By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 60 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
34Monitor	CVE-2026-94627No exploit	vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collisionvllm · vllm · CWE-401 Pre-auth Denial of service	High8.7	—	0.6%	Sep 21, 2026
39Monitor	CVE-2026-13355Proof of concept	Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parametermeta box · meta box frontend submission · CWE-269 Pre-auth	Critical9.8	—	0.6%	Sep 22, 2026
39Monitor	CVE-2026-19658Proof of concept	Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameterliquidweb · give tributes · CWE-502 Pre-auth Deserialization	Critical9.8	—	0.7%	Sep 22, 2026
28Monitor	CVE-2026-12470No exploit	CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Actionniteo · cmp – coming soon & maintenance plugin by niteothemes · CWE-269	High7.2	—	0.5%	Sep 22, 2026
28Monitor	CVE-2026-89412No exploit	TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panelcozmoslabs · translatepress – translate multilingual sites with ai translation · CWE-79 Pre-auth XSS	High7.2	—	0.5%	Sep 22, 2026
30Monitor	CVE-2026-91827No exploit	Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Exportunknown · ninja forms · CWE-502 pre-auth RCE Deserialization	High7.5	—	0.3%	Sep 22, 2026
35Monitor	CVE-2026-92438No exploit	Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Adminunknown · ninja forms · CWE-79 Pre-auth XSS	High8.8	—	0.3%	Sep 22, 2026
28Monitor	CVE-2026-94504No exploit	Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scriptingkstover · ninja forms – contact form builder with calculators, quizzes, signatures & ai form builder · CWE-79 Pre-auth XSS	High7.2	—	0.6%	Sep 22, 2026
39Monitor	CVE-2016-15059No exploit	Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycodeCWE-122 Pre-auth Memory safety	Critical9.8	—	0.4%	Sep 22, 2026
28Monitor	CVE-2026-6922No exploit	WP Table Builder <= 2.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'ids' Parameterwptb · wp table builder – drag & drop table builder · CWE-863 Broken access control (IDOR)	High7.1	—	0.5%	Sep 22, 2026
33Monitor	CVE-2026-74766No exploit	Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_pCWE-416 Memory safety	High8.4	—	0.1%	Sep 22, 2026
36Monitor	CVE-2026-87078No exploit	Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycodeCWE-401 Pre-auth Denial of service	Critical9.1	—	0.3%	Sep 22, 2026
30Monitor	CVE-2026-87079No exploit	Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycodeCWE-407 Pre-auth Denial of service	High7.5	—	0.3%	Sep 22, 2026
36Monitor	CVE-2026-87080No exploit	Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycodeCWE-1286 Pre-auth	Critical9.1	—	0.3%	Sep 22, 2026
30Monitor	CVE-2026-87081No exploit	Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_asciiCWE-407 Pre-auth Denial of service	High7.5	—	0.3%	Sep 22, 2026
30Monitor	CVE-2026-87082No exploit	Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycodeCWE-835 Pre-auth Denial of service	High7.5	—	0.4%	Sep 22, 2026
32Monitor	CVE-2026-92235No exploit	WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameterroxnor · wp ultimate review · CWE-94 RCE	High8.1	—	0.4%	Sep 22, 2026
32Monitor	CVE-2026-92969No exploit	HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAXrealmag777 · husky – products filter for woocommerce professional · CWE-98 pre-auth RCE Auth bypass	High8.1	—	0.8%	Sep 22, 2026
28Monitor	CVE-2026-93778No exploit	WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source)jgwhite33 · wp yelp review slider · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 22, 2026
28Monitor	CVE-2026-93836No exploit	WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameterwpclever · wpc product bundles for woocommerce · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Sep 22, 2026
68This week	CVE-2026-93952Weaponized	Security Advisory 0183arista · velocloud orchestrator · CWE-20 Pre-auth	Critical9.5	KEV	1.3%	Sep 22, 2026
37Monitor	CVE-2026-89422No exploit	TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extensionerlang · otp · CWE-322 Pre-auth	Critical9.3	—	0.4%	Sep 22, 2026
37Monitor	CVE-2026-93556No exploit	Direct references to unsafe objects (IDOR) in Tankuam Places by Kompinikompini · tankuam places · CWE-639 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.4%	Sep 22, 2026
29Monitor	CVE-2026-93928No exploit	WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerabilitymagepeople inc. · taxi booking manager for woocommerce · CWE-288 Pre-auth Auth bypass	High7.3	—	0.4%	Sep 22, 2026
30Monitor	CVE-2026-9231No exploit	WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attributewptravelengine · wp travel engine – tour booking plugin – tour operator software · CWE-98 RCE	High7.5	—	0.5%	Sep 22, 2026
39Monitor	CVE-2026-25254No exploit	Improper authorization in Qualcomm Software Centerqualcomm · software center · CWE-285 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	0.4%	Sep 22, 2026
35Monitor	CVE-2026-25264No exploit	Uncontrolled Search Path Element in Qualcomm Software Centerqualcomm · software center · CWE-427 Local privilege escalation	High8.8	—	0.1%	Sep 22, 2026
35Monitor	CVE-2026-25265No exploit	Creation of Temporary File with Insecure Permissions in Qualcomm Software Centerqualcomm · software center · CWE-378 Local privilege escalation	High8.8	—	0.1%	Sep 22, 2026
34Monitor	CVE-2026-90882No exploit	Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user dataeclipse foundation · open-vsx.org · CWE-942 Pre-auth CSRF	High8.7	—	0.4%	Sep 22, 2026
30Monitor	CVE-2026-94117No exploit	WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerabilitydevitems · hashbar – wordpress notification bar · CWE-89 SQL injection	High7.6	—	0.3%	Sep 22, 2026
35Monitor	CVE-2025-1281No exploit	BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletionseatheme · bm content builder · CWE-22 RCE Path traversal	High8.8	—	0.8%	Sep 22, 2026
40Plan	CVE-2026-74849No exploit	Remote code execution vulnerabilityzohocorp · manageengine adselfservice plus · CWE-78 pre-auth RCE Command injection	Critical9.8	—	4.6%	Sep 22, 2026
32Monitor	CVE-2026-87119No exploit	mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayedzenhive · mpp · CWE-294 Pre-auth Auth bypass	High8.2	—	0.5%	Sep 22, 2026
28Monitor	CVE-2026-89420No exploit	Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for freezenhive · mpp · CWE-1284	High7.1	—	0.4%	Sep 22, 2026
32Monitor	CVE-2026-65634No exploit	Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decodererlang · otp · CWE-407 Pre-auth	High8.2	—	0.2%	Sep 22, 2026
28Monitor	CVE-2026-68956No exploit	SSH daemon allocates unbounded idle session channels, bypassing max_channelserlang · otp · CWE-770 Denial of service	High7.1	—	0.3%	Sep 22, 2026
29Monitor	CVE-2026-95508No exploit	Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtured hat · red hat enterprise linux 10 · CWE-787 pre-auth RCE Memory safety	High7.4	—	0.5%	Sep 22, 2026
35Monitor	CVE-2026-75791No exploit	Authentication bypass vulnerabilityzohocorp · manageengine adselfservice plus · CWE-306 Pre-auth Auth bypass	High8.6	—	1.8%	Sep 22, 2026
96Now	CVE-2026-93616Weaponized	Directory Traversal and File upload allows execution of arbitrary script on the Management Servercheckpoint · multi-domain security management · CWE-22 pre-auth RCE Path traversal	Critical9.8	KEV	91.6%	Sep 22, 2026
31Monitor	CVE-2026-25255No exploit	Exposed function in Qualcomm Package Manager and Qualcomm Software Center.qualcomm · package manager · CWE-749 Local privilege escalation	High7.8	—	0.0%	Sep 22, 2026
25Monitor	CVE-2026-25262Proof of concept	Write-what-where Condition in Primary Bootloaderqualcomm · mdm9207 firmware · CWE-123	Medium6.3	—	0.1%	Sep 22, 2026
39Monitor	CVE-2026-12718No exploit	SQLi in Karel Electronics' KarelIPSkarel electronic industry and trade inc. · karelips · CWE-89 Pre-auth SQL injection	Critical9.8	—	0.4%	Sep 22, 2026
28Monitor	CVE-2026-93343No exploit	MarketKing < 2.1.72 Missing Authorization via marketking_admin_vendors_ajaxwebwizards · marketking · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 22, 2026
38Monitor	CVE-2026-95675Proof of concept	D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interfaced-link · dap-1360 · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.0%	Sep 22, 2026
31Monitor	CVE-2026-24239No exploit	NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution.nvidia · nemo speech · CWE-502 RCE Deserialization	High7.8	—	0.6%	Sep 22, 2026
31Monitor	CVE-2026-24267No exploit	NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an attanvidia · nemo speech · CWE-502 RCE Deserialization Local privilege escalation	High7.8	—	0.6%	Sep 22, 2026
31Monitor	CVE-2026-65111No exploit	NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection.nvidia · nemo speech · CWE-77 RCE Command injection	High7.8	—	0.2%	Sep 22, 2026
39Monitor	CVE-2026-79313No exploit	webpy web.py 0.76 is vulnerable to Insufficient Session Expiration.CWE-613 Pre-auth	Critical9.8	—	0.3%	Sep 22, 2026
35Monitor	CVE-2026-79314No exploit	A horizontal privilege escalation vulnerability exists in x-ui 0.3.2.CWE-284 Broken access control (IDOR)	High8.8	—	0.3%	Sep 22, 2026
30Monitor	CVE-2026-89407No exploit	jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoSfasterxml · jackson-core · CWE-400 Pre-auth Deserialization Denial of service	High7.5	—	0.6%	Sep 22, 2026
39Monitor	CVE-2026-93088No exploit	SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchestsglang · sglang · CWE-502 pre-auth RCE Deserialization	Critical9.8	—	0.7%	Sep 22, 2026
28Monitor	CVE-2026-93344No exploit	MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAXwebwizards · marketking · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 22, 2026
75This week	CVE-2026-94127Weaponized	BIG-IP APM OAuth vulnerabilityf5 · big-ip access policy manager · CWE-122 pre-auth RCE Memory safety	Critical9.3	KEV	26.5%	Sep 22, 2026
21Monitor	CVE-2026-95698No exploit	MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Namemisp · misp · CWE-22 Path traversal	Medium5.3	—	0.7%	Sep 22, 2026
35Monitor	CVE-2026-70410No exploit	Apache Calcite Avatica: Unrestricted class initialization when instantiating pluginsapache software foundation · apache calcite avatica · CWE-470	High8.8	—	0.6%	Sep 22, 2026
32Monitor	CVE-2026-75607No exploit	Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operationsblakeblackshear · frigate · CWE-862 Broken access control (IDOR)	High8.1	—	0.6%	Sep 22, 2026
34Monitor	CVE-2026-77619No exploit	Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.vectordotdev · vector · CWE-130 Pre-auth	High8.7	—	0.5%	Sep 22, 2026
34Monitor	CVE-2026-77620No exploit	Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).vectordotdev · vector · CWE-409 Pre-auth	High8.7	—	0.5%	Sep 22, 2026
37Monitor	CVE-2026-77621No exploit	Vector: Arbitrary file write in the file sink via templated path (path traversal).vectordotdev · vector · CWE-22 Pre-auth Path traversal	Critical9.3	—	1.1%	Sep 22, 2026
28Monitor	CVE-2026-77633No exploit	Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of servicecloudreve · cloudreve · CWE-362 Race condition	High7.1	—	0.3%	Sep 22, 2026
38Monitor	CVE-2026-80143No exploit	Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom readlantronix · slc8000 · CWE-78 RCE Command injection	Critical9.4	—	1.6%	Sep 22, 2026
38Monitor	CVE-2026-80144No exploit	Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom writelantronix · slc8000 · CWE-78 RCE Command injection	Critical9.4	—	1.6%	Sep 22, 2026
38Monitor	CVE-2026-80145No exploit	Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs passwordlantronix · slc8000 · CWE-78 RCE Command injection	Critical9.4	—	1.8%	Sep 22, 2026
37Monitor	CVE-2026-80146No exploit	Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom readlantronix · slc8000 · CWE-121 RCE Memory safety	Critical9.4	—	0.8%	Sep 22, 2026
37Monitor	CVE-2026-80147No exploit	Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom writelantronix · slc8000 · CWE-121 RCE Memory safety	Critical9.4	—	0.4%	Sep 22, 2026
30Monitor	CVE-2026-80148No exploit	Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncationlantronix · slc8000 · CWE-918 Pre-auth SSRF	High7.7	—	0.5%	Sep 22, 2026
30Monitor	CVE-2026-80149No exploit	Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameterlantronix · slc8000 · CWE-918 Pre-auth SSRF	High7.7	—	0.5%	Sep 22, 2026
30Monitor	CVE-2026-80150No exploit	Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameterlantronix · slc8000 · CWE-918 Pre-auth SSRF	High7.7	—	0.5%	Sep 22, 2026
37Monitor	CVE-2026-80151No exploit	Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs downloadlantronix · slc8000 · CWE-78 RCE Command injection	Critical9.4	—	1.6%	Sep 22, 2026
37Monitor	CVE-2026-80152No exploit	Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedulelantronix · slc8000 · CWE-78 RCE Command injection	Critical9.4	—	1.6%	Sep 22, 2026
35Monitor	CVE-2026-80154No exploit	Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypasslantronix · slc8000 · CWE-330 Pre-auth Auth bypass Weak crypto	High8.9	—	0.6%	Sep 22, 2026
40Plan	CVE-2026-80155No exploit	Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncationlantronix · slc8000 · CWE-22 pre-auth RCE Auth bypass Path traversal	Critical10.0	—	1.0%	Sep 22, 2026
37Monitor	CVE-2026-80156No exploit	Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypasslantronix · slc8000 · CWE-22 RCE Path traversal	Critical9.4	—	0.6%	Sep 22, 2026
28Monitor	CVE-2026-85055No exploit	Twenty: Field-level read bypasstwentyhq · twenty · CWE-200 Info leak	High7.1	—	0.4%	Sep 22, 2026
34Monitor	CVE-2026-95653No exploit	Concrete CMS Community Store before 2.7.8 Predictable Digital Download Tokenconcretecms-community-store · community_store · CWE-340 Pre-auth	High8.7	—	0.5%	Sep 22, 2026
36Monitor	CVE-2026-95654No exploit	Databasement before 1.7.14 Authorization Bypass via Stale Invitation Tokendavid-crty · databasement · CWE-863 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.5%	Sep 22, 2026
30Monitor	CVE-2026-95806No exploit	MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem pathsmisp · misp · CWE-74 RCE Deserialization	High7.7	—	0.3%	Sep 22, 2026
30Monitor	CVE-2026-95619No exploit	Gcc: libstdc++ integer overflow in `new` operatorred hat · red hat hardened images · CWE-190 Pre-auth Memory safety	High7.7	—	0.4%	Sep 22, 2026
31Monitor	CVE-2026-83598No exploit	Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repairnetdata · netdata · CWE-269 Local privilege escalation	High7.8	—	0.1%	Sep 22, 2026
30Monitor	CVE-2026-83599No exploit	Netdata: WebSocket Decompression Bombnetdata · netdata · CWE-409 Pre-auth Denial of service	High7.5	—	0.7%	Sep 22, 2026
33Monitor	CVE-2026-83603Proof of concept	Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCEnetdata · netdata · CWE-73 RCE Path traversal Local privilege escalation	High8.4	—	0.3%	Sep 22, 2026
30Monitor	CVE-2026-83803No exploit	Sentry: Unsafe pickle deserialization in Relocation Featuregetsentry · sentry · CWE-502 RCE Deserialization	High7.7	—	0.6%	Sep 22, 2026
36Monitor	CVE-2026-85734No exploit	LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attackshkuds · lightrag · CWE-307 Pre-auth	Critical9.1	—	0.6%	Sep 22, 2026
38Monitor	CVE-2026-86059No exploit	Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.onedokploy · dokploy · CWE-200 Info leak	Critical9.6	—	0.4%	Sep 22, 2026
91Now	CVE-2026-87902Weaponized	An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the wordpress · wordpress · CWE-98 pre-auth RCE	High8.1	KEV	95.7%	Sep 22, 2026
28Monitor	CVE-2026-94455No exploit	Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API keygitroomhq · postiz-app · CWE-306 Auth bypass	High7.1	—	0.2%	Sep 22, 2026
36Monitor	CVE-2026-94456No exploit	Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keysgitroomhq · postiz-app · CWE-330 Pre-auth Weak crypto	Critical9.1	—	0.5%	Sep 22, 2026
33Monitor	CVE-2026-18457No exploit	Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.rti · connext professional · CWE-122 Pre-auth Memory safety	High8.3	—	0.4%	Sep 22, 2026
34Monitor	CVE-2026-18459No exploit	Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.rti · connext professional · CWE-682 Pre-auth	High8.7	—	0.4%	Sep 22, 2026
36Monitor	CVE-2026-18461No exploit	Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.rti · connext professional · CWE-134 Pre-auth	Critical9.2	—	0.3%	Sep 22, 2026
29Monitor	CVE-2026-18462No exploit	Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation.rti · connext professional · CWE-190 Memory safety	High7.3	—	0.1%	Sep 22, 2026
38Monitor	CVE-2026-43641No exploit	Softaculous Virtualizor OS Command Injection via Billing Module Handlersoftaculous · virtualizor · CWE-78 pre-auth RCE Auth bypass Deserialization Command injection	Critical9.3	—	3.0%	Sep 22, 2026
36Monitor	CVE-2026-43642No exploit	Softaculous Virtualizor PHP Object Injection via Billing Module Handlersoftaculous · virtualizor · CWE-502 pre-auth RCE Deserialization	Critical9.2	—	0.9%	Sep 22, 2026
34Monitor	CVE-2026-43643No exploit	Softaculous Virtualizor Authorization Bypass via Billing Module Handlersoftaculous · virtualizor · CWE-862 Pre-auth Broken access control (IDOR)	High8.7	—	0.6%	Sep 22, 2026
40Plan	CVE-2026-73369No exploit	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · campaign · CWE-94 pre-auth RCE	Critical10.0	—	1.2%	Sep 22, 2026
40Plan	CVE-2026-75699No exploit	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · campaign · CWE-94 pre-auth RCE	Critical10.0	—	1.2%	Sep 22, 2026
40Plan	CVE-2026-75703No exploit	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · campaign · CWE-94 pre-auth RCE	Critical10.0	—	1.2%	Sep 22, 2026
40Plan	CVE-2026-75721No exploit	Adobe Campaign Classic (ACC) \| Improper Control of Generation of Code ('Code Injection') (CWE-94)adobe · campaign · CWE-94 pre-auth RCE	Critical10.0	—	1.2%	Sep 22, 2026
40Plan	CVE-2026-75723No exploit	Adobe Campaign Classic (ACC) \| Incorrect Authorization (CWE-863)adobe · campaign · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical10.0	—	1.1%	Sep 22, 2026
36Monitor	CVE-2026-75728No exploit	Adobe Campaign Classic (ACC) \| Incorrect Authorization (CWE-863)adobe · campaign · CWE-863 pre-auth RCE Broken access control (IDOR)	Critical9.1	—	1.0%	Sep 22, 2026

CVE-2026-94627
34Monitor
vLLM through 0.29.0 GPU KV Cache Leak via Mooncake Transfer ID Collision
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
vllm · vllmSep 21, 2026
CVE-2026-13355
39Monitor
Meta Box AIO <= 3.11.0 And Standalone Plugin Extensions - Unauthenticated Privilege Escalation to Administrator to 'rwmb_frontend_field_object_id' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
meta box · meta box frontend submissionSep 22, 2026
CVE-2026-19658
39Monitor
Give Tributes <= 2.3.1 - Unauthenticated PHP Object Injection via 'give_tributes_ecard_notify[recipient][personalized][]' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Deserialization
liquidweb · give tributesSep 22, 2026
CVE-2026-12470
28Monitor
CMP <= 4.1.17 - Authenticated (Editor+) Privilege Escalation via Arbitrary Option Update to cmp_ajax_import_settings AJAX Action
HighCVSS 7.2No exploitEPSS 0%
niteo · cmp – coming soon & maintenance plugin by niteothemesSep 22, 2026
CVE-2026-89412
28Monitor
TranslatePress <= 3.3.5 - Unauthenticated Stored Cross-Site Scripting via Translation Memory Suggestion Panel
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
cozmoslabs · translatepress – translate multilingual sites with ai translationSep 22, 2026
CVE-2026-91827
30Monitor
Ninja Forms 3.15.3 - Unauthenticated PHP Object Injection via CSV Export
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Deserialization
unknown · ninja formsSep 22, 2026
CVE-2026-92438
35Monitor
Ninja Forms 3.15.3 - Unauthenticated Stored XSS via Paragraph Text Field in Submissions Admin
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- XSS
unknown · ninja formsSep 22, 2026
CVE-2026-94504
28Monitor
Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
kstover · ninja forms – contact form builder with calculators, quizzes, signatures & ai form builderSep 22, 2026
CVE-2016-15059
39Monitor
Net::IDN::Punycode versions before 2.301 for Perl allow a heap buffer overflow via unchecked writes past the output buffer in encode_punycode
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
Sep 22, 2026
CVE-2026-6922
28Monitor
WP Table Builder <= 2.2.1 - Incorrect Authorization to Authenticated (Subscriber+) Arbitrary Post Deletion via 'ids' Parameter
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
wptb · wp table builder – drag & drop table builderSep 22, 2026
CVE-2026-74766
33Monitor
Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-after-free via a decoded code point that reallocates the output buffer in decode_p
HighCVSS 8.4No exploitEPSS 0%
- Memory safety
Sep 22, 2026
CVE-2026-87078
36Monitor
Net::IDN::Punycode versions from 2.302 before 2.590 for Perl leak the output buffer on every rejected label in decode_punycode
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 22, 2026
CVE-2026-87079
30Monitor
Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadratic insertion cost when decoding a long label in decode_punycode
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 22, 2026
CVE-2026-87080
36Monitor
Net::IDN::Punycode::PP versions before 2.590 for Perl decode a truncated label to a name containing a character it never encoded in decode_punycode
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
Sep 22, 2026
CVE-2026-87081
30Monitor
Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadratic punycode encoding of an overlong label before the length check in to_ascii
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 22, 2026
CVE-2026-87082
30Monitor
Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong label via unvalidated malformed UTF-8 in encode_punycode
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 22, 2026
CVE-2026-92235
32Monitor
WP Ultimate Review <= 2.4.2 - Authenticated (Subscriber+) Arbitrary Shortcode Execution via 'xs_submit_review_data[xs_reviw_summery]' Parameter
HighCVSS 8.1No exploitEPSS 0%
- RCE
roxnor · wp ultimate reviewSep 22, 2026
CVE-2026-92969
32Monitor
HUSKY <= 1.4.4 - Unauthenticated Local File Inclusion via 'custom_tpl' Shortcode Attribute via 'woof_draw_products' AJAX
HighCVSS 8.1No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
realmag777 · husky – products filter for woocommerce professionalSep 22, 2026
CVE-2026-93778
28Monitor
WP Yelp Review Slider <= 9.2 - Unauthenticated Stored Cross-Site Scripting via Yelp Review Text (imported via wpyelp_download_source)
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
jgwhite33 · wp yelp review sliderSep 22, 2026
CVE-2026-93836
28Monitor
WPC Product Bundles for WooCommerce <= 8.6.6 - Unauthenticated Stored Cross-Site Scripting via 'qty' Parameter
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
wpclever · wpc product bundles for woocommerceSep 22, 2026
CVE-2026-93952
68This week
Security Advisory 0183
CriticalCVSS 9.5KEVWeaponizedEPSS 1%
- Pre-auth
arista · velocloud orchestratorSep 22, 2026
CVE-2026-89422
37Monitor
TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
erlang · otpSep 22, 2026
CVE-2026-93556
37Monitor
Direct references to unsafe objects (IDOR) in Tankuam Places by Kompini
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
kompini · tankuam placesSep 22, 2026
CVE-2026-93928
29Monitor
WordPress Taxi Booking Manager for WooCommerce plugin < 2.0.8 - Broken Authentication vulnerability
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
magepeople inc. · taxi booking manager for woocommerceSep 22, 2026
CVE-2026-9231
30Monitor
WP Travel Engine <= 6.8.0 - Authenticated (Contributor+) Local File Inclusion via 'template' Shortcode Attribute
HighCVSS 7.5No exploitEPSS 0%
- RCE
wptravelengine · wp travel engine – tour booking plugin – tour operator softwareSep 22, 2026
CVE-2026-25254
39Monitor
Improper authorization in Qualcomm Software Center
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
qualcomm · software centerSep 22, 2026
CVE-2026-25264
35Monitor
Uncontrolled Search Path Element in Qualcomm Software Center
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
qualcomm · software centerSep 22, 2026
CVE-2026-25265
35Monitor
Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
qualcomm · software centerSep 22, 2026
CVE-2026-90882
34Monitor
Reflected arbitrary origins with credentials, allowing cross-origin reads of authenticated user data
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- CSRF
eclipse foundation · open-vsx.orgSep 22, 2026
CVE-2026-94117
30Monitor
WordPress HashBar – WordPress Notification Bar plugin <= 2.0.3 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
devitems · hashbar – wordpress notification barSep 22, 2026
CVE-2025-1281
35Monitor
BM Content Builder < 3.17.1 - Authenticated (Subscriber+) Arbitrary File Deletion
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
seatheme · bm content builderSep 22, 2026
CVE-2026-74849
40Plan
Remote code execution vulnerability
CriticalCVSS 9.8No exploitEPSS 4%
- pre-auth RCE
- Command injection
zohocorp · manageengine adselfservice plusSep 22, 2026
CVE-2026-87119
32Monitor
mpp Tempo subscription key authorization is not bound to the issuing challenge, allowing a captured activation credential to be replayed
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
zenhive · mppSep 22, 2026
CVE-2026-89420
28Monitor
Session voucher adding no new funds is accepted without a charge in mpp, serving paid resources for free
HighCVSS 7.1No exploitEPSS 0%
zenhive · mppSep 22, 2026
CVE-2026-65634
32Monitor
Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
erlang · otpSep 22, 2026
CVE-2026-68956
28Monitor
SSH daemon allocates unbounded idle session channels, bypassing max_channels
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
erlang · otpSep 22, 2026
CVE-2026-95508
29Monitor
Libslirp: libslirp: heap buffer overflow in dhcpv6/tftp response builders on small interface mtu
HighCVSS 7.4No exploitEPSS 0%
- pre-auth RCE
- Memory safety
red hat · red hat enterprise linux 10Sep 22, 2026
CVE-2026-75791
35Monitor
Authentication bypass vulnerability
HighCVSS 8.6No exploitEPSS 1%
- Pre-auth
- Auth bypass
zohocorp · manageengine adselfservice plusSep 22, 2026
CVE-2026-93616
96Now
Directory Traversal and File upload allows execution of arbitrary script on the Management Server
CriticalCVSS 9.8KEVWeaponizedEPSS 91%
- pre-auth RCE
- Path traversal
checkpoint · multi-domain security managementSep 22, 2026
CVE-2026-25255
31Monitor
Exposed function in Qualcomm Package Manager and Qualcomm Software Center.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
qualcomm · package managerSep 22, 2026
CVE-2026-25262
25Monitor
Write-what-where Condition in Primary Bootloader
MediumCVSS 6.3Proof of conceptEPSS 0%
qualcomm · mdm9207 firmwareSep 22, 2026
CVE-2026-12718
39Monitor
SQLi in Karel Electronics' KarelIPS
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- SQL injection
karel electronic industry and trade inc. · karelipsSep 22, 2026
CVE-2026-93343
28Monitor
MarketKing < 2.1.72 Missing Authorization via marketking_admin_vendors_ajax
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
webwizards · marketkingSep 22, 2026
CVE-2026-95675
38Monitor
D-Link DAP-1360 6.14 Unauthenticated RCE via Web Management Interface
CriticalCVSS 9.3Proof of conceptEPSS 2%
- pre-auth RCE
- Command injection
d-link · dap-1360Sep 22, 2026
CVE-2026-24239
31Monitor
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious data created by an attacker could cause remote code execution.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Deserialization
nvidia · nemo speechSep 22, 2026
CVE-2026-24267
31Monitor
NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data explorer component, where malicious data created by an atta
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Deserialization
- Local privilege escalation
nvidia · nemo speechSep 22, 2026
CVE-2026-65111
31Monitor
NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious input created by an attacker could cause a code injection.
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
nvidia · nemo speechSep 22, 2026
CVE-2026-79313
39Monitor
webpy web.py 0.76 is vulnerable to Insufficient Session Expiration.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
Sep 22, 2026
CVE-2026-79314
35Monitor
A horizontal privilege escalation vulnerability exists in x-ui 0.3.2.
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
Sep 22, 2026
CVE-2026-89407
30Monitor
jackson-core: quadratic backtracking in NumberInput.PATTERN_FLOAT via looksLikeValidNumber() enables ReDoS
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
fasterxml · jackson-coreSep 22, 2026
CVE-2026-93088
39Monitor
SGLang's multimodal generation runtime is vulnerable to unauthenticated arbitrary code execution because the disaggregated-diffusion orchest
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Deserialization
sglang · sglangSep 22, 2026
CVE-2026-93344
28Monitor
MarketKing < 2.1.72 Missing Authorization via marketking_get_page_content AJAX
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
webwizards · marketkingSep 22, 2026
CVE-2026-94127
75This week
BIG-IP APM OAuth vulnerability
CriticalCVSS 9.3KEVWeaponizedEPSS 26%
- pre-auth RCE
- Memory safety
f5 · big-ip access policy managerSep 22, 2026
CVE-2026-95698
21Monitor
MISP Path Traversal in OrgImgHelper findOrgImage via Crafted Organization Name
MediumCVSS 5.3No exploitEPSS 0%
- Path traversal
misp · mispSep 22, 2026
CVE-2026-70410
35Monitor
Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins
HighCVSS 8.8No exploitEPSS 0%
apache software foundation · apache calcite avaticaSep 22, 2026
CVE-2026-75607
32Monitor
Frigate: WebSocket Missing Authorization — Viewer Can Execute Admin-Only Operations
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
blakeblackshear · frigateSep 22, 2026
CVE-2026-77619
34Monitor
Vector: Unauthenticated denial of service in the `logstash` source via unbounded memory allocation.
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
vectordotdev · vectorSep 22, 2026
CVE-2026-77620
34Monitor
Vector: Unauthenticated denial of service in the `logstash` source via nested compressed frames (stack exhaustion and decompression amplification).
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
vectordotdev · vectorSep 22, 2026
CVE-2026-77621
37Monitor
Vector: Arbitrary file write in the file sink via templated path (path traversal).
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- Path traversal
vectordotdev · vectorSep 22, 2026
CVE-2026-77633
28Monitor
Cloudreve: Storage-quota TOCTOU race allows quota bypass and storage-based denial of service
HighCVSS 7.1No exploitEPSS 0%
- Race condition
cloudreve · cloudreveSep 22, 2026
CVE-2026-80143
38Monitor
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom read
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- Command injection
lantronix · slc8000Sep 22, 2026
CVE-2026-80144
38Monitor
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via mfc eeprom write
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- Command injection
lantronix · slc8000Sep 22, 2026
CVE-2026-80145
38Monitor
Lantronix Autonomous Out-of-Band Devices CLI Command Injection via set cifs password
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- Command injection
lantronix · slc8000Sep 22, 2026
CVE-2026-80146
37Monitor
Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom read
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Memory safety
lantronix · slc8000Sep 22, 2026
CVE-2026-80147
37Monitor
Lantronix Autonomous Out-of-Band Devices Stack-Based Buffer Overflow via mfc eeprom write
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Memory safety
lantronix · slc8000Sep 22, 2026
CVE-2026-80148
30Monitor
Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via Username Truncation
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- SSRF
lantronix · slc8000Sep 22, 2026
CVE-2026-80149
30Monitor
Lantronix Autonomous Out-of-Band Devices WebSSH SSRF via rooturl Parameter
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- SSRF
lantronix · slc8000Sep 22, 2026
CVE-2026-80150
30Monitor
Lantronix Autonomous Out-of-Band Devices WebTelnet SSRF via rooturl Parameter
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- SSRF
lantronix · slc8000Sep 22, 2026
CVE-2026-80151
37Monitor
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set nfs download
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- Command injection
lantronix · slc8000Sep 22, 2026
CVE-2026-80152
37Monitor
Lantronix Autonomous Out-of-Band Devices OS Command Injection via set script schedule
CriticalCVSS 9.4No exploitEPSS 1%
- RCE
- Command injection
lantronix · slc8000Sep 22, 2026
CVE-2026-80154
35Monitor
Lantronix Autonomous Out-of-Band Devices Predictable Session Token with Validation Bypass
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
lantronix · slc8000Sep 22, 2026
CVE-2026-80155
40Plan
Lantronix Autonomous Out-of-Band Devices Unauthenticated Authentication Bypass via snprintf Path Truncation
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
- Path traversal
lantronix · slc8000Sep 22, 2026
CVE-2026-80156
37Monitor
Lantronix Autonomous Out-of-Band Devices Arbitrary File Write via Upload Filename Validation Bypass
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Path traversal
lantronix · slc8000Sep 22, 2026
CVE-2026-85055
28Monitor
Twenty: Field-level read bypass
HighCVSS 7.1No exploitEPSS 0%
- Info leak
twentyhq · twentySep 22, 2026
CVE-2026-95653
34Monitor
Concrete CMS Community Store before 2.7.8 Predictable Digital Download Token
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
concretecms-community-store · community_storeSep 22, 2026
CVE-2026-95654
36Monitor
Databasement before 1.7.14 Authorization Bypass via Stale Invitation Token
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
david-crty · databasementSep 22, 2026
CVE-2026-95806
30Monitor
MISP: PHP phar stream wrapper enables deserialization and code execution via caller-influenced filesystem paths
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Deserialization
misp · mispSep 22, 2026
CVE-2026-95619
30Monitor
Gcc: libstdc++ integer overflow in `new` operator
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat hardened imagesSep 22, 2026
CVE-2026-83598
31Monitor
Netdata: Local Privilege Escalation in Netdata Agent Windows installer via PowerShell Profile Hijack in MSI Repair
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
netdata · netdataSep 22, 2026
CVE-2026-83599
30Monitor
Netdata: WebSocket Decompression Bomb
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
netdata · netdataSep 22, 2026
CVE-2026-83603
33Monitor
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2ban-client Pickle RCE
HighCVSS 8.4Proof of conceptEPSS 0%
- RCE
- Path traversal
- Local privilege escalation
netdata · netdataSep 22, 2026
CVE-2026-83803
30Monitor
Sentry: Unsafe pickle deserialization in Relocation Feature
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Deserialization
getsentry · sentrySep 22, 2026
CVE-2026-85734
36Monitor
LightRAG: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
hkuds · lightragSep 22, 2026
CVE-2026-86059
38Monitor
Dokploy: Git Provider Credential Exposure via Unprotected .one Endpoints and application.one
CriticalCVSS 9.6No exploitEPSS 0%
- Info leak
dokploy · dokploySep 22, 2026
CVE-2026-87902
91Now
An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.php` file outside the
HighCVSS 8.1KEVWeaponizedEPSS 95%
- pre-auth RCE
wordpress · wordpressSep 22, 2026
CVE-2026-94455
28Monitor
Unauthenticated /enterprise/create-user mints lifetime top-tier organizations and discloses their API key
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
gitroomhq · postiz-appSep 22, 2026
CVE-2026-94456
36Monitor
Unauthenticated recovery of the Math.random() state behind OAuth tokens, authorization codes, client secrets and organization API keys
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
gitroomhq · postiz-appSep 22, 2026
CVE-2026-18457
33Monitor
Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libraries) allows Overflow Buffers.
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
rti · connext professionalSep 22, 2026
CVE-2026-18459
34Monitor
Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries) allows Abuse Existing Functionality.
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
rti · connext professionalSep 22, 2026
CVE-2026-18461
36Monitor
Use of Externally-Controlled Format String vulnerability in RTI Connext Professional (Core Libraries) allows Format String Injection.
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
rti · connext professionalSep 22, 2026
CVE-2026-18462
29Monitor
Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Connext Professional (Core Libraries) allows Shared Resource Manipulation.
HighCVSS 7.3No exploitEPSS 0%
- Memory safety
rti · connext professionalSep 22, 2026
CVE-2026-43641
38Monitor
Softaculous Virtualizor OS Command Injection via Billing Module Handler
CriticalCVSS 9.3No exploitEPSS 3%
- pre-auth RCE
- Auth bypass
- Deserialization
- Command injection
softaculous · virtualizorSep 22, 2026
CVE-2026-43642
36Monitor
Softaculous Virtualizor PHP Object Injection via Billing Module Handler
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Deserialization
softaculous · virtualizorSep 22, 2026
CVE-2026-43643
34Monitor
Softaculous Virtualizor Authorization Bypass via Billing Module Handler
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
softaculous · virtualizorSep 22, 2026
CVE-2026-73369
40Plan
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
adobe · campaignSep 22, 2026
CVE-2026-75699
40Plan
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
adobe · campaignSep 22, 2026
CVE-2026-75703
40Plan
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
adobe · campaignSep 22, 2026
CVE-2026-75721
40Plan
Adobe Campaign Classic (ACC) | Improper Control of Generation of Code ('Code Injection') (CWE-94)
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
adobe · campaignSep 22, 2026
CVE-2026-75723
40Plan
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CriticalCVSS 10.0No exploitEPSS 1%
- pre-auth RCE
- Broken access control (IDOR)
adobe · campaignSep 22, 2026
CVE-2026-75728
36Monitor
Adobe Campaign Classic (ACC) | Incorrect Authorization (CWE-863)
CriticalCVSS 9.1No exploitEPSS 1%
- pre-auth RCE
- Broken access control (IDOR)
adobe · campaignSep 22, 2026