CVEs published September 6, 2026
92 CVEs were published on September 6, 2026: 12 critical, 24 high. 1 is now in CISA KEV.
- Published
- 92
- Critical
- 12
- High
- 24
- Medium
- 55
- Low
- 1
- Unrated
- 0
- Now in CISA KEV
- 1
- Fix available
- 47
Most affected products
- curl
- 9
- SourceCodester Class and Exam Timetabling System
- 9
- itsourcecode Sales and Inventory System
- 6
- h3js h3 · h3
- 5
- pmmp PocketMine-MP · pocketmine/pocketmine-mp
- 4
- SourceCodester Online Voting System
- 4
- DALIBO PostgreSQL Anonymizer
- 3
- DefaultFuction CRM
- 3
- Mstfakts College-Management-System
- 3
- Tenda HG10
- 3
Critical 12
- CVE-2026-86304MojoX::Authentication versions before 0.006 for Perl allow SAML authentication bypass because parse_assertion builds Net::SAML2::Binding::POST without a trust anchorMojoX-Authentication
- CVE-2026-19931Negotiate ambient user conn reusecurl
- CVE-2026-18924HTTP/2 server push UAFcurl
- CVE-2026-86219Authen::SASL::Perl::DIGEST_MD5 versions before 2.2100 for Perl accept replayed authentication responses via unverified nonce in server_stepAuthen-SASL
- CVE-2026-86259OpenMAIC before 1.0.1 SSRF via Environment-Gated URL ValidationTHU-MAIC OpenMAIC
- CVE-2026-86167Tenda HG10 Boa formgponConf os command injectionTenda HG10
- CVE-2026-86165Tenda HG10 formURL buffer overflowTenda HG10
- CVE-2026-75816Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Account Takeover via '_acf_objects' Object Identifiershabti Frontend Admin by DynamiApps
- CVE-2026-16310MemberDash <= 1.8.5 - Unauthenticated Account Takeover via Insecure Direct Object Reference via 'id' ParameterLearnDash MemberDash
- CVE-2026-86218pre-authentication remote code executionN-able N-central
- CVE-2026-86153Tenda CP3 Redirect.cpp SetRedirectEnable privileges managementTenda CP3
- CVE-2026-86152Tenda CP3 Kylin AutoAddWifi.cpp ThreadProc os command injectionTenda CP3
High 24
- CVE-2026-82209domain-scoped PSL domain cookiecurl
- CVE-2026-82208wolfSSL CA-cache hit overrides callbackcurl
- CVE-2026-80255secure cookie attribute bypass with tabcurl
- CVE-2026-80231native CA store conn reusecurl
- CVE-2026-80230OpenSSL pinning bypasscurl
- CVE-2026-80229OpenSSL provider use-after-freecurl
- CVE-2026-13608OpenLDAP SASL authentication bypasscurl
- CVE-2026-82750Unbounded EIP-7702 authorization list in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors account delegationZenHive mpp
- CVE-2026-82751Unbounded key authorization in mpp Tempo fee-payer sponsorship inflates gas cost and sponsors access-key provisioningZenHive mpp
- CVE-2026-19633PostgreSQL Anonymizer: unprivileged masked users can execute code via operators, domain casts and view subqueriesDALIBO PostgreSQL Anonymizer
- CVE-2026-86283MISP UiBeta Collection View Bypasses Event ACL, Exposing Unauthorized Event DataMISP
- CVE-2026-86258nbviewer through 1.0.1 Path Traversal via LocalFileHandlerjupyter nbviewer
- CVE-2026-86255wger before 2.5 Uncontrolled Resource Consumption via date_sequencewger-project wger · wger
- CVE-2026-86253h3 before 1.15.6 Path Traversal via Percent-Encoded Dot Segmentsh3js h3 · h3
- CVE-2026-86251h3 before 1.15.9 Path Traversal via Double Decodingh3js h3 · h3
- CVE-2026-86250h3 before 2.0.1-rc.18 Denial of Service via Unbounded Chunked Cookieh3js h3 · h3
- CVE-2022-51009PocketMine-MP before 4.7.2 Denial of Service via Skin Geometrypmmp PocketMine-MP · pocketmine/pocketmine-mp
- CVE-2021-48007PocketMine-MP before 3.18.1 Denial of Service via MovePlayerPacketpmmp PocketMine-MP · pocketmine/pocketmine-mp
- CVE-2020-37277PocketMine-MP before 3.15.4 Denial of Service via InventoryTransactionpmmp PocketMine-MP · pocketmine/pocketmine-mp
- CVE-2026-86242Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Buildsmaximhq Bifrost
- CVE-2026-84219Kirki 6.2.1 - 6.2.5 - Unauthenticated Stored XSS via HTML Entity DecodingKirki
- CVE-2026-18480SureCart < 4.6.3 - Subscriber+ Administrator Account TakeoverSureCart
- CVE-2026-86166Tenda HG10 Boa Web Server formWanRedirect buffer overflowTenda HG10
- CVE-2026-18056HivePress Authentication <= 1.1.4 - Unauthenticated Authentication Bypass via 'access_token' Parameter to Facebook AuthenticatorHivePress Authentication
Medium, low and unrated 56
- CVE-2026-86235itsourcecode Sales and Inventory System pos_transac.php add sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86234itsourcecode Sales and Inventory System cust_transac.php add sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86233itsourcecode Sales and Inventory System us_del.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86232itsourcecode Sales and Inventory System sup_del.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86231mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocationmwiede jsch
- CVE-2026-86228JeecgBoot AiragModelController.java exportXls access controlJeecgBoot
- CVE-2026-86227valkey-io valkey kvstore.c kvstoreGetHashtable out-of-boundsvalkey-io valkey
- CVE-2026-86226Projectwolds Online Attendance System profile.php cross site scriptingProjectwolds Online Attendance System
- CVE-2026-86225SourceCodester Class and Exam Timetabling System modal_add_room.php mysqli_query sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86224SourceCodester Class and Exam Timetabling System modal_add_product.php mysqli_query sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86223SourceCodester Class and Exam Timetabling System modal_add_coursea.php mysqli_query sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86222SourceCodester Class and Exam Timetabling System modal_add_course2.php mysqli_query sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86221SourceCodester Class and Exam Timetabling System modal_add_course1.php mysqli_query sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86220SourceCodester Class and Exam Timetabling System modal_add_course.php mysqli_query sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-83534PostgreSQL Anonymizer: Privilege escalation to superuser via anon.anonymize_database_parallel()DALIBO PostgreSQL Anonymizer
- CVE-2026-19634PostgreSQL Anonymizer: SQL injection in import_database_rules() and import_roles_rules() via crafted object names / JSONDALIBO PostgreSQL Anonymizer
- CVE-2026-86217code-projects Hotel and Tourism Reservation in PHP Database Backup hotel_db%20(1).sql information disclosurecode-projects Hotel and Tourism Reservation in PHP
- CVE-2026-86216code-projects Hotel and Tourism Reservation in PHP details.php cross site scriptingcode-projects Hotel and Tourism Reservation in PHP
- CVE-2026-86215Mstfakts College-Management-System Logout server.php session expirationMstfakts College-Management-System
- CVE-2026-86214Mstfakts College-Management-System login.php improper authenticationMstfakts College-Management-System
- CVE-2026-86213Mstfakts College-Management-System Search university.php mysqli_query sql injectionMstfakts College-Management-System
- CVE-2026-86257wger before 2.6 CSV Formula Injection via member exportwger-project wger · wger
- CVE-2026-86256wger before 2.6 Open Redirect via trainer-login next parameterwger-project wger · wger
- CVE-2026-86254wger Incomplete Authorization Fix Cross-Tenant Account Deletionwger-project wger
- CVE-2026-86252h3 before 1.15.9 SSE Event Injection via Carriage Returnh3js h3 · h3
- CVE-2026-86205h3 before 2.0.1-rc.18 Open Redirect via redirectBack()h3js h3 · h3
- CVE-2022-51008PocketMine-MP before 4.12.3 Denial of Service via Unauthenticated Sessionspmmp PocketMine-MP
- CVE-2021-48006PocketMine-MP before 4.0.3 Operator Privilege Escalation via Case Sensitivitypmmp PocketMine-MP · pocketmine/pocketmine-mp
- CVE-2026-86212Open5GS AMF/MME improper authorizationOpen5GS
- CVE-2026-86211rabindralamsal inventory-management-system Login index.php sql injectionrabindralamsal inventory-management-system
- CVE-2026-86210SourceCodester Class and Exam Timetabling System delete_user_account.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-80437Ninja Forms 3.14.10 - 3.15.1 - Unauthenticated Arbitrary Shortcode Execution via IP and Referer Merge TagsNinja Forms
- CVE-2026-80439Redirection for Contact Form 7 2.2.7 - 3.2.10 - Unauthenticated Arbitrary Shortcode Execution via Action Setting Mail-TagsRedirection for Contact Form
- CVE-2026-19862JetFormBuilder < 3.6.5.2 - Unauthenticated Email Header Injection via Send Email ActionJetFormBuilder
- CVE-2026-19859JetFormBuilder < 3.6.5.2 - Unauthenticated Arbitrary Shortcode Execution via 'status' ParameterJetFormBuilder
- CVE-2026-86209SourceCodester Class and Exam Timetabling System delete_user.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86208SourceCodester Class and Exam Timetabling System delete_teacher.php sql injectionSourceCodester Class and Exam Timetabling System
- CVE-2026-86183diem-project diem dmWidget BasedmWidgetActions.class.php authorizationdiem-project diem
- CVE-2026-86182diem-project diem dmConsole actions.class.php executeCommand cross-site request forgerydiem-project diem
- CVE-2026-86181code-projects Task Management System User Profile Update UpdateUserProfile.php cross site scriptingcode-projects Task Management System
- CVE-2026-86180code-projects Task Management System In PHP Login index.php sql injectioncode-projects Task Management System In PHP
- CVE-2026-86179code-projects Daily Expense Manager Database Backup exp_ak.sql information disclosurecode-projects Daily Expense Manager
- CVE-2026-86172DefaultFuction CRM delete.php sql injectionDefaultFuction CRM
- CVE-2026-86171DefaultFuction CRM delete.php sql injectionDefaultFuction CRM
- CVE-2026-85038B2BKing < 5.2.40 - Unauthenticated B2B Group Assignment and Approval Bypass via Registration Role SelectionB2BKing — Ultimate WooCommerce B2B and Wholesale Plugin — W…
- CVE-2026-84028Bold Page Builder < 5.9.9 - Contributor+ Stored XSS via Slider Elements' additional_settingsBold Page Builder
- CVE-2026-75793SureCart < 4.7.0 - Unauthenticated Account Creation with Automatic LoginSureCart
- CVE-2026-13159Real Estate Papi <= 1.0.5 - Subscriber+ Plugin InstallationReal Estate Papi
- CVE-2026-86170DefaultFuction CRM edit.php sql injectionDefaultFuction CRM
- CVE-2026-86168code-projects Content Management System login.php sql injectioncode-projects Content Management System
- CVE-2026-86164itsourcecode Sales and Inventory System trans_view.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86163itsourcecode Sales and Inventory System pro_del.php sql injectionitsourcecode Sales and Inventory System
- CVE-2026-86162SourceCodester Online Voting System ajax.php login sql injectionSourceCodester Online Voting System
- CVE-2026-86161SourceCodester Online Voting System ajax.php delete_category sql injectionSourceCodester Online Voting System
- CVE-2026-86160SourceCodester Online Voting System ajax.php delete_voting sql injectionSourceCodester Online Voting System
- CVE-2026-86159SourceCodester Online Voting System ajax.php save_user sql injectionSourceCodester Online Voting System