By publication date

Exploited and new serious CVEs: September 2026

7,960 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 54 of 80

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
29Monitor	CVE-2026-90427No exploit	iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()linux · linux	High7.4	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90429No exploit	iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)initlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-90435No exploit	RDMA/mlx5: Fix integer overflow of user QP buffer sizelinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-86049No exploit	Jupyter Server: 5xx request logging leaks token-bearing Referer header valuesjupyter-server · jupyter_server · CWE-532 Info leak	High7.1	—	0.4%	Sep 17, 2026
31Monitor	CVE-2026-92485No exploit	bpf: Fix WARNING in bpf_tracing_link_releaselinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-92488No exploit	RDMA/erdma: complete object teardown when the destroy command failslinux · linux	High7.0	—	0.1%	Sep 17, 2026
39Monitor	CVE-2026-92489No exploit	xfrm: Fix skb double-free in xfrm_dev_direct_output()linux · linux Pre-auth	Critical9.8	—	0.4%	Sep 17, 2026
28Monitor	CVE-2026-92504No exploit	thermal: intel: int3400: clean up ODVP on probe failureslinux · linux	High7.0	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-92507No exploit	RDMA/core: Fix potential use after free in ib_dealloc_pd_user()linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-92508No exploit	RDMA/core: Fix potential use after free in ib_free_cq()linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-92510No exploit	RDMA/core: Fix potential use after free in ib_destroy_srq_user()linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-92511No exploit	RDMA/core: Fix potential use after free in ib_destroy_cq_user()linux · linux	High7.8	—	0.1%	Sep 17, 2026
38Monitor	CVE-2026-93372No exploit	Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside tgoogle · chrome · CWE-121 pre-auth RCE Memory safety	Critical9.6	—	0.4%	Sep 17, 2026
38Monitor	CVE-2026-93373No exploit	Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandboxgoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.3%	Sep 17, 2026
38Monitor	CVE-2026-93374No exploit	Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary codegoogle · chrome · CWE-416 pre-auth RCE Memory safety	Critical9.6	—	0.4%	Sep 17, 2026
31Monitor	CVE-2026-92518No exploit	riscv, bpf: Fix kernel stack corruption in tailcall with CFIlinux · linux	High7.8	—	0.1%	Sep 17, 2026
32Monitor	CVE-2026-93375No exploit	Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially execgoogle · chrome · CWE-706 RCE	High8.1	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-93377No exploit	Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary cogoogle · chrome · CWE-843 pre-auth RCE	High8.8	—	0.4%	Sep 17, 2026
29Monitor	CVE-2026-92522No exploit	ACPI: processor: validate MADT IOAPIC entry boundslinux · linux	High7.3	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-93381No exploit	Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to pgoogle · chrome · CWE-122 pre-auth RCE Memory safety	High8.8	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-93382No exploit	Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via google · chrome · CWE-416 pre-auth RCE Memory safety	High8.8	—	0.3%	Sep 17, 2026
28Monitor	CVE-2026-92525No exploit	RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]linux · linux Local privilege escalation	High7.1	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93037No exploit	RDMA/hfi1: Propagate sdma_txinit_ahg() errorslinux · linux	High7.8	—	0.1%	Sep 17, 2026
29Monitor	CVE-2026-93039No exploit	ASoC: meson: Keep link pointers valid on realloc failurelinux · linux	High7.4	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-93042No exploit	dmaengine: dw-edma: Terminate all descriptors without callbackslinux · linux Pre-auth	High8.8	—	0.4%	Sep 17, 2026
31Monitor	CVE-2026-93045No exploit	bpf: Reject arena frees below the arena baselinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93046No exploit	software node: Fix software_node_get_reference_args() with index -1linux · linux	High7.0	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93054No exploit	uio: Fix stale info pointer in failed registration pathlinux · linux	High7.0	—	0.1%	Sep 17, 2026
33Monitor	CVE-2026-93063No exploit	wifi: iwlwifi: mei: check SAP message length before reading itlinux · linux	High8.4	—	0.2%	Sep 17, 2026
31Monitor	CVE-2026-93070No exploit	media: ipu6: Do not free aux device pdata after initlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93074No exploit	dax/fsdev: use __va(phys) for kaddr in direct_accesslinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93079No exploit	cxl/features: Reject Get Feature count larger than the output bufferlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93095No exploit	hfsplus: validate thread record before delete key rebuildlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93105No exploit	esp: do not unref managed frag pages in esp_ssg_unref()linux · linux	High7.8	—	0.1%	Sep 17, 2026
32Monitor	CVE-2026-93107No exploit	RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error statelinux · linux Pre-auth	High8.2	—	0.5%	Sep 17, 2026
31Monitor	CVE-2026-93111No exploit	bpf: Mark tracing_multi trampolines as ftrace managedlinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93112No exploit	bpf: Require a BPF cpumask for bpf_cpumask_populate()linux · linux	High7.1	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93116No exploit	platform/x86: asus-wmi: fix resource leaks on probe failurelinux · linux	High7.0	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93121No exploit	usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error pathslinux · linux	High7.0	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93122No exploit	usb: gadget: uac: validate rate list length before storinglinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93125No exploit	bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 maxlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93127No exploit	bpf: Drop scalar id on sign-extending narrowing stack fillslinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93137No exploit	bpf: Fix use-after-free on mm_struct in bpf_find_vma()linux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93138No exploit	bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinuxlinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93144No exploit	bpf: Reject writes through untrusted BTF pointerslinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93147No exploit	s390/bpf: Replace ly instruction with llgflinux · linux	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93148No exploit	bpf: Reject MEM_ALLOC BTF accesses past object boundslinux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-93151No exploit	nvmet-rdma: fix response resource leak on queue teardownlinux · linux Pre-auth Denial of service	High7.5	—	0.6%	Sep 17, 2026
31Monitor	CVE-2026-93154No exploit	RDMA/irdma: Add refcounting to user ring MRslinux · linux	High7.8	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-93165No exploit	platform/chrome: sensorhub: Fix memory overread in ring handlerlinux · linux	High7.7	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93170No exploit	dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlerslinux · linux Race condition	High7.8	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93175No exploit	drm/amd/display: Fix dangling pointer in CRTC reset functionlinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93176No exploit	drm/amd/display: Fix dangling pointer in plane reset functionlinux · linux	High7.0	—	0.1%	Sep 17, 2026
29Monitor	CVE-2026-93177No exploit	drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookuplinux · linux	High7.3	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93178No exploit	drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookuplinux · linux	High7.1	—	0.1%	Sep 17, 2026
35Monitor	CVE-2026-93189No exploit	HID: core: quiesce input in hid_hw_stop() to prevent use-after-freelinux · linux Pre-auth	High8.8	—	0.3%	Sep 17, 2026
33Monitor	CVE-2026-93190No exploit	platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap countlinux · linux	High8.4	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93192No exploit	drm/v3d: Clear queue->active_job when v3d_fence_create() failslinux · linux	High7.8	—	0.1%	Sep 17, 2026
33Monitor	CVE-2026-93196No exploit	nvdimm: virtio_pmem: refcount requests for token lifetimelinux · linux	High8.4	—	0.1%	Sep 17, 2026
31Monitor	CVE-2026-93201No exploit	dm-pcache: validate seg_id fields from persistent memorylinux · linux	High7.8	—	0.1%	Sep 17, 2026
28Monitor	CVE-2026-93203No exploit	batman-adv: bla: avoid CRC corruption due to parallel claim addlinux · linux Pre-auth	High7.1	—	0.3%	Sep 17, 2026
38Monitor	CVE-2026-54053No exploit	Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaultsbrufdev · many-notes · CWE-22 Path traversal XSS	Critical9.6	—	0.6%	Sep 17, 2026
32Monitor	CVE-2026-54446No exploit	NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Modelabs64 · netlicensing-mcp · CWE-306 Pre-auth Auth bypass	High8.1	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-50158No exploit	yutu: Arbitrary File Write via MCP `caption-download` Tooleat-pray-ai · yutu · CWE-73 Path traversal	High7.7	—	0.2%	Sep 17, 2026
30Monitor	CVE-2026-53534No exploit	JabRef CAYW Sublime Text integration permits operating-system command injectionjabref · jabref · CWE-78 pre-auth RCE Command injection	High7.5	—	0.4%	Sep 17, 2026
29Monitor	CVE-2026-53554No exploit	SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processingdataease · sqlbot · CWE-22 Path traversal	High7.3	—	0.4%	Sep 17, 2026
30Monitor	CVE-2026-53557No exploit	SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Executiondataease · sqlbot · CWE-89 RCE SQL injection	High7.7	—	0.3%	Sep 17, 2026
34Monitor	CVE-2026-54343No exploit	Frappe LMS: Path Traversal in SCORM File Servingfrappe · lms · CWE-22 Pre-auth Path traversal	High8.7	—	0.6%	Sep 17, 2026
30Monitor	CVE-2026-54506No exploit	Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio fieldgivanz · vvveb · CWE-79 XSS	High7.6	—	0.3%	Sep 17, 2026
33Monitor	CVE-2026-54507No exploit	Vvveb oEmbedProxy vulnerable to server-side request forgerygivanz · vvveb · CWE-918 SSRF CSRF	High8.4	—	0.4%	Sep 17, 2026
35Monitor	CVE-2026-54519Proof of concept	AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletionvmdeshpande · ai-agent-automation · CWE-862 Broken access control (IDOR)	High8.8	—	0.5%	Sep 17, 2026
32Monitor	CVE-2026-54520Proof of concept	AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directoryvmdeshpande · ai-agent-automation · CWE-22 Path traversal	High8.1	—	0.4%	Sep 17, 2026
28Monitor	CVE-2026-54608No exploit	MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-upmythicalltd · mythicaldash · CWE-345	High7.1	—	0.2%	Sep 17, 2026
35Monitor	CVE-2026-54612No exploit	Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-globalgivanz · vvveb · CWE-22 RCE Path traversal	High8.8	—	0.7%	Sep 17, 2026
29Monitor	CVE-2026-54634No exploit	Hamlib: rigctld `send_raw` Stack Out-of-Bounds Write and Uninitialized Memory Disclosurehamlib · hamlib · CWE-787 Pre-auth Memory safety	High7.3	—	0.4%	Sep 17, 2026
24Monitor	CVE-2026-54644Proof of concept	CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message Systemcubecart · v6 · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Sep 17, 2026
19Monitor	CVE-2026-54645Proof of concept	CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypasscubecart · v6 · CWE-79 XSS	Medium4.8	—	1.0%	Sep 17, 2026
28Monitor	CVE-2026-54646Proof of concept	CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.phpcubecart · v6 · CWE-89 SQL injection	High7.2	—	1.4%	Sep 17, 2026
28Monitor	CVE-2026-54647Proof of concept	CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.phpcubecart · v6 · CWE-89 SQL injection	High7.2	—	1.4%	Sep 17, 2026
36Monitor	CVE-2026-54670No exploit	WeGIA: Unauthenticated Auth Bypass + Local File Inclusionlabredescefetrj · wegia · CWE-22 Pre-auth Auth bypass Path traversal	Critical9.1	—	0.8%	Sep 17, 2026
35Monitor	CVE-2026-54671No exploit	WeGIA: Authorization Bypass via Empty Resource Array in InternoControlelabredescefetrj · wegia · CWE-639 Broken access control (IDOR)	High8.8	—	0.5%	Sep 17, 2026
40Plan	CVE-2026-54734No exploit	Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extractionprebid · prebid-server-java · CWE-918 Pre-auth SSRF	Critical10.0	—	0.6%	Sep 17, 2026
36Monitor	CVE-2026-54767No exploit	WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.phplabredescefetrj · wegia · CWE-306 Pre-auth Auth bypass Hard-coded credentials	Critical9.1	—	0.7%	Sep 17, 2026
36Monitor	CVE-2026-73639No exploit	Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8CWE-787 Pre-auth Memory safety	Critical9.1	—	0.7%	Sep 17, 2026
36Monitor	CVE-2026-76949No exploit	Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacementteam-alembic · ash_authentication · CWE-290 Pre-auth Auth bypass	Critical9.1	—	0.7%	Sep 17, 2026
29Monitor	CVE-2026-86688No exploit	Session id is not renewed on authentication in ash_authentication, allowing session fixationteam-alembic · ash_authentication · CWE-384 Pre-auth	High7.4	—	0.7%	Sep 17, 2026
33Monitor	CVE-2026-93426No exploit	SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Namessignoz · signoz · CWE-89 SQL injection	High8.4	—	0.4%	Sep 17, 2026
34Monitor	CVE-2026-19477No exploit	Stack-based Buffer Overflow Vulnerability in Linux (uldaq)mcc · universal library for linux (uldaq) · CWE-121 RCE Memory safety	High8.6	—	0.2%	Sep 17, 2026
36Monitor	CVE-2026-47252No exploit	Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)julien040 · anyquery · CWE-94 RCE	Critical9.0	—	0.7%	Sep 17, 2026
28Monitor	CVE-2026-52727No exploit	lxc-ci: Pacman keyring stored in archlinux image with a private keylxc · lxc-ci · CWE-321 RCE Hard-coded credentials	High7.2	—	0.5%	Sep 17, 2026
28Monitor	CVE-2026-52851No exploit	Traccar: Authenticated Blind SQL Injection in DELETE /api/permissionstraccar · traccar · CWE-89 SQL injection	High7.1	—	0.3%	Sep 17, 2026
32Monitor	CVE-2026-54253No exploit	TS3 Manager: Reflected XSS via /api/download port parameter steals operator sessionjoni1802 · ts3-manager · CWE-79 Pre-auth XSS	High8.2	—	0.3%	Sep 17, 2026
35Monitor	CVE-2026-54504No exploit	MCP Documentation Server: Web UI API binds to all interfaces without authentication by defaultandrea9293 · mcp-documentation-server · CWE-306 Pre-auth Auth bypass	High8.8	—	0.5%	Sep 17, 2026
28Monitor	CVE-2026-54524No exploit	Frappe HR: SQL Injection in HRMS Salary Payments Based on Payment Mode Reportfrappe · hrms · CWE-89 SQL injection	High7.1	—	0.4%	Sep 17, 2026
33Monitor	CVE-2026-55062No exploit	uniget: Path Traversal in Hook Files - Directory Escape Vulnerabilityuniget-org · cli · CWE-22 Path traversal Local privilege escalation	High8.4	—	0.1%	Sep 17, 2026
30Monitor	CVE-2026-68791No exploit	Azure Machine Learning Information Disclosure Vulnerabilitymicrosoft · azure machine learning · CWE-863 Pre-auth Broken access control (IDOR)	High7.5	—	0.5%	Sep 17, 2026
39Monitor	CVE-2026-70009No exploit	Azure Arc Elevation of Privilege Vulnerabilitymicrosoft · azure arc · CWE-22 Pre-auth Path traversal	Critical9.8	—	0.5%	Sep 17, 2026
39Monitor	CVE-2026-70200No exploit	Azure Logic Apps Elevation of Privilege Vulnerabilitymicrosoft · azure logic apps · CWE-22 Pre-auth Path traversal	Critical9.8	—	0.6%	Sep 17, 2026
32Monitor	CVE-2026-77903No exploit	Microsoft Dataverse Elevation of Privilege Vulnerabilitymicrosoft · dataverse · CWE-290 Pre-auth Auth bypass	High8.1	—	0.3%	Sep 17, 2026
36Monitor	CVE-2026-83944No exploit	Azure Logic Apps Elevation of Privilege Vulnerabilitymicrosoft · azure logic apps · CWE-284 Pre-auth Broken access control (IDOR)	Critical9.1	—	0.4%	Sep 17, 2026

CVE-2026-90427
29Monitor
iommu/tegra241-cmdqv: Don't fall back to a freed smmu after devm_krealloc()
HighCVSS 7.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90429
31Monitor
iommu/tegra241-cmdqv: Synchronize the error ISR against VINTF (de)init
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-90435
31Monitor
RDMA/mlx5: Fix integer overflow of user QP buffer size
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-86049
28Monitor
Jupyter Server: 5xx request logging leaks token-bearing Referer header values
HighCVSS 7.1No exploitEPSS 0%
- Info leak
jupyter-server · jupyter_serverSep 17, 2026
CVE-2026-92485
31Monitor
bpf: Fix WARNING in bpf_tracing_link_release
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-92488
28Monitor
RDMA/erdma: complete object teardown when the destroy command fails
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-92489
39Monitor
xfrm: Fix skb double-free in xfrm_dev_direct_output()
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-92504
28Monitor
thermal: intel: int3400: clean up ODVP on probe failures
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-92507
31Monitor
RDMA/core: Fix potential use after free in ib_dealloc_pd_user()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-92508
31Monitor
RDMA/core: Fix potential use after free in ib_free_cq()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-92510
31Monitor
RDMA/core: Fix potential use after free in ib_destroy_srq_user()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-92511
31Monitor
RDMA/core: Fix potential use after free in ib_destroy_cq_user()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93372
38Monitor
Buffer overflow in WebGL in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside t
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeSep 17, 2026
CVE-2026-93373
38Monitor
Use after free in Extensions in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code outside the sandbox
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeSep 17, 2026
CVE-2026-93374
38Monitor
Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code
CriticalCVSS 9.6No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeSep 17, 2026
CVE-2026-92518
31Monitor
riscv, bpf: Fix kernel stack corruption in tailcall with CFI
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93375
32Monitor
Incorrect reference resolution in Tracing in Google Chrome on on Windows prior to 153.0.8010.52 allowed a local attacker to potentially exec
HighCVSS 8.1No exploitEPSS 0%
- RCE
google · chromeSep 17, 2026
CVE-2026-93377
35Monitor
Type confusion in V8 in Google Chrome prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to execute arbitrary co
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
google · chromeSep 17, 2026
CVE-2026-92522
29Monitor
ACPI: processor: validate MADT IOAPIC entry bounds
HighCVSS 7.3No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93381
35Monitor
Buffer overflow in PDFium in Google Chrome on on Windows prior to 153.0.8010.52 allowed a remote attacker leveraging social engineering to p
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeSep 17, 2026
CVE-2026-93382
35Monitor
Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via
HighCVSS 8.8No exploitEPSS 0%
- pre-auth RCE
- Memory safety
google · chromeSep 17, 2026
CVE-2026-92525
28Monitor
RDMA/rxe: Validate num_sge/cur_sge before indexing wqe->dma.sge[]
HighCVSS 7.1No exploitEPSS 0%
- Local privilege escalation
linux · linuxSep 17, 2026
CVE-2026-93037
31Monitor
RDMA/hfi1: Propagate sdma_txinit_ahg() errors
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93039
29Monitor
ASoC: meson: Keep link pointers valid on realloc failure
HighCVSS 7.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93042
35Monitor
dmaengine: dw-edma: Terminate all descriptors without callbacks
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-93045
31Monitor
bpf: Reject arena frees below the arena base
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93046
28Monitor
software node: Fix software_node_get_reference_args() with index -1
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93054
28Monitor
uio: Fix stale info pointer in failed registration path
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93063
33Monitor
wifi: iwlwifi: mei: check SAP message length before reading it
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93070
31Monitor
media: ipu6: Do not free aux device pdata after init
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93074
31Monitor
dax/fsdev: use __va(phys) for kaddr in direct_access
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93079
31Monitor
cxl/features: Reject Get Feature count larger than the output buffer
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93095
31Monitor
hfsplus: validate thread record before delete key rebuild
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93105
31Monitor
esp: do not unref managed frag pages in esp_ssg_unref()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93107
32Monitor
RDMA/rxe: Avoid reprocessing the current packet after the QP enters the error state
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-93111
31Monitor
bpf: Mark tracing_multi trampolines as ftrace managed
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93112
28Monitor
bpf: Require a BPF cpumask for bpf_cpumask_populate()
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93116
28Monitor
platform/x86: asus-wmi: fix resource leaks on probe failure
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93121
28Monitor
usb: gadget: f_fs: Fix fence cleanup in ffs_dmabuf_transfer() error paths
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93122
31Monitor
usb: gadget: uac: validate rate list length before storing
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93125
31Monitor
bpf: Reject rdonly/rdwr_buf_size kfunc arguments that exceed u32 max
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93127
31Monitor
bpf: Drop scalar id on sign-extending narrowing stack fills
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93137
31Monitor
bpf: Fix use-after-free on mm_struct in bpf_find_vma()
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93138
31Monitor
bpf: Fix vmlinux BTF prep race in bpf_get_btf_vmlinux
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93144
31Monitor
bpf: Reject writes through untrusted BTF pointers
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93147
31Monitor
s390/bpf: Replace ly instruction with llgf
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93148
31Monitor
bpf: Reject MEM_ALLOC BTF accesses past object bounds
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93151
30Monitor
nvmet-rdma: fix response resource leak on queue teardown
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
linux · linuxSep 17, 2026
CVE-2026-93154
31Monitor
RDMA/irdma: Add refcounting to user ring MRs
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93165
30Monitor
platform/chrome: sensorhub: Fix memory overread in ring handler
HighCVSS 7.7No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93170
31Monitor
dmaengine: xilinx_dma: Fix channel idle state management in AXIDMA and MCDMA interrupt handlers
HighCVSS 7.8No exploitEPSS 0%
- Race condition
linux · linuxSep 17, 2026
CVE-2026-93175
31Monitor
drm/amd/display: Fix dangling pointer in CRTC reset function
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93176
28Monitor
drm/amd/display: Fix dangling pointer in plane reset function
HighCVSS 7.0No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93177
29Monitor
drm/amdgpu/pm/powerplay: bounds-check voltage index in Vega10 lookup
HighCVSS 7.3No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93178
28Monitor
drm/amdgpu/pm/powerplay: bounds-check voltage index in SMU7 lookup
HighCVSS 7.1No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93189
35Monitor
HID: core: quiesce input in hid_hw_stop() to prevent use-after-free
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-93190
33Monitor
platform/chrome: cros_ec_typec: Reject out-of-bounds PD cap count
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93192
31Monitor
drm/v3d: Clear queue->active_job when v3d_fence_create() fails
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93196
33Monitor
nvdimm: virtio_pmem: refcount requests for token lifetime
HighCVSS 8.4No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93201
31Monitor
dm-pcache: validate seg_id fields from persistent memory
HighCVSS 7.8No exploitEPSS 0%
linux · linuxSep 17, 2026
CVE-2026-93203
28Monitor
batman-adv: bla: avoid CRC corruption due to parallel claim add
HighCVSS 7.1No exploitEPSS 0%
- Pre-auth
linux · linuxSep 17, 2026
CVE-2026-54053
38Monitor
Many Notes: Path Traversal via ZIP import allows arbitrary file write and stored XSS in other users' vaults
CriticalCVSS 9.6No exploitEPSS 0%
- Path traversal
- XSS
brufdev · many-notesSep 17, 2026
CVE-2026-54446
32Monitor
NetLicensing MCP Server: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
labs64 · netlicensing-mcpSep 17, 2026
CVE-2026-50158
30Monitor
yutu: Arbitrary File Write via MCP `caption-download` Tool
HighCVSS 7.7No exploitEPSS 0%
- Path traversal
eat-pray-ai · yutuSep 17, 2026
CVE-2026-53534
30Monitor
JabRef CAYW Sublime Text integration permits operating-system command injection
HighCVSS 7.5No exploitEPSS 0%
- pre-auth RCE
- Command injection
jabref · jabrefSep 17, 2026
CVE-2026-53554
29Monitor
SQLBot: Arbitrary File Write via parseExcel Leading to Code Execution Through Alembic Import Processing
HighCVSS 7.3No exploitEPSS 0%
- Path traversal
dataease · sqlbotSep 17, 2026
CVE-2026-53557
30Monitor
SQLBot: Second-Order SQL Injection via Excel Datasource Leading to Remote Command Execution
HighCVSS 7.7No exploitEPSS 0%
- RCE
- SQL injection
dataease · sqlbotSep 17, 2026
CVE-2026-54343
34Monitor
Frappe LMS: Path Traversal in SCORM File Serving
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
- Path traversal
frappe · lmsSep 17, 2026
CVE-2026-54506
30Monitor
Vvveb: Stored XSS via sanitizeHTML() bypass in user profile bio field
HighCVSS 7.6No exploitEPSS 0%
- XSS
givanz · vvvebSep 17, 2026
CVE-2026-54507
33Monitor
Vvveb oEmbedProxy vulnerable to server-side request forgery
HighCVSS 8.4No exploitEPSS 0%
- SSRF
- CSRF
givanz · vvvebSep 17, 2026
CVE-2026-54519
35Monitor
AI Agent Automation: Missing ownership checks in memory APIs allow cross-user memory read and deletion
HighCVSS 8.8Proof of conceptEPSS 0%
- Broken access control (IDOR)
vmdeshpande · ai-agent-automationSep 17, 2026
CVE-2026-54520
32Monitor
AI Agent Automation: Workflow file step path traversal allows read and write outside the expected directory
HighCVSS 8.1Proof of conceptEPSS 0%
- Path traversal
vmdeshpande · ai-agent-automationSep 17, 2026
CVE-2026-54608
28Monitor
MythicalDash: Unauthenticated payment bypass in Stripe success-redirect endpoint allows arbitrary free credit top-up
HighCVSS 7.1No exploitEPSS 0%
mythicalltd · mythicaldashSep 17, 2026
CVE-2026-54612
35Monitor
Vvveb: Authenticated editor path traversal to PHP file write/RCE via data-v-save-global
HighCVSS 8.8No exploitEPSS 0%
- RCE
- Path traversal
givanz · vvvebSep 17, 2026
CVE-2026-54634
29Monitor
Hamlib: rigctld `send_raw` Stack Out-of-Bounds Write and Uninitialized Memory Disclosure
HighCVSS 7.3No exploitEPSS 0%
- Pre-auth
- Memory safety
hamlib · hamlibSep 17, 2026
CVE-2026-54644
24Monitor
CubeCart: XSS via Anchor Tag Attribute Injection in gui.class.php Message System
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
cubecart · v6Sep 17, 2026
CVE-2026-54645
19Monitor
CubeCart: Stored XSS in Product Description Editor via Global Sanitizer Bypass
MediumCVSS 4.8Proof of conceptEPSS 1%
- XSS
cubecart · v6Sep 17, 2026
CVE-2026-54646
28Monitor
CubeCart: SQL Identifier Injection via Backtick Bypass in maintenance.index.inc.php
HighCVSS 7.2Proof of conceptEPSS 1%
- SQL injection
cubecart · v6Sep 17, 2026
CVE-2026-54647
28Monitor
CubeCart : SQL Injection via download_expire Parameter in settings.index.inc.php
HighCVSS 7.2Proof of conceptEPSS 1%
- SQL injection
cubecart · v6Sep 17, 2026
CVE-2026-54670
36Monitor
WeGIA: Unauthenticated Auth Bypass + Local File Inclusion
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Path traversal
labredescefetrj · wegiaSep 17, 2026
CVE-2026-54671
35Monitor
WeGIA: Authorization Bypass via Empty Resource Array in InternoControle
HighCVSS 8.8No exploitEPSS 0%
- Broken access control (IDOR)
labredescefetrj · wegiaSep 17, 2026
CVE-2026-54734
40Plan
Prebid Server Java: Vulnerability to request forgery allows for possible host environment data extraction
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- SSRF
prebid · prebid-server-javaSep 17, 2026
CVE-2026-54767
36Monitor
WeGIA: Hardcoded Secret Key Backdoor — Mass Data Destruction via deletar_socios.php
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
- Hard-coded credentials
labredescefetrj · wegiaSep 17, 2026
CVE-2026-73639
36Monitor
Imager::File::PNG versions from 1.003 before 1.004 for Perl write past the end of the row buffer reading a PNG with a tRNS transparency chunk in read_direct8
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Memory safety
Sep 17, 2026
CVE-2026-76949
36Monitor
Remember-me sign-in guard reads a session key that is never written in ash_authentication, allowing session replacement
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
team-alembic · ash_authenticationSep 17, 2026
CVE-2026-86688
29Monitor
Session id is not renewed on authentication in ash_authentication, allowing session fixation
HighCVSS 7.4No exploitEPSS 0%
- Pre-auth
team-alembic · ash_authenticationSep 17, 2026
CVE-2026-93426
33Monitor
SigNoz 0.87.0 before 0.142.0 - SQL Injection in v5 Query Builder Field Key Names
HighCVSS 8.4No exploitEPSS 0%
- SQL injection
signoz · signozSep 17, 2026
CVE-2026-19477
34Monitor
Stack-based Buffer Overflow Vulnerability in Linux (uldaq)
HighCVSS 8.6No exploitEPSS 0%
- RCE
- Memory safety
mcc · universal library for linux (uldaq)Sep 17, 2026
CVE-2026-47252
36Monitor
Anyquery: AppleScript/JXA Code Injection via Unescaped URL in macOS plugins (Brave, Chrome, Edge, Reminders, Safari)
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
julien040 · anyquerySep 17, 2026
CVE-2026-52727
28Monitor
lxc-ci: Pacman keyring stored in archlinux image with a private key
HighCVSS 7.2No exploitEPSS 0%
- RCE
- Hard-coded credentials
lxc · lxc-ciSep 17, 2026
CVE-2026-52851
28Monitor
Traccar: Authenticated Blind SQL Injection in DELETE /api/permissions
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
traccar · traccarSep 17, 2026
CVE-2026-54253
32Monitor
TS3 Manager: Reflected XSS via /api/download port parameter steals operator session
HighCVSS 8.2No exploitEPSS 0%
- Pre-auth
- XSS
joni1802 · ts3-managerSep 17, 2026
CVE-2026-54504
35Monitor
MCP Documentation Server: Web UI API binds to all interfaces without authentication by default
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
andrea9293 · mcp-documentation-serverSep 17, 2026
CVE-2026-54524
28Monitor
Frappe HR: SQL Injection in HRMS Salary Payments Based on Payment Mode Report
HighCVSS 7.1No exploitEPSS 0%
- SQL injection
frappe · hrmsSep 17, 2026
CVE-2026-55062
33Monitor
uniget: Path Traversal in Hook Files - Directory Escape Vulnerability
HighCVSS 8.4No exploitEPSS 0%
- Path traversal
- Local privilege escalation
uniget-org · cliSep 17, 2026
CVE-2026-68791
30Monitor
Azure Machine Learning Information Disclosure Vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · azure machine learningSep 17, 2026
CVE-2026-70009
39Monitor
Azure Arc Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
microsoft · azure arcSep 17, 2026
CVE-2026-70200
39Monitor
Azure Logic Apps Elevation of Privilege Vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
microsoft · azure logic appsSep 17, 2026
CVE-2026-77903
32Monitor
Microsoft Dataverse Elevation of Privilege Vulnerability
HighCVSS 8.1No exploitEPSS 0%
- Pre-auth
- Auth bypass
microsoft · dataverseSep 17, 2026
CVE-2026-83944
36Monitor
Azure Logic Apps Elevation of Privilege Vulnerability
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
microsoft · azure logic appsSep 17, 2026