Week 36, 2026

31 August – 6 September 2026

New CVEs: 2,298
Critical: 297
High: 859
Newly exploited: 15
Advisories: 734
Malicious pkgs: 259

Newly exploited 15

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 9.2
CVE-2026-86060 KEV Sep 10, 2026 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
MikroTik · RouterOS

EPSS 6.4%
High 8.8
CVE-2026-67277 KEV Sep 10, 2026 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
MikroTik · RouterOS

EPSS 1.6%
Critical 9.2
CVE-2026-67276 ENISA Sep 5, 2026 SSH user impersonation possible in Mikrotik RouterOS
MikroTik · RouterOS

EPSS 8.9%
High 8.8
CVE-2026-85046 KEV Sep 4, 2026 Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (C…
Google · Chrome

EPSS 1.8%
Critical 10.0
CVE-2026-49869 KEV Sep 2, 2026 Kestra: Unauthenticated Remote Code Execution via Authentication Bypass in `AuthenticationFilter`
kestra-io · kestra

EPSS 2.1%
Critical 10.0
CVE-2026-83548 KEV Sep 2, 2026 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticat…
SonicWall · SMA1000

EPSS 8%
Critical 9.8
CVE-2026-82329 KEV Sep 2, 2026 Potential authentication bypass leading to administrative access in Artifactory
jfrog · artifactory

EPSS 14%
Critical 9.3
CVE-2026-9586 KEV Sep 2, 2026 Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB
Sangoma · Switchvox SMB Edition

EPSS 19%
Critical 9.1
CVE-2026-58400 ENISA Sep 2, 2026 GeoNetwork vulnerable to Remote Code Execution via unsafe Saxon XSLT processor configuration in formatter
geonetwork · core-geonetwork

EPSS 1.2%
High 8.8
CVE-2026-59822 KEV Sep 2, 2026 LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
BerriAI · litellm
High 8.6
CVE-2026-63219 ENISA Sep 2, 2026 Unauthenticated file upload via missing authorization on formatter upload endpoint
geonetwork · core-geonetwork
High 7.8
CVE-2026-83549 KEV Sep 2, 2026 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000…
SonicWall · SMA1000

EPSS 9.9%
Medium 6.5
CVE-2026-48710 KEV Sep 2, 2026 Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
Kludex · starlette

EPSS 70%
Critical 9.4
CVE-2026-82078 KEV Aug 31, 2026 PaperCut MF/NG: Unsafe Dynamic Class Loading in Database Connector
PaperCut · PaperCut MF/NG

EPSS 63%
High 8.8
CVE-2026-81578 KEV Aug 31, 2026 PaperCut MF/NG: Authentication Bypass
PaperCut · PaperCut MF/NG

EPSS 85%

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2026-86218 pre-authentication remote code execution
N-able · N-central

EPSS 15%
Critical 9.2
CVE-2026-67276 SSH user impersonation possible in Mikrotik RouterOS
MikroTik · RouterOS

EPSS 8.9%
Critical 10.0
CVE-2026-83548 A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access path. A remote unauthenticat…
SonicWall · SMA1000

EPSS 8%
Critical 9.2
CVE-2026-86060 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
MikroTik · RouterOS

EPSS 6.4%
Critical 9.1
CVE-2026-85224 D-Link DNS-320 ShareCenter File Sharing file_sharing.cgi os command injection
D-Link · DNS-320 ShareCenter

EPSS 3.6%
Critical 9.1
CVE-2026-85222 D-Link DNS-340L Add-On Center addon_center.cgi os command injection
D-Link · DNS-340L

EPSS 3.6%
Critical 9.1
CVE-2026-82691 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 CGI usb_device.cgi os command injection
D-Link · DNS-340L · DNS-327L · DNS-345

EPSS 3.6%
Critical 9.1
CVE-2026-82690 D-Link DNS-327L/DNS-340L ve_mgr.cgi os command injection
D-Link · DNS-340L · DNS-327L

EPSS 3.6%
Critical 9.1
CVE-2026-82688 D-Link DNS-340L/DNS-345 Virtual Volume virtual_vol.cgi os command injection
D-Link · DNS-340L · DNS-345

EPSS 3.6%
Critical 9.9
CVE-2026-85223 D-Link DNS-340L CGI dropbox.cgi os command injection
D-Link · DNS-340L

EPSS 3.3%
Critical 9.9
CVE-2026-82692 D-Link DNS-340L/DNS-345 iscsi_mgr.cgi os command injection
D-Link · DNS-340L · DNS-345

EPSS 3.3%
Critical 9.9
CVE-2026-82689 D-Link DNS-320L/DNS-327L/DNS-340L/DNS-345 ISO Image isomount_mgr.cgi os command injection
D-Link · DNS-340L · DNS-327L · DNS-345

EPSS 3.3%
Critical 10.0
CVE-2026-82971 QVidium Opera11 CGI Script net_tr.cgi command injection
QVidium · Opera11

EPSS 3.3%
Critical 9.9
CVE-2026-83772 Cobham SATCOM VSAT7090 Maritime Satellite Router JSON Parsing mail-report.sh c_set_reports_decode command injection
Cobham · SATCOM VSAT7090 Maritime Satellite Router

EPSS 3.2%
Critical 9.9
CVE-2026-83524 RedPort Optimizer wXa-223 System Clock datetime.php exec command injection
RedPort · Optimizer wXa-213 · Optimizer wXa-203 · Optimizer wXa-223

EPSS 3.2%

All 297 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

High 7.8
CVE-2026-83549 Post-authentication Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability has been identified in the SMA1000…
SonicWall · SMA1000

EPSS 9.9%
High 8.7
CVE-2026-79756 Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
nuclio · nuclio

EPSS 7.5%
High 8.1
CVE-2026-86242 Unauthenticated RCE via Custom Plugin HTTP Path on Dynamically Linked Builds
maximhq · Bifrost

EPSS 3.6%
High 7.5
CVE-2026-85431 MOOS essential-moos through 10.0.1 pMOOSBridge Unauthenticated UDP Packet Injection
themoos · essential-moos

EPSS 3.4%
High 8.8
CVE-2026-14828 Zohocorp ManageEngine Password Manager Pro versions before 13235, PAM360 versions before 8561, and Access Manager Plus versions before 4405 are vulnerable to a…
Zohocorp · ManageEngine Password Manager Pro · ManageEngine PAM360 · ManageEngine Access Manager Plus

EPSS 3.1%
Medium 6.6
CVE-2026-82703 Edimax BR-6214K asp_setPing Endpoint ping.asp system os command injection
Edimax · BR-6214K

EPSS 2.9%
Medium 6.6
CVE-2026-82702 Edimax BR-6214K asp_WlanMP Endpoint wlanMP.asp system os command injection
Edimax · BR-6214K

EPSS 2.9%
Medium 6.9
CVE-2026-67279 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS
MikroTik · RouterOS

EPSS 2.3%

Advisories

openSUSE-SU-2026:21135-1 Security update for chromium 562 CVEs
openSUSE-SU-2026:21498-1 Security update for chromium 501 CVEs
openSUSE-SU-2026:20849-1 Security update for chromium 373 CVEs
SUSE-SU-2026:23625-1 Security update for govulncheck-vulndb 181 CVEs
openSUSE-SU-2026:21761-1 Security update for govulncheck-vulndb 181 CVEs
openSUSE-SU-2026:20660-1 Security update for chromium 124 CVEs
SUSE-SU-2026:23411-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen 115 CVEs
SUSE-SU-2026:23590-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen 115 CVEs
openSUSE-SU-2026:21713-1 Security update for MozillaFirefox, mozilla-nss, mozilla-nspr, rust-cbindgen 115 CVEs
openSUSE-SU-2026:20460-1 Security update for chromium 86 CVEs