By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 28 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-87987No exploit	An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable mistralai · mistral-vibe · CWE-15 pre-auth RCE	Critical10.0	—	0.5%	Sep 11, 2026
40Plan	CVE-2026-87988No exploit	An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as unmistralai · mistral-vibe · CWE-732 Pre-auth	Critical10.0	—	0.4%	Sep 11, 2026
31Monitor	CVE-2026-8301No exploit	OS Command Injection in TUBITAK BILGEM's Pardus-boot-repairtubitak bilgem software technologies research institute · pardus boot repair · CWE-78 RCE Command injection	High7.8	—	0.8%	Sep 11, 2026
31Monitor	CVE-2026-8303No exploit	Privilege Escalation in TUBITAK BILGEM's Pardus-softwaretubitak bilgem software technologies research institute · pardus-software · CWE-266 Local privilege escalation	High7.8	—	0.1%	Sep 11, 2026
36Monitor	CVE-2026-3869No exploit	CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and schneider electric · modicon m580 · CWE-303 Pre-auth	Critical9.2	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-68497No exploit	jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of servicefasterxml · jackson-databind · CWE-400 Pre-auth Deserialization Denial of service	High7.5	—	0.6%	Sep 11, 2026
33Monitor	CVE-2026-7863No exploit	OS Command Injection in TUBITAK BILGEM's Pardus Softwaretubitak bilgem software technologies research institute · pardus software · CWE-78 RCE Command injection	High8.4	—	0.9%	Sep 11, 2026
23Monitor	CVE-2026-81861Proof of concept	CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized accschneider electric · scadapack 47x · CWE-522 Pre-auth Info leak	Medium5.9	—	0.5%	Sep 11, 2026
28Monitor	CVE-2026-89012Proof of concept	Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameterdolibarr · dolibarr · CWE-178	High7.1	—	0.4%	Sep 11, 2026
34Monitor	CVE-2026-89013Proof of concept	Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.phpdolibarr · dolibarr · CWE-863 Pre-auth Broken access control (IDOR)	High8.7	—	1.5%	Sep 11, 2026
33Monitor	CVE-2026-89066No exploit	OS command injection in the task synthesis component in projenaws · projen · CWE-78 RCE Command injection	High8.4	—	0.2%	Sep 11, 2026
34Monitor	CVE-2026-89260No exploit	MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpointmoxi624 · mogublog · CWE-611 Pre-auth XXE	High8.7	—	0.7%	Sep 11, 2026
34Monitor	CVE-2026-89262No exploit	MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Checkmoxi624 · mogublog · CWE-639 Pre-auth Broken access control (IDOR)	High8.7	—	0.5%	Sep 11, 2026
34Monitor	CVE-2026-72708Proof of concept	SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.htmlspip · spip · CWE-89 Pre-auth SQL injection	High8.7	—	0.5%	Sep 11, 2026
37Monitor	CVE-2026-72709No exploit	SPIP < 4.4.18 Missing Authorization via ecrire/action/spip · spip · CWE-862 Pre-auth Broken access control (IDOR) CSRF	Critical9.3	—	0.6%	Sep 11, 2026
37Monitor	CVE-2026-72710No exploit	SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injectionspip · spip · CWE-915 pre-auth RCE	Critical9.3	—	1.1%	Sep 11, 2026
30Monitor	CVE-2026-67211No exploit	Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializerapache · opennlp · CWE-789 Pre-auth Denial of service	High7.5	—	0.7%	Sep 11, 2026
28Monitor	CVE-2026-78807No exploit	An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA cCWE-346	High7.1	—	0.0%	Sep 11, 2026
40Plan	CVE-2026-82617No exploit	Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patternsapache · opennlp · CWE-1333 Pre-auth Denial of service	Critical10.0	—	0.7%	Sep 11, 2026
32Monitor	CVE-2026-89090No exploit	Denial of service in the event stream header decoder in AWS SDK for Go v2aws · aws sdk for go v2 · CWE-248 Pre-auth	High8.2	—	0.3%	Sep 11, 2026
35Monitor	CVE-2026-71416No exploit	Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)headroomlabs-ai · headroom · CWE-287 Pre-auth Auth bypass	High8.8	—	0.1%	Sep 11, 2026
35Monitor	CVE-2026-89009No exploit	WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_serverwavlink technology · wn535m1 · CWE-36 Pre-auth Path traversal	High8.8	—	1.0%	Sep 11, 2026
38Monitor	CVE-2026-89010No exploit	WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_serverwavlink technology · wn535m1 · CWE-78 pre-auth RCE Command injection	Critical9.3	—	3.1%	Sep 11, 2026
28Monitor	CVE-2026-62089No exploit	WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerabilitypixar labs · master addons for elementor · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 11, 2026
35Monitor	CVE-2026-62102No exploit	WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerabilitygato graphql · gato graphql · CWE-266	High8.8	—	0.4%	Sep 11, 2026
39Monitor	CVE-2026-62103No exploit	WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerabilitywpeverest · everest forms · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-62105No exploit	WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerabilitythemerex · themerex addons · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.5%	Sep 11, 2026
35Monitor	CVE-2026-62106No exploit	WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerabilitycozy vision technologies pvt. ltd. · sms alert order notifications · CWE-266	High8.8	—	0.4%	Sep 11, 2026
30Monitor	CVE-2026-62109No exploit	WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerabilitywowdevs · sky addons for elementor · CWE-89 SQL injection	High7.6	—	0.3%	Sep 11, 2026
30Monitor	CVE-2026-62112No exploit	WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerabilitymelograno venture studio · amelia · CWE-89 SQL injection	High7.6	—	0.3%	Sep 11, 2026
30Monitor	CVE-2026-71646No exploit	An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Sep 11, 2026
35Monitor	CVE-2026-79362No exploit	Certain Woltlab products are affected by RCE via Cache Poisoning.CWE-94 RCE	High8.8	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-79393No exploit	A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP CameraCWE-122 pre-auth RCE Memory safety Denial of service	High7.5	—	0.7%	Sep 11, 2026
30Monitor	CVE-2026-79394No exploit	An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMTCWE-1188 Pre-auth	High7.5	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-79395No exploit	An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in XiongmaCWE-287 Pre-auth Auth bypass	Critical9.8	—	0.7%	Sep 11, 2026
39Monitor	CVE-2026-79396No exploit	Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credentiCWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-52630No exploit	SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Sep 11, 2026
35Monitor	CVE-2026-70341No exploit	Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · edge · CWE-416 RCE Memory safety	High8.8	—	0.6%	Sep 11, 2026
36Monitor	CVE-2026-54047No exploit	Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulationlacisynchroni · server · CWE-287 Pre-auth Auth bypass	Critical9.2	—	0.3%	Sep 11, 2026
34Monitor	CVE-2026-44715No exploit	OpenMRS has Broken Access Control in HL7 Configurationopenmrs · org.openmrs.module:legacyui-api · CWE-285 Pre-auth Broken access control (IDOR)	High8.7	—	0.4%	Sep 11, 2026
30Monitor	CVE-2026-89099No exploit	Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruptionmongodb · mongodb · CWE-362 Race condition	High7.7	—	0.3%	Sep 11, 2026
37Monitor	CVE-2026-54072No exploit	Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URLauthorizerdev · authorizer · CWE-601 Pre-auth Open redirect	Critical9.3	—	0.4%	Sep 11, 2026
35Monitor	CVE-2026-62107No exploit	WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerabilitymasteriyo · masteriyo - lms · CWE-502 Deserialization	High8.8	—	0.5%	Sep 11, 2026
35Monitor	CVE-2026-89266No exploit	stb_vorbis through 1.22 heap buffer overflow via codebook multiplicandsnothings · stb_vorbis · CWE-787 Pre-auth Memory safety	High8.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-53952No exploit	GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flawgetsimplecms-ce · getsimplecms-ce · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Sep 11, 2026
30Monitor	CVE-2026-54135No exploit	AirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Serversimulpiscator · airsane · CWE-400 Pre-auth Denial of service	High7.5	—	0.7%	Sep 11, 2026
39Monitor	CVE-2026-80926No exploit	ksmbd: fix use-after-free in oplock break notificationlinux · linux Pre-auth	Critical9.8	—	0.4%	Sep 11, 2026
31Monitor	CVE-2026-80928No exploit	smack: fix cred UAF in smack_file_send_sigiotask()linux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80929No exploit	sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]linux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80931No exploit	w1: ds28e17: reject an oversize length on an I2C block readlinux · linux	High7.8	—	0.1%	Sep 11, 2026
33Monitor	CVE-2026-80932No exploit	vsock/virtio: flush works in dependency orderlinux · linux	High8.4	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80933No exploit	wifi: mt76: mt7996: validate default EEPROM firmware sizelinux · linux	High7.8	—	0.1%	Sep 11, 2026
35Monitor	CVE-2026-80935No exploit	wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copylinux · linux Pre-auth	High8.8	—	0.2%	Sep 11, 2026
31Monitor	CVE-2026-80936No exploit	wifi: mt76: mt7925: cancel mlo_pm_work on stoplinux · linux	High7.8	—	0.1%	Sep 11, 2026
35Monitor	CVE-2026-80937No exploit	wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copylinux · linux Pre-auth	High8.8	—	0.3%	Sep 11, 2026
30Monitor	CVE-2026-80943No exploit	wifi: rtlwifi: rtl8192du: check QoS TID before indexing tidslinux · linux Pre-auth	High7.6	—	0.2%	Sep 11, 2026
31Monitor	CVE-2026-80944No exploit	wifi: mwifiex: Detach sync cmd buffer on interrupted waitlinux · linux	High7.8	—	0.1%	Sep 11, 2026
36Monitor	CVE-2026-80945No exploit	crypto: iaa - unmap dst before software fallback on decompresslinux · linux Pre-auth	Critical9.1	—	0.5%	Sep 11, 2026
31Monitor	CVE-2026-80947No exploit	wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stoplinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80950No exploit	i3c: renesas: Check that the transfer is valid before accessing itlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80952No exploit	i3c: master: Fix info leak and UAF in device unregister pathlinux · linux	High7.8	—	0.1%	Sep 11, 2026
33Monitor	CVE-2026-80953No exploit	i3c: master: adi: initialize the lock before enabling interruptslinux · linux	High8.4	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80954No exploit	i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()linux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80955No exploit	dm-pcache: fix use-after-free and invalid seg operations in kset_replay()linux · linux	High7.8	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-80958No exploit	dm-pcache: clamp the tail kset read to the segment data regionlinux · linux	High7.1	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80959No exploit	dm-pcache: bound the persisted tail-position offsetlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80961No exploit	dm-pcache: validate kset key_num and intra-segment boundslinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80962No exploit	dm-pcache: validate geometry fields from on-disk cache_infolinux · linux	High7.8	—	0.1%	Sep 11, 2026
33Monitor	CVE-2026-80967No exploit	ALSA: pcxhr: initialize mutexes before requesting threaded IRQlinux · linux	High8.4	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80971No exploit	ALSA: bcd2000: clear the URB pointers on disconnectlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80975No exploit	mfd: qnap-mcu: keep the reply buffer alive past a command timeoutlinux · linux	High7.8	—	0.1%	Sep 11, 2026
39Monitor	CVE-2026-80976No exploit	seg6: reset IP6CB after IPv6 decapsulationlinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 11, 2026
31Monitor	CVE-2026-80977No exploit	net: skbuff: don't touch shared zerocopy state in skb_tx_error()linux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80978No exploit	net: cap advertised IP tunnel headroomlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80979No exploit	net/smc: unregister the connection before draining the rx taskletlinux · linux	High7.8	—	0.1%	Sep 11, 2026
39Monitor	CVE-2026-80980No exploit	net/smc: stop killed, freed and out_of_sync sharing a bytelinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
39Monitor	CVE-2026-80981No exploit	net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()linux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
31Monitor	CVE-2026-80982No exploit	net/smc: fix use-after-free in smc_rx_pipe_buf_release()linux · linux	High7.8	—	0.1%	Sep 11, 2026
32Monitor	CVE-2026-80985No exploit	net/smc: carry oversized SMC-Rv2 LLC messages in the queue entrylinux · linux Pre-auth	High8.2	—	0.5%	Sep 11, 2026
39Monitor	CVE-2026-80986No exploit	net/smc: bound the peer rkey counts in SMC-Rv2 LLC messageslinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-80987No exploit	NTB: ntb_transport: Reject oversized TX bufferslinux · linux Pre-auth Denial of service	High7.5	—	0.5%	Sep 11, 2026
35Monitor	CVE-2026-80989No exploit	net: thunderbolt: Mark the connection down when bringing it up failslinux · linux Pre-auth	High8.8	—	0.3%	Sep 11, 2026
31Monitor	CVE-2026-80991No exploit	net: ravb: serialize PTP clock teardownlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80992No exploit	net: ravb: avoid dereferencing an invalid PTP clocklinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80994No exploit	net: openvswitch: fix flow mask use-after-free on flow deletionlinux · linux	High7.8	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-80995No exploit	net: mctp: hold a reference to the route device in mctp_route_lookup()linux · linux Local privilege escalation	High7.8	—	0.1%	Sep 11, 2026
30Monitor	CVE-2026-80997No exploit	net: ipa: fix stalled modem TX queue after runtime resumelinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 11, 2026
30Monitor	CVE-2026-80998No exploit	net: bnxt: ring the doorbell when SW USO exits earlylinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Sep 11, 2026
31Monitor	CVE-2026-81000Proof of concept	net: tun: bound receive headroomlinux · linux	High7.8	—	0.3%	Sep 11, 2026
31Monitor	CVE-2026-81001No exploit	slip: fix use-after-free in sl_sync()linux · linux	High7.8	—	0.1%	Sep 11, 2026
39Monitor	CVE-2026-81002No exploit	xdp: fix zero-copy frame layoutlinux · linux Pre-auth	Critical9.8	—	0.5%	Sep 11, 2026
32Monitor	CVE-2026-81003No exploit	net/iucv: filter frames in afiucv_hs_rcv() by ingress devicelinux · linux Pre-auth	High8.1	—	0.3%	Sep 11, 2026
33Monitor	CVE-2026-81004No exploit	ipmi:msghandler: Cancel work cleanly on an errorlinux · linux	High8.4	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-81006No exploit	ipmi: Remove all sysfs files on registration failurelinux · linux	High7.8	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-81007No exploit	ipmi: ipmb: validate write message lengthlinux · linux	High7.1	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-81008No exploit	interconnect: Fix use after free in icc_get() and of_icc_get_by_index()linux · linux	High7.8	—	0.1%	Sep 11, 2026
28Monitor	CVE-2026-81011No exploit	platform/x86: hp-bioscfg: pass validated element count to package parserslinux · linux	High7.1	—	0.1%	Sep 11, 2026
33Monitor	CVE-2026-81012No exploit	platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()linux · linux	High8.4	—	0.1%	Sep 11, 2026
31Monitor	CVE-2026-81015No exploit	platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init failslinux · linux	High7.8	—	0.1%	Sep 11, 2026
30Monitor	CVE-2026-81016No exploit	platform/x86/amd/pmc: Propagate SMU errors and validate S2D addresslinux · linux	High7.7	—	0.1%	Sep 11, 2026

CVE-2026-87987
40Plan
An arbitrary code execution vulnerability in Mistral Vibe allows an attacker to bypass command permission checks using environment variable
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
mistralai · mistral-vibeSep 11, 2026
CVE-2026-87988
40Plan
An arbitrary file access vulnerability in Mistral Vibe allows an attacker to bypass workspace restrictions through commands classified as un
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
mistralai · mistral-vibeSep 11, 2026
CVE-2026-8301
31Monitor
OS Command Injection in TUBITAK BILGEM's Pardus-boot-repair
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
tubitak bilgem software technologies research institute · pardus boot repairSep 11, 2026
CVE-2026-8303
31Monitor
Privilege Escalation in TUBITAK BILGEM's Pardus-software
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
tubitak bilgem software technologies research institute · pardus-softwareSep 11, 2026
CVE-2026-3869
36Monitor
CWE-303 : Incorrect Implementation of Authentication Algorithm vulnerability exists that could cause loss of confidentiality, integrity and
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
schneider electric · modicon m580Sep 11, 2026
CVE-2026-68497
30Monitor
jackson-databind: unbounded numeric parse in Duration and XMLGregorianCalendar deserialization allows CPU denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
fasterxml · jackson-databindSep 11, 2026
CVE-2026-7863
33Monitor
OS Command Injection in TUBITAK BILGEM's Pardus Software
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Command injection
tubitak bilgem software technologies research institute · pardus softwareSep 11, 2026
CVE-2026-81861
23Monitor
CWE-522: Insufficiently Protected Credentials vulnerability that could result in exposure of authentication information and unauthorized acc
MediumCVSS 5.9Proof of conceptEPSS 0%
- Pre-auth
- Info leak
schneider electric · scadapack 47xSep 11, 2026
CVE-2026-89012
28Monitor
Dolibarr 24.0.0 < 24.0.1 SQL Filter Denylist Bypass via sqlfilters Parameter
HighCVSS 7.1Proof of conceptEPSS 0%
dolibarr · dolibarrSep 11, 2026
CVE-2026-89013
34Monitor
Dolibarr 23.0.4 < 24.0.1 Authorization Bypass via hashp Parameter in document.php
HighCVSS 8.7Proof of conceptEPSS 1%
- Pre-auth
- Broken access control (IDOR)
dolibarr · dolibarrSep 11, 2026
CVE-2026-89066
33Monitor
OS command injection in the task synthesis component in projen
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Command injection
aws · projenSep 11, 2026
CVE-2026-89260
34Monitor
MoguBlog through 6.2 XML External Entity Injection in the Unauthenticated WeChat Callback Endpoint
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- XXE
moxi624 · mogublogSep 11, 2026
CVE-2026-89262
34Monitor
MoguBlog through 6.2 Arbitrary Comment Deletion via Request-Body Ownership Check
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
moxi624 · mogublogSep 11, 2026
CVE-2026-72708
34Monitor
SPIP < 4.4.18 Unauthenticated Blind SQL Injection via sitemap.xml.html
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
spip · spipSep 11, 2026
CVE-2026-72709
37Monitor
SPIP < 4.4.18 Missing Authorization via ecrire/action/
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- CSRF
spip · spipSep 11, 2026
CVE-2026-72710
37Monitor
SPIP < 4.4.18 RCE via editer_objet.php Job Queue Injection
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
spip · spipSep 11, 2026
CVE-2026-67211
30Monitor
Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache · opennlpSep 11, 2026
CVE-2026-78807
28Monitor
An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to bypass proper network context and AKMP matching for PMKSA c
HighCVSS 7.1No exploitEPSS 0%
Sep 11, 2026
CVE-2026-82617
40Plan
Apache OpenNLP, Apache OpenNLP: ReDoS / stack exhaustion in RegexNameFinderFactory built-in EMAIL and URL patterns
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Denial of service
apache · opennlpSep 11, 2026
CVE-2026-89090
32Monitor
Denial of service in the event stream header decoder in AWS SDK for Go v2
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
aws · aws sdk for go v2Sep 11, 2026
CVE-2026-71416
35Monitor
Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
headroomlabs-ai · headroomSep 11, 2026
CVE-2026-89009
35Monitor
WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Path traversal
wavlink technology · wn535m1Sep 11, 2026
CVE-2026-89010
38Monitor
WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
- Command injection
wavlink technology · wn535m1Sep 11, 2026
CVE-2026-62089
28Monitor
WordPress Master Addons for Elementor plugin <= 3.2.2 - Broken Access Control vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
pixar labs · master addons for elementorSep 11, 2026
CVE-2026-62102
35Monitor
WordPress Gato GraphQL plugin <= 19.2.3 - Privilege Escalation vulnerability
HighCVSS 8.8No exploitEPSS 0%
gato graphql · gato graphqlSep 11, 2026
CVE-2026-62103
39Monitor
WordPress Everest Forms plugin <= 3.6.0 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
wpeverest · everest formsSep 11, 2026
CVE-2026-62105
39Monitor
WordPress ThemeREX Addons plugin < 2.45.0 - PHP Object Injection vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Deserialization
themerex · themerex addonsSep 11, 2026
CVE-2026-62106
35Monitor
WordPress SMS Alert Order Notifications plugin <= 3.9.9 - Privilege Escalation vulnerability
HighCVSS 8.8No exploitEPSS 0%
cozy vision technologies pvt. ltd. · sms alert order notificationsSep 11, 2026
CVE-2026-62109
30Monitor
WordPress Sky Addons for Elementor plugin <= 3.8.4 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
wowdevs · sky addons for elementorSep 11, 2026
CVE-2026-62112
30Monitor
WordPress Amelia plugin <= 2.4.9 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
melograno venture studio · ameliaSep 11, 2026
CVE-2026-71646
30Monitor
An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: commit abcdef1234567890 allows an attacker to cause a denial
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 11, 2026
CVE-2026-79362
35Monitor
Certain Woltlab products are affected by RCE via Cache Poisoning.
HighCVSS 8.8No exploitEPSS 0%
- RCE
Sep 11, 2026
CVE-2026-79393
30Monitor
A heap-based buffer overflow vulnerability in the WS-Addressing Action transformation function in the Sofia IPC daemon in Xiongmai IP Camera
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
- Denial of service
Sep 11, 2026
CVE-2026-79394
30Monitor
An insecure default configuration in the embedded Happytime RTSP server within the Sofia IPC daemon in Xiongmai IP Camera XM530 firmware HMT
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
Sep 11, 2026
CVE-2026-79395
39Monitor
An improper authentication vulnerability in the WS-Security (wsse:UsernameToken) verification routine within the Sofia IPC daemon in Xiongma
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
Sep 11, 2026
CVE-2026-79396
39Monitor
Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM2005-v220608.1837 and earlier stores static account credenti
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
Sep 11, 2026
CVE-2026-52630
39Monitor
SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote attacker to updateUserOptions in UserEditor.class.php and the
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Sep 11, 2026
CVE-2026-70341
35Monitor
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · edgeSep 11, 2026
CVE-2026-54047
36Monitor
Laci Synchroni Backend Vulnerable to Account Takeover / User Impersonation via Client-Side Configuration Manipulation
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
lacisynchroni · serverSep 11, 2026
CVE-2026-44715
34Monitor
OpenMRS has Broken Access Control in HL7 Configuration
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
openmrs · org.openmrs.module:legacyui-apiSep 11, 2026
CVE-2026-89099
30Monitor
Race Condition in MongoDB Server Document Value Layer Leads to Memory Corruption
HighCVSS 7.7No exploitEPSS 0%
- Race condition
mongodb · mongodbSep 11, 2026
CVE-2026-54072
37Monitor
Authorizer: Unvalidated redirect_uri in /authorize leaks OAuth2 tokens to attacker-controlled URL
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Open redirect
authorizerdev · authorizerSep 11, 2026
CVE-2026-62107
35Monitor
WordPress Masteriyo - LMS plugin <= 3.4.0 - PHP Object Injection vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
masteriyo · masteriyo - lmsSep 11, 2026
CVE-2026-89266
35Monitor
stb_vorbis through 1.22 heap buffer overflow via codebook multiplicands
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
nothings · stb_vorbisSep 11, 2026
CVE-2026-53952
39Monitor
GetSimple CMS & GetSimpleCMS-CE have an Unauthenticated Admin Account Creation via Setup Logic Flaw
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
getsimplecms-ce · getsimplecms-ceSep 11, 2026
CVE-2026-54135
30Monitor
AirSane has a Remote Denial of Service (OOM) via Unvalidated Content-Length in HTTP Server
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
simulpiscator · airsaneSep 11, 2026
CVE-2026-80926
39Monitor
ksmbd: fix use-after-free in oplock break notification
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80928
31Monitor
smack: fix cred UAF in smack_file_send_sigiotask()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80929
31Monitor
sysctl: move the "cad_pid" entry from pid_table[] to kern_reboot_table[]
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80931
31Monitor
w1: ds28e17: reject an oversize length on an I2C block read
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80932
33Monitor
vsock/virtio: flush works in dependency order
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80933
31Monitor
wifi: mt76: mt7996: validate default EEPROM firmware size
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80935
35Monitor
wifi: mt76: mt7996: bound the device EEPROM address before the EFUSE copy
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80936
31Monitor
wifi: mt76: mt7925: cancel mlo_pm_work on stop
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80937
35Monitor
wifi: mt76: mt7915: bound the device EEPROM address before the EFUSE copy
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80943
30Monitor
wifi: rtlwifi: rtl8192du: check QoS TID before indexing tids
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80944
31Monitor
wifi: mwifiex: Detach sync cmd buffer on interrupted wait
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80945
36Monitor
crypto: iaa - unmap dst before software fallback on decompress
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80947
31Monitor
wifi: rtl8xxxu: fix use-after-free from rx_urb_wq on stop
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80950
31Monitor
i3c: renesas: Check that the transfer is valid before accessing it
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80952
31Monitor
i3c: master: Fix info leak and UAF in device unregister path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80953
33Monitor
i3c: master: adi: initialize the lock before enabling interrupts
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80954
31Monitor
i3c: Fix unlocked dereference of dev->desc in i3c_device_get_supported_xfer_mode()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80955
31Monitor
dm-pcache: fix use-after-free and invalid seg operations in kset_replay()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80958
28Monitor
dm-pcache: clamp the tail kset read to the segment data region
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80959
31Monitor
dm-pcache: bound the persisted tail-position offset
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80961
31Monitor
dm-pcache: validate kset key_num and intra-segment bounds
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80962
31Monitor
dm-pcache: validate geometry fields from on-disk cache_info
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80967
33Monitor
ALSA: pcxhr: initialize mutexes before requesting threaded IRQ
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80971
31Monitor
ALSA: bcd2000: clear the URB pointers on disconnect
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80975
31Monitor
mfd: qnap-mcu: keep the reply buffer alive past a command timeout
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80976
39Monitor
seg6: reset IP6CB after IPv6 decapsulation
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80977
31Monitor
net: skbuff: don't touch shared zerocopy state in skb_tx_error()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80978
31Monitor
net: cap advertised IP tunnel headroom
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80979
31Monitor
net/smc: unregister the connection before draining the rx tasklet
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80980
39Monitor
net/smc: stop killed, freed and out_of_sync sharing a byte
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80981
39Monitor
net/smc: fix use-after-free of the LLC qentry in smc_llc_srv_add_link()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80982
31Monitor
net/smc: fix use-after-free in smc_rx_pipe_buf_release()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80985
32Monitor
net/smc: carry oversized SMC-Rv2 LLC messages in the queue entry
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80986
39Monitor
net/smc: bound the peer rkey counts in SMC-Rv2 LLC messages
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80987
30Monitor
NTB: ntb_transport: Reject oversized TX buffers
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-80989
35Monitor
net: thunderbolt: Mark the connection down when bringing it up fails
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-80991
31Monitor
net: ravb: serialize PTP clock teardown
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80992
31Monitor
net: ravb: avoid dereferencing an invalid PTP clock
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80994
31Monitor
net: openvswitch: fix flow mask use-after-free on flow deletion
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-80995
31Monitor
net: mctp: hold a reference to the route device in mctp_route_lookup()
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 11, 2026
CVE-2026-80997
30Monitor
net: ipa: fix stalled modem TX queue after runtime resume
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-80998
30Monitor
net: bnxt: ring the doorbell when SW USO exits early
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 11, 2026
CVE-2026-81000
31Monitor
net: tun: bound receive headroom
HighCVSS 7.8Proof of conceptEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81001
31Monitor
slip: fix use-after-free in sl_sync()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81002
39Monitor
xdp: fix zero-copy frame layout
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-81003
32Monitor
net/iucv: filter frames in afiucv_hs_rcv() by ingress device
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 11, 2026
CVE-2026-81004
33Monitor
ipmi:msghandler: Cancel work cleanly on an error
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81006
31Monitor
ipmi: Remove all sysfs files on registration failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81007
28Monitor
ipmi: ipmb: validate write message length
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81008
31Monitor
interconnect: Fix use after free in icc_get() and of_icc_get_by_index()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81011
28Monitor
platform/x86: hp-bioscfg: pass validated element count to package parsers
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81012
33Monitor
platform/x86: hp-bioscfg: fix off-by-one write in hp_get_string_from_buffer()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81015
31Monitor
platform/x86/amd/pmc: Fix LPS0 and debugfs leaks when STB init fails
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 11, 2026
CVE-2026-81016
30Monitor
platform/x86/amd/pmc: Propagate SMU errors and validate S2D address
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 11, 2026