CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- linuxscsi: qla2xxx: Validate BSG request_len before reading vendor_cmd[]6.8 Medium
- linuxscsi: qla2xxx: Unlink NVMe unsol ctx before freeing on LS reject error8.8 High
- linuxscsi: qla2xxx: Serialize NVMe unsol ctx list with a per-fcport lock8.8 High
- linuxs390/pai: Support CPU hotplug for PMU PAINo score
- linuxx86/mm/pat: Allocate split page tables as kernel page tables8.2 High
- linuxmptcp: avoid unneeded actions on subflow reset7.5 High
- linuxmptcp: close race between scheduler and state change7.5 High
- linuxmptcp: fix bad accounting in __mptcp_subflow_push_pending()No score
- akiaBroken authorization in Akia keyless entry lets an authenticated guest unlock other rooms8.4 High
- dashbitco lazy htmllazy_html serializes SVG and MathML style and script text unescaped, allowing mutation XSS2.3 Low
- stylemix masterstudy lmsMasterStudy LMS 1.9 - < 3.7.50 - Subscriber+ Membership Plan Quota and Category Restriction Bypass4.2 Medium
- tomdever wpforo forumwpForo Forum 3.0.0 - 3.1.5 - Unauthenticated AI Credit Exhaustion via IP Rate Limit Bypass5.3 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- booklyBookly < 28.3 - Unauthenticated Customer PII Update via Verification Bypass5.3 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- novadigits technologies stockagileStored Cross-Site Scripting in StockAgile by Novadigits technologies5.1 Medium
- apache qpid broker-jApache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-8/0-9/0-9-1 decoder7.5 High
- apache qpid broker-jApache Qpid Broker-J: Type size/count handling can lead to excessive allocation pre-authentication in the AMQP 0-10 decoder7.5 High
- apache qpid broker-jApache Qpid Broker-J: Uncontrolled resource consumption during AMQP delivery decompression, message conversion and HTTP management JSON rendering6.5 Medium
- misp misp-modulesmisp-modules: Shell Command Injection in MISP cisco_firesight_manager_ACL_rule_export Module via Unescaped Attribute Values6.3 Medium
- apache qpid broker-jApache Qpid Broker-J: Unbounded type nesting can lead to stack overflow pre-authentication in AMQP 0-8/0-9/0-9-1 field-table processing7.5 High
- apache qpid broker-jApache Qpid Broker-J: Incomplete property conversion handling from AMQP 1.0 to AMQP 0-107.5 High
- apache qpid broker-jApache Qpid Broker-J: Missing HTTP-session renewal after successful authentication9.8 Critical
- themifyme themify builderThemify Builder <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via 'css[fonts]' Parameter7.2 High
- addonsorg repeater fields for elementor formsRepeater Fields for Elementor Forms <= 2.2.7 - Unauthenticated Stored Cross-Site Scripting via Repeater Field Value7.2 High
- knitpay knit pay – cashfree, instamojo, razorpay, paypal and moreKnit Pay <= 9.6.1.0 - Authenticated (Subscriber+) Privilege Escalation via Gravity Forms Role Field8.8 High
- clavaque s2member – excellent for all kinds of memberships, content restriction paywalls & member access subscriptionss2Member <= 260814 - Unauthenticated Remote Code Execution via 'first_name' Parameter in PayPal Proxy Return8.8 High
- radykal fancy product designerFancy Product Designer <= 6.5.2 - Unauthenticated Stored Cross-Site Scripting via Shortcode Order 'elements[].title' Parameter7.2 High
- gabe livan asset cleanup: page speed boosterAsset CleanUp: Page Speed Booster <= 1.4.0.5 - Authenticated (Administrator+) Server-Side Request Forgery via 'page_url' Parameter5.5 Medium
- ihomefinder optima express idxOptima Express IDX <= 8.7.5 - Unauthenticated Privilege Escalation to 'ihf_clear_cache' AJAX Action to Author Role Assignment7.3 High
- wpchill modula image gallery – photo grid & video galleryModula Image Gallery <= 3.0.1 - Missing Authorization to Unauthenticated Private Gallery Image Disclosure via 'modula_gallery_id' and 'modula_image_id' Parameters7.5 High
- flippercode wp maps – google maps, openstreetmap, mapbox, store locator with search, filters & listingsWP Maps <= 4.9.8 - Authenticated (Subscriber+) Stored Cross-Site Scripting via shapes_values Parameter6.4 Medium
- jetmonsters restaurant menu and food orderingRestaurant Menu and Food Ordering <= 2.4.14 - Unauthenticated Stored Cross-Site Scripting via 'phone_number' Parameter7.2 High
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder <= 4.0.2 - Unauthenticated Stored Cross-Site Scripting via Avatar Field7.2 High
- sslzen ssl zen — ssl certificate installer & https redirectsSSL Zen <= 4.7.42 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'file_name' Parameter4.9 Medium
- cozmoslabs user profile builder – beautiful user registration forms, user profiles & user role editorUser Profile Builder <= 4.0.2 - Authenticated (Subscriber+) Stored Cross-Site Scripting via Avatar Field6.4 Medium
- flippercode wp maps – google maps, openstreetmap, mapbox, store locator with search, filters & listingsWP Maps <= 4.9.8 - Authenticated (Subscriber+) Local File Inclusion via 'page' Parameter7.5 High
- codename065 premium packages – sell digital products securelyPremium Packages <= 7.2.1 - Unauthenticated Stored Cross-Site Scripting via 'cart_items[][product_name]' Parameter7.2 High
- wpchill modula image gallery – photo grid & video galleryModula Image Gallery <= 3.0.2 - Missing Authorization to Authenticated (Author+) Arbitrary File Deletion (Non-PHP) via 'file' Parameter8.1 High
- sslzen ssl zen — ssl certificate installer & https redirectsSSL Zen <= 4.7.42 - Reflected Cross-Site Scripting via 'uri' Parameter6.1 Medium
- tomdever wpforo forumwpForo Forum <= 3.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'telegram' Profile Field6.4 Medium
- smub wpforms – ai form builder for wordpress – contact forms, payment forms, survey form, quiz & moreWPForms <= 2.0.2 - Reflected Cross-Site Scripting via 'page_title' POST Parameter6.1 Medium
- bmarshall511 zero spam for wordpressZero Spam for WordPress <= 5.7.10 - Unauthenticated Stored Cross-Site Scripting via Nested POST Array Keys via Contact Form 7 Integration7.2 High
- red hat build of keycloak 26.6.8, single sign-on 7 +1 moreKeycloak-services: keycloak-services: fgap v2 composite-blind role mapping allows privilege escalation6.6 Medium
- ash-project ashPrivate action arguments can be set by user input on the bulk destroy and bulk update paths in Ash5.9 Medium
- wordplus better messages – chat rooms, group chat, private messages & ai chat botsBetter Messages <= 3.0.4 - Authenticated (Subscriber+) Stored DOM-Based Cross-Site Scripting via User Display Name6.4 Medium
- Show moreLoading…