CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
- nothings stbNothings stb stb_hexwave.h hexwave_init integer overflow6.9 Medium
- No product listedDevika v1.0 is vulnerable to Code Injection via the Runner.run_code function in src/agents/runner...9.8 Critical
- No product listedDevika v1.0 is vulnerable to Code Injection in the Runner.execute function in src/agents/runner...9.8 Critical
- No product listedDeepTutor v1.4.0 is vulnerable to command execution in /tutorbot/agent/tools/shell.py:ExecTool...9.8 Critical
- No product listedDB-GPT v0.8.0 sandbox API silently falls back to LocalRuntime and executes code on host.9.8 Critical
- No product listedagentgpt v.1.0.0 is vulnerable to Incorrect Access Control in next/src/server/api/routers...9.8 Critical
- No product listedIn DB-GPT 0.7.5 and 0.8.0, a skill uploaded through the real /api/v1/skills/upload route can...9.8 Critical
- No product listedDB-GPT v0.7.5 and v0.8.0 contains directory traversal in python_file_upload (packages/dbgpt-app...9.1 Critical
- No product listedDB-GPT 0.8.0 contains directory traversal in skill_upload (packages/dbgpt-app/src/dbgpt_app...9.1 Critical
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Code Injection in src/backend/bisheng/api...9.8 Critical
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng...7.5 High
- No product listedbisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to directory traversal in save_download_file ...9.1 Critical
- No product listedIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, TerminalToolkit.shell_exec allows prompt...9.8 Critical
- No product listedIn camel-ai camel 0.2.91a1, v0.2.91a2 and v0.2.91a3, CodeExecutionToolkit can run model-produced...9.8 Critical
- No product listedIn agentscope 1.0.18, 1.0.19, and 1.0.19 when the RealtimeAgent session exposes...9.8 Critical
- No product listedagent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers...7.5 High
- No product listedagent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers...7.5 High
- No product listedmodelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file.8.1 High
- No product listedmodelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.8.1 High
- socketio socket.ioSocket.IO: Engine.IO Protocol Revision Mismatch DoS7.5 High
- ziroom zhome a0101Ziroom ZHOME A0101 ping command injection9.4 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_time_zone command injection9.4 Critical
- the wikimedia foundation mediawiki - centralnotice extensionStored i18n XSSs in CentralNotice6.1 Medium
- the wikimedia foundation mediawiki - massmessage extensionStored i18n XSS in MassMessage6.1 Medium
- cthackers adm-zipadm-zip before 0.6.1 Duplicate ZIP Entry Name Validation Bypass8.2 High
- the wikimedia foundation mediawiki - cargo extensionXSS in Cargo's Special:CargoQuery page due to unsanitized table headers6.1 Medium
- watchguard fireware, fireware os +1 moreFireware OS Resource Exhaustion in Login Process Allows Denial of Service8.7 High
- watchguard fireware, fireware os +1 moreFireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant B7.1 High
- watchguard fireware, fireware os +1 moreFireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A7.1 High
- watchguard fireware, fireware os +1 moreFireware OS Pre-Authentication Integer Underflow in iked Allows Remote Denial of Service8.2 High
- watchguard fireware, fireware os +1 moreFireware OS Pre-Authentication Integer Underflow in iked Allows Denial of Service8.2 High
- watchguard fireware, fireware os +1 moreFireware OS Code Injection in BOVPN Over TLS Client Allows Remote Code Execution9.2 Critical
- watchguard fireware, fireware os +1 moreFireware OS NULL Pointer Dereference in NetFlow IPv6 Traffic Processing Allows Remote Denial of Service8.2 High
- watchguard fireware, fireware os +1 moreFireware OS Improper Authorization in Access Portal Reverse Proxy5.3 Medium
- watchguard fireware, fireware os +1 moreFireware OS Authorization Bypass in SAML Login Allows Unauthorized SSLVPN Access7.2 High
- watchguard fireware osFireware OS Pre-Authentication Stack Buffer Overflow in fingerd Allows Remote Code Execution8.7 High
- watchguard fireware, fireware os +1 moreFireware OS Stack-based Buffer Overflow in spamd Allows Remote Code Execution8.6 High
- watchguard fireware, fireware os +1 moreFireware OS Uncontrolled Resource Consumption in Diagnostic Tasks Allows Denial of Service7.1 High
- watchguard fireware, fireware os +1 moreFireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read8.2 High
- watchguard fireware, fireware os +1 moreFireware OS Deserialization of Untrusted Data in samld Allows Remote Code Execution7.5 High
- the wikimedia foundation mediawiki - collection extensionOpen Redirect in Special:Book6.1 Medium
- the wikimedia foundation mediawiki - centralauth extensionXSS through i18n message in CentralAuth6.1 Medium
- the wikimedia foundation mediawiki - refreshed skinXSS in Refreshed skin6.1 Medium
- alexcorvi anchormeanchorme through 3.0.8 Regular Expression Denial of Service8.7 High
- modeltc lightllmLightLLM through 1.2.0 Unauthenticated Memory Exhaustion via NCCL Control Channel set_value8.7 High
- modeltc lightllmLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Embed Cache RPyC Service9.3 Critical
- modeltc lightllmLightLLM through 1.2.0 Unauthenticated Remote Code Execution via Router Profiler RPyC Service9.3 Critical
- the wikimedia foundation mediawiki - easytimeline extensionEasyTimeline should not serve image maps as application/xml9.8 Critical
- ziroom zhome a0101Ziroom ZHOME A0101 set_syslog command injection9.4 Critical
- the wikimedia foundation mediawiki - wikilambda extensionWikifunctionsFragmentRenderer does unsafe string replacements on user-provided HTML6.1 Medium
- Show moreLoading…