By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 70 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
28Monitor	CVE-2026-98163No exploit	cgroup: Avoid iteration of dying tasks with zero refcountlinux · linux kernel · CWE-362 Race condition	High7.0	—	0.1%	Sep 26, 2026
33Monitor	CVE-2026-100705No exploit	Kyverno before 1.19.1 SSRF via legacy apiCall service executorkyverno · kyverno · CWE-918 SSRF	High8.3	—	0.1%	Sep 26, 2026
37Monitor	CVE-2026-100706No exploit	kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPathkyverno · kyverno · CWE-441 Path traversal	Critical9.4	—	0.6%	Sep 26, 2026
28Monitor	CVE-2026-100708No exploit	Froxlor before 2.3.13 Private Key Disclosure via Certificates APIfroxlor · froxlor · CWE-200 Info leak	High7.1	—	0.1%	Sep 26, 2026
28Monitor	CVE-2026-100712No exploit	froxlor before 2.3.12 Two-Factor Authentication Bypass via CSRFfroxlor · froxlor · CWE-352 Pre-auth Auth bypass CSRF	High7.1	—	0.1%	Sep 26, 2026
28Monitor	CVE-2026-100713No exploit	Froxlor before 2.3.12 Privilege Escalation via SSH Key Syncfroxlor · froxlor · CWE-367 Race condition	High7.1	—	0.1%	Sep 26, 2026
37Monitor	CVE-2026-100714No exploit	Froxlor before 2.3.12 Command Injection via letsencryptchallengepathfroxlor · froxlor · CWE-88 RCE Command injection	Critical9.4	—	0.5%	Sep 26, 2026
37Monitor	CVE-2026-100716No exploit	Froxlor before 2.3.12 Privilege Escalation via Symlinkfroxlor · froxlor · CWE-59	Critical9.4	—	0.4%	Sep 26, 2026
28Monitor	CVE-2026-100718No exploit	Froxlor before 2.3.12 Authentication Bypass via EmailSender.addfroxlor · froxlor · CWE-276 Auth bypass	High7.1	—	0.1%	Sep 26, 2026
28Monitor	CVE-2026-100719No exploit	Froxlor before 2.3.12 Credential Disclosure via DirProtections APIfroxlor · froxlor · CWE-200 Info leak	High7.1	—	0.2%	Sep 26, 2026
37Monitor	CVE-2026-100720No exploit	Froxlor before 2.3.12 Stored XSS via SSL certificate issuerfroxlor · froxlor · CWE-79 XSS	Critical9.3	—	0.2%	Sep 26, 2026
35Monitor	CVE-2026-77203No exploit	Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcodeitthinx · groups – memberships and access control · CWE-269	High8.8	—	0.3%	Sep 26, 2026
39Monitor	CVE-2026-85984Proof of concept	miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parametercyberlord92 · miniorange otp login, verification and sms notifications · CWE-287 Pre-auth Auth bypass	Critical9.8	—	1.0%	Sep 26, 2026
28Monitor	CVE-2026-100602No exploit	ClawHub Changelog Preview Information Disclosure via Authorization Bypassopenclaw · clawhub · CWE-862 Broken access control (IDOR)	High7.1	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100603No exploit	ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reportsopenclaw · clawhub · CWE-799	High8.7	—	0.2%	Sep 26, 2026
30Monitor	CVE-2026-100605No exploit	Flowise through 3.1.4 Missing Authorization via Chat Message Routesflowiseai · flowise · CWE-862 Broken access control (IDOR)	High7.5	—	0.2%	Sep 26, 2026
36Monitor	CVE-2026-100606No exploit	Flowise through 3.1.4 Authentication Bypass via SSO Email Matchflowiseai · flowise · CWE-287 Pre-auth Auth bypass	Critical9.2	—	0.4%	Sep 26, 2026
36Monitor	CVE-2026-100607No exploit	Flowise through 3.1.4 Authentication Bypass via Email-Only SSOflowiseai · flowise · CWE-287 Pre-auth Auth bypass	Critical9.2	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100608No exploit	Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboardflowiseai · flowise · CWE-862 Broken access control (IDOR)	High8.7	—	0.3%	Sep 26, 2026
30Monitor	CVE-2026-100609No exploit	Flowise through 3.1.4 Insecure Direct Object Reference via Credentialflowiseai · flowise · CWE-639 Broken access control (IDOR)	High7.6	—	0.2%	Sep 26, 2026
30Monitor	CVE-2026-100610No exploit	Flowise through 3.1.4 Missing Authorization via upsert-historyflowiseai · flowise · CWE-639 Broken access control (IDOR)	High7.7	—	0.3%	Sep 26, 2026
28Monitor	CVE-2026-100611No exploit	Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-listcap-go · capgo.app · CWE-269	High7.1	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100612No exploit	Capgo SSO Provider ID Authentication Bypass via Incomplete Migrationcap-go · capgo.app · CWE-639 Auth bypass Broken access control (IDOR)	High8.6	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100614No exploit	Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Workercap-go · capgo.app · CWE-639 Broken access control (IDOR)	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100615No exploit	Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotationcap-go · capgo.app · CWE-269 Pre-auth	High8.7	—	0.3%	Sep 26, 2026
28Monitor	CVE-2026-100616No exploit	capgo.app Authentication Bypass via PostgREST customer_id Mutationcap-go · capgo.app · CWE-863 Auth bypass Broken access control (IDOR)	High7.0	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100617No exploit	Cap-go capgo.app Authorization Bypass via channel_permission_overridescap-go · capgo.app · CWE-862 Broken access control (IDOR)	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100618No exploit	Capgo App Icon Update Privilege Escalation via Service-Role Workercap-go · capgo.app · CWE-639 Pre-auth Broken access control (IDOR)	High8.7	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100619No exploit	Capgo OTA Manifest Poisoning via app_versions.manifest Bypasscap-go · capgo.app · CWE-266	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100622No exploit	capgo.app through 12.129.0 Cache Restoration of Deleted Bundlescap-go · capgo.app · CWE-200 Pre-auth Info leak	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100623No exploit	Capgo Authentication Bypass via Direct PostgREST org_users Table Writecap-go · capgo.app · CWE-863 Auth bypass Broken access control (IDOR)	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100625No exploit	Capgo Build Upload Proxy Authorization Bypass via TUS Resourcecap-go · capgo.app · CWE-441 Pre-auth	High8.7	—	0.3%	Sep 26, 2026
28Monitor	CVE-2026-100627No exploit	Capgo bundle promotion API channel RBAC deny override bypasscap-go · capgo.app · CWE-639 Broken access control (IDOR)	High7.2	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100628No exploit	capgo.app before 12.128.12 Authentication Bypass via apikeycap-go · capgo.app · CWE-863 Auth bypass Broken access control (IDOR)	High8.7	—	0.2%	Sep 26, 2026
28Monitor	CVE-2026-100629No exploit	Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCHcap-go · capgo.app · CWE-863 Broken access control (IDOR)	High7.0	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100631No exploit	Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injectionparse-community · parse-server · CWE-943 Pre-auth SQL injection	High8.7	—	0.3%	Sep 26, 2026
28Monitor	CVE-2026-100632No exploit	Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQueryparse-community · parse-server · CWE-200 Info leak	High7.1	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100633Proof of concept	SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operationssiyuan-note · siyuan · CWE-863 Path traversal Broken access control (IDOR)	High8.5	—	0.4%	Sep 26, 2026
32Monitor	CVE-2026-100635No exploit	SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookiesiyuan-note · siyuan · CWE-319 Pre-auth Auth bypass Weak crypto	High8.2	—	0.3%	Sep 26, 2026
33Monitor	CVE-2026-100636No exploit	SiYuan before v3.8.4 Path Traversal via exportBrowserHTML foldersiyuan-note · siyuan · CWE-22 Path traversal XSS	High8.3	—	0.6%	Sep 26, 2026
33Monitor	CVE-2026-100637No exploit	SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionIDsiyuan-note · siyuan · CWE-73 Path traversal	High8.3	—	0.5%	Sep 26, 2026
33Monitor	CVE-2026-100638No exploit	SiYuan before v3.8.4 Path Traversal via setNotebookIconsiyuan-note · siyuan · CWE-73 Path traversal	High8.3	—	0.5%	Sep 26, 2026
34Monitor	CVE-2026-100639No exploit	SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IALsiyuan-note · siyuan · CWE-79 Pre-auth XSS	High8.6	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100640No exploit	SiYuan before v3.8.4 Clipboard Data Disclosure via IPCsiyuan-note · siyuan · CWE-200 Info leak	High8.6	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100641No exploit	SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Contentsiyuan-note · siyuan · CWE-79 RCE XSS	High8.6	—	0.6%	Sep 26, 2026
28Monitor	CVE-2026-100642No exploit	SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuthsiyuan-note · siyuan · CWE-346 Pre-auth CSRF	High7.2	—	0.1%	Sep 26, 2026
34Monitor	CVE-2026-100643No exploit	SiYuan before v3.8.4 Stored XSS via Attribute View textareasiyuan-note · siyuan · CWE-79 RCE XSS	High8.5	—	0.5%	Sep 26, 2026
34Monitor	CVE-2026-100644No exploit	SiYuan before v3.8.4 SQL Injection via dailyNoteSavePathsiyuan-note · siyuan · CWE-89 Pre-auth SQL injection	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100645No exploit	SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanbansiyuan-note · siyuan · CWE-79 RCE XSS	High8.6	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100646No exploit	SiYuan before v3.8.4 Authentication Bypass via Missing Origin Headersiyuan-note · siyuan · CWE-346 Pre-auth Auth bypass	High8.6	—	0.2%	Sep 26, 2026
28Monitor	CVE-2026-100650No exploit	vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materializationvllm · vllm · CWE-400 Denial of service	High7.1	—	0.8%	Sep 26, 2026
28Monitor	CVE-2026-100651No exploit	vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypassvllm · vllm · CWE-400 Denial of service	High7.1	—	0.3%	Sep 26, 2026
32Monitor	CVE-2026-100652No exploit	vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_idsvllm · vllm · CWE-20 Pre-auth	High8.2	—	0.4%	Sep 26, 2026
33Monitor	CVE-2026-100653No exploit	vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagationvllm · vllm · CWE-348 Pre-auth	High8.3	—	0.3%	Sep 26, 2026
28Monitor	CVE-2026-100654No exploit	vLLM before 0.29.0 Denial of Service via out-of-range stop_token_idsvllm · vllm · CWE-129	High7.1	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100660No exploit	Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retentionnetty · netty · CWE-770 Pre-auth Denial of service	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100661No exploit	Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulationnetty · netty · CWE-400 Pre-auth Denial of service	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100662No exploit	Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoSnetty · netty · CWE-400 Pre-auth Denial of service	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100663No exploit	Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3netty · netty · CWE-20 Pre-auth	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100664No exploit	Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusionnetty · netty · CWE-20 Pre-auth	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100665No exploit	Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypassnetty · netty · CWE-295 Pre-auth Weak crypto	High8.7	—	0.3%	Sep 26, 2026
28Monitor	CVE-2026-100668No exploit	Grav before 2.0.25 Sandbox Escape via array Filtergetgrav · grav · CWE-200 Info leak	High7.1	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100669No exploit	Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypassgetgrav · grav · CWE-178 Pre-auth	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100670No exploit	Grav CMS 2.0.14 through 2.0.24 Privilege Escalation via Blueprint Guard Bypassgetgrav · grav · CWE-639 Broken access control (IDOR)	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100671Proof of concept	Grav before 2.0.25 Session Cookie Theft via Twig Sandboxgetgrav · grav · CWE-200 Info leak	High8.6	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100672No exploit	grav-plugin-comments before 1.2.11 Unauthenticated Information Disclosuregetgrav · grav-plugin-comments · CWE-306 Pre-auth Auth bypass	High8.7	—	0.5%	Sep 26, 2026
33Monitor	CVE-2026-100673No exploit	Grav Data Manager before 1.4.5 Stored XSS via item-detail viewgetgrav · grav-plugin-datamanager · CWE-79 Pre-auth XSS CSRF	High8.4	—	0.2%	Sep 26, 2026
28Monitor	CVE-2026-100675No exploit	stoatchat before 0.15.5 Denial of Service via mass mentionsstoatchat · stoatchat · CWE-248	High7.1	—	0.3%	Sep 26, 2026
35Monitor	CVE-2026-100676No exploit	stoatchat before 0.15.5 Local Filesystem Read via SVGstoatchat · stoatchat · CWE-693 Pre-auth	High8.8	—	0.5%	Sep 26, 2026
33Monitor	CVE-2026-100678No exploit	stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limitingstoatchat · stoatchat · CWE-307 Pre-auth	High8.3	—	0.2%	Sep 26, 2026
28Monitor	CVE-2026-100679No exploit	stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticketstoatchat · stoatchat · CWE-639 Broken access control (IDOR)	High7.1	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100680No exploit	Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Importbudibase · server · CWE-200 Info leak	High8.6	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100682No exploit	Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlinkbudibase · server · CWE-22 RCE Path traversal	High8.7	—	0.7%	Sep 26, 2026
35Monitor	CVE-2026-100683No exploit	Budibase before 3.45.0 SQL Injection via column-rename DDLbudibase · server · CWE-89 SQL injection	High8.9	—	0.2%	Sep 26, 2026
36Monitor	CVE-2026-100684No exploit	Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDCbudibase · server · CWE-287 Pre-auth Auth bypass	Critical9.2	—	0.4%	Sep 26, 2026
33Monitor	CVE-2026-100685No exploit	Budibase before 3.45.0 Information Disclosure via Chat Linksbudibase · server · CWE-863 Broken access control (IDOR)	High8.3	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100686No exploit	Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/appsbudibase · server · CWE-269	High8.6	—	0.2%	Sep 26, 2026
28Monitor	CVE-2026-100687No exploit	Budibase Server before 3.45.0 Credential Exposure via External Table Broadcastbudibase · server · CWE-200 Info leak	High7.0	—	0.2%	Sep 26, 2026
28Monitor	CVE-2026-100688No exploit	Budibase server before 3.45.0 Cross-Tenant Information Disclosurebudibase · server · CWE-639 Broken access control (IDOR)	High7.1	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100689No exploit	GitPython before 3.1.62 Path Traversal via gitmodules pathgitpython-developers · gitpython · CWE-22 Pre-auth Path traversal	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100690No exploit	Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinksgohugo · hugo · CWE-59 Pre-auth	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100692No exploit	Hugo before v0.166.0 Path Traversal via Symlinked Mount Rootsgohugo · hugo · CWE-59 Pre-auth Path traversal	High8.7	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100693No exploit	Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypassgohugo · hugo · CWE-178	High8.6	—	0.1%	Sep 26, 2026
21Monitor	CVE-2026-100697No exploit	Adminer 6.0.0 Server-Side Request Forgery via ClickHouse drivervrana · adminer · CWE-918 Pre-auth SSRF	Medium5.3	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100700No exploit	nodemailer before 10.0.6 Denial of Service via addressparsernodemailer · nodemailer · CWE-407 Pre-auth	High8.7	—	0.3%	Sep 26, 2026
32Monitor	CVE-2026-100702No exploit	Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arraysnodemailer · nodemailer · CWE-674 Pre-auth Denial of service	High8.2	—	0.2%	Sep 26, 2026
33Monitor	CVE-2026-100703No exploit	Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Libkyverno · kyverno · CWE-200 Info leak	High8.3	—	0.2%	Sep 26, 2026
33Monitor	CVE-2026-100704No exploit	Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypasskyverno · kyverno · CWE-863 Broken access control (IDOR)	High8.3	—	0.2%	Sep 26, 2026
33Monitor	CVE-2026-100707No exploit	Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Pathkyverno · kyverno · CWE-22 Path traversal	High8.3	—	0.4%	Sep 26, 2026
30Monitor	CVE-2026-100709No exploit	Froxlor before 2.3.11 2FA Bypass via Namespace Confusionfroxlor · froxlor · CWE-287 Auth bypass	High7.7	—	0.2%	Sep 26, 2026
34Monitor	CVE-2026-100711No exploit	froxlor before 2.3.12 Authentication Bypass via Session Persistencefroxlor · froxlor · CWE-613 Pre-auth Auth bypass	High8.7	—	0.3%	Sep 26, 2026
34Monitor	CVE-2026-100715No exploit	Froxlor before 2.3.12 Arbitrary File Deletion via Symlinkfroxlor · froxlor · CWE-59	High8.5	—	0.4%	Sep 26, 2026
34Monitor	CVE-2026-100717No exploit	froxlor before 2.3.12 CRLF Injection via validateUrl userinfofroxlor · froxlor · CWE-93	High8.5	—	0.2%	Sep 26, 2026
37Monitor	CVE-2026-94130Proof of concept	Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3joomlaboat · youtube gallery · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.4%	Sep 26, 2026
40Plan	CVE-2026-82901Proof of concept	Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Fieldthemefic · ultra addons for contact form 7 · CWE-434 pre-auth RCE File upload	Critical9.8	—	4.3%	Sep 26, 2026
33Monitor	CVE-2026-94131No exploit	Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0acymailing · acymailing · CWE-89 Pre-auth SQL injection	High8.3	—	0.2%	Sep 26, 2026
38Monitor	CVE-2026-94132Proof of concept	Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0acymailing · acymailing · CWE-434 pre-auth RCE File upload	Critical9.5	—	0.4%	Sep 26, 2026
37Monitor	CVE-2026-97160Proof of concept	Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-94 RCE Command injection	Critical9.4	—	1.3%	Sep 26, 2026
36Monitor	CVE-2026-97161Proof of concept	Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-22 Pre-auth Path traversal	Critical9.2	—	0.4%	Sep 26, 2026
33Monitor	CVE-2026-97162No exploit	Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29lomart · up · CWE-89 Pre-auth SQL injection	High8.3	—	0.3%	Sep 26, 2026

CVE-2026-98163
28Monitor
cgroup: Avoid iteration of dying tasks with zero refcount
HighCVSS 7.0No exploitEPSS 0%
- Race condition
linux · linux kernelSep 26, 2026
CVE-2026-100705
33Monitor
Kyverno before 1.19.1 SSRF via legacy apiCall service executor
HighCVSS 8.3No exploitEPSS 0%
- SSRF
kyverno · kyvernoSep 26, 2026
CVE-2026-100706
37Monitor
kyverno before 1.19.1 Privilege Escalation via Policy apiCall urlPath
CriticalCVSS 9.4No exploitEPSS 0%
- Path traversal
kyverno · kyvernoSep 26, 2026
CVE-2026-100708
28Monitor
Froxlor before 2.3.13 Private Key Disclosure via Certificates API
HighCVSS 7.1No exploitEPSS 0%
- Info leak
froxlor · froxlorSep 26, 2026
CVE-2026-100712
28Monitor
froxlor before 2.3.12 Two-Factor Authentication Bypass via CSRF
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- CSRF
froxlor · froxlorSep 26, 2026
CVE-2026-100713
28Monitor
Froxlor before 2.3.12 Privilege Escalation via SSH Key Sync
HighCVSS 7.1No exploitEPSS 0%
- Race condition
froxlor · froxlorSep 26, 2026
CVE-2026-100714
37Monitor
Froxlor before 2.3.12 Command Injection via letsencryptchallengepath
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Command injection
froxlor · froxlorSep 26, 2026
CVE-2026-100716
37Monitor
Froxlor before 2.3.12 Privilege Escalation via Symlink
CriticalCVSS 9.4No exploitEPSS 0%
froxlor · froxlorSep 26, 2026
CVE-2026-100718
28Monitor
Froxlor before 2.3.12 Authentication Bypass via EmailSender.add
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
froxlor · froxlorSep 26, 2026
CVE-2026-100719
28Monitor
Froxlor before 2.3.12 Credential Disclosure via DirProtections API
HighCVSS 7.1No exploitEPSS 0%
- Info leak
froxlor · froxlorSep 26, 2026
CVE-2026-100720
37Monitor
Froxlor before 2.3.12 Stored XSS via SSL certificate issuer
CriticalCVSS 9.3No exploitEPSS 0%
- XSS
froxlor · froxlorSep 26, 2026
CVE-2026-77203
35Monitor
Groups <= 4.6.0 - Authenticated (Subscriber+) Privilege Escalation via 'groups_join' Shortcode
HighCVSS 8.8No exploitEPSS 0%
itthinx · groups – memberships and access controlSep 26, 2026
CVE-2026-85984
39Monitor
miniOrange OTP Login, Verification and SMS Notifications <= 5.5.5 - Unauthenticated Authentication Bypass via 'mo_wp_login_intent' Parameter
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- Auth bypass
cyberlord92 · miniorange otp login, verification and sms notificationsSep 26, 2026
CVE-2026-100602
28Monitor
ClawHub Changelog Preview Information Disclosure via Authorization Bypass
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
openclaw · clawhubSep 26, 2026
CVE-2026-100603
34Monitor
ClawHub before 8c2de6c506 Skill Hiding via Coordinated Reports
HighCVSS 8.7No exploitEPSS 0%
openclaw · clawhubSep 26, 2026
CVE-2026-100605
30Monitor
Flowise through 3.1.4 Missing Authorization via Chat Message Routes
HighCVSS 7.5No exploitEPSS 0%
- Broken access control (IDOR)
flowiseai · flowiseSep 26, 2026
CVE-2026-100606
36Monitor
Flowise through 3.1.4 Authentication Bypass via SSO Email Match
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
flowiseai · flowiseSep 26, 2026
CVE-2026-100607
36Monitor
Flowise through 3.1.4 Authentication Bypass via Email-Only SSO
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
flowiseai · flowiseSep 26, 2026
CVE-2026-100608
34Monitor
Flowise through 3.1.4 Authorization Bypass via BullMQ Dashboard
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
flowiseai · flowiseSep 26, 2026
CVE-2026-100609
30Monitor
Flowise through 3.1.4 Insecure Direct Object Reference via Credential
HighCVSS 7.6No exploitEPSS 0%
- Broken access control (IDOR)
flowiseai · flowiseSep 26, 2026
CVE-2026-100610
30Monitor
Flowise through 3.1.4 Missing Authorization via upsert-history
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
flowiseai · flowiseSep 26, 2026
CVE-2026-100611
28Monitor
Capgo apikey_manager Role Privilege Escalation via Incomplete Role Deny-list
HighCVSS 7.1No exploitEPSS 0%
cap-go · capgo.appSep 26, 2026
CVE-2026-100612
34Monitor
Capgo SSO Provider ID Authentication Bypass via Incomplete Migration
HighCVSS 8.6No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100614
34Monitor
Capgo before 12.244.1 Cross-Tenant Image Overwrite via Metadata Worker
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100615
34Monitor
Cap-go capgo.app before 12.267.1 Privilege Escalation via API Key Rotation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
cap-go · capgo.appSep 26, 2026
CVE-2026-100616
28Monitor
capgo.app Authentication Bypass via PostgREST customer_id Mutation
HighCVSS 7.0No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100617
34Monitor
Cap-go capgo.app Authorization Bypass via channel_permission_overrides
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100618
34Monitor
Capgo App Icon Update Privilege Escalation via Service-Role Worker
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100619
34Monitor
Capgo OTA Manifest Poisoning via app_versions.manifest Bypass
HighCVSS 8.7No exploitEPSS 0%
cap-go · capgo.appSep 26, 2026
CVE-2026-100622
34Monitor
capgo.app through 12.129.0 Cache Restoration of Deleted Bundles
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Info leak
cap-go · capgo.appSep 26, 2026
CVE-2026-100623
34Monitor
Capgo Authentication Bypass via Direct PostgREST org_users Table Write
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100625
34Monitor
Capgo Build Upload Proxy Authorization Bypass via TUS Resource
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
cap-go · capgo.appSep 26, 2026
CVE-2026-100627
28Monitor
Capgo bundle promotion API channel RBAC deny override bypass
HighCVSS 7.2No exploitEPSS 0%
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100628
34Monitor
capgo.app before 12.128.12 Authentication Bypass via apikey
HighCVSS 8.7No exploitEPSS 0%
- Auth bypass
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100629
28Monitor
Capgo backend before 12.127.5 Privilege Escalation via role_bindings PATCH
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
cap-go · capgo.appSep 26, 2026
CVE-2026-100631
34Monitor
Parse Server 9.0.0 Unauthenticated Installation Deletion via Operator Injection
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SQL injection
parse-community · parse-serverSep 26, 2026
CVE-2026-100632
28Monitor
Parse Server 9.0.0 before 9.10.1 Protected Fields Disclosure via LiveQuery
HighCVSS 7.1No exploitEPSS 0%
- Info leak
parse-community · parse-serverSep 26, 2026
CVE-2026-100633
34Monitor
SiYuan 3.8.0 through 3.8.3 Path Traversal via MCP File Operations
HighCVSS 8.5Proof of conceptEPSS 0%
- Path traversal
- Broken access control (IDOR)
siyuan-note · siyuanSep 26, 2026
CVE-2026-100635
32Monitor
SiYuan before v3.8.4 Authentication Bypass via Plaintext Session Cookie
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
siyuan-note · siyuanSep 26, 2026
CVE-2026-100636
33Monitor
SiYuan before v3.8.4 Path Traversal via exportBrowserHTML folder
HighCVSS 8.3No exploitEPSS 0%
- Path traversal
- XSS
siyuan-note · siyuanSep 26, 2026
CVE-2026-100637
33Monitor
SiYuan before v3.8.4 Path Traversal via checkoutRepo sessionID
HighCVSS 8.3No exploitEPSS 0%
- Path traversal
siyuan-note · siyuanSep 26, 2026
CVE-2026-100638
33Monitor
SiYuan before v3.8.4 Path Traversal via setNotebookIcon
HighCVSS 8.3No exploitEPSS 0%
- Path traversal
siyuan-note · siyuanSep 26, 2026
CVE-2026-100639
34Monitor
SiYuan before v3.8.4 Cross-Site Scripting via Kramdown IAL
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- XSS
siyuan-note · siyuanSep 26, 2026
CVE-2026-100640
34Monitor
SiYuan before v3.8.4 Clipboard Data Disclosure via IPC
HighCVSS 8.6No exploitEPSS 0%
- Info leak
siyuan-note · siyuanSep 26, 2026
CVE-2026-100641
34Monitor
SiYuan before v3.8.4 Stored XSS via Unescaped Flashcard Content
HighCVSS 8.6No exploitEPSS 0%
- RCE
- XSS
siyuan-note · siyuanSep 26, 2026
CVE-2026-100642
28Monitor
SiYuan v2.1.0 before v3.8.4 Cross-Site Request Forgery via CheckAuth
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- CSRF
siyuan-note · siyuanSep 26, 2026
CVE-2026-100643
34Monitor
SiYuan before v3.8.4 Stored XSS via Attribute View textarea
HighCVSS 8.5No exploitEPSS 0%
- RCE
- XSS
siyuan-note · siyuanSep 26, 2026
CVE-2026-100644
34Monitor
SiYuan before v3.8.4 SQL Injection via dailyNoteSavePath
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- SQL injection
siyuan-note · siyuanSep 26, 2026
CVE-2026-100645
34Monitor
SiYuan 3.7.0 before 3.8.4 Stored XSS via Gallery Kanban
HighCVSS 8.6No exploitEPSS 0%
- RCE
- XSS
siyuan-note · siyuanSep 26, 2026
CVE-2026-100646
34Monitor
SiYuan before v3.8.4 Authentication Bypass via Missing Origin Header
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- Auth bypass
siyuan-note · siyuanSep 26, 2026
CVE-2026-100650
28Monitor
vLLM before 0.29.0 Resource Exhaustion via Unbounded Media Materialization
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
vllm · vllmSep 26, 2026
CVE-2026-100651
28Monitor
vllm before 0.29.0 Denial of Service via Decoder Prompt Length Bypass
HighCVSS 7.1No exploitEPSS 0%
- Denial of service
vllm · vllmSep 26, 2026
CVE-2026-100652
32Monitor
vLLM 0.22.0 through 0.23.0 Denial of Service via stop_token_ids
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
vllm · vllmSep 26, 2026
CVE-2026-100653
33Monitor
vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagation
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
vllm · vllmSep 26, 2026
CVE-2026-100654
28Monitor
vLLM before 0.29.0 Denial of Service via out-of-range stop_token_ids
HighCVSS 7.1No exploitEPSS 0%
vllm · vllmSep 26, 2026
CVE-2026-100660
34Monitor
Netty before 4.2.18.Final QpackEncoder Unbounded Memory Retention
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
netty · nettySep 26, 2026
CVE-2026-100661
34Monitor
Netty HTTP/3 QPACK Prefixed Integer DoS via Unbounded Accumulation
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
netty · nettySep 26, 2026
CVE-2026-100662
34Monitor
Netty HTTP/3 QPACK encoder-stream unbounded memory exhaustion DoS
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Denial of service
netty · nettySep 26, 2026
CVE-2026-100663
34Monitor
Netty HTTP/1 CONNECT authority-form mistranslated to malformed HTTP/3
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
netty · nettySep 26, 2026
CVE-2026-100664
34Monitor
Netty 4.2.2 through 4.2.17 HTTP/1 Host Header Authority Confusion
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
netty · nettySep 26, 2026
CVE-2026-100665
34Monitor
Netty 4.2.11 through 4.2.17 QUIC Hostname Verification Bypass
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Weak crypto
netty · nettySep 26, 2026
CVE-2026-100668
28Monitor
Grav before 2.0.25 Sandbox Escape via array Filter
HighCVSS 7.1No exploitEPSS 0%
- Info leak
getgrav · gravSep 26, 2026
CVE-2026-100669
34Monitor
Grav before 2.0.25 Sensitive File Disclosure via Case-Variation Bypass
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
getgrav · gravSep 26, 2026
CVE-2026-100670
34Monitor
Grav CMS 2.0.14 through 2.0.24 Privilege Escalation via Blueprint Guard Bypass
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
getgrav · gravSep 26, 2026
CVE-2026-100671
34Monitor
Grav before 2.0.25 Session Cookie Theft via Twig Sandbox
HighCVSS 8.6Proof of conceptEPSS 0%
- Info leak
getgrav · gravSep 26, 2026
CVE-2026-100672
34Monitor
grav-plugin-comments before 1.2.11 Unauthenticated Information Disclosure
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
getgrav · grav-plugin-commentsSep 26, 2026
CVE-2026-100673
33Monitor
Grav Data Manager before 1.4.5 Stored XSS via item-detail view
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
- XSS
- CSRF
getgrav · grav-plugin-datamanagerSep 26, 2026
CVE-2026-100675
28Monitor
stoatchat before 0.15.5 Denial of Service via mass mentions
HighCVSS 7.1No exploitEPSS 0%
stoatchat · stoatchatSep 26, 2026
CVE-2026-100676
35Monitor
stoatchat before 0.15.5 Local Filesystem Read via SVG
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
stoatchat · stoatchatSep 26, 2026
CVE-2026-100678
33Monitor
stoatchat before 0.15.5 MFA Brute Force via Insufficient Rate Limiting
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
stoatchat · stoatchatSep 26, 2026
CVE-2026-100679
28Monitor
stoatchat before 0.15.5 MFA Bypass via Cross-Account Ticket
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
stoatchat · stoatchatSep 26, 2026
CVE-2026-100680
34Monitor
Budibase before 3.45.0 Arbitrary Local File Read via OpenAPI Import
HighCVSS 8.6No exploitEPSS 0%
- Info leak
budibase · serverSep 26, 2026
CVE-2026-100682
34Monitor
Budibase Server before 3.45.0 Arbitrary File Write via ZIP Symlink
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Path traversal
budibase · serverSep 26, 2026
CVE-2026-100683
35Monitor
Budibase before 3.45.0 SQL Injection via column-rename DDL
HighCVSS 8.9No exploitEPSS 0%
- SQL injection
budibase · serverSep 26, 2026
CVE-2026-100684
36Monitor
Budibase Server 3.41.0 before 3.45.0 Authentication Bypass via OIDC
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
budibase · serverSep 26, 2026
CVE-2026-100685
33Monitor
Budibase before 3.45.0 Information Disclosure via Chat Links
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
budibase · serverSep 26, 2026
CVE-2026-100686
34Monitor
Budibase before 3.45.0 Cross-Workspace Privilege Escalation via POST /api/global/groups/:groupId/apps
HighCVSS 8.6No exploitEPSS 0%
budibase · serverSep 26, 2026
CVE-2026-100687
28Monitor
Budibase Server before 3.45.0 Credential Exposure via External Table Broadcast
HighCVSS 7.0No exploitEPSS 0%
- Info leak
budibase · serverSep 26, 2026
CVE-2026-100688
28Monitor
Budibase server before 3.45.0 Cross-Tenant Information Disclosure
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
budibase · serverSep 26, 2026
CVE-2026-100689
34Monitor
GitPython before 3.1.62 Path Traversal via gitmodules path
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
gitpython-developers · gitpythonSep 26, 2026
CVE-2026-100690
34Monitor
Hugo v0.161.0 to v0.165.0 Arbitrary File Read via Symlinks
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
gohugo · hugoSep 26, 2026
CVE-2026-100692
34Monitor
Hugo before v0.166.0 Path Traversal via Symlinked Mount Roots
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
gohugo · hugoSep 26, 2026
CVE-2026-100693
34Monitor
Hugo v0.162.0 before v0.166.0 IP-literal Deny Rule Bypass
HighCVSS 8.6No exploitEPSS 0%
gohugo · hugoSep 26, 2026
CVE-2026-100697
21Monitor
Adminer 6.0.0 Server-Side Request Forgery via ClickHouse driver
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- SSRF
vrana · adminerSep 26, 2026
CVE-2026-100700
34Monitor
nodemailer before 10.0.6 Denial of Service via addressparser
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
nodemailer · nodemailerSep 26, 2026
CVE-2026-100702
32Monitor
Nodemailer before 10.0.2 Stack Exhaustion via Nested Recipient Arrays
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
nodemailer · nodemailerSep 26, 2026
CVE-2026-100703
33Monitor
Kyverno before 1.19.1 Cross-Namespace Data Access via globalcontext.Lib
HighCVSS 8.3No exploitEPSS 0%
- Info leak
kyverno · kyvernoSep 26, 2026
CVE-2026-100704
33Monitor
Kyverno before 1.19.1 ImageValidatingPolicy Exception Bypass
HighCVSS 8.3No exploitEPSS 0%
- Broken access control (IDOR)
kyverno · kyvernoSep 26, 2026
CVE-2026-100707
33Monitor
Kyverno before 1.19.1 Namespace Isolation Bypass via Percent-Encoded Path
HighCVSS 8.3No exploitEPSS 0%
- Path traversal
kyverno · kyvernoSep 26, 2026
CVE-2026-100709
30Monitor
Froxlor before 2.3.11 2FA Bypass via Namespace Confusion
HighCVSS 7.7No exploitEPSS 0%
- Auth bypass
froxlor · froxlorSep 26, 2026
CVE-2026-100711
34Monitor
froxlor before 2.3.12 Authentication Bypass via Session Persistence
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Auth bypass
froxlor · froxlorSep 26, 2026
CVE-2026-100715
34Monitor
Froxlor before 2.3.12 Arbitrary File Deletion via Symlink
HighCVSS 8.5No exploitEPSS 0%
froxlor · froxlorSep 26, 2026
CVE-2026-100717
34Monitor
froxlor before 2.3.12 CRLF Injection via validateUrl userinfo
HighCVSS 8.5No exploitEPSS 0%
froxlor · froxlorSep 26, 2026
CVE-2026-94130
37Monitor
Joomla Extension - joomlaboat.com - Unauthenticated SQL injection in YouTube Gallery extension < 5.7.3
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
joomlaboat · youtube gallerySep 26, 2026
CVE-2026-82901
40Plan
Ultra Addons for Contact Form 7 <= 3.5.50 - Unauthenticated Arbitrary File Upload via Signature Form Field
CriticalCVSS 9.8Proof of conceptEPSS 4%
- pre-auth RCE
- File upload
themefic · ultra addons for contact form 7Sep 26, 2026
CVE-2026-94131
33Monitor
Joomla Extension - acymailing.com - Unauthenticated arbitrary file deletion in AcyMailing Enterprise extension < 11.1.0
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- SQL injection
acymailing · acymailingSep 26, 2026
CVE-2026-94132
38Monitor
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0
CriticalCVSS 9.5Proof of conceptEPSS 0%
- pre-auth RCE
- File upload
acymailing · acymailingSep 26, 2026
CVE-2026-97160
37Monitor
Joomla Extension - lomart.fr - Authenticated, privileged PHP command injection in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CriticalCVSS 9.4Proof of conceptEPSS 1%
- RCE
- Command injection
lomart · upSep 26, 2026
CVE-2026-97161
36Monitor
Joomla Extension - lomart.fr - Various path traversal / file access vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
CriticalCVSS 9.2Proof of conceptEPSS 0%
- Pre-auth
- Path traversal
lomart · upSep 26, 2026
CVE-2026-97162
33Monitor
Joomla Extension - lomart.fr - Various SQL injection vectors in UP plugin extension 5.0.0-5.2.0, 6.0.0-6.0.29
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- SQL injection
lomart · upSep 26, 2026