|
cve-2026-92939
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 3.11.3 through 3.11.6 Native Code Execution via cr…
|
patriksimek
|
vm2
|
2026-09-17T13:46:03.558Z |
2026-09-17T14:26:31.623Z |
|
cve-2026-92938
|
9.4 (v4.0)
9.9 (v3.1)
|
vm2 3.11.3 through 3.11.6 Remote Code Execution via no…
|
patriksimek
|
vm2
|
2026-09-17T13:46:02.866Z |
2026-09-19T02:28:41.247Z |
|
cve-2026-92937
|
10 (v4.0)
10 (v3.1)
|
vm2 3.11.6 Remote Code Execution via Promise call/apply
|
patriksimek
|
vm2
|
2026-09-17T13:46:02.195Z |
2026-09-18T19:25:51.435Z |
|
cve-2026-92936
|
6.9 (v4.0)
5.8 (v3.1)
|
vm2 3.11.0 before 3.11.7 Information Disclosure via Er…
|
patriksimek
|
vm2
|
2026-09-17T13:46:01.524Z |
2026-09-17T15:52:18.255Z |
|
cve-2026-92935
|
9.5 (v4.0)
9 (v3.1)
|
vm2 NodeVM Remote Code Execution via Array-Shaped Require
|
patriksimek
|
vm2
|
2026-09-17T13:46:00.854Z |
2026-09-17T19:21:04.162Z |
|
cve-2026-92934
|
9.5 (v4.0)
9 (v3.1)
|
vm2 before 3.11.8 Sandbox Escape RCE via AggregateError
|
patriksimek
|
vm2
|
2026-09-17T13:46:00.130Z |
2026-09-17T14:27:25.575Z |
|
cve-2026-92933
|
6.9 (v4.0)
5.8 (v3.1)
|
vm2 before 3.11.8 Information Disclosure via util.getC…
|
patriksimek
|
vm2
|
2026-09-17T13:45:59.246Z |
2026-09-19T02:27:07.171Z |
|
cve-2026-92973
|
5.3 (v4.0)
6.1 (v3.1)
|
ansi2html 1.7.0a0 through 1.9.3 Cross-Site Scripting v…
|
pycontribs
|
ansi2html
|
2026-09-17T13:43:17.365Z |
2026-09-17T15:38:41.098Z |
|
cve-2026-92972
|
8.8 (v4.0)
8.6 (v3.1)
|
SGLang through 0.5.19 Unauthenticated Route Poisoning …
|
sgl-project
|
sglang
|
2026-09-17T13:43:16.670Z |
2026-09-18T16:23:32.042Z |
|
cve-2026-92971
|
8.7 (v4.0)
7.5 (v3.1)
|
InternLM LMDeploy through 0.17.0 Assertion Denial of Service
|
InternLM
|
lmdeploy
|
2026-09-17T13:43:15.952Z |
2026-09-17T14:29:19.612Z |
|
cve-2026-92970
|
8.7 (v4.0)
8.8 (v3.1)
|
HUBzero CMS through 2.2.32 Path Traversal via File Upload
|
hubzero
|
hubzero-cms
|
2026-09-17T13:43:15.223Z |
2026-09-19T02:25:58.242Z |
|
cve-2026-80355
|
5.4 (v3.1)
|
Dell OpenManage Server Administrator, versions pr…
|
Dell
|
OpenManage Server Administrator Managed Node (Patch) for Windows
|
2026-09-17T13:40:34.590Z |
2026-09-18T14:54:42.610Z |
|
cve-2026-89418
|
8.7 (v4.0)
|
Uncontrolled Recursion leading to Denial of Service in…
|
Google
|
protobuf-javascript (aka google-protobuf npm package)
|
2026-09-17T13:27:30.163Z |
2026-09-17T19:38:55.924Z |
|
cve-2026-14850
|
8.8 (v4.0)
|
Weak password recovery mechanism for forgotten passwor…
|
MobiAPParc
|
MobiAPParc
|
2026-09-17T13:26:26.526Z |
2026-09-17T18:10:03.923Z |
|
cve-2026-90887
|
7.1 (v3.1)
|
WordPress WP Inventory Manager plugin <= 2.5.4 - Cross…
|
WP Inventory
|
WP Inventory Manager
|
2026-09-17T13:24:58.522Z |
2026-09-17T19:21:22.345Z |
|
cve-2026-78528
|
5.3 (v3.1)
|
WordPress BerqWP plugin <= 4.1.15 - Broken Access Cont…
|
BerqWP
|
BerqWP
|
2026-09-17T13:24:57.875Z |
2026-09-19T02:24:15.823Z |
|
cve-2026-78295
|
8.8 (v3.1)
|
WordPress Xagio SEO plugin <= 7.1.0.43 - Cross Site Re…
|
Xagio SEO
|
Xagio SEO
|
2026-09-17T13:24:57.232Z |
2026-09-17T14:07:07.641Z |
|
cve-2026-78294
|
6.5 (v3.1)
|
WordPress Geo Mashup plugin <= 1.13.21 - Cross Site S…
|
Dylan Kuhn
|
Geo Mashup
|
2026-09-17T13:24:56.581Z |
2026-09-19T14:21:53.594Z |
|
cve-2026-74017
|
5.3 (v3.1)
|
WordPress User Registration plugin <= 5.2.7 - Broken A…
|
wpeverest
|
User Registration
|
2026-09-17T13:24:55.939Z |
2026-09-17T14:30:41.571Z |
|
cve-2026-74005
|
5.4 (v3.1)
|
WordPress PublishPress Series plugin <= 3.1.3 - Cross …
|
PublishPress
|
PublishPress Series
|
2026-09-17T13:24:54.225Z |
2026-09-17T19:21:28.548Z |
|
cve-2026-74002
|
5.3 (v3.1)
|
WordPress Booking Calendar plugin <= 11.7 - Broken Acc…
|
wpdevelop
|
Booking Calendar
|
2026-09-17T13:24:53.587Z |
2026-09-19T02:23:47.056Z |
|
cve-2026-74000
|
5.3 (v3.1)
|
WordPress Simple Membership plugin <= 4.8.2 - Broken A…
|
wp.insider
|
Simple Membership
|
2026-09-17T13:24:52.941Z |
2026-09-17T14:06:46.131Z |
|
cve-2026-73999
|
5.4 (v3.1)
|
WordPress Cooked plugin <= 1.16.0 - Insecure Direct Ob…
|
Gora Tech
|
Cooked
|
2026-09-17T13:24:52.301Z |
2026-09-19T14:21:53.749Z |
|
cve-2026-66676
|
5.3 (v3.1)
|
WordPress Easy Invoice plugin <= 2.3.8 - Broken Access…
|
MatrixAddons
|
Easy Invoice
|
2026-09-17T13:24:51.602Z |
2026-09-17T14:33:02.524Z |
|
cve-2026-66631
|
7.6 (v3.1)
|
WordPress MC Woocommerce Wishlist plugin <= 1.9.21 - S…
|
Moreconvert Team
|
MC Woocommerce Wishlist
|
2026-09-17T13:24:50.942Z |
2026-09-17T19:21:37.254Z |
|
cve-2026-66630
|
7.6 (v3.1)
|
WordPress PublishPress Series plugin <= 3.1.3 - SQL In…
|
PublishPress
|
PublishPress Series
|
2026-09-17T13:24:50.289Z |
2026-09-19T02:23:16.128Z |
|
cve-2026-66628
|
7.6 (v3.1)
|
WordPress WP-Lister Lite for eBay plugin <= 3.8.11 - S…
|
WP Lab
|
WP-Lister Lite for eBay
|
2026-09-17T13:24:49.626Z |
2026-09-17T14:06:13.580Z |
|
cve-2026-66626
|
7.6 (v3.1)
|
WordPress SKT Addons for Elementor plugin <= 4.0 - SQL…
|
Sonal S Sinha
|
SKT Addons for Elementor
|
2026-09-17T13:24:48.985Z |
2026-09-19T14:21:53.896Z |
|
cve-2026-66625
|
7.6 (v3.1)
|
WordPress WC Vendors Marketplace plugin <= 2.7.2.1 - S…
|
WCVendors
|
WC Vendors Marketplace
|
2026-09-17T13:24:48.331Z |
2026-09-17T15:26:01.133Z |
|
cve-2026-66624
|
7.6 (v3.1)
|
WordPress WPMasterToolKit plugin <= 2.22.0 - SQL Injec…
|
Ludwig You
|
WPMasterToolKit
|
2026-09-17T13:24:47.681Z |
2026-09-17T19:21:47.942Z |