All CVEs — page 162 of 242

The complete archive, 25 per page, newest first. 6034 records. Search instead.

• HIGH 7.5CVE-2026-93990public exploit available2026-09-19
• LOW 3.1CVE-2026-93989public exploit available2026-09-19
• MEDIUM 6.5CVE-2026-93988public exploit available2026-09-19
• LOW 3.5CVE-2026-93956public exploit available2026-09-19
• MEDIUM 4.3CVE-2026-93955public exploit available2026-09-19
• UNSCOREDCVE-2026-891552026-09-19
• MEDIUM 4.3CVE-2026-93954public exploit available2026-09-19
• UNSCOREDCVE-2026-82672public exploit available2026-09-19
• HIGH 7.5CVE-2026-82560public exploit available2026-09-19
• MEDIUM 6.5CVE-2026-940012026-09-19
• MEDIUM 6.6CVE-2026-940002026-09-19
• MEDIUM 4.2CVE-2026-939992026-09-19
• LOW 3.4CVE-2026-93987public exploit available2026-09-19
• LOW 3.1CVE-2026-93986public exploit available2026-09-19
• CRITICAL 9.9CVE-2026-93985public exploit available2026-09-19

  This vulnerability allows attackers with project write access to execute arbitrary code by exploiting a flaw in the JavaScript webhook template validator, which fails to block computed member access to constructor chains.

• MEDIUM 5.3CVE-2026-93984public exploit available2026-09-19
• MEDIUM 5CVE-2026-93983public exploit available2026-09-19
• LOW 3.3CVE-2026-93982public exploit available2026-09-19
• MEDIUM 4.7CVE-2026-93981public exploit available2026-09-19
• CRITICAL 9.8CVE-2026-78030public exploit available2026-09-19

  This flaw allows an attacker to load arbitrary Perl modules by manipulating unvalidated connect attributes, leading to potential remote code execution.

• MEDIUM 4.3CVE-2026-98582026-09-19
• MEDIUM 4.3CVE-2026-97662026-09-19
• MEDIUM 4.3CVE-2026-96132026-09-19
• MEDIUM 5.3CVE-2026-92892026-09-19
• CRITICAL 9.9CVE-2026-93742public exploit available2026-09-19

  The flaw allows command injection via the localPin argument in the formWsc function, enabling remote attackers to execute arbitrary commands on the device.