Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2026

7,963 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 39 of 80

  • Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 8.6No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Authenticated Server-Side Request Forgery Vulnerabilities Leading to Information Disclosure in EdgeConnect SD-WAN Orchestrator

    HighCVSS 8.5No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorSep 15, 2026

  • Authenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API

    HighCVSS 8.5No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorSep 15, 2026

  • Unauthenticated Denial-of-Service Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 8.2No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorSep 15, 2026

  • Unauthenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 8.1No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Authentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API

    HighCVSS 8.1No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Unauthenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 8.1No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorSep 15, 2026

  • Unauthenticated Denial-of-Service (DoS) Vulnerability leads to Service Disruption in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 7.5No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Authenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator

    HighCVSS 7.5No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Authentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator

    HighCVSS 7.5No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorSep 15, 2026

  • Authenticated Buffer Overflow Vulnerability leads to Remote Code Execution or Denial-of-Service in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 7.2No exploitEPSS 0%

    arubanetworks · edgeconnect sd-wan orchestratorSep 15, 2026

  • Authenticated Remote Code Execution Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 7.2No exploitEPSS 1%

    hpe · edgeconnect operating systemSep 15, 2026

  • Authenticated Buffer Overflow Vulnerabilities lead to Remote Code Execution in HPE Networking EdgeConnect SD-WAN Gateway API Endpoint

    HighCVSS 7.2No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Unauthenticated Adjacent Information Disclosure and Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 7.1No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • Unauthenticated Denial-of-Service Vulnerability in HPE Networking EdgeConnect SD-WAN Gateways

    HighCVSS 7.0No exploitEPSS 0%

    hpe · edgeconnect operating systemSep 15, 2026

  • FreeRDP 2.0.0 through 3.30.0 Heap Buffer Overflow via RoutingToken

    HighCVSS 8.7No exploitEPSS 0%

    freerdp · freerdpSep 15, 2026

  • Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Installation).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · access managerSep 15, 2026

  • Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component: Authentication Engine).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · access managerSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 7.2No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 7.7No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Cube Manager).

    HighCVSS 7.0No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).

    HighCVSS 7.2No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Report Distribution).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: SQR).

    HighCVSS 8.1No exploitEPSS 0%

    oracle · peoplesoft enterprise peopletoolsSep 15, 2026

  • Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Container).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle · weblogic serverSep 15, 2026

  • Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware (component: Client Bundle).

    HighCVSS 7.9No exploitEPSS 0%

    oracle · webcenter enterprise captureSep 15, 2026

  • Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    HighCVSS 8.6No exploitEPSS 0%

    oracle · identity manager connectorSep 15, 2026

  • Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    HighCVSS 7.8No exploitEPSS 0%

    oracle · identity manager connectorSep 15, 2026

  • Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    HighCVSS 8.7No exploitEPSS 0%

    oracle · identity manager connectorSep 15, 2026

  • Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    HighCVSS 8.3No exploitEPSS 0%

    oracle · identity manager connectorSep 15, 2026

  • Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    CriticalCVSS 9.3No exploitEPSS 0%

    oracle · identity manager connectorSep 15, 2026

  • Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware (component: Core).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · identity manager connectorSep 15, 2026

  • Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

    CriticalCVSS 9.6No exploitEPSS 0%

    oracle corporation · oracle managed file transferSep 15, 2026

  • Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middleware (component: MFT Runtime Server).

    HighCVSS 8.3No exploitEPSS 0%

    oracle corporation · oracle managed file transferSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    HighCVSS 8.8No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component: WebCenter Sites).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    CriticalCVSS 9.6No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Portlet Services).

    HighCVSS 7.7No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy UI).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · identity managerSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Composer).

    CriticalCVSS 9.6No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (component: Install).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle xml gatewaySep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 7.1No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 7.7No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Security Framework).

    HighCVSS 8.5No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 7.1No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 7.6No exploitEPSS 0%

    oracle · webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle webcenter portalSep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · oracle internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · oracle internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · oracle internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.9No exploitEPSS 0%

    oracle corporation · oracle internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 10.0No exploitEPSS 0%

    oracle · internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · internet directorySep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · oracle internet directorySep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    CriticalCVSS 9.1No exploitEPSS 0%

    oracle corporation · oracle webcenter portalSep 15, 2026

  • Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).

    HighCVSS 7.5No exploitEPSS 0%

    oracle corporation · oracle webcenter portalSep 15, 2026

  • Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component: OID LDAP Server).

    CriticalCVSS 9.8No exploitEPSS 0%

    oracle · internet directorySep 15, 2026

  • Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Shared Components).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle jdeveloperSep 15, 2026

  • Vulnerability in the Oracle Enterprise Manager for Oracle Database product of Oracle Enterprise Manager (component: Core).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle enterprise manager for oracle databaseSep 15, 2026

  • Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware (component: Framework).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · oracle fusion middleware controlSep 15, 2026

  • Vulnerability in the PeopleSoft Enterprise PRTL Interaction Hub product of Oracle PeopleSoft (component: Enterprise Portal).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · peoplesoft enterprise prtl interaction hubSep 15, 2026

  • Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Machine Learning).

    HighCVSS 7.8No exploitEPSS 0%

    oracle corporation · oracle business intelligence enterprise editionSep 15, 2026

  • Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Search Bean [Incl.

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · oracle applications frameworkSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.1No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.6No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 7.5No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 7.9No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the Oracle Banking Branch product of Oracle Financial Services Applications (component: Reports).

    HighCVSS 7.1No exploitEPSS 0%

    oracle corporation · oracle banking branchSep 15, 2026

  • Vulnerability in the Oracle Banking Corporate Lending product of Oracle Financial Services Applications (component: Core).

    HighCVSS 8.0No exploitEPSS 0%

    oracle corporation · oracle banking corporate lendingSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 7.2No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 8.5No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience).

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle marketingSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.2No exploitEPSS 0%

    oracle · siebel crmSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.8No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component: Siebel Cloud Manager).

    HighCVSS 8.2No exploitEPSS 0%

    oracle corporation · siebel crm cloud applicationsSep 15, 2026

  • Vulnerability in the RDBMS component of Oracle Database Server.

    HighCVSS 7.7No exploitEPSS 0%

    oracle corporation · oracle database serverSep 15, 2026