Skip to content
OpenAdvisories

Archive

22 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /22 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30639
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.1
    CVE-2026-87902 Exploited Public exploit Scanner template EPSS 96%

    An unauthenticated attacker can make `get_page_template()` page-template resolution include a chosen readable local `.p…

    WordPress WordPress wordpress wordpress Web / CMS Debian Ubuntu
    KEV Sep 25, 2026
  • Critical 9.8
    CVE-2026-94127 Exploited Public exploit EPSS 27%

    BIG-IP APM OAuth vulnerability

    When a BIG-IP APM access policy and an OAuth profile are configured on a virtual server, specific malicious traffic can lead to remote code execution (RCE). This vulnerability is only present when BIG-IP APM is configured as an OAuth Authorization Server. Dep…

    F5 BIG-IP Network devices
    KEV Sep 22, 2026
  • Critical 9.8
    CVE-2026-93616 Exploited Public exploit Scanner template EPSS 92%

    Directory Traversal and File upload allows execution of arbitrary script on the Management Server

    A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.

    Check Point Quantum Security Management Network devices
    KEV Sep 22, 2026
  • Critical 10.0
    CVE-2026-93952 Exploited

    Security Advisory 0183

    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access privileged internal functionality and impact the VCO host. Successful exploitation may compromise the confidentiality, integrity, and availability…

    Arista Networks VeloCloud Orchestrator (VCO) On-Prem Network devices
    KEV Sep 22, 2026