Skip to content
OpenAdvisories

Archive

27 September 2026

Vulnerabilities first published on this day (UTC), newest first.

← August 2026 2026 / September /27 October 2026 →
  1. 1480
  2. 2326
  3. 3349
  4. 4564
  5. 5133
  6. 692
  7. 7254
  8. 81568
  9. 9660
  10. 10387
  11. 11700
  12. 1295
  13. 13133
  14. 14782
  15. 151427
  16. 16873
  17. 171035
  18. 18512
  19. 19104
  20. 20107
  21. 21289
  22. 22457
  23. 23475
  24. 24556
  25. 25683
  26. 26245
  27. 27152
  28. 28316
  29. 29616
  30. 30642
All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-100886 Public exploit

    Seetong T8108/T8108P/T8116/T8232 Debug Service improper authentication

    A vulnerability was identified in Seetong T8108, T8108P, T8116 and T8232 4.6.1.4-build202604241011. The affected element is an unknown function of the component Debug Service. Such manipulation leads to improper authentication. The attack may be launched remo…

    Seetong T8108P T8232 T8108
  • Critical 9.3
    CVE-2026-88773 Public exploit

    HTTP Request Smuggling

    Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1-37.279 a…

    Citrix NetScaler Gateway ADC Network devices
  • Critical 9.5
    CVE-2026-88772 Exploited Public exploit EPSS 77%

    Memory overflow vulnerability leading to Remote Code Execution or Denial of Service

    Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13.1-64.23 leading to Remote…

    Citrix NetScaler ADC Gateway Network devices
    KEV Sep 27, 2026
  • Critical 9.5
    CVE-2026-88771 Exploited Public exploit EPSS 82%

    A remote code execution vulnerability exists due to improper input validation, which can allow an unauthenticated attacker to execute arbitrary commands

    Improper input validation vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. This issue affects ADC: before 14.1-73.37, before 13.1-64.23, before 14.1-73.37 FIPS, and before 13.1.37.279 FIPS and NDcPP; Gateway: before 14.1-73.37 and before 13…

    Citrix NetScaler Gateway ADC Network devices
    KEV Sep 27, 2026
  • Critical 9.6
    CVE-2026-100833 Public exploit

    Contrast before 1.23.1 Image Substitution via Policy Generation

    Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions. A bad rebase during a Kata Containers update accidentally introduced an `allow_storage` rule that accepts storage en…

    edgelesssys contrast
  • Critical 9.0
    CVE-2026-100721 Public exploit

    vm2 before 3.12.2 Authorization Bypass via Custom Resolver

    vm2 before 3.12.2 contains an authorization bypass in the NodeVM external-module resolver. When an embedder configures `require.external` with a custom resolver (and `context: 'host'`), `LegacyResolver.customResolve` in lib/resolver-compat.js records the reso…

    patriksimek vm2 vm2 npm
  • Critical 9.9
    CVE-2026-100740 Public exploit

    D-Link DIR-895L L2TP Control Channel tunnel.c tunnel_set_params out-of-bounds write

    A vulnerability was detected in D-Link DIR-895L A1_102b07. Impacted is the function tunnel_set_params of the file tunnel.c of the component L2TP Control Channel Parser. Performing a manipulation results in out-of-bounds write. The attack may be initiated remo…

    D-Link DIR-895L Network devices