Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: September 2026

7,961 records · 32 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 67 of 80

  • CVE-2026-97508
    30Monitor

    thunderbolt: Set tb->root_switch to NULL when domain is stopped

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 24, 2026

  • CVE-2026-97509
    35Monitor

    thunderbolt: Keep XDomain reference during the lifetime of a service

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxSep 24, 2026

  • CVE-2026-97513
    31Monitor

    media: chips-media: wave5: Release m2m_ctx after Instance Removed from List

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 24, 2026

  • CVE-2026-79959
    28Monitor

    Botslab G980H Dashcams Use of Hard-coded Credentials

    HighCVSS 7.0No exploitEPSS 0%

    botslab · g980hSep 24, 2026

  • CVE-2026-81630
    36Monitor

    Botslab G980H Dashcams Insufficient Verification of Data Authenticity

    CriticalCVSS 9.2No exploitEPSS 0%

    botslab · g980hSep 24, 2026

  • CVE-2026-82585
    28Monitor

    Botslab G980H Dashcams Cleartext Transmission of Sensitive Information

    HighCVSS 7.1No exploitEPSS 0%

    botslab · g980hSep 24, 2026

  • CVE-2026-82708
    28Monitor

    Botslab G980H Dashcams Improper Limitation of a Pathname to a Restricted Directory

    HighCVSS 7.1No exploitEPSS 0%

    botslab · g980hSep 24, 2026

  • CVE-2026-88388
    30Monitor

    Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerability in the JavaScript error stack-trace handling path on 64-

    HighCVSS 7.5No exploitEPSS 0%

    Sep 24, 2026

  • CVE-2026-95699
    33Monitor

    MrSteam iSteamX Improper Isolation or Compartmentalization

    HighCVSS 8.4No exploitEPSS 0%

    mrsteam · isteamx applicationSep 24, 2026

  • CVE-2026-85491
    35Monitor

    Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path or route a later one past an authorization check via a dispatch memo keyed on t

    HighCVSS 8.8No exploitEPSS 0%

    Sep 24, 2026

  • CVE-2026-87720
    30Monitor

    Incorrect Authorization via Stale ProjectCache Eviction and Repeated .git Suffixes in Gerrit Code Review

    HighCVSS 7.6No exploitEPSS 0%

    gerrit · gerritSep 24, 2026

  • CVE-2026-87721
    34Monitor

    Denial of Service via Exponential Backtracking in ANTLR Search Query Parser in Gerrit Code Review

    HighCVSS 8.7No exploitEPSS 0%

    gerrit · gerritSep 24, 2026

  • CVE-2026-87722
    34Monitor

    Regular Expression Denial of Service (ReDoS) in Search Query Predicates and REST Filter Endpoints in Gerrit Code Review

    HighCVSS 8.7No exploitEPSS 0%

    gerrit · gerritSep 24, 2026

  • CVE-2026-57178
    29Monitor

    social-auth-core: VK App backend accepts unsigned callback data when auth_key is missing

    HighCVSS 7.4No exploitEPSS 0%

    python-social-auth · social-coreSep 24, 2026

  • CVE-2026-61604
    37Monitor

    ixo Blockchain x/bonds DID-resolved payer drain + x/entity ICA authorization bypass

    CriticalCVSS 9.3No exploitEPSS 0%

    ixofoundation · ixo-blockchainSep 24, 2026

  • CVE-2026-61732
    40Plan

    Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

    CriticalCVSS 10.0Proof of conceptEPSS 1%

    bittersecurity · decepticonSep 24, 2026

  • CVE-2026-61741
    37Monitor

    http4s-scala-xml has an XML External Entity (XXE) processing issue

    CriticalCVSS 9.3No exploitEPSS 0%

    http4s · http4s-scala-xmlSep 24, 2026

  • CVE-2026-61742
    37Monitor

    DBHub HTTP transport DNS rebinding allows unauthenticated browser-origin SQL execution

    CriticalCVSS 9.3No exploitEPSS 0%

    bytebase · dbhubSep 24, 2026

  • CVE-2026-61782
    30Monitor

    @rsdoctor/rspack-plugin has Unauthenticated HTTP API that Exposes Project Source Code and Build Metadata

    HighCVSS 7.5No exploitEPSS 0%

    web-infra-dev · rsdoctorSep 24, 2026

  • CVE-2026-61788
    29Monitor

    @bytebase/dbhub's read-only mode does not prevent database writes

    HighCVSS 7.4No exploitEPSS 0%

    bytebase · dbhubSep 24, 2026

  • CVE-2026-61815
    28Monitor

    zbateson/mail-mime-parser has CRLF header injection via attachment filename

    HighCVSS 7.2No exploitEPSS 0%

    zbateson · mail-mime-parserSep 24, 2026

  • CVE-2026-61816
    30Monitor

    zbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME

    HighCVSS 7.5No exploitEPSS 0%

    zbateson · mail-mime-parserSep 24, 2026

  • CVE-2026-63645
    30Monitor

    OpenObserve: Unauthenticated /config/runtime endpoint exposes PostgreSQL database credentials

    HighCVSS 7.5No exploitEPSS 0%

    openobserve · openobserveSep 24, 2026

  • CVE-2026-71540
    30Monitor

    Wazuh Manager cluster header parsing allows pre-authentication memory exhaustion

    HighCVSS 7.5No exploitEPSS 0%

    wazuh · wazuhSep 24, 2026

  • CVE-2026-85057
    34Monitor

    ZITADEL: Actions V1 sandbox escape: host file read via require()

    HighCVSS 8.7No exploitEPSS 0%

    zitadel · zitadelSep 24, 2026

  • CVE-2026-48070
    28Monitor

    Docmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion

    HighCVSS 7.1No exploitEPSS 0%

    docmost · docmostSep 24, 2026

  • CVE-2026-57440
    30Monitor

    Mediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled

    HighCVSS 7.5No exploitEPSS 0%

    starcitizenwiki · mediawiki-extensions-embedvideoSep 24, 2026

  • CVE-2026-61823
    29Monitor

    code16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute

    HighCVSS 7.3No exploitEPSS 0%

    code16 · sharpSep 24, 2026

  • CVE-2026-61825
    34Monitor

    code16/sharp has a stored XSS via data-html-content Sanitizer Bypass

    HighCVSS 8.7No exploitEPSS 0%

    code16 · sharpSep 24, 2026

  • CVE-2026-81473
    32Monitor

    Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization vulnerability.

    HighCVSS 8.1No exploitEPSS 0%

    dell · rugged control center (rcc)Sep 24, 2026

  • CVE-2026-82371
    34Monitor

    Plaintext exposure of sensitive authentication data in SANnav discovery service log files

    HighCVSS 8.5No exploitEPSS 0%

    brocade · sannavSep 24, 2026

  • CVE-2026-97230
    39Monitor

    IO::Socket::SSL::SelfCertificate versions 1.00 for Perl contains malware which executes Python code from an obfuscated URL

    CriticalCVSS 9.8No exploitEPSS 0%

    Sep 24, 2026

  • GHSA-g28h-2cmm-rj9x
    30Monitor

    langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs

    HighCVSS 7.5No exploit

    PyPI · langchain-nvidia-ai-endpointsSep 24, 2026

  • CVE-2026-85082
    34Monitor

    Maple Media Root Browser Classic 3.3.0 - OS command injection through crafted SQLite filenames

    HighCVSS 8.5No exploitEPSS 0%

    maple media · root browser classicSep 24, 2026

  • CVE-2026-82372
    34Monitor

    Improper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a

    HighCVSS 8.5No exploitEPSS 0%

    brocade · sannavSep 24, 2026

  • CVE-2026-93289
    36Monitor

    OS command injection in Eufy Omni C20, Omni X10 Pro

    CriticalCVSS 9.0No exploitEPSS 0%

    eufy · omni c20Sep 24, 2026

  • CVE-2026-93291
    37Monitor

    Improper certificate validation in Eufy Omni C20

    CriticalCVSS 9.3No exploitEPSS 0%

    eufy · omni c20Sep 24, 2026

  • CVE-2026-93354
    34Monitor

    Taskview Community Missing Authentication via OAuth Dynamic Client Registration

    HighCVSS 8.5No exploitEPSS 0%

    gimanh · taskview-communitySep 24, 2026

  • CVE-2026-92288
    36Monitor

    Lemonldap::NG::Portal versions from 2.20.0 before 2.21.6, from 2.22.0 before 2.23.4 for Perl allow unauthenticated OAuth2 token introspection because checkEndPo

    CriticalCVSS 9.1No exploitEPSS 0%

    Sep 24, 2026

  • CVE-2026-92289
    36Monitor

    Lemonldap::NG::Portal versions from 2.23.0 before 2.23.4 for Perl allow a PKCE bypass for public Relying Parties in "PKCE or secret" mode because checkEndPointA

    CriticalCVSS 9.1No exploitEPSS 0%

    Sep 24, 2026

  • CVE-2026-14443
    33Monitor

    Incomplete log sanitization during bulk IPsec policy collection in Brocade SANnav before 3.0.1a

    HighCVSS 8.4No exploitEPSS 0%

    brocade · sannavSep 24, 2026

  • CVE-2026-14281
    39Monitor

    Automation Web Platform <= 4.8.6 - Unauthenticated Privilege Escalation via 'wawp_custom_fields' Parameter

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    101gen · automation web platform – notifications and otp for woocommerce, advanced country codeSep 25, 2026

  • CVE-2026-62062
    35Monitor

    WordPress Elementor Website Builder plugin <= 4.3.1 - Cross Site Request Forgery (CSRF) vulnerability

    HighCVSS 8.8Proof of conceptEPSS 0%

    elementor · elementor website builderSep 25, 2026

  • CVE-2026-83591
    28Monitor

    AMP for WP <= 1.1.16 - Unauthenticated Stored Cross-Site Scripting via Comment Content Regex Transformation

    HighCVSS 7.2No exploitEPSS 0%

    mohammed_kaludi · amp for wp – accelerated mobile pagesSep 25, 2026

  • CVE-2026-84279
    28Monitor

    Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'output_format' Parameter via Pro Export Print Job

    HighCVSS 7.2No exploitEPSS 0%

    radykal · fancy product designerSep 25, 2026

  • CVE-2026-84281
    28Monitor

    Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via 'productTitle' in '_fpd_data' Order Item Meta

    HighCVSS 7.2No exploitEPSS 0%

    radykal · fancy product designerSep 25, 2026

  • CVE-2026-89055
    36Monitor

    Customer Reviews for WooCommerce <= 5.120.0 - Missing Authorization to Unauthenticated Arbitrary Attachment Deletion via 'items[][media]' Parameter

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    ivole · customer reviews for woocommerceSep 25, 2026

  • CVE-2026-93303
    28Monitor

    HT Contact Form <= 2.10.1 - Unauthenticated Stored DOM-Based Cross-Site Scripting via 'form_data' Rich Text Field via Draft Save/Resume

    HighCVSS 7.2No exploitEPSS 0%

    htplugins · ht contact form – drag & drop form builder for wordpressSep 25, 2026

  • CVE-2026-93399
    36Monitor

    Online Scheduling and Appointment Booking System <= 28.2 - Insecure Direct Object Reference to Unauthenticated Arbitrary Booking Token Disclosure and Deletion v

    CriticalCVSS 9.1Proof of conceptEPSS 0%

    ladela · online scheduling and appointment booking system – booklySep 25, 2026

  • CVE-2026-96039
    28Monitor

    BA Book Everything <= 1.8.27 - Unauthenticated Stored Cross-Site Scripting via first_name Parameter

    HighCVSS 7.2No exploitEPSS 0%

    bookingalgorithms · ba book everythingSep 25, 2026

  • CVE-2026-97730
    34Monitor

    In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) wi

    HighCVSS 8.5No exploitEPSS 1%

    netgate · pfsense plusSep 25, 2026

  • CVE-2026-97731
    28Monitor

    MinIO through 7aac2a2 does not verify that every x-amz-* header present on a request also appears in the client-supplied X-Amz-SignedHeaders

    HighCVSS 7.1No exploitEPSS 0%

    minio · minioSep 25, 2026

  • CVE-2026-13456
    30Monitor

    WP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter

    HighCVSS 7.5No exploitEPSS 0%

    flippercode · wp maps – google maps, openstreetmap, mapbox, store locator with search, filters & listingsSep 25, 2026

  • CVE-2026-19804
    35Monitor

    s2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return

    HighCVSS 8.8No exploitEPSS 1%

    clavaque · s2member – excellent for all kinds of memberships, content restriction paywalls & member access subscriptionsSep 25, 2026

  • CVE-2026-84280
    28Monitor

    Fancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    radykal · fancy product designerSep 25, 2026

  • CVE-2026-88996
    24Monitor

    WPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter

    MediumCVSS 6.1Proof of conceptEPSS 0%

    smub · wpforms – ai form builder for wordpress – contact forms, payment forms, survey form, quiz & moreSep 25, 2026

  • CVE-2026-89406
    30Monitor

    Modula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Paramete

    HighCVSS 7.5No exploitEPSS 0%

    wpchill · modula image gallery – photo grid & video gallerySep 25, 2026

  • CVE-2026-89426
    35Monitor

    Knit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field

    HighCVSS 8.8No exploitEPSS 0%

    knitpay · knit pay – cashfree, instamojo, razorpay, paypal and moreSep 25, 2026

  • CVE-2026-92713
    32Monitor

    Modula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter

    HighCVSS 8.1No exploitEPSS 0%

    wpchill · modula image gallery – photo grid & video gallerySep 25, 2026

  • CVE-2026-93654
    28Monitor

    Premium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    codename065 · premium packages – sell digital products securelySep 25, 2026

  • CVE-2026-93901
    29Monitor

    Optima Express IDX <= 8.7.5 - Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment

    HighCVSS 7.3No exploitEPSS 0%

    ihomefinder · optima express idxSep 25, 2026

  • CVE-2026-94573
    28Monitor

    Repeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value

    HighCVSS 7.2No exploitEPSS 0%

    addonsorg · repeater fields for elementor formsSep 25, 2026

  • CVE-2026-95864
    28Monitor

    Themify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    themifyme · themify builderSep 25, 2026

  • CVE-2026-95866
    28Monitor

    User Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field

    HighCVSS 7.2No exploitEPSS 0%

    cozmoslabs · user profile builder – beautiful user registration forms, user profiles & user role editorSep 25, 2026

  • CVE-2026-96568
    28Monitor

    Restaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter

    HighCVSS 7.2No exploitEPSS 0%

    jetmonsters · restaurant menu and food orderingSep 25, 2026

  • CVE-2026-96752
    28Monitor

    Zero Spam for WordPress <= 5.7.10 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration

    HighCVSS 7.2No exploitEPSS 0%

    bmarshall511 · zero spam for wordpressSep 25, 2026

  • CVE-2026-97735
    32Monitor

    ITFlow before 26.08 allows SVG attachments in the ticket email parser (cron/ticket_email_parser.php) for email messages that may arrive over

    HighCVSS 8.0No exploitEPSS 0%

    itflow · itflowSep 25, 2026

  • CVE-2026-97737
    29Monitor

    In Wakapi before 2.17.6, the user caching service allows a lookup to be resolved in an unintended lookup context, leading to account takeove

    HighCVSS 7.4No exploitEPSS 0%

    muety · wakapiSep 25, 2026

  • CVE-2026-97818
    34Monitor

    phpIPAM through 1.8.3 has incorrect authorization for id=="admins" and id=="all" in api/controllers/User.php.

    HighCVSS 8.6No exploitEPSS 0%

    phpipam · phpipamSep 25, 2026

  • CVE-2026-97898
    33Monitor

    Broken authorization in Akia keyless entry lets an authenticated guest unlock other rooms

    HighCVSS 8.4No exploitEPSS 0%

    akia · akiaSep 25, 2026

  • CVE-2026-92608
    30Monitor

    Apache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-10

    HighCVSS 7.5No exploitEPSS 0%

    apache · qpid broker-jSep 25, 2026

  • CVE-2026-92609
    39Monitor

    Apache Qpid Broker-J: Missing HTTP-session renewal after successful authentication

    CriticalCVSS 9.8No exploitEPSS 0%

    apache · qpid broker-jSep 25, 2026

  • CVE-2026-92550
    30Monitor

    Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder

    HighCVSS 7.5No exploitEPSS 0%

    apache · qpid broker-jSep 25, 2026

  • CVE-2026-92560
    30Monitor

    Apache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder

    HighCVSS 7.5No exploitEPSS 0%

    apache · qpid broker-jSep 25, 2026

  • CVE-2026-92564
    30Monitor

    Apache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing

    HighCVSS 7.5No exploitEPSS 0%

    apache · qpid broker-jSep 25, 2026

  • CVE-2026-100172
    34Monitor

    Stored XSS in AIL Framework extracted-match popovers via unescaped dynamic values in HTML-enabled data-content attributes

    HighCVSS 8.5No exploitEPSS 0%

    ail project · ail frameworkSep 25, 2026

  • CVE-2026-100176
    34Monitor

    Stored Cross-Site Scripting (XSS) in AIL Framework Username Timeline Tooltip

    HighCVSS 8.5No exploitEPSS 0%

    ail project · ail frameworkSep 25, 2026

  • CVE-2026-85750
    28Monitor

    Piwigo arbitrary file read and remote code execution via insecure image processing

    HighCVSS 7.2No exploitEPSS 1%

    piwigo · piwigoSep 25, 2026

  • CVE-2026-97523
    30Monitor

    mptcp: close race between scheduler and state change

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97524
    30Monitor

    mptcp: avoid unneeded actions on subflow reset

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97525
    32Monitor

    x86/mm/pat: Allocate split page tables as kernel page tables

    HighCVSS 8.2No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97527
    35Monitor

    scsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97528
    35Monitor

    scsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error

    HighCVSS 8.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97531
    30Monitor

    scsi: qla2xxx: Skip vport under deletion in report ID acquisition

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97536
    30Monitor

    scsi: qla2xxx: Fix use-after-free of qpair work on queue teardown

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97548
    31Monitor

    xfs: fix the rtrmap and rtrefcount _maxlevels_ondisk functions

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97555
    35Monitor

    smb: client: fix heap overflow in DACL owner/group rewrite

    HighCVSS 8.8Proof of conceptEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97557
    30Monitor

    smb: client: avoid leaking refcount in cifs_queue_oplock_break()

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97562
    30Monitor

    smb: client: pin DFS superblock in iterator callback

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97570
    32Monitor

    bnxt_en: Bound SW TPA IDs to prevent crashes

    HighCVSS 8.1No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97573
    32Monitor

    bnxt_en: Handle buffer allocation failure in bnxt_rx_ring_reset()

    HighCVSS 8.1No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97575
    31Monitor

    media: v4l2-ctrls: validate AV1 tile counts

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97576
    31Monitor

    media: v4l2-ctrls: validate HEVC tile counts

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97577
    31Monitor

    media: verisilicon: rockchip: reject AV1 frames exceeding the tile capacity

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97578
    31Monitor

    media: verisilicon: rockchip: guard VPU981 AV1 divisor and tile buffer

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97579
    31Monitor

    media: mediatek: vcodec: bound AV1 tile-start copy to the array capacity

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97580
    31Monitor

    media: rkvdec: bound HEVC tile loops and PPS id to the array capacity

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97583
    30Monitor

    afs: Clear stale peer app data after address list changes

    HighCVSS 7.5No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97584
    31Monitor

    afs: Fix incorrect free in candidate cleanup in afs_lookup_server()

    HighCVSS 7.8No exploitEPSS 0%

    linux · linuxSep 25, 2026

  • CVE-2026-97589
    28Monitor

    s390/crypto: Fix wrong return code to engine in asynch callbacks

    HighCVSS 7.0No exploitEPSS 0%

    linux · linuxSep 25, 2026