CVEs published in September 2026
14,844 vulnerabilities, 1,524 critical, 36 exploited.
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Arbitrary File Write through Command Injection6.6 Medium
- py-pdf pypdfpypdf: Possible large memory usage when retrieving alphabetical page labels8.7 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway server-side request forgery9.1 Critical
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Unprotected Alternate Channel5.4 Medium
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Deserialization of Untrusted Data6.6 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Command Execution through Configuration Injection6.3 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Unrestricted Upload of File with Dangerous Type4.1 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Server-Side Request Forgery (SSRF)3.3 Low
- accellion kiteworks, kiteworks core +1 moreKiteworks Core deserialization of untrusted data8.1 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Incorrect Authorization6.5 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Insufficient Verification of Data Authenticity4.9 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Privilege Escalation through External Control of File Name or Path6.7 Medium
- py-pdf pypdfpypdf: Possible long runtimes with large amount of embedded files8.7 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Remote Code Execution through Server-Side Template Injection7.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Unrestricted Upload of File with Dangerous Type7.5 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core stored XSS8.7 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Uncontrolled Resource Consumption5.3 Medium
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms Missing Authentication for Critical Function7.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Improper Access Control9.4 Critical
- py-pdf pypdfpypdf: Possible long runtimes when generating appearance streams8.7 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Administrative Account Takeover through Stored Cross-site Scripting (XSS)9.3 Critical
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway Arbitrary File Write through Server-Side Template Injection6.5 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core Server-Side Request Forgery through CRLF Injection6.6 Medium
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway remote code execution7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core OS command injection7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core arbitrary file write7.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway server-side request forgery9.1 Critical
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway unsafe reflection7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core improper privilege management7.2 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core stored XSS8.7 High
- py-pdf pypdfpypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)8.7 High
- accellion kiteworks, kiteworks secure data forms +1 moreKiteworks Secure Data Forms server-side request forgery7.5 High
- accellion kiteworks, kiteworks core +1 moreKiteworks Core content injection4.3 Medium
- accellion kiteworks, kiteworks core +1 moreKiteworks Core SQL Injection7.2 High
- accellion kiteworks, kiteworks email protection gateway +1 moreKiteworks Email Protection Gateway path traversal7.2 High
- py-pdf pypdfpypdf: Possible large memory usage when parsing font data8.7 High
- py-pdf pypdfpypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)8.7 High
- py-pdf pypdfpypdf: Possible long runtimes/large memory usage when parsing indirect objects8.7 High
- py-pdf pypdfpypdf: Possible large memory usage when retrieving Roman page labels8.7 High
- piscinajs piscinapiscina: Prototype-pollution gadget in ThreadPool.options allows RCE via execArgv / loadBalancer / env9.2 Critical
- sqlalchemy makoMako: Path traversal via drive-letter URI on Windows in TemplateLookup6.5 Medium
- itron mv-90 xiImproperly Stored Credentials5.3 Medium
- garycourt uri-jsgarycourt uri-js Mailto Header mailto.ts URI.parse uncaught exception5.3 Medium
- patrickjuchli basic-ftpbasic-ftp: Quadratic-time CPU denial of service in Client.list() Unix directory-listing parser (RE_LINE backtracking)8.2 High
- openbsdIn ldapd in OpenBSD 7.8 before errata 057 and 7.9 before errata 021, delegated BSD authentication...9.2 Critical
- zeroclaw-labs zeroclawZeroClaw before 0.8.5 Path Traversal via Plugin Manifest wasm_path8.5 High
- openclaw windows nodeOpenClaw Windows Node before 2026.7.1 Remote Code Execution via Environment Override7.7 High
- openclaw windows nodeOpenClaw Windows Node through 2026.9.4 SSRF via canvas.present5.3 Medium
- openclaw windows nodeOpenClaw Windows Node before 2026.7.1 Remote Code Execution via system.execApprovals.set8.7 High
- openclaw windows nodeOpenClaw Windows Node before 2026.7.1 Denial of Service7.1 High
- Show moreLoading…