By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 53 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-90162No exploit	ksmbd: defer publishing granted locks to prevent UAF/double-free racelinux · linux	High8.8	—	0.7%	Sep 17, 2026
24Monitor	CVE-2021-3030Proof of concept	Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in coloCWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Sep 17, 2026
30Monitor	CVE-2026-90172No exploit	smb: smbdirect: destroy QP before mem pools on accept failurelinux · linux Pre-auth Denial of service	High7.5	—	0.4%	Sep 17, 2026
39Monitor	CVE-2026-90173No exploit	smb: smbdirect: free completion queues with ib_free_cq()linux · linux Pre-auth	Critical9.8	—	0.5%	Sep 17, 2026
28Monitor	CVE-2026-90174No exploit	ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()linux · linux	High7.1	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-15815No exploit	CVE-2026-15815 CVE Recordgrafana · grafana oss · CWE-22 pre-auth RCE Path traversal	High8.8	—	0.6%	Sep 17, 2026
32Monitor	CVE-2026-90176No exploit	ksmbd: Do not skip lock checks for single-byte rangeslinux · linux	High8.1	—	0.5%	Sep 17, 2026
31Monitor	CVE-2026-90177No exploit	bpf: Check pointer type for all atomic RMW pathslinux · linux	High7.8	—	0.1%	Sep 17, 2026
39Monitor	CVE-2026-45140Proof of concept	Chamilo LMS CStudio upload flow allows unauthenticated remote code executionchamilo · chamilo-lms · CWE-22 pre-auth RCE Path traversal	Critical9.8	—	1.3%	Sep 17, 2026
30Monitor	CVE-2026-48977No exploit	OpenSlide: Arbitrary memory write with crafted Ventana BIF fileopenslide · openslide · CWE-123 RCE	High7.7	—	0.4%	Sep 17, 2026
33Monitor	CVE-2026-90191No exploit	mailbox: riscv-sbi-mpxy: validate RPMI notification lengthslinux · linux	High8.4	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-50275No exploit	Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoSdatadog · dd-trace-php · CWE-770 Pre-auth Deserialization Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-50277No exploit	dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoSdatadog · dd-trace-cpp · CWE-770 Pre-auth Denial of service	High7.5	—	0.7%	Sep 17, 2026
31Monitor	CVE-2026-90199No exploit	fs/ntfs3: reject out-of-range evcn in mi_enum_attr()linux · linux	High7.8	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-52483No exploit	The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow authCWE-78 RCE Command injection	High8.8	—	0.5%	Sep 17, 2026
37Monitor	CVE-2026-54237No exploit	Wavelog: Unauthenticated Remote Code Executionwavelog · wavelog · CWE-94 pre-auth RCE	Critical9.3	—	0.7%	Sep 17, 2026
30Monitor	CVE-2026-54339No exploit	Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discoverleslieleung · glean · CWE-918 SSRF	High7.7	—	0.4%	Sep 17, 2026
32Monitor	CVE-2026-54354No exploit	MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translationmapserver · mapserver · CWE-89 Pre-auth SQL injection	High8.2	—	0.6%	Sep 17, 2026
28Monitor	CVE-2026-90203No exploit	Squashfs: check block offset is not negativelinux · linux Local privilege escalation	High7.1	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90204No exploit	ocfs2: validate DIO orphan slot during inode readlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90205No exploit	ocfs2: validate orphan slot during inode readlinux · linux	High7.8	—	0.1%	Sep 17, 2026
37Monitor	CVE-2026-54501No exploit	Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviorswebrecorder · browsertrix · CWE-20 RCE Command injection	Critical9.4	—	1.2%	Sep 17, 2026
31Monitor	CVE-2026-90207No exploit	ALSA: seq: midi: Serialize input teardown with event_inputlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90210No exploit	bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failurelinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-54510No exploit	Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hookmurtaza-nasir · speakr · CWE-287 Pre-auth Auth bypass CSRF	High7.1	—	0.2%	Sep 17, 2026
33Monitor	CVE-2026-54597Proof of concept	ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameteritflow-org · itflow · CWE-89 SQL injection	High8.3	—	0.4%	Sep 17, 2026
31Monitor	CVE-2026-90217No exploit	bpf: Compare iterator types during state pruninglinux · linux	High7.8	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-54916No exploit	NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloudnetbox-community · devicetype-library · CWE-427 pre-auth RCE SSRF	High8.8	—	0.6%	Sep 17, 2026
28Monitor	CVE-2026-90223No exploit	nfc: llcp: bound SNL TLV parsing to the skb and add length checkslinux · linux Pre-auth	High7.1	—	0.4%	Sep 17, 2026
30Monitor	CVE-2026-90224No exploit	nfc: nci: fix double completion race in nci_data_exchange_completelinux · linux Pre-auth	High7.5	—	0.3%	Sep 17, 2026
31Monitor	CVE-2026-90225No exploit	nfc: llcp: read llcp_sock->local under the socket lock in getsockoptlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90227No exploit	nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()linux · linux Local privilege escalation	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90228No exploit	nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()linux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
29Monitor	CVE-2026-90229No exploit	nvme-apple: Destroy the admin queue on removallinux · linux	High7.4	—	0.1%	Sep 17, 2026
36Monitor	CVE-2026-90230No exploit	nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()linux · linux Pre-auth	Critical9.1	—	0.4%	Sep 17, 2026
33Monitor	CVE-2026-90231No exploit	apparmor: fix unconfined user namespace restriction forced stacklinux · linux Local privilege escalation	High8.4	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-68523No exploit	Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of servicefulgur-rs · fulgur · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-90234No exploit	NFS: Return a delegation the client fails to recordlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
39Monitor	CVE-2026-90235No exploit	sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCElinux · linux Pre-auth	Critical9.8	—	0.6%	Sep 17, 2026
31Monitor	CVE-2026-90237No exploit	netfilter: nft_ct: move custom expectation support to helperlinux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-68537No exploit	Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of servicefulgur-rs · fulgur · CWE-400 Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
35Monitor	CVE-2026-90240No exploit	iommu/vt-d: Flush context cache with correct SID when tearing down aliaseslinux · linux	High8.8	—	0.1%	Sep 17, 2026
32Monitor	CVE-2026-90241No exploit	iommu/vt-d: Tear down scalable-mode context on probe failurelinux · linux	High8.2	—	0.1%	Sep 17, 2026
32Monitor	CVE-2026-90243No exploit	iommu/vt-d: Clear Present bit before tearing down copied context entrylinux · linux	High8.1	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90244No exploit	iommu/dma: Restore locking around msi_page_listlinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90246No exploit	apparmor: fix integer overflow in verify_tags() bounds checklinux · linux	High7.1	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-90255No exploit	Bluetooth: hci_conn: fix the SCO setup context lifetimelinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-90256No exploit	Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_indlinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
28Monitor	CVE-2026-90260No exploit	btrfs: zoned: don't clobber the extent buffer when zeroing it outlinux · linux	High7.1	—	0.1%	Sep 17, 2026
32Monitor	CVE-2026-90268No exploit	scsi: sd: Fix error handling in sd_probe() after large pool creation failurelinux · linux Pre-auth	High8.1	—	0.4%	Sep 17, 2026
35Monitor	CVE-2026-90286No exploit	drm/amdgpu/gfx6: Use PFP on the compute queues toolinux · linux	High8.8	—	0.1%	Sep 17, 2026
29Monitor	CVE-2026-90288No exploit	phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failurelinux · linux	High7.4	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90289No exploit	drm/amd/display: Resize MST HDCP per-connector arrays to 32linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90291No exploit	module/dups: Fix use-after-free in kmod_dup_req lifetime handlinglinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90292No exploit	RDMA/siw: Fix use-after-free in siw_accept()linux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90293No exploit	IB/isert: post the full-feature receive buffers after session registrationlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-90294No exploit	IB/isert: delay the final Login Response until the session is registeredlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
32Monitor	CVE-2026-90301No exploit	ocfs2: o2hb: quiesce negotiate handlers and timeout worklinux · linux Pre-auth	High8.1	—	0.5%	Sep 17, 2026
31Monitor	CVE-2026-90308No exploit	RDMA/erdma: Hold QP references for AE and CM processinglinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90309No exploit	RDMA/erdma: Hold CQ references when processing EQ eventslinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90312No exploit	bpf: Check load-acquire src ptr type before the loadlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90316No exploit	drm/omap: dsi: Do not copy isr tablelinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90317No exploit	bpf: Invalidate RCU pointers after final spin unlocklinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90320No exploit	ocfs2: validate external xattr entries when reading metadatalinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90321No exploit	ocfs2: validate inline xattrs during inode block validationlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90324No exploit	ublk: check import_ubuf() return valuelinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90325No exploit	blk-cgroup: skip dying blkg in blkcg_activate_policy()linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90326No exploit	blk-cgroup: fix race between policy activation and blkg destructionlinux · linux	High7.8	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-90329No exploit	HID: synchronize input before cleaning up a failed probelinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
32Monitor	CVE-2026-90332No exploit	PCI: dwc: ep: Flush cached MSI write before unmapping the iATUlinux · linux Pre-auth	High8.2	—	0.2%	Sep 17, 2026
30Monitor	CVE-2026-90341No exploit	firmware: coreboot: Validate table boundslinux · linux	High7.7	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90343No exploit	wifi: cfg80211: stop PMSR before P2P and NAN teardownlinux · linux	High7.8	—	0.1%	Sep 17, 2026
33Monitor	CVE-2026-90347No exploit	arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entrylinux · linux	High8.4	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90353No exploit	wifi: mt76: mt7915: fix ext PHY use-after-free on register error pathlinux · linux	High7.0	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-90357No exploit	wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreementlinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
31Monitor	CVE-2026-90358No exploit	bpf, x86: Fix trampoline stack size for 128-bit argumentslinux · linux	High7.8	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-90367No exploit	wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SERlinux · linux Pre-auth	High8.8	—	0.2%	Sep 17, 2026
35Monitor	CVE-2026-90371No exploit	wifi: mt76: fix RXDMAD_C buffer recycling racelinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
28Monitor	CVE-2026-90372No exploit	wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nsslinux · linux Pre-auth	High7.1	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-90379No exploit	wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crashlinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-90380No exploit	wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_completelinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-90381No exploit	wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()linux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
31Monitor	CVE-2026-90383No exploit	misc: sgi-gru: remove interrupt-context page-table walkslinux · linux	High7.8	—	0.1%	Sep 17, 2026
29Monitor	CVE-2026-76154No exploit	CVE-2026-76154 CVE Recordgrafana · grafana oss · CWE-79 RCE XSS	High7.3	—	0.3%	Sep 17, 2026
31Monitor	CVE-2026-90387No exploit	swiotlb: Preserve allocation virtual address for dynamic poolslinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90388No exploit	iommu/dma: Check atomic pool allocation result directlylinux · linux	High7.8	—	0.1%	Sep 17, 2026
34Monitor	CVE-2026-77615No exploit	Paella Player: Stored XSS via caption cue textopencast · opencast · CWE-79 XSS	High8.7	—	0.5%	Sep 17, 2026
31Monitor	CVE-2026-90392No exploit	bpf: Fix potential UAF when reading bpf link infolinux · linux	High7.8	—	0.1%	Sep 17, 2026
33Monitor	CVE-2026-90398No exploit	wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()linux · linux	High8.4	—	0.1%	Sep 17, 2026
33Monitor	CVE-2026-90399No exploit	wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()linux · linux	High8.4	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90401No exploit	md: remove REQ_NOWAIT support from raid1/10/456linux · linux	High7.1	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90402No exploit	bus: mhi: host: Fix controller cleanup on EDL sysfs failurelinux · linux	High7.0	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-90403No exploit	wifi: rtlwifi: pci: fix error path in rtl_pci_probe()linux · linux	High7.0	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90407No exploit	wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()linux · linux	High7.7	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-90408No exploit	wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()linux · linux	High7.7	—	0.1%	Sep 17, 2026
36Monitor	CVE-2026-90413No exploit	IB/isert: reject login PDUs declaring more data than was receivedlinux · linux Pre-auth	Critical9.1	—	0.8%	Sep 17, 2026
36Monitor	CVE-2026-90414No exploit	IB/isert: reject PDUs declaring more data than was receivedlinux · linux Pre-auth	Critical9.1	—	0.5%	Sep 17, 2026
28Monitor	CVE-2026-90419No exploit	nilfs2: prevent out-of-bounds read in super root block parsinglinux · linux	High7.1	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90423No exploit	RDMA/rxe: Fix UAF in ODP init error-handling pathlinux · linux	High7.8	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-90425No exploit	iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSIDlinux · linux	High8.8	—	0.1%	Sep 17, 2026

CVE-2026-90162
35Monitor
ksmbd: defer publishing granted locks to prevent UAF/double-free race
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2021-3030
24Monitor
Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in colo
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
Sep 17, 2026
CVE-2026-90172
30Monitor
smb: smbdirect: destroy QP before mem pools on accept failure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90173
39Monitor
smb: smbdirect: free completion queues with ib_free_cq()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90174
28Monitor
ksmbd: fix slab-out-of-bounds read in ksmbd_alloc_user()
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-15815
35Monitor
CVE-2026-15815 CVE Record
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Path traversal
grafana · grafana ossSep 17, 2026
CVE-2026-90176
32Monitor
ksmbd: Do not skip lock checks for single-byte ranges
HighCVSS 8.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90177
31Monitor
bpf: Check pointer type for all atomic RMW paths
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-45140
39Monitor
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
CriticalCVSS 9.8Proof of conceptEPSS 1%
- pre-auth RCE
- Path traversal
chamilo · chamilo-lmsSep 17, 2026
CVE-2026-48977
30Monitor
OpenSlide: Arbitrary memory write with crafted Ventana BIF file
HighCVSS 7.7No exploitEPSS 0%
- RCE
openslide · openslideSep 17, 2026
CVE-2026-90191
33Monitor
mailbox: riscv-sbi-mpxy: validate RPMI notification lengths
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-50275
30Monitor
Datadog PHP Tracer: Improper parsing of W3C baggage headers may lead to DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
datadog · dd-trace-phpSep 17, 2026
CVE-2026-50277
30Monitor
dd-trace-cpp: Improper parsing of W3C baggage headers may lead to DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
datadog · dd-trace-cppSep 17, 2026
CVE-2026-90199
31Monitor
fs/ntfs3: reject out-of-range evcn in mi_enum_attr()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-52483
35Monitor
The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N2-SV router with firmware BR_g8.10_1.11(WVK.0)b46 allow auth
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
Sep 17, 2026
CVE-2026-54237
37Monitor
Wavelog: Unauthenticated Remote Code Execution
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
wavelog · wavelogSep 17, 2026
CVE-2026-54339
30Monitor
Glean: Server-Side Request Forgery (SSRF) with Full Response Disclosure via Malicious RSS Feed in /api/feeds/discover
HighCVSS 7.7No exploitEPSS 0%
- SSRF
leslieleung · gleanSep 17, 2026
CVE-2026-54354
32Monitor
MapServer: PostGIS Numeric Filter Value SQL Injection in MapServer Runtime Query Translation
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- SQL injection
mapserver · mapserverSep 17, 2026
CVE-2026-90203
28Monitor
Squashfs: check block offset is not negative
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 17, 2026
CVE-2026-90204
31Monitor
ocfs2: validate DIO orphan slot during inode read
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90205
31Monitor
ocfs2: validate orphan slot during inode read
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-54501
37Monitor
Browsertrix: Arbitrary Command Injection due to Improper Command Sanitization in Git URLs specified as Custom Behaviors
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- Command injection
webrecorder · browsertrixSep 17, 2026
CVE-2026-90207
31Monitor
ALSA: seq: midi: Serialize input teardown with event_input
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90210
31Monitor
bpf: Fix UAF in bpf_trampoline_multi_attach_free on update failure
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-54510
28Monitor
Speakr: CSRF bypass via unauthenticated API token parameter in csrf_exempt_for_api_tokens hook
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- CSRF
murtaza-nasir · speakrSep 17, 2026
CVE-2026-54597
33Monitor
ITFlow: Authenticated Time-Based Blind SQL Injection in ITFlow via expires Parameter
HighCVSS 8.3Proof of conceptEPSS 0%
- SQL injection
itflow-org · itflowSep 17, 2026
CVE-2026-90217
31Monitor
bpf: Compare iterator types during state pruning
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-54916
35Monitor
NetBox Device Type Library: Module Shadowing Bypass of prior pickle fix - RCE via missing `tests/__init__.py` + SSRF via unfixed `NETBOX_DT_LIBRARY_URL` → Cloud
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- SSRF
netbox-community · devicetype-librarySep 17, 2026
CVE-2026-90223
28Monitor
nfc: llcp: bound SNL TLV parsing to the skb and add length checks
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90224
30Monitor
nfc: nci: fix double completion race in nci_data_exchange_complete
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90225
31Monitor
nfc: llcp: read llcp_sock->local under the socket lock in getsockopt
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90227
31Monitor
nvme/ioctl: check SUBMIT_IO with nvme_cmd_allowed()
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 17, 2026
CVE-2026-90228
30Monitor
nvmet: fix NULL pointer dereference in nvmet_execute_identify_ns_zns()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90229
29Monitor
nvme-apple: Destroy the admin queue on removal
HighCVSS 7.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90230
36Monitor
nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate()
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90231
33Monitor
apparmor: fix unconfined user namespace restriction forced stack
HighCVSS 8.4No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 17, 2026
CVE-2026-68523
30Monitor
Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
fulgur-rs · fulgurSep 17, 2026
CVE-2026-90234
30Monitor
NFS: Return a delegation the client fails to record
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90235
39Monitor
sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90237
31Monitor
netfilter: nft_ct: move custom expectation support to helper
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-68537
30Monitor
Fulgur: Unbounded page slicing from attacker-controlled CSS height causes denial of service
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
fulgur-rs · fulgurSep 17, 2026
CVE-2026-90240
35Monitor
iommu/vt-d: Flush context cache with correct SID when tearing down aliases
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90241
32Monitor
iommu/vt-d: Tear down scalable-mode context on probe failure
HighCVSS 8.2No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90243
32Monitor
iommu/vt-d: Clear Present bit before tearing down copied context entry
HighCVSS 8.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90244
31Monitor
iommu/dma: Restore locking around msi_page_list
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90246
28Monitor
apparmor: fix integer overflow in verify_tags() bounds check
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90255
35Monitor
Bluetooth: hci_conn: fix the SCO setup context lifetime
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90256
35Monitor
Bluetooth: L2CAP: use proto_lock for l2cap_data to fix l2cap_disconn_ind
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90260
28Monitor
btrfs: zoned: don't clobber the extent buffer when zeroing it out
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90268
32Monitor
scsi: sd: Fix error handling in sd_probe() after large pool creation failure
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90286
35Monitor
drm/amdgpu/gfx6: Use PFP on the compute queues too
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90288
29Monitor
phy: renesas: rcar-gen2: Fix double of_node_put on phy creation failure
HighCVSS 7.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90289
31Monitor
drm/amd/display: Resize MST HDCP per-connector arrays to 32
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90291
31Monitor
module/dups: Fix use-after-free in kmod_dup_req lifetime handling
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90292
31Monitor
RDMA/siw: Fix use-after-free in siw_accept()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90293
30Monitor
IB/isert: post the full-feature receive buffers after session registration
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90294
30Monitor
IB/isert: delay the final Login Response until the session is registered
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-90301
32Monitor
ocfs2: o2hb: quiesce negotiate handlers and timeout work
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90308
31Monitor
RDMA/erdma: Hold QP references for AE and CM processing
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90309
31Monitor
RDMA/erdma: Hold CQ references when processing EQ events
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90312
31Monitor
bpf: Check load-acquire src ptr type before the load
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90316
31Monitor
drm/omap: dsi: Do not copy isr table
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90317
31Monitor
bpf: Invalidate RCU pointers after final spin unlock
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90320
31Monitor
ocfs2: validate external xattr entries when reading metadata
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90321
31Monitor
ocfs2: validate inline xattrs during inode block validation
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90324
31Monitor
ublk: check import_ubuf() return value
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90325
31Monitor
blk-cgroup: skip dying blkg in blkcg_activate_policy()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90326
31Monitor
blk-cgroup: fix race between policy activation and blkg destruction
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90329
35Monitor
HID: synchronize input before cleaning up a failed probe
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90332
32Monitor
PCI: dwc: ep: Flush cached MSI write before unmapping the iATU
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90341
30Monitor
firmware: coreboot: Validate table bounds
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90343
31Monitor
wifi: cfg80211: stop PMSR before P2P and NAN teardown
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90347
33Monitor
arm64: ptrace: Keep 'orig_x0' in-sync with x0 on syscall entry
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90353
28Monitor
wifi: mt76: mt7915: fix ext PHY use-after-free on register error path
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90357
35Monitor
wifi: mt76: mt7915: unlink TWT flow if the MCU rejects the agreement
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90358
31Monitor
bpf, x86: Fix trampoline stack size for 128-bit arguments
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90367
35Monitor
wifi: mt76: mt7996: hold dev->mt76.mutex while disabling tx worker in SER
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90371
35Monitor
wifi: mt76: fix RXDMAD_C buffer recycling race
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90372
28Monitor
wifi: mt76: mt7915: avoid nss underflow in mt7915_mcu_get_sta_nss
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90379
35Monitor
wifi: mt76: mt7921: Add PCIe AER handler support to prevent system crash
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90380
35Monitor
wifi: mt76: mt792x: fix use-after-free in mt76_rx_poll_complete
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90381
35Monitor
wifi: mt76: fix handling channel context with different bands in mt76_switch_vif_chanctx()
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90383
31Monitor
misc: sgi-gru: remove interrupt-context page-table walks
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-76154
29Monitor
CVE-2026-76154 CVE Record
HighCVSS 7.3No exploitEPSS 0%
- RCE
- XSS
grafana · grafana ossSep 17, 2026
CVE-2026-90387
31Monitor
swiotlb: Preserve allocation virtual address for dynamic pools
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90388
31Monitor
iommu/dma: Check atomic pool allocation result directly
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-77615
34Monitor
Paella Player: Stored XSS via caption cue text
HighCVSS 8.7No exploitEPSS 0%
- XSS
opencast · opencastSep 17, 2026
CVE-2026-90392
31Monitor
bpf: Fix potential UAF when reading bpf link info
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90398
33Monitor
wifi: ath11k: fix stride mismatch in mac_phy_caps_parse()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90399
33Monitor
wifi: ath12k: fix stride mismatch in mac_phy_caps_parse()
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90401
28Monitor
md: remove REQ_NOWAIT support from raid1/10/456
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90402
28Monitor
bus: mhi: host: Fix controller cleanup on EDL sysfs failure
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90403
28Monitor
wifi: rtlwifi: pci: fix error path in rtl_pci_probe()
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90407
30Monitor
wifi: ath11k: fix overreads in ath11k_wmi_process_csa_switch_count_event()
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90408
30Monitor
wifi: ath12k: fix overreads in ath12k_wmi_process_csa_switch_count_event()
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90413
36Monitor
IB/isert: reject login PDUs declaring more data than was received
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90414
36Monitor
IB/isert: reject PDUs declaring more data than was received
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-90419
28Monitor
nilfs2: prevent out-of-bounds read in super root block parsing
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90423
31Monitor
RDMA/rxe: Fix UAF in ODP init error-handling path
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90425
35Monitor
iommu/tegra241-cmdqv: Require exactly one Stream ID for a vSID
HighCVSS 8.8No exploitEPSS 0%
linux · linuxSep 17, 2026