Эксплуатируемые и новые серьёзные CVE: сентябрь 2026 г.

Buffer overflow in ANGLE in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside t

• RCE без входа
• Ошибки памяти

google · chrome8 сент. 2026 г.

Astro: Remote code execution through AVIF image optimization

• RCE без входа
• Ошибки памяти

npm · astro8 сент. 2026 г.

OpenAPI3 version value escapes `emitterOutputDir` and overwrites YAML/JSON outside the output tree

• Обход пути

npm · @typespec/openapi38 сент. 2026 г.

Contact Form to DB by BestWebSoft <= 1.7.5 - Unauthenticated Stored Cross-Site Scripting via cntctfrm_contact_dropdown Parameter

• Без аутентификации
• XSS

bestweblayout · contact form to db by bestwebsoft – messages database plugin for wordpress8 сент. 2026 г.

Eventin <= 4.1.22 - Authenticated (Custom+) Local File Inclusion via 'event_layout' Parameter

• RCE

arraytics · eventin – event calendar, tickets, registration, booking & woocommerce8 сент. 2026 г.

Eventin <= 4.1.22 - Authenticated (Contirbutor+) Local File Inclusion via 'event_layout' Parameter

• RCE

arraytics · eventin – event calendar, tickets, registration, booking & woocommerce8 сент. 2026 г.

FireBox <= 3.1.10 - Authenticated (Author+) Remote Code Execution to Privilege Escalation

• RCE

fireplugins · firebox – woocommerce popup builder, exit intent popup, email optin & cart abandonment8 сент. 2026 г.

Tanium addressed an unauthorized code execution vulnerability in Comply.

• RCE
• SSTI

tanium · comply8 сент. 2026 г.

Tanium addressed a path traversal vulnerability in Comply.

• Обход пути

tanium · comply8 сент. 2026 г.

Tanium addressed a path traversal vulnerability in Comply.

• Обход пути

tanium · comply8 сент. 2026 г.

Tanium addressed a SQL injection vulnerability in Comply.

• Без аутентификации
• SQL-инъекция

tanium · comply8 сент. 2026 г.

Tanium addressed an improper access controls vulnerability in Comply.

• Нарушение контроля доступа (IDOR)

tanium · comply8 сент. 2026 г.

Tanium addressed an improper access controls vulnerability in Comply.

• Нарушение контроля доступа (IDOR)

tanium · comply8 сент. 2026 г.

Tanium addressed an improper access controls vulnerability in Comply.

• Нарушение контроля доступа (IDOR)

tanium · comply8 сент. 2026 г.

Tanium addressed a server-side request forgery vulnerability in Enforce.

• SSRF

tanium · enforce8 сент. 2026 г.

Tanium addressed an unauthorized code execution vulnerability in Enforce.

• RCE
• Инъекция команд

tanium · enforce8 сент. 2026 г.

Shopping Cart & eCommerce Store <= 5.9.3 - Authenticated (Store Manager+) Privilege Escalation to ec_ajax_save_page_default_options AJAX Action

levelfourstorefront · shopping cart & ecommerce store9 сент. 2026 г.

Permission control vulnerability in the event notification module.

• Без аутентификации
• Отказ в обслуживании

huawei · harmonyos9 сент. 2026 г.

OOB write vulnerability in the rendering and composition module.

• Ошибки памяти

huawei · harmonyos9 сент. 2026 г.

DoS vulnerability in the input device module.

• Отказ в обслуживании

huawei · harmonyos9 сент. 2026 г.

UEFI BIOS embedded Shell can be used to bypass Secure Boot

insyde software · insydeh2o9 сент. 2026 г.

Repeater Fields for Gravity Forms <= 3.0.4 - Unauthenticated Stored Cross-Site Scripting via Repeated Multi-Input Sub-Field Values

• Без аутентификации
• XSS

addonsorg · repeater fields for gravity forms9 сент. 2026 г.

Out-of-bounds write in Keymaster trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to write out-of-bounds memory.

• Локальное повышение привилегий
• Ошибки памяти

samsung · android9 сент. 2026 г.

Out-of-bounds write in libmdnie.so prior to SMR Sep-2026 Release 1 allows local attackers to execute arbitrary code with system server privi

• RCE
• Локальное повышение привилегий
• Ошибки памяти

samsung · android9 сент. 2026 г.

Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege.

• Без аутентификации
• Обход пути

samsung · android9 сент. 2026 г.

Heap-based buffer overflow in DNG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbit

• RCE без входа
• Ошибки памяти

samsung · android9 сент. 2026 г.

Heap-based buffer overflow in JPEG decoder of libimagecodec.quram.so prior to SMR Sep-2026 Release 1 allows remote attackers to execute arbi

• RCE без входа
• Ошибки памяти

samsung · android9 сент. 2026 г.

Improper input validation in DualDAR driver prior to SMR Sep-2026 Release 1 allows local privileged attackers to potentially execute arbitra

• RCE
• Локальное повышение привилегий

samsung · android9 сент. 2026 г.

Use after free in DualDAR prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code with root privilege.

• RCE
• Локальное повышение привилегий
• Ошибки памяти

samsung · android9 сент. 2026 г.

Heap-based buffer overflow in KnoxVault trustlet prior to SMR Sep-2026 Release 1 allows local privileged attackers to execute arbitrary code

• RCE
• Локальное повышение привилегий
• Ошибки памяти

samsung · android9 сент. 2026 г.

An issue was discovered in the utcp package before 0.0.6 for OCaml.

• Без аутентификации
• Отказ в обслуживании

ocaml · utcp9 сент. 2026 г.

ELEX WooCommerce Request a Quote < 2.4.1 - Unauthenticated SQLi via variation_id

• Без аутентификации
• SQL-инъекция

unknown · elex woocommerce request a quote9 сент. 2026 г.

Loops & Logic < 4.3.0 - Unauthenticated User Data and Site Option Disclosure

• Без аутентификации
• Утечка информации

unknown · loops & logic9 сент. 2026 г.

Next-Cart Store to WooCommerce Migration <= 3.9.8 - Unauthenticated Authentication Bypass via Default '__token__' Fallback in REST Migration Endpoint

• Без аутентификации
• Обход аутентификации

martinnguyen1990 · next-cart store to woocommerce migration9 сент. 2026 г.

WPBot <= 8.7.3 - Unauthenticated Stored Cross-Site Scripting via 'conversation' Parameter

• Без аутентификации
• XSS

quantumcloud · wpbot – ai chatbot for live support, lead generation, ai services9 сент. 2026 г.

Quentn WP 1.2.13 - 1.2.14 - Unauthenticated SQLi via 'qntn_wp' Parameter

• Без аутентификации
• SQL-инъекция

unknown · quentn wp9 сент. 2026 г.

PublishPress Capabilities <= 2.50.0 - Authenticated (Editor+) Privilege Escalation to Fresh-Install Default Capability Grant

publishpress · user role editor – publishpress capabilities: access control and user roles9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validati

• Без аутентификации
• Слабая криптография

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Reques

• Без аутентификации
• SSRF
• Отказ в обслуживании

dell · secure connect gateway9 сент. 2026 г.

H19WMIHandlerSmm: unvalidated memory boundary could result in arbitrary code execution.

• RCE

insyde software · insydeh2o9 сент. 2026 г.

Local privilege escalation vulnerability in ESET AV Remover

• Локальное повышение привилегий

eset spol. s.r.o. · eset av remover (standalone)9 сент. 2026 г.

YITH WooCommerce Waitlist Premium <= 3.35.0 - Authenticated (Subscriber+) Privilege Escalation to Admin via wp_ajax_yith_wcwtl_add_user

yith · yith woocommerce waitlist premium9 сент. 2026 г.

Cookie Banner for GDPR / CCPA <= 4.4.1 - Unauthenticated Stored Cross-Site Scripting via 'wpl_user_preference' Parameter

• Без аутентификации
• XSS

wplegalpages · wplp cookie consent – cookie banner & consent management for gdpr, ccpa & google consent mode9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

• Без аутентификации
• Слабая криптография

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

• Без аутентификации
• Слабая криптография

dell · secure connect gateway9 сент. 2026 г.

Remote Code Execution in Google ADK for Python via Incomplete Standard Library Denylist

• RCE без входа

google cloud · agent development kit (adk) for python9 сент. 2026 г.

Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

• Обход аутентификации

newfold · wp plugin web9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

• Без аутентификации
• Слабая криптография

dell · secure connect gateway9 сент. 2026 г.

mrubyc through 4.0.0 NULL Pointer Dereference via OP_ENTER

• Ошибки памяти

mrubyc · mrubyc9 сент. 2026 г.

bestzip 2.2.6 and 3.0.2 Argument Injection via the Native Zip Destination

• RCE
• Локальное повышение привилегий

nfriedly · bestzip9 сент. 2026 г.

zstd-jni 1.2.0 through 1.5.7-13 Out-of-Bounds Read via ZstdDictCompress

• Без аутентификации
• Ошибки памяти

luben · zstd-jni9 сент. 2026 г.

Apache Nutch: Unauthenticated forced shutdown and job interruption in Nutch Server (Nutch REST API)

• Без аутентификации

apache · nutch9 сент. 2026 г.

Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)

• RCE

apache · nutch9 сент. 2026 г.

Apache Nutch: Unauthenticated reflection-based job execution in Nutch Server (Nutch REST API)

• Без аутентификации

apache · nutch9 сент. 2026 г.

Apache Impala: SAML authentication bypass via forged bearer token

• Без аутентификации
• Обход аутентификации
• Слабая криптография

apache · impala9 сент. 2026 г.

Apache Impala: Secrets Exfiltration via SSRF

• SSRF

apache · impala9 сент. 2026 г.

Apache Impala: RCE via External Data Source Class Loading

• RCE

apache · impala9 сент. 2026 г.

Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

• Без аутентификации

apache · parquet9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Reques

• Без аутентификации
• SSRF

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

• RCE
• Инъекция команд

dell · secure connect gateway9 сент. 2026 г.

Unauthenticated Remote Code Execution in Akana API Platform

• RCE без входа
• Обход аутентификации

perforce · akana9 сент. 2026 г.

KGUARD DVR unauthenticated remote command execution vulnerability

• RCE без входа

kguard · kguard_firmware9 сент. 2026 г.

Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Spoofing of RemoveSubscription clientId

• Без аутентификации

apache · activemq9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitati

• Без аутентификации
• Обход пути

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restrict

• Без аутентификации

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

• Без аутентификации
• Слабая криптография

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific

• Без аутентификации
• Слабая криптография

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control

• Без аутентификации
• Обход пути

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Handling

• Без аутентификации

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code W

• RCE без входа

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali

• SQL-инъекция

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Veri

• Без аутентификации

dell · secure connect gateway9 сент. 2026 г.

Parse Server 9.0.0 Authentication Bypass via LDAP Empty Password

• Без аутентификации
• Обход аутентификации

parse-community · parse-server9 сент. 2026 г.

SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock

siyuan-note · siyuan9 сент. 2026 г.

Siyuan before v3.8.2 Information Disclosure via Export Preview

• Нарушение контроля доступа (IDOR)

siyuan-note · siyuan9 сент. 2026 г.

SiYuan before v3.8.2 Stored XSS via notebook template paths

• XSS

siyuan-note · siyuan9 сент. 2026 г.

SiYuan before v3.8.2 Stored XSS via Bazaar iconURL

• Без аутентификации
• XSS

siyuan-note · siyuan9 сент. 2026 г.

SiYuan before v3.8.2 Stored XSS via unescaped asset filenames

• XSS

siyuan-note · siyuan9 сент. 2026 г.

SiYuan before v3.8.2 Stored XSS via Asset Preview

• XSS

siyuan-note · siyuan9 сент. 2026 г.

SiYuan before v3.8.2 Path Traversal via removeRiffDeck

• Обход пути

siyuan-note · siyuan9 сент. 2026 г.

PasswordPusher before 2.11.1 Race Condition View Limit Bypass

• Без аутентификации
• Состояние гонки

pglombardo · passwordpusher9 сент. 2026 г.

GitPython before 3.1.60 Remote Code Execution via Git Directory Impersonation

• RCE без входа

gitpython project · gitpython9 сент. 2026 г.

GitPython 3.1.59 Local File Content Oracle via --no-index

gitpython project · gitpython9 сент. 2026 г.

GitPython before 3.1.60 Denial of Service via ReDoS

• Без аутентификации
• Отказ в обслуживании

gitpython project · gitpython9 сент. 2026 г.

CyberPanel 2.4.3 through 2.4.5 Information Disclosure via AI Scanner

• Без аутентификации
• Утечка информации

usmannasir · cyberpanel9 сент. 2026 г.

Lara Dashboard 0.9.2 through 1.3.1 Server-Side Request Forgery in Builder Markdown Fetch

• SSRF

laradashboard · laradashboard9 сент. 2026 г.

Client IP Spoofing via Untrusted HTTP Headers in PayTR's PayTR Virtual Pos iFrame API WHMCS Module

• Без аутентификации

paytr payment and electronic money institution inc. · paytr virtual pos iframe api (v9x) whmcs module9 сент. 2026 г.

Bubblewrap: bubblewrap: symlink traversal via /oldroot allows writing files outside sandbox during setup

red hat · red hat enterprise linux 109 сент. 2026 г.

A privilege-escalation issue in the Portworx Operator when deployed on Red Hat OpenShift (OCP).

everpure · portworx operator9 сент. 2026 г.

Improper Certificate Validation in Quantum Security Gateway

• RCE без входа
• Слабая криптография

checkpoint · gaia embedded9 сент. 2026 г.

Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding

• RCE без входа
• Ошибки памяти

checkpoint · quantum security gateway9 сент. 2026 г.

VLC media player 3.0.0 through 3.0.23 memory corruption vulnerability

• Локальное повышение привилегий
• Ошибки памяти

videolan · vlc media player9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded

• Без аутентификации
• Зашитые учётные данные

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded

• Без аутентификации
• Зашитые учётные данные

dell · secure connect gateway9 сент. 2026 г.

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded

• Без аутентификации
• Зашитые учётные данные

dell · secure connect gateway9 сент. 2026 г.

Chainlit through 2.12.0 Path Traversal via socket.io sessionId

• Без аутентификации
• Обход пути

chainlit · chainlit9 сент. 2026 г.

PocketMine-MP before 5.43.1 Denial of Service via unauthenticated login

• Без аутентификации

pmmp · pocketmine-mp9 сент. 2026 г.

Snipe-IT before 8.7.0 Arbitrary File Read and SSRF via Category EULA

• SSRF
• Обход пути

snipeitapp · snipe-it9 сент. 2026 г.

Snipe-IT before 8.7.0 Authorization Bypass via Livewire Snapshot Replay

snipeitapp · snipe-it9 сент. 2026 г.

snipe-it before 8.7.0 Data Loss via Failed Image Write

snipeitapp · snipe-it9 сент. 2026 г.