Skip to content
OpenAdvisories

Archive

14 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /14 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-84520 Public exploit

    A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local att…

    Apple macOS macOS
  • Critical 9.1
    CVE-2026-86881 Public exploit

    A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and …

    Apple macOS iOS and iPadOS watchOS macOS iOS
  • Critical 9.8
    CVE-2026-76461 Exploited Public exploit EPSS 40%

    Cisco Secure Email Gateway SQL Injection Vulnerability

    A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to i…

    Cisco Cisco Secure Email Network devices
    KEV Sep 14, 2026
  • Critical 9.8
    CVE-2026-76443 Public exploit

    Cisco Secure Email Gateway Security Hardening Release

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software ha…

    Cisco Cisco Secure Email Cisco Secure Email and Web Manager Network devices
  • Critical 9.8
    CVE-2026-90898 Public exploit Scanner template

    Bifrost unauthenticated remote code execution via MCP stdio client registration

    Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth…

    maximhq Bifrost