Skip to content
OpenAdvisories

Archive

14 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /14 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • High 7.3
    CVE-2026-18116 Public exploit

    Concrete CMS 8.3.0 to 9.5.2 is vulnerable to Stored XSS in Calendar Event Name via Workflow Approval Notifications

    Concrete CMS 8.3.0 to 9.5.2 stored calendar event names without sanitization and rendered them without HTML escaping in the workflow approval and deletion notifications shown in the dashboard "Waiting For Me" block. A registered user permitted to add events t…

    Concrete CMS Concrete CMS
  • High 7.5
    CVE-2026-84543 Public exploit

    An out-of-bounds access issue was addressed with improved bounds checking. This issue is fixed in macOS Golden Gate 27,…

    Apple macOS macOS
  • High 7.8
    CVE-2026-43783 Public exploit

    A race condition was addressed with improved locking. This issue is fixed in macOS Tahoe 26.6. A malicious app may be a…

    Apple macOS macOS
  • High 7.8
    CVE-2026-84568 Public exploit

    A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Golden Gate 27, macOS …

    Apple macOS macOS
  • High 7.8
    CVE-2026-43786 Public exploit

    This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden Gate 27, macOS Sequoia…

    Apple macOS macOS
  • High 8.8
    CVE-2026-65374 Public exploit

    A memory corruption issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27, macOS Se…

    Apple macOS macOS
  • High 8.8
    CVE-2026-89020 Public exploit

    MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation

    MikroTik RouterOS before 7.23.4 (long-term) and 7.24.2 (stable) contains a stack-based buffer overflow vulnerability in the mtget binary's TFTP RRQ builder function that allows authenticated users to crash the mtget worker process by supplying a URL path of 5…

    MikroTik RouterOS Network devices
  • High 7.2
    CVE-2026-90932 Public exploit

    LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE

    LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService (e.g. BackupService::deleteBackup()) concatenate the user-supplied backup_file/filename value direct…

    LaraDashboard LaraDashboard
  • High 7.7
    CVE-2026-31278 Public exploit

    An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 before 2.9.12 and and BioStar X before 1.…

    supremainc BioStar 2