By publication date

Exploited and new serious CVEs: September 2026

7,964 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 32 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-90783No exploit	MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparoundmoritz bunkus · mkvtoolnix · CWE-680	High8.5	—	0.2%	Sep 13, 2026
30Monitor	CVE-2026-29811No exploit	CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normalcyberpanel · cyberpanel · CWE-1025	High7.7	—	0.3%	Sep 13, 2026
29Monitor	CVE-2026-36453No exploit	Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1.rhymix · rhymix · CWE-425 Broken access control (IDOR)	High7.4	—	0.2%	Sep 13, 2026
32Monitor	CVE-2026-37008No exploit	CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVEcrewai · crewai · CWE-424	High8.1	—	0.1%	Sep 13, 2026
35Monitor	CVE-2026-74933No exploit	GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored XSS and Configuration Overwriteunknown · geniewords · CWE-862 Pre-auth Broken access control (IDOR) XSS	High8.8	—	0.5%	Sep 13, 2026
35Monitor	CVE-2026-85129No exploit	Hoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Importunknown · hoo companion · CWE-79 Pre-auth XSS	High8.8	—	0.4%	Sep 13, 2026
35Monitor	CVE-2026-88793No exploit	YouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram_serverunknown · youtube embed · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Sep 13, 2026
30Monitor	CVE-2026-88802No exploit	MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletionunknown · mdjm event management · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Sep 13, 2026
34Monitor	CVE-2026-90605No exploit	Totolink A3002MU boa formFilter buffer overflowtotolink · a3002mu · CWE-119 Memory safety	High8.6	—	0.8%	Sep 13, 2026
34Monitor	CVE-2026-90606No exploit	Totolink A3002MU boa formIpv6Setup buffer overflowtotolink · a3002mu · CWE-119 Memory safety	High8.6	—	0.8%	Sep 13, 2026
34Monitor	CVE-2026-90607No exploit	Totolink A3002MU boa formNewSchedule buffer overflowtotolink · a3002mu · CWE-119 Memory safety	High8.6	—	0.8%	Sep 13, 2026
34Monitor	CVE-2026-90608No exploit	Totolink A3002MU boa formPortFw buffer overflowtotolink · a3002mu · CWE-119 Memory safety	High8.6	—	0.8%	Sep 13, 2026
40Plan	CVE-2026-81648Proof of concept	CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Routerunknown · cryptopayment gateway · CWE-862 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.5%	Sep 13, 2026
28Monitor	CVE-2026-52296No exploit	FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.ffmpeg · ffmpeg · CWE-125 Memory safety	High7.1	—	0.1%	Sep 13, 2026
28Monitor	CVE-2026-52297No exploit	FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in libffmpeg · ffmpeg · CWE-125 Memory safety	High7.1	—	0.1%	Sep 13, 2026
31Monitor	CVE-2026-23789No exploit	An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400samsung · exynos 850 firmware · CWE-415 RCE Memory safety	High7.8	—	0.1%	Sep 13, 2026
30Monitor	CVE-2026-31278Proof of concept	An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers supremainc · biostar 2 · CWE-319 Weak crypto	High7.7	—	0.2%	Sep 13, 2026
30Monitor	CVE-2026-33963No exploit	An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680.samsung · exynos 1330 firmware · CWE-121 Memory safety	High7.5	—	0.1%	Sep 13, 2026
30Monitor	CVE-2026-15891No exploit	NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gatewayzephyrproject · zephyr · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Sep 13, 2026
37Monitor	CVE-2026-90680No exploit	D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflowd-link · dir-823g · CWE-119 Memory safety	Critical9.4	—	0.9%	Sep 14, 2026
30Monitor	CVE-2023-32803No exploit	The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root certamazon · ca-certificates · CWE-669 Pre-auth	High7.5	—	0.2%	Sep 14, 2026
35Monitor	CVE-2023-46273No exploit	Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_sextremenetworks · iq engine · CWE-121 Memory safety	High8.8	—	0.5%	Sep 14, 2026
35Monitor	CVE-2023-50461No exploit	An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3.typo3 · direct_mail · CWE-863 RCE Broken access control (IDOR)	High8.8	—	0.5%	Sep 14, 2026
33Monitor	CVE-2026-68955No exploit	The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries.rakuten kobo inc. · the installer for rakuten kobo desktop application (windows version) · CWE-427 RCE Local privilege escalation	High8.4	—	0.1%	Sep 14, 2026
28Monitor	CVE-2026-71198No exploit	In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image.openstack · glance · CWE-918 SSRF	High7.0	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-82762No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 sericontec co., ltd. · fxa5000 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
34Monitor	CVE-2026-82765No exploit	Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.contec co., ltd. · fxa5000 · CWE-23 Path traversal	High8.6	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-82766No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000.contec co., ltd. · sga1000 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
34Monitor	CVE-2026-82768No exploit	Path traversal vulnerability exists in SGA1000.contec co., ltd. · sga1000 · CWE-23 Path traversal	High8.6	—	0.4%	Sep 14, 2026
34Monitor	CVE-2026-82770No exploit	Buffer overflow vulnerability exists in Contec RP-WAH-SR Series.contec co., ltd. · rp-wah-sr1 · CWE-120 Memory safety	High8.7	—	0.6%	Sep 14, 2026
34Monitor	CVE-2026-82772No exploit	Buffer overflow vulnerability exists in Contec EC1000 series.contec co., ltd. · ece1000 · CWE-120 Memory safety	High8.7	—	0.6%	Sep 14, 2026
35Monitor	CVE-2026-82774No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and contec co., ltd. · m2m gateway integrated type cps-mg341* · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
35Monitor	CVE-2026-82777No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series.contec co., ltd. · integrated type cps-pc341[][]-*-9201 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
35Monitor	CVE-2026-82779No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series.contec co., ltd · cps-tm341g5mb-adsc1-931 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
34Monitor	CVE-2026-82780No exploit	Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series.contec co., ltd · cps-tm341g5mb-adsc1-931 · CWE-434 File upload	High8.7	—	0.6%	Sep 14, 2026
32Monitor	CVE-2026-82786No exploit	Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-.contec co., ltd. · remote i/o coupler unit (server type) cpsn-mcb271- · CWE-522 Pre-auth Info leak	High8.2	—	0.3%	Sep 14, 2026
34Monitor	CVE-2026-82787No exploit	Missing authentication for critical function vulnerability exists in CPSL-08P1EN.contec co., ltd. · cpsl-08p1en · CWE-306 Auth bypass	High8.7	—	0.6%	Sep 14, 2026
34Monitor	CVE-2026-82789No exploit	An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS).contec · conprosys hmi system(chs) · CWE-95 RCE	High8.7	—	0.5%	Sep 14, 2026
35Monitor	CVE-2026-82791No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wircontec co., ltd. · can-2-wf · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
34Monitor	CVE-2026-82793No exploit	Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.contec co., ltd. · can-2-wf · CWE-434 RCE File upload	High8.6	—	0.6%	Sep 14, 2026
35Monitor	CVE-2026-82794No exploit	SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings.contec co., ltd. · sv-cpt-mc310 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 14, 2026
30Monitor	CVE-2026-85189No exploit	Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0regularlabs.com · modals (free, pro) extension for joomla · CWE-79 XSS	High7.5	—	0.4%	Sep 14, 2026
30Monitor	CVE-2026-85190No exploit	Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5regularlabs.com · quick index (free, pro) extension for joomla · CWE-79 XSS	High7.5	—	0.4%	Sep 14, 2026
30Monitor	CVE-2026-85191No exploit	Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0regularlabs.com · tabs & accordions (free, pro) extension for joomla · CWE-79 XSS	High7.5	—	0.4%	Sep 14, 2026
37Monitor	CVE-2026-85192No exploit	Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0regularlabs.com · conditional content pro extension for joomla · CWE-94 RCE	Critical9.4	—	0.6%	Sep 14, 2026
30Monitor	CVE-2026-85195No exploit	Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0regularlabs.com · articles anywhere (free, pro) extension for joomla · CWE-79 XSS	High7.5	—	0.4%	Sep 14, 2026
30Monitor	CVE-2026-88852No exploit	Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.regularlabs.com · snippets (free) extension for joomla · CWE-79 XSS	High7.5	—	0.4%	Sep 14, 2026
30Monitor	CVE-2026-88853No exploit	Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0regularlabs.com · modals (pro) extension for joomla · CWE-79 XSS	High7.5	—	0.4%	Sep 14, 2026
28Monitor	CVE-2026-90688No exploit	Tenda W20E HTTP formIPMacBindAdd stack-based overflowtenda · w20e · CWE-119 Memory safety	High7.1	—	0.7%	Sep 14, 2026
34Monitor	CVE-2026-90689No exploit	Tenda W20E formDelWebAuthWhiteUser stack-based overflowtenda · w20e · CWE-119 Memory safety	High8.7	—	0.8%	Sep 14, 2026
37Monitor	CVE-2026-90692No exploit	D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflowd-link · dir-878 · CWE-119 Memory safety	Critical9.4	—	0.9%	Sep 14, 2026
34Monitor	CVE-2026-12518No exploit	Local privilege escalation in the Logi Options+ updater service on Windowslogitech · logi options+ · CWE-269 RCE Local privilege escalation	High8.5	—	0.1%	Sep 14, 2026
37Monitor	CVE-2026-90693No exploit	D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflowd-link · dir-878 · CWE-119 Memory safety	Critical9.4	—	0.9%	Sep 14, 2026
28Monitor	CVE-2023-28148No exploit	A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.paessler · prtg network monitor · CWE-79 Pre-auth XSS	High7.2	—	0.2%	Sep 14, 2026
35Monitor	CVE-2026-90699No exploit	D-Link DWR-M920 formPinManageSetup sub_41E60C os command injectiond-link · dwr-m920 · CWE-77 RCE Command injection	High8.6	—	3.2%	Sep 14, 2026
34Monitor	CVE-2023-45858No exploit	A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.paessler · prtg network monitor · CWE-23 Pre-auth Path traversal	High8.6	—	0.8%	Sep 14, 2026
35Monitor	CVE-2026-72524No exploit	Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tablesapache software foundation · apache doris · CWE-863 Broken access control (IDOR)	High8.8	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-90702No exploit	D-Link DWR-M921 formDiskFormat system os command injectiond-link · dwr-m921 · CWE-77 RCE Command injection	High8.5	—	3.6%	Sep 14, 2026
35Monitor	CVE-2026-90703No exploit	D-Link DWR-M921 formDiskCreateShare system os command injectiond-link · dwr-m921 · CWE-77 RCE Command injection	High8.5	—	3.6%	Sep 14, 2026
31Monitor	CVE-2026-90894No exploit	Parallels Desktop local privilege escalation via appliance extract argument injectionparallels · parallels desktop for mac · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	0.1%	Sep 14, 2026
33Monitor	CVE-2026-90895No exploit	MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injectionmisp · misp · CWE-150	High8.4	—	0.1%	Sep 14, 2026
34Monitor	CVE-2026-20773No exploit	Improper Authorization in PingFederate Administrative Expression Evaluation Endpointping identity · pingfederate · CWE-863 Broken access control (IDOR)	High8.5	—	0.3%	Sep 14, 2026
34Monitor	CVE-2026-78375No exploit	Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0joomshaper.com · sp page builder (free and pro) extension for joomla · CWE-89 SQL injection	High8.6	—	0.3%	Sep 14, 2026
28Monitor	CVE-2026-81564No exploit	Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0joomshaper.com · sp page builder (free and pro) extension for joomla · CWE-22 Path traversal	High7.0	—	0.4%	Sep 14, 2026
39Monitor	CVE-2026-82232No exploit	Apache Syncope: SQL injection via sort parameter in Task searchapache software foundation · apache syncope · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Sep 14, 2026
39Monitor	CVE-2026-86460No exploit	Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistenceapache software foundation · apache syncope · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.5%	Sep 14, 2026
30Monitor	CVE-2026-87779No exploit	Apache Syncope: AES Secret Key disclosure via log outputapache software foundation · apache syncope · CWE-532 Pre-auth Info leak	High7.5	—	0.4%	Sep 14, 2026
36Monitor	CVE-2026-87785No exploit	Apache Syncope: JWT subject spoofingapache software foundation · apache syncope · CWE-290 Pre-auth Auth bypass	Critical9.1	—	0.5%	Sep 14, 2026
36Monitor	CVE-2026-87802No exploit	Apache Syncope: SRA OAuth2 JWT signature verification bypassapache software foundation · apache syncope · CWE-347 Pre-auth Weak crypto	Critical9.1	—	0.2%	Sep 14, 2026
34Monitor	CVE-2026-89180No exploit	Thinking Software Technology｜EFence - SQL Injectionthinking software technology · efence · CWE-89 Pre-auth SQL injection	High8.7	—	0.5%	Sep 14, 2026
40Plan	CVE-2026-90898Proof of concept	Bifrost unauthenticated remote code execution via MCP stdio client registrationmaximhq · bifrost · CWE-284 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	2.3%	Sep 14, 2026
38Monitor	CVE-2026-21391No exploit	Improper Claim Validation in PingAM OIDC Providerping identity · pingam · CWE-290 Pre-auth Auth bypass	Critical9.5	—	0.5%	Sep 14, 2026
37Monitor	CVE-2026-90919No exploit	LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserializationmodeltc · lightllm · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	1.0%	Sep 14, 2026
36Monitor	CVE-2026-12258No exploit	Inadequate access control in the Hiperdino REST APIhiperdino · rest api · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.2	—	0.6%	Sep 14, 2026
30Monitor	CVE-2026-73178No exploit	Apache Syncope: JWT Access Token takeoverapache software foundation · apache syncope · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Sep 14, 2026
39Monitor	CVE-2026-73470No exploit	Apache Syncope: Delegating users can grant unowned Rolesapache software foundation · apache syncope · CWE-269 Pre-auth	Critical9.8	—	0.5%	Sep 14, 2026
39Monitor	CVE-2026-73579No exploit	Apache Syncope: Non-recursive Any search could skip Realms restrictionsapache software foundation · apache syncope · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Sep 14, 2026
39Monitor	CVE-2026-73668No exploit	Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration valuesapache software foundation · apache syncope · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Sep 14, 2026
39Monitor	CVE-2026-75030No exploit	Apache Syncope: Incomplete authorization checks for Group members deprovisioningapache software foundation · apache syncope · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Sep 14, 2026
39Monitor	CVE-2026-77051No exploit	Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events searchapache software foundation · apache syncope · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.6%	Sep 14, 2026
39Monitor	CVE-2026-77181No exploit	Apache Syncope: ClientApp update entitlement not effectiveapache software foundation · apache syncope · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Sep 14, 2026
36Monitor	CVE-2026-78299No exploit	In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract feclipse foundation · eclipse embedded cdt (c/c++ development tools) · CWE-22 Pre-auth Path traversal	Critical9.1	—	0.5%	Sep 14, 2026
39Monitor	CVE-2026-78330No exploit	Apache Syncope: Privilege escalation for admin user via JWT authenticationapache software foundation · apache syncope · CWE-266 Pre-auth	Critical9.8	—	0.6%	Sep 14, 2026
30Monitor	CVE-2026-78336No exploit	Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated userapache software foundation · apache syncope · CWE-201 Pre-auth	High7.5	—	0.4%	Sep 14, 2026
28Monitor	CVE-2026-90927No exploit	filebrowser through 2.63.23 Denial of Service via unbounded WebSocket messagefilebrowser · filebrowser · CWE-400 Denial of service	High7.1	—	0.4%	Sep 14, 2026
28Monitor	CVE-2026-90928No exploit	File Browser through 2.63.23 Memory Exhaustion via subtitle endpointfilebrowser · filebrowser · CWE-400 Denial of service	High7.1	—	0.4%	Sep 14, 2026
28Monitor	CVE-2026-90929No exploit	File Browser 2.5.0 Directory Deletion via Upload Failure Cleanupfilebrowser · filebrowser · CWE-863 Broken access control (IDOR)	High7.2	—	0.4%	Sep 14, 2026
30Monitor	CVE-2026-90930No exploit	File Browser through 2.63.23 Path Traversal via Symlink Aliasfilebrowser · filebrowser · CWE-59 Path traversal	High7.6	—	0.5%	Sep 14, 2026
28Monitor	CVE-2026-90933No exploit	laradashboard through 1.2.2 Missing Authorization via License APIlaradashboard · laradashboard · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 14, 2026
34Monitor	CVE-2026-90934No exploit	EspoCRM before 10.0.4 Field-level Security Bypass via Attendeesespocrm · espocrm · CWE-863 Broken access control (IDOR)	High8.7	—	0.3%	Sep 14, 2026
37Monitor	CVE-2026-90937No exploit	froxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URLfroxlor · froxlor · CWE-93	Critical9.4	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-90938No exploit	LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocketlangbot-app · langbot · CWE-306 Pre-auth Auth bypass	High8.8	—	0.5%	Sep 14, 2026
20Monitor	CVE-2026-90957No exploit	MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Picturesmisp · misp · CWE-79 XSS	Medium5.1	—	0.3%	Sep 14, 2026
29Monitor	CVE-2026-73195No exploit	Apache Syncope: CSV export spreadsheet formula injectionapache software foundation · apache syncope · CWE-116	High7.3	—	0.3%	Sep 14, 2026
30Monitor	CVE-2026-73236No exploit	Apache Syncope: Cross-Realm authorization bypass in delegated administrationapache software foundation · apache syncope · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.3%	Sep 14, 2026
39Monitor	CVE-2026-73370No exploit	Apache Syncope: Cross-Realm boundaries reconciliation bypassapache software foundation · apache syncope · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.5%	Sep 14, 2026
39Monitor	CVE-2026-82439No exploit	Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPCapache software foundation · apache storm drpc · CWE-770 Pre-auth Denial of service	Critical9.8	—	0.3%	Sep 14, 2026
36Monitor	CVE-2026-82441No exploit	Apache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency Keysapache software foundation · apache storm nimbus · CWE-20 Pre-auth	Critical9.1	—	0.2%	Sep 14, 2026
28Monitor	CVE-2026-90939No exploit	novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint201206030 · novel-plus · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 14, 2026
37Monitor	CVE-2026-90961No exploit	MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentialsmisp · misp · CWE-20 Pre-auth Auth bypass	Critical9.3	—	0.6%	Sep 14, 2026

CVE-2026-90783
34Monitor
MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound
HighCVSS 8.5No exploitEPSS 0%
moritz bunkus · mkvtoolnixSep 13, 2026
CVE-2026-29811
30Monitor
CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normal
HighCVSS 7.7No exploitEPSS 0%
cyberpanel · cyberpanelSep 13, 2026
CVE-2026-36453
29Monitor
Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1.
HighCVSS 7.4No exploitEPSS 0%
- Broken access control (IDOR)
rhymix · rhymixSep 13, 2026
CVE-2026-37008
32Monitor
CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE
HighCVSS 8.1No exploitEPSS 0%
crewai · crewaiSep 13, 2026
CVE-2026-74933
35Monitor
GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored XSS and Configuration Overwrite
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- XSS
unknown · geniewordsSep 13, 2026
CVE-2026-85129
35Monitor
Hoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Import
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · hoo companionSep 13, 2026
CVE-2026-88793
35Monitor
YouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram_server
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · youtube embedSep 13, 2026
CVE-2026-88802
30Monitor
MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · mdjm event managementSep 13, 2026
CVE-2026-90605
34Monitor
Totolink A3002MU boa formFilter buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
totolink · a3002muSep 13, 2026
CVE-2026-90606
34Monitor
Totolink A3002MU boa formIpv6Setup buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
totolink · a3002muSep 13, 2026
CVE-2026-90607
34Monitor
Totolink A3002MU boa formNewSchedule buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
totolink · a3002muSep 13, 2026
CVE-2026-90608
34Monitor
Totolink A3002MU boa formPortFw buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
totolink · a3002muSep 13, 2026
CVE-2026-81648
40Plan
CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router
CriticalCVSS 10.0Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · cryptopayment gatewaySep 13, 2026
CVE-2026-52296
28Monitor
FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c.
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
ffmpeg · ffmpegSep 13, 2026
CVE-2026-52297
28Monitor
FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov_read_iacb in lib
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
ffmpeg · ffmpegSep 13, 2026
CVE-2026-23789
31Monitor
An issue was discovered in MFC in Samsung Mobile Processor and Wearable Processor Exynos 850, 1080, 2100, 1280, 2200, 1330, 1380, 1480, 2400
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
samsung · exynos 850 firmwareSep 13, 2026
CVE-2026-31278
30Monitor
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.0.2 allows attackers
HighCVSS 7.7Proof of conceptEPSS 0%
- Weak crypto
supremainc · biostar 2Sep 13, 2026
CVE-2026-33963
30Monitor
An issue was discovered in camera in Samsung Mobile Processor Exynos 1330, 1380, 1480, 2400, 1580, 2500, 2600, and 1680.
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
samsung · exynos 1330 firmwareSep 13, 2026
CVE-2026-15891
30Monitor
NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
zephyrproject · zephyrSep 13, 2026
CVE-2026-90680
37Monitor
D-Link DIR-823G HNAP1 SetStaticRouteSettings strcpy stack-based overflow
CriticalCVSS 9.4No exploitEPSS 0%
- Memory safety
d-link · dir-823gSep 14, 2026
CVE-2023-32803
30Monitor
The ca-certificates package before ca-certificates-2021.2.50-72 for Amazon Linux 2 (AL2) does not properly remove certain TrustCor root cert
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
amazon · ca-certificatesSep 14, 2026
CVE-2023-46273
35Monitor
Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4 before 10.6r5, has an ah_bgd buffer overflow via ah_event_s
HighCVSS 8.8No exploitEPSS 0%
- Memory safety
extremenetworks · iq engineSep 14, 2026
CVE-2023-50461
35Monitor
An issue was discovered in the direct_mail (aka Direct Mail) extension through 9.5.1 for TYPO3.
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
typo3 · direct_mailSep 14, 2026
CVE-2026-68955
33Monitor
The installer for Rakuten Kobo Desktop Application (Windows version) insecurely loads Dynamic Link Libraries.
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
rakuten kobo inc. · the installer for rakuten kobo desktop application (windows version)Sep 14, 2026
CVE-2026-71198
28Monitor
In OpenStack Glance before 32.0.1, the location API does not validate destination hosts when adding an HTTP location to an image.
HighCVSS 7.0No exploitEPSS 0%
- SSRF
openstack · glanceSep 14, 2026
CVE-2026-82762
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec FX5000 series, FX4000 seri
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd. · fxa5000Sep 14, 2026
CVE-2026-82765
34Monitor
Path traversal vulnerability exists in Contec FX5000 series, FX4000 series, and FX3000 series.
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
contec co., ltd. · fxa5000Sep 14, 2026
CVE-2026-82766
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SGA1000.
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd. · sga1000Sep 14, 2026
CVE-2026-82768
34Monitor
Path traversal vulnerability exists in SGA1000.
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
contec co., ltd. · sga1000Sep 14, 2026
CVE-2026-82770
34Monitor
Buffer overflow vulnerability exists in Contec RP-WAH-SR Series.
HighCVSS 8.7No exploitEPSS 0%
- Memory safety
contec co., ltd. · rp-wah-sr1Sep 14, 2026
CVE-2026-82772
34Monitor
Buffer overflow vulnerability exists in Contec EC1000 series.
HighCVSS 8.7No exploitEPSS 0%
- Memory safety
contec co., ltd. · ece1000Sep 14, 2026
CVE-2026-82774
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS M2M Gateway Series and
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd. · m2m gateway integrated type cps-mg341*Sep 14, 2026
CVE-2026-82777
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS PAC Series.
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd. · integrated type cps-pc341[][]-*-9201Sep 14, 2026
CVE-2026-82779
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in CONPROSYS TM Series.
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd · cps-tm341g5mb-adsc1-931Sep 14, 2026
CVE-2026-82780
34Monitor
Unrestricted upload of file with dangerous type issue exists in CONPROSYS TM Series.
HighCVSS 8.7No exploitEPSS 0%
- File upload
contec co., ltd · cps-tm341g5mb-adsc1-931Sep 14, 2026
CVE-2026-82786
32Monitor
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit (Server Type) CPSN-MCB271-*.
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Info leak
contec co., ltd. · remote i/o coupler unit (server type) cpsn-mcb271-*Sep 14, 2026
CVE-2026-82787
34Monitor
Missing authentication for critical function vulnerability exists in CPSL-08P1EN.
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
contec co., ltd. · cpsl-08p1enSep 14, 2026
CVE-2026-82789
34Monitor
An improper neutralization of directives in dynamically evaluated code ('Eval Injection') issue exists in CONPROSYS HMI System(CHS).
HighCVSS 8.7No exploitEPSS 0%
- RCE
contec · conprosys hmi system(chs)Sep 14, 2026
CVE-2026-82791
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in Contec CAN 2.0B Communication Wir
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd. · can-2-wfSep 14, 2026
CVE-2026-82793
34Monitor
Unrestricted upload of file with dangerous type issue exists in Contec CAN 2.0B Communication Wireless LAN / USB Converter Unit.
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
contec co., ltd. · can-2-wfSep 14, 2026
CVE-2026-82794
35Monitor
SolarView Compact contains an OS command Injection vulnerability in in Schedule Settings.
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
contec co., ltd. · sv-cpt-mc310Sep 14, 2026
CVE-2026-85189
30Monitor
Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL schemes in Modals extension for Joomla < 17.0.0
HighCVSS 7.5No exploitEPSS 0%
- XSS
regularlabs.com · modals (free, pro) extension for joomlaSep 14, 2026
CVE-2026-85190
30Monitor
Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Quick Index extension for Joomla < 5.0.5
HighCVSS 7.5No exploitEPSS 0%
- XSS
regularlabs.com · quick index (free, pro) extension for joomlaSep 14, 2026
CVE-2026-85191
30Monitor
Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option in Tabs & Accordions extension for Joomla < 3.1.0
HighCVSS 7.5No exploitEPSS 0%
- XSS
regularlabs.com · tabs & accordions (free, pro) extension for joomlaSep 14, 2026
CVE-2026-85192
37Monitor
Joomla Extension - regularlabs.com - Authenticated, privileged remote code execution in Conditional Content extension for Joomla < 8.0.0
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
regularlabs.com · conditional content pro extension for joomlaSep 14, 2026
CVE-2026-85195
30Monitor
Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Articles Anywhere extension for Joomla < 20.0.0
HighCVSS 7.5No exploitEPSS 0%
- XSS
regularlabs.com · articles anywhere (free, pro) extension for joomlaSep 14, 2026
CVE-2026-88852
30Monitor
Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Snippets Free extension for Joomla < 7.0.0, Snippets Pro extension for Joomla < 11.
HighCVSS 7.5No exploitEPSS 0%
- XSS
regularlabs.com · snippets (free) extension for joomlaSep 14, 2026
CVE-2026-88853
30Monitor
Joomla Extension - regularlabs.com - Privileged stored XSS via event handler option in Modals Pro extension for Joomla < 17.0.0
HighCVSS 7.5No exploitEPSS 0%
- XSS
regularlabs.com · modals (pro) extension for joomlaSep 14, 2026
CVE-2026-90688
28Monitor
Tenda W20E HTTP formIPMacBindAdd stack-based overflow
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
tenda · w20eSep 14, 2026
CVE-2026-90689
34Monitor
Tenda W20E formDelWebAuthWhiteUser stack-based overflow
HighCVSS 8.7No exploitEPSS 0%
- Memory safety
tenda · w20eSep 14, 2026
CVE-2026-90692
37Monitor
D-Link DIR-878 Dynamic DNS IPv6 Settings SetDynamicDNSIPv6Settings stack-based overflow
CriticalCVSS 9.4No exploitEPSS 0%
- Memory safety
d-link · dir-878Sep 14, 2026
CVE-2026-12518
34Monitor
Local privilege escalation in the Logi Options+ updater service on Windows
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
logitech · logi options+Sep 14, 2026
CVE-2026-90693
37Monitor
D-Link DIR-878 WAN Settings SetWan3Settings stack-based overflow
CriticalCVSS 9.4No exploitEPSS 0%
- Memory safety
d-link · dir-878Sep 14, 2026
CVE-2023-28148
28Monitor
A bodyclass XSS issue was discovered in Paessler PRTG before 23.3.86.1520.
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
paessler · prtg network monitorSep 14, 2026
CVE-2026-90699
35Monitor
D-Link DWR-M920 formPinManageSetup sub_41E60C os command injection
HighCVSS 8.6No exploitEPSS 3%
- RCE
- Command injection
d-link · dwr-m920Sep 14, 2026
CVE-2023-45858
34Monitor
A directory traversal was identified in Paessler PRTG before 23.4.88.1429 that made it possible to read local files.
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Path traversal
paessler · prtg network monitorSep 14, 2026
CVE-2026-72524
35Monitor
Apache Doris: Authorization bypass allowing a low-privilege user to read/write/drop arbitrary tables
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
apache software foundation · apache dorisSep 14, 2026
CVE-2026-90702
35Monitor
D-Link DWR-M921 formDiskFormat system os command injection
HighCVSS 8.5No exploitEPSS 3%
- RCE
- Command injection
d-link · dwr-m921Sep 14, 2026
CVE-2026-90703
35Monitor
D-Link DWR-M921 formDiskCreateShare system os command injection
HighCVSS 8.5No exploitEPSS 3%
- RCE
- Command injection
d-link · dwr-m921Sep 14, 2026
CVE-2026-90894
31Monitor
Parallels Desktop local privilege escalation via appliance extract argument injection
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
parallels · parallels desktop for macSep 14, 2026
CVE-2026-90895
33Monitor
MISP Interactive CLI Shell: Authorization Bypass, Credential Exposure, and Terminal Injection
HighCVSS 8.4No exploitEPSS 0%
misp · mispSep 14, 2026
CVE-2026-20773
34Monitor
Improper Authorization in PingFederate Administrative Expression Evaluation Endpoint
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
ping identity · pingfederateSep 14, 2026
CVE-2026-78375
34Monitor
Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in the Content Plugin of SP Page Builder (Free and Pro) 5.2.1 - 6.9.0
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
joomshaper.com · sp page builder (free and pro) extension for joomlaSep 14, 2026
CVE-2026-81564
28Monitor
Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Rename Allowing Arbitrary File Rename in SP Page Builder (Free and Pro) 4.0.0 - 6.9.0
HighCVSS 7.0No exploitEPSS 0%
- Path traversal
joomshaper.com · sp page builder (free and pro) extension for joomlaSep 14, 2026
CVE-2026-82232
39Monitor
Apache Syncope: SQL injection via sort parameter in Task search
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-86460
39Monitor
Apache Syncope: Cypher Injection via FIQL Search on Neo4j Persistence
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-87779
30Monitor
Apache Syncope: AES Secret Key disclosure via log output
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-87785
36Monitor
Apache Syncope: JWT subject spoofing
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-87802
36Monitor
Apache Syncope: SRA OAuth2 JWT signature verification bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-89180
34Monitor
Thinking Software Technology｜EFence - SQL Injection
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SQL injection
thinking software technology · efenceSep 14, 2026
CVE-2026-90898
40Plan
Bifrost unauthenticated remote code execution via MCP stdio client registration
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
- Broken access control (IDOR)
maximhq · bifrostSep 14, 2026
CVE-2026-21391
38Monitor
Improper Claim Validation in PingAM OIDC Provider
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
ping identity · pingamSep 14, 2026
CVE-2026-90919
37Monitor
LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Config Server Pickle Deserialization
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Deserialization
modeltc · lightllmSep 14, 2026
CVE-2026-12258
36Monitor
Inadequate access control in the Hiperdino REST API
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
hiperdino · rest apiSep 14, 2026
CVE-2026-73178
30Monitor
Apache Syncope: JWT Access Token takeover
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-73470
39Monitor
Apache Syncope: Delegating users can grant unowned Roles
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-73579
39Monitor
Apache Syncope: Non-recursive Any search could skip Realms restrictions
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-73668
39Monitor
Apache Syncope: Cross-realm disclosure of confidential ConnId bundles configuration values
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-75030
39Monitor
Apache Syncope: Incomplete authorization checks for Group members deprovisioning
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-77051
39Monitor
Apache Syncope: SQL injection via unsanitized entityKey and opEvent in Audit Events search
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-77181
39Monitor
Apache Syncope: ClientApp update entitlement not effective
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-78299
36Monitor
In Eclipse Embedded CDT versions 6.0 to 6.7 if the CMSIS-Pack archive extracts a compromised CMSIS pack the archive extraction can extract f
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
eclipse foundation · eclipse embedded cdt (c/c++ development tools)Sep 14, 2026
CVE-2026-78330
39Monitor
Apache Syncope: Privilege escalation for admin user via JWT authentication
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-78336
30Monitor
Apache Syncope: OIDCC4UI provider list discloses client secrets to any authenticated user
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-90927
28Monitor
filebrowser through 2.63.23 Denial of Service via unbounded WebSocket message
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
filebrowser · filebrowserSep 14, 2026
CVE-2026-90928
28Monitor
File Browser through 2.63.23 Memory Exhaustion via subtitle endpoint
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
filebrowser · filebrowserSep 14, 2026
CVE-2026-90929
28Monitor
File Browser 2.5.0 Directory Deletion via Upload Failure Cleanup
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
filebrowser · filebrowserSep 14, 2026
CVE-2026-90930
30Monitor
File Browser through 2.63.23 Path Traversal via Symlink Alias
HighCVSS 7.6No exploitEPSS 0%
- Path traversal
filebrowser · filebrowserSep 14, 2026
CVE-2026-90933
28Monitor
laradashboard through 1.2.2 Missing Authorization via License API
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
laradashboard · laradashboardSep 14, 2026
CVE-2026-90934
34Monitor
EspoCRM before 10.0.4 Field-level Security Bypass via Attendees
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
espocrm · espocrmSep 14, 2026
CVE-2026-90937
37Monitor
froxlor before 2.2.5 nginx/Apache Configuration Injection via subdomain redirect URL
CriticalCVSS 9.4No exploitEPSS 0%
froxlor · froxlorSep 14, 2026
CVE-2026-90938
35Monitor
LangBot through 0.4.17 Unauthenticated Plugin Registration via WebSocket
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
langbot-app · langbotSep 14, 2026
CVE-2026-90957
20Monitor
MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures
MediumCVSS 5.1No exploitEPSS 0%
- XSS
misp · mispSep 14, 2026
CVE-2026-73195
29Monitor
Apache Syncope: CSV export spreadsheet formula injection
HighCVSS 7.3No exploitEPSS 0%
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-73236
30Monitor
Apache Syncope: Cross-Realm authorization bypass in delegated administration
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-73370
39Monitor
Apache Syncope: Cross-Realm boundaries reconciliation bypass
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache syncopeSep 14, 2026
CVE-2026-82439
39Monitor
Apache Storm DRPC: Unauthenticated Unbounded Memory Growth in DRPC
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache storm drpcSep 14, 2026
CVE-2026-82441
36Monitor
Apache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency Keys
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
apache software foundation · apache storm nimbusSep 14, 2026
CVE-2026-90939
28Monitor
novel-plus through 5.3.3 Missing Authorization on the Admin /sys/user/list Endpoint
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
201206030 · novel-plusSep 14, 2026
CVE-2026-90961
37Monitor
MISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
misp · mispSep 14, 2026