By publication date

Exploited and new serious CVEs: September 2026

7,965 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 9 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
23Monitor	CVE-2026-18149No exploit	undici vulnerable to Denial of Service via orphaned RetryHandler response bodynodejs · undici · CWE-772 Pre-auth Denial of service	Medium5.9	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-19534No exploit	undici vulnerable to Denial of Service via unrequested WebSocket subprotocolnodejs · undici · CWE-248 Pre-auth Denial of service	High7.5	—	0.3%	Sep 4, 2026
34Monitor	CVE-2026-50553No exploit	Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)enchant97 · note-mark · CWE-20 Path traversal	High8.6	—	0.4%	Sep 4, 2026
34Monitor	CVE-2026-53758No exploit	Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitizedemlog · emlog · CWE-79 Pre-auth XSS	High8.7	—	0.4%	Sep 4, 2026
32Monitor	CVE-2026-53761No exploit	Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/apifrappe · crm · CWE-287 Pre-auth Auth bypass	High8.2	—	0.5%	Sep 4, 2026
33Monitor	CVE-2026-57159No exploit	PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenanceteluu · pjsip · CWE-129 Pre-auth	High8.4	—	0.5%	Sep 4, 2026
35Monitor	CVE-2026-57161No exploit	PJSIP: Stack overflow handling Service-Route headers in a registration responseteluu · pjsip · CWE-121 Pre-auth Memory safety	High8.8	—	0.4%	Sep 4, 2026
35Monitor	CVE-2026-57162No exploit	PJSIP: Stack overflow parsing SDP a=crypto attributesteluu · pjsip · CWE-121 Pre-auth Memory safety	High8.8	—	0.6%	Sep 4, 2026
35Monitor	CVE-2026-57163No exploit	PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backendteluu · pjsip · CWE-121 Pre-auth Memory safety	High8.8	—	0.4%	Sep 4, 2026
33Monitor	CVE-2026-57164No exploit	PJSIP: Heap overflow in the HTTP clientteluu · pjsip · CWE-122 Pre-auth Memory safety	High8.3	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-61686No exploit	SolidInvoice: PHP unserialize() called on client-controlled data in DataGrid LiveComponent context propsolidinvoice · solidinvoice · CWE-502 Deserialization	High7.5	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-85654No exploit	Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-serveramazon · awslabs.dynamodb-mcp-server · CWE-1336 RCE SSTI	High7.1	—	0.2%	Sep 4, 2026
34Monitor	CVE-2026-85656No exploit	OS command injection in Amazon log4j-cve-2021-44228-hotpatchamazon · log4j-cve-2021-44228-hotpatch · CWE-78 RCE Local privilege escalation Command injection	High8.5	—	1.0%	Sep 4, 2026
36Monitor	CVE-2026-9317No exploit	Nango < 0.71.6 Missing Authentication RCE via runner tRPC servernangohq · nango · CWE-306 pre-auth RCE Auth bypass	Critical9.2	—	1.2%	Sep 4, 2026
32Monitor	CVE-2026-71620No exploit	File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php fileCWE-434 RCE File upload	High8.1	—	0.6%	Sep 4, 2026
36Monitor	CVE-2026-78327No exploit	An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Securitsonicwall · network security manager (nsm) · CWE-78 RCE Command injection	Critical9.1	—	1.5%	Sep 4, 2026
36Monitor	CVE-2026-78328No exploit	A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privilegedsonicwall · network security manager (nsm) · CWE-862 Broken access control (IDOR)	Critical9.1	—	0.4%	Sep 4, 2026
32Monitor	CVE-2026-78839Proof of concept	An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar filCWE-434 pre-auth RCE File upload	High8.1	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-80112No exploit	PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.syspassmark software · performancetest · CWE-732 Local privilege escalation	High8.5	—	0.1%	Sep 4, 2026
34Monitor	CVE-2026-80114No exploit	PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.syspassmark software · performancetest · CWE-321 Auth bypass Hard-coded credentials	High8.5	—	0.1%	Sep 4, 2026
34Monitor	CVE-2026-80116No exploit	PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTLpassmark software · performancetest · CWE-782 Local privilege escalation	High8.5	—	0.1%	Sep 4, 2026
33Monitor	CVE-2026-80118No exploit	PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTLpassmark software · performancetest · CWE-73 Path traversal Local privilege escalation	High8.4	—	0.1%	Sep 4, 2026
34Monitor	CVE-2026-80119No exploit	PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTLpassmark software · performancetest · CWE-73 Path traversal	High8.5	—	0.1%	Sep 4, 2026
36Monitor	CVE-2026-81939No exploit	A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an sonicwall · network security manager (nsm) · CWE-22 Path traversal	Critical9.1	—	0.6%	Sep 4, 2026
21Monitor	CVE-2022-35497Proof of concept	In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via reCWE-79 XSS	Medium5.4	—	0.2%	Sep 4, 2026
28Monitor	CVE-2022-35499Proof of concept	In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary pCWE-79 Pre-auth XSS	High7.1	—	0.3%	Sep 4, 2026
28Monitor	CVE-2026-53603No exploit	nebula-mesh: Operator session tokens stored in plaintext in the databaseforgekeep · nebula-mesh · CWE-312	High7.1	—	0.3%	Sep 4, 2026
28Monitor	CVE-2026-53604No exploit	nebula-mesh: CA private key not zeroized on web mobile-bundle error pathsforgekeep · nebula-mesh · CWE-212	High7.1	—	0.1%	Sep 4, 2026
33Monitor	CVE-2026-53932No exploit	wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special Elstefanzweifel · laravel-backup-restore · CWE-77 RCE Command injection	High8.0	—	1.6%	Sep 4, 2026
30Monitor	CVE-2026-19304No exploit	Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple componentslangflow · langflow · CWE-918 SSRF	High7.7	—	0.4%	Sep 4, 2026
32Monitor	CVE-2026-61699No exploit	nebula-mesh: Certificate revocation is never enforced at the meshforgekeep · nebula-mesh · CWE-299	High8.1	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-63464No exploit	Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`forgekeep · nebula-mesh · CWE-862 SSRF Broken access control (IDOR)	High7.7	—	0.4%	Sep 4, 2026
29Monitor	CVE-2026-71622No exploit	SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php componCWE-89 Pre-auth SQL injection	High7.4	—	0.4%	Sep 4, 2026
39Monitor	CVE-2026-71624No exploit	An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controlleCWE-94 pre-auth RCE	Critical9.8	—	0.6%	Sep 4, 2026
39Monitor	CVE-2026-71625No exploit	An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php componentCWE-269 Pre-auth	Critical9.8	—	0.5%	Sep 4, 2026
30Monitor	CVE-2026-71626No exploit	An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookReCWE-200 Pre-auth Info leak	High7.5	—	0.3%	Sep 4, 2026
29Monitor	CVE-2026-79389No exploit	Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing.CWE-347 Pre-auth Weak crypto	High7.4	—	0.2%	Sep 4, 2026
30Monitor	CVE-2026-79390No exploit	Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1CWE-284 Pre-auth Broken access control (IDOR)	High7.5	—	0.4%	Sep 4, 2026
39Monitor	CVE-2026-79391No exploit	No authentication exists in the MQTT service of Trueview 6.0.23.4.CWE-306 Pre-auth Auth bypass	Critical9.8	—	0.7%	Sep 4, 2026
34Monitor	CVE-2026-85786No exploit	Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-javaamazon · ion-java · CWE-409 Pre-auth	High8.7	—	0.5%	Sep 4, 2026
0Monitor	CVE-2026-80775Proof of concept	futex: Fix race on the initial mm->futex.phash.ref allocationlinux · linux	—	—	0.1%	Sep 4, 2026
0Monitor	CVE-2026-80844Proof of concept	xfrm: ah6: validate routing header segments_leftlinux · linux	—	—	0.4%	Sep 4, 2026
39Monitor	CVE-2026-50894No exploit	easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows authCWE-434 pre-auth RCE File upload	Critical9.8	—	0.8%	Sep 4, 2026
30Monitor	CVE-2026-75438No exploit	Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() functionCWE-120 Pre-auth Memory safety Denial of service	High7.5	—	0.8%	Sep 4, 2026
30Monitor	CVE-2026-75439No exploit	An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF componentCWE-476 Pre-auth Memory safety Denial of service	High7.5	—	0.7%	Sep 4, 2026
28Monitor	CVE-2026-77847No exploit	Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentialstycon systems · tpdin-monitor-web3 · CWE-798 Pre-auth Hard-coded credentials	High7.1	—	0.3%	Sep 4, 2026
35Monitor	CVE-2026-79423No exploit	An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbCWE-78 RCE Command injection	High8.8	—	0.8%	Sep 4, 2026
28Monitor	CVE-2026-79426No exploit	An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to dCWE-73 Path traversal	High7.2	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-82712No exploit	Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgerytycon systems · tpdin-monitor-web3 · CWE-352 Pre-auth CSRF	High8.6	—	0.2%	Sep 4, 2026
28Monitor	CVE-2026-85787No exploit	An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-serveramazon · postgres-mcp-server · CWE-184 Pre-auth	High7.1	—	0.3%	Sep 4, 2026
34Monitor	CVE-2026-46636No exploit	Twig: Sandbox method allowlist bypass via `Markup` subclasstwigphp · twig · CWE-1336 pre-auth RCE SSTI	High8.7	—	0.5%	Sep 4, 2026
37Monitor	CVE-2026-75925No exploit	IXON VPN Client CRLF Injectionixon · ixon vpn client · CWE-93 Pre-auth	Critical9.4	—	0.6%	Sep 4, 2026
34Monitor	CVE-2026-77393No exploit	Inductive Automation Ignition Incorrect Default Permissionsinductive automation · ignition · CWE-276	High8.7	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-82684No exploit	Tycon Systems TPDIN-Monitor-WEB3 Missing Authorizationtycon systems · tpdin-monitor-web3 · CWE-862 Broken access control (IDOR)	High8.6	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-86090No exploit	ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlersntop · ntopng · CWE-862 Broken access control (IDOR)	High7.1	—	0.4%	Sep 4, 2026
28Monitor	CVE-2026-86091No exploit	ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handlerntop · ntopng · CWE-862 Broken access control (IDOR)	High7.1	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-82538No exploit	ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameterilias-elearning e.v. · ilias · CWE-89 SQL injection	High8.7	—	0.6%	Sep 4, 2026
26Monitor	CVE-2026-85769Proof of concept	Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksizered hat · red hat enterprise linux 10 · CWE-125 Pre-auth Memory safety Denial of service	Medium6.5	—	0.4%	Sep 4, 2026
35Monitor	CVE-2026-48019Proof of concept	CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relaylaravel · framework · CWE-93 Pre-auth	High8.9	—	0.5%	Sep 4, 2026
34Monitor	CVE-2026-86095No exploit	Unidata netcdf-c through 4.10.1 Out-of-bounds Write via Oversized HDF5 Attribute Nameunidata · netcdf-c · CWE-787 Memory safety	High8.5	—	0.1%	Sep 4, 2026
28Monitor	CVE-2026-86097No exploit	PX4 Autopilot through 1.17.0 Null Pointer Dereference via param selectpx4 · px4-autopilot · CWE-476 Pre-auth Memory safety	High7.1	—	0.3%	Sep 4, 2026
33Monitor	CVE-2026-86098No exploit	ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escapentop · ndpi · CWE-787 Pre-auth Memory safety	High8.3	—	0.5%	Sep 4, 2026
28Monitor	CVE-2026-52762No exploit	YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templatesyeswiki · yeswiki · CWE-1336 RCE SSTI	High7.1	—	0.7%	Sep 4, 2026
26Monitor	CVE-2026-52763No exploit	YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB readyeswiki · yeswiki · CWE-89 SQL injection	Medium6.5	—	0.3%	Sep 4, 2026
36Monitor	CVE-2026-52766No exploit	YesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` actionyeswiki · yeswiki · CWE-276 Pre-auth	Critical9.1	—	0.5%	Sep 4, 2026
32Monitor	CVE-2026-52767No exploit	YesWiki: Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`yeswiki · yeswiki · CWE-347 Pre-auth Weak crypto	High8.2	—	0.3%	Sep 4, 2026
33Monitor	CVE-2026-52769No exploit	YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`yeswiki · yeswiki · CWE-918 Pre-auth SSRF	High8.3	—	0.4%	Sep 4, 2026
30Monitor	CVE-2026-52770No exploit	Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswikiyeswiki · yeswiki · CWE-89 Pre-auth SQL injection	High7.5	—	0.4%	Sep 4, 2026
33Monitor	CVE-2026-52771No exploit	YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)yeswiki · yeswiki · CWE-89 RCE SQL injection	High8.3	—	0.5%	Sep 4, 2026
24Monitor	CVE-2026-52773Proof of concept	Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWikiyeswiki · yeswiki · CWE-80 pre-auth RCE XSS	Medium6.1	—	0.5%	Sep 4, 2026
24Monitor	CVE-2026-52774Proof of concept	Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWikiyeswiki · yeswiki · CWE-80 pre-auth RCE Auth bypass XSS	Medium6.1	—	0.6%	Sep 4, 2026
35Monitor	CVE-2026-52775No exploit	YesWiki Authenticated SQL Injection in ReactionManageryeswiki · yeswiki · CWE-89 SQL injection	High8.8	—	0.4%	Sep 4, 2026
37Monitor	CVE-2026-52777No exploit	YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserializeyeswiki · yeswiki · CWE-352 Pre-auth CSRF	Critical9.4	—	0.2%	Sep 4, 2026
39Monitor	CVE-2025-67066No exploit	SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /CWE-89 pre-auth RCE SQL injection	Critical9.8	—	0.7%	Sep 4, 2026
30Monitor	GHSA-7q9c-hpx7-9cwmNo exploit	TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stopnpm · @typespec/spector · CWE-306 Pre-auth Auth bypass Denial of service	High7.5	—	—	Sep 4, 2026
31Monitor	CVE-2026-86138No exploit	In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.xmlsoft · libxml2 · CWE-190 Memory safety	High7.8	—	0.1%	Sep 5, 2026
31Monitor	CVE-2026-86139No exploit	In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.xmlsoft · libxml2 · CWE-190 Memory safety	High7.8	—	0.1%	Sep 5, 2026
31Monitor	CVE-2026-86140No exploit	In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.xmlsoft · libxml2 · CWE-121 Memory safety	High7.8	—	0.1%	Sep 5, 2026
31Monitor	CVE-2026-86142No exploit	In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.xmlsoft · libxml2 · CWE-122 Memory safety	High7.8	—	0.1%	Sep 5, 2026
29Monitor	CVE-2026-86143No exploit	In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacksxmlsoft · libxml2 · CWE-192	High7.3	—	0.1%	Sep 5, 2026
31Monitor	CVE-2026-86144No exploit	In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags.xmlsoft · libxml2 · CWE-669 SSRF XXE	High7.8	—	0.1%	Sep 5, 2026
39Monitor	CVE-2026-13447Proof of concept	MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgeryinspireui · mstore api – create native android & ios apps on the cloud · CWE-287 Pre-auth Auth bypass	Critical9.8	—	0.6%	Sep 5, 2026
28Monitor	CVE-2026-77233No exploit	iubenda \| All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Reiubenda · iubenda \| all-in-one compliance for gdpr / ccpa cookie consent + more · CWE-79 Pre-auth XSS	High7.2	—	0.5%	Sep 5, 2026
28Monitor	CVE-2026-77263No exploit	iubenda \| All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Contentiubenda · iubenda \| all-in-one compliance for gdpr / ccpa cookie consent + more · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 5, 2026
39Monitor	CVE-2026-83627No exploit	Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Logwpmudev · hummingbird performance – cache & page speed optimization for core web vitals \| critical css \| minify css \| defer css javascript \| cdn · CWE-94 pre-auth RCE	Critical9.8	—	1.4%	Sep 5, 2026
32Monitor	CVE-2026-86145No exploit	PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching workspcre · pcre2 · CWE-424 Pre-auth	High8.2	—	0.4%	Sep 5, 2026
28Monitor	CVE-2026-15984No exploit	QuickCal <= 1.0.20 - Unauthenticated Stored Cross-Site Scripting via Custom Field Parametersthemovation · quickcal · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Sep 5, 2026
28Monitor	CVE-2026-16649No exploit	Gravity Forms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via Post Body Field Valuegravity forms · gravity forms · CWE-79 Pre-auth XSS	High7.2	—	0.3%	Sep 5, 2026
28Monitor	CVE-2026-18406No exploit	SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payloadbrainstormforce · sureforms – contact form builder, ai forms, payment form, survey & quiz · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 5, 2026
28Monitor	CVE-2026-19769No exploit	Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Keykstover · ninja forms – the contact form builder that grows with you · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 5, 2026
30Monitor	CVE-2026-19858No exploit	JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Presetunknown · jetformbuilder — dynamic blocks form builder · CWE-200 Pre-auth Info leak	High7.5	—	0.4%	Sep 5, 2026
35Monitor	CVE-2026-19887No exploit	Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callbackuscnanbu · welcart e-commerce · CWE-502 Pre-auth Deserialization	High8.8	—	1.0%	Sep 5, 2026
35Monitor	CVE-2026-77826No exploit	RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validationunknown · registrationmagic · CWE-287 Pre-auth Auth bypass	High8.8	—	0.4%	Sep 5, 2026
28Monitor	CVE-2026-77830No exploit	Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholdercleantalk · spam protection, honeypot, anti-spam by cleantalk · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 5, 2026
39Monitor	CVE-2026-78362No exploit	SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authenticationunknown · seo flow by lupsonline · CWE-269 Pre-auth	Critical9.8	—	0.4%	Sep 5, 2026
28Monitor	CVE-2026-78438No exploit	W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutatorboldgrid · w3 total cache · CWE-79 Pre-auth XSS	High7.2	—	0.4%	Sep 5, 2026
28Monitor	CVE-2026-81404No exploit	IPGP Visitors Origin < 1.6 - Reflected XSSunknown · ipgp visitors origin · CWE-79 Pre-auth XSS	High7.1	—	0.2%	Sep 5, 2026
34Monitor	CVE-2026-82304No exploit	Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handlerunknown · music store · CWE-89 Pre-auth SQL injection	High8.6	—	0.4%	Sep 5, 2026
32Monitor	CVE-2026-84934No exploit	JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Overrideunknown · jch optimize · CWE-79 XSS	High8.0	—	0.4%	Sep 5, 2026
32Monitor	CVE-2026-84935No exploit	HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settingsunknown · ht menu · CWE-79 XSS	High8.0	—	0.4%	Sep 5, 2026

CVE-2026-18149
23Monitor
undici vulnerable to Denial of Service via orphaned RetryHandler response body
MediumCVSS 5.9No exploitEPSS 0%
- Pre-auth
- Denial of service
nodejs · undiciSep 4, 2026
CVE-2026-19534
30Monitor
undici vulnerable to Denial of Service via unrequested WebSocket subprotocol
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
nodejs · undiciSep 4, 2026
CVE-2026-50553
34Monitor
Note Mark: Path traversal via unsanitized book/note slug in migrate export (sibling of GHSA-g49p)
HighCVSS 8.6No exploitEPSS 0%
- Path traversal
enchant97 · note-markSep 4, 2026
CVE-2026-53758
34Monitor
Emlog: Stored XSS via Parsedown Markdown Processing - Raw HTML Not Sanitized
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- XSS
emlog · emlogSep 4, 2026
CVE-2026-53761
32Monitor
Frappe CRM: Authentication Bypass via Logged Invitation Keys in crm/api
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Auth bypass
frappe · crmSep 4, 2026
CVE-2026-57159
33Monitor
PJSIP: SDP parser out-of-bounds write in remote payload-type map maintenance
HighCVSS 8.4No exploitEPSS 0%
- Pre-auth
teluu · pjsipSep 4, 2026
CVE-2026-57161
35Monitor
PJSIP: Stack overflow handling Service-Route headers in a registration response
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
teluu · pjsipSep 4, 2026
CVE-2026-57162
35Monitor
PJSIP: Stack overflow parsing SDP a=crypto attributes
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
teluu · pjsipSep 4, 2026
CVE-2026-57163
35Monitor
PJSIP: Stack overflow parsing a TLS peer certificate's SubjectAltName in GnuTLS backend
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Memory safety
teluu · pjsipSep 4, 2026
CVE-2026-57164
33Monitor
PJSIP: Heap overflow in the HTTP client
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
teluu · pjsipSep 4, 2026
CVE-2026-61686
30Monitor
SolidInvoice: PHP unserialize() called on client-controlled data in DataGrid LiveComponent context prop
HighCVSS 7.5No exploitEPSS 0%
- Deserialization
solidinvoice · solidinvoiceSep 4, 2026
CVE-2026-85654
28Monitor
Code injection in the CDK generator in Amazon awslabs.dynamodb-mcp-server
HighCVSS 7.1No exploitEPSS 0%
- RCE
- SSTI
amazon · awslabs.dynamodb-mcp-serverSep 4, 2026
CVE-2026-85656
34Monitor
OS command injection in Amazon log4j-cve-2021-44228-hotpatch
HighCVSS 8.5No exploitEPSS 1%
- RCE
- Local privilege escalation
- Command injection
amazon · log4j-cve-2021-44228-hotpatchSep 4, 2026
CVE-2026-9317
36Monitor
Nango < 0.71.6 Missing Authentication RCE via runner tRPC server
CriticalCVSS 9.2No exploitEPSS 1%
- pre-auth RCE
- Auth bypass
nangohq · nangoSep 4, 2026
CVE-2026-71620
32Monitor
File Upload vulnerability in Zhao-github ApiAdmin v.5.0.1 allows a remote attacker to execute arbitrary code via a crafted .php file
HighCVSS 8.1No exploitEPSS 0%
- RCE
- File upload
Sep 4, 2026
CVE-2026-78327
36Monitor
An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the SonicWall Network Securit
CriticalCVSS 9.1No exploitEPSS 1%
- RCE
- Command injection
sonicwall · network security manager (nsm)Sep 4, 2026
CVE-2026-78328
36Monitor
A missing authorization vulnerability in the SonicWall Network Security Manager (NSM) On-Prem Management interface allows a lower-privileged
CriticalCVSS 9.1No exploitEPSS 0%
- Broken access control (IDOR)
sonicwall · network security manager (nsm)Sep 4, 2026
CVE-2026-78839
32Monitor
An arbitrary file upload vulnerability in AppNitro MachForm v30 allows attackers to execute arbitrary code via uploading a crafted .phar fil
HighCVSS 8.1Proof of conceptEPSS 0%
- pre-auth RCE
- File upload
Sep 4, 2026
CVE-2026-80112
34Monitor
PassMark PerformanceTest, BurnInTest, and OSForensics Improper Access Control via DirectIo64.sys
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
passmark software · performancetestSep 4, 2026
CVE-2026-80114
34Monitor
PassMark PerformanceTest, BurnInTest, and OSForensics Hard-coded Credentials Authentication Bypass via DirectIo64.sys
HighCVSS 8.5No exploitEPSS 0%
- Auth bypass
- Hard-coded credentials
passmark software · performancetestSep 4, 2026
CVE-2026-80116
34Monitor
PassMark PerformanceTest, BurnInTest, and OSForensics Privilege Escalation via DirectIo64.sys IOCTL
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
passmark software · performancetestSep 4, 2026
CVE-2026-80118
33Monitor
PassMark PerformanceTest, BurnInTest, and OSForensics Kernel Null Pointer Dereference via DirectIo64.sys IOCTL
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
- Local privilege escalation
passmark software · performancetestSep 4, 2026
CVE-2026-80119
34Monitor
PassMark PerformanceTest, BurnInTest, and OSForensics Physical Memory Disclosure via DirectIo64.sys IOCTL
HighCVSS 8.5No exploitEPSS 0%
- Path traversal
passmark software · performancetestSep 4, 2026
CVE-2026-81939
36Monitor
A Zip Slip vulnerability in the SonicWall Network Security Manager (NSM) On-Prem file upload and archive processing functionality allows an
CriticalCVSS 9.1No exploitEPSS 0%
- Path traversal
sonicwall · network security manager (nsm)Sep 4, 2026
CVE-2022-35497
21Monitor
In Trimble TM4WEB 21.4.0.4 due to security misconfiguration with session identifiers, it is possible to recover valid session cookies via re
MediumCVSS 5.4Proof of conceptEPSS 0%
- XSS
Sep 4, 2026
CVE-2022-35499
28Monitor
In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to reflected cross-site scripting via injection in a arbitrary p
HighCVSS 7.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
Sep 4, 2026
CVE-2026-53603
28Monitor
nebula-mesh: Operator session tokens stored in plaintext in the database
HighCVSS 7.1No exploitEPSS 0%
forgekeep · nebula-meshSep 4, 2026
CVE-2026-53604
28Monitor
nebula-mesh: CA private key not zeroized on web mobile-bundle error paths
HighCVSS 7.1No exploitEPSS 0%
forgekeep · nebula-meshSep 4, 2026
CVE-2026-53932
33Monitor
wnx/laravel-backup-restore: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') and Improper Neutralization of Special El
HighCVSS 8.0No exploitEPSS 1%
- RCE
- Command injection
stefanzweifel · laravel-backup-restoreSep 4, 2026
CVE-2026-19304
30Monitor
Langflow is vulnerable to Server-Side Request Forgery due to missing or bypassable URL validation in multiple components
HighCVSS 7.7No exploitEPSS 0%
- SSRF
langflow · langflowSep 4, 2026
CVE-2026-61699
32Monitor
nebula-mesh: Certificate revocation is never enforced at the mesh
HighCVSS 8.1No exploitEPSS 0%
forgekeep · nebula-meshSep 4, 2026
CVE-2026-63464
30Monitor
Nebula-mesh allows non-admin operators to disable webhook SSRF protection via `allow_private`
HighCVSS 7.7No exploitEPSS 0%
- SSRF
- Broken access control (IDOR)
forgekeep · nebula-meshSep 4, 2026
CVE-2026-71622
29Monitor
SQL injection vulnerability in Zhao-github APiAdmin v.5.0.1 allows a remote attacker to obtain sensitive information via the User.php compon
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- SQL injection
Sep 4, 2026
CVE-2026-71624
39Monitor
An issue in esoTalk v.1.0.0g4 allows a remote attacker to execute arbitrary code via the core/models/ETMemberModel.class.php, core/controlle
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
Sep 4, 2026
CVE-2026-71625
39Monitor
An issue in slimkit plus ThinkSNS+ v.2.4 allows a remote attacker to escalate privileges via the ResetPasswordController.php component
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
Sep 4, 2026
CVE-2026-71626
30Monitor
An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRe
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
Sep 4, 2026
CVE-2026-79389
29Monitor
Trueview T18161 S 6.0.23.4 contains an improper verification in MQTT command processing.
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
- Weak crypto
Sep 4, 2026
CVE-2026-79390
30Monitor
Trueview TI8161 6.0.23.4 is vulnerable to information disclosure due to the transmission of MQTT communications in plaintext over TCP port 1
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
Sep 4, 2026
CVE-2026-79391
39Monitor
No authentication exists in the MQTT service of Trueview 6.0.23.4.
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
Sep 4, 2026
CVE-2026-85786
34Monitor
Incomplete fix for CVE-2026-75936 memory-amplification denial of service in Amazon ion-java
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
amazon · ion-javaSep 4, 2026
CVE-2026-80775
0Monitor
futex: Fix race on the initial mm->futex.phash.ref allocation
Proof of conceptEPSS 0%
linux · linuxSep 4, 2026
CVE-2026-80844
0Monitor
xfrm: ah6: validate routing header segments_left
Proof of conceptEPSS 0%
linux · linuxSep 4, 2026
CVE-2026-50894
39Monitor
easyadmin v2.0.2.2 is vulnerable to Unrestricted Upload of File with Dangerous Type in the background management interface which allows auth
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- File upload
Sep 4, 2026
CVE-2026-75438
30Monitor
Buffer Overflow vulnerability in Open5GS v2.7.7 allows a remote attacker to cause a denial of service via the ogs_sbi_time_parse() function
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 4, 2026
CVE-2026-75439
30Monitor
An issue in Free5GC v.4.2.2 allows a remote attacker to cause a denial of service via the UPF component
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
Sep 4, 2026
CVE-2026-77847
28Monitor
Tycon Systems TPDIN-Monitor-WEB3 Use of Hard-coded Credentials
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Hard-coded credentials
tycon systems · tpdin-monitor-web3Sep 4, 2026
CVE-2026-79423
35Monitor
An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arb
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Command injection
Sep 4, 2026
CVE-2026-79426
28Monitor
An arbitrary file deletion vulnerability in the /adminapi/file/video_data_save component of CRMEB v6.0.0 allows authenticated attackers to d
HighCVSS 7.2No exploitEPSS 0%
- Path traversal
Sep 4, 2026
CVE-2026-82712
34Monitor
Tycon Systems TPDIN-Monitor-WEB3 Cross-Site Request Forgery
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- CSRF
tycon systems · tpdin-monitor-web3Sep 4, 2026
CVE-2026-85787
28Monitor
An incomplete list of disallowed inputs in the SQL validation component of Amazon awslabs postgres-mcp-server
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
amazon · postgres-mcp-serverSep 4, 2026
CVE-2026-46636
34Monitor
Twig: Sandbox method allowlist bypass via `Markup` subclass
HighCVSS 8.7No exploitEPSS 0%
- pre-auth RCE
- SSTI
twigphp · twigSep 4, 2026
CVE-2026-75925
37Monitor
IXON VPN Client CRLF Injection
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
ixon · ixon vpn clientSep 4, 2026
CVE-2026-77393
34Monitor
Inductive Automation Ignition Incorrect Default Permissions
HighCVSS 8.7No exploitEPSS 0%
inductive automation · ignitionSep 4, 2026
CVE-2026-82684
34Monitor
Tycon Systems TPDIN-Monitor-WEB3 Missing Authorization
HighCVSS 8.6No exploitEPSS 0%
- Broken access control (IDOR)
tycon systems · tpdin-monitor-web3Sep 4, 2026
CVE-2026-86090
28Monitor
ntopng before 6.7.260717 Missing Authorization on the Notification Endpoint and Recipient Delete Handlers
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
ntop · ntopngSep 4, 2026
CVE-2026-86091
28Monitor
ntopng before 6.7.260717 Missing Authorization on the Host Pool Bulk Delete Handler
HighCVSS 7.1No exploitEPSS 0%
- Broken access control (IDOR)
ntop · ntopngSep 4, 2026
CVE-2026-82538
34Monitor
ILIAS Arbitrary SQL Injection via Repository Trash Table Sort Parameter
HighCVSS 8.7No exploitEPSS 0%
- SQL injection
ilias-elearning e.v. · iliasSep 4, 2026
CVE-2026-85769
26Monitor
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unmarshalling via unchecked block_skip_read() blocksize
MediumCVSS 6.5Proof of conceptEPSS 0%
- Pre-auth
- Memory safety
- Denial of service
red hat · red hat enterprise linux 10Sep 4, 2026
CVE-2026-48019
35Monitor
CRLF injection in Laravel's default email rule enables SMTP smuggling and spoofed-mail relay
HighCVSS 8.9Proof of conceptEPSS 0%
- Pre-auth
laravel · frameworkSep 4, 2026
CVE-2026-86095
34Monitor
Unidata netcdf-c through 4.10.1 Out-of-bounds Write via Oversized HDF5 Attribute Name
HighCVSS 8.5No exploitEPSS 0%
- Memory safety
unidata · netcdf-cSep 4, 2026
CVE-2026-86097
28Monitor
PX4 Autopilot through 1.17.0 Null Pointer Dereference via param select
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- Memory safety
px4 · px4-autopilotSep 4, 2026
CVE-2026-86098
33Monitor
ntop nDPI before 6.0 Heap Buffer Overflow via ndpi_json_string_escape
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- Memory safety
ntop · ndpiSep 4, 2026
CVE-2026-52762
28Monitor
YesWiki: Authenticated (Admin) Server-Side Template Injection to Remote Code Execution via Bazar Semantic Templates
HighCVSS 7.1No exploitEPSS 0%
- RCE
- SSTI
yeswiki · yeswikiSep 4, 2026
CVE-2026-52763
26Monitor
YesWiki: SQL injection via the `recentchanges` action `period` argument leading to arbitrary DB read
MediumCVSS 6.5No exploitEPSS 0%
- SQL injection
yeswiki · yeswikiSep 4, 2026
CVE-2026-52766
36Monitor
YesWiki: Unauthenticated arbitrary page deletion via `{{erasespamedcomments}}` action
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
yeswiki · yeswikiSep 4, 2026
CVE-2026-52767
32Monitor
YesWiki: Unauthenticated ActivityPub Signature-Verification Bypass via `!openssl_verify(...)` accepting `int(-1)`
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- Weak crypto
yeswiki · yeswikiSep 4, 2026
CVE-2026-52769
33Monitor
YesWiki: Unauthenticated Server-Side Request Forgery via ActivityPub `Signature.keyId`
HighCVSS 8.3No exploitEPSS 0%
- Pre-auth
- SSRF
yeswiki · yeswikiSep 4, 2026
CVE-2026-52770
30Monitor
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in yeswiki/yeswiki
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- SQL injection
yeswiki · yeswikiSep 4, 2026
CVE-2026-52771
33Monitor
YesWiki: Second-Order SQL Injection in Page Delete API via Unescaped Page Tag (`ApiController::deletePage`)
HighCVSS 8.3No exploitEPSS 0%
- RCE
- SQL injection
yeswiki · yeswikiSep 4, 2026
CVE-2026-52773
24Monitor
Reflected XSS via Unescaped Archived-Revision `time` Parameter in `handlers/page/show.php` in YesWiki
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- XSS
yeswiki · yeswikiSep 4, 2026
CVE-2026-52774
24Monitor
Reflected XSS via Unescaped `id` Parameter in Bazar Widget HTML Attributes in YesWiki
MediumCVSS 6.1Proof of conceptEPSS 0%
- pre-auth RCE
- Auth bypass
- XSS
yeswiki · yeswikiSep 4, 2026
CVE-2026-52775
35Monitor
YesWiki Authenticated SQL Injection in ReactionManager
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
yeswiki · yeswikiSep 4, 2026
CVE-2026-52777
37Monitor
YesWiki: Authenticated PHP Object Injection in BazarImportAction via unserialize
CriticalCVSS 9.4No exploitEPSS 0%
- Pre-auth
- CSRF
yeswiki · yeswikiSep 4, 2026
CVE-2025-67066
39Monitor
SQL Injection vulnerability in oasys sysoa version 1.0 allows a remote attacker to execute arbitrary code via the outtype parameter in the /
CriticalCVSS 9.8No exploitEPSS 0%
- pre-auth RCE
- SQL injection
Sep 4, 2026
GHSA-7q9c-hpx7-9cwm
30Monitor
TypeSpec: Unauthenticated Remote Shutdown of Spector Mock Server via POST /.admin/stop
HighCVSS 7.5No exploit
- Pre-auth
- Auth bypass
- Denial of service
npm · @typespec/spectorSep 4, 2026
CVE-2026-86138
31Monitor
In libxml2 before 2.15.4, xmlDictAddQString in dict.c has an integer overflow and resultant heap-based buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
xmlsoft · libxml2Sep 5, 2026
CVE-2026-86139
31Monitor
In libxml2 before 2.15.4, xmlURIEscapeStr in uri.c has an integer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
xmlsoft · libxml2Sep 5, 2026
CVE-2026-86140
31Monitor
In libxml2 before 2.15.4, xmlSnprintfElements in valid.c has a strcat stack-based buffer overflow.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
xmlsoft · libxml2Sep 5, 2026
CVE-2026-86142
31Monitor
In libxml2 before 2.15.4, there is a heap-based buffer overflow in xmlXPtrEvalXPtrPart because of xmlXPtrEval xpointer length saturation.
HighCVSS 7.8No exploitEPSS 0%
- Memory safety
xmlsoft · libxml2Sep 5, 2026
CVE-2026-86143
29Monitor
In xmlIO in libxml2 before 2.15.4, an inconsistency in xmlOutputWriteCallback and xmlBufUse causes negative lengths to reach write callbacks
HighCVSS 7.3No exploitEPSS 0%
xmlsoft · libxml2Sep 5, 2026
CVE-2026-86144
31Monitor
In xinclude in libxml2 before 2.15.4, xmlXIncludeProcess and xmlXIncludeProcessTree do not propagate parseFlags.
HighCVSS 7.8No exploitEPSS 0%
- SSRF
- XXE
xmlsoft · libxml2Sep 5, 2026
CVE-2026-13447
39Monitor
MStore API <= 4.20.0 - Unauthenticated Authentication Bypass via 'id_token' Parameter JWT Forgery
CriticalCVSS 9.8Proof of conceptEPSS 0%
- Pre-auth
- Auth bypass
inspireui · mstore api – create native android & ios apps on the cloudSep 5, 2026
CVE-2026-77233
28Monitor
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content via AdSense Re
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
iubenda · iubenda | all-in-one compliance for gdpr / ccpa cookie consent + moreSep 5, 2026
CVE-2026-77263
28Monitor
iubenda | All-in-one Compliance for GDPR / CCPA Cookie Consent + more <= 3.13.4 - Unauthenticated Stored Cross-Site Scripting via Comment Content
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
iubenda · iubenda | all-in-one compliance for gdpr / ccpa cookie consent + moreSep 5, 2026
CVE-2026-83627
39Monitor
Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN <= 3.21.0 - Unauthenticated Remote Code Execution via Cookie Name in Page Cache Debug Log
CriticalCVSS 9.8No exploitEPSS 1%
- pre-auth RCE
wpmudev · hummingbird performance – cache & page speed optimization for core web vitals | critical css | minify css | defer css javascript | cdnSep 5, 2026
CVE-2026-86145
32Monitor
PCRE2 before 10.48 allows a pcre2_dfa_match out-of-bounds write because reuse of a cached workspace block, in a recursive DFA matching works
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
pcre · pcre2Sep 5, 2026
CVE-2026-15984
28Monitor
QuickCal <= 1.0.20 - Unauthenticated Stored Cross-Site Scripting via Custom Field Parameters
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
themovation · quickcalSep 5, 2026
CVE-2026-16649
28Monitor
Gravity Forms <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via Post Body Field Value
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
gravity forms · gravity formsSep 5, 2026
CVE-2026-18406
28Monitor
SureForms <= 2.12.2 - Unauthenticated Stored Cross-Site Scripting via Text Field Entity-Encoded Payload
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
brainstormforce · sureforms – contact form builder, ai forms, payment form, survey & quizSep 5, 2026
CVE-2026-19769
28Monitor
Ninja Forms <= 3.15.1 - Unauthenticated Stored Cross-Site Scripting via Repeater Child 'type' Confusion via Unmatched Array Key
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
kstover · ninja forms – the contact form builder that grows with youSep 5, 2026
CVE-2026-19858
30Monitor
JetFormBuilder < 3.6.5.2 - Unauthenticated Password Hash and Arbitrary Metadata Disclosure via Dynamic Preset
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
unknown · jetformbuilder — dynamic blocks form builderSep 5, 2026
CVE-2026-19887
35Monitor
Welcart e-Commerce <= 2.12.1 - Unauthenticated Arbitrary File Deletion via PHP Object Injection via 'reserve' Checkout Parameter and 'option' EDY Callback
HighCVSS 8.8No exploitEPSS 1%
- Pre-auth
- Deserialization
uscnanbu · welcart e-commerceSep 5, 2026
CVE-2026-77826
35Monitor
RegistrationMagic 5.0.1.8 - 6.0.9.8 - Unauthenticated Authentication Bypass via Missing Facebook Token Audience Validation
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
unknown · registrationmagicSep 5, 2026
CVE-2026-77830
28Monitor
Spam protection, Honeypot, Anti-Spam by CleanTalk <= 6.86 - Unauthenticated Stored Cross-Site Scripting via Comment Content aria-label Placeholder
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
cleantalk · spam protection, honeypot, anti-spam by cleantalkSep 5, 2026
CVE-2026-78362
39Monitor
SEO Flow by LupsOnline 3.0.0 - 3.0.2 - Unauthenticated Privilege Escalation via API Key Authentication
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
unknown · seo flow by lupsonlineSep 5, 2026
CVE-2026-78438
28Monitor
W3 Total Cache <= 2.10.5 - Unauthenticated Stored Cross-Site Scripting via LazyLoad Background Mutator
HighCVSS 7.2No exploitEPSS 0%
- Pre-auth
- XSS
boldgrid · w3 total cacheSep 5, 2026
CVE-2026-81404
28Monitor
IPGP Visitors Origin < 1.6 - Reflected XSS
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
- XSS
unknown · ipgp visitors originSep 5, 2026
CVE-2026-82304
34Monitor
Music Store – WordPress eCommerce < 1.4.5 - Unauthenticated SQLi via paypal-data Handler
HighCVSS 8.6No exploitEPSS 0%
- Pre-auth
- SQL injection
unknown · music storeSep 5, 2026
CVE-2026-84934
32Monitor
JCH Optimize < 6.0.1 - Subscriber+ Stored XSS via getcacheinfo Task Override
HighCVSS 8.0No exploitEPSS 0%
- XSS
unknown · jch optimizeSep 5, 2026
CVE-2026-84935
32Monitor
HT Menu < 1.2.7 - Subscriber+ Stored XSS via Menu Settings
HighCVSS 8.0No exploitEPSS 0%
- XSS
unknown · ht menuSep 5, 2026