CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- nvidia deepstreamNVIDIA DeepStream contains a vulnerability where an attacker could cause an integer overflow by...7.8 High
- apache software foundation polarisApache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials8.1 High
- parla auto automotive trading limited company detawix mobile web portalSensitive Data Exposure in Parla Auto's DetaWix Mobile Web Portal7.5 High
- dmonad lib0lib0 `readFromDataView` out-of-bounds read8.6 High
- apache software foundation dolphinschedulerApache DolphinScheduler: Allows unauthorized workflow operations through batch-copy and batch-move endpoints4.3 Medium
- dmonad lib0lib0 `readUint8Array` performs an unbounded read past the end of the decoder’s view, disclosing adjacent process memory8.6 High
- apache software foundation dolphinschedulerApache DolphinScheduler: Improper Authorization Allows Project Read-Only Users to Execute Workflows and Tamper with Workflow Definitions4.3 Medium
- apache software foundation dolphinschedulerApache DolphinScheduler: Missing Authorization in query-dynamic-sub-workflows API Leads to Information Disclosure6.5 Medium
- apache software foundation dolphinschedulerApache DolphinScheduler: Actuator Endpoint Authentication Bypass via Percent-Encoded Paths5.3 Medium
- apache software foundation dolphinschedulerApache DolphinScheduler: Improper Authorization in Sub-Workflow Tasks Allows Unauthorized Workflow Execution4.3 Medium
- tibco administratorTIBCO Administrator Injection Vulnerability8.7 High
- apache software foundation dolphinschedulerApache DolphinScheduler: Command Injection in the Alert Script Plugin8.8 High
- pypyPyPy pyexpat ExternalEntityParserCreate Use-After-Free6.3 Medium
- mozilla firefox, firefox mobile +1 moreSpoofing issue in the Downloads component in Firefox for Android5.4 Medium
- mozilla firefox, thunderbird +1 moreOther issue in the JavaScript: WebAssembly component5.4 Medium
- mozilla firefox, thunderbird +1 moreInvalid pointer in the JavaScript Engine: JIT component8.8 High
- mozilla firefox, thunderbird +1 moreOther issue in the DevTools component9.8 Critical
- mozilla firefox, thunderbird +1 moreRace condition, use-after-free in the Audio/Video component7.5 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to use-after-free in the Preferences: Backend component9.6 Critical
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU component4.3 Medium
- mozilla firefox, thunderbird +1 moreUninitialized memory in the Graphics: WebGPU component4.3 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the JavaScript: WebAssembly component8.8 High
- mozilla firefox, thunderbird +1 moreDenial-of-service in the Networking component6.5 Medium
- mozilla firefox, thunderbird +1 moreJIT miscompilation in the JavaScript Engine component6.5 Medium
- mozilla firefox, thunderbird +1 moreUse-after-free in the Graphics: WebGPU component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component8.8 High
- mozilla firefox, thunderbird +1 moreIncorrect boundary conditions in the Graphics: WebGPU component9.1 Critical
- mozilla firefox, thunderbird +1 morePrivilege escalation due to use-after-free in the Graphics: WebGPU component8.8 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a...5.9 Medium
- psyb0t docker-mailboxImproper Neutralization of CRLF Sequences ('CRLF Injection') in docker-mailbox9.4 Critical
- shenzhen dbit network equipment t-cpe301k 4g mini wifi routerMultiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment9.3 Critical
- shenzhen dbit network equipment t-cpe301k 4g mini wifi routerMultiple vulnerabilities in the T-CPE301K 4G Mini WiFi Router from Shenzhen Dbit Network Equipment8.6 High
- esengine deepseek-reasonixImproper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in DeepSeek-Reasonix7.8 High
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL...5.4 Medium
- pretixOAuth credentials not disabled when application is disabled2.1 Low
- linux, linux kernel +1 moreKVM: x86/mmu: Check write tracking in all address spaces7.1 High
- pretixHTML injection2.1 Low
- pretixIncorrect session validation for API-uploaded files2.3 Low
- pretixCustomer session fixation1.7 Low
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...7.8 High
sheets-diffcrates.ioA 512-byte workbook can provoke a multi-gigabyte allocation and abort the process5.5 Mediummatrix-sdk-cryptocrates.ioSending custom to-device messages may panicsNo score- pretixRevenue information leak2.7 Low
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross...6.5 Medium
- pretixCheckout validation bypass1.3 Low
- dell secure connect gateway (scg) policy manager, policy manager for secure connect gateway +1 moreDell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an...3.8 Low
- interprobe information technologies inc. qorela dcPrivilege Escalation via Account Takeover in Interprobe's Qorela DC8.8 High
- bishopfox sliverSliver 1.7.7 Denial of Service via PE Parser Slice Bounds in Operator RPC6.8 Medium
- apache dolphinschedulerApache DolphinScheduler: Unauthorized Disclosure of Data Source Information via /datasources/unauth-datasource6.5 Medium
- opensolution quick.cartCross-Site Request Forgery in admin panel of Quick.Cart6.9 Medium
- Show moreLoading…