Week 37, 2026

7–13 September 2026

New CVEs: 3,797
Critical: 337
High: 1,752
Newly exploited: 14
Advisories: 806
Malicious pkgs: 140

Newly exploited 14

Added to CISA KEV or flagged as exploited by ENISA this week — patch these first.

Critical 10.0
CVE-2026-85706 KEV Sep 11, 2026 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · GitLab

EPSS 97%
Critical 9.9
CVE-2026-84869 KEV Sep 11, 2026 ScreenConnect Client: Guest-to-Host File Execution via File-Transfer Actions
ConnectWise · ScreenConnect
High 8.1
CVE-2026-42016 KEV Sep 11, 2026 Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalation
jfrog · artifactory

EPSS 8.6%
High 7.5
CVE-2026-42018 KEV Sep 11, 2026 Anonymous user token generation exposure in JFrog Artifactory
jfrog · artifactory

EPSS 10%
Critical 9.2
CVE-2026-86060 KEV Sep 10, 2026 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
MikroTik · RouterOS

EPSS 6.4%
High 8.8
CVE-2026-67277 KEV Sep 10, 2026 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
MikroTik · RouterOS

EPSS 1.6%
Critical 10.0
CVE-2026-20079 KEV Sep 9, 2026 Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution Vulnerability
Cisco · Cisco Secure Firewall Management Center (FMC)

EPSS 89%
Critical 9.3
CVE-2026-19490 KEV Sep 9, 2026 NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490
NetScaler · ADC · Gateway

EPSS 33%
High 8.8
CVE-2026-87491 KEV Sep 9, 2026 Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML pag…
Google · Chrome

EPSS 3.5%
High 7.4
CVE-2025-25249 KEV Sep 9, 2026 A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 th…
Fortinet · FortiOS · FortiSwitchManager

EPSS 3.7%
Critical 10.0
CVE-2026-86218 KEV Sep 8, 2026 pre-authentication remote code execution
N-able · N-central

EPSS 15%
Critical 10.0
CVE-2026-75650 KEV Sep 8, 2026 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce · Magento Open Source · Adobe Commerce B2B

EPSS 35%
High 7.8
CVE-2026-81963 KEV Sep 8, 2026 Windows Update Stack Elevation of Privilege Vulnerability
Microsoft · Windows Server 2025 · Windows Server 2025 (Server Core installation) · Windows 11 Version 24H2
High 7.8
CVE-2026-85880 KEV Sep 8, 2026 Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege Vulnerability
Microsoft · Windows Server 2019 · Windows Server 2019 (Server Core installation) · Windows 10 Version 1809

Critical new vulnerabilities

Published this week with a CVSS score of 9.0 or higher, most likely to be exploited first.

Critical 10.0
CVE-2026-85706 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab
GitLab · GitLab

EPSS 97%
Critical 9.8
CVE-2026-85102 Improper Certificate Validation in Quantum Security Gateway
checkpoint · Quantum Security Gateway

EPSS 54%
Critical 10.0
CVE-2026-75650 Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)
Adobe · Adobe Commerce · Magento Open Source · Adobe Commerce B2B

EPSS 35%
Critical 9.9
CVE-2026-79697 Advantech WISE-6610-NB Basic Station Certificate-Deletion basicstation_apply command injection
Advantech · WISE-6610P-DEA · WISE-6610-JB · WISE-6610P-DTA

EPSS 4.9%
Critical 9.2
CVE-2026-86426 LibreNMS before 26.8.0 Authentication Bypass via API Token Type Confusion
librenms · librenms

EPSS 4.4%
Critical 9.8
CVE-2026-85103 Heap-based Buffer Overflow in VPN Certificate ASN.1 Decoding
checkpoint · Quantum Security Gateway · Quantum Security Management

EPSS 4.3%
Critical 9.9
CVE-2026-86299 Linksys RE7000 PingTest json.cgi platform_event_pingTest os command injection
Linksys · RE7000

EPSS 3.7%
Critical 10.0
CVE-2026-82004 Adobe Campaign Classic (ACC) | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78)
Adobe · Adobe Campaign Classic

EPSS 3.3%
Critical 9.8
CVE-2026-89010 WAVLINK WN535M1/WN535M3 Unauthenticated OS Command Injection via sync_server
WAVLINK Technology · WN535M1 · WN535M3

EPSS 3.2%
Critical 9.9
CVE-2026-79698 Advantech WISE-6610-NB Node-RED nodered_lib_apply command injection
Advantech · WISE-6610P-DTA · WISE-6610-EL-NB · WISE-6610-EL-TB

EPSS 3.2%
Critical 9.8
CVE-2026-81467 Dell ThinOS 10, versions prior to 2605_10. 2616, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnera…
Dell · ThinOS 10

EPSS 3%
Critical 9.8
CVE-2026-12745 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code o…
ivanti · Neurons for ITSM

EPSS 2.9%
Critical 9.8
CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM before 2026.2 allows a remote unauthenticated attacker to execute arbitrary code o…
ivanti · Neurons for ITSM

EPSS 2.9%
Critical 10.0
CVE-2026-86296 D-Link DIR-822A udhcpcd serverpacket.c strcpy stack-based overflow
D-Link · DIR-822A

EPSS 2.4%
Critical 9.6
CVE-2026-81048 Dell ThinOS 10, versions prior to 2605_10.2616, contain an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A…
Dell · ThinOS 10

EPSS 2.4%

All 337 critical vulnerabilities of the week, day by day →

Not critical, but likely targeted

New this week with the highest EPSS — a lower CVSS score does not mean nobody will use them.

Advisories

USN-8728-1 linux-gcp-7.0 vulnerabilities 1417 CVEs
WID-SEC-2026-3243 Microsoft Windows: Mehrere Schwachstellen 735 CVEs
SUSE-SU-2026:4120-1 Security update for the Linux Kernel 662 CVEs
SUSE-SU-2026:23481-1 Security update for the Linux Kernel 588 CVEs
SUSE-SU-2026:23477-1 Security update for the Linux Kernel 588 CVEs
SUSE-SU-2026:23529-1 Security update for the Linux Kernel 588 CVEs
SUSE-SU-2026:23528-1 Security update for the Linux Kernel 588 CVEs
USN-8726-1 linux, linux-aws, linux-aws-7.0, linux-gcp, linux-gke, linux-hwe-7.0, linux-realtime vulnerabilities 551 CVEs
USN-8727-1 linux-oem-7.0 vulnerabilities 547 CVEs
openSUSE-SU-2026:11750-1 chromedriver-153.0.8010.36-1.1 on GA media 230 CVEs