CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- apache software foundation rollerApache Roller: OAuth authorization endpoint trusts request-supplied identity9.0 Critical
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project makeresult.php sql injection6.9 Medium
- apache software foundation rollerApache Roller: Weblog template include escapes the Velocity sandbox and reads classpath files6.5 Medium
- apache software foundation rollerApache Roller: XML external entity processing in OPML bookmark import7.7 High
- apache software foundation rollerApache Roller: Cross-weblog resource tampering via unscoped authoring lookups7.7 High
- apache software foundation rollerApache Roller: Stored cross-site scripting via uploaded media content type5.4 Medium
- apache software foundation rollerApache Roller: Stored cross-site scripting through incoming Trackback links6.1 Medium
- apache software foundation rollerApache Roller: Stored javascript: URI in HTML comments6.1 Medium
- apache software foundation rollerApache Roller: Reflected XSS in the optional LDAP comment authenticator6.1 Medium
- aapanel baotaaaPanel BaoTa Domain domainMod.py get_domain_status sql injection5.1 Medium
- aapanel baotaaaPanel BaoTa data.py getData sql injection5.1 Medium
- regularlabs modules anywhere, regularlabs.com modules anywhere (pro) extension for joomla +1 moreJoomla Extension - regularlabs.com - Arbitrary file read / SSRF in Modules Anywhere 1.5.0 - 9.0.5 for Joomla8.5 High
- aapanel baotaaaPanel BaoTa Unzip panelTask.py panelTask.bt_task._unzip os command injection9.3 Critical
- regularlabs tabs \& accordions, regularlabs.com tabs & accordions (free, pro) extension for joomla +1 moreJoomla Extension - regularlabs.com - Privileged stored XSS via data-rlta-url attributes in Tabs & Accordions (Pro) 2.3.0 - 3.1.07.5 High
- aapanel baotaaaPanel BaoTa File Merge files.py merge_split_file command injection9.4 Critical
- aapanel baotaaaPanel BaoTa Database Backup database.py InputSql os command injection9.3 Critical
- soft8soft llc verge3d publishing and e-commerceVerge3D 4.1.0 - 4.13.0 - Unauthenticated Payment Bypass via v3d_payment_done5.3 Medium
- unknown paymatticPaymattic < 4.6.26 - Unauthenticated Payment Bypass via Unbound Stripe PaymentIntent5.3 Medium
- unknown blacklist managerBlacklist Manager for WooCommerce 1.3.0 - 2.3.1 - Blocked User Restriction Bypass via XML-RPC and Application Passwords5.4 Medium
- booklyBookly < 28.3 - Unauthenticated Payment Bypass via Booking Price Manipulation5.3 Medium
- syed balkhi wpformsWPForms Lite 1.5.0.1 - 2.0.2 - Unauthenticated Arbitrary Shortcode Execution via Form Field Repopulation6.5 Medium
- bradwenqiang hrFrappe HR Permission Validation __init__.py get_attendance_requests authorization5.3 Medium
- unknown sps-suiteSPS-Suite <= 1.4.0 - Unauthenticated Time-Based SQLi via Search6.8 Medium
- unknown wp verify apiWP Verify API <= 1.0.0 - Unauthenticated Verification Code Email Sending to Arbitrary Recipients5.3 Medium
- unknown post voting systemPost Voting System <= 1.0 - Subscriber+ SQLi via 'row' Parameter6.4 Medium
- No product listedOctober CMS SSRF Protection ResizeImages.php validateExternalImageHost server-side request forgery6.9 Medium
- notionnext-org notionnextnotionnext-org NotionNext Authentication Guard cache.js cleanCache missing authentication6.9 Medium
- automattic mongooseCesanta Mongoose MQTT Broker main.c fn stack-based overflow6.9 Medium
- netcore nbr200v2Netcore NBR200V2 Tools Ping network_tools system os command injection9.4 Critical
- netcore nbr200v2Netcore NBR200V2 Web Management network_tools eval os command injection10.0 Critical
- netcore nbr100v2Netcore NBR100V2 ACL unauthenticated.json uci.apply authorization10.0 Critical
- No product listedEyeplus p2pcam HTTP stack-based overflow8.7 High
- google fuse-archiveUntrusted Search Path (PATH Hijacking) in fuse-archive5.4 Medium
- No product listedEyeplus p2pcam Service snapshot information disclosure6.9 Medium
- No product listedEyeplus ONVIF Device GetUsers information disclosure6.9 Medium
- amirsanni mini-inventory-and-sales-management-systemamirsanni mini-inventory-and-sales-management-system Items Management Items.php cross site scripting5.1 Medium
- ооо нпо ритм georitmООО НПО Ритм GEOritm REST API obj-groups missing authentication6.9 Medium
- barco clickshare cx-20 gen2Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper improper validation of syntactic correctness of input7.1 High
- athlon1600 youtube-downloaderathlon1600 youtube-downloader stream.php stream server-side request forgery6.9 Medium
- devaslanphp project-managementDevaslanPHP project-management Jira Import jira-import updateJiraProjects server-side request forgery5.1 Medium
- devaslanphp project-managementDevaslanPHP project-management Timesheet Dashboard MonthlyReport.php whereRaw sql injection5.3 Medium
- devaslanphp project-managementDevaslanPHP project-management Timesheet Dashboard ActivitiesReport.php whereRaw sql injection5.3 Medium
- fuzui studentinfofuzui StudentInfo Password Change Endpoint moditypasswordstu authorization5.1 Medium
- totolink n150rtTOTOLINK N150RT Web Management formWlSiteSurvey system os command injection9.4 Critical
- trusted domain project openarcTrusted Domain Project OpenARC libopenarc arc-canon.c arc_parse_canon_t null pointer dereference6.9 Medium
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updateguest.php sql injection5.3 Medium
- privoce vocechat serverPrivoce VoceChat Server open_graphic_parse Endpoint resource.rs fetch server-side request forgery6.9 Medium
- aligungr ueransimaligungr UERANSIM nr-gnb handler.cpp ULInformationTransfer memory corruption6.9 Medium
tmuxOSS-FuzzHeap-buffer-overflow in screen_resize_cursorNo score- trusted domain project opendmarcTrusted Domain Project OpenDMARC Internationalized Domain Name opendmarc_policy.c opendmarc_policy_query_dmarc encoding error6.9 Medium
- Show moreLoading…