By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 35 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2026-70658No exploit	pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifierpay-rails · pay · CWE-208 Pre-auth	High7.4	—	0.5%	Sep 14, 2026
29Monitor	CVE-2026-73494No exploit	blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parserhttp4s · blaze · CWE-444 Pre-auth	High7.4	—	0.6%	Sep 14, 2026
32Monitor	CVE-2026-85921No exploit	Windows Secure Kernel Mode Elevation of Privilege Vulnerabilitymicrosoft · windows 11 26h1 · CWE-415 Local privilege escalation Memory safety	High8.2	—	0.3%	Sep 14, 2026
29Monitor	CVE-2026-18116Proof of concept	Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notificationsconcretecms · concrete cms · CWE-79 XSS	High7.3	—	0.2%	Sep 14, 2026
39Monitor	CVE-2026-59178No exploit	ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgradeesphome · device-builder · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.7%	Sep 14, 2026
28Monitor	CVE-2026-77884No exploit	Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposurebrain trust · gallery - private photo vault · CWE-552 Pre-auth	High7.1	—	0.2%	Sep 14, 2026
33Monitor	CVE-2026-82049No exploit	tarfile extraction filters allow file modification and content disclosure via hard link to symlinkpython software foundation · cpython · CWE-59	High8.4	—	0.1%	Sep 14, 2026
34Monitor	CVE-2026-86830No exploit	Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Centeraws · iam-identity-center-team · CWE-266	High8.6	—	0.6%	Sep 14, 2026
34Monitor	CVE-2026-89020Proof of concept	MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalationmikrotik · routeros · CWE-121 Memory safety	High8.7	—	0.5%	Sep 14, 2026
29Monitor	CVE-2026-81900No exploit	Concrete CMS before 9.5.3 is vulnerable to Stored XSS in the YouTube block (vWidth/vHeight)concretecms · concrete cms · CWE-79 XSS	High7.3	—	0.2%	Sep 14, 2026
28Monitor	CVE-2026-91197No exploit	Flowable flowable-engine through 8.0.0 XXE via ProcessDiagramLayoutFactoryflowable · flowable-engine · CWE-611 XXE	High7.1	—	0.4%	Sep 14, 2026
34Monitor	CVE-2026-91200No exploit	DevSpace through 6.3.21 Path Traversal via tar extractiondevspace · devspace · CWE-22 Pre-auth Path traversal	High8.7	—	0.6%	Sep 14, 2026
35Monitor	CVE-2026-16335No exploit	DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-22 Path traversal	High8.8	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-16338No exploit	DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-73 Path traversal	High8.8	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-16428No exploit	DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-94 RCE	High8.8	—	0.8%	Sep 14, 2026
35Monitor	CVE-2026-16466No exploit	DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-78 RCE Command injection	High8.8	—	1.5%	Sep 14, 2026
35Monitor	CVE-2026-16673No exploit	DataStage on Cloud Pak for Data has several vulnerabilities due to open source softwareibm · datastage on cloud pak for data · CWE-78 RCE Command injection	High8.8	—	0.6%	Sep 14, 2026
29Monitor	CVE-2026-47253No exploit	Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletionjulien040 · anyquery · CWE-22 Path traversal	High7.3	—	0.4%	Sep 14, 2026
36Monitor	CVE-2026-50006No exploit	Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Modejulien040 · anyquery · CWE-22 pre-auth RCE Path traversal	Critical9.1	—	0.9%	Sep 14, 2026
39Monitor	CVE-2026-54333No exploit	UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTabletheopolis · uefi-firmware-parser · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.8%	Sep 14, 2026
39Monitor	CVE-2026-54334No exploit	UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`theopolis · uefi-firmware-parser · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.8%	Sep 14, 2026
33Monitor	CVE-2026-54447No exploit	garminconnect: Insecure Permission Assignment for Garmin OAuth Token Storecyberjunky · python-garminconnect · CWE-732 Local privilege escalation	High8.4	—	0.1%	Sep 14, 2026
34Monitor	CVE-2026-54628No exploit	Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Modejulien040 · anyquery · CWE-284 Pre-auth SSRF Broken access control (IDOR)	High8.6	—	0.5%	Sep 14, 2026
30Monitor	CVE-2026-54629No exploit	Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Modejulien040 · anyquery · CWE-22 Pre-auth Auth bypass Path traversal	High7.5	—	0.9%	Sep 14, 2026
30Monitor	CVE-2026-54632No exploit	SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)sipsorcery-org · sipsorcery · CWE-20 Pre-auth Denial of service	High7.5	—	0.7%	Sep 14, 2026
39Monitor	CVE-2026-55209No exploit	resdata insufficiently validates untrusted GRDECL filesequinor · resdata · CWE-120 Pre-auth Memory safety	Critical9.8	—	0.7%	Sep 14, 2026
30Monitor	CVE-2026-73496No exploit	MCP Atlassian: Arbitrary server-side file read via attachment uploadsooperset · mcp-atlassian · CWE-22 Path traversal	High7.7	—	0.4%	Sep 14, 2026
35Monitor	CVE-2026-90847Proof of concept	EFM ipTIME C200E System Setup iux_set.cgi os command injectionefm · iptime c200e · CWE-77 RCE Command injection	High8.5	—	3.3%	Sep 14, 2026
28Monitor	CVE-2026-91750No exploit	WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirectstencent · weknora · CWE-918 SSRF	High7.1	—	0.4%	Sep 14, 2026
28Monitor	CVE-2026-91751No exploit	Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST APIflextype · flextype · CWE-22 Path traversal	High7.2	—	0.5%	Sep 14, 2026
34Monitor	CVE-2026-91752No exploit	GNU libextractor before 1.15 Stack Overflow via OLE2gnu · libextractor · CWE-789 Pre-auth	High8.7	—	0.7%	Sep 14, 2026
36Monitor	CVE-2026-53713No exploit	Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosureenvoyproxy · gateway · CWE-20 Auth bypass	Critical9.1	—	0.4%	Sep 14, 2026
29Monitor	CVE-2026-53714No exploit	Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceModeenvoyproxy · gateway · CWE-306 Pre-auth Auth bypass	High7.4	—	0.3%	Sep 14, 2026
31Monitor	CVE-2026-84506No exploit	A use after free issue was addressed with improved memory management.apple · macos · CWE-416 Memory safety	High7.8	—	0.1%	Sep 14, 2026
28Monitor	CVE-2026-91770No exploit	IceHRM before 36.0.0 Broken Access Control via Employee IDgamonoid · icehrm · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 14, 2026
34Monitor	CVE-2026-91771No exploit	Weights & Biases wandb before 0.29.0 Path Traversal via File Downloadwandb · wandb · CWE-22 Pre-auth Path traversal	High8.7	—	1.1%	Sep 14, 2026
38Monitor	CVE-2026-12944No exploit	Incomplete Security Scanner Blocklist Enables Network-Based Code Executionlangflow · langflow · CWE-918 RCE SSRF	Critical9.6	—	0.3%	Sep 14, 2026
29Monitor	CVE-2026-18117No exploit	Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Custom Page Alias Nameconcretecms · concrete cms · CWE-79 XSS	High7.3	—	0.1%	Sep 14, 2026
34Monitor	CVE-2026-88262No exploit	Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass.bizwell · xclick · CWE-613 Pre-auth Auth bypass	High8.7	—	0.5%	Sep 14, 2026
23Monitor	CVE-2026-17495No exploit	moment vulnerable to Path Traversal via crafted non-string locale namemoment · moment · CWE-27 Pre-auth Path traversal	Medium5.9	—	0.5%	Sep 15, 2026
34Monitor	CVE-2026-91001No exploit	D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflowd-link · di-8400 · CWE-119 Memory safety	High8.6	—	0.9%	Sep 15, 2026
34Monitor	CVE-2026-91003No exploit	D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflowd-link · di-8300 · CWE-119 Memory safety	High8.5	—	0.9%	Sep 15, 2026
30Monitor	CVE-2026-75983No exploit	Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filterarraytics · eventin – event calendar, tickets, registration, booking & woocommerce · CWE-269	High7.5	—	0.7%	Sep 15, 2026
36Monitor	CVE-2026-90711No exploit	proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnetproxy-addr · proxy-addr · CWE-290 Pre-auth Auth bypass	Critical9.1	—	0.2%	Sep 15, 2026
28Monitor	CVE-2026-91778No exploit	In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including theoctopus deploy · octopus server · CWE-863 RCE Broken access control (IDOR)	High7.2	—	0.4%	Sep 15, 2026
27Monitor	CVE-2026-91819No exploit	MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponentmisp · misp · CWE-20 CSRF	Medium6.9	—	0.1%	Sep 15, 2026
28Monitor	CVE-2026-76159No exploit	Duplicati for Windows - Incorrect Permission Assignment for Critical Resourceduplicati · duplicati · CWE-732 Local privilege escalation	High7.0	—	0.1%	Sep 15, 2026
35Monitor	CVE-2026-77853No exploit	Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4.lite-on technology corporation · ff-rfi079i4 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 15, 2026
34Monitor	CVE-2026-80217No exploit	Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode olite-on technology corporation · ff-rfi079i4 · CWE-912 RCE	High8.7	—	0.5%	Sep 15, 2026
28Monitor	CVE-2026-91825No exploit	MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During Editmisp · misp · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 15, 2026
28Monitor	CVE-2026-91846No exploit	MISP Collection Element Add Missing Authorization on Referenced Object UUIDmisp · misp · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 15, 2026
28Monitor	CVE-2026-19515No exploit	OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Executionwso2 · wso2 integrator: mi for visual studio code · CWE-78 RCE Local privilege escalation Command injection	High7.0	—	0.1%	Sep 15, 2026
28Monitor	CVE-2026-41573No exploit	OpenAM LDAP Injection via `_queryId` Parameteropenidentityplatform · openam · CWE-90	High7.1	—	0.4%	Sep 15, 2026
33Monitor	CVE-2026-44203No exploit	OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)openidentityplatform · openam · CWE-79 Pre-auth XSS	High8.3	—	0.5%	Sep 15, 2026
28Monitor	CVE-2026-44793No exploit	OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`openidentityplatform · openam · CWE-79 Pre-auth XSS	High7.0	—	0.5%	Sep 15, 2026
34Monitor	CVE-2026-45048No exploit	OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPCopenidentityplatform · openam · CWE-200 Info leak	High8.5	—	0.4%	Sep 15, 2026
36Monitor	CVE-2026-45051No exploit	OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storageopenidentityplatform · openam · CWE-502 pre-auth RCE Deserialization	Critical9.2	—	0.6%	Sep 15, 2026
30Monitor	CVE-2026-46498No exploit	OpenAM Arbitrary OAuth Token Minting via Push Registrationopenidentityplatform · openam · CWE-639 Broken access control (IDOR)	High7.6	—	0.4%	Sep 15, 2026
37Monitor	CVE-2026-46619No exploit	OpenAM Authentication Bypass via MSISDN LDAP Injectionopenidentityplatform · openam · CWE-90 Pre-auth Auth bypass	Critical9.3	—	0.9%	Sep 15, 2026
29Monitor	CVE-2026-46623No exploit	OpenAM Account Takeover via Unverified Password Change in OAuth2 Moduleopenidentityplatform · openam · CWE-620 Pre-auth	High7.4	—	0.6%	Sep 15, 2026
30Monitor	CVE-2026-47424No exploit	OpenAM Authenticated RCE via Groovy Sandbox Escapeopenidentityplatform · openam · CWE-693 RCE	High7.5	—	0.4%	Sep 15, 2026
30Monitor	CVE-2026-47426No exploit	OpenAM OAuth Client Impersonation via JWKS Resolver Cacheopenidentityplatform · openam · CWE-287 Auth bypass	High7.6	—	0.5%	Sep 15, 2026
36Monitor	CVE-2026-48717No exploit	OpenAM OAuth Authorization Bypass via PKCE Challengeopenidentityplatform · openam · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.5%	Sep 15, 2026
29Monitor	CVE-2026-53660No exploit	OpenAM Insecure SSO Cookie Initializationopenidentityplatform · openam · CWE-1004 Pre-auth XSS CSRF	High7.4	—	0.4%	Sep 15, 2026
36Monitor	CVE-2026-62263No exploit	OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypassopenidentityplatform · openam · CWE-502 pre-auth RCE Deserialization	Critical9.2	—	0.8%	Sep 15, 2026
39Monitor	CVE-2026-62379No exploit	OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallbackopenidentityplatform · openam · CWE-94 pre-auth RCE Auth bypass Deserialization	Critical9.8	—	1.0%	Sep 15, 2026
33Monitor	CVE-2026-1758No exploit	Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation.secomea · gatemanager · CWE-384 Pre-auth	High8.3	—	0.3%	Sep 15, 2026
33Monitor	CVE-2026-57112No exploit	PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered toolsmervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	High8.3	—	0.2%	Sep 15, 2026
35Monitor	CVE-2026-57133No exploit	PraisonAI utility shell safe-command wrapper allowlist bypass via shell chainingmervinpraison · praisonai · CWE-78 RCE Command injection	High8.8	—	0.8%	Sep 15, 2026
32Monitor	CVE-2026-57134No exploit	PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validationmervinpraison · praisonai · CWE-287 Pre-auth Auth bypass	High8.2	—	0.4%	Sep 15, 2026
30Monitor	CVE-2026-57135No exploit	PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clientsmervinpraison · praisonai · CWE-653	High7.6	—	0.4%	Sep 15, 2026
35Monitor	CVE-2026-57136No exploit	PraisonAI SandboxExecutor allowedCommands bypass via shell chainingmervinpraison · praisonai · CWE-78 RCE Command injection	High8.8	—	0.5%	Sep 15, 2026
35Monitor	CVE-2026-57137No exploit	PraisonAI AgentLoop onToolCall approval runs after tool executionmervinpraison · praisonai · CWE-693	High8.8	—	0.5%	Sep 15, 2026
39Monitor	CVE-2026-57138No exploit	PraisonAI codeMode sandbox escape via Function constructormervinpraison · praisonai · CWE-184	Critical9.9	—	0.7%	Sep 15, 2026
39Monitor	CVE-2026-57139No exploit	PraisonAI MCPServer exposes unauthenticated HTTP tools/callmervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.7%	Sep 15, 2026
37Monitor	CVE-2026-57140No exploit	PraisonAI AgentOS exposes unauthenticated agent listing and invocationmervinpraison · praisonai · CWE-306 Pre-auth Auth bypass	Critical9.4	—	0.6%	Sep 15, 2026
39Monitor	CVE-2026-57141No exploit	PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Toolmervinpraison · praisonai · CWE-94 pre-auth RCE	Critical9.8	—	0.7%	Sep 15, 2026
39Monitor	CVE-2026-57147No exploit	praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgerymervinpraison · praisonai · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.7%	Sep 15, 2026
39Monitor	CVE-2026-57148No exploit	praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)mervinpraison · praisonai · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Sep 15, 2026
19Monitor	CVE-2026-86472No exploit	fast-uri vulnerable to inconsistent host case normalization via percent-encoded octetsfast-uri · fast-uri · CWE-178 Pre-auth	Medium4.8	—	0.2%	Sep 15, 2026
33Monitor	CVE-2026-91923No exploit	KubeSphere through 4.1.3 SSRF via git credential verification endpointkubesphere · kubesphere · CWE-918 SSRF	High8.3	—	0.4%	Sep 15, 2026
33Monitor	CVE-2026-91924No exploit	pgweb through 0.17.0 Missing Authorization on Direct Connect Endpointsosedoff · pgweb · CWE-862 Broken access control (IDOR)	High8.4	—	0.4%	Sep 15, 2026
34Monitor	CVE-2026-91925No exploit	Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Enginepolyaxon · polyaxon · CWE-1336 RCE SSTI	High8.7	—	0.7%	Sep 15, 2026
38Monitor	CVE-2026-89308No exploit	Arbitrary command execution in TrxTimeATTENDANCEtrexom · trxtimeattendance · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.0%	Sep 15, 2026
28Monitor	CVE-2026-91994No exploit	Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requestssemaphoreui · semaphore · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 15, 2026
37Monitor	CVE-2026-91995No exploit	pig before 4.1.0 Unverified Password Change via /register/passwordpig-mesh · pig · CWE-620 Pre-auth Auth bypass	Critical9.3	—	0.8%	Sep 15, 2026
34Monitor	CVE-2026-91996No exploit	lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpointdromara · lamp-cloud · CWE-306 Pre-auth Auth bypass	High8.7	—	0.4%	Sep 15, 2026
37Monitor	CVE-2026-91998No exploit	Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcpcasdoor · casdoor · CWE-863 Broken access control (IDOR)	Critical9.4	—	0.5%	Sep 15, 2026
35Monitor	CVE-2026-14805No exploit	Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAXstylemixthemes · consulting - business, finance wordpress theme · CWE-269	High8.8	—	0.4%	Sep 15, 2026
29Monitor	CVE-2026-75092No exploit	Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable pluginsred hat · red hat enterprise linux 9 · CWE-250 Local privilege escalation	High7.3	—	0.1%	Sep 15, 2026
35Monitor	CVE-2026-16140No exploit	OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1openbmc · phosphor-net-ipmid · CWE-863 Broken access control (IDOR)	High8.8	—	0.3%	Sep 15, 2026
32Monitor	CVE-2026-16141No exploit	OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Valueopenbmc · phosphor-net-ipmid · CWE-457 Pre-auth Auth bypass	High8.1	—	0.5%	Sep 15, 2026
37Monitor	CVE-2026-45052No exploit	OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpointsopenidentityplatform · openam · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.7%	Sep 15, 2026
30Monitor	CVE-2026-45794No exploit	OpenAM Unsafe Java Deserialization via SNSopenidentityplatform · openam · CWE-502 RCE Deserialization	High7.7	—	0.6%	Sep 15, 2026
37Monitor	CVE-2026-77179Proof of concept	Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallbackdocker · docker sandboxes · CWE-59	Critical9.4	—	0.1%	Sep 15, 2026
36Monitor	CVE-2026-52824Proof of concept	Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeoverkimai · kimai · CWE-1188 Pre-auth	Critical9.1	—	1.3%	Sep 15, 2026
28Monitor	CVE-2026-52827No exploit	Kimai: Two-factor authentication bypass on the Kimai APIkimai · kimai · CWE-287 Auth bypass	High7.1	—	0.5%	Sep 15, 2026
37Monitor	CVE-2026-39919No exploit	Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapterartifex software · ghostscript · CWE-122 Pre-auth Memory safety	Critical9.3	—	0.8%	Sep 15, 2026
36Monitor	CVE-2026-46495No exploit	OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMIopenidentityplatform · opendj · CWE-502 pre-auth RCE Deserialization	Critical9.2	—	1.1%	Sep 15, 2026
39Monitor	CVE-2026-63695No exploit	Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability.dell · smartfabric os10 software · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Sep 15, 2026

CVE-2026-70658
29Monitor
pay-rails/pay: non-constant-time HMAC comparison in Paddle Billing webhook signature verifier
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
pay-rails · paySep 14, 2026
CVE-2026-73494
29Monitor
blaze: Multiple HTTP/1.1 request-smuggling primitives in blaze's Java wire parser
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
http4s · blazeSep 14, 2026
CVE-2026-85921
32Monitor
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Memory safety
microsoft · windows 11 26h1Sep 14, 2026
CVE-2026-18116
29Monitor
Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications
HighCVSS 7.3Proof of conceptEPSS 0%
- XSS
concretecms · concrete cmsSep 14, 2026
CVE-2026-59178
39Monitor
ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
esphome · device-builderSep 14, 2026
CVE-2026-77884
28Monitor
Gallery - Private Photo Vault 1.0.41 - Unauthenticated local-network HTTP file exposure
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
brain trust · gallery - private photo vaultSep 14, 2026
CVE-2026-82049
33Monitor
tarfile extraction filters allow file modification and content disclosure via hard link to symlink
HighCVSS 8.4No exploitEPSS 0%
python software foundation · cpythonSep 14, 2026
CVE-2026-86830
34Monitor
Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center
HighCVSS 8.6No exploitEPSS 0%
aws · iam-identity-center-teamSep 14, 2026
CVE-2026-89020
34Monitor
MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation
HighCVSS 8.7Proof of conceptEPSS 0%
- Memory safety
mikrotik · routerosSep 14, 2026
CVE-2026-81900
29Monitor
Concrete CMS before 9.5.3 is vulnerable to Stored XSS in the YouTube block (vWidth/vHeight)
HighCVSS 7.3No exploitEPSS 0%
- XSS
concretecms · concrete cmsSep 14, 2026
CVE-2026-91197
28Monitor
Flowable flowable-engine through 8.0.0 XXE via ProcessDiagramLayoutFactory
HighCVSS 7.1No exploitEPSS 0%
- XXE
flowable · flowable-engineSep 14, 2026
CVE-2026-91200
34Monitor
DevSpace through 6.3.21 Path Traversal via tar extraction
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
devspace · devspaceSep 14, 2026
CVE-2026-16335
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HighCVSS 8.8No exploitEPSS 0%
- Path traversal
ibm · datastage on cloud pak for dataSep 14, 2026
CVE-2026-16338
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HighCVSS 8.8No exploitEPSS 0%
- Path traversal
ibm · datastage on cloud pak for dataSep 14, 2026
CVE-2026-16428
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HighCVSS 8.8No exploitEPSS 0%
- RCE
ibm · datastage on cloud pak for dataSep 14, 2026
CVE-2026-16466
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
ibm · datastage on cloud pak for dataSep 14, 2026
CVE-2026-16673
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · datastage on cloud pak for dataSep 14, 2026
CVE-2026-47253
29Monitor
Anyquery: Path Traversal in `clear_plugin_cache` Allows Arbitrary Directory Deletion
HighCVSS 7.3No exploitEPSS 0%
- Path traversal
julien040 · anyquerySep 14, 2026
CVE-2026-50006
36Monitor
Anyquery: Arbitrary File Write (AFW) which could lead to Remote Code Execution (RCE) via Unrestricted ATTACH DATABASE in Server Mode
CriticalCVSS 9.1No exploitEPSS 0%
- pre-auth RCE
- Path traversal
julien040 · anyquerySep 14, 2026
CVE-2026-54333
39Monitor
UEFI Firmware Parser: Stack out-of-bounds write in tiano decompressor MakeTable
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
theopolis · uefi-firmware-parserSep 14, 2026
CVE-2026-54334
39Monitor
UEFI Firmware Parser: Heap out-of-bounds write in tiano decompressor `ReadCLen`
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
theopolis · uefi-firmware-parserSep 14, 2026
CVE-2026-54447
33Monitor
garminconnect: Insecure Permission Assignment for Garmin OAuth Token Store
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
cyberjunky · python-garminconnectSep 14, 2026
CVE-2026-54628
34Monitor
Anyquery: Server-Side Request Forgery (SSRF) via Unrestricted SQLite Virtual Table Modules in Server Mode
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SSRF
- Broken access control (IDOR)
julien040 · anyquerySep 14, 2026
CVE-2026-54629
30Monitor
Anyquery: Local File Read (LFR) via Unrestricted SQLite Virtual Table Modules in Server Mode
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Path traversal
julien040 · anyquerySep 14, 2026
CVE-2026-54632
30Monitor
SIPSorcery: Malformed UDP packet on the RTP/ICE socket can remotely terminate a media session (DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
sipsorcery-org · sipsorcerySep 14, 2026
CVE-2026-55209
39Monitor
resdata insufficiently validates untrusted GRDECL files
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
equinor · resdataSep 14, 2026
CVE-2026-73496
30Monitor
MCP Atlassian: Arbitrary server-side file read via attachment upload
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
sooperset · mcp-atlassianSep 14, 2026
CVE-2026-90847
35Monitor
EFM ipTIME C200E System Setup iux_set.cgi os command injection
HighCVSS 8.5Proof of conceptEPSS 3%
- RCE
- Command injection
efm · iptime c200eSep 14, 2026
CVE-2026-91750
28Monitor
WeKnora before 0.7.0 SSRF via Unvalidated HTTP Redirects
HighCVSS 7.1No exploitEPSS 0%
- SSRF
tencent · weknoraSep 14, 2026
CVE-2026-91751
28Monitor
Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
flextype · flextypeSep 14, 2026
CVE-2026-91752
34Monitor
GNU libextractor before 1.15 Stack Overflow via OLE2
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
gnu · libextractorSep 14, 2026
CVE-2026-53713
36Monitor
Envoy Gateway: Authentication Bypass via Improper Input Validation in EnvoyExtensionPolicy Lua Allows Secret Disclosure
CriticalCVSS 9.1No exploitEPSS 0%
- Auth bypass
envoyproxy · gatewaySep 14, 2026
CVE-2026-53714
29Monitor
Envoy Gateway: xDS Control Plane Information Disclosure when Envoy Gateway operates in GatewayNamespaceMode
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
envoyproxy · gatewaySep 14, 2026
CVE-2026-84506
31Monitor
A use after free issue was addressed with improved memory management.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
apple · macosSep 14, 2026
CVE-2026-91770
28Monitor
IceHRM before 36.0.0 Broken Access Control via Employee ID
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
gamonoid · icehrmSep 14, 2026
CVE-2026-91771
34Monitor
Weights & Biases wandb before 0.29.0 Path Traversal via File Download
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
- Path traversal
wandb · wandbSep 14, 2026
CVE-2026-12944
38Monitor
Incomplete Security Scanner Blocklist Enables Network-Based Code Execution
CriticalCVSS 9.6No exploitEPSS 0%
- RCE
- SSRF
langflow · langflowSep 14, 2026
CVE-2026-18117
29Monitor
Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Stored XSS in Custom Page Alias Name
HighCVSS 7.3No exploitEPSS 0%
- XSS
concretecms · concrete cmsSep 14, 2026
CVE-2026-88262
34Monitor
Insufficient session expiration vulnerability in bizwell xClick allows Authentication Bypass.
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
bizwell · xclickSep 14, 2026
CVE-2026-17495
23Monitor
moment vulnerable to Path Traversal via crafted non-string locale name
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
- Path traversal
moment · momentSep 15, 2026
CVE-2026-91001
34Monitor
D-Link DI-8400 DDNS Configuration ddns.asp ddns_asp stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
d-link · di-8400Sep 15, 2026
CVE-2026-91003
34Monitor
D-Link DI-8300 CGI Service rzgl.asp rzgl_asp stack-based overflow
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
d-link · di-8300Sep 15, 2026
CVE-2026-75983
30Monitor
Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce <= 4.1.23 - Authenticated (Subscriber+) Privilege Escalation via map_meta_cap Filter
HighCVSS 7.5No exploitEPSS 0%
arraytics · eventin – event calendar, tickets, registration, booking & woocommerceSep 15, 2026
CVE-2026-90711
36Monitor
proxy-addr vulnerable to IP spoofing via IPv4-mapped IPv6 trust subnet
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
proxy-addr · proxy-addrSep 15, 2026
CVE-2026-91778
28Monitor
In affected versions of Octopus Server, users with certain scoped permission sets could execute arbitrary scripts on a worker (including the
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
octopus deploy · octopus serverSep 15, 2026
CVE-2026-91819
27Monitor
MISP: HTTP Method Override Bypasses CSRF and Form Validation in BetterSecurityComponent
MediumCVSS 6.9No exploitEPSS 0%
- CSRF
misp · mispSep 15, 2026
CVE-2026-76159
28Monitor
Duplicati for Windows - Incorrect Permission Assignment for Critical Resource
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
duplicati · duplicatiSep 15, 2026
CVE-2026-77853
35Monitor
Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in FF-RFI079I4 and FF-RFI078I4.
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
lite-on technology corporation · ff-rfi079i4Sep 15, 2026
CVE-2026-80217
34Monitor
Hidden functionality issue exists in FF-RFI079I4 and FF-RFI078I4, which may allow a user who can log in via SSH and access the enable mode o
HighCVSS 8.7No exploitEPSS 0%
- RCE
lite-on technology corporation · ff-rfi079i4Sep 15, 2026
CVE-2026-91825
28Monitor
MISP: Missing Authorization Check for Event Sharing Group When Distribution Field Is Omitted During Edit
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
misp · mispSep 15, 2026
CVE-2026-91846
28Monitor
MISP Collection Element Add Missing Authorization on Referenced Object UUID
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
misp · mispSep 15, 2026
CVE-2026-19515
28Monitor
OS Command Injection via Unit Test Execution in WSO2 Integrator MI VS Code Extension Allows Arbitrary Command Execution
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
wso2 · wso2 integrator: mi for visual studio codeSep 15, 2026
CVE-2026-41573
28Monitor
OpenAM LDAP Injection via `_queryId` Parameter
HighCVSS 7.1No exploitEPSS 0%
openidentityplatform · openamSep 15, 2026
CVE-2026-44203
33Monitor
OpenAM: Pre-auth Reflected XSS in OAuth2 / OIDC response_mode=form_post via state parameter (FormPostResponse.ftl)
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- XSS
openidentityplatform · openamSep 15, 2026
CVE-2026-44793
28Monitor
OpenAM: Pre-authentication Reflected XSS in SAML2 Cluster Cookie-Hash-Redirect Path via `FSUtils.postToTarget`
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- XSS
openidentityplatform · openamSep 15, 2026
CVE-2026-45048
34Monitor
OpenAM Authenticated Privilege Escalation via Raw Token Disclosure Session RPC
HighCVSS 8.5No exploitEPSS 0%
- Info leak
openidentityplatform · openamSep 15, 2026
CVE-2026-45051
36Monitor
OpenAM Pre-auth RCE via Java Deserialization in WebAuthn Authenticator Storage
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Deserialization
openidentityplatform · openamSep 15, 2026
CVE-2026-46498
30Monitor
OpenAM Arbitrary OAuth Token Minting via Push Registration
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
openidentityplatform · openamSep 15, 2026
CVE-2026-46619
37Monitor
OpenAM Authentication Bypass via MSISDN LDAP Injection
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
openidentityplatform · openamSep 15, 2026
CVE-2026-46623
29Monitor
OpenAM Account Takeover via Unverified Password Change in OAuth2 Module
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
openidentityplatform · openamSep 15, 2026
CVE-2026-47424
30Monitor
OpenAM Authenticated RCE via Groovy Sandbox Escape
HighCVSS 7.5No exploitEPSS 0%
- RCE
openidentityplatform · openamSep 15, 2026
CVE-2026-47426
30Monitor
OpenAM OAuth Client Impersonation via JWKS Resolver Cache
HighCVSS 7.6No exploitEPSS 0%
- Auth bypass
openidentityplatform · openamSep 15, 2026
CVE-2026-48717
36Monitor
OpenAM OAuth Authorization Bypass via PKCE Challenge
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
openidentityplatform · openamSep 15, 2026
CVE-2026-53660
29Monitor
OpenAM Insecure SSO Cookie Initialization
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
openidentityplatform · openamSep 15, 2026
CVE-2026-62263
36Monitor
OpenAM: WebAuthn Java deserialization RCE via ObjectInputFilter depth>1 bypass
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Deserialization
openidentityplatform · openamSep 15, 2026
CVE-2026-62379
39Monitor
OpenAM: Unauthenticated Remote Code Execution via Class.forName in AuthXMLUtils.createCustomCallback
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
- Deserialization
openidentityplatform · openamSep 15, 2026
CVE-2026-1758
33Monitor
Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation.
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
secomea · gatemanagerSep 15, 2026
CVE-2026-57112
33Monitor
PraisonAI ToolsMCPServer legacy SSE transport accepts attacker Host/Origin and exposes registered tools
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57133
35Monitor
PraisonAI utility shell safe-command wrapper allowlist bypass via shell chaining
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57134
32Monitor
PraisonAI MCPSecurity Basic/OAuth authentication policies accept invalid credentials without validation
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57135
30Monitor
PraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients
HighCVSS 7.6No exploitEPSS 0%
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57136
35Monitor
PraisonAI SandboxExecutor allowedCommands bypass via shell chaining
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57137
35Monitor
PraisonAI AgentLoop onToolCall approval runs after tool execution
HighCVSS 8.8No exploitEPSS 0%
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57138
39Monitor
PraisonAI codeMode sandbox escape via Function constructor
CriticalCVSS 9.9No exploitEPSS 0%
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57139
39Monitor
PraisonAI MCPServer exposes unauthenticated HTTP tools/call
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57140
37Monitor
PraisonAI AgentOS exposes unauthenticated agent listing and invocation
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57141
39Monitor
PraisonAI: Remote Code Execution via Sandbox Escape in `codeMode` Tool
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57147
39Monitor
praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
mervinpraison · praisonaiSep 15, 2026
CVE-2026-57148
39Monitor
praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
mervinpraison · praisonaiSep 15, 2026
CVE-2026-86472
19Monitor
fast-uri vulnerable to inconsistent host case normalization via percent-encoded octets
MediumCVSS 4.8No exploitEPSS 0%
- Pre-auth
fast-uri · fast-uriSep 15, 2026
CVE-2026-91923
33Monitor
KubeSphere through 4.1.3 SSRF via git credential verification endpoint
HighCVSS 8.3No exploitEPSS 0%
- SSRF
kubesphere · kubesphereSep 15, 2026
CVE-2026-91924
33Monitor
pgweb through 0.17.0 Missing Authorization on Direct Connect Endpoint
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
sosedoff · pgwebSep 15, 2026
CVE-2026-91925
34Monitor
Polyaxon through 2.16.4 Server-Side Template Injection via Unsandboxed Jinja2 Engine
HighCVSS 8.7No exploitEPSS 0%
- RCE
- SSTI
polyaxon · polyaxonSep 15, 2026
CVE-2026-89308
38Monitor
Arbitrary command execution in TrxTimeATTENDANCE
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
trexom · trxtimeattendanceSep 15, 2026
CVE-2026-91994
28Monitor
Semaphore UI through 2.19.12 Missing Authorization on GET and HEAD Requests
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
semaphoreui · semaphoreSep 15, 2026
CVE-2026-91995
37Monitor
pig before 4.1.0 Unverified Password Change via /register/password
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
pig-mesh · pigSep 15, 2026
CVE-2026-91996
34Monitor
lamp-cloud through 5.10.0 Missing Authentication for JVM Properties Endpoint
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
dromara · lamp-cloudSep 15, 2026
CVE-2026-91998
37Monitor
Casdoor through 4.4.0 Cross-Organization User Administration via /api/mcp
CriticalCVSS 9.4No exploitEPSS 0%
- Broken access control (IDOR)
casdoor · casdoorSep 15, 2026
CVE-2026-14805
35Monitor
Consulting - Business, Finance WordPress Theme <= 6.7.16 - Authenticated (Subscriber+) Privilege Escalation via AJAX
HighCVSS 8.8No exploitEPSS 0%
stylemixthemes · consulting - business, finance wordpress themeSep 15, 2026
CVE-2026-75092
29Monitor
Leapp-repository: leapp-upgrade-el9toel10: leapp-upgrade-el9toel10: scan_mysql runs mysqld --validate-config as root and can load mysql-writable plugins
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
red hat · red hat enterprise linux 9Sep 15, 2026
CVE-2026-16140
35Monitor
OpenBMC IPMI Privilege Escalation via Retargeted RAKP 1
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
openbmc · phosphor-net-ipmidSep 15, 2026
CVE-2026-16141
32Monitor
OpenBMC IPMI Authentication Bypass via Default userKey and Stale Challenge Value
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
openbmc · phosphor-net-ipmidSep 15, 2026
CVE-2026-45052
37Monitor
OpenAM Pre-auth User Profile Tampering via Anonymous SOAP Authn in Liberty IDPP/Discovery Endpoints
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
openidentityplatform · openamSep 15, 2026
CVE-2026-45794
30Monitor
OpenAM Unsafe Java Deserialization via SNS
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Deserialization
openidentityplatform · openamSep 15, 2026
CVE-2026-77179
37Monitor
Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback
CriticalCVSS 9.4Proof of conceptEPSS 0%
docker · docker sandboxesSep 15, 2026
CVE-2026-52824
36Monitor
Kimai: Default APP_SECRET in Docker Image Enables Cookie Forgery and Account Takeover
CriticalCVSS 9.1Proof of conceptEPSS 1%
- Pre-auth
kimai · kimaiSep 15, 2026
CVE-2026-52827
28Monitor
Kimai: Two-factor authentication bypass on the Kimai API
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
kimai · kimaiSep 15, 2026
CVE-2026-39919
37Monitor
Ghostscript < 10.08.0 Heap Buffer Overflow via JPEG 2000 Output Adapter
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
artifex software · ghostscriptSep 15, 2026
CVE-2026-46495
36Monitor
OpenDJ Pre-Auth RCE via Java Deserialization in JMX RMI
CriticalCVSS 9.2No exploitEPSS 1%
- pre-auth RCE
- Deserialization
openidentityplatform · opendjSep 15, 2026
CVE-2026-63695
39Monitor
Dell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
dell · smartfabric os10 softwareSep 15, 2026