By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 49 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
38Monitor	CVE-2026-20331No exploit	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Prcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-693 Pre-auth	Critical9.6	—	0.2%	Sep 16, 2026
31Monitor	CVE-2026-71179No exploit	Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('Odell · update package framework · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	0.5%	Sep 16, 2026
31Monitor	CVE-2026-71180No exploit	Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability.dell · update package framework · CWE-252 Local privilege escalation	High7.8	—	0.1%	Sep 16, 2026
36Monitor	CVE-2026-76420No exploit	Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-285 Pre-auth Broken access control (IDOR)	Critical9.0	—	0.3%	Sep 16, 2026
30Monitor	CVE-2026-85385No exploit	Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Fieldconcretecms · concrete cms · CWE-79 Pre-auth XSS CSRF	High7.7	—	0.5%	Sep 16, 2026
29Monitor	CVE-2026-85386No exploit	Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form Blockconcretecms · concrete cms · CWE-79 XSS	High7.3	—	0.2%	Sep 16, 2026
35Monitor	CVE-2026-85731No exploit	oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)oras-project · oras-go · CWE-22 Pre-auth Path traversal	High8.8	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-86358No exploit	Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.dell · update package framework · CWE-121 Pre-auth Memory safety	High8.8	—	0.4%	Sep 16, 2026
34Monitor	CVE-2026-86359No exploit	Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability.dell · repository manager · CWE-276	High8.5	—	0.3%	Sep 16, 2026
35Monitor	CVE-2026-92398No exploit	Ruijie RG-EW3000GX user_list_note admin os command injectionruijie · rg-ew3000gx · CWE-77 RCE Command injection	High8.5	—	3.1%	Sep 16, 2026
28Monitor	CVE-2026-92600No exploit	Guns through 8.3.5 Information Disclosure via Missing Permission Checkstylefeng · guns · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-92601No exploit	Guns through 8.3.5 Improper Access Control via SysNoticeControllerstylefeng · guns · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 16, 2026
28Monitor	CVE-2026-92602No exploit	TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URLtduckcloud · tduck-survey-form · CWE-918 SSRF	High7.1	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-92603No exploit	ContiNew Admin through 4.1.0 Unauthorized Message Deletion via UserMessageControllercontinew-org · continew-admin · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 16, 2026
30Monitor	CVE-2026-19667No exploit	Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`isc · bind 9 · CWE-197 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
29Monitor	CVE-2026-61590No exploit	djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUGdjust-org · djust · CWE-306 Pre-auth Auth bypass	High7.4	—	0.3%	Sep 16, 2026
28Monitor	CVE-2026-61598No exploit	Client mass-assignment of arbitrary view attributes via the default dj-model update_model handlerdjust-org · djust · CWE-915	High7.1	—	0.4%	Sep 16, 2026
34Monitor	CVE-2026-47094No exploit	SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}simac · myphr · CWE-639 Broken access control (IDOR)	High8.7	—	0.5%	Sep 16, 2026
39Monitor	CVE-2026-51990Proof of concept	An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_helCWE-94 pre-auth RCE	Critical9.8	—	0.9%	Sep 16, 2026
32Monitor	CVE-2026-77692No exploit	Unauthenticated remote crash of named via a single DoH SIG(0) requestisc · bind 9 · CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	6.5%	Sep 16, 2026
30Monitor	CVE-2026-81563No exploit	SVCB AliasMode additional-data error leaks qpcache referencesisc · bind 9 · CWE-401 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
30Monitor	CVE-2026-81736No exploit	Remote CPU denial of service through cached SVCB/HTTPS AliasMode treesisc · bind 9 · CWE-1050 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
28Monitor	CVE-2026-92604No exploit	Scirius through 3.8.0 Arbitrary File Write via PCAP Uploadstamusnetworks · scirius · CWE-22 Path traversal	High7.2	—	0.5%	Sep 16, 2026
28Monitor	CVE-2026-92605No exploit	IRIS through 2.4.29 Unauthorized Comment Access via Object IDdfir-iris · iris-web · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 16, 2026
34Monitor	CVE-2026-92716No exploit	Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalationshuffle · shuffle · CWE-639 Broken access control (IDOR)	High8.6	—	0.4%	Sep 16, 2026
37Monitor	CVE-2026-92717No exploit	Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hubcobbr · covenant · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-92718No exploit	Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cacheprojectdiscovery · nuclei · CWE-347 RCE Weak crypto	High7.0	—	0.1%	Sep 16, 2026
34Monitor	CVE-2026-92719No exploit	Quickwit through 0.9.0 SSRF via SQS queue_url Parameterquickwit-oss · quickwit · CWE-918 Pre-auth SSRF	High8.7	—	0.4%	Sep 16, 2026
37Monitor	CVE-2026-92720No exploit	Kubero through 3.1.1 Unauthenticated Notifications API Accesskubero-dev · kubero · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.6%	Sep 16, 2026
30Monitor	CVE-2026-38999No exploit	A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackersCWE-476 Pre-auth Memory safety Denial of service	High7.5	—	1.3%	Sep 16, 2026
31Monitor	CVE-2026-63325No exploit	Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`redocly · redocly-cli · CWE-94 RCE Local privilege escalation	High7.8	—	0.2%	Sep 16, 2026
39Monitor	CVE-2026-68536No exploit	Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerabilityapache software foundation · apache myfaces · CWE-918 Pre-auth SSRF	Critical9.8	—	0.4%	Sep 16, 2026
36Monitor	CVE-2026-73456No exploit	Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administarista networks · eos · CWE-94 pre-auth RCE	Critical9.2	—	0.6%	Sep 16, 2026
28Monitor	CVE-2026-73462No exploit	On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacenarista networks · eos · CWE-125 Pre-auth Memory safety	High7.1	—	0.2%	Sep 16, 2026
30Monitor	CVE-2026-19666No exploit	Use-after-free in query_addnoqnameproof() via the DNS64 filter64 pathisc · bind 9 · CWE-416 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Sep 16, 2026
34Monitor	CVE-2026-75516No exploit	RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcementrabbitmq · rabbitmq-java-client · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Sep 16, 2026
32Monitor	CVE-2026-63127No exploit	RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discoverymodelcontextprotocol · rust-sdk · CWE-345 Pre-auth	High8.2	—	0.1%	Sep 16, 2026
30Monitor	CVE-2026-63128No exploit	RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-servicemodelcontextprotocol · rust-sdk · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
33Monitor	CVE-2026-79298Proof of concept	An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrarCWE-693 RCE	High8.4	—	0.1%	Sep 16, 2026
30Monitor	CVE-2026-76163No exploit	named aborts on a TKEY query when the user configuration has no global options statementisc · bind 9 · CWE-617 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
30Monitor	CVE-2026-82399No exploit	CoreDNS: Unauthenticated memory exhaustion in custom transportscoredns · coredns · CWE-770 Pre-auth Denial of service	High7.5	—	0.6%	Sep 16, 2026
30Monitor	CVE-2026-86003No exploit	CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCPcoredns · coredns · CWE-441 Pre-auth	High7.5	—	0.4%	Sep 16, 2026
30Monitor	CVE-2026-86043No exploit	Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)zalando · skipper · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Sep 16, 2026
30Monitor	CVE-2026-80274No exploit	Validating resolver can abort while caching a mismatched NOQNAME proofisc · bind 9 · CWE-617 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
34Monitor	CVE-2026-82410No exploit	Pocketbase: Unhandled panic in worker goroutinespocketbase · pocketbase · CWE-248 Pre-auth	High8.7	—	0.5%	Sep 16, 2026
30Monitor	CVE-2026-84997No exploit	react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPUreactphp · http · CWE-835 Pre-auth Denial of service	High7.5	—	0.6%	Sep 16, 2026
28Monitor	CVE-2026-91097Proof of concept	HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-787 pre-auth RCE Memory safety	High7.0	—	1.0%	Sep 16, 2026
34Monitor	CVE-2026-91098No exploit	HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 pre-auth RCE Memory safety	High8.6	—	1.0%	Sep 16, 2026
33Monitor	CVE-2026-91102No exploit	HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-78 RCE Local privilege escalation Command injection	High8.4	—	0.7%	Sep 16, 2026
37Monitor	CVE-2026-91104No exploit	HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 pre-auth RCE Memory safety	Critical9.3	—	1.0%	Sep 16, 2026
34Monitor	CVE-2026-91105No exploit	HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 pre-auth RCE Memory safety	High8.6	—	1.0%	Sep 16, 2026
37Monitor	CVE-2026-91106No exploit	HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilitieshp · linux imaging and printing · CWE-122 pre-auth RCE Memory safety	Critical9.3	—	1.0%	Sep 16, 2026
35Monitor	CVE-2026-88064No exploit	Backstage: Improper input validation in TechDocs MkDocs configurationlinuxfoundation · backstage plugin-techdocs-node · CWE-20	High8.8	—	1.1%	Sep 16, 2026
28Monitor	CVE-2026-92417No exploit	Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereferenceCWE-404	High7.1	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-92729No exploit	SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpointssignoz · signoz · CWE-306 Pre-auth Auth bypass	High8.8	—	0.5%	Sep 16, 2026
36Monitor	CVE-2025-43936No exploit	Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.dell · objectscale · CWE-287 Pre-auth Auth bypass	Critical9.1	—	0.4%	Sep 16, 2026
39Monitor	CVE-2025-59953No exploit	LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeployinternlm · lmdeploy · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.8%	Sep 16, 2026
32Monitor	CVE-2026-61593No exploit	djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE sessiondjust-org · djust · CWE-352 Pre-auth CSRF	High8.1	—	0.2%	Sep 16, 2026
30Monitor	CVE-2026-61595No exploit	djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' datadjust-org · djust · CWE-636	High7.7	—	0.3%	Sep 16, 2026
40Plan	CVE-2026-20130No exploit	Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilitiescisco · identity services engine · CWE-74 Pre-auth	Critical10.0	—	0.5%	Sep 16, 2026
36Monitor	CVE-2026-20176No exploit	Cisco Identity Services Engine Remote Code Execution Vulnerabilitycisco · cisco identity services engine software · CWE-77 RCE Command injection	Critical9.1	—	0.8%	Sep 16, 2026
40Plan	CVE-2026-20192No exploit	Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilitiescisco · identity services engine · CWE-284 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.4%	Sep 16, 2026
36Monitor	CVE-2026-20194No exploit	Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilitiescisco · cisco identity services engine software · CWE-669	Critical9.1	—	0.4%	Sep 16, 2026
36Monitor	CVE-2026-20211No exploit	Cisco Identity Services Engine Remote Code Execution Vulnerabilitycisco · cisco identity services engine software · CWE-502 RCE Deserialization	Critical9.1	—	0.8%	Sep 16, 2026
36Monitor	CVE-2026-20237No exploit	Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilitiescisco · cisco identity services engine software · CWE-20	Critical9.1	—	0.4%	Sep 16, 2026
39Monitor	CVE-2026-20242No exploit	Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.8%	Sep 16, 2026
39Monitor	CVE-2026-20322No exploit	Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Controlcisco · cisco nexus dashboard · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Sep 16, 2026
39Monitor	CVE-2026-20324No exploit	Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-862 RCE Broken access control (IDOR)	Critical9.9	—	0.6%	Sep 16, 2026
39Monitor	CVE-2026-20325No exploit	Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Commandcisco · cisco nexus dashboard · CWE-77 RCE Command injection	Critical9.9	—	0.4%	Sep 16, 2026
39Monitor	CVE-2026-20326No exploit	Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Functioncisco · cisco nexus dashboard · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Sep 16, 2026
39Monitor	CVE-2026-20329Proof of concept	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Excisco · cisco secure firewall adaptive security appliance (asa) software · CWE-703	Critical9.9	—	0.4%	Sep 16, 2026
39Monitor	CVE-2026-20330No exploit	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Imcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-707	Critical9.9	—	0.4%	Sep 16, 2026
36Monitor	CVE-2026-20341No exploit	Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-502 RCE Deserialization	Critical9.1	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-20361No exploit	Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injectioncisco · cisco nexus dashboard · CWE-89 SQL injection	High8.8	—	0.4%	Sep 16, 2026
30Monitor	CVE-2026-70469No exploit	Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requestsapache · nifi · CWE-409 Pre-auth	High7.5	—	0.6%	Sep 16, 2026
40Plan	CVE-2026-76423No exploit	Cisco ISE API Authentication Bypass Vulnerabilitycisco · cisco identity services engine software · CWE-290 Pre-auth Auth bypass	Critical10.0	—	0.5%	Sep 16, 2026
30Monitor	CVE-2026-76646No exploit	Apache MyFaces: Denial of Service via Unbounded Request Parsingapache software foundation · apache myfaces · CWE-400 Pre-auth Denial of service	High7.5	—	0.5%	Sep 16, 2026
28Monitor	CVE-2026-86865No exploit	Tanium addressed a SQL injection vulnerability in Asset.tanium · asset · CWE-89 SQL injection	High7.2	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-87024No exploit	Tanium addressed a SQL injection vulnerability in Asset.tanium · asset · CWE-89 SQL injection	High7.2	—	0.4%	Sep 16, 2026
35Monitor	CVE-2026-87105No exploit	Tanium addressed a SQL injection vulnerability in Threat Response.tanium · threat response · CWE-89 SQL injection	High8.8	—	0.4%	Sep 16, 2026
28Monitor	CVE-2026-87976No exploit	Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundlesapache · nifi · CWE-22 Path traversal	High7.2	—	0.7%	Sep 16, 2026
36Monitor	CVE-2026-88592No exploit	kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).CWE-345 Pre-auth SSRF	Critical9.1	—	0.2%	Sep 16, 2026
37Monitor	CVE-2026-89082No exploit	HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Writehp inc · hp ac print & scan · CWE-94 pre-auth RCE	Critical9.3	—	0.6%	Sep 16, 2026
37Monitor	CVE-2026-89083No exploit	HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Writehp inc · hp ac print & scan · CWE-94 pre-auth RCE	Critical9.3	—	0.6%	Sep 16, 2026
35Monitor	CVE-2026-89084No exploit	HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Writehp inc · hp ac print & scan · CWE-22 pre-auth RCE Path traversal	High8.8	—	0.7%	Sep 16, 2026
40Plan	CVE-2026-92808No exploit	Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromisealtium · altium enterprise server · CWE-306 Pre-auth Auth bypass SSRF	Critical10.0	—	0.5%	Sep 16, 2026
34Monitor	CVE-2026-20135No exploit	Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerabilitycisco · cisco secure firewall threat defense (ftd) software · CWE-415 Pre-auth Memory safety Denial of service	High8.6	—	0.6%	Sep 16, 2026
34Monitor	CVE-2026-20154No exploit	Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Servicecisco · cisco secure firewall adaptive security appliance (asa) software · CWE-835 Pre-auth Denial of service	High8.6	—	0.5%	Sep 16, 2026
29Monitor	CVE-2026-20222No exploit	Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerabilitycisco · cisco secure firewall adaptive security appliance (asa) software · CWE-401 Pre-auth Denial of service	High7.4	—	0.2%	Sep 16, 2026
30Monitor	CVE-2026-20247No exploit	Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerabilitycisco · cisco identity services engine software · CWE-89 Pre-auth SQL injection	High7.5	—	0.4%	Sep 16, 2026
34Monitor	CVE-2026-20249No exploit	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerabilitycisco · cisco secure firewall adaptive security appliance (asa) software · CWE-704 Pre-auth Denial of service	High8.6	—	0.4%	Sep 16, 2026
34Monitor	CVE-2026-20250No exploit	Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerabcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-772 Pre-auth Denial of service	High8.6	—	0.5%	Sep 16, 2026
36Monitor	CVE-2026-20284No exploit	Cisco Identity Search Engine SXP REST API SQL Injection Vulnerabilitycisco · cisco identity services engine software · CWE-943 SQL injection	Critical9.1	—	0.5%	Sep 16, 2026
34Monitor	CVE-2026-20295No exploit	Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-789 Pre-auth Denial of service	High8.6	—	0.5%	Sep 16, 2026
28Monitor	CVE-2026-20300No exploit	Cisco Identity Services Engine SQL Injection Vulnerabilitycisco · cisco identity services engine software · CWE-89 SQL injection	High7.1	—	0.3%	Sep 16, 2026
33Monitor	CVE-2026-20323No exploit	Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerabilitycisco · cisco secure firewall management center (fmc) · CWE-295 Pre-auth Auth bypass Weak crypto	High8.3	—	0.1%	Sep 16, 2026
39Monitor	CVE-2026-20332No exploit	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Imcisco · cisco secure firewall adaptive security appliance (asa) software · CWE-284 Broken access control (IDOR)	Critical9.9	—	0.4%	Sep 16, 2026
35Monitor	CVE-2026-20333No exploit	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incisco · cisco secure firewall adaptive security appliance (asa) software · CWE-697	High8.8	—	0.4%	Sep 16, 2026
33Monitor	CVE-2026-20334No exploit	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Cocisco · cisco secure firewall adaptive security appliance (asa) software · CWE-710	High8.4	—	0.3%	Sep 16, 2026
32Monitor	CVE-2026-20335No exploit	Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Incisco · cisco secure firewall adaptive security appliance (asa) software · CWE-682 Pre-auth	High8.1	—	0.3%	Sep 16, 2026

CVE-2026-20331
38Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Pr
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-71179
31Monitor
Dell Update Package Framework, versions prior to 26.07.03, contains an Improper Neutralization of Special Elements used in an OS Command ('O
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
dell · update package frameworkSep 16, 2026
CVE-2026-71180
31Monitor
Dell Update Package Framework, versions prior to 26.07.03, contains an Unchecked Return Value vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
dell · update package frameworkSep 16, 2026
CVE-2026-76420
36Monitor
Cisco Secure Firewall Management Center Software Impersonated sftunnel Connection Vulnerability
CriticalCVSS 9.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cisco · cisco secure firewall management center (fmc)Sep 16, 2026
CVE-2026-85385
30Monitor
Concrete CMS below 9.5.4 is vulnerable to Stored XSS via User Timezone Field
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
concretecms · concrete cmsSep 16, 2026
CVE-2026-85386
29Monitor
Concrete CMS before 9.5.4 stored is vulneratble to cross-site scripting via unauthenticated XML/XSLT file upload in the Form Block
HighCVSS 7.3No exploitEPSS 0%
- XSS
concretecms · concrete cmsSep 16, 2026
CVE-2026-85731
35Monitor
oras-go: Arbitrary file write outside file.Store root via symlink-chain bypass in tar extraction (pushDir)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
oras-project · oras-goSep 16, 2026
CVE-2026-86358
35Monitor
Dell Update Package Framework, versions prior to 26.07.03, contains a Stack-based Buffer Overflow vulnerability.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
dell · update package frameworkSep 16, 2026
CVE-2026-86359
34Monitor
Dell Repository Manager, versions prior to 3.5.2, contains an Incorrect Default Permissions vulnerability.
HighCVSS 8.5No exploitEPSS 0%
dell · repository managerSep 16, 2026
CVE-2026-92398
35Monitor
Ruijie RG-EW3000GX user_list_note admin os command injection
HighCVSS 8.5No exploitEPSS 3%
- RCE
- Command injection
ruijie · rg-ew3000gxSep 16, 2026
CVE-2026-92600
28Monitor
Guns through 8.3.5 Information Disclosure via Missing Permission Check
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
stylefeng · gunsSep 16, 2026
CVE-2026-92601
28Monitor
Guns through 8.3.5 Improper Access Control via SysNoticeController
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
stylefeng · gunsSep 16, 2026
CVE-2026-92602
28Monitor
TDuck survey form through 5.3 Server-Side Request Forgery via Unvalidated Webhook URL
HighCVSS 7.1No exploitEPSS 0%
- SSRF
tduckcloud · tduck-survey-formSep 16, 2026
CVE-2026-92603
28Monitor
ContiNew Admin through 4.1.0 Unauthorized Message Deletion via UserMessageController
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
continew-org · continew-adminSep 16, 2026
CVE-2026-19667
30Monitor
Remote assertion failure via 16-bit length truncation in `dns_ncache_add()`
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-61590
29Monitor
djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
djust-org · djustSep 16, 2026
CVE-2026-61598
28Monitor
Client mass-assignment of arbitrary view attributes via the default dj-model update_model handler
HighCVSS 7.1No exploitEPSS 0%
djust-org · djustSep 16, 2026
CVE-2026-47094
34Monitor
SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employes/put/{id}
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
simac · myphrSep 16, 2026
CVE-2026-51990
39Monitor
An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary code via the biz_hel
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
Sep 16, 2026
CVE-2026-77692
32Monitor
Unauthenticated remote crash of named via a single DoH SIG(0) request
HighCVSS 7.5No exploitEPSS 6%
- Pre-auth
- Memory safety
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-81563
30Monitor
SVCB AliasMode additional-data error leaks qpcache references
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-81736
30Monitor
Remote CPU denial of service through cached SVCB/HTTPS AliasMode trees
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-92604
28Monitor
Scirius through 3.8.0 Arbitrary File Write via PCAP Upload
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
stamusnetworks · sciriusSep 16, 2026
CVE-2026-92605
28Monitor
IRIS through 2.4.29 Unauthorized Comment Access via Object ID
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
dfir-iris · iris-webSep 16, 2026
CVE-2026-92716
34Monitor
Shuffle through 2.2.1 API Key Reset Cross-Tenant Privilege Escalation
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
shuffle · shuffleSep 16, 2026
CVE-2026-92717
37Monitor
Covenant through 0.6 Missing Authentication on the CovenantHub SignalR Hub
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
cobbr · covenantSep 16, 2026
CVE-2026-92718
28Monitor
Nuclei from 3.7.0 before 3.11.1 Template Signature Bypass via Modification-Time-Only Cache
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Weak crypto
projectdiscovery · nucleiSep 16, 2026
CVE-2026-92719
34Monitor
Quickwit through 0.9.0 SSRF via SQS queue_url Parameter
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
quickwit-oss · quickwitSep 16, 2026
CVE-2026-92720
37Monitor
Kubero through 3.1.1 Unauthenticated Notifications API Access
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
kubero-dev · kuberoSep 16, 2026
CVE-2026-38999
30Monitor
A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_scheduler.c) of Monkey through commit 4fb0c16 allows attackers
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Memory safety
- Denial of service
Sep 16, 2026
CVE-2026-63325
31Monitor
Redocly CLI: Arbitrary code execution via Arazzo `$faker` expression using `respect`
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
redocly · redocly-cliSep 16, 2026
CVE-2026-68536
39Monitor
Apache MyFaces: Server-Side Request Forgery / Local File Inclusion Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SSRF
apache software foundation · apache myfacesSep 16, 2026
CVE-2026-73456
36Monitor
Under certain circumstances, an unauthenticated gNPSI client can craft a malicious request to allow arbitrary code execution, granting an attacker full administ
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
arista networks · eosSep 16, 2026
CVE-2026-73462
28Monitor
On affected platforms running Arista EOS with IGMP (Internet Group Management Protocol) snooping configured (enabled by default on all VLANs), a network-adjacen
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
arista networks · eosSep 16, 2026
CVE-2026-19666
30Monitor
Use-after-free in query_addnoqnameproof() via the DNS64 filter64 path
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-75516
34Monitor
RabbitMQ Java client: Frame-level OOM: Math.min(maxInboundMessageBodySize, 0) defeats frame size enforcement
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
rabbitmq · rabbitmq-java-clientSep 16, 2026
CVE-2026-63127
32Monitor
RMCP: Missing Resource Field Validation in OAuth Protected Resource Metadata Discovery
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
modelcontextprotocol · rust-sdkSep 16, 2026
CVE-2026-63128
30Monitor
RMCP: Unauthenticated permanent session-table leak in rmcp Streamable HTTP server transport leads to remote denial-of-service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
modelcontextprotocol · rust-sdkSep 16, 2026
CVE-2026-79298
33Monitor
An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fixed in v.11.3.0.34 allows a local attcker to execute arbitrar
HighCVSS 8.4Proof of conceptEPSS 0%
- RCE
Sep 16, 2026
CVE-2026-76163
30Monitor
named aborts on a TKEY query when the user configuration has no global options statement
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-82399
30Monitor
CoreDNS: Unauthenticated memory exhaustion in custom transports
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
coredns · corednsSep 16, 2026
CVE-2026-86003
30Monitor
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced on UDP/TCP
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
coredns · corednsSep 16, 2026
CVE-2026-86043
30Monitor
Skipper: OPA body-authz bypass: truncated_body mitigation fails open on chunked/HTTP-2 (incomplete fix CVE-2026-50197)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
zalando · skipperSep 16, 2026
CVE-2026-80274
30Monitor
Validating resolver can abort while caching a mismatched NOQNAME proof
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
isc · bind 9Sep 16, 2026
CVE-2026-82410
34Monitor
Pocketbase: Unhandled panic in worker goroutines
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
pocketbase · pocketbaseSep 16, 2026
CVE-2026-84997
30Monitor
react/http: A malformed HTTP chunked body can lead to a denial-of-service and peg the CPU
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
reactphp · httpSep 16, 2026
CVE-2026-91097
28Monitor
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HighCVSS 7.0Proof of conceptEPSS 1%
- pre-auth RCE
- Memory safety
hp · linux imaging and printingSep 16, 2026
CVE-2026-91098
34Monitor
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HighCVSS 8.6No exploitEPSS 1%
- pre-auth RCE
- Memory safety
hp · linux imaging and printingSep 16, 2026
CVE-2026-91102
33Monitor
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
hp · linux imaging and printingSep 16, 2026
CVE-2026-91104
37Monitor
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Memory safety
hp · linux imaging and printingSep 16, 2026
CVE-2026-91105
34Monitor
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
HighCVSS 8.6No exploitEPSS 1%
- pre-auth RCE
- Memory safety
hp · linux imaging and printingSep 16, 2026
CVE-2026-91106
37Monitor
HP Linux Imaging and Printing (HPLIP) Software– Multiple Vulnerabilities
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Memory safety
hp · linux imaging and printingSep 16, 2026
CVE-2026-88064
35Monitor
Backstage: Improper input validation in TechDocs MkDocs configuration
HighCVSS 8.8No exploitEPSS 1%
linuxfoundation · backstage plugin-techdocs-nodeSep 16, 2026
CVE-2026-92417
28Monitor
Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement null pointer dereference
HighCVSS 7.1No exploitEPSS 0%
Sep 16, 2026
CVE-2026-92729
35Monitor
SigNoz 0.88.0 through 0.141.0 - Missing Authentication on Trace Funnel Analytics Endpoints
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
signoz · signozSep 16, 2026
CVE-2025-43936
36Monitor
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
dell · objectscaleSep 16, 2026
CVE-2025-59953
39Monitor
LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
internlm · lmdeploySep 16, 2026
CVE-2026-61593
32Monitor
djust has Cross-Site Request Forgery on the Server-Sent-Events transport: a cross-origin page can drive a victim-authenticated SSE session
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- CSRF
djust-org · djustSep 16, 2026
CVE-2026-61595
30Monitor
djust: Multi-tenant isolation fails open on the WebSocket/SSE path, disclosing other tenants' data
HighCVSS 7.7No exploitEPSS 0%
djust-org · djustSep 16, 2026
CVE-2026-20130
40Plan
Cisco Identity Services Engine Hardening Release - Improper Neutralization Vulnerabilities
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
cisco · identity services engineSep 16, 2026
CVE-2026-20176
36Monitor
Cisco Identity Services Engine Remote Code Execution Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Command injection
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20192
40Plan
Cisco Identity Services Engine Hardening Release - Access Control Vulnerabilities
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cisco · identity services engineSep 16, 2026
CVE-2026-20194
36Monitor
Cisco Identity Services Engine Hardening Release - Incorrect Resource Transfer Vulnerabilities
CriticalCVSS 9.1No exploitEPSS 0%
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20211
36Monitor
Cisco Identity Services Engine Remote Code Execution Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Deserialization
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20237
36Monitor
Cisco Identity Services Engine Hardening Release - Input Validation Vulnerabilities
CriticalCVSS 9.1No exploitEPSS 0%
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20242
39Monitor
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
cisco · cisco secure firewall management center (fmc)Sep 16, 2026
CVE-2026-20322
39Monitor
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Access Control
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
cisco · cisco nexus dashboardSep 16, 2026
CVE-2026-20324
39Monitor
Cisco Secure Firewall Management Center sftunnel Root Arbitrary Code Exectution Vulnerability
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
cisco · cisco secure firewall management center (fmc)Sep 16, 2026
CVE-2026-20325
39Monitor
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Neutralization of Special Elements used in a Command
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
cisco · cisco nexus dashboardSep 16, 2026
CVE-2026-20326
39Monitor
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Missing Authentication for Critical Function
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
cisco · cisco nexus dashboardSep 16, 2026
CVE-2026-20329
39Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Ex
CriticalCVSS 9.9Proof of conceptEPSS 0%
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20330
39Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Im
CriticalCVSS 9.9No exploitEPSS 0%
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20341
36Monitor
Cisco Secure Firewall Management Center Software sftunnel Deserialization Root Command Execution Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- Deserialization
cisco · cisco secure firewall management center (fmc)Sep 16, 2026
CVE-2026-20361
35Monitor
Cisco Nexus Dashboard Software Security Hardening Release September 2026 - SQL Injection
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
cisco · cisco nexus dashboardSep 16, 2026
CVE-2026-70469
30Monitor
Apache NiFi: Improper Handling of Case Sensitivity for Content-Encoding in HTTP Requests
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
apache · nifiSep 16, 2026
CVE-2026-76423
40Plan
Cisco ISE API Authentication Bypass Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-76646
30Monitor
Apache MyFaces: Denial of Service via Unbounded Request Parsing
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache myfacesSep 16, 2026
CVE-2026-86865
28Monitor
Tanium addressed a SQL injection vulnerability in Asset.
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
tanium · assetSep 16, 2026
CVE-2026-87024
28Monitor
Tanium addressed a SQL injection vulnerability in Asset.
HighCVSS 7.2No exploitEPSS 0%
- SQL injection
tanium · assetSep 16, 2026
CVE-2026-87105
35Monitor
Tanium addressed a SQL injection vulnerability in Threat Response.
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
tanium · threat responseSep 16, 2026
CVE-2026-87976
28Monitor
Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
apache · nifiSep 16, 2026
CVE-2026-88592
36Monitor
kkFileView >= 4.2.0 is vulnerable to Server-Side Request Forgery (SSRF).
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- SSRF
Sep 16, 2026
CVE-2026-89082
37Monitor
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
hp inc · hp ac print & scanSep 16, 2026
CVE-2026-89083
37Monitor
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
hp inc · hp ac print & scanSep 16, 2026
CVE-2026-89084
35Monitor
HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Path traversal
hp inc · hp ac print & scanSep 16, 2026
CVE-2026-92808
40Plan
Server-Side Request Forgery in Altium Enterprise Server UnifiedLogin Service Allows Unauthenticated System Compromise
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
- SSRF
altium · altium enterprise serverSep 16, 2026
CVE-2026-20135
34Monitor
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
cisco · cisco secure firewall threat defense (ftd) softwareSep 16, 2026
CVE-2026-20154
34Monitor
Cisco Secure Firewall Adaptive Security Appliance Software and Secure Firewall Threat Defense Software Logging Denial of Service
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20222
29Monitor
Cisco Secure Adaptive Security Appliance Software and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20247
30Monitor
Cisco Identity Services Engine Unauthenticated SQL Injection Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20249
34Monitor
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20250
34Monitor
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerab
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20284
36Monitor
Cisco Identity Search Engine SXP REST API SQL Injection Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- SQL injection
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20295
34Monitor
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Memory Exhaustion Denial of Service Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
cisco · cisco secure firewall management center (fmc)Sep 16, 2026
CVE-2026-20300
28Monitor
Cisco Identity Services Engine SQL Injection Vulnerability
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
cisco · cisco identity services engine softwareSep 16, 2026
CVE-2026-20323
33Monitor
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Unauthorized Authentication Bypass Vulnerability
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
cisco · cisco secure firewall management center (fmc)Sep 16, 2026
CVE-2026-20332
39Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Im
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20333
35Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - In
HighCVSS 8.8No exploitEPSS 0%
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20334
33Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Co
HighCVSS 8.4No exploitEPSS 0%
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026
CVE-2026-20335
32Monitor
Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - In
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
cisco · cisco secure firewall adaptive security appliance (asa) softwareSep 16, 2026