# CVEs published 2026-09-07

252 CVEs were published on September 7, 2026: 17 critical, 73 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2026-86544](https://cve.now/CVE-2026-86544.md): knowns before 0.30.0 Authorization Bypass via Misclassified Code Actions (CVSS 7.2, knowns-dev knowns)
- [CVE-2026-86543](https://cve.now/CVE-2026-86543.md): knowns before 0.30.0 Unauthenticated Management API Exposure (CVSS 9.3, knowns-dev knowns)
- [CVE-2026-86542](https://cve.now/CVE-2026-86542.md): knowns before 0.30.0 Path Traversal via Import Name (CVSS 8.8, knowns-dev knowns)
- [CVE-2026-86541](https://cve.now/CVE-2026-86541.md): knowns before 0.30.0 Path Traversal via code.replace MCP action (CVSS 7.2, knowns-dev knowns)
- [CVE-2026-86540](https://cve.now/CVE-2026-86540.md): knowns before 0.30.0 Arbitrary Code Execution via LSP Binary (CVSS 8.5, knowns-dev knowns · knowns)
- [CVE-2026-86539](https://cve.now/CVE-2026-86539.md): knowns through 0.33.0 Server-Side Request Forgery via embedding-models endpoint (CVSS 6.9, knowns-dev knowns)
- [CVE-2026-86538](https://cve.now/CVE-2026-86538.md): knowns before 0.30.0 Path Traversal via templateFile parameter (CVSS 8.7, knowns-dev knowns)
- [CVE-2026-86439](https://cve.now/CVE-2026-86439.md): knowns before 0.30.0 Path Traversal via MCP doc and memory tools (CVSS 8.7, knowns-dev knowns · knowns)
- [CVE-2026-82584](https://cve.now/CVE-2026-82584.md): Terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata (CVSS 2.3, ash-project igniter)
- [CVE-2026-82586](https://cve.now/CVE-2026-82586.md): AshLua read operation aggregate bypasses the exposed-field allow-list, exposing private attributes (CVSS 8.2, ash-project ash\_lua)
- [CVE-2026-81638](https://cve.now/CVE-2026-81638.md): Non-canonical ULID spellings are accepted and alias to the same record in ash\_double\_entry (CVSS 2.1, ash-project ash\_double\_entry)
- [CVE-2026-82758](https://cve.now/CVE-2026-82758.md): ash\_authentication\_oauth2\_server treats an empty resolved secret as valid, opening the gated Dynamic Client Registration endpoint (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server)
- [CVE-2026-82757](https://cve.now/CVE-2026-82757.md): ash\_authentication\_oauth2\_server CIMD fetcher classifies IPv4-in-IPv6 and site-local addresses as public, allowing SSRF (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server)
- [CVE-2026-82756](https://cve.now/CVE-2026-82756.md): ash\_authentication\_oauth2\_server interpolates a tenant-derived value into the WWW-Authenticate challenge without escaping, allowing header parameter injection (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server)
- [CVE-2026-82755](https://cve.now/CVE-2026-82755.md): ash\_authentication\_oauth2\_server serves tenant-specific OAuth metadata as publicly cacheable without Vary, enabling cross-tenant confusion (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server)
- [CVE-2026-82754](https://cve.now/CVE-2026-82754.md): ash\_authentication\_oauth2\_server aliases every protocol endpoint under /.well-known, bypassing path-scoped controls (CVSS 6.3, ash-project ash\_authentication\_oauth2\_server)
- [CVE-2026-82753](https://cve.now/CVE-2026-82753.md): Unauthenticated authorize requests create unbounded, never-expiring CIMD client rows and cache entries in ash\_authentication\_oauth2\_server (CVSS 8.2, ash-project ash\_authentication\_oauth2\_server)
- [CVE-2026-86438](https://cve.now/CVE-2026-86438.md): Lara Dashboard before 1.3.2 Missing Authorization in Marketplace Module Install Action (CVSS 8.6, laradashboard)
- [CVE-2026-86437](https://cve.now/CVE-2026-86437.md): Lara Dashboard before 1.3.2 Incorrect Authorization in Core-Upgrade Archive Upload (CVSS 8.6, laradashboard)
- [CVE-2026-86436](https://cve.now/CVE-2026-86436.md): Lara Dashboard before 1.3.2 Missing Authorization in Post-Builder Media Upload Endpoints (CVSS 5.3, laradashboard)
- [CVE-2026-75650](https://cve.now/CVE-2026-75650.md): Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) (CVSS 10.0, KEV, Adobe Commerce · Adobe Magento Open Source)
- [CVE-2026-16028](https://cve.now/CVE-2026-16028.md): Protocol::HTTP2 versions before 1.14 for Perl allow memory exhaustion via closed streams that stream\_state never removes from the connection stream table (CVSS 7.5, Protocol-HTTP2)
- [CVE-2026-86287](https://cve.now/CVE-2026-86287.md): Net::IP::LPM versions before 1.12 for Perl accept malformed prefix lengths (CVSS 7.5, Net-IP-LPM)
- [CVE-2026-80166](https://cve.now/CVE-2026-80166.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privileg (CVSS 7.8, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80176](https://cve.now/CVE-2026-80176.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Plaintext Storage (CVSS 4.7, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79639](https://cve.now/CVE-2026-79639.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 7.6, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86506](https://cve.now/CVE-2026-86506.md): In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profiler's injected pprof server exposed profiling data (CVSS 5.9, JetBrains GoLand)
- [CVE-2026-86505](https://cve.now/CVE-2026-86505.md): In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust check leaked project metadata to JetBrains Marketplace (CVSS 3.3, JetBrains IntelliJ IDEA)
- [CVE-2026-86504](https://cve.now/CVE-2026-86504.md): In JetBrains IntelliJ IDEA before 2026.2.2 missing project-trust confirmation before building a Dev Container allowed host-level code execut (CVSS 7.8, JetBrains IntelliJ IDEA)
- [CVE-2026-86503](https://cve.now/CVE-2026-86503.md): In JetBrains IntelliJ IDEA before 2026.2.2 opening an untrusted project could trigger SSRF via Kubernetes spec-source URL fetching (CVSS 3.3, JetBrains IntelliJ IDEA)
- [CVE-2026-86502](https://cve.now/CVE-2026-86502.md): In JetBrains IntelliJ IDEA before 2026.2.2 missing TLS and authentication on the IJent gRPC server allowed local code execution on Remote De (CVSS 8.4, JetBrains IntelliJ IDEA)
- [CVE-2026-86501](https://cve.now/CVE-2026-86501.md): In JetBrains IntelliJ IDEA before 2026.2.2 terminal command input could be written to idea.log (CVSS 2.8, JetBrains IntelliJ IDEA)
- [CVE-2026-86500](https://cve.now/CVE-2026-86500.md): In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user with project update permissions grant themselves Project Adm (CVSS 5.5, JetBrains YouTrack)
- [CVE-2026-86499](https://cve.now/CVE-2026-86499.md): In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all group names to any user, regardless of visibility permission (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-86498](https://cve.now/CVE-2026-86498.md): In JetBrains YouTrack before 2025.3.160480, 2026.1.14047 pUT requests on link sub-resources allowed modification linked entities without up (CVSS 7.7, JetBrains YouTrack)
- [CVE-2026-86497](https://cve.now/CVE-2026-86497.md): In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-authentication allowed a project administrator to exfiltrate st (CVSS 6.8, JetBrains YouTrack)
- [CVE-2026-86496](https://cve.now/CVE-2026-86496.md): In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk authorized reporters exposed reporter email addresses (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-86495](https://cve.now/CVE-2026-86495.md): In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed creating knowledge base articles in inaccessible projects (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-86494](https://cve.now/CVE-2026-86494.md): In JetBrains YouTrack before 2026.2.18634 cloning a whiteboard allowed unauthorized changes to links on inaccessible issues (CVSS 7.7, JetBrains YouTrack)
- [CVE-2026-86493](https://cve.now/CVE-2026-86493.md): In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed read-only users to create and modify whiteboard cards (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-86492](https://cve.now/CVE-2026-86492.md): In JetBrains YouTrack before 2026.2.18634 a shared token cache allowed cross-tenant theft of GitHub App installation tokens (CVSS 8.5, JetBrains YouTrack)
- [CVE-2026-86491](https://cve.now/CVE-2026-86491.md): In JetBrains YouTrack before 2026.2.18634 stored XSS was possible via project and organization icon uploads (CVSS 3.5, JetBrains YouTrack)
- [CVE-2026-86490](https://cve.now/CVE-2026-86490.md): In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed overwriting of bundled apps via the app import endpoint (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-86489](https://cve.now/CVE-2026-86489.md): In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclosed private issues and starred folders across organizations (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-86488](https://cve.now/CVE-2026-86488.md): In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListConfig endpoints exposed private saved searches (CVSS 6.5, JetBrains YouTrack)
- [CVE-2026-86487](https://cve.now/CVE-2026-86487.md): In JetBrains YouTrack before 2026.2.18634 a crafted WebSocket message allowed read-only whiteboard users to modify canvas content (CVSS 3.1, JetBrains YouTrack)
- [CVE-2026-86486](https://cve.now/CVE-2026-86486.md): In JetBrains YouTrack before 2026.2.18634 the generic VCS webhook handler failed open when its secret was blank (CVSS 3.7, JetBrains YouTrack)
- [CVE-2026-86485](https://cve.now/CVE-2026-86485.md): In JetBrains YouTrack before 2026.2.18634 iP spoofing via HTTP headers allowed forged Bitbucket webhooks (CVSS 3.5, JetBrains YouTrack)
- [CVE-2026-86484](https://cve.now/CVE-2026-86484.md): In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assignee names led to stored XSS (CVSS 4.6, JetBrains YouTrack)
- [CVE-2026-86483](https://cve.now/CVE-2026-86483.md): In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile board cards was possible (CVSS 5.4, JetBrains YouTrack)
- [CVE-2026-86482](https://cve.now/CVE-2026-86482.md): In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assignments allowed privilege escalation (CVSS 8.8, JetBrains YouTrack)
- [CVE-2026-86481](https://cve.now/CVE-2026-86481.md): In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of restricted project icons (CVSS 4.3, JetBrains YouTrack)
- [CVE-2026-86480](https://cve.now/CVE-2026-86480.md): In JetBrains Hub before 2026.2.52442 an unauthenticated attacker could register a trusted service and gain superuser privileges (CVSS 9.8, JetBrains Hub)
- [CVE-2026-86479](https://cve.now/CVE-2026-86479.md): In JetBrains YouTrack before 2026.2.18788, 2026.1.14055, 2025.3.161254 missing authorisation allowed access to restricted REST API resourc (CVSS 8.0, JetBrains YouTrack)
- [CVE-2026-86478](https://cve.now/CVE-2026-86478.md): In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthenticated account takeo (CVSS 9.8, JetBrains YouTrack)
- [CVE-2026-80125](https://cve.now/CVE-2026-80125.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 5.9, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80167](https://cve.now/CVE-2026-80167.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80126](https://cve.now/CVE-2026-80126.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Locking (CVSS 6.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79975](https://cve.now/CVE-2026-79975.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80058](https://cve.now/CVE-2026-80058.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86469](https://cve.now/CVE-2026-86469.md): Glib2: toctou symlink race in \`g\_file\_create\_replace\_destination\` fallback path (CVSS 5.3, Red Hat Enterprise Linux · Red Hat Hardened Images +1)
- [CVE-2026-80127](https://cve.now/CVE-2026-80127.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali (CVSS 7.2, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79642](https://cve.now/CVE-2026-79642.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 5.6, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79943](https://cve.now/CVE-2026-79943.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validati (CVSS 4.8, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79691](https://cve.now/CVE-2026-79691.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 7.3, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79643](https://cve.now/CVE-2026-79643.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect (CVSS 7.3, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80054](https://cve.now/CVE-2026-80054.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Incorrect Permiss (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86321](https://cve.now/CVE-2026-86321.md): java-json-tools jackson-coreutils URL Validation JsonLoader.java JsonLoader.fromURL server-side request forgery (CVSS 6.9, java-json-tools jackson-coreutils)
- [CVE-2026-86319](https://cve.now/CVE-2026-86319.md): java-json-tools json-patch Patch Operation JsonPatch.java JsonPatch.apply resource consumption (CVSS 6.9, java-json-tools json-patch)
- [CVE-2026-86318](https://cve.now/CVE-2026-86318.md): java-json-tools json-patch JsonMergePatchDeserializer.java JsonMergePatch.fromJson stack-based overflow (CVSS 6.9, java-json-tools json-patch)
- [CVE-2026-78488](https://cve.now/CVE-2026-78488.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutrali (CVSS 6.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-7861](https://cve.now/CVE-2026-7861.md): Code Injection in Next4Biz's CSM (Customer Service Management) (CVSS 9.8, Next4Biz Information Technologies CSM)
- [CVE-2026-80056](https://cve.now/CVE-2026-80056.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sens (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-6377](https://cve.now/CVE-2026-6377.md): Path Traversal in Next4Biz's CSM (Customer Service Management) (CVSS 7.5, Next4Biz Information Technologies CSM)
- [CVE-2026-86317](https://cve.now/CVE-2026-86317.md): ggml-org llama.cpp RPC Server ggml-rpc.cpp deserialize\_tensor assertion (CVSS 6.9, ggml-org llama.cpp)
- [CVE-2026-19843](https://cve.now/CVE-2026-19843.md): 389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor (CVSS 8.4, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +9)
- [CVE-2026-18922](https://cve.now/CVE-2026-18922.md): 389-ds-base: 389-ds-base: sasl plain authentication allows privilege escalation to directory manager via stale identity in cyrus sasl auxiliary property (CVSS 9.8, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-18453](https://cve.now/CVE-2026-18453.md): 389-ds-base: 389-ds-base: pre-authentication null pointer dereference via paged results and use\_one\_backend control in op\_shared\_search (CVSS 7.5, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-18355](https://cve.now/CVE-2026-18355.md): 389-ds-base: 389-ds-base: heap buffer overflow via sasl wrapped-record length lower-bound underflow in sasl\_io\_start\_packet() (CVSS 7.5, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-80057](https://cve.now/CVE-2026-80057.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79644](https://cve.now/CVE-2026-79644.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 7.4, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79645](https://cve.now/CVE-2026-79645.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentica (CVSS 8.2, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-78480](https://cve.now/CVE-2026-78480.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentica (CVSS 7.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86310](https://cve.now/CVE-2026-86310.md): itsourcecode Sales and Inventory System cust\_edit1.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-80170](https://cve.now/CVE-2026-80170.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded (CVSS 6.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-79734](https://cve.now/CVE-2026-79734.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 5.9, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86309](https://cve.now/CVE-2026-86309.md): itsourcecode Sales and Inventory System pro\_searchfrm.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-78487](https://cve.now/CVE-2026-78487.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80128](https://cve.now/CVE-2026-80128.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authenti (CVSS 6.4, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80130](https://cve.now/CVE-2026-80130.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Trav (CVSS 7.1, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-80131](https://cve.now/CVE-2026-80131.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitati (CVSS 7.4, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86308](https://cve.now/CVE-2026-86308.md): light0011 cms Debug Mode config.php information disclosure (CVSS 6.9, light0011 cms)
- [CVE-2026-80129](https://cve.now/CVE-2026-80129.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitati (CVSS 6.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-14444](https://cve.now/CVE-2026-14444.md): WP Fusion (Pro) \<= 3.47.13 - Authenticated (Subscriber+) Privilege Escalation via ThriveCart Auto Login 'role' Parameter (CVSS 7.5, Very Good Plugins WP Fusion)
- [CVE-2026-12757](https://cve.now/CVE-2026-12757.md): Email Subscribers & Newsletters \<= 5.9.27 - Unauthenticated Arbitrary Shortcode Execution via Subscriber Name Field (CVSS 6.5, icegram Email Subscribers & Newsletters – Email Marketing,…)
- [CVE-2026-80164](https://cve.now/CVE-2026-80164.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certific (CVSS 7.4, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-76560](https://cve.now/CVE-2026-76560.md): 389-ds-base: 389-ds: anonymous ldap client can defeat selfdn aci bind-rule checks via empty bind dn (CVSS 7.5, Red Hat Directory Server 11.5 E4S for RHEL · Red Hat Dir… +5)
- [CVE-2026-86307](https://cve.now/CVE-2026-86307.md): light0011 cms cross-site request forgery (CVSS 5.3, light0011 cms)
- [CVE-2026-86452](https://cve.now/CVE-2026-86452.md): MISP Unauthenticated Mail Endpoints Allow Unbounded Storage Consumption and Request Flooding (CVSS 8.7, MISP)
- [CVE-2026-86306](https://cve.now/CVE-2026-86306.md): light0011 cms Cookie Helper UserModel.class.php improper authentication (CVSS 6.9, light0011 cms)
- [CVE-2026-86451](https://cve.now/CVE-2026-86451.md): MISP Event Graph Object Reference Lookup Exposes References from Unauthorized Objects (CVSS 5.3, MISP)
- [CVE-2026-80238](https://cve.now/CVE-2026-80238.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Un (CVSS 9.3, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2022-51018](https://cve.now/CVE-2022-51018.md): PocketMine-MP before 3.26.5 and 4.0.5 Input Validation via Book Pages (CVSS 7.1, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51017](https://cve.now/CVE-2022-51017.md): PocketMine-MP before 3.26.5 and 4.0.5 Denial of Service via Skin Data (CVSS 8.7, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51016](https://cve.now/CVE-2022-51016.md): PocketMine-MP 3.x before 3.27.0 Authentication Bypass via Login Replay (CVSS 5.3, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51015](https://cve.now/CVE-2022-51015.md): PocketMine-MP before 4.0.6 Denial of Service via PlayerActionPacket (CVSS 7.1, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51014](https://cve.now/CVE-2022-51014.md): PocketMine-MP before 4.0.7 Denial of Service via JSON Decoding (CVSS 7.1, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51013](https://cve.now/CVE-2022-51013.md): PocketMine-MP before 4.2.3 Denial of Service via NBT Metadata (CVSS 7.1, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51012](https://cve.now/CVE-2022-51012.md): PocketMine-MP before 4.2.9 Denial of Service via NBT Deserialization (CVSS 7.1, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51011](https://cve.now/CVE-2022-51011.md): PocketMine-MP before 4.2.10 Denial of Service via Chat Messages (CVSS 5.3, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2022-51010](https://cve.now/CVE-2022-51010.md): PocketMine-MP before 4.4.2 Server Crash via Item ID (CVSS 7.1, pmmp PocketMine-MP · pocketmine/pocketmine-mp)
- [CVE-2026-80178](https://cve.now/CVE-2026-80178.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privileg (CVSS 5.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86435](https://cve.now/CVE-2026-86435.md): commonmark 1.5.0 before 2.8.4 Denial of Service via Footnote (CVSS 8.7, thephpleague commonmark)
- [CVE-2026-86434](https://cve.now/CVE-2026-86434.md): commonmark 2.0.0 through 2.8.3 Denial of Service via Slug Collision (CVSS 8.7, thephpleague commonmark · league/commonmark)
- [CVE-2026-86433](https://cve.now/CVE-2026-86433.md): commonmark 1.5.0 before 2.8.4 Denial of Service via Attributes (CVSS 8.7, thephpleague commonmark)
- [CVE-2026-86432](https://cve.now/CVE-2026-86432.md): commonmark 2.0.0 before 2.8.4 Denial of Service via XML (CVSS 6.9, thephpleague commonmark)
- [CVE-2026-86431](https://cve.now/CVE-2026-86431.md): commonmark before 2.9.1 XSS via AttributesExtension form feed bypass (CVSS 6.9, thephpleague commonmark · league/commonmark)
- [CVE-2026-86430](https://cve.now/CVE-2026-86430.md): league/commonmark before 2.9.1 Denial of Service via parsing (CVSS 8.7, thephpleague commonmark · league/commonmark)
- [CVE-2026-86429](https://cve.now/CVE-2026-86429.md): commonmark before 2.9.1 Denial of Service via SmartPunct and Attributes (CVSS 8.7, thephpleague commonmark · league/commonmark)
- [CVE-2026-86428](https://cve.now/CVE-2026-86428.md): commonmark 1.5.0 before 2.10.0 Denial of Service via Attributes (CVSS 8.7, thephpleague commonmark · league/commonmark)
- [CVE-2026-86427](https://cve.now/CVE-2026-86427.md): LibreNMS before 26.8.0 Argument Injection via graph\_title (CVSS 8.7, librenms)
- [CVE-2026-86426](https://cve.now/CVE-2026-86426.md): LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion (CVSS 9.2, librenms)
- [CVE-2026-86425](https://cve.now/CVE-2026-86425.md): ImageMagick before 7.1.2-30 Heap-use-after-free via Layer (CVSS 4.8, ImageMagick)
- [CVE-2026-86424](https://cve.now/CVE-2026-86424.md): ImageMagick before 7.1.2-30 Path Traversal via TOCTOU Symlink Race (CVSS 2.0, ImageMagick)
- [CVE-2026-86423](https://cve.now/CVE-2026-86423.md): ImageMagick before 7.1.2-30 Heap-use-after-free via GetList (CVSS 4.8, ImageMagick)
- [CVE-2026-86422](https://cve.now/CVE-2026-86422.md): ImageMagick before 7.1.2-30 Path Policy TOCTOU Symlink Race (CVSS 1.0, ImageMagick)
- [CVE-2026-86421](https://cve.now/CVE-2026-86421.md): ImageMagick before 7.1.2-30 Memory Leak via MSL decoder (CVSS 6.3, ImageMagick)
- [CVE-2026-86420](https://cve.now/CVE-2026-86420.md): ImageMagick before 7.1.2-30 Denial of Service Memory Budget (CVSS 6.3, ImageMagick)
- [CVE-2026-80135](https://cve.now/CVE-2026-80135.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or (CVSS 7.5, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86305](https://cve.now/CVE-2026-86305.md): light0011 cms Upload.class.php upload unrestricted upload (CVSS 6.9, light0011 cms)
- [CVE-2026-80132](https://cve.now/CVE-2026-80132.md): ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authenticat (CVSS 8.1, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86441](https://cve.now/CVE-2026-86441.md): MISP Dashboard Organisation Widgets Bypass Organisation-Index Restrictions and Expose Hidden Organisation Data (CVSS 2.3, MISP)
- [CVE-2026-80133](https://cve.now/CVE-2026-80133.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Trav (CVSS 7.4, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86440](https://cve.now/CVE-2026-86440.md): MISP Dashboard Button Widget Allows Stored XSS via Unsafe javascript: and Backslash URLs (CVSS 5.1, MISP)
- [CVE-2026-80134](https://cve.now/CVE-2026-80134.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded (CVSS 7.7, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86419](https://cve.now/CVE-2026-86419.md): MISP Insufficient Outbound URL Validation Allows SSRF and Credential Disclosure via Feed Redirects and TAXII Discovery (CVSS 7.0, MISP)
- [CVE-2026-6223](https://cve.now/CVE-2026-6223.md): OTP Bypass in Bahçelievler Muncipality's BiHayat App (CVSS 9.4, Bahçelievler Muncipality BiHayat App)
- [CVE-2026-8279](https://cve.now/CVE-2026-8279.md): Masteriyo LMS \<= 2.2.0 - Missing Authorization to Unauthenticated Arbitrary Course Progress Deletion (CVSS 5.3, Masteriyo LMS – LMS Course Builder, Quizzes & Certificates)
- [CVE-2026-6431](https://cve.now/CVE-2026-6431.md): User Profile Builder \<= 3.15.7 - Unauthenticated Stored Cross-Site Scripting via 'Biographical Info' Meta Field (CVSS 7.2, cozmoslabs User Profile Builder – Beautiful User Registrati…)
- [CVE-2026-4945](https://cve.now/CVE-2026-4945.md): Otter Blocks \<= 3.1.7 - Missing Authorization to Unauthenticated Purchase Verification Bypass (CVSS 5.3, themeisle Otter Blocks – Gutenberg Blocks, Page Builder for…)
- [CVE-2026-12853](https://cve.now/CVE-2026-12853.md): Flamingo \<= 2.6.2 - Authenticated (Contributor+) Missing Authorization to Unauthorized Tag Information Disclosure via wp.getTerms and ajax-tag-search (CVSS 5.4, rocklobsterinc Flamingo)
- [CVE-2026-61410](https://cve.now/CVE-2026-61410.md): Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorizat (CVSS 9.4, Dell Secure Connect Gateway 5.0 - Application · Dell Secure…)
- [CVE-2026-86416](https://cve.now/CVE-2026-86416.md): ILIAS before 9.23, 10.11, and 11.4 Missing Authorization in Group Object Action Methods (CVSS 5.3, ILIAS-eLearning e.V. ILIAS)
- [CVE-2026-86418](https://cve.now/CVE-2026-86418.md): MISP Dashboard Organisation Picker Exposes Hidden Organisation Metadata to Unauthorized Users (CVSS 2.3, MISP)
- [CVE-2026-61409](https://cve.now/CVE-2026-61409.md): Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements use (CVSS 7.3, Dell Secure Connect Gateway (SCG) 5.0 Application · Dell Se…)
- [CVE-2026-86417](https://cve.now/CVE-2026-86417.md): MISP Dashboard Template REST API Exposes Template Owner Email Addresses to Unauthorized Users (CVSS 5.3, MISP)
- [CVE-2026-86303](https://cve.now/CVE-2026-86303.md): 92181 markdown md.c lds out-of-bounds (CVSS 6.9, 92181 markdown)
- [CVE-2026-86408](https://cve.now/CVE-2026-86408.md): MISP Missing Authorization in Cryptographic Key View Exposes Signing Keys from Protected Events (CVSS 7.1, MISP)
- [CVE-2026-79678](https://cve.now/CVE-2026-79678.md): Freeipa: idm: freeipa: idp-add eval() reachable before authorization check allows environment disclosure and denial of service (CVSS 8.1, Red Hat Enterprise Linux)
- [CVE-2026-76578](https://cve.now/CVE-2026-76578.md): Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci (CVSS 9.8, Red Hat Enterprise Linux)
- [CVE-2026-86302](https://cve.now/CVE-2026-86302.md): code-projects Hospital Information System SQL Database Backup File his.sql information disclosure (CVSS 6.9, code-projects Hospital Information System)
- [CVE-2026-78325](https://cve.now/CVE-2026-78325.md): XSS in Standard Notes on Android via Malicious Google Keep and Evernote HTML Import (CVSS 6.9, Standard Notes)
- [CVE-2026-86301](https://cve.now/CVE-2026-86301.md): code-projects Hospital Information System Patient Management editPatient.php cross site scripting (CVSS 5.1, code-projects Hospital Information System)
- [CVE-2026-86404](https://cve.now/CVE-2026-86404.md): Artemis-server: artemis-jms-client: artemis-core-client: undertow-core: wildfly-messaging-activemq-subsystem: artemis messaging handlers… (CVSS 8.8, Red Hat JBoss Enterprise Application Platform 8.1.8.GA ·… +4)
- [CVE-2026-86300](https://cve.now/CVE-2026-86300.md): Tenda AC9 Web Management R7WebsSecurityHandler improper authentication (CVSS 6.9, Tenda AC9)
- [CVE-2026-2390](https://cve.now/CVE-2026-2390.md): Powerkit \<= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Lazy Load Image Processing (CVSS 6.4, codesupplyco Powerkit – Supercharge your WordPress Site)
- [CVE-2026-86299](https://cve.now/CVE-2026-86299.md): Linksys RE7000 PingTest json.cgi platform\_event\_pingTest os command injection (CVSS 9.4, Linksys RE7000)
- [CVE-2026-82325](https://cve.now/CVE-2026-82325.md): A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a sy (CVSS 6.8, OpenVPN ovpn-dco-win)
- [CVE-2026-86298](https://cve.now/CVE-2026-86298.md): SourceCodester Class and Exam Timetabling System delete\_subject.php sql injection (CVSS 6.9, SourceCodester Class and Exam Timetabling System)
- [CVE-2026-77697](https://cve.now/CVE-2026-77697.md): Privilege Escalation (CVSS 6.3, Zohocorp ManageEngine Endpoint Central)
- [CVE-2026-86297](https://cve.now/CVE-2026-86297.md): D-Link DIR-605 L2TP Control Message tunnel.c tunnel\_set\_params off-by-one (CVSS 9.2, D-Link DIR-605)
- [CVE-2026-85640](https://cve.now/CVE-2026-85640.md): Privilege Escalation (CVSS 6.3, Zohocorp ManageEngine Endpoint Central)
- [CVE-2025-52657](https://cve.now/CVE-2025-52657.md): HCL MyXalytics is affected by multiple security vulnerabilities. (CVSS 3.5, HCL Software MyXalytics)
- [CVE-2025-52652](https://cve.now/CVE-2025-52652.md): HCL MyXalytics is affected by multiple security vulnerabilities. (CVSS 3.5, HCL Software MyXalytics)
- [CVE-2025-52651](https://cve.now/CVE-2025-52651.md): HCL MyXalytics is affected by multiple security vulnerabilities. (CVSS 3.5, HCL Software MyXalytics)
- [CVE-2026-77699](https://cve.now/CVE-2026-77699.md): Privilege Escalation (CVSS 5.0, Zohocorp ManageEngine Endpoint Central)
- [CVE-2026-86296](https://cve.now/CVE-2026-86296.md): D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow (CVSS 10.0, D-Link DIR-822A)
- [CVE-2026-19204](https://cve.now/CVE-2026-19204.md): A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory (CVSS 8.7, Eclipse Foundation Eclipse Jetty)
- [CVE-2026-86295](https://cve.now/CVE-2026-86295.md): D-Link DIR-895L udhcpcd serverpacket.c sendACK command injection (CVSS 6.9, D-Link DIR-895L)
- [CVE-2026-85201](https://cve.now/CVE-2026-85201.md): In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf m (CVSS 6.8, Eclipse Foundation Eclipse Ankaios)
- [CVE-2026-86294](https://cve.now/CVE-2026-86294.md): SourceCodester Simple Traffic Offense System Settings Update Endpoint save-settings.php cross site scripting (CVSS 5.3, SourceCodester Simple Traffic Offense System)
- [CVE-2026-86351](https://cve.now/CVE-2026-86351.md): MISP User Homepage Validation Allows Authenticated Open Redirect via Protocol-Relative URL (CVSS 5.1, MISP)
- [CVE-2026-77698](https://cve.now/CVE-2026-77698.md): Privilege Escalation (CVSS 5.7, Zohocorp ManageEngine Endpoint Central)
- [CVE-2026-86293](https://cve.now/CVE-2026-86293.md): SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication (CVSS 6.9, SourceCodester Simple Traffic Offense System)
- [CVE-2026-84173](https://cve.now/CVE-2026-84173.md): In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rul (CVSS 8.3, Eclipse Foundation Eclipse Ankaios)
- [CVE-2026-86347](https://cve.now/CVE-2026-86347.md): MISP Missing Authorization on Template File Upload Allows Authenticated Disk Exhaustion (CVSS 7.1, MISP)
- [CVE-2026-86292](https://cve.now/CVE-2026-86292.md): SourceCodester Simple Traffic Offense System User Creation saveuser.php missing authentication (CVSS 6.9, SourceCodester Simple Traffic Offense System)
- [CVE-2026-86291](https://cve.now/CVE-2026-86291.md): itsourcecode Sales and Inventory System us\_edit1.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-86342](https://cve.now/CVE-2026-86342.md): MISP Freetext Feed Preview Improper Authorization Exposes Restricted Event and Feed Information (CVSS 5.3, MISP)
- [CVE-2026-86290](https://cve.now/CVE-2026-86290.md): SourceCodester Online Voting System ajax.php save\_category sql injection (CVSS 6.9, SourceCodester Online Voting System)
- [CVE-2026-86289](https://cve.now/CVE-2026-86289.md): Ollama GGUF Decoder gguf.go readGGUFV1String integer overflow (CVSS 5.3, Ollama)
- [CVE-2026-84186](https://cve.now/CVE-2026-84186.md): Incorrect access control in PrestaShop (CVSS 6.9, PrestaShop)
- [CVE-2026-86332](https://cve.now/CVE-2026-86332.md): Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user (CVSS 6.5, Red Hat OpenShift AI)
- [CVE-2026-86288](https://cve.now/CVE-2026-86288.md): ModelCloud GPTQModel Triton dequantization kernel tritonv2.py out-of-bounds (CVSS 5.3, ModelCloud GPTQModel)
- [CVE-2026-84732](https://cve.now/CVE-2026-84732.md): Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via (CVSS 8.7, OpenVPN)
- [CVE-2026-86285](https://cve.now/CVE-2026-86285.md): BookStack Attachment Edit Endpoint AttachmentController.php getUpdateForm access control (CVSS 5.3, BookStack)
- [CVE-2026-18796](https://cve.now/CVE-2026-18796.md): QSPI flash encryption side-channel leakage (CVSS 6.8, Nordic Semiconductor ASA nRF5340)
- [CVE-2026-14297](https://cve.now/CVE-2026-14297.md): The Continuous Glucose Monitoring Service's Record Access Control Point (RACP) write handler \`memcpy\`s the entire attacker-supplied ATT write value into a fixed 20-byte BSS buffer. (CVSS 8.7, Nordic Semiconductor ASA nRF Connect SDK)
- [CVE-2026-86284](https://cve.now/CVE-2026-86284.md): jaychouchannel Tourism-Management-System CommonController.java getOption information disclosure (CVSS 6.9, jaychouchannel Tourism-Management-System)
- [CVE-2026-14296](https://cve.now/CVE-2026-14296.md): nRF54H20: MCUBoot can be tricked to executing unauthenticated code (CVSS 7.5, Nordic Semiconductor ASA nRF54H20)
- [CVE-2026-84256](https://cve.now/CVE-2026-84256.md): An argument parsing issue in OpenVPN 2.1\_rc10 through 2.6.22 and 2.7\_alpha1 through 2.7.7 on Windows allows remote authenticated users to ex (CVSS 7.7, OpenVPN)
- [CVE-2026-84226](https://cve.now/CVE-2026-84226.md): OpenVPN version 2.5.0 through 2.6.22 and 2.7\_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting a (CVSS 8.5, OpenVPN)
- [CVE-2026-86282](https://cve.now/CVE-2026-86282.md): jaychouchannel Tourism-Management-System CommonDao CommonController.java sql injection (CVSS 6.9, jaychouchannel Tourism-Management-System)
- [CVE-2026-78254](https://cve.now/CVE-2026-78254.md): Apache Ant: Path traversal in ftp and scp tasks allows arbitrary file write (CVSS 7.4, Apache Software Foundation Apache Ant)
- [CVE-2026-82312](https://cve.now/CVE-2026-82312.md): OpenVPN 2.0.0 through 2.6.22 and 2.7\_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NUL (CVSS 1.8, OpenVPN)
- [CVE-2026-81830](https://cve.now/CVE-2026-81830.md): The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directo (CVSS 5.6, OpenVPN)
- [CVE-2026-81738](https://cve.now/CVE-2026-81738.md): OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-S (CVSS 2.3, OpenVPN)
- [CVE-2026-86281](https://cve.now/CVE-2026-86281.md): SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery (CVSS 5.3, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-78221](https://cve.now/CVE-2026-78221.md): An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7\_alpha1 through 2.7.6 allows local authenticated users (CVSS 5.9, OpenVPN)
- [CVE-2026-78043](https://cve.now/CVE-2026-78043.md): The Windows Interactive Service in OpenVPN 2.7\_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration dir (CVSS 5.6, OpenVPN)
- [CVE-2026-86280](https://cve.now/CVE-2026-86280.md): SourceCodester Syllabus-Aligned Learning Management & Examination System cict\_portal.sql cleartext storage (CVSS 6.9, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-86279](https://cve.now/CVE-2026-86279.md): SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth\_process.php session fixiation (CVSS 5.3, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-86278](https://cve.now/CVE-2026-86278.md): SourceCodester Syllabus-Aligned Learning Management & Examination System manage\_subjects.php cross site scripting (CVSS 5.3, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-79698](https://cve.now/CVE-2026-79698.md): Advantech WISE-6610-NB Node-RED nodered\_lib\_apply command injection (CVSS 9.4, Advantech WISE-6610-NB · Advantech WISE-6610-EB +11)
- [CVE-2026-79697](https://cve.now/CVE-2026-79697.md): Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation\_apply command injection (CVSS 9.4, Advantech WISE-6610-NB · Advantech WISE-6610-EB +11)
- [CVE-2026-86277](https://cve.now/CVE-2026-86277.md): SourceCodester Syllabus-Aligned Learning Management & Examination System delete\_exam.php authorization (CVSS 6.9, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-86276](https://cve.now/CVE-2026-86276.md): SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials (CVSS 6.9, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-86275](https://cve.now/CVE-2026-86275.md): SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management (CVSS 6.9, SourceCodester Syllabus-Aligned Learning Management & Exami…)
- [CVE-2026-86274](https://cve.now/CVE-2026-86274.md): projeto-siga Authentication Flow ExAutenticacaoController.java ExAutenticacaoController.autenticar authorization (CVSS 6.9, projeto-siga siga)
- [CVE-2026-86273](https://cve.now/CVE-2026-86273.md): projeto-siga HTML-to-PDF Endpoint ExUtilController.java DownloadExterno.getUrl server-side request forgery (CVSS 6.9, projeto-siga siga)
- [CVE-2026-86272](https://cve.now/CVE-2026-86272.md): Beijing Meite Software Technology U+Smart Enjoyment WebSite UploadFormImg.ashx unrestricted upload (CVSS 6.9, Beijing Meite Software Technology U+Smart Enjoyment WebSite)
- [CVE-2026-86271](https://cve.now/CVE-2026-86271.md): FluentCMS PermissionManager.cs GetAccessible authorization (CVSS 5.1, FluentCMS)
- [CVE-2026-86270](https://cve.now/CVE-2026-86270.md): itsourcecode Sales and Inventory System settings\_edit.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-86315](https://cve.now/CVE-2026-86315.md): An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScri (CVSS 6.2, Samsung Opensource Escargot)
- [CVE-2026-86269](https://cve.now/CVE-2026-86269.md): itsourcecode Sales and Inventory System emp\_edit1.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-86268](https://cve.now/CVE-2026-86268.md): itsourcecode School Management System User\_Login.php sql injection (CVSS 6.9, itsourcecode School Management System)
- [CVE-2026-86267](https://cve.now/CVE-2026-86267.md): itsourcecode Information System Society Membership System check\_student.php sql injection (CVSS 5.3, itsourcecode Information System Society Membership System)
- [CVE-2026-86265](https://cve.now/CVE-2026-86265.md): itsourcecode Sales and Inventory System us\_transac.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-86264](https://cve.now/CVE-2026-86264.md): sfturing ssm\_pro Order Endpoint OrderController.java cross site scripting (CVSS 5.3, sfturing ssm\_pro)
- [CVE-2026-86263](https://cve.now/CVE-2026-86263.md): sfturing hosp\_order Order Cancellation OrderController.java orderRecordsService.cancelOrder authorization (CVSS 6.9, sfturing hosp\_order)
- [CVE-2026-86262](https://cve.now/CVE-2026-86262.md): sfturing hosp\_order Order OrderController.java updateOrderdiseaseInfo authorization (CVSS 6.9, sfturing hosp\_order)
- [CVE-2026-86314](https://cve.now/CVE-2026-86314.md): Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote at (CVSS 6.2, Samsung Opensource Walrus)
- [CVE-2026-86261](https://cve.now/CVE-2026-86261.md): sfturing hosp\_order Order Controller OrderController.java authorization (CVSS 6.9, sfturing hosp\_order)
- [CVE-2026-86313](https://cve.now/CVE-2026-86313.md): Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. (CVSS 7.8, Samsung Opensource Walrus)
- [CVE-2026-86260](https://cve.now/CVE-2026-86260.md): sfturing hosp\_order Password Recovery CommonUserController.java modifyPassWord unverified password change (CVSS 6.9, sfturing hosp\_order)
- [CVE-2026-20518](https://cve.now/CVE-2026-20518.md): In geniezone, there is a possible information disclosure due to a missing bounds check. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20517](https://cve.now/CVE-2026-20517.md): In geniezone, there is a possible escalation of privilege due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20515](https://cve.now/CVE-2026-20515.md): In gpu, there is a possible system crash due to use after free. (CVSS 5.5, MediaTek chipset)
- [CVE-2026-20514](https://cve.now/CVE-2026-20514.md): In Audio HAL, there is a possible information disclosure due to a missing permission check. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20513](https://cve.now/CVE-2026-20513.md): In Audio HAL, there is a possible information disclosure due to improper input validation. (CVSS 4.4, MediaTek chipset)
- [CVE-2026-20512](https://cve.now/CVE-2026-20512.md): In Audio HAL, there is a possible escalation of privilege due to improper input validation. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20511](https://cve.now/CVE-2026-20511.md): In SurfaceFlinger, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20510](https://cve.now/CVE-2026-20510.md): In camera middleware, there is a possible escalation of privilege due to double free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20509](https://cve.now/CVE-2026-20509.md): In Power HAL, there is a possible out of bounds write due to a missing bounds check. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20508](https://cve.now/CVE-2026-20508.md): In Power HAL, there is a possible escalation of privilege due to type confusion. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20507](https://cve.now/CVE-2026-20507.md): In Audio HAL, there is a possible escalation of privilege due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20506](https://cve.now/CVE-2026-20506.md): In Audio HAL, there is a possible escalation of privilege due to use after free. (CVSS 6.7, MediaTek chipset)
- [CVE-2026-20516](https://cve.now/CVE-2026-20516.md): In MiracastService, there is a possible escalation of privilege due to a confused deputy. (CVSS 5.5, MediaTek chipset)
- [CVE-2026-20504](https://cve.now/CVE-2026-20504.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20503](https://cve.now/CVE-2026-20503.md): In Modem, there is a possible system crash due to a missing bounds check. (CVSS 5.3, MediaTek chipset)
- [CVE-2026-20502](https://cve.now/CVE-2026-20502.md): In vdec, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.4, MediaTek chipset)
- [CVE-2026-20501](https://cve.now/CVE-2026-20501.md): In vdec, there is a possible out of bounds write due to a heap buffer overflow. (CVSS 8.4, MediaTek chipset)
- [CVE-2026-20500](https://cve.now/CVE-2026-20500.md): In Modem, there is a possible system crash due to improper input validation. (CVSS 5.5, MediaTek chipset)
- [CVE-2026-86245](https://cve.now/CVE-2026-86245.md): itsourcecode Sales and Inventory System sup\_transac.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-86244](https://cve.now/CVE-2026-86244.md): FastAdmin User Controller User.php login cross site scripting (CVSS 5.3, FastAdmin)
- [CVE-2026-86241](https://cve.now/CVE-2026-86241.md): liufee FeehiCMS Cookie Validation main-local.php hard-coded key (CVSS 5.3, liufee FeehiCMS)
- [CVE-2026-86240](https://cve.now/CVE-2026-86240.md): liufee FeehiCMS UEditor Uploader.php catchImage server-side request forgery (CVSS 5.1, liufee FeehiCMS)
- [CVE-2026-16876](https://cve.now/CVE-2026-16876.md): An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. (CVSS 9.3, NEC UNIVERGE IX-R/IX-V)
- [CVE-2026-86239](https://cve.now/CVE-2026-86239.md): liufee FeehiCMS UEditor Widget UeditorAction.php init unrestricted upload (CVSS 6.9, liufee FeehiCMS)
- [CVE-2026-86238](https://cve.now/CVE-2026-86238.md): projectworlds Online Examination System Feedback Form feedback.php cross site scripting (CVSS 5.3, projectworlds Online Examination System)
- [CVE-2026-86237](https://cve.now/CVE-2026-86237.md): openagents-org openagents http.py test\_default\_model server-side request forgery (CVSS 6.9, openagents-org openagents)
- [CVE-2026-86236](https://cve.now/CVE-2026-86236.md): itsourcecode Sales and Inventory System pro\_transac.php add sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-09-07
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.