CVEs published in September 2026

CVE-2026-20290Medium

Cisco Secure Firewall Threat Defense Software Snort 2 SSL/TLS Denial of Service Vulnerability

CVE-2026-20286Medium

CVE-2026-20285Medium

CVE-2026-20250High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Secure Firewall 3100 and 4200 Series DTLS Denial of Service Vulnerability

CVE-2026-20249High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software IKEv2 Certificate Authentication Denial of Service Vulnerability

CVE-2026-20248Medium

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software TCP DNS Denial of Service Vulnerability

CVE-2026-20242Critical

Cisco Secure Firewall Management Center Software Java Deserialization Remote Code Execution Vulnerability

CVE-2026-20235Medium

Cisco Identity Services Engine Information Disclosure Vulnerability

CVE-2026-20222High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software EIGRP Denial of Service Vulnerability

CVE-2026-20154High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Logging Denial of Service Vulnerability

CVE-2026-20135High

Cisco Secure Firewall Threat Defense Software TLS 1.3 Denial of Service Vulnerability

CVE-2026-20121Medium

CVE-2026-20120Medium

CVE-2026-20072Medium

CVE-2026-20071Medium

CVE-2026-77119Medium

DNSSEC bypass via NSEC3 insecure-referral proof

CVE-2026-75029Medium

Denial of Service via crafted query responses

CVE-2026-19668Medium

Denial of Service via invalid DNSSEC records

CVE-2026-19033Medium

Unauthorized zone content updates via unauthenticated IXFR deltas

CVE-2026-80274High

Denial of Service via crafted DNSSEC reply

CVE-2026-76163High

Denial of Service via TKEY query with specific configuration

CVE-2026-19666High

Denial of Service via malformed DNS64 responses

CVE-2026-81563High

ISC BIND Vulnerability in NetApp Products

CVE-2026-78301Medium

DNS cache poisoning via malformed zone insertion

CVE-2026-77692High

Remote Denial of Service via crafted DNS-over-HTTPS request

CVE-2026-19941Medium

DNS wildcard record existence can be masked by an attacker via inapplicable NSEC records

CVE-2026-19662Medium

Denial of Service via crafted DNSSEC responses

CVE-2026-19667High

Denial of Service via 16-bit length truncation in DNS negative cache handling

CVE-2026-81736High

Remote Denial of Service via cached SVCB/HTTPS AliasMode records

CVE-2026-91843Critical

Stack overflow in login process to the Security Management and Log Servers

CVE-2026-84501Medium

unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sending a crafted add_auth("ensemble",...) request containing newline characters (\n)

CVE-2026-84439Medium

When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary fields into Apache ZooKeeper's audit log by sending a digest authentication request with tab characters (\t) embedded in the username

CVE-2026-79993High

Apache ZooKeeper: The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing any authenticated client to delete specific znodes in the data tree regardless of the ACL restrictions on the znode or its parent

CVE-2026-59969Critical

Improper certificate validation in FIPS mode allows quorum compromise

CVE-2026-59739High

Information disclosure via SetWatches reconnect replay

CVE-2024-23944High

CVE-2026-86466High

CVE-2026-76187Critical

Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for any confidential client registered in the Keycloak realm, not only the client configured for Airflow

CVE-2026-76186Critical

Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the signed Airflow session token but takes the Keycloak access and refresh tokens used for every authorization decision from separate, unauthenticated cookies, and never checks that the two describe the same subject

CVE-2026-82310High

Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before deactivation

CVE-2026-86792High

Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka connection's `extra` field into Python callables via `import_string`, with no allowlist, and hand them to the confluent-kafka client which invokes them

CVE-2026-86462Critical

CVE-2026-82311Critical

CVE-2026-86465Medium

CVE-2026-86341Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 17.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user with Owner or Maintainer permissions could have silently disabled protected environment deployment approval requirements, allowing unapproved deployments to reach production, due to improper access control checks performed after the protected resource was modified

CVE-2024-11222Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed a developer user to perform actions in the context of another user's merge request commit due to a race condition issue in pipeline creation

CVE-2025-14871High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL complexity calculation logic

CVE-2026-1168High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.4.6 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to cause denial of service due to improper resource allocation limits in the GraphQL complexity calculation logic

CVE-2026-3855Low

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.2.7 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with project-level permissions to access restricted file contents on the server or cause denial of service due to improper validation of parameters in the Terraform state upload functionality

CVE-2026-7514Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.9 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that an authenticated user with developer-role permissions could substitute package file content and hide packages from their owners due to improper authorization checks in the Generic Package Registry

CVE-2026-8030Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 13.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user to prevent another user from modifying their group settings due to improper validation of group URL slugs during namespace transfers

CVE-2026-16794Medium

GitLab has remediated an issue in GitLab EE affecting all versions from 18.11 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an authenticated user with the Security Manager role to execute arbitrary CI/CD jobs and access protected variables within group projects due to improper authorization controls on compliance framework management

CVE-2026-19619Medium

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that under certain conditions could have allowed an unauthenticated user to execute arbitrary JavaScript in the context of a targeted user's session due to improper sanitization of pasted HTML content in the Content Editor

CVE-2026-78252High

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 15.3 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions, an authenticated user could have induced a targeted user to perform unintended state-changing HTTP requests due to improper sanitization of user-controlled data in the Markdown JSON table renderer

CVE-2026-79708High

GitLab has remediated an issue in GitLab EE affecting all versions from 19.0 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2 that, under certain conditions could have allowed an authenticated user with developer permissions to execute a policy test pipeline on projects within their group and access protected CI/CD variables restricted to higher-privileged roles, due to insufficient scope validation

CVE-2026-91730High

Incomplete cleanup in GetUserMedia

CVE-2026-91722Critical

Use after free in Input

CVE-2026-91719High

Code injection in XML

CVE-2026-91739High

Missing authorization in Transactions Platform

CVE-2026-91738Critical

Improper input validation in ANGLE

CVE-2026-91725High

Observable discrepancy in CSS

CVE-2026-91713High

Missing authorization in Browser

CVE-2026-91732High

Missing authorization in AppManifest

CVE-2026-91723High

Race condition in WebAppInstalls

CVE-2026-91714High

Observable discrepancy in Fonts

CVE-2026-91745High

Use after free in V8

CVE-2026-91729Critical

Arbitrary code execution via use-after-free in DigitalCredentials

CVE-2026-91715High

Type confusion in ServiceWorker

CVE-2026-91711High

Out of bounds write in ServiceWorker

CVE-2026-91746High

Integer overflow in Compositing

CVE-2026-91718Critical

Use after free in Core

CVE-2026-91716Critical

Use after free in Auth

CVE-2026-91710Critical

Use after free in WebAppInstalls

CVE-2026-91740High

Cross-origin data disclosure due to uninitialized resource in Skia

CVE-2026-91736High

Use after free in DOM

CVE-2026-91735Critical

Incorrect authorization in WebUI

CVE-2026-91717High

Missing authorization in Android

CVE-2026-91708High

Race condition in Network

CVE-2026-91747High

Cross-origin data disclosure via use-after-free vulnerability

CVE-2026-91741High

Type confusion in CacheStorage

CVE-2026-91733High

Skia in chromium-browser: Information disclosure via improper state validation

CVE-2026-91709High

Type confusion in ServiceWorker

CVE-2026-91748High

Race condition in Extensions

CVE-2026-91731High

Type confusion in Compositing

CVE-2026-91720High

Uninitialized resource in ANGLE

CVE-2026-91744High

Race condition in PlatformIntegration

CVE-2026-91743Critical

Race condition in Core

CVE-2026-91727High

Incorrect reference resolution in Extensions

CVE-2026-91712High

Race condition in Extensions

CVE-2026-91734High

Incorrect authorization in Core

CVE-2026-91728High

Integer overflow in V8

CVE-2026-91724High

Use after free in Input

CVE-2026-91749Critical

Use after free in Workers

CVE-2026-91721Critical

Use after free in Internals

CVE-2026-91726High

Out of bounds read in WebGL

CVE-2026-79994High

The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a socket path is inside an authorized workspace, but later reconnects using the pathname

CVE-2026-76707Medium

EdgeConnect: vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an unauthenticated adjacent attacker to view some system memory contents

CVE-2026-76706Medium

EdgeConnect: vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchestrator could allow an unauthenticated remote attacker to obtain sensitive information

CVE-2026-76705Medium

EdgeConnect: buffer overflow vulnerability exists in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateways

CVE-2026-76704Medium

EdgeConnect: vulnerability in the web-based management interface of the EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to execute arbitrary script code in a victim's browser in the context of the affected interface