By publication date

Exploited and new serious CVEs: September 2026

7,964 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 4 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-19723No exploit	Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handlerunknown · social media share buttons & social sharing icons · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
19Monitor	CVE-2026-77788No exploit	Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemasunknown · rank math seo · CWE-639 Broken access control (IDOR)	Medium4.9	—	0.3%	Sep 2, 2026
30Monitor	CVE-2026-77792No exploit	RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Fieldunknown · registrationmagic · CWE-79 Pre-auth XSS	High7.5	—	0.3%	Sep 2, 2026
39Monitor	CVE-2026-78657No exploit	SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Fieldbdthemes · sigmaforms pro – ai generated forms · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	1.0%	Sep 2, 2026
32Monitor	CVE-2026-80467Proof of concept	Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Actionunknown · advanced custom fields: extended · CWE-269 Pre-auth	High8.1	—	0.3%	Sep 2, 2026
21Monitor	CVE-2026-81199Proof of concept	MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Routeunknown · masterstudy lms wordpress plugin · CWE-200 Pre-auth Info leak	Medium5.3	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-81737No exploit	FAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_informationunknown · faq builder ays · CWE-79 Pre-auth XSS	High8.8	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-81807No exploit	Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkificationunknown · simple ajax chat · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Sep 2, 2026
32Monitor	CVE-2026-82183No exploit	OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertionunknown · oauth single sign on · CWE-287 Pre-auth Auth bypass	High8.1	—	0.3%	Sep 2, 2026
28Monitor	CVE-2026-82883No exploit	WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerabilitymarcus · login with ajax · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
36Monitor	CVE-2026-14828No exploit	Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 zohocorp · manageengine password manager pro · CWE-89 SQL injection	High8.8	—	3.0%	Sep 2, 2026
28Monitor	CVE-2026-75528No exploit	Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Logwpmudev · broken link checker · CWE-79 Pre-auth XSS	High7.2	—	0.5%	Sep 2, 2026
34Monitor	CVE-2026-19754No exploit	Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extractionbaserow · baserow · CWE-89 SQL injection	High8.6	—	0.3%	Sep 2, 2026
34Monitor	CVE-2024-35585No exploit	Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.oxford nanopore · minknow · CWE-306 Pre-auth Auth bypass	High8.6	—	0.4%	Sep 2, 2026
30Monitor	CVE-2025-46418No exploit	Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.westermo · weos · CWE-78 RCE Command injection	High7.6	—	0.7%	Sep 2, 2026
30Monitor	CVE-2026-18672No exploit	RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAXprogress software · telerik ui for asp.net ajax · CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	Sep 2, 2026
32Monitor	CVE-2026-19219Proof of concept	DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAXprogress software · telerik ui for asp.net ajax · CWE-345 pre-auth RCE	High8.1	—	0.2%	Sep 2, 2026
30Monitor	CVE-2026-82958No exploit	In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command byeclipse foundation · eclipse ditto · CWE-74	High7.6	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-81283No exploit	WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerabilitywedevs · wp user frontend · CWE-502 Deserialization	High8.8	—	0.5%	Sep 2, 2026
37Monitor	CVE-2026-81286No exploit	WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerabilitywc lovers · wcfm marketplace · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-81288No exploit	WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerabilitywp swings · upsell order bump offer for woocommerce · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
28Monitor	CVE-2026-81289No exploit	WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerabilitysonaar · mp3 audio player for music, radio & podcast by sonaar · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
39Monitor	CVE-2026-81294Proof of concept	WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerabilitypaul ryan · authorizer · CWE-266 Pre-auth	Critical9.8	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-81769No exploit	WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerabilityliquidthemes · booking hub · CWE-266	High8.8	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-81770No exploit	WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerabilitymapgeo · interactive geo maps · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
28Monitor	CVE-2026-81771No exploit	WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerabilitytrustedsite · trustedsite · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
35Monitor	CVE-2026-81772No exploit	WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerabilitysaturday drive · ninja forms - layout & styles · CWE-502 Pre-auth Deserialization	High8.8	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-81775No exploit	WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerabilityestatik · estatik · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 2, 2026
28Monitor	CVE-2026-84759No exploit	WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerabilityelementor · activity log · CWE-352 Pre-auth CSRF	High7.1	—	0.1%	Sep 2, 2026
35Monitor	CVE-2026-84764No exploit	WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerabilitynsquared · simply schedule appointments · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Sep 2, 2026
35Monitor	CVE-2026-84770No exploit	WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerabilitykitae park · mang board wp · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Sep 2, 2026
28Monitor	CVE-2026-84794No exploit	Craft CMS 5.0.0 through 5.10.10 Authorization Bypass via assets/move-assetcraftcms · cms · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 2, 2026
36Monitor	CVE-2026-84795No exploit	Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritancecraftcms · cms · CWE-269 Pre-auth Auth bypass	Critical9.2	—	0.5%	Sep 2, 2026
34Monitor	CVE-2026-84796No exploit	Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypasscraftcms · cms · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-84798No exploit	Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSitecraftcms · cms · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 2, 2026
28Monitor	CVE-2026-84800No exploit	Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-filecraftcms · cms · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 2, 2026
34Monitor	CVE-2026-84801No exploit	Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUserscraftcms · cms · CWE-862 Auth bypass Broken access control (IDOR)	High8.7	—	0.4%	Sep 2, 2026
34Monitor	CVE-2026-84803No exploit	SiYuan before v3.8.2 Stored XSS via incomplete asset blocklistsiyuan-note · siyuan · CWE-79 XSS	High8.6	—	0.4%	Sep 2, 2026
36Monitor	CVE-2026-73475No exploit	Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095centarro · commerce paypal · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Sep 2, 2026
29Monitor	CVE-2026-76759No exploit	Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102drupal · screenshot · CWE-79 XSS	High7.3	—	0.2%	Sep 2, 2026
40Plan	CVE-2026-4357No exploit	Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Uploadunknown · embed html5 game · CWE-434 Pre-auth File upload	Critical10.0	—	0.5%	Sep 2, 2026
39Monitor	CVE-2026-77009No exploit	WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Consoleunknown · watchman-site7 · CWE-94 RCE	Critical9.9	—	0.5%	Sep 2, 2026
29Monitor	CVE-2026-78590No exploit	Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resourceselastic · kibana · CWE-22 Path traversal	High7.3	—	0.4%	Sep 2, 2026
31Monitor	CVE-2026-78604No exploit	Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEMelastic · elastic agent · CWE-732 Local privilege escalation	High7.8	—	0.1%	Sep 2, 2026
34Monitor	CVE-2026-79989No exploit	Arbitrary user password reset leading to administrator account takeovercraftcms · cms · CWE-285 Broken access control (IDOR)	High8.7	—	0.4%	Sep 2, 2026
34Monitor	CVE-2026-79990No exploit	GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/deletecraftcms · cms · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-79991No exploit	Authenticated SQL Injection via nested eager-loading criteriacraftcms · cms · CWE-89 SQL injection	High7.1	—	0.5%	Sep 2, 2026
36Monitor	CVE-2026-82955No exploit	In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Gaeclipse foundation · eclipse aerios · CWE-295 Pre-auth Weak crypto	Critical9.0	—	0.1%	Sep 2, 2026
30Monitor	CVE-2026-81774No exploit	WordPress WooCommerce Product Attachment plugin <= 2.3.4 - Sensitive Data Exposure vulnerabilitydotstore · woocommerce product attachment · CWE-497 Pre-auth Info leak	High7.5	—	0.4%	Sep 2, 2026
32Monitor	CVE-2026-14199No exploit	Session takeover via Auth Proxy cache key collisiongrafana · grafana · CWE-290 Auth bypass	High8.1	—	0.3%	Sep 2, 2026
29Monitor	CVE-2026-18058No exploit	The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps.motorola · smart connect application · CWE-862 Local privilege escalation Broken access control (IDOR)	High7.3	—	0.1%	Sep 2, 2026
35Monitor	CVE-2026-18329No exploit	NGINX ngx_http_js_module vulnerabilityf5 · nginx javascript · CWE-636 Pre-auth	High8.8	—	0.6%	Sep 2, 2026
40Plan	CVE-2026-53611No exploit	Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validationas203038 · looking-glass · CWE-78 pre-auth RCE Command injection	Critical9.8	—	1.9%	Sep 2, 2026
34Monitor	CVE-2026-66362No exploit	Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX configf5 · nginx gateway fabric · CWE-76	High8.6	—	0.5%	Sep 2, 2026
34Monitor	CVE-2026-66842No exploit	BIG-IP and BIG-IQ Configuration utility vulnerabilityf5 · big-ip · CWE-918 SSRF	High8.7	—	0.4%	Sep 2, 2026
34Monitor	CVE-2026-77180No exploit	NGINX Ingress Controller vulnerabilityf5 · nginx ingress controller · CWE-76	High8.7	—	0.4%	Sep 2, 2026
34Monitor	CVE-2026-78222No exploit	NGINX ngx_http_js_module vulnerabilityf5 · nginx javascript · CWE-476 Pre-auth Memory safety	High8.7	—	0.6%	Sep 2, 2026
36Monitor	CVE-2026-78689No exploit	NGINX ngx_http_js_module vulnerablilityf5 · nginx javascript · CWE-122 Pre-auth Memory safety	Critical9.2	—	0.7%	Sep 2, 2026
35Monitor	CVE-2026-84645No exploit	In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level confijenkins · jenkins · CWE-94 RCE	High8.8	—	0.7%	Sep 2, 2026
35Monitor	CVE-2026-84647No exploit	In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier,jenkins project · jenkins · CWE-502 Deserialization	High8.8	—	0.5%	Sep 2, 2026
35Monitor	CVE-2026-84648No exploit	In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source, level, and timestajenkins · jenkins · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Sep 2, 2026
35Monitor	CVE-2026-84649No exploit	In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.447 thjenkins project · jenkins · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Sep 2, 2026
35Monitor	CVE-2026-84650No exploit	In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to jenkins · jenkins · CWE-502 Deserialization	High8.8	—	0.4%	Sep 2, 2026
29Monitor	CVE-2026-84652No exploit	In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember mejenkins · jenkins · CWE-384	High7.3	—	0.4%	Sep 2, 2026
32Monitor	CVE-2026-84665No exploit	Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scannerjenkins project · jenkins sonarqube scanner plugin · CWE-79 XSS	High8.0	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-84667No exploit	Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing attajenkins project · jenkins thinbackup plugin · CWE-22 Path traversal	High7.1	—	0.3%	Sep 2, 2026
35Monitor	CVE-2026-84668No exploit	Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data bindijenkins project · jenkins saml plugin · CWE-284 Broken access control (IDOR)	High8.8	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-84669No exploit	A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish Ajenkins project · jenkins allure plugin · CWE-22 Path traversal	High8.8	—	0.5%	Sep 2, 2026
35Monitor	CVE-2026-84670No exploit	Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when deserializing cachedjenkins project · jenkins performance plugin · CWE-502 RCE Deserialization	High8.8	—	0.6%	Sep 2, 2026
35Monitor	CVE-2026-84671No exploit	Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file sysjenkins project · jenkins file parameter plugin · CWE-22 RCE Path traversal	High8.8	—	0.8%	Sep 2, 2026
35Monitor	CVE-2026-84672No exploit	Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group'sjenkins project · jenkins microsoft entra id (previously azure ad) plugin · CWE-639 Broken access control (IDOR)	High8.8	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-84673No exploit	Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration through Staplerjenkins project · jenkins customizable header plugin · CWE-79 XSS	High8.8	—	0.5%	Sep 2, 2026
29Monitor	CVE-2026-84675No exploit	OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable vjenkins project · jenkins tics plugin · CWE-78 RCE Command injection	High7.4	—	1.1%	Sep 2, 2026
39Monitor	CVE-2026-20212Proof of concept	Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerabilitycisco · cisco nx-os software · CWE-1327 pre-auth RCE	Critical9.8	—	0.8%	Sep 2, 2026
39Monitor	CVE-2026-20274No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · ios xr · CWE-664 Pre-auth	Critical9.8	—	0.5%	Sep 2, 2026
35Monitor	CVE-2026-20275No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · cisco ios xr software · CWE-682 Pre-auth	High8.8	—	0.3%	Sep 2, 2026
34Monitor	CVE-2026-20276No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · ios xr · CWE-691 Pre-auth Denial of service	High8.6	—	0.4%	Sep 2, 2026
32Monitor	CVE-2026-20277No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · cisco ios xr software · CWE-693 Pre-auth	High8.2	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-20278No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · cisco ios xr software · CWE-707	High8.8	—	0.4%	Sep 2, 2026
39Monitor	CVE-2026-20279No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · cisco ios xr software · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Sep 2, 2026
35Monitor	CVE-2026-20280No exploit	Cisco IOS XR Software Security Hardening Release: September 2026cisco · ios xr · CWE-703	High8.8	—	0.4%	Sep 2, 2026
30Monitor	CVE-2026-20281No exploit	Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerabilitycisco · cisco session initiation protocol (sip) software · CWE-401 Pre-auth Denial of service	High7.5	—	0.5%	Sep 2, 2026
33Monitor	CVE-2026-45730No exploit	Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any projectnuclio · nuclio · CWE-862 Broken access control (IDOR)	High8.3	—	0.4%	Sep 2, 2026
32Monitor	CVE-2026-52831No exploit	Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCEnuclio · nuclio · CWE-78 RCE Command injection	High8.0	—	0.5%	Sep 2, 2026
19Monitor	CVE-2026-52832Proof of concept	Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containernuclio · nuclio · CWE-22 Auth bypass Path traversal	Medium4.9	—	0.5%	Sep 2, 2026
32Monitor	CVE-2026-52833No exploit	Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCEnuclio · nuclio · CWE-94 RCE	High8.0	—	0.5%	Sep 2, 2026
30Monitor	CVE-2026-53635No exploit	Open edX Platform: Insufficient Permission on set_course_mode_price()openedx · openedx-platform · CWE-862 Broken access control (IDOR)	High7.6	—	0.3%	Sep 2, 2026
28Monitor	CVE-2026-79754No exploit	Nuclio: Kaniko build tempDir command injectionnuclio · nuclio · CWE-77 RCE Command injection	High7.1	—	0.7%	Sep 2, 2026
32Monitor	CVE-2026-79755No exploit	Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)nuclio · nuclio · CWE-78 RCE Command injection	High8.0	—	0.6%	Sep 2, 2026
36Monitor	CVE-2026-79756No exploit	Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platformnuclio · nuclio · CWE-78 pre-auth RCE Command injection	High8.7	—	7.5%	Sep 2, 2026
33Monitor	CVE-2026-82404No exploit	TOON: Prototype pollution when decoding untrusted TOON inputtoon-format · toon · CWE-1321 Pre-auth Prototype pollution	High8.3	—	0.6%	Sep 2, 2026
28Monitor	CVE-2026-84809No exploit	Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecodetencent · ai-infra-guard · CWE-693 Pre-auth	High7.1	—	0.5%	Sep 2, 2026
28Monitor	CVE-2026-84810No exploit	claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scanclaude-world · claude-skill-antivirus · CWE-693 Pre-auth	High7.1	—	0.4%	Sep 2, 2026
28Monitor	CVE-2026-84811No exploit	agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecodeagentverus · agentverus-scanner · CWE-693 pre-auth RCE	High7.1	—	0.5%	Sep 2, 2026
29Monitor	CVE-2026-76782No exploit	Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102drupal · screenshot · CWE-434 File upload	High7.3	—	0.2%	Sep 2, 2026
28Monitor	CVE-2026-49249No exploit	Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2malach-it · boruta-server · CWE-400 Denial of service	High7.1	—	0.3%	Sep 2, 2026
32Monitor	CVE-2026-49832No exploit	DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDNdspace · dspace · CWE-94 RCE	High8.0	—	0.8%	Sep 2, 2026
38Monitor	CVE-2026-53649No exploit	Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCEbishopfox · joro · CWE-306 pre-auth RCE Auth bypass	Critical9.6	—	0.3%	Sep 2, 2026
37Monitor	CVE-2026-53670No exploit	PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verificationvbpf · prevail · CWE-682 Pre-auth	Critical9.3	—	0.5%	Sep 2, 2026
37Monitor	CVE-2026-53671No exploit	PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verificationvbpf · prevail · CWE-682 Pre-auth	Critical9.3	—	0.5%	Sep 2, 2026

CVE-2026-19723
28Monitor
Social Media Share Buttons & Social Sharing Icons < 3.0.1 - Reflected XSS via Pin It Share Handler
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unknown · social media share buttons & social sharing iconsSep 2, 2026
CVE-2026-77788
19Monitor
Rank Math SEO < 1.0.277 - Author+ Arbitrary Post and User Metadata Overwrite via updateSchemas
MediumCVSS 4.9No exploitEPSS 0%
- Broken access control (IDOR)
unknown · rank math seoSep 2, 2026
CVE-2026-77792
30Monitor
RegistrationMagic < 6.0.9.9 - Unauthenticated Stored XSS via Rating Field
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- XSS
unknown · registrationmagicSep 2, 2026
CVE-2026-78657
39Monitor
SigmaForms Pro <= 1.4.11 - Unauthenticated Arbitrary File Deletion via Path Traversal in File Upload Field
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Path traversal
bdthemes · sigmaforms pro – ai generated formsSep 2, 2026
CVE-2026-80467
32Monitor
Advanced Custom Fields: Extended 0.9.2.2 - 0.9.2.6 - Unauthenticated Privilege Escalation via Front-End User Insert Action
HighCVSS 8.1Proof of conceptEPSS 0%
- Pre-auth
unknown · advanced custom fields: extendedSep 2, 2026
CVE-2026-81199
21Monitor
MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics Disclosure via student/stats REST Route
MediumCVSS 5.3Proof of conceptEPSS 0%
- Pre-auth
- Info leak
unknown · masterstudy lms wordpress pluginSep 2, 2026
CVE-2026-81737
35Monitor
FAQ Builder AYS 1.6.3 - 1.8.4 - Unauthenticated Stored XSS via ays_get_user_information
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · faq builder aysSep 2, 2026
CVE-2026-81807
35Monitor
Simple Ajax Chat < 20260827 - Unauthenticated Stored XSS via Chat Message Linkification
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · simple ajax chatSep 2, 2026
CVE-2026-82183
32Monitor
OAuth Single Sign On 6.25.0 - 7.0.0 - Unauthenticated Account Takeover via Unverified Steam OpenID Assertion
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · oauth single sign onSep 2, 2026
CVE-2026-82883
28Monitor
WordPress Login With Ajax plugin <= 4.5.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
marcus · login with ajaxSep 2, 2026
CVE-2026-14828
36Monitor
Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405
HighCVSS 8.8No exploitEPSS 3%
- SQL injection
zohocorp · manageengine password manager proSep 2, 2026
CVE-2026-75528
28Monitor
Broken Link Checker <= 2.4.13 - Unauthenticated Stored Cross-Site Scripting via Comment Author URL / Link Log
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wpmudev · broken link checkerSep 2, 2026
CVE-2026-19754
34Monitor
Baserow 2.2.0 through 2.3.3 - SQL injection in formula index() JSONB array extraction
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
baserow · baserowSep 2, 2026
CVE-2024-35585
34Monitor
Oxford Nanopore MinKNOW before 24.06 relies on a client's source IP address for authentication.
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
oxford nanopore · minknowSep 2, 2026
CVE-2025-46418
30Monitor
Westermo WeOS 5.x starting from 5.24 allows OS command injection via a media definition.
HighCVSS 7.6No exploitEPSS 0%
- RCE
- Command injection
westermo · weosSep 2, 2026
CVE-2026-18672
30Monitor
RadImageEditor ClientState Unauthenticated Arbitrary File Read Vulnerability in Telerik UI for ASP.NET AJAX
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
progress software · telerik ui for asp.net ajaxSep 2, 2026
CVE-2026-19219
32Monitor
DialogHandler UploadPaths Tampering Vulnerability in Telerik UI for ASP.NET AJAX
HighCVSS 8.1Proof of conceptEPSS 0%
- pre-auth RCE
progress software · telerik ui for asp.net ajaxSep 2, 2026
CVE-2026-82958
30Monitor
In Eclipse Ditto versions [1.3.0, 3.9.6], the ImplicitThingCreationMessageMapper of the connectivity service builds a CreateThing command by
HighCVSS 7.6No exploitEPSS 0%
eclipse foundation · eclipse dittoSep 2, 2026
CVE-2026-81283
35Monitor
WordPress WP User Frontend plugin <= 4.3.10 - PHP Object Injection vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
wedevs · wp user frontendSep 2, 2026
CVE-2026-81286
37Monitor
WordPress WCFM Marketplace plugin <= 3.8.1 - SQL Injection vulnerability
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
wc lovers · wcfm marketplaceSep 2, 2026
CVE-2026-81288
28Monitor
WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.5 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
wp swings · upsell order bump offer for woocommerceSep 2, 2026
CVE-2026-81289
28Monitor
WordPress MP3 Audio Player for Music, Radio & Podcast by Sonaar plugin <= 5.13.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
sonaar · mp3 audio player for music, radio & podcast by sonaarSep 2, 2026
CVE-2026-81294
39Monitor
WordPress Authorizer plugin <= 3.15.1 - Privilege Escalation vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
paul ryan · authorizerSep 2, 2026
CVE-2026-81769
35Monitor
WordPress Booking Hub plugin <= 1.3.1 - Privilege Escalation vulnerability
HighCVSS 8.8No exploitEPSS 0%
liquidthemes · booking hubSep 2, 2026
CVE-2026-81770
28Monitor
WordPress Interactive Geo Maps plugin <= 1.6.30 - Reflected Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
mapgeo · interactive geo mapsSep 2, 2026
CVE-2026-81771
28Monitor
WordPress TrustedSite plugin <= 1.2.5 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
trustedsite · trustedsiteSep 2, 2026
CVE-2026-81772
35Monitor
WordPress Ninja Forms - Layout & Styles plugin <= 3.0.31 - PHP Object Injection vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Deserialization
saturday drive · ninja forms - layout & stylesSep 2, 2026
CVE-2026-81775
28Monitor
WordPress Estatik plugin <= 4.3.4 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
estatik · estatikSep 2, 2026
CVE-2026-84759
28Monitor
WordPress Activity Log plugin <= 2.13.1 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
elementor · activity logSep 2, 2026
CVE-2026-84764
35Monitor
WordPress Simply Schedule Appointments plugin <= 1.6.12.23 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
nsquared · simply schedule appointmentsSep 2, 2026
CVE-2026-84770
35Monitor
WordPress Mang Board WP plugin <= 2.3.8 - Cross Site Request Forgery (CSRF) vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
kitae park · mang board wpSep 2, 2026
CVE-2026-84794
28Monitor
Craft CMS 5.0.0 through 5.10.10 Authorization Bypass via assets/move-asset
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-84795
36Monitor
Craft CMS before 5.10.11 Authentication Bypass via Admin Flag Inheritance
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
craftcms · cmsSep 2, 2026
CVE-2026-84796
34Monitor
Craft CMS 5.0.0-RC1 before 5.10.11 GraphQL Entry Mutation Site Scope Bypass
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-84798
28Monitor
Craft CMS before 5.10.11 Authorization Bypass via actionDeleteForSite
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-84800
28Monitor
Craft CMS 5.0.0-RC1 before 5.10.11 File Overwrite via assets/replace-file
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-84801
34Monitor
Craft CMS 5.0.0-RC1 before 5.10.11 Authentication Bypass via administrateUsers
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-84803
34Monitor
SiYuan before v3.8.2 Stored XSS via incomplete asset blocklist
HighCVSS 8.6No exploitEPSS 0%
- XSS
siyuan-note · siyuanSep 2, 2026
CVE-2026-73475
36Monitor
Commerce PayPal - Moderately critical - Access bypass - SA-CONTRIB-2026-095
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
centarro · commerce paypalSep 2, 2026
CVE-2026-76759
29Monitor
Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102
HighCVSS 7.3No exploitEPSS 0%
- XSS
drupal · screenshotSep 2, 2026
CVE-2026-4357
40Plan
Embed HTML5 Game <= 1.3 - Unauthenticated Arbitrary File Upload
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- File upload
unknown · embed html5 gameSep 2, 2026
CVE-2026-77009
39Monitor
WatchMan-Site7 3.1.1 - 4.2.0 - Subscriber+ RCE via Debug Console
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
unknown · watchman-site7Sep 2, 2026
CVE-2026-78590
29Monitor
Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Deletion of Privileged Resources
HighCVSS 7.3No exploitEPSS 0%
- Path traversal
elastic · kibanaSep 2, 2026
CVE-2026-78604
31Monitor
Incorrect Permission Assignment for Critical Resource in Elastic Agent Leading to Local Privilege Escalation to SYSTEM
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
elastic · elastic agentSep 2, 2026
CVE-2026-79989
34Monitor
Arbitrary user password reset leading to administrator account takeover
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-79990
34Monitor
GQL entry mutation `siteId` bypasses schema site scope, enabling cross-site content read/write/delete
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
craftcms · cmsSep 2, 2026
CVE-2026-79991
28Monitor
Authenticated SQL Injection via nested eager-loading criteria
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
craftcms · cmsSep 2, 2026
CVE-2026-82955
36Monitor
In the current development version of Eclipse aeriOS, which has not yet had an official release, the KrakenD instance included in the API Ga
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Weak crypto
eclipse foundation · eclipse aeriosSep 2, 2026
CVE-2026-81774
30Monitor
WordPress WooCommerce Product Attachment plugin <= 2.3.4 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
dotstore · woocommerce product attachmentSep 2, 2026
CVE-2026-14199
32Monitor
Session takeover via Auth Proxy cache key collision
HighCVSS 8.1No exploitEPSS 0%
- Auth bypass
grafana · grafanaSep 2, 2026
CVE-2026-18058
29Monitor
The mobile Smart Connect dashboard UI was subject to manipulation by 3rd party apps.
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Broken access control (IDOR)
motorola · smart connect applicationSep 2, 2026
CVE-2026-18329
35Monitor
NGINX ngx_http_js_module vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
f5 · nginx javascriptSep 2, 2026
CVE-2026-53611
40Plan
Looking Glass: Remote Code Execution via Unanchored Regular Expression in BGPASPath Input Validation
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
as203038 · looking-glassSep 2, 2026
CVE-2026-66362
34Monitor
Description: When NGINX Plus is configured as the data plane for NGINX Gateway Fabric, an injection vulnerability exists in the NGINX config
HighCVSS 8.6No exploitEPSS 0%
f5 · nginx gateway fabricSep 2, 2026
CVE-2026-66842
34Monitor
BIG-IP and BIG-IQ Configuration utility vulnerability
HighCVSS 8.7No exploitEPSS 0%
- SSRF
f5 · big-ipSep 2, 2026
CVE-2026-77180
34Monitor
NGINX Ingress Controller vulnerability
HighCVSS 8.7No exploitEPSS 0%
f5 · nginx ingress controllerSep 2, 2026
CVE-2026-78222
34Monitor
NGINX ngx_http_js_module vulnerability
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
f5 · nginx javascriptSep 2, 2026
CVE-2026-78689
36Monitor
NGINX ngx_http_js_module vulnerablility
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Memory safety
f5 · nginx javascriptSep 2, 2026
CVE-2026-84645
35Monitor
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, objects of types marked as storing their configuration in independent top-level confi
HighCVSS 8.8No exploitEPSS 0%
- RCE
jenkins · jenkinsSep 2, 2026
CVE-2026-84647
35Monitor
In Stapler 2107.v8dfcb_e8ed317 and earlier, except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.579 and earlier, LTS 2.568.2 and earlier,
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
jenkins project · jenkinsSep 2, 2026
CVE-2026-84648
35Monitor
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, the system log viewer does not escape log record metadata (source, level, and timesta
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
jenkins · jenkinsSep 2, 2026
CVE-2026-84649
35Monitor
In Stapler 1839.ved17667b_a_eb_5 through 2107.v8dfcb_e8ed317 (both inclusive), except 2088.2093.vd7c3e58008a_6, included in Jenkins 2.447 th
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
jenkins project · jenkinsSep 2, 2026
CVE-2026-84650
35Monitor
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, transient fields cannot be excluded from deserialization, allowing attackers able to
HighCVSS 8.8No exploitEPSS 0%
- Deserialization
jenkins · jenkinsSep 2, 2026
CVE-2026-84652
29Monitor
In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the session when a user is authenticated via the "remember me
HighCVSS 7.3No exploitEPSS 0%
jenkins · jenkinsSep 2, 2026
CVE-2026-84665
32Monitor
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner
HighCVSS 8.0No exploitEPSS 0%
- XSS
jenkins project · jenkins sonarqube scanner pluginSep 2, 2026
CVE-2026-84667
28Monitor
Jenkins ThinBackup Plugin 2.1.4 and earlier allows overwriting the plugin's backup configuration through Stapler data binding, allowing atta
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
jenkins project · jenkins thinbackup pluginSep 2, 2026
CVE-2026-84668
35Monitor
Jenkins SAML Plugin 4.618.v441a_27fa_46d2 and earlier allows overwriting the SAML identity provider metadata file through Stapler data bindi
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
jenkins project · jenkins saml pluginSep 2, 2026
CVE-2026-84669
35Monitor
A path traversal vulnerability in Jenkins Allure Plugin 2.35.2 and earlier allows attackers with Item/Read permission on jobs that publish A
HighCVSS 8.8No exploitEPSS 0%
- Path traversal
jenkins project · jenkins allure pluginSep 2, 2026
CVE-2026-84670
35Monitor
Jenkins Performance Plugin 1015.v09ca_52b_3370e and earlier does not restrict the classes that can be instantiated when deserializing cached
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Deserialization
jenkins project · jenkins performance pluginSep 2, 2026
CVE-2026-84671
35Monitor
Jenkins File Parameter Plugin 425.v3fa_801681b_5e and earlier allows writing files to arbitrary locations on the Jenkins controller file sys
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
jenkins project · jenkins file parameter pluginSep 2, 2026
CVE-2026-84672
35Monitor
Jenkins Microsoft Entra ID (previously Azure AD) Plugin 710.v0b_ff8e9cc2d2 and earlier grants Entra group permissions using both the group's
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
jenkins project · jenkins microsoft entra id (previously azure ad) pluginSep 2, 2026
CVE-2026-84673
35Monitor
Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration through Stapler
HighCVSS 8.8No exploitEPSS 0%
- XSS
jenkins project · jenkins customizable header pluginSep 2, 2026
CVE-2026-84675
29Monitor
OS command injection vulnerability in Jenkins TICS Plugin 2025.1.1 and earlier allows attackers able to control build environment variable v
HighCVSS 7.4No exploitEPSS 1%
- RCE
- Command injection
jenkins project · jenkins tics pluginSep 2, 2026
CVE-2026-20212
39Monitor
Cisco Nexus 3000 and 9000 Series Switches Silicon One Hardware Abstraction Layer Remote Code Execution Vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
cisco · cisco nx-os softwareSep 2, 2026
CVE-2026-20274
39Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
cisco · ios xrSep 2, 2026
CVE-2026-20275
35Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
cisco · cisco ios xr softwareSep 2, 2026
CVE-2026-20276
34Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · ios xrSep 2, 2026
CVE-2026-20277
32Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
cisco · cisco ios xr softwareSep 2, 2026
CVE-2026-20278
35Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
HighCVSS 8.8No exploitEPSS 0%
cisco · cisco ios xr softwareSep 2, 2026
CVE-2026-20279
39Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cisco · cisco ios xr softwareSep 2, 2026
CVE-2026-20280
35Monitor
Cisco IOS XR Software Security Hardening Release: September 2026
HighCVSS 8.8No exploitEPSS 0%
cisco · ios xrSep 2, 2026
CVE-2026-20281
30Monitor
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco session initiation protocol (sip) softwareSep 2, 2026
CVE-2026-45730
33Monitor
Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
nuclio · nuclioSep 2, 2026
CVE-2026-52831
32Monitor
Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Command injection
nuclio · nuclioSep 2, 2026
CVE-2026-52832
19Monitor
Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container
MediumCVSS 4.9Proof of conceptEPSS 0%
- Auth bypass
- Path traversal
nuclio · nuclioSep 2, 2026
CVE-2026-52833
32Monitor
Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE
HighCVSS 8.0No exploitEPSS 0%
- RCE
nuclio · nuclioSep 2, 2026
CVE-2026-53635
30Monitor
Open edX Platform: Insufficient Permission on set_course_mode_price()
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
openedx · openedx-platformSep 2, 2026
CVE-2026-79754
28Monitor
Nuclio: Kaniko build tempDir command injection
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Command injection
nuclio · nuclioSep 2, 2026
CVE-2026-79755
32Monitor
Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)
HighCVSS 8.0No exploitEPSS 0%
- RCE
- Command injection
nuclio · nuclioSep 2, 2026
CVE-2026-79756
36Monitor
Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
HighCVSS 8.7No exploitEPSS 7%
- pre-auth RCE
- Command injection
nuclio · nuclioSep 2, 2026
CVE-2026-82404
33Monitor
TOON: Prototype pollution when decoding untrusted TOON input
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Prototype pollution
toon-format · toonSep 2, 2026
CVE-2026-84809
28Monitor
Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
tencent · ai-infra-guardSep 2, 2026
CVE-2026-84810
28Monitor
claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
claude-world · claude-skill-antivirusSep 2, 2026
CVE-2026-84811
28Monitor
agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode
HighCVSS 7.1No exploitEPSS 0%
- pre-auth RCE
agentverus · agentverus-scannerSep 2, 2026
CVE-2026-76782
29Monitor
Screenshot - Critical - Unsupported - SA-CONTRIB-2026-102
HighCVSS 7.3No exploitEPSS 0%
- File upload
drupal · screenshotSep 2, 2026
CVE-2026-49249
28Monitor
Boruta: Authenticated atom-exhaustion DoS in BorutaIdentityWeb.UserSettingsController.update/2
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
malach-it · boruta-serverSep 2, 2026
CVE-2026-49832
32Monitor
DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN
HighCVSS 8.0No exploitEPSS 0%
- RCE
dspace · dspaceSep 2, 2026
CVE-2026-53649
38Monitor
Joro: Unauthenticated Cross-Origin Plugin Upload Leads to RCE
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
bishopfox · joroSep 2, 2026
CVE-2026-53670
37Monitor
PREVAIL: Non-singleton typeset in add() skips offset update, allowing OOB access to pass eBPF verification
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
vbpf · prevailSep 2, 2026
CVE-2026-53671
37Monitor
PREVAIL: Context-write no-op in do_mem_store allows unsafe eBPF programs to pass verification
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
vbpf · prevailSep 2, 2026