CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- ibm powervm hypervisor, power system e1050 \(9043-mrx\) firmware, power system e1080 \(9080-hex\) firmware +24 more +26 moreThis Power System update is being released to address5.1 Medium
- webkul aureus erpAureus ERP 1.6.0 Stored XSS via SVG File Upload5.1 Medium
- blackcandy-org black candyBlack Candy through 3.2.1 Information Disclosure via Playlist Search5.3 Medium
- offis dcmtkDCMTK through 3.7.0 Heap Over-read via NumberOfFrames8.8 High
- noderedis redis-parserredis-parser through 3.0.0 Denial of Service via Invalid Array Length8.7 High
- rapid7 velociraptorVelociraptor Authenticated Denial of Service6.5 Medium
- rapid7 velociraptorVelociraptor Prefetch parser out of bounds3.6 Low
- rejetto hfs2HFS2 2.4.0 Unauthenticated Arbitrary File Read/Write via Template Engine10.0 Critical
- rejetto hfs2HFS2 2.4.0 RCE via Multipart Upload Filename Template Injection10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm7.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)7.8 High
- rapid7 velociraptorVelociraptor Investigator reaches SuperUser via hunt EffectivePrincipal9.9 Critical
- tübitak ulakbim ulakpdfAdmin Access Bypass via Header Fallback in TÜBİTAK ULAKBİM's UlakPDF6.8 Medium
- tübitak ulakbim ulakpdfSAML ePPN Attribute Validation Bypass in TÜBİTAK ULAKBİM's UlakPDF7.4 High
- red hat ansible automation platform 2, ansible automation platform 2.6 for rhel 9, ansible automation platform 2.7 +2 moreAap-gateway: aap-gateway: authorization bypass via workload identity token forgery6.8 Medium
- halo-dev halohalo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization6.9 Medium
salsacrates.ioUse-after-free in interned values and cached function resultsNo scorex509-validatorcrates.ioExcluded iPAddress name constraints with an all-zero mask are not applied7.4 High- bytecodealliance wasmtimeWasmtime 47.0.0 before 48.0.3 and 49.0.0 before 49.0.1 Fuel Accounting Bypass DoS6.9 Medium
- bytecodealliance wasmtimeWasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Denial of Service via Val API1.0 Low
- bytecodealliance wasmtimeWasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Memory Exhaustion DoS via wasmtime-wasi-http Outgoing Body Write6.9 Medium
- bytecodealliance wasmtimeWasmtime before 36.0.16, 37.0.0 before 48.0.3, and 49.0.0 before 49.0.1 Host Panic via WASI Filesystem Timestamp Overflow6.9 Medium
- netlink ict pvt ltd ict hg323rw routerCommand Injection Vulnerability in Netlink ICT HG323RW Router8.6 High
- havelsan liman mysPath Traversal in HAVELSAN's Liman MYS5.3 Medium
- alexvtn custom thank you page for woocommerceCustom Thank You Page for WooCommerce <= 1.1.2 - Missing Authorization to Unauthenticated Settings Export and Settings Reset6.5 Medium
- brainstormforce spectra legacy – gutenberg blocksSpectra Legacy – Gutenberg Blocks <= 2.20.0 - Authenticated (Contributor+) Sensitive Information Exposure4.3 Medium
- mailerlite – signup forms (official)MailerLite – Signup forms (official) <= 1.7.21 - Missing Authorization to Authenticated (Contributor+) Form Creation and Deletion4.3 Medium
- red hat build of keycloak 26.6.8, single sign-on 7 +1 moreKeycloak-services: keycloak-services: admin rest api role-groups endpoint discloses groups without authorization4.3 Medium
python-virtualenvTuxCareUpdate of python-virtualenvNo scorewpa_supplicantTuxCareUpdate of wpa_supplicantNo score- evope collector collectorUncontrolled Search Path Element in Evope Collector7.5 High
- paessler prtg network monitorPlaintext Password Disclosure via VBScript Sensor Error Message in Paessler PRTG Network Monitor7.1 High
- qtAuthentication bypass vulnerability in the password authentication mechanism of the Qt VNC Server module4.5 Medium
unboundTuxCare,unbound-develTuxCare,unbound-libsTuxCare +1 more +3 moreUpdate of unboundNo scorekrb5-develTuxCare,krb5-libsTuxCare,krb5-pkinitTuxCare +4 more +6 moreUpdate of krb5No scoresambaTuxCare,ctdbTuxCare,ctdb-testsTuxCare +24 more +26 moreUpdate of sambaNo scorelibXfont2TuxCare,libXfont2-develTuxCare +1 moreUpdate of libXfont2No scorelibarchiveTuxCare,bsdcpioTuxCare,bsdtarTuxCare +1 more +3 moreUpdate of libarchiveNo score- No product listedO2OA Cipher Connection CipherConnectionAction.java list information disclosure5.3 Medium
aideTuxCareUpdate of aideNo scorepolkitTuxCare,polkit-desktop-policyTuxCare,polkit-develTuxCare +1 more +3 moreUpdate of polkitNo scorecyrus-saslTuxCare,cyrus-sasl-develTuxCare,cyrus-sasl-gssapiTuxCare +6 more +8 moreUpdate of cyrus-saslNo scoreautomation-controller-venv-towerRed HatRed Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update9.9 Criticalautomation-controller-venv-towerRed HatRed Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update9.9 Criticalautomation-controller-venv-towerRed HatRed Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update9.9 Critical- paessler prtg network monitorReflected Cross-Site Scripting via URL Path in Paessler PRTG Network Monitor5.1 Medium
- themeum kirki – freeform page builder, website builder & customizerKirki – Freeform Page Builder, Website Builder & Customizer <= 6.2.0 - Unauthenticated Blind Server-Side Request Forgery via 'kirki_data' Parameter5.4 Medium
- visual composer website builder, visualcomposer visual composer website builder +1 moreVisual Composer Website Builder <= 45.16.0 - Unauthenticated Local File Inclusion via 'vcv-template' Parameter9.8 Critical
- magazine3 wp multilang – translation and multilingual pluginWP Multilang – Translation and Multilingual Plugin <= 2.4.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Content6.4 Medium
- apache software foundation dolphinschedulerApache DolphinScheduler: Missing Authorization in Task Group APIs Allows Unauthorized Cross-Project Operations8.1 High
- Show moreLoading…