CVEs published in September 2026
14,845 vulnerabilities, 1,524 critical, 36 exploited.
quinn-udpcrates.ioReceive loop can spin after a truncated datagramNo scorequinn-protocrates.ioMAX_STREAM_DATA frame can open streams beyond the stream limitNo score- apache wss4jApache WSS4J: WSS4J EncryptedHeader child confusion causing wrong protected-header selection9.1 Critical
- apache wss4jApache WSS4J: SAML Sender-Vouches Authentication Bypass9.8 Critical
- apache wss4jApache WSS4J: Streaming WS-SecurityPolicy validation may skip element-protection checks.9.1 Critical
- apache wss4jApache WSS4J: Insufficient Validation of Derived-Key Parameters7.5 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag7.1 High
- red hat openshift container platform 4.16, openshift container platform 5 +1 moreCri-o: cri-o: sandbox state poisoning via pod annotations may expose runtime socket7.8 High
- cato networks sdp clientCato Windows SDP Client arbitrary file disclosure due to improper TLS certificate validation6.8 Medium
- cato networks sdp clientCato Networks SDP Client for Windows is vulnerable to Local Privilege Escalation8.5 High
- anthropic @anthropic-ai/claude-codeClaude Code selected an API key stored by Claude Code, for example from an earlier /login or written directly to its configuration, ahead of the user's valid Claude Enterprise or Team sign-in when fet…2.0 Low
- os4ed opensis-classicOS4ED openSIS-Classic Assignment Management Endpoint Assignments.php DBQuery_assignment sql injection5.3 Medium
- codesys gateway, development system 3, edge gateway for linux +5 more +7 moreUncontrolled Memory Allocation in CODESYS Gateway Client8.7 High
- grafana enterprise, oss +1 moreEditor can forge file-provisioning provenance on dashboards via the dashboard API5.4 Medium
- grafana enterprise, oss +1 moreAlert rules in restricted folders disclosed via the alert rules list API4.3 Medium
- amauri wpmobile.appWordPress WPMobile.App plugin <= 11.83 - Sensitive Data Exposure vulnerability6.9 Medium
linux-firmwareTuxCare,iwl1000-firmwareTuxCare,iwl100-firmwareTuxCare +16 more +18 moreUpdate of linux-firmwareNo score- os4ed opensis-classicOS4ED openSIS-Classic General Information Tab Student.php save action sql injection5.1 Medium
- mispMISP Tag Collection Save Allows Privilege Escalation via Sibling Model Injection8.6 High
- mispMISP: Nested Model Alias Key Bypasses Sanitization to Modify Cross-Tenant Rows8.3 High
- apache software foundation mina sshdApache MINA SSHD: Asynchronous authentication can bypass signature verification9.1 Critical
- apache software foundation mina sshdApache MINA SSHD: Repeated-publickey policy bypass on server8.1 High
- apache software foundation mina sshdApache MINA SSHD: LDAP injection in sshd-ldap9.1 Critical
- bosch bvmsInformation disclosure in BVMS 4.5 up to 12.38.7 High
- apache software foundation mina sshdApache MINA SSHD: Remote execution of JGit "archive -o=file.zip" can write file on the server6.5 Medium
- apache software foundation mina sshdApache MINA SSHD: Memory exhaustion DoS via unbounded SCP command line read6.5 Medium
- apache software foundation mina sshdApache MINA SSHD: Memory exhaustion in SFTP client via unsolicited SFTP replies7.5 High
- apache software foundation mina sshdApache MINA SSHD: Memory exhaustion in SFTP v6 check-file-name/check-file-handle extension6.5 Medium
- apache software foundation mina sshdApache MINA SSHD: LDAP password authentication ineffective9.1 Critical
- codesys control for beaglebone sl, control for empc-a/imx6 sl, control for iot2000 sl +15 more +17 moreImproper Synchronization in Monitoring in CODESYS Control Runtime7.2 High
- mispMISP Event Delegation Mass Assignment Allows Retargeting Delegation to Arbitrary Events8.7 High
ntfs-3g_ntfsprogsSUSESecurity update for ntfs-3g_ntfsprogsNo score- moodleMoodle: csrf in xml grade import6.5 Medium
- moodleMoodle: user list filters bypass profile field visibility2.7 Low
- moodleMoodle: xss via password reset link due to insufficient username escaping4.3 Medium
- moodleMoodle: group validation missing when enrolling user to course4.3 Medium
- moodleMoodle: missing capability check allows unauthorised grade penalty recalculation4.3 Medium
- moodleMoodle: incorrect capability check in ai generate image web service2.7 Low
- moodleMoodle: manual enrolment page accessible when plugin disabled2.2 Low
- moodleMoodle: xss in forum post templates due to insufficient escaping4.6 Medium
- moodleMoodle: arbitrary class instantiation via report builder audience classname2.2 Low
- moodleMoodle: user profile information disclosure via grade web service4.3 Medium
- moodleMoodle: sql injection in question bank web service5.5 Medium
- moodleMoodle: ssrf risk in url downloader via ipv4-mapped ipv6 address bypass4.3 Medium
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Reflected Cross-site Scripting5.1 Medium
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Missing Authentication9.3 Critical
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Arbitrary File Read7.1 High
- digiwin easyflow .netDigiWin｜EasyFlow .NET - SQL Injection7.1 High
- digiwin easyflow .netDigiWin｜EasyFlow .NET - Insecure Deserialization9.3 Critical
- rockiger reactpress – create react app for wordpressReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter6.4 Medium
- Show moreLoading…