Skip to content
OpenAdvisories

Archive

27 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /27 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

11 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-100886 Public exploit

    Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

    A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remo…

    Seetong T8108P T8232 T8108
  • Critical 9.8
    CVE-2026-101090

    Nezha through 2.2.3 Host Header Injection via OAuth2 redirect_uri

    Nezha 2.2.3 contains a Host header injection regression in the OAuth2 redirect endpoint. When the new optional dashboard_host setting is empty, /api/v1/oauth2/{provider} (cmd/dashboard/controller/oauth2.go) reflects the attacker-supplied HTTP Host header into…

    nezhahq nezha github.com/nezhahq/nezha Go
  • Critical 9.6
    CVE-2026-101084

    obot before v0.21.1 Authorization Bypass via /mcp-connect

    obot versions before v0.21.1 fail to enforce Access Control Rules on the /mcp-connect endpoint, allowing any authenticated user to connect to restricted MCP servers if they possess the server ID. Attackers can bypass authorization checks to access and manipul…

    obot-platform obot github.com/obot-platform/obot Go
  • Critical 9.8
    CVE-2026-101065

    Obot Quickstart Docker Deployment Unauthenticated Admin Access

    Obot is an open-source AI agent/MCP platform. In all versions up to and including commit d7e6970, the Docker quickstart command documented in the README starts the container listening on 0.0.0.0:8080 with authentication disabled by default. When authenticatio…

    obot-platform obot
  • Critical 9.3
    CVE-2026-88773 Public exploit

    HTTP Request Smuggling

    Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 a…

    Citrix NetScaler Gateway ADC Network devices
  • Critical 9.5
    CVE-2026-88772 Exploited Public exploit EPSS 77%

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote…

    Citrix NetScaler ADC Gateway Network devices
    KEV Sep 27, 2026
  • Critical 9.5
    CVE-2026-88771 Exploited Public exploit EPSS 82%

    A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

    Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13…

    Citrix NetScaler Gateway ADC Network devices
    KEV Sep 27, 2026
  • Critical 9.8
    CVE-2026-100741

    Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') in hMailServer

    Eval injection in the JScript event-script dispatcher in Progressive Robot Ltd's hMailServer, versions 6.0.0 through 6.3.3 on Windows, allows a remote, unauthenticated attacker to run arbitrary JScript inside the hMailServer service process, with the privileg…

    Progressive Robot hMailServer
  • Critical 9.6
    CVE-2026-100833 Public exploit

    Contrast before 1.23.1 Image Substitution via Policy Generation

    Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an `allow_storage` rule that accepts storage en…

    edgelesssys contrast
  • Critical 9.0
    CVE-2026-100721 Public exploit

    vm2 before 3.12.2 Authorization Bypass via Custom Resolver

    vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolver (and `context: 'host'`), `LegacyResolver.customResolve` in lib/resolver-compat.js records the reso…

    patriksimek vm2 vm2 npm
  • Critical 9.9
    CVE-2026-100740 Public exploit

    D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

    A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remo…

    D-Link DIR-895L Network devices