Skip to content
OpenAdvisories

Archive

4 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /4 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-44402 Public exploit

    Voltronic Power SNMP Web Pro 1.1 Unauthenticated RCE via upload.cgi

    Voltronic Power SNMP Web Pro 1.1 contains an unauthenticated remote code execution vulnerability in the upload.cgi firmware update endpoint that allows remote attackers to execute arbitrary commands as root by uploading a crafted tar archive without valid cre…

    Voltronic Power SNMP Web Pro
  • Critical 9.3
    CVE-2026-85595 Public exploit Scanner template

    Traefik before v2.11.55 and v3.0.0 through v3.7.10 Authentication Bypass via digestAuth

    Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an authentication bypass vulnerability in the digestAuth middleware where unknown usernames receive an empty secret instead of rejection. Attackers can compute a valid digest respons…

    traefik traefik traefik-3.6 Wolfi
  • Critical 9.8
    CVE-2026-11613 Public exploit

    Divi Ajax Filter <= 5.1.2 - Unauthenticated Local File Inclusion via 'custom_loop_template' Parameter

    The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.1.2 via the 'custom_loop_template' parameter parameter. This makes it possible for unauthenticated attackers to include and execute arbitra…

    Divi Engine Divi Ajax Filter Web / CMS
  • Critical 9.1
    CVE-2026-75431 Public exploit

    PowerJob Server version 5.1.2 (and likely earlier) uses a predictable JWT signing key for HS256-based authentication. T…

  • Critical 9.8
    CVE-2026-75429 Public exploit

    PowerJob versions 4.x through 5.1.2 contain an unauthenticated remote code execution vulnerability in the /friend/proce…

  • Critical 9.8
    CVE-2026-75430 Public exploit

    PowerJob Worker version 5.1.2 (and likely earlier versions) exposes the /worker/deployContainer HTTP endpoint without a…

  • Critical 9.8
    CVE-2026-78745 Public exploit

    An issue in HiDPT/ Weyon HiDPTAndroid Hi3751V350 Hi3751V352E_DMO allows a remote attacker to execute arbitrary code via…