Vulnerebility
H
ECV
KB
KEV
MICROSOFT PATCH
WINDOWS UPDATE
Top 50 in years
|
2026
2025
| CPU VULNEREBILITY
SOFTWARE PATCH REPORTS
DRIVE VULNEREBILITY
Vulnerebility Calendar Top Vulnerebility
List of Attack
CWE LIST
Anti-Debug
Tricks
2026 January February March April May June July August September October November December
|
DATE |
NAME |
INFO |
CATEGORY |
SUBCATE |
|
5.10.26 |
Horizon3’s Tales from the Trenches: Anthropic’s Mythos and Rejetto HFS | Anthropic started Project Glasswing with the mission of securing the world’s most critical software. Since joining the project in July of 2026, Horizon3 has used Anthropic’s Mythos model in its vulnerability research pipelines to discover many critical vulnerabilities. Horizon3’s participation in the project came with our own internal mission to find vulnerabilities likely to be found and exploited in the wild by threat actors at scale. | VULNEREBILITY | VULNEREBILITY |
|
5.10.26 |
CVE-2026-61500 | Rejetto HFS 3.0.0 through 3.2.0 derives its session... | VULNEREBILITY | VULNEREBILITY |
|
5.10.26 |
CVE-2026-88779 | Citrix NetScaler ADC and Citrix NetScaler Gateway Security Bulletin for CVE-2026-88779 | VULNEREBILITY | VULNEREBILITY |
|
4.10.26 |
CVE-2026-104286 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMail 7.4.0 through 7.4.8, FortiMail 7.2.0 through 7.2.9 may allow an unauthenticated attacker to write arbitrary files on the underlying system via crafted HTTP or HTTPS requests. | VULNEREBILITY | VULNEREBILITY |
|
4.10.26 |
CVE-2026-92371 | TeamViewer Full Client and Host for Linux prior version 15.82 contains an improper path validation vulnerability in the Cloud Session Recording (CSR) functionality. By exploiting a race condition during path validation and subsequent file access, a local authenticated attacker may cause privileged file operations in unintended locations on the affected system. | VULNEREBILITY | VULNEREBILITY |
|
4.10.26 |
CVE-2026-92369 | TeamViewer Full Client and Host prior to version 15.82 on Windows contain a TOCTOU race condition in the installer rollback mechanism. A local low-privileged attacker can replace rollback backup files stored in a user-writable temporary directory before they are restored by an elevated installer, resulting in privilege escalation to NT AUHORITY/SYSTEM. Exploitation requires successful timing of the race condition and a rollback during installation or update. | VULNEREBILITY | VULNEREBILITY |
|
4.10.26 |
CVE-2026-19743 | Improper path validation in the local IPC service of TeamViewer Full Client and Host on Windows, Linux, and macOS prior to version 15.82 allows a local authenticated user with low privileges to perform arbitrary file writes with elevated privileges (NT AUTHORITY/SYSTEM \ root). By sending crafted IPC commands to the local service daemon, an attacker could manipulate file paths, leading to local privilege escalation. | VULNEREBILITY | VULNEREBILITY |
|
4.10.26 |
CVE-2026-92368 | TeamViewer Full Client and Host for Linux and macOS prior version 15.82 contain a heap-based buffer overflow vulnerability in the processing of .tvs session recording files. A size mismatch during decompression of recorded session data can result in out-of-bounds heap writes. By convincing a user to open a specially crafted session recording through the "Play or convert recorded session…" feature, an attacker may achieve arbitrary code execution with the privileges of the current user | VULNEREBILITY | VULNEREBILITY |
|
4.10.26 |
CVE-2026-92370 | An improper access control vulnerability in TeamViewer Full Client, Host, and related affected modules on Windows, Linux, and macOS allows an authenticated remote attacker to bypass user-configured permission settings during session establishment. By modifying access control parameters for restricted features, an attacker can perform actions that were explicitly denied by the victim's configuration. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
Cisco Catalyst SD-WAN Manager API Authentication Bypass Vulnerability | A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to access an affected system with privileges of the admin user.This vulnerability is due to improper handling of URI encoding | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
Cisco IOS XE Software Security Hardening Release: August 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XE Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-90970 | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.1.6 before 19.2.4, 19.3 before 19.3.2, and 19.4 before 19.4.1 that, under certain conditions, could have allowed an authenticated user with Duo Agent Platform access to escape the prompt template sandbox via a specially crafted flow configuration, resulting in arbitrary command execution on the AI Gateway. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-67273 | (CVSS score: 9.6) - An improper neutralization of special elements used in a template engine vulnerability that a low-privilege attacker with remote access could exploit to escalate privileges, access sensitive information, and carry out unauthorized RBAC tampering. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-61421 | (CVSS score: 9.8) - A use of hard-coded cryptographic key vulnerability in the JWT authentication component of karavi-authorization that a remote unauthenticated attacker with knowledge of this publicly available signing secret could exploit to forge authentication tokens and gain administrative privileges. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-54472 | (CVSS score: 9.8) - A use of hard-coded credentials vulnerability in the CSM Authorization module that a remote unauthenticated attacker could exploit to forge cryptographically valid administrative tokens and gain unauthorized administrative access to the CSM Authorization proxy. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-67269 | (CVSS score: 9.9) - An improper privilege management vulnerability in the ContainerStorageModule Custom Resource reconciler that a low-privilege remote attacker could exploit to escalate privileges and gain root-level access on cluster nodes. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-63692 | (CVSS score: 10.0) - A missing authentication for critical function vulnerability in the authorization proxy and tenant service that an unauthenticated network attacker could exploit to bypass authentication controls and gain administrative-level privileges. | VULNEREBILITY | VULNEREBILITY |
|
3.10.26 |
CVE-2026-63688 | (CVSS score: 10.0) - A missing authentication for critical function vulnerability in the csm-authorization-storage gRPC server that an unauthenticated remote attacker could exploit to obtain unauthorized access to storage backend administrator credentials for all registered storage arrays. | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86950 | CVE-2026-86950: The Great Glyph Grift | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86134 Fireware OS Pre-Authentication NULL Pointer Dereference Allows Remote Denial of Service | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86104 Fireware OS Resource Exhaustion in Login Process Allows Denial of Service | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-18145 Fireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-13046 Fireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86101 Fireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86133 Fireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-13224 Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86132 Fireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86105 Fireware OS Improper Authorization in Access Portal Reverse Proxy | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-90441 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86131 Fireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86136 Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A | Default>= 2026.0, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-81433 Fireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution | Fireware OS>= 2026.3, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86128 Fireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service | Default>= 2026.3, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-18105 Fireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service | Default>= 2026.3, < 2026.3.2, >= 2025.0, < 2026.2.3, >= 12.0, < 12.12.3>= 2026.3.2, >= 2026.2.3, >= 12.12.3T15/T35>= 12.0, < 12.5.21>= 12.5.21 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-101891 WatchGuard AP Improper Access Control in API Service Allows Unauthenticated Access | WatchGuard AP>= 1.0, < 3.4.8>= 3.4.8 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-86102 WatchGuard AP Command Injection in Internal Management API Allows Command Execution | WatchGuard AP>= 1.0, < 3.4.8>= 3.4.8 | VULNEREBILITY | VULNEREBILITY |
|
1.10.26 |
CVE-2026-87969 WatchGuard AP Authenticated Command Injection in Diagnostic CLI | WatchGuard AP>= 1.0, < 3.4.8>= 3.4.8 | VULNEREBILITY | VULNEREBILITY |
|
30.9.26 |
CVE-2026-64507 | x86/bugs: Enable IBPB flush on BPF JIT allocation | ||
|
30.9.26 |
CVE-2026-64508 | bpf: Support for hardening against JIT spraying | ||
|
30.9.26 |
CVE-2026-63072 | Fixed heap buffer overflow in CMS key unwrapping. | ||
|
30.9.26 |
CVE-2026-63076 | Fixed invalid pointer dereference in CMP server via crafted protectionAlg. | ||
|
30.9.26 |
CVE-2026-63076 | Fixed invalid pointer dereference in CMP server via crafted protectionAlg. | ||
|
30.9.26 |
CVE-2026-54874 | Fixed excessive memory use buffering DTLS records for a future epoch. | ||
|
30.9.26 |
CVE-2026-75803 | Fixed possibility of AEAD forgeries with empty ciphertext when using EVP_Cipher(). | ||
|
29.9.26 |
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and iPadOS 26.7.1, macOS Sequoia 15.8.1, macOS Tahoe 26.7.1. Processing a maliciously crafted file may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on versions of iOS before iOS 27. | |||
|
28.9.26 |
CVE-2026-88772 | Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote Code Execution or Denial of Service | ||
|
28.9.26 |
CVE-2026-88771 | Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to an unauthenticated attacker to execute arbitrary commands. | ||
|
27.9.26 |
CVE-2026-42608 | [ZERO-DAY] Unauthenticated Path Traversal & Arbitrary File Write in FormFlash component. | ||
|
27.9.26 |
CVE-2026-63077 | In JetBrains TeamCity before 2026.1.3, 2025.11.7 unauthenticated remote code execution was possible via the agent polling protocol | ||
|
27.9.26 |
CVE-2025-6543 | Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server | ||
|
26.9.26 |
CVE-2021-27101 | SQL injection via a crafted Host header | ||
|
26.9.26 |
CVE-2021-27102 | OS command execution via a local web service call | ||
|
26.9.26 |
CVE-2021-27103 | SSRF via a crafted POST request | ||
|
26.9.26 |
CVE-2021-27104 | OS command execution via a crafted POST request | ||
|
25.9.26 |
CVE-2025-49113 | (CVSS score: 9.9) - A deserialization of untrusted data vulnerability that allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php. (Fixed in June 2025) | ||
|
25.9.26 |
CVE-2025-68461 | (CVSS score: 7.2) - A cross-site scripting vulnerability via the animate tag in an SVG document. (Fixed in December 2025) | ||
|
25.9.26 |
CVE-2026-48842 | CVE-2026-48842 is a pre-authentication SQL injection flaw in Roundcube Webmail's virtuser_query plugin that exploits a preg_replace() backslash escape bypass. This article covers technical details, affected versions, and mitigation. | ||
|
25.9.26 |
CVE-2026-5430 | (CVS score: 9.8) - A path traversal vulnerability in WSO2 API Control Plane, API Manager, Traffic Manager and Universal Gateway that could allow unrestricted file upload and lead to remote code execution. | ||
|
25.9.26 |
CVE-2026-71362 | (CVSS score: 9.1) - An incorrect authorization vulnerability in Adobe Commerce and Magento that could allow an attacker to leverage this vulnerability to gain elevated access to sensitive resources without any user interaction. | ||
|
25.9.26 |
CVE-2025-10184 | CVE-2025-10184: OnePlus OxygenOS Telephony provider permission bypass (FIXED as of October 11, 2025) | ||
|
25.9.26 |
Cisco Identity Services Engine Authentication Bypass Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device. | ||
|
24.9.26 |
CVE-2026-67276 | RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an authorized user key, checking the key type and modulus but omitting the exponent. Because signature verification uses the client-supplied key, an attacker knowing an authorized RSA modulus can supply a key with exponent one, forge a valid signature, and open an SSH command channel as the target user without the private key. | ||
|
24.9.26 |
CVE-2026-67277 | RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentication. An unauthenticated client can use this state to start an IPv4 UDP test. With "random-data=false", the sender transmits an uninitialized tail from a kernel packet buffer. | ||
|
24.9.26 |
CVE-2026-67279 | RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was never attempted, allowing an unauthenticated client to open a session channel and send an exec request. | ||
|
24.9.26 |
CVE-2026-67281 | RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocated session retains a stale uninitialized principal pointer used for file authorization. | ||
|
24.9.26 |
CVE-2026-86060 | RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited character, allowing for the trusted RouterOS policy mask to be changed, leading to privilege escalation. Exploitation requires an unauthenticated SSH session to reach the RouterOS login helper. | ||
|
24.9.26 |
CVE-2026-67278 | MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509 certificate validation and SSH host-key authentication. | ||
|
23.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability | Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco | ||
|
23.9.26 |
CVE-2026-80521 | af_unix: Unlink scc_entry in unix_del_edge(). | ||
|
23.9.26 |
CVE-2026-94545 | This candidate has been reserved by an organization or individual " "that will use it when announcing a new security problem. When the candidate has been " "publicized, the details for this candidate will be provided. | ||
|
23.9.26 |
CVE-2026-86296 | A vulnerability was determined in D-Link DIR-822A A_101. This vulnerability affects the function strcpy of the file udhcpcd/serverpacket.c of the component udhcpcd. This manipulation causes stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. | ||
|
23.9.26 |
CVE-2026-87902 | Unauthenticated path traversal in page-template resolution leading to conditional RCE | ||
|
23.9.26 |
A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges. |
|||
|
23.9.26 |
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. |
|||
|
23.9.26 |
Bifrost is a high-performance AI gateway that unifies access to 23+ providers (OpenAI, Anthropic, AWS Bedrock, Google Vertex, and more) through a single OpenAI-compatible API. Deploy in seconds with zero configuration and get automatic failover, load balancing, semantic caching, and enterprise-grade features. |
|||
|
23.9.26 |
Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth off means every caller is a local admin. One unauthenticated POST /api/mcp/client is enough to run a program as the Bifrost process user (appuser on the official image). transports/v2.1.0 refuses an unauthenticated stdio registration with 403. transports/v2.0.0 still allows it. |
|||
|
22.9.26 |
This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |
|||
|
22.9.26 |
Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an authorized attacker to elevate privileges locally. |
|||
|
22.9.26 |
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64: Handle negative S1 walk levels in VNCR TLB size evaluation Computing the effects of a TLB invalidation involves looking at the size of the mapping cached by the TLB. |
|||
|
22.9.26 |
CVE-2026-65660 | Improper control of generation of code ('code injection') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. | VULNEREBILITY | VULNEREBILITY |
|
22.9.26 |
CVE-2026-93485 | Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Automattic WordPress core allows DOM-Based XSS | VULNEREBILITY | VULNEREBILITY |
|
20.9.26 |
CVE-2026-28326 | SolarWinds Access Rights Manager was reported to be affected by an unauthenticated remote code execution vulnerability. The issue stems from a hardcoded static key. | VULNEREBILITY | VULNEREBILITY |
|
19.9.26 |
CoSnitch | See how meta-hacking got Microsoft Copilot to snitch on itself, exposing CoSnitch, a one-click flaw that silently exfiltrates data. | VULNEREBILITY | VULNEREBILITY |
|
19.9.26 |
DirtyAH6 CVE-2026-80844 | IPsec’s Authentication Header (AH) checks that packet data has not changed. Linux implements its IPv6 side in AH6, using the kernel’s XFRM code; before calculating or checking authentication data, AH6 changes some IPv6 fields into the expected form, including addresses in a routing header. | ||
|
19.9.26 |
TUNderflow CVE-2026-81000 | TUN and TAP are virtual network devices that move packets between the kernel and userspace through /dev/net/tun. Network devices built on top of other devices can pass down the receive headroom they need through ndo_set_rx_headroom(), and Open vSwitch can carry that value from another port to a TUN or TAP port. | ||
|
19.9.26 |
PPPoEject CVE-2026-68121 | PPPoE carries PPP sessions in Ethernet frames. On send, pppoe_sendmsg() builds an skb, copies in the payload, and asks the lower network device to create its hardware header before filling in the PPPoE header. | ||
|
19.9.26 |
DiagSpill CVE-2026-74469 | An SCTP association can have many peer transports, one for each peer address. sctp_diag reports SCTP socket and peer information through sock_diag, building a Netlink reply with one sockaddr_storage for each transport. | ||
|
19.9.26 |
Click2Shell | One month after XSS2Shell, we returned to WordPress Core looking for another pre-authentication RCE chain. This time there was no preauth XSS in Core. Instead we found a specially crafted preview link made WordPress install an attacker-selected catalog theme and load its PHP before activation. | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software and Cisco Secure Firewall Management Center (FMC) Software engineering team has conducted | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability | A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability | A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability | A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability | A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities | Multiple vulnerabilities in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured | ||
|
18.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability | A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart | ||
|
18.9.26 |
Cisco IOS XR Software Security Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities | ||
|
18.9.26 |
Cisco Secure Email Gateway SQL Injection Vulnerability | A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.This vulnerability is due to insufficient | ||
|
18.9.26 |
CVE-2026-85889 | Azure AI Foundry Elevation of Privilege Vulnerability | ||
|
18.9.26 |
CVE-2026-85885 | (CVSS score: 9.9) - A command injection vulnerability in Microsoft 365 Copilot that could allow an authorized attacker to elevate privileges over a network | ||
|
18.9.26 |
CVE-2026-85878 | (CVSS score: 9.9) - An improper authorization in Azure Database for PostgreSQL that could allow an authorized attacker to elevate privileges over a network | ||
|
18.9.26 |
CVE-2026-87701 | (CVSS score: 9.6) - An improper neutralization vulnerability in Azure Cosmos DB that could allow an authorized attacker to elevate privileges over a network | ||
|
18.9.26 |
CVE-2026-62721 | (CVSS score: 7.8) - An insufficient granularity of access control in Windows User-Mode Power Service (UMPS) that could allow an authorized attacker to elevate privileges locally and gain SYSTEM privileges. | ||
|
18.9.26 |
CVE-2026-85921 | (CVSS score: 8.2) - A double free vulnerability in Windows Secure Kernel Mode that could allow an authorized attacker to elevate privileges locally and gain Virtual Trust Level 1 (VTL1) privileges. | ||
|
18.9.26 |
Plugin4Shell | Plugin4Shell - Zero Click RCE Vulnerability found in top 4 most popular coding agents, millions of agents affected | ||
|
17.9.26 |
Cisco Advance Notification for Publication of September 16, 2026, Security Advisories | On September 16, 2026, the Cisco Product Security Incident Response Team (PSIRT) published the advisories that are listed in the following tables. To remediate these vulnerabilities, Cisco strongly recommends that customers upgrade to the fixed software that is indicated in the | ||
|
17.9.26 |
Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability | A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot Application Software could allow an authenticated, remote attacker with low privileges to alter configurations on an affected device.This vulnerability is due to missing authorization checks. An | ||
|
17.9.26 |
Cisco Identity Services Engine 802.1X Session Hijack and Information Disclosure Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an unauthenticated, local attacker to either conduct an authentication bypass or disclose sensitive information.For more information about these vulnerabilities, see the Details | ||
|
17.9.26 |
Cisco Identity Services Engine Authenticated Remote Code Execution and API Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to conduct SQL injections, modify data, or execute arbitrary commands on the underlying operating system on an affected device.For more information about these vulnerabilities, | ||
|
17.9.26 |
Cisco Identity Services Engine Authentication Bypass Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to access or manipulate data, obtain sensitive information, or cause a reload of certificate and key material on an affected device.For more | ||
|
17.9.26 |
Cisco Identity Services Engine Authentication Bypass Vulnerability | A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication.This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vulnerability by sending a | ||
|
17.9.26 |
Cisco Identity Services Engine Authorization Bypass Vulnerabilities | Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to modify parts of the configuration on an affected device.These vulnerabilities are | ||
|
17.9.26 |
Cisco Identity Services Engine Command Injection Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to perform command injection attacks on an affected device and execute arbitrary commands as the root user. To exploi | ||
|
17.9.26 |
Cisco Identity Services Engine Cross-Site Scripting Vulnerability | A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface.This vulnerability exists because the web-based | ||
|
17.9.26 |
Cisco Identity Services Engine Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) engineering teams have conducted a comprehensive internal security review. This review resulted in software hardening | ||
|
17.9.26 |
Cisco Identity Services Engine Information Disclosure Vulnerability | A vulnerability in the API of Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to view sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials.This vulnerability is due to | ||
|
17.9.26 |
Cisco Identity Services Engine Multiple Path Traversal Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to conduct path traversal attacks on an affected device.For more information about these vulnerabilities, see the | ||
|
17.9.26 |
Cisco Identity Services Engine RADIUS Denial of Service Vulnerability | A vulnerability in the RADIUS feature of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device.This vulnerability is due to improper handling of certain RADIUS requests. An attacker could | ||
|
17.9.26 |
Cisco Identity Services Engine Remote Code Execution Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected device. To exploit these vulnerabilities, the attacker must have valid administrative | ||
|
17.9.26 |
Cisco Identity Services Engine SQL and HQL Injection Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow an authenticated, remote attacker to conduct SQL or HQL injection attacks on an affected device.These vulnerabilities are due to insufficient validation of | ||
|
17.9.26 |
Cisco Identity Services Engine SQL Injection Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) could allow a remote attacker to conduct SQL injection attacks on an affected device.For more information about these vulnerabilities, see the Details section of this advisory.Cisco has | ||
|
17.9.26 |
Cisco Identity Services Engine Vulnerabilities | Multiple vulnerabilities in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) could allow a remote attacker to bypass authentication to the REST API, achieve remote code execution, perform SQL injection, and conduct XML External Entity injection attacks on | ||
|
17.9.26 |
Cisco Integrated Management Controller Argument Injection Vulnerabilities | Multiple vulnerabilities in the web-based management interface of Cisco Integrated Management Controller (IMC) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system of an affected system and elevate privileges to | ||
|
17.9.26 |
Cisco IOS XR Software Security Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. | ||
|
17.9.26 |
Cisco Nexus Dashboard Software Security Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Nexus Dashboard engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered | ||
|
17.9.26 |
Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address | ||
|
17.9.26 |
Cisco Secure Email Gateway SQL Injection Vulnerability | A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system.This vulnerability is due to insufficient | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability | A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability | A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability | A vulnerability in the certification authentication feature of Internet Key Exchange version 2 (IKEv2) for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability | A vulnerability in the system rate-limiting process for syslog message 419002 of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause high CPU utilization on an affected | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Object Group Access Control List Bypass Vulnerabilities | Multiple vulnerabilities in the access control list (ACL) Object Group Search (OGS) implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to bypass configured | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerability | A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability | Update for September 16, 2026: The original 1.0 version of this advisory was specific to the Cisco Adaptive Security Virtual Appliance (ASAv) and Cisco Secure Firewall Threat Defense Virtual (FTDv) models. However, it was later found that this vulnerability affects all Cisco | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability | A vulnerability in the DNS over TCP implementation of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the TCP DNS response handler to unexpectedly restart, | ||
|
17.9.26 |
Cisco Secure Firewall Adaptive Security Appliance, Secure Firewall Threat Defense, and Secure Firewall Management Center Software Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software and Cisco Secure Firewall Management Center (FMC) Software engineering team has conducted a | ||
|
17.9.26 |
Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software sftunnel Vulnerabilities | Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated attacker to perform an sftunnel authentication bypass or sftunnel denial of service (DoS) attack.For more information | ||
|
17.9.26 |
Cisco Secure Firewall Management Center Software Authentication Bypass Vulnerability | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass authentication and execute script files on an affected device to obtain root access to the underlying operating | ||
|
17.9.26 |
Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability | A vulnerability in the External Database Access feature of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to execute arbitrary commands as root on an affected device.This vulnerability is due to insecure | ||
|
17.9.26 |
Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability | A vulnerability in the sftunnel inter-device communication protocol of Cisco Secure Firewall Management Center (FMC) Software could allow an authenticated, remote attacker to execute arbitrary commands as root.This vulnerability exists because a registered sftunnel peer has | ||
|
17.9.26 |
Cisco Secure Firewall Management Center Software Static Credential Vulnerability | A vulnerability in the web interface of Cisco Secure Firewall Management Center (FMC) Software could allow an unauthenticated, remote attacker to log in to an affected device using a low-privileged account to access sensitive data within the impacted systems.This vulnerability is due | ||
|
17.9.26 |
Cisco Secure Firewall Management Center Software Vulnerabilities | Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software could allow a remote attacker to gain root access and perform session forgery or session impersonation.For more information about these vulnerabilities, see the | ||
|
17.9.26 |
Cisco Secure Firewall Management Center Software Vulnerabilities | Multiple vulnerabilities in Cisco Secure Firewall Management Center (FMC) Software could allow a remote attacker to gain root access, download sensitive files, perform a SQL injection attack, or cause a denial of service (DoS) condition.For more information about these | ||
|
17.9.26 |
Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability | A vulnerability in SSL/TLS certificate parsing in the Snort 2 Detection Engine of Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the Snort 2 Detection Engine to restart.This vulnerability is due to incomplete validation of | ||
|
17.9.26 |
Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability | A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service (DoS) condition.This vulnerability is due to | ||
|
17.9.26 |
Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability | A vulnerability in the web-based management interface of Cisco ThousandEyes Virtual Appliance could allow an authenticated, remote attacker to inject arbitrary operating system commands.This vulnerability is due to improper validation of user-supplied input to the web-based management | ||
|
17.9.26 |
Cisco UCS and UCS-Based Appliances UEFI Shell Secure Boot Bypass Vulnerability | A vulnerability in the Unified Extensible Firmware Interface (UEFI) Shell implementation of Cisco UCS Servers and UCS-based appliances could allow an authenticated attacker with valid credentials for a user account with the role of user or 'mce-annotation tox-comment | ||
|
17.9.26 |
If a BIND resolver has cached a tree of SVCB/HTTPS AliasMode records, ... |
|||
|
17.9.26 |
A BIND resolver encountering an SVCB/HTTPS AliasMode record referencin ... |
|||
|
17.9.26 |
If a BIND resolver sends a query for a DNSSEC-signed authoritative zon ... |
|||
|
17.9.26 |
A malformed zone may contain an NS or DNAME node above its origin, whi ... |
|||
|
17.9.26 |
An attacker can cause `named` to abort by sending a crafted DNS-over-H .. |
|||
|
17.9.26 |
A validly signed NSEC3 from an unrelated sibling zone may be accepted ... |
|||
|
17.9.26 |
If BIND is loaded with a "`named.conf`" file that contains no global " .. |
|||
|
17.9.26 |
In a query response, an attacker may send `named` multiple copies of a ... |
|||
|
17.9.26 |
An inapplicable NSEC record may be accepted by a `named` resolver as p ... |
|||
|
17.9.26 |
A BIND recursive resolver may experience excessive resource consumptio ... |
|||
|
17.9.26 |
If an attacker-controlled authoritative server can produce a negative ... |
|||
|
17.9.26 |
On a resolver configured to use ``dns64``, if an applicable answer fro ... |
|||
|
17.9.26 |
An attacker may be able to cause a `named` resolver to abort. The atta ... |
|||
|
17.9.26 |
For a secondary zone with transfers restricted by TSIG, `named` may st ... |
|||
|
17.9.26 |
If a `named` caching resolver is configured with `serve-stale-enable` ... |
|||
|
17.9.26 |
The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT signing key in the pbxapi index.php file that is identical across every installation, allowing unauthenticated remote attackers to forge valid bearer tokens. |
|||
|
17.9.26 |
Microsoft Exchange Server Remote Code Execution Vulnerability |
|||
|
17.9.26 |
Parallels Desktop runs prl_disp_service as root. Local clients reach it on the world-writable socket /var/run/prl_disp_service.socket. PrlSrv_LoginLocal accepts peer credentials. |
|||
|
16.9.26 |
Pixel Update Bulletin—September 2026 | The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices (Google devices). For Google devices, security patch levels of 2026-09-05 or later address all issues in this bulletin and all issues in the September 2026 Android Security Bulletin. To learn how to check a device's security patch level, see Check and update your Android version. | VULNEREBILITY | SOFTWARE PATCH REPORTS |
|
16.9.26 |
CVE-2026-87886 | Local privilege escalation due to insecure file permissions | VULNEREBILITY | VULNEREBILITY |
|
16.9.26 |
CVE-2026-58704 | In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. | VULNEREBILITY | VULNEREBILITY |
|
16.9.26 |
CVE-2026-78159 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.3 via the parse_array function. This is due to insufficient validation of the widget 'classes' map, allowing a plain-array payload to bypass the is_safe_widget_instance() object check and reach the callable-invocation sink in Element_Classes::parse_array(). | VULNEREBILITY | VULNEREBILITY |
|
16.9.26 |
CVE-2026-78006 | The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 6.17.4 via the is_safe_widget_instance function. This is due to insufficient protection in is_safe_widget_instance, which can be bypassed because PHP fires magic methods during its pre-parse, combined with enable_rendering_widget_copied() forging a valid wp_hash integrity attribute before unserialize() is reached. | VULNEREBILITY | VULNEREBILITY |
|
16.9.26 |
CVE-2026-5430 | The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows an attacker to craft a JWT with an unsupported algorithm, which is then incorrectly validated, leading to unauthorized access. | VULNEREBILITY | VULNEREBILITY |
|
15.9.26 |
CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection Vulnerability | VULNEREBILITY | VULNEREBILITY |
|
15.9.26 |
CVE-2024-21762 | A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests | VULNEREBILITY | VULNEREBILITY |
|
15.9.26 |
CVE-2026-60004 | Gitea before 1.27.1 allows remote code execution via the diffpatch API through Git hook installation. | VULNEREBILITY | VULNEREBILITY |
|
13.9.26 |
CVE-2025-14733 | An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv2 when configured with a dynamic gateway peer. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-58231 | SAP Commerce Cloud allows an unauthenticated attacker to abuse a default authentication client and submit specially crafted input to certain functions lacking sufficient validation. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-58240 | SAP NetWeaver Message Server does not sufficiently validate the authenticity of internal application server components during registration. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-85706 | Path Traversal issue in repository commits API impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-87719 | Insecure Deserialization issue in GraphQL subscription serializer impacts GitLab EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-88765 | Buffer Overflow issue in Unicode conversion wrapper impacts GitLab EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-79708 | Scheduled Pipeline Execution Policy test allows Developers to access protected CI/CD variables | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-78252 | Cross-site Scripting issue in Markdown JSON table renderer impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-13210 | Incorrect Authorization issue in CI/CD environment variable scope matcher impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2025-14871 | Denial of Service issue in GraphQL complexity limiter impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-1168 | Denial of Service issue in GraphQL complexity limiter impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2024-11222 | Race Condition issue in Merge Request Pipelines impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-12910 | Improper Authentication issue in SAML SSO sign-in restriction enforcement impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-82837 | Insufficiently Protected Credentials issue in Workhorse senddata emitters impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-19619 | Cross-site Scripting issue in Content Editor impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-86341 | Access Control Implementation issue in protected environment approval rules impacts GitLab EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-86340 | Authorization Bypass issue in protected environment approval rules impacts GitLab EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-7514 | Missing Authorization issue in Generic Package Registry impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-8030 | Improper Input Validation issue in Namespace Transfer impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-16794 | Missing Authorization issue in Compliance Framework management impacts GitLab EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-3855 | Improper Input Validation issue in Terraform State API impacts GitLab CE/EE | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-85706 | GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an unauthenticated user could have read arbitrary files from the GitLab server due to improper path confinement and missing authentication enforcement in the repository commits API. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-73693 | (CWE-78): a contact-sheet handler runs an attacker-chosen filename through a shell, so a file uploaded with a command in its name executes it. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-73694 | (CWE-78): a superuser settings test endpoint passes an operator-supplied argument straight to a shell and reflects the output, a direct command channel. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-73698 | (CWE-89): a delegated (non-superuser) administrator turns a control-panel field into raw SQL, including stacked statements. | VULNEREBILITY | VULNEREBILITY |
|
12.9.26 |
CVE-2026-73699 | (CWE-502): a permission blob deserialized on every page load instantiates arbitrary classes, which the SQL injection above weaponizes into a file write. | VULNEREBILITY | VULNEREBILITY |
|
11.9.26 |
CVE-2026-82329 | JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. | VULNEREBILITY | VULNEREBILITY |
|
11.9.26 |
CVE-2026-42016 | JFrog Artifactory (Self Hosted) versions before 7.133.11 are vulnerable to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. | VULNEREBILITY | VULNEREBILITY |
|
11.9.26 |
JFrog Artifactory could return an internal anonymous-user token to an unauthenticated caller when anonymous access is disabled, potentially exposing sensitive resources. | VULNEREBILITY | VULNEREBILITY | |
|
11.9.26 |
CVE-2021-38003 | Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. | VULNEREBILITY | VULNEREBILITY |
|
10.9.26 |
CVE-2026-19490 | NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490 | VULNEREBILITY | VULNEREBILITY |
|
10.9.26 |
CVE-2026-85102 | Authentication Bypass and Remote Code Execution in Remote Access and Site-to-Site VPN | VULNEREBILITY | VULNEREBILITY |
|
10.9.26 |
CVE-2026-85103 | ASN.1 decoding heap overflow leading to a remote code execution | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-87491 | Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium) | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-67401 | Security: CVE-2026-67401 SQL Injection Vulnerability in cPanel's EmailTrack Functionality - September 8, 2026 | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2025-53521 | When a BIG-IP APM access policy is configured on a virtual server, specific malicious traffic can lead to Remote Code Execution (RCE). Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-44756 | A memory safety vulnerability exists in the Extended Passport Protocol (EPP) processing library. Under specific conditions, an unauthenticated attacker could exploit a crafted network request containing a malformed EPP header, potentially resulting in undefined behavior and abnormal program termination. | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
SAP Security Patch Day - September 2026 | On 8th of September 2026, SAP security patch day saw the release of 19 new security notes. There is 1 update to previously released security note. | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-55007 | (CVSS score: 8.1) - A double free vulnerability in Microsoft Exchange Server that allows an unauthorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-80097 | (CVSS score: 8.6) - An improper authentication vulnerability in Microsoft Authenticator that allows an unauthorized attacker to elevate privileges locally | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-69465 | (CVSS score: 8.8) - A missing authorization vulnerability in Microsoft Office SharePoint that allows an authorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-65669 | (CVSS score: 9.6) - An injection vulnerability in SQL Server allows an unauthorized attacker to elevate privileges over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-69525 | (CVSS score: 9.8) - A use-after-free vulnerability in Windows Remote Desktop Services that allows an unauthorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-69595 | (CVSS score: 9.8) - A use-after-free vulnerability in Windows Services for NFS ONCRPC XDR Driver that allows an unauthorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-69730 | (CVSS score: 9.8) - A use-after-free vulnerability in Windows DNS server that allows an unauthorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-69829 | (CVSS score: 9.8) - A heap-based buffer overflow vulnerability in Windows Shell that allows an unauthorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-72979 | (CVSS score: 9.8) - A use-after-free vulnerability in Windows DHCP Server that allows an unauthorized attacker to execute code over a network | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-85880 | (CVSS score: 7.8) - A heap-based buffer overflow vulnerability in Windows Advanced Local Procedure Call (ALPC) that allows an authorized attacker to elevate privileges locally and gain SYSTEM privileges | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-81963 | (CVSS score: 7.8) - An improper link resolution vulnerability in the Windows Update Stack that allows an authorized attacker to elevate privileges locally and gain SYSTEM privileges | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-75650 | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-81963 | Microsoft Windows Link Following Vulnerability | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-85880 | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | VULNEREBILITY | VULNEREBILITY |
|
9.9.26 |
CVE-2026-86218 | N-able N-central Static Code Injection Vulnerability | VULNEREBILITY | VULNEREBILITY |
|
8.9.26 |
CVE-2026-79678 | A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. | VULNEREBILITY | VULNEREBILITY |
|
8.9.26 |
CVE-2026-76560 | A flaw was found in 389 Directory Server. The SELFDN ACI bind-rule evaluator incorrectly matches an anonymous LDAP client's empty bind DN against an empty stored attribute value, allowing an unauthenticated client to satisfy access control checks intended to require a matching authenticated identity. | VULNEREBILITY | VULNEREBILITY |
|
8.9.26 |
CVE-2026-76578 | A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry | VULNEREBILITY | VULNEREBILITY |
|
8.9.26 |
CVE-2026-75650 | Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13190 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a deserialization vulnerability in the persistence utilities allows unsafe type instantiation from attacker-influenced persisted state, which can lead to remote code execution. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13186 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is derived from user-controlled input, enabling attacker-controlled deserialization and remote code execution. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13185 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, applications using cookie-based storage in RadPersistenceManager or RadDockLayout deserialize attacker-controlled cookie content, allowing unauthenticated remote code execution. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13184 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, when Telerik.Upload.ConfigurationHashKey is absent and machineKey is not explicitly configured, upload metadata integrity protection may fall back to a predictable default key, enabling attackers to forge protected upload metadata and unlock further exploit chains. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13183 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload upload metadata processing may leak cryptographic validity through measurable timing differences, enabling remote attackers to recover protected metadata values. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13182 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, RadAsyncUpload client-state processing can distinguish decrypt failures from invalid-JSON parse failures, creating an oracle that reveals protected metadata values to remote attackers. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-13181 | In Progress® Telerik® UI for AJAX prior to v2026.2.708, forged upload metadata can influence AsyncUploadTypeName processing and trigger unsafe attacker-controlled type resolution, enabling remote code execution in affected deployments. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-86218 | N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-18577 | An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-86206 | A vulnerability in the N-central internal API access control filter allows unauthorised access to internal APIs. This is fixed in N-central 2026.3 HF3 and 2026.4 | VULNEREBILITY | VULNEREBILITY |
|
7.9.26 |
CVE-2026-86207 | An authentication bypass in N-central < 2026.3 HF 3 leads to authentication bypass in internal only APIs | VULNEREBILITY | VULNEREBILITY |
|
6.9.26 |
Vulnerabilities in Mikrotik RouterOS software | During its own research, CERT Polska discovered vulnerabilities in MikroTik RouterOS software and participated in coordinating their disclosure. Details on how these vulnerabilities were found, along with other related information, are available in our separate article. | VULNEREBILITY | VULNEREBILITY |
|
5.9.26 |
CVE-2026-59347 | HGFS stack buffer-overflow vulnerability | VULNEREBILITY | VULNEREBILITY |
|
5.9.26 |
CVE-2026-59346 | VMXNET3 integer-overflow vulnerability | VULNEREBILITY | VULNEREBILITY |
|
4.9.26 |
PostGREShell | PostGREShell: The database powering much of the internet had an open door for 12 years | VULNEREBILITY | VULNEREBILITY |
|
4.9.26 |
Cisco IOS XR Software Security Hardening Release: September 2026 | As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco IOS XR Software engineering team has conducted a comprehensive internal security review. This review resulted in software hardening releases that address multiple internally discovered vulnerabilities. | VULNEREBILITY | VULNEREBILITY |
|
4.9.26 |
CVE-2025-34158 | Plex Media Server (PMS) 1.41.7.x through 1.42.0.x before 1.42.1 is affected by incorrect resource transfer between spheres because /myplex/account provides the credentials of the server owner (and a /api/resources call reveals other servers accessible by that server owner). | VULNEREBILITY | VULNEREBILITY |
|
4.9.26 |
CVE-2026-32475 | Unrestricted Upload of File with Dangerous Type vulnerability in Elementor Elementor Pro allows Using Malicious Files. This issue affects Elementor Pro: from n/a through 4.2.1. | VULNEREBILITY | VULNEREBILITY |
|
4.9.26 |
CVE-2026-14894 | CVSS score: 9.8) - A missing file type validation vulnerability in Super Forms – Drag & Drop Form Builder that allows unauthenticated attackers to upload files of any type, including executable PHP files, leading to remote code execution. (Fixed in version 6.3.314) | VULNEREBILITY | VULNEREBILITY |
|
4.9.26 |
CVE-2026-85046 | Improper neutralization in the Plesk XML-RPC API allows a remote authenticated low-privileged user to perform SQL injection and read arbitrary data from the Plesk database, leading to full compromise of the panel. | VULNEREBILITY | VULNEREBILITY |
|
2.9.26 |
CVE-2026-83548 | A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticated attacker could potentially exploit this vulnerability to gain unauthorized access to sensitive functionality and perform unauthorized operations. | VULNEREBILITY | VULNEREBILITY |
|
2.9.26 |
CVE-2026-83549 | Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) which in specific conditions could potentially enable a remote authenticated attacker as administrator to execute arbitrary OS commands, resulting in remote code execution. | VULNEREBILITY | VULNEREBILITY |
|
2.9.26 |
CVE-2026-63219 | Unauthenticated file upload via missing authorization on formatter upload endpoint | VULNEREBILITY | VULNEREBILITY |
|
2.9.26 |
CVE-2021-31886 | A vulnerability has been identified in APOGEE MBC (PPC) (BACnet) (All versions), APOGEE MBC (PPC) (P2 Ethernet) (All versions), APOGEE MEC (PPC) (BACnet) (All versions), APOGEE MEC (PPC) (P2 Ethernet) (All versions), APOGEE PXC Compact (BACnet) (All versions < V3.5.4), APOGEE PXC Compact (P2 Ethernet) | VULNEREBILITY | VULNEREBILITY |
|
2.9.26 |
CVE-2026-9586 | An unauthenticated SQL injection vulnerability exists in Sangoma Switchvox SMB Edition 8.3 (104997). The /pa endpoint processes XML content beginning with <PolycomIPPhone> and directly concatenates the user-controlled PhoneIP value into PostgreSQL queries without sanitization or parameterization. | VULNEREBILITY | VULNEREBILITY |
|
2.9.26 |
CVE-2026-82329 | JFrog Artifactory contains an authentication weakness that, under default configuration, may allow an unauthenticated attacker with network access to obtain administrative privileges. | VULNEREBILITY | VULNEREBILITY |
|
1.9.26 |
CVE-2026-0768 | (CVSS score: 9.8) - A lack of proper validation of a user-supplied input vulnerability that could be exploited to execute arbitrary Python code in the context of the root user. | VULNEREBILITY | VULNEREBILITY |
|
1.9.26 |
CVE-2026-66066 | aka KindaRails2Shell (CVSS score: 9.5) - A vulnerability that could allow an unauthenticated attacker to read arbitrary files from the server, leak Rails process environment and secrets such as secret_key_base, the Rails master key, database passwords, cloud storage credentials, and API tokens, ultimately leading to remote code execution. | VULNEREBILITY | VULNEREBILITY |