By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 7 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2026-70178No exploit	Microsoft Fabric Elevation of Privilege Vulnerabilitymicrosoft · fabric · CWE-862 Broken access control (IDOR)	High8.8	—	0.6%	Sep 3, 2026
40Plan	CVE-2026-80098No exploit	Copilot Studio Elevation of Privilege Vulnerabilitymicrosoft · copilot studio · CWE-347 Pre-auth Weak crypto	Critical10.0	—	0.4%	Sep 3, 2026
37Monitor	CVE-2026-85426No exploit	MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Namesmoos-ivp · moos-ivp · CWE-78 pre-auth RCE Command injection	Critical9.3	—	0.9%	Sep 3, 2026
34Monitor	CVE-2026-85452No exploit	MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiersthemoos · ui-moos · CWE-787 Pre-auth Memory safety	High8.7	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-67397No exploit	Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.webpros · plesk · CWE-22 RCE Path traversal	High8.5	—	0.1%	Sep 3, 2026
32Monitor	CVE-2026-67398No exploit	Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9webpros · whmcs · CWE-862 Pre-auth Broken access control (IDOR)	High8.2	—	0.4%	Sep 3, 2026
36Monitor	CVE-2026-67402No exploit	An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual howebpros · configserver security & firewall · CWE-552 Pre-auth	Critical9.2	—	0.5%	Sep 3, 2026
31Monitor	CVE-2026-45200No exploit	GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlagsimagination technologies · graphics ddk · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.1%	Sep 3, 2026
29Monitor	CVE-2026-62906No exploit	Microsoft Discovery Studio Information Disclosure Vulnerabilitymicrosoft · discovery studio · CWE-943 Pre-auth SQL injection	High7.4	—	0.9%	Sep 3, 2026
40Plan	CVE-2026-70352No exploit	Azure AI Language Elevation of Privilege Vulnerabilitymicrosoft · azure ai language authoring · CWE-306 Pre-auth Auth bypass	Critical10.0	—	0.9%	Sep 3, 2026
40Plan	CVE-2026-83711No exploit	Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerabilitymicrosoft · azure active directory b2c · CWE-639 Pre-auth Broken access control (IDOR)	Critical10.0	—	0.7%	Sep 3, 2026
37Monitor	CVE-2026-85424No exploit	MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEARthemoos · core-moos · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.8%	Sep 3, 2026
38Monitor	CVE-2026-85425No exploit	MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOSmit · moos-ivp · CWE-78 pre-auth RCE Command injection	Critical9.3	—	1.7%	Sep 3, 2026
36Monitor	CVE-2026-85427No exploit	MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILEthemoos · essential-moos · CWE-494 pre-auth RCE Auth bypass	Critical9.2	—	0.5%	Sep 3, 2026
37Monitor	CVE-2026-85428No exploit	MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Writethemoos · core-moos · CWE-306 Pre-auth Auth bypass	Critical9.3	—	0.8%	Sep 3, 2026
34Monitor	CVE-2026-85429No exploit	MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofingmit · moos-ivp · CWE-345 Pre-auth	High8.7	—	0.3%	Sep 3, 2026
35Monitor	CVE-2026-85430No exploit	MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishingthemoos · essential-moos · CWE-345 Pre-auth Auth bypass	High8.8	—	1.6%	Sep 3, 2026
35Monitor	CVE-2026-85431No exploit	MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injectionthemoos · essential-moos · CWE-345 Pre-auth	High8.7	—	3.3%	Sep 3, 2026
35Monitor	CVE-2026-85432No exploit	MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identitythemoos · core-moos · CWE-290 Pre-auth Auth bypass	High8.8	—	0.5%	Sep 3, 2026
37Monitor	CVE-2026-85433No exploit	MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfigurationthemoos · essential-moos · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.3	—	0.7%	Sep 3, 2026
37Monitor	CVE-2026-85434No exploit	MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Pingmit · moos-ivp · CWE-345 Pre-auth	Critical9.3	—	0.4%	Sep 3, 2026
37Monitor	CVE-2026-85435No exploit	MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollmentmit · moos-ivp · CWE-345 Pre-auth	Critical9.3	—	0.4%	Sep 3, 2026
35Monitor	CVE-2026-85436No exploit	MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Lengththemoos · essential-moos · CWE-191 Pre-auth Memory safety	High8.7	—	2.0%	Sep 3, 2026
37Monitor	CVE-2026-85437No exploit	MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decodersmit · moos-ivp · CWE-787 pre-auth RCE Memory safety	Critical9.3	—	1.4%	Sep 3, 2026
37Monitor	CVE-2026-85438No exploit	MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Countsmit · moos-ivp · CWE-190 Pre-auth Memory safety	Critical9.3	—	1.0%	Sep 3, 2026
34Monitor	CVE-2026-85439No exploit	MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathnamemit · moos-ivp · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	0.4%	Sep 3, 2026
37Monitor	CVE-2026-85440No exploit	MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Lengththemoos · core-moos · CWE-787 Pre-auth Memory safety	Critical9.3	—	1.0%	Sep 3, 2026
34Monitor	CVE-2026-85441No exploit	MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Lengththemoos · core-moos · CWE-195 Pre-auth	High8.7	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85442No exploit	MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocationthemoos · core-moos · CWE-789 Pre-auth	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85443No exploit	MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Servicethemoos · core-moos · CWE-400 Pre-auth Denial of service	High8.7	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85444No exploit	MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevronedmit · moos-ivp · CWE-125 Pre-auth Memory safety	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85445No exploit	MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Countmit · moos-ivp · CWE-789 Pre-auth	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85446No exploit	MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Servicemit · moos-ivp · CWE-407 Pre-auth	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85447No exploit	MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Servicemit · moos-ivp · CWE-770 Pre-auth Denial of service	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85448No exploit	MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retentionmit · moos-ivp · CWE-770 Pre-auth Denial of service	High8.7	—	0.7%	Sep 3, 2026
34Monitor	CVE-2026-85449No exploit	MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORTmit · moos-ivp · CWE-770 Pre-auth Auth bypass Denial of service	High8.7	—	0.9%	Sep 3, 2026
34Monitor	CVE-2026-85450No exploit	MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustionthemoos · core-moos · CWE-770 Pre-auth Denial of service	High8.7	—	0.6%	Sep 3, 2026
28Monitor	CVE-2026-85451No exploit	MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrasethemoos · core-moos · CWE-798 Pre-auth Hard-coded credentials	High7.1	—	0.3%	Sep 3, 2026
35Monitor	CVE-2026-85455No exploit	MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packetthemoos · core-moos · CWE-125 Pre-auth Deserialization Memory safety	High8.8	—	0.6%	Sep 3, 2026
40Plan	CVE-2026-75754No exploit	Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center aasus · control center enterprise (acc) · CWE-306 Pre-auth Auth bypass SSRF	Critical10.0	—	0.3%	Sep 3, 2026
37Monitor	CVE-2026-85146No exploit	Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentialslightstar · smartit desktop manager · CWE-798 Pre-auth Hard-coded credentials	Critical9.3	—	0.6%	Sep 3, 2026
34Monitor	CVE-2026-85147No exploit	Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentialslightstar · smartit desktop manager · CWE-284 Pre-auth Hard-coded credentials Broken access control (IDOR)	High8.7	—	0.3%	Sep 3, 2026
37Monitor	CVE-2026-85148No exploit	Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentialslightstar · smartit desktop manager · CWE-798 Pre-auth Hard-coded credentials	Critical9.3	—	0.6%	Sep 3, 2026
39Monitor	CVE-2026-11613Proof of concept	Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameterdivi engine · divi ajax filter · CWE-98 pre-auth RCE	Critical9.8	—	0.8%	Sep 4, 2026
39Monitor	CVE-2026-85504No exploit	FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-stringfreeipmi · freeipmi · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-85505No exploit	ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujitfreeipmi · freeipmi · CWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	Sep 4, 2026
39Monitor	CVE-2026-85506No exploit	ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-freeipmi · freeipmi · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Sep 4, 2026
39Monitor	CVE-2026-85507No exploit	ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-ifreeipmi · freeipmi · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Sep 4, 2026
39Monitor	CVE-2026-85508No exploit	ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (freeipmi · freeipmi · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Sep 4, 2026
39Monitor	CVE-2026-85509No exploit	FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than freeipmi · freeipmi · CWE-121 Pre-auth Memory safety	Critical9.8	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-16281No exploit	Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDORunknown · classified listing · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 4, 2026
28Monitor	CVE-2026-19224No exploit	Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisiteunknown · hummingbird performance · CWE-94 RCE	High7.2	—	0.6%	Sep 4, 2026
38Monitor	CVE-2026-62928No exploit	XING CPTrans-ME-X contains an OS Command Injection (CWE-78).xing inc. · xing cptrans-me-x · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.0%	Sep 4, 2026
34Monitor	CVE-2026-66840No exploit	XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).xing inc. · xing cptrans-me-x · CWE-497 Pre-auth Info leak	High8.7	—	0.4%	Sep 4, 2026
37Monitor	CVE-2026-69657No exploit	XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).xing inc. · xing cptrans-me-x · CWE-1393 Pre-auth Hard-coded credentials	Critical9.3	—	0.5%	Sep 4, 2026
37Monitor	CVE-2026-70403No exploit	XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).xing inc. · xing cptrans-me-x · CWE-259 Pre-auth Hard-coded credentials	Critical9.3	—	0.5%	Sep 4, 2026
36Monitor	CVE-2026-80181No exploit	Apache Allura: Server-side request forgeryapache software foundation · apache allura · CWE-918 Pre-auth SSRF	Critical9.1	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-81270No exploit	Apache Allura: Information exposure via searchapache software foundation · apache allura · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Sep 4, 2026
16Monitor	CVE-2026-82186Proof of concept	WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameterunknown · wplp cookie consent · CWE-89 SQL injection	Medium4.1	—	0.6%	Sep 4, 2026
38Monitor	CVE-2026-85085No exploit	The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.canva · canva · CWE-940 Pre-auth	Critical9.6	—	0.3%	Sep 4, 2026
35Monitor	CVE-2026-85094No exploit	The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.canva · canva · CWE-212 Pre-auth	High8.8	—	0.4%	Sep 4, 2026
25Monitor	CVE-2026-6217No exploit	Information Disclosure in Pik Online Software's Portalpik online software solutions inc. · pik online portal · CWE-759	Medium6.3	—	0.1%	Sep 4, 2026
30Monitor	CVE-2026-57777No exploit	WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerabilityautomattic · woocommerce · CWE-89 SQL injection	High7.6	—	0.3%	Sep 4, 2026
34Monitor	CVE-2026-81302No exploit	PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wijal digital co.,ltd. · pallet control · CWE-276 RCE Local privilege escalation	High8.5	—	0.1%	Sep 4, 2026
29Monitor	CVE-2026-85525No exploit	Improper OCSP response validation in Snowflake driverssnowflake · snowflake connector for python · CWE-295 Pre-auth Weak crypto	High7.4	—	0.1%	Sep 4, 2026
30Monitor	CVE-2026-85533No exploit	MISP Sharing Group Authorization Bypass via Omitted Distribution Parametermisp · misp · CWE-862 Broken access control (IDOR)	High7.6	—	0.3%	Sep 4, 2026
33Monitor	CVE-2026-85538No exploit	MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributesmisp · misp · CWE-863 Broken access control (IDOR)	High8.3	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-76169No exploit	fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlersfastify · fastify · CWE-288 Pre-auth Auth bypass	High7.5	—	0.5%	Sep 4, 2026
39Monitor	CVE-2026-82923No exploit	AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routesunknown · ai website builder (github build) · CWE-862 pre-auth RCE Broken access control (IDOR)	Critical9.8	—	0.8%	Sep 4, 2026
30Monitor	CVE-2026-84469No exploit	fastify vulnerable to request validation bypass via skipped boolean false schemasfastify · fastify · CWE-20 Pre-auth	High7.5	—	0.4%	Sep 4, 2026
32Monitor	CVE-2026-84504No exploit	fastify vulnerable to request body replacement via an async validation result collisionfastify · fastify · CWE-20	High8.1	—	0.4%	Sep 4, 2026
36Monitor	CVE-2026-85184No exploit	@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request targetfastify · fastify\/middie · CWE-436 Pre-auth	Critical9.1	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-85540No exploit	Interinfo｜DreamMaker - SQL Injectioninterinfo · dreammaker · CWE-89 SQL injection	High8.7	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-85546No exploit	MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requestsmisp · misp · CWE-352 CSRF	High8.6	—	0.2%	Sep 4, 2026
34Monitor	CVE-2026-4644No exploit	Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeovergoogle cloud · integration connectors · CWE-863 Broken access control (IDOR)	High8.5	—	0.3%	Sep 4, 2026
34Monitor	CVE-2026-79707No exploit	Arbitrary File Read in Google Agent Development Kit (ADK)google cloud · agent development kit (adk) · CWE-22 Pre-auth Path traversal	High8.7	—	0.6%	Sep 4, 2026
30Monitor	CVE-2026-84428No exploit	fastify vulnerable to header validation bypass via incomplete schema case normalizationfastify · fastify · CWE-178 Pre-auth	High7.5	—	0.5%	Sep 4, 2026
30Monitor	CVE-2026-85197No exploit	Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body uploadred hat · red hat enterprise linux 10 · CWE-416 pre-auth RCE Memory safety	High7.6	—	0.3%	Sep 4, 2026
28Monitor	CVE-2026-19051No exploit	Plaintext Storage of User Credentials in Menulux Software's Menulux Portalmenulux software inc. · menulux portal · CWE-256	High7.1	—	0.2%	Sep 4, 2026
30Monitor	CVE-2026-19080No exploit	Username Enumeration in Menulux Software's Menulux Portalmenulux software inc. · menulux portal · CWE-204 Pre-auth	High7.5	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-85580No exploit	SiYuan before v3.8.2 Path Guard Bypass via Case Mismatchsiyuan-note · siyuan · CWE-22 Path traversal	High7.1	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-85581No exploit	SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registrationsiyuan-note · siyuan · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Sep 4, 2026
28Monitor	CVE-2026-85582No exploit	SiYuan before v3.8.2 Unbounded Session Creation via Basic Authsiyuan-note · siyuan · CWE-770 Denial of service	High7.1	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-85583No exploit	SiYuan before v3.8.2 Path Traversal via symlink in file APIsiyuan-note · siyuan · CWE-59 Path traversal	High7.1	—	0.6%	Sep 4, 2026
34Monitor	CVE-2026-85584No exploit	SiYuan before v3.8.2 Denial of Service via Auth Throttlesiyuan-note · siyuan · CWE-770 Pre-auth Denial of service	High8.7	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-85585No exploit	SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrencysiyuan-note · siyuan · CWE-400 Pre-auth Denial of service	High8.7	—	0.5%	Sep 4, 2026
28Monitor	CVE-2026-85590No exploit	phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disablethorsten · phpmyfaq · CWE-308 Auth bypass CSRF	High7.1	—	0.5%	Sep 4, 2026
28Monitor	CVE-2026-85591No exploit	phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Changethorsten · phpmyfaq · CWE-620 Auth bypass CSRF	High7.1	—	0.5%	Sep 4, 2026
37Monitor	CVE-2026-85602No exploit	Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypassgetgrav · grav-plugin-form · CWE-807 Pre-auth Auth bypass	Critical9.3	—	0.3%	Sep 4, 2026
28Monitor	CVE-2026-85603No exploit	Grav Admin Plugin Path Traversal via Save As Language Codegetgrav · grav · CWE-73 Path traversal	High7.1	—	0.6%	Sep 4, 2026
34Monitor	CVE-2026-85604No exploit	Grav before 2.0.18 Remote Code Execution via sort filtergetgrav · grav · CWE-94 pre-auth RCE	High8.7	—	0.8%	Sep 4, 2026
34Monitor	CVE-2026-85610No exploit	OpenPanel before 2.3.0 Remote Code Execution via chart formulasopenpanel-dev · openpanel · CWE-94 RCE	High8.7	—	0.7%	Sep 4, 2026
34Monitor	CVE-2026-85612Proof of concept	OpenPanel before 2.3.0 SSRF via favicon and og endpointsopenpanel-dev · openpanel · CWE-918 Pre-auth SSRF	High8.7	—	0.4%	Sep 4, 2026
33Monitor	CVE-2026-85613No exploit	OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxyopenpanel-dev · openpanel · CWE-79 Pre-auth XSS	High8.4	—	0.3%	Sep 4, 2026
36Monitor	CVE-2026-85614No exploit	OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkeropenpanel-dev · openpanel · CWE-918 Pre-auth SSRF	Critical9.2	—	0.2%	Sep 4, 2026
33Monitor	CVE-2026-85616No exploit	Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptancesnipeitapp · snipe-it · CWE-639 Broken access control (IDOR)	High8.4	—	0.3%	Sep 4, 2026
34Monitor	CVE-2026-85617No exploit	snipe-it before 8.6.3 Authorization Bypass via Bulk Deletesnipeitapp · snipe-it · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-81665No exploit	Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassemblyred hat · red hat enterprise linux 10 · CWE-122 Pre-auth Memory safety	High7.5	—	0.4%	Sep 4, 2026
35Monitor	CVE-2026-18198No exploit	SQL Injection in TAC Information's GoldenHorntac information services internal and external trade inc. · goldenhorn oneit · CWE-89 SQL injection	High8.8	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-74236No exploit	GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handlergfi software · gfi exinda ai · CWE-22 Path traversal	High7.0	—	0.9%	Sep 4, 2026

CVE-2026-70178
35Monitor
Microsoft Fabric Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
microsoft · fabricSep 3, 2026
CVE-2026-80098
40Plan
Copilot Studio Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Weak crypto
microsoft · copilot studioSep 3, 2026
CVE-2026-85426
37Monitor
MOOS-IvP through 24.8.1 uMemWatch Command Injection via MOOS Client Names
CriticalCVSS 9.3No exploitEPSS 0%
- pre-auth RCE
- Command injection
moos-ivp · moos-ivpSep 3, 2026
CVE-2026-85452
34Monitor
MOOS ui-moos through 50b9c6c uMS Buffer Overflow via Long MOOS Identifiers
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
themoos · ui-moosSep 3, 2026
CVE-2026-67397
34Monitor
Path traversal in Plesk 18.0.79.9 and earlier and 18.0.80 through 18.0.80.5 allows local users to execute arbitrary code as root.
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Path traversal
webpros · pleskSep 3, 2026
CVE-2026-67398
32Monitor
Missing authorization vulnerability has been discovered in 2Checkout payment gateway of WHMCS from 8.13.0 before 8.13.7, from 9.0.0 before 9
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
webpros · whmcsSep 3, 2026
CVE-2026-67402
36Monitor
An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual ho
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
webpros · configserver security & firewallSep 3, 2026
CVE-2026-45200
31Monitor
GPU DDK - Double free in _FreeOSPages due to incorrect allocation flag set by _EncodeAllocationFlags
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
imagination technologies · graphics ddkSep 3, 2026
CVE-2026-62906
29Monitor
Microsoft Discovery Studio Information Disclosure Vulnerability
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- SQL injection
microsoft · discovery studioSep 3, 2026
CVE-2026-70352
40Plan
Azure AI Language Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · azure ai language authoringSep 3, 2026
CVE-2026-83711
40Plan
Microsoft Azure Active Directory B2C Elevation of Privilege Vulnerability
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · azure active directory b2cSep 3, 2026
CVE-2026-85424
37Monitor
MOOS core-moos through 10.4.0 Missing Authentication for MOOSDB Publish, Subscribe and DB_CLEAR
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
themoos · core-moosSep 3, 2026
CVE-2026-85425
38Monitor
MOOS-IvP through 24.8.1 iSay Command Injection via SAY_MOOS
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Command injection
mit · moos-ivpSep 3, 2026
CVE-2026-85427
36Monitor
MOOS essential-moos through 10.0.1 pAntler Remote Code Execution via Unauthenticated MISSION_FILE
CriticalCVSS 9.2No exploitEPSS 0%
- pre-auth RCE
- Auth bypass
themoos · essential-moosSep 3, 2026
CVE-2026-85428
37Monitor
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Unauthenticated Variable Write
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
themoos · core-moosSep 3, 2026
CVE-2026-85429
34Monitor
MOOS-IvP through 24.8.1 uFldNodeComms Node Message Source Spoofing
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mit · moos-ivpSep 3, 2026
CVE-2026-85430
35Monitor
MOOS essential-moos through 10.0.1 pShare Unauthenticated UDP Datagram Republishing
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Auth bypass
themoos · essential-moosSep 3, 2026
CVE-2026-85431
35Monitor
MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
HighCVSS 8.7No exploitEPSS 3%
- Pre-auth
themoos · essential-moosSep 3, 2026
CVE-2026-85432
35Monitor
MOOS core-moos through 10.4.0 MOOSDB Message Source Spoofing via Wire Identity
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
themoos · core-moosSep 3, 2026
CVE-2026-85433
37Monitor
MOOS essential-moos through 10.0.1 pShare Unauthorized Runtime Route Reconfiguration
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
themoos · essential-moosSep 3, 2026
CVE-2026-85434
37Monitor
MOOS-IvP through 24.8.1 uFldShoreBroker Bridge Route Injection via Unverified Node Ping
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
mit · moos-ivpSep 3, 2026
CVE-2026-85435
37Monitor
MOOS-IvP through 24.8.1 uFldNodeBroker Unauthenticated Shore Route Enrollment
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
mit · moos-ivpSep 3, 2026
CVE-2026-85436
35Monitor
MOOS essential-moos through 10.0.1 pMOOSBridge Heap Corruption via Negative UDP Length
HighCVSS 8.7No exploitEPSS 2%
- Pre-auth
- Memory safety
themoos · essential-moosSep 3, 2026
CVE-2026-85437
37Monitor
MOOS-IvP through 24.8.1 Buffer Overflow in IvP Function String Decoders
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Memory safety
mit · moos-ivpSep 3, 2026
CVE-2026-85438
37Monitor
MOOS-IvP through 24.8.1 Out-of-Bounds Write via Unvalidated IvP Payload Counts
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- Memory safety
mit · moos-ivpSep 3, 2026
CVE-2026-85439
34Monitor
MOOS-IvP through 24.8.1 alogsplit Command Injection via Input Pathname
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
mit · moos-ivpSep 3, 2026
CVE-2026-85440
37Monitor
MOOS core-moos through 10.4.0 MOOSDB Pre-Authentication Heap Overflow via Negative Packet Length
CriticalCVSS 9.3No exploitEPSS 1%
- Pre-auth
- Memory safety
themoos · core-moosSep 3, 2026
CVE-2026-85441
34Monitor
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Negative Serialized String Length
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
themoos · core-moosSep 3, 2026
CVE-2026-85442
34Monitor
MOOS core-moos through 10.4.0 MOOSDB Denial of Service via Unbounded Packet Allocation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
themoos · core-moosSep 3, 2026
CVE-2026-85443
34Monitor
MOOS core-moos through 10.4.0 MOOSDB Accept Loop Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
themoos · core-moosSep 3, 2026
CVE-2026-85444
34Monitor
MOOS-IvP through 24.8.1 Out-of-Bounds Read in isBraced, isQuoted and isChevroned
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
mit · moos-ivpSep 3, 2026
CVE-2026-85445
34Monitor
MOOS-IvP through 24.8.1 BHV_IPF Demultiplexer Memory Exhaustion via Packet Count
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mit · moos-ivpSep 3, 2026
CVE-2026-85446
34Monitor
MOOS-IvP through 24.8.1 uFldNodeComms Quadratic Processing Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
mit · moos-ivpSep 3, 2026
CVE-2026-85447
34Monitor
MOOS-IvP through 24.8.1 pRealm Unbounded REALMCAST_REQ Subscription Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mit · moos-ivpSep 3, 2026
CVE-2026-85448
34Monitor
MOOS-IvP through 24.8.1 uFldShoreBroker Unbounded Community State Retention
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
mit · moos-ivpSep 3, 2026
CVE-2026-85449
34Monitor
MOOS-IvP through 24.8.1 pMarineViewer Unbounded Memory Consumption via NODE_REPORT
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Denial of service
mit · moos-ivpSep 3, 2026
CVE-2026-85450
34Monitor
MOOS core-moos through 10.4.0 MOOSDB HTTP Server Resource Exhaustion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
themoos · core-moosSep 3, 2026
CVE-2026-85451
28Monitor
MOOS core-moos through 10.4.0 Remote Process Termination via Hard-Coded Multicast Passphrase
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
themoos · core-moosSep 3, 2026
CVE-2026-85455
35Monitor
MOOS core-moos through 10.4.0 MOOSDB Out-of-Bounds Read via Short Packet
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Deserialization
- Memory safety
themoos · core-moosSep 3, 2026
CVE-2026-75754
40Plan
Missing Authentication for Critical Function, Server-Side Request Forgery (SSRF), and Use of Hard-coded Credentials in ASUS Control Center a
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- Auth bypass
- SSRF
asus · control center enterprise (acc)Sep 3, 2026
CVE-2026-85146
37Monitor
Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
lightstar · smartit desktop managerSep 3, 2026
CVE-2026-85147
34Monitor
Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
- Broken access control (IDOR)
lightstar · smartit desktop managerSep 3, 2026
CVE-2026-85148
37Monitor
Lightstar｜SmartIT Desktop Manager - Use of Hard-coded Credentials
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
lightstar · smartit desktop managerSep 3, 2026
CVE-2026-11613
39Monitor
Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 0%
- pre-auth RCE
divi engine · divi ajax filterSep 4, 2026
CVE-2026-85504
39Monitor
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujitsu_get_sel_entry_long_text in libfreeipmi/sel/ipmi-sel-string
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freeipmi · freeipmiSep 4, 2026
CVE-2026-85505
30Monitor
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer over-read in ipmi_oem_fujitsu_get_sel_entry_long_text in ipmi-oem/ipmi-oem-fujit
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
freeipmi · freeipmiSep 4, 2026
CVE-2026-85506
39Monitor
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_dell_system_info_idrac_info in ipmi-oem/ipmi-oem-dell.c (idrac-
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freeipmi · freeipmiSep 4, 2026
CVE-2026-85507
39Monitor
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_info in ipmi-oem/ipmi-oem-dell.c (cmc-i
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freeipmi · freeipmiSep 4, 2026
CVE-2026-85508
39Monitor
ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_dell_system_info_cmc_ipv6_info in ipmi-oem/ipmi-oem-dell.c (
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freeipmi · freeipmiSep 4, 2026
CVE-2026-85509
39Monitor
FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in libfreeipmi/fru/ipmi-fru.c when a BMC returns more bytes than
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Memory safety
freeipmi · freeipmiSep 4, 2026
CVE-2026-16281
28Monitor
Classified Listing < 6.1.1 - Subscriber+ Arbitrary Attachment Deletion and Listing Image Tampering via IDOR
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
unknown · classified listingSep 4, 2026
CVE-2026-19224
28Monitor
Hummingbird < 3.21.2 - Admin+ Network-Wide RCE via Hub Connector on Multisite
HighCVSS 7.2No exploitEPSS 0%
- RCE
unknown · hummingbird performanceSep 4, 2026
CVE-2026-62928
38Monitor
XING CPTrans-ME-X contains an OS Command Injection (CWE-78).
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
xing inc. · xing cptrans-me-xSep 4, 2026
CVE-2026-66840
34Monitor
XING CPTrans-ME-X contains an Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497).
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
xing inc. · xing cptrans-me-xSep 4, 2026
CVE-2026-69657
37Monitor
XING CPTrans-ME-X contains a Use of Default Password (CWE-1393).
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
xing inc. · xing cptrans-me-xSep 4, 2026
CVE-2026-70403
37Monitor
XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259).
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
xing inc. · xing cptrans-me-xSep 4, 2026
CVE-2026-80181
36Monitor
Apache Allura: Server-side request forgery
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- SSRF
apache software foundation · apache alluraSep 4, 2026
CVE-2026-81270
30Monitor
Apache Allura: Information exposure via search
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
apache software foundation · apache alluraSep 4, 2026
CVE-2026-82186
16Monitor
WPLP Cookie Consent < 4.4.2 - Admin+ SQLi via 'offset' Parameter
MediumCVSS 4.1Proof of conceptEPSS 0%
- SQL injection
unknown · wplp cookie consentSep 4, 2026
CVE-2026-85085
38Monitor
The Canva Android App before 2.376.0 allowed an external origin to be loaded in a privileged WebView.
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
canva · canvaSep 4, 2026
CVE-2026-85094
35Monitor
The Canva Android App before 2.376.0 did not restrict the headers returned to an external origin running in a privileged WebView.
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
canva · canvaSep 4, 2026
CVE-2026-6217
25Monitor
Information Disclosure in Pik Online Software's Portal
MediumCVSS 6.3No exploitEPSS 0%
pik online software solutions inc. · pik online portalSep 4, 2026
CVE-2026-57777
30Monitor
WordPress WooCommerce plugin < 11.0 - SQL Injection vulnerability
HighCVSS 7.6No exploitEPSS 0%
- SQL injection
automattic · woocommerceSep 4, 2026
CVE-2026-81302
34Monitor
PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code wi
HighCVSS 8.5No exploitEPSS 0%
- RCE
- Local privilege escalation
jal digital co.,ltd. · pallet controlSep 4, 2026
CVE-2026-85525
29Monitor
Improper OCSP response validation in Snowflake drivers
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
snowflake · snowflake connector for pythonSep 4, 2026
CVE-2026-85533
30Monitor
MISP Sharing Group Authorization Bypass via Omitted Distribution Parameter
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
misp · mispSep 4, 2026
CVE-2026-85538
33Monitor
MISP Attribute Deletion Authorization Bypass Allows Users Without Modify Permissions to Delete Attributes
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
misp · mispSep 4, 2026
CVE-2026-76169
30Monitor
fastify vulnerable to authentication bypass via malformed URLs reaching encapsulated not-found handlers
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Auth bypass
fastify · fastifySep 4, 2026
CVE-2026-82923
39Monitor
AI Website Builder (GitHub build) 1.0.0 - Unauthenticated RCE via Unprotected REST Routes
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- Broken access control (IDOR)
unknown · ai website builder (github build)Sep 4, 2026
CVE-2026-84469
30Monitor
fastify vulnerable to request validation bypass via skipped boolean false schemas
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
fastify · fastifySep 4, 2026
CVE-2026-84504
32Monitor
fastify vulnerable to request body replacement via an async validation result collision
HighCVSS 8.1No exploitEPSS 0%
fastify · fastifySep 4, 2026
CVE-2026-85184
36Monitor
@fastify/middie vulnerable to path-scoped middleware bypass via absolute-form request target
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
fastify · fastify\/middieSep 4, 2026
CVE-2026-85540
34Monitor
Interinfo｜DreamMaker - SQL Injection
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
interinfo · dreammakerSep 4, 2026
CVE-2026-85546
34Monitor
MISP Sharing Group Quick-Edit Actions Allow CSRF via State-Changing GET Requests
HighCVSS 8.6No exploitEPSS 0%
- CSRF
misp · mispSep 4, 2026
CVE-2026-4644
34Monitor
Improper Authorization in Google Cloud Integration Connectors Leads to Project Takeover
HighCVSS 8.5No exploitEPSS 0%
- Broken access control (IDOR)
google cloud · integration connectorsSep 4, 2026
CVE-2026-79707
34Monitor
Arbitrary File Read in Google Agent Development Kit (ADK)
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
google cloud · agent development kit (adk)Sep 4, 2026
CVE-2026-84428
30Monitor
fastify vulnerable to header validation bypass via incomplete schema case normalization
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
fastify · fastifySep 4, 2026
CVE-2026-85197
30Monitor
Libsoup: libsoup: heap use-after-free in libsoup http/2 client on_data_read() via goaway during body upload
HighCVSS 7.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
red hat · red hat enterprise linux 10Sep 4, 2026
CVE-2026-19051
28Monitor
Plaintext Storage of User Credentials in Menulux Software's Menulux Portal
HighCVSS 7.1No exploitEPSS 0%
menulux software inc. · menulux portalSep 4, 2026
CVE-2026-19080
30Monitor
Username Enumeration in Menulux Software's Menulux Portal
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
menulux software inc. · menulux portalSep 4, 2026
CVE-2026-85580
28Monitor
SiYuan before v3.8.2 Path Guard Bypass via Case Mismatch
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
siyuan-note · siyuanSep 4, 2026
CVE-2026-85581
34Monitor
SiYuan before v3.8.2 Denial of Service via unauthenticated UI-process registration
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
siyuan-note · siyuanSep 4, 2026
CVE-2026-85582
28Monitor
SiYuan before v3.8.2 Unbounded Session Creation via Basic Auth
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
siyuan-note · siyuanSep 4, 2026
CVE-2026-85583
28Monitor
SiYuan before v3.8.2 Path Traversal via symlink in file API
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
siyuan-note · siyuanSep 4, 2026
CVE-2026-85584
34Monitor
SiYuan before v3.8.2 Denial of Service via Auth Throttle
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
siyuan-note · siyuanSep 4, 2026
CVE-2026-85585
34Monitor
SiYuan before v3.8.2 Unbounded Memory Consumption via ControlConcurrency
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
siyuan-note · siyuanSep 4, 2026
CVE-2026-85590
28Monitor
phpMyFAQ before 4.1.8 Authentication Bypass via Two-Factor Disable
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
- CSRF
thorsten · phpmyfaqSep 4, 2026
CVE-2026-85591
28Monitor
phpMyFAQ before 4.1.8 Authentication Bypass via Unverified Password Change
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
- CSRF
thorsten · phpmyfaqSep 4, 2026
CVE-2026-85602
37Monitor
Grav Form Plugin before 9.1.20 reCAPTCHA v3 Authentication Bypass
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
getgrav · grav-plugin-formSep 4, 2026
CVE-2026-85603
28Monitor
Grav Admin Plugin Path Traversal via Save As Language Code
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
getgrav · gravSep 4, 2026
CVE-2026-85604
34Monitor
Grav before 2.0.18 Remote Code Execution via sort filter
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
getgrav · gravSep 4, 2026
CVE-2026-85610
34Monitor
OpenPanel before 2.3.0 Remote Code Execution via chart formulas
HighCVSS 8.7No exploitEPSS 0%
- RCE
openpanel-dev · openpanelSep 4, 2026
CVE-2026-85612
34Monitor
OpenPanel before 2.3.0 SSRF via favicon and og endpoints
HighCVSS 8.7Proof of conceptEPSS 0%
- Pre-auth
- SSRF
openpanel-dev · openpanelSep 4, 2026
CVE-2026-85613
33Monitor
OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- XSS
openpanel-dev · openpanelSep 4, 2026
CVE-2026-85614
36Monitor
OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- SSRF
openpanel-dev · openpanelSep 4, 2026
CVE-2026-85616
33Monitor
Snipe-IT before 8.6.2 Authorization Bypass via Checkout-Acceptance
HighCVSS 8.4No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 4, 2026
CVE-2026-85617
34Monitor
snipe-it before 8.6.3 Authorization Bypass via Bulk Delete
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
snipeitapp · snipe-itSep 4, 2026
CVE-2026-81665
30Monitor
Corosync: corosync: heap-based buffer overflow in totempg assembly buffer during fragmented message reassembly
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
red hat · red hat enterprise linux 10Sep 4, 2026
CVE-2026-18198
35Monitor
SQL Injection in TAC Information's GoldenHorn
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
tac information services internal and external trade inc. · goldenhorn oneitSep 4, 2026
CVE-2026-74236
28Monitor
GFI Exinda AI / ClearView < 7.6.5 Path Traversal via Diagnostic File Deletion Handler
HighCVSS 7.0No exploitEPSS 0%
- Path traversal
gfi software · gfi exinda aiSep 4, 2026