# CVEs published 2026-09-13

132 CVEs were published on September 13, 2026: 6 critical, 26 high. Days are UTC.

- [CVE-2026-90606](https://cve.now/CVE-2026-90606.md): Totolink A3002MU boa formIpv6Setup buffer overflow (CVSS 9.4, Totolink A3002MU)
- [CVE-2026-90605](https://cve.now/CVE-2026-90605.md): Totolink A3002MU boa formFilter buffer overflow (CVSS 9.4, Totolink A3002MU)
- [CVE-2026-90604](https://cve.now/CVE-2026-90604.md): Totolink A3002MU Anchor Tag cross site scripting (CVSS 5.1, Totolink A3002MU)
- [CVE-2026-90603](https://cve.now/CVE-2026-90603.md): Anil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload (CVSS 6.9, Anil-matcha Open-Generative-AI)
- [CVE-2026-15892](https://cve.now/CVE-2026-15892.md): Heap memory leak in mcumgr settings-management handlers on access-hook rejection leads to denial of service (CVSS 5.3, zephyrproject zephyr)
- [CVE-2026-15891](https://cve.now/CVE-2026-15891.md): NULL pointer dereference in Zephyr MQTT-SN client when removing a non-responsive gateway (CVSS 7.5, zephyrproject zephyr)
- [CVE-2026-90602](https://cve.now/CVE-2026-90602.md): Anil-matcha Open-Generative-AI Studio Components ImageStudio.js renderHistory cross site scripting (CVSS 5.1, Anil-matcha Open-Generative-AI)
- [CVE-2026-90601](https://cve.now/CVE-2026-90601.md): getzep graphiti REST API main.py improper authentication (CVSS 6.9, getzep graphiti)
- [CVE-2026-90600](https://cve.now/CVE-2026-90600.md): itsourcecode Sales and Inventory System inv\_edit1.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-90599](https://cve.now/CVE-2026-90599.md): Rizwan17 inventory-management-system process.php cross-site request forgery (CVSS 5.3, Rizwan17 inventory-management-system)
- [CVE-2026-90598](https://cve.now/CVE-2026-90598.md): jaygajera17 E-commerce-project-springBoot UserController.java UserController.updateUser authorization (CVSS 5.3, jaygajera17 E-commerce-project-springBoot)
- [CVE-2026-90597](https://cve.now/CVE-2026-90597.md): itsourcecode Sales and Inventory System sup\_edit1.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-90596](https://cve.now/CVE-2026-90596.md): embedded-graphics image\_raw.rs new/bytes\_per\_row integer overflow (CVSS 6.9, embedded-graphics)
- [CVE-2026-90595](https://cve.now/CVE-2026-90595.md): wxiaoqi Spring-Cloud-Platform OnlineController.java OnlineController.getOnlineInfo authorization (CVSS 5.3, wxiaoqi Spring-Cloud-Platform)
- [CVE-2026-90594](https://cve.now/CVE-2026-90594.md): wxiaoqi Spring-Cloud-Platform Permission Service PermissionService.java PermissionService.checkUserPermission authorization (CVSS 5.3, wxiaoqi Spring-Cloud-Platform)
- [CVE-2026-90593](https://cve.now/CVE-2026-90593.md): embedded-graphics image\_raw.rs draw\_sub\_image integer overflow (CVSS 6.9, embedded-graphics)
- [CVE-2026-90584](https://cve.now/CVE-2026-90584.md): TooTallNate Java-WebSocket Fragmentation Draft\_6455.java processFrameContinuousAndNonFin allocation of resources (CVSS 6.9, TooTallNate Java-WebSocket)
- [CVE-2026-89050](https://cve.now/CVE-2026-89050.md): Quads Ads Manager for Google AdSense \< 3.0.5 - Subscriber+ Ad-Selling Payment Bypass via Unverified Success Return URL (CVSS 4.3, Quads Ads Manager for Google AdSense)
- [CVE-2026-88802](https://cve.now/CVE-2026-88802.md): MDJM Event Management and Mobile Events Manager - Unauthenticated Arbitrary Post Deletion (CVSS 7.5, MDJM Event Management · Mobile Events Manager)
- [CVE-2026-88793](https://cve.now/CVE-2026-88793.md): YouTube Embed 10.0 - 10.3 - Unauthenticated Stored XSS via youram\_server (CVSS 8.8, YouTube Embed)
- [CVE-2026-85129](https://cve.now/CVE-2026-85129.md): Hoo Companion 1.0.2 - Unauthenticated Stored XSS via Theme Settings Import (CVSS 8.8, Hoo Companion)
- [CVE-2026-81648](https://cve.now/CVE-2026-81648.md): CryptoPayment Gateway 1.2.1 - 1.2.2 - Unauthenticated Arbitrary File Deletion and Settings Update via Unguarded AJAX Router (CVSS 10.0, CryptoPayment Gateway)
- [CVE-2026-74933](https://cve.now/CVE-2026-74933.md): GenieWords 1.5.27 - 1.5.34 - Unauthenticated Stored XSS and Configuration Overwrite (CVSS 8.8, GenieWords)
- [CVE-2026-90583](https://cve.now/CVE-2026-90583.md): kagisearch smallweb Query String Rendering sw.py index cross site scripting (CVSS 5.3, kagisearch smallweb)
- [CVE-2026-90582](https://cve.now/CVE-2026-90582.md): evanchiu serverless-todo API Todo Endpoint index.js saveTodos resource consumption (CVSS 6.9, evanchiu serverless-todo)
- [CVE-2026-90581](https://cve.now/CVE-2026-90581.md): cym1102 nginxWebUI autoUpdate MainController.autoUpdate code injection (CVSS 5.3, cym1102 nginxWebUI)
- [CVE-2026-90580](https://cve.now/CVE-2026-90580.md): FlowiseAI Flowise Evaluations Endpoint index.ts axios.post server-side request forgery (CVSS 5.3, FlowiseAI Flowise)
- [CVE-2026-90579](https://cve.now/CVE-2026-90579.md): cheshire-cat-ai Cheshire Cat AI custom\_auth\_handler.py \_authorize\_http\_key missing authentication (CVSS 6.9, cheshire-cat-ai Cheshire Cat AI)
- [CVE-2026-90578](https://cve.now/CVE-2026-90578.md): GPAC MP4Box list.c gf\_list\_count use after free (CVSS 4.8, GPAC)
- [CVE-2026-90577](https://cve.now/CVE-2026-90577.md): GPAC MP4Box base\_scenegraph.c gf\_node\_get\_field heap-based overflow (CVSS 4.8, GPAC)
- [CVE-2026-90576](https://cve.now/CVE-2026-90576.md): GPAC MP4Box base\_scenegraph.c gf\_node\_list\_add\_child null pointer dereference (CVSS 4.8, GPAC)
- [CVE-2026-90575](https://cve.now/CVE-2026-90575.md): PHPGurukul Small CRM Login Success login.php unserialize deserialization (CVSS 6.3, PHPGurukul Small CRM)
- [CVE-2026-90574](https://cve.now/CVE-2026-90574.md): itsourcecode Sales and Inventory System emp\_transac.php add sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-90573](https://cve.now/CVE-2026-90573.md): GPAC MP4Box vrml\_tools.c gf\_sg\_mfurl\_del null pointer dereference (CVSS 4.8, GPAC)
- [CVE-2026-90572](https://cve.now/CVE-2026-90572.md): davenardella snap7 s7\_micro\_client.cpp opUpload memory corruption (CVSS 5.1, davenardella snap7)
- [CVE-2026-90571](https://cve.now/CVE-2026-90571.md): Exrick xmall Order Printing order-print.jsp cross site scripting (CVSS 5.3, Exrick xmall)
- [CVE-2026-90570](https://cve.now/CVE-2026-90570.md): linlinjava litemall Product Detail index.vue AdminGoodsService.validate cross site scripting (CVSS 4.8, linlinjava litemall)
- [CVE-2026-90569](https://cve.now/CVE-2026-90569.md): linlinjava litemall Admin Topic index.vue AdminTopicController.validate cross site scripting (CVSS 4.8, linlinjava litemall)
- [CVE-2026-90568](https://cve.now/CVE-2026-90568.md): moxi624 Mogu Blog v2 blogSort Endpoint info.ftl BlogSortServiceImpl.addBlogSort cross site scripting (CVSS 5.1, moxi624 Mogu Blog)
- [CVE-2026-90567](https://cve.now/CVE-2026-90567.md): quequnlong shiyi-blog Search index.vue highlightKeyword cross site scripting (CVSS 5.1, quequnlong shiyi-blog)
- [CVE-2026-90566](https://cve.now/CVE-2026-90566.md): Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization (CVSS 6.9, Rizwan17 inventory-management-system)
- [CVE-2026-90565](https://cve.now/CVE-2026-90565.md): Rizwan17 inventory-management-system dashboard.php access control (CVSS 6.9, Rizwan17 inventory-management-system)
- [CVE-2026-90564](https://cve.now/CVE-2026-90564.md): quequnlong shiyi-blog chat sendMsg Endpoint index.vue SysChatMsgMapper.getChatMsgList cross site scripting (CVSS 5.1, quequnlong shiyi-blog)
- [CVE-2026-90563](https://cve.now/CVE-2026-90563.md): maliangnansheng bbs-springboot ArticleController.java utils.toToc cross site scripting (CVSS 5.1, maliangnansheng bbs-springboot)
- [CVE-2026-90529](https://cve.now/CVE-2026-90529.md): DataEase Symbolic Map symbolic-map.ts buildTooltip cross site scripting (CVSS 5.1, DataEase)
- [CVE-2026-90528](https://cve.now/CVE-2026-90528.md): TDuckApp tduck-platform Form Write View index.vue cross site scripting (CVSS 5.1, TDuckApp tduck-platform)
- [CVE-2026-90527](https://cve.now/CVE-2026-90527.md): quequnlong shiyi-blog Add Message API index.vue cross site scripting (CVSS 5.3, quequnlong shiyi-blog)
- [CVE-2026-90526](https://cve.now/CVE-2026-90526.md): SourceCodester School Registration and Fee System save\_class.php sql injection (CVSS 6.9, SourceCodester School Registration and Fee System)
- [CVE-2026-90525](https://cve.now/CVE-2026-90525.md): itsourcecode Sales and Inventory System cust\_pos\_trans.php sql injection (CVSS 5.3, itsourcecode Sales and Inventory System)
- [CVE-2026-90524](https://cve.now/CVE-2026-90524.md): jaychouchannel Tourism-Management-System Update Endpoint missing authentication (CVSS 6.9, jaychouchannel Tourism-Management-System)
- [CVE-2026-90523](https://cve.now/CVE-2026-90523.md): jaychouchannel Tourism-Management-System User Register Endpoint UsersController.java privileges management (CVSS 6.9, jaychouchannel Tourism-Management-System)
- [CVE-2026-90522](https://cve.now/CVE-2026-90522.md): jaychouchannel Tourism-Management-System Password Recovery UsersController.java resetPass password recovery (CVSS 6.9, jaychouchannel Tourism-Management-System)
- [CVE-2026-90521](https://cve.now/CVE-2026-90521.md): jaychouchannel Tourism-Management-System CRUD MenpiaodingdanController.java authorization (CVSS 5.3, jaychouchannel Tourism-Management-System)
- [CVE-2026-90520](https://cve.now/CVE-2026-90520.md): jaychouchannel Tourism-Management-System Authorization Interceptor AuthorizationInterceptor.java improper authorization (CVSS 5.3, jaychouchannel Tourism-Management-System)
- [CVE-2026-90783](https://cve.now/CVE-2026-90783.md): MKVToolNix through 101.0 Heap Buffer Overflow via avilib ODML Superindex Integer Wraparound (CVSS 7.8, Moritz Bunkus MKVToolNix)
- [CVE-2026-90782](https://cve.now/CVE-2026-90782.md): S2OPC through 1.7.3 NULL Pointer Dereference in alloc\_notification\_message\_items() (CVSS 5.3, Systerel S2OPC)
- [CVE-2026-90781](https://cve.now/CVE-2026-90781.md): alsa-lib through 1.2.16.1 Off-by-One Stack Buffer Overflow in \_\_snd\_ctl\_ascii\_elem\_id\_parse() (CVSS 4.8, ALSA Project alsa-lib)
- [CVE-2026-90519](https://cve.now/CVE-2026-90519.md): PHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload (CVSS 5.3, PHPGurukul Bank Locker Management System)
- [CVE-2026-90518](https://cve.now/CVE-2026-90518.md): PHPGurukul Bank Locker Management System sidebar.php access control (CVSS 5.3, PHPGurukul Bank Locker Management System)
- [CVE-2026-90517](https://cve.now/CVE-2026-90517.md): PHPGurukul Bank Locker Management System view-assign-locker.php authorization (CVSS 6.9, PHPGurukul Bank Locker Management System)
- [CVE-2026-90780](https://cve.now/CVE-2026-90780.md): SIPp through 3.7.7 Buffer Overflow via Oversized SIP Header Content (CVSS 8.7, sipp)
- [CVE-2026-90779](https://cve.now/CVE-2026-90779.md): SIPp through 3.7.7 Stack Buffer Overflow via createAuthHeader Algorithm Parameter (CVSS 8.7, sipp)
- [CVE-2026-90778](https://cve.now/CVE-2026-90778.md): SIPp through 3.7.7 Buffer Overflow via SIP To Header Tag (CVSS 8.7, sipp)
- [CVE-2026-90777](https://cve.now/CVE-2026-90777.md): ESPnet before 202609 Remote Code Execution via Unsafe Deserialization (CVSS 8.7, espnet)
- [CVE-2026-90776](https://cve.now/CVE-2026-90776.md): Nodemailer 9.1.0 through 10.0.4 Denial of Service via Quadratic Address Parsing (CVSS 8.7, nodemailer)
- [CVE-2026-90516](https://cve.now/CVE-2026-90516.md): SourceCodester School Registration and Fee System pay\_report.php sql injection (CVSS 6.9, SourceCodester School Registration and Fee System)
- [CVE-2026-90515](https://cve.now/CVE-2026-90515.md): SourceCodester School Registration and Fee System delete\_stud.php sql injection (CVSS 6.9, SourceCodester School Registration and Fee System)
- [CVE-2026-90775](https://cve.now/CVE-2026-90775.md): PostGIS address\_standardizer through 3.7.0 Out-of-Bounds Read via Unvalidated Rule Weight (CVSS 7.1, PostGIS address\_standardizer)
- [CVE-2026-90514](https://cve.now/CVE-2026-90514.md): SourceCodester School Registration and Fee System save\_stud.php sql injection (CVSS 6.9, SourceCodester School Registration and Fee System)
- [CVE-2026-90774](https://cve.now/CVE-2026-90774.md): rustypaste before 0.18.1 Path Traversal via filename header (CVSS 8.7, orhun rustypaste)
- [CVE-2026-90773](https://cve.now/CVE-2026-90773.md): procs through 0.14.12 Terminal Escape Sequence Injection via Command (CVSS 2.4, dalance procs)
- [CVE-2026-90772](https://cve.now/CVE-2026-90772.md): Amundsen Frontend through 4.3.0 Stored XSS via Description (CVSS 8.3, amundsen-io amundsen-frontend)
- [CVE-2026-90771](https://cve.now/CVE-2026-90771.md): joi before 17.13.8 and 18.2.9 Prototype Pollution via messages (CVSS 6.3, hapijs joi · joi)
- [CVE-2026-90770](https://cve.now/CVE-2026-90770.md): Spug through 3.4.0 Remote Code Execution via ping\_check (CVSS 8.7, openspug spug)
- [CVE-2026-90769](https://cve.now/CVE-2026-90769.md): Open Notebook before 1.11.0 Server-Side Request Forgery via link-source (CVSS 8.3, lfnovo open-notebook)
- [CVE-2026-90768](https://cve.now/CVE-2026-90768.md): CAPEv2 through commit 471ee4b REST API Task Endpoints Missing Ownership Check (CVSS 8.6, kevoreilly CAPEv2)
- [CVE-2026-90767](https://cve.now/CVE-2026-90767.md): Froxlor before 2.3.12 SSH Key Injection via authorized\_keys (CVSS 7.1, Froxlor)
- [CVE-2026-90562](https://cve.now/CVE-2026-90562.md): LangBot before 4.10.11 Authentication Bypass via Weak Recovery Key (CVSS 9.2, langbot-app LangBot)
- [CVE-2026-90561](https://cve.now/CVE-2026-90561.md): Strapi 4.x through 4.26.2 and 5.x before 5.48.1 Stored XSS via WYSIWYG (CVSS 9.3, strapi)
- [CVE-2026-90513](https://cve.now/CVE-2026-90513.md): simalexan api-lambda-send-email-ses API Gateway Endpoint template.yml SES.sendEmail missing authentication (CVSS 6.9, simalexan api-lambda-send-email-ses)
- [CVE-2026-90511](https://cve.now/CVE-2026-90511.md): GongShengyue OnlineBooks listSplit BooksServlet.java sql injection (CVSS 5.3, GongShengyue OnlineBooks)
- [CVE-2026-90510](https://cve.now/CVE-2026-90510.md): dromara orion-visor HostKeyServiceImpl.java HostKeyServiceImpl.encryptKey hard-coded key (CVSS 6.9, dromara orion-visor)
- [CVE-2026-90509](https://cve.now/CVE-2026-90509.md): dromara orion-visor ExposeApiAspect.java ExposeApiAspect.beforeExposeApi hard-coded credentials (CVSS 6.9, dromara orion-visor)
- [CVE-2026-90508](https://cve.now/CVE-2026-90508.md): Chengdu Qilu Technology Ludashi Message Dispatch ProtectFilter64.sys MessageNotifyCallback authorization (CVSS 4.6, Chengdu Qilu Technology Ludashi)
- [CVE-2026-90507](https://cve.now/CVE-2026-90507.md): vvbbnn00 WARP-Clash-API Subscription subscription.py get\_surge\_subscription access control (CVSS 5.3, vvbbnn00 WARP-Clash-API)
- [CVE-2026-90506](https://cve.now/CVE-2026-90506.md): vvbbnn00 WARP-Clash-API Save Account Job race condition (CVSS 2.3, vvbbnn00 WARP-Clash-API)
- [CVE-2026-90505](https://cve.now/CVE-2026-90505.md): vvbbnn00 WARP-Clash-API doUpdateLicenseKey race condition (CVSS 2.3, vvbbnn00 WARP-Clash-API)
- [CVE-2026-90504](https://cve.now/CVE-2026-90504.md): vvbbnn00 WARP-Clash-API authorized missing authentication (CVSS 6.9, vvbbnn00 WARP-Clash-API)
- [CVE-2026-90503](https://cve.now/CVE-2026-90503.md): Chengdu Qilu Technology Ludashi ComputerZ\_x64.sys sub\_11008 information disclosure (CVSS 4.6, Chengdu Qilu Technology Ludashi)
- [CVE-2026-90502](https://cve.now/CVE-2026-90502.md): stilleshan ServerStatus Stats Generation main.cpp cross site scripting (CVSS 5.1, stilleshan ServerStatus)
- [CVE-2026-90501](https://cve.now/CVE-2026-90501.md): lenve vhr HrMapper.xml HrInfoController.updateHr privileges management (CVSS 5.3, lenve vhr)
- [CVE-2026-90500](https://cve.now/CVE-2026-90500.md): lenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload (CVSS 5.3, lenve vhr)
- [CVE-2026-90499](https://cve.now/CVE-2026-90499.md): lenve vhr Password Update pass HrInfoController.updatePass improper authorization (CVSS 5.3, lenve vhr)
- [CVE-2026-90498](https://cve.now/CVE-2026-90498.md): lenve vhr vhr.sql default credentials (CVSS 6.9, lenve vhr)
- [CVE-2026-89080](https://cve.now/CVE-2026-89080.md): Really Simple Security \< 9.8.1 - Unauthenticated 2FA Bypass via Email Provider State Demotion (CVSS 7.5, Really Simple Security)
- [CVE-2026-88995](https://cve.now/CVE-2026-88995.md): Bookit \< 2.6.0.1 - Unauthenticated Appointment PII Disclosure via Availability Check (CVSS 5.3, Bookit — Booking & Appointment Calendar)
- [CVE-2026-88912](https://cve.now/CVE-2026-88912.md): rtMedia for WordPress, BuddyPress and bbPress \< 4.7.12 - Subscriber+ Arbitrary Activity Privacy Modification via IDOR (CVSS 4.2, rtMedia for WordPress, BuddyPress and bbPress)
- [CVE-2026-88764](https://cve.now/CVE-2026-88764.md): Simple Membership \< 4.7.8 - Subscriber+ Membership Level Escalation via PayPal Standard subsc\_ref (CVSS 5.4, Simple Membership)
- [CVE-2026-86407](https://cve.now/CVE-2026-86407.md): User Registration & Membership \< 5.2.8 - Unauthenticated User Data Disclosure via Membership Thank You Page (CVSS 3.7, User Registration & Membership)
- [CVE-2026-86406](https://cve.now/CVE-2026-86406.md): User Registration & Membership \< 5.2.8 - Subscriber+ Privilege Escalation via Membership Purchase (CVSS 7.5, User Registration & Membership)
- [CVE-2026-80072](https://cve.now/CVE-2026-80072.md): User Registration & Membership \< 5.2.8 - Unauthenticated Open Redirect via Login Redirect Parameters (CVSS 4.7, User Registration & Membership)
- [CVE-2026-80071](https://cve.now/CVE-2026-80071.md): User Registration & Membership \< 5.2.8 - Author+ Privilege Escalation to Administrator (CVSS 7.2, User Registration & Membership)
- [CVE-2026-77773](https://cve.now/CVE-2026-77773.md): Social Contact Form (FormyChat) \< 2.15.8 - Unauthenticated Gravity Forms Entry Disclosure via formychat\_get\_gf\_entry (CVSS 5.3, Contact Form to Chat Apps | Click to Chat to Order)
- [CVE-2026-90497](https://cve.now/CVE-2026-90497.md): Fengoffice Feng Office Task Title Output add\_task.php getTitle cross site scripting (CVSS 5.1, Fengoffice Feng Office)
- [CVE-2026-90496](https://cve.now/CVE-2026-90496.md): Fengoffice Feng Office Reorder Handlers MoreController.class.php update\_dimension\_order sql injection (CVSS 5.1, Fengoffice Feng Office)
- [CVE-2026-90679](https://cve.now/CVE-2026-90679.md): Forgejo 13.0.0 through 16.0.4, when "\[federation\] ENABLED = true" is set, has a spoofing issue that affects identity integrity but does not (CVSS 4.3, Forgejo)
- [CVE-2026-90678](https://cve.now/CVE-2026-90678.md): An issue was discovered in HAProxy 3.3.0 through 3.4.4 and in 3.5-dev1 through 3.5-dev5. (CVSS 7.5, HAProxy)
- [CVE-2026-90495](https://cve.now/CVE-2026-90495.md): Fengoffice Feng Office Legacy API CompanyWebsite.class.php instance-\>findAll sql injection (CVSS 6.9, Fengoffice Feng Office)
- [CVE-2026-90494](https://cve.now/CVE-2026-90494.md): restify node-restify static.js serveStatic path traversal (CVSS 6.9, node-restify)
- [CVE-2026-90493](https://cve.now/CVE-2026-90493.md): Tonec Internet Download Manager Kernel Driver idmwfp.sys access control (CVSS 9.3, Tonec Internet Download Manager)
- [CVE-2026-90668](https://cve.now/CVE-2026-90668.md): The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the number of HTTP request headers, which allows remote attacker (CVSS 8.7, UnrealIRCd)
- [CVE-2026-90492](https://cve.now/CVE-2026-90492.md): webgjc web\_robot web.py controller\_recover os command injection (CVSS 5.3, webgjc web\_robot)
- [CVE-2026-90491](https://cve.now/CVE-2026-90491.md): sanjevirau gsubs Electron index.js showQuerySuccessPage code injection (CVSS 5.3, sanjevirau gsubs)
- [CVE-2026-90490](https://cve.now/CVE-2026-90490.md): lenve vhr MailReceiver deserialization (CVSS 5.3, lenve vhr)
- [CVE-2020-15875](https://cve.now/CVE-2020-15875.md): An issue was discovered in LibreNMS 1.65. (CVSS 5.0, LibreNMS)
- [CVE-2022-42917](https://cve.now/CVE-2022-42917.md): In FRRouting FRR before 8.5, the service user (usually frr) can escalate its privileges to root by monitoring the configuration directory (/ (CVSS 6.7, FRRouting)
- [CVE-2024-53922](https://cve.now/CVE-2024-53922.md): An issue was discovered in the buffer queue driver in Samsung Automotive Processor Exynos Auto 8890, V7, V9, and V920. (CVSS 5.7, Samsung Exynos 8890 firmware)
- [CVE-2025-45480](https://cve.now/CVE-2025-45480.md): Floodlight 71fe8a7 allows disruption of host communication via link spoofing. (CVSS 3.0, projectfloodlight Floodlight)
- [CVE-2025-63842](https://cve.now/CVE-2025-63842.md): A Cross-Site Scripting (XSS) vulnerability in the web backend for the Repetico app 1.9.7.31 for Android allows a remote authenticated user t (CVSS 5.4, Repetico web backend)
- [CVE-2025-64059](https://cve.now/CVE-2025-64059.md): Grav 1.7.50.2 allows admins to enter JavaScript via the Home Page editor. (CVSS 1.8, getgrav Grav)
- [CVE-2025-70819](https://cve.now/CVE-2025-70819.md): Zettlab D6 Ultra before 1.7.0 allows mounting /etc/passwd and /etc/shadow in a container via ".." manipulations such as volumes: - ../../../ (CVSS 6.3, Zettlab D6 Ultra)
- [CVE-2025-70820](https://cve.now/CVE-2025-70820.md): Zettlab D6 Ultra before 1.7.0 allows absolute path traversal to reach folders other than the personal folder. (CVSS 3.5, Zettlab D6 Ultra)
- [CVE-2026-29810](https://cve.now/CVE-2026-29810.md): CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic. (CVSS 4.3, CyberPanel)
- [CVE-2026-29811](https://cve.now/CVE-2026-29811.md): CyberPanel before 2.4.4 attempts to detect an "alais" domain (i.e., a second domain that serves the same content as a primary domain; normal (CVSS 7.7, CyberPanel)
- [CVE-2026-29812](https://cve.now/CVE-2026-29812.md): CyberPanel before 2.4.4 has no logging for actions that could potentially manipulate the child domains list. (CVSS 4.3, CyberPanel)
- [CVE-2026-35867](https://cve.now/CVE-2026-35867.md): A Command Injection vulnerability exists in the bs\_SetLimitCli\_info function within the libshare.so library of the LB-LINK router AC1900\_AZ2 (CVSS 3.1, LB-LINK AC1900 firmware)
- [CVE-2026-36453](https://cve.now/CVE-2026-36453.md): Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. (CVSS 7.4, Rhymix)
- [CVE-2026-36989](https://cve.now/CVE-2026-36989.md): A SQL Injection vulnerability exists in LuxSoft LuxCal through 5.3.4L via rssfeed.php and common/retrieve.php. (CVSS 5.8, LuxSoft LuxCal Web Calendar)
- [CVE-2026-37008](https://cve.now/CVE-2026-37008.md): CrewAI before fb2323b offers a Python blocklist approach that operates at the wrong level of abstraction, a different vulnerability than CVE (CVSS 8.1, CrewAI)
- [CVE-2026-38332](https://cve.now/CVE-2026-38332.md): TinyEXIF before 1.1.0 has a heap-based buffer over-read in EntryParser::Fetch methods reachable via a crafted SubjectArea length. (CVSS 2.9, cdcseacave TinyEXIF)
- [CVE-2026-52296](https://cve.now/CVE-2026-52296.md): FFmpeg before 9.0 has an out-of-bounds read because of missing required padding in WMA extradata allocation paths in libavcodec/wmaenc.c. (CVSS 2.9, FFmpeg)
- [CVE-2026-52297](https://cve.now/CVE-2026-52297.md): FFmpeg before 9.0 has an out-of-bounds read because there is insufficiently padded extradata in the MOV parsing path in mov\_read\_iacb in lib (CVSS 2.9, FFmpeg)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2026-09-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.