By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 65 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
31Monitor	CVE-2026-6935No exploit	Multiple Vulnerabilities in IBM Concert Softwareibm · concert · CWE-427	High7.8	—	0.1%	Sep 23, 2026
28Monitor	CVE-2026-75886No exploit	Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwardingred hat · red hat openshift container platform 4 · CWE-441 Pre-auth	High7.2	—	0.3%	Sep 23, 2026
35Monitor	CVE-2026-80379No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Command injection	High8.8	—	0.7%	Sep 23, 2026
35Monitor	CVE-2026-80412No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Command injection	High8.8	—	0.8%	Sep 23, 2026
35Monitor	CVE-2026-80425No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Command injection	High8.8	—	0.7%	Sep 23, 2026
34Monitor	CVE-2026-82369No exploit	Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1abrocade · sannav · CWE-78 RCE Command injection	High8.6	—	0.4%	Sep 23, 2026
39Monitor	CVE-2026-18467No exploit	Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameterpaytiumsupport · paytium: mollie payment forms & donations · CWE-269 Pre-auth	Critical9.8	—	0.4%	Sep 23, 2026
36Monitor	CVE-2026-97055No exploit	SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secretsignoz · signoz · CWE-1188 Pre-auth Auth bypass	Critical9.2	—	0.5%	Sep 23, 2026
30Monitor	CVE-2026-97056No exploit	SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypasssignoz · signoz · CWE-613 Auth bypass	High7.6	—	0.4%	Sep 23, 2026
30Monitor	CVE-2026-75887No exploit	Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handlerred hat · red hat openshift container platform 4 · CWE-22 Pre-auth Path traversal	High7.5	—	0.5%	Sep 23, 2026
30Monitor	CVE-2026-81208No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-522 Info leak	High7.7	—	0.3%	Sep 23, 2026
30Monitor	CVE-2026-81536No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-611 XXE	High7.7	—	0.4%	Sep 23, 2026
36Monitor	CVE-2026-81537No exploit	DataStage on Cloud Pak for Data has several vulnerabilitiesibm · datastage on cloud pak for data · CWE-78 RCE Command injection	High8.8	—	1.6%	Sep 23, 2026
37Monitor	CVE-2026-96891No exploit	D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds writed-link · dir-825 · CWE-119 Pre-auth Memory safety	Critical9.3	—	0.6%	Sep 23, 2026
31Monitor	CVE-2026-70125No exploit	Microsoft Office Outlook Remote Code Execution Vulnerabilitymicrosoft · 365 apps · CWE-122 RCE Memory safety	High7.8	—	0.3%	Sep 23, 2026
34Monitor	CVE-2026-82370No exploit	Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP servicebrocade · sannav · CWE-77 RCE Command injection	High8.6	—	0.6%	Sep 24, 2026
39Monitor	CVE-2026-89078No exploit	Double Free in GitLabgitlab · gitlab · CWE-415 RCE Memory safety	Critical9.9	—	0.5%	Sep 24, 2026
30Monitor	CVE-2026-92470No exploit	Missing Authorization in GitLabgitlab · gitlab · CWE-862 Broken access control (IDOR)	High7.7	—	0.2%	Sep 24, 2026
39Monitor	CVE-2026-93577No exploit	Integer Overflow or Wraparound in GitLabgitlab · gitlab · CWE-190 RCE Memory safety	Critical9.9	—	0.6%	Sep 24, 2026
33Monitor	CVE-2026-97151No exploit	mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document.mwilliamson · mammoth.js · CWE-1321 Pre-auth Prototype pollution	High8.4	—	0.3%	Sep 24, 2026
34Monitor	CVE-2026-97152No exploit	Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an uncheckenanomsg · nanomsg · CWE-122 Memory safety	High8.6	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-80513No exploit	wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fieldsunknown · wpforo forum · CWE-502 RCE SQL injection Deserialization	High7.5	—	0.3%	Sep 24, 2026
28Monitor	CVE-2026-88843No exploit	MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widgetunknown · masterstudy lms wordpress plugin · CWE-22 RCE Path traversal	High7.2	—	0.3%	Sep 24, 2026
10Monitor	CVE-2026-93661Proof of concept	Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDORunknown · events manager · CWE-639 Broken access control (IDOR)	Low2.7	—	0.1%	Sep 24, 2026
30Monitor	CVE-2026-77193No exploit	eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parametereesywp · eesy_id2wp – publish indesign html5 · CWE-22 Pre-auth Path traversal	High7.5	—	0.3%	Sep 24, 2026
35Monitor	CVE-2026-78311No exploit	SQL Injection in DIAEnergiedeltaww · diaenergie · CWE-89 SQL injection	High8.8	—	0.2%	Sep 24, 2026
36Monitor	CVE-2026-78312No exploit	Path Traversal in DIAEnergiedeltaww · diaenergie · CWE-22 Pre-auth Path traversal	Critical9.1	—	0.3%	Sep 24, 2026
35Monitor	CVE-2026-85682No exploit	YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Routeyourownprogrammer · yop poll · CWE-346 Pre-auth	High8.8	—	0.1%	Sep 24, 2026
30Monitor	CVE-2026-14780No exploit	PaperCut NG/MF: Remote Code Execution via Scripting Subsystempapercut · papercut ng/mf · CWE-94 RCE	High7.5	—	0.3%	Sep 24, 2026
40Plan	CVE-2026-12227Proof of concept	Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parametervisualcomposer · visual composer website builder · CWE-98 pre-auth RCE	Critical9.8	—	2.7%	Sep 24, 2026
32Monitor	CVE-2026-57590No exploit	Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operationsapache software foundation · apache dolphinscheduler · CWE-863 Broken access control (IDOR)	High8.1	—	0.2%	Sep 24, 2026
29Monitor	CVE-2026-82077No exploit	PaperCut NG/MF: Remote Code Execution via Scan2Faxpapercut · papercut ng/mf · CWE-22 RCE Path traversal	High7.3	—	0.8%	Sep 24, 2026
28Monitor	CVE-2026-4638No exploit	Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitorpaessler gmbh · prtg network monitor · CWE-209 Info leak	High7.1	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-7169No exploit	Uncontrolled Search Path Element in Evope Collectorevope collector · evope collector Local privilege escalation	High7.5	—	0.1%	Sep 24, 2026
39Monitor	CVE-2026-78308No exploit	Authentication Bypass in DIAEnergiedeltaww · diaenergie · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.3%	Sep 24, 2026
35Monitor	CVE-2026-78309No exploit	SQL Injection in DIAEnergiedeltaww · diaenergie · CWE-89 SQL injection	High8.8	—	0.2%	Sep 24, 2026
31Monitor	CVE-2026-97185No exploit	Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset filered hat · red hat enterprise linux 10 · CWE-787 RCE Memory safety	High7.8	—	0.1%	Sep 24, 2026
39Monitor	CVE-2026-19072No exploit	Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipalrapid7 · velociraptor · CWE-164	Critical9.9	—	0.3%	Sep 24, 2026
29Monitor	CVE-2026-88907No exploit	SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDFtübi̇tak ulakbi̇m · ulakpdf · CWE-863 Pre-auth Auth bypass Broken access control (IDOR)	High7.4	—	0.3%	Sep 24, 2026
37Monitor	CVE-2026-91187No exploit	Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategydashbit · nimble_zta · CWE-347 Pre-auth Weak crypto	Critical9.3	—	0.3%	Sep 24, 2026
34Monitor	CVE-2026-97057No exploit	redis-parser through 3.0.0 Denial of Service via Invalid Array Lengthnoderedis · redis-parser · CWE-1284 Pre-auth	High8.7	—	0.3%	Sep 24, 2026
40Plan	CVE-2026-97360No exploit	HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Enginerejetto · hfs2 · CWE-862 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.4%	Sep 24, 2026
29Monitor	CVE-2026-12559No exploit	Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Applicationopentext · vendor invoice management for sap solutions · CWE-79 XSS	High7.3	—	0.3%	Sep 24, 2026
33Monitor	CVE-2026-13465No exploit	EL3 Stack Buffer Overflow in FCS HKDF Requestaltera · trusted firmware · CWE-121 Memory safety	High8.3	—	0.1%	Sep 24, 2026
33Monitor	CVE-2026-13466No exploit	Unit Confusion in VAB Authenticationaltera · trusted firmware · CWE-131	High8.3	—	0.1%	Sep 24, 2026
33Monitor	CVE-2026-13467No exploit	Systemic Missing Address Validation in SiP SMC Handlersaltera · trusted firmware · CWE-787 Memory safety	High8.3	—	0.1%	Sep 24, 2026
36Monitor	CVE-2026-51994Proof of concept	mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from CWE-918 Pre-auth SSRF	Critical9.1	—	0.4%	Sep 24, 2026
30Monitor	CVE-2026-51995No exploit	An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-sCWE-200 Pre-auth Info leak	High7.5	—	0.4%	Sep 24, 2026
35Monitor	CVE-2026-51997No exploit	An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functionsCWE-20 pre-auth RCE	High8.8	—	0.5%	Sep 24, 2026
32Monitor	CVE-2026-56736No exploit	phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submissionthorsten · phpmyfaq · CWE-79 Pre-auth XSS	High8.2	—	0.2%	Sep 24, 2026
33Monitor	CVE-2026-58004No exploit	Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.altera · trusted firmware · CWE-125 Local privilege escalation Memory safety	High8.3	—	0.1%	Sep 24, 2026
33Monitor	CVE-2026-58005No exploit	Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.altera · trusted firmware · CWE-119 Local privilege escalation Memory safety	High8.3	—	0.1%	Sep 24, 2026
33Monitor	CVE-2026-58006No exploit	Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruptionaltera · trusted firmware · CWE-822	High8.3	—	0.1%	Sep 24, 2026
33Monitor	CVE-2026-58007No exploit	Unchecked SDM mailbox response address enables EL3 secure-memory corruptionaltera · trusted firmware · CWE-822	High8.3	—	0.1%	Sep 24, 2026
33Monitor	CVE-2026-58008No exploit	Unchecked HKDF key-size input in EL3 causes a stack buffer overflowaltera · trusted firmware · CWE-121 Memory safety	High8.3	—	0.1%	Sep 24, 2026
34Monitor	CVE-2026-77874No exploit	IBM Enterprise Build of Quarkus is affected by multiple vulnerabilitiesibm · enterprise build of quarkus · CWE-89 Pre-auth SQL injection	High8.6	—	0.3%	Sep 24, 2026
39Monitor	CVE-2026-88351No exploit	An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms.CWE-190 Pre-auth Memory safety	Critical9.8	—	0.3%	Sep 24, 2026
36Monitor	CVE-2026-90481No exploit	In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate pportswigger · burp suite dast · CWE-288 Pre-auth Auth bypass	Critical9.2	—	0.3%	Sep 24, 2026
34Monitor	CVE-2026-97362No exploit	HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Threadrejetto · hfs2 · CWE-835 Pre-auth Denial of service	High8.7	—	0.2%	Sep 24, 2026
36Monitor	CVE-2026-97404No exploit	In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header.openstack · zaqar · CWE-348 Pre-auth	Critical9.2	—	0.2%	Sep 24, 2026
29Monitor	GHSA-39mm-4q6x-3vrxNo exploit	Excluded iPAddress name constraints with an all-zero mask are not applied Pre-auth	High7.4	—	—	Sep 24, 2026
30Monitor	CVE-2026-63203No exploit	Logto: Account API can disclose stored third-party provider tokens without the identities scopelogto-io · logto · CWE-862 Broken access control (IDOR)	High7.6	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-88357No exploit	nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code.CWE-1335 Pre-auth Deserialization Denial of service	High7.5	—	0.5%	Sep 24, 2026
30Monitor	CVE-2026-88361No exploit	SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.5%	Sep 24, 2026
30Monitor	CVE-2026-88362No exploit	MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c.CWE-681 Pre-auth Denial of service	High7.5	—	0.4%	Sep 24, 2026
30Monitor	CVE-2026-88368No exploit	NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function.CWE-681 Pre-auth Denial of service	High7.5	—	0.3%	Sep 24, 2026
29Monitor	CVE-2026-88369No exploit	zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().CWE-125 Pre-auth Memory safety	High7.3	—	0.2%	Sep 24, 2026
27Monitor	CVE-2026-92680Proof of concept	Araxis Merge insufficiently protected credentialsaraxis · merge · CWE-522 Info leak	Medium6.8	—	0.1%	Sep 24, 2026
39Monitor	CVE-2026-93425No exploit	Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as rootdokploy · dokploy · CWE-78 RCE Command injection	Critical9.9	—	0.6%	Sep 24, 2026
28Monitor	CVE-2026-96744No exploit	Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravelmongodb · laravel mongodb (php) · CWE-943 SQL injection	High7.1	—	0.3%	Sep 24, 2026
33Monitor	CVE-2026-96746No exploit	Heap buffer overflow via mid-scan command list growth in client topology monitoringmongodb · c driver · CWE-787 Pre-auth Memory safety	High8.3	—	0.5%	Sep 24, 2026
29Monitor	CVE-2026-96750No exploit	Shell script injection via server-supplied database name in Open MongoDB shellmongodb · compass · CWE-94 RCE	High7.3	—	0.2%	Sep 24, 2026
22Monitor	CVE-2026-96873Proof of concept	Reflected XSS in CirrusSearch debug explain outputthe wikimedia foundation · mediawiki - cirrussearch extension · CWE-79 Pre-auth XSS	Medium5.5	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-79764No exploit	Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlisttermix-ssh · termix · CWE-918 SSRF	High7.7	—	0.4%	Sep 24, 2026
30Monitor	CVE-2026-88372No exploit	libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.CWE-190 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-88373No exploit	libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path.CWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.4%	Sep 24, 2026
30Monitor	CVE-2026-88376No exploit	Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create().CWE-191 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-88382No exploit	hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser.CWE-770 Pre-auth Denial of service	High7.5	—	0.3%	Sep 24, 2026
30Monitor	CVE-2026-88390No exploit	An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input containCWE-787 Memory safety	High7.7	—	0.1%	Sep 24, 2026
34Monitor	CVE-2026-91122No exploit	Discourse: Chat MessageBus delivers read-restricted messages to unauthorized usersdiscourse · discourse · CWE-79 RCE XSS	High8.7	—	0.2%	Sep 24, 2026
28Monitor	CVE-2026-91123No exploit	Discourse: Reject literal backslash path separators in iframe src traversal guarddiscourse · discourse · CWE-22 Pre-auth Path traversal	High7.2	—	0.2%	Sep 24, 2026
29Monitor	CVE-2026-93543No exploit	Out-of-bounds read in libXi's XI2 class parserx.org · libxi · CWE-125 Pre-auth Memory safety Denial of service	High7.4	—	0.2%	Sep 24, 2026
33Monitor	CVE-2026-93827No exploit	virtio-fs: avoid double-free on failed queue setuplinux · linux	High8.4	—	0.1%	Sep 24, 2026
32Monitor	CVE-2026-94611No exploit	authentik: Stored credentials are readable with view permission alonegoauthentik · authentik · CWE-200 Info leak	High8.1	—	0.3%	Sep 24, 2026
29Monitor	CVE-2026-94612No exploit	authentik: Authentication bypass via assertion confusion in SAML sourcesgoauthentik · authentik · CWE-287 Pre-auth Auth bypass	High7.4	—	0.2%	Sep 24, 2026
34Monitor	CVE-2026-96515Proof of concept	Command Injection Vulnerability in Netlink ICT HG323RW Routernetlink ict pvt ltd · netlink ict hg323rw router · CWE-434 RCE File upload Command injection	High8.6	—	0.3%	Sep 24, 2026
32Monitor	CVE-2026-97433No exploit	nvme: validate FDP configuration descriptor sizeslinux · linux Pre-auth	High8.2	—	0.3%	Sep 24, 2026
29Monitor	CVE-2026-97474No exploit	wifi: iwlwifi: mld: purge async notifications upon nic errorlinux · linux	High7.4	—	0.1%	Sep 24, 2026
28Monitor	CVE-2026-97520No exploit	gfs2: move quota_init qc iterator incrementlinux · linux	High7.1	—	0.1%	Sep 24, 2026
30Monitor	CVE-2026-88360No exploit	libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images.CWE-1339 Pre-auth Denial of service	High7.5	—	0.3%	Sep 24, 2026
31Monitor	CVE-2026-95519No exploit	Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)red hat · red hat enterprise linux 10 · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	0.1%	Sep 24, 2026
31Monitor	CVE-2026-95521No exploit	Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpmred hat · red hat enterprise linux 10 · CWE-78 RCE Command injection	High7.8	—	0.5%	Sep 24, 2026
35Monitor	CVE-2026-97059No exploit	DCMTK through 3.7.0 Heap Over-read via NumberOfFramesoffis · dcmtk · CWE-125 Pre-auth Memory safety	High8.8	—	0.3%	Sep 24, 2026
42Plan	CVE-2026-97359Proof of concept	HFS2 2.4.0 RCE via Multipart Upload Filename Template Injectionrejetto · hfs2 · CWE-1336 pre-auth RCE SSTI	Critical10.0	—	5.5%	Sep 24, 2026
32Monitor	CVE-2026-85056No exploit	ZITADEL: MFA bypass via session reuse in Login V2zitadel · zitadel · CWE-287 Pre-auth Auth bypass	High8.2	—	0.2%	Sep 24, 2026
34Monitor	CVE-2026-95985No exploit	Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspacesamazon · kiro ide · CWE-349 Pre-auth	High8.6	—	0.1%	Sep 24, 2026
37Monitor	CVE-2026-13016No exploit	Unauthenticated SQL Injection in ServiceNow AI Platformservicenow · servicenow ai platform · CWE-89 pre-auth RCE SQL injection	Critical9.3	—	0.2%	Sep 24, 2026
35Monitor	CVE-2026-13248No exploit	Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interfacehoneywell · pd45 industrial printer · CWE-73 RCE Path traversal	High8.8	—	0.4%	Sep 24, 2026
39Monitor	CVE-2026-13249Proof of concept	Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040honeywell · pd45 industrial printer · CWE-78 pre-auth RCE File upload Command injection	Critical9.8	—	0.9%	Sep 24, 2026
28Monitor	CVE-2026-77293No exploit	TREK: Cross-user note-file deletion (IDOR / Broken Access Control)mauriceboe · trek · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 24, 2026

CVE-2026-6935
31Monitor
Multiple Vulnerabilities in IBM Concert Software
HighCVSS 7.8No exploitEPSS 0%
ibm · concertSep 23, 2026
CVE-2026-75886
28Monitor
Openshift/console: openshift/console: unauthenticated reverse proxy to in-cluster catalogd service with session token forwarding
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
red hat · red hat openshift container platform 4Sep 23, 2026
CVE-2026-80379
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · datastage on cloud pak for dataSep 23, 2026
CVE-2026-80412
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · datastage on cloud pak for dataSep 23, 2026
CVE-2026-80425
35Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
ibm · datastage on cloud pak for dataSep 23, 2026
CVE-2026-82369
34Monitor
Insufficient input sanitization of shell metacharacters in Brocade SANnav before 3.0.1a
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
brocade · sannavSep 23, 2026
CVE-2026-18467
39Monitor
Paytium: Mollie payment forms & donations <= 5.0.3 - Unauthenticated Privilege Escalation via 'pt_form_field[pt-user-role]' Parameter
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
paytiumsupport · paytium: mollie payment forms & donationsSep 23, 2026
CVE-2026-97055
36Monitor
SigNoz before 0.143.0 Authentication Bypass via Empty JWT Secret
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
signoz · signozSep 23, 2026
CVE-2026-97056
30Monitor
SigNoz before 0.143.0 Insufficient Session Expiration Authentication Bypass
HighCVSS 7.6No exploitEPSS 0%
- Auth bypass
signoz · signozSep 23, 2026
CVE-2026-75887
30Monitor
Openshift/console: openshift/console: unauthenticated path traversal in i18n locale handler
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
red hat · red hat openshift container platform 4Sep 23, 2026
CVE-2026-81208
30Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 7.7No exploitEPSS 0%
- Info leak
ibm · datastage on cloud pak for dataSep 23, 2026
CVE-2026-81536
30Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 7.7No exploitEPSS 0%
- XXE
ibm · datastage on cloud pak for dataSep 23, 2026
CVE-2026-81537
36Monitor
DataStage on Cloud Pak for Data has several vulnerabilities
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
ibm · datastage on cloud pak for dataSep 23, 2026
CVE-2026-96891
37Monitor
D-Link DIR-825 rp-l2tp tunnel.c tunnel_set_params out-of-bounds write
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Memory safety
d-link · dir-825Sep 23, 2026
CVE-2026-70125
31Monitor
Microsoft Office Outlook Remote Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
microsoft · 365 appsSep 23, 2026
CVE-2026-82370
34Monitor
Unauthenticated remote command injection in the Brocade SANnav orchestrator HTTP service
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
brocade · sannavSep 24, 2026
CVE-2026-89078
39Monitor
Double Free in GitLab
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Memory safety
gitlab · gitlabSep 24, 2026
CVE-2026-92470
30Monitor
Missing Authorization in GitLab
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
gitlab · gitlabSep 24, 2026
CVE-2026-93577
39Monitor
Integer Overflow or Wraparound in GitLab
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Memory safety
gitlab · gitlabSep 24, 2026
CVE-2026-97151
33Monitor
mammoth (aka mammoth.js) before 1.12.2 is vulnerable to prototype pollution when reading the styles defined in a document.
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- Prototype pollution
mwilliamson · mammoth.jsSep 24, 2026
CVE-2026-97152
34Monitor
Nanomsg versions 0.5-beta through 1.x before 1.2.3 has a remotely exploitable buffer overflow in the WebSocket transport, due to an unchecke
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
nanomsg · nanomsgSep 24, 2026
CVE-2026-80513
30Monitor
wpForo Forum < 3.1.6 - Subscriber+ PHP Object Injection via Profile Fields
HighCVSS 7.5No exploitEPSS 0%
- RCE
- SQL injection
- Deserialization
unknown · wpforo forumSep 24, 2026
CVE-2026-88843
28Monitor
MasterStudy LMS 3.5.29 - < 3.7.50 - Contributor+ LFI via Elementor Courses Categories Widget
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Path traversal
unknown · masterstudy lms wordpress pluginSep 24, 2026
CVE-2026-93661
10Monitor
Events Manager < 7.4.5 - Contributor+ Arbitrary Ticket Overwrite via IDOR
LowCVSS 2.7Proof of conceptEPSS 0%
- Broken access control (IDOR)
unknown · events managerSep 24, 2026
CVE-2026-77193
30Monitor
eesy_ID2WP – Publish InDesign HTML5 <= 1.0.3 - Unauthenticated Path Traversal to Arbitrary File Read via 'id2wp_path' Query Parameter
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Path traversal
eesywp · eesy_id2wp – publish indesign html5Sep 24, 2026
CVE-2026-78311
35Monitor
SQL Injection in DIAEnergie
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
deltaww · diaenergieSep 24, 2026
CVE-2026-78312
36Monitor
Path Traversal in DIAEnergie
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
deltaww · diaenergieSep 24, 2026
CVE-2026-85682
35Monitor
YOP Poll <= 7.0.10 - Unauthenticated Origin Validation Error to Administrator Account Takeover via '/auth/wp-login-redirect' REST Route
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
yourownprogrammer · yop pollSep 24, 2026
CVE-2026-14780
30Monitor
PaperCut NG/MF: Remote Code Execution via Scripting Subsystem
HighCVSS 7.5No exploitEPSS 0%
- RCE
papercut · papercut ng/mfSep 24, 2026
CVE-2026-12227
40Plan
Visual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 2%
- pre-auth RCE
visualcomposer · visual composer website builderSep 24, 2026
CVE-2026-57590
32Monitor
Apache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
apache software foundation · apache dolphinschedulerSep 24, 2026
CVE-2026-82077
29Monitor
PaperCut NG/MF: Remote Code Execution via Scan2Fax
HighCVSS 7.3No exploitEPSS 0%
- RCE
- Path traversal
papercut · papercut ng/mfSep 24, 2026
CVE-2026-4638
28Monitor
Plaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor
HighCVSS 7.1No exploitEPSS 0%
- Info leak
paessler gmbh · prtg network monitorSep 24, 2026
CVE-2026-7169
30Monitor
Uncontrolled Search Path Element in Evope Collector
HighCVSS 7.5No exploitEPSS 0%
- Local privilege escalation
evope collector · evope collectorSep 24, 2026
CVE-2026-78308
39Monitor
Authentication Bypass in DIAEnergie
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
deltaww · diaenergieSep 24, 2026
CVE-2026-78309
35Monitor
SQL Injection in DIAEnergie
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
deltaww · diaenergieSep 24, 2026
CVE-2026-97185
31Monitor
Gimp: gimp: out-of-bounds write in gimpressionist plugin via crafted preset file
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Memory safety
red hat · red hat enterprise linux 10Sep 24, 2026
CVE-2026-19072
39Monitor
Velociraptor Investigator reaches SuperUser via hunt EffectivePrincipal
CriticalCVSS 9.9No exploitEPSS 0%
rapid7 · velociraptorSep 24, 2026
CVE-2026-88907
29Monitor
SAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDF
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
tübi̇tak ulakbi̇m · ulakpdfSep 24, 2026
CVE-2026-91187
37Monitor
Improper Verification of Cryptographic Signature in dashbit nimble_zta Cloudflare strategy
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Weak crypto
dashbit · nimble_ztaSep 24, 2026
CVE-2026-97057
34Monitor
redis-parser through 3.0.0 Denial of Service via Invalid Array Length
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
noderedis · redis-parserSep 24, 2026
CVE-2026-97360
40Plan
HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
rejetto · hfs2Sep 24, 2026
CVE-2026-12559
29Monitor
Stored Cross-Site Scripting (XSS) in OpenText Vendor Invoice Management for SAP Solutions Capture Validation Application
HighCVSS 7.3No exploitEPSS 0%
- XSS
opentext · vendor invoice management for sap solutionsSep 24, 2026
CVE-2026-13465
33Monitor
EL3 Stack Buffer Overflow in FCS HKDF Request
HighCVSS 8.3No exploitEPSS 0%
- Memory safety
altera · trusted firmwareSep 24, 2026
CVE-2026-13466
33Monitor
Unit Confusion in VAB Authentication
HighCVSS 8.3No exploitEPSS 0%
altera · trusted firmwareSep 24, 2026
CVE-2026-13467
33Monitor
Systemic Missing Address Validation in SiP SMC Handlers
HighCVSS 8.3No exploitEPSS 0%
- Memory safety
altera · trusted firmwareSep 24, 2026
CVE-2026-51994
36Monitor
mcp-remote versions 0.1.32 through 0.1.38 are vulnerable to Server-Side Request Forgery (SSRF) via the resource_metadata URL extracted from
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
- SSRF
Sep 24, 2026
CVE-2026-51995
30Monitor
An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to obtain sensitive information via the src/lib/authorization-s
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
Sep 24, 2026
CVE-2026-51997
35Monitor
An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to execute arbitrary code via the open() functions
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
Sep 24, 2026
CVE-2026-56736
32Monitor
phpMyFAQ has Stored XSS in Admin FAQ Editor via HTML Entity Bypass in Frontend FAQ Submission
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- XSS
thorsten · phpmyfaqSep 24, 2026
CVE-2026-58004
33Monitor
Crafted oversized firmware image causes EL3 stack overflow during VAB authentication on Trusted Firmware.
HighCVSS 8.3No exploitEPSS 0%
- Local privilege escalation
- Memory safety
altera · trusted firmwareSep 24, 2026
CVE-2026-58005
33Monitor
Unvalidated SiP v2 mailbox pointers allow non-secure EL1 access to arbitrary physical addresses through EL3.
HighCVSS 8.3No exploitEPSS 0%
- Local privilege escalation
- Memory safety
altera · trusted firmwareSep 24, 2026
CVE-2026-58006
33Monitor
Altera SoCFPGA BL31 Mailbox Output Pointer Validation Enables EL3 Secure-Memory Corruption
HighCVSS 8.3No exploitEPSS 0%
altera · trusted firmwareSep 24, 2026
CVE-2026-58007
33Monitor
Unchecked SDM mailbox response address enables EL3 secure-memory corruption
HighCVSS 8.3No exploitEPSS 0%
altera · trusted firmwareSep 24, 2026
CVE-2026-58008
33Monitor
Unchecked HKDF key-size input in EL3 causes a stack buffer overflow
HighCVSS 8.3No exploitEPSS 0%
- Memory safety
altera · trusted firmwareSep 24, 2026
CVE-2026-77874
34Monitor
IBM Enterprise Build of Quarkus is affected by multiple vulnerabilities
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
ibm · enterprise build of quarkusSep 24, 2026
CVE-2026-88351
39Monitor
An integer overflow vulnerability exists in the MPack Node API in MPack 1.1.1 on 32-bit platforms.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
Sep 24, 2026
CVE-2026-90481
36Monitor
In PortSwigger Burp Suite DAST (formerly Burp Suite Enterprise Edition) before 2026.8, an authentication bypass can occur via an alternate p
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
portswigger · burp suite dastSep 24, 2026
CVE-2026-97362
34Monitor
HFS2 2.4.0 Unauthenticated Denial of Service via Hung Serving Thread
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
rejetto · hfs2Sep 24, 2026
CVE-2026-97404
36Monitor
In OpenStack Zaqar before 22.0.2, WSGI transport mishandles the URL-Signature header.
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
openstack · zaqarSep 24, 2026
GHSA-39mm-4q6x-3vrx
29Monitor
Excluded iPAddress name constraints with an all-zero mask are not applied
HighCVSS 7.4No exploit
- Pre-auth
Sep 24, 2026
CVE-2026-63203
30Monitor
Logto: Account API can disclose stored third-party provider tokens without the identities scope
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
logto-io · logtoSep 24, 2026
CVE-2026-88357
30Monitor
nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer deserialization code.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Deserialization
- Denial of service
Sep 24, 2026
CVE-2026-88361
30Monitor
SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::BuildPageLabelRec() when parsing PDF PageLabels /Nums entries.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 24, 2026
CVE-2026-88362
30Monitor
MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isindex() in jsrun.c.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 24, 2026
CVE-2026-88368
30Monitor
NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability in the rasterizer's nsvg__addActive() function.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 24, 2026
CVE-2026-88369
29Monitor
zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.c dump().
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
Sep 24, 2026
CVE-2026-92680
27Monitor
Araxis Merge insufficiently protected credentials
MediumCVSS 6.8Proof of conceptEPSS 0%
- Info leak
araxis · mergeSep 24, 2026
CVE-2026-93425
39Monitor
Dokploy: Authenticated OS Command Injection in patch.readRepoDirectories (repoPath) leads to RCE as root
CriticalCVSS 9.9No exploitEPSS 0%
- RCE
- Command injection
dokploy · dokploySep 24, 2026
CVE-2026-96744
28Monitor
Unauthorized cache lock takeover via expression injection in lock owner values in MongoDB integration for Laravel
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
mongodb · laravel mongodb (php)Sep 24, 2026
CVE-2026-96746
33Monitor
Heap buffer overflow via mid-scan command list growth in client topology monitoring
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
mongodb · c driverSep 24, 2026
CVE-2026-96750
29Monitor
Shell script injection via server-supplied database name in Open MongoDB shell
HighCVSS 7.3No exploitEPSS 0%
- RCE
mongodb · compassSep 24, 2026
CVE-2026-96873
22Monitor
Reflected XSS in CirrusSearch debug explain output
MediumCVSS 5.5Proof of conceptEPSS 0%
- Pre-auth
- XSS
the wikimedia foundation · mediawiki - cirrussearch extensionSep 24, 2026
CVE-2026-79764
30Monitor
Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
HighCVSS 7.7No exploitEPSS 0%
- SSRF
termix-ssh · termixSep 24, 2026
CVE-2026-88372
30Monitor
libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header() when parsing crafted MAT4 (MATLAB v4) files.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 24, 2026
CVE-2026-88373
30Monitor
libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the NAL parsing path.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 24, 2026
CVE-2026-88376
30Monitor
Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Create() and AP4_HvccAtom::Create().
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 24, 2026
CVE-2026-88382
30Monitor
hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation vulnerability in its RESP aggregate parser.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 24, 2026
CVE-2026-88390
30Monitor
An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2v29 (commit bffc6d0) allows crafted JavaScript input contain
HighCVSS 7.7No exploitEPSS 0%
- Memory safety
Sep 24, 2026
CVE-2026-91122
34Monitor
Discourse: Chat MessageBus delivers read-restricted messages to unauthorized users
HighCVSS 8.7No exploitEPSS 0%
- RCE
- XSS
discourse · discourseSep 24, 2026
CVE-2026-91123
28Monitor
Discourse: Reject literal backslash path separators in iframe src traversal guard
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- Path traversal
discourse · discourseSep 24, 2026
CVE-2026-93543
29Monitor
Out-of-bounds read in libXi's XI2 class parser
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
x.org · libxiSep 24, 2026
CVE-2026-93827
33Monitor
virtio-fs: avoid double-free on failed queue setup
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 24, 2026
CVE-2026-94611
32Monitor
authentik: Stored credentials are readable with view permission alone
HighCVSS 8.1No exploitEPSS 0%
- Info leak
goauthentik · authentikSep 24, 2026
CVE-2026-94612
29Monitor
authentik: Authentication bypass via assertion confusion in SAML sources
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
goauthentik · authentikSep 24, 2026
CVE-2026-96515
34Monitor
Command Injection Vulnerability in Netlink ICT HG323RW Router
HighCVSS 8.6Proof of conceptEPSS 0%
- RCE
- File upload
- Command injection
netlink ict pvt ltd · netlink ict hg323rw routerSep 24, 2026
CVE-2026-97433
32Monitor
nvme: validate FDP configuration descriptor sizes
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 24, 2026
CVE-2026-97474
29Monitor
wifi: iwlwifi: mld: purge async notifications upon nic error
HighCVSS 7.4No exploitEPSS 0%
linux · linuxSep 24, 2026
CVE-2026-97520
28Monitor
gfs2: move quota_init qc iterator increment
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 24, 2026
CVE-2026-88360
30Monitor
libvips 8.19.0 contains a memory access vulnerability when processing little-endian PFM images.
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 24, 2026
CVE-2026-95519
31Monitor
Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
red hat · red hat enterprise linux 10Sep 24, 2026
CVE-2026-95521
31Monitor
Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Command injection
red hat · red hat enterprise linux 10Sep 24, 2026
CVE-2026-97059
35Monitor
DCMTK through 3.7.0 Heap Over-read via NumberOfFrames
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
offis · dcmtkSep 24, 2026
CVE-2026-97359
42Plan
HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection
CriticalCVSS 10.0Proof of conceptEPSS 5%
- pre-auth RCE
- SSTI
rejetto · hfs2Sep 24, 2026
CVE-2026-85056
32Monitor
ZITADEL: MFA bypass via session reuse in Login V2
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
zitadel · zitadelSep 24, 2026
CVE-2026-95985
34Monitor
Kiro IDE Allows Agentic Writes to Global Configurations While Working in Untrusted Workspaces
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
amazon · kiro ideSep 24, 2026
CVE-2026-13016
37Monitor
Unauthenticated SQL Injection in ServiceNow AI Platform
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- SQL injection
servicenow · servicenow ai platformSep 24, 2026
CVE-2026-13248
35Monitor
Authenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
honeywell · pd45 industrial printerSep 24, 2026
CVE-2026-13249
39Monitor
Unauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.010040
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
- File upload
- Command injection
honeywell · pd45 industrial printerSep 24, 2026
CVE-2026-77293
28Monitor
TREK: Cross-user note-file deletion (IDOR / Broken Access Control)
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
mauriceboe · trekSep 24, 2026