By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 52 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-92984No exploit	HUBzero CMS through 2.2.32 Session Fixation via Query-String Session Identifierhubzero · hubzero-cms · CWE-384 Pre-auth	High8.5	—	0.4%	Sep 17, 2026
34Monitor	CVE-2026-92985No exploit	SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labelssiyuan-note · siyuan · CWE-79 pre-auth RCE XSS	High8.6	—	0.8%	Sep 17, 2026
34Monitor	CVE-2026-92986No exploit	SiYuan before 3.8.4 Cross-Site Scripting via Document Titlesiyuan-note · siyuan · CWE-79 pre-auth RCE XSS	High8.6	—	0.8%	Sep 17, 2026
34Monitor	CVE-2026-92987No exploit	roxmltree through 0.21.1 Denial of Service via Quadratic Parsingrazrfalcon · roxmltree · CWE-407 Pre-auth	High8.7	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-66269No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('dell · openmanage server administrator · CWE-470 Pre-auth	High7.5	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-81438No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability.dell · openmanage server administrator · CWE-327 Pre-auth Weak crypto	High7.5	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-81474No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability.dell · openmanage server administrator · CWE-122 Local privilege escalation Memory safety	High7.8	—	0.1%	Sep 17, 2026
32Monitor	CVE-2026-56795No exploit	Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability.dell · driver pack for windows os · CWE-427 Local privilege escalation	High8.2	—	0.1%	Sep 17, 2026
36Monitor	CVE-2026-76834No exploit	b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Keyb2evolution · b2evolution cms · CWE-502 Pre-auth Deserialization	Critical9.2	—	0.8%	Sep 17, 2026
30Monitor	CVE-2026-81515No exploit	Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)steeltoeoss · security-advisories · CWE-755 Pre-auth Deserialization Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-85719No exploit	AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTPasynchttpclient · async-http-client · CWE-319 Pre-auth Weak crypto	High7.5	—	0.3%	Sep 17, 2026
32Monitor	CVE-2026-86039No exploit	libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresseslibp2p · js-libp2p · CWE-290 Pre-auth Auth bypass	High8.2	—	0.2%	Sep 17, 2026
30Monitor	CVE-2026-86040No exploit	libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoSlibp2p · js-libp2p · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
28Monitor	CVE-2026-86862No exploit	pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance toolspgadmin · pgadmin 4 · CWE-88	High7.1	—	0.3%	Sep 17, 2026
37Monitor	CVE-2026-86863No exploit	pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication modepgadmin · pgadmin 4 · CWE-290 Pre-auth Auth bypass	Critical9.3	—	0.5%	Sep 17, 2026
34Monitor	CVE-2026-86864No exploit	pgAdmin 4: Argument and connection-string injection via the database field in the Backup toolpgadmin · pgadmin 4 · CWE-22 Path traversal	High8.7	—	0.5%	Sep 17, 2026
39Monitor	CVE-2026-81440No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability.dell · openmanage server administrator · CWE-798 Pre-auth Hard-coded credentials	Critical9.8	—	0.2%	Sep 17, 2026
39Monitor	CVE-2026-81475No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability.dell · openmanage server administrator · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.5%	Sep 17, 2026
39Monitor	CVE-2026-81476No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Commdell · openmanage server administrator · CWE-78 pre-auth RCE Command injection	Critical9.8	—	0.9%	Sep 17, 2026
28Monitor	CVE-2026-81477No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability.dell · openmanage server administrator · CWE-122 Memory safety	High7.2	—	0.6%	Sep 17, 2026
39Monitor	CVE-2026-81478No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability.dell · openmanage server administrator · CWE-321 Pre-auth Hard-coded credentials	Critical9.8	—	0.2%	Sep 17, 2026
28Monitor	CVE-2026-81480No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability.dell · openmanage server administrator · CWE-121 Memory safety	High7.2	—	0.6%	Sep 17, 2026
34Monitor	CVE-2026-89036No exploit	Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameterappwrite · appwrite · CWE-88 RCE	High8.7	—	0.7%	Sep 17, 2026
36Monitor	CVE-2026-91039No exploit	dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeoverteam-alembic · ash_authentication · CWE-290 Pre-auth Auth bypass	Critical9.1	—	0.6%	Sep 17, 2026
34Monitor	CVE-2026-92916No exploit	Grav through 2.0.21 Unauthenticated Information Disclosure via Clockworkgetgrav · grav · CWE-200 Pre-auth Auth bypass Info leak	High8.7	—	0.4%	Sep 17, 2026
28Monitor	CVE-2026-92925No exploit	Redis: redis: out-of-bounds read via crafted cluster bus packetsred hat · red hat enterprise linux 9 · CWE-125 Pre-auth Memory safety	High7.1	—	0.7%	Sep 17, 2026
28Monitor	CVE-2026-93014No exploit	RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameterrosariosis · rosariosis · CWE-22 Path traversal	High7.1	—	0.5%	Sep 17, 2026
28Monitor	CVE-2026-93015No exploit	BlueKitchen BTstack through 1.8.2 A2DP SEP Discovery Out-of-Bounds Writebluekitchen gmbh · btstack · CWE-787 Memory safety	High7.0	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-28326Proof of concept	SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerabilitysolarwinds · access rights manager · CWE-321 pre-auth RCE Hard-coded credentials	High8.8	—	0.6%	Sep 17, 2026
33Monitor	CVE-2026-54580No exploit	mport index decompression can leave partial or corrupt index data after zstd failuresmidnightbsd · mport · CWE-354 Pre-auth	High8.3	—	0.2%	Sep 17, 2026
33Monitor	CVE-2026-54581No exploit	mport bootstrap index fetch can continue after hash verification failuremidnightbsd · mport · CWE-345 Pre-auth	High8.3	—	0.2%	Sep 17, 2026
33Monitor	CVE-2026-54583No exploit	mport package bundle downloads allow unsafe destination filenamesmidnightbsd · mport · CWE-22 Pre-auth Path traversal	High8.3	—	0.5%	Sep 17, 2026
30Monitor	CVE-2026-81481No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('dell · openmanage server administrator · CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	Sep 17, 2026
34Monitor	CVE-2026-92980No exploit	HortusFox-Web < 6.1 Remote Code Execution via Import/Exportdanielbrendel · hortusfox-web · CWE-434 RCE File upload	High8.6	—	0.9%	Sep 17, 2026
33Monitor	CVE-2026-93292No exploit	SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builderssignoz · signoz · CWE-89 RCE SQL injection	High8.4	—	0.4%	Sep 17, 2026
34Monitor	CVE-2026-93295No exploit	MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Executionmisp · misp · CWE-20 RCE	High8.7	—	0.6%	Sep 17, 2026
34Monitor	CVE-2026-93296No exploit	MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legendsmisp · misp · CWE-79 XSS	High8.5	—	0.3%	Sep 17, 2026
28Monitor	CVE-2026-44236No exploit	rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_maxalanxz · rabbitmq-c · CWE-122 Pre-auth Memory safety	High7.1	—	0.4%	Sep 17, 2026
34Monitor	CVE-2026-52836No exploit	OpenDDS: out-of-bounds `rd_ptr` dereference in `RtpsSampleHeader::init` — triggered by malformed RTPS submessage, remotely exploitable denial of serviceopendds · opendds · CWE-125 Pre-auth Memory safety	High8.7	—	0.7%	Sep 17, 2026
32Monitor	CVE-2026-81442No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability.dell · openmanage server administrator · CWE-269	High8.1	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-26950No exploit	Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability.dell · smartfabric manager · CWE-345	High8.8	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-54239No exploit	FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelopewpengine · faustjs · CWE-345 RCE Auth bypass	High8.8	—	0.3%	Sep 17, 2026
32Monitor	CVE-2026-54451No exploit	Elixir protobuf: Unbounded recursion depth in embedded-message decodingelixir-protobuf · protobuf · CWE-674 Pre-auth Denial of service	High8.2	—	0.5%	Sep 17, 2026
34Monitor	CVE-2026-54571No exploit	ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of serviceesp32async · espasyncwebserver · CWE-190 Pre-auth Memory safety	High8.7	—	0.5%	Sep 17, 2026
40Plan	CVE-2026-54617Proof of concept	GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandlergravitlauncher · launcher · CWE-22 Pre-auth Path traversal	Critical9.8	—	3.4%	Sep 17, 2026
34Monitor	CVE-2026-71538No exploit	@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windowscyclonedx · cyclonedx-node-npm · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	0.2%	Sep 17, 2026
35Monitor	CVE-2026-77614No exploit	Opencast: Session fixation in login enables account takeover via crafted linkopencast · opencast · CWE-384 Pre-auth	High8.8	—	0.5%	Sep 17, 2026
36Monitor	CVE-2026-79752Proof of concept	CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectioncakephp · cakephp · CWE-89 Pre-auth SQL injection	Critical9.2	—	0.6%	Sep 17, 2026
29Monitor	CVE-2026-80356No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vuldell · openmanage server administrator · CWE-200 Local privilege escalation Info leak	High7.3	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-81445No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability.dell · openmanage server administrator · CWE-269	High7.2	—	0.4%	Sep 17, 2026
29Monitor	CVE-2026-81446No exploit	Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability.dell · openmanage server administrator · CWE-918 Pre-auth SSRF	High7.4	—	0.3%	Sep 17, 2026
30Monitor	CVE-2026-87742No exploit	Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message bufferingred hat · exploit intelligence · CWE-770 Pre-auth Denial of service	High7.5	—	0.7%	Sep 17, 2026
29Monitor	CVE-2026-90997No exploit	Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatchkeycloak · keycloak · CWE-294 Pre-auth Auth bypass	High7.4	—	0.3%	Sep 17, 2026
30Monitor	CVE-2026-92230No exploit	Apache Karaf: Improper release of ClassLoader references via static ThreadLocal cachingapache software foundation · apache karaf · CWE-401 Pre-auth Denial of service	High7.5	—	0.4%	Sep 17, 2026
28Monitor	CVE-2026-45720No exploit	Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session tokensiderolabs · omni · CWE-294 Auth bypass Local privilege escalation Race condition	High7.0	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-45726No exploit	Omni: Reader-level users can retrieve imported cluster CA keys via ResourceServicesiderolabs · omni · CWE-200 Info leak	High7.6	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-50285No exploit	Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callbackpomerium · pomerium · CWE-770 Pre-auth Denial of service	High7.5	—	0.7%	Sep 17, 2026
39Monitor	CVE-2026-54626No exploit	SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)happyseafox · sail · CWE-122 Pre-auth Memory safety	Critical9.8	—	0.7%	Sep 17, 2026
39Monitor	CVE-2026-54627No exploit	SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)happyseafox · sail · CWE-122 Pre-auth Memory safety	Critical9.8	—	0.7%	Sep 17, 2026
31Monitor	CVE-2026-54692No exploit	SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)happyseafox · sail · CWE-131	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-54716No exploit	Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targetsvalhalla · valhalla · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Sep 17, 2026
38Monitor	CVE-2026-54752No exploit	NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Requestnetbox-community · devicetype-library · CWE-502 pre-auth RCE Deserialization	Critical9.6	—	0.6%	Sep 17, 2026
34Monitor	CVE-2026-69197No exploit	Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansionumbraco · umbraco-cms · CWE-200 Pre-auth Info leak	High8.7	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-81516No exploit	Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)steeltoeoss · security-advisories · CWE-755 Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-85715No exploit	ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustionmattiasw · exifreader · CWE-789 Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-85721Proof of concept	AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of serviceasynchttpclient · async-http-client · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-86038No exploit	libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer IDlibp2p · js-libp2p · CWE-345 Pre-auth	High7.5	—	0.1%	Sep 17, 2026
36Monitor	CVE-2026-92943No exploit	Improper validation of certificate with host mismatch in AWS IoT Device SDK for Pythonaws · awsiotpythonsdk · CWE-297 Pre-auth Weak crypto	Critical9.2	—	0.3%	Sep 17, 2026
34Monitor	CVE-2026-93337No exploit	NetworkManager-l2tp Privilege Escalation via pppd Plugin Injectionnm-l2tp · networkmanager-l2tp · CWE-88 RCE Local privilege escalation	High8.5	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90051No exploit	tcp: reject non zerocopy devmem txlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90057No exploit	slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()linux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90059No exploit	net: stmmac: restore NET_IP_ALIGN in the RX DMA offsetlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
28Monitor	CVE-2026-90062No exploit	netfilter: nf_tables: move hardware offload step after building the chain bloblinux · linux	High7.1	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90067No exploit	libceph: validate banner payload lengthlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
31Monitor	CVE-2026-90069No exploit	crypto: acomp - allocate async request context when cloninglinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90071No exploit	net/sched: sch_teql: restore skb->dev on the slave failure pathlinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90089No exploit	Bluetooth: btnxpuart: Validate the FW dump header lengthlinux · linux Pre-auth	High7.1	—	0.3%	Sep 17, 2026
32Monitor	CVE-2026-90091No exploit	Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chanlinux · linux	High8.0	—	0.3%	Sep 17, 2026
32Monitor	CVE-2026-90092No exploit	Bluetooth: L2CAP: reject accept queue add unless BT_LISTENlinux · linux	High8.0	—	0.3%	Sep 17, 2026
31Monitor	CVE-2026-90093No exploit	Bluetooth: L2CAP: access chan->conn safely in get/setsockoptlinux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90102No exploit	NFSv4/pnfs: key the data server cache on the NFS versionlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-90103No exploit	NFSv4.2: fix LAYOUTSTATS send buffer exhaustionlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
39Monitor	CVE-2026-90104No exploit	NFSv4.1: zero referring call lists before decodinglinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 17, 2026
37Monitor	CVE-2026-90110No exploit	inetpeer: randomize RB-tree node comparison using SipHashlinux · linux Pre-auth	Critical9.4	—	0.6%	Sep 17, 2026
31Monitor	CVE-2026-90111No exploit	ip6mr: do not clone dst in ip6mr_cache_report()linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90118No exploit	ntfs: fix off-by-one page overflow in ntfs_decompress()linux · linux	High7.8	—	0.1%	Sep 17, 2026
33Monitor	CVE-2026-90120No exploit	irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsinglinux · linux	High8.4	—	0.2%	Sep 17, 2026
28Monitor	CVE-2026-90131No exploit	ntfs: serialize resident iomap reads with mrec_locklinux · linux	High7.1	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90132No exploit	ntfs: reject unprivileged writes to reserved $LX* xattrslinux · linux Local privilege escalation	High7.1	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90133No exploit	ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()linux · linux	High7.8	—	0.2%	Sep 17, 2026
30Monitor	CVE-2026-90137No exploit	platform/x86: hp-bioscfg: fix password encoding bounds checklinux · linux	High7.7	—	0.1%	Sep 17, 2026
29Monitor	CVE-2026-90141No exploit	ipvs: fix integer overflow in ftp helper port/address parsinglinux · linux Pre-auth	High7.3	—	0.4%	Sep 17, 2026
31Monitor	CVE-2026-90142No exploit	virtio_net: Fix resize of the RX ringlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90143No exploit	net: kcm: Hold RCU read lock while running BPF parserlinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90145No exploit	hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failedlinux · linux	High7.1	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90146No exploit	bpf, xdp: move offload check into dev_xdp_install()linux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90149No exploit	NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data serverslinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
39Monitor	CVE-2026-90151No exploit	NFSv4: remove callback IDR entry on client allocation failurelinux · linux Pre-auth	Critical9.8	—	0.7%	Sep 17, 2026
32Monitor	CVE-2026-90153No exploit	ksmbd: bound smb_check_perm_dacl() ACE walks by DACL sizelinux · linux	High8.1	—	0.5%	Sep 17, 2026
28Monitor	CVE-2026-90161No exploit	erofs: fix interlaced ztailpacking pclusterslinux · linux	High7.1	—	0.1%	Sep 17, 2026

CVE-2026-92984
34Monitor
HUBzero CMS through 2.2.32 Session Fixation via Query-String Session Identifier
HighCVSS 8.5No exploitEPSS 0%
- Pre-auth
hubzero · hubzero-cmsSep 17, 2026
CVE-2026-92985
34Monitor
SiYuan before 3.8.4 Cross-Site Scripting via Bookmark Labels
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- XSS
siyuan-note · siyuanSep 17, 2026
CVE-2026-92986
34Monitor
SiYuan before 3.8.4 Cross-Site Scripting via Document Title
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- XSS
siyuan-note · siyuanSep 17, 2026
CVE-2026-92987
34Monitor
roxmltree through 0.21.1 Denial of Service via Quadratic Parsing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
razrfalcon · roxmltreeSep 17, 2026
CVE-2026-66269
30Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Externally-Controlled Input to Select Classes or Code ('
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
dell · openmanage server administratorSep 17, 2026
CVE-2026-81438
30Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains Use of a Broken or Risky Cryptographic Algorithm vulnerability.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
dell · openmanage server administratorSep 17, 2026
CVE-2026-81474
31Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
dell · openmanage server administratorSep 17, 2026
CVE-2026-56795
32Monitor
Dell Server Update Utility, versions prior to 26.07.01, contains an Uncontrolled Search Path Element vulnerability.
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
dell · driver pack for windows osSep 17, 2026
CVE-2026-76834
36Monitor
b2evolution CMS 6.7.8 through 7.2.5 Object Injection via Negative Integer Array Key
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Deserialization
b2evolution · b2evolution cmsSep 17, 2026
CVE-2026-81515
30Monitor
Steeltoe.Discovery.Eureka: malformed enum/bool/timestamp field aborts entire registry fetch (DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
steeltoeoss · security-advisoriesSep 17, 2026
CVE-2026-85719
30Monitor
AsyncHttpClient: SOCKS proxy credentials sent to the origin server over plaintext HTTP
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Weak crypto
asynchttpclient · async-http-clientSep 17, 2026
CVE-2026-86039
32Monitor
libp2p: PeerStore accepts attacker-signed PeerRecords for a victim peer ID and stores certified attacker addresses
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
libp2p · js-libp2pSep 17, 2026
CVE-2026-86040
30Monitor
libp2p: Unbounded RPC decode + synchronous subscription processing in @libp2p/floodsub allows unauthenticated DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
libp2p · js-libp2pSep 17, 2026
CVE-2026-86862
28Monitor
pgAdmin 4: Connection-string injection via the database field in the Restore and Maintenance tools
HighCVSS 7.1No exploitEPSS 0%
pgadmin · pgadmin 4Sep 17, 2026
CVE-2026-86863
37Monitor
pgAdmin 4: Authentication bypass via a client-controlled identity header in Webserver authentication mode
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
pgadmin · pgadmin 4Sep 17, 2026
CVE-2026-86864
34Monitor
pgAdmin 4: Argument and connection-string injection via the database field in the Backup tool
HighCVSS 8.7No exploitEPSS 0%
- Path traversal
pgadmin · pgadmin 4Sep 17, 2026
CVE-2026-81440
39Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Credentials vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
dell · openmanage server administratorSep 17, 2026
CVE-2026-81475
39Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Missing Authentication for Critical Function vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
dell · openmanage server administratorSep 17, 2026
CVE-2026-81476
39Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Neutralization of Special Elements used in an OS Comm
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Command injection
dell · openmanage server administratorSep 17, 2026
CVE-2026-81477
28Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Heap-based Buffer Overflow vulnerability.
HighCVSS 7.2No exploitEPSS 0%
- Memory safety
dell · openmanage server administratorSep 17, 2026
CVE-2026-81478
39Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Use of Hard-coded Cryptographic Key vulnerability.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
dell · openmanage server administratorSep 17, 2026
CVE-2026-81480
28Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Stack-based Buffer Overflow vulnerability.
HighCVSS 7.2No exploitEPSS 0%
- Memory safety
dell · openmanage server administratorSep 17, 2026
CVE-2026-89036
34Monitor
Appwrite < 2.0.0 Argument Injection via providerRootDirectory Parameter
HighCVSS 8.7No exploitEPSS 0%
- RCE
appwrite · appwriteSep 17, 2026
CVE-2026-91039
36Monitor
dynamic_oidc identities are not namespaced by connection in ash_authentication, allowing cross-connection account takeover
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
team-alembic · ash_authenticationSep 17, 2026
CVE-2026-92916
34Monitor
Grav through 2.0.21 Unauthenticated Information Disclosure via Clockwork
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Info leak
getgrav · gravSep 17, 2026
CVE-2026-92925
28Monitor
Redis: redis: out-of-bounds read via crafted cluster bus packets
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat enterprise linux 9Sep 17, 2026
CVE-2026-93014
28Monitor
RosarioSIS before 12.9 Path Traversal in File Deletion via filename Parameter
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
rosariosis · rosariosisSep 17, 2026
CVE-2026-93015
28Monitor
BlueKitchen BTstack through 1.8.2 A2DP SEP Discovery Out-of-Bounds Write
HighCVSS 7.0No exploitEPSS 0%
- Memory safety
bluekitchen gmbh · btstackSep 17, 2026
CVE-2026-28326
35Monitor
SolarWinds Access Rights Manager Unauthenticated Remote Code Execution Vulnerability
HighCVSS 8.8Proof of conceptEPSS 0%
- pre-auth RCE
- Hard-coded credentials
solarwinds · access rights managerSep 17, 2026
CVE-2026-54580
33Monitor
mport index decompression can leave partial or corrupt index data after zstd failures
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
midnightbsd · mportSep 17, 2026
CVE-2026-54581
33Monitor
mport bootstrap index fetch can continue after hash verification failure
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
midnightbsd · mportSep 17, 2026
CVE-2026-54583
33Monitor
mport package bundle downloads allow unsafe destination filenames
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Path traversal
midnightbsd · mportSep 17, 2026
CVE-2026-81481
30Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory ('
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
dell · openmanage server administratorSep 17, 2026
CVE-2026-92980
34Monitor
HortusFox-Web < 6.1 Remote Code Execution via Import/Export
HighCVSS 8.6No exploitEPSS 0%
- RCE
- File upload
danielbrendel · hortusfox-webSep 17, 2026
CVE-2026-93292
33Monitor
SigNoz 0.88.0 before 0.142.1 - SQL Injection in Trace Funnel Analytics Query Builders
HighCVSS 8.4No exploitEPSS 0%
- RCE
- SQL injection
signoz · signozSep 17, 2026
CVE-2026-93295
34Monitor
MISP Background Job Argument Injection via Console Path Switches Enables Remote Code Execution
HighCVSS 8.7No exploitEPSS 0%
- RCE
misp · mispSep 17, 2026
CVE-2026-93296
34Monitor
MISP Overmind: Stored Cross-Site Scripting via Unescaped Object Names in Statistics Legends
HighCVSS 8.5No exploitEPSS 0%
- XSS
misp · mispSep 17, 2026
CVE-2026-44236
28Monitor
rabbitmq-c: Heap buffer overflow in AMQP login handshake via undersized connection.tune.frame_max
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
alanxz · rabbitmq-cSep 17, 2026
CVE-2026-52836
34Monitor
OpenDDS: out-of-bounds `rd_ptr` dereference in `RtpsSampleHeader::init` — triggered by malformed RTPS submessage, remotely exploitable denial of service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
opendds · openddsSep 17, 2026
CVE-2026-81442
32Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability.
HighCVSS 8.1No exploitEPSS 0%
dell · openmanage server administratorSep 17, 2026
CVE-2026-26950
35Monitor
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Insufficient Verification of Data Authenticity vulnerability.
HighCVSS 8.8No exploitEPSS 0%
dell · smartfabric managerSep 17, 2026
CVE-2026-54239
35Monitor
FaustWP — Authentication Bypass via Initialization Vector Modification in Token Envelope
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Auth bypass
wpengine · faustjsSep 17, 2026
CVE-2026-54451
32Monitor
Elixir protobuf: Unbounded recursion depth in embedded-message decoding
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
elixir-protobuf · protobufSep 17, 2026
CVE-2026-54571
34Monitor
ESPAsyncWebServer: Integer overflow in multipart boundary parser causes denial of service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
esp32async · espasyncwebserverSep 17, 2026
CVE-2026-54617
40Plan
GravitLauncher: Unauthenticated path traversal in LaunchServer FileServerHandler
CriticalCVSS 9.8Proof of conceptEPSS 3%
- Pre-auth
- Path traversal
gravitlauncher · launcherSep 17, 2026
CVE-2026-71538
34Monitor
@cyclonedx/cyclonedx-npm: Shell Injection via Unsanitized --workspace Argument on Windows
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
cyclonedx · cyclonedx-node-npmSep 17, 2026
CVE-2026-77614
35Monitor
Opencast: Session fixation in login enables account takeover via crafted link
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
opencast · opencastSep 17, 2026
CVE-2026-79752
36Monitor
CakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injection
CriticalCVSS 9.2Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
cakephp · cakephpSep 17, 2026
CVE-2026-80356
29Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Exposure of Sensitive Information to an Unauthorized Actor vul
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
- Info leak
dell · openmanage server administratorSep 17, 2026
CVE-2026-81445
28Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Privilege Management vulnerability.
HighCVSS 7.2No exploitEPSS 0%
dell · openmanage server administratorSep 17, 2026
CVE-2026-81446
29Monitor
Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains a Server-Side Request Forgery (SSRF) vulnerability.
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- SSRF
dell · openmanage server administratorSep 17, 2026
CVE-2026-87742
30Monitor
Quarkus-websockets-next: denial of service (oom) in quarkus-websockets-next via unbounded message buffering
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · exploit intelligenceSep 17, 2026
CVE-2026-90997
29Monitor
Keycloak-services: keycloak: replay protection bypass leads to unauthorized access via database driver semantics mismatch
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
keycloak · keycloakSep 17, 2026
CVE-2026-92230
30Monitor
Apache Karaf: Improper release of ClassLoader references via static ThreadLocal caching
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
apache software foundation · apache karafSep 17, 2026
CVE-2026-45720
28Monitor
Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token
HighCVSS 7.0No exploitEPSS 0%
- Auth bypass
- Local privilege escalation
- Race condition
siderolabs · omniSep 17, 2026
CVE-2026-45726
30Monitor
Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService
HighCVSS 7.6No exploitEPSS 0%
- Info leak
siderolabs · omniSep 17, 2026
CVE-2026-50285
30Monitor
Pomerium: Pre-Auth Memory Exhaustion via Unbounded zstd Decompression in HPKE Callback
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pomerium · pomeriumSep 17, 2026
CVE-2026-54626
39Monitor
SAIL: Heap out-of-bounds write in SAIL TGA decoder (indexed-RLE bpp/stride mismatch)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
happyseafox · sailSep 17, 2026
CVE-2026-54627
39Monitor
SAIL: Heap out-of-bounds write in SAIL PSD decoder (Bitmap mode ignores depth)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
happyseafox · sailSep 17, 2026
CVE-2026-54692
31Monitor
SAIL: XBM X10 decoder writes 2 bytes per literal into a 1-byte-per-literal buffer (heap out-of-bounds write)
HighCVSS 7.8No exploitEPSS 0%
happyseafox · sailSep 17, 2026
CVE-2026-54716
30Monitor
Valhalla: Degenerate exclude_polygons (collinear points, zero area) causes OOM in /sources_to_targets
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
valhalla · valhallaSep 17, 2026
CVE-2026-54752
38Monitor
NetBox Device Type Library: Insecure Pickle Deserialization in Test Suite Allows Remote Code Execution via Malicious Pull Request
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Deserialization
netbox-community · devicetype-librarySep 17, 2026
CVE-2026-69197
34Monitor
Umbraco: Delivery API leaks protected (Public Access) content through Content Picker / Multi-Node Tree Picker expansion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
umbraco · umbraco-cmsSep 17, 2026
CVE-2026-81516
30Monitor
Steeltoe.Discovery.Consul: malformed 'secure' metadata aborts service instance lookup (DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
steeltoeoss · security-advisoriesSep 17, 2026
CVE-2026-85715
30Monitor
ExifReader: DoS via Crafted HEIC/AVIF iloc Box - Memory Exhaustion
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
mattiasw · exifreaderSep 17, 2026
CVE-2026-85721
30Monitor
AsyncHttpClient: Unbounded HTTP/1.1 response decompression enables a decompression-bomb denial of service
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Denial of service
asynchttpclient · async-http-clientSep 17, 2026
CVE-2026-86038
30Monitor
libp2p: Gossipsub StrictSign accepts attacker-signed messages as a victim RSA peer ID
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
libp2p · js-libp2pSep 17, 2026
CVE-2026-92943
36Monitor
Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
aws · awsiotpythonsdkSep 17, 2026
CVE-2026-93337
34Monitor
NetworkManager-l2tp Privilege Escalation via pppd Plugin Injection
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
nm-l2tp · networkmanager-l2tpSep 17, 2026
CVE-2026-90051
31Monitor
tcp: reject non zerocopy devmem tx
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90057
31Monitor
slip: remove slip_hangup() to fix use-after-free in slip_receive_buf()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90059
30Monitor
net: stmmac: restore NET_IP_ALIGN in the RX DMA offset
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90062
28Monitor
netfilter: nf_tables: move hardware offload step after building the chain blob
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90067
30Monitor
libceph: validate banner payload length
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90069
31Monitor
crypto: acomp - allocate async request context when cloning
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90071
31Monitor
net/sched: sch_teql: restore skb->dev on the slave failure path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90089
28Monitor
Bluetooth: btnxpuart: Validate the FW dump header length
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90091
32Monitor
Bluetooth: L2CAP: fix race l2cap_sock_cleanup_listen() vs. put_chan
HighCVSS 8.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90092
32Monitor
Bluetooth: L2CAP: reject accept queue add unless BT_LISTEN
HighCVSS 8.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90093
31Monitor
Bluetooth: L2CAP: access chan->conn safely in get/setsockopt
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90102
30Monitor
NFSv4/pnfs: key the data server cache on the NFS version
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90103
30Monitor
NFSv4.2: fix LAYOUTSTATS send buffer exhaustion
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90104
39Monitor
NFSv4.1: zero referring call lists before decoding
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90110
37Monitor
inetpeer: randomize RB-tree node comparison using SipHash
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90111
31Monitor
ip6mr: do not clone dst in ip6mr_cache_report()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90118
31Monitor
ntfs: fix off-by-one page overflow in ntfs_decompress()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90120
33Monitor
irqchip/gic-v5: Check get_logical_index() return value in MADT IAFFID parsing
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90131
28Monitor
ntfs: serialize resident iomap reads with mrec_lock
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90132
28Monitor
ntfs: reject unprivileged writes to reserved $LX* xattrs
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 17, 2026
CVE-2026-90133
31Monitor
ntfs: Fix index_root heap OOB write in ntfs_ir_to_ib()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90137
30Monitor
platform/x86: hp-bioscfg: fix password encoding bounds check
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90141
29Monitor
ipvs: fix integer overflow in ftp helper port/address parsing
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90142
31Monitor
virtio_net: Fix resize of the RX ring
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90143
31Monitor
net: kcm: Hold RCU read lock while running BPF parser
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90145
28Monitor
hinic3: Fix skb linearization mismatch and drop skb when skb_checksum_help() failed
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90146
31Monitor
bpf, xdp: move offload check into dev_xdp_install()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90149
30Monitor
NFSv4/flexfiles: fix NULL dereference for NFSv4.0 data servers
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90151
39Monitor
NFSv4: remove callback IDR entry on client allocation failure
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90153
32Monitor
ksmbd: bound smb_check_perm_dacl() ACE walks by DACL size
HighCVSS 8.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90161
28Monitor
erofs: fix interlaced ztailpacking pclusters
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026