By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 72 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
30Monitor	CVE-2026-82386No exploit	Apache Roller: XML external entity processing in OPML bookmark importapache software foundation · apache roller · CWE-611 XXE	High7.7	—	0.2%	Sep 28, 2026
22Monitor	CVE-2026-101053Proof of concept	Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access controlthinkware · u3000 · CWE-266 Pre-auth	Medium5.5	—	0.3%	Sep 28, 2026
34Monitor	CVE-2026-86530No exploit	BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally.buffalo inc. · wsr-300hp · CWE-78 RCE Command injection	High8.6	—	0.3%	Sep 28, 2026
28Monitor	CVE-2026-94286No exploit	Out-of-bounds read in libXtst's RECORD reply parserx.org · libxtst · CWE-126 Pre-auth	High7.1	—	0.2%	Sep 28, 2026
34Monitor	CVE-2026-95104No exploit	Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products.buffalo inc. · wsr-300hp · CWE-121 Pre-auth Memory safety	High8.7	—	0.3%	Sep 28, 2026
32Monitor	CVE-2026-82323No exploit	Improper Authorization in Enocta Educational's Enocta Platformenocta educational technologies inc. · enocta platform · CWE-639 Broken access control (IDOR)	High8.1	—	0.2%	Sep 28, 2026
34Monitor	CVE-2026-101037No exploit	FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflowfast · fac1200r · CWE-119 Memory safety	High8.6	—	0.4%	Sep 28, 2026
29Monitor	CVE-2026-90979No exploit	Apache Karaf: LDAP filter injection in JAAS LDAP login modulesapache · karaf · CWE-90 Pre-auth	High7.3	—	0.4%	Sep 28, 2026
38Monitor	CVE-2026-101072No exploit	Netcore NR289-GE CGI ap_ip.cgi system os command injectionnetcore · nr289-ge · CWE-77 pre-auth RCE Command injection	Critical9.3	—	1.9%	Sep 28, 2026
29Monitor	CVE-2026-12267No exploit	Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCEzohocorp · ddi central · CWE-20 RCE Command injection	High7.2	—	3.6%	Sep 28, 2026
36Monitor	CVE-2026-12268No exploit	Authenticated PowerShell Injection leads to RCEzohocorp · ddi central · CWE-20 RCE Command injection	High8.8	—	4.7%	Sep 28, 2026
37Monitor	CVE-2026-12269No exploit	Authenticated File Write to RCE via keepalived in DDI Centralzohocorp · ddi central · CWE-269 RCE	High8.8	—	6.9%	Sep 28, 2026
37Monitor	CVE-2026-19759No exploit	Incorrect Authorization in Application Integration allows Internal Stubby RPC Executiongoogle cloud · application integration · CWE-863 RCE Broken access control (IDOR)	Critical9.4	—	0.2%	Sep 28, 2026
33Monitor	CVE-2026-81375No exploit	Confused Deputy in Application Integration allows Internal File Readgoogle cloud · application integration · CWE-610	High8.3	—	0.3%	Sep 28, 2026
37Monitor	CVE-2026-81867No exploit	Deserialization of Untrusted Data in Application Integration allows Remote Code Executiongoogle cloud · application integration · CWE-502 RCE Deserialization	Critical9.4	—	0.3%	Sep 28, 2026
35Monitor	CVE-2026-91006No exploit	Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)apache · karaf · CWE-78 RCE Command injection	High8.8	—	1.1%	Sep 28, 2026
35Monitor	CVE-2026-12264No exploit	Authenticated Arbitrary File Writezohocorp · ddi central · CWE-434 File upload	High8.8	—	1.6%	Sep 28, 2026
35Monitor	CVE-2026-78424No exploit	OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodessuse · neuvector · CWE-78 RCE Command injection	High8.8	—	0.1%	Sep 28, 2026
32Monitor	CVE-2026-91043No exploit	HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memoryelixir-mint · mint · CWE-770 Pre-auth Denial of service	High8.2	—	0.4%	Sep 28, 2026
32Monitor	CVE-2026-101292No exploit	Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserializationred hat · red hat amq broker 7 · CWE-470 Pre-auth Deserialization	High8.2	—	0.5%	Sep 28, 2026
35Monitor	CVE-2026-12265No exploit	Authenticated Broken Access Controlzohocorp · ddi central · CWE-284 Broken access control (IDOR)	High8.8	—	0.8%	Sep 28, 2026
28Monitor	CVE-2026-52748No exploit	Missing authentication for backup functionality in Kaon AR2140Xkaon · ar2140 · CWE-306 Pre-auth Auth bypass	High7.1	—	0.2%	Sep 28, 2026
30Monitor	CVE-2026-82928No exploit	Undocumented access path in mH-DEVELOPERf&f filipowski · mh-developer · CWE-1242 Pre-auth	High7.7	—	0.1%	Sep 28, 2026
29Monitor	CVE-2026-86330No exploit	Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internalred hat · red hat openshift data foundation 4 · CWE-78 RCE Command injection	High7.2	—	2.1%	Sep 28, 2026
31Monitor	GHSA-456v-xq2p-r4cjNo exploit	code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)CWE-78 RCE Local privilege escalation Command injection	High7.8	—	—	Sep 28, 2026
28Monitor	CVE-2026-15952No exploit	Improper Permission Assignment in Scheduler Serviceabb · protection and control ied manager (pcm600) · CWE-732	High7.1	—	0.0%	Sep 28, 2026
37Monitor	CVE-2026-73640No exploit	Time-based SQL Injection in Dayforce ESS Excelitydayforce · payroll · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.2%	Sep 28, 2026
36Monitor	CVE-2026-73642No exploit	Path Traversal in Dayforce ESS Excelitydayforce · payroll · CWE-22 Pre-auth Path traversal	Critical9.2	—	0.4%	Sep 28, 2026
38Monitor	CVE-2026-85185No exploit	Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as rootcanonical · lxd · CWE-22 Path traversal	Critical9.6	—	0.3%	Sep 28, 2026
39Monitor	CVE-2026-85526No exploit	Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXDcanonical · lxd · CWE-22 Path traversal	Critical9.9	—	0.5%	Sep 28, 2026
35Monitor	CVE-2026-86595Proof of concept	SQLi in Iron Mountain's enVisioniron mountain archiving services inc. · envision · CWE-89 SQL injection	High8.8	—	0.2%	Sep 28, 2026
39Monitor	CVE-2026-87799No exploit	Arbitrary file write on LXD host via symlink in migration streamcanonical · lxd · CWE-59	Critical9.9	—	0.4%	Sep 28, 2026
39Monitor	CVE-2026-90924No exploit	Default Admin Credentials in Innotim Software's Logsign SIEMinnotim software, telecommunications and consultancy trade ltd. co. · logsign siem · CWE-1392 Pre-auth Hard-coded credentials	Critical9.8	—	0.2%	Sep 28, 2026
28Monitor	CVE-2026-90925No exploit	Path Traversal in Innotim Software's Logsign SIEMinnotim software, telecommunications and consultancy trade ltd. co. · logsign siem · CWE-22 Path traversal	High7.1	—	0.2%	Sep 28, 2026
35Monitor	CVE-2026-90926No exploit	Code Injection in Innotim Software's Logsign SIEMinnotim software, telecommunications and consultancy trade ltd. co. · logsign siem · CWE-94 RCE	High8.8	—	0.2%	Sep 28, 2026
30Monitor	CVE-2026-97335No exploit	Incorrect authorization in LXD storage volume API allows reading volumes from other projectscanonical · lxd · CWE-863 Broken access control (IDOR)	High7.7	—	0.2%	Sep 28, 2026
35Monitor	CVE-2026-101074No exploit	Netcore NR289-GE Authentication boa password-check stack-based overflownetcore · nr289-ge · CWE-119 Pre-auth Memory safety	High8.9	—	0.7%	Sep 28, 2026
38Monitor	CVE-2026-101075No exploit	Netcore NR289-GE Location Time location_time.cgi system os command injectionnetcore · nr289-ge · CWE-77 pre-auth RCE Command injection	Critical9.3	—	2.0%	Sep 28, 2026
31Monitor	CVE-2026-4556No exploit	macOS Exam4 Local Privilege Escalation via Command Injectionextegrity · exam4 · CWE-78 RCE Local privilege escalation Command injection	High7.8	—	0.8%	Sep 28, 2026
28Monitor	CVE-2026-80357No exploit	Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access dell · boot optimized server storage (boss) · CWE-1191	High7.0	—	0.1%	Sep 28, 2026
28Monitor	CVE-2026-93538No exploit	Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleetsuse · rancher fleet · CWE-290 Auth bypass	High7.1	—	0.1%	Sep 28, 2026
34Monitor	CVE-2026-96538No exploit	WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalationenterprisedb · warehousepg · CWE-862 Broken access control (IDOR)	High8.7	—	0.3%	Sep 28, 2026
38Monitor	CVE-2026-101076No exploit	Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injectionnetcore · nr289-ge · CWE-77 pre-auth RCE Command injection	Critical9.3	—	2.0%	Sep 28, 2026
37Monitor	CVE-2026-101077No exploit	Netcore NR289-GE boa_temp process_request missing authenticationnetcore · nr289-ge · CWE-287 Pre-auth Auth bypass	Critical9.3	—	0.7%	Sep 28, 2026
38Monitor	CVE-2026-12342No exploit	SailPoint IdentityIQ Improper Form Validation Vulnerabilitysailpoint technologies · identityiq · CWE-20 Pre-auth	Critical9.6	—	0.1%	Sep 28, 2026
38Monitor	CVE-2026-88804Proof of concept	Unauthenticated update of public UI settings leading to stored cross-site scripting in Ranchersuse · rancher · CWE-79 Pre-auth XSS	Critical9.6	—	1.0%	Sep 28, 2026
32Monitor	CVE-2026-88805No exploit	Session Not Revoked Server-Side on Logout in Ranchersuse · rancher · CWE-613 Pre-auth	High8.1	—	0.2%	Sep 28, 2026
35Monitor	CVE-2026-88808No exploit	Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusterssuse · rancher fleet · CWE-250	High8.8	—	0.2%	Sep 28, 2026
34Monitor	CVE-2026-93348No exploit	Unsloth Zoo Code Injection via model_type in config.jsonunslothai · unsloth-zoo · CWE-94 pre-auth RCE	High8.6	—	0.4%	Sep 28, 2026
34Monitor	CVE-2026-101081No exploit	D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflowd-link · di-8400 · CWE-119 Memory safety	High8.5	—	0.5%	Sep 28, 2026
37Monitor	CVE-2026-101891No exploit	WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Accesswatchguard · watchguard ap · CWE-284 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.3	—	0.3%	Sep 28, 2026
36Monitor	CVE-2026-101894Proof of concept	@xhmikosr/decompress: Path traversal via symlink chainxhmikosr · decompress · CWE-22 pre-auth RCE Path traversal	Critical9.1	—	0.8%	Sep 28, 2026
34Monitor	CVE-2026-48100No exploit	Payy: agg_agg trailing message slots are unconstrained and allow forged burn messagespolybase · payy · CWE-349 Pre-auth	High8.7	—	0.1%	Sep 28, 2026
32Monitor	CVE-2026-54160No exploit	Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKENnetworkupstools · nut · CWE-829 Pre-auth	High8.2	—	0.1%	Sep 28, 2026
28Monitor	CVE-2026-55096No exploit	SSRF via DNS-resolution gap in _validate_url_security (file download by URL)leshchenko1979 · fast-mcp-telegram · CWE-184 SSRF	High7.1	—	0.2%	Sep 28, 2026
30Monitor	CVE-2026-85644No exploit	XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array referenceCWE-125 Pre-auth Memory safety Denial of service	High7.5	—	0.3%	Sep 28, 2026
38Monitor	CVE-2026-86102No exploit	WatchGuard AP Command Injection in Internal Management API Allows Command Executionwatchguard · watchguard ap · CWE-78 pre-auth RCE Command injection	Critical9.3	—	2.2%	Sep 28, 2026
28Monitor	CVE-2026-87114No exploit	Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudored hat · pen drive powered by red hat lightspeed · CWE-829 RCE Local privilege escalation	High7.1	—	0.3%	Sep 28, 2026
34Monitor	CVE-2026-87969No exploit	WatchGuard AP Authenticated Command Injection in Diagnostic CLIwatchguard · watchguard ap · CWE-78 RCE Command injection	High8.6	—	1.3%	Sep 28, 2026
30Monitor	CVE-2026-88816No exploit	DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyNameCWE-843 Pre-auth Denial of service	High7.5	—	0.3%	Sep 28, 2026
28Monitor	CVE-2026-101898No exploit	Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controlsaxios · axios · CWE-918 Pre-auth SSRF	High7.0	—	0.5%	Sep 28, 2026
32Monitor	CVE-2026-101901No exploit	Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initializationaxios · axios · CWE-400 Pre-auth Denial of service	High8.2	—	0.5%	Sep 28, 2026
32Monitor	CVE-2026-101903No exploit	Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)axios · axios · CWE-1333 Pre-auth Denial of service	High8.2	—	0.4%	Sep 28, 2026
30Monitor	CVE-2026-101905No exploit	Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnectionaxios · axios · CWE-441	High7.6	—	0.4%	Sep 28, 2026
32Monitor	CVE-2026-101906No exploit	Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Locationaxios · axios · CWE-400 Pre-auth Denial of service	High8.2	—	0.4%	Sep 28, 2026
28Monitor	CVE-2026-101907No exploit	Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRFaxios · axios · CWE-441 Pre-auth SSRF	High7.0	—	0.4%	Sep 28, 2026
33Monitor	CVE-2026-101909No exploit	Axios: Prototype Pollution Gadget in axios toFormData Optionsaxios · axios · CWE-1321 Pre-auth Prototype pollution	High8.3	—	0.4%	Sep 28, 2026
30Monitor	CVE-2026-45562No exploit	FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Modulesangoma · freepbx · CWE-78 RCE Command injection	High7.7	—	0.3%	Sep 28, 2026
36Monitor	CVE-2026-49994No exploit	Bluehood: Missing authentication on Bluehood API routes when web auth is enableddannymcc · bluehood · CWE-306 Pre-auth Auth bypass	Critical9.1	—	0.2%	Sep 28, 2026
34Monitor	CVE-2026-54674No exploit	Authenticated Command Injection in FreePBX UCP Interfacesangoma · freepbx · CWE-78 RCE Command injection	High8.6	—	0.8%	Sep 28, 2026
34Monitor	CVE-2026-54675No exploit	FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Modulesangoma · freepbx · CWE-22 RCE Path traversal	High8.7	—	0.6%	Sep 28, 2026
34Monitor	CVE-2026-54708No exploit	Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Modulesangoma · freepbx · CWE-22 RCE Path traversal	High8.6	—	0.5%	Sep 28, 2026
34Monitor	CVE-2026-54710No exploit	FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)sangoma · freepbx · CWE-20 RCE	High8.6	—	0.5%	Sep 28, 2026
33Monitor	CVE-2026-55157No exploit	Token Optimizer MCP: OS command injection in smart_user via username in get-user-infoooples · token-optimizer-mcp · CWE-78 RCE Local privilege escalation Command injection	High8.4	—	0.8%	Sep 28, 2026
30Monitor	CVE-2026-55160No exploit	Authenticated Server-Side Request Forgery (SSRF) via feed URL in Stringerstringer-rss · stringer · CWE-918 SSRF	High7.6	—	0.2%	Sep 28, 2026
34Monitor	CVE-2026-75600No exploit	FreePBX: Authenticated API generatedocs Host Command Injectionsangoma · freepbx · CWE-78 RCE Command injection	High8.6	—	0.8%	Sep 28, 2026
37Monitor	CVE-2026-100752Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9ordasoft · real estate manager · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 28, 2026
37Monitor	CVE-2026-101108Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8ordasoft · vehicle manager · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 28, 2026
37Monitor	CVE-2026-101110Proof of concept	Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6ordasoft · book library · CWE-89 Pre-auth SQL injection	Critical9.3	—	0.3%	Sep 28, 2026
28Monitor	CVE-2026-102010No exploit	Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_ifred hat · red hat enterprise linux 10 · CWE-825 Pre-auth	High7.0	—	0.4%	Sep 28, 2026
30Monitor	CVE-2026-84894No exploit	In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidatemeta platforms, inc · moxygen · CWE-416 Pre-auth Memory safety	High7.5	—	0.2%	Sep 28, 2026
28Monitor	CVE-2026-97023No exploit	Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/binred hat · red hat enterprise linux 10 · CWE-61 Pre-auth Path traversal	High7.1	—	0.4%	Sep 28, 2026
31Monitor	CVE-2026-102004No exploit	Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem.wind river systems inc · vxworks 7 · CWE-787 Memory safety	High7.8	—	0.1%	Sep 28, 2026
73This week	CVE-2026-86950Weaponized	An out-of-bounds write issue was addressed with improved bounds checking.apple · ipados · CWE-787 pre-auth RCE Memory safety	High8.8	KEV	26.1%	Sep 28, 2026
35Monitor	CVE-2026-87741No exploit	ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameterbrainstorm force · convertplus · CWE-78 RCE Deserialization Command injection	High8.8	—	0.3%	Sep 28, 2026
30Monitor	CVE-2026-93355Proof of concept	LiteLLM Weak JWT Authentication via Email-Based User Lookupberriai · litellm · CWE-1390 Auth bypass	High7.6	—	0.2%	Sep 28, 2026
39Monitor	CVE-2026-96760Proof of concept	Authlib library contains a signature‑verification bypass vulnerabilityauthlib · authlib · CWE-20 Pre-auth Deserialization	Critical9.8	—	0.4%	Sep 28, 2026
34Monitor	CVE-2026-100371No exploit	InvoicePlane: Incomplete Authorization Remediation in Users::form() Enables Primary Administrator Account Takeover via Email Reassignment and Password Recoveryinvoiceplane · invoiceplane · CWE-863 Pre-auth Broken access control (IDOR)	High8.7	—	0.3%	Sep 28, 2026
28Monitor	CVE-2026-100392No exploit	InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization)invoiceplane · invoiceplane · CWE-863 Broken access control (IDOR)	High7.0	—	0.2%	Sep 28, 2026
35Monitor	CVE-2026-101187No exploit	Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injectionziroom · zhome a0101 · CWE-74 RCE Command injection	High8.5	—	2.3%	Sep 28, 2026
29Monitor	CVE-2026-101916No exploit	@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorizedgrpc · grpc-node · CWE-295 Pre-auth Auth bypass Weak crypto	High7.4	—	0.2%	Sep 28, 2026
30Monitor	CVE-2026-101917No exploit	PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)pyjwt project · pyjwt · CWE-770 Pre-auth Denial of service	High7.5	—	0.4%	Sep 28, 2026
30Monitor	CVE-2026-101918No exploit	PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)pyjwt project · pyjwt · CWE-248 Pre-auth Denial of service	High7.5	—	0.4%	Sep 28, 2026
36Monitor	CVE-2026-102266No exploit	PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validationpyjwt project · pyjwt · CWE-347 Pre-auth Weak crypto	Critical9.1	—	0.2%	Sep 28, 2026
36Monitor	CVE-2026-102267No exploit	PyJWT: PyJWKClient follows redirects when fetching JWKSpyjwt project · pyjwt · CWE-200 Pre-auth Info leak	Critical9.1	—	0.1%	Sep 28, 2026
36Monitor	CVE-2026-102268Proof of concept	PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guardpyjwt project · pyjwt · CWE-347 Pre-auth Weak crypto	Critical9.1	—	0.2%	Sep 28, 2026
29Monitor	CVE-2026-102271No exploit	PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guardpyjwt project · pyjwt · CWE-347 Pre-auth Weak crypto	High7.4	—	0.2%	Sep 28, 2026
29Monitor	CVE-2026-102272No exploit	PyJWT is a Python implementation of JSON Web Token standards.pyjwt project · pyjwt · CWE-347 Pre-auth Weak crypto	High7.4	—	0.2%	Sep 28, 2026
29Monitor	CVE-2026-102273No exploit	PyJWT accepts public JWK containers as HMAC secretspyjwt project · pyjwt · CWE-347 Pre-auth Weak crypto	High7.4	—	0.1%	Sep 28, 2026
30Monitor	CVE-2026-102274No exploit	PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Setpyjwt project · pyjwt · CWE-755 Pre-auth Denial of service	High7.5	—	0.5%	Sep 28, 2026

CVE-2026-82386
30Monitor
Apache Roller: XML external entity processing in OPML bookmark import
HighCVSS 7.7No exploitEPSS 0%
- XXE
apache software foundation · apache rollerSep 28, 2026
CVE-2026-101053
22Monitor
Thinkware U3000 TCP Service wpa_supplicant.conf PUT_FILE access control
MediumCVSS 5.5Proof of conceptEPSS 0%
- Pre-auth
thinkware · u3000Sep 28, 2026
CVE-2026-86530
34Monitor
BUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings internally.
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
buffalo inc. · wsr-300hpSep 28, 2026
CVE-2026-94286
28Monitor
Out-of-bounds read in libXtst's RECORD reply parser
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
x.org · libxtstSep 28, 2026
CVE-2026-95104
34Monitor
Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products.
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Memory safety
buffalo inc. · wsr-300hpSep 28, 2026
CVE-2026-82323
32Monitor
Improper Authorization in Enocta Educational's Enocta Platform
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
enocta educational technologies inc. · enocta platformSep 28, 2026
CVE-2026-101037
34Monitor
FAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow
HighCVSS 8.6No exploitEPSS 0%
- Memory safety
fast · fac1200rSep 28, 2026
CVE-2026-90979
29Monitor
Apache Karaf: LDAP filter injection in JAAS LDAP login modules
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
apache · karafSep 28, 2026
CVE-2026-101072
38Monitor
Netcore NR289-GE CGI ap_ip.cgi system os command injection
CriticalCVSS 9.3No exploitEPSS 1%
- pre-auth RCE
- Command injection
netcore · nr289-geSep 28, 2026
CVE-2026-12267
29Monitor
Authenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE
HighCVSS 7.2No exploitEPSS 3%
- RCE
- Command injection
zohocorp · ddi centralSep 28, 2026
CVE-2026-12268
36Monitor
Authenticated PowerShell Injection leads to RCE
HighCVSS 8.8No exploitEPSS 4%
- RCE
- Command injection
zohocorp · ddi centralSep 28, 2026
CVE-2026-12269
37Monitor
Authenticated File Write to RCE via keepalived in DDI Central
HighCVSS 8.8No exploitEPSS 6%
- RCE
zohocorp · ddi centralSep 28, 2026
CVE-2026-19759
37Monitor
Incorrect Authorization in Application Integration allows Internal Stubby RPC Execution
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Broken access control (IDOR)
google cloud · application integrationSep 28, 2026
CVE-2026-81375
33Monitor
Confused Deputy in Application Integration allows Internal File Read
HighCVSS 8.3No exploitEPSS 0%
google cloud · application integrationSep 28, 2026
CVE-2026-81867
37Monitor
Deserialization of Untrusted Data in Application Integration allows Remote Code Execution
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
- Deserialization
google cloud · application integrationSep 28, 2026
CVE-2026-91006
35Monitor
Apache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Command injection
apache · karafSep 28, 2026
CVE-2026-12264
35Monitor
Authenticated Arbitrary File Write
HighCVSS 8.8No exploitEPSS 1%
- File upload
zohocorp · ddi centralSep 28, 2026
CVE-2026-78424
35Monitor
OS Command Injection in Packet-Capture (Sniffer) Filter leading to Remote Code Execution on Kubernetes Nodes
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
suse · neuvectorSep 28, 2026
CVE-2026-91043
32Monitor
HPACK-indexed cookie fields in Mint HTTP/2 responses bypass max_header_list_size and exhaust client memory
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
elixir-mint · mintSep 28, 2026
CVE-2026-101292
32Monitor
Artemis-core-client: unsafe reflection in apache activemq artemis federation message deserialization
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Deserialization
red hat · red hat amq broker 7Sep 28, 2026
CVE-2026-12265
35Monitor
Authenticated Broken Access Control
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
zohocorp · ddi centralSep 28, 2026
CVE-2026-52748
28Monitor
Missing authentication for backup functionality in Kaon AR2140X
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
kaon · ar2140Sep 28, 2026
CVE-2026-82928
30Monitor
Undocumented access path in mH-DEVELOPER
HighCVSS 7.7No exploitEPSS 0%
- Pre-auth
f&f filipowski · mh-developerSep 28, 2026
CVE-2026-86330
29Monitor
Noobaa-core: noobaa-core: os command injection in cluster_internal_api.set_hostname_internal
HighCVSS 7.2No exploitEPSS 2%
- RCE
- Command injection
red hat · red hat openshift data foundation 4Sep 28, 2026
GHSA-456v-xq2p-r4cj
31Monitor
code-ollama: `grep_search` Command Injection via Unescaped `$()` Shell Substitution (CWE-78)
HighCVSS 7.8No exploit
- RCE
- Local privilege escalation
- Command injection
Sep 28, 2026
CVE-2026-15952
28Monitor
Improper Permission Assignment in Scheduler Service
HighCVSS 7.1No exploitEPSS 0%
abb · protection and control ied manager (pcm600)Sep 28, 2026
CVE-2026-73640
37Monitor
Time-based SQL Injection in Dayforce ESS Excelity
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- SQL injection
dayforce · payrollSep 28, 2026
CVE-2026-73642
36Monitor
Path Traversal in Dayforce ESS Excelity
CriticalCVSS 9.2No exploitEPSS 0%
- Pre-auth
- Path traversal
dayforce · payrollSep 28, 2026
CVE-2026-85185
38Monitor
Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root
CriticalCVSS 9.6No exploitEPSS 0%
- Path traversal
canonical · lxdSep 28, 2026
CVE-2026-85526
39Monitor
Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD
CriticalCVSS 9.9No exploitEPSS 0%
- Path traversal
canonical · lxdSep 28, 2026
CVE-2026-86595
35Monitor
SQLi in Iron Mountain's enVision
HighCVSS 8.8Proof of conceptEPSS 0%
- SQL injection
iron mountain archiving services inc. · envisionSep 28, 2026
CVE-2026-87799
39Monitor
Arbitrary file write on LXD host via symlink in migration stream
CriticalCVSS 9.9No exploitEPSS 0%
canonical · lxdSep 28, 2026
CVE-2026-90924
39Monitor
Default Admin Credentials in Innotim Software's Logsign SIEM
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
innotim software, telecommunications and consultancy trade ltd. co. · logsign siemSep 28, 2026
CVE-2026-90925
28Monitor
Path Traversal in Innotim Software's Logsign SIEM
HighCVSS 7.1No exploitEPSS 0%
- Path traversal
innotim software, telecommunications and consultancy trade ltd. co. · logsign siemSep 28, 2026
CVE-2026-90926
35Monitor
Code Injection in Innotim Software's Logsign SIEM
HighCVSS 8.8No exploitEPSS 0%
- RCE
innotim software, telecommunications and consultancy trade ltd. co. · logsign siemSep 28, 2026
CVE-2026-97335
30Monitor
Incorrect authorization in LXD storage volume API allows reading volumes from other projects
HighCVSS 7.7No exploitEPSS 0%
- Broken access control (IDOR)
canonical · lxdSep 28, 2026
CVE-2026-101074
35Monitor
Netcore NR289-GE Authentication boa password-check stack-based overflow
HighCVSS 8.9No exploitEPSS 0%
- Pre-auth
- Memory safety
netcore · nr289-geSep 28, 2026
CVE-2026-101075
38Monitor
Netcore NR289-GE Location Time location_time.cgi system os command injection
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
netcore · nr289-geSep 28, 2026
CVE-2026-4556
31Monitor
macOS Exam4 Local Privilege Escalation via Command Injection
HighCVSS 7.8No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
extegrity · exam4Sep 28, 2026
CVE-2026-80357
28Monitor
Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contains an On-Chip Debug and Test Interface With Improper Access
HighCVSS 7.0No exploitEPSS 0%
dell · boot optimized server storage (boss)Sep 28, 2026
CVE-2026-93538
28Monitor
Cross-tenant BundleDeployment and Secret disclosure via spoofed cluster labels during agent-initiated registration in Fleet
HighCVSS 7.1No exploitEPSS 0%
- Auth bypass
suse · rancher fleetSep 28, 2026
CVE-2026-96538
34Monitor
WarehousePG pg_file_write/pg_file_rename/pg_file_unlink/pg_logdir_ls privilege escalation
HighCVSS 8.7No exploitEPSS 0%
- Broken access control (IDOR)
enterprisedb · warehousepgSep 28, 2026
CVE-2026-101076
38Monitor
Netcore NR289-GE CGI set_ntp_server_ip.cgi system os command injection
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
netcore · nr289-geSep 28, 2026
CVE-2026-101077
37Monitor
Netcore NR289-GE boa_temp process_request missing authentication
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
netcore · nr289-geSep 28, 2026
CVE-2026-12342
38Monitor
SailPoint IdentityIQ Improper Form Validation Vulnerability
CriticalCVSS 9.6No exploitEPSS 0%
- Pre-auth
sailpoint technologies · identityiqSep 28, 2026
CVE-2026-88804
38Monitor
Unauthenticated update of public UI settings leading to stored cross-site scripting in Rancher
CriticalCVSS 9.6Proof of conceptEPSS 1%
- Pre-auth
- XSS
suse · rancherSep 28, 2026
CVE-2026-88805
32Monitor
Session Not Revoked Server-Side on Logout in Rancher
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
suse · rancherSep 28, 2026
CVE-2026-88808
35Monitor
Fleet agent copies downstream resources with cluster-admin privileges, allowing cross-namespace writes on downstream clusters
HighCVSS 8.8No exploitEPSS 0%
suse · rancher fleetSep 28, 2026
CVE-2026-93348
34Monitor
Unsloth Zoo Code Injection via model_type in config.json
HighCVSS 8.6No exploitEPSS 0%
- pre-auth RCE
unslothai · unsloth-zooSep 28, 2026
CVE-2026-101081
34Monitor
D-Link DI-8400 Web Administration Service menu_nat_more.asp menu_nat_more_asp stack-based overflow
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
d-link · di-8400Sep 28, 2026
CVE-2026-101891
37Monitor
WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Broken access control (IDOR)
watchguard · watchguard apSep 28, 2026
CVE-2026-101894
36Monitor
@xhmikosr/decompress: Path traversal via symlink chain
CriticalCVSS 9.1Proof of conceptEPSS 0%
- pre-auth RCE
- Path traversal
xhmikosr · decompressSep 28, 2026
CVE-2026-48100
34Monitor
Payy: agg_agg trailing message slots are unconstrained and allow forged burn messages
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
polybase · payySep 28, 2026
CVE-2026-54160
32Monitor
Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
networkupstools · nutSep 28, 2026
CVE-2026-55096
28Monitor
SSRF via DNS-resolution gap in _validate_url_security (file download by URL)
HighCVSS 7.1No exploitEPSS 0%
- SSRF
leshchenko1979 · fast-mcp-telegramSep 28, 2026
CVE-2026-85644
30Monitor
XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an array reference
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 28, 2026
CVE-2026-86102
38Monitor
WatchGuard AP Command Injection in Internal Management API Allows Command Execution
CriticalCVSS 9.3No exploitEPSS 2%
- pre-auth RCE
- Command injection
watchguard · watchguard apSep 28, 2026
CVE-2026-87114
28Monitor
Kube-compare: container:// reference extraction runs the image entrypoint and silently escalates to sudo
HighCVSS 7.1No exploitEPSS 0%
- RCE
- Local privilege escalation
red hat · pen drive powered by red hat lightspeedSep 28, 2026
CVE-2026-87969
34Monitor
WatchGuard AP Authenticated Command Injection in Diagnostic CLI
HighCVSS 8.6No exploitEPSS 1%
- RCE
- Command injection
watchguard · watchguard apSep 28, 2026
CVE-2026-88816
30Monitor
DBI versions before 1.654 for Perl incorrectly treat numeric values as strings in FetchHashKeyName
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
Sep 28, 2026
CVE-2026-101898
28Monitor
Axios: HTTP/2 adapter bypasses configured DNS lookup and proxy controls
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- SSRF
axios · axiosSep 28, 2026
CVE-2026-101901
32Monitor
Axios: Denial of Service via Unhandled 'error' Event in HTTP/2 ClientHttp2Session Initialization
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
axios · axiosSep 28, 2026
CVE-2026-101903
32Monitor
Axios: ReDoS in fromDataURI data: URL parser freezes the Node event loop (DoS)
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
axios · axiosSep 28, 2026
CVE-2026-101905
30Monitor
Axios: Node HTTP adapter prototype-pollution gadget allows request socket hijack via inherited createConnection
HighCVSS 7.6No exploitEPSS 0%
axios · axiosSep 28, 2026
CVE-2026-101906
32Monitor
Axios: ReDoS (O(N²)) in shouldBypassProxy host normalization, reachable via untrusted redirect Location
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Denial of service
axios · axiosSep 28, 2026
CVE-2026-101907
28Monitor
Axios: maxRedirects: 0 is not enforced by the fetch adapter, allowing redirect-based SSRF
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
- SSRF
axios · axiosSep 28, 2026
CVE-2026-101909
33Monitor
Axios: Prototype Pollution Gadget in axios toFormData Options
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Prototype pollution
axios · axiosSep 28, 2026
CVE-2026-45562
30Monitor
FreePBX: Authenticated Remote Code Execution in FreePBX Music on Hold (MoH) Module
HighCVSS 7.7No exploitEPSS 0%
- RCE
- Command injection
sangoma · freepbxSep 28, 2026
CVE-2026-49994
36Monitor
Bluehood: Missing authentication on Bluehood API routes when web auth is enabled
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
dannymcc · bluehoodSep 28, 2026
CVE-2026-54674
34Monitor
Authenticated Command Injection in FreePBX UCP Interface
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
sangoma · freepbxSep 28, 2026
CVE-2026-54675
34Monitor
FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module
HighCVSS 8.7No exploitEPSS 0%
- RCE
- Path traversal
sangoma · freepbxSep 28, 2026
CVE-2026-54708
34Monitor
Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Path traversal
sangoma · freepbxSep 28, 2026
CVE-2026-54710
34Monitor
FreePBX: Authenticated Superfecta Arbitrary PHP Code Execution (RCE via Unsafe File Inclusion)
HighCVSS 8.6No exploitEPSS 0%
- RCE
sangoma · freepbxSep 28, 2026
CVE-2026-55157
33Monitor
Token Optimizer MCP: OS command injection in smart_user via username in get-user-info
HighCVSS 8.4No exploitEPSS 0%
- RCE
- Local privilege escalation
- Command injection
ooples · token-optimizer-mcpSep 28, 2026
CVE-2026-55160
30Monitor
Authenticated Server-Side Request Forgery (SSRF) via feed URL in Stringer
HighCVSS 7.6No exploitEPSS 0%
- SSRF
stringer-rss · stringerSep 28, 2026
CVE-2026-75600
34Monitor
FreePBX: Authenticated API generatedocs Host Command Injection
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Command injection
sangoma · freepbxSep 28, 2026
CVE-2026-100752
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Real Estate Manager (Free) < 6.7.9
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · real estate managerSep 28, 2026
CVE-2026-101108
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Vehicle Manager (Free) < 6.5.8
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · vehicle managerSep 28, 2026
CVE-2026-101110
37Monitor
Joomla Extension - ordasoft.com - Unauthenticated SQL Injection in Book Library (Free) < 6.4.6
CriticalCVSS 9.3Proof of conceptEPSS 0%
- Pre-auth
- SQL injection
ordasoft · book librarySep 28, 2026
CVE-2026-102010
28Monitor
Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if
HighCVSS 7.0No exploitEPSS 0%
- Pre-auth
red hat · red hat enterprise linux 10Sep 28, 2026
CVE-2026-84894
30Monitor
In moxygen before commit 004123dd24c3, MoQSession::dataStreamReadLoop keeps using a stream read handle after reading a FIN, which invalidate
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
meta platforms, inc · moxygenSep 28, 2026
CVE-2026-97023
28Monitor
Flatpak: flatpak: arbitrary file deletion in root context via path traversal in deploy directory export/bin
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Path traversal
red hat · red hat enterprise linux 10Sep 28, 2026
CVE-2026-102004
31Monitor
Wind River VxWorks 7 prior to 26.09, specific system call arguments can result in memory corruption within the memory management subsystem.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
wind river systems inc · vxworks 7Sep 28, 2026
CVE-2026-86950
73This week
An out-of-bounds write issue was addressed with improved bounds checking.
HighCVSS 8.8KEVWeaponizedEPSS 26%
- pre-auth RCE
- Memory safety
apple · ipadosSep 28, 2026
CVE-2026-87741
35Monitor
ConvertPlus <= 3.6.3 - Authenticated (Subscriber+) PHP Object Injection via 'style' Parameter
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Deserialization
- Command injection
brainstorm force · convertplusSep 28, 2026
CVE-2026-93355
30Monitor
LiteLLM Weak JWT Authentication via Email-Based User Lookup
HighCVSS 7.6Proof of conceptEPSS 0%
- Auth bypass
berriai · litellmSep 28, 2026
CVE-2026-96760
39Monitor
Authlib library contains a signature‑verification bypass vulnerability
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Deserialization
authlib · authlibSep 28, 2026
CVE-2026-100371
34Monitor
InvoicePlane: Incomplete Authorization Remediation in Users::form() Enables Primary Administrator Account Takeover via Email Reassignment and Password Recovery
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
invoiceplane · invoiceplaneSep 28, 2026
CVE-2026-100392
28Monitor
InvoicePlane: Primary Administrator Privilege Downgrade via `Users::form()` (Missing Object-Level Authorization)
HighCVSS 7.0No exploitEPSS 0%
- Broken access control (IDOR)
invoiceplane · invoiceplaneSep 28, 2026
CVE-2026-101187
35Monitor
Ziroom ZHOME A0101 USB Device Management API zrUsb.lua pop_usb_device command injection
HighCVSS 8.5No exploitEPSS 2%
- RCE
- Command injection
ziroom · zhome a0101Sep 28, 2026
CVE-2026-101916
29Monitor
@grpc/grpc-js: In certain configurations, getAuthContext can return unauthorized certificates as though they were authorized
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Weak crypto
grpc · grpc-nodeSep 28, 2026
CVE-2026-101917
30Monitor
PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pyjwt project · pyjwtSep 28, 2026
CVE-2026-101918
30Monitor
PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102266
36Monitor
PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Weak crypto
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102267
36Monitor
PyJWT: PyJWKClient follows redirects when fetching JWKS
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Info leak
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102268
36Monitor
PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
CriticalCVSS 9.1Proof of conceptEPSS 0%
- Pre-auth
- Weak crypto
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102271
29Monitor
PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102272
29Monitor
PyJWT is a Python implementation of JSON Web Token standards.
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102273
29Monitor
PyJWT accepts public JWK containers as HMAC secrets
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
pyjwt project · pyjwtSep 28, 2026
CVE-2026-102274
30Monitor
PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
pyjwt project · pyjwtSep 28, 2026