CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- ricoh aficio sp 3500sf, sp 221, sp 330dn +1 more +3 moreRicoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multipart Form-Data denial of service7.1 High
- manageengine ddi centralAuthenticated PowerShell Injection in DNS Query Resolution Policy leads to RCE7.2 High
- google cloud application integrationConfused Deputy in Application Integration allows Internal File Read8.3 High
- manageengine ddi centralAuthenticated PowerShell Injection leads to RCE8.8 High
- google cloud application integrationDeserialization of Untrusted Data in Application Integration allows Remote Code Execution9.4 Critical
- fast fac1900rFAST FAC1900R devdiscover Service copy_msg_element stack-based overflow10.0 Critical
- apache karafApache Karaf: OS Command Injection in Child-Instance Launch (instance:* / InstancesMBean)8.8 High
- manageengine ddi centralAuthenticated File Write to RCE via keepalived in DDI Central8.8 High
- google cloud application integrationIncorrect Authorization in Application Integration allows Internal Stubby RPC Execution9.4 Critical
- fast fac1200rFAST FAC1200R MmtAtePrase stack-based overflow9.4 Critical
els-os-releaseTuxCareUpdate of els-os-releaseNo score- fast fac1200rFAST FAC1200R devdiscover Service parse_advertisement_frame stack-based overflow9.4 Critical
- tpvenlanube cloud web applicationStored Cross-Site Scripting (XSS) in TPVEnlanube4.8 Medium
- tpvenlanube cloud web applicationStored Cross-Site Scripting (XSS) in TPVEnlanube4.8 Medium
- tpvenlanube cloud web applicationStored Cross-Site Scripting (XSS) in TPVEnlanube4.8 Medium
- flb-music flb-music-playerFLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal4.8 Medium
- apache karafApache Karaf: LDAP filter injection in JAAS LDAP login modules7.3 High
- aligungr ueransimaligungr UERANSIM nr-gnb encode.cpp DecodePlainMmMessage uncaught exception6.9 Medium
- dayrui xunruicmsdayrui XunruiCMS Group Editing Home.php group_all_edit sql injection5.1 Medium
- trusted domain project opendmarcTrusted Domain Project OpenDMARC opendmarc_policy.c strcasecmp exceptional condition6.9 Medium
cyrus-saslTuxCare,cyrus-sasl-develTuxCare,cyrus-sasl-gssapiTuxCare +6 more +8 moreUpdate of cyrus-saslNo scorepython-virtualenvTuxCareUpdate of python-virtualenvNo scorelibXfont2TuxCare,libXfont2-develTuxCare +1 moreUpdate of libXfont2No scoreunboundTuxCare,unbound-develTuxCare,unbound-libsTuxCare +1 more +3 moreUpdate of unboundNo scorepython-setuptoolsTuxCareUpdate of python-setuptoolsNo scorelibarchiveTuxCare,bsdcpioTuxCare,bsdtarTuxCare +1 more +3 moreUpdate of libarchiveNo scorewpa_supplicantTuxCareUpdate of wpa_supplicantNo scorebusyboxDebian,busybox-petitbootRed Hat,busybox-sharedRed Hat +2 moreRed Hat Security Advisory: Red Hat Hardened Images RPMs Security Update3.3 LowmodemmanagerDebianReachable assertion in Cell Broadcast encoding parse causes denial of serviceNo score- trusted domain project opendmarcTrusted Domain Project OpenDMARC opendmarc_policy.c opendmarc_policy_parse_dmarc exceptional condition6.9 Medium
sssdTuxCare,libipa_hbacTuxCare,libipa_hbac-develTuxCare +31 more +33 moreUpdate of sssdNo score- bimser solution software trade inc. eba plus document and workflow management systemPath Traversal in Bimser Solution Software's eBA Plus6.5 Medium
- trusted domain project opendmarcTrusted Domain Project OpenDMARC policy.c improper validation of unsafe equivalence in input6.9 Medium
- bimser solution software trade inc. eba plus document and workflow management systemArbitrary File Upload Leading to Remote Command Execution in Bimser's eBA Plus8.8 High
- apache software foundation rollerApache Roller: Stored XSS in comment moderation via comment author URL6.1 Medium
- bimser solution software trade inc. eba plus document and workflow management systemStored XSS in BİMSER's eBA Plus5.4 Medium
- trusted domain project opendmarcTrusted Domain Project OpenDMARC DMARC Record opendmarc_util.c opendmarc_util_cleanup off-by-one6.9 Medium
- buffalo inc. wex-g300, wsr-300hp +1 moreStack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. A non-authenticated...8.7 High
- buffalo inc. wex-g300, wsr-300hp +1 moreBUFFALO Wi-Fi products handle some web form input improperly to assemble command line strings...8.6 High
- mathurvishal cloudclassroom-php-projectmathurvishal CloudClassroom-PHP-Project updateresultdetails.php sql injection6.9 Medium
suseconnect-ngSUSESecurity update for suseconnect-ngNo score- apache software foundation rollerApache Roller: WSSE digest authentication headers can be replayed7.7 High
- apache software foundation rollerApache Roller: CSRF protection bypass via self-generated salt validation8.1 High
- apache software foundation rollerApache Roller: Stored cross-site scripting in the authoring UI5.4 Medium
- apache software foundation rollerApache Roller: Reflected cross-site scripting in the frontpage directory parameter6.1 Medium
- apache software foundation rollerApache Roller: Anonymous setup action allows frontpage configuration tampering8.2 High
- apache software foundation rollerApache Roller: Unauthenticated deserialization in the XML-RPC endpoint9.8 Critical
- apache software foundation rollerApache Roller: Server-side request forgery via entry trackback and enclosure URLs7.4 High
- apache software foundation rollerApache Roller: XML external entity processing in trackback response parser7.7 High
- apache software foundation rollerApache Roller: Missing weblog authorization in XML-RPC Blogger/MetaWeblog handlers9.9 Critical
- Show moreLoading…