Skip to content
OpenAdvisories

Archive

1 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /1 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

13 results · Clear filters · Feed

  • Critical 9.8
    CVE-2023-54391 Public exploit Scanner template

    Proxmox VE 7.0-8.0 Authentication Bypass via tfa-challenge Parameter

    Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass vulnerability in libpve-access-control before 8.0.4 that allows unauthenticated attackers to authenticate as any existing enabled user without a configured second factor by sup…

    Proxmox Server Solutions Proxmox Virtual Environment (VE) Virtualization
  • High 7.8
    CVE-2026-83549 Exploited Public exploit

    Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerab…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 10.0
    CVE-2026-83548 Exploited Public exploit Scanner template

    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alter…

    SonicWall SMA1000 Network devices
    KEV Sep 2, 2026
  • Critical 9.0
    CVE-2026-75604 Public exploit

    Next.js: Unauthenticated Remote Code Execution on windows-hosted servers

    Next.js is a React framework for building full-stack web applications. From 13.4.0 until 15.5.24 and 16.3.3, Next.js applications using Pages Router or App Router without Cache Components on Windows-hosted servers do not consistently escape backslashes in rou…

    vercel next.js next npm
  • High 8.8
    CVE-2026-71981 Public exploit

    Cypht < 2.12.2 PHP Object Injection RCE via back_query Parameter

    Cypht before 2.12.2 contains a PHP object injection vulnerability that allows authenticated attackers to execute arbitrary operating system commands by supplying a crafted PHP object graph in the back_query GET parameter of the logout handler. Attackers can p…

    cypht-org cypht
  • High 7.7
    CVE-2026-84361 Public exploit

    Composer: Perforce source URL permits P4PORT `rsh:` command execution

    Composer is a dependency Manager for the PHP language. From 1.0 until 2.2.30 and 2.10.3, a malicious dependency package from a custom Composer repository or an untrusted composer.lock file could set source.type to perforce and source.url to an rsh: or jsh: P4…

    composer composer composer/composer composer Debian Ubuntu Alpine Packagist
  • High 8.3
    CVE-2026-8712 Public exploit

    Wyoming < 1.10.2 SSRF via uri Query Parameter

    Wyoming before 1.10.2 contains a server-side request forgery vulnerability that allows unauthenticated attackers with network access to force outbound connections to arbitrary targets by supplying a malicious `uri` query parameter to the HTTP API. Attackers c…

    OHF-Voice wyoming
  • Medium 5.4
    CVE-2026-84118 Public exploit

    Use-after-free in the JavaScript: GC component

    Use-after-free in the JavaScript: GC component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2.

    Mozilla Firefox Thunderbird thunderbird Browsers Ubuntu Wolfi
  • Critical 9.4
    CVE-2026-4813 Public exploit

    Code injection in the Lutece Core

    A vulnerability in the Lutece Core XSL export management module up to version 7.1.7, which allows authenticated administrators to execute code remotely. The XML/XSLT processing configuration does not enable secure processing mode (FEATURE_SECURE_PROCESSING), …

    Lutece Lutece Core
  • High 7.5
    CVE-2026-19952 Public exploit

    Frontend Admin by DynamiApps <= 3.29.12 - Unauthenticated Arbitrary File Deletion via Path Traversal via custom_directory_name Merge Tag

    The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the move_folders function in all versions up to, and including, 3.29.12. This makes it possible for unauthenticated atta…

    shabti Frontend Admin by DynamiApps Web / CMS
  • Critical 9.8
    CVE-2026-75865 Public exploit

    WPLP Cookie Consent <= 4.4.1 - Unauthenticated Arbitrary File Upload via 'upload-logo' REST Endpoint

    The WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode plugin for WordPress is vulnerable to arbitrary file upload due to missing file type validation in the saas_upload_logo() function combined with an authorization…

    WP Legal Pages WPLP Cookie Consent – Cookie Banner & Consent Management for GDPR, CCPA & Google Consent Mode Web / CMS
  • High 8.7
    CVE-2026-65643 Public exploit

    Eval injection in cPanel 11.138.0.0 and earlier allows remote authenticated users to execute arbitrary code as root.

    WebPros cPanel
  • High 7.5
    CVE-2026-51788 Public exploit

    An issue in cleverange_auth v.0.1.10 allows a remote attacker to cause a denial of service via the account_verification…