Total
414046 CVE
| CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
|---|---|---|---|---|---|
| CVE-2026-87020 | 2026-09-18 | N/A | 8.1 HIGH | ||
| An integer overflow in a specified pitch and buffer-size computation leads to a heap out-of-bounds write when Orthanc DICOM Server decodes an attacker-supplied PNG. | |||||
| CVE-2026-68950 | 2026-09-18 | N/A | 8.8 HIGH | ||
| The affected products use hard-coded credentials, which could allow an attacker to run the ftpd service as root, providing remote root file access where FTP is reachable. | |||||
| CVE-2026-38058 | 2026-09-18 | N/A | 8.1 HIGH | ||
| The endpoint on the iDirect iQ200 VSAT terminal returns the complete device configuration as JSON, including the SECURITY section which contains MD5-crypt password hashes for the root SSH and web administration accounts. Any user with valid web credentials can extract these hashes and crack them offline using commodity hardware. | |||||
| CVE-2026-85083 | 2026-09-18 | N/A | 6.8 MEDIUM | ||
| The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access to the device may leverage this weakness to gain privileged bootloader access, allowing unauthorized modification of firmware and system configuration and potentially resulting in complete device compromise. | |||||
| CVE-2026-78224 | 2026-09-18 | N/A | 8.2 HIGH | ||
| The XSLT Transformer Step builds a bare TransformerFactory without the proper security options set, so XXE injection can allow data exfiltration and denial-of-service attacks. | |||||
| CVE-2026-68070 | 2026-09-18 | N/A | 8.8 HIGH | ||
| The affected products are missing authentication for a critical function, which could allow an attacker to run as root and pass received bytes directly to a system command. | |||||
| CVE-2026-82578 | 2026-09-18 | N/A | 7.5 HIGH | ||
| When XML batch processing is turned on and the XPath option is selected, the raw batch input goes through a default XPath/JAXP setup with no entity restrictions, so XXE injection can allow data exfiltration and denial-of-service attacks. | |||||
| CVE-2026-66890 | 2026-09-18 | N/A | 9.6 CRITICAL | ||
| The affected products use hard-coded credentials, which could allow remote access to files with root privileges where FTP is reachable. | |||||
| CVE-2026-82583 | 2026-09-18 | N/A | 8.3 HIGH | ||
| NextGen Connect (Mirth Connect) versions 4.7.1 and earlier allow an authenticated user to execute arbitrary SQL through a Database Connector API, which could result in disclosure of stored credentials for connected systems, arbitrary file write, and a denial-of-service condition. | |||||
| CVE-2026-68953 | 2026-09-18 | N/A | 6.5 MEDIUM | ||
| The affected products are vulnerable to an authentication bypass that allows unauthenticated remote attackers to disclose sensitive device information, including administrator credentials in plaintext, by sending crafted HTTP(S) requests. | |||||
| CVE-2026-84507 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-09-18 | N/A | 7.8 HIGH |
| A race condition was addressed with improved state handling. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to cause unexpected system termination or corrupt kernel memory. | |||||
| CVE-2026-84524 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-09-18 | N/A | 4.3 MEDIUM |
| An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted font file may lead to unexpected app termination. | |||||
| CVE-2026-66372 | 2026-09-18 | N/A | 6.8 MEDIUM | ||
| The affected products use insufficiently random values, which allows web session tokens to be predictable, bounding token entropy to the seed space. | |||||
| CVE-2026-66887 | 2026-09-18 | N/A | 9.6 CRITICAL | ||
| The affected products are missing authorization on state-changing CGIs and session checks are not performed. | |||||
| CVE-2026-84526 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-09-18 | N/A | 4.3 MEDIUM |
| An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. Processing a maliciously crafted 3D scene may lead to unexpected process termination. | |||||
| CVE-2026-84532 | 1 Apple | 5 Ipados, Iphone Os, Macos and 2 more | 2026-09-18 | N/A | 5.4 MEDIUM |
| An out-of-bounds read issue was addressed with improved input validation. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27. Opening a maliciously crafted file may cause unexpected process termination or disclose process memory. | |||||
| CVE-2026-73807 | 2026-09-18 | N/A | 9.8 CRITICAL | ||
| The mySCADA myPRO Manager command API does not properly enforce authentication for privileged functions. An unauthenticated attacker with network access to the affected API could exploit this vulnerability to access privileged management functions. | |||||
| CVE-2026-82567 | 2026-09-18 | N/A | 6.3 MEDIUM | ||
| The myPRO Manager notification gateway exposes an unauthenticated HTTP endpoint used to send SMS messages through a connected GSM modem. The endpoint is accessible over the network and does not require authentication before accepting a phone number and message from a request and sending the specified SMS message. An unauthenticated attacker with network access to the notification gateway could exploit this vulnerability to send arbitrary SMS messages through the connected modem. | |||||
| CVE-2026-84626 | 1 Apple | 6 Ipados, Iphone Os, Macos and 3 more | 2026-09-18 | N/A | 3.3 LOW |
| An information disclosure issue was addressed with improved state management. This issue is fixed in iOS 26.7 and iPadOS 26.7, iOS 27 and iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, watchOS 27. An app may be able to identify what other apps a user has installed. | |||||
| CVE-2026-38056 | 2026-09-18 | N/A | 8.8 HIGH | ||
| A local privilege escalation vulnerability exists in the iDirect iQ200 VSAT terminal running firmware 23.0.1.0. The iQ200 is a rackmount satellite modem deployed across oil and gas, maritime, defense, and remote infrastructure as the primary, and often sole communications link for offshore rigs, vessels, and remote sites. Important context: the device ships from the factory with a pre-configured low-privilege local user account. This account is intended for field technicians who need shell access for maintenance and diagnostics but should not have full administrative control over the device. This built-in account provides the initial access required to exploit this vulnerability. No additional credentials need to be obtained or brute-forced. | |||||