Skip to content
OpenAdvisories

Archive

20 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /20 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Critical 9.9
    CVE-2026-94095 Public exploit

    Netcore NBR200V2 Traceroute Diagnostic Feature network_tools command injection

    A vulnerability has been found in Netcore NBR200V2 1.3.241127.071246. Affected by this vulnerability is an unknown functionality of the file /usr/bin/network_tools of the component Traceroute Diagnostic Feature. The manipulation of the argument url leads to c…

    Netcore NBR200V2
  • Critical 9.3
    CVE-2026-88854 Public exploit

    Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7

    Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joomla Gallery extension for Joomla < 6.2.7 - The extensions showSearchResult() and showSearchResultAjax() read the textsearch/searchText request parameter with $input->getVar(), whic…

    ordasoft.com OrdaSoft Joomla Gallery free extension for Joomla OrdaSoft Joomla Gallery extension for Joomla Web / CMS
  • High 8.8
    CVE-2026-94036 Public exploit

    D-Link DIR-X1860/DIR-X1860Z routerd ubus access control

    A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0.2.220120.165402. The impacted element is an unknown function of the file /ubus of the component routerd. The manipulation of the argument passwd_set results in improper access co…

    D-Link DIR-X1860Z DIR-X1860 Network devices
  • Critical 9.8
    CVE-2026-90817 Public exploit Scanner template

    An unauthenticated Remote Code Execution vulnerability was found in the survey passthrough routing and Data Import proc…

    Vanderbilt University REDCap
  • Medium 5.4
    CVE-2026-86552 Public exploit

    A vulnerability that skips email ownership verification for account registration in ZTE SmartLife APP

    SmartLife app dynamically generates brand‑new SmartLife application authentication parameters at runtime. With the acquired SmartLife application authentication credentials, an attacker can directly complete registration using any arbitrary email address via …

    ZTE SmartLife
  • Critical 9.1
    CVE-2026-93958 Public exploit

    D-Link R95 DHMAPI ssi system os command injection

    A vulnerability was found in D-Link R95 BE9500_1.00.16. This vulnerability affects the function system of the file /bin/ssi of the component DHMAPI. The manipulation of the argument NTPServer results in os command injection. The attack can be executed remotel…

    D-Link R95 Network devices