Skip to content
Noroxi
By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 78 of 80

  • CVE-2026-96817
    32Monitor

    WordPress MakeCommerce for WooCommerce plugin <= 4.1.0 - Broken Access Control vulnerability

    HighCVSS 8.2No exploitEPSS 0%

    makecommerce.net · makecommerce for woocommerceSep 30, 2026

  • CVE-2026-96818
    30Monitor

    WordPress WP Express Checkout (Accept PayPal Payments) plugin <= 2.4.9 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    mra13 / team tips and tricks hq · wp express checkout (accept paypal payments)Sep 30, 2026

  • CVE-2026-96819
    28Monitor

    WordPress oik plugin <= 4.15.4 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    bobbingwide · oikSep 30, 2026

  • CVE-2026-96820
    28Monitor

    WordPress Awesome Support plugin <= 6.3.9 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    awesomesupport · awesome supportSep 30, 2026

  • CVE-2026-96822
    37Monitor

    WordPress Books Gallery plugin <= 4.8.3 - SQL Injection vulnerability

    CriticalCVSS 9.3No exploitEPSS 0%

    hossni mubarak · books gallerySep 30, 2026

  • CVE-2026-96823
    30Monitor

    WordPress Customer Reviews for WooCommerce plugin <= 5.120.0 - Arbitrary Content Deletion vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    cusrev · customer reviews for woocommerceSep 30, 2026

  • CVE-2026-96827
    30Monitor

    WordPress Admin Notices Manager plugin <= 1.6.0 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    melapress · admin notices managerSep 30, 2026

  • CVE-2026-96828
    30Monitor

    WordPress Category Discount Woocommerce plugin <= 5.18 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    vidish · category discount woocommerceSep 30, 2026

  • CVE-2026-96830
    28Monitor

    WordPress GiveWP plugin <= 4.16.9 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    nexcess · givewpSep 30, 2026

  • CVE-2026-96831
    35Monitor

    WordPress Themify Builder plugin <= 7.8.1 - PHP Object Injection vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    themifyme · themify builderSep 30, 2026

  • CVE-2026-96832
    28Monitor

    WordPress Content Egg plugin <= 6.3.1 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    keywordrush · content eggSep 30, 2026

  • CVE-2026-96833
    28Monitor

    WordPress Ultimate Addons for Contact Form 7 plugin <= 3.5.51 - PHP Object Injection vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    themefic · ultimate addons for contact form 7Sep 30, 2026

  • CVE-2026-96836
    28Monitor

    WordPress Parsi Date plugin <= 6.3 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    morteza geransayeh · parsi dateSep 30, 2026

  • CVE-2026-96837
    35Monitor

    WordPress CartFlows plugin <= 3.2.0 - Remote Code Execution (RCE) vulnerability

    HighCVSS 8.8No exploitEPSS 0%

    brainstorm force · cartflowsSep 30, 2026

  • CVE-2026-96838
    35Monitor

    WordPress Blacklist Manager &#8211; WooCommerce Anti-Fraud, Blacklist &amp; Checkout Verification plugin <= 2.3.1 - Cross Site Request Forgery (CSRF) vulnerabil

    HighCVSS 8.8Proof of conceptEPSS 0%

    yoohw studio · blacklist manager &#8211; woocommerce anti-fraud, blacklist &amp; checkout verificationSep 30, 2026

  • CVE-2026-97065
    28Monitor

    WordPress Happyforms plugin <= 1.26.15 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    happyforms · happyformsSep 30, 2026

  • CVE-2026-97077
    28Monitor

    WordPress Ad Inserter plugin <= 2.8.18 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    spacetime · ad inserterSep 30, 2026

  • CVE-2026-97197
    30Monitor

    WordPress WordPress Backup & Migration plugin <= 1.6.0 - Broken Access Control vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    webtoffee · wordpress backup & migrationSep 30, 2026

  • CVE-2026-97235
    28Monitor

    WordPress ThemeREX Addons plugin < 2.45.0 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    themerex · themerex addonsSep 30, 2026

  • CVE-2026-97237
    28Monitor

    WordPress JetEngine plugin <= 3.8.14.3 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    crocoblock. jetimpex inc. · jetengineSep 30, 2026

  • CVE-2026-97240
    30Monitor

    WordPress StifLi Backup Tools plugin <= 2.2.7 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    esteban · stifli backup toolsSep 30, 2026

  • CVE-2026-97241
    30Monitor

    WordPress BackupEase plugin <= 2.2.2 - Sensitive Data Exposure vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    precisionwp · backupeaseSep 30, 2026

  • CVE-2026-97244
    30Monitor

    WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability

    HighCVSS 7.5No exploitEPSS 0%

    wpfunnels · creator lmsSep 30, 2026

  • CVE-2026-97245
    28Monitor

    WordPress SureCart plugin <= 4.7.2 - Privilege Escalation vulnerability

    HighCVSS 7.2No exploitEPSS 0%

    surecart · surecartSep 30, 2026

  • CVE-2026-97248
    39Monitor

    WordPress Booking Activities plugin <= 1.18.7.1 - PHP Object Injection vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    booking activities team · booking activitiesSep 30, 2026

  • CVE-2026-97250
    28Monitor

    WordPress Geo Mashup plugin <= 1.13.21 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    dylan kuhn · geo mashupSep 30, 2026

  • CVE-2026-97253
    28Monitor

    WordPress LayerSlider plugin <= 8.4.0 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    kreatura · layersliderSep 30, 2026

  • CVE-2026-97271
    28Monitor

    WordPress WPFunnels plugin <= 3.13.1 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    wpfunnels · wpfunnelsSep 30, 2026

  • CVE-2026-97272
    28Monitor

    WordPress Premmerce Permalink Manager for WooCommerce plugin <= 2.3.13 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    premmerce · premmerce permalink manager for woocommerceSep 30, 2026

  • CVE-2026-97274
    39Monitor

    WordPress OAuth Single Sign On – SSO (OAuth Client) plugin <= 7.1.2 - Bypass vulnerability vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    miniorange · oauth single sign on – sso (oauth client)Sep 30, 2026

  • CVE-2026-97286
    26Monitor

    WordPress Strong Testimonials plugin <= 3.3.11 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 6.5Proof of conceptEPSS 0%

    wp chill · strong testimonialsSep 30, 2026

  • CVE-2026-97287
    34Monitor

    WordPress Event Tickets plugin <= 5.29.5 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    nexcess · event ticketsSep 30, 2026

  • CVE-2026-97289
    28Monitor

    WordPress Quiz And Survey Master plugin <= 11.2.6 - Cross Site Scripting (XSS) vulnerability

    HighCVSS 7.1No exploitEPSS 0%

    expresstech systems · quiz and survey masterSep 30, 2026

  • CVE-2026-97293
    34Monitor

    WordPress Media LIbrary Assistant plugin <= 3.41 - SQL Injection vulnerability

    HighCVSS 8.5No exploitEPSS 0%

    david lingren · media library assistantSep 30, 2026

  • CVE-2026-82307
    39Monitor

    Multiple Vulnerabilities in Dolusoft Software's SOPLOG

    CriticalCVSS 9.8No exploitEPSS 0%

    dolusoft software technologies · soplogSep 30, 2026

  • CVE-2026-93903
    37Monitor

    LiteSpeed Web Server (LSWS) before 6.3.7 build 1 mishandles internal redirect URL validation in a certain "corner case" of %252e%252e double

    CriticalCVSS 9.4Proof of conceptEPSS 0%

    litespeedtech · litespeed web serverSep 30, 2026

  • GHSA-9c5c-9qcx-q35q
    29Monitor

    @nestjs/platform-fastify: Path-scoped middleware bypass via absolute-form request targets

    HighCVSS 7.4No exploit

    Sep 30, 2026

  • CVE-2026-101295
    29Monitor

    Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction

    HighCVSS 7.3No exploitEPSS 0%

    red hat · assisted installer for red hat openshift container platform 2Sep 30, 2026

  • CVE-2026-102717
    30Monitor

    MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash

    HighCVSS 7.5No exploitEPSS 0%

    eclipse foundation · netx duoSep 30, 2026

  • CVE-2026-102984
    32Monitor

    Astro: Malformed port in the Host header can crash the Node adapter

    HighCVSS 8.2No exploitEPSS 0%

    withastro · astroSep 30, 2026

  • CVE-2026-103226
    8Monitor

    Artifex Ghostscript Pdfwrite gdevpsfx.c type1_callsubr stack-based overflow

    LowCVSS 2.1No exploitEPSS 0%

    artifex · ghostscriptSep 30, 2026

  • CVE-2026-103270
    34Monitor

    LightLLM through 1.2.0 Missing Authentication on RL Control Routes

    HighCVSS 8.7No exploitEPSS 0%

    modeltc · lightllmSep 30, 2026

  • CVE-2026-103395
    37Monitor

    LightLLM through 1.2.0 Unauthenticated Remote Code Execution via Visual-Only RPyC Service

    CriticalCVSS 9.3No exploitEPSS 0%

    modeltc · lightllmSep 30, 2026

  • CVE-2026-103398
    34Monitor

    OpenSave through 2.4.0 Arbitrary File Read and Write via Peer-Controlled Save Path

    HighCVSS 8.6No exploitEPSS 0%

    liquid-co · opensaveSep 30, 2026

  • CVE-2026-18782
    39Monitor

    SQL Injection in Trex Digital Manufacturing's Trex MES

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    trex digital smart manufacturing systems inc. · trex mesSep 30, 2026

  • CVE-2026-18783
    35Monitor

    Missing Server-Side Authentication on REST API Endpoint in Trex Digital Manufacturing's Trex MES

    HighCVSS 8.8Proof of conceptEPSS 0%

    trex digital smart manufacturing systems inc. · trex mesSep 30, 2026

  • CVE-2026-47097
    34Monitor

    AJA HELO Plus < 2.1.7 Hardcoded AES Passphrase for Diagnostics Export Bundle

    HighCVSS 8.7No exploitEPSS 0%

    aja video systems · helo plusSep 30, 2026

  • CVE-2026-62097
    30Monitor

    WordPress Business Directory plugin <= 6.4.27 - SQL Injection vulnerability

    HighCVSS 7.6No exploitEPSS 0%

    wptasty · business directorySep 30, 2026

  • CVE-2026-76570
    40Plan

    Joomla Extension - joomcode.com - Unauthenticated SQL injection in read and write queries in JCTables < 1.21.1

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    joomcode · jc tablesSep 30, 2026

  • CVE-2026-94545
    21Monitor

    Satori-generated SVG has improper escaping

    MediumCVSS 5.3Proof of conceptEPSS 1%

    vercel · satoriSep 30, 2026

  • CVE-2026-100253
    35Monitor

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 sandbox escape leading to code execution was possible via the versioned settings

    HighCVSS 8.8No exploitEPSS 0%

    jetbrains · teamcitySep 30, 2026

  • CVE-2026-100254
    35Monitor

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 authenticated users could execute commands on Windows servers via CRLF injection

    HighCVSS 8.8No exploitEPSS 0%

    jetbrains · teamcitySep 30, 2026

  • CVE-2026-100255
    39Monitor

    In JetBrains TeamCity before 2026.2, 2026.1.4, 2025.11.8 administrator account takeover was possible via password reset

    CriticalCVSS 9.8No exploitEPSS 0%

    jetbrains · teamcitySep 30, 2026

  • CVE-2026-100256
    31Monitor

    In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script constraints was possible in untrusted projects

    HighCVSS 7.8No exploitEPSS 0%

    jetbrains · intellij ideaSep 30, 2026

  • CVE-2026-100262
    28Monitor

    In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users with read-only project access to overwrite project notificatio

    HighCVSS 7.1No exploitEPSS 0%

    jetbrains · youtrackSep 30, 2026

  • CVE-2026-100273
    39Monitor

    In JetBrains YouTrack before 2026.2.19197 authorisation bypass in the scripts debugger allowed arbitrary code execution

    CriticalCVSS 9.8No exploitEPSS 0%

    jetbrains · youtrackSep 30, 2026

  • CVE-2026-100276
    30Monitor

    In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow action's visibility restriction and run the action

    HighCVSS 7.5No exploitEPSS 0%

    jetbrains · youtrackSep 30, 2026

  • CVE-2026-100277
    39Monitor

    In JetBrains YouTrack before 2026.2.19197 account takeover was possible by replaying a notification signature

    CriticalCVSS 9.8No exploitEPSS 0%

    jetbrains · youtrackSep 30, 2026

  • CVE-2026-102427
    40Plan

    Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16

    CriticalCVSS 10.0Proof of conceptEPSS 0%

    ordasoft · joomla cckSep 30, 2026

  • CVE-2026-103432
    32Monitor

    apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar() in src/cgi/upsfetch.c (used by upsstats.cgi, multimon.cgi,

    HighCVSS 8.1No exploitEPSS 0%

    apcupsd · apcupsdSep 30, 2026

  • CVE-2026-103441
    28Monitor

    Unauthenticated arbitrary file deletion through Wikibase serialized entity parsing

    HighCVSS 7.2Proof of conceptEPSS 0%

    the wikimedia foundation · mediawiki wikibase extensionSep 30, 2026

  • CVE-2026-103442
    28Monitor

    MergeAccount PHP object injection via session-key substitution

    HighCVSS 7.2Proof of conceptEPSS 0%

    the wikimedia foundation · mediawiki centralauth extensionSep 30, 2026

  • CVE-2026-103470
    37Monitor

    In Internet2 Grouper before 7.5.1 (in some configurations), a user who is allowed to create or edit rules in the User Interface can escalate

    CriticalCVSS 9.3No exploitEPSS 0%

    internet2 · grouperSep 30, 2026

  • CVE-2026-47489
    31Monitor

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be pre

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47491
    31Monitor

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47493
    31Monitor

    NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU kernel driver where a guest may access privileged host GPU re

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47494
    31Monitor

    NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might be able to cause a format string issue.

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47495
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-b

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47496
    29Monitor

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin) where a guest VM user may cause an out

    HighCVSS 7.3No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47497
    31Monitor

    NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor (GSP) tracing component where a guest VM user may cause impr

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47498
    31Monitor

    NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) plugin where a guest VM user may cause an out-of-bounds write

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47499
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer where a guest could cause an out-of-

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47500
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where improper cleanup of reference counts

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47501
    31Monitor

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where a user could cause an out-of-bounds write by sup

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47502
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability in the kernel mode layer, where a guest user could cause an i

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47503
    31Monitor

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU Manager (vGPU plugin), where a guest VM user may cause an ou

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47504
    31Monitor

    NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater where an outdated embedded cryptographic library is susceptible

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47505
    31Monitor

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an attacker could cause a use-after-free.

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47507
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47508
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an incorrect con

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47510
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an integer overf

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47511
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47512
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47513
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause an out-of-bounds

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47514
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer, where a user could cause exposure of kern

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47516
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where an unprivileged user could cause a use-after-free.

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47519
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · guest driverSep 30, 2026

  • CVE-2026-47520
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · guest driverSep 30, 2026

  • CVE-2026-47521
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47523
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47528
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the firmware where an attacker could cause an access of an unini

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47530
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47535
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the firmware where an attacker could cause an out-of-bounds read.

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47536
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds r

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47540
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an integer u

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47541
    31Monitor

    NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds w

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · virtual gpu managerSep 30, 2026

  • CVE-2026-47545
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47548
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bo

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47550
    31Monitor

    NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer where an unprivileged local user can supply an untru

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026

  • CVE-2026-47551
    31Monitor

    NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the kernel mode layer where a user could cause a use-after-free.

    HighCVSS 7.8No exploitEPSS 0%

    nvidia · geforceSep 30, 2026