Patch Tuesday — September 2026
2026-09-08 · 204 CVEs
CVEs published or modified the week of 2026-09-08, partitioned by vendor.
Other vendors (204 CVEs across 86 vendors)
Mediatek, Inc. · 18 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-20502 | High | 8.4 | — | 2026-09-07 | In vdec, there is a possible out of bounds write due to a missing bounds check. |
CVE-2026-20501 | High | 8.4 | — | 2026-09-07 | In vdec, there is a possible out of bounds write due to a heap buffer overflow. |
CVE-2026-20517 | Medium | 6.7 | — | 2026-09-07 | In geniezone, there is a possible escalation of privilege due to use after free. |
CVE-2026-20511 | Medium | 6.7 | — | 2026-09-07 | In SurfaceFlinger, there is a possible memory corruption due to use after free. |
CVE-2026-20510 | Medium | 6.7 | — | 2026-09-07 | In camera middleware, there is a possible escalation of privilege due to double free. |
CVE-2026-20509 | Medium | 6.7 | — | 2026-09-07 | In Power HAL, there is a possible out of bounds write due to a missing bounds check. |
CVE-2026-20508 | Medium | 6.7 | — | 2026-09-07 | In Power HAL, there is a possible escalation of privilege due to type confusion. |
CVE-2026-20507 | Medium | 6.7 | — | 2026-09-07 | In Audio HAL, there is a possible escalation of privilege due to use after free. |
CVE-2026-20506 | Medium | 6.7 | — | 2026-09-07 | In Audio HAL, there is a possible escalation of privilege due to use after free. |
CVE-2026-20516 | Medium | 5.5 | — | 2026-09-07 | In MiracastService, there is a possible escalation of privilege due to a confused deputy. |
CVE-2026-20515 | Medium | 5.5 | — | 2026-09-07 | In gpu, there is a possible system crash due to use after free. |
CVE-2026-20500 | Medium | 5.5 | — | 2026-09-07 | In Modem, there is a possible system crash due to improper input validation. |
CVE-2026-20504 | Medium | 5.3 | — | 2026-09-07 | In Modem, there is a possible system crash due to a missing bounds check. |
CVE-2026-20503 | Medium | 5.3 | — | 2026-09-07 | In Modem, there is a possible system crash due to a missing bounds check. |
CVE-2026-20518 | Medium | 4.4 | — | 2026-09-07 | In geniezone, there is a possible information disclosure due to a missing bounds check. |
CVE-2026-20514 | Medium | 4.4 | — | 2026-09-07 | In Audio HAL, there is a possible information disclosure due to a missing permission check. |
CVE-2026-20513 | Medium | 4.4 | — | 2026-09-07 | In Audio HAL, there is a possible information disclosure due to improper input validation. |
CVE-2026-20512 | — | — | — | 2026-09-07 | In Audio HAL, there is a possible escalation of privilege due to improper input validation. |
Itsourcecode · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86268 | High | 7.3 | — | 2026-09-07 | A vulnerability was detected in itsourcecode School Management System 1.0. |
CVE-2026-86291 | Medium | 6.3 | — | 2026-09-07 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86270 | Medium | 6.3 | — | 2026-09-07 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86269 | Medium | 6.3 | — | 2026-09-07 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86267 | Medium | 6.3 | — | 2026-09-07 | A security vulnerability has been detected in itsourcecode Information System Society Membership System 1.0. |
CVE-2026-86265 | Medium | 6.3 | — | 2026-09-07 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86245 | Medium | 6.3 | — | 2026-09-07 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86236 | Medium | 6.3 | — | 2026-09-07 | A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86235 | Medium | 6.3 | — | 2026-09-07 | A flaw has been found in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86234 | Medium | 6.3 | — | 2026-09-07 | A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. |
CVE-2026-86233 | Medium | 6.3 | — | 2026-09-07 | A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. |
Misp · 11 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86451 | — | — | — | 2026-09-07 | Affected versions of MISP allow authenticated users to retrieve object-reference records by UUID through EventGraphTool::get_reference_data() without first checking whether the requester is authorized to view the object the reference belon… |
CVE-2026-86441 | — | — | — | 2026-09-07 | Affected versions of MISP contain inconsistent authorization checks across dashboard widgets that display organisation information. |
CVE-2026-86440 | — | — | — | 2026-09-07 | Affected versions of MISP insufficiently validate URLs used by dashboard widgets, particularly the Button widget. |
CVE-2026-86419 | — | — | — | 2026-09-07 | Affected versions of MISP contain insufficient validation of server-side outbound HTTP destinations in feed retrieval and TAXII discovery functionality. |
CVE-2026-86418 | — | — | — | 2026-09-07 | Affected versions of MISP expose organisation metadata through the dashboard organisation picker without applying the same visibility restrictions enforced by the normal organisation index and per-organisation view. |
CVE-2026-86417 | — | — | — | 2026-09-07 | Affected versions of MISP inconsistently enforced email-address visibility in DashboardsController::listTemplates(). |
CVE-2026-86408 | — | — | — | 2026-09-07 | Affected versions of MISP do not enforce parent-event visibility when serving cryptographic keys through CryptographicKeysController::view(). |
CVE-2026-86351 | — | — | — | 2026-09-07 | Affected versions of MISP validate the user-configurable homepage by checking only whether the supplied path begins with /. |
CVE-2026-86347 | — | — | — | 2026-09-07 | Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile() because the ACL entry for templates/uploadFile used the wildcard *. |
CVE-2026-86342 | — | — | — | 2026-09-07 | Affected versions of MISP contain improper authorization checks in the freetext feed preview functionality. |
CVE-2026-86283 | — | — | — | 2026-09-06 | MISP's UiBeta theme collection view (app/View/Themed/UiBeta/Collections/view.ctp) performed a secondary query of member events by UUID without applying the caller's access control list (ACL). |
Sourcecodester · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86298 | High | 7.3 | — | 2026-09-07 | A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. |
CVE-2026-86290 | High | 7.3 | — | 2026-09-07 | A weakness has been identified in SourceCodester Online Voting System 1.0. |
CVE-2026-86277 | High | 7.3 | — | 2026-09-07 | A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
CVE-2026-86276 | High | 7.3 | — | 2026-09-07 | A flaw has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
CVE-2026-86293 | Medium | 6.5 | — | 2026-09-07 | A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. |
CVE-2026-86279 | Medium | 6.3 | — | 2026-09-07 | A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
CVE-2026-86280 | Medium | 5.3 | — | 2026-09-07 | A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
CVE-2026-86294 | Medium | 4.3 | — | 2026-09-07 | A vulnerability has been found in SourceCodester Simple Traffic Offense System 1.0. |
CVE-2026-86281 | Medium | 4.3 | — | 2026-09-07 | A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
CVE-2026-86278 | Medium | 4.3 | — | 2026-09-07 | A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
Unattributed · 10 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-81302 | High | 7.8 | — | 2026-09-04 | PALLET CONTROL products contain an incorrect default permission vulnerability, which may allow a local attacker to execute arbitrary code with SYSTEM privileges on the affected product. |
CVE-2022-51017 | High | 7.5 | — | 2026-09-07 | PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of skin data fields submitted by players, allowing uncapped values to exceed the 32767 byte TAG_String limit. |
CVE-2026-86292 | High | 7.3 | — | 2026-09-07 | A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. |
CVE-2026-86282 | High | 7.3 | — | 2026-09-07 | A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. |
CVE-2022-51018 | Medium | 6.5 | — | 2026-09-07 | PocketMine-MP before 3.26.5 and 4.0.x before 4.0.5 does not limit book page text length, page count, or author/title length. |
CVE-2026-8623 | Medium | 6.4 | — | 2026-09-05 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (class attribute of .dvcss element)' parameter in all versions up to, and includin… |
CVE-2022-51016 | Medium | 6.1 | — | 2026-09-07 | PocketMine-MP 3.x (before 3.27.0) does not implement Minecraft Bedrock protocol encryption, so the server cannot verify that a connecting client possesses the private key corresponding to its login token. |
CVE-2026-86275 | Medium | 5.3 | — | 2026-09-07 | A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. |
CVE-2026-86240 | Medium | 4.7 | — | 2026-09-07 | A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. |
CVE-2026-86241 | Medium | 4.3 | — | 2026-09-07 | A weakness has been identified in liufee FeehiCMS up to 2.1.1. |
Openvpn · 9 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-82325 | — | — | — | 2026-09-07 | A use-after-free vulnerability in the OpenVPN ovpn-dco-win driver version 2.5.0 through 2.8.6 allows local authenticated users to cause a system crash via crafted control messages |
CVE-2026-84732 | — | — | — | 2026-09-07 | Retransmissions of ACK packet ID in OpenVPN through 2.6.22 and 2.7.6 allow remote unauthenticated attackers to cause a denial of service via crafted inputs that trigger a timeout integer overflow |
CVE-2026-84256 | — | — | — | 2026-09-07 | An argument parsing issue in OpenVPN 2.1_rc10 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows remote authenticated users to execute arbitrary commands via a crafted certificate subject |
CVE-2026-84226 | — | — | — | 2026-09-07 | OpenVPN version 2.5.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to perform a binary planting attack during network configuration steps |
CVE-2026-82312 | — | — | — | 2026-09-07 | OpenVPN 2.0.0 through 2.6.22 and 2.7_alpha1 through 2.7.6 on Windows allows local authenticated users to cause a denial of service via a NULL DACL on named IPC objects |
CVE-2026-81830 | — | — | — | 2026-09-07 | The Windows interactive service in OpenVPN 2.4.0 through 2.6.22 allows local authenticated users to bypass the trusted configuration directory constraint via incorrect file path validation |
CVE-2026-81738 | — | — | — | 2026-09-07 | OpenVPN 2.5.0 through 2.7.6 on Windows using the tap-windows6 driver allows attackers to trigger an out-of-bounds write via crafted DOMAIN-SEARCH entries |
CVE-2026-78221 | — | — | — | 2026-09-07 | An incorrect buffer size calculation in the Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to cause memory corruption or disclose sensitive information via crafted NRPT inputs. |
CVE-2026-78043 | — | — | — | 2026-09-07 | The Windows Interactive Service in OpenVPN 2.7_alpha1 through 2.7.6 allows local authenticated users to bypass the trusted configuration directory constraint and load arbitrary configuration files via specially crafted paths |
Dell · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-61410 | Critical | 9.4 | — | 2026-09-07 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. |
CVE-2026-80238 | Critical | 9.3 | — | 2026-09-07 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. |
CVE-2026-80132 | High | 8.1 | — | 2026-09-07 | ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. |
CVE-2026-80134 | High | 7.7 | — | 2026-09-07 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. |
CVE-2026-80135 | High | 7.5 | — | 2026-09-07 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability. |
CVE-2026-80133 | High | 7.4 | — | 2026-09-07 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. |
CVE-2026-61409 | High | 7.3 | — | 2026-09-07 | Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. |
CVE-2026-80178 | Medium | 5.5 | — | 2026-09-07 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. |
Thephpleague · 8 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86435 | High | 7.5 | — | 2026-09-07 | commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Footnote extension that fails to deduplicate footnote definitions. |
CVE-2026-86434 | High | 7.5 | — | 2026-09-07 | league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a denial of service vulnerability in UniqueSlugNormalizer::normalize(), which restarts its numeric-suffix search from 1 on every slug collision, resulting in O(K^2)… |
CVE-2026-86433 | High | 7.5 | — | 2026-09-07 | commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerability in the Attributes extension where AttributesListener::findTargetAndDirection() performs quadratic-time sibling list scanning. |
CVE-2026-86430 | High | 7.5 | — | 2026-09-07 | league/commonmark versions before 2.9.1 contain multiple denial of service vulnerabilities in fenced code block detection, reference link label lookup, and emphasis delimiter processing that perform super-linear work on crafted input. |
CVE-2026-86429 | High | 7.5 | — | 2026-09-07 | The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and < 2.9.1 contains quadratic parsing complexity in its SmartPunctExtension and AttributesExtension. |
CVE-2026-86428 | High | 7.5 | — | 2026-09-07 | commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnerability in the AttributesExtension when processing distinctly-named attributes. |
CVE-2026-86431 | High | 7.2 | — | 2026-09-07 | league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contain a cross-site scripting vulnerability in the AttributesExtension. |
CVE-2026-86432 | Medium | 5.3 | — | 2026-09-07 | commonmark versions from 2.0.0 before 2.8.4 contain a denial of service vulnerability in XmlRenderer that emits depth-proportional indentation for every XML tag. |
Imagemagick · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86421 | Low | 3.7 | — | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL image decoder. |
CVE-2026-86420 | Low | 3.7 | — | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory budget when an operation inside OpenPixelCache fails. |
CVE-2026-86425 | Low | 3.3 | — | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the Layer method of PerlMagick. |
CVE-2026-86423 | Low | 3.3 | — | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.x before 6.9.13-55 contains a heap-use-after-free vulnerability in the GetList method of PerlMagick. |
CVE-2026-86422 | Low | 3.3 | — | 2026-09-07 | ImageMagick before 7.1.2-30 contains a time-of-check-time-of-use vulnerability in path policy enforcement on Windows that allows attackers to bypass read or write restrictions by exploiting symlink race conditions. |
CVE-2026-86424 | Low | 2.5 | — | 2026-09-07 | ImageMagick before 7.1.2-30 and 6.9.13-55 contains a time-of-check-time-of-use (TOCTOU) vulnerability in the video decoder that allows attackers to bypass path policy write restrictions via symlink swaps. |
Pmmp · 6 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2022-51015 | Medium | 6.5 | — | 2026-09-07 | PocketMine-MP before 4.0.6 does not validate facing values in PlayerActionPacket (for START_BREAK and CRACK_BREAK actions) or in UseItemTransactionData (typically within InventoryTransactionPacket). |
CVE-2022-51014 | Medium | 6.5 | — | 2026-09-07 | PocketMine-MP before 4.0.7 contains an unhandled exception vulnerability in the ModalFormResponsePacket handler when processing malformed JSON from clients. |
CVE-2022-51013 | Medium | 6.5 | — | 2026-09-07 | PocketMine-MP versions before 4.2.3 fail to validate damage metadata values in tool and armor item NBT data received from clients. |
CVE-2022-51012 | Medium | 6.5 | — | 2026-09-07 | PocketMine-MP versions before 4.2.9 fail to properly validate NBT data types during deserialization of inventory transaction packets from clients. |
CVE-2022-51010 | Medium | 6.5 | — | 2026-09-07 | PocketMine-MP versions before 4.4.2 fail to properly validate item IDs received from clients in itemstack NBT data. |
CVE-2022-51011 | Medium | 4.3 | — | 2026-09-07 | PocketMine-MP before 4.2.10 fails to validate the total length of incoming chat message blobs before splitting them by newline characters, allowing attackers to send large messages containing many newlines. |
N/a · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-52295 | Medium | 6.2 | — | 2026-09-01 | Buffer Overflow vulnerability in Ffmpeg v.7.0 and after allows an attacker to cause a denial of service via the libavformat/iamf_writer.c component |
CVE-2026-86271 | Medium | 4.7 | — | 2026-09-07 | A vulnerability was found in FluentCMS up to 0.0.5. |
CVE-2026-86289 | Medium | 4.3 | — | 2026-09-07 | A vulnerability was found in Ollama up to 0.31.1. |
CVE-2026-86285 | Medium | 4.3 | — | 2026-09-07 | A vulnerability was detected in BookStack up to 26.05.2. |
CVE-2026-86244 | Medium | 4.3 | — | 2026-09-07 | A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_beta. |
Red Hat · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-76578 | Critical | 9.8 | — | 2026-09-07 | A flaw was found in FreeIPA. |
CVE-2026-86404 | High | 8.8 | — | 2026-09-07 | EAP's Artemis deserialization configuration permits deserialization by default. |
CVE-2026-79678 | High | 8.1 | — | 2026-09-07 | A flaw was found in FreeIPA's idp-add command, where insufficiently validated --organization/--base-url input reaches a constrained eval() call before the corresponding LDAP access control check is enforced. |
CVE-2026-5680 | High | 7.5 | — | 2026-08-27 | A flaw was found in Undertow. |
CVE-2026-86332 | Medium | 6.5 | — | 2026-09-07 | A flaw was found in odh-dashboard in Red Hat OpenShift AI. |
Sfturing · 5 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86263 | High | 7.3 | — | 2026-09-07 | A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. |
CVE-2026-86262 | High | 7.3 | — | 2026-09-07 | A security vulnerability has been detected in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. |
CVE-2026-86261 | High | 7.3 | — | 2026-09-07 | A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. |
CVE-2026-86260 | Medium | 6.5 | — | 2026-09-07 | A security flaw has been discovered in sfturing hosp_order up to 627f426331da8086ce8fff2017d65b1ddef384f8. |
CVE-2026-86264 | Medium | 4.3 | — | 2026-09-07 | A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1ddef384f8. |
Zohocorp · 4 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85640 | Medium | 6.3 | — | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions below 11.5.2600.15 are vulnerable to Privilege Escalation Due to Outdated Component |
CVE-2026-77697 | Medium | 6.3 | — | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerable to Privilege Escalation During JAR Extraction |
CVE-2026-77698 | Medium | 5.7 | — | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerable to local privilege escalation due to Agent upgrade. |
CVE-2026-77699 | Medium | 5.0 | — | 2026-09-07 | Zohocorp ManageEngine Endpoint Central versions below 11.5.2605.01 are vulnerable to Local privilege escalation due to loading a dll from an untrusted path. |
D-link · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86296 | Critical | 10.0 | — | 2026-09-07 | A vulnerability was determined in D-Link DIR-822A A_101. |
CVE-2026-86295 | High | 8.3 | — | 2026-09-07 | A vulnerability was found in D-Link DIR-895L A1_102b07. |
CVE-2026-86297 | High | 8.1 | — | 2026-09-07 | A vulnerability was identified in D-Link DIR-605 B1v202WWB03. |
Eclipse Foundation · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85201 | — | — | — | 2026-09-07 | In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. |
CVE-2026-19204 | — | — | — | 2026-09-07 | A client may send a WebSocket frame with an unknown opcode and a very large declared payload length, causing Jetty to attempt a large memory allocation and potentially exhaust the JVM heap. |
CVE-2026-84173 | — | — | — | 2026-09-07 | In Eclipse Ankaios versions v0.5.1 through v1.0.1, the agent-side Control Interface authorizer incorrectly evaluates multi-segment allow rules whose first path segment is a wildcard. |
Hcl Software · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-52657 | Low | 3.5 | — | 2026-09-07 | HCL MyXalytics was affected by Potential DOS Vulnerability. |
CVE-2025-52652 | Low | 3.5 | — | 2026-09-07 | HCL MyXalytics was affected by Content Spoofing Vulnerability. |
CVE-2025-52651 | Low | 3.5 | — | 2026-09-07 | HCL MyXalytics was affected by Improper Input validation Vulnerability. |
Nordic Semiconductor Asa · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14296 | High | 7.5 | — | 2026-09-07 | When using the Direct XIP update strategy, the main application image starts other cores (i.e. |
CVE-2026-18796 | — | — | — | 2026-09-07 | Any application that uses external QSPI flash for encrypted XIP on nRF5340 and relies on that encryption for confidentiality and/or integrity of the externally stored code. |
CVE-2026-14297 | — | — | — | 2026-09-07 | A buffer overflow in the Bluetooth Continuous Glucose Monitoring Service (CGMS) Record Access Control Point (RACP) write handler allows an authenticated BLE peer to overflow a 20-byte static buffer into adjacent BSS memory. |
Samsung Opensource · 3 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86313 | High | 7.8 | — | 2026-09-07 | Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow Buffers. |
CVE-2026-86315 | Medium | 6.2 | — | 2026-09-07 | An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot on Linux x86-64 allows an attacker who can supply JavaScript for execution to corrupt native memory and crash the host process via a crafted class definition… |
CVE-2026-86314 | Medium | 6.2 | — | 2026-09-07 | Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memory.cpp) in Samsung walrus on all platforms allows a remote attacker to cause an out-of-bounds heap read and denial of service via a crafted WebAssembly module i… |
Advantech · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-79698 | Critical | 9.9 | — | 2026-09-07 | A vulnerability was identified in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-… |
CVE-2026-79697 | Critical | 9.9 | — | 2026-09-07 | A vulnerability was determined in Advantech WISE-6610-NB, WISE-6610-EB, WISE-6610-TB, WISE-6610-JB, WISE-6610-CB, WISE-6610-EL-NB, WISE-6610-EL-EB, WISE-6610-EL-TB, WISE-6610-EL-JB, WISE-6610-EL-CB, WISE-6610P-DEA, WISE-6610P-DNA and WISE-… |
Code-projects · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86302 | Medium | 5.3 | — | 2026-09-07 | A vulnerability was found in code-projects Hospital Information System 1.0. |
CVE-2026-86301 | Low | 3.5 | — | 2026-09-07 | A vulnerability has been found in code-projects Hospital Information System 1.0. |
Elegant Themes · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-3853 | Medium | 6.4 | — | 2026-09-05 | The Divi theme for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the `image_src` attribute of the `et_pb_video_slider_item` shortcode in all versions up to, and including, 4.27.6. |
CVE-2026-4361 | Medium | 5.0 | — | 2026-09-05 | The Divi theme for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.27.6. |
Librenms · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86427 | High | 8.8 | — | 2026-09-07 | LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph_title parameter that allows authenticated attackers to inject arbitrary rrdtool arguments by breaking out of double-quote escaping. |
CVE-2026-86426 | — | — | — | 2026-09-07 | LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. |
Light0011 · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86306 | High | 7.3 | — | 2026-09-07 | A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. |
CVE-2026-86305 | High | 7.3 | — | 2026-09-07 | A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53d964d99be199d/f72cf46f601efb2a0618c3814cc2f61380b38930. |
Projeto-siga · 2 CVEs
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86273 | High | 7.3 | — | 2026-09-07 | A weakness has been identified in projeto-siga siga up to 11.1.1. |
CVE-2026-86274 | Medium | 5.3 | — | 2026-09-07 | A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/11.0.2.13/11.1.1. |
92181 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86303 | High | 7.3 | — | 2026-09-07 | A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b8446963ff8d573558f. |
Apache Software Foundation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-78254 | — | — | — | 2026-09-07 | The ftp and scp tasks of Apache Ant can download files from a remote server. |
Bahçelievler Muncipality · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6223 | Critical | 9.4 | — | 2026-09-07 | Improper restriction of excessive authentication attempts vulnerability in Bahçelievler Muncipality BiHayat App allows Authentication Bypass. |
Beijing Meite Software Technology · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86272 | High | 7.3 | — | 2026-09-07 | A vulnerability was determined in Beijing Meite Software Technology U+Smart Enjoyment WebSite 18.6001.1096.1000. |
Boldgrid · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-78438 | High | 7.2 | — | 2026-09-05 | The W3 Total Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Comment Content via LazyLoad Background Mutator in all versions up to, and including, 2.10.5 due to insufficient input sanitization and output escapin… |
Brainstorm Force · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85308 | Medium | 5.3 | — | 2026-09-03 | Authorization Bypass Through User-Controlled Key vulnerability in Brainstorm Force SureForms allows Exploiting Incorrectly Configured Access Control Security Levels. |
Brainstormforce · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-18406 | High | 7.2 | — | 2026-09-05 | The SureForms – Contact Form Builder, AI Forms, Payment Form, Survey & Quiz plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Text Field Entity-Encoded Payload in all versions up to, and including, 2.12.2 due to insuffi… |
Codesupplyco · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-2390 | Medium | 6.4 | — | 2026-09-07 | The Powerkit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Lazy Load module's image processing in all versions up to, and including, 3.0.4. |
Cozmoslabs · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-6431 | High | 7.2 | — | 2026-09-07 | The User Profile Builder – Beautiful User Registration Forms, User Profiles & User Role Editor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Biographical Info' meta field parameter in all versions up to, and in… |
Dearhive · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8625 | Medium | 6.4 | — | 2026-09-05 | The Dear Flipbook – PDF Flipbook, 3D Flipbook, PDF embed, PDF viewer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'post_content (Custom HTML block inner HTML)' parameter in all versions up to, and including, 2… |
Divi Engine · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-11613 | Critical | 9.8 | — | 2026-09-04 | The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. |
Eyecix · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84834 | Critical | 9.8 | — | 2026-09-03 | Unauthenticated PHP Object Injection in JobSearch <= 3.2.0 versions. |
Fooplugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85414 | Medium | 6.4 | — | 2026-09-05 | The Gallery : FooGallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'custom_settings' Shortcode Attribute in all versions up to, and including, 3.3.2 due to insufficient input sanitization and output escaping. |
Getwpfunnels · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-10196 | Critical | 9.8 | — | 2026-09-05 | The Mail Mint – Email Marketing, Newsletter, Email Automation & WooCommerce Emails plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.31.0 via deserialization of untrusted input in the 'handl… |
Hivepress · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-18056 | High | 7.5 | — | 2026-09-06 | The HivePress Authentication plugin for WordPress is vulnerable to Authentication Bypass via the access_token parameter in all versions up to, and including, 1.1.4. |
Ilias-elearning E.v. · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86416 | Medium | 5.4 | — | 2026-09-07 | ILIAS versions before 9.23, 10.11, and 11.4 contain an authorization bypass vulnerability in ilObjGroupGUI where saveMapSettingsObject() and updateGroupTypeObject() perform state-changing operations without write permission checks. |
Inductive Automation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-77393 | High | 8.8 | — | 2026-09-04 | In Ignition 8.1.53 and earlier, the Gateway "Create Project Role(s)" setting shipped blank, which permitted any authenticated user to create projects (if they can execute gateway scripts). |
Inspireui · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-13447 | Critical | 9.8 | — | 2026-09-05 | The Mstore Api plugin for WordPress is vulnerable to Authentication Bypass via JWT Forgery in versions up to, and including, 4.20.0 This is due to missing cryptographic signature verification in the FirebasePhoneAuthHelper::verify_id_token… |
Ixon · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-75925 | Critical | 9.6 | — | 2026-09-04 | Improper neutralization of CRLF sequences in IXON VPN Client before version 1.4.7 allows an attacker to execute commands as root or SYSTEM. |
Jaychouchannel · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86284 | Medium | 5.3 | — | 2026-09-07 | A security vulnerability has been detected in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. |
Jfarthing84 · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-83628 | Medium | 4.3 | — | 2026-09-05 | The Theme My Login plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 7.1.15 on Multisite installations. |
Joomunited · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-14975 | Medium | 6.5 | — | 2026-09-05 | The WP File Download plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 6.3.8 via the 'remoteurl' parameter. |
Kings Plugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85311 | Medium | 5.3 | — | 2026-09-04 | Missing Authorization vulnerability in Kings Plugins MarketKing allows Exploiting Incorrectly Configured Access Control Security Levels. |
Learndash · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16310 | Critical | 9.8 | — | 2026-09-06 | The MemberDash plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.8.5 via the 'id' parameter due to missing validation on a user controlled key. |
Linksys · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86299 | Critical | 9.9 | — | 2026-09-07 | A vulnerability was detected in Linksys RE7000 2.0.15. |
Liufee · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86239 | Medium | 5.3 | — | 2026-09-07 | A vulnerability was identified in liufee FeehiCMS up to 2.1.1. |
Masteriyo · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-8279 | Medium | 5.3 | — | 2026-09-07 | The Masteriyo LMS plugin for WordPress is vulnerable to unauthorized data deletion due to a missing capability check on the 'delete_item_permissions_check' function in the CourseProgressItemsController in all versions up to, and including… |
Migrateguru · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84778 | High | 7.5 | — | 2026-09-03 | Unauthenticated Denial of Service Attack in Migrate Guru – Site Migration & Cloning <= 6.65 versions. |
Mikrotik · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-67278 | — | — | — | 2026-09-05 | MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. |
Modelcloud · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86288 | Medium | 6.3 | — | 2026-09-07 | A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. |
N-able · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86218 | — | — | — | 2026-09-06 | N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14. |
Nec Corporation · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-16876 | — | — | — | 2026-09-07 | An authentication bypass vulnerability exists in the WebGUI of Series UNIVERGE IX-R/IX-V. |
Netweblogic · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-14945 | Medium | 5.4 | — | 2026-09-05 | The Events Manager - Calendar, Bookings, Tickets, and more! |
Openagents-org · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86237 | Medium | 5.3 | — | 2026-09-07 | A vulnerability was found in openagents-org openagents up to 0.8.19/0.9.3.post20. |
Outlawgt · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-75018 | Medium | 4.3 | — | 2026-09-05 | The Custom Contact Forms plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 7.16. |
Pickplugins · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2024-11080 | Critical | 9.8 | — | 2026-09-05 | The Post Grid and Gutenberg Blocks – ComboBlocks plugin for WordPress is vulnerable to Unauthenticated Hook Injection in versions 2.2.32 to 2.3.1 via several functions in the ~/includes/blocks/form-wrap/function.php file. |
Prestashop · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84186 | — | — | — | 2026-09-07 | Vulnerability involving incorrect access control in the Tools::getRemoteAddr() function in PrestaShop, which allows the client’s IP address to be spoofed via the X-Forwarded-For header when the application is running behind a reverse proxy… |
Projectworlds · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86238 | Medium | 4.3 | — | 2026-09-07 | A vulnerability was determined in projectworlds Online Examination System 1.0. |
Quadlayers · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-18404 | Medium | 6.4 | — | 2026-09-05 | The Social Chat – Click To Chat App Button plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'consent_message' JSON Attribute in .qlwapp data-box in all versions up to, and including, 8.6.2 due to insufficient input san… |
Rocklobsterinc · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12853 | Medium | 5.4 | — | 2026-09-07 | The Flamingo plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 2.6.2. |
Rometheme · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84763 | High | 7.1 | — | 2026-09-03 | Unauthenticated Cross Site Scripting (XSS) in RTMKit <= 2.1.5 versions. |
Saturday Drive · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-15550 | Medium | 4.3 | — | 2026-09-05 | The Ninja Forms - Save Progress plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 3.0.30. |
Sc0ttkclark · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-76573 | Medium | 6.4 | — | 2026-09-05 | The Pods – Custom Content Types and Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'not_found' Shortcode Attribute in all versions up to, and including, 3.3.9.1 due to insufficient input sanitization and outpu… |
Scriptsbundle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2025-9049 | High | 8.8 | — | 2026-09-05 | The Nokri – Job Board WordPress Theme theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'nokri_account_member_permissions' function in all versions up to, and including, 1.6.4. |
Shabti · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-75816 | Critical | 9.8 | — | 2026-09-06 | The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to Authentication Bypass to Account Takeover in all versions up to, and including, 3.29.12. |
Standard Notes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-78325 | — | — | — | 2026-09-07 | Cross-site scripting in the Evernote and Google Keep note importers in Standard Notes for Android through 3.201.24 allows an attacker to execute arbitrary JavaScript in the application context when a victim imports a crafted .enex or Googl… |
Stellarwp · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-12843 | Medium | 5.4 | — | 2026-09-05 | The LearnDash LMS plugin for WordPress is vulnerable to authorization bypass in versions 4.25.0 - 5.1.6. |
Strategy11 Team · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84769 | Medium | 6.5 | — | 2026-09-03 | Unauthenticated Insecure Direct Object References (IDOR) in Business Directory <= 6.4.26 versions. |
Supsysticcom · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-83625 | High | 7.2 | — | 2026-09-05 | The Contact Form by Supsystic plugin for WordPress is vulnerable to Stored Cross-Site Scripting via IP Address Header in all versions up to, and including, 1.10.2 due to insufficient input sanitization and output escaping. |
Tenda · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-86300 | High | 7.3 | — | 2026-09-07 | A flaw has been found in Tenda AC9 15.03.05.14. |
The Beaver Builder Team · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-18843 | Medium | 6.1 | — | 2026-09-05 | The Beaver Builder Plugin (Starter Version) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'no_results_message' node_preview Parameter in all versions up to, and including, 2.11.0.1 due to insufficient input sanit… |
Themeisle · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-4945 | Medium | 5.3 | — | 2026-09-07 | The Otter Blocks – Gutenberg Blocks, Page Builder for Gutenberg Editor & FSE plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 3.1.7 via the 'watch_checkout' function due to missin… |
Tyche Softwares · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-81543 | High | 8.8 | — | 2026-09-05 | The Abandoned Cart Pro for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 10.7.1. |
Tycon Systems · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-82712 | High | 8.8 | — | 2026-09-04 | Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a cross-site request forgery vulnerability. |
Underconstructionpage · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-81295 | High | 7.1 | — | 2026-09-03 | Unauthenticated Cross Site Scripting (XSS) in Under Construction <= 5.82 versions. |
Unitecms · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-75586 | Medium | 6.1 | — | 2026-09-05 | The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via 'formData[id]' Parameter in all versions up to, and including, 2.0.17 due to insufficient input sanitization and output escaping. |
Wc Lovers · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84756 | High | 7.1 | — | 2026-09-03 | Subscriber Privilege Escalation in WCFM Membership <= 2.11.11 versions. |
Wpkoi Wordpress Themes · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-85302 | Medium | 6.5 | — | 2026-09-03 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPKoi WordPress Themes WPKoi Templates for Elementor allows DOM-Based XSS. |
Wpmudev · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-83627 | Critical | 9.8 | — | 2026-09-05 | The Hummingbird – Speed Optimization, Caching, Minify, Compress & CDN plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 3.21.0 via the log_msg() function in core/modules/class-page-cache.php. |
Xtemos · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-27086 | Medium | 6.5 | — | 2026-09-04 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Xtemos WoodMart allows DOM-Based XSS. |
Yith · 1 CVE
| CVE | Severity | CVSS | KEV | Published | Summary |
|---|---|---|---|---|---|
CVE-2026-84238 | Critical | 9.8 | — | 2026-09-03 | Unauthenticated Broken Access Control in YITH Request a Quote for WooCommerce Premium < 4.46.0 versions. |