By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 5 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-53706No exploit	PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programsvbpf · prevail · CWE-682 Pre-auth	High8.8	—	0.5%	Sep 2, 2026
30Monitor	CVE-2026-77124No exploit	Nexus Repository 3 - Script Execution Disable Setting Not Enforcedsonatype · nexus repository manager · CWE-184	High7.5	—	0.7%	Sep 2, 2026
28Monitor	CVE-2026-77125No exploit	Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpointssonatype · nexus repository manager · CWE-863 Broken access control (IDOR)	High7.1	—	0.2%	Sep 2, 2026
22Monitor	CVE-2026-84380Proof of concept	HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generatedpydantic · httpx2 · CWE-444 Pre-auth	Medium5.6	—	0.2%	Sep 2, 2026
39Monitor	CVE-2026-19117No exploit	Delinea Secret Server FIDO2 credential registration authentication bypass vulnerabilitydelinea · secret server (on-prem) · CWE-290 Pre-auth Auth bypass	Critical9.8	—	0.4%	Sep 2, 2026
30Monitor	CVE-2024-7956No exploit	Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloudrockwell automation · datamosaix™ private cloud · CWE-287 Auth bypass	High7.6	—	0.3%	Sep 2, 2026
32Monitor	CVE-2025-15485No exploit	Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Callunknown · auto x line · CWE-862 Pre-auth Broken access control (IDOR)	High8.2	—	0.3%	Sep 2, 2026
39Monitor	CVE-2025-9314No exploit	Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Uploadunknown · developer tools · CWE-434 Pre-auth File upload	Critical9.8	—	0.5%	Sep 2, 2026
32Monitor	CVE-2026-84381No exploit	HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxiespydantic · httpx2 · CWE-319 Pre-auth Weak crypto	High8.1	—	0.0%	Sep 2, 2026
30Monitor	CVE-2026-84382No exploit	HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)pydantic · httpx2 · CWE-409 Pre-auth Denial of service	High7.5	—	0.6%	Sep 2, 2026
31Monitor	CVE-2026-78408No exploit	Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authorityred hat · red hat hardened images · CWE-775 Local privilege escalation	High7.9	—	0.2%	Sep 2, 2026
28Monitor	CVE-2026-78409No exploit	Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinksred hat · red hat hardened images · CWE-59 Local privilege escalation	High7.0	—	0.1%	Sep 2, 2026
31Monitor	CVE-2026-78410No exploit	Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirectionred hat · red hat hardened images · CWE-367 Local privilege escalation Race condition	High7.8	—	0.1%	Sep 2, 2026
31Monitor	CVE-2026-84837No exploit	Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball pathred hat · red hat enterprise linux 10 · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	0.7%	Sep 2, 2026
31Monitor	CVE-2026-84838No exploit	Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()red hat · red hat enterprise linux 10 · CWE-78 RCE Command injection	High7.8	—	1.1%	Sep 2, 2026
29Monitor	CVE-2023-20577No exploit	A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially resamd · 2nd gen amd epyc™ processors · CWE-121 RCE Memory safety	High7.4	—	0.1%	Sep 2, 2026
30Monitor	CVE-2026-56855No exploit	Prevent DoS on deadlocked established channel in golang.org/x/crypto/sshgolang · crypto · CWE-770 Pre-auth Denial of service	High7.5	—	0.5%	Sep 2, 2026
30Monitor	CVE-2026-78662No exploit	Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/sshgolang · crypto · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Sep 2, 2026
36Monitor	CVE-2026-66786No exploit	Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnetsred hat · red hat advanced cluster management for kubernetes 2.17 · CWE-94 RCE	Critical9.1	—	1.3%	Sep 2, 2026
30Monitor	CVE-2023-20576No exploit	Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of seramd · amd ryzen™ 3000 series desktop processors · CWE-345 Local privilege escalation	High7.7	—	0.1%	Sep 2, 2026
34Monitor	CVE-2026-82524No exploit	UnoPim File Upload RCE via TinyMCE Image Upload Endpointunopim · unopim · CWE-434 RCE File upload	High8.6	—	0.6%	Sep 2, 2026
30Monitor	CVE-2026-84292No exploit	fast-uri vulnerable to authority injection via an unvalidated port in serializeopenjsf · fast-uri · CWE-116 Pre-auth	High7.5	—	0.2%	Sep 2, 2026
34Monitor	CVE-2026-84452No exploit	Windows ML CLI: CORS misconfig enables localhost RCEmicrosoft · winml-cli · CWE-306 pre-auth RCE Auth bypass	High8.6	—	1.6%	Sep 2, 2026
30Monitor	CVE-2026-84394No exploit	fast-uri vulnerable to host confusion via an unclosed bracket in the URI authorityopenjsf · fast-uri · CWE-436 Pre-auth SSRF	High7.5	—	0.3%	Sep 3, 2026
34Monitor	CVE-2026-84851No exploit	Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6amazon · ion-c · CWE-674 Pre-auth Denial of service	High8.7	—	0.6%	Sep 3, 2026
32Monitor	CVE-2021-38489No exploit	HDD Password Stored In Plaintextinsyde software · insydeh2o · CWE-256	High8.2	—	0.1%	Sep 3, 2026
30Monitor	CVE-2026-3416No exploit	Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloadswso2 · api control plane · CWE-330 Pre-auth Weak crypto	High7.5	—	0.3%	Sep 3, 2026
37Monitor	CVE-2026-76174No exploit	Multiple vulnerabilities in Ocsreports for OCS Inventory NGocs inventory ng · ocsreports · CWE-434 RCE File upload	Critical9.4	—	0.5%	Sep 3, 2026
34Monitor	CVE-2026-76175No exploit	Multiple vulnerabilities in Ocsreports for OCS Inventory NGocs inventory ng · ocsreports · CWE-89 SQL injection	High8.6	—	0.3%	Sep 3, 2026
34Monitor	CVE-2026-76176No exploit	Multiple vulnerabilities in Ocsreports for OCS Inventory NGocs inventory ng · ocsreports · CWE-89 SQL injection	High8.6	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-76177No exploit	Multiple vulnerabilities in Ocsreports for OCS Inventory NGocs inventory ng · ocsreports · CWE-918 SSRF	High7.1	—	0.3%	Sep 3, 2026
36Monitor	CVE-2026-76178No exploit	Multiple vulnerabilities in Ocsreports for OCS Inventory NGocs inventory ng · ocsreports · CWE-79 XSS	Critical9.2	—	0.4%	Sep 3, 2026
34Monitor	CVE-2026-76642No exploit	util-linux libmount Privilege Escalation via Failed Mount Helperutil-linux · util-linux · CWE-390 Local privilege escalation	High8.5	—	0.2%	Sep 3, 2026
34Monitor	CVE-2026-77999No exploit	Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1j2commerce.com · j2store extension for joomla · CWE-472 Pre-auth	High8.7	—	0.4%	Sep 3, 2026
35Monitor	CVE-2026-78064No exploit	Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · j2store extension for joomla · CWE-639 Pre-auth Broken access control (IDOR) CSRF	High8.8	—	0.4%	Sep 3, 2026
28Monitor	CVE-2026-78065No exploit	Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · j2store extension for joomla · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 3, 2026
38Monitor	CVE-2026-78069No exploit	Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6j2commerce.com · j2store extension for joomla · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.5	—	0.4%	Sep 3, 2026
37Monitor	CVE-2026-78080No exploit	Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0joodb.feenders.de · joodatabase lite extension for joomla · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-79679No exploit	Use of Weak Credentialsb&r industrial automation gmbh · mapp services · CWE-1391 Pre-auth	High7.0	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-80253No exploit	An improper physical access control issue exists in ShizenBox2 (dev-conf).shizen connect inc. · shizenbox2 (dev-conf) · CWE-1263 Auth bypass	High7.0	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-80254No exploit	Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app).shizen connect inc. · shizenbox2 (edge-app) · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 3, 2026
31Monitor	CVE-2026-80732No exploit	ata: pata_sl82c105: fix bridge revision use-after-freelinux · linux	High7.8	—	0.1%	Sep 3, 2026
29Monitor	CVE-2026-80735No exploit	ovpn: ensure socket is owned by ovpn before deref sk_user_datalinux · linux	High7.3	—	0.1%	Sep 3, 2026
31Monitor	CVE-2026-80736No exploit	thunderbolt: Fix bandwidth group reservation indexinglinux · linux	High7.8	—	0.1%	Sep 3, 2026
28Monitor	CVE-2026-80741No exploit	drm/log: Fix out-of-bounds read on empty message lengthlinux · linux	High7.1	—	0.1%	Sep 3, 2026
33Monitor	CVE-2026-80745No exploit	regulator: fp9931: Fix VPOS/VNEG voltage selector tablelinux · linux	High8.4	—	0.1%	Sep 3, 2026
31Monitor	CVE-2026-80748No exploit	mmc: loongson2: Fix sg iteration in data reorder functionslinux · linux	High7.8	—	0.1%	Sep 3, 2026
28Monitor	CVE-2026-80749No exploit	drm/connector/hdmi: Fix out of bounds memory readlinux · linux	High7.1	—	0.1%	Sep 3, 2026
33Monitor	CVE-2026-80750No exploit	pmdomain: mediatek: fix remaining %pOF after of_node_put()linux · linux	High8.4	—	0.1%	Sep 3, 2026
31Monitor	CVE-2026-80751No exploit	pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()linux · linux	High7.8	—	0.1%	Sep 3, 2026
33Monitor	CVE-2026-80752No exploit	Input: psxpad-spi - set driver data before uselinux · linux	High8.4	—	0.1%	Sep 3, 2026
33Monitor	CVE-2026-80753No exploit	ovpn: run deferred work on a module-owned workqueuelinux · linux	High8.4	—	0.1%	Sep 3, 2026
34Monitor	CVE-2026-84830No exploit	OS command injection in privileged configuration handlingseppmail ag · secure email gateway · CWE-78 RCE Command injection	High8.6	—	1.2%	Sep 3, 2026
30Monitor	CVE-2026-84831No exploit	Mandatory MFA bypass before enrollmentseppmail ag · seppmail secure email gateway (seg) · CWE-287 Auth bypass	High7.7	—	0.4%	Sep 3, 2026
34Monitor	CVE-2026-84832No exploit	Unsafe deserialization in the REST interfaceseppmail ag · seppmail secure email gateway (seg) · CWE-78 RCE Deserialization Command injection	High8.6	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85031No exploit	TOTOLINK CP450 cstecgi.cgi buffer overflowtotolink · cp450 · CWE-119 Memory safety	High8.6	—	0.7%	Sep 3, 2026
28Monitor	CVE-2026-85089No exploit	FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memoryfreerdp · freerdp · CWE-908 Memory safety	High7.1	—	0.3%	Sep 3, 2026
33Monitor	CVE-2026-85091No exploit	zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacatezlib · zlib · CWE-787 Pre-auth Memory safety	High8.3	—	0.4%	Sep 3, 2026
28Monitor	CVE-2026-85093No exploit	Cheshire Cat AI Memory Collection Endpoint Information Disclosurecheshire-cat-ai · core · CWE-863 Broken access control (IDOR)	High7.1	—	0.4%	Sep 3, 2026
30Monitor	CVE-2026-85124No exploit	@fastify/http-proxy vulnerable to prefix escape via backslash dot-segmentsfastify · fastify\/http-proxy · CWE-22 Pre-auth Path traversal	High7.5	—	0.7%	Sep 3, 2026
37Monitor	CVE-2026-85154No exploit	WWBN AVideo Authentication Bypass via Non-Expiring video_id_hashwwbn · avideo · CWE-269 Pre-auth Auth bypass	Critical9.3	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85155No exploit	WWBN AVideo SQL Injection via get.json.php APIName channelswwbn · avideo · CWE-89 Pre-auth SQL injection	High8.7	—	0.4%	Sep 3, 2026
28Monitor	CVE-2026-85160No exploit	AVideo through c91b5975d CSRF and Path Traversal via stopLive.phpwwbn · avideo · CWE-73 Pre-auth Path traversal CSRF	High7.2	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-85162No exploit	AVideo through c91b5975d CSRF via saveLive.phpwwbn · avideo · CWE-352 Pre-auth CSRF	High7.1	—	0.1%	Sep 3, 2026
28Monitor	CVE-2026-85163No exploit	AVideo Server-Side Request Forgery via epg_link parameterwwbn · avideo · CWE-918 SSRF	High7.1	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-85164No exploit	WWBN AVideo Server-Side Request Forgery via set_api_userImageswwbn · avideo · CWE-918 SSRF	High7.1	—	0.3%	Sep 3, 2026
34Monitor	CVE-2026-85174No exploit	SiYuan before v3.8.2 API Token Exposure via Log Filesiyuan-note · siyuan · CWE-532 Info leak	High8.7	—	0.5%	Sep 3, 2026
34Monitor	CVE-2026-85175No exploit	SiYuan before v3.8.2 TLS Private Key Disclosure via getFilesiyuan-note · siyuan · CWE-552	High8.7	—	0.3%	Sep 3, 2026
34Monitor	CVE-2026-9853No exploit	A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read ahitachienergy · microscada x sys600 · CWE-303	High8.5	—	0.1%	Sep 3, 2026
34Monitor	CVE-2026-9854No exploit	A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminishitachienergy · microscada x sys600 · CWE-303 Local privilege escalation	High8.5	—	0.1%	Sep 3, 2026
30Monitor	CVE-2026-6071No exploit	Code Execution Vulnerability in Arena®rockwell automation · arena · CWE-787 pre-auth RCE Memory safety	High7.5	—	0.5%	Sep 3, 2026
35Monitor	CVE-2026-80515No exploit	In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides wheteclipse foundation · eclipse arrowhead · CWE-647	High8.9	—	0.4%	Sep 3, 2026
38Monitor	CVE-2026-82180No exploit	In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFieclipse foundation · eclipse arrowhead · CWE-290 Pre-auth Auth bypass	Critical9.5	—	0.3%	Sep 3, 2026
35Monitor	CVE-2026-85109No exploit	Tenda HG10 Boa Web Server formLogin buffer overflowtenda · hg10 · CWE-119 Pre-auth Memory safety	High8.9	—	1.0%	Sep 3, 2026
29Monitor	CVE-2026-85110No exploit	Tenda HG10 Boa Web Server formWlanSetup buffer overflowtenda · hg10 · CWE-119 Memory safety	High7.4	—	0.8%	Sep 3, 2026
34Monitor	CVE-2026-71404No exploit	Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRolesuse · rancher · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Sep 3, 2026
30Monitor	CVE-2026-75033No exploit	Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofingsuse · rancher · CWE-639 Broken access control (IDOR)	High7.7	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-84971No exploit	Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption pathmongodb · libmongocrypt · CWE-617	High7.1	—	0.2%	Sep 3, 2026
28Monitor	CVE-2026-84989No exploit	ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tagsntop · ntopng · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 3, 2026
34Monitor	CVE-2026-85176No exploit	DbGate through 7.2.6 Arbitrary File Read and Write via file:// jsliddbgate · dbgate · CWE-73 Path traversal	High8.7	—	0.6%	Sep 3, 2026
33Monitor	CVE-2026-85178No exploit	Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filterhelicone · helicone · CWE-639 Broken access control (IDOR)	High8.3	—	0.4%	Sep 3, 2026
33Monitor	CVE-2026-85179No exploit	Label Studio through 1.23.0 SSRF via Unvalidated Webhook URLhumansignal · label-studio · CWE-918 SSRF	High8.4	—	0.4%	Sep 3, 2026
34Monitor	CVE-2026-85180No exploit	Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirectollama · ollama · CWE-918 Pre-auth SSRF	High8.7	—	0.4%	Sep 3, 2026
37Monitor	CVE-2026-85181No exploit	CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksumdianping · cat · CWE-565 Pre-auth	Critical9.3	—	0.7%	Sep 3, 2026
30Monitor	CVE-2026-85182No exploit	vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Changelenve · vhr · CWE-639 Broken access control (IDOR)	High7.7	—	0.4%	Sep 3, 2026
37Monitor	CVE-2026-85183No exploit	Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORSavaiga · taipy · CWE-1385 Pre-auth CSRF	Critical9.3	—	0.2%	Sep 3, 2026
35Monitor	CVE-2026-85199No exploit	Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API.eclipse foundation · eclipse aerios · CWE-22 Pre-auth Path traversal	High8.8	—	0.9%	Sep 3, 2026
33Monitor	CVE-2026-85211No exploit	Label Studio through 1.23.0 Cross-Organization Storage URI Resolutionhumansignal · label-studio · CWE-639 Broken access control (IDOR)	High8.3	—	0.4%	Sep 3, 2026
34Monitor	CVE-2026-85212No exploit	CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Checkcrmeb · crmeb · CWE-862 Auth bypass Broken access control (IDOR)	High8.7	—	0.6%	Sep 3, 2026
28Monitor	CVE-2026-85213No exploit	Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpointskillbill · killbill · CWE-862 Broken access control (IDOR)	High7.2	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-85214No exploit	vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwritelenve · vhr · CWE-639 Broken access control (IDOR)	High7.2	—	0.5%	Sep 3, 2026
38Monitor	CVE-2026-85216No exploit	MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentialsmisp-project · misp · CWE-521 Pre-auth Auth bypass	Critical9.5	—	0.8%	Sep 3, 2026
30Monitor	CVE-2026-85221No exploit	MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacksmisp-project · misp · CWE-295 Pre-auth Weak crypto	High7.6	—	0.2%	Sep 3, 2026
30Monitor	CVE-2026-48486No exploit	Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflationsignum-network · signum-node · CWE-190 Pre-auth Memory safety	High7.5	—	0.3%	Sep 3, 2026
34Monitor	CVE-2026-53924No exploit	Gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes1hive · gardens-v2 · CWE-284 Pre-auth Broken access control (IDOR)	High8.7	—	0.4%	Sep 3, 2026
30Monitor	CVE-2026-55658No exploit	Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()1hive · gardens-v2 · CWE-862 Broken access control (IDOR)	High7.7	—	0.2%	Sep 3, 2026
34Monitor	CVE-2026-57445No exploit	Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve1hive · gardens-v2 · CWE-703 Pre-auth	High8.7	—	0.4%	Sep 3, 2026
34Monitor	CVE-2026-71963Proof of concept	Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injectionnousresearch · hermes-agent · CWE-78 pre-auth RCE Command injection	High8.6	—	0.8%	Sep 3, 2026
28Monitor	CVE-2026-75035No exploit	Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypasssuse · rancher · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 3, 2026
28Monitor	CVE-2026-83961No exploit	ColdFusion \| Improper Authentication (CWE-287)adobe · coldfusion · CWE-287 Pre-auth Auth bypass	High7.1	—	0.4%	Sep 3, 2026

CVE-2026-53706
35Monitor
PREVAIL: ALU32 pointer arithmetic accepted without is64 gate — verifier emits false PASS for pointer-corrupting programs
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
vbpf · prevailSep 2, 2026
CVE-2026-77124
30Monitor
Nexus Repository 3 - Script Execution Disable Setting Not Enforced
HighCVSS 7.5No exploitEPSS 0%
sonatype · nexus repository managerSep 2, 2026
CVE-2026-77125
28Monitor
Nexus Repository 3 - Incorrect Authorization on Blobstore Group Endpoints
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
sonatype · nexus repository managerSep 2, 2026
CVE-2026-84380
22Monitor
HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated
MediumCVSS 5.6Proof of conceptEPSS 0%
- Pre-auth
pydantic · httpx2Sep 2, 2026
CVE-2026-19117
39Monitor
Delinea Secret Server FIDO2 credential registration authentication bypass vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
delinea · secret server (on-prem)Sep 2, 2026
CVE-2024-7956
30Monitor
Sensitive Data Exposure and Escalating Privileges Vulnerabilities in DataMosaix™ Private Cloud
HighCVSS 7.6No exploitEPSS 0%
- Auth bypass
rockwell automation · datamosaix™ private cloudSep 2, 2026
CVE-2025-15485
32Monitor
Auto x LINE <= 1.0.0 – Unauthenticated REST API Endpoints Call
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
unknown · auto x lineSep 2, 2026
CVE-2025-9314
39Monitor
Developer Tools <= 1.1.3 – Unauthenticated Arbitrary File Upload
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
unknown · developer toolsSep 2, 2026
CVE-2026-84381
32Monitor
HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
pydantic · httpx2Sep 2, 2026
CVE-2026-84382
30Monitor
HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pydantic · httpx2Sep 2, 2026
CVE-2026-78408
31Monitor
Util-linux: util-linux: nsenter --join-cgroup leaks root cgroup migration authority
HighCVSS 7.9No exploitEPSS 0%
- Local privilege escalation
red hat · red hat hardened imagesSep 2, 2026
CVE-2026-78409
28Monitor
Util-linux: util-linux: x-mount.subdir detached-tree resolution can escape via intermediate symlinks
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
red hat · red hat hardened imagesSep 2, 2026
CVE-2026-78410
31Monitor
Util-linux: util-linux: restricted bind mounts do not pin the source, allowing x-mount.owner/group/mode redirection
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Race condition
red hat · red hat hardened imagesSep 2, 2026
CVE-2026-84837
31Monitor
Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
red hat · red hat enterprise linux 10Sep 2, 2026
CVE-2026-84838
31Monitor
Rpm: command injection in rpmuncompress via unescaped filenames passed to popen()
HighCVSS 7.8No exploitEPSS 1%
- RCE
- Command injection
red hat · red hat enterprise linux 10Sep 2, 2026
CVE-2023-20577
29Monitor
A heap overflow in SMM module may allow an attacker with access to a second vulnerability that enables writing to SPI flash, potentially res
HighCVSS 7.4No exploitEPSS 0%
- RCE
- Memory safety
amd · 2nd gen amd epyc™ processorsSep 2, 2026
CVE-2026-56855
30Monitor
Prevent DoS on deadlocked established channel in golang.org/x/crypto/ssh
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
golang · cryptoSep 2, 2026
CVE-2026-78662
30Monitor
Prevent DoS on deadlocked undecided channel in golang.org/x/crypto/ssh
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
golang · cryptoSep 2, 2026
CVE-2026-66786
36Monitor
Submariner: submariner: ipsec.conf stanza injection via remote-supplied cablename and subnets
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
red hat · red hat advanced cluster management for kubernetes 2.17Sep 2, 2026
CVE-2023-20576
30Monitor
Insufficient Verification of Data Authenticity in AGESA™ may allow an attacker to update SPI ROM data potentially resulting in denial of ser
HighCVSS 7.7No exploitEPSS 0%
- Local privilege escalation
amd · amd ryzen™ 3000 series desktop processorsSep 2, 2026
CVE-2026-82524
34Monitor
UnoPim File Upload RCE via TinyMCE Image Upload Endpoint
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
unopim · unopimSep 2, 2026
CVE-2026-84292
30Monitor
fast-uri vulnerable to authority injection via an unvalidated port in serialize
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
openjsf · fast-uriSep 2, 2026
CVE-2026-84452
34Monitor
Windows ML CLI: CORS misconfig enables localhost RCE
HighCVSS 8.6No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
microsoft · winml-cliSep 2, 2026
CVE-2026-84394
30Monitor
fast-uri vulnerable to host confusion via an unclosed bracket in the URI authority
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
openjsf · fast-uriSep 3, 2026
CVE-2026-84851
34Monitor
Uncontrolled recursion in the Ion reader in Amazon Ion-C before 1.1.6
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
amazon · ion-cSep 3, 2026
CVE-2021-38489
32Monitor
HDD Password Stored In Plaintext
HighCVSS 8.2No exploitEPSS 0%
insyde software · insydeh2oSep 3, 2026
CVE-2026-3416
30Monitor
Predictable Pseudorandom Number Generation via Webhook HMAC Secret Generation in Multiple WSO2 Products Allows Forged Event Payloads
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
wso2 · api control planeSep 3, 2026
CVE-2026-76174
37Monitor
Multiple vulnerabilities in Ocsreports for OCS Inventory NG
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- File upload
ocs inventory ng · ocsreportsSep 3, 2026
CVE-2026-76175
34Monitor
Multiple vulnerabilities in Ocsreports for OCS Inventory NG
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
ocs inventory ng · ocsreportsSep 3, 2026
CVE-2026-76176
34Monitor
Multiple vulnerabilities in Ocsreports for OCS Inventory NG
HighCVSS 8.6No exploitEPSS 0%
- SQL injection
ocs inventory ng · ocsreportsSep 3, 2026
CVE-2026-76177
28Monitor
Multiple vulnerabilities in Ocsreports for OCS Inventory NG
HighCVSS 7.1No exploitEPSS 0%
- SSRF
ocs inventory ng · ocsreportsSep 3, 2026
CVE-2026-76178
36Monitor
Multiple vulnerabilities in Ocsreports for OCS Inventory NG
CriticalCVSS 9.2No exploitEPSS 0%
- XSS
ocs inventory ng · ocsreportsSep 3, 2026
CVE-2026-76642
34Monitor
util-linux libmount Privilege Escalation via Failed Mount Helper
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
util-linux · util-linuxSep 3, 2026
CVE-2026-77999
34Monitor
Joomla Extension - j2commerce.com - Unauthenticated PayPal callback forgery leading to order confirmation fraud in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
j2commerce.com · j2store extension for joomlaSep 3, 2026
CVE-2026-78064
35Monitor
Joomla Extension - j2commerce.com - Anonymous cart-record tampering via inherited FOF `save` task in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
- CSRF
j2commerce.com · j2store extension for joomlaSep 3, 2026
CVE-2026-78065
28Monitor
Joomla Extension - j2commerce.com - Guest checkout address disclosure to any authenticated user (IDOR) in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
j2commerce.com · j2store extension for joomlaSep 3, 2026
CVE-2026-78069
38Monitor
Joomla Extension - j2commerce.com - Missing authorization on Apps controller delegation chain in J2Store 1.0.0-3.3.21, 4.0.0-4.0.21, 4.1.0-4.1.6
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
j2commerce.com · j2store extension for joomlaSep 3, 2026
CVE-2026-78080
37Monitor
Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
joodb.feenders.de · joodatabase lite extension for joomlaSep 3, 2026
CVE-2026-79679
28Monitor
Use of Weak Credentials
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
b&r industrial automation gmbh · mapp servicesSep 3, 2026
CVE-2026-80253
28Monitor
An improper physical access control issue exists in ShizenBox2 (dev-conf).
HighCVSS 7.0No exploitEPSS 0%
- Auth bypass
shizen connect inc. · shizenbox2 (dev-conf)Sep 3, 2026
CVE-2026-80254
28Monitor
Authorization bypass through user-controlled key issue exists in ShizenBox2 (edge-app).
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
shizen connect inc. · shizenbox2 (edge-app)Sep 3, 2026
CVE-2026-80732
31Monitor
ata: pata_sl82c105: fix bridge revision use-after-free
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80735
29Monitor
ovpn: ensure socket is owned by ovpn before deref sk_user_data
HighCVSS 7.3No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80736
31Monitor
thunderbolt: Fix bandwidth group reservation indexing
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80741
28Monitor
drm/log: Fix out-of-bounds read on empty message length
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80745
33Monitor
regulator: fp9931: Fix VPOS/VNEG voltage selector table
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80748
31Monitor
mmc: loongson2: Fix sg iteration in data reorder functions
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80749
28Monitor
drm/connector/hdmi: Fix out of bounds memory read
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80750
33Monitor
pmdomain: mediatek: fix remaining %pOF after of_node_put()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80751
31Monitor
pmdomain: mediatek: mfg: initialize prev_o in mtk_mfg_attach_dev()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80752
33Monitor
Input: psxpad-spi - set driver data before use
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-80753
33Monitor
ovpn: run deferred work on a module-owned workqueue
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 3, 2026
CVE-2026-84830
34Monitor
OS command injection in privileged configuration handling
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
seppmail ag · secure email gatewaySep 3, 2026
CVE-2026-84831
30Monitor
Mandatory MFA bypass before enrollment
HighCVSS 7.7No exploitEPSS 0%
- Auth bypass
seppmail ag · seppmail secure email gateway (seg)Sep 3, 2026
CVE-2026-84832
34Monitor
Unsafe deserialization in the REST interface
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Deserialization
- Command injection
seppmail ag · seppmail secure email gateway (seg)Sep 3, 2026
CVE-2026-85031
34Monitor
TOTOLINK CP450 cstecgi.cgi buffer overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
totolink · cp450Sep 3, 2026
CVE-2026-85089
28Monitor
FreeRDP before 3.31.0 Information Disclosure via uninitialized heap memory
HighCVSS 7.1No exploitEPSS 0%
- Memory safety
freerdp · freerdpSep 3, 2026
CVE-2026-85091
33Monitor
zlib 1.3.1.2 through 1.3.2 Heap Buffer Overflow via gz_vacate
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
zlib · zlibSep 3, 2026
CVE-2026-85093
28Monitor
Cheshire Cat AI Memory Collection Endpoint Information Disclosure
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
cheshire-cat-ai · coreSep 3, 2026
CVE-2026-85124
30Monitor
@fastify/http-proxy vulnerable to prefix escape via backslash dot-segments
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
fastify · fastify\/http-proxySep 3, 2026
CVE-2026-85154
37Monitor
WWBN AVideo Authentication Bypass via Non-Expiring video_id_hash
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
wwbn · avideoSep 3, 2026
CVE-2026-85155
34Monitor
WWBN AVideo SQL Injection via get.json.php APIName channels
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SQL injection
wwbn · avideoSep 3, 2026
CVE-2026-85160
28Monitor
AVideo through c91b5975d CSRF and Path Traversal via stopLive.php
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Path traversal
- CSRF
wwbn · avideoSep 3, 2026
CVE-2026-85162
28Monitor
AVideo through c91b5975d CSRF via saveLive.php
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- CSRF
wwbn · avideoSep 3, 2026
CVE-2026-85163
28Monitor
AVideo Server-Side Request Forgery via epg_link parameter
HighCVSS 7.1No exploitEPSS 0%
- SSRF
wwbn · avideoSep 3, 2026
CVE-2026-85164
28Monitor
WWBN AVideo Server-Side Request Forgery via set_api_userImages
HighCVSS 7.1No exploitEPSS 0%
- SSRF
wwbn · avideoSep 3, 2026
CVE-2026-85174
34Monitor
SiYuan before v3.8.2 API Token Exposure via Log File
HighCVSS 8.7No exploitEPSS 0%
- Info leak
siyuan-note · siyuanSep 3, 2026
CVE-2026-85175
34Monitor
SiYuan before v3.8.2 TLS Private Key Disclosure via getFile
HighCVSS 8.7No exploitEPSS 0%
siyuan-note · siyuanSep 3, 2026
CVE-2026-9853
34Monitor
A vulnerability exists in SYS600 which allows any user authenticated to the operating system of the server hosting the application to read a
HighCVSS 8.5No exploitEPSS 0%
hitachienergy · microscada x sys600Sep 3, 2026
CVE-2026-9854
34Monitor
A vulnerability exists in SYS600 RBAC mechanism where users having access to the engineering tools could elevate their privileges to adminis
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
hitachienergy · microscada x sys600Sep 3, 2026
CVE-2026-6071
30Monitor
Code Execution Vulnerability in Arena®
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Memory safety
rockwell automation · arenaSep 3, 2026
CVE-2026-80515
35Monitor
In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 the management-authorization gate that protects every /…/mgmt/… REST endpoint decides whet
HighCVSS 8.9No exploitEPSS 0%
eclipse foundation · eclipse arrowheadSep 3, 2026
CVE-2026-82180
38Monitor
In Eclipse Arrowhead versions from 5.0.0 to 5.2.1 when the MQTT API is enabled with the certificate authentication policy, CertificateMqttFi
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
eclipse foundation · eclipse arrowheadSep 3, 2026
CVE-2026-85109
35Monitor
Tenda HG10 Boa Web Server formLogin buffer overflow
HighCVSS 8.9No exploitEPSS 1%
- Pre-auth
- Memory safety
tenda · hg10Sep 3, 2026
CVE-2026-85110
29Monitor
Tenda HG10 Boa Web Server formWlanSetup buffer overflow
HighCVSS 7.4No exploitEPSS 0%
- Memory safety
tenda · hg10Sep 3, 2026
CVE-2026-71404
34Monitor
Rancher: Ownership-less ClusterRole overwrite via attacker-controlled cr-name annotation on GlobalRole
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
suse · rancherSep 3, 2026
CVE-2026-75033
30Monitor
Rancher: Cross-Cluster Secret Leakage via Namespace projectId Annotation Spoofing
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
suse · rancherSep 3, 2026
CVE-2026-84971
28Monitor
Persistent client crash loop via undersized FLE2 insert-update ciphertext in decryption path
HighCVSS 7.1No exploitEPSS 0%
mongodb · libmongocryptSep 3, 2026
CVE-2026-84989
28Monitor
ntopng's Missing Authorization in REST API Allows Non-Admin Users to Delete and Rename Arbitrary Tags
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
ntop · ntopngSep 3, 2026
CVE-2026-85176
34Monitor
DbGate through 7.2.6 Arbitrary File Read and Write via file:// jslid
HighCVSS 8.7No exploitEPSS 0%
- Path traversal
dbgate · dbgateSep 3, 2026
CVE-2026-85178
33Monitor
Helicone Cross-Tenant Provider Key Disclosure via Missing Organization Filter
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
helicone · heliconeSep 3, 2026
CVE-2026-85179
33Monitor
Label Studio through 1.23.0 SSRF via Unvalidated Webhook URL
HighCVSS 8.4No exploitEPSS 0%
- SSRF
humansignal · label-studioSep 3, 2026
CVE-2026-85180
34Monitor
Ollama 0.30.0 through 0.33.2 SSRF via Cross-Host Tensor Blob Redirect
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SSRF
ollama · ollamaSep 3, 2026
CVE-2026-85181
37Monitor
CAT through 3.1.0 Session Cookie Forgery via Unkeyed hashCode Checksum
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
dianping · catSep 3, 2026
CVE-2026-85182
30Monitor
vhr Missing Authorization in PUT /hr/pass Allows Cross-Account Password Change
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
lenve · vhrSep 3, 2026
CVE-2026-85183
37Monitor
Taipy through 4.1.1 Cross-Site WebSocket Hijacking via Wildcard socket.io CORS
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- CSRF
avaiga · taipySep 3, 2026
CVE-2026-85199
35Monitor
Eclipse aeriOS Self-orchestrator versions prior to 1.2.1 contain a path traversal vulnerability in the REST API.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Path traversal
eclipse foundation · eclipse aeriosSep 3, 2026
CVE-2026-85211
33Monitor
Label Studio through 1.23.0 Cross-Organization Storage URI Resolution
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
humansignal · label-studioSep 3, 2026
CVE-2026-85212
34Monitor
CRMEB through 6.0.0 Missing Authorization via Inert verifyAuth Role Check
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
crmeb · crmebSep 3, 2026
CVE-2026-85213
28Monitor
Kill Bill through 0.24.21 Missing Authorization on AdminResource Endpoints
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
killbill · killbillSep 3, 2026
CVE-2026-85214
28Monitor
vhr Missing Authorization in PUT /hr/info Allows Arbitrary Profile Overwrite
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
lenve · vhrSep 3, 2026
CVE-2026-85216
38Monitor
MISP LDAP and LinOTP Authentication Bypass via Empty or Invalid Credentials
CriticalCVSS 9.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
misp-project · mispSep 3, 2026
CVE-2026-85221
30Monitor
MISP CurlClient TLS Peer Verification Disabled by Default Enables Man-in-the-Middle Attacks
HighCVSS 7.6No exploitEPSS 0%
- Pre-auth
- Weak crypto
misp-project · mispSep 3, 2026
CVE-2026-48486
30Monitor
Signum Node: Integer overflow in SMART_FEES fee distribution allows arbitrary miner reward inflation
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
signum-network · signum-nodeSep 3, 2026
CVE-2026-53924
34Monitor
Gardens v2: Permissionless syncOutflow bypasses streaming proposal disputes
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
1hive · gardens-v2Sep 3, 2026
CVE-2026-55658
30Monitor
Gardens v2: StreamingEscrow buffer drains to the proposal beneficiary on cancel via the permissionless claim()
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
1hive · gardens-v2Sep 3, 2026
CVE-2026-57445
34Monitor
Gardens v2: Approve-side dispute resolution drains active streaming escrow reserve
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
1hive · gardens-v2Sep 3, 2026
CVE-2026-71963
34Monitor
Hermes Agent 0.18.2 - 0.21.0 RCE via git core.fsmonitor Config Injection
HighCVSS 8.6Proof of conceptEPSS 0%
- pre-auth RCE
- Command injection
nousresearch · hermes-agentSep 3, 2026
CVE-2026-75035
28Monitor
Rancher: ext.cattle.io/v1 Token store: cross-user token disclosure via label-selector scoping bypass
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
suse · rancherSep 3, 2026
CVE-2026-83961
28Monitor
ColdFusion | Improper Authentication (CWE-287)
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
adobe · coldfusionSep 3, 2026