CVEs published September 20, 2026
77,396 CVEs in 2026
A vulnerability was determined in D-Link DIR-868L 2.01b05.
A vulnerability has been found in Comfast CF-N1-S 2.6.0.1.
An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import processing logic, in which a malicious user could potentially exploit it by manipulating…
Suricata before 8.0.7 has an Http2ThreadMultiBuf use-after-free when a transaction is inspected by rules that use http.response_header with and without a transform.
This requires app-layer.protocols.doh2 to be enabled, which is the default in 8.x versions.
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveWatermark() copied an uploaded file into a…
Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Execution in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions updateOSGallery(), reached via…
Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the…
A vulnerability was found in D-Link R95 BE9500_1.00.16.
getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out handlers that fail to escape filenames in command strings.
NivoCart through 2.4.0 contains an arbitrary file upload vulnerability in the File Manager multi() endpoint that fails to validate file extensions for new filenames or when chunks parameter is 2 or higher.
A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402.
SmartLife app dynamically generates fresh SmartLife application authentication parameters inside its runtime process.
Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions saveGallery() passes form data through a hand-rolled parser…
The Forminator Forms WordPress plugin before 1.57.2.1 does not restrict which classes may be instantiated when it deserialises a value taken from an XML-RPC request, allowing users who hold its…
A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1.
NivoCart through 2.4.0 contains a predictable password reset token vulnerability in the forgotten.php endpoint that generates recovery codes using substr(md5(mt_rand()), 0, 10).
The SAML Single Sign On WordPress plugin before 6.0.0 does not honour the configured criterion for linking an incoming single sign-on identity to a WordPress account, always resolving the identity by login…
openEQUELLA before 2026.1.0 contains an authenticated stored server-side template injection vulnerability in FreemarkerPortletRenderer.renderHtml() that allows any authenticated non-guest user to achieve…
The Tripzzy WordPress plugin before 1.5.1 does not have authorisation checks, and does not validate the identifier of the object being removed, in an AJAX action available to unauthenticated users,…
The Unlimited Elements For Elementor WordPress plugin before 2.0.20 does not perform a capability check on an AJAX action and deserializes attacker-controlled stored data through it, which makes it possible…
A vulnerability was identified in 03-lovepreetSingh MCP up to f95d035c5317fad81af9828286631053ccb23546.
A vulnerability was detected in vas3k TaxHacker up to 0.8.5.
A security vulnerability has been detected in NonceGeek dim-sum-app.
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0.
A vulnerability was found in DedeCMS up to 5.7.118.
A weakness has been identified in SourceCodester Drug Recommendation System 1.0.
A weakness has been identified in code-projects Internship Management System 1.0.
A security flaw has been discovered in code-projects Internship Management System 1.0.
A vulnerability was identified in code-projects Internship Management System 1.0.
A flaw has been found in SourceCodester Online Reviewer Management System 1.0.
A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0.
A security vulnerability has been detected in SourceCodester Online Reviewer Management System 1.0.
A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1.
A vulnerability was identified in aiyiyi121 SxDevOps 1.0/1.1.
A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0.
The Import and export users and customers WordPress plugin before 2.5.2 does not enforce the promote_users capability in its front-end import functionality, allowing users with only the create_users…
The Import and export users and customers WordPress plugin before 2.5.2 does not correctly enforce the promote_users capability when assigning roles during a CSV import, allowing users with only the…
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not correctly validate the extensions of files extracted from an uploaded archive, due to a variable being reused as a loop…
Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 (driver versions 1.3.0.0 and earlier) on Microsoft Windows allows local, low-privileged…
mayswind ezBookkeeping before 2.0.0 fails to invalidate TOTP passcodes after use, allowing attackers to replay captured codes within the acceptance window.
The Kirki WordPress plugin before 6.3.1 does not sanitize uploaded SVG files while making them uploadable site-wide, allowing users with author-level access and above to upload a file containing JavaScript…
The Master Slider WordPress plugin through 3.11.2 does not sanitise and escape some of its shortcode attributes before outputting them in an inline script context, which could allow users with the…
Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 characters in range a-p.
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0.
A flaw has been found in aiyiyi121 SxDevOps 1.0/1.1.
The Forminator Forms WordPress plugin before 1.57.2.1 does not apply the role validation it enforces elsewhere when a registration form is nested inside an imported quiz, allowing a user who may import…
Frappe ERPNext versions before 15.121.0 and 16.x before 16.34.0 contain an information disclosure vulnerability in whitelisted timesheet endpoints that fail to enforce doctype permissions.
getID3 through 1.9.26 contains an XML external entity injection vulnerability in the XML2array helper function that fails to properly disable entity loading on PHP before 8.0.
The Meow Gallery WordPress plugin before 5.5.5 does not properly sanitize a user-supplied value before concatenating it into a shortcode string that it passes to the WordPress shortcode parser on a publicly…
A security vulnerability has been detected in DLR-RM stable-baselines3 up to 2.9.0.
A security flaw has been discovered in JusticeRage Manalyze 1.0.0.
A vulnerability was found in 0717376 cowork_bench up to d943e75bc0fc8e3b27141979300cd8cbcd1e890d.
A security vulnerability has been detected in samanhappy MCPHub up to 1.0.32.
A vulnerability was found in AdithyaYelloju Restaurant Management System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c.
A vulnerability has been found in AdithyaYelloju Restaurant-Management-System up to 7f0e7e84255e8fcfd488e83f8f91451bbbff6b9c.
A flaw has been found in itsourcecode Leave Management System 1.0.
A vulnerability was detected in 0-Gaurav-0 nexus-mcp aed0026e7ac1f23dc940e46e9fd3a2da6904f914.
A security vulnerability has been detected in itsourcecode Leave Management System 1.0.
The ZTE SmartLife application has a hardcoded key.
Incorrect default permissions in the installation directory of WatchDog Anti-Virus on Windows allow local, low-privileged users to modify, replace, or delete antivirus binaries and configuration files,…
A vulnerability was detected in dmlc dgl up to 2.1.0.
A weakness has been identified in piskvorky gensim up to 4.4.0.
A vulnerability was found in aiyiyi121 SxDevOps 1.0/1.1.
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime.
NivoCart through 2.4.0 contains a destructive configuration write vulnerability in the admin password reset controller that allows unauthenticated attackers to disable password recovery by supplying an…
A vulnerability was determined in Free5GC up to 4.2.3.
A flaw has been found in vas3k TaxHacker up to 0.8.5.
A weakness has been identified in aiyiyi121 SxDevOps 1.0/1.1.
A vulnerability was detected in NginxProxyManager nginx-proxy-manager up to 2.15.1.
A security flaw has been discovered in Dromara UJCMS up to 12.3.1.
The Tripzzy WordPress plugin before 1.5.1 does not perform any capability or ownership checks on its administrative booking-management actions, which are additionally exposed to unauthenticated users and…
Improper link resolution before file access in the quarantine restoration process of WatchDog Anti-Virus 1.8.640 on Windows allows local, low-privileged attackers to cause a quarantined file to be written…
A vulnerability has been found in aiyiyi121 SxDevOps 1.0/1.1.
A flaw has been found in OpenClaw up to 2026.9.5.
A vulnerability has been found in D-Link DIR-X1860Z up to 1.0.2.220120.165402.
A flaw has been found in 06ketan slideshot up to 4.4.0.
A weakness has been identified in 0215AndrewFeng ACE-MCP up to 4.10.8.
A weakness has been identified in 00Kisumi00 mcp-file-analyzer up to 84740852f0cf0cf5db4781b1ca6d7c6a6d210405.
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0.
A weakness has been identified in mealie-recipes Mealie up to 3.25.1.
A vulnerability was identified in Pixelfed up to 0.12.11.
A vulnerability has been found in olivier-ls PHP-FTS up to 1.1.3.
The Sign-up Sheets WordPress plugin before 2.4.0 does not properly validate the CSRF nonce that protects its sign-up deletion action, allowing attackers to delete sign-up records via a forged request…
SmartLife app dynamically generates brand‑new SmartLife application authentication parameters within its runtime process.
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user acting on an image owns the gallery it belongs to, allowing users granted its gallery-management…
The Import and export users and customers WordPress plugin before 2.4.5 does not validate a user-supplied URL before requesting it server-side during a CSV import, allowing high-privileged users to perform…
A vulnerability was determined in aiyiyi121 SxDevOps 1.0/1.1.
The TikTok WordPress plugin before 1.4.2 does not check that a request is authorised before acting on a sign-in code supplied in the URL, so any visitor can make the site redeem a code of their choosing…
A security flaw has been discovered in newbee-ltd newbee-mall up to 1.0.0.
A vulnerability was found in SourceCodester Drug Recommendation System 1.0.
A vulnerability has been found in SourceCodester Drug Recommendation System 1.0.
A vulnerability was determined in code-projects Assessment Management 1.0.
The Z80Ultra (NX741J) product contains a vulnerability where non-privileged programs can retrieve the Wi-Fi MAC address by querying the read-only field factory_mac_address in the Settings.Secure database.
A security vulnerability has been detected in SerenityOS up to 3d83e4509fd20d7438e1ae8470ffe668c136229c.
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not check that a user holds its options capability before saving image sizing settings, allowing users granted only its…
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the user saving a gallery owns it, allowing any user granted its gallery-management capability by an…
The Meow Gallery WordPress plugin before 5.5.5 does not perform a proper capability check or restrict results to the requesting user's own posts before returning post data, allowing authenticated users with…
The Photo Gallery, Sliders, Proofing and WordPress plugin before 4.5.0 does not verify that the requesting user is entitled to a given image record before returning it, allowing users with the Contributor…
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0.
A vulnerability was found in code-projects Assessment Management 1.0.
A vulnerability has been found in code-projects Assessment Management 1.0.