Archive
14 September 2026
Vulnerabilities first published on this day (UTC), newest first.
21 results · Clear filters · Feed
-
High 7.3CVE-2026-18116 Public exploit
Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications
Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in the dashboard "Waiting For Me" block. A registered user permitted to add events t…
-
High 7.5CVE-2026-84543 Public exploit
An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27,…
-
Medium 5.5CVE-2026-43664 Public exploit
This issue was addressed with improved data protection. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPa…
-
Medium 6.5CVE-2026-43687 Public exploit
The issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPad…
-
High 7.8CVE-2026-43783 Public exploit
A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be a…
-
Medium 5.5CVE-2026-84636 Public exploit
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, tvOS …
-
Medium 5.4CVE-2026-84600 Public exploit
An authorization issue was addressed with improved state management. This issue is fixed in iOS 27 and iPadOS 27, macOS…
-
Medium 5.5CVE-2026-84616 Public exploit
A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iO…
-
High 7.8CVE-2026-84568 Public exploit
A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS …
-
High 7.8CVE-2026-43786 Public exploit
This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia…
-
High 8.8CVE-2026-65374 Public exploit
A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Se…
-
Medium 5.5CVE-2026-84589 Public exploit
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Golden Gate 27. An app may…
-
Critical 9.8CVE-2026-84520 Public exploit
A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Golden Gate 27. A local att…
-
Critical 9.1CVE-2026-86881 Public exploit
A certificate validation issue was addressed with improved certificate validation. This issue is fixed in iOS 26.7 and …
-
High 8.8CVE-2026-89020 Public exploit
MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation
MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 5…
-
Critical 9.8
Cisco Secure Email Gateway SQL Injection Vulnerability
A vulnerability in the email parsing of Cisco AsyncOS Software for Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to execute arbitrary commands with root privileges on the underlying operating system. This vulnerability is due to i…
KEV Sep 14, 2026 -
Critical 9.8CVE-2026-76443 Public exploit
Cisco Secure Email Gateway Security Hardening Release
As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Email Gateway and Cisco Secure Email and Web Manager engineering team has conducted a comprehensive internal security review. This review resulted in software ha…
-
High 7.2CVE-2026-90932 Public exploit
LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService (e.g. BackupService::deleteBackup()) concatenate the user-supplied backup_file/filename value direct…
-
Medium 5.4CVE-2026-90931 Public exploit
LaraDashboard 0.9.0 through 1.2.2 Stored XSS via SVG Upload
LaraDashboard versions 0.9.0 through 1.2.2 fail to sanitize SVG file content during media upload, allowing authenticated users with only the media.create permission to upload malicious SVG files containing script tags. When any user including administrators o…
-
Critical 9.8
Bifrost unauthenticated remote code execution via MCP stdio client registration
Bifrost registers MCP clients through its management API. A stdio client is a command plus args. Bifrost starts that program in the gateway the moment the client is added. No MCP handshake required. The default is governance.auth_config.is_enabled=false. Auth…
-
High 7.7CVE-2026-31278 Public exploit
An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.…