CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- krayin laravel-crmKrayin CRM 2.2.6 Stored Template Injection XSS via Lead Title5.1 Medium
- eufy omni c20Improper certificate validation in Eufy Omni C209.3 Critical
- botslab g980hBotslab G980H Dashcams Incorrect Authorization8.7 High
- eufy omni c20Use of Hard-coded Credentials in Eufy Omni C206.8 Medium
langchain-nvidia-ai-endpointsPyPIlangchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs7.5 High- eufy omni c20, omni x10 pro +1 moreOS command injection in Eufy Omni C20, Omni X10 Pro9.0 Critical
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro Demo-order Payment Callback PayDemoOrderController.java updateDemoOrderPaid improper authorization6.9 Medium
yara-xcrates.ioyara-x: Unvalidated deserialization in safe `Rules::deserialize` allows memory corruption and UB4.8 Medium- brocade sannavImproper handling of sensitive data during IPsec policy creation and modification in Brocade SANnav before 3.0.1.a8.5 High
- dell trusted device client,Dell Trusted Device Client, versions prior to 8.1.359.0, contain an Incorrect Permission...7.1 High
- aws pgcollectionType confusion in AWS pgcollection allows remote code execution8.7 High
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro File Upload MpMaterialServiceImpl.java getOriginalFilename path traversal5.3 Medium
- rapid7 insight agentRapid7 Insight Agent: Uncontrolled search path element in InsightVM assessment content leads to local privilege escalation7.8 High
- servicenow ai platformUnauthenticated Sensitive Data Disclosure in ServiceNow AI Platform9.3 Critical
- dell rugged control center (rcc)Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization...4.4 Medium
- dell rugged control center (rcc)Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper Authorization...8.1 High
- servicenow ai platformUnauthenticated Arbitrary Record Disclosure in ServiceNow AI Platform8.7 High
- servicenow ai platformUnauthenticated SQL Injection in ServiceNow AI Platform9.3 Critical
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro File Upload FileController.java cross site scripting5.3 Medium
- dell thinos 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Missing...8.6 High
- starcitizenwiki mediawiki-extensions-embedvideoMediawiki EmbedVideo Extension has stored XSS via malformed src url with $wgEmbedVideoRequireConsent disabled7.5 High
- servicenow ai platformUnauthenticated Privilege Escalation via GraphQL in ServiceNow AI Platform8.7 High
- dell thinos 10Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Improper...8.3 High
- servicenow ai platformAuthorization Bypass in ServiceNow AI Platform8.4 High
- docmostDocmost: Page export can include restricted same-space attachments through forged attachmentId4.3 Medium
- docmostDocmost: Privilege Escalation - ADMIN Can Invite Users as OWNER5.2 Medium
- code16 sharpcode16 Sharp vulnerable to stored XSS via iframe srcdoc Attribute7.3 High
- docmostDocmost: Public image fileName path traversal leads to unauthorized local file read5.3 Medium
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro GoView Data Endpoint GoViewDataServiceImpl.java GoViewDataServiceImpl.getDataBySQL sql injection5.3 Medium
- docmostDocmost: Broken access control in transclusion lookup API leaks sync-block content across private spaces4.3 Medium
- docmostDocmost: Unbounded ZIP decompression (zip-bomb) in page import allows denial of service6.5 Medium
- honeywell pd45 industrial printerAuthenticated Remote Code Execution via Arbitrary File Write in the Intermec Fingerprint Command Interface8.8 High
- code16 sharpcode16/sharp has a stored XSS via data-html-content Sanitizer Bypass8.7 High
- honeywell pd45 industrial printerUnauthenticated RCE Arbitrary File Upload Honeywell PD45 Industrial Printer version F10.19.0100409.8 Critical
- brocade sannavPlaintext exposure of sensitive authentication data in SANnav discovery service log files8.5 High
- mongodb python driverHeap out-of-bounds write via signed size overflow in BSON document encoding7.5 High
- mongodb python driverConnection redirection via percent-encoded delimiter injection in connection string hosts8.3 High
- mongodb python driverForced local Unix socket connection via dot-sock KMS endpoint in client-side field encryption5.3 Medium
- docmostDocmost: Avatar URL path traversal in avatar cleanup leads to arbitrary local file deletion7.1 High
- yunaiv ruoyi-vue-proYunaiV/zhijiantianya ruoyi-vue-pro AI Knowledge AiKnowledgeDocumentServiceImpl.java AiKnowledgeDocumentServiceImpl.readUrl server-side request forgery5.3 Medium
- amir20 dozzleDozzle label filters do not restrict container event and statistics streams4.3 Medium
- liketrek trekTREK: SSRF Guard Bypass via IPv6 Transition Addresses (NAT64/6to4)6.3 Medium
- mauriceboe trekTREK: Cross-user note-file deletion (IDOR / Broken Access Control)7.1 High
- mauriceboe trekTREK: Public trip share link ignores the `share_map` permission server-side (client-enforced authorization → itinerary/location disclosure)5.3 Medium
- mauriceboe trekTREK MCP trip summary bypasses delegated OAuth read scopes4.3 Medium
- mauriceboe trekTREK: Server-Side Request Forgery via User-Configurable LLM Base URL8.1 High
- foundry376 mailspringMailspring: Stored XSS in attachment quick preview (unsanitized Markdown/DOCX/XLSX conversion)6.1 Medium
- zbateson mail-mime-parserzbateson/mail-mime-parser has uncontrolled resource consumption (CPU/memory DoS) parsing untrusted MIME7.5 High
- zbateson mail-mime-parserzbateson/mail-mime-parser has CRLF header injection via attachment filename7.2 High
- espressif esp-idfESF-IDF: Heap Out-of-Bounds Read in Bluedroid A2DP Sink Media Packet Processing4.3 Medium
- Show moreLoading…