|
cve-2026-92359
|
|
ag-ui-protocol ag-ui CORSMiddleware utils.py create_st…
|
ag-ui-protocol
|
ag-ui
|
2026-09-16T12:00:16.220Z |
2026-09-16T13:15:16.227Z |
|
cve-2026-92465
|
7.6 (v3.1)
|
WordPress WP Mega Menu plugin <= 1.4.2 - SQL Injection…
|
Themeum
|
WP Mega Menu
|
2026-09-16T11:29:12.124Z |
2026-09-16T15:52:52.488Z |
|
cve-2026-58147
|
9.3 (v4.0)
|
Authorized remote code execution via password change f…
|
WNC
|
T-Mobile 5G Box IDU
|
2026-09-16T11:21:16.720Z |
2026-09-16T15:58:25.276Z |
|
cve-2026-58146
|
9.4 (v4.0)
|
Unauthorized remote code execution in T-Mobile 5G Box …
|
WNC
|
T-Mobile 5G Box IDU
|
2026-09-16T11:21:15.520Z |
2026-09-16T15:58:50.554Z |
|
cve-2026-40857
|
8.4 (v4.0)
|
CSRF token bypass in T-Mobile 5G Box IDU routers
|
WNC
|
T-Mobile 5G Box IDU
|
2026-09-16T11:21:14.484Z |
2026-09-16T16:00:47.111Z |
|
cve-2026-40856
|
7.1 (v4.0)
|
Config disclosure in T-Mobile 5G Box IDU routers
|
WNC
|
T-Mobile 5G Box IDU
|
2026-09-16T11:21:13.302Z |
2026-09-16T16:01:34.194Z |
|
cve-2026-40855
|
9.3 (v4.0)
|
Command Injection in T-Mobile 5G Box IDU router via pi…
|
WNC
|
T-Mobile 5G Box IDU
|
2026-09-16T11:21:11.939Z |
2026-09-16T16:01:54.453Z |
|
cve-2026-40854
|
8.7 (v4.0)
|
Session auth bypass via cookie value in T-Mobile 5G Bo…
|
WNC
|
T-Mobile 5G Box IDU
|
2026-09-16T11:21:10.202Z |
2026-09-16T17:41:03.847Z |
|
cve-2026-92463
|
7.1 (v4.0)
6.5 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via Disa…
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:31.630Z |
2026-09-18T17:44:28.508Z |
|
cve-2026-92462
|
7.1 (v4.0)
6.5 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CrmF…
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:30.884Z |
2026-09-21T17:57:51.187Z |
|
cve-2026-92461
|
5.3 (v4.0)
4.3 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CRM …
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:30.209Z |
2026-09-16T13:34:52.609Z |
|
cve-2026-92460
|
7.1 (v4.0)
6.5 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CRM …
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:29.492Z |
2026-09-17T19:26:47.471Z |
|
cve-2026-92459
|
7.1 (v4.0)
6.5 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CRM …
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:28.792Z |
2026-09-16T17:43:45.260Z |
|
cve-2026-92458
|
5.3 (v4.0)
4.3 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via Stor…
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:28.070Z |
2026-09-18T17:42:45.622Z |
|
cve-2026-92457
|
7.1 (v4.0)
6.5 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CrmI…
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:27.376Z |
2026-09-21T17:50:17.523Z |
|
cve-2026-92456
|
7.1 (v4.0)
7.1 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CRM …
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:26.713Z |
2026-09-16T13:27:23.763Z |
|
cve-2026-92455
|
5.3 (v4.0)
4.3 (v3.1)
|
yshop-crm through 2.1.3 Missing Authorization via CRM …
|
guchengwuyue
|
yshop-crm
|
2026-09-16T11:07:26.041Z |
2026-09-17T19:26:53.422Z |
|
cve-2026-92357
|
|
a2ui-project a2ui Model Processor model-processor.ts i…
|
a2ui-project
|
a2ui
|
2026-09-16T11:00:17.601Z |
2026-09-18T17:38:54.087Z |
|
cve-2026-86107
|
5.9 (v3.1)
8.2 (v4.0)
|
Security Advisory 0180
|
Arista Networks
|
VeloCloud
|
2026-09-16T10:49:31.522Z |
2026-09-16T17:45:20.522Z |
|
cve-2026-90049
|
|
net: skbuff: don't skb_tx_error() the source skb in sk…
|
Linux
|
Linux
|
2026-09-16T10:33:45.259Z |
2026-10-19T08:57:08.616Z |
|
cve-2026-90048
|
|
fs/ntfs3: fix slab-out-of-bounds write in ni_create_at…
|
Linux
|
Linux
|
2026-09-16T10:33:44.538Z |
2026-10-30T12:33:58.173Z |
|
cve-2026-90047
|
|
drm/xe: Don't hand out the flat CCS storage as usable VRAM
|
Linux
|
Linux
|
2026-09-16T10:33:43.851Z |
2026-10-19T08:57:06.434Z |
|
cve-2026-90046
|
|
mm/page_alloc: don't spin_trylock() in NMI on UP
|
Linux
|
Linux
|
2026-09-16T10:33:43.156Z |
2026-10-19T08:57:04.231Z |
|
cve-2026-90045
|
|
USB: gadget: ffs: fix mm lifetime handling
|
Linux
|
Linux
|
2026-09-16T10:33:42.411Z |
2026-10-30T12:33:57.106Z |
|
cve-2026-90044
|
|
usb: gadget: f_fs: Fix Use-After-Free in AIO error path
|
Linux
|
Linux
|
2026-09-16T10:33:41.695Z |
2026-10-30T12:33:56.040Z |
|
cve-2026-90043
|
|
zram: fix slot lock bit position on big-endian 64-bit
|
Linux
|
Linux
|
2026-09-16T10:33:40.907Z |
2026-10-19T08:57:01.055Z |
|
cve-2026-90042
|
|
ceph: properly decrypt filenames in vmalloc() buffers
|
Linux
|
Linux
|
2026-09-16T10:33:40.210Z |
2026-10-21T12:49:35.535Z |
|
cve-2026-90041
|
|
HID: sony: clean up device list on probe failure
|
Linux
|
Linux
|
2026-09-16T10:33:39.499Z |
2026-10-30T12:33:54.982Z |
|
cve-2026-90040
|
N/A
|
KVM: SEV: Forcefully invalidate SNP VMSA if its backin…
|
Linux
|
Linux
|
2026-09-16T10:33:38.790Z |
2026-10-19T08:56:57.861Z |
|
cve-2026-90039
|
N/A
|
NFSD: Guard admin state-revocation walks with NFSD_NET_UP
|
Linux
|
Linux
|
2026-09-16T10:33:38.091Z |
2026-10-19T08:56:56.714Z |