
Open WebUI: Sign-in as another user via wildcard characters in the OAuth subject claim on SQLite
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
openwebui · open webuiSep 9, 2026
CVE-2026-87995
34Monitor
Open WebUI: Same-origin XSS to account takeover via terminal port-preview iframe hardcoding allow-same-origin
HighCVSS 8.7No exploitEPSS 0%
- XSS
openwebui · open webuiSep 9, 2026
CVE-2026-87996
30Monitor
Open WebUI: SSRF into internal services via DNS rebinding in the Playwright web loader
HighCVSS 7.7No exploitEPSS 0%
- SSRF
- Race condition
openwebui · open webuiSep 9, 2026
CVE-2026-87998
28Monitor
Open WebUI: Non-admin users can delete admin-owned external knowledge connections via knowledge base deletion
HighCVSS 7.1No exploitEPSS 0%
openwebui · open webuiSep 9, 2026
CVE-2026-87999
28Monitor
Open WebUI: Any authenticated user can reach the Azure platform channel via server-side web fetch
HighCVSS 7.1No exploitEPSS 0%
- SSRF
openwebui · open webuiSep 9, 2026
CVE-2026-88069
37Monitor
Path traversal in Pandora archive extractor allows arbitrary file writes outside the extraction directory in pandora analysis
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Path traversal
pandora-analysis · pandoraSep 9, 2026
CVE-2026-71809
32Monitor
Authentication Bypass via Hardcoded Master Verification Code vulnerability in Siam Ordering (siam-server) 1.0.0 allows remote unauthenticate
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
Sep 9, 2026
CVE-2026-87931
34Monitor
Behavioral Technology Group Pavlok Behavioral Conditioning Wearable Apple Notification Center Service Event buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Memory safety
behavioral technology group · pavlok behavioral conditioning wearableSep 9, 2026
CVE-2026-18351
39Monitor
Drag and Drop File Upload for Elementor Forms <= 1.6.0 - Unauthenticated Arbitrary File Upload via 'type' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- File upload
addonsorg · drag and drop file upload for elementor formsSep 9, 2026
CVE-2026-19583
39Monitor
Velociraptor Required Permissions bypass by using client monitoring queries
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
rapid7 · velociraptorSep 9, 2026
CVE-2026-19584
30Monitor
Velociraptor VQL injection during notebook restore from backup
HighCVSS 7.7No exploitEPSS 0%
- RCE
rapid7 · velociraptorSep 9, 2026
GHSA-hxjg-93wc-h8p8
35Monitor
Komari: Management Interface CSRF
HighCVSS 8.8No exploit
- Pre-auth
- SSRF
- CSRF
Go · github.com/komari-monitor/komariSep 9, 2026
CVE-2026-14873
32Monitor
Bulk Password Reset <= 1.3.3 - Authenticated (Subscriber+) Arbitrary Password Reset
HighCVSS 8.0No exploitEPSS 0%
- Broken access control (IDOR)
rubenw · bulk password resetSep 10, 2026
CVE-2026-15019
30Monitor
Direct Download for WooCommerce <= 1.19 - Unauthenticated Arbitrary File Read via 'file_id' Path Segment
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
kamalyon · direct download for woocommerceSep 10, 2026
CVE-2026-49362
30Monitor
Apache Artemis, Apache ActiveMQ Artemis: Missing Authentication in CORE Protocol Handler Allows Unauthorized Queue Creation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Denial of service
apache · artemisSep 10, 2026
CVE-2026-49363
30Monitor
Apache Artemis, Apache ActiveMQ Artemis: Pre-Authentication Information Disclosure in CORE Protocol Topology Subscription
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache · artemisSep 10, 2026
CVE-2026-49364
36Monitor
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-Authentication Cluster Credential Exposure to Discovered Peers
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache · artemisSep 10, 2026
CVE-2026-67593
36Monitor
Apache Artemis, Apache Artemis, Apache ActiveMQ Artemis, Apache ActiveMQ Artemis: Pre-authentication Openwire protocol handling can result in queue deletion
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache · artemisSep 10, 2026
CVE-2026-82079
28Monitor
Potential Leakage of Nintendo Switch System Information Through a Proximity-Based Remote Attack
HighCVSS 7.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
nintendo · nintendo switchSep 10, 2026