By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 56 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-93652No exploit	Integer Overflow or Wraparound in µD3TNd3tn gmbh · µd3tn · CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Sep 18, 2026
34Monitor	CVE-2026-93657No exploit	hickory-resolver before 0.26.2 DNSSEC Validation Bypasshickory-dns · hickory-resolver · CWE-347 Pre-auth Weak crypto	High8.7	—	0.2%	Sep 18, 2026
29Monitor	CVE-2026-93658No exploit	uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuiduutils · coreutils · CWE-281 Local privilege escalation	High7.3	—	0.1%	Sep 18, 2026
28Monitor	CVE-2026-93660No exploit	SQLBot through 1.10.1 Improper Access Control via Dashboard Updatedataease · sqlbot · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 18, 2026
39Monitor	CVE-2026-10027No exploit	IBM MQ queue manager is vulnerable to unauthenticated remote code executionibm · mq · CWE-787 pre-auth RCE Memory safety	Critical9.8	—	0.7%	Sep 18, 2026
28Monitor	CVE-2026-10030No exploit	IBM MQ Console is vulnerable to privilege escalationibm · mq · CWE-285 Broken access control (IDOR)	High7.1	—	0.3%	Sep 18, 2026
35Monitor	CVE-2026-10575No exploit	IBM MQ queue manager is vulnerable to remote code executionibm · mq · CWE-122 RCE Memory safety	High8.8	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-10744No exploit	IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validationibm · mq for hpe nonstop · CWE-122 Memory safety	High7.5	—	0.3%	Sep 18, 2026
40Plan	CVE-2026-10747No exploit	IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processingibm · mq appliance · CWE-122 pre-auth RCE Memory safety	Critical10.0	—	0.9%	Sep 18, 2026
30Monitor	CVE-2026-10751No exploit	IBM MQ Java messaging is vulnerable to remote code executionibm · mq · CWE-502 RCE Deserialization	High7.5	—	0.5%	Sep 18, 2026
35Monitor	CVE-2026-10853No exploit	IBM MQ queue manager is vulnerable to remote code executionibm · mq · CWE-470 RCE	High8.8	—	0.5%	Sep 18, 2026
39Monitor	CVE-2026-10858No exploit	IBM MQ for HPE NonStop is vulnerable to a denial of service attackibm · mq for hpe nonstop · CWE-122 RCE Memory safety	Critical9.9	—	0.5%	Sep 18, 2026
35Monitor	CVE-2026-11375No exploit	IBM MQ queue manager is vulnerable to remote code executionibm · mq · CWE-122 RCE Memory safety	High8.8	—	0.6%	Sep 18, 2026
35Monitor	CVE-2026-11378No exploit	IBM MQ queue manager is vulnerable to remote code executionibm · mq · CWE-190 RCE Memory safety	High8.8	—	0.6%	Sep 18, 2026
35Monitor	CVE-2026-11381No exploit	IBM MQ for HPE NonStop is vulnerable to a denial of service issueibm · mq for hpe nonstop · CWE-122 RCE Memory safety	High8.8	—	0.5%	Sep 18, 2026
32Monitor	CVE-2026-54148No exploit	http4k: `DigestAuthProvider.verify` did not bind to request URIhttp4k · http4k · CWE-294 Pre-auth Auth bypass	High8.1	—	0.5%	Sep 18, 2026
39Monitor	CVE-2026-61682No exploit	kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters ikcp-dev · kcp · CWE-290 Auth bypass	Critical9.9	—	0.3%	Sep 18, 2026
39Monitor	CVE-2026-75031No exploit	In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin featurinterchange · interchange · CWE-94 pre-auth RCE	Critical9.8	—	0.7%	Sep 18, 2026
28Monitor	CVE-2026-7006No exploit	Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanismsublime hq pty ltd · sublime text 4 · CWE-494 RCE Local privilege escalation	High7.0	—	0.1%	Sep 18, 2026
28Monitor	CVE-2026-81305No exploit	CareCam CM2507 Inclusion of Functionality from Untrusted Control Spherecarecam · hmt.cm2507 firmware · CWE-829 RCE	High7.0	—	0.2%	Sep 18, 2026
35Monitor	CVE-2026-81942No exploit	PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Serverplanet technology corp. · planet igs-5225-8p2t4s v1 · CWE-78 RCE Command injection	High8.7	—	1.8%	Sep 18, 2026
33Monitor	CVE-2026-81943No exploit	PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCEplanet technology corp. · planet igs-5225-8p2t4s v1 · CWE-489 RCE Local privilege escalation	High8.4	—	0.1%	Sep 18, 2026
30Monitor	CVE-2026-81944No exploit	PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Serverplanet technology corp. · planet igs-5225-8p2t4s v1 · CWE-121 RCE Memory safety	High7.7	—	0.7%	Sep 18, 2026
30Monitor	CVE-2026-81945No exploit	PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Serverplanet technology corp. · planet igs-5225-8p2t4s v1 · CWE-121 RCE Memory safety	High7.5	—	0.5%	Sep 18, 2026
39Monitor	CVE-2026-84383Proof of concept	libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` itemsstrukturag · libheif · CWE-787 Pre-auth Memory safety	Critical9.8	—	0.7%	Sep 18, 2026
30Monitor	CVE-2026-84384No exploit	libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoSstrukturag · libheif · CWE-409 Pre-auth Denial of service	High7.5	—	0.5%	Sep 18, 2026
34Monitor	CVE-2026-84398No exploit	CareCam CM2507 Empty Password in Configuration Filecarecam · hmt.cm2507 firmware · CWE-258 Pre-auth	High8.7	—	0.4%	Sep 18, 2026
29Monitor	CVE-2026-84444No exploit	libheif uncompressed tiled image encoding allows out-of-bounds writestrukturag · libheif · CWE-787 Pre-auth Memory safety	High7.4	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-84446No exploit	libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_framesstrukturag · libheif · CWE-835 Pre-auth Denial of service	High7.5	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-84447No exploit	libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoSstrukturag · libheif · CWE-770 Pre-auth Denial of service	High7.5	—	0.5%	Sep 18, 2026
34Monitor	CVE-2026-86520No exploit	Use of Hard-coded Credentials in Bransys ELDbransys · eld · CWE-798 Pre-auth Hard-coded credentials	High8.7	—	0.4%	Sep 18, 2026
32Monitor	CVE-2026-86689No exploit	Cleartext Transmission of Sensitive Information in Bransys ELDbransys · eld · CWE-319 Pre-auth Weak crypto	High8.2	—	0.2%	Sep 18, 2026
34Monitor	CVE-2026-88259No exploit	CareCam CM2507 Missing Authentication for Critical Functioncarecam · hmt.cm2507 firmware · CWE-306 Pre-auth Auth bypass	High8.7	—	0.5%	Sep 18, 2026
34Monitor	CVE-2026-93688No exploit	SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_roomsgl-project · sglang · CWE-770 Pre-auth Denial of service	High8.7	—	0.7%	Sep 18, 2026
34Monitor	CVE-2026-93690No exploit	uri-js through 4.4.1 Denial of Service via removeDotSegmentsgarycourt · uri-js · CWE-835 Pre-auth Denial of service	High8.7	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-93737No exploit	Azkaban through 4.0.0 Authorization Bypass via ScheduleServletazkaban · azkaban · CWE-862 Broken access control (IDOR)	High7.1	—	0.5%	Sep 18, 2026
39Monitor	CVE-2026-21806No exploit	HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806)hcltech · bigfix service management · CWE-557 Pre-auth	Critical9.8	—	0.1%	Sep 18, 2026
30Monitor	CVE-2026-93488No exploit	Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streamsred hat · red hat amq broker 7 · CWE-770 Pre-auth Denial of service	High7.5	—	0.9%	Sep 18, 2026
32Monitor	CVE-2026-55556No exploit	Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handlingrsyslog · rsyslog · CWE-122 Pre-auth Memory safety	High8.2	—	0.8%	Sep 18, 2026
35Monitor	CVE-2026-58197No exploit	ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movementstacklok · toolhive · CWE-284 Pre-auth Auth bypass Broken access control (IDOR)	High8.8	—	0.3%	Sep 18, 2026
32Monitor	CVE-2026-61548No exploit	Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured datarsyslog · rsyslog · CWE-121 Pre-auth Memory safety	High8.1	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-61672No exploit	Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcementprojectcapsule · capsule · CWE-697	High7.1	—	0.3%	Sep 18, 2026
34Monitor	CVE-2026-62943No exploit	btrbk: SSH Command Filter Bypass in ssh_filter_btrbk.shdigint · btrbk · CWE-78 RCE Command injection	High8.7	—	0.4%	Sep 18, 2026
28Monitor	CVE-2026-63349No exploit	AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groupsagronholm · anyio · CWE-266 Local privilege escalation	High7.0	—	0.1%	Sep 18, 2026
28Monitor	CVE-2026-73863No exploit	NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsingnanomq · nanomq · CWE-125 Pre-auth Memory safety	High7.0	—	0.3%	Sep 18, 2026
32Monitor	CVE-2026-77239No exploit	WACRM: Service-role routes missing a role checkarnasdon · wacrm · CWE-285 Broken access control (IDOR)	High8.1	—	0.5%	Sep 18, 2026
30Monitor	CVE-2026-77301No exploit	adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)cthackers · adm-zip · CWE-789 Pre-auth Denial of service	High7.5	—	0.6%	Sep 18, 2026
37Monitor	CVE-2026-81321No exploit	CareCam CM2507 Cleartext Storage of Sensitive Informationcarecam · hmt.cm2507 firmware · CWE-312 Pre-auth	Critical9.3	—	0.3%	Sep 18, 2026
28Monitor	CVE-2026-81505No exploit	Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentialsfrain-dev · convoy · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 18, 2026
37Monitor	CVE-2026-85497No exploit	CareCam CM2507 Use of Password Hash With Insufficient Computational Effortcarecam · hmt.cm2507 firmware · CWE-916 Pre-auth	Critical9.3	—	0.3%	Sep 18, 2026
34Monitor	CVE-2026-93758No exploit	Cross-principal document update, theft, and deletion via unvalidated id in nested attributesmongodb · mongoid · CWE-639 Broken access control (IDOR)	High8.6	—	0.3%	Sep 18, 2026
33Monitor	CVE-2026-93765No exploit	Document deletion and process crash via unvalidated method-name dispatch in atomic pop operationmongodb · mongoid · CWE-470 Pre-auth	High8.3	—	0.5%	Sep 18, 2026
30Monitor	CVE-2026-93491No exploit	Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queuered hat · red hat amq broker 7 · CWE-770 Pre-auth Denial of service	High7.5	—	0.8%	Sep 18, 2026
30Monitor	CVE-2026-32641No exploit	Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middlewareparseablehq · parseable · CWE-248 Pre-auth Denial of service	High7.5	—	0.9%	Sep 18, 2026
35Monitor	CVE-2026-33625No exploit	LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loadinginternlm · lmdeploy · CWE-400 pre-auth RCE Denial of service	High8.8	—	0.4%	Sep 18, 2026
36Monitor	CVE-2026-59163No exploit	Mnemosyne has JWT signature verification bypass sync server that allows authentication bypassaxdsan · mnemosyne · CWE-347 Pre-auth Auth bypass Weak crypto	Critical9.1	—	0.3%	Sep 18, 2026
39Monitor	CVE-2026-61550No exploit	Icinga 2: Improper access control for JSON-RPC update certificate messagesicinga · icinga2 · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.6%	Sep 18, 2026
34Monitor	CVE-2026-61551No exploit	Icinga 2: Stack overflow via deeply nested JSON objectsicinga · icinga2 · CWE-674 Pre-auth Denial of service	High8.6	—	0.9%	Sep 18, 2026
28Monitor	CVE-2026-61552No exploit	Icinga 2 DSL Injection via Unescaped Import Template Nameicinga · icinga2 · CWE-94 RCE	High7.2	—	0.9%	Sep 18, 2026
32Monitor	CVE-2026-62278No exploit	LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directoryhargata · lubelog · CWE-22 Path traversal	High8.1	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-63445No exploit	Perses: Unvalidated project parameter enables filesystem path traversalperses · perses · CWE-22 Path traversal	High7.1	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-63458No exploit	Perses project query parameter authorization bypass exposes cross-project resourcesperses · perses · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-69184No exploit	c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chainsc-ares · c-ares · CWE-407 Pre-auth Denial of service	High7.5	—	0.4%	Sep 18, 2026
32Monitor	CVE-2026-81179No exploit	SysReptor: Host header injection might allow account takeoversyslifters · sysreptor · CWE-807 Pre-auth	High8.1	—	0.4%	Sep 18, 2026
35Monitor	CVE-2026-81180No exploit	SysReptor: Authenticated RCE by insecure image processingsyslifters · sysreptor · CWE-20 RCE	High8.8	—	0.6%	Sep 18, 2026
30Monitor	CVE-2026-85058No exploit	Moquette: Missing Authorization in io.moquette:moquette-brokermoquette-io · moquette · CWE-862 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Sep 18, 2026
32Monitor	CVE-2026-91127No exploit	File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC rendererflyfish-dev · file-viewer · CWE-79 Pre-auth XSS	High8.2	—	0.3%	Sep 18, 2026
34Monitor	CVE-2026-93749No exploit	source-map-js through 1.2.1 Event Loop Denial of Service7rulnik · source-map-js · CWE-1284 Pre-auth	High8.7	—	0.4%	Sep 18, 2026
32Monitor	CVE-2026-93750No exploit	http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcardkornelski · http-cache-semantics · CWE-436 Pre-auth	High8.2	—	0.4%	Sep 18, 2026
34Monitor	CVE-2026-93752No exploit	CSSOM through 0.5.0 Denial of Service via length Propertynv · cssom · CWE-915 Pre-auth	High8.7	—	0.6%	Sep 18, 2026
35Monitor	CVE-2026-93759No exploit	Server-side JavaScript injection via string query criteria bypassing the strict operator allowlistmongodb · mongoid · CWE-94 pre-auth RCE	High8.8	—	0.4%	Sep 18, 2026
33Monitor	CVE-2026-93760No exploit	NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guardmongodb · mongoid · CWE-943 Pre-auth SQL injection	High8.3	—	0.5%	Sep 18, 2026
34Monitor	CVE-2026-93761No exploit	Denial of service via unbounded regex matching in Mongoid's in-memory query matchermongodb · mongoid · CWE-1333 Pre-auth Denial of service	High8.7	—	0.4%	Sep 18, 2026
36Monitor	CVE-2026-93762No exploit	Data deletion and attribute disclosure via field-name method injection in in-memory queriesmongodb · mongoid · CWE-470 Pre-auth	Critical9.2	—	0.5%	Sep 18, 2026
28Monitor	CVE-2026-93763No exploit	Silent plaintext persistence via unresolved callable database name in encryption schema mapmongodb · mongoid · CWE-312	High7.1	—	0.1%	Sep 18, 2026
28Monitor	CVE-2026-93764No exploit	Plaintext storage of encrypted fields via skipped embedded models in encryption schema generationmongodb · mongoid · CWE-312	High7.1	—	0.1%	Sep 18, 2026
34Monitor	CVE-2026-93592No exploit	vLLM before 0.28.0 Denial of Service via negative token IDvllm · vllm · CWE-129 Pre-auth	High8.7	—	0.5%	Sep 18, 2026
34Monitor	CVE-2019-25776No exploit	Weaver E-cology SQL Injection via SyncUserInfo.jspweaver network co., ltd. · e-cology · CWE-89 pre-auth RCE SQL injection	High8.7	—	0.5%	Sep 18, 2026
34Monitor	CVE-2021-48008No exploit	Chanjet CRM SQL Injection via get_usedspace.phpchanjet information technology co., ltd. · crm · CWE-89 pre-auth RCE SQL injection	High8.7	—	0.5%	Sep 18, 2026
37Monitor	CVE-2023-54399No exploit	Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettreehongjing · e-hr · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.7%	Sep 18, 2026
30Monitor	CVE-2026-75893No exploit	Heap based buffer overflow at ipaccess_proxy_read_msg()osmocom · osmo-bsc · CWE-122 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Sep 18, 2026
30Monitor	CVE-2026-75894No exploit	Reachable assertion at ranap_handle_co_dt()osmocom · osmo-iuh · CWE-617 Pre-auth Denial of service	High7.5	—	0.3%	Sep 18, 2026
30Monitor	CVE-2026-93558No exploit	Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of servicered hat · red hat amq broker 7 · CWE-1035 Pre-auth Denial of service	High7.5	—	1.2%	Sep 18, 2026
30Monitor	CVE-2026-93564No exploit	Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)red hat · red hat amq broker 7 · CWE-1035 Pre-auth Denial of service	High7.5	—	1.0%	Sep 18, 2026
30Monitor	CVE-2026-93565No exploit	Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control bytered hat · red hat amq broker 7 · CWE-1035 Pre-auth	High7.5	—	0.8%	Sep 18, 2026
31Monitor	CVE-2026-93567No exploit	Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authorityred hat · red hat amq broker 7 · CWE-20 Pre-auth	High7.5	—	2.8%	Sep 18, 2026
30Monitor	CVE-2026-93568No exploit	Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requestsred hat · red hat amq broker 7 · CWE-20 Pre-auth	High7.5	—	1.0%	Sep 18, 2026
33Monitor	CVE-2026-93569No exploit	Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authorityred hat · red hat amq broker 7 · CWE-444 Pre-auth	High8.2	—	2.4%	Sep 18, 2026
34Monitor	CVE-2026-93659Proof of concept	Concrete CMS Community Store before 2.7.8 Stored XSSconcretecms-community-store · community_store · CWE-79 Pre-auth XSS	High8.6	—	0.3%	Sep 18, 2026
28Monitor	CVE-2026-93852No exploit	In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing projecopenstack · blazar · CWE-862 Broken access control (IDOR)	High7.1	—	0.3%	Sep 18, 2026
28Monitor	CVE-2026-93854No exploit	In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2openstack · blazar · CWE-1025	High7.2	—	0.4%	Sep 18, 2026
34Monitor	CVE-2017-20284No exploit	Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servletcaucho technology, inc. · resin · CWE-22 Pre-auth Path traversal	High8.7	—	1.1%	Sep 18, 2026
30Monitor	CVE-2025-14753No exploit	IBM Cloud Pak for Data is vulnerable to path traversalibm · cloud pak for data · CWE-22 Pre-auth Path traversal	High7.5	—	0.6%	Sep 18, 2026
35Monitor	CVE-2025-14754No exploit	IBM Cloud Pak for Data is vulnerable to OS command injectionibm · cloud pak for data · CWE-78 RCE Command injection	High8.8	—	0.6%	Sep 18, 2026
40Plan	CVE-2025-15399No exploit	Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agentibm · common licensing · CWE-352 Pre-auth CSRF	Critical10.0	—	0.2%	Sep 18, 2026
30Monitor	CVE-2026-11716No exploit	IBM MQ for HPE NonStop is vulnerable to a denial of service attackibm · mq for hpe nonstop · CWE-122 RCE Memory safety	High7.5	—	0.4%	Sep 18, 2026
35Monitor	CVE-2026-11725No exploit	IBM MQ queue manager is vulnerable to privilege escalationibm · mq · CWE-190 RCE Memory safety	High8.8	—	0.5%	Sep 18, 2026
39Monitor	CVE-2025-53837No exploit	org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issuexwiki · xwiki-rendering · CWE-95 RCE	Critical9.9	—	1.5%	Sep 18, 2026
34Monitor	CVE-2025-61682No exploit	Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributessemanticmediawiki · semanticmediawiki · CWE-79 Pre-auth XSS	High8.6	—	0.4%	Sep 18, 2026
32Monitor	CVE-2026-11726No exploit	IBM MQ for HPE NonStop is vulnerable to a denial of service issueibm · mq for hpe nonstop · CWE-125 Memory safety	High8.1	—	0.4%	Sep 18, 2026

CVE-2026-93652
30Monitor
Integer Overflow or Wraparound in µD3TN
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
d3tn gmbh · µd3tnSep 18, 2026
CVE-2026-93657
34Monitor
hickory-resolver before 0.26.2 DNSSEC Validation Bypass
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
hickory-dns · hickory-resolverSep 18, 2026
CVE-2026-93658
29Monitor
uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid
HighCVSS 7.3No exploitEPSS 0%
- Local privilege escalation
uutils · coreutilsSep 18, 2026
CVE-2026-93660
28Monitor
SQLBot through 1.10.1 Improper Access Control via Dashboard Update
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
dataease · sqlbotSep 18, 2026
CVE-2026-10027
39Monitor
IBM MQ queue manager is vulnerable to unauthenticated remote code execution
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · mqSep 18, 2026
CVE-2026-10030
28Monitor
IBM MQ Console is vulnerable to privilege escalation
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
ibm · mqSep 18, 2026
CVE-2026-10575
35Monitor
IBM MQ queue manager is vulnerable to remote code execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · mqSep 18, 2026
CVE-2026-10744
30Monitor
IBM MQ for HPE NonStop is vulnerable to a issue in MQINQ request validation
HighCVSS 7.5No exploitEPSS 0%
- Memory safety
ibm · mq for hpe nonstopSep 18, 2026
CVE-2026-10747
40Plan
IBM MQ Appliance is affected by a heap buffer overflow vulnerability in protocol message processing
CriticalCVSS 10.0No exploitEPSS 0%
- pre-auth RCE
- Memory safety
ibm · mq applianceSep 18, 2026
CVE-2026-10751
30Monitor
IBM MQ Java messaging is vulnerable to remote code execution
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Deserialization
ibm · mqSep 18, 2026
CVE-2026-10853
35Monitor
IBM MQ queue manager is vulnerable to remote code execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
ibm · mqSep 18, 2026
CVE-2026-10858
39Monitor
IBM MQ for HPE NonStop is vulnerable to a denial of service attack
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Memory safety
ibm · mq for hpe nonstopSep 18, 2026
CVE-2026-11375
35Monitor
IBM MQ queue manager is vulnerable to remote code execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · mqSep 18, 2026
CVE-2026-11378
35Monitor
IBM MQ queue manager is vulnerable to remote code execution
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · mqSep 18, 2026
CVE-2026-11381
35Monitor
IBM MQ for HPE NonStop is vulnerable to a denial of service issue
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · mq for hpe nonstopSep 18, 2026
CVE-2026-54148
32Monitor
http4k: `DigestAuthProvider.verify` did not bind to request URI
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
http4k · http4kSep 18, 2026
CVE-2026-61682
39Monitor
kcp front-proxy does not strip inbound X-Remote-* identity headers, allowing any authenticated client to inject groups/warrants and impersonate system:masters i
CriticalCVSS 9.9No exploitEPSS 0%
- Auth bypass
kcp-dev · kcpSep 18, 2026
CVE-2026-75031
39Monitor
In the interchange/interchange project, a critical remote code execution (RCE) vulnerability was found in the “quick question” admin featur
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
interchange · interchangeSep 18, 2026
CVE-2026-7006
28Monitor
Sublime Text 4192/3207 Local Privilege Escalation via Update Staging Mechanism
HighCVSS 7.0No exploitEPSS 0%
- RCE
- Local privilege escalation
sublime hq pty ltd · sublime text 4Sep 18, 2026
CVE-2026-81305
28Monitor
CareCam CM2507 Inclusion of Functionality from Untrusted Control Sphere
HighCVSS 7.0No exploitEPSS 0%
- RCE
carecam · hmt.cm2507 firmwareSep 18, 2026
CVE-2026-81942
35Monitor
PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server
HighCVSS 8.7No exploitEPSS 1%
- RCE
- Command injection
planet technology corp. · planet igs-5225-8p2t4s v1Sep 18, 2026
CVE-2026-81943
33Monitor
PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
planet technology corp. · planet igs-5225-8p2t4s v1Sep 18, 2026
CVE-2026-81944
30Monitor
PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Memory safety
planet technology corp. · planet igs-5225-8p2t4s v1Sep 18, 2026
CVE-2026-81945
30Monitor
PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Memory safety
planet technology corp. · planet igs-5225-8p2t4s v1Sep 18, 2026
CVE-2026-84383
39Monitor
libheif: Heap buffer overflow in `scale_nearest_neighbor()` via duplicate Alpha planes from nested `iden`/`auxl` items
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
strukturag · libheifSep 18, 2026
CVE-2026-84384
30Monitor
libheif: brotli/zlib decompression paths lack output-size limits, allowing decompression-bomb OOM/DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
strukturag · libheifSep 18, 2026
CVE-2026-84398
34Monitor
CareCam CM2507 Empty Password in Configuration File
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
carecam · hmt.cm2507 firmwareSep 18, 2026
CVE-2026-84444
29Monitor
libheif uncompressed tiled image encoding allows out-of-bounds write
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
strukturag · libheifSep 18, 2026
CVE-2026-84446
30Monitor
libheif: Sequence decode timing-table initialization allows non-terminating loops and unbounded memory, bypassing max_sequence_frames
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
strukturag · libheifSep 18, 2026
CVE-2026-84447
30Monitor
libheif: Derived-image indirect reference chains and tiled offsets bypass decode caching and MemoryHandle limits, causing CPU/memory amplification DoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
strukturag · libheifSep 18, 2026
CVE-2026-86520
34Monitor
Use of Hard-coded Credentials in Bransys ELD
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
bransys · eldSep 18, 2026
CVE-2026-86689
32Monitor
Cleartext Transmission of Sensitive Information in Bransys ELD
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
bransys · eldSep 18, 2026
CVE-2026-88259
34Monitor
CareCam CM2507 Missing Authentication for Critical Function
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
carecam · hmt.cm2507 firmwareSep 18, 2026
CVE-2026-93688
34Monitor
SGLang through 0.5.19 Unbounded Memory Allocation via bootstrap_room
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
sgl-project · sglangSep 18, 2026
CVE-2026-93690
34Monitor
uri-js through 4.4.1 Denial of Service via removeDotSegments
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
garycourt · uri-jsSep 18, 2026
CVE-2026-93737
28Monitor
Azkaban through 4.0.0 Authorization Bypass via ScheduleServlet
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
azkaban · azkabanSep 18, 2026
CVE-2026-21806
39Monitor
HCL BigFix Service Management was affected with Admin Session Concurrency vulnerability (CVE-2026-21806)
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
hcltech · bigfix service managementSep 18, 2026
CVE-2026-93488
30Monitor
Io.netty/netty-codec-http: netty: denial of service via unbounded concurrent spdy streams
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-55556
32Monitor
Rsyslog: Heap buffer overflow in imhttp plugin Basic Authentication handling
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Memory safety
rsyslog · rsyslogSep 18, 2026
CVE-2026-58197
35Monitor
ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
stacklok · toolhiveSep 18, 2026
CVE-2026-61548
32Monitor
Rsyslog: mmpstrucdata stack buffer overflow with oversized RFC5424 structured data
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Memory safety
rsyslog · rsyslogSep 18, 2026
CVE-2026-61672
28Monitor
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement
HighCVSS 7.1No exploitEPSS 0%
projectcapsule · capsuleSep 18, 2026
CVE-2026-62943
34Monitor
btrbk: SSH Command Filter Bypass in ssh_filter_btrbk.sh
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Command injection
digint · btrbkSep 18, 2026
CVE-2026-63349
28Monitor
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
agronholm · anyioSep 18, 2026
CVE-2026-73863
28Monitor
NanoMQ: Heap-Buffer-Overflow in `nmq_subinfo_decode()` During MQTT v5 SUBSCRIBE Parsing
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- Memory safety
nanomq · nanomqSep 18, 2026
CVE-2026-77239
32Monitor
WACRM: Service-role routes missing a role check
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
arnasdon · wacrmSep 18, 2026
CVE-2026-77301
30Monitor
adm-zip: Uncontrolled memory allocation via the declared uncompressed size (DoS)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
cthackers · adm-zipSep 18, 2026
CVE-2026-81321
37Monitor
CareCam CM2507 Cleartext Storage of Sensitive Information
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
carecam · hmt.cm2507 firmwareSep 18, 2026
CVE-2026-81505
28Monitor
Convoy: Cross-Tenant Source IDOR Leaks Plaintext Message Broker Credentials
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
frain-dev · convoySep 18, 2026
CVE-2026-85497
37Monitor
CareCam CM2507 Use of Password Hash With Insufficient Computational Effort
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
carecam · hmt.cm2507 firmwareSep 18, 2026
CVE-2026-93758
34Monitor
Cross-principal document update, theft, and deletion via unvalidated id in nested attributes
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
mongodb · mongoidSep 18, 2026
CVE-2026-93765
33Monitor
Document deletion and process crash via unvalidated method-name dispatch in atomic pop operation
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
mongodb · mongoidSep 18, 2026
CVE-2026-93491
30Monitor
Io.netty/netty-codec-http: netty: denial of service via unbounded httpservercodec http/1.1 pipeline queue
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-32641
30Monitor
Parseable: Unauthenticated Denial of Service via panic in Kinesis header parsing middleware
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
parseablehq · parseableSep 18, 2026
CVE-2026-33625
35Monitor
LMDeploy vulnerable to arbitrary code execution via eval() of untrusted quant_dtype in model config loading
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Denial of service
internlm · lmdeploySep 18, 2026
CVE-2026-59163
36Monitor
Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
axdsan · mnemosyneSep 18, 2026
CVE-2026-61550
39Monitor
Icinga 2: Improper access control for JSON-RPC update certificate messages
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
icinga · icinga2Sep 18, 2026
CVE-2026-61551
34Monitor
Icinga 2: Stack overflow via deeply nested JSON objects
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Denial of service
icinga · icinga2Sep 18, 2026
CVE-2026-61552
28Monitor
Icinga 2 DSL Injection via Unescaped Import Template Name
HighCVSS 7.2No exploitEPSS 0%
- RCE
icinga · icinga2Sep 18, 2026
CVE-2026-62278
32Monitor
LubeLogger: Path Traversal in HandleTranslationFileUpload Allows Authenticated Users to Write Files Outside Data Directory
HighCVSS 8.1No exploitEPSS 0%
- Path traversal
hargata · lubelogSep 18, 2026
CVE-2026-63445
28Monitor
Perses: Unvalidated project parameter enables filesystem path traversal
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
perses · persesSep 18, 2026
CVE-2026-63458
28Monitor
Perses project query parameter authorization bypass exposes cross-project resources
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
perses · persesSep 18, 2026
CVE-2026-69184
30Monitor
c-ares: CPU-exhaustion denial of service via unbounded DNS name compression pointer chains
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
c-ares · c-aresSep 18, 2026
CVE-2026-81179
32Monitor
SysReptor: Host header injection might allow account takeover
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
syslifters · sysreptorSep 18, 2026
CVE-2026-81180
35Monitor
SysReptor: Authenticated RCE by insecure image processing
HighCVSS 8.8No exploitEPSS 0%
- RCE
syslifters · sysreptorSep 18, 2026
CVE-2026-85058
30Monitor
Moquette: Missing Authorization in io.moquette:moquette-broker
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
moquette-io · moquetteSep 18, 2026
CVE-2026-91127
32Monitor
File Viewer: DOM XSS via unsafe hyperlink schemes in the legacy DOC renderer
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- XSS
flyfish-dev · file-viewerSep 18, 2026
CVE-2026-93749
34Monitor
source-map-js through 1.2.1 Event Loop Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
7rulnik · source-map-jsSep 18, 2026
CVE-2026-93750
32Monitor
http-cache-semantics through 4.2.0 Cross-Client Cache Disclosure via Vary Wildcard
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
kornelski · http-cache-semanticsSep 18, 2026
CVE-2026-93752
34Monitor
CSSOM through 0.5.0 Denial of Service via length Property
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
nv · cssomSep 18, 2026
CVE-2026-93759
35Monitor
Server-side JavaScript injection via string query criteria bypassing the strict operator allowlist
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
mongodb · mongoidSep 18, 2026
CVE-2026-93760
33Monitor
NoSQL injection of JavaScript-executing query operators via unsafe-by-default operator guard
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- SQL injection
mongodb · mongoidSep 18, 2026
CVE-2026-93761
34Monitor
Denial of service via unbounded regex matching in Mongoid's in-memory query matcher
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mongodb · mongoidSep 18, 2026
CVE-2026-93762
36Monitor
Data deletion and attribute disclosure via field-name method injection in in-memory queries
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
mongodb · mongoidSep 18, 2026
CVE-2026-93763
28Monitor
Silent plaintext persistence via unresolved callable database name in encryption schema map
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongoidSep 18, 2026
CVE-2026-93764
28Monitor
Plaintext storage of encrypted fields via skipped embedded models in encryption schema generation
HighCVSS 7.1No exploitEPSS 0%
mongodb · mongoidSep 18, 2026
CVE-2026-93592
34Monitor
vLLM before 0.28.0 Denial of Service via negative token ID
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
vllm · vllmSep 18, 2026
CVE-2019-25776
34Monitor
Weaver E-cology SQL Injection via SyncUserInfo.jsp
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- SQL injection
weaver network co., ltd. · e-cologySep 18, 2026
CVE-2021-48008
34Monitor
Chanjet CRM SQL Injection via get_usedspace.php
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- SQL injection
chanjet information technology co., ltd. · crmSep 18, 2026
CVE-2023-54399
37Monitor
Hongjing e-HR < 8.2 SQL Injection via /servlet/codesettree
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
hongjing · e-hrSep 18, 2026
CVE-2026-75893
30Monitor
Heap based buffer overflow at ipaccess_proxy_read_msg()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
osmocom · osmo-bscSep 18, 2026
CVE-2026-75894
30Monitor
Reachable assertion at ranap_handle_co_dt()
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
osmocom · osmo-iuhSep 18, 2026
CVE-2026-93558
30Monitor
Io.netty/netty-codec-http: netty: unbounded per-connection queue growth in websocketserverextensionhandler leads to denial of service
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-93564
30Monitor
Io.netty/netty-codec-haproxy: netty: haproxy proxy-v2 nested-tlv grandchild bytebuf reference-count leak (incomplete fix of pr #16881)
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-93565
30Monitor
Io.netty/netty-codec-http: netty rtspdecoder method-token smuggling via trailing control byte
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-93567
31Monitor
Io.netty/netty-codec-http2: http/1 authority-form connect is translated to malformed http/2 connect with host-controlled :authority
HighCVSS 7.5No exploitEPSS 2%
- Pre-auth
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-93568
30Monitor
Io.netty/netty-codec-http2: io.netty/netty-codec-http3: netty: http/2 and http/3 extended connect requests are downgraded as regular connect requests
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-93569
33Monitor
Io.netty/netty-codec-http2: http/1 absolute-form host mismatch is translated to http/2 :authority, overriding the request-target authority
HighCVSS 8.2No exploitEPSS 2%
- Pre-auth
red hat · red hat amq broker 7Sep 18, 2026
CVE-2026-93659
34Monitor
Concrete CMS Community Store before 2.7.8 Stored XSS
HighCVSS 8.6Proof of conceptEPSS 0%
- Pre-auth
- XSS
concretecms-community-store · community_storeSep 18, 2026
CVE-2026-93852
28Monitor
In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/leases) returns leases for every project without enforcing projec
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openstack · blazarSep 18, 2026
CVE-2026-93854
28Monitor
In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-level authorization on its update and delete operations (PUT /v2
HighCVSS 7.2No exploitEPSS 0%
openstack · blazarSep 18, 2026
CVE-2017-20284
34Monitor
Caucho Resin resin-doc Unauthenticated Path Traversal via jndi-appconfig Servlet
HighCVSS 8.7No exploitEPSS 1%
- Pre-auth
- Path traversal
caucho technology, inc. · resinSep 18, 2026
CVE-2025-14753
30Monitor
IBM Cloud Pak for Data is vulnerable to path traversal
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
ibm · cloud pak for dataSep 18, 2026
CVE-2025-14754
35Monitor
IBM Cloud Pak for Data is vulnerable to OS command injection
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · cloud pak for dataSep 18, 2026
CVE-2025-15399
40Plan
Multiple vulnerabilities affect IBM License Key Server Administration and Reporting Tool and IBM LKS Administration Agent
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- CSRF
ibm · common licensingSep 18, 2026
CVE-2026-11716
30Monitor
IBM MQ for HPE NonStop is vulnerable to a denial of service attack
HighCVSS 7.5No exploitEPSS 0%
- RCE
- Memory safety
ibm · mq for hpe nonstopSep 18, 2026
CVE-2026-11725
35Monitor
IBM MQ queue manager is vulnerable to privilege escalation
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Memory safety
ibm · mqSep 18, 2026
CVE-2025-53837
39Monitor
org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
CriticalCVSS 9.9No exploitEPSS 1%
- RCE
xwiki · xwiki-renderingSep 18, 2026
CVE-2025-61682
34Monitor
Semantic MediaWiki vulnerable to stored XSS through wikitext via improper use of non-reserved data attributes
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- XSS
semanticmediawiki · semanticmediawikiSep 18, 2026
CVE-2026-11726
32Monitor
IBM MQ for HPE NonStop is vulnerable to a denial of service issue
HighCVSS 8.1No exploitEPSS 0%
- Memory safety
ibm · mq for hpe nonstopSep 18, 2026