Skip to content
OpenAdvisories

Archive

7 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /7 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-75650 Exploited Public exploit Scanner template EPSS 99%

    Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)

    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbi…

    Adobe Adobe Commerce Magento Open Source Adobe Commerce B2B Web / CMS
    KEV Sep 8, 2026
  • Critical 9.8
    CVE-2026-86478 Public exploit

    In JetBrains YouTrack before 2025.3.161254, 2026.1.14042 improper authentication in YouTrack Helpdesk allowed unauthent…

    JetBrains YouTrack
  • High 8.4
    CVE-2026-19843 Public exploit

    389-ds-base: 389-ds-base: command injection via unescaped ldap dn in cockpit 389 console ldap editor

    A flaw was found in 389-ds-base. The Cockpit 389 Console's LDAP editor constructs an ldapsearch command by embedding an LDAP entry's distinguished name (DN) into a shell command string without proper escaping. An LDAP user with delegated privileges to create …

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux
  • Critical 9.2
    CVE-2026-86426 Public exploit Scanner template

    LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion

    LibreNMS before 26.8.0 contains an authentication bypass vulnerability in the REST API that allows unauthenticated attackers to access protected endpoints by sending numeric values instead of string tokens. Attackers can exploit MySQL type coercion by sending…

    librenms librenms
  • Critical 9.8
    CVE-2026-76578 Public exploit

    Ipa: freeipa: freeipa: unauthenticated ldap client can obtain administrator credentials via the self-managed-token aci

    A flaw was found in FreeIPA. The self-managed OTP token ACI does not require authentication and does not restrict which attributes may be added alongside the token entry. An unauthenticated LDAP client can exploit this, combined with a related flaw in the und…

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu
  • Medium 5.5
    CVE-2026-20516 Public exploit

    In MiracastService, there is a possible escalation of privilege due to a confused deputy. This could lead to local deni…

    MediaTek MediaTek chipset