By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 47 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-88817No exploit	Privilege escalation via legacy access group creation endpointcuriosity gmbh · curiosity workspace · CWE-269	High8.7	—	0.3%	Sep 16, 2026
31Monitor	CVE-2026-89793No exploit	ublk: clear VM_MAYWRITE on read-only ublk char device mmaplinux · linux Local privilege escalation	High7.8	—	0.1%	Sep 16, 2026
34Monitor	CVE-2026-73177No exploit	Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism ofadvantech · eki-1242ieims · CWE-345	High8.6	—	0.1%	Sep 16, 2026
32Monitor	CVE-2026-89028No exploit	MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXmikrotik · routeros · CWE-122 Pre-auth Memory safety	High8.2	—	0.5%	Sep 16, 2026
39Monitor	CVE-2026-91843Proof of concept	Stack overflow in login process to the Security Management and Log Serverscheckpoint · quantum security management · CWE-121 pre-auth RCE Memory safety	Critical9.8	—	0.5%	Sep 16, 2026
35Monitor	CVE-2026-92122No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxedjenkins · script security · CWE-693 RCE	High8.8	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-92123No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, pjenkins · script security · CWE-693 RCE	High8.8	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-92124No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from ajenkins · script security · CWE-693 RCE	High8.8	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-92125No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing attajenkins · script security · CWE-94 RCE	High8.8	—	0.5%	Sep 16, 2026
34Monitor	CVE-2026-92126No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an jenkins · script security · CWE-470	High8.5	—	0.6%	Sep 16, 2026
32Monitor	CVE-2026-92127No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when jenkins · script security · CWE-94 RCE	High8.0	—	0.6%	Sep 16, 2026
30Monitor	CVE-2026-92128No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of thejenkins · script security · CWE-494 RCE	High7.5	—	0.2%	Sep 16, 2026
30Monitor	CVE-2026-92129No exploit	Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically tojenkins · script security · CWE-693	High7.5	—	0.4%	Sep 16, 2026
32Monitor	CVE-2026-92134No exploit	Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submittejenkins project · jenkins warnings plugin · CWE-79 XSS	High8.0	—	0.4%	Sep 16, 2026
32Monitor	CVE-2026-92135No exploit	Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted thrjenkins project · jenkins coverage plugin · CWE-79 XSS	High8.0	—	0.4%	Sep 16, 2026
32Monitor	CVE-2026-92136No exploit	Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resultinjenkins project · jenkins owasp dependency-check plugin · CWE-79 XSS	High8.0	—	0.4%	Sep 16, 2026
35Monitor	CVE-2026-92137No exploit	Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is cojenkins project · jenkins robot framework plugin · CWE-22 RCE Path traversal	High8.8	—	0.8%	Sep 16, 2026
34Monitor	CVE-2026-92466No exploit	microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checkingzlt2000 · microservices-platform · CWE-862 Broken access control (IDOR)	High8.7	—	0.9%	Sep 16, 2026
34Monitor	CVE-2026-92467No exploit	microservices-platform through 6.0.0 Unverified Password Change via /users/passwordzlt2000 · microservices-platform · CWE-620	High8.7	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-92468No exploit	microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-centerzlt2000 · microservices-platform · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-92469No exploit	microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Checkzlt2000 · microservices-platform · CWE-639 Broken access control (IDOR)	High7.2	—	0.5%	Sep 16, 2026
33Monitor	CVE-2026-89795No exploit	PCI: Allow per function PCI slots to fix slot reset on s390linux · linux	High8.4	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89799No exploit	bpf: Disable preemption in bpf_get_stackidlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89801No exploit	drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSElinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89803No exploit	drm/nouveau: unsubscribe the channel-kill event before the fence contextlinux · linux	High7.8	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89804No exploit	drm/nouveau/dmem: fix mismatched DMA unmap size for large folioslinux · linux	High8.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89805No exploit	drm/pagemap: Fix folio allocation fallback and use-after-putlinux · linux	High7.8	—	0.1%	Sep 16, 2026
33Monitor	CVE-2026-89806No exploit	drm/sysfb: ofdrm: Fix integer overflow in fb_size calculationlinux · linux	High8.4	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89808No exploit	drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vramlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89810No exploit	drm/amdkfd: Fix error path at svm_migrate_copy_to_ramlinux · linux	High7.8	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89811No exploit	drm/amdkfd: Add TLB flush after MES queue eviction/suspensionlinux · linux Race condition	High8.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89814No exploit	drm/amdgpu: clamp the isolation index for rings outside a partitionlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89815No exploit	drm/ttm: Drop tt->restore after successful restorelinux · linux	High7.8	—	0.1%	Sep 16, 2026
28Monitor	CVE-2026-89818No exploit	drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count checklinux · linux	High7.1	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89819No exploit	drm/amd/display: validate plane degamma LUT size for private color proplinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89823No exploit	drm: fix race between partial drm_dev_register() failure and ioctllinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89825No exploit	drm/panthor: fix firmware control interface bounds checkslinux · linux	High7.8	—	0.1%	Sep 16, 2026
28Monitor	CVE-2026-89826No exploit	drm/panthor: harden firmware build-info bounds checkslinux · linux	High7.1	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89829No exploit	f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()linux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89832No exploit	f2fs: fix to clear dirty flag on folio in error pathlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89836No exploit	f2fs: fix folio_nr_pages() race after put in large folio invalidatelinux · linux	High7.8	—	0.1%	Sep 16, 2026
28Monitor	CVE-2026-89838No exploit	f2fs: limit recovery filename logging to stored lengthlinux · linux	High7.1	—	0.1%	Sep 16, 2026
28Monitor	CVE-2026-89840No exploit	f2fs: validate MOVE_RANGE destination sizelinux · linux	High7.1	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89841No exploit	f2fs: only redirty pinned folios in redirty_blockslinux · linux	High7.8	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89844No exploit	scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisitionlinux · linux Pre-auth	High8.8	—	0.3%	Sep 16, 2026
36Monitor	CVE-2026-89846No exploit	scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data readlinux · linux Pre-auth	Critical9.1	—	0.7%	Sep 16, 2026
39Monitor	CVE-2026-89847No exploit	scsi: qla2xxx: Avoid double completion in async IOCB timeoutlinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 16, 2026
32Monitor	CVE-2026-89848No exploit	scsi: qla2xxx: Quiesce response IRQ before freeing request queuelinux · linux Pre-auth	High8.1	—	0.5%	Sep 16, 2026
35Monitor	CVE-2026-89849No exploit	scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast pathlinux · linux Pre-auth	High8.8	—	0.3%	Sep 16, 2026
31Monitor	CVE-2026-89854No exploit	scsi: qla2xxx: Fix cs84xx use-after-free on host teardownlinux · linux	High7.8	—	0.1%	Sep 16, 2026
33Monitor	CVE-2026-89856No exploit	scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncationlinux · linux	High8.4	—	0.1%	Sep 16, 2026
39Monitor	CVE-2026-89857No exploit	scsi: qla2xxx: Hold qpair lock when sending NVMe LS rejectlinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-89860No exploit	scsi: qla2xxx: Initialize NVMe abort_work once at submissionlinux · linux Pre-auth	High8.8	—	0.3%	Sep 16, 2026
32Monitor	CVE-2026-89861No exploit	scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()linux · linux Pre-auth	High8.1	—	0.5%	Sep 16, 2026
30Monitor	CVE-2026-89863No exploit	scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete checklinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 16, 2026
31Monitor	CVE-2026-89870No exploit	media: zoran: Avoid freeing a registered video_device twicelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89873No exploit	media: v4l2-ctrls: validate HEVC EXT SPS RPS countslinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89875No exploit	media: ti: vpe: quiesce overflow recovery before freeing streamslinux · linux	High7.8	—	0.1%	Sep 16, 2026
33Monitor	CVE-2026-89877No exploit	media: saa7164: fix cleanup on resource allocation failurelinux · linux	High8.4	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89880No exploit	media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failurelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89882No exploit	media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflowlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89883No exploit	media: rc: sunxi-cir: Unregister rc device on probe failurelinux · linux	High7.8	—	0.1%	Sep 16, 2026
33Monitor	CVE-2026-89885No exploit	media: platform: mtk-mdp3: Fix SCP device refcountinglinux · linux	High8.4	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89887No exploit	media: i2c: ov7740: fix use-after-destroy in removelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89888No exploit	media: i2c: ov02a10: fix endpoint parsing use-after-freelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89890No exploit	media: go7007: defer the ALSA v4l2 put until card releaselinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89893No exploit	media: cx23885: cancel NetUP CI work before teardownlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89894No exploit	media: cx231xx: reject geometry changes while the VBI queue is busylinux · linux	High7.8	—	0.1%	Sep 16, 2026
30Monitor	CVE-2026-89897No exploit	media: cec: Serialize exclusive follower deliverylinux · linux Pre-auth	High7.5	—	0.3%	Sep 16, 2026
35Monitor	CVE-2026-89898No exploit	media: cec: extron-da-hd-4k-plus: add sanity checklinux · linux Pre-auth	High8.8	—	0.3%	Sep 16, 2026
31Monitor	CVE-2026-89899No exploit	media: cec: disable delayed work before freeing an interrupted transmitlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89902No exploit	LoongArch: Avoid preempt count underflow without probelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89903No exploit	LoongArch: Do not save/restore percpu base register in rethook trampolinelinux · linux	High7.8	—	0.1%	Sep 16, 2026
33Monitor	CVE-2026-89904No exploit	LoongArch: Fix acpi_package_ids[] array overflowlinux · linux	High8.4	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89906No exploit	LoongArch: BPF: Refactor jump offset calculation in tail calllinux · linux	High7.8	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89907No exploit	LoongArch: KVM: Validate MSI data before routing it to EIOINTClinux · linux	High8.8	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89908No exploit	LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLYlinux · linux	High8.8	—	0.1%	Sep 16, 2026
29Monitor	CVE-2026-89910No exploit	LoongArch: KVM: Fix uninitialized stack variable issue with dmsintclinux · linux	High7.3	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89911No exploit	KVM: arm64: Correctly cap TLBI Range to the architural limitlinux · linux	High7.9	—	0.1%	Sep 16, 2026
28Monitor	CVE-2026-89912No exploit	KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT savelinux · linux Denial of service	High7.1	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89913No exploit	KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tableslinux · linux	High8.8	—	0.1%	Sep 16, 2026
37Monitor	CVE-2026-89914No exploit	KVM: arm64: Sign-extend VA for range-based TLBI invalidationlinux · linux	Critical9.3	—	0.1%	Sep 16, 2026
37Monitor	CVE-2026-89915No exploit	KVM: arm64: Remove VM-wide VNCR mapping counterlinux · linux	Critical9.3	—	0.1%	Sep 16, 2026
37Monitor	CVE-2026-89916No exploit	KVM: arm64: Make VNCR invalidation participate in MMU invalidation retrylinux · linux	Critical9.3	—	0.1%	Sep 16, 2026
37Monitor	CVE-2026-89918No exploit	KVM: arm64: Correctly handle end of VA space TLBI invalidationlinux · linux	Critical9.3	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89919No exploit	KVM: s390: keyop: use mmu_lock to read gmap->ascelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89920No exploit	KVM: s390: Fix memory corruption by not reinjecting CK machine checkslinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89922No exploit	KVM: s390: Take srcu when importing watchpoint datalinux · linux	High7.8	—	0.1%	Sep 16, 2026
28Monitor	CVE-2026-89927No exploit	KVM: x86: hyper-v: Clamp stimer deadline to avoid livelocklinux · linux Denial of service	High7.1	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89928No exploit	KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walklinux · linux	High8.8	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89929No exploit	KVM: nVM: Ensure INVVPID is emulated on the correct physical CPUlinux · linux	High8.8	—	0.1%	Sep 16, 2026
37Monitor	CVE-2026-89930No exploit	KVM: nVMX: Service local TLB flushes on failed nested VM-Enterlinux · linux	Critical9.3	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89932No exploit	KVM: nVMX: Always flush vpid02 on first uselinux · linux	High8.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89938No exploit	iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAFlinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89940No exploit	iio: buffer: Tie IIO dma fence lock lifetime to the fencelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89941No exploit	iio: buffer: Make IIO DMA fence release RCU-safelinux · linux	High7.8	—	0.1%	Sep 16, 2026
31Monitor	CVE-2026-89942No exploit	iio: buffer: Fix potential use-after-free in anonymous buffer releaselinux · linux	High7.8	—	0.1%	Sep 16, 2026
33Monitor	CVE-2026-89943No exploit	ASoC: loongson: Fix error handling in ACPI property parsinglinux · linux	High8.4	—	0.1%	Sep 16, 2026
32Monitor	CVE-2026-89947No exploit	clk: meson: align gxbb_32k_clk_sel number of parents with actual countlinux · linux	High8.0	—	0.1%	Sep 16, 2026
35Monitor	CVE-2026-89951No exploit	batman-adv: fix stale receive device on merged fragmentslinux · linux Pre-auth	High8.8	—	0.3%	Sep 16, 2026

CVE-2026-88817
34Monitor
Privilege escalation via legacy access group creation endpoint
HighCVSS 8.7No exploitEPSS 0%
curiosity gmbh · curiosity workspaceSep 16, 2026
CVE-2026-89793
31Monitor
ublk: clear VM_MAYWRITE on read-only ublk char device mmap
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 16, 2026
CVE-2026-73177
34Monitor
Nozomi Networks Labs identified a CWE-345: Insufficient Verification of Data Authenticity vulnerability in the firmware upgrade mechanism of
HighCVSS 8.6No exploitEPSS 0%
advantech · eki-1242ieimsSep 16, 2026
CVE-2026-89028
32Monitor
MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
mikrotik · routerosSep 16, 2026
CVE-2026-91843
39Monitor
Stack overflow in login process to the Security Management and Log Servers
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- Memory safety
checkpoint · quantum security managementSep 16, 2026
CVE-2026-92122
35Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check the method called through the proxy created when a sandboxed
HighCVSS 8.8No exploitEPSS 0%
- RCE
jenkins · script securitySep 16, 2026
CVE-2026-92123
35Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not intercept operations performed on a null receiver (method calls, p
HighCVSS 8.8No exploitEPSS 0%
- RCE
jenkins · script securitySep 16, 2026
CVE-2026-92124
35Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier checks the operations Groovy will perform with the elements it reads from a
HighCVSS 8.8No exploitEPSS 0%
- RCE
jenkins · script securitySep 16, 2026
CVE-2026-92125
35Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject the @GroovyASTTransformationClass annotation, allowing atta
HighCVSS 8.8No exploitEPSS 0%
- RCE
jenkins · script securitySep 16, 2026
CVE-2026-92126
34Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not reject @Builder annotations whose builderStrategy member names an
HighCVSS 8.5No exploitEPSS 0%
jenkins · script securitySep 16, 2026
CVE-2026-92127
32Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically approves the classpath entries in an item configuration when
HighCVSS 8.0No exploitEPSS 0%
- RCE
jenkins · script securitySep 16, 2026
CVE-2026-92128
30Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR file specified by URL twice, confirming the approval of the
HighCVSS 7.5No exploitEPSS 0%
- RCE
jenkins · script securitySep 16, 2026
CVE-2026-92129
30Monitor
Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check calls from sandboxed scripts to methods added dynamically to
HighCVSS 7.5No exploitEPSS 0%
jenkins · script securitySep 16, 2026
CVE-2026-92134
32Monitor
Jenkins Warnings Plugin 13.10258.va_17d49a_78c3b_ and earlier does not validate the analysis results ID when a job configuration is submitte
HighCVSS 8.0No exploitEPSS 0%
- XSS
jenkins project · jenkins warnings pluginSep 16, 2026
CVE-2026-92135
32Monitor
Jenkins Coverage Plugin 3.3358.v9487dde48783 and earlier does not validate the coverage results ID when a job configuration is submitted thr
HighCVSS 8.0No exploitEPSS 0%
- XSS
jenkins project · jenkins coverage pluginSep 16, 2026
CVE-2026-92136
32Monitor
Jenkins OWASP Dependency-Check Plugin 5.6.4 and earlier does not escape CWE values from Dependency-Check reports on the Jenkins UI, resultin
HighCVSS 8.0No exploitEPSS 0%
- XSS
jenkins project · jenkins owasp dependency-check pluginSep 16, 2026
CVE-2026-92137
35Monitor
Jenkins Robot Framework Plugin 6.2.2 and earlier does not check that the archive directory configured for Robot Framework report files is co
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
jenkins project · jenkins robot framework pluginSep 16, 2026
CVE-2026-92466
34Monitor
microservices-platform through 6.0.0 Missing Authorization via Disabled URL Permission Checking
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
zlt2000 · microservices-platformSep 16, 2026
CVE-2026-92467
34Monitor
microservices-platform through 6.0.0 Unverified Password Change via /users/password
HighCVSS 8.7No exploitEPSS 0%
zlt2000 · microservices-platformSep 16, 2026
CVE-2026-92468
28Monitor
microservices-platform through 6.0.0 Arbitrary Elasticsearch Index Read via search-center
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
zlt2000 · microservices-platformSep 16, 2026
CVE-2026-92469
28Monitor
microservices-platform through 6.0.0 Arbitrary File Deletion via Missing Ownership Check
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
zlt2000 · microservices-platformSep 16, 2026
CVE-2026-89795
33Monitor
PCI: Allow per function PCI slots to fix slot reset on s390
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89799
31Monitor
bpf: Disable preemption in bpf_get_stackid
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89801
31Monitor
drm/nouveau/uvmm: fix premature region free on failed OP_UNMAP_SPARSE
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89803
31Monitor
drm/nouveau: unsubscribe the channel-kill event before the fence context
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89804
35Monitor
drm/nouveau/dmem: fix mismatched DMA unmap size for large folios
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89805
31Monitor
drm/pagemap: Fix folio allocation fallback and use-after-put
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89806
33Monitor
drm/sysfb: ofdrm: Fix integer overflow in fb_size calculation
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89808
31Monitor
drm/amdkfd: Fix the case that vm range is hole at svm_migrate_copy_to_vram
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89810
31Monitor
drm/amdkfd: Fix error path at svm_migrate_copy_to_ram
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89811
35Monitor
drm/amdkfd: Add TLB flush after MES queue eviction/suspension
HighCVSS 8.8No exploitEPSS 0%
- Race condition
linux · linuxSep 16, 2026
CVE-2026-89814
31Monitor
drm/amdgpu: clamp the isolation index for rings outside a partition
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89815
31Monitor
drm/ttm: Drop tt->restore after successful restore
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89818
28Monitor
drm/amdgpu/vcn: fix integer overflow in dec_msg buffer count check
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89819
31Monitor
drm/amd/display: validate plane degamma LUT size for private color prop
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89823
31Monitor
drm: fix race between partial drm_dev_register() failure and ioctl
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89825
31Monitor
drm/panthor: fix firmware control interface bounds checks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89826
28Monitor
drm/panthor: harden firmware build-info bounds checks
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89829
31Monitor
f2fs: fix to pass folio->index to f2fs_sanity_check_node_footer()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89832
31Monitor
f2fs: fix to clear dirty flag on folio in error path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89836
31Monitor
f2fs: fix folio_nr_pages() race after put in large folio invalidate
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89838
28Monitor
f2fs: limit recovery filename logging to stored length
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89840
28Monitor
f2fs: validate MOVE_RANGE destination size
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89841
31Monitor
f2fs: only redirty pinned folios in redirty_blocks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89844
35Monitor
scsi: qla2xxx: Hold vport_slock for host map update in report ID acquisition
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89846
36Monitor
scsi: qla2xxx: Bound rsp_info_len to avoid OOB sense-data read
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89847
39Monitor
scsi: qla2xxx: Avoid double completion in async IOCB timeout
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89848
32Monitor
scsi: qla2xxx: Quiesce response IRQ before freeing request queue
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89849
35Monitor
scsi: qla2xxx: Reject non-SCSI SRB on status IOCB fast path
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89854
31Monitor
scsi: qla2xxx: Fix cs84xx use-after-free on host teardown
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89856
33Monitor
scsi: qla2xxx: Clamp MSI-X derived queue counts to avoid truncation
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89857
39Monitor
scsi: qla2xxx: Hold qpair lock when sending NVMe LS reject
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89860
35Monitor
scsi: qla2xxx: Initialize NVMe abort_work once at submission
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89861
32Monitor
scsi: qla2xxx: Hold vport reference in qla24xx_report_id_acquisition()
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89863
30Monitor
scsi: qla2xxx: edif: Fix NULL pointer deref in RX SA delete check
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 16, 2026
CVE-2026-89870
31Monitor
media: zoran: Avoid freeing a registered video_device twice
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89873
31Monitor
media: v4l2-ctrls: validate HEVC EXT SPS RPS counts
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89875
31Monitor
media: ti: vpe: quiesce overflow recovery before freeing streams
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89877
33Monitor
media: saa7164: fix cleanup on resource allocation failure
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89880
31Monitor
media: rtl2832_sdr: release URBs and stream buffers on start_streaming() failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89882
31Monitor
media: rkvdec: hevc: guard INTER_REF_PIC_SET_PRED index underflow
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89883
31Monitor
media: rc: sunxi-cir: Unregister rc device on probe failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89885
33Monitor
media: platform: mtk-mdp3: Fix SCP device refcounting
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89887
31Monitor
media: i2c: ov7740: fix use-after-destroy in remove
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89888
31Monitor
media: i2c: ov02a10: fix endpoint parsing use-after-free
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89890
31Monitor
media: go7007: defer the ALSA v4l2 put until card release
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89893
31Monitor
media: cx23885: cancel NetUP CI work before teardown
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89894
31Monitor
media: cx231xx: reject geometry changes while the VBI queue is busy
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89897
30Monitor
media: cec: Serialize exclusive follower delivery
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89898
35Monitor
media: cec: extron-da-hd-4k-plus: add sanity check
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026
CVE-2026-89899
31Monitor
media: cec: disable delayed work before freeing an interrupted transmit
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89902
31Monitor
LoongArch: Avoid preempt count underflow without probe
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89903
31Monitor
LoongArch: Do not save/restore percpu base register in rethook trampoline
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89904
33Monitor
LoongArch: Fix acpi_package_ids[] array overflow
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89906
31Monitor
LoongArch: BPF: Refactor jump offset calculation in tail call
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89907
35Monitor
LoongArch: KVM: Validate MSI data before routing it to EIOINTC
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89908
35Monitor
LoongArch: KVM: Preserve memslot arch flags on KVM_MR_FLAGS_ONLY
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89910
29Monitor
LoongArch: KVM: Fix uninitialized stack variable issue with dmsintc
HighCVSS 7.3No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89911
31Monitor
KVM: arm64: Correctly cap TLBI Range to the architural limit
HighCVSS 7.9No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89912
28Monitor
KVM: arm64: vgic-its: Don't dereference a NULL collection on ITT save
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxSep 16, 2026
CVE-2026-89913
35Monitor
KVM: arm64: vgic-v3: take an LPI reference in vgic_v3_save_pending_tables
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89914
37Monitor
KVM: arm64: Sign-extend VA for range-based TLBI invalidation
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89915
37Monitor
KVM: arm64: Remove VM-wide VNCR mapping counter
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89916
37Monitor
KVM: arm64: Make VNCR invalidation participate in MMU invalidation retry
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89918
37Monitor
KVM: arm64: Correctly handle end of VA space TLBI invalidation
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89919
31Monitor
KVM: s390: keyop: use mmu_lock to read gmap->asce
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89920
31Monitor
KVM: s390: Fix memory corruption by not reinjecting CK machine checks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89922
31Monitor
KVM: s390: Take srcu when importing watchpoint data
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89927
28Monitor
KVM: x86: hyper-v: Clamp stimer deadline to avoid livelock
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
linux · linuxSep 16, 2026
CVE-2026-89928
35Monitor
KVM: x86/mmu: Consume the locked rmap value in the lockless rmap walk
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89929
35Monitor
KVM: nVM: Ensure INVVPID is emulated on the correct physical CPU
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89930
37Monitor
KVM: nVMX: Service local TLB flushes on failed nested VM-Enter
CriticalCVSS 9.3No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89932
35Monitor
KVM: nVMX: Always flush vpid02 on first use
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89938
31Monitor
iio: chemical: atlas-sensor: use iio_trigger_poll_nested() to fix remove UAF
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89940
31Monitor
iio: buffer: Tie IIO dma fence lock lifetime to the fence
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89941
31Monitor
iio: buffer: Make IIO DMA fence release RCU-safe
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89942
31Monitor
iio: buffer: Fix potential use-after-free in anonymous buffer release
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89943
33Monitor
ASoC: loongson: Fix error handling in ACPI property parsing
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89947
32Monitor
clk: meson: align gxbb_32k_clk_sel number of parents with actual count
HighCVSS 8.0No exploitEPSS 0%
linux · linuxSep 16, 2026
CVE-2026-89951
35Monitor
batman-adv: fix stale receive device on merged fragments
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 16, 2026