CVEs published in September 2026

CVE-2025-21863High

Linux kernel Vulnerability in NetApp Products

CVE-2025-21739High

Linux Kernel Vulnerability in NetApp Products

CVE-2024-53221Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2024-36922High

Linux Kernel Vulnerability in NetApp Products

CVE-2026-97636Medium

CVE-2026-57590High

missing authorization vulnerability exists in the Task Group APIs of Apache DolphinScheduler

CVE-2026-56412Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56411Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56410Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56409Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56408Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56407Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56406Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56405Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56404Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56403Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-56131Medium

Libexpat Vulnerability in NetApp Products

CVE-2026-89078Critical

Double Free in GitLab

CVE-2026-92530Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to spoof merge request authorship and attribute content to arbitrary existing users on the target instance due to improper reliance on ephemeral cache state during Direct Transfer imports

CVE-2026-92470High

GitLab has remediated an issue in GitLab EE affecting all versions from 18.7 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user to access sensitive CI/CD variable values from debug-mode job traces through the Duo AI troubleshooting feature due to missing authorization checks

CVE-2026-92529Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 19.1 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with developer-role permissions to bypass admin-configured AI tool governance controls for workflows in namespaces they do not control due to improper authorization checks

CVE-2026-92874Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.3 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under certain conditions could have allowed an authenticated user with an MCP-scoped token to perform actions beyond the intended scope of that token due to improper authorization checks

CVE-2026-92628Low

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.6 before 19.2.7, 19.3 before 19.3.3, and 19.4 before 19.4.1 that under a race condition, the MCP search tool's shared state handling could have caused search results to be returned under an incorrect user context

CVE-2026-93577Critical

Integer Overflow or Wraparound in GitLab

CVE-2026-95676High

missing/improper authentication vulnerability in the WatchGuard AuthPoint Gateway's LDAP Sync first-factor authentication allows a remote attacker to bypass single-factor password verification under non-default operating conditions

CVE-2026-86247High

Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification requirements to be down-graded for some configurations

CVE-2026-86246Critical

Weakened TLS connection security via insecure default configuration

CVE-2026-86243High

Denial of Service via buffer over-read during TLS handshake

CVE-2026-87022High

WebSocket message smuggling via improper length handling

CVE-2026-86350Critical

HTTP/2 request smuggling due to header mix-up

CVE-2026-86248Critical

OCSP checks sometimes soft-fail with FFM even when soft-fail is disabled

CVE-2026-79677High

Missing release of resource after effective lifetime, Comparison using wrong factors vulnerability in Apache Tomcat allows a denial of service as a result of lost time outs for asynchronous WebSocket writes

CVE-2026-78437High

Incomplete cleanup vulnerability in Apache Tomcat allows a malformed request to potentially (depends on timing) cause one request from another user to fail

CVE-2026-78383High

Denial of Service via AJP request

CVE-2026-77791High

Uncontrolled Resource Consumption vulnerability in Apache Tomcat during sending of WebSocket close message enabled a DoS attack

CVE-2026-77762High

Race condition allows HTTP/2 request manipulation

CVE-2026-77756Medium

Request smuggling vulnerability can lead to denial of service

CVE-2026-76183Critical

Authentication Bypass in WebSocket Endpoints

CVE-2026-75973Critical

Improper Authentication vulnerability in Apache Tomcat

CVE-2026-73581Medium

TLS implementations ignore Certificate Revocation Lists

CVE-2026-94243High

vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence

CVE-2026-94251Medium

vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12

CVE-2026-91928Medium

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS

CVE-2026-96443Medium

Insufficient validation of the JDBC driver URL in Apache Doris allows a privileged user to achieve remote code execution on the FE

CVE-2026-91852Medium

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS

CVE-2026-91999Medium

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache Sling XSS

CVE-2026-92001Medium

Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache Sling XSS

CVE-2026-73192Medium

improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability when using the XSSAPI.getValidHref in Apache Sling XSS version 2.4.10 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack in every feature using this method

CVE-2026-31377High

Improper Authentication vulnerability in the Apache Doris Frontend (FE) meta service allows an unauthenticated remote attacker to access internal metadata service endpoints

CVE-2026-82331Critical

Improper link resolution before file access ('link following') vulnerability in the `tar` source plugin of Apache BuildStream running on Python < 3.12 allows malicious source tarballs to write files on the host, with the privileges of the user running BuildStream, via symlinks as part of source fetching

CVE-2026-95862High

malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device

CVE-2026-95861High

malicious actor with access to the network could exploit an Uncontrolled Recursion vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device

CVE-2026-77558High

malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device

CVE-2026-77556High

malicious actor with access to the network could exploit an Out-of-bounds Read vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device

CVE-2026-77555High

malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device

CVE-2026-77544High

malicious actor with access to the network could exploit an Out-of-bounds Write vulnerability found in certain UniFi gateway devices to execute a Denial of Service (DoS) attack on the device

CVE-2026-70410High

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite Avatica

CVE-2026-63374Critical

TLS certificate spoofing via improper internationalized domain name encoding

CVE-2026-94127CriticalCISA KEV

F5 BIG-IP APM Heap-based Buffer Overflow Vulnerability

CVE-2026-93616CriticalCISA KEV

Check Point Multiple Products Path Traversal Vulnerability

CVE-2026-94588Medium

In Proxmox pmg-api, an argument injection vulnerability exists in the package changelog retrieval functionality

CVE-2026-94301Critical

CVE-2026-47065Critical

CVE-2026-86473Critical

Apache Airflow: Logout ignores a presented Authorization bearer token, leaving it revocable only by expiry

CVE-2026-75158Medium

Apache Airflow: Assets events API returns asset events for every Dag with no per-Dag authorization filter

CVE-2026-82355Medium

Apache Airflow: Session cookie silently overrides explicit Authorization bearer header, enabling session fixation

CVE-2026-91867Medium

When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a server that trickles bytes slowly can keep the fetch alive indefinitely and tie up the calling thread (denial of service)

CVE-2026-91866High

specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amounts of work, pinning the CPU for a long time (denial of service)

CVE-2026-91865High

small WS-Policy document using repeated policy references can force Neethi to re-expand the same references exponentially during normalization, consuming huge amounts of CPU and memory (denial of service)

CVE-2026-91864High

specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copies into memory without counting it against its size limits, exhausting the heap (denial of service)

CVE-2026-91863High

specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth limit and exhaust the thread stack, crashing the parser (denial of service)

CVE-2026-47321High

Denial of Service via unbounded decompression amplification

CVE-2026-93748High

Information Disclosure via max-stale directive

CVE-2026-93690High

DoS (Denial of Service) uri-js Dependency in Bamboo Data Center

CVE-2026-93558High

Unbounded Per-Connection Queue Growth in WebSocketServerExtensionHandler Leads to Denial of Service

CVE-2026-93491High

DoS (Denial of Service) io.netty:netty-codec-http Dependency in Bamboo Data Center

CVE-2026-93488High

DoS (Denial of Service) io.netty:netty-codec-http Dependency in Bamboo Data Center

CVE-2026-40539High

CVE-2026-40538High

CVE-2026-40537High

CVE-2026-40536High

CVE-2026-40535High

CVE-2026-40534High

CVE-2026-40533High

CVE-2026-40532High

CVE-2026-40531High

CVE-2026-40530High

CVE-2026-4036High

CVE-2026-6205Critical

CVE-2026-13684Critical

CVE-2026-13683Critical

CVE-2026-13673Critical

CVE-2026-13666Critical

CVE-2026-13639Critical

CVE-2026-13635Critical

CVE-2026-13623Critical

CVE-2026-75157High

Apache Airflow: Asset queued-events DELETE endpoints gated on Dag READ instead of Dag EDIT (asset-triggered scheduling suppression)

CVE-2024-38639Medium

QTS: improper authentication vulnerability has been reported to affect product.

CVE-2024-27123Medium

cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent.

CVE-2026-44777Medium

jq Vulnerability in NetApp Products