Skip to content
OpenAdvisories

Archive

16 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /16 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-76460 Exploited Public exploit Scanner template EPSS 76%

    Cisco Identity Services Engine Authentication Bypass Vulnerability

    A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to bypass authentication. This vulnerability is due to insufficient authentication control on an API endpoint. An attacker could exploit this vul…

    Cisco Cisco Identity Services Engine Software Cisco ISE Passive Identity Connector Network devices
    KEV Sep 16, 2026
  • Critical 9.9
    CVE-2026-20329 Public exploit

    Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Exceptional Conditions Handling Vulnerabilities

    As part of Cisco's ongoing commitment to proactive security and product quality, the Cisco Secure Adaptive Security Appliance Software, Cisco Secure Firewall Threat Defense Software and Cisco Secure Firewall Management Center Software engineering team has con…

    Cisco Cisco Secure Firewall Threat Defense (FTD) Software Cisco Secure Firewall Adaptive Security Appliance (ASA) Software Cisco Secure Firewall Management Center (FMC) Network devices
  • Critical 9.8
    CVE-2026-91843 Public exploit

    Stack overflow in login process to the Security Management and Log Servers

    A stack overflow during the unauthenticated login process may allow an attacker to run arbitrary code remotely with root privileges.

    Check Point Quantum Security Management Network devices
  • Critical 9.1
    CVE-2026-81642 Public exploit

    Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY

    In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs. A DNSKEY with an owner compression pointer to its own RDATA…

    NLnet Labs Unbound unbound unbound Debian Ubuntu Azure Linux Alpine
  • Critical 9.8
    CVE-2026-12793 Public exploit

    JetFormBuilder <= 3.6.2 - Unauthenticated Privilege Escalation via '_jet_engine_booking_form_id' Parameter

    The JetFormBuilder — Dynamic Blocks Form Builder plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 3.6.2. This is due to the plugin not validating that a submitted form ID belongs to a JetFormBuilder form before …

    jetmonsters JetFormBuilder — Dynamic Blocks Form Builder Web / CMS
  • Critical 9.8
    CVE-2026-51990 Public exploit

    An issue in Sogou Sogou Input Method < 16.3.0.3498 (fixed in 16.3.0.3498) allows a remote attacker to execute arbitrary…