|
cve-2026-77360
|
|
oRPC: Vary Header Injection in CORS Plugin leading to …
|
middleapi
|
orpc
|
2026-09-16T18:42:45.816Z |
2026-09-16T19:40:51.991Z |
|
cve-2026-68536
|
|
Apache MyFaces: Server-Side Request Forgery / Local Fi…
|
Apache Software Foundation
|
Apache MyFaces
|
2026-09-16T18:40:17.043Z |
2026-09-17T20:08:09.598Z |
|
cve-2026-86003
|
|
CoreDNS DoH/DoQ/gRPC bypass UPDATE rejection enforced …
|
coredns
|
coredns
|
2026-09-16T18:39:22.955Z |
2026-09-17T19:25:42.634Z |
|
cve-2026-91097
|
7 (v4.0)
|
HP Linux Imaging and Printing (HPLIP) Software– Multip…
|
HP Inc.
|
HP Linux Imaging and Printing Software (HPLIP)
|
2026-09-16T18:39:12.376Z |
2026-09-17T13:41:06.327Z |
|
cve-2026-82399
|
|
CoreDNS: Unauthenticated memory exhaustion in custom t…
|
coredns
|
coredns
|
2026-09-16T18:37:55.655Z |
2026-09-18T18:19:57.712Z |
|
cve-2026-59823
|
|
LiteLLM: Server-side request forgery via the `user_con…
|
BerriAI
|
litellm
|
2026-09-16T18:36:21.105Z |
2026-09-17T15:07:47.837Z |
|
cve-2026-81176
|
|
Svelte devalue: DoS via malformed input
|
sveltejs
|
devalue
|
2026-09-16T18:34:34.881Z |
2026-09-17T19:25:51.846Z |
|
cve-2026-92729
|
8.8 (v4.0)
8.2 (v3.1)
|
SigNoz 0.88.0 through 0.141.0 - Missing Authentication…
|
SigNoz
|
signoz
|
2026-09-16T18:31:19.245Z |
2026-09-21T18:18:36.036Z |
|
cve-2026-75516
|
|
RabbitMQ Java client: Frame-level OOM: Math.min(maxInb…
|
rabbitmq
|
rabbitmq-java-client
|
2026-09-16T18:30:58.983Z |
2026-09-18T18:17:25.002Z |
|
cve-2026-46352
|
|
Suricata defrag: fragmented encapsulated traffic with …
|
OISF
|
suricata
|
2026-09-16T18:28:21.255Z |
2026-09-17T16:15:07.910Z |
|
cve-2026-75025
|
4.7 (v3.1)
|
Mattermost Desktop local network access from server-re…
|
Mattermost
|
Mattermost
|
2026-09-16T18:27:02.819Z |
2026-09-17T18:35:23.288Z |
|
cve-2026-92418
|
|
ChangeWeDer crm Save Endpoint customer.serve.js cross …
|
ChangeWeDer
|
crm
|
2026-09-16T18:15:08.210Z |
2026-09-16T19:19:45.506Z |
|
cve-2026-63126
|
|
Wire: Unauthenticated decoder crash via 32-bit length …
|
square
|
wire
|
2026-09-16T18:13:33.197Z |
2026-09-16T19:41:42.146Z |
|
cve-2026-92417
|
|
Open5GS PFCP types.c ogs_pfcp_parse_volume_measurement…
|
n/a
|
Open5GS
|
2026-09-16T18:00:08.894Z |
2026-09-22T15:45:20.943Z |
|
cve-2026-69147
|
|
vLLM: Request-selected PyNvVideoCodec GPU decode bypas…
|
vllm-project
|
vllm
|
2026-09-16T17:49:20.427Z |
2026-09-16T18:37:14.118Z |
|
cve-2026-92416
|
|
Open5GS PFCP Session Report Request n4-handler.c smf_n…
|
n/a
|
Open5GS
|
2026-09-16T17:45:09.565Z |
2026-09-17T16:16:28.824Z |
|
cve-2026-47094
|
8.7 (v4.0)
8.8 (v3.1)
|
SIMAC MyPHR 1.1 IDOR Account Takeover via /api/employe…
|
SIMAC
|
MyPHR
|
2026-09-16T17:39:57.173Z |
2026-09-17T16:17:12.538Z |
|
cve-2026-92720
|
9.3 (v4.0)
9.1 (v3.1)
|
Kubero through 3.1.1 Unauthenticated Notifications API…
|
kubero-dev
|
kubero
|
2026-09-16T17:31:40.109Z |
2026-09-24T14:22:54.668Z |
|
cve-2026-92719
|
8.7 (v4.0)
7.5 (v3.1)
|
Quickwit through 0.9.0 SSRF via SQS queue_url Parameter
|
quickwit-oss
|
quickwit
|
2026-09-16T17:31:39.267Z |
2026-09-24T14:22:53.668Z |
|
cve-2026-92718
|
7 (v4.0)
7.3 (v3.1)
|
Nuclei from 3.7.0 before 3.11.1 Template Signature Byp…
|
projectdiscovery
|
nuclei
|
2026-09-16T17:31:38.380Z |
2026-09-24T14:22:52.529Z |
|
cve-2026-92717
|
9.3 (v4.0)
9.1 (v3.1)
|
Covenant through 0.6 Missing Authentication on the Cov…
|
cobbr
|
Covenant
|
2026-09-16T17:31:37.704Z |
2026-09-24T14:22:51.497Z |
|
cve-2026-92716
|
8.6 (v4.0)
9.6 (v3.1)
|
Shuffle through 2.2.1 API Key Reset Cross-Tenant Privi…
|
Shuffle
|
Shuffle
|
2026-09-16T17:31:37.053Z |
2026-09-24T14:22:50.529Z |
|
cve-2026-92605
|
7.1 (v4.0)
6.5 (v3.1)
|
IRIS through 2.4.29 Unauthorized Comment Access via Ob…
|
dfir-iris
|
iris-web
|
2026-09-16T17:31:36.375Z |
2026-09-24T14:22:49.562Z |
|
cve-2026-92604
|
7.2 (v4.0)
8.1 (v3.1)
|
Scirius through 3.8.0 Arbitrary File Write via PCAP Upload
|
StamusNetworks
|
scirius
|
2026-09-16T17:31:35.727Z |
2026-09-24T14:22:48.585Z |
|
cve-2026-92413
|
|
Artifex MuPDF PDF Xref Loading pdf-stream.c pdf_open_f…
|
Artifex
|
MuPDF
|
2026-09-16T17:30:10.298Z |
2026-09-18T18:14:41.275Z |
|
cve-2026-84397
|
5.4 (v3.1)
|
Adobe Experience Manager | Cross-site Scripting (Store…
|
Adobe
|
Adobe Experience Manager as a Cloud Service
|
2026-09-16T17:22:35.855Z |
2026-09-16T17:49:42.493Z |
|
cve-2026-18120
|
6.3 (v4.0)
|
Missing Authorization in legacy Express entries search…
|
Concrete CMS
|
Concrete CMS
|
2026-09-16T17:16:09.563Z |
2026-09-17T17:31:44.663Z |
|
cve-2026-92406
|
|
SourceCodester Inventory and Monitoring System btn_fun…
|
SourceCodester
|
Inventory and Monitoring System
|
2026-09-16T17:15:08.017Z |
2026-09-16T17:50:47.084Z |
|
cve-2026-85387
|
2 (v4.0)
|
Concrete CMS before 9.5.4 allows a deactivated user to…
|
Concrete CMS
|
Concrete CMS
|
2026-09-16T17:12:05.336Z |
2026-09-17T17:32:47.476Z |
|
cve-2026-92405
|
|
SourceCodester Inventory and Monitoring System index.p…
|
SourceCodester
|
Inventory and Monitoring System
|
2026-09-16T17:00:10.178Z |
2026-09-16T19:21:02.527Z |