Skip to content
OpenAdvisories

Archive

9 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /9 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • High 7.5
    CVE-2026-73786 Public exploit

    Unauthenticated Network-Based Denial of Service in CPPM systems

    A vulnerability in the web-based management interface of CPPM could allow an unauthenticated remote attacker to conduct a Denial-of-Service (DoS) attack. Successful exploitation could allow an attacker to cause instability and degrade performance of the vulne…

    Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
  • High 8.1
    CVE-2026-87930 Public exploit

    MaxSite CMS through 109.6 PHP Object Injection via ci_session

    MaxSite CMS through 109.6 passes the ci_session cookie to unserialize() without class restrictions, allowing unauthenticated attackers to inject PHP objects. Attackers can forge valid session cookies using the hardcoded encryption key to trigger magic methods…

    MaxSite MaxSite CMS
  • High 8.8
    CVE-2026-80914 Public exploit

    Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready

    In the Linux kernel, the following vulnerability has been resolved: Bluetooth: ISO: fix use-after-free of listener socket in iso_conn_ready iso_conn_ready() looks up the BIS listener socket with iso_get_sock(), which takes a reference, and then, without re-ch…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-79617 Public exploit

    Improper Access Control Leading to Display Exposure in TÜBİTAK BİLGEM's Pardus LightDM Greeter

    Incorrect Permission Assignment for Critical Resource vulnerability in TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Pardus LightDM Gr…

    TÜBİTAK BİLGEM Software Technologies Research Institute Pardus LightDM Greeter
  • High 8.8
    CVE-2026-80099 Public exploit Scanner template

    Various Newfold Plugins Various Versions - Unauthenticated Authentication Bypass via Bearer Token Validation with Empty Secret

    Several Newfold plugins are vulnerable to Authentication Bypass. The vulnerability exists because the plugins bundle the wp-module-data module. In the module, the `authenticate()` method — registered on the `rest_authentication_errors` filter and therefore ev…

    Newfold WP Module Data WP Plugin Bluehost WP Plugin Crazy Domains
  • High 8.8
    CVE-2026-87491 Exploited Public exploit

    Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code i…

    Google Chrome chromium chromium Browsers Debian Wolfi
    KEV Sep 9, 2026