CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- naichen thinkcmfNaichen ThinkCMF Email Template MailController.php templatePut special elements in template engine5.1 Medium
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Cross-site Scripting4.8 Medium
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Eval Injection2.1 Low
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Session Fixation7.5 High
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT SQL Injection8.5 High
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT SQL Injection8.5 High
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT SQL Injection8.5 High
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT SQL Injection8.5 High
- freedesktop popplerFreedesktop Poppler SplashClip.cc clipToPath integer overflow4.8 Medium
- denx software engineering u-bootU-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv67.1 High
- denx software engineering u-bootU-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback8.8 High
- denx software engineering u-bootU-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK8.8 High
- denx software engineering u-bootU-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply8.8 High
- denx software engineering u-bootU-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read4.3 Medium
- denx software engineering u-bootU-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation5.2 Medium
- denx software engineering u-bootU-Boot < 2027.01-rc1 Out-of-Bounds Write in BMP RLE8 Decoder6.0 Medium
- denx software engineering u-bootU-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly8.8 High
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT SQL Injection8.5 High
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Unrestricted Upload of File with Dangerous Type9.4 Critical
- shopify tophat, toptech systems tms7 +1 moreToptech TMS7 and TopHAT Files or Directories Accessible to External Parties10.0 Critical
- lantronix g520 seriesLantronix G520 Series Cellular Gateway Improper Verification of Cryptographic Signature7.7 High
- lantronix g520 seriesLantronix G520 Series Cellular Gateway Cross-site Scripting7.7 High
- enterprisedb barmanBarman snapshot backup deletion trusts unverified backup catalog metadata7.2 High
- grafana enterprise, oss +1 moreLibrary panel can be moved into a folder without library panel create permission4.3 Medium
- jupyterlabJupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs5.4 Medium
- viidure dashcam android applicationUse of Hard-coded Credentials in Viidure Dashcam Android Application10.0 Critical
- viidure dashcam android applicationIncorrect Permission Assignment for Critical Resource in Viidure Dashcam Android Application8.7 High
- grafana enterprise, oss +1 morePaused shared dashboard access tokens still expose data source configuration5.3 Medium
- freedesktop popplerFreedesktop Poppler FoFiTrueType.cc cvtSfnts integer overflow4.8 Medium
- es iperf3iperf3 < 3.22 UDP Receive Worker Infinite Loop DoS8.7 High
- claraverse-space claraverseClaraVerse through 0.3.1 SSRF Protection Bypass5.3 Medium
- hangwin mcp-chrome-bridgemcp-chrome-bridge through 1.0.31 CORS Origin Bypass8.6 High
- getfider fiderFider before 0.38.0 SSRF via DNS rebinding in webhook validation2.1 Low
- surrealdbSurrealDB before 3.3.0 Cross-Tenant Access via Headers8.6 High
- videolan vlcVLC media player before 3.0.24 Path Traversal via skins28.5 High
- finsys dockhandDockhand < 1.0.40 Unauthenticated Webhook Trigger via Git Webhook Endpoints9.2 Critical
- anjvision yssd-rtmp-h5Use of Weak Credentials in Anjvision YSSD-RTMP-H57.0 High
- anjvision yssd-rtmp-h5Insufficiently Protected Credentials in Anjvision YSSD-RTMP-H58.7 High
- anjvision yssd-rtmp-h5Server-Side request forgery (SSRF) in Anjvision YSSD-RTMP-H56.9 Medium
- anjvision yssd-rtmp-h5Improper Check for Unusual or Exceptional Conditions in Anjvision YSSD-RTMP-H57.2 High
- google chromeIncorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote...6.5 Medium
- google chromeIncorrect authorization in WebView in Google Chrome on on Android prior to 154.0.8037.92 allowed...7.5 High
- google chromeUI misrepresentation in TabStrip in Google Chrome prior to 154.0.8037.92 allowed a remote...5.4 Medium
- google chromeUI misrepresentation in SignIn in Google Chrome on on iOS prior to 154.0.8037.92 allowed a remote...5.4 Medium
- google chromeType confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to execute...8.8 High
- google chromeMissing authorization in CORS in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...6.5 Medium
- google chromeUninitialized resource in Media in Google Chrome on on Windows prior to 154.0.8037.92 allowed a...3.4 Low
- google chromeMissing authorization in Payments in Google Chrome prior to 154.0.8037.92 allowed a remote...6.5 Medium
- google chromeBuffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to...8.8 High
- google chromeCross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker...6.1 Medium
- Show moreLoading…