By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 55 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-85885No exploit	Microsoft 365 Copilot Elevation of Privilege Vulnerabilitymicrosoft · 365 copilot · CWE-77 RCE Command injection	High8.8	—	0.7%	Sep 17, 2026
39Monitor	CVE-2026-85889No exploit	Azure AI Foundry Elevation of Privilege Vulnerabilitymicrosoft · azure ai foundry · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-85917No exploit	Azure AI Foundry Elevation of Privilege Vulnerabilitymicrosoft · foundry · CWE-918 Pre-auth SSRF	High7.5	—	0.9%	Sep 17, 2026
61This week	CVE-2026-87886Weaponized	Local privilege escalation due to insecure file permissions.acronis · acronis backup · CWE-276 Local privilege escalation	High7.8	KEV	0.2%	Sep 17, 2026
34Monitor	CVE-2026-93435No exploit	redis-parser through 3.0.0 Denial of Service via Unbounded Recursionnoderedis · redis-parser · CWE-674 Pre-auth Denial of service	High8.7	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-50125No exploit	MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustionstackloklabs · mkp · CWE-400 Pre-auth Denial of service	High7.5	—	0.4%	Sep 17, 2026
37Monitor	CVE-2026-54618No exploit	Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the userjimprosser · obsidian-web-mcp · CWE-306 Pre-auth Auth bypass	Critical9.4	—	0.5%	Sep 17, 2026
40Plan	CVE-2026-69843No exploit	Microsoft Fabric Elevation of Privilege Vulnerabilitymicrosoft · fabric · CWE-290 Pre-auth Auth bypass	Critical10.0	—	0.9%	Sep 17, 2026
39Monitor	CVE-2026-85878No exploit	Azure Database for PostgreSQL Elevation of Privilege Vulnerabilitymicrosoft · azure horizondb · CWE-285 Broken access control (IDOR)	Critical9.9	—	0.7%	Sep 17, 2026
34Monitor	CVE-2026-93450No exploit	go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshalgo-openapi · swag · CWE-674 Pre-auth Denial of service	High8.7	—	1.1%	Sep 17, 2026
34Monitor	CVE-2026-93453Proof of concept	SOGo before 5.12.11 Password Reset Token Interception via Origin Headeralinto · sogo · CWE-640 Pre-auth	High8.7	—	0.4%	Sep 17, 2026
34Monitor	CVE-2026-79954No exploit	NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCIDnasa · cryptolib · CWE-306 Pre-auth Auth bypass	High8.7	—	0.5%	Sep 17, 2026
39Monitor	CVE-2025-55787No exploit	In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Sep 17, 2026
36Monitor	CVE-2026-45143No exploit	Chamilo LMS: Student-to-admin stored XSS in private messages via v-htmlchamilo · chamilo-lms · CWE-79 XSS	Critical9.0	—	0.4%	Sep 17, 2026
39Monitor	CVE-2026-54460No exploit	OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeoveropen-reception · appointment-booking-software · CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.6%	Sep 17, 2026
32Monitor	CVE-2026-54596Proof of concept	ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltrationitflow-org · itflow · CWE-89 SQL injection	High8.1	—	0.4%	Sep 17, 2026
36Monitor	CVE-2026-93393No exploit	Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel streammongodb · c driver · CWE-787 Pre-auth Memory safety	Critical9.2	—	0.4%	Sep 17, 2026
28Monitor	CVE-2026-93455No exploit	django-page-cms through 2.0.13 Unauthorized Content Access via Staff Accountbatiste · django-page-cms · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 17, 2026
33Monitor	CVE-2026-93456No exploit	django-page-cms through 2.0.13 CSRF via admin mutation viewsbatiste · django-page-cms · CWE-352 Pre-auth XSS CSRF	High8.4	—	0.2%	Sep 17, 2026
37Monitor	CVE-2026-93467No exploit	HGiga｜OAKlouds - Insecure Deserializationhgiga · oaklouds-custom_page-2.0 · CWE-502 pre-auth RCE Deserialization	Critical9.3	—	0.9%	Sep 17, 2026
34Monitor	CVE-2026-93468No exploit	HGiga｜OAKlouds - Arbitrary File Readhgiga · oaklouds-bulletin_v3-2.0 · CWE-23 Pre-auth Path traversal	High8.7	—	0.6%	Sep 17, 2026
39Monitor	CVE-2026-69399No exploit	Azure Arc Elevation of Privilege Vulnerabilitymicrosoft · azure arc · CWE-441	Critical9.9	—	0.5%	Sep 17, 2026
40Plan	CVE-2026-69865No exploit	Microsoft Container Registry Elevation of Privilege Vulnerabilitymicrosoft · azure container registry · CWE-639 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.7%	Sep 17, 2026
34Monitor	CVE-2026-78501No exploit	Microsoft 365 Copilot Business Chat Information Disclosure Vulnerabilitymicrosoft · 365 copilot chat · CWE-77 pre-auth RCE Command injection	High8.6	—	0.5%	Sep 17, 2026
38Monitor	CVE-2026-87701No exploit	Azure Cosmos DB Elevation of Privilege Vulnerabilitymicrosoft · azure cosmos db · CWE-74	Critical9.6	—	0.7%	Sep 17, 2026
34Monitor	CVE-2026-93436No exploit	vLLM through 0.29.0 Memory Exhaustion via Rejected Requestsvllm · vllm · CWE-401 Pre-auth Denial of service	High8.7	—	0.7%	Sep 17, 2026
39Monitor	CVE-2026-62874No exploit	Azure Billing Elevation of Privilege Vulnerabilitymicrosoft · azure billing · CWE-345 Pre-auth	Critical9.8	—	0.3%	Sep 18, 2026
35Monitor	CVE-2026-17086No exploit	ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Contentshortpixel · shortpixel image optimizer – optimize images, convert webp & avif · CWE-502 Deserialization	High8.8	—	1.3%	Sep 18, 2026
30Monitor	CVE-2026-85887No exploit	M365 Copilot Information Disclosure Vulnerabilitymicrosoft · 365 copilot · CWE-732	High7.7	—	0.8%	Sep 18, 2026
34Monitor	CVE-2026-93452No exploit	snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compressxerial · snappy-java · CWE-787 Pre-auth Memory safety	High8.7	—	0.6%	Sep 18, 2026
31Monitor	CVE-2026-18911No exploit	ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send reqzohocorp · manageengine datasecurity plus · CWE-20 Pre-auth Auth bypass	High7.5	—	1.8%	Sep 18, 2026
28Monitor	CVE-2026-81810No exploit	All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosureunknown · all-in-one wp migration and backup · CWE-269	High7.2	—	0.4%	Sep 18, 2026
36Monitor	CVE-2026-84738No exploit	AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCEunknown · af companion · CWE-94 RCE File upload	Critical9.1	—	0.8%	Sep 18, 2026
35Monitor	CVE-2026-85122No exploit	Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusionunknown · easy form builder by whitestudio · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Sep 18, 2026
35Monitor	CVE-2026-85127No exploit	VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachmentunknown · vikbooking hotel booking engine & pms · CWE-79 Pre-auth XSS	High8.8	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-87767No exploit	WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via urlunknown · wp shortcut link and advertisement baner · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-87770No exploit	Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via productunknown · price drop alert for woo commerce · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-87771No exploit	Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and readunknown · product question and answer · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-87774No exploit	Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via weekunknown · tz weekly radio schedule · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-87775No exploit	Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cellunknown · tz weekly radio schedule · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Sep 18, 2026
35Monitor	CVE-2026-88825No exploit	iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settingsunknown · igms direct booking · CWE-79 Pre-auth XSS	High8.8	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-90978No exploit	Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Checkunknown · filter gallery · CWE-284 Broken access control (IDOR)	High7.1	—	0.3%	Sep 18, 2026
32Monitor	CVE-2026-89413No exploit	Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameterfarazfrank · filter gallery · CWE-862 Broken access control (IDOR)	High8.1	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-92619No exploit	Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameterwpdevelop · booking calendar · CWE-269	High7.2	—	0.6%	Sep 18, 2026
35Monitor	CVE-2026-12384No exploit	Broken Access Control in TECHIN2B Applicationtechin2b · techin2b application · CWE-639 Broken access control (IDOR)	High8.8	—	0.4%	Sep 18, 2026
35Monitor	CVE-2026-12954No exploit	Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parametermapster · mapster wp maps · CWE-20	High8.8	—	0.6%	Sep 18, 2026
30Monitor	CVE-2026-14323No exploit	Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parametersprintcart · printcart store – web to print product designer for woocommerce · CWE-22 Pre-auth Path traversal	High7.5	—	1.3%	Sep 18, 2026
30Monitor	CVE-2026-15275No exploit	WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameterwpexpertsio · wp multi store locator pro · CWE-89 Pre-auth SQL injection	High7.5	—	0.5%	Sep 18, 2026
30Monitor	CVE-2026-18442No exploit	WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameterwclovers · wcfm marketplace – multivendor marketplace for woocommerce · CWE-89 Pre-auth SQL injection	High7.5	—	0.6%	Sep 18, 2026
30Monitor	CVE-2026-85705No exploit	Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parametersayecode ltd · location manager · CWE-89 Pre-auth SQL injection	High7.5	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-93494No exploit	Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminatedred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Pre-auth Denial of service	High7.5	—	0.4%	Sep 18, 2026
21Monitor	CVE-2026-13635No exploit	An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280synology · diskstation manager (dsm) · CWE-116 Pre-auth	Medium5.3	—	0.4%	Sep 18, 2026
39Monitor	CVE-2026-13639No exploit	An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009synology · diskstation manager (dsm) · CWE-331 Pre-auth	Critical9.8	—	0.6%	Sep 18, 2026
35Monitor	CVE-2026-13673No exploit	An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-synology · diskstation manager (dsm) · CWE-732	High8.8	—	0.4%	Sep 18, 2026
39Monitor	CVE-2026-13684Proof of concept	An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9,synology · diskstation manager (dsm) · CWE-116 Pre-auth	Critical9.8	—	0.5%	Sep 18, 2026
32Monitor	CVE-2026-40530No exploit	An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1synology · diskstation manager (dsm) · CWE-93	High8.0	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-40539No exploit	An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 andsynology · diskstation manager (dsm) · CWE-295 Pre-auth Weak crypto	High7.1	—	0.1%	Sep 18, 2026
26Monitor	CVE-2026-4036No exploit	An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStationsynology · diskstation manager (dsm) · CWE-89 SQL injection	Medium6.5	—	0.4%	Sep 18, 2026
32Monitor	CVE-2026-6205No exploit	An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280synology · diskstation manager (dsm) · CWE-73 Path traversal	High8.1	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-83561No exploit	Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regexcomplianz · complianz gdpr/ccpa cookie consent banner · CWE-79 Pre-auth XSS	High7.2	—	0.5%	Sep 18, 2026
32Monitor	CVE-2026-85410No exploit	Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameterpixarlabs · master addons for elementor – elementor addons, widgets, mega menu builder, popup builder, widget builder & template kits · CWE-862 Broken access control (IDOR)	High8.1	—	0.5%	Sep 18, 2026
32Monitor	CVE-2026-18912No exploit	Authenticated SQL injectionzohocorp · manageengine datasecurity plus · CWE-89 RCE SQL injection	High8.1	—	1.6%	Sep 18, 2026
28Monitor	CVE-2026-93485Proof of concept	WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerabilityautomattic · wordpress · CWE-79 Pre-auth XSS	High7.1	—	0.7%	Sep 18, 2026
35Monitor	CVE-2026-15579No exploit	An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length durmoxa · tn-4500b series · CWE-787 Pre-auth Memory safety	High8.8	—	0.6%	Sep 18, 2026
25Monitor	CVE-2026-15797No exploit	Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_titledanieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builder · CWE-79 XSS	Medium6.4	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-18405No exploit	Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Contentjegtheme · jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpress · CWE-79 Pre-auth XSS	High7.2	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-87915Proof of concept	Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameterdanieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builder · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-93563No exploit	Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dosred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Pre-auth Denial of service	High7.5	—	0.3%	Sep 18, 2026
30Monitor	CVE-2026-93572No exploit	Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limitsred hat · red hat build of apache camel for spring boot 4 · CWE-770 Pre-auth Denial of service	High7.5	—	0.3%	Sep 18, 2026
30Monitor	CVE-2026-93575No exploit	Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoderred hat · red hat amq broker 7 · CWE-1035 Pre-auth Denial of service	High7.5	—	0.3%	Sep 18, 2026
39Monitor	CVE-2026-67100No exploit	HCL BigFix Service Management is affected by multiple security vulnerabilities.hcltech · bigfix service management · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Sep 18, 2026
32Monitor	CVE-2026-67102No exploit	HCL BigFix Service Management is affected by multiple security vulnerabilities.hcltech · bigfix service management · CWE-285 Broken access control (IDOR)	High8.1	—	0.3%	Sep 18, 2026
30Monitor	CVE-2026-75157Proof of concept	Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)apache software foundation · apache airflow · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Sep 18, 2026
29Monitor	CVE-2026-89058No exploit	Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard configred hat · resteasy · CWE-346 Pre-auth	High7.4	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-89059No exploit	Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)red hat · resteasy · CWE-409 Pre-auth Denial of service	High7.5	—	1.5%	Sep 18, 2026
37Monitor	CVE-2026-28197No exploit	Privilege Escalation via Argument Injection in NetBackup Flex OS Shellcohesity · netbackup flex os · CWE-88 RCE	Critical9.4	—	0.6%	Sep 18, 2026
37Monitor	CVE-2026-28198No exploit	Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shellcohesity · netbackup flex os · CWE-347 Weak crypto	Critical9.4	—	0.3%	Sep 18, 2026
39Monitor	CVE-2026-56590No exploit	HCL BigFix Service Management is affected by multiple security vulnerabilities.hcltech · bigfix service management · CWE-434 Pre-auth File upload	Critical9.8	—	0.1%	Sep 18, 2026
39Monitor	CVE-2026-56592No exploit	HCL BigFix Service Management is affected by multiple security vulnerabilities.hcltech · bigfix service management · CWE-307 Pre-auth Auth bypass	Critical9.8	—	0.2%	Sep 18, 2026
30Monitor	CVE-2026-87743No exploit	Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http securityred hat · exploit intelligence · CWE-551 Pre-auth	High7.5	—	0.5%	Sep 18, 2026
36Monitor	CVE-2023-5778No exploit	Missing Length Checkabb · freelance controller dcp · CWE-130 Pre-auth	Critical9.2	—	0.4%	Sep 18, 2026
24Monitor	CVE-2026-79294Proof of concept	Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the HCWE-79 pre-auth RCE XSS	Medium6.1	—	0.5%	Sep 18, 2026
35Monitor	CVE-2026-88622No exploit	NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.CWE-77 pre-auth RCE Command injection	High8.8	—	1.0%	Sep 18, 2026
30Monitor	CVE-2026-88623No exploit	NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read.CWE-552 Pre-auth	High7.5	—	0.4%	Sep 18, 2026
36Monitor	CVE-2026-93019No exploit	Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_readCWE-196 Pre-auth	Critical9.1	—	0.6%	Sep 18, 2026
30Monitor	CVE-2026-93560No exploit	Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dosred hat · red hat build of apache camel for spring boot 4 · CWE-1035 Pre-auth Denial of service	High7.5	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-93591No exploit	SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.gosiyuan-note · siyuan · CWE-89 RCE SQL injection	High7.2	—	0.3%	Sep 18, 2026
34Monitor	CVE-2026-93593No exploit	ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permissionarcadedata · arcadedb · CWE-863 Broken access control (IDOR)	High8.6	—	0.3%	Sep 18, 2026
28Monitor	CVE-2026-93594No exploit	ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeriesarcadedata · arcadedb · CWE-863 Broken access control (IDOR)	High7.1	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-93595No exploit	ArcadeDB before 26.9.1 ACL Bypass via query_database Toolarcadedata · arcadedb · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 18, 2026
28Monitor	CVE-2026-93598No exploit	ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundlearcadedata · arcadedb · CWE-184	High7.1	—	0.6%	Sep 18, 2026
34Monitor	CVE-2026-93599No exploit	rustls-webpki before 0.103.13 Panic via empty BIT STRINGrustls · webpki · CWE-191 Pre-auth Memory safety	High8.7	—	0.3%	Sep 18, 2026
40Plan	CVE-2026-93603No exploit	vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Functionpatriksimek · vm2 · CWE-94 pre-auth RCE	Critical10.0	—	0.7%	Sep 18, 2026
40Plan	CVE-2026-93605No exploit	vm2 NodeVM before 3.12.1 Remote Code Execution via child_processpatriksimek · vm2 · CWE-693 pre-auth RCE	Critical10.0	—	0.4%	Sep 18, 2026
40Plan	CVE-2026-93606No exploit	vm2 before 3.12.1 Sandbox Escape via Promise Symbol.speciespatriksimek · vm2 · CWE-693 Pre-auth	Critical10.0	—	0.7%	Sep 18, 2026
28Monitor	CVE-2026-77927No exploit	ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpointmacwarrior · clipbucket-v5 · CWE-89 SQL injection	High7.1	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-77928No exploit	ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpointmacwarrior · clipbucket-v5 · CWE-89 SQL injection	High7.1	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-77929No exploit	ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpointmacwarrior · clipbucket-v5 · CWE-434 RCE File upload	High8.7	—	0.9%	Sep 18, 2026
32Monitor	CVE-2026-81627No exploit	Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smramred hat · red hat enterprise linux 10 · CWE-787 Local privilege escalation Memory safety	High8.2	—	0.1%	Sep 18, 2026
30Monitor	CVE-2026-93576No exploit	Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419)red hat · red hat build of apache camel for spring boot 4 · CWE-93 Pre-auth	High7.5	—	0.2%	Sep 18, 2026

CVE-2026-85885
35Monitor
Microsoft 365 Copilot Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
microsoft · 365 copilotSep 17, 2026
CVE-2026-85889
39Monitor
Azure AI Foundry Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · azure ai foundrySep 17, 2026
CVE-2026-85917
30Monitor
Azure AI Foundry Elevation of Privilege Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SSRF
microsoft · foundrySep 17, 2026
CVE-2026-87886
61This week
Local privilege escalation due to insecure file permissions.
HighCVSS 7.8KEVWeaponizedEPSS 0%
- Local privilege escalation
acronis · acronis backupSep 17, 2026
CVE-2026-93435
34Monitor
redis-parser through 3.0.0 Denial of Service via Unbounded Recursion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
noderedis · redis-parserSep 17, 2026
CVE-2026-50125
30Monitor
MKP: Unbounded Pod Log Read via Attacker-Controlled `limitBytes`/`tailLines` Causes Memory Exhaustion
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
stackloklabs · mkpSep 17, 2026
CVE-2026-54618
37Monitor
Obsidian Web MCP: Unauthenticated vault access: /oauth/authorize auto-approves without authenticating the user
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
jimprosser · obsidian-web-mcpSep 17, 2026
CVE-2026-69843
40Plan
Microsoft Fabric Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · fabricSep 17, 2026
CVE-2026-85878
39Monitor
Azure Database for PostgreSQL Elevation of Privilege Vulnerability
CriticalCVSS 9.9No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · azure horizondbSep 17, 2026
CVE-2026-93450
34Monitor
go-openapi/swag jsonutils before 0.27.1 Uncontrolled Recursion in Ordered JSON Marshal and Unmarshal
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
- Denial of service
go-openapi · swagSep 17, 2026
CVE-2026-93453
34Monitor
SOGo before 5.12.11 Password Reset Token Interception via Origin Header
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
alinto · sogoSep 17, 2026
CVE-2026-79954
34Monitor
NASA CryptoLib 1.5.0 - TC receive path accepts Security Associations from the wrong GVCID
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
nasa · cryptolibSep 17, 2026
CVE-2025-55787
39Monitor
In MailData Email Archiving System v4.2 and earlier, a SQL injection vulnerability exists.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
Sep 17, 2026
CVE-2026-45143
36Monitor
Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
CriticalCVSS 9.0No exploitEPSS 0%
- XSS
chamilo · chamilo-lmsSep 17, 2026
CVE-2026-54460
39Monitor
OpenReception: Unauthenticated WebAuthn passkey injection via `POST /api/auth/passkeys` leads to account takeover
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
open-reception · appointment-booking-softwareSep 17, 2026
CVE-2026-54596
32Monitor
ITFlow: Authenticated SQL Injection via recurring_invoice_frequency Parameter Enables Full Database Exfiltration
HighCVSS 8.1Proof of conceptEPSS 0%
- SQL injection
itflow-org · itflowSep 17, 2026
CVE-2026-93393
36Monitor
Heap overflow via oversized decrypted TLS record sequence in Windows Secure Channel stream
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Memory safety
mongodb · c driverSep 17, 2026
CVE-2026-93455
28Monitor
django-page-cms through 2.0.13 Unauthorized Content Access via Staff Account
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
batiste · django-page-cmsSep 17, 2026
CVE-2026-93456
33Monitor
django-page-cms through 2.0.13 CSRF via admin mutation views
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
batiste · django-page-cmsSep 17, 2026
CVE-2026-93467
37Monitor
HGiga｜OAKlouds - Insecure Deserialization
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Deserialization
hgiga · oaklouds-custom_page-2.0Sep 17, 2026
CVE-2026-93468
34Monitor
HGiga｜OAKlouds - Arbitrary File Read
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
hgiga · oaklouds-bulletin_v3-2.0Sep 17, 2026
CVE-2026-69399
39Monitor
Azure Arc Elevation of Privilege Vulnerability
CriticalCVSS 9.9No exploitEPSS 0%
microsoft · azure arcSep 17, 2026
CVE-2026-69865
40Plan
Microsoft Container Registry Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · azure container registrySep 17, 2026
CVE-2026-78501
34Monitor
Microsoft 365 Copilot Business Chat Information Disclosure Vulnerability
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
- Command injection
microsoft · 365 copilot chatSep 17, 2026
CVE-2026-87701
38Monitor
Azure Cosmos DB Elevation of Privilege Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%
microsoft · azure cosmos dbSep 17, 2026
CVE-2026-93436
34Monitor
vLLM through 0.29.0 Memory Exhaustion via Rejected Requests
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
vllm · vllmSep 17, 2026
CVE-2026-62874
39Monitor
Azure Billing Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
microsoft · azure billingSep 18, 2026
CVE-2026-17086
35Monitor
ShortPixel Image Optimizer <= 6.5.5 - Authenticated (Author+) PHP Object Injection via Nested JSON Post Content
HighCVSS 8.8No exploitEPSS 1%
- Deserialization
shortpixel · shortpixel image optimizer – optimize images, convert webp & avifSep 18, 2026
CVE-2026-85887
30Monitor
M365 Copilot Information Disclosure Vulnerability
HighCVSS 7.7No exploitEPSS 0%
microsoft · 365 copilotSep 18, 2026
CVE-2026-93452
34Monitor
snappy-java through 1.1.10.8 Buffer Overflow in Snappy.compress
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
xerial · snappy-javaSep 18, 2026
CVE-2026-18911
31Monitor
ManageEngine DataSecurity Plus versions before 6310 are vulnerable to an agent authentication bypass, allowing unenrolled agents to send req
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Auth bypass
zohocorp · manageengine datasecurity plusSep 18, 2026
CVE-2026-81810
28Monitor
All-in-One WP Migration and Backup < 7.111 - Authenticated Privilege Escalation to Admin via Import Secret Key Disclosure
HighCVSS 7.2No exploitEPSS 0%
unknown · all-in-one wp migration and backupSep 18, 2026
CVE-2026-84738
36Monitor
AF Companion < 2.2.0 - Shop Manager+ Arbitrary File Upload to RCE
CriticalCVSS 9.1No exploitEPSS 0%
- RCE
- File upload
unknown · af companionSep 18, 2026
CVE-2026-85122
35Monitor
Easy Form Builder 4.0.0 - 4.1.3 - Unauthenticated Stored XSS via Form Type Confusion
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · easy form builder by whitestudioSep 18, 2026
CVE-2026-85127
35Monitor
VikBooking 1.8.8 - 1.8.14 - Unauthenticated Stored XSS via SVG Chat Attachment
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · vikbooking hotel booking engine & pmsSep 18, 2026
CVE-2026-87767
34Monitor
WP Shortcut Link <= 1.2.0 - Unauthenticated SQL Injection via url
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · wp shortcut link and advertisement banerSep 18, 2026
CVE-2026-87770
34Monitor
Price Drop Alert for WooCommerce <= 1.1 - Unauthenticated SQL Injection via product
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · price drop alert for woo commerceSep 18, 2026
CVE-2026-87771
34Monitor
Product Question and Answer <= 1.1.0 - Unauthenticated SQL Injection via p_id and read
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · product question and answerSep 18, 2026
CVE-2026-87774
34Monitor
Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQL Injection via week
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · tz weekly radio scheduleSep 18, 2026
CVE-2026-87775
34Monitor
Tz Weekly Radio Schedule <= 1.8.1 - Unauthenticated SQLi via tzwrs_update_cell
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · tz weekly radio scheduleSep 18, 2026
CVE-2026-88825
35Monitor
iGMS Direct Booking < 2.0 - Unauthenticated Stored XSS via Widget Settings
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · igms direct bookingSep 18, 2026
CVE-2026-90978
28Monitor
Filter Gallery < 1.1.5 - Subscriber+ Arbitrary Post Overwrite and Plugin Option Deletion via Fail-Open Nonce Check
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
unknown · filter gallerySep 18, 2026
CVE-2026-89413
32Monitor
Filter Gallery <= 1.1.4 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Gallery Deletion via 'ufg_gallery_id' Parameter
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
farazfrank · filter gallerySep 18, 2026
CVE-2026-92619
28Monitor
Booking Calendar <= 11.8.2 - Authenticated (Editor+) Privilege Escalation to 'data_name' Parameter
HighCVSS 7.2No exploitEPSS 0%
wpdevelop · booking calendarSep 18, 2026
CVE-2026-12384
35Monitor
Broken Access Control in TECHIN2B Application
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
techin2b · techin2b applicationSep 18, 2026
CVE-2026-12954
35Monitor
Mapster WP Maps <= 1.23.0 - Authenticated (Subscriber+) Arbitrary User Meta Write via 'acf-photo-gallery-groups' Parameter
HighCVSS 8.8No exploitEPSS 0%
mapster · mapster wp mapsSep 18, 2026
CVE-2026-14323
30Monitor
Printcart Web to Print Product Designer for WooCommerce <= 2.8.5 - Unauthenticated Arbitrary File Read via 'folder' and 'mockups' Parameters
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
printcart · printcart store – web to print product designer for woocommerceSep 18, 2026
CVE-2026-15275
30Monitor
WP Multi Store Locator Pro <= 4.5.1 - Unauthenticated SQL Injection via 'store_locator_search_radius' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
wpexpertsio · wp multi store locator proSep 18, 2026
CVE-2026-18442
30Monitor
WCFM Marketplace <= 3.8.2 - Unauthenticated SQL Injection via 'wcfmmp_user_location_lat' / 'wcfmmp_user_location_lng' Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
wclovers · wcfm marketplace – multivendor marketplace for woocommerceSep 18, 2026
CVE-2026-85705
30Monitor
Location Manager <= 2.3.38 - Unauthenticated SQL Injection via 'latitude' and 'longitude' REST API Parameters
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
ayecode ltd · location managerSep 18, 2026
CVE-2026-93494
30Monitor
Io.netty/netty-codec-stomp: netty: bytebuf leak in stompsubframedecoder when a frame body is never terminated
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of apache camel for spring boot 4Sep 18, 2026
CVE-2026-13635
21Monitor
An improper encoding or escaping of output vulnerability in Auth API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-13639
39Monitor
An insufficient entropy vulnerability in login logic in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-13673
35Monitor
An incorrect permission assignment for critical resource vulnerability in LDAP API in Synology DiskStation Manager (DSM) before 7.2.1-69057-
HighCVSS 8.8No exploitEPSS 0%
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-13684
39Monitor
An improper encoding or escaping of output vulnerability in SCGI in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-72806-9,
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-40530
32Monitor
An improper neutralization of CRLF sequences ('CRLF injection') vulnerability in User API in Synology DiskStation Manager (DSM) before 7.2.1
HighCVSS 8.0No exploitEPSS 0%
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-40539
28Monitor
An improper certificate validation vulnerability in Email API in Synology DiskStation Manager (DSM) before 7.2.1-69057-10, 7.2.2-72806-7 and
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-4036
26Monitor
An improper neutralization of special elements used in an SQL command ('SQL injection') vulnerability in Sharing API in Synology DiskStation
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-6205
32Monitor
An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager (DSM) before 7.2.1-69057-12, 7.2.2-7280
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
synology · diskstation manager (dsm)Sep 18, 2026
CVE-2026-83561
28Monitor
Complianz GDPR/CCPA Cookie Consent Banner <= 7.5.4 - Unauthenticated Stored Cross-Site Scripting via Elementor Cookie Blocker Regex
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
complianz · complianz gdpr/ccpa cookie consent bannerSep 18, 2026
CVE-2026-85410
32Monitor
Master Addons for Elementor <= 3.2.2 - Missing Authorization to Authenticated (Contributor+) Arbitrary Post Modification/Deletion via 'popup_id' Parameter
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
pixarlabs · master addons for elementor – elementor addons, widgets, mega menu builder, popup builder, widget builder & template kitsSep 18, 2026
CVE-2026-18912
32Monitor
Authenticated SQL injection
HighCVSS 8.1No exploitEPSS 1%
- RCE
- SQL injection
zohocorp · manageengine datasecurity plusSep 18, 2026
CVE-2026-93485
28Monitor
WordPress Core <= 7.1 - Cross Site Scripting (XSS) vulnerability
HighCVSS 7.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
automattic · wordpressSep 18, 2026
CVE-2026-15579
35Monitor
An out-of-bounds write vulnerability exists in some of the Ethernet switches because of improper validation of the username field length dur
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
moxa · tn-4500b seriesSep 18, 2026
CVE-2026-15797
25Monitor
Popup Maker <= 1.24.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via post_title
MediumCVSS 6.4No exploitEPSS 0%
- XSS
danieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builderSep 18, 2026
CVE-2026-18405
28Monitor
Jeg Kit for Elementor <= 3.2.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
jegtheme · jeg kit for elementor – powerful addons for elementor, widgets & templates for wordpressSep 18, 2026
CVE-2026-87915
28Monitor
Popup Maker <= 1.24.0 - Unauthenticated Stored Cross-Site Scripting via values[Name] Parameter
HighCVSS 7.2Proof of conceptEPSS 0%
- Pre-auth
- XSS
danieliser · popup maker – boost sales, conversions, optins, subscribers with the ultimate wp popup builderSep 18, 2026
CVE-2026-93563
30Monitor
Io.netty/netty-codec-smtp: netty: unbounded multi-line response accumulation in smtpresponsedecoder leads to memory-exhaustion dos
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of apache camel for spring boot 4Sep 18, 2026
CVE-2026-93572
30Monitor
Io.netty/netty-codec-redis: netty: redisarrayaggregator nested resp headers multiply patched preallocation limits
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of apache camel for spring boot 4Sep 18, 2026
CVE-2026-93575
30Monitor
Io.netty/netty-codec-mqtt: netty: resource exhaustion in mqttdecoder
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-67100
39Monitor
HCL BigFix Service Management is affected by multiple security vulnerabilities.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
hcltech · bigfix service managementSep 18, 2026
CVE-2026-67102
32Monitor
HCL BigFix Service Management is affected by multiple security vulnerabilities.
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
hcltech · bigfix service managementSep 18, 2026
CVE-2026-75157
30Monitor
Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)
HighCVSS 7.5Proof of conceptEPSS 0%
- Pre-auth
- Broken access control (IDOR)
apache software foundation · apache airflowSep 18, 2026
CVE-2026-89058
29Monitor
Resteasy-core: resteasy: corsfilter reflects arbitrary origin with credentials under wildcard config
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
red hat · resteasySep 18, 2026
CVE-2026-89059
30Monitor
Resteasy-core: resteasy: iioimageprovider unbounded image decode (decompression-bomb dos)
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · resteasySep 18, 2026
CVE-2026-28197
37Monitor
Privilege Escalation via Argument Injection in NetBackup Flex OS Shell
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
cohesity · netbackup flex osSep 18, 2026
CVE-2026-28198
37Monitor
Privilege Escalation via Cryptographic Signature Verification Bypass in NetBackup Flex OS Shell
CriticalCVSS 9.4No exploitEPSS 0%
- Weak crypto
cohesity · netbackup flex osSep 18, 2026
CVE-2026-56590
39Monitor
HCL BigFix Service Management is affected by multiple security vulnerabilities.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- File upload
hcltech · bigfix service managementSep 18, 2026
CVE-2026-56592
39Monitor
HCL BigFix Service Management is affected by multiple security vulnerabilities.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
hcltech · bigfix service managementSep 18, 2026
CVE-2026-87743
30Monitor
Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
red hat · exploit intelligenceSep 18, 2026
CVE-2023-5778
36Monitor
Missing Length Check
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
abb · freelance controller dcpSep 18, 2026
CVE-2026-79294
24Monitor
Cross Site Scripting vulnerability in Moonshot AI Kimi version as of 2026-07-18 allows a remote attacker to execute arbitrary code via the H
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
Sep 18, 2026
CVE-2026-88622
35Monitor
NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_import_privilege.php.
HighCVSS 8.8No exploitEPSS 1%
- pre-auth RCE
- Command injection
Sep 18, 2026
CVE-2026-88623
30Monitor
NUUO Network Video Recorder 2.0.0 is vulnerable to arbitrary file read.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
Sep 18, 2026
CVE-2026-93019
36Monitor
Imager versions before 1.036 for Perl exit the process reading a TGA with a colour map length of 32768 or more in tga_palette_read
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
Sep 18, 2026
CVE-2026-93560
30Monitor
Io.netty/netty-codec-stomp: netty: stomp codec content-length long-to-int truncation causes infinite decode loop dos
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat build of apache camel for spring boot 4Sep 18, 2026
CVE-2026-93591
28Monitor
SiYuan before 3.8.3 SQL Injection via unescaped tag in graph.go
HighCVSS 7.2No exploitEPSS 0%
- RCE
- SQL injection
siyuan-note · siyuanSep 18, 2026
CVE-2026-93593
34Monitor
ArcadeDB before 26.9.1 TimeSeries ACL Bypass via Type Permission
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
arcadedata · arcadedbSep 18, 2026
CVE-2026-93594
28Monitor
ArcadeDB before 26.9.1 ACL Bypass via Index and TimeSeries
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
arcadedata · arcadedbSep 18, 2026
CVE-2026-93595
28Monitor
ArcadeDB before 26.9.1 ACL Bypass via query_database Tool
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
arcadedata · arcadedbSep 18, 2026
CVE-2026-93598
28Monitor
ArcadeDB before 26.9.1 Classpath Credential Disclosure via ResourceBundle
HighCVSS 7.1No exploitEPSS 0%
arcadedata · arcadedbSep 18, 2026
CVE-2026-93599
34Monitor
rustls-webpki before 0.103.13 Panic via empty BIT STRING
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
rustls · webpkiSep 18, 2026
CVE-2026-93603
40Plan
vm2 before 3.12.1 Sandbox Escape RCE via Non-Strict Host Function
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
patriksimek · vm2Sep 18, 2026
CVE-2026-93605
40Plan
vm2 NodeVM before 3.12.1 Remote Code Execution via child_process
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
patriksimek · vm2Sep 18, 2026
CVE-2026-93606
40Plan
vm2 before 3.12.1 Sandbox Escape via Promise Symbol.species
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
patriksimek · vm2Sep 18, 2026
CVE-2026-77927
28Monitor
ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
macwarrior · clipbucket-v5Sep 18, 2026
CVE-2026-77928
28Monitor
ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
macwarrior · clipbucket-v5Sep 18, 2026
CVE-2026-77929
34Monitor
ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpoint
HighCVSS 8.7No exploitEPSS 0%
- RCE
- File upload
macwarrior · clipbucket-v5Sep 18, 2026
CVE-2026-81627
32Monitor
Qemu-kvm: vapic writable rom alias can escape the option-rom window and expose locked smram
HighCVSS 8.2No exploitEPSS 0%
- Local privilege escalation
- Memory safety
red hat · red hat enterprise linux 10Sep 18, 2026
CVE-2026-93576
30Monitor
Io.netty/netty-codec-smtp: netty netty-codec-smtp — smtp command-name field is not crlf-validated (incomplete fix of cve-2025-59419)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
red hat · red hat build of apache camel for spring boot 4Sep 18, 2026